From 31f0319bd2e10f556f24cf025478c68fd0d48a00 Mon Sep 17 00:00:00 2001 From: Kaarle Ritvanen Date: Fri, 3 Nov 2017 20:31:04 +0200 Subject: Log.optfrags: packet mirroring --- test/mandatory/log.json | 9 + test/optional/filter-limit.lua | 8 +- test/output/address/dump | 277 +- test/output/address/rules-save | 63 +- test/output/address/rules6-save | 50 +- test/output/filter-limit/dump | 128523 ++++++++++++++++++++++---------- test/output/filter-limit/rules-save | 30849 +++++--- test/output/filter-limit/rules6-save | 26972 +++++-- test/output/filter/dump | 277 +- test/output/filter/rules-save | 63 +- test/output/filter/rules6-save | 50 +- test/output/no-track/dump | 285 +- test/output/no-track/rules-save | 63 +- test/output/no-track/rules6-save | 50 +- test/output/route-track/dump | 277 +- test/output/route-track/rules-save | 63 +- test/output/route-track/rules6-save | 50 +- test/output/tproxy/dump | 277 +- test/output/tproxy/rules-save | 63 +- test/output/tproxy/rules6-save | 50 +- 20 files changed, 131403 insertions(+), 56916 deletions(-) (limited to 'test') diff --git a/test/mandatory/log.json b/test/mandatory/log.json index d537977..1324f21 100644 --- a/test/mandatory/log.json +++ b/test/mandatory/log.json @@ -1,10 +1,13 @@ { "log": { + "dual": { "mode": "log", "mirror": "fc00::1" }, + "mirror": { "mirror": [ "10.0.0.1", "10.0.0.2", "fc00::2" ] }, "none": { "mode": "none" }, "ulog": { "mode": "ulog", "limit": { "interval": 5 } } }, "packet-log": [ { "out": "_fw" }, + { "out": "_fw", "log": "mirror" }, { "out": "_fw", "log": "ulog" } ], "filter": [ @@ -17,6 +20,12 @@ { "log": true }, { "log": true, "action": "drop" }, { "log": true, "action": "pass" }, + { "log": "dual" }, + { "log": "dual", "action": "drop" }, + { "log": "dual", "action": "pass" }, + { "log": "mirror" }, + { "log": "mirror", "action": "drop" }, + { "log": "mirror", "action": "pass" }, { "log": "none" }, { "log": "none", "action": "drop" }, { "log": "none", "action": "pass" }, diff --git a/test/optional/filter-limit.lua b/test/optional/filter-limit.lua index ceb8b71..3a58228 100644 --- a/test/optional/filter-limit.lua +++ b/test/optional/filter-limit.lua @@ -8,16 +8,16 @@ See LICENSE file for license details util = require('awall.util') json = require('cjson') -LOGOPTIONS = {false, true, 'none', 'ulog'} - res = {} function add(limit_type, filter) + local logopts = {false, true, 'mirror', 'none', 'ulog'} + for _, high_rate in ipairs{false, true} do local function add_limit(limit) - for _, log in ipairs(LOGOPTIONS) do + for _, log in ipairs(logopts) do for _, action in ipairs{false, 'pass'} do if not (high_rate and log and action) then table.insert( @@ -40,7 +40,7 @@ function add(limit_type, filter) add_limit(count or 1) for _, interval in ipairs{false, 5} do - for _, log in ipairs(LOGOPTIONS) do + for _, log in ipairs(logopts) do local limit = {count=count, interval=interval or nil} if log ~= true then limit.log = log end diff --git a/test/output/address/dump b/test/output/address/dump index 8d1c9fa..af338a6 100644 --- a/test/output/address/dump +++ b/test/output/address/dump @@ -7825,7 +7825,87 @@ Filter 1209 {"action":"pass","log":true} inet6/filter/OUTPUT -j logpass-167 inet6/filter/logpass-167 -m limit --limit 1/second -j LOG -Filter 1210 {"log":"none"} +Filter 1210 {"log":"dual"} +(log) + inet/filter/FORWARD -j logaccept-268 + inet/filter/INPUT -j logaccept-268 + inet/filter/OUTPUT -j logaccept-268 + inet/filter/logaccept-268 -j LOG + inet/filter/logaccept-268 -j ACCEPT + inet6/filter/FORWARD -j logaccept-268 + inet6/filter/INPUT -j logaccept-268 + inet6/filter/OUTPUT -j logaccept-268 + inet6/filter/logaccept-268 -j LOG + inet6/filter/logaccept-268 -j TEE --gateway fc00::1 + inet6/filter/logaccept-268 -j ACCEPT + +Filter 1211 {"action":"drop","log":"dual"} +(log) + inet/filter/FORWARD -j logdrop-2 + inet/filter/INPUT -j logdrop-2 + inet/filter/OUTPUT -j logdrop-2 + inet/filter/logdrop-2 -j LOG + inet/filter/logdrop-2 -j DROP + inet6/filter/FORWARD -j logdrop-2 + inet6/filter/INPUT -j logdrop-2 + inet6/filter/OUTPUT -j logdrop-2 + inet6/filter/logdrop-2 -j LOG + inet6/filter/logdrop-2 -j TEE --gateway fc00::1 + inet6/filter/logdrop-2 -j DROP + +Filter 1212 {"action":"pass","log":"dual"} +(log) + inet/filter/FORWARD -j logpass-168 + inet/filter/INPUT -j logpass-168 + inet/filter/OUTPUT -j logpass-168 + inet/filter/logpass-168 -j LOG + inet6/filter/FORWARD -j logpass-168 + inet6/filter/INPUT -j logpass-168 + inet6/filter/OUTPUT -j logpass-168 + inet6/filter/logpass-168 -j LOG + inet6/filter/logpass-168 -j TEE --gateway fc00::1 + +Filter 1213 {"log":"mirror"} +(log) + inet/filter/FORWARD -j logaccept-269 + inet/filter/INPUT -j logaccept-269 + inet/filter/OUTPUT -j logaccept-269 + inet/filter/logaccept-269 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-269 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-269 -j ACCEPT + inet6/filter/FORWARD -j logaccept-269 + inet6/filter/INPUT -j logaccept-269 + inet6/filter/OUTPUT -j logaccept-269 + inet6/filter/logaccept-269 -j TEE --gateway fc00::2 + inet6/filter/logaccept-269 -j ACCEPT + +Filter 1214 {"action":"drop","log":"mirror"} +(log) + inet/filter/FORWARD -j logdrop-3 + inet/filter/INPUT -j logdrop-3 + inet/filter/OUTPUT -j logdrop-3 + inet/filter/logdrop-3 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-3 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-3 -j DROP + inet6/filter/FORWARD -j logdrop-3 + inet6/filter/INPUT -j logdrop-3 + inet6/filter/OUTPUT -j logdrop-3 + inet6/filter/logdrop-3 -j TEE --gateway fc00::2 + inet6/filter/logdrop-3 -j DROP + +Filter 1215 {"action":"pass","log":"mirror"} +(log) + inet/filter/FORWARD -j logpass-169 + inet/filter/INPUT -j logpass-169 + inet/filter/OUTPUT -j logpass-169 + inet/filter/logpass-169 -j TEE --gateway 10.0.0.1 + inet/filter/logpass-169 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j logpass-169 + inet6/filter/INPUT -j logpass-169 + inet6/filter/OUTPUT -j logpass-169 + inet6/filter/logpass-169 -j TEE --gateway fc00::2 + +Filter 1216 {"log":"none"} (log) inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -7834,7 +7914,7 @@ Filter 1210 {"log":"none"} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1211 {"action":"drop","log":"none"} +Filter 1217 {"action":"drop","log":"none"} (log) inet/filter/FORWARD -j DROP inet/filter/INPUT -j DROP @@ -7843,7 +7923,7 @@ Filter 1211 {"action":"drop","log":"none"} inet6/filter/INPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 1212 {"action":"pass","log":"none"} +Filter 1218 {"action":"pass","log":"none"} (log) inet/filter/FORWARD inet/filter/INPUT @@ -7852,42 +7932,42 @@ Filter 1212 {"action":"pass","log":"none"} inet6/filter/INPUT inet6/filter/OUTPUT -Filter 1213 {"log":"ulog"} +Filter 1219 {"log":"ulog"} (log) - inet/filter/FORWARD -j logaccept-268 - inet/filter/INPUT -j logaccept-268 - inet/filter/OUTPUT -j logaccept-268 - inet/filter/logaccept-268 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-268 -j ACCEPT - inet6/filter/FORWARD -j logaccept-268 - inet6/filter/INPUT -j logaccept-268 - inet6/filter/OUTPUT -j logaccept-268 - inet6/filter/logaccept-268 -j ACCEPT - -Filter 1214 {"action":"drop","log":"ulog"} + inet/filter/FORWARD -j logaccept-270 + inet/filter/INPUT -j logaccept-270 + inet/filter/OUTPUT -j logaccept-270 + inet/filter/logaccept-270 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-270 -j ACCEPT + inet6/filter/FORWARD -j logaccept-270 + inet6/filter/INPUT -j logaccept-270 + inet6/filter/OUTPUT -j logaccept-270 + inet6/filter/logaccept-270 -j ACCEPT + +Filter 1220 {"action":"drop","log":"ulog"} (log) - inet/filter/FORWARD -j logdrop-2 - inet/filter/INPUT -j logdrop-2 - inet/filter/OUTPUT -j logdrop-2 - inet/filter/logdrop-2 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2 -j DROP - inet6/filter/FORWARD -j logdrop-2 - inet6/filter/INPUT -j logdrop-2 - inet6/filter/OUTPUT -j logdrop-2 - inet6/filter/logdrop-2 -j DROP - -Filter 1215 {"action":"pass","log":"ulog"} + inet/filter/FORWARD -j logdrop-4 + inet/filter/INPUT -j logdrop-4 + inet/filter/OUTPUT -j logdrop-4 + inet/filter/logdrop-4 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-4 -j DROP + inet6/filter/FORWARD -j logdrop-4 + inet6/filter/INPUT -j logdrop-4 + inet6/filter/OUTPUT -j logdrop-4 + inet6/filter/logdrop-4 -j DROP + +Filter 1221 {"action":"pass","log":"ulog"} (log) - inet/filter/FORWARD -j logpass-168 - inet/filter/INPUT -j logpass-168 - inet/filter/OUTPUT -j logpass-168 - inet/filter/logpass-168 -m limit --limit 12/minute -j ULOG + inet/filter/FORWARD -j logpass-170 + inet/filter/INPUT -j logpass-170 + inet/filter/OUTPUT -j logpass-170 + inet/filter/logpass-170 -m limit --limit 12/minute -j ULOG -Filter 1216 {"action":"pass","in":"_fw","log":"ulog"} +Filter 1222 {"action":"pass","in":"_fw","log":"ulog"} (log) inet/filter/OUTPUT -m limit --limit 12/minute -j ULOG -Filter 1217 {"in":["_fw","A"]} +Filter 1223 {"in":["_fw","A"]} (zone) inet/filter/FORWARD -i eth0 -j ACCEPT inet/filter/INPUT -i eth0 -j ACCEPT @@ -7896,12 +7976,12 @@ Filter 1217 {"in":["_fw","A"]} inet6/filter/INPUT -i eth0 -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1218 {"in":"B","out":"C"} +Filter 1224 {"in":"B","out":"C"} (zone) inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -Filter 1219 {"out":["_fw","B"]} +Filter 1225 {"out":["_fw","B"]} (zone) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -7910,7 +7990,7 @@ Filter 1219 {"out":["_fw","B"]} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -Filter 1220 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +Filter 1226 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} (zone) inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT @@ -7999,6 +8079,12 @@ Limit D {"inet":22,"inet6":58} Log _default {"limit":1} (defaults) +Log dual {"mirror":"fc00::1","mode":"log"} +(log) + +Log mirror {"mirror":["10.0.0.1","10.0.0.2","fc00::2"]} +(log) + Log none {"mode":"none"} (log) @@ -8049,7 +8135,13 @@ Packet-log 1 {"out":"_fw"} inet/filter/INPUT -m limit --limit 1/second -j LOG inet6/filter/INPUT -m limit --limit 1/second -j LOG -Packet-log 2 {"log":"ulog","out":"_fw"} +Packet-log 2 {"log":"mirror","out":"_fw"} +(log) + inet/filter/INPUT -j TEE --gateway 10.0.0.1 + inet/filter/INPUT -j TEE --gateway 10.0.0.2 + inet6/filter/INPUT -j TEE --gateway fc00::2 + +Packet-log 3 {"log":"ulog","out":"_fw"} (log) inet/filter/INPUT -m limit --limit 12/minute -j ULOG @@ -8809,6 +8901,8 @@ hash:net family inet :logaccept-266 - [0:0] :logaccept-267 - [0:0] :logaccept-268 - [0:0] +:logaccept-269 - [0:0] +:logaccept-270 - [0:0] :logaccept-3 - [0:0] :logaccept-32 - [0:0] :logaccept-33 - [0:0] @@ -8875,6 +8969,8 @@ hash:net family inet :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] :logpass-10 - [0:0] @@ -8951,7 +9047,9 @@ hash:net family inet :logpass-166 - [0:0] :logpass-167 - [0:0] :logpass-168 - [0:0] +:logpass-169 - [0:0] :logpass-17 - [0:0] +:logpass-170 - [0:0] :logpass-18 - [0:0] :logpass-19 - [0:0] :logpass-2 - [0:0] @@ -10145,12 +10243,18 @@ hash:net family inet -A FORWARD -j logaccept-267 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-167 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD -A FORWARD -j logaccept-268 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-168 +-A FORWARD -j logaccept-269 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-169 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-270 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-170 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -10202,6 +10306,8 @@ hash:net family inet -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -10922,12 +11028,18 @@ hash:net family inet -A INPUT -j logaccept-267 -A INPUT -j logdrop-1 -A INPUT -j logpass-167 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT -A INPUT -j logaccept-268 -A INPUT -j logdrop-2 -A INPUT -j logpass-168 +-A INPUT -j logaccept-269 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-169 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-270 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-170 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing @@ -11194,12 +11306,18 @@ hash:net family inet -A OUTPUT -j logaccept-267 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-167 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT -A OUTPUT -j logaccept-268 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-168 +-A OUTPUT -j logaccept-269 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-169 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-270 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-170 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT @@ -12155,8 +12273,13 @@ hash:net family inet -A logaccept-266 -j ACCEPT -A logaccept-267 -m limit --limit 1/second -j LOG -A logaccept-267 -j ACCEPT --A logaccept-268 -m limit --limit 12/minute -j ULOG +-A logaccept-268 -j LOG -A logaccept-268 -j ACCEPT +-A logaccept-269 -j TEE --gateway 10.0.0.1 +-A logaccept-269 -j TEE --gateway 10.0.0.2 +-A logaccept-269 -j ACCEPT +-A logaccept-270 -m limit --limit 12/minute -j ULOG +-A logaccept-270 -j ACCEPT -A logaccept-3 -m limit --limit 12/minute -j ULOG -A logaccept-3 -j ACCEPT -A logaccept-32 -m limit --limit 1/second -j LOG @@ -12287,8 +12410,13 @@ hash:net family inet -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP --A logdrop-2 -m limit --limit 12/minute -j ULOG +-A logdrop-2 -j LOG -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway 10.0.0.1 +-A logdrop-3 -j TEE --gateway 10.0.0.2 +-A logdrop-3 -j DROP +-A logdrop-4 -m limit --limit 12/minute -j ULOG +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG -A logpass-1 -m limit --limit 12/minute -j ULOG -A logpass-10 -m limit --limit 12/minute -j ULOG @@ -12364,8 +12492,11 @@ hash:net family inet -A logpass-165 -m limit --limit 1/second -j LOG -A logpass-166 -m limit --limit 12/minute -j ULOG -A logpass-167 -m limit --limit 1/second -j LOG --A logpass-168 -m limit --limit 12/minute -j ULOG +-A logpass-168 -j LOG +-A logpass-169 -j TEE --gateway 10.0.0.1 +-A logpass-169 -j TEE --gateway 10.0.0.2 -A logpass-17 -m limit --limit 1/second -j LOG +-A logpass-170 -m limit --limit 12/minute -j ULOG -A logpass-18 -m limit --limit 12/minute -j ULOG -A logpass-19 -m limit --limit 1/second -j LOG -A logpass-2 -m limit --limit 1/second -j LOG @@ -12666,7 +12797,9 @@ COMMIT :logaccept-26 - [0:0] :logaccept-267 - [0:0] :logaccept-268 - [0:0] +:logaccept-269 - [0:0] :logaccept-27 - [0:0] +:logaccept-270 - [0:0] :logaccept-28 - [0:0] :logaccept-29 - [0:0] :logaccept-30 - [0:0] @@ -12704,6 +12837,8 @@ COMMIT :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] :logpass-109 - [0:0] :logpass-115 - [0:0] @@ -12712,6 +12847,8 @@ COMMIT :logpass-136 - [0:0] :logpass-137 - [0:0] :logpass-167 - [0:0] +:logpass-168 - [0:0] +:logpass-169 - [0:0] :logpass-25 - [0:0] :logpass-26 - [0:0] :logpass-27 - [0:0] @@ -13012,11 +13149,17 @@ COMMIT -A FORWARD -j logaccept-267 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-167 +-A FORWARD -j logaccept-268 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-168 +-A FORWARD -j logaccept-269 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-169 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-268 --A FORWARD -j logdrop-2 +-A FORWARD -j logaccept-270 +-A FORWARD -j logdrop-4 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -13043,6 +13186,7 @@ COMMIT -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -13235,11 +13379,17 @@ COMMIT -A INPUT -j logaccept-267 -A INPUT -j logdrop-1 -A INPUT -j logpass-167 +-A INPUT -j logaccept-268 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-168 +-A INPUT -j logaccept-269 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-169 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-268 --A INPUT -j logdrop-2 +-A INPUT -j logaccept-270 +-A INPUT -j logdrop-4 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -13344,11 +13494,17 @@ COMMIT -A OUTPUT -j logaccept-267 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-167 +-A OUTPUT -j logaccept-268 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-168 +-A OUTPUT -j logaccept-269 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-169 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-268 --A OUTPUT -j logdrop-2 +-A OUTPUT -j logaccept-270 +-A OUTPUT -j logdrop-4 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -13569,8 +13725,13 @@ COMMIT -A logaccept-26 -j ACCEPT -A logaccept-267 -m limit --limit 1/second -j LOG -A logaccept-267 -j ACCEPT +-A logaccept-268 -j LOG +-A logaccept-268 -j TEE --gateway fc00::1 -A logaccept-268 -j ACCEPT +-A logaccept-269 -j TEE --gateway fc00::2 +-A logaccept-269 -j ACCEPT -A logaccept-27 -j ACCEPT +-A logaccept-270 -j ACCEPT -A logaccept-28 -m limit --limit 1/second -j LOG -A logaccept-28 -j ACCEPT -A logaccept-29 -j ACCEPT @@ -13628,7 +13789,12 @@ COMMIT -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP +-A logdrop-2 -j LOG +-A logdrop-2 -j TEE --gateway fc00::1 -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway fc00::2 +-A logdrop-3 -j DROP +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG -A logpass-109 -m limit --limit 1/second -j LOG -A logpass-115 -m limit --limit 1/second -j LOG @@ -13637,6 +13803,9 @@ COMMIT -A logpass-136 -m limit --limit 1/second -j LOG -A logpass-137 -m limit --limit 1/second -j LOG -A logpass-167 -m limit --limit 1/second -j LOG +-A logpass-168 -j LOG +-A logpass-168 -j TEE --gateway fc00::1 +-A logpass-169 -j TEE --gateway fc00::2 -A logpass-25 -m limit --limit 1/second -j LOG -A logpass-26 -m limit --limit 1/second -j LOG -A logpass-27 -m limit --limit 1/second -j LOG diff --git a/test/output/address/rules-save b/test/output/address/rules-save index ab2db2e..9000c6c 100644 --- a/test/output/address/rules-save +++ b/test/output/address/rules-save @@ -545,6 +545,8 @@ :logaccept-266 - [0:0] :logaccept-267 - [0:0] :logaccept-268 - [0:0] +:logaccept-269 - [0:0] +:logaccept-270 - [0:0] :logaccept-3 - [0:0] :logaccept-32 - [0:0] :logaccept-33 - [0:0] @@ -611,6 +613,8 @@ :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] :logpass-10 - [0:0] @@ -687,7 +691,9 @@ :logpass-166 - [0:0] :logpass-167 - [0:0] :logpass-168 - [0:0] +:logpass-169 - [0:0] :logpass-17 - [0:0] +:logpass-170 - [0:0] :logpass-18 - [0:0] :logpass-19 - [0:0] :logpass-2 - [0:0] @@ -1881,12 +1887,18 @@ -A FORWARD -j logaccept-267 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-167 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD -A FORWARD -j logaccept-268 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-168 +-A FORWARD -j logaccept-269 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-169 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-270 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-170 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -1938,6 +1950,8 @@ -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -2658,12 +2672,18 @@ -A INPUT -j logaccept-267 -A INPUT -j logdrop-1 -A INPUT -j logpass-167 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT -A INPUT -j logaccept-268 -A INPUT -j logdrop-2 -A INPUT -j logpass-168 +-A INPUT -j logaccept-269 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-169 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-270 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-170 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing @@ -2930,12 +2950,18 @@ -A OUTPUT -j logaccept-267 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-167 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT -A OUTPUT -j logaccept-268 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-168 +-A OUTPUT -j logaccept-269 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-169 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-270 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-170 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT @@ -3891,8 +3917,13 @@ -A logaccept-266 -j ACCEPT -A logaccept-267 -m limit --limit 1/second -j LOG -A logaccept-267 -j ACCEPT --A logaccept-268 -m limit --limit 12/minute -j ULOG +-A logaccept-268 -j LOG -A logaccept-268 -j ACCEPT +-A logaccept-269 -j TEE --gateway 10.0.0.1 +-A logaccept-269 -j TEE --gateway 10.0.0.2 +-A logaccept-269 -j ACCEPT +-A logaccept-270 -m limit --limit 12/minute -j ULOG +-A logaccept-270 -j ACCEPT -A logaccept-3 -m limit --limit 12/minute -j ULOG -A logaccept-3 -j ACCEPT -A logaccept-32 -m limit --limit 1/second -j LOG @@ -4023,8 +4054,13 @@ -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP --A logdrop-2 -m limit --limit 12/minute -j ULOG +-A logdrop-2 -j LOG -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway 10.0.0.1 +-A logdrop-3 -j TEE --gateway 10.0.0.2 +-A logdrop-3 -j DROP +-A logdrop-4 -m limit --limit 12/minute -j ULOG +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG -A logpass-1 -m limit --limit 12/minute -j ULOG -A logpass-10 -m limit --limit 12/minute -j ULOG @@ -4100,8 +4136,11 @@ -A logpass-165 -m limit --limit 1/second -j LOG -A logpass-166 -m limit --limit 12/minute -j ULOG -A logpass-167 -m limit --limit 1/second -j LOG --A logpass-168 -m limit --limit 12/minute -j ULOG +-A logpass-168 -j LOG +-A logpass-169 -j TEE --gateway 10.0.0.1 +-A logpass-169 -j TEE --gateway 10.0.0.2 -A logpass-17 -m limit --limit 1/second -j LOG +-A logpass-170 -m limit --limit 12/minute -j ULOG -A logpass-18 -m limit --limit 12/minute -j ULOG -A logpass-19 -m limit --limit 1/second -j LOG -A logpass-2 -m limit --limit 1/second -j LOG diff --git a/test/output/address/rules6-save b/test/output/address/rules6-save index 584f9e9..c3e0e74 100644 --- a/test/output/address/rules6-save +++ b/test/output/address/rules6-save @@ -182,7 +182,9 @@ :logaccept-26 - [0:0] :logaccept-267 - [0:0] :logaccept-268 - [0:0] +:logaccept-269 - [0:0] :logaccept-27 - [0:0] +:logaccept-270 - [0:0] :logaccept-28 - [0:0] :logaccept-29 - [0:0] :logaccept-30 - [0:0] @@ -220,6 +222,8 @@ :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] :logpass-109 - [0:0] :logpass-115 - [0:0] @@ -228,6 +232,8 @@ :logpass-136 - [0:0] :logpass-137 - [0:0] :logpass-167 - [0:0] +:logpass-168 - [0:0] +:logpass-169 - [0:0] :logpass-25 - [0:0] :logpass-26 - [0:0] :logpass-27 - [0:0] @@ -528,11 +534,17 @@ -A FORWARD -j logaccept-267 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-167 +-A FORWARD -j logaccept-268 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-168 +-A FORWARD -j logaccept-269 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-169 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-268 --A FORWARD -j logdrop-2 +-A FORWARD -j logaccept-270 +-A FORWARD -j logdrop-4 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -559,6 +571,7 @@ -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -751,11 +764,17 @@ -A INPUT -j logaccept-267 -A INPUT -j logdrop-1 -A INPUT -j logpass-167 +-A INPUT -j logaccept-268 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-168 +-A INPUT -j logaccept-269 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-169 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-268 --A INPUT -j logdrop-2 +-A INPUT -j logaccept-270 +-A INPUT -j logdrop-4 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -860,11 +879,17 @@ -A OUTPUT -j logaccept-267 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-167 +-A OUTPUT -j logaccept-268 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-168 +-A OUTPUT -j logaccept-269 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-169 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-268 --A OUTPUT -j logdrop-2 +-A OUTPUT -j logaccept-270 +-A OUTPUT -j logdrop-4 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -1085,8 +1110,13 @@ -A logaccept-26 -j ACCEPT -A logaccept-267 -m limit --limit 1/second -j LOG -A logaccept-267 -j ACCEPT +-A logaccept-268 -j LOG +-A logaccept-268 -j TEE --gateway fc00::1 -A logaccept-268 -j ACCEPT +-A logaccept-269 -j TEE --gateway fc00::2 +-A logaccept-269 -j ACCEPT -A logaccept-27 -j ACCEPT +-A logaccept-270 -j ACCEPT -A logaccept-28 -m limit --limit 1/second -j LOG -A logaccept-28 -j ACCEPT -A logaccept-29 -j ACCEPT @@ -1144,7 +1174,12 @@ -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP +-A logdrop-2 -j LOG +-A logdrop-2 -j TEE --gateway fc00::1 -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway fc00::2 +-A logdrop-3 -j DROP +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG -A logpass-109 -m limit --limit 1/second -j LOG -A logpass-115 -m limit --limit 1/second -j LOG @@ -1153,6 +1188,9 @@ -A logpass-136 -m limit --limit 1/second -j LOG -A logpass-137 -m limit --limit 1/second -j LOG -A logpass-167 -m limit --limit 1/second -j LOG +-A logpass-168 -j LOG +-A logpass-168 -j TEE --gateway fc00::1 +-A logpass-169 -j TEE --gateway fc00::2 -A logpass-25 -m limit --limit 1/second -j LOG -A logpass-26 -m limit --limit 1/second -j LOG -A logpass-27 -m limit --limit 1/second -j LOG diff --git a/test/output/filter-limit/dump b/test/output/filter-limit/dump index abe0636..812d489 100644 --- a/test/output/filter-limit/dump +++ b/test/output/filter-limit/dump @@ -70,42 +70,45 @@ Filter 4 {"action":"pass","conn-limit":1,"log":true," inet6/filter/logdrop-3 -m limit --limit 1/second -j LOG inet6/filter/logdrop-3 -j DROP -Filter 5 {"conn-limit":1,"log":"none","out":"B"} +Filter 5 {"conn-limit":1,"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-4 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-4 inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 + inet/filter/limit-4 -j TEE --gateway 10.0.0.1 + inet/filter/limit-4 -j TEE --gateway 10.0.0.2 inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-4 -m limit --limit 1/second -j LOG inet/filter/logdrop-4 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-4 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-4 inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 + inet6/filter/limit-4 -j TEE --gateway fc00::2 inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-4 -m limit --limit 1/second -j LOG inet6/filter/logdrop-4 -j DROP -Filter 6 {"action":"pass","conn-limit":1,"log":"none","out":"B"} +Filter 6 {"action":"pass","conn-limit":1,"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-5 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-5 inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 - inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set + inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-5 -m limit --limit 1/second -j LOG inet/filter/logdrop-5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-5 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-5 inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 - inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-5 -m limit --limit 1/second -j LOG inet6/filter/logdrop-5 -j DROP -Filter 7 {"conn-limit":1,"log":"ulog","out":"B"} +Filter 7 {"conn-limit":1,"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-6 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-6 inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 - inet/filter/limit-6 -m limit --limit 12/minute -j ULOG inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-6 -m limit --limit 1/second -j LOG inet/filter/logdrop-6 -j DROP @@ -116,157 +119,168 @@ Filter 7 {"conn-limit":1,"log":"ulog","out":"B"} inet6/filter/logdrop-6 -m limit --limit 1/second -j LOG inet6/filter/logdrop-6 -j DROP -Filter 8 {"action":"pass","conn-limit":1,"log":"ulog","out":"B"} +Filter 8 {"action":"pass","conn-limit":1,"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-7 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-7 inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 - inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-7 -m limit --limit 1/second -j LOG inet/filter/logdrop-7 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-7 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-7 inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 + inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-7 -m limit --limit 1/second -j LOG inet6/filter/logdrop-7 -j DROP -Filter 9 {"conn-limit":{"log":false},"out":"B"} +Filter 9 {"conn-limit":1,"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-8 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-8 - inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 + inet/filter/limit-8 -m limit --limit 12/minute -j ULOG inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-8 -m limit --limit 1/second -j LOG + inet/filter/logdrop-8 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-8 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-8 - inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-8 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-8 -j DROP -Filter 10 {"action":"pass","conn-limit":{"log":false},"out":"B"} +Filter 10 {"action":"pass","conn-limit":1,"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-9 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-9 - inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set + inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 + inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-9 -m limit --limit 1/second -j LOG + inet/filter/logdrop-9 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-9 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-9 - inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 + inet6/filter/logdrop-9 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-9 -j DROP -Filter 11 {"conn-limit":{"log":false},"log":true,"out":"B"} +Filter 11 {"conn-limit":{"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-10 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-10 inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-10 -m limit --limit 1/second -j LOG inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-10 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-10 inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-10 -m limit --limit 1/second -j LOG inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 12 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} +Filter 12 {"action":"pass","conn-limit":{"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-11 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-11 inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-11 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-11 inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 13 {"conn-limit":{"log":false},"log":"none","out":"B"} +Filter 13 {"conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-12 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-12 inet/filter/limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-12 -m limit --limit 1/second -j LOG inet/filter/limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-12 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-12 inet6/filter/limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-12 -m limit --limit 1/second -j LOG inet6/filter/limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 14 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} +Filter 14 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-13 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-13 inet/filter/limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --set + inet/filter/limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-13 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-13 inet6/filter/limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 15 {"conn-limit":{"log":false},"log":"ulog","out":"B"} +Filter 15 {"conn-limit":{"log":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-14 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-14 inet/filter/limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-14 -m limit --limit 12/minute -j ULOG + inet/filter/limit-14 -j TEE --gateway 10.0.0.1 + inet/filter/limit-14 -j TEE --gateway 10.0.0.2 inet/filter/limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-14 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-14 inet6/filter/limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-14 -j TEE --gateway fc00::2 inet6/filter/limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 16 {"action":"pass","conn-limit":{"log":false},"log":"ulog","out":"B"} +Filter 16 {"action":"pass","conn-limit":{"log":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-15 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-15 inet/filter/limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-15 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-15 inet6/filter/limit-15 -m recent --name limit-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-15 -m recent --name limit-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 17 {"conn-limit":{"log":false,"name":"A"},"out":"B"} +Filter 17 {"conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-16 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-16 - inet/filter/limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-16 -m recent --name limit-16 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-16 -m recent --name limit-16 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-16 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-16 - inet6/filter/limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-16 -m recent --name limit-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-16 -m recent --name limit-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 18 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} +Filter 18 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-17 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-17 - inet/filter/limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-17 -m recent --name limit-17 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-17 -m recent --name limit-17 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-17 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-17 - inet6/filter/limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-17 -m recent --name limit-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-17 -m recent --name limit-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 19 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +Filter 19 {"conn-limit":{"log":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-18 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-18 - inet/filter/limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-18 -m limit --limit 1/second -j LOG - inet/filter/limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-18 -m recent --name limit-18 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-18 -m limit --limit 12/minute -j ULOG + inet/filter/limit-18 -m recent --name limit-18 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-18 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-18 - inet6/filter/limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-18 -m limit --limit 1/second -j LOG - inet6/filter/limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-18 -m recent --name limit-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-18 -m recent --name limit-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 20 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +Filter 20 {"action":"pass","conn-limit":{"log":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-19 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-19 - inet/filter/limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-19 -m recent --name limit-19 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-19 -m recent --name limit-19 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-19 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-19 - inet6/filter/limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-19 -m recent --name limit-19 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 21 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +Filter 21 {"conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-20 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-20 @@ -277,7 +291,7 @@ Filter 21 {"conn-limit":{"log":false,"name":"A"},"log" inet6/filter/limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 22 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +Filter 22 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-21 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-21 @@ -288,35107 +302,58791 @@ Filter 22 {"action":"pass","conn-limit":{"log":false," inet6/filter/limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 23 {"conn-limit":{"log":false,"name":"A"},"log":"ulog","out":"B"} +Filter 23 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-22 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-22 inet/filter/limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-22 -m limit --limit 12/minute -j ULOG + inet/filter/limit-22 -m limit --limit 1/second -j LOG inet/filter/limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-22 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-22 inet6/filter/limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-22 -m limit --limit 1/second -j LOG inet6/filter/limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 24 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"ulog","out":"B"} +Filter 24 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-23 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-23 inet/filter/limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-23 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-23 inet6/filter/limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 25 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} +Filter 25 {"conn-limit":{"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-24 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-24 - inet/filter/limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-24 -j ACCEPT + inet/filter/limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-24 -j TEE --gateway 10.0.0.1 + inet/filter/limit-24 -j TEE --gateway 10.0.0.2 + inet/filter/limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-24 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-24 - inet6/filter/limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-24 -j ACCEPT + inet6/filter/limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-24 -j TEE --gateway fc00::2 + inet6/filter/limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 26 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} +Filter 26 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-25 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-25 - inet/filter/limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-25 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-25 - inet6/filter/limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 27 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 27 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-26 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-26 - inet/filter/limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-26 -m limit --limit 1/second -j LOG - inet/filter/limit-26 -j ACCEPT + inet/filter/limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-26 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-26 - inet6/filter/limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-26 -m limit --limit 1/second -j LOG - inet6/filter/limit-26 -j ACCEPT + inet6/filter/limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 28 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 28 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-27 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-27 - inet/filter/limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-27 -m limit --limit 1/second -j LOG + inet/filter/limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-27 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-27 - inet6/filter/limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-27 -m limit --limit 1/second -j LOG + inet6/filter/limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 29 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 29 {"conn-limit":{"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-28 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-28 - inet/filter/limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-28 -j ACCEPT + inet/filter/limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-28 -m limit --limit 12/minute -j ULOG + inet/filter/limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-28 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-28 - inet6/filter/limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-28 -j ACCEPT + inet6/filter/limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 30 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 30 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-29 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-29 - inet/filter/limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-29 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-29 - inet6/filter/limit-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 31 {"conn-limit":{"log":false,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 31 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-30 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-30 inet/filter/limit-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-30 -m limit --limit 12/minute -j ULOG inet/filter/limit-30 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-30 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-30 inet6/filter/limit-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-30 -j ACCEPT -Filter 32 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 32 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-31 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-31 inet/filter/limit-31 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-31 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-31 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-31 inet6/filter/limit-31 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 33 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} +Filter 33 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-32 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-32 - inet/filter/limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-32 -m limit --limit 1/second -j LOG + inet/filter/limit-32 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-32 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-32 - inet6/filter/limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-32 -m limit --limit 1/second -j LOG + inet6/filter/limit-32 -j ACCEPT -Filter 34 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} +Filter 34 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-33 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-33 - inet/filter/limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-33 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-33 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-33 - inet6/filter/limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-33 -m limit --limit 1/second -j LOG -Filter 35 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +Filter 35 {"conn-limit":{"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-34 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-34 - inet/filter/limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-34 -m limit --limit 1/second -j LOG - inet/filter/limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-34 -j TEE --gateway 10.0.0.1 + inet/filter/limit-34 -j TEE --gateway 10.0.0.2 + inet/filter/limit-34 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-34 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-34 - inet6/filter/limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-34 -m limit --limit 1/second -j LOG - inet6/filter/limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-34 -j TEE --gateway fc00::2 + inet6/filter/limit-34 -j ACCEPT -Filter 36 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +Filter 36 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-35 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-35 - inet/filter/limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-35 -j TEE --gateway 10.0.0.1 + inet/filter/limit-35 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-35 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-35 - inet6/filter/limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-35 -j TEE --gateway fc00::2 -Filter 37 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +Filter 37 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 - inet/filter/limit-36 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-36 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-36 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-36 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-36 - inet6/filter/limit-36 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-36 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-36 -j ACCEPT -Filter 38 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +Filter 38 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 - inet/filter/limit-37 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-37 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-37 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-37 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-37 - inet6/filter/limit-37 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-37 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-37 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 39 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog","out":"B"} +Filter 39 {"conn-limit":{"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 - inet/filter/limit-38 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-38 -m limit --limit 12/minute -j ULOG - inet/filter/limit-38 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-38 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-38 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-38 - inet6/filter/limit-38 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-38 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-38 -j ACCEPT -Filter 40 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog","out":"B"} +Filter 40 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 - inet/filter/limit-39 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-39 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-39 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-39 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-39 - inet6/filter/limit-39 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 41 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +Filter 41 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 - inet/filter/limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-40 -j ACCEPT + inet/filter/limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-40 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-40 - inet6/filter/limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-40 -j ACCEPT + inet6/filter/limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 42 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +Filter 42 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 - inet/filter/limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-41 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-41 - inet6/filter/limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 43 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 43 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 - inet/filter/limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-42 -m limit --limit 1/second -j LOG - inet/filter/limit-42 -j ACCEPT + inet/filter/limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-42 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-42 - inet6/filter/limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-42 -m limit --limit 1/second -j LOG - inet6/filter/limit-42 -j ACCEPT + inet6/filter/limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 44 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 44 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 - inet/filter/limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-43 -m limit --limit 1/second -j LOG + inet/filter/limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-43 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-43 - inet6/filter/limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-43 -m limit --limit 1/second -j LOG + inet6/filter/limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 45 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 45 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 - inet/filter/limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-44 -j ACCEPT + inet/filter/limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-44 -j TEE --gateway 10.0.0.1 + inet/filter/limit-44 -j TEE --gateway 10.0.0.2 + inet/filter/limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-44 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-44 - inet6/filter/limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-44 -j ACCEPT + inet6/filter/limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-44 -j TEE --gateway fc00::2 + inet6/filter/limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 46 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 46 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 - inet/filter/limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-45 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-45 - inet6/filter/limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 47 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 47 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 - inet/filter/limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-46 -m limit --limit 12/minute -j ULOG - inet/filter/limit-46 -j ACCEPT + inet/filter/limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-46 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-46 - inet6/filter/limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-46 -j ACCEPT + inet6/filter/limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 48 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 48 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 - inet/filter/limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-47 -m limit --limit 12/minute -j ULOG + inet/filter/limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-47 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-47 - inet6/filter/limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 49 {"conn-limit":{"log":false,"name":"C"},"out":"B"} +Filter 49 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 - inet/filter/limit-48 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-48 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-48 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-48 -m limit --limit 12/minute -j ULOG + inet/filter/limit-48 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-48 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-48 - inet6/filter/limit-48 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-48 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 50 {"action":"pass","conn-limit":{"log":false,"name":"C"},"out":"B"} +Filter 50 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 - inet/filter/limit-49 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-49 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-49 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-49 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-49 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-49 - inet6/filter/limit-49 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-49 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-49 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 51 {"conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} +Filter 51 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 - inet/filter/limit-50 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-50 -m limit --limit 1/second -j LOG - inet/filter/limit-50 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-50 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-50 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-50 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-50 - inet6/filter/limit-50 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-50 -m limit --limit 1/second -j LOG - inet6/filter/limit-50 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-50 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-50 -j ACCEPT -Filter 52 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} +Filter 52 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 - inet/filter/limit-51 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-51 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-51 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-51 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-51 - inet6/filter/limit-51 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-51 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-51 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 53 {"conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} +Filter 53 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 - inet/filter/limit-52 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-52 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-52 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-52 -m limit --limit 1/second -j LOG + inet/filter/limit-52 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-52 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-52 - inet6/filter/limit-52 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-52 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-52 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-52 -m limit --limit 1/second -j LOG + inet6/filter/limit-52 -j ACCEPT -Filter 54 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} +Filter 54 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 - inet/filter/limit-53 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-53 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-53 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-53 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-53 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-53 - inet6/filter/limit-53 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-53 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-53 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-53 -m limit --limit 1/second -j LOG -Filter 55 {"conn-limit":{"log":false,"name":"C"},"log":"ulog","out":"B"} +Filter 55 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 - inet/filter/limit-54 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-54 -m limit --limit 12/minute -j ULOG - inet/filter/limit-54 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-54 -j TEE --gateway 10.0.0.1 + inet/filter/limit-54 -j TEE --gateway 10.0.0.2 + inet/filter/limit-54 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-54 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-54 - inet6/filter/limit-54 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-54 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-54 -j TEE --gateway fc00::2 + inet6/filter/limit-54 -j ACCEPT -Filter 56 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"ulog","out":"B"} +Filter 56 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 - inet/filter/limit-55 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-55 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-55 -j TEE --gateway 10.0.0.1 + inet/filter/limit-55 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-55 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-55 - inet6/filter/limit-55 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-55 -j TEE --gateway fc00::2 -Filter 57 {"conn-limit":{"log":false,"name":"C","update":false},"out":"B"} +Filter 57 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 - inet/filter/limit-56 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-56 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-56 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-56 - inet6/filter/limit-56 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-56 -j ACCEPT -Filter 58 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"out":"B"} +Filter 58 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 - inet/filter/limit-57 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-57 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-57 - inet6/filter/limit-57 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 59 {"conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 59 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 - inet/filter/limit-58 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-58 -m limit --limit 1/second -j LOG + inet/filter/limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-58 -m limit --limit 12/minute -j ULOG inet/filter/limit-58 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-58 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-58 - inet6/filter/limit-58 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-58 -m limit --limit 1/second -j LOG + inet6/filter/limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-58 -j ACCEPT -Filter 60 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 60 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 - inet/filter/limit-59 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-59 -m limit --limit 1/second -j LOG + inet/filter/limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-59 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-59 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-59 - inet6/filter/limit-59 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-59 -m limit --limit 1/second -j LOG + inet6/filter/limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 61 {"conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 61 {"conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 - inet/filter/limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-60 -j ACCEPT + inet/filter/limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-60 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-60 - inet6/filter/limit-60 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-60 -j ACCEPT + inet6/filter/limit-60 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-60 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 62 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 62 {"action":"pass","conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 - inet/filter/limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-61 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-61 - inet6/filter/limit-61 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-61 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-61 -m recent --name user:C --rsource --mask fe00:: --set -Filter 63 {"conn-limit":{"log":false,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 63 {"conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 - inet/filter/limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-62 -m limit --limit 12/minute -j ULOG - inet/filter/limit-62 -j ACCEPT + inet/filter/limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-62 -m limit --limit 1/second -j LOG + inet/filter/limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-62 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-62 - inet6/filter/limit-62 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-62 -j ACCEPT + inet6/filter/limit-62 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-62 -m limit --limit 1/second -j LOG + inet6/filter/limit-62 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 64 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 64 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 - inet/filter/limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-63 -m limit --limit 12/minute -j ULOG + inet/filter/limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-63 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-63 - inet6/filter/limit-63 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-63 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-63 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 65 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} +Filter 65 {"conn-limit":{"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 - inet/filter/limit-64 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-64 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-64 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-64 -j TEE --gateway 10.0.0.1 + inet/filter/limit-64 -j TEE --gateway 10.0.0.2 + inet/filter/limit-64 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-64 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-64 - inet6/filter/limit-64 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-64 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-64 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-64 -j TEE --gateway fc00::2 + inet6/filter/limit-64 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 66 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} +Filter 66 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 - inet/filter/limit-65 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-65 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-65 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-65 - inet6/filter/limit-65 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-65 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-65 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-65 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 67 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} +Filter 67 {"conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 - inet/filter/limit-66 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-66 -m limit --limit 1/second -j LOG - inet/filter/limit-66 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-66 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-66 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-66 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-66 - inet6/filter/limit-66 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-66 -m limit --limit 1/second -j LOG - inet6/filter/limit-66 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-66 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-66 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 68 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} +Filter 68 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 - inet/filter/limit-67 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-67 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-67 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-67 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-67 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-67 - inet6/filter/limit-67 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-67 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-67 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-67 -m recent --name user:C --rsource --mask fe00:: --set -Filter 69 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} +Filter 69 {"conn-limit":{"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 - inet/filter/limit-68 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-68 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-68 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-68 -m limit --limit 12/minute -j ULOG + inet/filter/limit-68 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-68 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-68 - inet6/filter/limit-68 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-68 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-68 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-68 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 70 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} +Filter 70 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 - inet/filter/limit-69 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-69 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-69 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-69 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-69 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-69 - inet6/filter/limit-69 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-69 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-69 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -Filter 71 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog","out":"B"} +Filter 71 {"conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 - inet/filter/limit-70 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-70 -m limit --limit 12/minute -j ULOG - inet/filter/limit-70 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-70 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-70 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-70 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-70 - inet6/filter/limit-70 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-70 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-70 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-70 -j ACCEPT -Filter 72 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog","out":"B"} +Filter 72 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 - inet/filter/limit-71 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-71 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-71 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-71 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-71 - inet6/filter/limit-71 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-71 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 73 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} +Filter 73 {"conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 - inet/filter/limit-72 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-72 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-72 -m limit --limit 1/second -j LOG inet/filter/limit-72 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-72 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-72 - inet6/filter/limit-72 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-72 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-72 -m limit --limit 1/second -j LOG inet6/filter/limit-72 -j ACCEPT -Filter 74 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} +Filter 74 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 - inet/filter/limit-73 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-73 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-73 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-73 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-73 - inet6/filter/limit-73 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-73 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-73 -m limit --limit 1/second -j LOG -Filter 75 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 75 {"conn-limit":{"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 - inet/filter/limit-74 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-74 -m limit --limit 1/second -j LOG + inet/filter/limit-74 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-74 -j TEE --gateway 10.0.0.1 + inet/filter/limit-74 -j TEE --gateway 10.0.0.2 inet/filter/limit-74 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-74 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-74 - inet6/filter/limit-74 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-74 -m limit --limit 1/second -j LOG + inet6/filter/limit-74 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-74 -j TEE --gateway fc00::2 inet6/filter/limit-74 -j ACCEPT -Filter 76 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 76 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 - inet/filter/limit-75 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-75 -m limit --limit 1/second -j LOG + inet/filter/limit-75 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-75 -j TEE --gateway 10.0.0.1 + inet/filter/limit-75 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-75 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-75 - inet6/filter/limit-75 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-75 -m limit --limit 1/second -j LOG + inet6/filter/limit-75 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-75 -j TEE --gateway fc00::2 -Filter 77 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 77 {"conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 - inet/filter/limit-76 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-76 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-76 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-76 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-76 - inet6/filter/limit-76 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-76 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-76 -j ACCEPT -Filter 78 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 78 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 - inet/filter/limit-77 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-77 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-77 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-77 - inet6/filter/limit-77 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-77 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 79 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 79 {"conn-limit":{"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 - inet/filter/limit-78 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-78 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-78 -m limit --limit 12/minute -j ULOG inet/filter/limit-78 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-78 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-78 - inet6/filter/limit-78 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-78 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-78 -j ACCEPT -Filter 80 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 80 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 - inet/filter/limit-79 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-79 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-79 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-79 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-79 - inet6/filter/limit-79 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-79 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 81 {"conn-limit":{},"out":"B"} +Filter 81 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 - inet/filter/limit-80 -m recent --name limit-80 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 - inet/filter/limit-80 -m recent --name limit-80 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-8 -m limit --limit 1/second -j LOG - inet/filter/logdrop-8 -j DROP + inet/filter/limit-80 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-80 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-80 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-80 - inet6/filter/limit-80 -m recent --name limit-80 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 - inet6/filter/limit-80 -m recent --name limit-80 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-8 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-8 -j DROP + inet6/filter/limit-80 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-80 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 82 {"action":"pass","conn-limit":{},"out":"B"} +Filter 82 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 - inet/filter/limit-81 -m recent --name limit-81 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 - inet/filter/limit-81 -m recent --name limit-81 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-9 -m limit --limit 1/second -j LOG - inet/filter/logdrop-9 -j DROP + inet/filter/limit-81 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-81 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-81 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-81 - inet6/filter/limit-81 -m recent --name limit-81 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 - inet6/filter/limit-81 -m recent --name limit-81 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-9 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-9 -j DROP + inet6/filter/limit-81 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-81 -m recent --name user:C --rdest --mask fe00:: --set -Filter 83 {"conn-limit":{},"log":true,"out":"B"} +Filter 83 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 - inet/filter/limit-82 -m recent --name limit-82 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 + inet/filter/limit-82 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-82 -m limit --limit 1/second -j LOG - inet/filter/limit-82 -m recent --name limit-82 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-10 -m limit --limit 1/second -j LOG - inet/filter/logdrop-10 -j DROP + inet/filter/limit-82 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-82 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-82 - inet6/filter/limit-82 -m recent --name limit-82 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 + inet6/filter/limit-82 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-82 -m limit --limit 1/second -j LOG - inet6/filter/limit-82 -m recent --name limit-82 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-10 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-10 -j DROP + inet6/filter/limit-82 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 84 {"action":"pass","conn-limit":{},"log":true,"out":"B"} +Filter 84 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 - inet/filter/limit-83 -m recent --name limit-83 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 - inet/filter/limit-83 -m recent --name limit-83 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-11 -m limit --limit 1/second -j LOG - inet/filter/logdrop-11 -j DROP + inet/filter/limit-83 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-83 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-83 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-83 - inet6/filter/limit-83 -m recent --name limit-83 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 - inet6/filter/limit-83 -m recent --name limit-83 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-11 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-11 -j DROP + inet6/filter/limit-83 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-83 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 85 {"conn-limit":{},"log":"none","out":"B"} +Filter 85 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 - inet/filter/limit-84 -m recent --name limit-84 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 - inet/filter/limit-84 -m recent --name limit-84 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-12 -m limit --limit 1/second -j LOG - inet/filter/logdrop-12 -j DROP + inet/filter/limit-84 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-84 -j TEE --gateway 10.0.0.1 + inet/filter/limit-84 -j TEE --gateway 10.0.0.2 + inet/filter/limit-84 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-84 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-84 - inet6/filter/limit-84 -m recent --name limit-84 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 - inet6/filter/limit-84 -m recent --name limit-84 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-12 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-12 -j DROP + inet6/filter/limit-84 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-84 -j TEE --gateway fc00::2 + inet6/filter/limit-84 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 86 {"action":"pass","conn-limit":{},"log":"none","out":"B"} +Filter 86 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 - inet/filter/limit-85 -m recent --name limit-85 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 - inet/filter/limit-85 -m recent --name limit-85 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-13 -m limit --limit 1/second -j LOG - inet/filter/logdrop-13 -j DROP + inet/filter/limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-85 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-85 - inet6/filter/limit-85 -m recent --name limit-85 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 - inet6/filter/limit-85 -m recent --name limit-85 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-13 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-13 -j DROP + inet6/filter/limit-85 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-85 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 87 {"conn-limit":{},"log":"ulog","out":"B"} +Filter 87 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 - inet/filter/limit-86 -m recent --name limit-86 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 - inet/filter/limit-86 -m limit --limit 12/minute -j ULOG - inet/filter/limit-86 -m recent --name limit-86 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-14 -m limit --limit 1/second -j LOG - inet/filter/logdrop-14 -j DROP + inet/filter/limit-86 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-86 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-86 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-86 - inet6/filter/limit-86 -m recent --name limit-86 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 - inet6/filter/limit-86 -m recent --name limit-86 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-14 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-14 -j DROP + inet6/filter/limit-86 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-86 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 88 {"action":"pass","conn-limit":{},"log":"ulog","out":"B"} +Filter 88 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 - inet/filter/limit-87 -m recent --name limit-87 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 - inet/filter/limit-87 -m recent --name limit-87 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-15 -m limit --limit 1/second -j LOG - inet/filter/logdrop-15 -j DROP + inet/filter/limit-87 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-87 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-87 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-87 - inet6/filter/limit-87 -m recent --name limit-87 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 - inet6/filter/logdrop-15 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-15 -j DROP + inet6/filter/limit-87 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-87 -m recent --name user:C --rdest --mask fe00:: --set -Filter 89 {"conn-limit":{"name":"A"},"out":"B"} +Filter 89 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 - inet/filter/limit-88 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 - inet/filter/limit-88 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-16 -m limit --limit 1/second -j LOG - inet/filter/logdrop-16 -j DROP + inet/filter/limit-88 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-88 -m limit --limit 12/minute -j ULOG + inet/filter/limit-88 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-88 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-88 - inet6/filter/limit-88 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 - inet6/filter/limit-88 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-16 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-16 -j DROP + inet6/filter/limit-88 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-88 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 90 {"action":"pass","conn-limit":{"name":"A"},"out":"B"} +Filter 90 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 - inet/filter/limit-89 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 - inet/filter/limit-89 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-17 -m limit --limit 1/second -j LOG - inet/filter/logdrop-17 -j DROP + inet/filter/limit-89 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-89 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-89 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-89 - inet6/filter/limit-89 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 - inet6/filter/limit-89 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-17 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-17 -j DROP + inet6/filter/limit-89 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -Filter 91 {"conn-limit":{"name":"A"},"log":true,"out":"B"} +Filter 91 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 - inet/filter/limit-90 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 - inet/filter/limit-90 -m limit --limit 1/second -j LOG - inet/filter/limit-90 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-18 -m limit --limit 1/second -j LOG - inet/filter/logdrop-18 -j DROP + inet/filter/limit-90 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-90 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-90 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-90 - inet6/filter/limit-90 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 - inet6/filter/limit-90 -m limit --limit 1/second -j LOG - inet6/filter/limit-90 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-18 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-18 -j DROP + inet6/filter/limit-90 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-90 -j ACCEPT -Filter 92 {"action":"pass","conn-limit":{"name":"A"},"log":true,"out":"B"} +Filter 92 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 - inet/filter/limit-91 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-19 - inet/filter/limit-91 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-19 -m limit --limit 1/second -j LOG - inet/filter/logdrop-19 -j DROP + inet/filter/limit-91 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-91 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-91 - inet6/filter/limit-91 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-19 - inet6/filter/limit-91 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-19 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-19 -j DROP + inet6/filter/limit-91 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 93 {"conn-limit":{"name":"A"},"log":"none","out":"B"} +Filter 93 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 - inet/filter/limit-92 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-20 - inet/filter/limit-92 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-20 -m limit --limit 1/second -j LOG - inet/filter/logdrop-20 -j DROP + inet/filter/limit-92 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-92 -m limit --limit 1/second -j LOG + inet/filter/limit-92 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-92 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-92 - inet6/filter/limit-92 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-20 - inet6/filter/limit-92 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-20 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-20 -j DROP + inet6/filter/limit-92 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-92 -m limit --limit 1/second -j LOG + inet6/filter/limit-92 -j ACCEPT -Filter 94 {"action":"pass","conn-limit":{"name":"A"},"log":"none","out":"B"} +Filter 94 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 - inet/filter/limit-93 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-21 - inet/filter/limit-93 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-21 -m limit --limit 1/second -j LOG - inet/filter/logdrop-21 -j DROP + inet/filter/limit-93 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-93 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-93 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-93 - inet6/filter/limit-93 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-21 - inet6/filter/limit-93 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-21 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-21 -j DROP + inet6/filter/limit-93 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-93 -m limit --limit 1/second -j LOG -Filter 95 {"conn-limit":{"name":"A"},"log":"ulog","out":"B"} +Filter 95 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 - inet/filter/limit-94 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-22 - inet/filter/limit-94 -m limit --limit 12/minute -j ULOG - inet/filter/limit-94 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-22 -m limit --limit 1/second -j LOG - inet/filter/logdrop-22 -j DROP + inet/filter/limit-94 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-94 -j TEE --gateway 10.0.0.1 + inet/filter/limit-94 -j TEE --gateway 10.0.0.2 + inet/filter/limit-94 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-94 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-94 - inet6/filter/limit-94 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-22 - inet6/filter/limit-94 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-22 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-22 -j DROP + inet6/filter/limit-94 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-94 -j TEE --gateway fc00::2 + inet6/filter/limit-94 -j ACCEPT -Filter 96 {"action":"pass","conn-limit":{"name":"A"},"log":"ulog","out":"B"} +Filter 96 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 - inet/filter/limit-95 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-23 - inet/filter/limit-95 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-23 -m limit --limit 1/second -j LOG - inet/filter/logdrop-23 -j DROP + inet/filter/limit-95 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-95 -j TEE --gateway 10.0.0.1 + inet/filter/limit-95 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-95 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-95 - inet6/filter/limit-95 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-23 - inet6/filter/logdrop-23 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-23 -j DROP + inet6/filter/limit-95 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-95 -j TEE --gateway fc00::2 -Filter 97 {"conn-limit":{"name":"A","update":false},"out":"B"} +Filter 97 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 - inet/filter/limit-96 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24 + inet/filter/limit-96 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-96 -j ACCEPT - inet/filter/logdrop-24 -m limit --limit 1/second -j LOG - inet/filter/logdrop-24 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-96 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-96 - inet6/filter/limit-96 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-24 + inet6/filter/limit-96 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-96 -j ACCEPT - inet6/filter/logdrop-24 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-24 -j DROP -Filter 98 {"action":"pass","conn-limit":{"name":"A","update":false},"out":"B"} +Filter 98 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 - inet/filter/limit-97 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-25 - inet/filter/logdrop-25 -m limit --limit 1/second -j LOG - inet/filter/logdrop-25 -j DROP + inet/filter/limit-97 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-97 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-97 - inet6/filter/limit-97 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-25 - inet6/filter/logdrop-25 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-25 -j DROP + inet6/filter/limit-97 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 99 {"conn-limit":{"name":"A","update":false},"log":true,"out":"B"} +Filter 99 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 - inet/filter/limit-98 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-26 - inet/filter/limit-98 -m limit --limit 1/second -j LOG + inet/filter/limit-98 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-98 -m limit --limit 12/minute -j ULOG inet/filter/limit-98 -j ACCEPT - inet/filter/logdrop-26 -m limit --limit 1/second -j LOG - inet/filter/logdrop-26 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-98 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-98 - inet6/filter/limit-98 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-26 - inet6/filter/limit-98 -m limit --limit 1/second -j LOG + inet6/filter/limit-98 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-98 -j ACCEPT - inet6/filter/logdrop-26 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-26 -j DROP -Filter 100 {"action":"pass","conn-limit":{"name":"A","update":false},"log":true,"out":"B"} +Filter 100 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 - inet/filter/limit-99 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-27 - inet/filter/limit-99 -m limit --limit 1/second -j LOG - inet/filter/logdrop-27 -m limit --limit 1/second -j LOG - inet/filter/logdrop-27 -j DROP + inet/filter/limit-99 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-99 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-99 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-99 - inet6/filter/limit-99 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-27 - inet6/filter/limit-99 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-27 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-27 -j DROP + inet6/filter/limit-99 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 101 {"conn-limit":{"name":"A","update":false},"log":"none","out":"B"} +Filter 101 {"conn-limit":{},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 - inet/filter/limit-100 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-28 - inet/filter/limit-100 -j ACCEPT - inet/filter/logdrop-28 -m limit --limit 1/second -j LOG - inet/filter/logdrop-28 -j DROP + inet/filter/limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 + inet/filter/limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-10 -m limit --limit 1/second -j LOG + inet/filter/logdrop-10 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-100 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-100 - inet6/filter/limit-100 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-28 - inet6/filter/limit-100 -j ACCEPT - inet6/filter/logdrop-28 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-28 -j DROP + inet6/filter/limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 + inet6/filter/limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-10 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-10 -j DROP -Filter 102 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"none","out":"B"} +Filter 102 {"action":"pass","conn-limit":{},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 - inet/filter/limit-101 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-29 - inet/filter/logdrop-29 -m limit --limit 1/second -j LOG - inet/filter/logdrop-29 -j DROP + inet/filter/limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 + inet/filter/limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-11 -m limit --limit 1/second -j LOG + inet/filter/logdrop-11 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-101 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-101 - inet6/filter/limit-101 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-29 - inet6/filter/logdrop-29 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-29 -j DROP + inet6/filter/limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 + inet6/filter/limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-11 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-11 -j DROP -Filter 103 {"conn-limit":{"name":"A","update":false},"log":"ulog","out":"B"} +Filter 103 {"conn-limit":{},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 - inet/filter/limit-102 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 - inet/filter/limit-102 -m limit --limit 12/minute -j ULOG - inet/filter/limit-102 -j ACCEPT - inet/filter/logdrop-30 -m limit --limit 1/second -j LOG - inet/filter/logdrop-30 -j DROP + inet/filter/limit-102 -m recent --name limit-102 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 + inet/filter/limit-102 -m limit --limit 1/second -j LOG + inet/filter/limit-102 -m recent --name limit-102 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-12 -m limit --limit 1/second -j LOG + inet/filter/logdrop-12 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-102 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-102 - inet6/filter/limit-102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 - inet6/filter/limit-102 -j ACCEPT - inet6/filter/logdrop-30 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-30 -j DROP + inet6/filter/limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 + inet6/filter/limit-102 -m limit --limit 1/second -j LOG + inet6/filter/limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-12 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-12 -j DROP -Filter 104 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"ulog","out":"B"} +Filter 104 {"action":"pass","conn-limit":{},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 - inet/filter/limit-103 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 - inet/filter/limit-103 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-31 -m limit --limit 1/second -j LOG - inet/filter/logdrop-31 -j DROP + inet/filter/limit-103 -m recent --name limit-103 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 + inet/filter/limit-103 -m recent --name limit-103 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-13 -m limit --limit 1/second -j LOG + inet/filter/logdrop-13 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-103 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-103 - inet6/filter/limit-103 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 - inet6/filter/logdrop-31 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-31 -j DROP + inet6/filter/limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 + inet6/filter/limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-13 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-13 -j DROP -Filter 105 {"conn-limit":{"addr":"dest","name":"A"},"out":"B"} +Filter 105 {"conn-limit":{},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 - inet/filter/limit-104 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-32 - inet/filter/limit-104 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-32 -m limit --limit 1/second -j LOG - inet/filter/logdrop-32 -j DROP + inet/filter/limit-104 -m recent --name limit-104 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 + inet/filter/limit-104 -j TEE --gateway 10.0.0.1 + inet/filter/limit-104 -j TEE --gateway 10.0.0.2 + inet/filter/limit-104 -m recent --name limit-104 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-14 -m limit --limit 1/second -j LOG + inet/filter/logdrop-14 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-104 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-104 - inet6/filter/limit-104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-32 - inet6/filter/limit-104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-32 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-32 -j DROP + inet6/filter/limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 + inet6/filter/limit-104 -j TEE --gateway fc00::2 + inet6/filter/limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-14 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-14 -j DROP -Filter 106 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"out":"B"} +Filter 106 {"action":"pass","conn-limit":{},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 - inet/filter/limit-105 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-33 - inet/filter/limit-105 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-33 -m limit --limit 1/second -j LOG - inet/filter/logdrop-33 -j DROP + inet/filter/limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 + inet/filter/limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-15 -m limit --limit 1/second -j LOG + inet/filter/logdrop-15 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-105 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-105 - inet6/filter/limit-105 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-33 - inet6/filter/limit-105 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-33 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-33 -j DROP + inet6/filter/limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 + inet6/filter/limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-15 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-15 -j DROP -Filter 107 {"conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} +Filter 107 {"conn-limit":{},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 - inet/filter/limit-106 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-34 - inet/filter/limit-106 -m limit --limit 1/second -j LOG - inet/filter/limit-106 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-34 -m limit --limit 1/second -j LOG - inet/filter/logdrop-34 -j DROP + inet/filter/limit-106 -m recent --name limit-106 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 + inet/filter/limit-106 -m recent --name limit-106 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-16 -m limit --limit 1/second -j LOG + inet/filter/logdrop-16 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-106 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-106 - inet6/filter/limit-106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-34 - inet6/filter/limit-106 -m limit --limit 1/second -j LOG - inet6/filter/limit-106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-34 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-34 -j DROP + inet6/filter/limit-106 -m recent --name limit-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 + inet6/filter/limit-106 -m recent --name limit-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-16 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-16 -j DROP -Filter 108 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} +Filter 108 {"action":"pass","conn-limit":{},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 - inet/filter/limit-107 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-35 - inet/filter/limit-107 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-35 -m limit --limit 1/second -j LOG - inet/filter/logdrop-35 -j DROP + inet/filter/limit-107 -m recent --name limit-107 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 + inet/filter/limit-107 -m recent --name limit-107 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-17 -m limit --limit 1/second -j LOG + inet/filter/logdrop-17 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-107 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-107 - inet6/filter/limit-107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-35 - inet6/filter/limit-107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-35 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-35 -j DROP + inet6/filter/limit-107 -m recent --name limit-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 + inet6/filter/limit-107 -m recent --name limit-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-17 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-17 -j DROP -Filter 109 {"conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} +Filter 109 {"conn-limit":{},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 - inet/filter/limit-108 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-36 - inet/filter/limit-108 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-36 -m limit --limit 1/second -j LOG - inet/filter/logdrop-36 -j DROP + inet/filter/limit-108 -m recent --name limit-108 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 + inet/filter/limit-108 -m limit --limit 12/minute -j ULOG + inet/filter/limit-108 -m recent --name limit-108 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-18 -m limit --limit 1/second -j LOG + inet/filter/logdrop-18 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-108 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-108 - inet6/filter/limit-108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-36 - inet6/filter/limit-108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-36 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-36 -j DROP + inet6/filter/limit-108 -m recent --name limit-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 + inet6/filter/limit-108 -m recent --name limit-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-18 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-18 -j DROP -Filter 110 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} +Filter 110 {"action":"pass","conn-limit":{},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-109 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-109 - inet/filter/limit-109 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-37 - inet/filter/limit-109 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-37 -m limit --limit 1/second -j LOG - inet/filter/logdrop-37 -j DROP + inet/filter/limit-109 -m recent --name limit-109 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-19 + inet/filter/limit-109 -m recent --name limit-109 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-19 -m limit --limit 1/second -j LOG + inet/filter/logdrop-19 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-109 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-109 - inet6/filter/limit-109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-37 - inet6/filter/limit-109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-37 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-37 -j DROP + inet6/filter/limit-109 -m recent --name limit-109 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-19 + inet6/filter/logdrop-19 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-19 -j DROP -Filter 111 {"conn-limit":{"addr":"dest","name":"A"},"log":"ulog","out":"B"} +Filter 111 {"conn-limit":{"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 - inet/filter/limit-110 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-38 - inet/filter/limit-110 -m limit --limit 12/minute -j ULOG - inet/filter/limit-110 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-38 -m limit --limit 1/second -j LOG - inet/filter/logdrop-38 -j DROP + inet/filter/limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-20 + inet/filter/limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-20 -m limit --limit 1/second -j LOG + inet/filter/logdrop-20 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-110 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-110 - inet6/filter/limit-110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-38 - inet6/filter/limit-110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-38 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-38 -j DROP + inet6/filter/limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-20 + inet6/filter/limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-20 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-20 -j DROP -Filter 112 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"ulog","out":"B"} +Filter 112 {"action":"pass","conn-limit":{"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 - inet/filter/limit-111 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-39 - inet/filter/limit-111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-39 -m limit --limit 1/second -j LOG - inet/filter/logdrop-39 -j DROP + inet/filter/limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-21 + inet/filter/limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-21 -m limit --limit 1/second -j LOG + inet/filter/logdrop-21 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-111 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-111 - inet6/filter/limit-111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-39 - inet6/filter/logdrop-39 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-39 -j DROP + inet6/filter/limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-21 + inet6/filter/limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-21 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-21 -j DROP -Filter 113 {"conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} +Filter 113 {"conn-limit":{"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 - inet/filter/limit-112 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-40 - inet/filter/limit-112 -j ACCEPT - inet/filter/logdrop-40 -m limit --limit 1/second -j LOG - inet/filter/logdrop-40 -j DROP + inet/filter/limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-22 + inet/filter/limit-112 -m limit --limit 1/second -j LOG + inet/filter/limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-22 -m limit --limit 1/second -j LOG + inet/filter/logdrop-22 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-112 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-112 - inet6/filter/limit-112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-40 - inet6/filter/limit-112 -j ACCEPT - inet6/filter/logdrop-40 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-40 -j DROP + inet6/filter/limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-22 + inet6/filter/limit-112 -m limit --limit 1/second -j LOG + inet6/filter/limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-22 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-22 -j DROP -Filter 114 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} +Filter 114 {"action":"pass","conn-limit":{"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-113 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-113 - inet/filter/limit-113 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-41 - inet/filter/logdrop-41 -m limit --limit 1/second -j LOG - inet/filter/logdrop-41 -j DROP + inet/filter/limit-113 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-23 + inet/filter/limit-113 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-23 -m limit --limit 1/second -j LOG + inet/filter/logdrop-23 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-113 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-113 - inet6/filter/limit-113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-41 - inet6/filter/logdrop-41 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-41 -j DROP + inet6/filter/limit-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-23 + inet6/filter/limit-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-23 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-23 -j DROP -Filter 115 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} +Filter 115 {"conn-limit":{"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 - inet/filter/limit-114 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-42 - inet/filter/limit-114 -m limit --limit 1/second -j LOG - inet/filter/limit-114 -j ACCEPT - inet/filter/logdrop-42 -m limit --limit 1/second -j LOG - inet/filter/logdrop-42 -j DROP + inet/filter/limit-114 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-24 + inet/filter/limit-114 -j TEE --gateway 10.0.0.1 + inet/filter/limit-114 -j TEE --gateway 10.0.0.2 + inet/filter/limit-114 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-24 -m limit --limit 1/second -j LOG + inet/filter/logdrop-24 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-114 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-114 - inet6/filter/limit-114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-42 - inet6/filter/limit-114 -m limit --limit 1/second -j LOG - inet6/filter/limit-114 -j ACCEPT - inet6/filter/logdrop-42 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-42 -j DROP + inet6/filter/limit-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-24 + inet6/filter/limit-114 -j TEE --gateway fc00::2 + inet6/filter/limit-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-24 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-24 -j DROP -Filter 116 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} +Filter 116 {"action":"pass","conn-limit":{"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 - inet/filter/limit-115 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 - inet/filter/limit-115 -m limit --limit 1/second -j LOG - inet/filter/logdrop-43 -m limit --limit 1/second -j LOG - inet/filter/logdrop-43 -j DROP + inet/filter/limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 + inet/filter/limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-25 -m limit --limit 1/second -j LOG + inet/filter/logdrop-25 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-115 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-115 - inet6/filter/limit-115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-43 - inet6/filter/limit-115 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-43 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-43 -j DROP + inet6/filter/limit-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 + inet6/filter/limit-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-25 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-25 -j DROP -Filter 117 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} +Filter 117 {"conn-limit":{"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 - inet/filter/limit-116 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 - inet/filter/limit-116 -j ACCEPT - inet/filter/logdrop-44 -m limit --limit 1/second -j LOG - inet/filter/logdrop-44 -j DROP + inet/filter/limit-116 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 + inet/filter/limit-116 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-26 -m limit --limit 1/second -j LOG + inet/filter/logdrop-26 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-116 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-116 - inet6/filter/limit-116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-44 - inet6/filter/limit-116 -j ACCEPT - inet6/filter/logdrop-44 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-44 -j DROP + inet6/filter/limit-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 + inet6/filter/limit-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-26 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-26 -j DROP -Filter 118 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} +Filter 118 {"action":"pass","conn-limit":{"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 - inet/filter/limit-117 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 - inet/filter/logdrop-45 -m limit --limit 1/second -j LOG - inet/filter/logdrop-45 -j DROP + inet/filter/limit-117 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 + inet/filter/limit-117 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-27 -m limit --limit 1/second -j LOG + inet/filter/logdrop-27 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-117 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-117 - inet6/filter/limit-117 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-45 - inet6/filter/logdrop-45 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-45 -j DROP + inet6/filter/limit-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 + inet6/filter/limit-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-27 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-27 -j DROP -Filter 119 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"ulog","out":"B"} +Filter 119 {"conn-limit":{"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 - inet/filter/limit-118 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 + inet/filter/limit-118 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 inet/filter/limit-118 -m limit --limit 12/minute -j ULOG - inet/filter/limit-118 -j ACCEPT - inet/filter/logdrop-46 -m limit --limit 1/second -j LOG - inet/filter/logdrop-46 -j DROP + inet/filter/limit-118 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-28 -m limit --limit 1/second -j LOG + inet/filter/logdrop-28 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-118 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-118 - inet6/filter/limit-118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-46 - inet6/filter/limit-118 -j ACCEPT - inet6/filter/logdrop-46 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-46 -j DROP + inet6/filter/limit-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 + inet6/filter/limit-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-28 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-28 -j DROP -Filter 120 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"ulog","out":"B"} +Filter 120 {"action":"pass","conn-limit":{"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 - inet/filter/limit-119 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 - inet/filter/limit-119 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-47 -m limit --limit 1/second -j LOG - inet/filter/logdrop-47 -j DROP + inet/filter/limit-119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 + inet/filter/limit-119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-29 -m limit --limit 1/second -j LOG + inet/filter/logdrop-29 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-119 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-119 - inet6/filter/limit-119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-47 - inet6/filter/logdrop-47 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-47 -j DROP + inet6/filter/limit-119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 + inet6/filter/logdrop-29 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-29 -j DROP -Filter 121 {"conn-limit":{"name":"C"},"out":"B"} +Filter 121 {"conn-limit":{"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 - inet/filter/limit-120 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-48 - inet/filter/limit-120 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-48 -m limit --limit 1/second -j LOG - inet/filter/logdrop-48 -j DROP + inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 + inet/filter/limit-120 -j ACCEPT + inet/filter/logdrop-30 -m limit --limit 1/second -j LOG + inet/filter/logdrop-30 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-120 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-120 - inet6/filter/limit-120 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-48 - inet6/filter/limit-120 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-48 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-48 -j DROP + inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 + inet6/filter/limit-120 -j ACCEPT + inet6/filter/logdrop-30 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-30 -j DROP -Filter 122 {"action":"pass","conn-limit":{"name":"C"},"out":"B"} +Filter 122 {"action":"pass","conn-limit":{"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 - inet/filter/limit-121 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 - inet/filter/limit-121 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-49 -m limit --limit 1/second -j LOG - inet/filter/logdrop-49 -j DROP + inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 + inet/filter/logdrop-31 -m limit --limit 1/second -j LOG + inet/filter/logdrop-31 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-121 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-121 - inet6/filter/limit-121 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 - inet6/filter/limit-121 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-49 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-49 -j DROP + inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 + inet6/filter/logdrop-31 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-31 -j DROP -Filter 123 {"conn-limit":{"name":"C"},"log":true,"out":"B"} +Filter 123 {"conn-limit":{"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 - inet/filter/limit-122 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 + inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 inet/filter/limit-122 -m limit --limit 1/second -j LOG - inet/filter/limit-122 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-50 -m limit --limit 1/second -j LOG - inet/filter/logdrop-50 -j DROP + inet/filter/limit-122 -j ACCEPT + inet/filter/logdrop-32 -m limit --limit 1/second -j LOG + inet/filter/logdrop-32 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-122 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-122 - inet6/filter/limit-122 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 + inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 inet6/filter/limit-122 -m limit --limit 1/second -j LOG - inet6/filter/limit-122 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-50 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-50 -j DROP + inet6/filter/limit-122 -j ACCEPT + inet6/filter/logdrop-32 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-32 -j DROP -Filter 124 {"action":"pass","conn-limit":{"name":"C"},"log":true,"out":"B"} +Filter 124 {"action":"pass","conn-limit":{"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 - inet/filter/limit-123 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 - inet/filter/limit-123 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-51 -m limit --limit 1/second -j LOG - inet/filter/logdrop-51 -j DROP + inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 + inet/filter/limit-123 -m limit --limit 1/second -j LOG + inet/filter/logdrop-33 -m limit --limit 1/second -j LOG + inet/filter/logdrop-33 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-123 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-123 - inet6/filter/limit-123 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 - inet6/filter/limit-123 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-51 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-51 -j DROP + inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 + inet6/filter/limit-123 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-33 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-33 -j DROP -Filter 125 {"conn-limit":{"name":"C"},"log":"none","out":"B"} +Filter 125 {"conn-limit":{"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 - inet/filter/limit-124 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 - inet/filter/limit-124 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-52 -m limit --limit 1/second -j LOG - inet/filter/logdrop-52 -j DROP + inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 + inet/filter/limit-124 -j TEE --gateway 10.0.0.1 + inet/filter/limit-124 -j TEE --gateway 10.0.0.2 + inet/filter/limit-124 -j ACCEPT + inet/filter/logdrop-34 -m limit --limit 1/second -j LOG + inet/filter/logdrop-34 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-124 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-124 - inet6/filter/limit-124 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 - inet6/filter/limit-124 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-52 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-52 -j DROP + inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 + inet6/filter/limit-124 -j TEE --gateway fc00::2 + inet6/filter/limit-124 -j ACCEPT + inet6/filter/logdrop-34 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-34 -j DROP -Filter 126 {"action":"pass","conn-limit":{"name":"C"},"log":"none","out":"B"} +Filter 126 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 - inet/filter/limit-125 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 - inet/filter/limit-125 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-53 -m limit --limit 1/second -j LOG - inet/filter/logdrop-53 -j DROP + inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 + inet/filter/limit-125 -j TEE --gateway 10.0.0.1 + inet/filter/limit-125 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-35 -m limit --limit 1/second -j LOG + inet/filter/logdrop-35 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-125 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-125 - inet6/filter/limit-125 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 - inet6/filter/limit-125 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-53 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-53 -j DROP + inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 + inet6/filter/limit-125 -j TEE --gateway fc00::2 + inet6/filter/logdrop-35 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-35 -j DROP -Filter 127 {"conn-limit":{"name":"C"},"log":"ulog","out":"B"} +Filter 127 {"conn-limit":{"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 - inet/filter/limit-126 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 - inet/filter/limit-126 -m limit --limit 12/minute -j ULOG - inet/filter/limit-126 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-54 -m limit --limit 1/second -j LOG - inet/filter/logdrop-54 -j DROP + inet/filter/limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 + inet/filter/limit-126 -j ACCEPT + inet/filter/logdrop-36 -m limit --limit 1/second -j LOG + inet/filter/logdrop-36 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-126 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-126 - inet6/filter/limit-126 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 - inet6/filter/limit-126 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-54 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-54 -j DROP + inet6/filter/limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 + inet6/filter/limit-126 -j ACCEPT + inet6/filter/logdrop-36 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-36 -j DROP -Filter 128 {"action":"pass","conn-limit":{"name":"C"},"log":"ulog","out":"B"} +Filter 128 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 - inet/filter/limit-127 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-55 - inet/filter/limit-127 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-55 -m limit --limit 1/second -j LOG - inet/filter/logdrop-55 -j DROP + inet/filter/limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-37 + inet/filter/logdrop-37 -m limit --limit 1/second -j LOG + inet/filter/logdrop-37 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-127 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-127 - inet6/filter/limit-127 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-55 - inet6/filter/logdrop-55 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-55 -j DROP + inet6/filter/limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-37 + inet6/filter/logdrop-37 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-37 -j DROP -Filter 129 {"conn-limit":{"name":"C","update":false},"out":"B"} +Filter 129 {"conn-limit":{"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 - inet/filter/limit-128 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet/filter/limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-38 + inet/filter/limit-128 -m limit --limit 12/minute -j ULOG inet/filter/limit-128 -j ACCEPT - inet/filter/logdrop-56 -m limit --limit 1/second -j LOG - inet/filter/logdrop-56 -j DROP + inet/filter/logdrop-38 -m limit --limit 1/second -j LOG + inet/filter/logdrop-38 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-128 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-128 - inet6/filter/limit-128 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet6/filter/limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-38 inet6/filter/limit-128 -j ACCEPT - inet6/filter/logdrop-56 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-56 -j DROP + inet6/filter/logdrop-38 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-38 -j DROP -Filter 130 {"action":"pass","conn-limit":{"name":"C","update":false},"out":"B"} +Filter 130 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 - inet/filter/limit-129 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 - inet/filter/logdrop-57 -m limit --limit 1/second -j LOG - inet/filter/logdrop-57 -j DROP + inet/filter/limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-39 + inet/filter/limit-129 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-39 -m limit --limit 1/second -j LOG + inet/filter/logdrop-39 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-129 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-129 - inet6/filter/limit-129 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 - inet6/filter/logdrop-57 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-57 -j DROP + inet6/filter/limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-39 + inet6/filter/logdrop-39 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-39 -j DROP -Filter 131 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"} +Filter 131 {"conn-limit":{"addr":"dest","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 - inet/filter/limit-130 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 - inet/filter/limit-130 -m limit --limit 1/second -j LOG - inet/filter/limit-130 -j ACCEPT - inet/filter/logdrop-58 -m limit --limit 1/second -j LOG - inet/filter/logdrop-58 -j DROP + inet/filter/limit-130 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-40 + inet/filter/limit-130 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-40 -m limit --limit 1/second -j LOG + inet/filter/logdrop-40 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-130 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-130 - inet6/filter/limit-130 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 - inet6/filter/limit-130 -m limit --limit 1/second -j LOG - inet6/filter/limit-130 -j ACCEPT - inet6/filter/logdrop-58 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-58 -j DROP + inet6/filter/limit-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-40 + inet6/filter/limit-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-40 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-40 -j DROP -Filter 132 {"action":"pass","conn-limit":{"name":"C","update":false},"log":true,"out":"B"} +Filter 132 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 - inet/filter/limit-131 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 - inet/filter/limit-131 -m limit --limit 1/second -j LOG - inet/filter/logdrop-59 -m limit --limit 1/second -j LOG - inet/filter/logdrop-59 -j DROP + inet/filter/limit-131 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-41 + inet/filter/limit-131 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-41 -m limit --limit 1/second -j LOG + inet/filter/logdrop-41 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-131 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-131 - inet6/filter/limit-131 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 - inet6/filter/limit-131 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-59 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-59 -j DROP + inet6/filter/limit-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-41 + inet6/filter/limit-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-41 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-41 -j DROP -Filter 133 {"conn-limit":{"name":"C","update":false},"log":"none","out":"B"} +Filter 133 {"conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 - inet/filter/limit-132 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 - inet/filter/limit-132 -j ACCEPT - inet/filter/logdrop-60 -m limit --limit 1/second -j LOG - inet/filter/logdrop-60 -j DROP + inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-42 + inet/filter/limit-132 -m limit --limit 1/second -j LOG + inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-42 -m limit --limit 1/second -j LOG + inet/filter/logdrop-42 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-132 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-132 - inet6/filter/limit-132 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 - inet6/filter/limit-132 -j ACCEPT - inet6/filter/logdrop-60 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-60 -j DROP + inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-42 + inet6/filter/limit-132 -m limit --limit 1/second -j LOG + inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-42 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-42 -j DROP -Filter 134 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"none","out":"B"} +Filter 134 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 - inet/filter/limit-133 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-61 - inet/filter/logdrop-61 -m limit --limit 1/second -j LOG - inet/filter/logdrop-61 -j DROP + inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-43 + inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-43 -m limit --limit 1/second -j LOG + inet/filter/logdrop-43 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-133 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-133 - inet6/filter/limit-133 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-61 - inet6/filter/logdrop-61 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-61 -j DROP + inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-43 + inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-43 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-43 -j DROP -Filter 135 {"conn-limit":{"name":"C","update":false},"log":"ulog","out":"B"} +Filter 135 {"conn-limit":{"addr":"dest","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 - inet/filter/limit-134 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-62 - inet/filter/limit-134 -m limit --limit 12/minute -j ULOG - inet/filter/limit-134 -j ACCEPT - inet/filter/logdrop-62 -m limit --limit 1/second -j LOG - inet/filter/logdrop-62 -j DROP + inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-44 + inet/filter/limit-134 -j TEE --gateway 10.0.0.1 + inet/filter/limit-134 -j TEE --gateway 10.0.0.2 + inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-44 -m limit --limit 1/second -j LOG + inet/filter/logdrop-44 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-134 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-134 - inet6/filter/limit-134 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-62 - inet6/filter/limit-134 -j ACCEPT - inet6/filter/logdrop-62 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-62 -j DROP + inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-44 + inet6/filter/limit-134 -j TEE --gateway fc00::2 + inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-44 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-44 -j DROP -Filter 136 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"ulog","out":"B"} +Filter 136 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 - inet/filter/limit-135 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-63 - inet/filter/limit-135 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-63 -m limit --limit 1/second -j LOG - inet/filter/logdrop-63 -j DROP + inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-45 + inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-45 -m limit --limit 1/second -j LOG + inet/filter/logdrop-45 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-135 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-135 - inet6/filter/limit-135 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-63 - inet6/filter/logdrop-63 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-63 -j DROP + inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-45 + inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-45 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-45 -j DROP -Filter 137 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"} +Filter 137 {"conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 - inet/filter/limit-136 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-64 - inet/filter/limit-136 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-64 -m limit --limit 1/second -j LOG - inet/filter/logdrop-64 -j DROP + inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-46 + inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-46 -m limit --limit 1/second -j LOG + inet/filter/logdrop-46 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-136 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-136 - inet6/filter/limit-136 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-64 - inet6/filter/limit-136 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-64 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-64 -j DROP + inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-46 + inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-46 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-46 -j DROP -Filter 138 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"out":"B"} +Filter 138 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 - inet/filter/limit-137 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-65 - inet/filter/limit-137 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-65 -m limit --limit 1/second -j LOG - inet/filter/logdrop-65 -j DROP + inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-47 + inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-47 -m limit --limit 1/second -j LOG + inet/filter/logdrop-47 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-137 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-137 - inet6/filter/limit-137 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-65 - inet6/filter/limit-137 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-65 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-65 -j DROP + inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-47 + inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-47 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-47 -j DROP -Filter 139 {"conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} +Filter 139 {"conn-limit":{"addr":"dest","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 - inet/filter/limit-138 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-66 - inet/filter/limit-138 -m limit --limit 1/second -j LOG - inet/filter/limit-138 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-66 -m limit --limit 1/second -j LOG - inet/filter/logdrop-66 -j DROP + inet/filter/limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-48 + inet/filter/limit-138 -m limit --limit 12/minute -j ULOG + inet/filter/limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-48 -m limit --limit 1/second -j LOG + inet/filter/logdrop-48 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-138 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-138 - inet6/filter/limit-138 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-66 - inet6/filter/limit-138 -m limit --limit 1/second -j LOG - inet6/filter/limit-138 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-66 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-66 -j DROP + inet6/filter/limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-48 + inet6/filter/limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-48 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-48 -j DROP -Filter 140 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} +Filter 140 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-139 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-139 - inet/filter/limit-139 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-67 - inet/filter/limit-139 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-67 -m limit --limit 1/second -j LOG - inet/filter/logdrop-67 -j DROP + inet/filter/limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-49 + inet/filter/limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-49 -m limit --limit 1/second -j LOG + inet/filter/logdrop-49 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-139 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-139 - inet6/filter/limit-139 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-67 - inet6/filter/limit-139 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-67 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-67 -j DROP + inet6/filter/limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-49 + inet6/filter/logdrop-49 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-49 -j DROP -Filter 141 {"conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} +Filter 141 {"conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 - inet/filter/limit-140 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-68 - inet/filter/limit-140 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-68 -m limit --limit 1/second -j LOG - inet/filter/logdrop-68 -j DROP + inet/filter/limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-50 + inet/filter/limit-140 -j ACCEPT + inet/filter/logdrop-50 -m limit --limit 1/second -j LOG + inet/filter/logdrop-50 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-140 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-140 - inet6/filter/limit-140 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-68 - inet6/filter/limit-140 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-68 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-68 -j DROP + inet6/filter/limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-50 + inet6/filter/limit-140 -j ACCEPT + inet6/filter/logdrop-50 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-50 -j DROP -Filter 142 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} +Filter 142 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 - inet/filter/limit-141 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-69 - inet/filter/limit-141 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-69 -m limit --limit 1/second -j LOG - inet/filter/logdrop-69 -j DROP + inet/filter/limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-51 + inet/filter/logdrop-51 -m limit --limit 1/second -j LOG + inet/filter/logdrop-51 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-141 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-141 - inet6/filter/limit-141 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-69 - inet6/filter/limit-141 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-69 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-69 -j DROP + inet6/filter/limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-51 + inet6/filter/logdrop-51 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-51 -j DROP -Filter 143 {"conn-limit":{"addr":"dest","name":"C"},"log":"ulog","out":"B"} +Filter 143 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 - inet/filter/limit-142 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-70 - inet/filter/limit-142 -m limit --limit 12/minute -j ULOG - inet/filter/limit-142 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-70 -m limit --limit 1/second -j LOG - inet/filter/logdrop-70 -j DROP + inet/filter/limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-52 + inet/filter/limit-142 -m limit --limit 1/second -j LOG + inet/filter/limit-142 -j ACCEPT + inet/filter/logdrop-52 -m limit --limit 1/second -j LOG + inet/filter/logdrop-52 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-142 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-142 - inet6/filter/limit-142 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-70 - inet6/filter/limit-142 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-70 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-70 -j DROP + inet6/filter/limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-52 + inet6/filter/limit-142 -m limit --limit 1/second -j LOG + inet6/filter/limit-142 -j ACCEPT + inet6/filter/logdrop-52 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-52 -j DROP -Filter 144 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"ulog","out":"B"} +Filter 144 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-143 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-143 - inet/filter/limit-143 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-71 - inet/filter/limit-143 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-71 -m limit --limit 1/second -j LOG - inet/filter/logdrop-71 -j DROP + inet/filter/limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-53 + inet/filter/limit-143 -m limit --limit 1/second -j LOG + inet/filter/logdrop-53 -m limit --limit 1/second -j LOG + inet/filter/logdrop-53 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-143 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-143 - inet6/filter/limit-143 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-71 - inet6/filter/logdrop-71 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-71 -j DROP + inet6/filter/limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-53 + inet6/filter/limit-143 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-53 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-53 -j DROP -Filter 145 {"conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} +Filter 145 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 - inet/filter/limit-144 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-72 + inet/filter/limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-54 + inet/filter/limit-144 -j TEE --gateway 10.0.0.1 + inet/filter/limit-144 -j TEE --gateway 10.0.0.2 inet/filter/limit-144 -j ACCEPT - inet/filter/logdrop-72 -m limit --limit 1/second -j LOG - inet/filter/logdrop-72 -j DROP + inet/filter/logdrop-54 -m limit --limit 1/second -j LOG + inet/filter/logdrop-54 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-144 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-144 - inet6/filter/limit-144 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-72 + inet6/filter/limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-54 + inet6/filter/limit-144 -j TEE --gateway fc00::2 inet6/filter/limit-144 -j ACCEPT - inet6/filter/logdrop-72 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-72 -j DROP + inet6/filter/logdrop-54 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-54 -j DROP -Filter 146 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} +Filter 146 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 - inet/filter/limit-145 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-73 - inet/filter/logdrop-73 -m limit --limit 1/second -j LOG - inet/filter/logdrop-73 -j DROP + inet/filter/limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 + inet/filter/limit-145 -j TEE --gateway 10.0.0.1 + inet/filter/limit-145 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-55 -m limit --limit 1/second -j LOG + inet/filter/logdrop-55 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-145 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-145 - inet6/filter/limit-145 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-73 - inet6/filter/logdrop-73 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-73 -j DROP + inet6/filter/limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-55 + inet6/filter/limit-145 -j TEE --gateway fc00::2 + inet6/filter/logdrop-55 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-55 -j DROP -Filter 147 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} +Filter 147 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 - inet/filter/limit-146 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-74 - inet/filter/limit-146 -m limit --limit 1/second -j LOG + inet/filter/limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 inet/filter/limit-146 -j ACCEPT - inet/filter/logdrop-74 -m limit --limit 1/second -j LOG - inet/filter/logdrop-74 -j DROP + inet/filter/logdrop-56 -m limit --limit 1/second -j LOG + inet/filter/logdrop-56 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-146 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-146 - inet6/filter/limit-146 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-74 - inet6/filter/limit-146 -m limit --limit 1/second -j LOG + inet6/filter/limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-56 inet6/filter/limit-146 -j ACCEPT - inet6/filter/logdrop-74 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-74 -j DROP + inet6/filter/logdrop-56 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-56 -j DROP -Filter 148 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} +Filter 148 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 - inet/filter/limit-147 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-75 - inet/filter/limit-147 -m limit --limit 1/second -j LOG - inet/filter/logdrop-75 -m limit --limit 1/second -j LOG - inet/filter/logdrop-75 -j DROP + inet/filter/limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 + inet/filter/logdrop-57 -m limit --limit 1/second -j LOG + inet/filter/logdrop-57 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-147 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-147 - inet6/filter/limit-147 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-75 - inet6/filter/limit-147 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-75 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-75 -j DROP + inet6/filter/limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-57 + inet6/filter/logdrop-57 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-57 -j DROP -Filter 149 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} +Filter 149 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 - inet/filter/limit-148 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-76 + inet/filter/limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 + inet/filter/limit-148 -m limit --limit 12/minute -j ULOG inet/filter/limit-148 -j ACCEPT - inet/filter/logdrop-76 -m limit --limit 1/second -j LOG - inet/filter/logdrop-76 -j DROP + inet/filter/logdrop-58 -m limit --limit 1/second -j LOG + inet/filter/logdrop-58 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-148 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-148 - inet6/filter/limit-148 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-76 + inet6/filter/limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-58 inet6/filter/limit-148 -j ACCEPT - inet6/filter/logdrop-76 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-76 -j DROP + inet6/filter/logdrop-58 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-58 -j DROP -Filter 150 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} +Filter 150 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 - inet/filter/limit-149 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-77 - inet/filter/logdrop-77 -m limit --limit 1/second -j LOG - inet/filter/logdrop-77 -j DROP + inet/filter/limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 + inet/filter/limit-149 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-59 -m limit --limit 1/second -j LOG + inet/filter/logdrop-59 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-149 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-149 - inet6/filter/limit-149 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-77 - inet6/filter/logdrop-77 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-77 -j DROP + inet6/filter/limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-59 + inet6/filter/logdrop-59 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-59 -j DROP -Filter 151 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"ulog","out":"B"} +Filter 151 {"conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 - inet/filter/limit-150 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-78 - inet/filter/limit-150 -m limit --limit 12/minute -j ULOG - inet/filter/limit-150 -j ACCEPT - inet/filter/logdrop-78 -m limit --limit 1/second -j LOG - inet/filter/logdrop-78 -j DROP + inet/filter/limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-60 + inet/filter/limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-60 -m limit --limit 1/second -j LOG + inet/filter/logdrop-60 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-150 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-150 - inet6/filter/limit-150 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-78 - inet6/filter/limit-150 -j ACCEPT - inet6/filter/logdrop-78 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-78 -j DROP + inet6/filter/limit-150 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-60 + inet6/filter/limit-150 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-60 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-60 -j DROP -Filter 152 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"ulog","out":"B"} +Filter 152 {"action":"pass","conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-151 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-151 - inet/filter/limit-151 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-79 - inet/filter/limit-151 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-79 -m limit --limit 1/second -j LOG - inet/filter/logdrop-79 -j DROP + inet/filter/limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-61 + inet/filter/limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-61 -m limit --limit 1/second -j LOG + inet/filter/logdrop-61 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-151 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-151 - inet6/filter/limit-151 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-79 - inet6/filter/logdrop-79 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-79 -j DROP + inet6/filter/limit-151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-61 + inet6/filter/limit-151 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-61 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-61 -j DROP -Filter 153 {"conn-limit":{"log":"none"},"out":"B"} +Filter 153 {"conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 - inet/filter/limit-152 -m recent --name limit-152 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-152 -m recent --name limit-152 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-62 + inet/filter/limit-152 -m limit --limit 1/second -j LOG + inet/filter/limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-62 -m limit --limit 1/second -j LOG + inet/filter/logdrop-62 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-152 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-152 - inet6/filter/limit-152 -m recent --name limit-152 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-152 -m recent --name limit-152 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-62 + inet6/filter/limit-152 -m limit --limit 1/second -j LOG + inet6/filter/limit-152 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-62 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-62 -j DROP -Filter 154 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} +Filter 154 {"action":"pass","conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 - inet/filter/limit-153 -m recent --name limit-153 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-153 -m recent --name limit-153 --rsource --mask 255.255.255.255 --set + inet/filter/limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-63 + inet/filter/limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-63 -m limit --limit 1/second -j LOG + inet/filter/logdrop-63 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-153 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-153 - inet6/filter/limit-153 -m recent --name limit-153 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-153 -m recent --name limit-153 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-63 + inet6/filter/limit-153 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-63 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-63 -j DROP -Filter 155 {"conn-limit":{"log":"none"},"log":true,"out":"B"} +Filter 155 {"conn-limit":{"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 - inet/filter/limit-154 -m recent --name limit-154 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-154 -m limit --limit 1/second -j LOG - inet/filter/limit-154 -m recent --name limit-154 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-64 + inet/filter/limit-154 -j TEE --gateway 10.0.0.1 + inet/filter/limit-154 -j TEE --gateway 10.0.0.2 + inet/filter/limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-64 -m limit --limit 1/second -j LOG + inet/filter/logdrop-64 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-154 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-154 - inet6/filter/limit-154 -m recent --name limit-154 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-154 -m limit --limit 1/second -j LOG - inet6/filter/limit-154 -m recent --name limit-154 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-64 + inet6/filter/limit-154 -j TEE --gateway fc00::2 + inet6/filter/limit-154 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-64 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-64 -j DROP -Filter 156 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} +Filter 156 {"action":"pass","conn-limit":{"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-155 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-155 - inet/filter/limit-155 -m recent --name limit-155 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-155 -m recent --name limit-155 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-65 + inet/filter/limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-65 -m limit --limit 1/second -j LOG + inet/filter/logdrop-65 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-155 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-155 - inet6/filter/limit-155 -m recent --name limit-155 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-155 -m recent --name limit-155 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-65 + inet6/filter/limit-155 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-65 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-65 -j DROP -Filter 157 {"conn-limit":{"log":"none"},"log":"none","out":"B"} +Filter 157 {"conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 - inet/filter/limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-66 + inet/filter/limit-156 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-66 -m limit --limit 1/second -j LOG + inet/filter/logdrop-66 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-156 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-156 - inet6/filter/limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-66 + inet6/filter/limit-156 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-66 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-66 -j DROP -Filter 158 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} +Filter 158 {"action":"pass","conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 - inet/filter/limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --set + inet/filter/limit-157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-67 + inet/filter/limit-157 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-67 -m limit --limit 1/second -j LOG + inet/filter/logdrop-67 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-157 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-157 - inet6/filter/limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-67 + inet6/filter/limit-157 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-67 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-67 -j DROP -Filter 159 {"conn-limit":{"log":"none"},"log":"ulog","out":"B"} +Filter 159 {"conn-limit":{"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 - inet/filter/limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-68 inet/filter/limit-158 -m limit --limit 12/minute -j ULOG - inet/filter/limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-68 -m limit --limit 1/second -j LOG + inet/filter/logdrop-68 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-158 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-158 - inet6/filter/limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-68 + inet6/filter/limit-158 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-68 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-68 -j DROP -Filter 160 {"action":"pass","conn-limit":{"log":"none"},"log":"ulog","out":"B"} +Filter 160 {"action":"pass","conn-limit":{"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 - inet/filter/limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-159 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-69 + inet/filter/limit-159 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-69 -m limit --limit 1/second -j LOG + inet/filter/logdrop-69 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-159 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-159 - inet6/filter/limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-159 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-69 + inet6/filter/logdrop-69 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-69 -j DROP -Filter 161 {"conn-limit":{"log":"none","name":"A"},"out":"B"} +Filter 161 {"conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 - inet/filter/limit-160 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-160 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-160 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-70 + inet/filter/limit-160 -j ACCEPT + inet/filter/logdrop-70 -m limit --limit 1/second -j LOG + inet/filter/logdrop-70 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-160 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-160 - inet6/filter/limit-160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-160 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-70 + inet6/filter/limit-160 -j ACCEPT + inet6/filter/logdrop-70 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-70 -j DROP -Filter 162 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} +Filter 162 {"action":"pass","conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 - inet/filter/limit-161 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-161 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-161 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-71 + inet/filter/logdrop-71 -m limit --limit 1/second -j LOG + inet/filter/logdrop-71 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-161 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-161 - inet6/filter/limit-161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-161 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-71 + inet6/filter/logdrop-71 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-71 -j DROP -Filter 163 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +Filter 163 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 - inet/filter/limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-72 inet/filter/limit-162 -m limit --limit 1/second -j LOG - inet/filter/limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-162 -j ACCEPT + inet/filter/logdrop-72 -m limit --limit 1/second -j LOG + inet/filter/logdrop-72 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-162 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-162 - inet6/filter/limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-72 inet6/filter/limit-162 -m limit --limit 1/second -j LOG - inet6/filter/limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-162 -j ACCEPT + inet6/filter/logdrop-72 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-72 -j DROP -Filter 164 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +Filter 164 {"action":"pass","conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 - inet/filter/limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-73 + inet/filter/limit-163 -m limit --limit 1/second -j LOG + inet/filter/logdrop-73 -m limit --limit 1/second -j LOG + inet/filter/logdrop-73 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-163 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-163 - inet6/filter/limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-73 + inet6/filter/limit-163 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-73 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-73 -j DROP -Filter 165 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +Filter 165 {"conn-limit":{"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 - inet/filter/limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-164 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-74 + inet/filter/limit-164 -j TEE --gateway 10.0.0.1 + inet/filter/limit-164 -j TEE --gateway 10.0.0.2 + inet/filter/limit-164 -j ACCEPT + inet/filter/logdrop-74 -m limit --limit 1/second -j LOG + inet/filter/logdrop-74 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-164 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-164 - inet6/filter/limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-164 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-74 + inet6/filter/limit-164 -j TEE --gateway fc00::2 + inet6/filter/limit-164 -j ACCEPT + inet6/filter/logdrop-74 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-74 -j DROP -Filter 166 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +Filter 166 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 - inet/filter/limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-75 + inet/filter/limit-165 -j TEE --gateway 10.0.0.1 + inet/filter/limit-165 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-75 -m limit --limit 1/second -j LOG + inet/filter/logdrop-75 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-165 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-165 - inet6/filter/limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-75 + inet6/filter/limit-165 -j TEE --gateway fc00::2 + inet6/filter/logdrop-75 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-75 -j DROP -Filter 167 {"conn-limit":{"log":"none","name":"A"},"log":"ulog","out":"B"} +Filter 167 {"conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 - inet/filter/limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-166 -m limit --limit 12/minute -j ULOG - inet/filter/limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-76 + inet/filter/limit-166 -j ACCEPT + inet/filter/logdrop-76 -m limit --limit 1/second -j LOG + inet/filter/logdrop-76 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-166 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-166 - inet6/filter/limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-76 + inet6/filter/limit-166 -j ACCEPT + inet6/filter/logdrop-76 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-76 -j DROP -Filter 168 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"ulog","out":"B"} +Filter 168 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 - inet/filter/limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-167 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-77 + inet/filter/logdrop-77 -m limit --limit 1/second -j LOG + inet/filter/logdrop-77 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-167 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-167 - inet6/filter/limit-167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-167 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-77 + inet6/filter/logdrop-77 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-77 -j DROP -Filter 169 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +Filter 169 {"conn-limit":{"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 - inet/filter/limit-168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-168 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-78 + inet/filter/limit-168 -m limit --limit 12/minute -j ULOG inet/filter/limit-168 -j ACCEPT + inet/filter/logdrop-78 -m limit --limit 1/second -j LOG + inet/filter/logdrop-78 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-168 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-168 - inet6/filter/limit-168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-168 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-78 inet6/filter/limit-168 -j ACCEPT + inet6/filter/logdrop-78 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-78 -j DROP -Filter 170 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +Filter 170 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 - inet/filter/limit-169 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-169 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-79 + inet/filter/limit-169 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-79 -m limit --limit 1/second -j LOG + inet/filter/logdrop-79 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-169 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-169 - inet6/filter/limit-169 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-169 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-79 + inet6/filter/logdrop-79 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-79 -j DROP -Filter 171 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 171 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 - inet/filter/limit-170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-170 -m limit --limit 1/second -j LOG - inet/filter/limit-170 -j ACCEPT + inet/filter/limit-170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-80 + inet/filter/limit-170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-80 -m limit --limit 1/second -j LOG + inet/filter/logdrop-80 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-170 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-170 - inet6/filter/limit-170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-170 -m limit --limit 1/second -j LOG - inet6/filter/limit-170 -j ACCEPT + inet6/filter/limit-170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-80 + inet6/filter/limit-170 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-80 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-80 -j DROP -Filter 172 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 172 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 - inet/filter/limit-171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-171 -m limit --limit 1/second -j LOG + inet/filter/limit-171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-81 + inet/filter/limit-171 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-81 -m limit --limit 1/second -j LOG + inet/filter/logdrop-81 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-171 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-171 - inet6/filter/limit-171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-171 -m limit --limit 1/second -j LOG + inet6/filter/limit-171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-81 + inet6/filter/limit-171 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-81 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-81 -j DROP -Filter 173 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 173 {"conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 - inet/filter/limit-172 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-172 -j ACCEPT + inet/filter/limit-172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-82 + inet/filter/limit-172 -m limit --limit 1/second -j LOG + inet/filter/limit-172 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-82 -m limit --limit 1/second -j LOG + inet/filter/logdrop-82 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-172 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-172 - inet6/filter/limit-172 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-172 -j ACCEPT + inet6/filter/limit-172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-82 + inet6/filter/limit-172 -m limit --limit 1/second -j LOG + inet6/filter/limit-172 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-82 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-82 -j DROP -Filter 174 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 174 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 - inet/filter/limit-173 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-83 + inet/filter/limit-173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-83 -m limit --limit 1/second -j LOG + inet/filter/logdrop-83 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-173 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-173 - inet6/filter/limit-173 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-83 + inet6/filter/limit-173 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-83 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-83 -j DROP -Filter 175 {"conn-limit":{"log":"none","name":"A","update":false},"log":"ulog","out":"B"} +Filter 175 {"conn-limit":{"addr":"dest","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 - inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-174 -m limit --limit 12/minute -j ULOG - inet/filter/limit-174 -j ACCEPT + inet/filter/limit-174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-84 + inet/filter/limit-174 -j TEE --gateway 10.0.0.1 + inet/filter/limit-174 -j TEE --gateway 10.0.0.2 + inet/filter/limit-174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-84 -m limit --limit 1/second -j LOG + inet/filter/logdrop-84 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-174 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-174 - inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-174 -j ACCEPT + inet6/filter/limit-174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-84 + inet6/filter/limit-174 -j TEE --gateway fc00::2 + inet6/filter/limit-174 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-84 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-84 -j DROP -Filter 176 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"ulog","out":"B"} +Filter 176 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 - inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-175 -m limit --limit 12/minute -j ULOG + inet/filter/limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-85 + inet/filter/limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-85 -m limit --limit 1/second -j LOG + inet/filter/logdrop-85 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-175 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-175 - inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-175 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-85 + inet6/filter/limit-175 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-85 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-85 -j DROP -Filter 177 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +Filter 177 {"conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 - inet/filter/limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-86 + inet/filter/limit-176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-86 -m limit --limit 1/second -j LOG + inet/filter/logdrop-86 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-176 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-176 - inet6/filter/limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-86 + inet6/filter/limit-176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-86 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-86 -j DROP -Filter 178 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +Filter 178 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 - inet/filter/limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-87 + inet/filter/limit-177 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-87 -m limit --limit 1/second -j LOG + inet/filter/logdrop-87 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-177 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-177 - inet6/filter/limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-87 + inet6/filter/limit-177 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-87 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-87 -j DROP -Filter 179 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +Filter 179 {"conn-limit":{"addr":"dest","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 - inet/filter/limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-178 -m limit --limit 1/second -j LOG - inet/filter/limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-88 + inet/filter/limit-178 -m limit --limit 12/minute -j ULOG + inet/filter/limit-178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-88 -m limit --limit 1/second -j LOG + inet/filter/logdrop-88 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-178 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-178 - inet6/filter/limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-178 -m limit --limit 1/second -j LOG - inet6/filter/limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-88 + inet6/filter/limit-178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-88 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-88 -j DROP -Filter 180 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +Filter 180 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 - inet/filter/limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-89 + inet/filter/limit-179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-89 -m limit --limit 1/second -j LOG + inet/filter/logdrop-89 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-179 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-179 - inet6/filter/limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-89 + inet6/filter/logdrop-89 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-89 -j DROP -Filter 181 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +Filter 181 {"conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 - inet/filter/limit-180 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-180 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-180 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-90 + inet/filter/limit-180 -j ACCEPT + inet/filter/logdrop-90 -m limit --limit 1/second -j LOG + inet/filter/logdrop-90 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-180 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-180 - inet6/filter/limit-180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-180 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-90 + inet6/filter/limit-180 -j ACCEPT + inet6/filter/logdrop-90 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-90 -j DROP -Filter 182 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +Filter 182 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-181 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-181 - inet/filter/limit-181 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-181 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-181 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-91 + inet/filter/logdrop-91 -m limit --limit 1/second -j LOG + inet/filter/logdrop-91 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-181 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-181 - inet6/filter/limit-181 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-181 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-181 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-91 + inet6/filter/logdrop-91 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-91 -j DROP -Filter 183 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog","out":"B"} +Filter 183 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 - inet/filter/limit-182 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-182 -m limit --limit 12/minute -j ULOG - inet/filter/limit-182 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-92 + inet/filter/limit-182 -m limit --limit 1/second -j LOG + inet/filter/limit-182 -j ACCEPT + inet/filter/logdrop-92 -m limit --limit 1/second -j LOG + inet/filter/logdrop-92 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-182 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-182 - inet6/filter/limit-182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-92 + inet6/filter/limit-182 -m limit --limit 1/second -j LOG + inet6/filter/limit-182 -j ACCEPT + inet6/filter/logdrop-92 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-92 -j DROP -Filter 184 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog","out":"B"} +Filter 184 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 - inet/filter/limit-183 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-183 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-183 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-93 + inet/filter/limit-183 -m limit --limit 1/second -j LOG + inet/filter/logdrop-93 -m limit --limit 1/second -j LOG + inet/filter/logdrop-93 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-183 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-183 - inet6/filter/limit-183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-183 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-93 + inet6/filter/limit-183 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-93 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-93 -j DROP -Filter 185 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +Filter 185 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 - inet/filter/limit-184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-94 + inet/filter/limit-184 -j TEE --gateway 10.0.0.1 + inet/filter/limit-184 -j TEE --gateway 10.0.0.2 inet/filter/limit-184 -j ACCEPT + inet/filter/logdrop-94 -m limit --limit 1/second -j LOG + inet/filter/logdrop-94 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-184 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-184 - inet6/filter/limit-184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-94 + inet6/filter/limit-184 -j TEE --gateway fc00::2 inet6/filter/limit-184 -j ACCEPT + inet6/filter/logdrop-94 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-94 -j DROP -Filter 186 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +Filter 186 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-185 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-185 - inet/filter/limit-185 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-95 + inet/filter/limit-185 -j TEE --gateway 10.0.0.1 + inet/filter/limit-185 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-95 -m limit --limit 1/second -j LOG + inet/filter/logdrop-95 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-185 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-185 - inet6/filter/limit-185 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-95 + inet6/filter/limit-185 -j TEE --gateway fc00::2 + inet6/filter/logdrop-95 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-95 -j DROP -Filter 187 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 187 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 - inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-186 -m limit --limit 1/second -j LOG + inet/filter/limit-186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-96 inet/filter/limit-186 -j ACCEPT + inet/filter/logdrop-96 -m limit --limit 1/second -j LOG + inet/filter/logdrop-96 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-186 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-186 - inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-186 -m limit --limit 1/second -j LOG + inet6/filter/limit-186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-96 inet6/filter/limit-186 -j ACCEPT + inet6/filter/logdrop-96 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-96 -j DROP -Filter 188 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 188 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 - inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-187 -m limit --limit 1/second -j LOG + inet/filter/limit-187 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 + inet/filter/logdrop-97 -m limit --limit 1/second -j LOG + inet/filter/logdrop-97 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-187 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-187 - inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-187 -m limit --limit 1/second -j LOG + inet6/filter/limit-187 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-97 + inet6/filter/logdrop-97 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-97 -j DROP -Filter 189 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 189 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 - inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-188 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 + inet/filter/limit-188 -m limit --limit 12/minute -j ULOG inet/filter/limit-188 -j ACCEPT + inet/filter/logdrop-98 -m limit --limit 1/second -j LOG + inet/filter/logdrop-98 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-188 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-188 - inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-188 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-98 inet6/filter/limit-188 -j ACCEPT + inet6/filter/logdrop-98 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-98 -j DROP -Filter 190 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 190 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 - inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-189 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 + inet/filter/limit-189 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-99 -m limit --limit 1/second -j LOG + inet/filter/logdrop-99 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-189 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-189 - inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-189 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-99 + inet6/filter/logdrop-99 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-99 -j DROP -Filter 191 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog","out":"B"} +Filter 191 {"conn-limit":{"log":"mirror"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 - inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-190 -m limit --limit 12/minute -j ULOG - inet/filter/limit-190 -j ACCEPT + inet/filter/limit-190 -m recent --name limit-190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-100 + inet/filter/limit-190 -m recent --name limit-190 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-100 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-100 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-100 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-190 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-190 - inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-190 -j ACCEPT + inet6/filter/limit-190 -m recent --name limit-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-100 + inet6/filter/limit-190 -m recent --name limit-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-100 -j TEE --gateway fc00::2 + inet6/filter/logdrop-100 -j DROP -Filter 192 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog","out":"B"} +Filter 192 {"action":"pass","conn-limit":{"log":"mirror"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 - inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-191 -m limit --limit 12/minute -j ULOG + inet/filter/limit-191 -m recent --name limit-191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-101 + inet/filter/limit-191 -m recent --name limit-191 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-101 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-101 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-101 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-191 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-191 - inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-191 -m recent --name limit-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-101 + inet6/filter/limit-191 -m recent --name limit-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-101 -j TEE --gateway fc00::2 + inet6/filter/logdrop-101 -j DROP -Filter 193 {"conn-limit":{"log":"none","name":"C"},"out":"B"} +Filter 193 {"conn-limit":{"log":"mirror"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 - inet/filter/limit-192 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-192 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-192 -m recent --name limit-192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-102 + inet/filter/limit-192 -m limit --limit 1/second -j LOG + inet/filter/limit-192 -m recent --name limit-192 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-102 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-102 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-102 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-192 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-192 - inet6/filter/limit-192 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-192 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-192 -m recent --name limit-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-102 + inet6/filter/limit-192 -m limit --limit 1/second -j LOG + inet6/filter/limit-192 -m recent --name limit-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-102 -j TEE --gateway fc00::2 + inet6/filter/logdrop-102 -j DROP -Filter 194 {"action":"pass","conn-limit":{"log":"none","name":"C"},"out":"B"} +Filter 194 {"action":"pass","conn-limit":{"log":"mirror"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 - inet/filter/limit-193 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-193 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-193 -m recent --name limit-193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-103 + inet/filter/limit-193 -m recent --name limit-193 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-103 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-103 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-103 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-193 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-193 - inet6/filter/limit-193 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-193 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-193 -m recent --name limit-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-103 + inet6/filter/limit-193 -m recent --name limit-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-103 -j TEE --gateway fc00::2 + inet6/filter/logdrop-103 -j DROP -Filter 195 {"conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} +Filter 195 {"conn-limit":{"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 - inet/filter/limit-194 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-194 -m limit --limit 1/second -j LOG - inet/filter/limit-194 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-194 -m recent --name limit-194 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-104 + inet/filter/limit-194 -j TEE --gateway 10.0.0.1 + inet/filter/limit-194 -j TEE --gateway 10.0.0.2 + inet/filter/limit-194 -m recent --name limit-194 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-104 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-104 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-104 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-194 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-194 - inet6/filter/limit-194 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-194 -m limit --limit 1/second -j LOG - inet6/filter/limit-194 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-104 + inet6/filter/limit-194 -j TEE --gateway fc00::2 + inet6/filter/limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-104 -j TEE --gateway fc00::2 + inet6/filter/logdrop-104 -j DROP -Filter 196 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} +Filter 196 {"action":"pass","conn-limit":{"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 - inet/filter/limit-195 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-195 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-105 + inet/filter/limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-105 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-105 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-105 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-195 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-195 - inet6/filter/limit-195 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-195 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-105 + inet6/filter/limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-105 -j TEE --gateway fc00::2 + inet6/filter/logdrop-105 -j DROP -Filter 197 {"conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} +Filter 197 {"conn-limit":{"log":"mirror"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 - inet/filter/limit-196 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-196 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-196 -m recent --name limit-196 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-106 + inet/filter/limit-196 -m recent --name limit-196 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-106 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-106 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-106 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-196 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-196 - inet6/filter/limit-196 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-196 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-106 + inet6/filter/limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-106 -j TEE --gateway fc00::2 + inet6/filter/logdrop-106 -j DROP -Filter 198 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} +Filter 198 {"action":"pass","conn-limit":{"log":"mirror"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 - inet/filter/limit-197 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-197 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-197 -m recent --name limit-197 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-107 + inet/filter/limit-197 -m recent --name limit-197 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-107 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-107 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-107 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-197 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-197 - inet6/filter/limit-197 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-197 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-107 + inet6/filter/limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-107 -j TEE --gateway fc00::2 + inet6/filter/logdrop-107 -j DROP -Filter 199 {"conn-limit":{"log":"none","name":"C"},"log":"ulog","out":"B"} +Filter 199 {"conn-limit":{"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 - inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-198 -m recent --name limit-198 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-108 inet/filter/limit-198 -m limit --limit 12/minute -j ULOG - inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-198 -m recent --name limit-198 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-108 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-108 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-108 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-198 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-198 - inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-108 + inet6/filter/limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-108 -j TEE --gateway fc00::2 + inet6/filter/logdrop-108 -j DROP -Filter 200 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"ulog","out":"B"} +Filter 200 {"action":"pass","conn-limit":{"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 - inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-199 -m recent --name limit-199 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-109 + inet/filter/limit-199 -m recent --name limit-199 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-109 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-109 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-109 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-199 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-199 - inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-199 -m recent --name limit-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-109 + inet6/filter/logdrop-109 -j TEE --gateway fc00::2 + inet6/filter/logdrop-109 -j DROP -Filter 201 {"conn-limit":{"log":"none","name":"C","update":false},"out":"B"} +Filter 201 {"conn-limit":{"log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 - inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-200 -j ACCEPT + inet/filter/limit-200 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-110 + inet/filter/limit-200 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-110 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-110 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-110 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-200 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-200 - inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-200 -j ACCEPT + inet6/filter/limit-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-110 + inet6/filter/limit-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-110 -j TEE --gateway fc00::2 + inet6/filter/logdrop-110 -j DROP -Filter 202 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"out":"B"} +Filter 202 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 - inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-201 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-111 + inet/filter/limit-201 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-111 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-111 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-111 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-201 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-201 - inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-111 + inet6/filter/limit-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-111 -j TEE --gateway fc00::2 + inet6/filter/logdrop-111 -j DROP -Filter 203 {"conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 203 {"conn-limit":{"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 - inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-202 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-112 inet/filter/limit-202 -m limit --limit 1/second -j LOG - inet/filter/limit-202 -j ACCEPT + inet/filter/limit-202 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-112 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-112 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-112 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-202 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-202 - inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-112 inet6/filter/limit-202 -m limit --limit 1/second -j LOG - inet6/filter/limit-202 -j ACCEPT + inet6/filter/limit-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-112 -j TEE --gateway fc00::2 + inet6/filter/logdrop-112 -j DROP -Filter 204 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 204 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 - inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-203 -m limit --limit 1/second -j LOG + inet/filter/limit-203 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-113 + inet/filter/limit-203 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-113 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-113 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-113 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-203 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-203 - inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-203 -m limit --limit 1/second -j LOG + inet6/filter/limit-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-113 + inet6/filter/limit-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-113 -j TEE --gateway fc00::2 + inet6/filter/logdrop-113 -j DROP -Filter 205 {"conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 205 {"conn-limit":{"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 - inet/filter/limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-204 -j ACCEPT + inet/filter/limit-204 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-114 + inet/filter/limit-204 -j TEE --gateway 10.0.0.1 + inet/filter/limit-204 -j TEE --gateway 10.0.0.2 + inet/filter/limit-204 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-114 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-114 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-114 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-204 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-204 - inet6/filter/limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-204 -j ACCEPT + inet6/filter/limit-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-114 + inet6/filter/limit-204 -j TEE --gateway fc00::2 + inet6/filter/limit-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-114 -j TEE --gateway fc00::2 + inet6/filter/logdrop-114 -j DROP -Filter 206 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 206 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 - inet/filter/limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 + inet/filter/limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-115 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-115 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-115 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-205 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-205 - inet6/filter/limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 + inet6/filter/limit-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-115 -j TEE --gateway fc00::2 + inet6/filter/logdrop-115 -j DROP -Filter 207 {"conn-limit":{"log":"none","name":"C","update":false},"log":"ulog","out":"B"} +Filter 207 {"conn-limit":{"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 - inet/filter/limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-206 -m limit --limit 12/minute -j ULOG - inet/filter/limit-206 -j ACCEPT + inet/filter/limit-206 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 + inet/filter/limit-206 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-116 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-116 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-116 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-206 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-206 - inet6/filter/limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-206 -j ACCEPT + inet6/filter/limit-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 + inet6/filter/limit-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-116 -j TEE --gateway fc00::2 + inet6/filter/logdrop-116 -j DROP -Filter 208 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"ulog","out":"B"} +Filter 208 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 - inet/filter/limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-207 -m limit --limit 12/minute -j ULOG + inet/filter/limit-207 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 + inet/filter/limit-207 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-117 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-117 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-117 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-207 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-207 - inet6/filter/limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 + inet6/filter/limit-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-117 -j TEE --gateway fc00::2 + inet6/filter/logdrop-117 -j DROP -Filter 209 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} +Filter 209 {"conn-limit":{"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 - inet/filter/limit-208 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-208 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-208 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 + inet/filter/limit-208 -m limit --limit 12/minute -j ULOG + inet/filter/limit-208 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-118 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-118 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-118 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-208 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-208 - inet6/filter/limit-208 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-208 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 + inet6/filter/limit-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-118 -j TEE --gateway fc00::2 + inet6/filter/logdrop-118 -j DROP -Filter 210 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} +Filter 210 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 - inet/filter/limit-209 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-209 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-209 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 + inet/filter/limit-209 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-119 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-119 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-119 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-209 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-209 - inet6/filter/limit-209 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-209 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-209 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 + inet6/filter/logdrop-119 -j TEE --gateway fc00::2 + inet6/filter/logdrop-119 -j DROP -Filter 211 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} +Filter 211 {"conn-limit":{"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 - inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-210 -m limit --limit 1/second -j LOG - inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-210 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-120 + inet/filter/limit-210 -j ACCEPT + inet/filter/logdrop-120 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-120 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-120 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-210 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-210 - inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-210 -m limit --limit 1/second -j LOG - inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-210 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-120 + inet6/filter/limit-210 -j ACCEPT + inet6/filter/logdrop-120 -j TEE --gateway fc00::2 + inet6/filter/logdrop-120 -j DROP -Filter 212 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} +Filter 212 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 - inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-211 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-121 + inet/filter/logdrop-121 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-121 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-121 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-211 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-211 - inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-211 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-121 + inet6/filter/logdrop-121 -j TEE --gateway fc00::2 + inet6/filter/logdrop-121 -j DROP -Filter 213 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} +Filter 213 {"conn-limit":{"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 - inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-212 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-122 + inet/filter/limit-212 -m limit --limit 1/second -j LOG + inet/filter/limit-212 -j ACCEPT + inet/filter/logdrop-122 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-122 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-122 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-212 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-212 - inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-212 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-122 + inet6/filter/limit-212 -m limit --limit 1/second -j LOG + inet6/filter/limit-212 -j ACCEPT + inet6/filter/logdrop-122 -j TEE --gateway fc00::2 + inet6/filter/logdrop-122 -j DROP -Filter 214 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} +Filter 214 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 - inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-213 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-123 + inet/filter/limit-213 -m limit --limit 1/second -j LOG + inet/filter/logdrop-123 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-123 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-123 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-213 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-213 - inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-213 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-123 + inet6/filter/limit-213 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-123 -j TEE --gateway fc00::2 + inet6/filter/logdrop-123 -j DROP -Filter 215 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog","out":"B"} +Filter 215 {"conn-limit":{"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 - inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-214 -m limit --limit 12/minute -j ULOG - inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-214 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-124 + inet/filter/limit-214 -j TEE --gateway 10.0.0.1 + inet/filter/limit-214 -j TEE --gateway 10.0.0.2 + inet/filter/limit-214 -j ACCEPT + inet/filter/logdrop-124 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-124 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-124 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-214 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-214 - inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-214 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-124 + inet6/filter/limit-214 -j TEE --gateway fc00::2 + inet6/filter/limit-214 -j ACCEPT + inet6/filter/logdrop-124 -j TEE --gateway fc00::2 + inet6/filter/logdrop-124 -j DROP -Filter 216 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog","out":"B"} +Filter 216 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 - inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-215 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-125 + inet/filter/limit-215 -j TEE --gateway 10.0.0.1 + inet/filter/limit-215 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-125 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-125 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-125 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-215 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-215 - inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-215 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-125 + inet6/filter/limit-215 -j TEE --gateway fc00::2 + inet6/filter/logdrop-125 -j TEE --gateway fc00::2 + inet6/filter/logdrop-125 -j DROP -Filter 217 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} +Filter 217 {"conn-limit":{"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 - inet/filter/limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-216 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-126 inet/filter/limit-216 -j ACCEPT + inet/filter/logdrop-126 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-126 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-126 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-216 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-216 - inet6/filter/limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-216 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-126 inet6/filter/limit-216 -j ACCEPT + inet6/filter/logdrop-126 -j TEE --gateway fc00::2 + inet6/filter/logdrop-126 -j DROP -Filter 218 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} +Filter 218 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-217 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-217 - inet/filter/limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-217 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-127 + inet/filter/logdrop-127 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-127 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-127 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-217 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-217 - inet6/filter/limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-217 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-127 + inet6/filter/logdrop-127 -j TEE --gateway fc00::2 + inet6/filter/logdrop-127 -j DROP -Filter 219 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 219 {"conn-limit":{"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 - inet/filter/limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-218 -m limit --limit 1/second -j LOG + inet/filter/limit-218 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-128 + inet/filter/limit-218 -m limit --limit 12/minute -j ULOG inet/filter/limit-218 -j ACCEPT + inet/filter/logdrop-128 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-128 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-128 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-218 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-218 - inet6/filter/limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-218 -m limit --limit 1/second -j LOG + inet6/filter/limit-218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-128 inet6/filter/limit-218 -j ACCEPT + inet6/filter/logdrop-128 -j TEE --gateway fc00::2 + inet6/filter/logdrop-128 -j DROP -Filter 220 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 220 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 - inet/filter/limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-219 -m limit --limit 1/second -j LOG + inet/filter/limit-219 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-129 + inet/filter/limit-219 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-129 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-129 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-129 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-219 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-219 - inet6/filter/limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-219 -m limit --limit 1/second -j LOG + inet6/filter/limit-219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-129 + inet6/filter/logdrop-129 -j TEE --gateway fc00::2 + inet6/filter/logdrop-129 -j DROP -Filter 221 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 221 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 - inet/filter/limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-220 -j ACCEPT + inet/filter/limit-220 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 + inet/filter/limit-220 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-130 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-130 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-130 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-220 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-220 - inet6/filter/limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-220 -j ACCEPT + inet6/filter/limit-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 + inet6/filter/limit-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-130 -j TEE --gateway fc00::2 + inet6/filter/logdrop-130 -j DROP -Filter 222 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 222 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-221 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-221 - inet/filter/limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-221 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 + inet/filter/limit-221 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-131 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-131 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-131 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-221 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-221 - inet6/filter/limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 + inet6/filter/limit-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-131 -j TEE --gateway fc00::2 + inet6/filter/logdrop-131 -j DROP -Filter 223 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog","out":"B"} +Filter 223 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 - inet/filter/limit-222 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-222 -m limit --limit 12/minute -j ULOG - inet/filter/limit-222 -j ACCEPT + inet/filter/limit-222 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 + inet/filter/limit-222 -m limit --limit 1/second -j LOG + inet/filter/limit-222 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-132 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-132 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-132 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-222 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-222 - inet6/filter/limit-222 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-222 -j ACCEPT + inet6/filter/limit-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 + inet6/filter/limit-222 -m limit --limit 1/second -j LOG + inet6/filter/limit-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-132 -j TEE --gateway fc00::2 + inet6/filter/logdrop-132 -j DROP -Filter 224 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog","out":"B"} +Filter 224 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 - inet/filter/limit-223 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-223 -m limit --limit 12/minute -j ULOG + inet/filter/limit-223 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-133 + inet/filter/limit-223 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-133 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-133 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-133 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-223 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-223 - inet6/filter/limit-223 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-133 + inet6/filter/limit-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-133 -j TEE --gateway fc00::2 + inet6/filter/logdrop-133 -j DROP -Filter 225 {"conn-limit":{"log":"ulog"},"out":"B"} +Filter 225 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 - inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-80 - inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-80 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-80 -j DROP + inet/filter/limit-224 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-134 + inet/filter/limit-224 -j TEE --gateway 10.0.0.1 + inet/filter/limit-224 -j TEE --gateway 10.0.0.2 + inet/filter/limit-224 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-134 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-134 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-134 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-224 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-224 - inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-80 - inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-80 -j DROP + inet6/filter/limit-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-134 + inet6/filter/limit-224 -j TEE --gateway fc00::2 + inet6/filter/limit-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-134 -j TEE --gateway fc00::2 + inet6/filter/logdrop-134 -j DROP -Filter 226 {"action":"pass","conn-limit":{"log":"ulog"},"out":"B"} +Filter 226 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 - inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-81 - inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-81 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-81 -j DROP + inet/filter/limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-135 + inet/filter/limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-135 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-135 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-135 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-225 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-225 - inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-81 - inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-81 -j DROP + inet6/filter/limit-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-135 + inet6/filter/limit-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-135 -j TEE --gateway fc00::2 + inet6/filter/logdrop-135 -j DROP -Filter 227 {"conn-limit":{"log":"ulog"},"log":true,"out":"B"} +Filter 227 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 - inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-82 - inet/filter/limit-226 -m limit --limit 1/second -j LOG - inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-82 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-82 -j DROP + inet/filter/limit-226 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-136 + inet/filter/limit-226 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-136 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-136 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-136 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-226 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-226 - inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-82 - inet6/filter/limit-226 -m limit --limit 1/second -j LOG - inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-82 -j DROP + inet6/filter/limit-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-136 + inet6/filter/limit-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-136 -j TEE --gateway fc00::2 + inet6/filter/logdrop-136 -j DROP -Filter 228 {"action":"pass","conn-limit":{"log":"ulog"},"log":true,"out":"B"} +Filter 228 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 - inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-83 - inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-83 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-83 -j DROP + inet/filter/limit-227 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-137 + inet/filter/limit-227 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-137 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-137 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-137 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-227 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-227 - inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-83 - inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-83 -j DROP + inet6/filter/limit-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-137 + inet6/filter/limit-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-137 -j TEE --gateway fc00::2 + inet6/filter/logdrop-137 -j DROP -Filter 229 {"conn-limit":{"log":"ulog"},"log":"none","out":"B"} +Filter 229 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 - inet/filter/limit-228 -m recent --name limit-228 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-84 - inet/filter/limit-228 -m recent --name limit-228 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-84 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-84 -j DROP + inet/filter/limit-228 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 + inet/filter/limit-228 -m limit --limit 12/minute -j ULOG + inet/filter/limit-228 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-138 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-138 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-138 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-228 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-228 - inet6/filter/limit-228 -m recent --name limit-228 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-84 - inet6/filter/limit-228 -m recent --name limit-228 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-84 -j DROP + inet6/filter/limit-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 + inet6/filter/limit-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-138 -j TEE --gateway fc00::2 + inet6/filter/logdrop-138 -j DROP -Filter 230 {"action":"pass","conn-limit":{"log":"ulog"},"log":"none","out":"B"} +Filter 230 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 - inet/filter/limit-229 -m recent --name limit-229 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-85 - inet/filter/limit-229 -m recent --name limit-229 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-85 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-85 -j DROP + inet/filter/limit-229 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 + inet/filter/limit-229 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-139 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-139 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-139 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-229 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-229 - inet6/filter/limit-229 -m recent --name limit-229 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-85 - inet6/filter/limit-229 -m recent --name limit-229 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-85 -j DROP + inet6/filter/limit-229 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 + inet6/filter/logdrop-139 -j TEE --gateway fc00::2 + inet6/filter/logdrop-139 -j DROP -Filter 231 {"conn-limit":{"log":"ulog"},"log":"ulog","out":"B"} +Filter 231 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 - inet/filter/limit-230 -m recent --name limit-230 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-86 - inet/filter/limit-230 -m limit --limit 12/minute -j ULOG - inet/filter/limit-230 -m recent --name limit-230 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-86 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-86 -j DROP + inet/filter/limit-230 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-140 + inet/filter/limit-230 -j ACCEPT + inet/filter/logdrop-140 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-140 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-140 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-230 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-230 - inet6/filter/limit-230 -m recent --name limit-230 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-86 - inet6/filter/limit-230 -m recent --name limit-230 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-86 -j DROP + inet6/filter/limit-230 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-140 + inet6/filter/limit-230 -j ACCEPT + inet6/filter/logdrop-140 -j TEE --gateway fc00::2 + inet6/filter/logdrop-140 -j DROP -Filter 232 {"action":"pass","conn-limit":{"log":"ulog"},"log":"ulog","out":"B"} +Filter 232 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 - inet/filter/limit-231 -m recent --name limit-231 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-87 - inet/filter/limit-231 -m recent --name limit-231 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-87 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-87 -j DROP + inet/filter/limit-231 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-141 + inet/filter/logdrop-141 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-141 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-141 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-231 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-231 - inet6/filter/limit-231 -m recent --name limit-231 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-87 - inet6/filter/logdrop-87 -j DROP + inet6/filter/limit-231 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-141 + inet6/filter/logdrop-141 -j TEE --gateway fc00::2 + inet6/filter/logdrop-141 -j DROP -Filter 233 {"conn-limit":{"log":"ulog","name":"A"},"out":"B"} +Filter 233 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 - inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-88 - inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-88 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-88 -j DROP + inet/filter/limit-232 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-142 + inet/filter/limit-232 -m limit --limit 1/second -j LOG + inet/filter/limit-232 -j ACCEPT + inet/filter/logdrop-142 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-142 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-142 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-232 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-232 - inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-88 - inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-88 -j DROP + inet6/filter/limit-232 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-142 + inet6/filter/limit-232 -m limit --limit 1/second -j LOG + inet6/filter/limit-232 -j ACCEPT + inet6/filter/logdrop-142 -j TEE --gateway fc00::2 + inet6/filter/logdrop-142 -j DROP -Filter 234 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"out":"B"} +Filter 234 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 - inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-89 - inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-89 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-89 -j DROP + inet/filter/limit-233 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-143 + inet/filter/limit-233 -m limit --limit 1/second -j LOG + inet/filter/logdrop-143 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-143 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-143 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-233 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-233 - inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-89 - inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-89 -j DROP + inet6/filter/limit-233 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-143 + inet6/filter/limit-233 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-143 -j TEE --gateway fc00::2 + inet6/filter/logdrop-143 -j DROP -Filter 235 {"conn-limit":{"log":"ulog","name":"A"},"log":true,"out":"B"} +Filter 235 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 - inet/filter/limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-90 - inet/filter/limit-234 -m limit --limit 1/second -j LOG - inet/filter/limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-90 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-90 -j DROP + inet/filter/limit-234 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 + inet/filter/limit-234 -j TEE --gateway 10.0.0.1 + inet/filter/limit-234 -j TEE --gateway 10.0.0.2 + inet/filter/limit-234 -j ACCEPT + inet/filter/logdrop-144 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-144 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-144 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-234 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-234 - inet6/filter/limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-90 - inet6/filter/limit-234 -m limit --limit 1/second -j LOG - inet6/filter/limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-90 -j DROP + inet6/filter/limit-234 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-144 + inet6/filter/limit-234 -j TEE --gateway fc00::2 + inet6/filter/limit-234 -j ACCEPT + inet6/filter/logdrop-144 -j TEE --gateway fc00::2 + inet6/filter/logdrop-144 -j DROP -Filter 236 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"log":true,"out":"B"} +Filter 236 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-235 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-235 - inet/filter/limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-91 - inet/filter/limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-91 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-91 -j DROP + inet/filter/limit-235 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 + inet/filter/limit-235 -j TEE --gateway 10.0.0.1 + inet/filter/limit-235 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-145 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-145 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-145 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-235 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-235 - inet6/filter/limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-91 - inet6/filter/limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-91 -j DROP + inet6/filter/limit-235 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 + inet6/filter/limit-235 -j TEE --gateway fc00::2 + inet6/filter/logdrop-145 -j TEE --gateway fc00::2 + inet6/filter/logdrop-145 -j DROP -Filter 237 {"conn-limit":{"log":"ulog","name":"A"},"log":"none","out":"B"} +Filter 237 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 - inet/filter/limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-92 - inet/filter/limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-92 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-92 -j DROP + inet/filter/limit-236 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet/filter/limit-236 -j ACCEPT + inet/filter/logdrop-146 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-146 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-146 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-236 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-236 - inet6/filter/limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-92 - inet6/filter/limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-92 -j DROP + inet6/filter/limit-236 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet6/filter/limit-236 -j ACCEPT + inet6/filter/logdrop-146 -j TEE --gateway fc00::2 + inet6/filter/logdrop-146 -j DROP -Filter 238 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"log":"none","out":"B"} +Filter 238 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 - inet/filter/limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-93 - inet/filter/limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-93 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-93 -j DROP + inet/filter/limit-237 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 + inet/filter/logdrop-147 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-147 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-147 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-237 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-237 - inet6/filter/limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-93 - inet6/filter/limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-93 -j DROP + inet6/filter/limit-237 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 + inet6/filter/logdrop-147 -j TEE --gateway fc00::2 + inet6/filter/logdrop-147 -j DROP -Filter 239 {"conn-limit":{"log":"ulog","name":"A"},"log":"ulog","out":"B"} +Filter 239 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 - inet/filter/limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-94 + inet/filter/limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 inet/filter/limit-238 -m limit --limit 12/minute -j ULOG - inet/filter/limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-94 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-94 -j DROP + inet/filter/limit-238 -j ACCEPT + inet/filter/logdrop-148 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-148 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-148 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-238 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-238 - inet6/filter/limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-94 - inet6/filter/limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-94 -j DROP + inet6/filter/limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 + inet6/filter/limit-238 -j ACCEPT + inet6/filter/logdrop-148 -j TEE --gateway fc00::2 + inet6/filter/logdrop-148 -j DROP -Filter 240 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"log":"ulog","out":"B"} +Filter 240 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-239 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-239 - inet/filter/limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-95 - inet/filter/limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-95 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-95 -j DROP + inet/filter/limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 + inet/filter/limit-239 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-149 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-149 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-149 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-239 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-239 - inet6/filter/limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-95 - inet6/filter/logdrop-95 -j DROP + inet6/filter/limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 + inet6/filter/logdrop-149 -j TEE --gateway fc00::2 + inet6/filter/logdrop-149 -j DROP -Filter 241 {"conn-limit":{"log":"ulog","name":"A","update":false},"out":"B"} +Filter 241 {"conn-limit":{"log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 - inet/filter/limit-240 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-96 - inet/filter/limit-240 -j ACCEPT - inet/filter/logdrop-96 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-96 -j DROP + inet/filter/limit-240 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-150 + inet/filter/limit-240 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-150 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-150 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-150 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-240 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-240 - inet6/filter/limit-240 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-96 - inet6/filter/limit-240 -j ACCEPT - inet6/filter/logdrop-96 -j DROP + inet6/filter/limit-240 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-150 + inet6/filter/limit-240 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-150 -j TEE --gateway fc00::2 + inet6/filter/logdrop-150 -j DROP -Filter 242 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"out":"B"} +Filter 242 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 - inet/filter/limit-241 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 - inet/filter/logdrop-97 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-97 -j DROP + inet/filter/limit-241 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 + inet/filter/limit-241 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-151 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-151 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-151 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-241 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-241 - inet6/filter/limit-241 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-97 - inet6/filter/logdrop-97 -j DROP + inet6/filter/limit-241 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 + inet6/filter/limit-241 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-151 -j TEE --gateway fc00::2 + inet6/filter/logdrop-151 -j DROP -Filter 243 {"conn-limit":{"log":"ulog","name":"A","update":false},"log":true,"out":"B"} +Filter 243 {"conn-limit":{"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 - inet/filter/limit-242 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 + inet/filter/limit-242 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 inet/filter/limit-242 -m limit --limit 1/second -j LOG - inet/filter/limit-242 -j ACCEPT - inet/filter/logdrop-98 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-98 -j DROP + inet/filter/limit-242 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-152 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-152 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-152 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-242 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-242 - inet6/filter/limit-242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-98 + inet6/filter/limit-242 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 inet6/filter/limit-242 -m limit --limit 1/second -j LOG - inet6/filter/limit-242 -j ACCEPT - inet6/filter/logdrop-98 -j DROP + inet6/filter/limit-242 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-152 -j TEE --gateway fc00::2 + inet6/filter/logdrop-152 -j DROP -Filter 244 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"log":true,"out":"B"} +Filter 244 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 - inet/filter/limit-243 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 - inet/filter/limit-243 -m limit --limit 1/second -j LOG - inet/filter/logdrop-99 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-99 -j DROP + inet/filter/limit-243 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 + inet/filter/limit-243 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-153 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-153 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-153 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-243 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-243 - inet6/filter/limit-243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-99 - inet6/filter/limit-243 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-99 -j DROP + inet6/filter/limit-243 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 + inet6/filter/limit-243 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-153 -j TEE --gateway fc00::2 + inet6/filter/logdrop-153 -j DROP -Filter 245 {"conn-limit":{"log":"ulog","name":"A","update":false},"log":"none","out":"B"} +Filter 245 {"conn-limit":{"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 - inet/filter/limit-244 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-100 - inet/filter/limit-244 -j ACCEPT - inet/filter/logdrop-100 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-100 -j DROP + inet/filter/limit-244 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 + inet/filter/limit-244 -j TEE --gateway 10.0.0.1 + inet/filter/limit-244 -j TEE --gateway 10.0.0.2 + inet/filter/limit-244 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-154 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-154 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-154 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-244 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-244 - inet6/filter/limit-244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-100 - inet6/filter/limit-244 -j ACCEPT - inet6/filter/logdrop-100 -j DROP + inet6/filter/limit-244 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 + inet6/filter/limit-244 -j TEE --gateway fc00::2 + inet6/filter/limit-244 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-154 -j TEE --gateway fc00::2 + inet6/filter/logdrop-154 -j DROP -Filter 246 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"log":"none","out":"B"} +Filter 246 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 - inet/filter/limit-245 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-101 - inet/filter/logdrop-101 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-101 -j DROP + inet/filter/limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 + inet/filter/limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-155 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-155 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-155 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-245 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-245 - inet6/filter/limit-245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-101 - inet6/filter/logdrop-101 -j DROP + inet6/filter/limit-245 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 + inet6/filter/limit-245 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-155 -j TEE --gateway fc00::2 + inet6/filter/logdrop-155 -j DROP -Filter 247 {"conn-limit":{"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} +Filter 247 {"conn-limit":{"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 - inet/filter/limit-246 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-102 - inet/filter/limit-246 -m limit --limit 12/minute -j ULOG - inet/filter/limit-246 -j ACCEPT - inet/filter/logdrop-102 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-102 -j DROP + inet/filter/limit-246 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 + inet/filter/limit-246 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-156 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-156 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-156 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-246 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-246 - inet6/filter/limit-246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-102 - inet6/filter/limit-246 -j ACCEPT - inet6/filter/logdrop-102 -j DROP + inet6/filter/limit-246 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 + inet6/filter/limit-246 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-156 -j TEE --gateway fc00::2 + inet6/filter/logdrop-156 -j DROP -Filter 248 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} +Filter 248 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-247 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-247 - inet/filter/limit-247 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-103 - inet/filter/limit-247 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-103 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-103 -j DROP + inet/filter/limit-247 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-157 + inet/filter/limit-247 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-157 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-157 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-157 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-247 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-247 - inet6/filter/limit-247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-103 - inet6/filter/logdrop-103 -j DROP + inet6/filter/limit-247 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-157 + inet6/filter/limit-247 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-157 -j TEE --gateway fc00::2 + inet6/filter/logdrop-157 -j DROP -Filter 249 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"out":"B"} +Filter 249 {"conn-limit":{"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 - inet/filter/limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-104 - inet/filter/limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-104 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-104 -j DROP + inet/filter/limit-248 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-158 + inet/filter/limit-248 -m limit --limit 12/minute -j ULOG + inet/filter/limit-248 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-158 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-158 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-158 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-248 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-248 - inet6/filter/limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-104 - inet6/filter/limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-104 -j DROP + inet6/filter/limit-248 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-158 + inet6/filter/limit-248 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-158 -j TEE --gateway fc00::2 + inet6/filter/logdrop-158 -j DROP -Filter 250 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"out":"B"} +Filter 250 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 - inet/filter/limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-105 - inet/filter/limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-105 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-105 -j DROP + inet/filter/limit-249 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-159 + inet/filter/limit-249 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-159 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-159 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-159 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-249 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-249 - inet6/filter/limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-105 - inet6/filter/limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-105 -j DROP + inet6/filter/limit-249 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-159 + inet6/filter/logdrop-159 -j TEE --gateway fc00::2 + inet6/filter/logdrop-159 -j DROP -Filter 251 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true,"out":"B"} +Filter 251 {"conn-limit":{"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 - inet/filter/limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-106 - inet/filter/limit-250 -m limit --limit 1/second -j LOG - inet/filter/limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-106 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-106 -j DROP + inet/filter/limit-250 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 + inet/filter/limit-250 -j ACCEPT + inet/filter/logdrop-160 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-160 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-160 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-250 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-250 - inet6/filter/limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-106 - inet6/filter/limit-250 -m limit --limit 1/second -j LOG - inet6/filter/limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-106 -j DROP + inet6/filter/limit-250 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 + inet6/filter/limit-250 -j ACCEPT + inet6/filter/logdrop-160 -j TEE --gateway fc00::2 + inet6/filter/logdrop-160 -j DROP -Filter 252 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true,"out":"B"} +Filter 252 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-251 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-251 - inet/filter/limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-107 - inet/filter/limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-107 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-107 -j DROP + inet/filter/limit-251 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 + inet/filter/logdrop-161 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-161 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-161 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-251 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-251 - inet6/filter/limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-107 - inet6/filter/limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-107 -j DROP + inet6/filter/limit-251 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 + inet6/filter/logdrop-161 -j TEE --gateway fc00::2 + inet6/filter/logdrop-161 -j DROP -Filter 253 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none","out":"B"} +Filter 253 {"conn-limit":{"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 - inet/filter/limit-252 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-108 - inet/filter/limit-252 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-108 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-108 -j DROP + inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 + inet/filter/limit-252 -m limit --limit 1/second -j LOG + inet/filter/limit-252 -j ACCEPT + inet/filter/logdrop-162 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-162 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-162 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-252 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-252 - inet6/filter/limit-252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-108 - inet6/filter/limit-252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-108 -j DROP + inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 + inet6/filter/limit-252 -m limit --limit 1/second -j LOG + inet6/filter/limit-252 -j ACCEPT + inet6/filter/logdrop-162 -j TEE --gateway fc00::2 + inet6/filter/logdrop-162 -j DROP -Filter 254 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none","out":"B"} +Filter 254 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 - inet/filter/limit-253 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-109 - inet/filter/limit-253 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-109 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-109 -j DROP + inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-163 + inet/filter/limit-253 -m limit --limit 1/second -j LOG + inet/filter/logdrop-163 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-163 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-163 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-253 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-253 - inet6/filter/limit-253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-109 - inet6/filter/limit-253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-109 -j DROP + inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-163 + inet6/filter/limit-253 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-163 -j TEE --gateway fc00::2 + inet6/filter/logdrop-163 -j DROP -Filter 255 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog","out":"B"} +Filter 255 {"conn-limit":{"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 - inet/filter/limit-254 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-110 - inet/filter/limit-254 -m limit --limit 12/minute -j ULOG - inet/filter/limit-254 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-110 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-110 -j DROP + inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-164 + inet/filter/limit-254 -j TEE --gateway 10.0.0.1 + inet/filter/limit-254 -j TEE --gateway 10.0.0.2 + inet/filter/limit-254 -j ACCEPT + inet/filter/logdrop-164 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-164 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-164 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-254 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-254 - inet6/filter/limit-254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-110 - inet6/filter/limit-254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-110 -j DROP + inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-164 + inet6/filter/limit-254 -j TEE --gateway fc00::2 + inet6/filter/limit-254 -j ACCEPT + inet6/filter/logdrop-164 -j TEE --gateway fc00::2 + inet6/filter/logdrop-164 -j DROP -Filter 256 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog","out":"B"} +Filter 256 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 - inet/filter/limit-255 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-111 - inet/filter/limit-255 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-111 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-111 -j DROP + inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-165 + inet/filter/limit-255 -j TEE --gateway 10.0.0.1 + inet/filter/limit-255 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-165 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-165 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-165 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-255 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-255 - inet6/filter/limit-255 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-111 - inet6/filter/logdrop-111 -j DROP + inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-165 + inet6/filter/limit-255 -j TEE --gateway fc00::2 + inet6/filter/logdrop-165 -j TEE --gateway fc00::2 + inet6/filter/logdrop-165 -j DROP -Filter 257 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"out":"B"} +Filter 257 {"conn-limit":{"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 - inet/filter/limit-256 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-112 + inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-166 inet/filter/limit-256 -j ACCEPT - inet/filter/logdrop-112 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-112 -j DROP + inet/filter/logdrop-166 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-166 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-166 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-256 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-256 - inet6/filter/limit-256 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-112 + inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-166 inet6/filter/limit-256 -j ACCEPT - inet6/filter/logdrop-112 -j DROP + inet6/filter/logdrop-166 -j TEE --gateway fc00::2 + inet6/filter/logdrop-166 -j DROP -Filter 258 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"out":"B"} +Filter 258 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 - inet/filter/limit-257 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-113 - inet/filter/logdrop-113 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-113 -j DROP + inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-167 + inet/filter/logdrop-167 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-167 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-167 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-257 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-257 - inet6/filter/limit-257 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-113 - inet6/filter/logdrop-113 -j DROP + inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-167 + inet6/filter/logdrop-167 -j TEE --gateway fc00::2 + inet6/filter/logdrop-167 -j DROP -Filter 259 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true,"out":"B"} +Filter 259 {"conn-limit":{"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 - inet/filter/limit-258 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-114 - inet/filter/limit-258 -m limit --limit 1/second -j LOG + inet/filter/limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 + inet/filter/limit-258 -m limit --limit 12/minute -j ULOG inet/filter/limit-258 -j ACCEPT - inet/filter/logdrop-114 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-114 -j DROP + inet/filter/logdrop-168 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-168 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-168 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-258 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-258 - inet6/filter/limit-258 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-114 - inet6/filter/limit-258 -m limit --limit 1/second -j LOG + inet6/filter/limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-168 inet6/filter/limit-258 -j ACCEPT - inet6/filter/logdrop-114 -j DROP + inet6/filter/logdrop-168 -j TEE --gateway fc00::2 + inet6/filter/logdrop-168 -j DROP -Filter 260 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true,"out":"B"} +Filter 260 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-259 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-259 - inet/filter/limit-259 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-115 - inet/filter/limit-259 -m limit --limit 1/second -j LOG - inet/filter/logdrop-115 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-115 -j DROP + inet/filter/limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 + inet/filter/limit-259 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-169 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-169 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-169 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-259 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-259 - inet6/filter/limit-259 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-115 - inet6/filter/limit-259 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-115 -j DROP + inet6/filter/limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 + inet6/filter/logdrop-169 -j TEE --gateway fc00::2 + inet6/filter/logdrop-169 -j DROP -Filter 261 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none","out":"B"} +Filter 261 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 - inet/filter/limit-260 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-116 - inet/filter/limit-260 -j ACCEPT - inet/filter/logdrop-116 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-116 -j DROP + inet/filter/limit-260 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-170 + inet/filter/limit-260 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-170 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-170 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-170 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-260 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-260 - inet6/filter/limit-260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-116 - inet6/filter/limit-260 -j ACCEPT - inet6/filter/logdrop-116 -j DROP + inet6/filter/limit-260 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-170 + inet6/filter/limit-260 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-170 -j TEE --gateway fc00::2 + inet6/filter/logdrop-170 -j DROP -Filter 262 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none","out":"B"} +Filter 262 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 - inet/filter/limit-261 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-117 - inet/filter/logdrop-117 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-117 -j DROP + inet/filter/limit-261 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-171 + inet/filter/limit-261 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-171 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-171 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-171 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-261 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-261 - inet6/filter/limit-261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-117 - inet6/filter/logdrop-117 -j DROP + inet6/filter/limit-261 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-171 + inet6/filter/limit-261 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-171 -j TEE --gateway fc00::2 + inet6/filter/logdrop-171 -j DROP -Filter 263 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} +Filter 263 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 - inet/filter/limit-262 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-118 - inet/filter/limit-262 -m limit --limit 12/minute -j ULOG - inet/filter/limit-262 -j ACCEPT - inet/filter/logdrop-118 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-118 -j DROP + inet/filter/limit-262 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-172 + inet/filter/limit-262 -m limit --limit 1/second -j LOG + inet/filter/limit-262 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-172 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-172 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-172 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-262 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-262 - inet6/filter/limit-262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-118 - inet6/filter/limit-262 -j ACCEPT - inet6/filter/logdrop-118 -j DROP + inet6/filter/limit-262 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-172 + inet6/filter/limit-262 -m limit --limit 1/second -j LOG + inet6/filter/limit-262 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-172 -j TEE --gateway fc00::2 + inet6/filter/logdrop-172 -j DROP -Filter 264 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} +Filter 264 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-263 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-263 - inet/filter/limit-263 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-119 - inet/filter/limit-263 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-119 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-119 -j DROP + inet/filter/limit-263 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-173 + inet/filter/limit-263 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-173 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-173 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-173 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-263 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-263 - inet6/filter/limit-263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-119 - inet6/filter/logdrop-119 -j DROP + inet6/filter/limit-263 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-173 + inet6/filter/limit-263 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-173 -j TEE --gateway fc00::2 + inet6/filter/logdrop-173 -j DROP -Filter 265 {"conn-limit":{"log":"ulog","name":"C"},"out":"B"} +Filter 265 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 - inet/filter/limit-264 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-120 - inet/filter/limit-264 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-120 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-120 -j DROP + inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-174 + inet/filter/limit-264 -j TEE --gateway 10.0.0.1 + inet/filter/limit-264 -j TEE --gateway 10.0.0.2 + inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-174 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-174 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-174 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-264 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-264 - inet6/filter/limit-264 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-120 - inet6/filter/limit-264 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-120 -j DROP + inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-174 + inet6/filter/limit-264 -j TEE --gateway fc00::2 + inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-174 -j TEE --gateway fc00::2 + inet6/filter/logdrop-174 -j DROP -Filter 266 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"out":"B"} +Filter 266 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 - inet/filter/limit-265 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-121 - inet/filter/limit-265 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-121 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-121 -j DROP + inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-175 + inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-175 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-175 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-175 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-265 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-265 - inet6/filter/limit-265 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-121 - inet6/filter/limit-265 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-121 -j DROP + inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-175 + inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-175 -j TEE --gateway fc00::2 + inet6/filter/logdrop-175 -j DROP -Filter 267 {"conn-limit":{"log":"ulog","name":"C"},"log":true,"out":"B"} +Filter 267 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 - inet/filter/limit-266 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-122 - inet/filter/limit-266 -m limit --limit 1/second -j LOG - inet/filter/limit-266 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-122 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-122 -j DROP + inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-176 + inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-176 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-176 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-176 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-266 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-266 - inet6/filter/limit-266 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-122 - inet6/filter/limit-266 -m limit --limit 1/second -j LOG - inet6/filter/limit-266 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-122 -j DROP + inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-176 + inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-176 -j TEE --gateway fc00::2 + inet6/filter/logdrop-176 -j DROP -Filter 268 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"log":true,"out":"B"} +Filter 268 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 - inet/filter/limit-267 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-123 - inet/filter/limit-267 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-123 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-123 -j DROP + inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-177 + inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-177 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-177 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-177 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-267 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-267 - inet6/filter/limit-267 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-123 - inet6/filter/limit-267 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-123 -j DROP + inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-177 + inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-177 -j TEE --gateway fc00::2 + inet6/filter/logdrop-177 -j DROP -Filter 269 {"conn-limit":{"log":"ulog","name":"C"},"log":"none","out":"B"} +Filter 269 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 - inet/filter/limit-268 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-124 - inet/filter/limit-268 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-124 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-124 -j DROP + inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-178 + inet/filter/limit-268 -m limit --limit 12/minute -j ULOG + inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-178 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-178 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-178 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-268 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-268 - inet6/filter/limit-268 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-124 - inet6/filter/limit-268 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-124 -j DROP + inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-178 + inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-178 -j TEE --gateway fc00::2 + inet6/filter/logdrop-178 -j DROP -Filter 270 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"log":"none","out":"B"} +Filter 270 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 - inet/filter/limit-269 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-125 - inet/filter/limit-269 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-125 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-125 -j DROP + inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-179 + inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-179 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-179 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-179 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-269 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-269 - inet6/filter/limit-269 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-125 - inet6/filter/limit-269 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-125 -j DROP + inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-179 + inet6/filter/logdrop-179 -j TEE --gateway fc00::2 + inet6/filter/logdrop-179 -j DROP -Filter 271 {"conn-limit":{"log":"ulog","name":"C"},"log":"ulog","out":"B"} +Filter 271 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 - inet/filter/limit-270 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-126 - inet/filter/limit-270 -m limit --limit 12/minute -j ULOG - inet/filter/limit-270 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-126 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-126 -j DROP + inet/filter/limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-180 + inet/filter/limit-270 -j ACCEPT + inet/filter/logdrop-180 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-180 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-180 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-270 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-270 - inet6/filter/limit-270 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-126 - inet6/filter/limit-270 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-126 -j DROP + inet6/filter/limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-180 + inet6/filter/limit-270 -j ACCEPT + inet6/filter/logdrop-180 -j TEE --gateway fc00::2 + inet6/filter/logdrop-180 -j DROP -Filter 272 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"log":"ulog","out":"B"} +Filter 272 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-271 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-271 - inet/filter/limit-271 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-127 - inet/filter/limit-271 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-127 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-127 -j DROP + inet/filter/limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-181 + inet/filter/logdrop-181 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-181 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-181 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-271 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-271 - inet6/filter/limit-271 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-127 - inet6/filter/logdrop-127 -j DROP + inet6/filter/limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-181 + inet6/filter/logdrop-181 -j TEE --gateway fc00::2 + inet6/filter/logdrop-181 -j DROP -Filter 273 {"conn-limit":{"log":"ulog","name":"C","update":false},"out":"B"} +Filter 273 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 - inet/filter/limit-272 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-128 + inet/filter/limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-182 + inet/filter/limit-272 -m limit --limit 1/second -j LOG inet/filter/limit-272 -j ACCEPT - inet/filter/logdrop-128 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-128 -j DROP + inet/filter/logdrop-182 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-182 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-182 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-272 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-272 - inet6/filter/limit-272 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-128 + inet6/filter/limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-182 + inet6/filter/limit-272 -m limit --limit 1/second -j LOG inet6/filter/limit-272 -j ACCEPT - inet6/filter/logdrop-128 -j DROP + inet6/filter/logdrop-182 -j TEE --gateway fc00::2 + inet6/filter/logdrop-182 -j DROP -Filter 274 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"out":"B"} +Filter 274 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 - inet/filter/limit-273 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-129 - inet/filter/logdrop-129 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-129 -j DROP + inet/filter/limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-183 + inet/filter/limit-273 -m limit --limit 1/second -j LOG + inet/filter/logdrop-183 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-183 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-183 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-273 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-273 - inet6/filter/limit-273 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-129 - inet6/filter/logdrop-129 -j DROP + inet6/filter/limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-183 + inet6/filter/limit-273 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-183 -j TEE --gateway fc00::2 + inet6/filter/logdrop-183 -j DROP -Filter 275 {"conn-limit":{"log":"ulog","name":"C","update":false},"log":true,"out":"B"} +Filter 275 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 - inet/filter/limit-274 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-130 - inet/filter/limit-274 -m limit --limit 1/second -j LOG + inet/filter/limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-184 + inet/filter/limit-274 -j TEE --gateway 10.0.0.1 + inet/filter/limit-274 -j TEE --gateway 10.0.0.2 inet/filter/limit-274 -j ACCEPT - inet/filter/logdrop-130 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-130 -j DROP + inet/filter/logdrop-184 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-184 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-184 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-274 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-274 - inet6/filter/limit-274 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-130 - inet6/filter/limit-274 -m limit --limit 1/second -j LOG + inet6/filter/limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-184 + inet6/filter/limit-274 -j TEE --gateway fc00::2 inet6/filter/limit-274 -j ACCEPT - inet6/filter/logdrop-130 -j DROP + inet6/filter/logdrop-184 -j TEE --gateway fc00::2 + inet6/filter/logdrop-184 -j DROP -Filter 276 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"log":true,"out":"B"} +Filter 276 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-275 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-275 - inet/filter/limit-275 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-131 - inet/filter/limit-275 -m limit --limit 1/second -j LOG - inet/filter/logdrop-131 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-131 -j DROP + inet/filter/limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-185 + inet/filter/limit-275 -j TEE --gateway 10.0.0.1 + inet/filter/limit-275 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-185 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-185 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-185 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-275 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-275 - inet6/filter/limit-275 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-131 - inet6/filter/limit-275 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-131 -j DROP + inet6/filter/limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-185 + inet6/filter/limit-275 -j TEE --gateway fc00::2 + inet6/filter/logdrop-185 -j TEE --gateway fc00::2 + inet6/filter/logdrop-185 -j DROP -Filter 277 {"conn-limit":{"log":"ulog","name":"C","update":false},"log":"none","out":"B"} +Filter 277 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 - inet/filter/limit-276 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-132 + inet/filter/limit-276 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-186 inet/filter/limit-276 -j ACCEPT - inet/filter/logdrop-132 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-132 -j DROP + inet/filter/logdrop-186 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-186 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-186 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-276 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-276 - inet6/filter/limit-276 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-132 + inet6/filter/limit-276 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-186 inet6/filter/limit-276 -j ACCEPT - inet6/filter/logdrop-132 -j DROP + inet6/filter/logdrop-186 -j TEE --gateway fc00::2 + inet6/filter/logdrop-186 -j DROP -Filter 278 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"log":"none","out":"B"} +Filter 278 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 - inet/filter/limit-277 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 - inet/filter/logdrop-133 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-133 -j DROP + inet/filter/limit-277 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-187 + inet/filter/logdrop-187 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-187 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-187 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-277 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-277 - inet6/filter/limit-277 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-133 - inet6/filter/logdrop-133 -j DROP + inet6/filter/limit-277 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-187 + inet6/filter/logdrop-187 -j TEE --gateway fc00::2 + inet6/filter/logdrop-187 -j DROP -Filter 279 {"conn-limit":{"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} +Filter 279 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 - inet/filter/limit-278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet/filter/limit-278 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-188 inet/filter/limit-278 -m limit --limit 12/minute -j ULOG inet/filter/limit-278 -j ACCEPT - inet/filter/logdrop-134 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-134 -j DROP + inet/filter/logdrop-188 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-188 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-188 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-278 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-278 - inet6/filter/limit-278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet6/filter/limit-278 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-188 inet6/filter/limit-278 -j ACCEPT - inet6/filter/logdrop-134 -j DROP + inet6/filter/logdrop-188 -j TEE --gateway fc00::2 + inet6/filter/logdrop-188 -j DROP -Filter 280 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} +Filter 280 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 - inet/filter/limit-279 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 + inet/filter/limit-279 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-189 inet/filter/limit-279 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-135 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-135 -j DROP + inet/filter/logdrop-189 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-189 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-189 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-279 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-279 - inet6/filter/limit-279 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-135 - inet6/filter/logdrop-135 -j DROP + inet6/filter/limit-279 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-189 + inet6/filter/logdrop-189 -j TEE --gateway fc00::2 + inet6/filter/logdrop-189 -j DROP -Filter 281 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"out":"B"} +Filter 281 {"conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 - inet/filter/limit-280 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-136 - inet/filter/limit-280 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-136 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-136 -j DROP + inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-280 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-280 - inet6/filter/limit-280 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-136 - inet6/filter/limit-280 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-136 -j DROP + inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 282 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"out":"B"} +Filter 282 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 - inet/filter/limit-281 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-137 - inet/filter/limit-281 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-137 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-137 -j DROP + inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-281 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-281 - inet6/filter/limit-281 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-137 - inet6/filter/limit-281 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-137 -j DROP + inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 283 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true,"out":"B"} +Filter 283 {"conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 - inet/filter/limit-282 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-138 + inet/filter/limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-282 -m limit --limit 1/second -j LOG - inet/filter/limit-282 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-138 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-138 -j DROP + inet/filter/limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-282 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-282 - inet6/filter/limit-282 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-138 + inet6/filter/limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-282 -m limit --limit 1/second -j LOG - inet6/filter/limit-282 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-138 -j DROP + inet6/filter/limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 284 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true,"out":"B"} +Filter 284 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 - inet/filter/limit-283 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-139 - inet/filter/limit-283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-139 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-139 -j DROP + inet/filter/limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-283 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-283 - inet6/filter/limit-283 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-139 - inet6/filter/limit-283 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-139 -j DROP + inet6/filter/limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 285 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none","out":"B"} +Filter 285 {"conn-limit":{"log":"none"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 - inet/filter/limit-284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-140 - inet/filter/limit-284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-140 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-140 -j DROP + inet/filter/limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-284 -j TEE --gateway 10.0.0.1 + inet/filter/limit-284 -j TEE --gateway 10.0.0.2 + inet/filter/limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-284 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-284 - inet6/filter/limit-284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-140 - inet6/filter/limit-284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-140 -j DROP + inet6/filter/limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-284 -j TEE --gateway fc00::2 + inet6/filter/limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 286 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none","out":"B"} +Filter 286 {"action":"pass","conn-limit":{"log":"none"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 - inet/filter/limit-285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-141 - inet/filter/limit-285 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-141 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-141 -j DROP + inet/filter/limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-285 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-285 - inet6/filter/limit-285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-141 - inet6/filter/limit-285 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-141 -j DROP + inet6/filter/limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 287 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog","out":"B"} +Filter 287 {"conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 - inet/filter/limit-286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-142 - inet/filter/limit-286 -m limit --limit 12/minute -j ULOG - inet/filter/limit-286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-142 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-142 -j DROP + inet/filter/limit-286 -m recent --name limit-286 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-286 -m recent --name limit-286 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-286 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-286 - inet6/filter/limit-286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-142 - inet6/filter/limit-286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-142 -j DROP + inet6/filter/limit-286 -m recent --name limit-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-286 -m recent --name limit-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 288 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog","out":"B"} +Filter 288 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 - inet/filter/limit-287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-143 - inet/filter/limit-287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-143 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-143 -j DROP + inet/filter/limit-287 -m recent --name limit-287 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-287 -m recent --name limit-287 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-287 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-287 - inet6/filter/limit-287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-143 - inet6/filter/logdrop-143 -j DROP + inet6/filter/limit-287 -m recent --name limit-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-287 -m recent --name limit-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 289 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"out":"B"} +Filter 289 {"conn-limit":{"log":"none"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 - inet/filter/limit-288 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 - inet/filter/limit-288 -j ACCEPT - inet/filter/logdrop-144 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-144 -j DROP + inet/filter/limit-288 -m recent --name limit-288 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-288 -m limit --limit 12/minute -j ULOG + inet/filter/limit-288 -m recent --name limit-288 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-288 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-288 - inet6/filter/limit-288 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-144 - inet6/filter/limit-288 -j ACCEPT - inet6/filter/logdrop-144 -j DROP + inet6/filter/limit-288 -m recent --name limit-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-288 -m recent --name limit-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 290 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"out":"B"} +Filter 290 {"action":"pass","conn-limit":{"log":"none"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-289 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-289 - inet/filter/limit-289 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 - inet/filter/logdrop-145 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-145 -j DROP + inet/filter/limit-289 -m recent --name limit-289 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-289 -m recent --name limit-289 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-289 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-289 - inet6/filter/limit-289 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-145 - inet6/filter/logdrop-145 -j DROP + inet6/filter/limit-289 -m recent --name limit-289 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 291 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true,"out":"B"} +Filter 291 {"conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 - inet/filter/limit-290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 - inet/filter/limit-290 -m limit --limit 1/second -j LOG - inet/filter/limit-290 -j ACCEPT - inet/filter/logdrop-146 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-146 -j DROP + inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-290 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-290 - inet6/filter/limit-290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-146 - inet6/filter/limit-290 -m limit --limit 1/second -j LOG - inet6/filter/limit-290 -j ACCEPT - inet6/filter/logdrop-146 -j DROP + inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 292 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true,"out":"B"} +Filter 292 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 - inet/filter/limit-291 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 - inet/filter/limit-291 -m limit --limit 1/second -j LOG - inet/filter/logdrop-147 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-147 -j DROP + inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-291 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-291 - inet6/filter/limit-291 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-147 - inet6/filter/limit-291 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-147 -j DROP + inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 293 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none","out":"B"} +Filter 293 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 - inet/filter/limit-292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 - inet/filter/limit-292 -j ACCEPT - inet/filter/logdrop-148 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-148 -j DROP + inet/filter/limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-292 -m limit --limit 1/second -j LOG + inet/filter/limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-292 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-292 - inet6/filter/limit-292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-148 - inet6/filter/limit-292 -j ACCEPT - inet6/filter/logdrop-148 -j DROP + inet6/filter/limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-292 -m limit --limit 1/second -j LOG + inet6/filter/limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 294 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none","out":"B"} +Filter 294 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-293 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-293 - inet/filter/limit-293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 - inet/filter/logdrop-149 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-149 -j DROP + inet/filter/limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-293 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-293 - inet6/filter/limit-293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-149 - inet6/filter/logdrop-149 -j DROP + inet6/filter/limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 295 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} +Filter 295 {"conn-limit":{"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 - inet/filter/limit-294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 - inet/filter/limit-294 -m limit --limit 12/minute -j ULOG - inet/filter/limit-294 -j ACCEPT - inet/filter/logdrop-150 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-150 -j DROP + inet/filter/limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-294 -j TEE --gateway 10.0.0.1 + inet/filter/limit-294 -j TEE --gateway 10.0.0.2 + inet/filter/limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-294 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-294 - inet6/filter/limit-294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-150 - inet6/filter/limit-294 -j ACCEPT - inet6/filter/logdrop-150 -j DROP + inet6/filter/limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-294 -j TEE --gateway fc00::2 + inet6/filter/limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 296 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} +Filter 296 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 - inet/filter/limit-295 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-151 - inet/filter/limit-295 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-151 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-151 -j DROP + inet/filter/limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-295 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-295 - inet6/filter/limit-295 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-151 - inet6/filter/logdrop-151 -j DROP + inet6/filter/limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 297 {"conn-limit":{"interval":5,"log":false},"out":"B"} +Filter 297 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 - inet/filter/limit-296 -m recent --name limit-296 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-296 -m recent --name limit-296 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-296 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-296 - inet6/filter/limit-296 -m recent --name limit-296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-296 -m recent --name limit-296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 298 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} +Filter 298 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 - inet/filter/limit-297 -m recent --name limit-297 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-297 -m recent --name limit-297 --rsource --mask 255.255.255.255 --set + inet/filter/limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-297 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-297 - inet6/filter/limit-297 -m recent --name limit-297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-297 -m recent --name limit-297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 299 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +Filter 299 {"conn-limit":{"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 - inet/filter/limit-298 -m recent --name limit-298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-298 -m limit --limit 1/second -j LOG - inet/filter/limit-298 -m recent --name limit-298 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-298 -m limit --limit 12/minute -j ULOG + inet/filter/limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-298 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-298 - inet6/filter/limit-298 -m recent --name limit-298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-298 -m limit --limit 1/second -j LOG - inet6/filter/limit-298 -m recent --name limit-298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 300 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +Filter 300 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 - inet/filter/limit-299 -m recent --name limit-299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-299 -m recent --name limit-299 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-299 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-299 - inet6/filter/limit-299 -m recent --name limit-299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-299 -m recent --name limit-299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 301 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +Filter 301 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 - inet/filter/limit-300 -m recent --name limit-300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-300 -m recent --name limit-300 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-300 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-300 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-300 - inet6/filter/limit-300 -m recent --name limit-300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-300 -m recent --name limit-300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-300 -j ACCEPT -Filter 302 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +Filter 302 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-301 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-301 - inet/filter/limit-301 -m recent --name limit-301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-301 -m recent --name limit-301 --rsource --mask 255.255.255.255 --set + inet/filter/limit-301 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-301 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-301 - inet6/filter/limit-301 -m recent --name limit-301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-301 -m recent --name limit-301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-301 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 303 {"conn-limit":{"interval":5,"log":false},"log":"ulog","out":"B"} +Filter 303 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 - inet/filter/limit-302 -m recent --name limit-302 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-302 -m limit --limit 12/minute -j ULOG - inet/filter/limit-302 -m recent --name limit-302 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-302 -m limit --limit 1/second -j LOG + inet/filter/limit-302 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-302 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-302 - inet6/filter/limit-302 -m recent --name limit-302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-302 -m recent --name limit-302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-302 -m limit --limit 1/second -j LOG + inet6/filter/limit-302 -j ACCEPT -Filter 304 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"ulog","out":"B"} +Filter 304 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 - inet/filter/limit-303 -m recent --name limit-303 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-303 -m recent --name limit-303 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-303 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-303 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-303 - inet6/filter/limit-303 -m recent --name limit-303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-303 -m limit --limit 1/second -j LOG -Filter 305 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +Filter 305 {"conn-limit":{"log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 - inet/filter/limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-304 -j TEE --gateway 10.0.0.1 + inet/filter/limit-304 -j TEE --gateway 10.0.0.2 + inet/filter/limit-304 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-304 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-304 - inet6/filter/limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-304 -j TEE --gateway fc00::2 + inet6/filter/limit-304 -j ACCEPT -Filter 306 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +Filter 306 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-305 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-305 - inet/filter/limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-305 -j TEE --gateway 10.0.0.1 + inet/filter/limit-305 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-305 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-305 - inet6/filter/limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-305 -j TEE --gateway fc00::2 -Filter 307 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 307 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 - inet/filter/limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-306 -m limit --limit 1/second -j LOG - inet/filter/limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-306 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-306 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-306 - inet6/filter/limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-306 -m limit --limit 1/second -j LOG - inet6/filter/limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-306 -j ACCEPT -Filter 308 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 308 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 - inet/filter/limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-307 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-307 - inet6/filter/limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 309 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 309 {"conn-limit":{"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 - inet/filter/limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-308 -m limit --limit 12/minute -j ULOG + inet/filter/limit-308 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-308 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-308 - inet6/filter/limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-308 -j ACCEPT -Filter 310 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 310 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 - inet/filter/limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-309 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-309 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-309 - inet6/filter/limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 311 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} +Filter 311 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 - inet/filter/limit-310 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-310 -m limit --limit 12/minute -j ULOG - inet/filter/limit-310 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-310 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-310 - inet6/filter/limit-310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 312 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} +Filter 312 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 - inet/filter/limit-311 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-311 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-311 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-311 - inet6/filter/limit-311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 313 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 313 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 - inet/filter/limit-312 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-312 -j ACCEPT + inet/filter/limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-312 -m limit --limit 1/second -j LOG + inet/filter/limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-312 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-312 - inet6/filter/limit-312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-312 -j ACCEPT + inet6/filter/limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-312 -m limit --limit 1/second -j LOG + inet6/filter/limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 314 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 314 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-313 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-313 - inet/filter/limit-313 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-313 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-313 - inet6/filter/limit-313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 315 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 315 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 - inet/filter/limit-314 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-314 -m limit --limit 1/second -j LOG - inet/filter/limit-314 -j ACCEPT + inet/filter/limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-314 -j TEE --gateway 10.0.0.1 + inet/filter/limit-314 -j TEE --gateway 10.0.0.2 + inet/filter/limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-314 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-314 - inet6/filter/limit-314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-314 -m limit --limit 1/second -j LOG - inet6/filter/limit-314 -j ACCEPT + inet6/filter/limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-314 -j TEE --gateway fc00::2 + inet6/filter/limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 316 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 316 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 - inet/filter/limit-315 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-315 -m limit --limit 1/second -j LOG + inet/filter/limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-315 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-315 - inet6/filter/limit-315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-315 -m limit --limit 1/second -j LOG + inet6/filter/limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 317 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 317 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 - inet/filter/limit-316 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-316 -j ACCEPT + inet/filter/limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-316 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-316 - inet6/filter/limit-316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-316 -j ACCEPT + inet6/filter/limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 318 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 318 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-317 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-317 - inet/filter/limit-317 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-317 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-317 - inet6/filter/limit-317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 319 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 319 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 - inet/filter/limit-318 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-318 -m limit --limit 12/minute -j ULOG - inet/filter/limit-318 -j ACCEPT + inet/filter/limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-318 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-318 - inet6/filter/limit-318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-318 -j ACCEPT + inet6/filter/limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 320 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 320 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 - inet/filter/limit-319 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-319 -m limit --limit 12/minute -j ULOG + inet/filter/limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-319 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-319 - inet6/filter/limit-319 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 321 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +Filter 321 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 - inet/filter/limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-320 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-320 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-320 - inet6/filter/limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-320 -j ACCEPT -Filter 322 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +Filter 322 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 - inet/filter/limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-321 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-321 - inet6/filter/limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 323 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 323 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 - inet/filter/limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-322 -m limit --limit 1/second -j LOG - inet/filter/limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-322 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-322 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-322 - inet6/filter/limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-322 -m limit --limit 1/second -j LOG - inet6/filter/limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-322 -j ACCEPT -Filter 324 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 324 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 - inet/filter/limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-323 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-323 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-323 - inet6/filter/limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-323 -m limit --limit 1/second -j LOG -Filter 325 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 325 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 - inet/filter/limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-324 -j TEE --gateway 10.0.0.1 + inet/filter/limit-324 -j TEE --gateway 10.0.0.2 + inet/filter/limit-324 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-324 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-324 - inet6/filter/limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-324 -j TEE --gateway fc00::2 + inet6/filter/limit-324 -j ACCEPT -Filter 326 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 326 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-325 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-325 - inet/filter/limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-325 -j TEE --gateway 10.0.0.1 + inet/filter/limit-325 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-325 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-325 - inet6/filter/limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-325 -j TEE --gateway fc00::2 -Filter 327 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} +Filter 327 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 - inet/filter/limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-326 -m limit --limit 12/minute -j ULOG - inet/filter/limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-326 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-326 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-326 - inet6/filter/limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-326 -j ACCEPT -Filter 328 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} +Filter 328 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 - inet/filter/limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-327 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-327 - inet6/filter/limit-327 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-327 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 329 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 329 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 - inet/filter/limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-328 -m limit --limit 12/minute -j ULOG inet/filter/limit-328 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-328 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-328 - inet6/filter/limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-328 -j ACCEPT -Filter 330 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 330 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-329 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-329 - inet/filter/limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-329 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-329 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-329 - inet6/filter/limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 331 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 331 {"conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 - inet/filter/limit-330 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-330 -m limit --limit 1/second -j LOG - inet/filter/limit-330 -j ACCEPT + inet/filter/limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-330 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-330 - inet6/filter/limit-330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-330 -m limit --limit 1/second -j LOG - inet6/filter/limit-330 -j ACCEPT + inet6/filter/limit-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 332 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 332 {"action":"pass","conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 - inet/filter/limit-331 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-331 -m limit --limit 1/second -j LOG + inet/filter/limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-331 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-331 - inet6/filter/limit-331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-331 -m limit --limit 1/second -j LOG + inet6/filter/limit-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-331 -m recent --name user:C --rsource --mask fe00:: --set -Filter 333 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 333 {"conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 - inet/filter/limit-332 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-332 -j ACCEPT + inet/filter/limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-332 -m limit --limit 1/second -j LOG + inet/filter/limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-332 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-332 - inet6/filter/limit-332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-332 -j ACCEPT + inet6/filter/limit-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-332 -m limit --limit 1/second -j LOG + inet6/filter/limit-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 334 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 334 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 - inet/filter/limit-333 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-333 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-333 - inet6/filter/limit-333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 335 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 335 {"conn-limit":{"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 - inet/filter/limit-334 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-334 -m limit --limit 12/minute -j ULOG - inet/filter/limit-334 -j ACCEPT + inet/filter/limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-334 -j TEE --gateway 10.0.0.1 + inet/filter/limit-334 -j TEE --gateway 10.0.0.2 + inet/filter/limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-334 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-334 - inet6/filter/limit-334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-334 -j ACCEPT + inet6/filter/limit-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-334 -j TEE --gateway fc00::2 + inet6/filter/limit-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 336 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 336 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 - inet/filter/limit-335 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-335 -m limit --limit 12/minute -j ULOG + inet/filter/limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-335 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-335 - inet6/filter/limit-335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 337 {"conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +Filter 337 {"conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 - inet/filter/limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-336 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-336 - inet6/filter/limit-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 338 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +Filter 338 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 - inet/filter/limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-337 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-337 - inet6/filter/limit-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-337 -m recent --name user:C --rsource --mask fe00:: --set -Filter 339 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 339 {"conn-limit":{"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 - inet/filter/limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-338 -m limit --limit 1/second -j LOG + inet/filter/limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-338 -m limit --limit 12/minute -j ULOG inet/filter/limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-338 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-338 - inet6/filter/limit-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-338 -m limit --limit 1/second -j LOG + inet6/filter/limit-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 340 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 340 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 - inet/filter/limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-339 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-339 - inet6/filter/limit-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-339 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -Filter 341 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 341 {"conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 - inet/filter/limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-340 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-340 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-340 - inet6/filter/limit-340 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-340 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-340 -j ACCEPT -Filter 342 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 342 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 - inet/filter/limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-341 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-341 - inet6/filter/limit-341 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-341 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-341 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 343 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} +Filter 343 {"conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 - inet/filter/limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-342 -m limit --limit 12/minute -j ULOG - inet/filter/limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-342 -m limit --limit 1/second -j LOG + inet/filter/limit-342 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-342 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-342 - inet6/filter/limit-342 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-342 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-342 -m limit --limit 1/second -j LOG + inet6/filter/limit-342 -j ACCEPT -Filter 344 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} +Filter 344 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 - inet/filter/limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-343 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-343 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-343 - inet6/filter/limit-343 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-343 -m limit --limit 1/second -j LOG -Filter 345 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 345 {"conn-limit":{"log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 - inet/filter/limit-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-344 -j TEE --gateway 10.0.0.1 + inet/filter/limit-344 -j TEE --gateway 10.0.0.2 inet/filter/limit-344 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-344 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-344 - inet6/filter/limit-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-344 -j TEE --gateway fc00::2 inet6/filter/limit-344 -j ACCEPT -Filter 346 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 346 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 - inet/filter/limit-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-345 -j TEE --gateway 10.0.0.1 + inet/filter/limit-345 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-345 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-345 - inet6/filter/limit-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-345 -j TEE --gateway fc00::2 -Filter 347 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 347 {"conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 - inet/filter/limit-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-346 -m limit --limit 1/second -j LOG + inet/filter/limit-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-346 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-346 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-346 - inet6/filter/limit-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-346 -m limit --limit 1/second -j LOG + inet6/filter/limit-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-346 -j ACCEPT -Filter 348 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 348 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 - inet/filter/limit-347 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-347 -m limit --limit 1/second -j LOG + inet/filter/limit-347 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-347 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-347 - inet6/filter/limit-347 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-347 -m limit --limit 1/second -j LOG + inet6/filter/limit-347 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 349 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 349 {"conn-limit":{"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 - inet/filter/limit-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-348 -m limit --limit 12/minute -j ULOG inet/filter/limit-348 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-348 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-348 - inet6/filter/limit-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-348 -j ACCEPT -Filter 350 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 350 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 - inet/filter/limit-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-349 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-349 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-349 - inet6/filter/limit-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 351 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 351 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 - inet/filter/limit-350 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-350 -m limit --limit 12/minute -j ULOG - inet/filter/limit-350 -j ACCEPT + inet/filter/limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-350 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-350 - inet6/filter/limit-350 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-350 -j ACCEPT + inet6/filter/limit-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 352 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 352 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 - inet/filter/limit-351 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-351 -m limit --limit 12/minute -j ULOG + inet/filter/limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-351 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-351 - inet6/filter/limit-351 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-351 -m recent --name user:C --rdest --mask fe00:: --set -Filter 353 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +Filter 353 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 - inet/filter/limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-352 -m limit --limit 1/second -j LOG inet/filter/limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-352 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-352 - inet6/filter/limit-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-352 -m limit --limit 1/second -j LOG inet6/filter/limit-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 354 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +Filter 354 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 - inet/filter/limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-353 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-353 - inet6/filter/limit-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-353 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 355 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 355 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 - inet/filter/limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-354 -m limit --limit 1/second -j LOG + inet/filter/limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-354 -j TEE --gateway 10.0.0.1 + inet/filter/limit-354 -j TEE --gateway 10.0.0.2 inet/filter/limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-354 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-354 - inet6/filter/limit-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-354 -m limit --limit 1/second -j LOG + inet6/filter/limit-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-354 -j TEE --gateway fc00::2 inet6/filter/limit-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 356 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 356 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 - inet/filter/limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-355 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-355 - inet6/filter/limit-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-355 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 357 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 357 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 - inet/filter/limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-356 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-356 - inet6/filter/limit-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 358 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 358 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 - inet/filter/limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-357 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-357 - inet6/filter/limit-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-357 -m recent --name user:C --rdest --mask fe00:: --set -Filter 359 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} +Filter 359 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-358 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-358 - inet/filter/limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-358 -m limit --limit 12/minute -j ULOG inet/filter/limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-358 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-358 - inet6/filter/limit-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 360 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} +Filter 360 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-359 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-359 - inet/filter/limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-359 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-359 - inet6/filter/limit-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -Filter 361 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 361 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-360 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-360 - inet/filter/limit-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-360 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-360 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-360 - inet6/filter/limit-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-360 -j ACCEPT -Filter 362 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 362 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-361 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-361 - inet/filter/limit-361 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-361 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-361 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-361 - inet6/filter/limit-361 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-361 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 363 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 363 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-362 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-362 - inet/filter/limit-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-362 -m limit --limit 1/second -j LOG inet/filter/limit-362 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-362 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-362 - inet6/filter/limit-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-362 -m limit --limit 1/second -j LOG inet6/filter/limit-362 -j ACCEPT -Filter 364 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 364 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-363 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-363 - inet/filter/limit-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-363 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-363 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-363 - inet6/filter/limit-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-363 -m limit --limit 1/second -j LOG -Filter 365 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 365 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-364 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-364 - inet/filter/limit-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-364 -j TEE --gateway 10.0.0.1 + inet/filter/limit-364 -j TEE --gateway 10.0.0.2 inet/filter/limit-364 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-364 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-364 - inet6/filter/limit-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-364 -j TEE --gateway fc00::2 inet6/filter/limit-364 -j ACCEPT -Filter 366 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 366 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-365 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-365 - inet/filter/limit-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-365 -j TEE --gateway 10.0.0.1 + inet/filter/limit-365 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-365 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-365 - inet6/filter/limit-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-365 -j TEE --gateway fc00::2 -Filter 367 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 367 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-366 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-366 - inet/filter/limit-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-366 -m limit --limit 12/minute -j ULOG + inet/filter/limit-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-366 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-366 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-366 - inet6/filter/limit-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-366 -j ACCEPT -Filter 368 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 368 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-367 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-367 - inet/filter/limit-367 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-367 -m limit --limit 12/minute -j ULOG + inet/filter/limit-367 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-367 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-367 - inet6/filter/limit-367 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-367 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 369 {"conn-limit":{"interval":5},"out":"B"} +Filter 369 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-368 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-368 - inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-152 - inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-152 -m limit --limit 1/second -j LOG - inet/filter/logdrop-152 -j DROP + inet/filter/limit-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-368 -m limit --limit 12/minute -j ULOG + inet/filter/limit-368 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-368 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-368 - inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-152 - inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-152 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-152 -j DROP + inet6/filter/limit-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-368 -j ACCEPT -Filter 370 {"action":"pass","conn-limit":{"interval":5},"out":"B"} +Filter 370 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-369 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-369 - inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-153 - inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-153 -m limit --limit 1/second -j LOG - inet/filter/logdrop-153 -j DROP + inet/filter/limit-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-369 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-369 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-369 - inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-153 - inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-153 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-153 -j DROP + inet6/filter/limit-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 371 {"conn-limit":{"interval":5},"log":true,"out":"B"} +Filter 371 {"conn-limit":{"log":"ulog"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-370 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-370 - inet/filter/limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-154 - inet/filter/limit-370 -m limit --limit 1/second -j LOG + inet/filter/limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-190 inet/filter/limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-154 -m limit --limit 1/second -j LOG - inet/filter/logdrop-154 -j DROP + inet/filter/logdrop-190 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-190 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-370 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-370 - inet6/filter/limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-154 - inet6/filter/limit-370 -m limit --limit 1/second -j LOG + inet6/filter/limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-190 inet6/filter/limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-154 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-154 -j DROP + inet6/filter/logdrop-190 -j DROP -Filter 372 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} +Filter 372 {"action":"pass","conn-limit":{"log":"ulog"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-371 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-371 - inet/filter/limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-155 - inet/filter/limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-155 -m limit --limit 1/second -j LOG - inet/filter/logdrop-155 -j DROP + inet/filter/limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-191 + inet/filter/limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-191 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-191 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-371 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-371 - inet6/filter/limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-155 - inet6/filter/limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-155 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-155 -j DROP + inet6/filter/limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-191 + inet6/filter/limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-191 -j DROP -Filter 373 {"conn-limit":{"interval":5},"log":"none","out":"B"} +Filter 373 {"conn-limit":{"log":"ulog"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-372 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-372 - inet/filter/limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-156 + inet/filter/limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-192 + inet/filter/limit-372 -m limit --limit 1/second -j LOG inet/filter/limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-156 -m limit --limit 1/second -j LOG - inet/filter/logdrop-156 -j DROP + inet/filter/logdrop-192 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-192 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-372 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-372 - inet6/filter/limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-156 + inet6/filter/limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-192 + inet6/filter/limit-372 -m limit --limit 1/second -j LOG inet6/filter/limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-156 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-156 -j DROP + inet6/filter/logdrop-192 -j DROP -Filter 374 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} +Filter 374 {"action":"pass","conn-limit":{"log":"ulog"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-373 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-373 - inet/filter/limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-157 - inet/filter/limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-157 -m limit --limit 1/second -j LOG - inet/filter/logdrop-157 -j DROP + inet/filter/limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-193 + inet/filter/limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-193 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-193 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-373 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-373 - inet6/filter/limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-157 - inet6/filter/limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-157 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-157 -j DROP + inet6/filter/limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-193 + inet6/filter/limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-193 -j DROP -Filter 375 {"conn-limit":{"interval":5},"log":"ulog","out":"B"} +Filter 375 {"conn-limit":{"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-374 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 - inet/filter/limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-158 - inet/filter/limit-374 -m limit --limit 12/minute -j ULOG + inet/filter/limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-194 + inet/filter/limit-374 -j TEE --gateway 10.0.0.1 + inet/filter/limit-374 -j TEE --gateway 10.0.0.2 inet/filter/limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-158 -m limit --limit 1/second -j LOG - inet/filter/logdrop-158 -j DROP + inet/filter/logdrop-194 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-194 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-374 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-374 - inet6/filter/limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-158 + inet6/filter/limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-194 + inet6/filter/limit-374 -j TEE --gateway fc00::2 inet6/filter/limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-158 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-158 -j DROP + inet6/filter/logdrop-194 -j DROP -Filter 376 {"action":"pass","conn-limit":{"interval":5},"log":"ulog","out":"B"} +Filter 376 {"action":"pass","conn-limit":{"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-375 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 - inet/filter/limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-159 - inet/filter/limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-159 -m limit --limit 1/second -j LOG - inet/filter/logdrop-159 -j DROP + inet/filter/limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-195 + inet/filter/limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-195 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-195 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-375 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-375 - inet6/filter/limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-159 - inet6/filter/logdrop-159 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-159 -j DROP + inet6/filter/limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-195 + inet6/filter/limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-195 -j DROP -Filter 377 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} +Filter 377 {"conn-limit":{"log":"ulog"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-376 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 - inet/filter/limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-160 - inet/filter/limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-160 -m limit --limit 1/second -j LOG - inet/filter/logdrop-160 -j DROP + inet/filter/limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-196 + inet/filter/limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-196 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-196 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-376 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-376 - inet6/filter/limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-160 - inet6/filter/limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-160 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-160 -j DROP + inet6/filter/limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-196 + inet6/filter/limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-196 -j DROP -Filter 378 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} +Filter 378 {"action":"pass","conn-limit":{"log":"ulog"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-377 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-377 - inet/filter/limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-161 - inet/filter/limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-161 -m limit --limit 1/second -j LOG - inet/filter/logdrop-161 -j DROP + inet/filter/limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-197 + inet/filter/limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-197 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-197 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-377 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-377 - inet6/filter/limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-161 - inet6/filter/limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-161 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-161 -j DROP + inet6/filter/limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-197 + inet6/filter/limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-197 -j DROP -Filter 379 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +Filter 379 {"conn-limit":{"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-378 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 - inet/filter/limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-162 - inet/filter/limit-378 -m limit --limit 1/second -j LOG - inet/filter/limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-162 -m limit --limit 1/second -j LOG - inet/filter/logdrop-162 -j DROP + inet/filter/limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-198 + inet/filter/limit-378 -m limit --limit 12/minute -j ULOG + inet/filter/limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-198 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-198 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-378 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-378 - inet6/filter/limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-162 - inet6/filter/limit-378 -m limit --limit 1/second -j LOG - inet6/filter/limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-162 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-162 -j DROP + inet6/filter/limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-198 + inet6/filter/limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-198 -j DROP -Filter 380 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +Filter 380 {"action":"pass","conn-limit":{"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-379 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 - inet/filter/limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-163 - inet/filter/limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-163 -m limit --limit 1/second -j LOG - inet/filter/logdrop-163 -j DROP + inet/filter/limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-199 + inet/filter/limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-199 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-199 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-379 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-379 - inet6/filter/limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-163 - inet6/filter/limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-163 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-163 -j DROP + inet6/filter/limit-379 -m recent --name limit-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-199 + inet6/filter/logdrop-199 -j DROP -Filter 381 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +Filter 381 {"conn-limit":{"log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-380 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 - inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-164 + inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-200 inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-164 -m limit --limit 1/second -j LOG - inet/filter/logdrop-164 -j DROP + inet/filter/logdrop-200 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-200 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-380 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-380 - inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-164 + inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-200 inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-164 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-164 -j DROP + inet6/filter/logdrop-200 -j DROP -Filter 382 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +Filter 382 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-381 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-381 - inet/filter/limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-165 + inet/filter/limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-201 inet/filter/limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-165 -m limit --limit 1/second -j LOG - inet/filter/logdrop-165 -j DROP + inet/filter/logdrop-201 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-201 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-381 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-381 - inet6/filter/limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-165 + inet6/filter/limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-201 inet6/filter/limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-165 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-165 -j DROP + inet6/filter/logdrop-201 -j DROP -Filter 383 {"conn-limit":{"interval":5,"name":"A"},"log":"ulog","out":"B"} +Filter 383 {"conn-limit":{"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-382 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 - inet/filter/limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-166 - inet/filter/limit-382 -m limit --limit 12/minute -j ULOG + inet/filter/limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-202 + inet/filter/limit-382 -m limit --limit 1/second -j LOG inet/filter/limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-166 -m limit --limit 1/second -j LOG - inet/filter/logdrop-166 -j DROP + inet/filter/logdrop-202 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-202 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-382 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-382 - inet6/filter/limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-166 + inet6/filter/limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-202 + inet6/filter/limit-382 -m limit --limit 1/second -j LOG inet6/filter/limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-166 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-166 -j DROP + inet6/filter/logdrop-202 -j DROP -Filter 384 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"ulog","out":"B"} +Filter 384 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-383 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 - inet/filter/limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-167 - inet/filter/limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-167 -m limit --limit 1/second -j LOG - inet/filter/logdrop-167 -j DROP + inet/filter/limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-203 + inet/filter/limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-203 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-203 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-383 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-383 - inet6/filter/limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-167 - inet6/filter/logdrop-167 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-167 -j DROP + inet6/filter/limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-203 + inet6/filter/limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-203 -j DROP -Filter 385 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +Filter 385 {"conn-limit":{"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-384 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 - inet/filter/limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-168 - inet/filter/limit-384 -j ACCEPT - inet/filter/logdrop-168 -m limit --limit 1/second -j LOG - inet/filter/logdrop-168 -j DROP + inet/filter/limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-204 + inet/filter/limit-384 -j TEE --gateway 10.0.0.1 + inet/filter/limit-384 -j TEE --gateway 10.0.0.2 + inet/filter/limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-204 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-204 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-384 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-384 - inet6/filter/limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-168 - inet6/filter/limit-384 -j ACCEPT - inet6/filter/logdrop-168 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-168 -j DROP + inet6/filter/limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-204 + inet6/filter/limit-384 -j TEE --gateway fc00::2 + inet6/filter/limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-204 -j DROP -Filter 386 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +Filter 386 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-385 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-385 - inet/filter/limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-169 - inet/filter/logdrop-169 -m limit --limit 1/second -j LOG - inet/filter/logdrop-169 -j DROP + inet/filter/limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-205 + inet/filter/limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-205 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-205 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-385 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-385 - inet6/filter/limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-169 - inet6/filter/logdrop-169 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-169 -j DROP + inet6/filter/limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-205 + inet6/filter/limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-205 -j DROP -Filter 387 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 387 {"conn-limit":{"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-386 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 - inet/filter/limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-170 - inet/filter/limit-386 -m limit --limit 1/second -j LOG - inet/filter/limit-386 -j ACCEPT - inet/filter/logdrop-170 -m limit --limit 1/second -j LOG - inet/filter/logdrop-170 -j DROP + inet/filter/limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-206 + inet/filter/limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-206 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-206 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-386 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-386 - inet6/filter/limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-170 - inet6/filter/limit-386 -m limit --limit 1/second -j LOG - inet6/filter/limit-386 -j ACCEPT - inet6/filter/logdrop-170 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-170 -j DROP + inet6/filter/limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-206 + inet6/filter/limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-206 -j DROP -Filter 388 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 388 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-387 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 - inet/filter/limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-171 - inet/filter/limit-387 -m limit --limit 1/second -j LOG - inet/filter/logdrop-171 -m limit --limit 1/second -j LOG - inet/filter/logdrop-171 -j DROP + inet/filter/limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-207 + inet/filter/limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-207 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-207 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-387 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-387 - inet6/filter/limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-171 - inet6/filter/limit-387 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-171 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-171 -j DROP + inet6/filter/limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-207 + inet6/filter/limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-207 -j DROP -Filter 389 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 389 {"conn-limit":{"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-388 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 - inet/filter/limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-172 - inet/filter/limit-388 -j ACCEPT - inet/filter/logdrop-172 -m limit --limit 1/second -j LOG - inet/filter/logdrop-172 -j DROP + inet/filter/limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-208 + inet/filter/limit-388 -m limit --limit 12/minute -j ULOG + inet/filter/limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-208 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-208 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-388 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-388 - inet6/filter/limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-172 - inet6/filter/limit-388 -j ACCEPT - inet6/filter/logdrop-172 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-172 -j DROP + inet6/filter/limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-208 + inet6/filter/limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-208 -j DROP -Filter 390 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 390 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-389 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-389 - inet/filter/limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-173 - inet/filter/logdrop-173 -m limit --limit 1/second -j LOG - inet/filter/logdrop-173 -j DROP + inet/filter/limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-209 + inet/filter/limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-209 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-209 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-389 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-389 - inet6/filter/limit-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-173 - inet6/filter/logdrop-173 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-173 -j DROP + inet6/filter/limit-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-209 + inet6/filter/logdrop-209 -j DROP -Filter 391 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 391 {"conn-limit":{"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-390 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 - inet/filter/limit-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-174 - inet/filter/limit-390 -m limit --limit 12/minute -j ULOG + inet/filter/limit-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-210 inet/filter/limit-390 -j ACCEPT - inet/filter/logdrop-174 -m limit --limit 1/second -j LOG - inet/filter/logdrop-174 -j DROP + inet/filter/logdrop-210 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-210 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-390 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-390 - inet6/filter/limit-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-174 + inet6/filter/limit-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-210 inet6/filter/limit-390 -j ACCEPT - inet6/filter/logdrop-174 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-174 -j DROP + inet6/filter/logdrop-210 -j DROP -Filter 392 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 392 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-391 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 - inet/filter/limit-391 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-175 - inet/filter/limit-391 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-175 -m limit --limit 1/second -j LOG - inet/filter/logdrop-175 -j DROP + inet/filter/limit-391 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-211 + inet/filter/logdrop-211 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-211 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-391 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-391 - inet6/filter/limit-391 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-175 - inet6/filter/logdrop-175 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-175 -j DROP + inet6/filter/limit-391 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-211 + inet6/filter/logdrop-211 -j DROP -Filter 393 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +Filter 393 {"conn-limit":{"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-392 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 - inet/filter/limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 - inet/filter/limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-176 -m limit --limit 1/second -j LOG - inet/filter/logdrop-176 -j DROP + inet/filter/limit-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-212 + inet/filter/limit-392 -m limit --limit 1/second -j LOG + inet/filter/limit-392 -j ACCEPT + inet/filter/logdrop-212 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-212 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-392 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-392 - inet6/filter/limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 - inet6/filter/limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-176 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-176 -j DROP + inet6/filter/limit-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-212 + inet6/filter/limit-392 -m limit --limit 1/second -j LOG + inet6/filter/limit-392 -j ACCEPT + inet6/filter/logdrop-212 -j DROP -Filter 394 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +Filter 394 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-393 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-393 - inet/filter/limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 - inet/filter/limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-177 -m limit --limit 1/second -j LOG - inet/filter/logdrop-177 -j DROP + inet/filter/limit-393 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-213 + inet/filter/limit-393 -m limit --limit 1/second -j LOG + inet/filter/logdrop-213 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-213 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-393 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-393 - inet6/filter/limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 - inet6/filter/limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-177 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-177 -j DROP + inet6/filter/limit-393 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-213 + inet6/filter/limit-393 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-213 -j DROP -Filter 395 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +Filter 395 {"conn-limit":{"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-394 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 - inet/filter/limit-394 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 - inet/filter/limit-394 -m limit --limit 1/second -j LOG - inet/filter/limit-394 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-178 -m limit --limit 1/second -j LOG - inet/filter/logdrop-178 -j DROP + inet/filter/limit-394 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-214 + inet/filter/limit-394 -j TEE --gateway 10.0.0.1 + inet/filter/limit-394 -j TEE --gateway 10.0.0.2 + inet/filter/limit-394 -j ACCEPT + inet/filter/logdrop-214 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-214 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-394 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-394 - inet6/filter/limit-394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 - inet6/filter/limit-394 -m limit --limit 1/second -j LOG - inet6/filter/limit-394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-178 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-178 -j DROP + inet6/filter/limit-394 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-214 + inet6/filter/limit-394 -j TEE --gateway fc00::2 + inet6/filter/limit-394 -j ACCEPT + inet6/filter/logdrop-214 -j DROP -Filter 396 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +Filter 396 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-395 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 - inet/filter/limit-395 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 - inet/filter/limit-395 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-179 -m limit --limit 1/second -j LOG - inet/filter/logdrop-179 -j DROP + inet/filter/limit-395 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-215 + inet/filter/limit-395 -j TEE --gateway 10.0.0.1 + inet/filter/limit-395 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-215 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-215 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-395 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-395 - inet6/filter/limit-395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 - inet6/filter/limit-395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-179 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-179 -j DROP + inet6/filter/limit-395 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-215 + inet6/filter/limit-395 -j TEE --gateway fc00::2 + inet6/filter/logdrop-215 -j DROP -Filter 397 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +Filter 397 {"conn-limit":{"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-396 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 - inet/filter/limit-396 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 - inet/filter/limit-396 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-180 -m limit --limit 1/second -j LOG - inet/filter/logdrop-180 -j DROP + inet/filter/limit-396 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-216 + inet/filter/limit-396 -j ACCEPT + inet/filter/logdrop-216 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-216 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-396 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-396 - inet6/filter/limit-396 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 - inet6/filter/limit-396 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-180 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-180 -j DROP + inet6/filter/limit-396 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-216 + inet6/filter/limit-396 -j ACCEPT + inet6/filter/logdrop-216 -j DROP -Filter 398 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +Filter 398 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-397 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-397 - inet/filter/limit-397 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 - inet/filter/limit-397 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-181 -m limit --limit 1/second -j LOG - inet/filter/logdrop-181 -j DROP + inet/filter/limit-397 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-217 + inet/filter/logdrop-217 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-217 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-397 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-397 - inet6/filter/limit-397 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 - inet6/filter/limit-397 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-181 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-181 -j DROP + inet6/filter/limit-397 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-217 + inet6/filter/logdrop-217 -j DROP -Filter 399 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog","out":"B"} +Filter 399 {"conn-limit":{"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-398 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 - inet/filter/limit-398 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 + inet/filter/limit-398 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-218 inet/filter/limit-398 -m limit --limit 12/minute -j ULOG - inet/filter/limit-398 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-182 -m limit --limit 1/second -j LOG - inet/filter/logdrop-182 -j DROP + inet/filter/limit-398 -j ACCEPT + inet/filter/logdrop-218 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-218 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-398 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-398 - inet6/filter/limit-398 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 - inet6/filter/limit-398 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-182 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-182 -j DROP + inet6/filter/limit-398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-218 + inet6/filter/limit-398 -j ACCEPT + inet6/filter/logdrop-218 -j DROP -Filter 400 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog","out":"B"} +Filter 400 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-399 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 - inet/filter/limit-399 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 - inet/filter/limit-399 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-183 -m limit --limit 1/second -j LOG - inet/filter/logdrop-183 -j DROP + inet/filter/limit-399 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-219 + inet/filter/limit-399 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-219 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-219 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-399 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-399 - inet6/filter/limit-399 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 - inet6/filter/logdrop-183 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-183 -j DROP + inet6/filter/limit-399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-219 + inet6/filter/logdrop-219 -j DROP -Filter 401 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +Filter 401 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-400 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 - inet/filter/limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-184 - inet/filter/limit-400 -j ACCEPT - inet/filter/logdrop-184 -m limit --limit 1/second -j LOG - inet/filter/logdrop-184 -j DROP + inet/filter/limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-220 + inet/filter/limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-220 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-220 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-400 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-400 - inet6/filter/limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-184 - inet6/filter/limit-400 -j ACCEPT - inet6/filter/logdrop-184 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-184 -j DROP + inet6/filter/limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-220 + inet6/filter/limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-220 -j DROP -Filter 402 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +Filter 402 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-401 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-401 - inet/filter/limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-185 - inet/filter/logdrop-185 -m limit --limit 1/second -j LOG - inet/filter/logdrop-185 -j DROP + inet/filter/limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-221 + inet/filter/limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-221 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-221 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-401 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-401 - inet6/filter/limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-185 - inet6/filter/logdrop-185 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-185 -j DROP + inet6/filter/limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-221 + inet6/filter/limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-221 -j DROP -Filter 403 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 403 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-402 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 - inet/filter/limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 + inet/filter/limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-222 inet/filter/limit-402 -m limit --limit 1/second -j LOG - inet/filter/limit-402 -j ACCEPT - inet/filter/logdrop-186 -m limit --limit 1/second -j LOG - inet/filter/logdrop-186 -j DROP + inet/filter/limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-222 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-222 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-402 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-402 - inet6/filter/limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 + inet6/filter/limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-222 inet6/filter/limit-402 -m limit --limit 1/second -j LOG - inet6/filter/limit-402 -j ACCEPT - inet6/filter/logdrop-186 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-186 -j DROP + inet6/filter/limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-222 -j DROP -Filter 404 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 404 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-403 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 - inet/filter/limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 - inet/filter/limit-403 -m limit --limit 1/second -j LOG - inet/filter/logdrop-187 -m limit --limit 1/second -j LOG - inet/filter/logdrop-187 -j DROP + inet/filter/limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-223 + inet/filter/limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-223 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-223 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-403 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-403 - inet6/filter/limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 - inet6/filter/limit-403 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-187 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-187 -j DROP + inet6/filter/limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-223 + inet6/filter/limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-223 -j DROP -Filter 405 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 405 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-404 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 - inet/filter/limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 - inet/filter/limit-404 -j ACCEPT - inet/filter/logdrop-188 -m limit --limit 1/second -j LOG - inet/filter/logdrop-188 -j DROP + inet/filter/limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-224 + inet/filter/limit-404 -j TEE --gateway 10.0.0.1 + inet/filter/limit-404 -j TEE --gateway 10.0.0.2 + inet/filter/limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-224 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-224 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-404 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-404 - inet6/filter/limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 - inet6/filter/limit-404 -j ACCEPT - inet6/filter/logdrop-188 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-188 -j DROP + inet6/filter/limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-224 + inet6/filter/limit-404 -j TEE --gateway fc00::2 + inet6/filter/limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-224 -j DROP -Filter 406 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 406 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-405 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-405 - inet/filter/limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 - inet/filter/logdrop-189 -m limit --limit 1/second -j LOG - inet/filter/logdrop-189 -j DROP + inet/filter/limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-225 + inet/filter/limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-225 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-225 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-405 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-405 - inet6/filter/limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 - inet6/filter/logdrop-189 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-189 -j DROP + inet6/filter/limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-225 + inet6/filter/limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-225 -j DROP -Filter 407 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 407 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-406 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 - inet/filter/limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 - inet/filter/limit-406 -m limit --limit 12/minute -j ULOG - inet/filter/limit-406 -j ACCEPT - inet/filter/logdrop-190 -m limit --limit 1/second -j LOG - inet/filter/logdrop-190 -j DROP + inet/filter/limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-226 + inet/filter/limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-226 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-226 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-406 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-406 - inet6/filter/limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 - inet6/filter/limit-406 -j ACCEPT - inet6/filter/logdrop-190 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-190 -j DROP + inet6/filter/limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-226 + inet6/filter/limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-226 -j DROP -Filter 408 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog","out":"B"} +Filter 408 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-407 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 - inet/filter/limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 - inet/filter/limit-407 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-191 -m limit --limit 1/second -j LOG - inet/filter/logdrop-191 -j DROP + inet/filter/limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-227 + inet/filter/limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-227 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-227 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-407 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-407 - inet6/filter/limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 - inet6/filter/logdrop-191 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-191 -j DROP + inet6/filter/limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-227 + inet6/filter/limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-227 -j DROP -Filter 409 {"conn-limit":{"interval":5,"name":"C"},"out":"B"} +Filter 409 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-408 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 - inet/filter/limit-408 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-192 - inet/filter/limit-408 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-192 -m limit --limit 1/second -j LOG - inet/filter/logdrop-192 -j DROP + inet/filter/limit-408 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-228 + inet/filter/limit-408 -m limit --limit 12/minute -j ULOG + inet/filter/limit-408 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-228 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-228 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-408 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-408 - inet6/filter/limit-408 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-192 - inet6/filter/limit-408 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-192 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-192 -j DROP + inet6/filter/limit-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-228 + inet6/filter/limit-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-228 -j DROP -Filter 410 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"out":"B"} +Filter 410 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-409 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-409 - inet/filter/limit-409 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-193 - inet/filter/limit-409 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-193 -m limit --limit 1/second -j LOG - inet/filter/logdrop-193 -j DROP + inet/filter/limit-409 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 + inet/filter/limit-409 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-229 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-229 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-409 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-409 - inet6/filter/limit-409 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-193 - inet6/filter/limit-409 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-193 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-193 -j DROP + inet6/filter/limit-409 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 + inet6/filter/logdrop-229 -j DROP -Filter 411 {"conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} +Filter 411 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-410 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 - inet/filter/limit-410 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-194 - inet/filter/limit-410 -m limit --limit 1/second -j LOG - inet/filter/limit-410 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-194 -m limit --limit 1/second -j LOG - inet/filter/logdrop-194 -j DROP + inet/filter/limit-410 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-230 + inet/filter/limit-410 -j ACCEPT + inet/filter/logdrop-230 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-230 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-410 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-410 - inet6/filter/limit-410 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-194 - inet6/filter/limit-410 -m limit --limit 1/second -j LOG - inet6/filter/limit-410 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-194 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-194 -j DROP + inet6/filter/limit-410 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-230 + inet6/filter/limit-410 -j ACCEPT + inet6/filter/logdrop-230 -j DROP -Filter 412 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} +Filter 412 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-411 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 - inet/filter/limit-411 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-195 - inet/filter/limit-411 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-195 -m limit --limit 1/second -j LOG - inet/filter/logdrop-195 -j DROP + inet/filter/limit-411 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-231 + inet/filter/logdrop-231 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-231 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-411 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-411 - inet6/filter/limit-411 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-195 - inet6/filter/limit-411 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-195 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-195 -j DROP + inet6/filter/limit-411 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-231 + inet6/filter/logdrop-231 -j DROP -Filter 413 {"conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} +Filter 413 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-412 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 - inet/filter/limit-412 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-196 - inet/filter/limit-412 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-196 -m limit --limit 1/second -j LOG - inet/filter/logdrop-196 -j DROP + inet/filter/limit-412 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-232 + inet/filter/limit-412 -m limit --limit 1/second -j LOG + inet/filter/limit-412 -j ACCEPT + inet/filter/logdrop-232 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-232 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-412 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-412 - inet6/filter/limit-412 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-196 - inet6/filter/limit-412 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-196 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-196 -j DROP + inet6/filter/limit-412 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-232 + inet6/filter/limit-412 -m limit --limit 1/second -j LOG + inet6/filter/limit-412 -j ACCEPT + inet6/filter/logdrop-232 -j DROP -Filter 414 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} +Filter 414 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-413 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-413 - inet/filter/limit-413 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-197 - inet/filter/limit-413 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-197 -m limit --limit 1/second -j LOG - inet/filter/logdrop-197 -j DROP + inet/filter/limit-413 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-233 + inet/filter/limit-413 -m limit --limit 1/second -j LOG + inet/filter/logdrop-233 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-233 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-413 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-413 - inet6/filter/limit-413 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-197 - inet6/filter/limit-413 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-197 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-197 -j DROP + inet6/filter/limit-413 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-233 + inet6/filter/limit-413 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-233 -j DROP -Filter 415 {"conn-limit":{"interval":5,"name":"C"},"log":"ulog","out":"B"} +Filter 415 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-414 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 - inet/filter/limit-414 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-198 - inet/filter/limit-414 -m limit --limit 12/minute -j ULOG - inet/filter/limit-414 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-198 -m limit --limit 1/second -j LOG - inet/filter/logdrop-198 -j DROP + inet/filter/limit-414 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-234 + inet/filter/limit-414 -j TEE --gateway 10.0.0.1 + inet/filter/limit-414 -j TEE --gateway 10.0.0.2 + inet/filter/limit-414 -j ACCEPT + inet/filter/logdrop-234 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-234 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-414 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-414 - inet6/filter/limit-414 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-198 - inet6/filter/limit-414 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-198 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-198 -j DROP + inet6/filter/limit-414 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-234 + inet6/filter/limit-414 -j TEE --gateway fc00::2 + inet6/filter/limit-414 -j ACCEPT + inet6/filter/logdrop-234 -j DROP -Filter 416 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"ulog","out":"B"} +Filter 416 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-415 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 - inet/filter/limit-415 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-199 - inet/filter/limit-415 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-199 -m limit --limit 1/second -j LOG - inet/filter/logdrop-199 -j DROP + inet/filter/limit-415 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-235 + inet/filter/limit-415 -j TEE --gateway 10.0.0.1 + inet/filter/limit-415 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-235 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-235 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-415 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-415 - inet6/filter/limit-415 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-199 - inet6/filter/logdrop-199 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-199 -j DROP + inet6/filter/limit-415 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-235 + inet6/filter/limit-415 -j TEE --gateway fc00::2 + inet6/filter/logdrop-235 -j DROP -Filter 417 {"conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} +Filter 417 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-416 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 - inet/filter/limit-416 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet/filter/limit-416 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-236 inet/filter/limit-416 -j ACCEPT - inet/filter/logdrop-200 -m limit --limit 1/second -j LOG - inet/filter/logdrop-200 -j DROP + inet/filter/logdrop-236 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-236 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-416 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-416 - inet6/filter/limit-416 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet6/filter/limit-416 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-236 inet6/filter/limit-416 -j ACCEPT - inet6/filter/logdrop-200 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-200 -j DROP + inet6/filter/logdrop-236 -j DROP -Filter 418 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} +Filter 418 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-417 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-417 - inet/filter/limit-417 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 - inet/filter/logdrop-201 -m limit --limit 1/second -j LOG - inet/filter/logdrop-201 -j DROP + inet/filter/limit-417 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-237 + inet/filter/logdrop-237 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-237 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-417 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-417 - inet6/filter/limit-417 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-201 - inet6/filter/logdrop-201 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-201 -j DROP + inet6/filter/limit-417 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-237 + inet6/filter/logdrop-237 -j DROP -Filter 419 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 419 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-418 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 - inet/filter/limit-418 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 - inet/filter/limit-418 -m limit --limit 1/second -j LOG + inet/filter/limit-418 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-238 + inet/filter/limit-418 -m limit --limit 12/minute -j ULOG inet/filter/limit-418 -j ACCEPT - inet/filter/logdrop-202 -m limit --limit 1/second -j LOG - inet/filter/logdrop-202 -j DROP + inet/filter/logdrop-238 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-238 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-418 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-418 - inet6/filter/limit-418 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-202 - inet6/filter/limit-418 -m limit --limit 1/second -j LOG + inet6/filter/limit-418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-238 inet6/filter/limit-418 -j ACCEPT - inet6/filter/logdrop-202 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-202 -j DROP + inet6/filter/logdrop-238 -j DROP -Filter 420 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 420 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-419 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 - inet/filter/limit-419 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 - inet/filter/limit-419 -m limit --limit 1/second -j LOG - inet/filter/logdrop-203 -m limit --limit 1/second -j LOG - inet/filter/logdrop-203 -j DROP + inet/filter/limit-419 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-239 + inet/filter/limit-419 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-239 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-239 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-419 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-419 - inet6/filter/limit-419 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-203 - inet6/filter/limit-419 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-203 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-203 -j DROP + inet6/filter/limit-419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-239 + inet6/filter/logdrop-239 -j DROP -Filter 421 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 421 {"conn-limit":{"log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-420 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 - inet/filter/limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 - inet/filter/limit-420 -j ACCEPT - inet/filter/logdrop-204 -m limit --limit 1/second -j LOG - inet/filter/logdrop-204 -j DROP + inet/filter/limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-240 + inet/filter/limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-240 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-240 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-420 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-420 - inet6/filter/limit-420 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-204 - inet6/filter/limit-420 -j ACCEPT - inet6/filter/logdrop-204 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-204 -j DROP + inet6/filter/limit-420 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-240 + inet6/filter/limit-420 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-240 -j DROP -Filter 422 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 422 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-421 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-421 - inet/filter/limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-205 - inet/filter/logdrop-205 -m limit --limit 1/second -j LOG - inet/filter/logdrop-205 -j DROP + inet/filter/limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-241 + inet/filter/limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-241 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-241 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-421 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-421 - inet6/filter/limit-421 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-205 - inet6/filter/logdrop-205 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-205 -j DROP + inet6/filter/limit-421 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-241 + inet6/filter/limit-421 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-241 -j DROP -Filter 423 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 423 {"conn-limit":{"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-422 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-422 - inet/filter/limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-206 - inet/filter/limit-422 -m limit --limit 12/minute -j ULOG - inet/filter/limit-422 -j ACCEPT - inet/filter/logdrop-206 -m limit --limit 1/second -j LOG - inet/filter/logdrop-206 -j DROP + inet/filter/limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-242 + inet/filter/limit-422 -m limit --limit 1/second -j LOG + inet/filter/limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-242 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-242 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-422 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-422 - inet6/filter/limit-422 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-206 - inet6/filter/limit-422 -j ACCEPT - inet6/filter/logdrop-206 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-206 -j DROP + inet6/filter/limit-422 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-242 + inet6/filter/limit-422 -m limit --limit 1/second -j LOG + inet6/filter/limit-422 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-242 -j DROP -Filter 424 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 424 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-423 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-423 - inet/filter/limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-207 - inet/filter/limit-423 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-207 -m limit --limit 1/second -j LOG - inet/filter/logdrop-207 -j DROP + inet/filter/limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-243 + inet/filter/limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-243 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-243 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-423 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-423 - inet6/filter/limit-423 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-207 - inet6/filter/logdrop-207 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-207 -j DROP + inet6/filter/limit-423 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-243 + inet6/filter/limit-423 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-243 -j DROP -Filter 425 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} +Filter 425 {"conn-limit":{"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-424 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-424 - inet/filter/limit-424 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 - inet/filter/limit-424 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-208 -m limit --limit 1/second -j LOG - inet/filter/logdrop-208 -j DROP + inet/filter/limit-424 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-244 + inet/filter/limit-424 -j TEE --gateway 10.0.0.1 + inet/filter/limit-424 -j TEE --gateway 10.0.0.2 + inet/filter/limit-424 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-244 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-244 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-424 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-424 - inet6/filter/limit-424 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 - inet6/filter/limit-424 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-208 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-208 -j DROP + inet6/filter/limit-424 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-244 + inet6/filter/limit-424 -j TEE --gateway fc00::2 + inet6/filter/limit-424 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-244 -j DROP -Filter 426 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} +Filter 426 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-425 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-425 - inet/filter/limit-425 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 - inet/filter/limit-425 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-209 -m limit --limit 1/second -j LOG - inet/filter/logdrop-209 -j DROP + inet/filter/limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-245 + inet/filter/limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-245 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-245 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-425 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-425 - inet6/filter/limit-425 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 - inet6/filter/limit-425 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-209 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-209 -j DROP + inet6/filter/limit-425 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-245 + inet6/filter/limit-425 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-245 -j DROP -Filter 427 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} +Filter 427 {"conn-limit":{"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-426 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-426 - inet/filter/limit-426 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 - inet/filter/limit-426 -m limit --limit 1/second -j LOG - inet/filter/limit-426 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-210 -m limit --limit 1/second -j LOG - inet/filter/logdrop-210 -j DROP + inet/filter/limit-426 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-246 + inet/filter/limit-426 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-246 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-246 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-426 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-426 - inet6/filter/limit-426 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 - inet6/filter/limit-426 -m limit --limit 1/second -j LOG - inet6/filter/limit-426 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-210 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-210 -j DROP + inet6/filter/limit-426 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-246 + inet6/filter/limit-426 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-246 -j DROP -Filter 428 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} +Filter 428 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-427 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-427 - inet/filter/limit-427 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-211 - inet/filter/limit-427 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-211 -m limit --limit 1/second -j LOG - inet/filter/logdrop-211 -j DROP + inet/filter/limit-427 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-247 + inet/filter/limit-427 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-247 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-247 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-427 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-427 - inet6/filter/limit-427 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-211 - inet6/filter/limit-427 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-211 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-211 -j DROP + inet6/filter/limit-427 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-247 + inet6/filter/limit-427 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-247 -j DROP -Filter 429 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} +Filter 429 {"conn-limit":{"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-428 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-428 - inet/filter/limit-428 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-212 - inet/filter/limit-428 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-212 -m limit --limit 1/second -j LOG - inet/filter/logdrop-212 -j DROP + inet/filter/limit-428 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-248 + inet/filter/limit-428 -m limit --limit 12/minute -j ULOG + inet/filter/limit-428 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-248 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-248 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-428 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-428 - inet6/filter/limit-428 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-212 - inet6/filter/limit-428 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-212 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-212 -j DROP + inet6/filter/limit-428 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-248 + inet6/filter/limit-428 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-248 -j DROP -Filter 430 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} +Filter 430 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-429 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-429 - inet/filter/limit-429 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-213 - inet/filter/limit-429 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-213 -m limit --limit 1/second -j LOG - inet/filter/logdrop-213 -j DROP + inet/filter/limit-429 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-249 + inet/filter/limit-429 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-249 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-249 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-429 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-429 - inet6/filter/limit-429 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-213 - inet6/filter/limit-429 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-213 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-213 -j DROP + inet6/filter/limit-429 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-249 + inet6/filter/logdrop-249 -j DROP -Filter 431 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog","out":"B"} +Filter 431 {"conn-limit":{"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-430 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-430 - inet/filter/limit-430 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-214 - inet/filter/limit-430 -m limit --limit 12/minute -j ULOG - inet/filter/limit-430 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-214 -m limit --limit 1/second -j LOG - inet/filter/logdrop-214 -j DROP + inet/filter/limit-430 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet/filter/limit-430 -j ACCEPT + inet/filter/logdrop-250 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-250 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-430 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-430 - inet6/filter/limit-430 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-214 - inet6/filter/limit-430 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-214 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-214 -j DROP + inet6/filter/limit-430 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet6/filter/limit-430 -j ACCEPT + inet6/filter/logdrop-250 -j DROP -Filter 432 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog","out":"B"} +Filter 432 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-431 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-431 - inet/filter/limit-431 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-215 - inet/filter/limit-431 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-215 -m limit --limit 1/second -j LOG - inet/filter/logdrop-215 -j DROP + inet/filter/limit-431 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet/filter/logdrop-251 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-251 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-431 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-431 - inet6/filter/limit-431 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-215 - inet6/filter/logdrop-215 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-215 -j DROP + inet6/filter/limit-431 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet6/filter/logdrop-251 -j DROP -Filter 433 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} +Filter 433 {"conn-limit":{"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-432 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-432 - inet/filter/limit-432 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 + inet/filter/limit-432 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 + inet/filter/limit-432 -m limit --limit 1/second -j LOG inet/filter/limit-432 -j ACCEPT - inet/filter/logdrop-216 -m limit --limit 1/second -j LOG - inet/filter/logdrop-216 -j DROP + inet/filter/logdrop-252 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-252 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-432 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-432 - inet6/filter/limit-432 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 + inet6/filter/limit-432 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-252 + inet6/filter/limit-432 -m limit --limit 1/second -j LOG inet6/filter/limit-432 -j ACCEPT - inet6/filter/logdrop-216 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-216 -j DROP + inet6/filter/logdrop-252 -j DROP -Filter 434 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} +Filter 434 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-433 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-433 - inet/filter/limit-433 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-217 - inet/filter/logdrop-217 -m limit --limit 1/second -j LOG - inet/filter/logdrop-217 -j DROP + inet/filter/limit-433 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-253 + inet/filter/limit-433 -m limit --limit 1/second -j LOG + inet/filter/logdrop-253 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-253 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-433 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-433 - inet6/filter/limit-433 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-217 - inet6/filter/logdrop-217 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-217 -j DROP + inet6/filter/limit-433 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-253 + inet6/filter/limit-433 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-253 -j DROP -Filter 435 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 435 {"conn-limit":{"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-434 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-434 - inet/filter/limit-434 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-218 - inet/filter/limit-434 -m limit --limit 1/second -j LOG + inet/filter/limit-434 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-254 + inet/filter/limit-434 -j TEE --gateway 10.0.0.1 + inet/filter/limit-434 -j TEE --gateway 10.0.0.2 inet/filter/limit-434 -j ACCEPT - inet/filter/logdrop-218 -m limit --limit 1/second -j LOG - inet/filter/logdrop-218 -j DROP + inet/filter/logdrop-254 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-254 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-434 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-434 - inet6/filter/limit-434 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-218 - inet6/filter/limit-434 -m limit --limit 1/second -j LOG + inet6/filter/limit-434 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-254 + inet6/filter/limit-434 -j TEE --gateway fc00::2 inet6/filter/limit-434 -j ACCEPT - inet6/filter/logdrop-218 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-218 -j DROP + inet6/filter/logdrop-254 -j DROP -Filter 436 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 436 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-435 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-435 - inet/filter/limit-435 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-219 - inet/filter/limit-435 -m limit --limit 1/second -j LOG - inet/filter/logdrop-219 -m limit --limit 1/second -j LOG - inet/filter/logdrop-219 -j DROP + inet/filter/limit-435 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-255 + inet/filter/limit-435 -j TEE --gateway 10.0.0.1 + inet/filter/limit-435 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-255 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-255 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-435 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-435 - inet6/filter/limit-435 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-219 - inet6/filter/limit-435 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-219 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-219 -j DROP + inet6/filter/limit-435 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-255 + inet6/filter/limit-435 -j TEE --gateway fc00::2 + inet6/filter/logdrop-255 -j DROP -Filter 437 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 437 {"conn-limit":{"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-436 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-436 - inet/filter/limit-436 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-220 + inet/filter/limit-436 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-256 inet/filter/limit-436 -j ACCEPT - inet/filter/logdrop-220 -m limit --limit 1/second -j LOG - inet/filter/logdrop-220 -j DROP + inet/filter/logdrop-256 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-256 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-436 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-436 - inet6/filter/limit-436 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-220 + inet6/filter/limit-436 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-256 inet6/filter/limit-436 -j ACCEPT - inet6/filter/logdrop-220 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-220 -j DROP + inet6/filter/logdrop-256 -j DROP -Filter 438 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 438 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-437 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-437 - inet/filter/limit-437 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-221 - inet/filter/logdrop-221 -m limit --limit 1/second -j LOG - inet/filter/logdrop-221 -j DROP + inet/filter/limit-437 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-257 + inet/filter/logdrop-257 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-257 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-437 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-437 - inet6/filter/limit-437 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-221 - inet6/filter/logdrop-221 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-221 -j DROP + inet6/filter/limit-437 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-257 + inet6/filter/logdrop-257 -j DROP -Filter 439 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 439 {"conn-limit":{"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-438 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-438 - inet/filter/limit-438 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-222 + inet/filter/limit-438 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-258 inet/filter/limit-438 -m limit --limit 12/minute -j ULOG inet/filter/limit-438 -j ACCEPT - inet/filter/logdrop-222 -m limit --limit 1/second -j LOG - inet/filter/logdrop-222 -j DROP + inet/filter/logdrop-258 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-258 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-438 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-438 - inet6/filter/limit-438 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-222 + inet6/filter/limit-438 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-258 inet6/filter/limit-438 -j ACCEPT - inet6/filter/logdrop-222 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-222 -j DROP + inet6/filter/logdrop-258 -j DROP -Filter 440 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog","out":"B"} +Filter 440 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-439 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-439 - inet/filter/limit-439 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 + inet/filter/limit-439 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 inet/filter/limit-439 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-223 -m limit --limit 1/second -j LOG - inet/filter/logdrop-223 -j DROP + inet/filter/logdrop-259 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-259 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-439 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-439 - inet6/filter/limit-439 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 - inet6/filter/logdrop-223 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-223 -j DROP + inet6/filter/limit-439 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-259 + inet6/filter/logdrop-259 -j DROP -Filter 441 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} +Filter 441 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-440 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-440 - inet/filter/limit-440 -m recent --name limit-440 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-440 -m recent --name limit-440 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-440 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-260 + inet/filter/limit-440 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-260 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-260 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-440 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-440 - inet6/filter/limit-440 -m recent --name limit-440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-440 -m recent --name limit-440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-440 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-260 + inet6/filter/limit-440 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-260 -j DROP -Filter 442 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} +Filter 442 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-441 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-441 - inet/filter/limit-441 -m recent --name limit-441 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-441 -m recent --name limit-441 --rsource --mask 255.255.255.255 --set + inet/filter/limit-441 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-261 + inet/filter/limit-441 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-261 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-261 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-441 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-441 - inet6/filter/limit-441 -m recent --name limit-441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-441 -m recent --name limit-441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-441 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-261 + inet6/filter/limit-441 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-261 -j DROP -Filter 443 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 443 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-442 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-442 - inet/filter/limit-442 -m recent --name limit-442 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-442 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-262 inet/filter/limit-442 -m limit --limit 1/second -j LOG - inet/filter/limit-442 -m recent --name limit-442 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-442 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-262 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-262 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-442 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-442 - inet6/filter/limit-442 -m recent --name limit-442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-442 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-262 inet6/filter/limit-442 -m limit --limit 1/second -j LOG - inet6/filter/limit-442 -m recent --name limit-442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-442 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-262 -j DROP -Filter 444 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 444 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-443 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-443 - inet/filter/limit-443 -m recent --name limit-443 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-443 -m recent --name limit-443 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-443 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-263 + inet/filter/limit-443 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-263 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-263 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-443 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-443 - inet6/filter/limit-443 -m recent --name limit-443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-443 -m recent --name limit-443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-443 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-263 + inet6/filter/limit-443 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-263 -j DROP -Filter 445 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 445 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-444 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-444 - inet/filter/limit-444 -m recent --name limit-444 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-444 -m recent --name limit-444 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-444 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-264 + inet/filter/limit-444 -j TEE --gateway 10.0.0.1 + inet/filter/limit-444 -j TEE --gateway 10.0.0.2 + inet/filter/limit-444 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-264 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-264 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-444 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-444 - inet6/filter/limit-444 -m recent --name limit-444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-444 -m recent --name limit-444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-444 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-264 + inet6/filter/limit-444 -j TEE --gateway fc00::2 + inet6/filter/limit-444 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-264 -j DROP -Filter 446 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 446 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-445 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-445 - inet/filter/limit-445 -m recent --name limit-445 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-445 -m recent --name limit-445 --rsource --mask 255.255.255.255 --set + inet/filter/limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 + inet/filter/limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-265 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-265 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-445 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-445 - inet6/filter/limit-445 -m recent --name limit-445 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-445 -m recent --name limit-445 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-445 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 + inet6/filter/limit-445 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-265 -j DROP -Filter 447 {"conn-limit":{"interval":5,"log":"none"},"log":"ulog","out":"B"} +Filter 447 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-446 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-446 - inet/filter/limit-446 -m recent --name limit-446 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-446 -m limit --limit 12/minute -j ULOG - inet/filter/limit-446 -m recent --name limit-446 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-446 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 + inet/filter/limit-446 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-266 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-266 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-446 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-446 - inet6/filter/limit-446 -m recent --name limit-446 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-446 -m recent --name limit-446 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-446 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 + inet6/filter/limit-446 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-266 -j DROP -Filter 448 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"ulog","out":"B"} +Filter 448 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-447 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-447 - inet/filter/limit-447 -m recent --name limit-447 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-447 -m recent --name limit-447 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-447 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 + inet/filter/limit-447 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-267 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-267 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-447 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-447 - inet6/filter/limit-447 -m recent --name limit-447 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-447 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 + inet6/filter/limit-447 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-267 -j DROP -Filter 449 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +Filter 449 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-448 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-448 - inet/filter/limit-448 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-448 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-448 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 + inet/filter/limit-448 -m limit --limit 12/minute -j ULOG + inet/filter/limit-448 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-268 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-268 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-448 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-448 - inet6/filter/limit-448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-448 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 + inet6/filter/limit-448 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-268 -j DROP -Filter 450 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +Filter 450 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-449 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-449 - inet/filter/limit-449 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-449 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-449 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 + inet/filter/limit-449 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-269 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-269 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-449 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-449 - inet6/filter/limit-449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-449 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 + inet6/filter/logdrop-269 -j DROP -Filter 451 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 451 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-450 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-450 - inet/filter/limit-450 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-450 -m limit --limit 1/second -j LOG - inet/filter/limit-450 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-450 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-270 + inet/filter/limit-450 -j ACCEPT + inet/filter/logdrop-270 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-270 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-450 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-450 - inet6/filter/limit-450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-450 -m limit --limit 1/second -j LOG - inet6/filter/limit-450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-450 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-270 + inet6/filter/limit-450 -j ACCEPT + inet6/filter/logdrop-270 -j DROP -Filter 452 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 452 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-451 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-451 - inet/filter/limit-451 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-451 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet/filter/logdrop-271 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-271 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-451 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-451 - inet6/filter/limit-451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-451 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet6/filter/logdrop-271 -j DROP -Filter 453 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 453 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-452 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-452 - inet/filter/limit-452 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-452 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-452 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet/filter/limit-452 -m limit --limit 1/second -j LOG + inet/filter/limit-452 -j ACCEPT + inet/filter/logdrop-272 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-272 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-452 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-452 - inet6/filter/limit-452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-452 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet6/filter/limit-452 -m limit --limit 1/second -j LOG + inet6/filter/limit-452 -j ACCEPT + inet6/filter/logdrop-272 -j DROP -Filter 454 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 454 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-453 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-453 - inet/filter/limit-453 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-453 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-453 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet/filter/limit-453 -m limit --limit 1/second -j LOG + inet/filter/logdrop-273 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-273 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-453 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-453 - inet6/filter/limit-453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-453 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet6/filter/limit-453 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-273 -j DROP -Filter 455 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} +Filter 455 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-454 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-454 - inet/filter/limit-454 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-454 -m limit --limit 12/minute -j ULOG - inet/filter/limit-454 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-454 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet/filter/limit-454 -j TEE --gateway 10.0.0.1 + inet/filter/limit-454 -j TEE --gateway 10.0.0.2 + inet/filter/limit-454 -j ACCEPT + inet/filter/logdrop-274 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-274 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-454 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-454 - inet6/filter/limit-454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-454 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet6/filter/limit-454 -j TEE --gateway fc00::2 + inet6/filter/limit-454 -j ACCEPT + inet6/filter/logdrop-274 -j DROP -Filter 456 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} +Filter 456 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-455 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-455 - inet/filter/limit-455 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-455 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-455 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet/filter/limit-455 -j TEE --gateway 10.0.0.1 + inet/filter/limit-455 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-275 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-275 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-455 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-455 - inet6/filter/limit-455 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-455 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet6/filter/limit-455 -j TEE --gateway fc00::2 + inet6/filter/logdrop-275 -j DROP -Filter 457 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 457 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-456 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-456 - inet/filter/limit-456 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-456 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 inet/filter/limit-456 -j ACCEPT + inet/filter/logdrop-276 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-276 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-456 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-456 - inet6/filter/limit-456 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-456 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 inet6/filter/limit-456 -j ACCEPT + inet6/filter/logdrop-276 -j DROP -Filter 458 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 458 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-457 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-457 - inet/filter/limit-457 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-457 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-277 + inet/filter/logdrop-277 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-277 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-457 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-457 - inet6/filter/limit-457 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-457 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-277 + inet6/filter/logdrop-277 -j DROP -Filter 459 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 459 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-458 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-458 - inet/filter/limit-458 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-458 -m limit --limit 1/second -j LOG + inet/filter/limit-458 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-278 + inet/filter/limit-458 -m limit --limit 12/minute -j ULOG inet/filter/limit-458 -j ACCEPT + inet/filter/logdrop-278 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-278 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-458 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-458 - inet6/filter/limit-458 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-458 -m limit --limit 1/second -j LOG + inet6/filter/limit-458 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-278 inet6/filter/limit-458 -j ACCEPT + inet6/filter/logdrop-278 -j DROP -Filter 460 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 460 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-459 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-459 - inet/filter/limit-459 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-459 -m limit --limit 1/second -j LOG + inet/filter/limit-459 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-279 + inet/filter/limit-459 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-279 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-279 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-459 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-459 - inet6/filter/limit-459 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-459 -m limit --limit 1/second -j LOG + inet6/filter/limit-459 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-279 + inet6/filter/logdrop-279 -j DROP -Filter 461 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 461 {"conn-limit":{"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-460 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-460 - inet/filter/limit-460 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-460 -j ACCEPT + inet/filter/limit-460 -m recent --name limit-460 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-460 -m recent --name limit-460 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-460 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-460 - inet6/filter/limit-460 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-460 -j ACCEPT + inet6/filter/limit-460 -m recent --name limit-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-460 -m recent --name limit-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 462 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 462 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-461 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-461 - inet/filter/limit-461 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-461 -m recent --name limit-461 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-461 -m recent --name limit-461 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-461 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-461 - inet6/filter/limit-461 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-461 -m recent --name limit-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-461 -m recent --name limit-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 463 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} +Filter 463 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-462 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-462 - inet/filter/limit-462 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-462 -m limit --limit 12/minute -j ULOG - inet/filter/limit-462 -j ACCEPT + inet/filter/limit-462 -m recent --name limit-462 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-462 -m limit --limit 1/second -j LOG + inet/filter/limit-462 -m recent --name limit-462 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-462 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-462 - inet6/filter/limit-462 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-462 -j ACCEPT + inet6/filter/limit-462 -m recent --name limit-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-462 -m limit --limit 1/second -j LOG + inet6/filter/limit-462 -m recent --name limit-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 464 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} +Filter 464 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-463 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-463 - inet/filter/limit-463 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-463 -m limit --limit 12/minute -j ULOG + inet/filter/limit-463 -m recent --name limit-463 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-463 -m recent --name limit-463 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-463 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-463 - inet6/filter/limit-463 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-463 -m recent --name limit-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-463 -m recent --name limit-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 465 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +Filter 465 {"conn-limit":{"interval":5,"log":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-464 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-464 - inet/filter/limit-464 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-464 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-464 -j TEE --gateway 10.0.0.1 + inet/filter/limit-464 -j TEE --gateway 10.0.0.2 + inet/filter/limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-464 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-464 - inet6/filter/limit-464 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-464 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-464 -j TEE --gateway fc00::2 + inet6/filter/limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 466 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +Filter 466 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-465 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-465 - inet/filter/limit-465 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-465 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-465 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-465 - inet6/filter/limit-465 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-465 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 467 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 467 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-466 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-466 - inet/filter/limit-466 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-466 -m limit --limit 1/second -j LOG - inet/filter/limit-466 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-466 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-466 - inet6/filter/limit-466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-466 -m limit --limit 1/second -j LOG - inet6/filter/limit-466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 468 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 468 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-467 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-467 - inet/filter/limit-467 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-467 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-467 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-467 - inet6/filter/limit-467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 469 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 469 {"conn-limit":{"interval":5,"log":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-468 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-468 - inet/filter/limit-468 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-468 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-468 -m limit --limit 12/minute -j ULOG + inet/filter/limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-468 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-468 - inet6/filter/limit-468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 470 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 470 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-469 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-469 - inet/filter/limit-469 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-469 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-469 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-469 - inet6/filter/limit-469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-469 -m recent --name limit-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -Filter 471 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} +Filter 471 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-470 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-470 - inet/filter/limit-470 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-470 -m limit --limit 12/minute -j ULOG - inet/filter/limit-470 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-470 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-470 - inet6/filter/limit-470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 472 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} +Filter 472 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-471 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-471 - inet/filter/limit-471 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-471 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-471 - inet6/filter/limit-471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 473 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 473 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-472 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-472 - inet/filter/limit-472 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-472 -j ACCEPT + inet/filter/limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-472 -m limit --limit 1/second -j LOG + inet/filter/limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-472 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-472 - inet6/filter/limit-472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-472 -j ACCEPT + inet6/filter/limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-472 -m limit --limit 1/second -j LOG + inet6/filter/limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 474 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 474 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-473 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-473 - inet/filter/limit-473 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-473 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-473 - inet6/filter/limit-473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 475 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 475 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-474 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-474 - inet/filter/limit-474 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-474 -m limit --limit 1/second -j LOG - inet/filter/limit-474 -j ACCEPT + inet/filter/limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-474 -j TEE --gateway 10.0.0.1 + inet/filter/limit-474 -j TEE --gateway 10.0.0.2 + inet/filter/limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-474 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-474 - inet6/filter/limit-474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-474 -m limit --limit 1/second -j LOG - inet6/filter/limit-474 -j ACCEPT + inet6/filter/limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-474 -j TEE --gateway fc00::2 + inet6/filter/limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 476 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 476 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-475 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-475 - inet/filter/limit-475 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-475 -m limit --limit 1/second -j LOG + inet/filter/limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-475 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-475 - inet6/filter/limit-475 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-475 -m limit --limit 1/second -j LOG + inet6/filter/limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 477 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 477 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-476 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-476 - inet/filter/limit-476 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-476 -j ACCEPT + inet/filter/limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-476 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-476 - inet6/filter/limit-476 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-476 -j ACCEPT + inet6/filter/limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 478 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 478 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-477 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-477 - inet/filter/limit-477 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-477 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-477 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-477 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-477 - inet6/filter/limit-477 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 479 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} +Filter 479 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-478 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-478 - inet/filter/limit-478 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-478 -m limit --limit 12/minute -j ULOG - inet/filter/limit-478 -j ACCEPT + inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-478 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-478 - inet6/filter/limit-478 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-478 -j ACCEPT + inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 480 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} +Filter 480 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-479 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-479 - inet/filter/limit-479 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-479 -m limit --limit 12/minute -j ULOG + inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-479 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-479 - inet6/filter/limit-479 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -Filter 481 {"conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +Filter 481 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-480 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-480 - inet/filter/limit-480 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-480 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-480 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-480 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-480 - inet6/filter/limit-480 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-480 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-480 -j ACCEPT -Filter 482 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +Filter 482 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-481 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-481 - inet/filter/limit-481 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-481 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-481 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-481 - inet6/filter/limit-481 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-481 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 483 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 483 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-482 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-482 - inet/filter/limit-482 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-482 -m limit --limit 1/second -j LOG - inet/filter/limit-482 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-482 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-482 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-482 - inet6/filter/limit-482 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-482 -m limit --limit 1/second -j LOG - inet6/filter/limit-482 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-482 -j ACCEPT -Filter 484 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 484 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-483 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-483 - inet/filter/limit-483 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-483 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-483 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-483 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-483 - inet6/filter/limit-483 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-483 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-483 -m limit --limit 1/second -j LOG -Filter 485 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 485 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-484 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-484 - inet/filter/limit-484 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-484 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-484 -j TEE --gateway 10.0.0.1 + inet/filter/limit-484 -j TEE --gateway 10.0.0.2 + inet/filter/limit-484 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-484 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-484 - inet6/filter/limit-484 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-484 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-484 -j TEE --gateway fc00::2 + inet6/filter/limit-484 -j ACCEPT -Filter 486 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 486 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-485 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-485 - inet/filter/limit-485 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-485 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-485 -j TEE --gateway 10.0.0.1 + inet/filter/limit-485 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-485 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-485 - inet6/filter/limit-485 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-485 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-485 -j TEE --gateway fc00::2 -Filter 487 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} +Filter 487 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-486 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-486 - inet/filter/limit-486 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-486 -m limit --limit 12/minute -j ULOG - inet/filter/limit-486 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-486 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-486 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-486 - inet6/filter/limit-486 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-486 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-486 -j ACCEPT -Filter 488 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} +Filter 488 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-487 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-487 - inet/filter/limit-487 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-487 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-487 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-487 - inet6/filter/limit-487 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 489 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 489 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-488 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-488 - inet/filter/limit-488 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-488 -m limit --limit 12/minute -j ULOG inet/filter/limit-488 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-488 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-488 - inet6/filter/limit-488 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-488 -j ACCEPT -Filter 490 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 490 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-489 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-489 - inet/filter/limit-489 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-489 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-489 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-489 - inet6/filter/limit-489 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 491 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 491 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-490 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-490 - inet/filter/limit-490 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-490 -m limit --limit 1/second -j LOG - inet/filter/limit-490 -j ACCEPT + inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-490 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-490 - inet6/filter/limit-490 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-490 -m limit --limit 1/second -j LOG - inet6/filter/limit-490 -j ACCEPT + inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 492 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 492 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-491 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-491 - inet/filter/limit-491 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-491 -m limit --limit 1/second -j LOG + inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-491 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-491 - inet6/filter/limit-491 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-491 -m limit --limit 1/second -j LOG + inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 493 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 493 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-492 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-492 - inet/filter/limit-492 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-492 -j ACCEPT + inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-492 -m limit --limit 1/second -j LOG + inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-492 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-492 - inet6/filter/limit-492 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-492 -j ACCEPT + inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-492 -m limit --limit 1/second -j LOG + inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 494 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 494 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-493 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-493 - inet/filter/limit-493 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-493 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-493 - inet6/filter/limit-493 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 495 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} +Filter 495 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-494 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-494 - inet/filter/limit-494 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-494 -m limit --limit 12/minute -j ULOG - inet/filter/limit-494 -j ACCEPT + inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-494 -j TEE --gateway 10.0.0.1 + inet/filter/limit-494 -j TEE --gateway 10.0.0.2 + inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-494 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-494 - inet6/filter/limit-494 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-494 -j ACCEPT + inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-494 -j TEE --gateway fc00::2 + inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 496 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} +Filter 496 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-495 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-495 - inet/filter/limit-495 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-495 -m limit --limit 12/minute -j ULOG + inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-495 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-495 - inet6/filter/limit-495 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 497 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +Filter 497 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-496 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-496 - inet/filter/limit-496 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-496 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-496 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-496 - inet6/filter/limit-496 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-496 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 498 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +Filter 498 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-497 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-497 - inet/filter/limit-497 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-497 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-497 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-497 - inet6/filter/limit-497 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-497 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 499 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 499 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-498 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-498 - inet/filter/limit-498 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-498 -m limit --limit 1/second -j LOG - inet/filter/limit-498 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-498 -m limit --limit 12/minute -j ULOG + inet/filter/limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-498 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-498 - inet6/filter/limit-498 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-498 -m limit --limit 1/second -j LOG - inet6/filter/limit-498 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 500 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 500 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-499 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-499 - inet/filter/limit-499 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-499 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-499 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-499 - inet6/filter/limit-499 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-499 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -Filter 501 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 501 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-500 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-500 - inet/filter/limit-500 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-500 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-500 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-500 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-500 - inet6/filter/limit-500 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-500 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-500 -j ACCEPT -Filter 502 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 502 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-501 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-501 - inet/filter/limit-501 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-501 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-501 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-501 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-501 - inet6/filter/limit-501 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-501 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-501 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 503 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} +Filter 503 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-502 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-502 - inet/filter/limit-502 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-502 -m limit --limit 12/minute -j ULOG - inet/filter/limit-502 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-502 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-502 -m limit --limit 1/second -j LOG + inet/filter/limit-502 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-502 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-502 - inet6/filter/limit-502 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-502 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-502 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-502 -m limit --limit 1/second -j LOG + inet6/filter/limit-502 -j ACCEPT -Filter 504 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} +Filter 504 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-503 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-503 - inet/filter/limit-503 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-503 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-503 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-503 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-503 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-503 - inet6/filter/limit-503 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-503 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-503 -m limit --limit 1/second -j LOG -Filter 505 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 505 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-504 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-504 - inet/filter/limit-504 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-504 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-504 -j TEE --gateway 10.0.0.1 + inet/filter/limit-504 -j TEE --gateway 10.0.0.2 inet/filter/limit-504 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-504 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-504 - inet6/filter/limit-504 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-504 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-504 -j TEE --gateway fc00::2 inet6/filter/limit-504 -j ACCEPT -Filter 506 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 506 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-505 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-505 - inet/filter/limit-505 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-505 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-505 -j TEE --gateway 10.0.0.1 + inet/filter/limit-505 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-505 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-505 - inet6/filter/limit-505 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-505 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-505 -j TEE --gateway fc00::2 -Filter 507 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 507 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-506 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-506 - inet/filter/limit-506 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-506 -m limit --limit 1/second -j LOG + inet/filter/limit-506 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-506 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-506 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-506 - inet6/filter/limit-506 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-506 -m limit --limit 1/second -j LOG + inet6/filter/limit-506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-506 -j ACCEPT -Filter 508 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 508 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-507 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-507 - inet/filter/limit-507 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-507 -m limit --limit 1/second -j LOG + inet/filter/limit-507 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-507 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-507 - inet6/filter/limit-507 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-507 -m limit --limit 1/second -j LOG + inet6/filter/limit-507 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 509 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 509 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-508 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-508 - inet/filter/limit-508 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-508 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-508 -m limit --limit 12/minute -j ULOG inet/filter/limit-508 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-508 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-508 - inet6/filter/limit-508 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-508 -j ACCEPT -Filter 510 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 510 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-509 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-509 - inet/filter/limit-509 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-509 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-509 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-509 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-509 - inet6/filter/limit-509 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 511 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} +Filter 511 {"conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-510 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-510 - inet/filter/limit-510 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-510 -m limit --limit 12/minute -j ULOG - inet/filter/limit-510 -j ACCEPT + inet/filter/limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-510 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-510 - inet6/filter/limit-510 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-510 -j ACCEPT + inet6/filter/limit-510 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-510 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 512 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} +Filter 512 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-511 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-511 - inet/filter/limit-511 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-511 -m limit --limit 12/minute -j ULOG + inet/filter/limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-511 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-511 - inet6/filter/limit-511 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-511 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-511 -m recent --name user:C --rsource --mask fe00:: --set -Filter 513 {"conn-limit":{"interval":5,"log":"ulog"},"out":"B"} +Filter 513 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-512 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-512 - inet/filter/limit-512 -m recent --name limit-512 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-224 - inet/filter/limit-512 -m recent --name limit-512 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-224 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-224 -j DROP + inet/filter/limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-512 -m limit --limit 1/second -j LOG + inet/filter/limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-512 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-512 - inet6/filter/limit-512 -m recent --name limit-512 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-224 - inet6/filter/limit-512 -m recent --name limit-512 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-224 -j DROP + inet6/filter/limit-512 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-512 -m limit --limit 1/second -j LOG + inet6/filter/limit-512 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 514 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"out":"B"} +Filter 514 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-513 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-513 - inet/filter/limit-513 -m recent --name limit-513 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-225 - inet/filter/limit-513 -m recent --name limit-513 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-225 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-225 -j DROP + inet/filter/limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-513 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-513 - inet6/filter/limit-513 -m recent --name limit-513 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-225 - inet6/filter/limit-513 -m recent --name limit-513 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-225 -j DROP + inet6/filter/limit-513 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-513 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 515 {"conn-limit":{"interval":5,"log":"ulog"},"log":true,"out":"B"} +Filter 515 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-514 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-514 - inet/filter/limit-514 -m recent --name limit-514 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-226 - inet/filter/limit-514 -m limit --limit 1/second -j LOG - inet/filter/limit-514 -m recent --name limit-514 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-226 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-226 -j DROP + inet/filter/limit-514 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-514 -j TEE --gateway 10.0.0.1 + inet/filter/limit-514 -j TEE --gateway 10.0.0.2 + inet/filter/limit-514 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-514 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-514 - inet6/filter/limit-514 -m recent --name limit-514 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-226 - inet6/filter/limit-514 -m limit --limit 1/second -j LOG - inet6/filter/limit-514 -m recent --name limit-514 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-226 -j DROP + inet6/filter/limit-514 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-514 -j TEE --gateway fc00::2 + inet6/filter/limit-514 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 516 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"log":true,"out":"B"} +Filter 516 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-515 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-515 - inet/filter/limit-515 -m recent --name limit-515 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-227 - inet/filter/limit-515 -m recent --name limit-515 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-227 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-227 -j DROP + inet/filter/limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-515 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-515 - inet6/filter/limit-515 -m recent --name limit-515 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-227 - inet6/filter/limit-515 -m recent --name limit-515 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-227 -j DROP + inet6/filter/limit-515 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-515 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 517 {"conn-limit":{"interval":5,"log":"ulog"},"log":"none","out":"B"} +Filter 517 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-516 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-516 - inet/filter/limit-516 -m recent --name limit-516 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-228 - inet/filter/limit-516 -m recent --name limit-516 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-228 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-228 -j DROP + inet/filter/limit-516 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-516 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-516 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-516 - inet6/filter/limit-516 -m recent --name limit-516 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-228 - inet6/filter/limit-516 -m recent --name limit-516 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-228 -j DROP + inet6/filter/limit-516 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-516 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 518 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"log":"none","out":"B"} +Filter 518 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-517 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-517 - inet/filter/limit-517 -m recent --name limit-517 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-229 - inet/filter/limit-517 -m recent --name limit-517 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-229 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-229 -j DROP + inet/filter/limit-517 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-517 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-517 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-517 - inet6/filter/limit-517 -m recent --name limit-517 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-229 - inet6/filter/limit-517 -m recent --name limit-517 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-229 -j DROP + inet6/filter/limit-517 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-517 -m recent --name user:C --rsource --mask fe00:: --set -Filter 519 {"conn-limit":{"interval":5,"log":"ulog"},"log":"ulog","out":"B"} +Filter 519 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-518 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-518 - inet/filter/limit-518 -m recent --name limit-518 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-230 + inet/filter/limit-518 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-518 -m limit --limit 12/minute -j ULOG - inet/filter/limit-518 -m recent --name limit-518 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-230 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-230 -j DROP + inet/filter/limit-518 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-518 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-518 - inet6/filter/limit-518 -m recent --name limit-518 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-230 - inet6/filter/limit-518 -m recent --name limit-518 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-230 -j DROP + inet6/filter/limit-518 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-518 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 520 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"log":"ulog","out":"B"} +Filter 520 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-519 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-519 - inet/filter/limit-519 -m recent --name limit-519 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-231 - inet/filter/limit-519 -m recent --name limit-519 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-231 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-231 -j DROP + inet/filter/limit-519 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-519 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-519 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-519 - inet6/filter/limit-519 -m recent --name limit-519 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-231 - inet6/filter/logdrop-231 -j DROP + inet6/filter/limit-519 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -Filter 521 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"out":"B"} +Filter 521 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-520 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-520 - inet/filter/limit-520 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-232 - inet/filter/limit-520 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-232 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-232 -j DROP + inet/filter/limit-520 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-520 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-520 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-520 - inet6/filter/limit-520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-232 - inet6/filter/limit-520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-232 -j DROP + inet6/filter/limit-520 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-520 -j ACCEPT -Filter 522 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"out":"B"} +Filter 522 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-521 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-521 - inet/filter/limit-521 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-233 - inet/filter/limit-521 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-233 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-233 -j DROP + inet/filter/limit-521 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-521 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-521 - inet6/filter/limit-521 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-233 - inet6/filter/limit-521 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-233 -j DROP + inet6/filter/limit-521 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 523 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} +Filter 523 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-522 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-522 - inet/filter/limit-522 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-234 + inet/filter/limit-522 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-522 -m limit --limit 1/second -j LOG - inet/filter/limit-522 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-234 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-234 -j DROP + inet/filter/limit-522 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-522 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-522 - inet6/filter/limit-522 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-234 + inet6/filter/limit-522 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-522 -m limit --limit 1/second -j LOG - inet6/filter/limit-522 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-234 -j DROP + inet6/filter/limit-522 -j ACCEPT -Filter 524 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} +Filter 524 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-523 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-523 - inet/filter/limit-523 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-235 - inet/filter/limit-523 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-235 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-235 -j DROP + inet/filter/limit-523 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-523 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-523 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-523 - inet6/filter/limit-523 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-235 - inet6/filter/limit-523 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-235 -j DROP + inet6/filter/limit-523 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-523 -m limit --limit 1/second -j LOG -Filter 525 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} +Filter 525 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-524 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-524 - inet/filter/limit-524 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-236 - inet/filter/limit-524 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-236 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-236 -j DROP + inet/filter/limit-524 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-524 -j TEE --gateway 10.0.0.1 + inet/filter/limit-524 -j TEE --gateway 10.0.0.2 + inet/filter/limit-524 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-524 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-524 - inet6/filter/limit-524 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-236 - inet6/filter/limit-524 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-236 -j DROP + inet6/filter/limit-524 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-524 -j TEE --gateway fc00::2 + inet6/filter/limit-524 -j ACCEPT -Filter 526 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} +Filter 526 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-525 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-525 - inet/filter/limit-525 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-237 - inet/filter/limit-525 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-237 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-237 -j DROP + inet/filter/limit-525 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-525 -j TEE --gateway 10.0.0.1 + inet/filter/limit-525 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-525 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-525 - inet6/filter/limit-525 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-237 - inet6/filter/limit-525 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-237 -j DROP + inet6/filter/limit-525 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-525 -j TEE --gateway fc00::2 -Filter 527 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} +Filter 527 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-526 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-526 - inet/filter/limit-526 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-238 - inet/filter/limit-526 -m limit --limit 12/minute -j ULOG - inet/filter/limit-526 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-238 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-238 -j DROP + inet/filter/limit-526 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-526 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-526 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-526 - inet6/filter/limit-526 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-238 - inet6/filter/limit-526 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-238 -j DROP + inet6/filter/limit-526 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-526 -j ACCEPT -Filter 528 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} +Filter 528 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-527 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-527 - inet/filter/limit-527 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-239 - inet/filter/limit-527 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-239 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-239 -j DROP + inet/filter/limit-527 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-527 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-527 - inet6/filter/limit-527 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-239 - inet6/filter/logdrop-239 -j DROP + inet6/filter/limit-527 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 529 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"out":"B"} +Filter 529 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-528 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-528 - inet/filter/limit-528 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-240 + inet/filter/limit-528 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-528 -m limit --limit 12/minute -j ULOG inet/filter/limit-528 -j ACCEPT - inet/filter/logdrop-240 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-240 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-528 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-528 - inet6/filter/limit-528 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-240 + inet6/filter/limit-528 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-528 -j ACCEPT - inet6/filter/logdrop-240 -j DROP -Filter 530 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"out":"B"} +Filter 530 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-529 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-529 - inet/filter/limit-529 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-241 - inet/filter/logdrop-241 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-241 -j DROP + inet/filter/limit-529 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-529 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-529 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-529 - inet6/filter/limit-529 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-241 - inet6/filter/logdrop-241 -j DROP + inet6/filter/limit-529 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 531 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} +Filter 531 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-530 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-530 - inet/filter/limit-530 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-242 - inet/filter/limit-530 -m limit --limit 1/second -j LOG - inet/filter/limit-530 -j ACCEPT - inet/filter/logdrop-242 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-242 -j DROP + inet/filter/limit-530 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-530 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-530 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-530 - inet6/filter/limit-530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-242 - inet6/filter/limit-530 -m limit --limit 1/second -j LOG - inet6/filter/limit-530 -j ACCEPT - inet6/filter/logdrop-242 -j DROP + inet6/filter/limit-530 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-530 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 532 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} +Filter 532 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-531 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-531 - inet/filter/limit-531 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-243 - inet/filter/limit-531 -m limit --limit 1/second -j LOG - inet/filter/logdrop-243 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-243 -j DROP + inet/filter/limit-531 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-531 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-531 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-531 - inet6/filter/limit-531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-243 - inet6/filter/limit-531 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-243 -j DROP + inet6/filter/limit-531 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-531 -m recent --name user:C --rdest --mask fe00:: --set -Filter 533 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} +Filter 533 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-532 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-532 - inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-244 - inet/filter/limit-532 -j ACCEPT - inet/filter/logdrop-244 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-244 -j DROP + inet/filter/limit-532 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-532 -m limit --limit 1/second -j LOG + inet/filter/limit-532 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-532 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-532 - inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-244 - inet6/filter/limit-532 -j ACCEPT - inet6/filter/logdrop-244 -j DROP + inet6/filter/limit-532 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-532 -m limit --limit 1/second -j LOG + inet6/filter/limit-532 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 534 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} +Filter 534 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-533 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-533 - inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-245 - inet/filter/logdrop-245 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-245 -j DROP + inet/filter/limit-533 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-533 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-533 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-533 - inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-245 - inet6/filter/logdrop-245 -j DROP + inet6/filter/limit-533 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-533 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 535 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} +Filter 535 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-534 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-534 - inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-246 - inet/filter/limit-534 -m limit --limit 12/minute -j ULOG - inet/filter/limit-534 -j ACCEPT - inet/filter/logdrop-246 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-246 -j DROP + inet/filter/limit-534 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-534 -j TEE --gateway 10.0.0.1 + inet/filter/limit-534 -j TEE --gateway 10.0.0.2 + inet/filter/limit-534 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-534 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-534 - inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-246 - inet6/filter/limit-534 -j ACCEPT - inet6/filter/logdrop-246 -j DROP + inet6/filter/limit-534 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-534 -j TEE --gateway fc00::2 + inet6/filter/limit-534 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 536 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} +Filter 536 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-535 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-535 - inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-247 - inet/filter/limit-535 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-247 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-247 -j DROP + inet/filter/limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-535 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-535 - inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-247 - inet6/filter/logdrop-247 -j DROP + inet6/filter/limit-535 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-535 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 537 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"out":"B"} +Filter 537 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-536 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 - inet/filter/limit-536 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-248 - inet/filter/limit-536 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-248 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-248 -j DROP + inet/filter/limit-536 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-536 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-536 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-536 - inet6/filter/limit-536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-248 - inet6/filter/limit-536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-248 -j DROP + inet6/filter/limit-536 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-536 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 538 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"out":"B"} +Filter 538 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-537 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 - inet/filter/limit-537 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-249 - inet/filter/limit-537 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-249 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-249 -j DROP + inet/filter/limit-537 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-537 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-537 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-537 - inet6/filter/limit-537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-249 - inet6/filter/limit-537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-249 -j DROP + inet6/filter/limit-537 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-537 -m recent --name user:C --rdest --mask fe00:: --set -Filter 539 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} +Filter 539 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-538 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 - inet/filter/limit-538 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-250 - inet/filter/limit-538 -m limit --limit 1/second -j LOG - inet/filter/limit-538 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-250 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-250 -j DROP + inet/filter/limit-538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-538 -m limit --limit 12/minute -j ULOG + inet/filter/limit-538 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-538 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-538 - inet6/filter/limit-538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-250 - inet6/filter/limit-538 -m limit --limit 1/second -j LOG - inet6/filter/limit-538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-250 -j DROP + inet6/filter/limit-538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-538 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 540 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} +Filter 540 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-539 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-539 - inet/filter/limit-539 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-251 - inet/filter/limit-539 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-251 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-251 -j DROP + inet/filter/limit-539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-539 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-539 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-539 - inet6/filter/limit-539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-251 - inet6/filter/limit-539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-251 -j DROP + inet6/filter/limit-539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -Filter 541 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} +Filter 541 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-540 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 - inet/filter/limit-540 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-252 - inet/filter/limit-540 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-252 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-252 -j DROP + inet/filter/limit-540 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-540 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-540 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-540 - inet6/filter/limit-540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-252 - inet6/filter/limit-540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-252 -j DROP + inet6/filter/limit-540 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-540 -j ACCEPT -Filter 542 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} +Filter 542 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-541 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 - inet/filter/limit-541 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-253 - inet/filter/limit-541 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-253 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-253 -j DROP + inet/filter/limit-541 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-541 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-541 - inet6/filter/limit-541 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-253 - inet6/filter/limit-541 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-253 -j DROP + inet6/filter/limit-541 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 543 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} +Filter 543 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-542 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 - inet/filter/limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-254 - inet/filter/limit-542 -m limit --limit 12/minute -j ULOG - inet/filter/limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-254 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-254 -j DROP + inet/filter/limit-542 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-542 -m limit --limit 1/second -j LOG + inet/filter/limit-542 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-542 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-542 - inet6/filter/limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-254 - inet6/filter/limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-254 -j DROP + inet6/filter/limit-542 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-542 -m limit --limit 1/second -j LOG + inet6/filter/limit-542 -j ACCEPT -Filter 544 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} +Filter 544 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-543 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-543 - inet/filter/limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-255 - inet/filter/limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-255 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-255 -j DROP + inet/filter/limit-543 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-543 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-543 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-543 - inet6/filter/limit-543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-255 - inet6/filter/logdrop-255 -j DROP + inet6/filter/limit-543 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-543 -m limit --limit 1/second -j LOG -Filter 545 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"out":"B"} +Filter 545 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-544 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 - inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-256 + inet/filter/limit-544 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-544 -j TEE --gateway 10.0.0.1 + inet/filter/limit-544 -j TEE --gateway 10.0.0.2 inet/filter/limit-544 -j ACCEPT - inet/filter/logdrop-256 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-256 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-544 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-544 - inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-256 + inet6/filter/limit-544 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-544 -j TEE --gateway fc00::2 inet6/filter/limit-544 -j ACCEPT - inet6/filter/logdrop-256 -j DROP -Filter 546 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"out":"B"} +Filter 546 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-545 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 - inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-257 - inet/filter/logdrop-257 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-257 -j DROP + inet/filter/limit-545 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-545 -j TEE --gateway 10.0.0.1 + inet/filter/limit-545 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-545 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-545 - inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-257 - inet6/filter/logdrop-257 -j DROP + inet6/filter/limit-545 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-545 -j TEE --gateway fc00::2 -Filter 547 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} +Filter 547 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-546 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 - inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-258 - inet/filter/limit-546 -m limit --limit 1/second -j LOG + inet/filter/limit-546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-546 -j ACCEPT - inet/filter/logdrop-258 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-258 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-546 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-546 - inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-258 - inet6/filter/limit-546 -m limit --limit 1/second -j LOG + inet6/filter/limit-546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-546 -j ACCEPT - inet6/filter/logdrop-258 -j DROP -Filter 548 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} +Filter 548 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-547 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-547 - inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-259 - inet/filter/limit-547 -m limit --limit 1/second -j LOG - inet/filter/logdrop-259 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-259 -j DROP + inet/filter/limit-547 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-547 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-547 - inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-259 - inet6/filter/limit-547 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-259 -j DROP + inet6/filter/limit-547 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 549 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} +Filter 549 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-548 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 - inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-260 + inet/filter/limit-548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-548 -m limit --limit 12/minute -j ULOG inet/filter/limit-548 -j ACCEPT - inet/filter/logdrop-260 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-260 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-548 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-548 - inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-260 + inet6/filter/limit-548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-548 -j ACCEPT - inet6/filter/logdrop-260 -j DROP -Filter 550 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} +Filter 550 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-549 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 - inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-261 - inet/filter/logdrop-261 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-261 -j DROP + inet/filter/limit-549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-549 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-549 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-549 - inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-261 - inet6/filter/logdrop-261 -j DROP + inet6/filter/limit-549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 551 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} +Filter 551 {"conn-limit":{"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-550 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 - inet/filter/limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-262 - inet/filter/limit-550 -m limit --limit 12/minute -j ULOG - inet/filter/limit-550 -j ACCEPT - inet/filter/logdrop-262 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-262 -j DROP + inet/filter/limit-550 -m recent --name limit-550 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-280 + inet/filter/limit-550 -m recent --name limit-550 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet/filter/logdrop-280 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-550 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-550 - inet6/filter/limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-262 - inet6/filter/limit-550 -j ACCEPT - inet6/filter/logdrop-262 -j DROP + inet6/filter/limit-550 -m recent --name limit-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-280 + inet6/filter/limit-550 -m recent --name limit-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-280 -j DROP -Filter 552 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} +Filter 552 {"action":"pass","conn-limit":{"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-551 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-551 - inet/filter/limit-551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-263 - inet/filter/limit-551 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-263 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-263 -j DROP + inet/filter/limit-551 -m recent --name limit-551 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-281 + inet/filter/limit-551 -m recent --name limit-551 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet/filter/logdrop-281 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-551 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-551 - inet6/filter/limit-551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-263 - inet6/filter/logdrop-263 -j DROP + inet6/filter/limit-551 -m recent --name limit-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-281 + inet6/filter/limit-551 -m recent --name limit-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-281 -j DROP -Filter 553 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"out":"B"} +Filter 553 {"conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-552 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 - inet/filter/limit-552 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-264 - inet/filter/limit-552 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-264 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-264 -j DROP + inet/filter/limit-552 -m recent --name limit-552 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-282 + inet/filter/limit-552 -m limit --limit 1/second -j LOG + inet/filter/limit-552 -m recent --name limit-552 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet/filter/logdrop-282 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-552 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-552 - inet6/filter/limit-552 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-264 - inet6/filter/limit-552 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-264 -j DROP + inet6/filter/limit-552 -m recent --name limit-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-282 + inet6/filter/limit-552 -m limit --limit 1/second -j LOG + inet6/filter/limit-552 -m recent --name limit-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-282 -j DROP -Filter 554 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"out":"B"} +Filter 554 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-553 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 - inet/filter/limit-553 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-265 - inet/filter/limit-553 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-265 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-265 -j DROP + inet/filter/limit-553 -m recent --name limit-553 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-283 + inet/filter/limit-553 -m recent --name limit-553 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet/filter/logdrop-283 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-553 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-553 - inet6/filter/limit-553 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-265 - inet6/filter/limit-553 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-265 -j DROP + inet6/filter/limit-553 -m recent --name limit-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-283 + inet6/filter/limit-553 -m recent --name limit-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-283 -j DROP -Filter 555 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} +Filter 555 {"conn-limit":{"interval":5},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-554 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 - inet/filter/limit-554 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-266 - inet/filter/limit-554 -m limit --limit 1/second -j LOG - inet/filter/limit-554 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-266 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-266 -j DROP + inet/filter/limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-284 + inet/filter/limit-554 -j TEE --gateway 10.0.0.1 + inet/filter/limit-554 -j TEE --gateway 10.0.0.2 + inet/filter/limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-284 -m limit --limit 1/second -j LOG + inet/filter/logdrop-284 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-554 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-554 - inet6/filter/limit-554 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-266 - inet6/filter/limit-554 -m limit --limit 1/second -j LOG - inet6/filter/limit-554 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-266 -j DROP + inet6/filter/limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-284 + inet6/filter/limit-554 -j TEE --gateway fc00::2 + inet6/filter/limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-284 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-284 -j DROP -Filter 556 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} +Filter 556 {"action":"pass","conn-limit":{"interval":5},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-555 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-555 - inet/filter/limit-555 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-267 - inet/filter/limit-555 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-267 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-267 -j DROP + inet/filter/limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-285 + inet/filter/limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet/filter/logdrop-285 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-555 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-555 - inet6/filter/limit-555 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-267 - inet6/filter/limit-555 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-267 -j DROP + inet6/filter/limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-285 + inet6/filter/limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-285 -j DROP -Filter 557 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} +Filter 557 {"conn-limit":{"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-556 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 - inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-268 - inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-268 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-268 -j DROP + inet/filter/limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-286 + inet/filter/limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet/filter/logdrop-286 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-556 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-556 - inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-268 - inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-268 -j DROP + inet6/filter/limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-286 + inet6/filter/limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-286 -j DROP -Filter 558 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} +Filter 558 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-557 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 - inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-269 - inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-269 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-269 -j DROP + inet/filter/limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-287 + inet/filter/limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet/filter/logdrop-287 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-557 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-557 - inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-269 - inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-269 -j DROP + inet6/filter/limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-287 + inet6/filter/limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-287 -j DROP -Filter 559 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} +Filter 559 {"conn-limit":{"interval":5},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-558 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 - inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-270 + inet/filter/limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-288 inet/filter/limit-558 -m limit --limit 12/minute -j ULOG - inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-270 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-270 -j DROP + inet/filter/limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-288 -m limit --limit 1/second -j LOG + inet/filter/logdrop-288 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-558 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-558 - inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-270 - inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-270 -j DROP + inet6/filter/limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-288 + inet6/filter/limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-288 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-288 -j DROP -Filter 560 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} +Filter 560 {"action":"pass","conn-limit":{"interval":5},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-559 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-559 - inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-271 - inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-271 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-271 -j DROP + inet/filter/limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 + inet/filter/limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-289 -m limit --limit 1/second -j LOG + inet/filter/logdrop-289 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-559 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-559 - inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-271 - inet6/filter/logdrop-271 -j DROP + inet6/filter/limit-559 -m recent --name limit-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 + inet6/filter/logdrop-289 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-289 -j DROP -Filter 561 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"out":"B"} +Filter 561 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-560 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 - inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-272 - inet/filter/limit-560 -j ACCEPT - inet/filter/logdrop-272 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-272 -j DROP + inet/filter/limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 + inet/filter/limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-290 -m limit --limit 1/second -j LOG + inet/filter/logdrop-290 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-560 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-560 - inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-272 - inet6/filter/limit-560 -j ACCEPT - inet6/filter/logdrop-272 -j DROP + inet6/filter/limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 + inet6/filter/limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-290 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-290 -j DROP -Filter 562 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"out":"B"} +Filter 562 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-561 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 - inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-273 - inet/filter/logdrop-273 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-273 -j DROP + inet/filter/limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 + inet/filter/limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-291 -m limit --limit 1/second -j LOG + inet/filter/logdrop-291 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-561 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-561 - inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-273 - inet6/filter/logdrop-273 -j DROP + inet6/filter/limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 + inet6/filter/limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-291 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-291 -j DROP -Filter 563 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} +Filter 563 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-562 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 - inet/filter/limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-274 + inet/filter/limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 inet/filter/limit-562 -m limit --limit 1/second -j LOG - inet/filter/limit-562 -j ACCEPT - inet/filter/logdrop-274 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-274 -j DROP + inet/filter/limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-292 -m limit --limit 1/second -j LOG + inet/filter/logdrop-292 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-562 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-562 - inet6/filter/limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-274 + inet6/filter/limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 inet6/filter/limit-562 -m limit --limit 1/second -j LOG - inet6/filter/limit-562 -j ACCEPT - inet6/filter/logdrop-274 -j DROP + inet6/filter/limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-292 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-292 -j DROP -Filter 564 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} +Filter 564 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-563 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-563 - inet/filter/limit-563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-275 - inet/filter/limit-563 -m limit --limit 1/second -j LOG - inet/filter/logdrop-275 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-275 -j DROP + inet/filter/limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 + inet/filter/limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-293 -m limit --limit 1/second -j LOG + inet/filter/logdrop-293 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-563 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-563 - inet6/filter/limit-563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-275 - inet6/filter/limit-563 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-275 -j DROP + inet6/filter/limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 + inet6/filter/limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-293 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-293 -j DROP -Filter 565 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} +Filter 565 {"conn-limit":{"interval":5,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-564 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 - inet/filter/limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-276 - inet/filter/limit-564 -j ACCEPT - inet/filter/logdrop-276 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-276 -j DROP + inet/filter/limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 + inet/filter/limit-564 -j TEE --gateway 10.0.0.1 + inet/filter/limit-564 -j TEE --gateway 10.0.0.2 + inet/filter/limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-294 -m limit --limit 1/second -j LOG + inet/filter/logdrop-294 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-564 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-564 - inet6/filter/limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-276 - inet6/filter/limit-564 -j ACCEPT - inet6/filter/logdrop-276 -j DROP + inet6/filter/limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 + inet6/filter/limit-564 -j TEE --gateway fc00::2 + inet6/filter/limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-294 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-294 -j DROP -Filter 566 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} +Filter 566 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-565 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 - inet/filter/limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-277 - inet/filter/logdrop-277 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-277 -j DROP + inet/filter/limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 + inet/filter/limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-295 -m limit --limit 1/second -j LOG + inet/filter/logdrop-295 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-565 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-565 - inet6/filter/limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-277 - inet6/filter/logdrop-277 -j DROP + inet6/filter/limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 + inet6/filter/limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-295 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-295 -j DROP -Filter 567 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} +Filter 567 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-566 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 - inet/filter/limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-278 - inet/filter/limit-566 -m limit --limit 12/minute -j ULOG - inet/filter/limit-566 -j ACCEPT - inet/filter/logdrop-278 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-278 -j DROP + inet/filter/limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 + inet/filter/limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-296 -m limit --limit 1/second -j LOG + inet/filter/logdrop-296 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-566 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-566 - inet6/filter/limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-278 - inet6/filter/limit-566 -j ACCEPT - inet6/filter/logdrop-278 -j DROP + inet6/filter/limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 + inet6/filter/limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-296 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-296 -j DROP -Filter 568 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} +Filter 568 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-567 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-567 - inet/filter/limit-567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-279 - inet/filter/limit-567 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-279 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-279 -j DROP + inet/filter/limit-567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 + inet/filter/limit-567 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-297 -m limit --limit 1/second -j LOG + inet/filter/logdrop-297 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-567 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-567 - inet6/filter/limit-567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-279 - inet6/filter/logdrop-279 -j DROP + inet6/filter/limit-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 + inet6/filter/limit-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-297 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-297 -j DROP -Filter 569 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"out":"B"} +Filter 569 {"conn-limit":{"interval":5,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-568 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 - inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-280 - inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-280 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-280 -j DROP + inet/filter/limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 + inet/filter/limit-568 -m limit --limit 12/minute -j ULOG + inet/filter/limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-298 -m limit --limit 1/second -j LOG + inet/filter/logdrop-298 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-568 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-568 - inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-280 - inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-280 -j DROP + inet6/filter/limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 + inet6/filter/limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-298 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-298 -j DROP -Filter 570 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"out":"B"} +Filter 570 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-569 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 - inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-281 - inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-281 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-281 -j DROP + inet/filter/limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 + inet/filter/limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-299 -m limit --limit 1/second -j LOG + inet/filter/logdrop-299 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-569 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-569 - inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-281 - inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-281 -j DROP + inet6/filter/limit-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 + inet6/filter/logdrop-299 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-299 -j DROP -Filter 571 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} +Filter 571 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-570 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 - inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-282 - inet/filter/limit-570 -m limit --limit 1/second -j LOG - inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-282 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-282 -j DROP + inet/filter/limit-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-300 + inet/filter/limit-570 -j ACCEPT + inet/filter/logdrop-300 -m limit --limit 1/second -j LOG + inet/filter/logdrop-300 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-570 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-570 - inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-282 - inet6/filter/limit-570 -m limit --limit 1/second -j LOG - inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-282 -j DROP + inet6/filter/limit-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-300 + inet6/filter/limit-570 -j ACCEPT + inet6/filter/logdrop-300 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-300 -j DROP -Filter 572 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} +Filter 572 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-571 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-571 - inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-283 - inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-283 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-283 -j DROP + inet/filter/limit-571 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 + inet/filter/logdrop-301 -m limit --limit 1/second -j LOG + inet/filter/logdrop-301 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-571 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-571 - inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-283 - inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-283 -j DROP + inet6/filter/limit-571 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 + inet6/filter/logdrop-301 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-301 -j DROP -Filter 573 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} +Filter 573 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-572 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 - inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-284 - inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-284 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-284 -j DROP + inet/filter/limit-572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 + inet/filter/limit-572 -m limit --limit 1/second -j LOG + inet/filter/limit-572 -j ACCEPT + inet/filter/logdrop-302 -m limit --limit 1/second -j LOG + inet/filter/logdrop-302 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-572 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-572 - inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-284 - inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-284 -j DROP + inet6/filter/limit-572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 + inet6/filter/limit-572 -m limit --limit 1/second -j LOG + inet6/filter/limit-572 -j ACCEPT + inet6/filter/logdrop-302 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-302 -j DROP -Filter 574 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} +Filter 574 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-573 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 - inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-285 - inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-285 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-285 -j DROP + inet/filter/limit-573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 + inet/filter/limit-573 -m limit --limit 1/second -j LOG + inet/filter/logdrop-303 -m limit --limit 1/second -j LOG + inet/filter/logdrop-303 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-573 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-573 - inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-285 - inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-285 -j DROP + inet6/filter/limit-573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 + inet6/filter/limit-573 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-303 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-303 -j DROP -Filter 575 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} +Filter 575 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-574 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 - inet/filter/limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-286 - inet/filter/limit-574 -m limit --limit 12/minute -j ULOG - inet/filter/limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-286 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-286 -j DROP + inet/filter/limit-574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 + inet/filter/limit-574 -j TEE --gateway 10.0.0.1 + inet/filter/limit-574 -j TEE --gateway 10.0.0.2 + inet/filter/limit-574 -j ACCEPT + inet/filter/logdrop-304 -m limit --limit 1/second -j LOG + inet/filter/logdrop-304 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-574 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-574 - inet6/filter/limit-574 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-286 - inet6/filter/limit-574 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-286 -j DROP + inet6/filter/limit-574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 + inet6/filter/limit-574 -j TEE --gateway fc00::2 + inet6/filter/limit-574 -j ACCEPT + inet6/filter/logdrop-304 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-304 -j DROP -Filter 576 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} +Filter 576 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-575 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-575 - inet/filter/limit-575 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-287 - inet/filter/limit-575 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-287 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-287 -j DROP + inet/filter/limit-575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 + inet/filter/limit-575 -j TEE --gateway 10.0.0.1 + inet/filter/limit-575 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-305 -m limit --limit 1/second -j LOG + inet/filter/logdrop-305 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-575 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-575 - inet6/filter/limit-575 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-287 - inet6/filter/logdrop-287 -j DROP + inet6/filter/limit-575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 + inet6/filter/limit-575 -j TEE --gateway fc00::2 + inet6/filter/logdrop-305 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-305 -j DROP -Filter 577 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"out":"B"} +Filter 577 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-576 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 - inet/filter/limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-288 + inet/filter/limit-576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 inet/filter/limit-576 -j ACCEPT - inet/filter/logdrop-288 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-288 -j DROP + inet/filter/logdrop-306 -m limit --limit 1/second -j LOG + inet/filter/logdrop-306 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-576 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-576 - inet6/filter/limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-288 + inet6/filter/limit-576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 inet6/filter/limit-576 -j ACCEPT - inet6/filter/logdrop-288 -j DROP + inet6/filter/logdrop-306 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-306 -j DROP -Filter 578 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"out":"B"} +Filter 578 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-577 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 - inet/filter/limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-289 - inet/filter/logdrop-289 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-289 -j DROP + inet/filter/limit-577 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-307 + inet/filter/logdrop-307 -m limit --limit 1/second -j LOG + inet/filter/logdrop-307 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-577 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-577 - inet6/filter/limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-289 - inet6/filter/logdrop-289 -j DROP + inet6/filter/limit-577 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-307 + inet6/filter/logdrop-307 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-307 -j DROP -Filter 579 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} +Filter 579 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-578 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 - inet/filter/limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-290 - inet/filter/limit-578 -m limit --limit 1/second -j LOG + inet/filter/limit-578 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-308 + inet/filter/limit-578 -m limit --limit 12/minute -j ULOG inet/filter/limit-578 -j ACCEPT - inet/filter/logdrop-290 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-290 -j DROP + inet/filter/logdrop-308 -m limit --limit 1/second -j LOG + inet/filter/logdrop-308 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-578 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-578 - inet6/filter/limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-290 - inet6/filter/limit-578 -m limit --limit 1/second -j LOG + inet6/filter/limit-578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-308 inet6/filter/limit-578 -j ACCEPT - inet6/filter/logdrop-290 -j DROP + inet6/filter/logdrop-308 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-308 -j DROP -Filter 580 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} +Filter 580 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-579 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-579 - inet/filter/limit-579 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-291 - inet/filter/limit-579 -m limit --limit 1/second -j LOG - inet/filter/logdrop-291 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-291 -j DROP + inet/filter/limit-579 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-309 + inet/filter/limit-579 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-309 -m limit --limit 1/second -j LOG + inet/filter/logdrop-309 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-579 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-579 - inet6/filter/limit-579 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-291 - inet6/filter/limit-579 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-291 -j DROP + inet6/filter/limit-579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-309 + inet6/filter/logdrop-309 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-309 -j DROP -Filter 581 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} +Filter 581 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-580 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 - inet/filter/limit-580 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-292 - inet/filter/limit-580 -j ACCEPT - inet/filter/logdrop-292 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-292 -j DROP + inet/filter/limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 + inet/filter/limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-310 -m limit --limit 1/second -j LOG + inet/filter/logdrop-310 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-580 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-580 - inet6/filter/limit-580 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-292 - inet6/filter/limit-580 -j ACCEPT - inet6/filter/logdrop-292 -j DROP + inet6/filter/limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 + inet6/filter/limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-310 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-310 -j DROP -Filter 582 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} +Filter 582 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-581 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 - inet/filter/limit-581 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-293 - inet/filter/logdrop-293 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-293 -j DROP + inet/filter/limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 + inet/filter/limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-311 -m limit --limit 1/second -j LOG + inet/filter/logdrop-311 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-581 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-581 - inet6/filter/limit-581 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-293 - inet6/filter/logdrop-293 -j DROP + inet6/filter/limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 + inet6/filter/limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-311 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-311 -j DROP -Filter 583 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} +Filter 583 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-582 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 - inet/filter/limit-582 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-294 - inet/filter/limit-582 -m limit --limit 12/minute -j ULOG - inet/filter/limit-582 -j ACCEPT - inet/filter/logdrop-294 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-294 -j DROP + inet/filter/limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 + inet/filter/limit-582 -m limit --limit 1/second -j LOG + inet/filter/limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-312 -m limit --limit 1/second -j LOG + inet/filter/logdrop-312 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-582 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-582 - inet6/filter/limit-582 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-294 - inet6/filter/limit-582 -j ACCEPT - inet6/filter/logdrop-294 -j DROP + inet6/filter/limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 + inet6/filter/limit-582 -m limit --limit 1/second -j LOG + inet6/filter/limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-312 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-312 -j DROP -Filter 584 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} +Filter 584 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-583 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-583 - inet/filter/limit-583 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-295 - inet/filter/limit-583 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-295 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-295 -j DROP + inet/filter/limit-583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-313 + inet/filter/limit-583 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-313 -m limit --limit 1/second -j LOG + inet/filter/logdrop-313 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-583 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-583 - inet6/filter/limit-583 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-295 - inet6/filter/logdrop-295 -j DROP + inet6/filter/limit-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-313 + inet6/filter/limit-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-313 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-313 -j DROP -Filter 585 {"conn-limit":150,"out":"B"} +Filter 585 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-584 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-584 - inet/filter/limit-584 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-584 -j ACCEPT - inet/filter/limit-584 -m limit --limit 1/second -j LOG - inet/filter/limit-584 -j DROP + inet/filter/limit-584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-314 + inet/filter/limit-584 -j TEE --gateway 10.0.0.1 + inet/filter/limit-584 -j TEE --gateway 10.0.0.2 + inet/filter/limit-584 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-314 -m limit --limit 1/second -j LOG + inet/filter/logdrop-314 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-584 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-584 - inet6/filter/limit-584 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-584 -j ACCEPT - inet6/filter/limit-584 -m limit --limit 1/second -j LOG - inet6/filter/limit-584 -j DROP + inet6/filter/limit-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-314 + inet6/filter/limit-584 -j TEE --gateway fc00::2 + inet6/filter/limit-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-314 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-314 -j DROP -Filter 586 {"action":"pass","conn-limit":150,"out":"B"} +Filter 586 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-585 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-585 - inet/filter/limit-585 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-585 -j RETURN - inet/filter/limit-585 -m limit --limit 1/second -j LOG - inet/filter/limit-585 -j DROP + inet/filter/limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-315 + inet/filter/limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-315 -m limit --limit 1/second -j LOG + inet/filter/logdrop-315 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-585 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-585 - inet6/filter/limit-585 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-585 -j RETURN - inet6/filter/limit-585 -m limit --limit 1/second -j LOG - inet6/filter/limit-585 -j DROP + inet6/filter/limit-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-315 + inet6/filter/limit-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-315 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-315 -j DROP -Filter 587 {"conn-limit":150,"log":true,"out":"B"} +Filter 587 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-586 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-586 - inet/filter/limit-586 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-586 -j logaccept-0 - inet/filter/limit-586 -m limit --limit 1/second -j LOG - inet/filter/limit-586 -j DROP - inet/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet/filter/logaccept-0 -j ACCEPT + inet/filter/limit-586 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-316 + inet/filter/limit-586 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-316 -m limit --limit 1/second -j LOG + inet/filter/logdrop-316 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-586 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-586 - inet6/filter/limit-586 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-586 -j logaccept-0 - inet6/filter/limit-586 -m limit --limit 1/second -j LOG - inet6/filter/limit-586 -j DROP - inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-0 -j ACCEPT + inet6/filter/limit-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-316 + inet6/filter/limit-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-316 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-316 -j DROP -Filter 588 {"conn-limit":150,"log":"none","out":"B"} +Filter 588 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-587 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-587 - inet/filter/limit-587 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-587 -j ACCEPT - inet/filter/limit-587 -m limit --limit 1/second -j LOG - inet/filter/limit-587 -j DROP + inet/filter/limit-587 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-317 + inet/filter/limit-587 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-317 -m limit --limit 1/second -j LOG + inet/filter/logdrop-317 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-587 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-587 - inet6/filter/limit-587 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-587 -j ACCEPT - inet6/filter/limit-587 -m limit --limit 1/second -j LOG - inet6/filter/limit-587 -j DROP + inet6/filter/limit-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-317 + inet6/filter/limit-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-317 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-317 -j DROP -Filter 589 {"conn-limit":150,"log":"ulog","out":"B"} +Filter 589 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-588 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-588 - inet/filter/limit-588 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-588 -j logaccept-1 - inet/filter/limit-588 -m limit --limit 1/second -j LOG - inet/filter/limit-588 -j DROP - inet/filter/logaccept-1 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-1 -j ACCEPT + inet/filter/limit-588 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-318 + inet/filter/limit-588 -m limit --limit 12/minute -j ULOG + inet/filter/limit-588 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-318 -m limit --limit 1/second -j LOG + inet/filter/logdrop-318 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-588 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-588 - inet6/filter/limit-588 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-588 -j logaccept-1 - inet6/filter/limit-588 -m limit --limit 1/second -j LOG - inet6/filter/limit-588 -j DROP - inet6/filter/logaccept-1 -j ACCEPT + inet6/filter/limit-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-318 + inet6/filter/limit-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-318 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-318 -j DROP -Filter 590 {"conn-limit":{"count":150,"log":false},"out":"B"} +Filter 590 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-589 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-589 - inet/filter/limit-589 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-589 -j ACCEPT - inet/filter/limit-589 -j DROP + inet/filter/limit-589 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-319 + inet/filter/limit-589 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-319 -m limit --limit 1/second -j LOG + inet/filter/logdrop-319 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-589 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-589 - inet6/filter/limit-589 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-589 -j ACCEPT - inet6/filter/limit-589 -j DROP + inet6/filter/limit-589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-319 + inet6/filter/logdrop-319 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-319 -j DROP -Filter 591 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} +Filter 591 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-590 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-590 - inet/filter/limit-590 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-590 -j RETURN - inet/filter/limit-590 -j DROP + inet/filter/limit-590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-320 + inet/filter/limit-590 -j ACCEPT + inet/filter/logdrop-320 -m limit --limit 1/second -j LOG + inet/filter/logdrop-320 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-590 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-590 - inet6/filter/limit-590 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-590 -j RETURN - inet6/filter/limit-590 -j DROP + inet6/filter/limit-590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-320 + inet6/filter/limit-590 -j ACCEPT + inet6/filter/logdrop-320 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-320 -j DROP -Filter 592 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} +Filter 592 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-591 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-591 - inet/filter/limit-591 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-591 -j logaccept-2 - inet/filter/limit-591 -j DROP - inet/filter/logaccept-2 -m limit --limit 1/second -j LOG - inet/filter/logaccept-2 -j ACCEPT + inet/filter/limit-591 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-321 + inet/filter/logdrop-321 -m limit --limit 1/second -j LOG + inet/filter/logdrop-321 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-591 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-591 - inet6/filter/limit-591 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-591 -j logaccept-2 - inet6/filter/limit-591 -j DROP - inet6/filter/logaccept-2 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-2 -j ACCEPT + inet6/filter/limit-591 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-321 + inet6/filter/logdrop-321 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-321 -j DROP -Filter 593 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} +Filter 593 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-592 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-592 - inet/filter/limit-592 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-592 -j ACCEPT - inet/filter/limit-592 -j DROP + inet/filter/limit-592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-322 + inet/filter/limit-592 -m limit --limit 1/second -j LOG + inet/filter/limit-592 -j ACCEPT + inet/filter/logdrop-322 -m limit --limit 1/second -j LOG + inet/filter/logdrop-322 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-592 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-592 - inet6/filter/limit-592 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-592 -j ACCEPT - inet6/filter/limit-592 -j DROP + inet6/filter/limit-592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-322 + inet6/filter/limit-592 -m limit --limit 1/second -j LOG + inet6/filter/limit-592 -j ACCEPT + inet6/filter/logdrop-322 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-322 -j DROP -Filter 594 {"conn-limit":{"count":150,"log":false},"log":"ulog","out":"B"} +Filter 594 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-593 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-593 - inet/filter/limit-593 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-593 -j logaccept-3 - inet/filter/limit-593 -j DROP - inet/filter/logaccept-3 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-3 -j ACCEPT + inet/filter/limit-593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-323 + inet/filter/limit-593 -m limit --limit 1/second -j LOG + inet/filter/logdrop-323 -m limit --limit 1/second -j LOG + inet/filter/logdrop-323 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-593 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-593 - inet6/filter/limit-593 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-593 -j logaccept-3 - inet6/filter/limit-593 -j DROP - inet6/filter/logaccept-3 -j ACCEPT + inet6/filter/limit-593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-323 + inet6/filter/limit-593 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-323 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-323 -j DROP -Filter 595 {"conn-limit":{"count":150},"out":"B"} +Filter 595 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-594 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-594 - inet/filter/limit-594 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-594 -j ACCEPT - inet/filter/limit-594 -m limit --limit 1/second -j LOG - inet/filter/limit-594 -j DROP + inet/filter/limit-594 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-324 + inet/filter/limit-594 -j TEE --gateway 10.0.0.1 + inet/filter/limit-594 -j TEE --gateway 10.0.0.2 + inet/filter/limit-594 -j ACCEPT + inet/filter/logdrop-324 -m limit --limit 1/second -j LOG + inet/filter/logdrop-324 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-594 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-594 - inet6/filter/limit-594 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-594 -j ACCEPT - inet6/filter/limit-594 -m limit --limit 1/second -j LOG - inet6/filter/limit-594 -j DROP + inet6/filter/limit-594 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-324 + inet6/filter/limit-594 -j TEE --gateway fc00::2 + inet6/filter/limit-594 -j ACCEPT + inet6/filter/logdrop-324 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-324 -j DROP -Filter 596 {"action":"pass","conn-limit":{"count":150},"out":"B"} +Filter 596 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-595 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-595 - inet/filter/limit-595 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-595 -j RETURN - inet/filter/limit-595 -m limit --limit 1/second -j LOG - inet/filter/limit-595 -j DROP + inet/filter/limit-595 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 + inet/filter/limit-595 -j TEE --gateway 10.0.0.1 + inet/filter/limit-595 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-325 -m limit --limit 1/second -j LOG + inet/filter/logdrop-325 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-595 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-595 - inet6/filter/limit-595 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-595 -j RETURN - inet6/filter/limit-595 -m limit --limit 1/second -j LOG - inet6/filter/limit-595 -j DROP + inet6/filter/limit-595 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-325 + inet6/filter/limit-595 -j TEE --gateway fc00::2 + inet6/filter/logdrop-325 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-325 -j DROP -Filter 597 {"conn-limit":{"count":150},"log":true,"out":"B"} +Filter 597 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-596 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-596 - inet/filter/limit-596 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-596 -j logaccept-4 - inet/filter/limit-596 -m limit --limit 1/second -j LOG - inet/filter/limit-596 -j DROP - inet/filter/logaccept-4 -m limit --limit 1/second -j LOG - inet/filter/logaccept-4 -j ACCEPT + inet/filter/limit-596 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 + inet/filter/limit-596 -j ACCEPT + inet/filter/logdrop-326 -m limit --limit 1/second -j LOG + inet/filter/logdrop-326 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-596 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-596 - inet6/filter/limit-596 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-596 -j logaccept-4 - inet6/filter/limit-596 -m limit --limit 1/second -j LOG - inet6/filter/limit-596 -j DROP - inet6/filter/logaccept-4 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-4 -j ACCEPT + inet6/filter/limit-596 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-326 + inet6/filter/limit-596 -j ACCEPT + inet6/filter/logdrop-326 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-326 -j DROP -Filter 598 {"conn-limit":{"count":150},"log":"none","out":"B"} +Filter 598 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-597 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-597 - inet/filter/limit-597 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-597 -j ACCEPT - inet/filter/limit-597 -m limit --limit 1/second -j LOG - inet/filter/limit-597 -j DROP + inet/filter/limit-597 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 + inet/filter/logdrop-327 -m limit --limit 1/second -j LOG + inet/filter/logdrop-327 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-597 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-597 - inet6/filter/limit-597 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-597 -j ACCEPT - inet6/filter/limit-597 -m limit --limit 1/second -j LOG - inet6/filter/limit-597 -j DROP + inet6/filter/limit-597 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-327 + inet6/filter/logdrop-327 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-327 -j DROP -Filter 599 {"conn-limit":{"count":150},"log":"ulog","out":"B"} +Filter 599 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-598 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-598 - inet/filter/limit-598 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-598 -j logaccept-5 - inet/filter/limit-598 -m limit --limit 1/second -j LOG - inet/filter/limit-598 -j DROP - inet/filter/logaccept-5 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-5 -j ACCEPT + inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 + inet/filter/limit-598 -m limit --limit 12/minute -j ULOG + inet/filter/limit-598 -j ACCEPT + inet/filter/logdrop-328 -m limit --limit 1/second -j LOG + inet/filter/logdrop-328 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-598 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-598 - inet6/filter/limit-598 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-598 -j logaccept-5 - inet6/filter/limit-598 -m limit --limit 1/second -j LOG - inet6/filter/limit-598 -j DROP - inet6/filter/logaccept-5 -j ACCEPT + inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-328 + inet6/filter/limit-598 -j ACCEPT + inet6/filter/logdrop-328 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-328 -j DROP -Filter 600 {"conn-limit":{"count":150,"log":"none"},"out":"B"} +Filter 600 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-599 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-599 - inet/filter/limit-599 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-599 -j ACCEPT - inet/filter/limit-599 -j DROP + inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 + inet/filter/limit-599 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-329 -m limit --limit 1/second -j LOG + inet/filter/logdrop-329 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-599 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-599 - inet6/filter/limit-599 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-599 -j ACCEPT - inet6/filter/limit-599 -j DROP + inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-329 + inet6/filter/logdrop-329 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-329 -j DROP -Filter 601 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} +Filter 601 {"conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-600 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-600 - inet/filter/limit-600 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-600 -j RETURN - inet/filter/limit-600 -j DROP + inet/filter/limit-600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-330 + inet/filter/limit-600 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-330 -m limit --limit 1/second -j LOG + inet/filter/logdrop-330 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-600 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-600 - inet6/filter/limit-600 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-600 -j RETURN - inet6/filter/limit-600 -j DROP + inet6/filter/limit-600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-330 + inet6/filter/limit-600 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-330 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-330 -j DROP -Filter 602 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} +Filter 602 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-601 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-601 - inet/filter/limit-601 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-601 -j logaccept-6 - inet/filter/limit-601 -j DROP - inet/filter/logaccept-6 -m limit --limit 1/second -j LOG - inet/filter/logaccept-6 -j ACCEPT + inet/filter/limit-601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 + inet/filter/limit-601 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-331 -m limit --limit 1/second -j LOG + inet/filter/logdrop-331 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-601 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-601 - inet6/filter/limit-601 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-601 -j logaccept-6 - inet6/filter/limit-601 -j DROP - inet6/filter/logaccept-6 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-6 -j ACCEPT + inet6/filter/limit-601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 + inet6/filter/limit-601 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-331 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-331 -j DROP -Filter 603 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} +Filter 603 {"conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-602 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-602 - inet/filter/limit-602 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-602 -j ACCEPT - inet/filter/limit-602 -j DROP + inet/filter/limit-602 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 + inet/filter/limit-602 -m limit --limit 1/second -j LOG + inet/filter/limit-602 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-332 -m limit --limit 1/second -j LOG + inet/filter/logdrop-332 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-602 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-602 - inet6/filter/limit-602 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-602 -j ACCEPT - inet6/filter/limit-602 -j DROP + inet6/filter/limit-602 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 + inet6/filter/limit-602 -m limit --limit 1/second -j LOG + inet6/filter/limit-602 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-332 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-332 -j DROP -Filter 604 {"conn-limit":{"count":150,"log":"none"},"log":"ulog","out":"B"} +Filter 604 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-603 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-603 - inet/filter/limit-603 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-603 -j logaccept-7 - inet/filter/limit-603 -j DROP - inet/filter/logaccept-7 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-7 -j ACCEPT + inet/filter/limit-603 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 + inet/filter/limit-603 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-333 -m limit --limit 1/second -j LOG + inet/filter/logdrop-333 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-603 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-603 - inet6/filter/limit-603 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-603 -j logaccept-7 - inet6/filter/limit-603 -j DROP - inet6/filter/logaccept-7 -j ACCEPT + inet6/filter/limit-603 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 + inet6/filter/limit-603 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-333 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-333 -j DROP -Filter 605 {"conn-limit":{"count":150,"log":"ulog"},"out":"B"} +Filter 605 {"conn-limit":{"interval":5,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-604 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-604 - inet/filter/limit-604 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-604 -j ACCEPT - inet/filter/limit-604 -m limit --limit 12/minute -j ULOG - inet/filter/limit-604 -j DROP + inet/filter/limit-604 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 + inet/filter/limit-604 -j TEE --gateway 10.0.0.1 + inet/filter/limit-604 -j TEE --gateway 10.0.0.2 + inet/filter/limit-604 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-334 -m limit --limit 1/second -j LOG + inet/filter/logdrop-334 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-604 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-604 - inet6/filter/limit-604 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-604 -j ACCEPT - inet6/filter/limit-604 -j DROP + inet6/filter/limit-604 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 + inet6/filter/limit-604 -j TEE --gateway fc00::2 + inet6/filter/limit-604 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-334 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-334 -j DROP -Filter 606 {"action":"pass","conn-limit":{"count":150,"log":"ulog"},"out":"B"} +Filter 606 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-605 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-605 - inet/filter/limit-605 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-605 -j RETURN - inet/filter/limit-605 -m limit --limit 12/minute -j ULOG - inet/filter/limit-605 -j DROP + inet/filter/limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 + inet/filter/limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-335 -m limit --limit 1/second -j LOG + inet/filter/logdrop-335 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-605 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-605 - inet6/filter/limit-605 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-605 -j RETURN - inet6/filter/limit-605 -j DROP + inet6/filter/limit-605 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 + inet6/filter/limit-605 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-335 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-335 -j DROP -Filter 607 {"conn-limit":{"count":150,"log":"ulog"},"log":true,"out":"B"} +Filter 607 {"conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-606 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-606 - inet/filter/limit-606 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-606 -j logaccept-8 - inet/filter/limit-606 -m limit --limit 12/minute -j ULOG - inet/filter/limit-606 -j DROP - inet/filter/logaccept-8 -m limit --limit 1/second -j LOG - inet/filter/logaccept-8 -j ACCEPT + inet/filter/limit-606 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 + inet/filter/limit-606 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-336 -m limit --limit 1/second -j LOG + inet/filter/logdrop-336 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-606 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-606 - inet6/filter/limit-606 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-606 -j logaccept-8 - inet6/filter/limit-606 -j DROP - inet6/filter/logaccept-8 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-8 -j ACCEPT + inet6/filter/limit-606 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 + inet6/filter/limit-606 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-336 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-336 -j DROP -Filter 608 {"conn-limit":{"count":150,"log":"ulog"},"log":"none","out":"B"} +Filter 608 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-607 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-607 - inet/filter/limit-607 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-607 -j ACCEPT - inet/filter/limit-607 -m limit --limit 12/minute -j ULOG - inet/filter/limit-607 -j DROP + inet/filter/limit-607 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-337 + inet/filter/limit-607 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-337 -m limit --limit 1/second -j LOG + inet/filter/logdrop-337 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-607 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-607 - inet6/filter/limit-607 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-607 -j ACCEPT - inet6/filter/limit-607 -j DROP + inet6/filter/limit-607 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-337 + inet6/filter/limit-607 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-337 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-337 -j DROP -Filter 609 {"conn-limit":{"count":150,"log":"ulog"},"log":"ulog","out":"B"} +Filter 609 {"conn-limit":{"interval":5,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-608 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-608 - inet/filter/limit-608 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-608 -j logaccept-9 + inet/filter/limit-608 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-338 inet/filter/limit-608 -m limit --limit 12/minute -j ULOG - inet/filter/limit-608 -j DROP - inet/filter/logaccept-9 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-9 -j ACCEPT + inet/filter/limit-608 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-338 -m limit --limit 1/second -j LOG + inet/filter/logdrop-338 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-608 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-608 - inet6/filter/limit-608 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-608 -j logaccept-9 - inet6/filter/limit-608 -j DROP - inet6/filter/logaccept-9 -j ACCEPT + inet6/filter/limit-608 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-338 + inet6/filter/limit-608 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-338 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-338 -j DROP -Filter 610 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +Filter 610 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-609 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-609 - inet/filter/limit-609 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-609 -j ACCEPT - inet/filter/limit-609 -j DROP + inet/filter/limit-609 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-339 + inet/filter/limit-609 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-339 -m limit --limit 1/second -j LOG + inet/filter/logdrop-339 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-609 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-609 - inet6/filter/limit-609 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-609 -j ACCEPT - inet6/filter/limit-609 -j DROP + inet6/filter/limit-609 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-339 + inet6/filter/logdrop-339 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-339 -j DROP -Filter 611 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +Filter 611 {"conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-610 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-610 - inet/filter/limit-610 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-610 -j RETURN - inet/filter/limit-610 -j DROP + inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 + inet/filter/limit-610 -j ACCEPT + inet/filter/logdrop-340 -m limit --limit 1/second -j LOG + inet/filter/logdrop-340 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-610 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-610 - inet6/filter/limit-610 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-610 -j RETURN - inet6/filter/limit-610 -j DROP + inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 + inet6/filter/limit-610 -j ACCEPT + inet6/filter/logdrop-340 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-340 -j DROP -Filter 612 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} +Filter 612 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-611 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-611 - inet/filter/limit-611 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-611 -j logaccept-10 - inet/filter/limit-611 -j DROP - inet/filter/logaccept-10 -m limit --limit 1/second -j LOG - inet/filter/logaccept-10 -j ACCEPT + inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 + inet/filter/logdrop-341 -m limit --limit 1/second -j LOG + inet/filter/logdrop-341 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-611 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-611 - inet6/filter/limit-611 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-611 -j logaccept-10 - inet6/filter/limit-611 -j DROP - inet6/filter/logaccept-10 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-10 -j ACCEPT + inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 + inet6/filter/logdrop-341 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-341 -j DROP -Filter 613 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} +Filter 613 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-612 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-612 - inet/filter/limit-612 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-612 -j ACCEPT - inet/filter/limit-612 -j DROP + inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 + inet/filter/limit-612 -m limit --limit 1/second -j LOG + inet/filter/limit-612 -j ACCEPT + inet/filter/logdrop-342 -m limit --limit 1/second -j LOG + inet/filter/logdrop-342 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-612 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-612 - inet6/filter/limit-612 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-612 -j ACCEPT - inet6/filter/limit-612 -j DROP + inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 + inet6/filter/limit-612 -m limit --limit 1/second -j LOG + inet6/filter/limit-612 -j ACCEPT + inet6/filter/logdrop-342 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-342 -j DROP -Filter 614 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"ulog","out":"B"} +Filter 614 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-613 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-613 - inet/filter/limit-613 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-613 -j logaccept-11 - inet/filter/limit-613 -j DROP - inet/filter/logaccept-11 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-11 -j ACCEPT + inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-343 + inet/filter/limit-613 -m limit --limit 1/second -j LOG + inet/filter/logdrop-343 -m limit --limit 1/second -j LOG + inet/filter/logdrop-343 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-613 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-613 - inet6/filter/limit-613 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-613 -j logaccept-11 - inet6/filter/limit-613 -j DROP - inet6/filter/logaccept-11 -j ACCEPT + inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-343 + inet6/filter/limit-613 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-343 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-343 -j DROP -Filter 615 {"conn-limit":{"count":150,"interval":5},"out":"B"} +Filter 615 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-614 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-614 - inet/filter/limit-614 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-614 -j ACCEPT - inet/filter/limit-614 -m limit --limit 1/second -j LOG - inet/filter/limit-614 -j DROP + inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-344 + inet/filter/limit-614 -j TEE --gateway 10.0.0.1 + inet/filter/limit-614 -j TEE --gateway 10.0.0.2 + inet/filter/limit-614 -j ACCEPT + inet/filter/logdrop-344 -m limit --limit 1/second -j LOG + inet/filter/logdrop-344 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-614 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-614 - inet6/filter/limit-614 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-614 -j ACCEPT - inet6/filter/limit-614 -m limit --limit 1/second -j LOG - inet6/filter/limit-614 -j DROP + inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-344 + inet6/filter/limit-614 -j TEE --gateway fc00::2 + inet6/filter/limit-614 -j ACCEPT + inet6/filter/logdrop-344 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-344 -j DROP -Filter 616 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} +Filter 616 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-615 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-615 - inet/filter/limit-615 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-615 -j RETURN - inet/filter/limit-615 -m limit --limit 1/second -j LOG - inet/filter/limit-615 -j DROP + inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-345 + inet/filter/limit-615 -j TEE --gateway 10.0.0.1 + inet/filter/limit-615 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-345 -m limit --limit 1/second -j LOG + inet/filter/logdrop-345 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-615 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-615 - inet6/filter/limit-615 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-615 -j RETURN - inet6/filter/limit-615 -m limit --limit 1/second -j LOG - inet6/filter/limit-615 -j DROP + inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-345 + inet6/filter/limit-615 -j TEE --gateway fc00::2 + inet6/filter/logdrop-345 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-345 -j DROP -Filter 617 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} +Filter 617 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-616 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-616 - inet/filter/limit-616 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-616 -j logaccept-12 - inet/filter/limit-616 -m limit --limit 1/second -j LOG - inet/filter/limit-616 -j DROP - inet/filter/logaccept-12 -m limit --limit 1/second -j LOG - inet/filter/logaccept-12 -j ACCEPT + inet/filter/limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-346 + inet/filter/limit-616 -j ACCEPT + inet/filter/logdrop-346 -m limit --limit 1/second -j LOG + inet/filter/logdrop-346 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-616 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-616 - inet6/filter/limit-616 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-616 -j logaccept-12 - inet6/filter/limit-616 -m limit --limit 1/second -j LOG - inet6/filter/limit-616 -j DROP - inet6/filter/logaccept-12 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-12 -j ACCEPT + inet6/filter/limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-346 + inet6/filter/limit-616 -j ACCEPT + inet6/filter/logdrop-346 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-346 -j DROP -Filter 618 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} +Filter 618 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-617 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-617 - inet/filter/limit-617 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-617 -j ACCEPT - inet/filter/limit-617 -m limit --limit 1/second -j LOG - inet/filter/limit-617 -j DROP + inet/filter/limit-617 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-347 + inet/filter/logdrop-347 -m limit --limit 1/second -j LOG + inet/filter/logdrop-347 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-617 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-617 - inet6/filter/limit-617 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-617 -j ACCEPT - inet6/filter/limit-617 -m limit --limit 1/second -j LOG - inet6/filter/limit-617 -j DROP + inet6/filter/limit-617 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-347 + inet6/filter/logdrop-347 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-347 -j DROP -Filter 619 {"conn-limit":{"count":150,"interval":5},"log":"ulog","out":"B"} +Filter 619 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-618 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-618 - inet/filter/limit-618 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-618 -j logaccept-13 - inet/filter/limit-618 -m limit --limit 1/second -j LOG - inet/filter/limit-618 -j DROP - inet/filter/logaccept-13 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-13 -j ACCEPT + inet/filter/limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-348 + inet/filter/limit-618 -m limit --limit 12/minute -j ULOG + inet/filter/limit-618 -j ACCEPT + inet/filter/logdrop-348 -m limit --limit 1/second -j LOG + inet/filter/logdrop-348 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-618 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-618 - inet6/filter/limit-618 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-618 -j logaccept-13 - inet6/filter/limit-618 -m limit --limit 1/second -j LOG - inet6/filter/limit-618 -j DROP - inet6/filter/logaccept-13 -j ACCEPT + inet6/filter/limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-348 + inet6/filter/limit-618 -j ACCEPT + inet6/filter/logdrop-348 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-348 -j DROP -Filter 620 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +Filter 620 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-619 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-619 - inet/filter/limit-619 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-619 -j ACCEPT - inet/filter/limit-619 -j DROP + inet/filter/limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-349 + inet/filter/limit-619 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-349 -m limit --limit 1/second -j LOG + inet/filter/logdrop-349 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-619 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-619 - inet6/filter/limit-619 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-619 -j ACCEPT - inet6/filter/limit-619 -j DROP + inet6/filter/limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-349 + inet6/filter/logdrop-349 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-349 -j DROP -Filter 621 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +Filter 621 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-620 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-620 - inet/filter/limit-620 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-620 -j RETURN - inet/filter/limit-620 -j DROP + inet/filter/limit-620 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-350 + inet/filter/limit-620 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-350 -m limit --limit 1/second -j LOG + inet/filter/logdrop-350 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-620 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-620 - inet6/filter/limit-620 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-620 -j RETURN - inet6/filter/limit-620 -j DROP + inet6/filter/limit-620 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-350 + inet6/filter/limit-620 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-350 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-350 -j DROP -Filter 622 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 622 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-621 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-621 - inet/filter/limit-621 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-621 -j logaccept-14 - inet/filter/limit-621 -j DROP - inet/filter/logaccept-14 -m limit --limit 1/second -j LOG - inet/filter/logaccept-14 -j ACCEPT + inet/filter/limit-621 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-351 + inet/filter/limit-621 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-351 -m limit --limit 1/second -j LOG + inet/filter/logdrop-351 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-621 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-621 - inet6/filter/limit-621 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-621 -j logaccept-14 - inet6/filter/limit-621 -j DROP - inet6/filter/logaccept-14 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-14 -j ACCEPT + inet6/filter/limit-621 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-351 + inet6/filter/limit-621 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-351 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-351 -j DROP -Filter 623 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 623 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-622 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-622 - inet/filter/limit-622 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-622 -j ACCEPT - inet/filter/limit-622 -j DROP + inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-352 + inet/filter/limit-622 -m limit --limit 1/second -j LOG + inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-352 -m limit --limit 1/second -j LOG + inet/filter/logdrop-352 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-622 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-622 - inet6/filter/limit-622 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-622 -j ACCEPT - inet6/filter/limit-622 -j DROP + inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-352 + inet6/filter/limit-622 -m limit --limit 1/second -j LOG + inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-352 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-352 -j DROP -Filter 624 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"ulog","out":"B"} +Filter 624 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-623 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-623 - inet/filter/limit-623 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-623 -j logaccept-15 - inet/filter/limit-623 -j DROP - inet/filter/logaccept-15 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-15 -j ACCEPT + inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-353 + inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-353 -m limit --limit 1/second -j LOG + inet/filter/logdrop-353 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-623 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-623 - inet6/filter/limit-623 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-623 -j logaccept-15 - inet6/filter/limit-623 -j DROP - inet6/filter/logaccept-15 -j ACCEPT + inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-353 + inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-353 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-353 -j DROP -Filter 625 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"out":"B"} +Filter 625 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-624 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-624 - inet/filter/limit-624 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-624 -j ACCEPT - inet/filter/limit-624 -m limit --limit 12/minute -j ULOG - inet/filter/limit-624 -j DROP + inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-354 + inet/filter/limit-624 -j TEE --gateway 10.0.0.1 + inet/filter/limit-624 -j TEE --gateway 10.0.0.2 + inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-354 -m limit --limit 1/second -j LOG + inet/filter/logdrop-354 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-624 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-624 - inet6/filter/limit-624 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-624 -j ACCEPT - inet6/filter/limit-624 -j DROP + inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-354 + inet6/filter/limit-624 -j TEE --gateway fc00::2 + inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-354 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-354 -j DROP -Filter 626 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"ulog"},"out":"B"} +Filter 626 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-625 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-625 - inet/filter/limit-625 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-625 -j RETURN - inet/filter/limit-625 -m limit --limit 12/minute -j ULOG - inet/filter/limit-625 -j DROP + inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-355 + inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-355 -m limit --limit 1/second -j LOG + inet/filter/logdrop-355 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-625 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-625 - inet6/filter/limit-625 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-625 -j RETURN - inet6/filter/limit-625 -j DROP + inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-355 + inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-355 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-355 -j DROP -Filter 627 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"log":true,"out":"B"} +Filter 627 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-626 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-626 - inet/filter/limit-626 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-626 -j logaccept-16 - inet/filter/limit-626 -m limit --limit 12/minute -j ULOG - inet/filter/limit-626 -j DROP - inet/filter/logaccept-16 -m limit --limit 1/second -j LOG - inet/filter/logaccept-16 -j ACCEPT + inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-356 + inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-356 -m limit --limit 1/second -j LOG + inet/filter/logdrop-356 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-626 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-626 - inet6/filter/limit-626 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-626 -j logaccept-16 - inet6/filter/limit-626 -j DROP - inet6/filter/logaccept-16 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-16 -j ACCEPT + inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-356 + inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-356 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-356 -j DROP -Filter 628 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"log":"none","out":"B"} +Filter 628 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-627 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-627 - inet/filter/limit-627 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-627 -j ACCEPT - inet/filter/limit-627 -m limit --limit 12/minute -j ULOG - inet/filter/limit-627 -j DROP + inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-357 + inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-357 -m limit --limit 1/second -j LOG + inet/filter/logdrop-357 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-627 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-627 - inet6/filter/limit-627 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-627 -j ACCEPT - inet6/filter/limit-627 -j DROP + inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-357 + inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-357 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-357 -j DROP -Filter 629 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"log":"ulog","out":"B"} +Filter 629 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-628 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-628 - inet/filter/limit-628 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-628 -j logaccept-17 + inet/filter/limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-358 inet/filter/limit-628 -m limit --limit 12/minute -j ULOG - inet/filter/limit-628 -j DROP - inet/filter/logaccept-17 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-17 -j ACCEPT + inet/filter/limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-358 -m limit --limit 1/second -j LOG + inet/filter/logdrop-358 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-628 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-628 - inet6/filter/limit-628 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-628 -j logaccept-17 - inet6/filter/limit-628 -j DROP - inet6/filter/logaccept-17 -j ACCEPT + inet6/filter/limit-628 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-358 + inet6/filter/limit-628 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-358 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-358 -j DROP -Filter 630 {"conn-limit":1,"in":"_fw","out":"B"} +Filter 630 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-629 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-629 - inet/filter/limit-629 -m recent --name limit-629 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-296 - inet/filter/limit-629 -m recent --name limit-629 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-296 -m limit --limit 1/second -j LOG - inet/filter/logdrop-296 -j DROP + inet/filter/limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-359 + inet/filter/limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-359 -m limit --limit 1/second -j LOG + inet/filter/logdrop-359 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-629 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-629 - inet6/filter/limit-629 -m recent --name limit-629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-296 - inet6/filter/limit-629 -m recent --name limit-629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-296 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-296 -j DROP + inet6/filter/limit-629 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-359 + inet6/filter/logdrop-359 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-359 -j DROP -Filter 631 {"action":"pass","conn-limit":1,"in":"_fw","out":"B"} +Filter 631 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-630 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-630 - inet/filter/limit-630 -m recent --name limit-630 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-297 - inet/filter/limit-630 -m recent --name limit-630 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-297 -m limit --limit 1/second -j LOG - inet/filter/logdrop-297 -j DROP + inet/filter/limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-360 + inet/filter/limit-630 -j ACCEPT + inet/filter/logdrop-360 -m limit --limit 1/second -j LOG + inet/filter/logdrop-360 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-630 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-630 - inet6/filter/limit-630 -m recent --name limit-630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-297 - inet6/filter/limit-630 -m recent --name limit-630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-297 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-297 -j DROP + inet6/filter/limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-360 + inet6/filter/limit-630 -j ACCEPT + inet6/filter/logdrop-360 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-360 -j DROP -Filter 632 {"conn-limit":1,"in":"_fw","log":true,"out":"B"} +Filter 632 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-631 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-631 - inet/filter/limit-631 -m recent --name limit-631 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-298 - inet/filter/limit-631 -m limit --limit 1/second -j LOG - inet/filter/limit-631 -m recent --name limit-631 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-298 -m limit --limit 1/second -j LOG - inet/filter/logdrop-298 -j DROP + inet/filter/limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-361 + inet/filter/logdrop-361 -m limit --limit 1/second -j LOG + inet/filter/logdrop-361 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-631 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-631 - inet6/filter/limit-631 -m recent --name limit-631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-298 - inet6/filter/limit-631 -m limit --limit 1/second -j LOG - inet6/filter/limit-631 -m recent --name limit-631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-298 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-298 -j DROP + inet6/filter/limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-361 + inet6/filter/logdrop-361 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-361 -j DROP -Filter 633 {"action":"pass","conn-limit":1,"in":"_fw","log":true,"out":"B"} +Filter 633 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-632 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-632 - inet/filter/limit-632 -m recent --name limit-632 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-299 - inet/filter/limit-632 -m recent --name limit-632 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-299 -m limit --limit 1/second -j LOG - inet/filter/logdrop-299 -j DROP + inet/filter/limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-362 + inet/filter/limit-632 -m limit --limit 1/second -j LOG + inet/filter/limit-632 -j ACCEPT + inet/filter/logdrop-362 -m limit --limit 1/second -j LOG + inet/filter/logdrop-362 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-632 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-632 - inet6/filter/limit-632 -m recent --name limit-632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-299 - inet6/filter/limit-632 -m recent --name limit-632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-299 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-299 -j DROP + inet6/filter/limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-362 + inet6/filter/limit-632 -m limit --limit 1/second -j LOG + inet6/filter/limit-632 -j ACCEPT + inet6/filter/logdrop-362 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-362 -j DROP -Filter 634 {"conn-limit":1,"in":"_fw","log":"none","out":"B"} +Filter 634 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-633 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-633 - inet/filter/limit-633 -m recent --name limit-633 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-300 - inet/filter/limit-633 -m recent --name limit-633 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-300 -m limit --limit 1/second -j LOG - inet/filter/logdrop-300 -j DROP + inet/filter/limit-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-363 + inet/filter/limit-633 -m limit --limit 1/second -j LOG + inet/filter/logdrop-363 -m limit --limit 1/second -j LOG + inet/filter/logdrop-363 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-633 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-633 - inet6/filter/limit-633 -m recent --name limit-633 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-300 - inet6/filter/limit-633 -m recent --name limit-633 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-300 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-300 -j DROP + inet6/filter/limit-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-363 + inet6/filter/limit-633 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-363 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-363 -j DROP -Filter 635 {"action":"pass","conn-limit":1,"in":"_fw","log":"none","out":"B"} +Filter 635 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-634 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-634 - inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-301 - inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-301 -m limit --limit 1/second -j LOG - inet/filter/logdrop-301 -j DROP + inet/filter/limit-634 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-364 + inet/filter/limit-634 -j TEE --gateway 10.0.0.1 + inet/filter/limit-634 -j TEE --gateway 10.0.0.2 + inet/filter/limit-634 -j ACCEPT + inet/filter/logdrop-364 -m limit --limit 1/second -j LOG + inet/filter/logdrop-364 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-634 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-634 - inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-301 - inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-301 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-301 -j DROP + inet6/filter/limit-634 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-364 + inet6/filter/limit-634 -j TEE --gateway fc00::2 + inet6/filter/limit-634 -j ACCEPT + inet6/filter/logdrop-364 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-364 -j DROP -Filter 636 {"conn-limit":1,"in":"_fw","log":"ulog","out":"B"} +Filter 636 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-635 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-635 - inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-302 - inet/filter/limit-635 -m limit --limit 12/minute -j ULOG - inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-302 -m limit --limit 1/second -j LOG - inet/filter/logdrop-302 -j DROP + inet/filter/limit-635 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-365 + inet/filter/limit-635 -j TEE --gateway 10.0.0.1 + inet/filter/limit-635 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-365 -m limit --limit 1/second -j LOG + inet/filter/logdrop-365 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-635 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-635 - inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-302 - inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-302 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-302 -j DROP + inet6/filter/limit-635 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-365 + inet6/filter/limit-635 -j TEE --gateway fc00::2 + inet6/filter/logdrop-365 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-365 -j DROP -Filter 637 {"action":"pass","conn-limit":1,"in":"_fw","log":"ulog","out":"B"} +Filter 637 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-636 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-636 - inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-303 - inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-303 -m limit --limit 1/second -j LOG - inet/filter/logdrop-303 -j DROP + inet/filter/limit-636 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-366 + inet/filter/limit-636 -j ACCEPT + inet/filter/logdrop-366 -m limit --limit 1/second -j LOG + inet/filter/logdrop-366 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-636 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-636 - inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-303 - inet6/filter/logdrop-303 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-303 -j DROP + inet6/filter/limit-636 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-366 + inet6/filter/limit-636 -j ACCEPT + inet6/filter/logdrop-366 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-366 -j DROP -Filter 638 {"conn-limit":{"log":false},"in":"_fw","out":"B"} +Filter 638 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-637 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-637 - inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-637 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-367 + inet/filter/logdrop-367 -m limit --limit 1/second -j LOG + inet/filter/logdrop-367 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-637 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-637 - inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-637 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-367 + inet6/filter/logdrop-367 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-367 -j DROP -Filter 639 {"action":"pass","conn-limit":{"log":false},"in":"_fw","out":"B"} +Filter 639 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-638 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-638 - inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set + inet/filter/limit-638 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-368 + inet/filter/limit-638 -m limit --limit 12/minute -j ULOG + inet/filter/limit-638 -j ACCEPT + inet/filter/logdrop-368 -m limit --limit 1/second -j LOG + inet/filter/logdrop-368 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-638 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-638 - inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-638 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-368 + inet6/filter/limit-638 -j ACCEPT + inet6/filter/logdrop-368 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-368 -j DROP -Filter 640 {"conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} +Filter 640 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-639 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-639 - inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-639 -m limit --limit 1/second -j LOG - inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-639 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-369 + inet/filter/limit-639 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-369 -m limit --limit 1/second -j LOG + inet/filter/logdrop-369 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-639 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-639 - inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-639 -m limit --limit 1/second -j LOG - inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-639 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-369 + inet6/filter/logdrop-369 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-369 -j DROP -Filter 641 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} +Filter 641 {"conn-limit":{"interval":5,"log":"mirror"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-640 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-640 - inet/filter/limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-370 + inet/filter/limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-370 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-370 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-370 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-640 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-640 - inet6/filter/limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-370 + inet6/filter/limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-370 -j TEE --gateway fc00::2 + inet6/filter/logdrop-370 -j DROP -Filter 642 {"conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} +Filter 642 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-641 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-641 - inet/filter/limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-371 + inet/filter/limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-371 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-371 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-371 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-641 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-641 - inet6/filter/limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-371 + inet6/filter/limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-371 -j TEE --gateway fc00::2 + inet6/filter/logdrop-371 -j DROP -Filter 643 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} +Filter 643 {"conn-limit":{"interval":5,"log":"mirror"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-642 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-642 - inet/filter/limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --set + inet/filter/limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-372 + inet/filter/limit-642 -m limit --limit 1/second -j LOG + inet/filter/limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-372 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-372 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-372 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-642 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-642 - inet6/filter/limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-372 + inet6/filter/limit-642 -m limit --limit 1/second -j LOG + inet6/filter/limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-372 -j TEE --gateway fc00::2 + inet6/filter/logdrop-372 -j DROP -Filter 644 {"conn-limit":{"log":false},"in":"_fw","log":"ulog","out":"B"} +Filter 644 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-643 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-643 - inet/filter/limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-643 -m limit --limit 12/minute -j ULOG - inet/filter/limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-373 + inet/filter/limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-373 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-373 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-373 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-643 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-643 - inet6/filter/limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-373 + inet6/filter/limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-373 -j TEE --gateway fc00::2 + inet6/filter/logdrop-373 -j DROP -Filter 645 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"ulog","out":"B"} +Filter 645 {"conn-limit":{"interval":5,"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-644 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-644 - inet/filter/limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-374 + inet/filter/limit-644 -j TEE --gateway 10.0.0.1 + inet/filter/limit-644 -j TEE --gateway 10.0.0.2 + inet/filter/limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-374 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-374 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-374 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-644 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-644 - inet6/filter/limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-374 + inet6/filter/limit-644 -j TEE --gateway fc00::2 + inet6/filter/limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-374 -j TEE --gateway fc00::2 + inet6/filter/logdrop-374 -j DROP -Filter 646 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 646 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-645 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-645 - inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-375 + inet/filter/limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-375 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-375 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-375 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-645 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-645 - inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-645 -m recent --name limit-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-375 + inet6/filter/limit-645 -m recent --name limit-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-375 -j TEE --gateway fc00::2 + inet6/filter/logdrop-375 -j DROP -Filter 647 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 647 {"conn-limit":{"interval":5,"log":"mirror"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-646 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-646 - inet/filter/limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-646 -m recent --name limit-646 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-376 + inet/filter/limit-646 -m recent --name limit-646 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-376 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-376 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-376 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-646 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-646 - inet6/filter/limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-646 -m recent --name limit-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-376 + inet6/filter/limit-646 -m recent --name limit-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-376 -j TEE --gateway fc00::2 + inet6/filter/logdrop-376 -j DROP -Filter 648 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 648 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-647 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-647 - inet/filter/limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-647 -m limit --limit 1/second -j LOG - inet/filter/limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-647 -m recent --name limit-647 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-377 + inet/filter/limit-647 -m recent --name limit-647 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-377 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-377 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-377 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-647 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-647 - inet6/filter/limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-647 -m limit --limit 1/second -j LOG - inet6/filter/limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-647 -m recent --name limit-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-377 + inet6/filter/limit-647 -m recent --name limit-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-377 -j TEE --gateway fc00::2 + inet6/filter/logdrop-377 -j DROP -Filter 649 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 649 {"conn-limit":{"interval":5,"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-648 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-648 - inet/filter/limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-648 -m recent --name limit-648 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-378 + inet/filter/limit-648 -m limit --limit 12/minute -j ULOG + inet/filter/limit-648 -m recent --name limit-648 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-378 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-378 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-378 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-648 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-648 - inet6/filter/limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-648 -m recent --name limit-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-378 + inet6/filter/limit-648 -m recent --name limit-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-378 -j TEE --gateway fc00::2 + inet6/filter/logdrop-378 -j DROP -Filter 650 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 650 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-649 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-649 - inet/filter/limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-649 -m recent --name limit-649 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-379 + inet/filter/limit-649 -m recent --name limit-649 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-379 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-379 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-379 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-649 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-649 - inet6/filter/limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-649 -m recent --name limit-649 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-379 + inet6/filter/logdrop-379 -j TEE --gateway fc00::2 + inet6/filter/logdrop-379 -j DROP -Filter 651 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 651 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-650 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-650 - inet/filter/limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-380 + inet/filter/limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-380 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-380 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-380 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-650 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-650 - inet6/filter/limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-380 + inet6/filter/limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-380 -j TEE --gateway fc00::2 + inet6/filter/logdrop-380 -j DROP -Filter 652 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 652 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-651 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-651 - inet/filter/limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-651 -m limit --limit 12/minute -j ULOG - inet/filter/limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-381 + inet/filter/limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-381 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-381 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-381 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-651 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-651 - inet6/filter/limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-381 + inet6/filter/limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-381 -j TEE --gateway fc00::2 + inet6/filter/logdrop-381 -j DROP -Filter 653 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 653 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-652 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 - inet/filter/limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-382 + inet/filter/limit-652 -m limit --limit 1/second -j LOG + inet/filter/limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-382 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-382 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-382 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-652 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-652 - inet6/filter/limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-382 + inet6/filter/limit-652 -m limit --limit 1/second -j LOG + inet6/filter/limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-382 -j TEE --gateway fc00::2 + inet6/filter/logdrop-382 -j DROP -Filter 654 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 654 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-653 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 - inet/filter/limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-653 -j ACCEPT + inet/filter/limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-383 + inet/filter/limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-383 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-383 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-383 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-653 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-653 - inet6/filter/limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-653 -j ACCEPT + inet6/filter/limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-383 + inet6/filter/limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-383 -j TEE --gateway fc00::2 + inet6/filter/logdrop-383 -j DROP -Filter 655 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 655 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-654 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 + inet/filter/limit-654 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-384 + inet/filter/limit-654 -j TEE --gateway 10.0.0.1 + inet/filter/limit-654 -j TEE --gateway 10.0.0.2 + inet/filter/limit-654 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-384 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-384 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-384 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-654 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-654 + inet6/filter/limit-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-384 + inet6/filter/limit-654 -j TEE --gateway fc00::2 + inet6/filter/limit-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-384 -j TEE --gateway fc00::2 + inet6/filter/logdrop-384 -j DROP -Filter 656 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 656 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-655 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 - inet/filter/limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-655 -m limit --limit 1/second -j LOG - inet/filter/limit-655 -j ACCEPT + inet/filter/limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-385 + inet/filter/limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-385 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-385 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-385 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-655 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-655 - inet6/filter/limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-655 -m limit --limit 1/second -j LOG - inet6/filter/limit-655 -j ACCEPT + inet6/filter/limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-385 + inet6/filter/limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-385 -j TEE --gateway fc00::2 + inet6/filter/logdrop-385 -j DROP -Filter 657 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 657 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-656 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 - inet/filter/limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-656 -m limit --limit 1/second -j LOG + inet/filter/limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-386 + inet/filter/limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-386 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-386 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-386 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-656 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-656 - inet6/filter/limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-656 -m limit --limit 1/second -j LOG + inet6/filter/limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-386 + inet6/filter/limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-386 -j TEE --gateway fc00::2 + inet6/filter/logdrop-386 -j DROP -Filter 658 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 658 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-657 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 - inet/filter/limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-657 -j ACCEPT + inet/filter/limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-387 + inet/filter/limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-387 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-387 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-387 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-657 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-657 - inet6/filter/limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-657 -j ACCEPT + inet6/filter/limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-387 + inet6/filter/limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-387 -j TEE --gateway fc00::2 + inet6/filter/logdrop-387 -j DROP -Filter 659 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 659 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-658 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 + inet/filter/limit-658 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-388 + inet/filter/limit-658 -m limit --limit 12/minute -j ULOG + inet/filter/limit-658 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-388 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-388 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-388 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-658 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-658 + inet6/filter/limit-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-388 + inet6/filter/limit-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-388 -j TEE --gateway fc00::2 + inet6/filter/logdrop-388 -j DROP -Filter 660 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 660 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-659 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-659 - inet/filter/limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-659 -m limit --limit 12/minute -j ULOG - inet/filter/limit-659 -j ACCEPT + inet/filter/limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-389 + inet/filter/limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-389 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-389 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-389 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-659 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-659 - inet6/filter/limit-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-659 -j ACCEPT + inet6/filter/limit-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-389 + inet6/filter/logdrop-389 -j TEE --gateway fc00::2 + inet6/filter/logdrop-389 -j DROP -Filter 661 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 661 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-660 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 - inet/filter/limit-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-660 -m limit --limit 12/minute -j ULOG + inet/filter/limit-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-390 + inet/filter/limit-660 -j ACCEPT + inet/filter/logdrop-390 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-390 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-390 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-660 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-660 - inet6/filter/limit-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-390 + inet6/filter/limit-660 -j ACCEPT + inet6/filter/logdrop-390 -j TEE --gateway fc00::2 + inet6/filter/logdrop-390 -j DROP -Filter 662 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 662 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-661 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 - inet/filter/limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-661 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-391 + inet/filter/logdrop-391 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-391 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-391 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-661 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-661 - inet6/filter/limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-661 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-391 + inet6/filter/logdrop-391 -j TEE --gateway fc00::2 + inet6/filter/logdrop-391 -j DROP -Filter 663 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 663 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-662 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-662 - inet/filter/limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-662 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-392 + inet/filter/limit-662 -m limit --limit 1/second -j LOG + inet/filter/limit-662 -j ACCEPT + inet/filter/logdrop-392 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-392 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-392 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-662 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-662 - inet6/filter/limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-662 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-392 + inet6/filter/limit-662 -m limit --limit 1/second -j LOG + inet6/filter/limit-662 -j ACCEPT + inet6/filter/logdrop-392 -j TEE --gateway fc00::2 + inet6/filter/logdrop-392 -j DROP -Filter 664 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 664 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-663 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-663 - inet/filter/limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-663 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-393 inet/filter/limit-663 -m limit --limit 1/second -j LOG - inet/filter/limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-393 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-393 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-393 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-663 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-663 - inet6/filter/limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-663 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-393 inet6/filter/limit-663 -m limit --limit 1/second -j LOG - inet6/filter/limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-393 -j TEE --gateway fc00::2 + inet6/filter/logdrop-393 -j DROP -Filter 665 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 665 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-664 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-664 - inet/filter/limit-664 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-664 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-664 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-394 + inet/filter/limit-664 -j TEE --gateway 10.0.0.1 + inet/filter/limit-664 -j TEE --gateway 10.0.0.2 + inet/filter/limit-664 -j ACCEPT + inet/filter/logdrop-394 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-394 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-394 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-664 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-664 - inet6/filter/limit-664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-664 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-394 + inet6/filter/limit-664 -j TEE --gateway fc00::2 + inet6/filter/limit-664 -j ACCEPT + inet6/filter/logdrop-394 -j TEE --gateway fc00::2 + inet6/filter/logdrop-394 -j DROP -Filter 666 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 666 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-665 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-665 - inet/filter/limit-665 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-665 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-665 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-395 + inet/filter/limit-665 -j TEE --gateway 10.0.0.1 + inet/filter/limit-665 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-395 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-395 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-395 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-665 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-665 - inet6/filter/limit-665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-665 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-395 + inet6/filter/limit-665 -j TEE --gateway fc00::2 + inet6/filter/logdrop-395 -j TEE --gateway fc00::2 + inet6/filter/logdrop-395 -j DROP -Filter 667 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 667 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-666 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-666 - inet/filter/limit-666 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-666 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-666 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-396 + inet/filter/limit-666 -j ACCEPT + inet/filter/logdrop-396 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-396 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-396 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-666 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-666 - inet6/filter/limit-666 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-666 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-666 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-396 + inet6/filter/limit-666 -j ACCEPT + inet6/filter/logdrop-396 -j TEE --gateway fc00::2 + inet6/filter/logdrop-396 -j DROP -Filter 668 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 668 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-667 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 - inet/filter/limit-667 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-667 -m limit --limit 12/minute -j ULOG - inet/filter/limit-667 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-667 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-397 + inet/filter/logdrop-397 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-397 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-397 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-667 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-667 - inet6/filter/limit-667 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-667 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-667 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-397 + inet6/filter/logdrop-397 -j TEE --gateway fc00::2 + inet6/filter/logdrop-397 -j DROP -Filter 669 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 669 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-668 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 - inet/filter/limit-668 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-668 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-668 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-398 + inet/filter/limit-668 -m limit --limit 12/minute -j ULOG + inet/filter/limit-668 -j ACCEPT + inet/filter/logdrop-398 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-398 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-398 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-668 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-668 - inet6/filter/limit-668 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-398 + inet6/filter/limit-668 -j ACCEPT + inet6/filter/logdrop-398 -j TEE --gateway fc00::2 + inet6/filter/logdrop-398 -j DROP -Filter 670 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 670 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-669 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 - inet/filter/limit-669 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-669 -j ACCEPT + inet/filter/limit-669 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-399 + inet/filter/limit-669 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-399 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-399 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-399 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-669 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-669 - inet6/filter/limit-669 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-669 -j ACCEPT + inet6/filter/limit-669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-399 + inet6/filter/logdrop-399 -j TEE --gateway fc00::2 + inet6/filter/logdrop-399 -j DROP -Filter 671 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 671 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-670 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 + inet/filter/limit-670 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-400 + inet/filter/limit-670 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-400 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-400 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-400 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-670 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-670 + inet6/filter/limit-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-400 + inet6/filter/limit-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-400 -j TEE --gateway fc00::2 + inet6/filter/logdrop-400 -j DROP -Filter 672 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 672 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-671 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-671 - inet/filter/limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-671 -m limit --limit 1/second -j LOG - inet/filter/limit-671 -j ACCEPT + inet/filter/limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-401 + inet/filter/limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-401 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-401 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-401 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-671 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-671 - inet6/filter/limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-671 -m limit --limit 1/second -j LOG - inet6/filter/limit-671 -j ACCEPT + inet6/filter/limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-401 + inet6/filter/limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-401 -j TEE --gateway fc00::2 + inet6/filter/logdrop-401 -j DROP -Filter 673 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 673 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-672 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 - inet/filter/limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-402 inet/filter/limit-672 -m limit --limit 1/second -j LOG + inet/filter/limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-402 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-402 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-402 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-672 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-672 - inet6/filter/limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-402 inet6/filter/limit-672 -m limit --limit 1/second -j LOG + inet6/filter/limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-402 -j TEE --gateway fc00::2 + inet6/filter/logdrop-402 -j DROP -Filter 674 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 674 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-673 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 - inet/filter/limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-673 -j ACCEPT + inet/filter/limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 + inet/filter/limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-403 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-403 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-403 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-673 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-673 - inet6/filter/limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-673 -j ACCEPT + inet6/filter/limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 + inet6/filter/limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-403 -j TEE --gateway fc00::2 + inet6/filter/logdrop-403 -j DROP -Filter 675 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 675 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-674 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 + inet/filter/limit-674 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 + inet/filter/limit-674 -j TEE --gateway 10.0.0.1 + inet/filter/limit-674 -j TEE --gateway 10.0.0.2 + inet/filter/limit-674 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-404 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-404 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-404 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-674 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-674 + inet6/filter/limit-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 + inet6/filter/limit-674 -j TEE --gateway fc00::2 + inet6/filter/limit-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-404 -j TEE --gateway fc00::2 + inet6/filter/logdrop-404 -j DROP -Filter 676 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 676 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-675 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-675 - inet/filter/limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-675 -m limit --limit 12/minute -j ULOG - inet/filter/limit-675 -j ACCEPT + inet/filter/limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 + inet/filter/limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-405 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-405 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-405 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-675 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-675 - inet6/filter/limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-675 -j ACCEPT + inet6/filter/limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 + inet6/filter/limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-405 -j TEE --gateway fc00::2 + inet6/filter/logdrop-405 -j DROP -Filter 677 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 677 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-676 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 - inet/filter/limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-676 -m limit --limit 12/minute -j ULOG + inet/filter/limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 + inet/filter/limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-406 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-406 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-406 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-676 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-676 - inet6/filter/limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 + inet6/filter/limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-406 -j TEE --gateway fc00::2 + inet6/filter/logdrop-406 -j DROP -Filter 678 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 678 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-677 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 - inet/filter/limit-677 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-677 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-677 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 + inet/filter/limit-677 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-407 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-407 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-407 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-677 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-677 - inet6/filter/limit-677 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-677 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 + inet6/filter/limit-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-407 -j TEE --gateway fc00::2 + inet6/filter/logdrop-407 -j DROP -Filter 679 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 679 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-678 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-678 - inet/filter/limit-678 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-678 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-678 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 + inet/filter/limit-678 -m limit --limit 12/minute -j ULOG + inet/filter/limit-678 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-408 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-408 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-408 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-678 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-678 - inet6/filter/limit-678 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-678 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 + inet6/filter/limit-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-408 -j TEE --gateway fc00::2 + inet6/filter/logdrop-408 -j DROP -Filter 680 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 680 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-679 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-679 - inet/filter/limit-679 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-679 -m limit --limit 1/second -j LOG - inet/filter/limit-679 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-679 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 + inet/filter/limit-679 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-409 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-409 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-409 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-679 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-679 - inet6/filter/limit-679 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-679 -m limit --limit 1/second -j LOG - inet6/filter/limit-679 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-679 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 + inet6/filter/logdrop-409 -j TEE --gateway fc00::2 + inet6/filter/logdrop-409 -j DROP -Filter 681 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 681 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-680 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-680 - inet/filter/limit-680 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-680 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-680 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-410 + inet/filter/limit-680 -j ACCEPT + inet/filter/logdrop-410 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-410 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-410 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-680 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-680 - inet6/filter/limit-680 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-680 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-680 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-410 + inet6/filter/limit-680 -j ACCEPT + inet6/filter/logdrop-410 -j TEE --gateway fc00::2 + inet6/filter/logdrop-410 -j DROP -Filter 682 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 682 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-681 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-681 - inet/filter/limit-681 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-681 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-681 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-411 + inet/filter/logdrop-411 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-411 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-411 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-681 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-681 - inet6/filter/limit-681 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-681 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-681 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-411 + inet6/filter/logdrop-411 -j TEE --gateway fc00::2 + inet6/filter/logdrop-411 -j DROP -Filter 683 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 683 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-682 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-682 - inet/filter/limit-682 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-682 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-682 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-412 + inet/filter/limit-682 -m limit --limit 1/second -j LOG + inet/filter/limit-682 -j ACCEPT + inet/filter/logdrop-412 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-412 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-412 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-682 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-682 - inet6/filter/limit-682 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-682 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-682 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-412 + inet6/filter/limit-682 -m limit --limit 1/second -j LOG + inet6/filter/limit-682 -j ACCEPT + inet6/filter/logdrop-412 -j TEE --gateway fc00::2 + inet6/filter/logdrop-412 -j DROP -Filter 684 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 684 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-683 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-683 - inet/filter/limit-683 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-683 -m limit --limit 12/minute -j ULOG - inet/filter/limit-683 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-683 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-413 + inet/filter/limit-683 -m limit --limit 1/second -j LOG + inet/filter/logdrop-413 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-413 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-413 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-683 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-683 - inet6/filter/limit-683 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-683 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-683 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-413 + inet6/filter/limit-683 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-413 -j TEE --gateway fc00::2 + inet6/filter/logdrop-413 -j DROP -Filter 685 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 685 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-684 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 - inet/filter/limit-684 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-684 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-684 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-414 + inet/filter/limit-684 -j TEE --gateway 10.0.0.1 + inet/filter/limit-684 -j TEE --gateway 10.0.0.2 + inet/filter/limit-684 -j ACCEPT + inet/filter/logdrop-414 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-414 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-414 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-684 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-684 - inet6/filter/limit-684 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-684 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-414 + inet6/filter/limit-684 -j TEE --gateway fc00::2 + inet6/filter/limit-684 -j ACCEPT + inet6/filter/logdrop-414 -j TEE --gateway fc00::2 + inet6/filter/logdrop-414 -j DROP -Filter 686 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 686 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-685 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 - inet/filter/limit-685 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-685 -j ACCEPT + inet/filter/limit-685 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 + inet/filter/limit-685 -j TEE --gateway 10.0.0.1 + inet/filter/limit-685 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-415 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-415 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-415 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-685 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-685 - inet6/filter/limit-685 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-685 -j ACCEPT + inet6/filter/limit-685 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 + inet6/filter/limit-685 -j TEE --gateway fc00::2 + inet6/filter/logdrop-415 -j TEE --gateway fc00::2 + inet6/filter/logdrop-415 -j DROP -Filter 687 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 687 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-686 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 + inet/filter/limit-686 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 + inet/filter/limit-686 -j ACCEPT + inet/filter/logdrop-416 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-416 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-416 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-686 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-686 + inet6/filter/limit-686 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 + inet6/filter/limit-686 -j ACCEPT + inet6/filter/logdrop-416 -j TEE --gateway fc00::2 + inet6/filter/logdrop-416 -j DROP -Filter 688 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 688 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-687 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-687 - inet/filter/limit-687 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-687 -m limit --limit 1/second -j LOG - inet/filter/limit-687 -j ACCEPT + inet/filter/limit-687 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 + inet/filter/logdrop-417 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-417 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-417 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-687 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-687 - inet6/filter/limit-687 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-687 -m limit --limit 1/second -j LOG - inet6/filter/limit-687 -j ACCEPT + inet6/filter/limit-687 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 + inet6/filter/logdrop-417 -j TEE --gateway fc00::2 + inet6/filter/logdrop-417 -j DROP -Filter 689 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 689 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-688 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 - inet/filter/limit-688 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-688 -m limit --limit 1/second -j LOG + inet/filter/limit-688 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 + inet/filter/limit-688 -m limit --limit 12/minute -j ULOG + inet/filter/limit-688 -j ACCEPT + inet/filter/logdrop-418 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-418 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-418 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-688 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-688 - inet6/filter/limit-688 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-688 -m limit --limit 1/second -j LOG + inet6/filter/limit-688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 + inet6/filter/limit-688 -j ACCEPT + inet6/filter/logdrop-418 -j TEE --gateway fc00::2 + inet6/filter/logdrop-418 -j DROP -Filter 690 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 690 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-689 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 - inet/filter/limit-689 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-689 -j ACCEPT + inet/filter/limit-689 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 + inet/filter/limit-689 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-419 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-419 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-419 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-689 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-689 - inet6/filter/limit-689 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-689 -j ACCEPT + inet6/filter/limit-689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 + inet6/filter/logdrop-419 -j TEE --gateway fc00::2 + inet6/filter/logdrop-419 -j DROP -Filter 691 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 691 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-690 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 + inet/filter/limit-690 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-420 + inet/filter/limit-690 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-420 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-420 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-420 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-690 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-690 + inet6/filter/limit-690 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-420 + inet6/filter/limit-690 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-420 -j TEE --gateway fc00::2 + inet6/filter/logdrop-420 -j DROP -Filter 692 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 692 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-691 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 - inet/filter/limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-691 -m limit --limit 12/minute -j ULOG - inet/filter/limit-691 -j ACCEPT + inet/filter/limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-421 + inet/filter/limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-421 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-421 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-421 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-691 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-691 - inet6/filter/limit-691 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-691 -j ACCEPT + inet6/filter/limit-691 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-421 + inet6/filter/limit-691 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-421 -j TEE --gateway fc00::2 + inet6/filter/logdrop-421 -j DROP -Filter 693 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 693 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-692 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 - inet/filter/limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-692 -m limit --limit 12/minute -j ULOG + inet/filter/limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-422 + inet/filter/limit-692 -m limit --limit 1/second -j LOG + inet/filter/limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-422 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-422 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-422 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-692 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-692 - inet6/filter/limit-692 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-692 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-422 + inet6/filter/limit-692 -m limit --limit 1/second -j LOG + inet6/filter/limit-692 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-422 -j TEE --gateway fc00::2 + inet6/filter/logdrop-422 -j DROP -Filter 694 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 694 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-693 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 - inet/filter/limit-693 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-693 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-693 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-423 + inet/filter/limit-693 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-423 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-423 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-423 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-693 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-693 - inet6/filter/limit-693 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-693 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-693 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-423 + inet6/filter/limit-693 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-423 -j TEE --gateway fc00::2 + inet6/filter/logdrop-423 -j DROP -Filter 695 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 695 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-694 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-694 - inet/filter/limit-694 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-694 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-694 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-424 + inet/filter/limit-694 -j TEE --gateway 10.0.0.1 + inet/filter/limit-694 -j TEE --gateway 10.0.0.2 + inet/filter/limit-694 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-424 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-424 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-424 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-694 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-694 - inet6/filter/limit-694 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-694 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-694 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-424 + inet6/filter/limit-694 -j TEE --gateway fc00::2 + inet6/filter/limit-694 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-424 -j TEE --gateway fc00::2 + inet6/filter/logdrop-424 -j DROP -Filter 696 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 696 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-695 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-695 - inet/filter/limit-695 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-695 -m limit --limit 1/second -j LOG - inet/filter/limit-695 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-425 + inet/filter/limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-425 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-425 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-425 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-695 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-695 - inet6/filter/limit-695 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-695 -m limit --limit 1/second -j LOG - inet6/filter/limit-695 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-695 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-425 + inet6/filter/limit-695 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-425 -j TEE --gateway fc00::2 + inet6/filter/logdrop-425 -j DROP -Filter 697 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 697 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-696 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-696 - inet/filter/limit-696 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-696 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-696 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-426 + inet/filter/limit-696 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-426 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-426 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-426 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-696 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-696 - inet6/filter/limit-696 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-696 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-696 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-426 + inet6/filter/limit-696 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-426 -j TEE --gateway fc00::2 + inet6/filter/logdrop-426 -j DROP -Filter 698 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 698 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-697 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-697 - inet/filter/limit-697 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-697 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-697 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-427 + inet/filter/limit-697 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-427 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-427 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-427 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-697 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-697 - inet6/filter/limit-697 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-697 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-697 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-427 + inet6/filter/limit-697 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-427 -j TEE --gateway fc00::2 + inet6/filter/logdrop-427 -j DROP -Filter 699 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 699 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-698 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-698 - inet/filter/limit-698 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-698 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-698 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-428 + inet/filter/limit-698 -m limit --limit 12/minute -j ULOG + inet/filter/limit-698 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-428 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-428 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-428 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-698 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-698 - inet6/filter/limit-698 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-698 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-698 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-428 + inet6/filter/limit-698 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-428 -j TEE --gateway fc00::2 + inet6/filter/logdrop-428 -j DROP -Filter 700 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 700 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-699 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 - inet/filter/limit-699 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-699 -m limit --limit 12/minute -j ULOG - inet/filter/limit-699 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-699 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-429 + inet/filter/limit-699 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-429 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-429 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-429 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-699 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-699 - inet6/filter/limit-699 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-699 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-699 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-429 + inet6/filter/logdrop-429 -j TEE --gateway fc00::2 + inet6/filter/logdrop-429 -j DROP -Filter 701 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 701 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-700 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 - inet/filter/limit-700 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-700 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-700 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 + inet/filter/limit-700 -j ACCEPT + inet/filter/logdrop-430 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-430 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-430 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-700 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-700 - inet6/filter/limit-700 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-700 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-430 + inet6/filter/limit-700 -j ACCEPT + inet6/filter/logdrop-430 -j TEE --gateway fc00::2 + inet6/filter/logdrop-430 -j DROP -Filter 702 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 702 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-701 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 - inet/filter/limit-701 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-701 -j ACCEPT + inet/filter/limit-701 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 + inet/filter/logdrop-431 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-431 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-431 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-701 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-701 - inet6/filter/limit-701 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-701 -j ACCEPT + inet6/filter/limit-701 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-431 + inet6/filter/logdrop-431 -j TEE --gateway fc00::2 + inet6/filter/logdrop-431 -j DROP -Filter 703 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 703 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-702 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 + inet/filter/limit-702 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-432 + inet/filter/limit-702 -m limit --limit 1/second -j LOG + inet/filter/limit-702 -j ACCEPT + inet/filter/logdrop-432 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-432 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-432 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-702 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-702 + inet6/filter/limit-702 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-432 + inet6/filter/limit-702 -m limit --limit 1/second -j LOG + inet6/filter/limit-702 -j ACCEPT + inet6/filter/logdrop-432 -j TEE --gateway fc00::2 + inet6/filter/logdrop-432 -j DROP -Filter 704 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 704 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-703 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 - inet/filter/limit-703 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-703 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-433 inet/filter/limit-703 -m limit --limit 1/second -j LOG - inet/filter/limit-703 -j ACCEPT + inet/filter/logdrop-433 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-433 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-433 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-703 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-703 - inet6/filter/limit-703 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-703 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-433 inet6/filter/limit-703 -m limit --limit 1/second -j LOG - inet6/filter/limit-703 -j ACCEPT + inet6/filter/logdrop-433 -j TEE --gateway fc00::2 + inet6/filter/logdrop-433 -j DROP -Filter 705 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 705 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-704 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 - inet/filter/limit-704 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-704 -m limit --limit 1/second -j LOG + inet/filter/limit-704 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-434 + inet/filter/limit-704 -j TEE --gateway 10.0.0.1 + inet/filter/limit-704 -j TEE --gateway 10.0.0.2 + inet/filter/limit-704 -j ACCEPT + inet/filter/logdrop-434 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-434 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-434 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-704 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-704 - inet6/filter/limit-704 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-704 -m limit --limit 1/second -j LOG + inet6/filter/limit-704 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-434 + inet6/filter/limit-704 -j TEE --gateway fc00::2 + inet6/filter/limit-704 -j ACCEPT + inet6/filter/logdrop-434 -j TEE --gateway fc00::2 + inet6/filter/logdrop-434 -j DROP -Filter 706 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 706 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-705 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 - inet/filter/limit-705 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-705 -j ACCEPT + inet/filter/limit-705 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-435 + inet/filter/limit-705 -j TEE --gateway 10.0.0.1 + inet/filter/limit-705 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-435 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-435 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-435 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-705 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-705 - inet6/filter/limit-705 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-705 -j ACCEPT + inet6/filter/limit-705 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-435 + inet6/filter/limit-705 -j TEE --gateway fc00::2 + inet6/filter/logdrop-435 -j TEE --gateway fc00::2 + inet6/filter/logdrop-435 -j DROP -Filter 707 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 707 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-706 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 + inet/filter/limit-706 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-436 + inet/filter/limit-706 -j ACCEPT + inet/filter/logdrop-436 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-436 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-436 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-706 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-706 + inet6/filter/limit-706 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-436 + inet6/filter/limit-706 -j ACCEPT + inet6/filter/logdrop-436 -j TEE --gateway fc00::2 + inet6/filter/logdrop-436 -j DROP -Filter 708 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 708 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-707 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 - inet/filter/limit-707 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-707 -m limit --limit 12/minute -j ULOG - inet/filter/limit-707 -j ACCEPT + inet/filter/limit-707 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-437 + inet/filter/logdrop-437 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-437 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-437 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-707 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-707 - inet6/filter/limit-707 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-707 -j ACCEPT + inet6/filter/limit-707 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-437 + inet6/filter/logdrop-437 -j TEE --gateway fc00::2 + inet6/filter/logdrop-437 -j DROP -Filter 709 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 709 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-708 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 - inet/filter/limit-708 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-708 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-438 inet/filter/limit-708 -m limit --limit 12/minute -j ULOG + inet/filter/limit-708 -j ACCEPT + inet/filter/logdrop-438 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-438 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-438 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-708 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-708 - inet6/filter/limit-708 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-708 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-438 + inet6/filter/limit-708 -j ACCEPT + inet6/filter/logdrop-438 -j TEE --gateway fc00::2 + inet6/filter/logdrop-438 -j DROP -Filter 710 {"conn-limit":{},"in":"_fw","out":"B"} +Filter 710 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-709 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 - inet/filter/limit-709 -m recent --name limit-709 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-304 - inet/filter/limit-709 -m recent --name limit-709 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-304 -m limit --limit 1/second -j LOG - inet/filter/logdrop-304 -j DROP + inet/filter/limit-709 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 + inet/filter/limit-709 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-439 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-439 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-439 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-709 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-709 - inet6/filter/limit-709 -m recent --name limit-709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-304 - inet6/filter/limit-709 -m recent --name limit-709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-304 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-304 -j DROP + inet6/filter/limit-709 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 + inet6/filter/logdrop-439 -j TEE --gateway fc00::2 + inet6/filter/logdrop-439 -j DROP -Filter 711 {"action":"pass","conn-limit":{},"in":"_fw","out":"B"} +Filter 711 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-710 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-710 - inet/filter/limit-710 -m recent --name limit-710 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-305 - inet/filter/limit-710 -m recent --name limit-710 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-305 -m limit --limit 1/second -j LOG - inet/filter/logdrop-305 -j DROP + inet/filter/limit-710 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-440 + inet/filter/limit-710 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-440 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-440 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-440 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-710 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-710 - inet6/filter/limit-710 -m recent --name limit-710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-305 - inet6/filter/limit-710 -m recent --name limit-710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-305 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-305 -j DROP + inet6/filter/limit-710 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-440 + inet6/filter/limit-710 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-440 -j TEE --gateway fc00::2 + inet6/filter/logdrop-440 -j DROP -Filter 712 {"conn-limit":{},"in":"_fw","log":true,"out":"B"} +Filter 712 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-711 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-711 - inet/filter/limit-711 -m recent --name limit-711 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-306 - inet/filter/limit-711 -m limit --limit 1/second -j LOG - inet/filter/limit-711 -m recent --name limit-711 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-306 -m limit --limit 1/second -j LOG - inet/filter/logdrop-306 -j DROP + inet/filter/limit-711 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-441 + inet/filter/limit-711 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-441 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-441 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-441 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-711 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-711 - inet6/filter/limit-711 -m recent --name limit-711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-306 - inet6/filter/limit-711 -m limit --limit 1/second -j LOG - inet6/filter/limit-711 -m recent --name limit-711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-306 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-306 -j DROP + inet6/filter/limit-711 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-441 + inet6/filter/limit-711 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-441 -j TEE --gateway fc00::2 + inet6/filter/logdrop-441 -j DROP -Filter 713 {"action":"pass","conn-limit":{},"in":"_fw","log":true,"out":"B"} +Filter 713 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-712 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-712 - inet/filter/limit-712 -m recent --name limit-712 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-307 - inet/filter/limit-712 -m recent --name limit-712 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-307 -m limit --limit 1/second -j LOG - inet/filter/logdrop-307 -j DROP + inet/filter/limit-712 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-442 + inet/filter/limit-712 -m limit --limit 1/second -j LOG + inet/filter/limit-712 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-442 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-442 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-442 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-712 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-712 - inet6/filter/limit-712 -m recent --name limit-712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-307 - inet6/filter/limit-712 -m recent --name limit-712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-307 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-307 -j DROP + inet6/filter/limit-712 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-442 + inet6/filter/limit-712 -m limit --limit 1/second -j LOG + inet6/filter/limit-712 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-442 -j TEE --gateway fc00::2 + inet6/filter/logdrop-442 -j DROP -Filter 714 {"conn-limit":{},"in":"_fw","log":"none","out":"B"} +Filter 714 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-713 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-713 - inet/filter/limit-713 -m recent --name limit-713 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-308 - inet/filter/limit-713 -m recent --name limit-713 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-308 -m limit --limit 1/second -j LOG - inet/filter/logdrop-308 -j DROP + inet/filter/limit-713 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-443 + inet/filter/limit-713 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-443 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-443 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-443 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-713 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-713 - inet6/filter/limit-713 -m recent --name limit-713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-308 - inet6/filter/limit-713 -m recent --name limit-713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-308 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-308 -j DROP + inet6/filter/limit-713 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-443 + inet6/filter/limit-713 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-443 -j TEE --gateway fc00::2 + inet6/filter/logdrop-443 -j DROP -Filter 715 {"action":"pass","conn-limit":{},"in":"_fw","log":"none","out":"B"} +Filter 715 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-714 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-714 - inet/filter/limit-714 -m recent --name limit-714 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-309 - inet/filter/limit-714 -m recent --name limit-714 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-309 -m limit --limit 1/second -j LOG - inet/filter/logdrop-309 -j DROP + inet/filter/limit-714 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-444 + inet/filter/limit-714 -j TEE --gateway 10.0.0.1 + inet/filter/limit-714 -j TEE --gateway 10.0.0.2 + inet/filter/limit-714 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-444 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-444 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-444 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-714 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-714 - inet6/filter/limit-714 -m recent --name limit-714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-309 - inet6/filter/limit-714 -m recent --name limit-714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-309 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-309 -j DROP + inet6/filter/limit-714 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-444 + inet6/filter/limit-714 -j TEE --gateway fc00::2 + inet6/filter/limit-714 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-444 -j TEE --gateway fc00::2 + inet6/filter/logdrop-444 -j DROP -Filter 716 {"conn-limit":{},"in":"_fw","log":"ulog","out":"B"} +Filter 716 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-715 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-715 - inet/filter/limit-715 -m recent --name limit-715 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-310 - inet/filter/limit-715 -m limit --limit 12/minute -j ULOG - inet/filter/limit-715 -m recent --name limit-715 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-310 -m limit --limit 1/second -j LOG - inet/filter/logdrop-310 -j DROP + inet/filter/limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 + inet/filter/limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-445 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-445 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-445 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-715 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-715 - inet6/filter/limit-715 -m recent --name limit-715 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-310 - inet6/filter/limit-715 -m recent --name limit-715 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-310 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-310 -j DROP + inet6/filter/limit-715 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 + inet6/filter/limit-715 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-445 -j TEE --gateway fc00::2 + inet6/filter/logdrop-445 -j DROP -Filter 717 {"action":"pass","conn-limit":{},"in":"_fw","log":"ulog","out":"B"} +Filter 717 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-716 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-716 - inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-311 - inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-311 -m limit --limit 1/second -j LOG - inet/filter/logdrop-311 -j DROP + inet/filter/limit-716 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 + inet/filter/limit-716 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-446 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-446 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-446 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-716 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-716 - inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-311 - inet6/filter/logdrop-311 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-311 -j DROP + inet6/filter/limit-716 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 + inet6/filter/limit-716 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-446 -j TEE --gateway fc00::2 + inet6/filter/logdrop-446 -j DROP -Filter 718 {"conn-limit":{"name":"A"},"in":"_fw","out":"B"} +Filter 718 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-717 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-717 - inet/filter/limit-717 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-312 - inet/filter/limit-717 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-312 -m limit --limit 1/second -j LOG - inet/filter/logdrop-312 -j DROP + inet/filter/limit-717 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 + inet/filter/limit-717 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-447 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-447 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-447 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-717 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-717 - inet6/filter/limit-717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-312 - inet6/filter/limit-717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-312 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-312 -j DROP + inet6/filter/limit-717 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 + inet6/filter/limit-717 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-447 -j TEE --gateway fc00::2 + inet6/filter/logdrop-447 -j DROP -Filter 719 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","out":"B"} +Filter 719 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-718 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-718 - inet/filter/limit-718 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-313 - inet/filter/limit-718 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-313 -m limit --limit 1/second -j LOG - inet/filter/logdrop-313 -j DROP + inet/filter/limit-718 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 + inet/filter/limit-718 -m limit --limit 12/minute -j ULOG + inet/filter/limit-718 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-448 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-448 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-448 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-718 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-718 - inet6/filter/limit-718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-313 - inet6/filter/limit-718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-313 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-313 -j DROP + inet6/filter/limit-718 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 + inet6/filter/limit-718 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-448 -j TEE --gateway fc00::2 + inet6/filter/logdrop-448 -j DROP -Filter 720 {"conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 720 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-719 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-719 - inet/filter/limit-719 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-314 - inet/filter/limit-719 -m limit --limit 1/second -j LOG - inet/filter/limit-719 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-314 -m limit --limit 1/second -j LOG - inet/filter/logdrop-314 -j DROP + inet/filter/limit-719 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 + inet/filter/limit-719 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-449 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-449 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-449 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-719 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-719 - inet6/filter/limit-719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-314 - inet6/filter/limit-719 -m limit --limit 1/second -j LOG - inet6/filter/limit-719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-314 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-314 -j DROP + inet6/filter/limit-719 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 + inet6/filter/logdrop-449 -j TEE --gateway fc00::2 + inet6/filter/logdrop-449 -j DROP -Filter 721 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 721 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-720 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-720 - inet/filter/limit-720 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-315 - inet/filter/limit-720 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-315 -m limit --limit 1/second -j LOG - inet/filter/logdrop-315 -j DROP + inet/filter/limit-720 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-450 + inet/filter/limit-720 -j ACCEPT + inet/filter/logdrop-450 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-450 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-450 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-720 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-720 - inet6/filter/limit-720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-315 - inet6/filter/limit-720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-315 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-315 -j DROP + inet6/filter/limit-720 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-450 + inet6/filter/limit-720 -j ACCEPT + inet6/filter/logdrop-450 -j TEE --gateway fc00::2 + inet6/filter/logdrop-450 -j DROP -Filter 722 {"conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 722 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-721 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-721 - inet/filter/limit-721 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-316 - inet/filter/limit-721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-316 -m limit --limit 1/second -j LOG - inet/filter/logdrop-316 -j DROP + inet/filter/limit-721 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 + inet/filter/logdrop-451 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-451 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-451 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-721 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-721 - inet6/filter/limit-721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-316 - inet6/filter/limit-721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-316 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-316 -j DROP + inet6/filter/limit-721 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 + inet6/filter/logdrop-451 -j TEE --gateway fc00::2 + inet6/filter/logdrop-451 -j DROP -Filter 723 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 723 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-722 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-722 - inet/filter/limit-722 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-317 - inet/filter/limit-722 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-317 -m limit --limit 1/second -j LOG - inet/filter/logdrop-317 -j DROP + inet/filter/limit-722 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 + inet/filter/limit-722 -m limit --limit 1/second -j LOG + inet/filter/limit-722 -j ACCEPT + inet/filter/logdrop-452 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-452 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-452 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-722 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-722 - inet6/filter/limit-722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-317 - inet6/filter/limit-722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-317 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-317 -j DROP + inet6/filter/limit-722 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 + inet6/filter/limit-722 -m limit --limit 1/second -j LOG + inet6/filter/limit-722 -j ACCEPT + inet6/filter/logdrop-452 -j TEE --gateway fc00::2 + inet6/filter/logdrop-452 -j DROP -Filter 724 {"conn-limit":{"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 724 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-723 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-723 - inet/filter/limit-723 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-318 - inet/filter/limit-723 -m limit --limit 12/minute -j ULOG - inet/filter/limit-723 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-318 -m limit --limit 1/second -j LOG - inet/filter/logdrop-318 -j DROP + inet/filter/limit-723 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 + inet/filter/limit-723 -m limit --limit 1/second -j LOG + inet/filter/logdrop-453 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-453 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-453 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-723 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-723 - inet6/filter/limit-723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-318 - inet6/filter/limit-723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-318 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-318 -j DROP + inet6/filter/limit-723 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 + inet6/filter/limit-723 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-453 -j TEE --gateway fc00::2 + inet6/filter/logdrop-453 -j DROP -Filter 725 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 725 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-724 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-724 - inet/filter/limit-724 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-319 - inet/filter/limit-724 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-319 -m limit --limit 1/second -j LOG - inet/filter/logdrop-319 -j DROP + inet/filter/limit-724 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 + inet/filter/limit-724 -j TEE --gateway 10.0.0.1 + inet/filter/limit-724 -j TEE --gateway 10.0.0.2 + inet/filter/limit-724 -j ACCEPT + inet/filter/logdrop-454 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-454 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-454 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-724 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-724 - inet6/filter/limit-724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-319 - inet6/filter/logdrop-319 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-319 -j DROP + inet6/filter/limit-724 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 + inet6/filter/limit-724 -j TEE --gateway fc00::2 + inet6/filter/limit-724 -j ACCEPT + inet6/filter/logdrop-454 -j TEE --gateway fc00::2 + inet6/filter/logdrop-454 -j DROP -Filter 726 {"conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} +Filter 726 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-725 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-725 - inet/filter/limit-725 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-320 - inet/filter/limit-725 -j ACCEPT - inet/filter/logdrop-320 -m limit --limit 1/second -j LOG - inet/filter/logdrop-320 -j DROP + inet/filter/limit-725 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 + inet/filter/limit-725 -j TEE --gateway 10.0.0.1 + inet/filter/limit-725 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-455 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-455 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-455 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-725 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-725 - inet6/filter/limit-725 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-320 - inet6/filter/limit-725 -j ACCEPT - inet6/filter/logdrop-320 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-320 -j DROP + inet6/filter/limit-725 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 + inet6/filter/limit-725 -j TEE --gateway fc00::2 + inet6/filter/logdrop-455 -j TEE --gateway fc00::2 + inet6/filter/logdrop-455 -j DROP -Filter 727 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} +Filter 727 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-321 - inet/filter/logdrop-321 -m limit --limit 1/second -j LOG - inet/filter/logdrop-321 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-321 - inet6/filter/logdrop-321 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-321 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-726 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-726 + inet/filter/limit-726 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-456 + inet/filter/limit-726 -j ACCEPT + inet/filter/logdrop-456 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-456 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-456 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-726 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-726 + inet6/filter/limit-726 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-456 + inet6/filter/limit-726 -j ACCEPT + inet6/filter/logdrop-456 -j TEE --gateway fc00::2 + inet6/filter/logdrop-456 -j DROP -Filter 728 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 728 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-727 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-727 - inet/filter/limit-727 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-322 - inet/filter/limit-727 -m limit --limit 1/second -j LOG - inet/filter/limit-727 -j ACCEPT - inet/filter/logdrop-322 -m limit --limit 1/second -j LOG - inet/filter/logdrop-322 -j DROP + inet/filter/limit-727 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-457 + inet/filter/logdrop-457 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-457 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-457 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-727 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-727 - inet6/filter/limit-727 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-322 - inet6/filter/limit-727 -m limit --limit 1/second -j LOG - inet6/filter/limit-727 -j ACCEPT - inet6/filter/logdrop-322 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-322 -j DROP + inet6/filter/limit-727 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-457 + inet6/filter/logdrop-457 -j TEE --gateway fc00::2 + inet6/filter/logdrop-457 -j DROP -Filter 729 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 729 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-728 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-728 - inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-323 - inet/filter/limit-728 -m limit --limit 1/second -j LOG - inet/filter/logdrop-323 -m limit --limit 1/second -j LOG - inet/filter/logdrop-323 -j DROP + inet/filter/limit-728 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-458 + inet/filter/limit-728 -m limit --limit 12/minute -j ULOG + inet/filter/limit-728 -j ACCEPT + inet/filter/logdrop-458 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-458 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-458 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-728 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-728 - inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-323 - inet6/filter/limit-728 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-323 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-323 -j DROP + inet6/filter/limit-728 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-458 + inet6/filter/limit-728 -j ACCEPT + inet6/filter/logdrop-458 -j TEE --gateway fc00::2 + inet6/filter/logdrop-458 -j DROP -Filter 730 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 730 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-729 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-729 - inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-324 - inet/filter/limit-729 -j ACCEPT - inet/filter/logdrop-324 -m limit --limit 1/second -j LOG - inet/filter/logdrop-324 -j DROP + inet/filter/limit-729 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-459 + inet/filter/limit-729 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-459 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-459 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-459 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-729 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-729 - inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-324 - inet6/filter/limit-729 -j ACCEPT - inet6/filter/logdrop-324 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-324 -j DROP + inet6/filter/limit-729 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-459 + inet6/filter/logdrop-459 -j TEE --gateway fc00::2 + inet6/filter/logdrop-459 -j DROP -Filter 731 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 731 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-325 - inet/filter/logdrop-325 -m limit --limit 1/second -j LOG - inet/filter/logdrop-325 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-325 - inet6/filter/logdrop-325 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-325 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-730 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-730 + inet/filter/limit-730 -m recent --name limit-730 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-730 -m recent --name limit-730 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-730 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-730 + inet6/filter/limit-730 -m recent --name limit-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-730 -m recent --name limit-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 732 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 732 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-731 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-731 - inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-326 - inet/filter/limit-731 -m limit --limit 12/minute -j ULOG - inet/filter/limit-731 -j ACCEPT - inet/filter/logdrop-326 -m limit --limit 1/second -j LOG - inet/filter/logdrop-326 -j DROP + inet/filter/limit-731 -m recent --name limit-731 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-731 -m recent --name limit-731 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-731 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-731 - inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-326 - inet6/filter/limit-731 -j ACCEPT - inet6/filter/logdrop-326 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-326 -j DROP + inet6/filter/limit-731 -m recent --name limit-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-731 -m recent --name limit-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 733 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 733 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-732 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-732 - inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-327 - inet/filter/limit-732 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-327 -m limit --limit 1/second -j LOG - inet/filter/logdrop-327 -j DROP + inet/filter/limit-732 -m recent --name limit-732 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-732 -m limit --limit 1/second -j LOG + inet/filter/limit-732 -m recent --name limit-732 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-732 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-732 - inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-327 - inet6/filter/logdrop-327 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-327 -j DROP + inet6/filter/limit-732 -m recent --name limit-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-732 -m limit --limit 1/second -j LOG + inet6/filter/limit-732 -m recent --name limit-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 734 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} +Filter 734 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-733 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-733 - inet/filter/limit-733 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-328 - inet/filter/limit-733 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-328 -m limit --limit 1/second -j LOG - inet/filter/logdrop-328 -j DROP + inet/filter/limit-733 -m recent --name limit-733 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-733 -m recent --name limit-733 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-733 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-733 - inet6/filter/limit-733 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-328 - inet6/filter/limit-733 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-328 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-328 -j DROP + inet6/filter/limit-733 -m recent --name limit-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-733 -m recent --name limit-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 735 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} +Filter 735 {"conn-limit":{"interval":5,"log":"none"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-734 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-734 - inet/filter/limit-734 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-329 - inet/filter/limit-734 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-329 -m limit --limit 1/second -j LOG - inet/filter/logdrop-329 -j DROP + inet/filter/limit-734 -m recent --name limit-734 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-734 -j TEE --gateway 10.0.0.1 + inet/filter/limit-734 -j TEE --gateway 10.0.0.2 + inet/filter/limit-734 -m recent --name limit-734 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-734 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-734 - inet6/filter/limit-734 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-329 - inet6/filter/limit-734 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-329 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-329 -j DROP + inet6/filter/limit-734 -m recent --name limit-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-734 -j TEE --gateway fc00::2 + inet6/filter/limit-734 -m recent --name limit-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 736 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 736 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-735 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-735 - inet/filter/limit-735 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-330 - inet/filter/limit-735 -m limit --limit 1/second -j LOG - inet/filter/limit-735 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-330 -m limit --limit 1/second -j LOG - inet/filter/logdrop-330 -j DROP + inet/filter/limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-735 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-735 - inet6/filter/limit-735 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-330 - inet6/filter/limit-735 -m limit --limit 1/second -j LOG - inet6/filter/limit-735 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-330 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-330 -j DROP + inet6/filter/limit-735 -m recent --name limit-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-735 -m recent --name limit-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 737 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 737 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-736 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-736 - inet/filter/limit-736 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-331 - inet/filter/limit-736 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-331 -m limit --limit 1/second -j LOG - inet/filter/logdrop-331 -j DROP + inet/filter/limit-736 -m recent --name limit-736 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-736 -m recent --name limit-736 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-736 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-736 - inet6/filter/limit-736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-331 - inet6/filter/limit-736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-331 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-331 -j DROP + inet6/filter/limit-736 -m recent --name limit-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-736 -m recent --name limit-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 738 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 738 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-737 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-737 - inet/filter/limit-737 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-332 - inet/filter/limit-737 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-332 -m limit --limit 1/second -j LOG - inet/filter/logdrop-332 -j DROP + inet/filter/limit-737 -m recent --name limit-737 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-737 -m recent --name limit-737 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-737 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-737 - inet6/filter/limit-737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-332 - inet6/filter/limit-737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-332 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-332 -j DROP + inet6/filter/limit-737 -m recent --name limit-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-737 -m recent --name limit-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 739 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 739 {"conn-limit":{"interval":5,"log":"none"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-738 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-738 - inet/filter/limit-738 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-333 - inet/filter/limit-738 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-333 -m limit --limit 1/second -j LOG - inet/filter/logdrop-333 -j DROP + inet/filter/limit-738 -m recent --name limit-738 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-738 -m limit --limit 12/minute -j ULOG + inet/filter/limit-738 -m recent --name limit-738 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-738 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-738 - inet6/filter/limit-738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-333 - inet6/filter/limit-738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-333 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-333 -j DROP + inet6/filter/limit-738 -m recent --name limit-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-738 -m recent --name limit-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 740 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 740 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-739 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-739 - inet/filter/limit-739 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-334 - inet/filter/limit-739 -m limit --limit 12/minute -j ULOG - inet/filter/limit-739 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-334 -m limit --limit 1/second -j LOG - inet/filter/logdrop-334 -j DROP + inet/filter/limit-739 -m recent --name limit-739 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-739 -m recent --name limit-739 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-739 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-739 - inet6/filter/limit-739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-334 - inet6/filter/limit-739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-334 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-334 -j DROP + inet6/filter/limit-739 -m recent --name limit-739 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -Filter 741 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 741 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-740 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-740 - inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-335 - inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-335 -m limit --limit 1/second -j LOG - inet/filter/logdrop-335 -j DROP + inet/filter/limit-740 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-740 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-740 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-740 - inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-335 - inet6/filter/logdrop-335 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-335 -j DROP + inet6/filter/limit-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 742 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} +Filter 742 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-741 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-741 - inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-336 - inet/filter/limit-741 -j ACCEPT - inet/filter/logdrop-336 -m limit --limit 1/second -j LOG - inet/filter/logdrop-336 -j DROP + inet/filter/limit-741 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-741 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-741 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-741 - inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-336 - inet6/filter/limit-741 -j ACCEPT - inet6/filter/logdrop-336 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-336 -j DROP + inet6/filter/limit-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 743 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} +Filter 743 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-337 - inet/filter/logdrop-337 -m limit --limit 1/second -j LOG - inet/filter/logdrop-337 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-337 - inet6/filter/logdrop-337 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-337 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-742 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-742 + inet/filter/limit-742 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-742 -m limit --limit 1/second -j LOG + inet/filter/limit-742 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-742 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-742 + inet6/filter/limit-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-742 -m limit --limit 1/second -j LOG + inet6/filter/limit-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 744 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 744 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-743 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-743 - inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-338 - inet/filter/limit-743 -m limit --limit 1/second -j LOG - inet/filter/limit-743 -j ACCEPT - inet/filter/logdrop-338 -m limit --limit 1/second -j LOG - inet/filter/logdrop-338 -j DROP + inet/filter/limit-743 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-743 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-743 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-743 - inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-338 - inet6/filter/limit-743 -m limit --limit 1/second -j LOG - inet6/filter/limit-743 -j ACCEPT - inet6/filter/logdrop-338 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-338 -j DROP + inet6/filter/limit-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 745 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 745 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-744 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-744 - inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-339 - inet/filter/limit-744 -m limit --limit 1/second -j LOG - inet/filter/logdrop-339 -m limit --limit 1/second -j LOG - inet/filter/logdrop-339 -j DROP + inet/filter/limit-744 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-744 -j TEE --gateway 10.0.0.1 + inet/filter/limit-744 -j TEE --gateway 10.0.0.2 + inet/filter/limit-744 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-744 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-744 - inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-339 - inet6/filter/limit-744 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-339 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-339 -j DROP + inet6/filter/limit-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-744 -j TEE --gateway fc00::2 + inet6/filter/limit-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 746 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 746 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-745 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-745 - inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-340 - inet/filter/limit-745 -j ACCEPT - inet/filter/logdrop-340 -m limit --limit 1/second -j LOG - inet/filter/logdrop-340 -j DROP + inet/filter/limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-745 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-745 - inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-340 - inet6/filter/limit-745 -j ACCEPT - inet6/filter/logdrop-340 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-340 -j DROP + inet6/filter/limit-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 747 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 747 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-341 - inet/filter/logdrop-341 -m limit --limit 1/second -j LOG - inet/filter/logdrop-341 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-341 - inet6/filter/logdrop-341 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-341 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-746 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-746 + inet/filter/limit-746 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-746 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-746 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-746 + inet6/filter/limit-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 748 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 748 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-747 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-747 - inet/filter/limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-342 - inet/filter/limit-747 -m limit --limit 12/minute -j ULOG - inet/filter/limit-747 -j ACCEPT - inet/filter/logdrop-342 -m limit --limit 1/second -j LOG - inet/filter/logdrop-342 -j DROP + inet/filter/limit-747 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-747 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-747 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-747 - inet6/filter/limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-342 - inet6/filter/limit-747 -j ACCEPT - inet6/filter/logdrop-342 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-342 -j DROP + inet6/filter/limit-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 749 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 749 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-748 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-748 - inet/filter/limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-343 + inet/filter/limit-748 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-748 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-343 -m limit --limit 1/second -j LOG - inet/filter/logdrop-343 -j DROP + inet/filter/limit-748 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-748 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-748 - inet6/filter/limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-343 - inet6/filter/logdrop-343 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-343 -j DROP + inet6/filter/limit-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 750 {"conn-limit":{"name":"C"},"in":"_fw","out":"B"} +Filter 750 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-749 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-749 - inet/filter/limit-749 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-344 - inet/filter/limit-749 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-344 -m limit --limit 1/second -j LOG - inet/filter/logdrop-344 -j DROP + inet/filter/limit-749 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-749 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-749 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-749 - inet6/filter/limit-749 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-344 - inet6/filter/limit-749 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-344 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-344 -j DROP + inet6/filter/limit-749 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -Filter 751 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","out":"B"} +Filter 751 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-750 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-750 - inet/filter/limit-750 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-345 - inet/filter/limit-750 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-345 -m limit --limit 1/second -j LOG - inet/filter/logdrop-345 -j DROP + inet/filter/limit-750 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-750 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-750 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-750 - inet6/filter/limit-750 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-345 - inet6/filter/limit-750 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-345 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-345 -j DROP + inet6/filter/limit-750 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-750 -j ACCEPT -Filter 752 {"conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 752 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-751 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-751 - inet/filter/limit-751 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-346 - inet/filter/limit-751 -m limit --limit 1/second -j LOG - inet/filter/limit-751 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-346 -m limit --limit 1/second -j LOG - inet/filter/logdrop-346 -j DROP + inet/filter/limit-751 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-751 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-751 - inet6/filter/limit-751 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-346 - inet6/filter/limit-751 -m limit --limit 1/second -j LOG - inet6/filter/limit-751 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-346 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-346 -j DROP + inet6/filter/limit-751 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 753 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 753 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-752 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-752 - inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-347 - inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-347 -m limit --limit 1/second -j LOG - inet/filter/logdrop-347 -j DROP + inet/filter/limit-752 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-752 -m limit --limit 1/second -j LOG + inet/filter/limit-752 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-752 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-752 - inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-347 - inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-347 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-347 -j DROP + inet6/filter/limit-752 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-752 -m limit --limit 1/second -j LOG + inet6/filter/limit-752 -j ACCEPT -Filter 754 {"conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 754 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-753 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-753 - inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-348 - inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-348 -m limit --limit 1/second -j LOG - inet/filter/logdrop-348 -j DROP + inet/filter/limit-753 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-753 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-753 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-753 - inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-348 - inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-348 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-348 -j DROP + inet6/filter/limit-753 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-753 -m limit --limit 1/second -j LOG -Filter 755 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 755 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-754 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-754 - inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-349 - inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-349 -m limit --limit 1/second -j LOG - inet/filter/logdrop-349 -j DROP + inet/filter/limit-754 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-754 -j TEE --gateway 10.0.0.1 + inet/filter/limit-754 -j TEE --gateway 10.0.0.2 + inet/filter/limit-754 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-754 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-754 - inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-349 - inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-349 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-349 -j DROP + inet6/filter/limit-754 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-754 -j TEE --gateway fc00::2 + inet6/filter/limit-754 -j ACCEPT -Filter 756 {"conn-limit":{"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 756 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-755 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-755 - inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-350 - inet/filter/limit-755 -m limit --limit 12/minute -j ULOG - inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-350 -m limit --limit 1/second -j LOG - inet/filter/logdrop-350 -j DROP + inet/filter/limit-755 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-755 -j TEE --gateway 10.0.0.1 + inet/filter/limit-755 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-755 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-755 - inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-350 - inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-350 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-350 -j DROP + inet6/filter/limit-755 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-755 -j TEE --gateway fc00::2 -Filter 757 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 757 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-756 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-756 - inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-351 - inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-351 -m limit --limit 1/second -j LOG - inet/filter/logdrop-351 -j DROP + inet/filter/limit-756 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-756 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-756 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-756 - inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-351 - inet6/filter/logdrop-351 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-351 -j DROP + inet6/filter/limit-756 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-756 -j ACCEPT -Filter 758 {"conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} +Filter 758 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-757 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-757 - inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-352 - inet/filter/limit-757 -j ACCEPT - inet/filter/logdrop-352 -m limit --limit 1/second -j LOG - inet/filter/logdrop-352 -j DROP + inet/filter/limit-757 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-757 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-757 - inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-352 - inet6/filter/limit-757 -j ACCEPT - inet6/filter/logdrop-352 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-352 -j DROP + inet6/filter/limit-757 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 759 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} +Filter 759 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-353 - inet/filter/logdrop-353 -m limit --limit 1/second -j LOG - inet/filter/logdrop-353 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-353 - inet6/filter/logdrop-353 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-353 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-758 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-758 + inet/filter/limit-758 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-758 -m limit --limit 12/minute -j ULOG + inet/filter/limit-758 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-758 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-758 + inet6/filter/limit-758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-758 -j ACCEPT -Filter 760 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 760 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-759 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-759 - inet/filter/limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-354 - inet/filter/limit-759 -m limit --limit 1/second -j LOG - inet/filter/limit-759 -j ACCEPT - inet/filter/logdrop-354 -m limit --limit 1/second -j LOG - inet/filter/logdrop-354 -j DROP + inet/filter/limit-759 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-759 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-759 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-759 - inet6/filter/limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-354 - inet6/filter/limit-759 -m limit --limit 1/second -j LOG - inet6/filter/limit-759 -j ACCEPT - inet6/filter/logdrop-354 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-354 -j DROP + inet6/filter/limit-759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 761 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 761 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-760 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-760 - inet/filter/limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-355 - inet/filter/limit-760 -m limit --limit 1/second -j LOG - inet/filter/logdrop-355 -m limit --limit 1/second -j LOG - inet/filter/logdrop-355 -j DROP + inet/filter/limit-760 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-760 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-760 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-760 - inet6/filter/limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-355 - inet6/filter/limit-760 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-355 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-355 -j DROP + inet6/filter/limit-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 762 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 762 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-761 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-761 - inet/filter/limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-356 - inet/filter/limit-761 -j ACCEPT - inet/filter/logdrop-356 -m limit --limit 1/second -j LOG - inet/filter/logdrop-356 -j DROP + inet/filter/limit-761 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-761 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-761 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-761 - inet6/filter/limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-356 - inet6/filter/limit-761 -j ACCEPT - inet6/filter/logdrop-356 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-356 -j DROP + inet6/filter/limit-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 763 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 763 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-357 - inet/filter/logdrop-357 -m limit --limit 1/second -j LOG - inet/filter/logdrop-357 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-357 - inet6/filter/logdrop-357 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-357 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-762 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-762 + inet/filter/limit-762 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-762 -m limit --limit 1/second -j LOG + inet/filter/limit-762 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-762 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-762 + inet6/filter/limit-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-762 -m limit --limit 1/second -j LOG + inet6/filter/limit-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 764 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 764 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-763 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-763 - inet/filter/limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-358 - inet/filter/limit-763 -m limit --limit 12/minute -j ULOG - inet/filter/limit-763 -j ACCEPT - inet/filter/logdrop-358 -m limit --limit 1/second -j LOG - inet/filter/logdrop-358 -j DROP + inet/filter/limit-763 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-763 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-763 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-763 - inet6/filter/limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-358 - inet6/filter/limit-763 -j ACCEPT - inet6/filter/logdrop-358 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-358 -j DROP + inet6/filter/limit-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 765 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 765 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-764 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-764 - inet/filter/limit-764 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-359 - inet/filter/limit-764 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-359 -m limit --limit 1/second -j LOG - inet/filter/logdrop-359 -j DROP + inet/filter/limit-764 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-764 -j TEE --gateway 10.0.0.1 + inet/filter/limit-764 -j TEE --gateway 10.0.0.2 + inet/filter/limit-764 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-764 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-764 - inet6/filter/limit-764 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-359 - inet6/filter/logdrop-359 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-359 -j DROP + inet6/filter/limit-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-764 -j TEE --gateway fc00::2 + inet6/filter/limit-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 766 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} +Filter 766 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-765 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-765 - inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-360 - inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-360 -m limit --limit 1/second -j LOG - inet/filter/logdrop-360 -j DROP + inet/filter/limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-765 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-765 - inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-360 - inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-360 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-360 -j DROP + inet6/filter/limit-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 767 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} +Filter 767 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-766 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-766 - inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-361 - inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-361 -m limit --limit 1/second -j LOG - inet/filter/logdrop-361 -j DROP + inet/filter/limit-766 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-766 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-766 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-766 - inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-361 - inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-361 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-361 -j DROP + inet6/filter/limit-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 768 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 768 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-767 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-767 - inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-362 - inet/filter/limit-767 -m limit --limit 1/second -j LOG - inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-362 -m limit --limit 1/second -j LOG - inet/filter/logdrop-362 -j DROP + inet/filter/limit-767 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-767 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-767 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-767 - inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-362 - inet6/filter/limit-767 -m limit --limit 1/second -j LOG - inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-362 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-362 -j DROP + inet6/filter/limit-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 769 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 769 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-768 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-768 - inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-363 - inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-363 -m limit --limit 1/second -j LOG - inet/filter/logdrop-363 -j DROP + inet/filter/limit-768 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-768 -m limit --limit 12/minute -j ULOG + inet/filter/limit-768 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-768 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-768 - inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-363 - inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-363 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-363 -j DROP + inet6/filter/limit-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 770 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 770 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-769 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-769 - inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-364 - inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-364 -m limit --limit 1/second -j LOG - inet/filter/logdrop-364 -j DROP + inet/filter/limit-769 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-769 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-769 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-769 - inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-364 - inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-364 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-364 -j DROP + inet6/filter/limit-769 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -Filter 771 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 771 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-770 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-770 - inet/filter/limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-365 - inet/filter/limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-365 -m limit --limit 1/second -j LOG - inet/filter/logdrop-365 -j DROP + inet/filter/limit-770 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-770 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-770 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-770 - inet6/filter/limit-770 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-365 - inet6/filter/limit-770 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-365 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-365 -j DROP + inet6/filter/limit-770 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-770 -j ACCEPT -Filter 772 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 772 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-771 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-771 - inet/filter/limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-366 - inet/filter/limit-771 -m limit --limit 12/minute -j ULOG - inet/filter/limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-366 -m limit --limit 1/second -j LOG - inet/filter/logdrop-366 -j DROP + inet/filter/limit-771 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-771 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-771 - inet6/filter/limit-771 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-366 - inet6/filter/limit-771 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-366 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-366 -j DROP + inet6/filter/limit-771 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 773 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 773 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-772 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-772 - inet/filter/limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-367 - inet/filter/limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-367 -m limit --limit 1/second -j LOG - inet/filter/logdrop-367 -j DROP + inet/filter/limit-772 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-772 -m limit --limit 1/second -j LOG + inet/filter/limit-772 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-772 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-772 - inet6/filter/limit-772 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-367 - inet6/filter/logdrop-367 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-367 -j DROP + inet6/filter/limit-772 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-772 -m limit --limit 1/second -j LOG + inet6/filter/limit-772 -j ACCEPT -Filter 774 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} +Filter 774 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-773 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-773 - inet/filter/limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-368 - inet/filter/limit-773 -j ACCEPT - inet/filter/logdrop-368 -m limit --limit 1/second -j LOG - inet/filter/logdrop-368 -j DROP + inet/filter/limit-773 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-773 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-773 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-773 - inet6/filter/limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-368 - inet6/filter/limit-773 -j ACCEPT - inet6/filter/logdrop-368 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-368 -j DROP - -Filter 775 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-369 - inet/filter/logdrop-369 -m limit --limit 1/second -j LOG - inet/filter/logdrop-369 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-369 - inet6/filter/logdrop-369 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-369 -j DROP - -Filter 776 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) + inet6/filter/limit-773 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-773 -m limit --limit 1/second -j LOG + +Filter 775 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"mirror","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-774 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-774 + inet/filter/limit-774 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-774 -j TEE --gateway 10.0.0.1 + inet/filter/limit-774 -j TEE --gateway 10.0.0.2 + inet/filter/limit-774 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-774 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-774 + inet6/filter/limit-774 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-774 -j TEE --gateway fc00::2 + inet6/filter/limit-774 -j ACCEPT + +Filter 776 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"mirror","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-775 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-775 - inet/filter/limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-370 - inet/filter/limit-775 -m limit --limit 1/second -j LOG - inet/filter/limit-775 -j ACCEPT - inet/filter/logdrop-370 -m limit --limit 1/second -j LOG - inet/filter/logdrop-370 -j DROP + inet/filter/limit-775 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-775 -j TEE --gateway 10.0.0.1 + inet/filter/limit-775 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-775 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-775 - inet6/filter/limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-370 - inet6/filter/limit-775 -m limit --limit 1/second -j LOG - inet6/filter/limit-775 -j ACCEPT - inet6/filter/logdrop-370 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-370 -j DROP + inet6/filter/limit-775 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-775 -j TEE --gateway fc00::2 -Filter 777 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 777 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-776 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-776 - inet/filter/limit-776 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-371 - inet/filter/limit-776 -m limit --limit 1/second -j LOG - inet/filter/logdrop-371 -m limit --limit 1/second -j LOG - inet/filter/logdrop-371 -j DROP + inet/filter/limit-776 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-776 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-776 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-776 - inet6/filter/limit-776 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-371 - inet6/filter/limit-776 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-371 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-371 -j DROP + inet6/filter/limit-776 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-776 -j ACCEPT -Filter 778 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 778 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-777 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-777 - inet/filter/limit-777 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-372 - inet/filter/limit-777 -j ACCEPT - inet/filter/logdrop-372 -m limit --limit 1/second -j LOG - inet/filter/logdrop-372 -j DROP + inet/filter/limit-777 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-777 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-777 - inet6/filter/limit-777 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-372 - inet6/filter/limit-777 -j ACCEPT - inet6/filter/logdrop-372 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-372 -j DROP + inet6/filter/limit-777 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 779 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 779 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 - inet/filter/logdrop-373 -m limit --limit 1/second -j LOG - inet/filter/logdrop-373 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-373 - inet6/filter/logdrop-373 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-373 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-778 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-778 + inet/filter/limit-778 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-778 -m limit --limit 12/minute -j ULOG + inet/filter/limit-778 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-778 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-778 + inet6/filter/limit-778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-778 -j ACCEPT -Filter 780 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 780 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-779 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-779 - inet/filter/limit-779 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 + inet/filter/limit-779 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-779 -m limit --limit 12/minute -j ULOG - inet/filter/limit-779 -j ACCEPT - inet/filter/logdrop-374 -m limit --limit 1/second -j LOG - inet/filter/logdrop-374 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-779 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-779 - inet6/filter/limit-779 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-374 - inet6/filter/limit-779 -j ACCEPT - inet6/filter/logdrop-374 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-374 -j DROP + inet6/filter/limit-779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 781 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 781 {"conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-780 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-780 - inet/filter/limit-780 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 - inet/filter/limit-780 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-375 -m limit --limit 1/second -j LOG - inet/filter/logdrop-375 -j DROP + inet/filter/limit-780 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-780 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-780 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-780 - inet6/filter/limit-780 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-375 - inet6/filter/logdrop-375 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-375 -j DROP + inet6/filter/limit-780 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-780 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 782 {"conn-limit":{"log":"none"},"in":"_fw","out":"B"} +Filter 782 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-781 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-781 - inet/filter/limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-781 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-781 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-781 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-781 - inet6/filter/limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-781 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-781 -m recent --name user:C --rsource --mask fe00:: --set -Filter 783 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","out":"B"} +Filter 783 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-782 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-782 - inet/filter/limit-782 -m recent --name limit-782 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-782 -m recent --name limit-782 --rsource --mask 255.255.255.255 --set + inet/filter/limit-782 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-782 -m limit --limit 1/second -j LOG + inet/filter/limit-782 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-782 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-782 - inet6/filter/limit-782 -m recent --name limit-782 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-782 -m recent --name limit-782 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-782 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-782 -m limit --limit 1/second -j LOG + inet6/filter/limit-782 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 784 {"conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 784 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-783 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-783 - inet/filter/limit-783 -m recent --name limit-783 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-783 -m limit --limit 1/second -j LOG - inet/filter/limit-783 -m recent --name limit-783 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-783 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-783 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-783 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-783 - inet6/filter/limit-783 -m recent --name limit-783 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-783 -m limit --limit 1/second -j LOG - inet6/filter/limit-783 -m recent --name limit-783 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-783 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-783 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 785 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 785 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-784 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-784 - inet/filter/limit-784 -m recent --name limit-784 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-784 -m recent --name limit-784 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-784 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-784 -j TEE --gateway 10.0.0.1 + inet/filter/limit-784 -j TEE --gateway 10.0.0.2 + inet/filter/limit-784 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-784 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-784 - inet6/filter/limit-784 -m recent --name limit-784 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-784 -m recent --name limit-784 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-784 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-784 -j TEE --gateway fc00::2 + inet6/filter/limit-784 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 786 {"conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 786 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-785 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-785 - inet/filter/limit-785 -m recent --name limit-785 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-785 -m recent --name limit-785 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-785 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-785 - inet6/filter/limit-785 -m recent --name limit-785 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-785 -m recent --name limit-785 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-785 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-785 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 787 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 787 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-786 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-786 - inet/filter/limit-786 -m recent --name limit-786 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-786 -m recent --name limit-786 --rsource --mask 255.255.255.255 --set + inet/filter/limit-786 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-786 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-786 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-786 - inet6/filter/limit-786 -m recent --name limit-786 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-786 -m recent --name limit-786 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-786 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-786 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 788 {"conn-limit":{"log":"none"},"in":"_fw","log":"ulog","out":"B"} +Filter 788 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-787 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-787 - inet/filter/limit-787 -m recent --name limit-787 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-787 -m limit --limit 12/minute -j ULOG - inet/filter/limit-787 -m recent --name limit-787 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-787 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-787 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-787 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-787 - inet6/filter/limit-787 -m recent --name limit-787 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-787 -m recent --name limit-787 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-787 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-787 -m recent --name user:C --rsource --mask fe00:: --set -Filter 789 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"ulog","out":"B"} +Filter 789 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-788 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-788 - inet/filter/limit-788 -m recent --name limit-788 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-788 -m recent --name limit-788 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-788 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-788 -m limit --limit 12/minute -j ULOG + inet/filter/limit-788 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-788 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-788 - inet6/filter/limit-788 -m recent --name limit-788 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-788 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-788 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 790 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 790 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-789 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-789 - inet/filter/limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-789 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-789 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-789 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-789 - inet6/filter/limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-789 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -Filter 791 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 791 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-790 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-790 - inet/filter/limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-790 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-790 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-790 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-790 - inet6/filter/limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-790 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-790 -j ACCEPT -Filter 792 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 792 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-791 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-791 - inet/filter/limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-791 -m limit --limit 1/second -j LOG - inet/filter/limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-791 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-791 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-791 - inet6/filter/limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-791 -m limit --limit 1/second -j LOG - inet6/filter/limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-791 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 793 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 793 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-792 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-792 - inet/filter/limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-792 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-792 -m limit --limit 1/second -j LOG + inet/filter/limit-792 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-792 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-792 - inet6/filter/limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-792 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-792 -m limit --limit 1/second -j LOG + inet6/filter/limit-792 -j ACCEPT -Filter 794 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 794 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-793 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-793 - inet/filter/limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-793 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-793 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-793 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-793 - inet6/filter/limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-793 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-793 -m limit --limit 1/second -j LOG -Filter 795 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 795 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-794 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-794 - inet/filter/limit-794 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-794 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-794 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-794 -j TEE --gateway 10.0.0.1 + inet/filter/limit-794 -j TEE --gateway 10.0.0.2 + inet/filter/limit-794 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-794 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-794 - inet6/filter/limit-794 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-794 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-794 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-794 -j TEE --gateway fc00::2 + inet6/filter/limit-794 -j ACCEPT -Filter 796 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 796 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-795 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-795 - inet/filter/limit-795 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-795 -m limit --limit 12/minute -j ULOG - inet/filter/limit-795 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-795 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-795 -j TEE --gateway 10.0.0.1 + inet/filter/limit-795 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-795 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-795 - inet6/filter/limit-795 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-795 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-795 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-795 -j TEE --gateway fc00::2 -Filter 797 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 797 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-796 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-796 - inet/filter/limit-796 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-796 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-796 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-796 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-796 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-796 - inet6/filter/limit-796 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-796 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-796 -j ACCEPT -Filter 798 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 798 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-797 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-797 - inet/filter/limit-797 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-797 -j ACCEPT + inet/filter/limit-797 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-797 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-797 - inet6/filter/limit-797 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-797 -j ACCEPT + inet6/filter/limit-797 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 799 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 799 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-798 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-798 + inet/filter/limit-798 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-798 -m limit --limit 12/minute -j ULOG + inet/filter/limit-798 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-798 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-798 + inet6/filter/limit-798 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-798 -j ACCEPT -Filter 800 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 800 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-799 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-799 - inet/filter/limit-799 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-799 -m limit --limit 1/second -j LOG - inet/filter/limit-799 -j ACCEPT + inet/filter/limit-799 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-799 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-799 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-799 - inet6/filter/limit-799 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-799 -m limit --limit 1/second -j LOG - inet6/filter/limit-799 -j ACCEPT + inet6/filter/limit-799 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 801 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 801 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-800 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-800 - inet/filter/limit-800 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-800 -m limit --limit 1/second -j LOG + inet/filter/limit-800 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-800 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-800 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-800 - inet6/filter/limit-800 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-800 -m limit --limit 1/second -j LOG + inet6/filter/limit-800 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-800 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 802 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 802 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-801 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-801 - inet/filter/limit-801 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-801 -j ACCEPT + inet/filter/limit-801 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-801 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-801 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-801 - inet6/filter/limit-801 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-801 -j ACCEPT + inet6/filter/limit-801 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-801 -m recent --name user:C --rdest --mask fe00:: --set -Filter 803 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 803 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-802 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-802 + inet/filter/limit-802 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-802 -m limit --limit 1/second -j LOG + inet/filter/limit-802 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-802 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-802 + inet6/filter/limit-802 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-802 -m limit --limit 1/second -j LOG + inet6/filter/limit-802 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 804 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 804 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-803 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-803 - inet/filter/limit-803 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-803 -m limit --limit 12/minute -j ULOG - inet/filter/limit-803 -j ACCEPT + inet/filter/limit-803 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-803 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-803 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-803 - inet6/filter/limit-803 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-803 -j ACCEPT + inet6/filter/limit-803 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-803 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 805 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 805 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-804 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-804 - inet/filter/limit-804 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-804 -m limit --limit 12/minute -j ULOG + inet/filter/limit-804 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-804 -j TEE --gateway 10.0.0.1 + inet/filter/limit-804 -j TEE --gateway 10.0.0.2 + inet/filter/limit-804 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-804 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-804 - inet6/filter/limit-804 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-804 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-804 -j TEE --gateway fc00::2 + inet6/filter/limit-804 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 806 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 806 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-805 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-805 - inet/filter/limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-805 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-805 - inet6/filter/limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-805 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-805 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 807 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 807 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-806 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-806 - inet/filter/limit-806 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-806 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-806 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-806 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-806 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-806 - inet6/filter/limit-806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-806 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-806 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 808 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 808 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-807 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-807 - inet/filter/limit-807 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-807 -m limit --limit 1/second -j LOG - inet/filter/limit-807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-807 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-807 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-807 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-807 - inet6/filter/limit-807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-807 -m limit --limit 1/second -j LOG - inet6/filter/limit-807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-807 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-807 -m recent --name user:C --rdest --mask fe00:: --set -Filter 809 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 809 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-808 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-808 - inet/filter/limit-808 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-808 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-808 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-808 -m limit --limit 12/minute -j ULOG + inet/filter/limit-808 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-808 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-808 - inet6/filter/limit-808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-808 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-808 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 810 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 810 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-809 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-809 - inet/filter/limit-809 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-809 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-809 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-809 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-809 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-809 - inet6/filter/limit-809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-809 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -Filter 811 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 811 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-810 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-810 - inet/filter/limit-810 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-810 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-810 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-810 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-810 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-810 - inet6/filter/limit-810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-810 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-810 -j ACCEPT -Filter 812 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 812 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-811 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-811 - inet/filter/limit-811 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-811 -m limit --limit 12/minute -j ULOG - inet/filter/limit-811 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-811 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-811 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-811 - inet6/filter/limit-811 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-811 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-811 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 813 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 813 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-812 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-812 - inet/filter/limit-812 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-812 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-812 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-812 -m limit --limit 1/second -j LOG + inet/filter/limit-812 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-812 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-812 - inet6/filter/limit-812 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-812 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-812 -m limit --limit 1/second -j LOG + inet6/filter/limit-812 -j ACCEPT -Filter 814 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 814 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-813 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-813 - inet/filter/limit-813 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-813 -j ACCEPT + inet/filter/limit-813 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-813 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-813 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-813 - inet6/filter/limit-813 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-813 -j ACCEPT - -Filter 815 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 816 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) + inet6/filter/limit-813 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-813 -m limit --limit 1/second -j LOG + +Filter 815 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"mirror","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-814 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-814 + inet/filter/limit-814 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-814 -j TEE --gateway 10.0.0.1 + inet/filter/limit-814 -j TEE --gateway 10.0.0.2 + inet/filter/limit-814 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-814 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-814 + inet6/filter/limit-814 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-814 -j TEE --gateway fc00::2 + inet6/filter/limit-814 -j ACCEPT + +Filter 816 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"mirror","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-815 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-815 - inet/filter/limit-815 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-815 -m limit --limit 1/second -j LOG - inet/filter/limit-815 -j ACCEPT + inet/filter/limit-815 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-815 -j TEE --gateway 10.0.0.1 + inet/filter/limit-815 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-815 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-815 - inet6/filter/limit-815 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-815 -m limit --limit 1/second -j LOG - inet6/filter/limit-815 -j ACCEPT + inet6/filter/limit-815 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-815 -j TEE --gateway fc00::2 -Filter 817 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 817 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-816 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-816 - inet/filter/limit-816 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-816 -m limit --limit 1/second -j LOG + inet/filter/limit-816 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-816 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-816 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-816 - inet6/filter/limit-816 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-816 -m limit --limit 1/second -j LOG + inet6/filter/limit-816 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-816 -j ACCEPT -Filter 818 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 818 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-817 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-817 - inet/filter/limit-817 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-817 -j ACCEPT + inet/filter/limit-817 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-817 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-817 - inet6/filter/limit-817 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-817 -j ACCEPT + inet6/filter/limit-817 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 819 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 819 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-818 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-818 + inet/filter/limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-818 -m limit --limit 12/minute -j ULOG + inet/filter/limit-818 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-818 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-818 + inet6/filter/limit-818 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-818 -j ACCEPT -Filter 820 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 820 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-819 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-819 - inet/filter/limit-819 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-819 -m limit --limit 12/minute -j ULOG - inet/filter/limit-819 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-819 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-819 - inet6/filter/limit-819 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-819 -j ACCEPT + inet6/filter/limit-819 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 821 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 821 {"conn-limit":{"interval":5,"log":"ulog"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-820 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-820 - inet/filter/limit-820 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-820 -m limit --limit 12/minute -j ULOG + inet/filter/limit-820 -m recent --name limit-820 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-460 + inet/filter/limit-820 -m recent --name limit-820 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-460 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-460 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-820 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-820 - inet6/filter/limit-820 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-820 -m recent --name limit-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-460 + inet6/filter/limit-820 -m recent --name limit-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-460 -j DROP -Filter 822 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 822 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-821 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-821 - inet/filter/limit-821 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-821 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-821 -m recent --name limit-821 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-461 + inet/filter/limit-821 -m recent --name limit-821 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-461 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-461 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-821 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-821 - inet6/filter/limit-821 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-821 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-821 -m recent --name limit-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-461 + inet6/filter/limit-821 -m recent --name limit-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-461 -j DROP -Filter 823 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 823 {"conn-limit":{"interval":5,"log":"ulog"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-822 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-822 - inet/filter/limit-822 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-822 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-822 -m recent --name limit-822 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-462 + inet/filter/limit-822 -m limit --limit 1/second -j LOG + inet/filter/limit-822 -m recent --name limit-822 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-462 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-462 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-822 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-822 - inet6/filter/limit-822 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-822 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-822 -m recent --name limit-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-462 + inet6/filter/limit-822 -m limit --limit 1/second -j LOG + inet6/filter/limit-822 -m recent --name limit-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-462 -j DROP -Filter 824 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 824 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-823 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-823 - inet/filter/limit-823 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-823 -m limit --limit 1/second -j LOG - inet/filter/limit-823 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-823 -m recent --name limit-823 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-463 + inet/filter/limit-823 -m recent --name limit-823 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-463 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-463 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-823 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-823 - inet6/filter/limit-823 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-823 -m limit --limit 1/second -j LOG - inet6/filter/limit-823 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-823 -m recent --name limit-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-463 + inet6/filter/limit-823 -m recent --name limit-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-463 -j DROP -Filter 825 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 825 {"conn-limit":{"interval":5,"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-824 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-824 - inet/filter/limit-824 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-824 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-824 -m recent --name limit-824 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-464 + inet/filter/limit-824 -j TEE --gateway 10.0.0.1 + inet/filter/limit-824 -j TEE --gateway 10.0.0.2 + inet/filter/limit-824 -m recent --name limit-824 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-464 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-464 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-824 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-824 - inet6/filter/limit-824 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-824 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-824 -m recent --name limit-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-464 + inet6/filter/limit-824 -j TEE --gateway fc00::2 + inet6/filter/limit-824 -m recent --name limit-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-464 -j DROP -Filter 826 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 826 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-825 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-825 - inet/filter/limit-825 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-825 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-465 + inet/filter/limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-465 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-465 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-825 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-825 - inet6/filter/limit-825 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-825 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-825 -m recent --name limit-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-465 + inet6/filter/limit-825 -m recent --name limit-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-465 -j DROP -Filter 827 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 827 {"conn-limit":{"interval":5,"log":"ulog"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-826 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-826 - inet/filter/limit-826 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-826 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-826 -m recent --name limit-826 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-466 + inet/filter/limit-826 -m recent --name limit-826 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-466 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-466 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-826 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-826 - inet6/filter/limit-826 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-826 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-826 -m recent --name limit-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-466 + inet6/filter/limit-826 -m recent --name limit-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-466 -j DROP -Filter 828 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 828 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-827 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-827 - inet/filter/limit-827 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-827 -m limit --limit 12/minute -j ULOG - inet/filter/limit-827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-827 -m recent --name limit-827 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-467 + inet/filter/limit-827 -m recent --name limit-827 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-467 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-467 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-827 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-827 - inet6/filter/limit-827 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-827 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-827 -m recent --name limit-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-467 + inet6/filter/limit-827 -m recent --name limit-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-467 -j DROP -Filter 829 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 829 {"conn-limit":{"interval":5,"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-828 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-828 - inet/filter/limit-828 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-828 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-828 -m recent --name limit-828 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-468 + inet/filter/limit-828 -m limit --limit 12/minute -j ULOG + inet/filter/limit-828 -m recent --name limit-828 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-468 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-468 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-828 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-828 - inet6/filter/limit-828 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-828 -m recent --name limit-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-468 + inet6/filter/limit-828 -m recent --name limit-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-468 -j DROP -Filter 830 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 830 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-829 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-829 - inet/filter/limit-829 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-829 -j ACCEPT + inet/filter/limit-829 -m recent --name limit-829 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-469 + inet/filter/limit-829 -m recent --name limit-829 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-469 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-469 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-829 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-829 - inet6/filter/limit-829 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-829 -j ACCEPT + inet6/filter/limit-829 -m recent --name limit-829 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-469 + inet6/filter/logdrop-469 -j DROP -Filter 831 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 831 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-830 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-830 + inet/filter/limit-830 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-470 + inet/filter/limit-830 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-470 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-470 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-830 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-830 + inet6/filter/limit-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-470 + inet6/filter/limit-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-470 -j DROP -Filter 832 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 832 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-831 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-831 - inet/filter/limit-831 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-831 -m limit --limit 1/second -j LOG - inet/filter/limit-831 -j ACCEPT + inet/filter/limit-831 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-471 + inet/filter/limit-831 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-471 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-471 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-831 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-831 - inet6/filter/limit-831 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-831 -m limit --limit 1/second -j LOG - inet6/filter/limit-831 -j ACCEPT + inet6/filter/limit-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-471 + inet6/filter/limit-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-471 -j DROP -Filter 833 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 833 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-832 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-832 - inet/filter/limit-832 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-832 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-472 inet/filter/limit-832 -m limit --limit 1/second -j LOG + inet/filter/limit-832 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-472 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-472 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-832 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-832 - inet6/filter/limit-832 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-472 inet6/filter/limit-832 -m limit --limit 1/second -j LOG + inet6/filter/limit-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-472 -j DROP -Filter 834 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 834 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-833 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-833 - inet/filter/limit-833 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-833 -j ACCEPT + inet/filter/limit-833 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-473 + inet/filter/limit-833 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-473 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-473 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-833 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-833 - inet6/filter/limit-833 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-833 -j ACCEPT + inet6/filter/limit-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-473 + inet6/filter/limit-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-473 -j DROP -Filter 835 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 835 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-834 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-834 + inet/filter/limit-834 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-474 + inet/filter/limit-834 -j TEE --gateway 10.0.0.1 + inet/filter/limit-834 -j TEE --gateway 10.0.0.2 + inet/filter/limit-834 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-474 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-474 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-834 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-834 + inet6/filter/limit-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-474 + inet6/filter/limit-834 -j TEE --gateway fc00::2 + inet6/filter/limit-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-474 -j DROP -Filter 836 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 836 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-835 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-835 - inet/filter/limit-835 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-835 -m limit --limit 12/minute -j ULOG - inet/filter/limit-835 -j ACCEPT + inet/filter/limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-475 + inet/filter/limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-475 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-475 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-835 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-835 - inet6/filter/limit-835 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-835 -j ACCEPT + inet6/filter/limit-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-475 + inet6/filter/limit-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-475 -j DROP -Filter 837 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 837 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-836 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-836 - inet/filter/limit-836 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-836 -m limit --limit 12/minute -j ULOG + inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-476 + inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-476 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-476 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-836 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-836 - inet6/filter/limit-836 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-476 + inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-476 -j DROP -Filter 838 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 838 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-837 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-837 - inet/filter/limit-837 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-837 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-477 + inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-477 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-477 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-837 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-837 - inet6/filter/limit-837 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-837 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-477 + inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-477 -j DROP -Filter 839 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 839 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-838 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-838 - inet/filter/limit-838 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-838 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-478 + inet/filter/limit-838 -m limit --limit 12/minute -j ULOG + inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-478 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-478 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-838 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-838 - inet6/filter/limit-838 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-838 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-478 + inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-478 -j DROP -Filter 840 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 840 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-839 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-839 - inet/filter/limit-839 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-839 -m limit --limit 1/second -j LOG - inet/filter/limit-839 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-479 + inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-479 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-479 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-839 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-839 - inet6/filter/limit-839 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-839 -m limit --limit 1/second -j LOG - inet6/filter/limit-839 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-479 + inet6/filter/logdrop-479 -j DROP -Filter 841 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 841 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-840 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-840 - inet/filter/limit-840 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-840 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-480 + inet/filter/limit-840 -j ACCEPT + inet/filter/logdrop-480 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-480 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-840 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-840 - inet6/filter/limit-840 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-840 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-480 + inet6/filter/limit-840 -j ACCEPT + inet6/filter/logdrop-480 -j DROP -Filter 842 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 842 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-841 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-841 - inet/filter/limit-841 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-841 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-481 + inet/filter/logdrop-481 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-481 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-841 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-841 - inet6/filter/limit-841 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-841 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-481 + inet6/filter/logdrop-481 -j DROP -Filter 843 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 843 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-842 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-842 - inet/filter/limit-842 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-842 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-482 + inet/filter/limit-842 -m limit --limit 1/second -j LOG + inet/filter/limit-842 -j ACCEPT + inet/filter/logdrop-482 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-482 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-842 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-842 - inet6/filter/limit-842 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-842 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-482 + inet6/filter/limit-842 -m limit --limit 1/second -j LOG + inet6/filter/limit-842 -j ACCEPT + inet6/filter/logdrop-482 -j DROP -Filter 844 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 844 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-843 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-843 - inet/filter/limit-843 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-843 -m limit --limit 12/minute -j ULOG - inet/filter/limit-843 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-483 + inet/filter/limit-843 -m limit --limit 1/second -j LOG + inet/filter/logdrop-483 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-483 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-843 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-843 - inet6/filter/limit-843 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-843 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-483 + inet6/filter/limit-843 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-483 -j DROP -Filter 845 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 845 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-844 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-844 - inet/filter/limit-844 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-844 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-484 + inet/filter/limit-844 -j TEE --gateway 10.0.0.1 + inet/filter/limit-844 -j TEE --gateway 10.0.0.2 + inet/filter/limit-844 -j ACCEPT + inet/filter/logdrop-484 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-484 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-844 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-844 - inet6/filter/limit-844 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-484 + inet6/filter/limit-844 -j TEE --gateway fc00::2 + inet6/filter/limit-844 -j ACCEPT + inet6/filter/logdrop-484 -j DROP -Filter 846 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 846 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-845 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-845 - inet/filter/limit-845 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-845 -j ACCEPT + inet/filter/limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-485 + inet/filter/limit-845 -j TEE --gateway 10.0.0.1 + inet/filter/limit-845 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-485 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-485 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-845 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-845 - inet6/filter/limit-845 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-845 -j ACCEPT + inet6/filter/limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-485 + inet6/filter/limit-845 -j TEE --gateway fc00::2 + inet6/filter/logdrop-485 -j DROP -Filter 847 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 847 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-846 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-846 + inet/filter/limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-486 + inet/filter/limit-846 -j ACCEPT + inet/filter/logdrop-486 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-486 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-846 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-846 + inet6/filter/limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-486 + inet6/filter/limit-846 -j ACCEPT + inet6/filter/logdrop-486 -j DROP -Filter 848 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 848 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-847 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-847 - inet/filter/limit-847 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-847 -m limit --limit 1/second -j LOG - inet/filter/limit-847 -j ACCEPT + inet/filter/limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-487 + inet/filter/logdrop-487 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-487 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-847 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-847 - inet6/filter/limit-847 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-847 -m limit --limit 1/second -j LOG - inet6/filter/limit-847 -j ACCEPT + inet6/filter/limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-487 + inet6/filter/logdrop-487 -j DROP -Filter 849 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 849 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-848 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-848 - inet/filter/limit-848 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-848 -m limit --limit 1/second -j LOG + inet/filter/limit-848 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-488 + inet/filter/limit-848 -m limit --limit 12/minute -j ULOG + inet/filter/limit-848 -j ACCEPT + inet/filter/logdrop-488 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-488 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-848 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-848 - inet6/filter/limit-848 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-848 -m limit --limit 1/second -j LOG + inet6/filter/limit-848 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-488 + inet6/filter/limit-848 -j ACCEPT + inet6/filter/logdrop-488 -j DROP -Filter 850 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 850 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-849 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-849 - inet/filter/limit-849 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-849 -j ACCEPT + inet/filter/limit-849 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-489 + inet/filter/limit-849 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-489 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-489 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-849 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-849 - inet6/filter/limit-849 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-849 -j ACCEPT + inet6/filter/limit-849 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-489 + inet6/filter/logdrop-489 -j DROP -Filter 851 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 851 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-850 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-850 + inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-490 + inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-490 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-490 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-850 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-850 + inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-490 + inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-490 -j DROP -Filter 852 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 852 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-851 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-851 - inet/filter/limit-851 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-851 -m limit --limit 12/minute -j ULOG - inet/filter/limit-851 -j ACCEPT + inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-491 + inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-491 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-491 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-851 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-851 - inet6/filter/limit-851 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-851 -j ACCEPT + inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-491 + inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-491 -j DROP -Filter 853 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 853 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-852 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-852 - inet/filter/limit-852 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-852 -m limit --limit 12/minute -j ULOG + inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-492 + inet/filter/limit-852 -m limit --limit 1/second -j LOG + inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-492 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-492 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-852 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-852 - inet6/filter/limit-852 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-492 + inet6/filter/limit-852 -m limit --limit 1/second -j LOG + inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-492 -j DROP -Filter 854 {"conn-limit":{"log":"ulog"},"in":"_fw","out":"B"} +Filter 854 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-853 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-853 - inet/filter/limit-853 -m recent --name limit-853 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-376 - inet/filter/limit-853 -m recent --name limit-853 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-376 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-376 -j DROP + inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-493 + inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-493 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-493 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-853 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-853 - inet6/filter/limit-853 -m recent --name limit-853 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-376 - inet6/filter/limit-853 -m recent --name limit-853 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-376 -j DROP + inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-493 + inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-493 -j DROP -Filter 855 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","out":"B"} +Filter 855 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-854 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-854 - inet/filter/limit-854 -m recent --name limit-854 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-377 - inet/filter/limit-854 -m recent --name limit-854 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-377 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-377 -j DROP + inet/filter/limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-494 + inet/filter/limit-854 -j TEE --gateway 10.0.0.1 + inet/filter/limit-854 -j TEE --gateway 10.0.0.2 + inet/filter/limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-494 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-494 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-854 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-854 - inet6/filter/limit-854 -m recent --name limit-854 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-377 - inet6/filter/limit-854 -m recent --name limit-854 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-377 -j DROP + inet6/filter/limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-494 + inet6/filter/limit-854 -j TEE --gateway fc00::2 + inet6/filter/limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-494 -j DROP -Filter 856 {"conn-limit":{"log":"ulog"},"in":"_fw","log":true,"out":"B"} +Filter 856 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-855 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-855 - inet/filter/limit-855 -m recent --name limit-855 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-378 - inet/filter/limit-855 -m limit --limit 1/second -j LOG - inet/filter/limit-855 -m recent --name limit-855 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-378 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-378 -j DROP + inet/filter/limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-495 + inet/filter/limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-495 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-495 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-855 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-855 - inet6/filter/limit-855 -m recent --name limit-855 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-378 - inet6/filter/limit-855 -m limit --limit 1/second -j LOG - inet6/filter/limit-855 -m recent --name limit-855 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-378 -j DROP + inet6/filter/limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-495 + inet6/filter/limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-495 -j DROP -Filter 857 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","log":true,"out":"B"} +Filter 857 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-856 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-856 - inet/filter/limit-856 -m recent --name limit-856 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-379 - inet/filter/limit-856 -m recent --name limit-856 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-379 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-379 -j DROP + inet/filter/limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-496 + inet/filter/limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-496 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-496 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-856 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-856 - inet6/filter/limit-856 -m recent --name limit-856 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-379 - inet6/filter/limit-856 -m recent --name limit-856 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-379 -j DROP + inet6/filter/limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-496 + inet6/filter/limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-496 -j DROP -Filter 858 {"conn-limit":{"log":"ulog"},"in":"_fw","log":"none","out":"B"} +Filter 858 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-857 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-857 - inet/filter/limit-857 -m recent --name limit-857 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-380 - inet/filter/limit-857 -m recent --name limit-857 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-380 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-380 -j DROP + inet/filter/limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-497 + inet/filter/limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-497 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-497 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-857 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-857 - inet6/filter/limit-857 -m recent --name limit-857 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-380 - inet6/filter/limit-857 -m recent --name limit-857 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-380 -j DROP + inet6/filter/limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-497 + inet6/filter/limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-497 -j DROP -Filter 859 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","log":"none","out":"B"} +Filter 859 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-858 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-858 - inet/filter/limit-858 -m recent --name limit-858 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-381 - inet/filter/limit-858 -m recent --name limit-858 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-381 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-381 -j DROP + inet/filter/limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-498 + inet/filter/limit-858 -m limit --limit 12/minute -j ULOG + inet/filter/limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-498 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-498 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-858 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-858 - inet6/filter/limit-858 -m recent --name limit-858 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-381 - inet6/filter/limit-858 -m recent --name limit-858 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-381 -j DROP + inet6/filter/limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-498 + inet6/filter/limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-498 -j DROP -Filter 860 {"conn-limit":{"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} +Filter 860 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-859 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-859 - inet/filter/limit-859 -m recent --name limit-859 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-382 - inet/filter/limit-859 -m limit --limit 12/minute -j ULOG - inet/filter/limit-859 -m recent --name limit-859 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-382 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-382 -j DROP + inet/filter/limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-499 + inet/filter/limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-499 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-499 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-859 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-859 - inet6/filter/limit-859 -m recent --name limit-859 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-382 - inet6/filter/limit-859 -m recent --name limit-859 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-382 -j DROP + inet6/filter/limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-499 + inet6/filter/logdrop-499 -j DROP -Filter 861 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} +Filter 861 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-860 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-860 - inet/filter/limit-860 -m recent --name limit-860 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-383 - inet/filter/limit-860 -m recent --name limit-860 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-383 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-383 -j DROP + inet/filter/limit-860 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-500 + inet/filter/limit-860 -j ACCEPT + inet/filter/logdrop-500 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-500 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-860 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-860 - inet6/filter/limit-860 -m recent --name limit-860 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-383 - inet6/filter/logdrop-383 -j DROP + inet6/filter/limit-860 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-500 + inet6/filter/limit-860 -j ACCEPT + inet6/filter/logdrop-500 -j DROP -Filter 862 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","out":"B"} +Filter 862 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-861 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-861 - inet/filter/limit-861 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-384 - inet/filter/limit-861 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-384 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-384 -j DROP + inet/filter/limit-861 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-501 + inet/filter/logdrop-501 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-501 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-861 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-861 - inet6/filter/limit-861 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-384 - inet6/filter/limit-861 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-384 -j DROP + inet6/filter/limit-861 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-501 + inet6/filter/logdrop-501 -j DROP -Filter 863 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","out":"B"} +Filter 863 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-862 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-862 - inet/filter/limit-862 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-385 - inet/filter/limit-862 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-385 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-385 -j DROP + inet/filter/limit-862 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-502 + inet/filter/limit-862 -m limit --limit 1/second -j LOG + inet/filter/limit-862 -j ACCEPT + inet/filter/logdrop-502 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-502 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-862 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-862 - inet6/filter/limit-862 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-385 - inet6/filter/limit-862 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-385 -j DROP + inet6/filter/limit-862 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-502 + inet6/filter/limit-862 -m limit --limit 1/second -j LOG + inet6/filter/limit-862 -j ACCEPT + inet6/filter/logdrop-502 -j DROP -Filter 864 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 864 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-863 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-863 - inet/filter/limit-863 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-386 + inet/filter/limit-863 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-503 inet/filter/limit-863 -m limit --limit 1/second -j LOG - inet/filter/limit-863 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-386 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-386 -j DROP + inet/filter/logdrop-503 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-503 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-863 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-863 - inet6/filter/limit-863 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-386 + inet6/filter/limit-863 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-503 inet6/filter/limit-863 -m limit --limit 1/second -j LOG - inet6/filter/limit-863 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-386 -j DROP + inet6/filter/logdrop-503 -j DROP -Filter 865 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 865 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-864 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-864 - inet/filter/limit-864 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-387 - inet/filter/limit-864 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-387 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-387 -j DROP + inet/filter/limit-864 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-504 + inet/filter/limit-864 -j TEE --gateway 10.0.0.1 + inet/filter/limit-864 -j TEE --gateway 10.0.0.2 + inet/filter/limit-864 -j ACCEPT + inet/filter/logdrop-504 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-504 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-864 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-864 - inet6/filter/limit-864 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-387 - inet6/filter/limit-864 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-387 -j DROP + inet6/filter/limit-864 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-504 + inet6/filter/limit-864 -j TEE --gateway fc00::2 + inet6/filter/limit-864 -j ACCEPT + inet6/filter/logdrop-504 -j DROP -Filter 866 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 866 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-865 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-865 - inet/filter/limit-865 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-388 - inet/filter/limit-865 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-388 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-388 -j DROP + inet/filter/limit-865 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-505 + inet/filter/limit-865 -j TEE --gateway 10.0.0.1 + inet/filter/limit-865 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-505 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-505 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-865 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-865 - inet6/filter/limit-865 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-388 - inet6/filter/limit-865 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-388 -j DROP + inet6/filter/limit-865 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-505 + inet6/filter/limit-865 -j TEE --gateway fc00::2 + inet6/filter/logdrop-505 -j DROP -Filter 867 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 867 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-866 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-866 - inet/filter/limit-866 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-389 - inet/filter/limit-866 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-389 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-389 -j DROP + inet/filter/limit-866 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-506 + inet/filter/limit-866 -j ACCEPT + inet/filter/logdrop-506 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-506 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-866 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-866 - inet6/filter/limit-866 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-389 - inet6/filter/limit-866 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-389 -j DROP + inet6/filter/limit-866 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-506 + inet6/filter/limit-866 -j ACCEPT + inet6/filter/logdrop-506 -j DROP -Filter 868 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 868 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-867 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-867 - inet/filter/limit-867 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-390 - inet/filter/limit-867 -m limit --limit 12/minute -j ULOG - inet/filter/limit-867 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-390 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-390 -j DROP + inet/filter/limit-867 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-507 + inet/filter/logdrop-507 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-507 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-867 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-867 - inet6/filter/limit-867 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-390 - inet6/filter/limit-867 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-390 -j DROP + inet6/filter/limit-867 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-507 + inet6/filter/logdrop-507 -j DROP -Filter 869 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 869 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-868 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-868 - inet/filter/limit-868 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-391 - inet/filter/limit-868 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-391 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-391 -j DROP + inet/filter/limit-868 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-508 + inet/filter/limit-868 -m limit --limit 12/minute -j ULOG + inet/filter/limit-868 -j ACCEPT + inet/filter/logdrop-508 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-508 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-868 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-868 - inet6/filter/limit-868 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-391 - inet6/filter/logdrop-391 -j DROP + inet6/filter/limit-868 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-508 + inet6/filter/limit-868 -j ACCEPT + inet6/filter/logdrop-508 -j DROP -Filter 870 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} +Filter 870 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-869 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-869 - inet/filter/limit-869 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-392 - inet/filter/limit-869 -j ACCEPT - inet/filter/logdrop-392 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-392 -j DROP + inet/filter/limit-869 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-509 + inet/filter/limit-869 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-509 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-509 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-869 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-869 - inet6/filter/limit-869 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-392 - inet6/filter/limit-869 -j ACCEPT - inet6/filter/logdrop-392 -j DROP + inet6/filter/limit-869 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-509 + inet6/filter/logdrop-509 -j DROP -Filter 871 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} +Filter 871 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-393 - inet/filter/logdrop-393 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-393 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-393 - inet6/filter/logdrop-393 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-870 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-870 + inet/filter/limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-510 + inet/filter/limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-510 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-510 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-870 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-870 + inet6/filter/limit-870 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-510 + inet6/filter/limit-870 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-510 -j DROP -Filter 872 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 872 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-871 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-871 - inet/filter/limit-871 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-394 - inet/filter/limit-871 -m limit --limit 1/second -j LOG - inet/filter/limit-871 -j ACCEPT - inet/filter/logdrop-394 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-394 -j DROP + inet/filter/limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-511 + inet/filter/limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-511 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-511 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-871 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-871 - inet6/filter/limit-871 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-394 - inet6/filter/limit-871 -m limit --limit 1/second -j LOG - inet6/filter/limit-871 -j ACCEPT - inet6/filter/logdrop-394 -j DROP + inet6/filter/limit-871 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-511 + inet6/filter/limit-871 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-511 -j DROP -Filter 873 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 873 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-872 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-872 - inet/filter/limit-872 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-395 + inet/filter/limit-872 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-512 inet/filter/limit-872 -m limit --limit 1/second -j LOG - inet/filter/logdrop-395 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-395 -j DROP + inet/filter/limit-872 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-512 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-512 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-872 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-872 - inet6/filter/limit-872 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-395 + inet6/filter/limit-872 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-512 inet6/filter/limit-872 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-395 -j DROP + inet6/filter/limit-872 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-512 -j DROP -Filter 874 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 874 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-873 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-873 - inet/filter/limit-873 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-396 - inet/filter/limit-873 -j ACCEPT - inet/filter/logdrop-396 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-396 -j DROP + inet/filter/limit-873 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-513 + inet/filter/limit-873 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-513 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-513 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-873 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-873 - inet6/filter/limit-873 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-396 - inet6/filter/limit-873 -j ACCEPT - inet6/filter/logdrop-396 -j DROP + inet6/filter/limit-873 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-513 + inet6/filter/limit-873 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-513 -j DROP -Filter 875 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 875 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 - inet/filter/logdrop-397 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-397 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-397 - inet6/filter/logdrop-397 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-874 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-874 + inet/filter/limit-874 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-514 + inet/filter/limit-874 -j TEE --gateway 10.0.0.1 + inet/filter/limit-874 -j TEE --gateway 10.0.0.2 + inet/filter/limit-874 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-514 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-514 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-874 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-874 + inet6/filter/limit-874 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-514 + inet6/filter/limit-874 -j TEE --gateway fc00::2 + inet6/filter/limit-874 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-514 -j DROP -Filter 876 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 876 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-875 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-875 - inet/filter/limit-875 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 - inet/filter/limit-875 -m limit --limit 12/minute -j ULOG - inet/filter/limit-875 -j ACCEPT - inet/filter/logdrop-398 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-398 -j DROP + inet/filter/limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-515 + inet/filter/limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-515 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-515 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-875 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-875 - inet6/filter/limit-875 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-398 - inet6/filter/limit-875 -j ACCEPT - inet6/filter/logdrop-398 -j DROP + inet6/filter/limit-875 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-515 + inet6/filter/limit-875 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-515 -j DROP -Filter 877 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 877 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-876 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-876 - inet/filter/limit-876 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 - inet/filter/limit-876 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-399 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-399 -j DROP + inet/filter/limit-876 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-516 + inet/filter/limit-876 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-516 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-516 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-876 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-876 - inet6/filter/limit-876 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-399 - inet6/filter/logdrop-399 -j DROP + inet6/filter/limit-876 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-516 + inet6/filter/limit-876 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-516 -j DROP -Filter 878 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","out":"B"} +Filter 878 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-877 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-877 - inet/filter/limit-877 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-400 - inet/filter/limit-877 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-400 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-400 -j DROP + inet/filter/limit-877 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-517 + inet/filter/limit-877 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-517 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-517 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-877 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-877 - inet6/filter/limit-877 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-400 - inet6/filter/limit-877 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-400 -j DROP + inet6/filter/limit-877 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-517 + inet6/filter/limit-877 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-517 -j DROP -Filter 879 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","out":"B"} +Filter 879 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-878 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-878 - inet/filter/limit-878 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-401 - inet/filter/limit-878 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-401 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-401 -j DROP + inet/filter/limit-878 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-518 + inet/filter/limit-878 -m limit --limit 12/minute -j ULOG + inet/filter/limit-878 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-518 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-518 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-878 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-878 - inet6/filter/limit-878 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-401 - inet6/filter/limit-878 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-401 -j DROP + inet6/filter/limit-878 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-518 + inet6/filter/limit-878 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-518 -j DROP -Filter 880 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 880 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-879 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-879 - inet/filter/limit-879 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-402 - inet/filter/limit-879 -m limit --limit 1/second -j LOG - inet/filter/limit-879 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-402 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-402 -j DROP + inet/filter/limit-879 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-519 + inet/filter/limit-879 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-519 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-519 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-879 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-879 - inet6/filter/limit-879 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-402 - inet6/filter/limit-879 -m limit --limit 1/second -j LOG - inet6/filter/limit-879 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-402 -j DROP + inet6/filter/limit-879 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-519 + inet6/filter/logdrop-519 -j DROP -Filter 881 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 881 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-880 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-880 - inet/filter/limit-880 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-403 - inet/filter/limit-880 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-403 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-403 -j DROP + inet/filter/limit-880 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-520 + inet/filter/limit-880 -j ACCEPT + inet/filter/logdrop-520 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-520 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-880 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-880 - inet6/filter/limit-880 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-403 - inet6/filter/limit-880 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-403 -j DROP + inet6/filter/limit-880 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-520 + inet6/filter/limit-880 -j ACCEPT + inet6/filter/logdrop-520 -j DROP -Filter 882 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 882 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-881 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-881 - inet/filter/limit-881 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-404 - inet/filter/limit-881 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-404 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-404 -j DROP + inet/filter/limit-881 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-521 + inet/filter/logdrop-521 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-521 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-881 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-881 - inet6/filter/limit-881 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-404 - inet6/filter/limit-881 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-404 -j DROP + inet6/filter/limit-881 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-521 + inet6/filter/logdrop-521 -j DROP -Filter 883 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 883 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-882 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-882 - inet/filter/limit-882 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-405 - inet/filter/limit-882 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-405 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-405 -j DROP + inet/filter/limit-882 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-522 + inet/filter/limit-882 -m limit --limit 1/second -j LOG + inet/filter/limit-882 -j ACCEPT + inet/filter/logdrop-522 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-522 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-882 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-882 - inet6/filter/limit-882 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-405 - inet6/filter/limit-882 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-405 -j DROP + inet6/filter/limit-882 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-522 + inet6/filter/limit-882 -m limit --limit 1/second -j LOG + inet6/filter/limit-882 -j ACCEPT + inet6/filter/logdrop-522 -j DROP -Filter 884 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 884 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-883 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-883 - inet/filter/limit-883 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-406 - inet/filter/limit-883 -m limit --limit 12/minute -j ULOG - inet/filter/limit-883 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-406 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-406 -j DROP + inet/filter/limit-883 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-523 + inet/filter/limit-883 -m limit --limit 1/second -j LOG + inet/filter/logdrop-523 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-523 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-883 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-883 - inet6/filter/limit-883 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-406 - inet6/filter/limit-883 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-406 -j DROP + inet6/filter/limit-883 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-523 + inet6/filter/limit-883 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-523 -j DROP -Filter 885 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 885 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-884 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-884 - inet/filter/limit-884 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-407 - inet/filter/limit-884 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-407 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-407 -j DROP + inet/filter/limit-884 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-524 + inet/filter/limit-884 -j TEE --gateway 10.0.0.1 + inet/filter/limit-884 -j TEE --gateway 10.0.0.2 + inet/filter/limit-884 -j ACCEPT + inet/filter/logdrop-524 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-524 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-884 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-884 - inet6/filter/limit-884 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-407 - inet6/filter/logdrop-407 -j DROP + inet6/filter/limit-884 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-524 + inet6/filter/limit-884 -j TEE --gateway fc00::2 + inet6/filter/limit-884 -j ACCEPT + inet6/filter/logdrop-524 -j DROP -Filter 886 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} +Filter 886 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-885 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-885 - inet/filter/limit-885 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-408 - inet/filter/limit-885 -j ACCEPT - inet/filter/logdrop-408 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-408 -j DROP + inet/filter/limit-885 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-525 + inet/filter/limit-885 -j TEE --gateway 10.0.0.1 + inet/filter/limit-885 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-525 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-525 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-885 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-885 - inet6/filter/limit-885 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-408 - inet6/filter/limit-885 -j ACCEPT - inet6/filter/logdrop-408 -j DROP + inet6/filter/limit-885 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-525 + inet6/filter/limit-885 -j TEE --gateway fc00::2 + inet6/filter/logdrop-525 -j DROP -Filter 887 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} +Filter 887 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-409 - inet/filter/logdrop-409 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-409 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-409 - inet6/filter/logdrop-409 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-886 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-886 + inet/filter/limit-886 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-526 + inet/filter/limit-886 -j ACCEPT + inet/filter/logdrop-526 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-526 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-886 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-886 + inet6/filter/limit-886 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-526 + inet6/filter/limit-886 -j ACCEPT + inet6/filter/logdrop-526 -j DROP -Filter 888 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 888 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-887 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-887 - inet/filter/limit-887 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-410 - inet/filter/limit-887 -m limit --limit 1/second -j LOG - inet/filter/limit-887 -j ACCEPT - inet/filter/logdrop-410 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-410 -j DROP + inet/filter/limit-887 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-527 + inet/filter/logdrop-527 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-527 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-887 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-887 - inet6/filter/limit-887 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-410 - inet6/filter/limit-887 -m limit --limit 1/second -j LOG - inet6/filter/limit-887 -j ACCEPT - inet6/filter/logdrop-410 -j DROP + inet6/filter/limit-887 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-527 + inet6/filter/logdrop-527 -j DROP -Filter 889 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 889 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-888 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-888 - inet/filter/limit-888 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-411 - inet/filter/limit-888 -m limit --limit 1/second -j LOG - inet/filter/logdrop-411 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-411 -j DROP + inet/filter/limit-888 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-528 + inet/filter/limit-888 -m limit --limit 12/minute -j ULOG + inet/filter/limit-888 -j ACCEPT + inet/filter/logdrop-528 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-528 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-888 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-888 - inet6/filter/limit-888 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-411 - inet6/filter/limit-888 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-411 -j DROP + inet6/filter/limit-888 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-528 + inet6/filter/limit-888 -j ACCEPT + inet6/filter/logdrop-528 -j DROP -Filter 890 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 890 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-889 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-889 - inet/filter/limit-889 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-412 - inet/filter/limit-889 -j ACCEPT - inet/filter/logdrop-412 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-412 -j DROP + inet/filter/limit-889 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-529 + inet/filter/limit-889 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-529 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-529 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-889 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-889 - inet6/filter/limit-889 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-412 - inet6/filter/limit-889 -j ACCEPT - inet6/filter/logdrop-412 -j DROP + inet6/filter/limit-889 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-529 + inet6/filter/logdrop-529 -j DROP -Filter 891 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 891 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-413 - inet/filter/logdrop-413 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-413 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-413 - inet6/filter/logdrop-413 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-890 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-890 + inet/filter/limit-890 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-530 + inet/filter/limit-890 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-530 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-530 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-890 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-890 + inet6/filter/limit-890 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-530 + inet6/filter/limit-890 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-530 -j DROP -Filter 892 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 892 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-891 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-891 - inet/filter/limit-891 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-414 - inet/filter/limit-891 -m limit --limit 12/minute -j ULOG - inet/filter/limit-891 -j ACCEPT - inet/filter/logdrop-414 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-414 -j DROP + inet/filter/limit-891 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-531 + inet/filter/limit-891 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-531 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-531 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-891 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-891 - inet6/filter/limit-891 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-414 - inet6/filter/limit-891 -j ACCEPT - inet6/filter/logdrop-414 -j DROP + inet6/filter/limit-891 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-531 + inet6/filter/limit-891 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-531 -j DROP -Filter 893 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 893 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-892 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-892 - inet/filter/limit-892 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-415 - inet/filter/limit-892 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-415 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-415 -j DROP + inet/filter/limit-892 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-532 + inet/filter/limit-892 -m limit --limit 1/second -j LOG + inet/filter/limit-892 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-532 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-532 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-892 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-892 - inet6/filter/limit-892 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-415 - inet6/filter/logdrop-415 -j DROP + inet6/filter/limit-892 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-532 + inet6/filter/limit-892 -m limit --limit 1/second -j LOG + inet6/filter/limit-892 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-532 -j DROP -Filter 894 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","out":"B"} +Filter 894 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-893 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-893 - inet/filter/limit-893 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-416 - inet/filter/limit-893 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-416 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-416 -j DROP + inet/filter/limit-893 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-533 + inet/filter/limit-893 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-533 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-533 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-893 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-893 - inet6/filter/limit-893 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-416 - inet6/filter/limit-893 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-416 -j DROP + inet6/filter/limit-893 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-533 + inet6/filter/limit-893 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-533 -j DROP -Filter 895 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","out":"B"} +Filter 895 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-894 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-894 - inet/filter/limit-894 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-417 - inet/filter/limit-894 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-417 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-417 -j DROP + inet/filter/limit-894 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-534 + inet/filter/limit-894 -j TEE --gateway 10.0.0.1 + inet/filter/limit-894 -j TEE --gateway 10.0.0.2 + inet/filter/limit-894 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-534 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-534 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-894 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-894 - inet6/filter/limit-894 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-417 - inet6/filter/limit-894 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-417 -j DROP + inet6/filter/limit-894 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-534 + inet6/filter/limit-894 -j TEE --gateway fc00::2 + inet6/filter/limit-894 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-534 -j DROP -Filter 896 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 896 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-895 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-895 - inet/filter/limit-895 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-418 - inet/filter/limit-895 -m limit --limit 1/second -j LOG - inet/filter/limit-895 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-418 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-418 -j DROP + inet/filter/limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-535 + inet/filter/limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-535 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-535 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-895 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-895 - inet6/filter/limit-895 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-418 - inet6/filter/limit-895 -m limit --limit 1/second -j LOG - inet6/filter/limit-895 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-418 -j DROP + inet6/filter/limit-895 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-535 + inet6/filter/limit-895 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-535 -j DROP -Filter 897 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 897 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-896 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-896 - inet/filter/limit-896 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-419 - inet/filter/limit-896 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-419 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-419 -j DROP + inet/filter/limit-896 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-536 + inet/filter/limit-896 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-536 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-536 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-896 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-896 - inet6/filter/limit-896 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-419 - inet6/filter/limit-896 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-419 -j DROP + inet6/filter/limit-896 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-536 + inet6/filter/limit-896 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-536 -j DROP -Filter 898 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 898 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-897 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-897 - inet/filter/limit-897 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-420 - inet/filter/limit-897 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-420 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-420 -j DROP + inet/filter/limit-897 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-537 + inet/filter/limit-897 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-537 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-537 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-897 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-897 - inet6/filter/limit-897 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-420 - inet6/filter/limit-897 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-420 -j DROP + inet6/filter/limit-897 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-537 + inet6/filter/limit-897 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-537 -j DROP -Filter 899 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 899 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-898 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-898 - inet/filter/limit-898 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-421 - inet/filter/limit-898 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-421 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-421 -j DROP + inet/filter/limit-898 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-538 + inet/filter/limit-898 -m limit --limit 12/minute -j ULOG + inet/filter/limit-898 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-538 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-538 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-898 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-898 - inet6/filter/limit-898 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-421 - inet6/filter/limit-898 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-421 -j DROP + inet6/filter/limit-898 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-538 + inet6/filter/limit-898 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-538 -j DROP -Filter 900 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 900 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-899 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-899 - inet/filter/limit-899 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-422 - inet/filter/limit-899 -m limit --limit 12/minute -j ULOG - inet/filter/limit-899 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-422 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-422 -j DROP + inet/filter/limit-899 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-539 + inet/filter/limit-899 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-539 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-539 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-899 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-899 - inet6/filter/limit-899 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-422 - inet6/filter/limit-899 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-422 -j DROP + inet6/filter/limit-899 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-539 + inet6/filter/logdrop-539 -j DROP -Filter 901 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 901 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-900 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-900 - inet/filter/limit-900 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-423 - inet/filter/limit-900 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-423 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-423 -j DROP + inet/filter/limit-900 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-540 + inet/filter/limit-900 -j ACCEPT + inet/filter/logdrop-540 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-540 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-900 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-900 - inet6/filter/limit-900 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-423 - inet6/filter/logdrop-423 -j DROP + inet6/filter/limit-900 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-540 + inet6/filter/limit-900 -j ACCEPT + inet6/filter/logdrop-540 -j DROP -Filter 902 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} +Filter 902 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-901 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-901 - inet/filter/limit-901 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-424 - inet/filter/limit-901 -j ACCEPT - inet/filter/logdrop-424 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-424 -j DROP + inet/filter/limit-901 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-541 + inet/filter/logdrop-541 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-541 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-901 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-901 - inet6/filter/limit-901 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-424 - inet6/filter/limit-901 -j ACCEPT - inet6/filter/logdrop-424 -j DROP + inet6/filter/limit-901 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-541 + inet6/filter/logdrop-541 -j DROP -Filter 903 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} +Filter 903 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-425 - inet/filter/logdrop-425 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-425 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-425 - inet6/filter/logdrop-425 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-902 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-902 + inet/filter/limit-902 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-542 + inet/filter/limit-902 -m limit --limit 1/second -j LOG + inet/filter/limit-902 -j ACCEPT + inet/filter/logdrop-542 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-542 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-902 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-902 + inet6/filter/limit-902 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-542 + inet6/filter/limit-902 -m limit --limit 1/second -j LOG + inet6/filter/limit-902 -j ACCEPT + inet6/filter/logdrop-542 -j DROP -Filter 904 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 904 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-903 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-903 - inet/filter/limit-903 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-426 + inet/filter/limit-903 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-543 inet/filter/limit-903 -m limit --limit 1/second -j LOG - inet/filter/limit-903 -j ACCEPT - inet/filter/logdrop-426 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-426 -j DROP + inet/filter/logdrop-543 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-543 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-903 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-903 - inet6/filter/limit-903 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-426 + inet6/filter/limit-903 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-543 inet6/filter/limit-903 -m limit --limit 1/second -j LOG - inet6/filter/limit-903 -j ACCEPT - inet6/filter/logdrop-426 -j DROP + inet6/filter/logdrop-543 -j DROP -Filter 905 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 905 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-904 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-904 - inet/filter/limit-904 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-427 - inet/filter/limit-904 -m limit --limit 1/second -j LOG - inet/filter/logdrop-427 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-427 -j DROP + inet/filter/limit-904 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-544 + inet/filter/limit-904 -j TEE --gateway 10.0.0.1 + inet/filter/limit-904 -j TEE --gateway 10.0.0.2 + inet/filter/limit-904 -j ACCEPT + inet/filter/logdrop-544 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-544 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-904 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-904 - inet6/filter/limit-904 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-427 - inet6/filter/limit-904 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-427 -j DROP + inet6/filter/limit-904 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-544 + inet6/filter/limit-904 -j TEE --gateway fc00::2 + inet6/filter/limit-904 -j ACCEPT + inet6/filter/logdrop-544 -j DROP -Filter 906 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 906 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-905 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-905 - inet/filter/limit-905 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-428 - inet/filter/limit-905 -j ACCEPT - inet/filter/logdrop-428 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-428 -j DROP + inet/filter/limit-905 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-545 + inet/filter/limit-905 -j TEE --gateway 10.0.0.1 + inet/filter/limit-905 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-545 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-545 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-905 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-905 - inet6/filter/limit-905 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-428 - inet6/filter/limit-905 -j ACCEPT - inet6/filter/logdrop-428 -j DROP + inet6/filter/limit-905 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-545 + inet6/filter/limit-905 -j TEE --gateway fc00::2 + inet6/filter/logdrop-545 -j DROP -Filter 907 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 907 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-429 - inet/filter/logdrop-429 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-429 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-429 - inet6/filter/logdrop-429 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-906 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-906 + inet/filter/limit-906 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-546 + inet/filter/limit-906 -j ACCEPT + inet/filter/logdrop-546 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-546 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-906 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-906 + inet6/filter/limit-906 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-546 + inet6/filter/limit-906 -j ACCEPT + inet6/filter/logdrop-546 -j DROP -Filter 908 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 908 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-907 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-907 - inet/filter/limit-907 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-430 - inet/filter/limit-907 -m limit --limit 12/minute -j ULOG - inet/filter/limit-907 -j ACCEPT - inet/filter/logdrop-430 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-430 -j DROP + inet/filter/limit-907 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-547 + inet/filter/logdrop-547 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-547 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-907 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-907 - inet6/filter/limit-907 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-430 - inet6/filter/limit-907 -j ACCEPT - inet6/filter/logdrop-430 -j DROP + inet6/filter/limit-907 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-547 + inet6/filter/logdrop-547 -j DROP -Filter 909 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 909 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-908 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-908 - inet/filter/limit-908 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-431 + inet/filter/limit-908 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-548 inet/filter/limit-908 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-431 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-431 -j DROP + inet/filter/limit-908 -j ACCEPT + inet/filter/logdrop-548 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-548 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-908 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-908 - inet6/filter/limit-908 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-431 - inet6/filter/logdrop-431 -j DROP + inet6/filter/limit-908 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-548 + inet6/filter/limit-908 -j ACCEPT + inet6/filter/logdrop-548 -j DROP -Filter 910 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","out":"B"} +Filter 910 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-909 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-909 - inet/filter/limit-909 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-432 - inet/filter/limit-909 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-432 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-432 -j DROP + inet/filter/limit-909 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-549 + inet/filter/limit-909 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-549 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-549 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-909 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-909 - inet6/filter/limit-909 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-432 - inet6/filter/limit-909 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-432 -j DROP + inet6/filter/limit-909 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-549 + inet6/filter/logdrop-549 -j DROP -Filter 911 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","out":"B"} +Filter 911 {"conn-limit":150,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-910 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-910 - inet/filter/limit-910 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-433 - inet/filter/limit-910 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-433 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-433 -j DROP + inet/filter/limit-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-910 -j ACCEPT + inet/filter/limit-910 -m limit --limit 1/second -j LOG + inet/filter/limit-910 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-910 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-910 - inet6/filter/limit-910 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-433 - inet6/filter/limit-910 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-433 -j DROP + inet6/filter/limit-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-910 -j ACCEPT + inet6/filter/limit-910 -m limit --limit 1/second -j LOG + inet6/filter/limit-910 -j DROP -Filter 912 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 912 {"action":"pass","conn-limit":150,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-911 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-911 - inet/filter/limit-911 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-434 + inet/filter/limit-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-911 -j RETURN inet/filter/limit-911 -m limit --limit 1/second -j LOG - inet/filter/limit-911 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-434 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-434 -j DROP + inet/filter/limit-911 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-911 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-911 - inet6/filter/limit-911 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-434 + inet6/filter/limit-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-911 -j RETURN inet6/filter/limit-911 -m limit --limit 1/second -j LOG - inet6/filter/limit-911 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-434 -j DROP + inet6/filter/limit-911 -j DROP -Filter 913 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 913 {"conn-limit":150,"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-912 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-912 - inet/filter/limit-912 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-435 - inet/filter/limit-912 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-435 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-435 -j DROP + inet/filter/limit-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-912 -j logaccept-0 + inet/filter/limit-912 -m limit --limit 1/second -j LOG + inet/filter/limit-912 -j DROP + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-912 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-912 - inet6/filter/limit-912 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-435 - inet6/filter/limit-912 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-435 -j DROP + inet6/filter/limit-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-912 -j logaccept-0 + inet6/filter/limit-912 -m limit --limit 1/second -j LOG + inet6/filter/limit-912 -j DROP + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -j ACCEPT -Filter 914 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 914 {"conn-limit":150,"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-913 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-913 - inet/filter/limit-913 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-436 - inet/filter/limit-913 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-436 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-436 -j DROP + inet/filter/limit-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-913 -j logaccept-1 + inet/filter/limit-913 -m limit --limit 1/second -j LOG + inet/filter/limit-913 -j DROP + inet/filter/logaccept-1 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-1 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-1 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-913 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-913 - inet6/filter/limit-913 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-436 - inet6/filter/limit-913 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-436 -j DROP + inet6/filter/limit-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-913 -j logaccept-1 + inet6/filter/limit-913 -m limit --limit 1/second -j LOG + inet6/filter/limit-913 -j DROP + inet6/filter/logaccept-1 -j TEE --gateway fc00::2 + inet6/filter/logaccept-1 -j ACCEPT -Filter 915 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 915 {"conn-limit":150,"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-914 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-914 - inet/filter/limit-914 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-437 - inet/filter/limit-914 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-437 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-437 -j DROP + inet/filter/limit-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-914 -j ACCEPT + inet/filter/limit-914 -m limit --limit 1/second -j LOG + inet/filter/limit-914 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-914 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-914 - inet6/filter/limit-914 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-437 - inet6/filter/limit-914 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-437 -j DROP + inet6/filter/limit-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-914 -j ACCEPT + inet6/filter/limit-914 -m limit --limit 1/second -j LOG + inet6/filter/limit-914 -j DROP -Filter 916 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 916 {"conn-limit":150,"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-915 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-915 - inet/filter/limit-915 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-438 - inet/filter/limit-915 -m limit --limit 12/minute -j ULOG - inet/filter/limit-915 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-438 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-438 -j DROP + inet/filter/limit-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-915 -j logaccept-2 + inet/filter/limit-915 -m limit --limit 1/second -j LOG + inet/filter/limit-915 -j DROP + inet/filter/logaccept-2 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-2 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-915 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-915 - inet6/filter/limit-915 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-438 - inet6/filter/limit-915 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-438 -j DROP + inet6/filter/limit-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-915 -j logaccept-2 + inet6/filter/limit-915 -m limit --limit 1/second -j LOG + inet6/filter/limit-915 -j DROP + inet6/filter/logaccept-2 -j ACCEPT -Filter 917 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 917 {"conn-limit":{"count":150,"log":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-916 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-916 - inet/filter/limit-916 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-439 - inet/filter/limit-916 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-439 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-439 -j DROP + inet/filter/limit-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-916 -j ACCEPT + inet/filter/limit-916 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-916 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-916 - inet6/filter/limit-916 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-439 - inet6/filter/logdrop-439 -j DROP + inet6/filter/limit-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-916 -j ACCEPT + inet6/filter/limit-916 -j DROP -Filter 918 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} +Filter 918 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-917 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-917 - inet/filter/limit-917 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-440 - inet/filter/limit-917 -j ACCEPT - inet/filter/logdrop-440 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-440 -j DROP + inet/filter/limit-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-917 -j RETURN + inet/filter/limit-917 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-917 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-917 - inet6/filter/limit-917 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-440 - inet6/filter/limit-917 -j ACCEPT - inet6/filter/logdrop-440 -j DROP + inet6/filter/limit-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-917 -j RETURN + inet6/filter/limit-917 -j DROP -Filter 919 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} +Filter 919 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-441 - inet/filter/logdrop-441 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-441 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-441 - inet6/filter/logdrop-441 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-918 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-918 + inet/filter/limit-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-918 -j logaccept-3 + inet/filter/limit-918 -j DROP + inet/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-3 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-918 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-918 + inet6/filter/limit-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-918 -j logaccept-3 + inet6/filter/limit-918 -j DROP + inet6/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-3 -j ACCEPT -Filter 920 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 920 {"conn-limit":{"count":150,"log":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-919 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-919 - inet/filter/limit-919 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-442 - inet/filter/limit-919 -m limit --limit 1/second -j LOG - inet/filter/limit-919 -j ACCEPT - inet/filter/logdrop-442 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-442 -j DROP + inet/filter/limit-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-919 -j logaccept-4 + inet/filter/limit-919 -j DROP + inet/filter/logaccept-4 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-4 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-4 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-919 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-919 - inet6/filter/limit-919 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-442 - inet6/filter/limit-919 -m limit --limit 1/second -j LOG - inet6/filter/limit-919 -j ACCEPT - inet6/filter/logdrop-442 -j DROP + inet6/filter/limit-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-919 -j logaccept-4 + inet6/filter/limit-919 -j DROP + inet6/filter/logaccept-4 -j TEE --gateway fc00::2 + inet6/filter/logaccept-4 -j ACCEPT -Filter 921 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 921 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-920 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-920 - inet/filter/limit-920 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-443 - inet/filter/limit-920 -m limit --limit 1/second -j LOG - inet/filter/logdrop-443 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-443 -j DROP + inet/filter/limit-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-920 -j ACCEPT + inet/filter/limit-920 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-920 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-920 - inet6/filter/limit-920 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-443 - inet6/filter/limit-920 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-443 -j DROP + inet6/filter/limit-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-920 -j ACCEPT + inet6/filter/limit-920 -j DROP -Filter 922 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 922 {"conn-limit":{"count":150,"log":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-921 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-921 - inet/filter/limit-921 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-444 - inet/filter/limit-921 -j ACCEPT - inet/filter/logdrop-444 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-444 -j DROP + inet/filter/limit-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-921 -j logaccept-5 + inet/filter/limit-921 -j DROP + inet/filter/logaccept-5 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-5 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-921 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-921 - inet6/filter/limit-921 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-444 - inet6/filter/limit-921 -j ACCEPT - inet6/filter/logdrop-444 -j DROP + inet6/filter/limit-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-921 -j logaccept-5 + inet6/filter/limit-921 -j DROP + inet6/filter/logaccept-5 -j ACCEPT -Filter 923 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 923 {"conn-limit":{"count":150},"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-445 - inet/filter/logdrop-445 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-445 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-445 - inet6/filter/logdrop-445 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-922 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-922 + inet/filter/limit-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-922 -j ACCEPT + inet/filter/limit-922 -m limit --limit 1/second -j LOG + inet/filter/limit-922 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-922 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-922 + inet6/filter/limit-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-922 -j ACCEPT + inet6/filter/limit-922 -m limit --limit 1/second -j LOG + inet6/filter/limit-922 -j DROP -Filter 924 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 924 {"action":"pass","conn-limit":{"count":150},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-923 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-923 - inet/filter/limit-923 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-446 - inet/filter/limit-923 -m limit --limit 12/minute -j ULOG - inet/filter/limit-923 -j ACCEPT - inet/filter/logdrop-446 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-446 -j DROP + inet/filter/limit-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-923 -j RETURN + inet/filter/limit-923 -m limit --limit 1/second -j LOG + inet/filter/limit-923 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-923 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-923 - inet6/filter/limit-923 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-446 - inet6/filter/limit-923 -j ACCEPT - inet6/filter/logdrop-446 -j DROP + inet6/filter/limit-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-923 -j RETURN + inet6/filter/limit-923 -m limit --limit 1/second -j LOG + inet6/filter/limit-923 -j DROP -Filter 925 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 925 {"conn-limit":{"count":150},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-924 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-924 - inet/filter/limit-924 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-447 - inet/filter/limit-924 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-447 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-447 -j DROP + inet/filter/limit-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-924 -j logaccept-6 + inet/filter/limit-924 -m limit --limit 1/second -j LOG + inet/filter/limit-924 -j DROP + inet/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-6 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-924 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-924 - inet6/filter/limit-924 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-447 - inet6/filter/logdrop-447 -j DROP + inet6/filter/limit-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-924 -j logaccept-6 + inet6/filter/limit-924 -m limit --limit 1/second -j LOG + inet6/filter/limit-924 -j DROP + inet6/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-6 -j ACCEPT -Filter 926 {"conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} +Filter 926 {"conn-limit":{"count":150},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-925 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-925 - inet/filter/limit-925 -m recent --name limit-925 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-925 -m recent --name limit-925 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-925 -j logaccept-7 + inet/filter/limit-925 -m limit --limit 1/second -j LOG + inet/filter/limit-925 -j DROP + inet/filter/logaccept-7 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-7 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-7 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-925 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-925 - inet6/filter/limit-925 -m recent --name limit-925 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-925 -m recent --name limit-925 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-925 -j logaccept-7 + inet6/filter/limit-925 -m limit --limit 1/second -j LOG + inet6/filter/limit-925 -j DROP + inet6/filter/logaccept-7 -j TEE --gateway fc00::2 + inet6/filter/logaccept-7 -j ACCEPT -Filter 927 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} +Filter 927 {"conn-limit":{"count":150},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-926 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-926 - inet/filter/limit-926 -m recent --name limit-926 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-926 -m recent --name limit-926 --rsource --mask 255.255.255.255 --set + inet/filter/limit-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-926 -j ACCEPT + inet/filter/limit-926 -m limit --limit 1/second -j LOG + inet/filter/limit-926 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-926 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-926 - inet6/filter/limit-926 -m recent --name limit-926 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-926 -m recent --name limit-926 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-926 -j ACCEPT + inet6/filter/limit-926 -m limit --limit 1/second -j LOG + inet6/filter/limit-926 -j DROP -Filter 928 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +Filter 928 {"conn-limit":{"count":150},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-927 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-927 - inet/filter/limit-927 -m recent --name limit-927 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-927 -j logaccept-8 inet/filter/limit-927 -m limit --limit 1/second -j LOG - inet/filter/limit-927 -m recent --name limit-927 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-927 -j DROP + inet/filter/logaccept-8 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-8 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-927 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-927 - inet6/filter/limit-927 -m recent --name limit-927 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-927 -j logaccept-8 inet6/filter/limit-927 -m limit --limit 1/second -j LOG - inet6/filter/limit-927 -m recent --name limit-927 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-927 -j DROP + inet6/filter/logaccept-8 -j ACCEPT -Filter 929 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +Filter 929 {"conn-limit":{"count":150,"log":"mirror"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-928 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-928 - inet/filter/limit-928 -m recent --name limit-928 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-928 -m recent --name limit-928 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-928 -j ACCEPT + inet/filter/limit-928 -j TEE --gateway 10.0.0.1 + inet/filter/limit-928 -j TEE --gateway 10.0.0.2 + inet/filter/limit-928 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-928 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-928 - inet6/filter/limit-928 -m recent --name limit-928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-928 -m recent --name limit-928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-928 -j ACCEPT + inet6/filter/limit-928 -j TEE --gateway fc00::2 + inet6/filter/limit-928 -j DROP -Filter 930 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +Filter 930 {"action":"pass","conn-limit":{"count":150,"log":"mirror"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-929 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-929 - inet/filter/limit-929 -m recent --name limit-929 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-929 -m recent --name limit-929 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-929 -j RETURN + inet/filter/limit-929 -j TEE --gateway 10.0.0.1 + inet/filter/limit-929 -j TEE --gateway 10.0.0.2 + inet/filter/limit-929 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-929 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-929 - inet6/filter/limit-929 -m recent --name limit-929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-929 -m recent --name limit-929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-929 -j RETURN + inet6/filter/limit-929 -j TEE --gateway fc00::2 + inet6/filter/limit-929 -j DROP -Filter 931 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +Filter 931 {"conn-limit":{"count":150,"log":"mirror"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-930 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-930 - inet/filter/limit-930 -m recent --name limit-930 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-930 -m recent --name limit-930 --rsource --mask 255.255.255.255 --set + inet/filter/limit-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-930 -j logaccept-9 + inet/filter/limit-930 -j TEE --gateway 10.0.0.1 + inet/filter/limit-930 -j TEE --gateway 10.0.0.2 + inet/filter/limit-930 -j DROP + inet/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet/filter/logaccept-9 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-930 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-930 - inet6/filter/limit-930 -m recent --name limit-930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-930 -m recent --name limit-930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-930 -j logaccept-9 + inet6/filter/limit-930 -j TEE --gateway fc00::2 + inet6/filter/limit-930 -j DROP + inet6/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-9 -j ACCEPT -Filter 932 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"ulog","out":"B"} +Filter 932 {"conn-limit":{"count":150,"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-931 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-931 - inet/filter/limit-931 -m recent --name limit-931 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-931 -m limit --limit 12/minute -j ULOG - inet/filter/limit-931 -m recent --name limit-931 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-931 -j logaccept-10 + inet/filter/limit-931 -j TEE --gateway 10.0.0.1 + inet/filter/limit-931 -j TEE --gateway 10.0.0.2 + inet/filter/limit-931 -j DROP + inet/filter/logaccept-10 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-10 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-10 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-931 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-931 - inet6/filter/limit-931 -m recent --name limit-931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-931 -m recent --name limit-931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-931 -j logaccept-10 + inet6/filter/limit-931 -j TEE --gateway fc00::2 + inet6/filter/limit-931 -j DROP + inet6/filter/logaccept-10 -j TEE --gateway fc00::2 + inet6/filter/logaccept-10 -j ACCEPT -Filter 933 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"ulog","out":"B"} +Filter 933 {"conn-limit":{"count":150,"log":"mirror"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-932 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-932 - inet/filter/limit-932 -m recent --name limit-932 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-932 -m recent --name limit-932 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-932 -j ACCEPT + inet/filter/limit-932 -j TEE --gateway 10.0.0.1 + inet/filter/limit-932 -j TEE --gateway 10.0.0.2 + inet/filter/limit-932 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-932 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-932 - inet6/filter/limit-932 -m recent --name limit-932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-932 -j ACCEPT + inet6/filter/limit-932 -j TEE --gateway fc00::2 + inet6/filter/limit-932 -j DROP -Filter 934 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 934 {"conn-limit":{"count":150,"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-933 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-933 - inet/filter/limit-933 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-933 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-933 -j logaccept-11 + inet/filter/limit-933 -j TEE --gateway 10.0.0.1 + inet/filter/limit-933 -j TEE --gateway 10.0.0.2 + inet/filter/limit-933 -j DROP + inet/filter/logaccept-11 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-11 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-933 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-933 - inet6/filter/limit-933 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-933 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-933 -j logaccept-11 + inet6/filter/limit-933 -j TEE --gateway fc00::2 + inet6/filter/limit-933 -j DROP + inet6/filter/logaccept-11 -j ACCEPT -Filter 935 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 935 {"conn-limit":{"count":150,"log":"none"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-934 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-934 - inet/filter/limit-934 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-934 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-934 -j ACCEPT + inet/filter/limit-934 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-934 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-934 - inet6/filter/limit-934 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-934 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-934 -j ACCEPT + inet6/filter/limit-934 -j DROP -Filter 936 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 936 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-935 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-935 - inet/filter/limit-935 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-935 -m limit --limit 1/second -j LOG - inet/filter/limit-935 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-935 -j RETURN + inet/filter/limit-935 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-935 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-935 - inet6/filter/limit-935 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-935 -m limit --limit 1/second -j LOG - inet6/filter/limit-935 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-935 -j RETURN + inet6/filter/limit-935 -j DROP -Filter 937 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 937 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-936 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-936 - inet/filter/limit-936 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-936 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-936 -j logaccept-12 + inet/filter/limit-936 -j DROP + inet/filter/logaccept-12 -m limit --limit 1/second -j LOG + inet/filter/logaccept-12 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-936 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-936 - inet6/filter/limit-936 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-936 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-936 -j logaccept-12 + inet6/filter/limit-936 -j DROP + inet6/filter/logaccept-12 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-12 -j ACCEPT -Filter 938 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 938 {"conn-limit":{"count":150,"log":"none"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-937 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-937 - inet/filter/limit-937 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-937 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-937 -j logaccept-13 + inet/filter/limit-937 -j DROP + inet/filter/logaccept-13 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-13 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-13 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-937 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-937 - inet6/filter/limit-937 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-937 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-937 -j logaccept-13 + inet6/filter/limit-937 -j DROP + inet6/filter/logaccept-13 -j TEE --gateway fc00::2 + inet6/filter/logaccept-13 -j ACCEPT -Filter 939 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 939 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-938 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-938 - inet/filter/limit-938 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-938 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-938 -j ACCEPT + inet/filter/limit-938 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-938 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-938 - inet6/filter/limit-938 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-938 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-938 -j ACCEPT + inet6/filter/limit-938 -j DROP -Filter 940 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 940 {"conn-limit":{"count":150,"log":"none"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-939 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-939 - inet/filter/limit-939 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-939 -m limit --limit 12/minute -j ULOG - inet/filter/limit-939 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-939 -j logaccept-14 + inet/filter/limit-939 -j DROP + inet/filter/logaccept-14 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-14 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-939 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-939 - inet6/filter/limit-939 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-939 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-939 -j logaccept-14 + inet6/filter/limit-939 -j DROP + inet6/filter/logaccept-14 -j ACCEPT -Filter 941 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 941 {"conn-limit":{"count":150,"log":"ulog"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-940 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-940 - inet/filter/limit-940 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-940 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-940 -j ACCEPT + inet/filter/limit-940 -m limit --limit 12/minute -j ULOG + inet/filter/limit-940 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-940 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-940 - inet6/filter/limit-940 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-940 -j ACCEPT + inet6/filter/limit-940 -j DROP -Filter 942 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 942 {"action":"pass","conn-limit":{"count":150,"log":"ulog"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-941 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-941 - inet/filter/limit-941 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-941 -j ACCEPT + inet/filter/limit-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-941 -j RETURN + inet/filter/limit-941 -m limit --limit 12/minute -j ULOG + inet/filter/limit-941 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-941 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-941 - inet6/filter/limit-941 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-941 -j ACCEPT + inet6/filter/limit-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-941 -j RETURN + inet6/filter/limit-941 -j DROP -Filter 943 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 943 {"conn-limit":{"count":150,"log":"ulog"},"log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-942 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-942 + inet/filter/limit-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-942 -j logaccept-15 + inet/filter/limit-942 -m limit --limit 12/minute -j ULOG + inet/filter/limit-942 -j DROP + inet/filter/logaccept-15 -m limit --limit 1/second -j LOG + inet/filter/logaccept-15 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-942 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-942 + inet6/filter/limit-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-942 -j logaccept-15 + inet6/filter/limit-942 -j DROP + inet6/filter/logaccept-15 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-15 -j ACCEPT -Filter 944 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 944 {"conn-limit":{"count":150,"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-943 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-943 - inet/filter/limit-943 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-943 -m limit --limit 1/second -j LOG - inet/filter/limit-943 -j ACCEPT + inet/filter/limit-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-943 -j logaccept-16 + inet/filter/limit-943 -m limit --limit 12/minute -j ULOG + inet/filter/limit-943 -j DROP + inet/filter/logaccept-16 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-16 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-16 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-943 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-943 - inet6/filter/limit-943 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-943 -m limit --limit 1/second -j LOG - inet6/filter/limit-943 -j ACCEPT + inet6/filter/limit-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-943 -j logaccept-16 + inet6/filter/limit-943 -j DROP + inet6/filter/logaccept-16 -j TEE --gateway fc00::2 + inet6/filter/logaccept-16 -j ACCEPT -Filter 945 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 945 {"conn-limit":{"count":150,"log":"ulog"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-944 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-944 - inet/filter/limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-944 -m limit --limit 1/second -j LOG + inet/filter/limit-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-944 -j ACCEPT + inet/filter/limit-944 -m limit --limit 12/minute -j ULOG + inet/filter/limit-944 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-944 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-944 - inet6/filter/limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-944 -m limit --limit 1/second -j LOG + inet6/filter/limit-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-944 -j ACCEPT + inet6/filter/limit-944 -j DROP -Filter 946 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 946 {"conn-limit":{"count":150,"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-945 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-945 - inet/filter/limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-945 -j ACCEPT + inet/filter/limit-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-945 -j logaccept-17 + inet/filter/limit-945 -m limit --limit 12/minute -j ULOG + inet/filter/limit-945 -j DROP + inet/filter/logaccept-17 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-17 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-945 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-945 - inet6/filter/limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-945 -j ACCEPT + inet6/filter/limit-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-945 -j logaccept-17 + inet6/filter/limit-945 -j DROP + inet6/filter/logaccept-17 -j ACCEPT -Filter 947 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 947 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-946 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-946 + inet/filter/limit-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-946 -j ACCEPT + inet/filter/limit-946 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-946 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-946 + inet6/filter/limit-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-946 -j ACCEPT + inet6/filter/limit-946 -j DROP -Filter 948 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 948 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-947 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-947 - inet/filter/limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-947 -m limit --limit 12/minute -j ULOG - inet/filter/limit-947 -j ACCEPT + inet/filter/limit-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-947 -j RETURN + inet/filter/limit-947 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-947 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-947 - inet6/filter/limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-947 -j ACCEPT + inet6/filter/limit-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-947 -j RETURN + inet6/filter/limit-947 -j DROP -Filter 949 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 949 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-948 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-948 - inet/filter/limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-948 -m limit --limit 12/minute -j ULOG + inet/filter/limit-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-948 -j logaccept-18 + inet/filter/limit-948 -j DROP + inet/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet/filter/logaccept-18 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-948 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-948 - inet6/filter/limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-948 -j logaccept-18 + inet6/filter/limit-948 -j DROP + inet6/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-18 -j ACCEPT -Filter 950 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 950 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-949 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-949 - inet/filter/limit-949 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-949 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-949 -j logaccept-19 + inet/filter/limit-949 -j DROP + inet/filter/logaccept-19 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-19 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-19 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-949 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-949 - inet6/filter/limit-949 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-949 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-949 -j logaccept-19 + inet6/filter/limit-949 -j DROP + inet6/filter/logaccept-19 -j TEE --gateway fc00::2 + inet6/filter/logaccept-19 -j ACCEPT -Filter 951 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 951 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-950 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-950 - inet/filter/limit-950 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-950 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-950 -j ACCEPT + inet/filter/limit-950 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-950 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-950 - inet6/filter/limit-950 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-950 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-950 -j ACCEPT + inet6/filter/limit-950 -j DROP -Filter 952 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 952 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-951 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-951 - inet/filter/limit-951 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-951 -m limit --limit 1/second -j LOG - inet/filter/limit-951 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-951 -j logaccept-20 + inet/filter/limit-951 -j DROP + inet/filter/logaccept-20 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-20 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-951 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-951 - inet6/filter/limit-951 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-951 -m limit --limit 1/second -j LOG - inet6/filter/limit-951 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-951 -j logaccept-20 + inet6/filter/limit-951 -j DROP + inet6/filter/logaccept-20 -j ACCEPT -Filter 953 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 953 {"conn-limit":{"count":150,"interval":5},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-952 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-952 - inet/filter/limit-952 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-952 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-952 -j ACCEPT + inet/filter/limit-952 -m limit --limit 1/second -j LOG + inet/filter/limit-952 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-952 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-952 - inet6/filter/limit-952 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-952 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-952 -j ACCEPT + inet6/filter/limit-952 -m limit --limit 1/second -j LOG + inet6/filter/limit-952 -j DROP -Filter 954 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 954 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-953 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-953 - inet/filter/limit-953 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-953 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-953 -j RETURN + inet/filter/limit-953 -m limit --limit 1/second -j LOG + inet/filter/limit-953 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-953 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-953 - inet6/filter/limit-953 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-953 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-953 -j RETURN + inet6/filter/limit-953 -m limit --limit 1/second -j LOG + inet6/filter/limit-953 -j DROP -Filter 955 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 955 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-954 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-954 - inet/filter/limit-954 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-954 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-954 -j logaccept-21 + inet/filter/limit-954 -m limit --limit 1/second -j LOG + inet/filter/limit-954 -j DROP + inet/filter/logaccept-21 -m limit --limit 1/second -j LOG + inet/filter/logaccept-21 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-954 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-954 - inet6/filter/limit-954 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-954 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-954 -j logaccept-21 + inet6/filter/limit-954 -m limit --limit 1/second -j LOG + inet6/filter/limit-954 -j DROP + inet6/filter/logaccept-21 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-21 -j ACCEPT -Filter 956 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 956 {"conn-limit":{"count":150,"interval":5},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-955 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-955 - inet/filter/limit-955 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-955 -m limit --limit 12/minute -j ULOG - inet/filter/limit-955 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-955 -j logaccept-22 + inet/filter/limit-955 -m limit --limit 1/second -j LOG + inet/filter/limit-955 -j DROP + inet/filter/logaccept-22 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-22 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-22 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-955 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-955 - inet6/filter/limit-955 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-955 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-955 -j logaccept-22 + inet6/filter/limit-955 -m limit --limit 1/second -j LOG + inet6/filter/limit-955 -j DROP + inet6/filter/logaccept-22 -j TEE --gateway fc00::2 + inet6/filter/logaccept-22 -j ACCEPT -Filter 957 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 957 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-956 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-956 - inet/filter/limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-956 -j ACCEPT + inet/filter/limit-956 -m limit --limit 1/second -j LOG + inet/filter/limit-956 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-956 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-956 - inet6/filter/limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-956 -j ACCEPT + inet6/filter/limit-956 -m limit --limit 1/second -j LOG + inet6/filter/limit-956 -j DROP -Filter 958 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 958 {"conn-limit":{"count":150,"interval":5},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-957 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-957 - inet/filter/limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-957 -j ACCEPT + inet/filter/limit-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-957 -j logaccept-23 + inet/filter/limit-957 -m limit --limit 1/second -j LOG + inet/filter/limit-957 -j DROP + inet/filter/logaccept-23 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-23 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-957 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-957 - inet6/filter/limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-957 -j ACCEPT + inet6/filter/limit-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-957 -j logaccept-23 + inet6/filter/limit-957 -m limit --limit 1/second -j LOG + inet6/filter/limit-957 -j DROP + inet6/filter/logaccept-23 -j ACCEPT -Filter 959 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 959 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-958 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-958 + inet/filter/limit-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-958 -j ACCEPT + inet/filter/limit-958 -j TEE --gateway 10.0.0.1 + inet/filter/limit-958 -j TEE --gateway 10.0.0.2 + inet/filter/limit-958 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-958 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-958 + inet6/filter/limit-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-958 -j ACCEPT + inet6/filter/limit-958 -j TEE --gateway fc00::2 + inet6/filter/limit-958 -j DROP -Filter 960 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 960 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"mirror"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-959 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-959 - inet/filter/limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-959 -m limit --limit 1/second -j LOG - inet/filter/limit-959 -j ACCEPT + inet/filter/limit-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-959 -j RETURN + inet/filter/limit-959 -j TEE --gateway 10.0.0.1 + inet/filter/limit-959 -j TEE --gateway 10.0.0.2 + inet/filter/limit-959 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-959 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-959 - inet6/filter/limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-959 -m limit --limit 1/second -j LOG - inet6/filter/limit-959 -j ACCEPT + inet6/filter/limit-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-959 -j RETURN + inet6/filter/limit-959 -j TEE --gateway fc00::2 + inet6/filter/limit-959 -j DROP -Filter 961 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 961 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-960 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-960 - inet/filter/limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-960 -m limit --limit 1/second -j LOG + inet/filter/limit-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-960 -j logaccept-24 + inet/filter/limit-960 -j TEE --gateway 10.0.0.1 + inet/filter/limit-960 -j TEE --gateway 10.0.0.2 + inet/filter/limit-960 -j DROP + inet/filter/logaccept-24 -m limit --limit 1/second -j LOG + inet/filter/logaccept-24 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-960 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-960 - inet6/filter/limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-960 -m limit --limit 1/second -j LOG + inet6/filter/limit-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-960 -j logaccept-24 + inet6/filter/limit-960 -j TEE --gateway fc00::2 + inet6/filter/limit-960 -j DROP + inet6/filter/logaccept-24 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-24 -j ACCEPT -Filter 962 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 962 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-961 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-961 - inet/filter/limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-961 -j ACCEPT + inet/filter/limit-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-961 -j logaccept-25 + inet/filter/limit-961 -j TEE --gateway 10.0.0.1 + inet/filter/limit-961 -j TEE --gateway 10.0.0.2 + inet/filter/limit-961 -j DROP + inet/filter/logaccept-25 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-25 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-25 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-961 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-961 - inet6/filter/limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-961 -j ACCEPT + inet6/filter/limit-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-961 -j logaccept-25 + inet6/filter/limit-961 -j TEE --gateway fc00::2 + inet6/filter/limit-961 -j DROP + inet6/filter/logaccept-25 -j TEE --gateway fc00::2 + inet6/filter/logaccept-25 -j ACCEPT -Filter 963 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 963 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-962 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-962 + inet/filter/limit-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-962 -j ACCEPT + inet/filter/limit-962 -j TEE --gateway 10.0.0.1 + inet/filter/limit-962 -j TEE --gateway 10.0.0.2 + inet/filter/limit-962 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-962 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-962 + inet6/filter/limit-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-962 -j ACCEPT + inet6/filter/limit-962 -j TEE --gateway fc00::2 + inet6/filter/limit-962 -j DROP -Filter 964 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 964 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-963 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-963 - inet/filter/limit-963 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-963 -m limit --limit 12/minute -j ULOG - inet/filter/limit-963 -j ACCEPT + inet/filter/limit-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-963 -j logaccept-26 + inet/filter/limit-963 -j TEE --gateway 10.0.0.1 + inet/filter/limit-963 -j TEE --gateway 10.0.0.2 + inet/filter/limit-963 -j DROP + inet/filter/logaccept-26 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-26 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-963 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-963 - inet6/filter/limit-963 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-963 -j ACCEPT + inet6/filter/limit-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-963 -j logaccept-26 + inet6/filter/limit-963 -j TEE --gateway fc00::2 + inet6/filter/limit-963 -j DROP + inet6/filter/logaccept-26 -j ACCEPT -Filter 965 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 965 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-964 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-964 - inet/filter/limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-964 -m limit --limit 12/minute -j ULOG + inet/filter/limit-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-964 -j ACCEPT + inet/filter/limit-964 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-964 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-964 - inet6/filter/limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-964 -j ACCEPT + inet6/filter/limit-964 -j DROP -Filter 966 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 966 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-965 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-965 - inet/filter/limit-965 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-965 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-965 -j RETURN + inet/filter/limit-965 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-965 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-965 - inet6/filter/limit-965 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-965 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-965 -j RETURN + inet6/filter/limit-965 -j DROP -Filter 967 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 967 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-966 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-966 - inet/filter/limit-966 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-966 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-966 -j logaccept-27 + inet/filter/limit-966 -j DROP + inet/filter/logaccept-27 -m limit --limit 1/second -j LOG + inet/filter/logaccept-27 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-966 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-966 - inet6/filter/limit-966 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-966 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-966 -j logaccept-27 + inet6/filter/limit-966 -j DROP + inet6/filter/logaccept-27 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-27 -j ACCEPT -Filter 968 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 968 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-967 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-967 - inet/filter/limit-967 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-967 -m limit --limit 1/second -j LOG - inet/filter/limit-967 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-967 -j logaccept-28 + inet/filter/limit-967 -j DROP + inet/filter/logaccept-28 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-28 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-28 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-967 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-967 - inet6/filter/limit-967 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-967 -m limit --limit 1/second -j LOG - inet6/filter/limit-967 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-967 -j logaccept-28 + inet6/filter/limit-967 -j DROP + inet6/filter/logaccept-28 -j TEE --gateway fc00::2 + inet6/filter/logaccept-28 -j ACCEPT -Filter 969 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 969 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-968 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-968 - inet/filter/limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-968 -j ACCEPT + inet/filter/limit-968 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-968 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-968 - inet6/filter/limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-968 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-968 -j ACCEPT + inet6/filter/limit-968 -j DROP -Filter 970 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 970 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-969 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-969 - inet/filter/limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-969 - inet6/filter/limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-969 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/filter/limit-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-969 -j logaccept-29 + inet/filter/limit-969 -j DROP + inet/filter/logaccept-29 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-29 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-969 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-969 + inet6/filter/limit-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-969 -j logaccept-29 + inet6/filter/limit-969 -j DROP + inet6/filter/logaccept-29 -j ACCEPT -Filter 971 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 971 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-970 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-970 - inet/filter/limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-970 -j ACCEPT + inet/filter/limit-970 -m limit --limit 12/minute -j ULOG + inet/filter/limit-970 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-970 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-970 - inet6/filter/limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-970 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-970 -j ACCEPT + inet6/filter/limit-970 -j DROP -Filter 972 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 972 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"ulog"},"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-971 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-971 - inet/filter/limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-971 -j RETURN inet/filter/limit-971 -m limit --limit 12/minute -j ULOG - inet/filter/limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-971 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-971 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-971 - inet6/filter/limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-971 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-971 -j RETURN + inet6/filter/limit-971 -j DROP -Filter 973 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 973 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"log":true,"out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-972 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-972 - inet/filter/limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-972 -j logaccept-30 + inet/filter/limit-972 -m limit --limit 12/minute -j ULOG + inet/filter/limit-972 -j DROP + inet/filter/logaccept-30 -m limit --limit 1/second -j LOG + inet/filter/logaccept-30 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-972 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-972 - inet6/filter/limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-972 -j logaccept-30 + inet6/filter/limit-972 -j DROP + inet6/filter/logaccept-30 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-30 -j ACCEPT -Filter 974 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 974 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-973 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-973 - inet/filter/limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-973 -j ACCEPT + inet/filter/limit-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-973 -j logaccept-31 + inet/filter/limit-973 -m limit --limit 12/minute -j ULOG + inet/filter/limit-973 -j DROP + inet/filter/logaccept-31 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-31 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-31 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-973 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-973 - inet6/filter/limit-973 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-973 -j ACCEPT + inet6/filter/limit-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-973 -j logaccept-31 + inet6/filter/limit-973 -j DROP + inet6/filter/logaccept-31 -j TEE --gateway fc00::2 + inet6/filter/logaccept-31 -j ACCEPT -Filter 975 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 975 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-974 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-974 + inet/filter/limit-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-974 -j ACCEPT + inet/filter/limit-974 -m limit --limit 12/minute -j ULOG + inet/filter/limit-974 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-974 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-974 + inet6/filter/limit-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-974 -j ACCEPT + inet6/filter/limit-974 -j DROP -Filter 976 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 976 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-975 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-975 - inet/filter/limit-975 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-975 -m limit --limit 1/second -j LOG - inet/filter/limit-975 -j ACCEPT + inet/filter/limit-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-975 -j logaccept-32 + inet/filter/limit-975 -m limit --limit 12/minute -j ULOG + inet/filter/limit-975 -j DROP + inet/filter/logaccept-32 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-32 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-975 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-975 - inet6/filter/limit-975 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-975 -m limit --limit 1/second -j LOG - inet6/filter/limit-975 -j ACCEPT + inet6/filter/limit-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-975 -j logaccept-32 + inet6/filter/limit-975 -j DROP + inet6/filter/logaccept-32 -j ACCEPT -Filter 977 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 977 {"conn-limit":1,"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-976 - inet/filter/limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-976 -m limit --limit 1/second -j LOG + inet/filter/limit-976 -m recent --name limit-976 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-550 + inet/filter/limit-976 -m recent --name limit-976 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-550 -m limit --limit 1/second -j LOG + inet/filter/logdrop-550 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-976 - inet6/filter/limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-976 -m limit --limit 1/second -j LOG + inet6/filter/limit-976 -m recent --name limit-976 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-550 + inet6/filter/limit-976 -m recent --name limit-976 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-550 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-550 -j DROP -Filter 978 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 978 {"action":"pass","conn-limit":1,"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-977 - inet/filter/limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-977 -j ACCEPT + inet/filter/limit-977 -m recent --name limit-977 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-551 + inet/filter/limit-977 -m recent --name limit-977 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-551 -m limit --limit 1/second -j LOG + inet/filter/logdrop-551 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-977 - inet6/filter/limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-977 -j ACCEPT + inet6/filter/limit-977 -m recent --name limit-977 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-551 + inet6/filter/limit-977 -m recent --name limit-977 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-551 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-551 -j DROP -Filter 979 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 979 {"conn-limit":1,"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-978 + inet/filter/limit-978 -m recent --name limit-978 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-552 + inet/filter/limit-978 -m limit --limit 1/second -j LOG + inet/filter/limit-978 -m recent --name limit-978 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-552 -m limit --limit 1/second -j LOG + inet/filter/logdrop-552 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-978 + inet6/filter/limit-978 -m recent --name limit-978 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-552 + inet6/filter/limit-978 -m limit --limit 1/second -j LOG + inet6/filter/limit-978 -m recent --name limit-978 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-552 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-552 -j DROP -Filter 980 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 980 {"action":"pass","conn-limit":1,"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-979 - inet/filter/limit-979 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-979 -m limit --limit 12/minute -j ULOG - inet/filter/limit-979 -j ACCEPT + inet/filter/limit-979 -m recent --name limit-979 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-553 + inet/filter/limit-979 -m recent --name limit-979 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-553 -m limit --limit 1/second -j LOG + inet/filter/logdrop-553 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-979 - inet6/filter/limit-979 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-979 -j ACCEPT + inet6/filter/limit-979 -m recent --name limit-979 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-553 + inet6/filter/limit-979 -m recent --name limit-979 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-553 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-553 -j DROP -Filter 981 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 981 {"conn-limit":1,"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-980 - inet/filter/limit-980 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-980 -m limit --limit 12/minute -j ULOG + inet/filter/limit-980 -m recent --name limit-980 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-554 + inet/filter/limit-980 -j TEE --gateway 10.0.0.1 + inet/filter/limit-980 -j TEE --gateway 10.0.0.2 + inet/filter/limit-980 -m recent --name limit-980 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-554 -m limit --limit 1/second -j LOG + inet/filter/logdrop-554 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-980 - inet6/filter/limit-980 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-980 -m recent --name limit-980 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-554 + inet6/filter/limit-980 -j TEE --gateway fc00::2 + inet6/filter/limit-980 -m recent --name limit-980 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-554 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-554 -j DROP -Filter 982 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 982 {"action":"pass","conn-limit":1,"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-981 - inet/filter/limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-555 + inet/filter/limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-555 -m limit --limit 1/second -j LOG + inet/filter/logdrop-555 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-981 - inet6/filter/limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-981 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-981 -m recent --name limit-981 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-555 + inet6/filter/limit-981 -m recent --name limit-981 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-555 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-555 -j DROP -Filter 983 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 983 {"conn-limit":1,"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-982 - inet/filter/limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-982 -m recent --name limit-982 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-556 + inet/filter/limit-982 -m recent --name limit-982 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-556 -m limit --limit 1/second -j LOG + inet/filter/logdrop-556 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-982 - inet6/filter/limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-982 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-982 -m recent --name limit-982 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-556 + inet6/filter/limit-982 -m recent --name limit-982 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-556 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-556 -j DROP -Filter 984 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 984 {"action":"pass","conn-limit":1,"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-983 - inet/filter/limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-983 -m limit --limit 1/second -j LOG - inet/filter/limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-983 -m recent --name limit-983 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-557 + inet/filter/limit-983 -m recent --name limit-983 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-557 -m limit --limit 1/second -j LOG + inet/filter/logdrop-557 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-983 - inet6/filter/limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-983 -m limit --limit 1/second -j LOG - inet6/filter/limit-983 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-983 -m recent --name limit-983 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-557 + inet6/filter/limit-983 -m recent --name limit-983 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-557 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-557 -j DROP -Filter 985 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 985 {"conn-limit":1,"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-984 - inet/filter/limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-984 -m recent --name limit-984 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-558 + inet/filter/limit-984 -m limit --limit 12/minute -j ULOG + inet/filter/limit-984 -m recent --name limit-984 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-558 -m limit --limit 1/second -j LOG + inet/filter/logdrop-558 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-984 - inet6/filter/limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-984 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-984 -m recent --name limit-984 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-558 + inet6/filter/limit-984 -m recent --name limit-984 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-558 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-558 -j DROP -Filter 986 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 986 {"action":"pass","conn-limit":1,"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-985 - inet/filter/limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-985 -m recent --name limit-985 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-559 + inet/filter/limit-985 -m recent --name limit-985 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-559 -m limit --limit 1/second -j LOG + inet/filter/logdrop-559 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-985 - inet6/filter/limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-985 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-985 -m recent --name limit-985 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-559 + inet6/filter/logdrop-559 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-559 -j DROP -Filter 987 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 987 {"conn-limit":{"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-986 - inet/filter/limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-986 -m recent --name limit-986 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-986 -m recent --name limit-986 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-986 - inet6/filter/limit-986 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-986 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-986 -m recent --name limit-986 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-986 -m recent --name limit-986 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 988 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 988 {"action":"pass","conn-limit":{"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-987 - inet/filter/limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-987 -m limit --limit 12/minute -j ULOG - inet/filter/limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-987 -m recent --name limit-987 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-987 -m recent --name limit-987 --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-987 - inet6/filter/limit-987 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-987 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-987 -m recent --name limit-987 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-987 -m recent --name limit-987 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 989 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 989 {"conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-988 - inet/filter/limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-988 -m recent --name limit-988 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-988 -m limit --limit 1/second -j LOG + inet/filter/limit-988 -m recent --name limit-988 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-988 - inet6/filter/limit-988 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-988 -m recent --name limit-988 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-988 -m limit --limit 1/second -j LOG + inet6/filter/limit-988 -m recent --name limit-988 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 990 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 990 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-989 - inet/filter/limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-989 -j ACCEPT + inet/filter/limit-989 -m recent --name limit-989 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-989 -m recent --name limit-989 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-989 - inet6/filter/limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-989 -j ACCEPT + inet6/filter/limit-989 -m recent --name limit-989 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-989 -m recent --name limit-989 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 991 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 991 {"conn-limit":{"log":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-990 + inet/filter/limit-990 -m recent --name limit-990 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-990 -j TEE --gateway 10.0.0.1 + inet/filter/limit-990 -j TEE --gateway 10.0.0.2 + inet/filter/limit-990 -m recent --name limit-990 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-990 + inet6/filter/limit-990 -m recent --name limit-990 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-990 -j TEE --gateway fc00::2 + inet6/filter/limit-990 -m recent --name limit-990 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 992 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 992 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-991 - inet/filter/limit-991 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-991 -m limit --limit 1/second -j LOG - inet/filter/limit-991 -j ACCEPT + inet/filter/limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-991 - inet6/filter/limit-991 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-991 -m limit --limit 1/second -j LOG - inet6/filter/limit-991 -j ACCEPT + inet6/filter/limit-991 -m recent --name limit-991 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-991 -m recent --name limit-991 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 993 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 993 {"conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-992 - inet/filter/limit-992 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-992 -m limit --limit 1/second -j LOG + inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-992 - inet6/filter/limit-992 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-992 -m limit --limit 1/second -j LOG + inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 994 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 994 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-993 - inet/filter/limit-993 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-993 -j ACCEPT + inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-993 - inet6/filter/limit-993 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-993 -j ACCEPT + inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 995 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 995 {"conn-limit":{"log":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-994 + inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-994 -m limit --limit 12/minute -j ULOG + inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-994 + inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 996 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 996 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-995 - inet/filter/limit-995 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-995 -m limit --limit 12/minute -j ULOG - inet/filter/limit-995 -j ACCEPT + inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-995 - inet6/filter/limit-995 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-995 -j ACCEPT + inet6/filter/limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 997 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 997 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-996 - inet/filter/limit-996 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-996 -m limit --limit 12/minute -j ULOG + inet/filter/limit-996 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-996 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-996 - inet6/filter/limit-996 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-996 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-996 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 998 {"conn-limit":{"interval":5},"in":"_fw","out":"B"} +Filter 998 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-997 - inet/filter/limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-448 - inet/filter/limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-448 -m limit --limit 1/second -j LOG - inet/filter/logdrop-448 -j DROP + inet/filter/limit-997 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-997 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-997 - inet6/filter/limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-448 - inet6/filter/limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-448 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-448 -j DROP + inet6/filter/limit-997 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-997 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 999 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","out":"B"} +Filter 999 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-998 - inet/filter/limit-998 -m recent --name limit-998 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-449 - inet/filter/limit-998 -m recent --name limit-998 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-449 -m limit --limit 1/second -j LOG - inet/filter/logdrop-449 -j DROP + inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-998 -m limit --limit 1/second -j LOG + inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-998 - inet6/filter/limit-998 -m recent --name limit-998 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-449 - inet6/filter/limit-998 -m recent --name limit-998 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-449 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-449 -j DROP + inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-998 -m limit --limit 1/second -j LOG + inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1000 {"conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} +Filter 1000 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-999 - inet/filter/limit-999 -m recent --name limit-999 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-450 - inet/filter/limit-999 -m limit --limit 1/second -j LOG - inet/filter/limit-999 -m recent --name limit-999 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-450 -m limit --limit 1/second -j LOG - inet/filter/logdrop-450 -j DROP + inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-999 - inet6/filter/limit-999 -m recent --name limit-999 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-450 - inet6/filter/limit-999 -m limit --limit 1/second -j LOG - inet6/filter/limit-999 -m recent --name limit-999 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-450 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-450 -j DROP + inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1001 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} +Filter 1001 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1000 - inet/filter/limit-1000 -m recent --name limit-1000 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-451 - inet/filter/limit-1000 -m recent --name limit-1000 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-451 -m limit --limit 1/second -j LOG - inet/filter/logdrop-451 -j DROP + inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1000 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1000 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1000 - inet6/filter/limit-1000 -m recent --name limit-1000 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-451 - inet6/filter/limit-1000 -m recent --name limit-1000 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-451 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-451 -j DROP + inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1000 -j TEE --gateway fc00::2 + inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1002 {"conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} +Filter 1002 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1001 - inet/filter/limit-1001 -m recent --name limit-1001 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-452 - inet/filter/limit-1001 -m recent --name limit-1001 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-452 -m limit --limit 1/second -j LOG - inet/filter/logdrop-452 -j DROP + inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1001 - inet6/filter/limit-1001 -m recent --name limit-1001 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-452 - inet6/filter/limit-1001 -m recent --name limit-1001 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-452 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-452 -j DROP + inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 1003 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} +Filter 1003 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1002 - inet/filter/limit-1002 -m recent --name limit-1002 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-453 - inet/filter/limit-1002 -m recent --name limit-1002 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-453 -m limit --limit 1/second -j LOG - inet/filter/logdrop-453 -j DROP + inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1002 - inet6/filter/limit-1002 -m recent --name limit-1002 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-453 - inet6/filter/limit-1002 -m recent --name limit-1002 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-453 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-453 -j DROP + inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1004 {"conn-limit":{"interval":5},"in":"_fw","log":"ulog","out":"B"} +Filter 1004 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1003 - inet/filter/limit-1003 -m recent --name limit-1003 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-454 - inet/filter/limit-1003 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1003 -m recent --name limit-1003 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-454 -m limit --limit 1/second -j LOG - inet/filter/logdrop-454 -j DROP + inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1003 - inet6/filter/limit-1003 -m recent --name limit-1003 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-454 - inet6/filter/limit-1003 -m recent --name limit-1003 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-454 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-454 -j DROP + inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1005 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"ulog","out":"B"} +Filter 1005 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1004 - inet/filter/limit-1004 -m recent --name limit-1004 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-455 - inet/filter/limit-1004 -m recent --name limit-1004 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-455 -m limit --limit 1/second -j LOG - inet/filter/logdrop-455 -j DROP + inet/filter/limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1004 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1004 - inet6/filter/limit-1004 -m recent --name limit-1004 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-455 - inet6/filter/logdrop-455 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-455 -j DROP + inet6/filter/limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1006 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} +Filter 1006 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1005 - inet/filter/limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-456 - inet/filter/limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-456 -m limit --limit 1/second -j LOG - inet/filter/logdrop-456 -j DROP + inet/filter/limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1005 - inet6/filter/limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-456 - inet6/filter/limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-456 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-456 -j DROP + inet6/filter/limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 1007 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} +Filter 1007 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1006 - inet/filter/limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-457 - inet/filter/limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-457 -m limit --limit 1/second -j LOG - inet/filter/logdrop-457 -j DROP + inet/filter/limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1006 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1006 - inet6/filter/limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-457 - inet6/filter/limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-457 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-457 -j DROP + inet6/filter/limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1006 -j ACCEPT -Filter 1008 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1008 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1007 - inet/filter/limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-458 - inet/filter/limit-1007 -m limit --limit 1/second -j LOG - inet/filter/limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-458 -m limit --limit 1/second -j LOG - inet/filter/logdrop-458 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1007 - inet6/filter/limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-458 - inet6/filter/limit-1007 -m limit --limit 1/second -j LOG - inet6/filter/limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-458 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-458 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1009 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1009 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1008 - inet/filter/limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-459 - inet/filter/limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-459 -m limit --limit 1/second -j LOG - inet/filter/logdrop-459 -j DROP + inet/filter/limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1008 -m limit --limit 1/second -j LOG + inet/filter/limit-1008 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1008 - inet6/filter/limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-459 - inet6/filter/limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-459 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-459 -j DROP + inet6/filter/limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1008 -m limit --limit 1/second -j LOG + inet6/filter/limit-1008 -j ACCEPT -Filter 1010 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1010 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1009 - inet/filter/limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-460 - inet/filter/limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-460 -m limit --limit 1/second -j LOG - inet/filter/logdrop-460 -j DROP + inet/filter/limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1009 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1009 - inet6/filter/limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-460 - inet6/filter/limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-460 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-460 -j DROP + inet6/filter/limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1009 -m limit --limit 1/second -j LOG -Filter 1011 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1011 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1010 - inet/filter/limit-1010 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-461 - inet/filter/limit-1010 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-461 -m limit --limit 1/second -j LOG - inet/filter/logdrop-461 -j DROP + inet/filter/limit-1010 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1010 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1010 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1010 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1010 - inet6/filter/limit-1010 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-461 - inet6/filter/limit-1010 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-461 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-461 -j DROP + inet6/filter/limit-1010 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1010 -j TEE --gateway fc00::2 + inet6/filter/limit-1010 -j ACCEPT -Filter 1012 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1012 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1011 - inet/filter/limit-1011 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-462 - inet/filter/limit-1011 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1011 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-462 -m limit --limit 1/second -j LOG - inet/filter/logdrop-462 -j DROP + inet/filter/limit-1011 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1011 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1011 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1011 - inet6/filter/limit-1011 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-462 - inet6/filter/limit-1011 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-462 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-462 -j DROP + inet6/filter/limit-1011 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1011 -j TEE --gateway fc00::2 -Filter 1013 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1013 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1012 - inet/filter/limit-1012 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-463 - inet/filter/limit-1012 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-463 -m limit --limit 1/second -j LOG - inet/filter/logdrop-463 -j DROP + inet/filter/limit-1012 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1012 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1012 - inet6/filter/limit-1012 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-463 - inet6/filter/logdrop-463 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-463 -j DROP + inet6/filter/limit-1012 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1012 -j ACCEPT -Filter 1014 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 1014 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1013 - inet/filter/limit-1013 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-464 - inet/filter/limit-1013 -j ACCEPT - inet/filter/logdrop-464 -m limit --limit 1/second -j LOG - inet/filter/logdrop-464 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1013 - inet6/filter/limit-1013 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-464 - inet6/filter/limit-1013 -j ACCEPT - inet6/filter/logdrop-464 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-464 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1015 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 1015 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-465 - inet/filter/logdrop-465 -m limit --limit 1/second -j LOG - inet/filter/logdrop-465 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-465 - inet6/filter/logdrop-465 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-465 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1014 + inet/filter/limit-1014 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1014 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1014 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1014 + inet6/filter/limit-1014 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1014 -j ACCEPT -Filter 1016 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1016 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1015 - inet/filter/limit-1015 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-466 - inet/filter/limit-1015 -m limit --limit 1/second -j LOG - inet/filter/limit-1015 -j ACCEPT - inet/filter/logdrop-466 -m limit --limit 1/second -j LOG - inet/filter/logdrop-466 -j DROP + inet/filter/limit-1015 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1015 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1015 - inet6/filter/limit-1015 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-466 - inet6/filter/limit-1015 -m limit --limit 1/second -j LOG - inet6/filter/limit-1015 -j ACCEPT - inet6/filter/logdrop-466 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-466 -j DROP + inet6/filter/limit-1015 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1017 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1017 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1016 - inet/filter/limit-1016 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-467 - inet/filter/limit-1016 -m limit --limit 1/second -j LOG - inet/filter/logdrop-467 -m limit --limit 1/second -j LOG - inet/filter/logdrop-467 -j DROP + inet/filter/limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1016 - inet6/filter/limit-1016 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-467 - inet6/filter/limit-1016 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-467 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-467 -j DROP + inet6/filter/limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1018 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1018 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1017 - inet/filter/limit-1017 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-468 - inet/filter/limit-1017 -j ACCEPT - inet/filter/logdrop-468 -m limit --limit 1/second -j LOG - inet/filter/logdrop-468 -j DROP + inet/filter/limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1017 - inet6/filter/limit-1017 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-468 - inet6/filter/limit-1017 -j ACCEPT - inet6/filter/logdrop-468 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-468 -j DROP + inet6/filter/limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1019 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1019 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-469 - inet/filter/logdrop-469 -m limit --limit 1/second -j LOG - inet/filter/logdrop-469 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-469 - inet6/filter/logdrop-469 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-469 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1018 + inet/filter/limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1018 -m limit --limit 1/second -j LOG + inet/filter/limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1018 + inet6/filter/limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1018 -m limit --limit 1/second -j LOG + inet6/filter/limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1020 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1020 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1019 - inet/filter/limit-1019 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-470 - inet/filter/limit-1019 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1019 -j ACCEPT - inet/filter/logdrop-470 -m limit --limit 1/second -j LOG - inet/filter/logdrop-470 -j DROP + inet/filter/limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1019 - inet6/filter/limit-1019 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-470 - inet6/filter/limit-1019 -j ACCEPT - inet6/filter/logdrop-470 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-470 -j DROP + inet6/filter/limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1021 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1021 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1020 - inet/filter/limit-1020 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-471 - inet/filter/limit-1020 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-471 -m limit --limit 1/second -j LOG - inet/filter/logdrop-471 -j DROP + inet/filter/limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1020 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1020 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1020 - inet6/filter/limit-1020 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-471 - inet6/filter/logdrop-471 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-471 -j DROP + inet6/filter/limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1020 -j TEE --gateway fc00::2 + inet6/filter/limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1022 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} +Filter 1022 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1021 - inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-472 - inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-472 -m limit --limit 1/second -j LOG - inet/filter/logdrop-472 -j DROP + inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1021 - inet6/filter/limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-472 - inet6/filter/limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-472 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-472 -j DROP + inet6/filter/limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 1023 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} +Filter 1023 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1022 - inet/filter/limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-473 - inet/filter/limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-473 -m limit --limit 1/second -j LOG - inet/filter/logdrop-473 -j DROP + inet/filter/limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1022 - inet6/filter/limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-473 - inet6/filter/limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-473 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-473 -j DROP + inet6/filter/limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1024 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1024 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1023 - inet/filter/limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-474 - inet/filter/limit-1023 -m limit --limit 1/second -j LOG - inet/filter/limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-474 -m limit --limit 1/second -j LOG - inet/filter/logdrop-474 -j DROP + inet/filter/limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1023 - inet6/filter/limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-474 - inet6/filter/limit-1023 -m limit --limit 1/second -j LOG - inet6/filter/limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-474 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-474 -j DROP + inet6/filter/limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1025 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1025 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1024 - inet/filter/limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-475 - inet/filter/limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-475 -m limit --limit 1/second -j LOG - inet/filter/logdrop-475 -j DROP + inet/filter/limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1024 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1024 - inet6/filter/limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-475 - inet6/filter/limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-475 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-475 -j DROP + inet6/filter/limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1026 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1026 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1025 - inet/filter/limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-476 - inet/filter/limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-476 -m limit --limit 1/second -j LOG - inet/filter/logdrop-476 -j DROP + inet/filter/limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1025 - inet6/filter/limit-1025 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-476 - inet6/filter/limit-1025 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-476 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-476 -j DROP + inet6/filter/limit-1025 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 1027 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1027 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1026 - inet/filter/limit-1026 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-477 - inet/filter/limit-1026 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-477 -m limit --limit 1/second -j LOG - inet/filter/logdrop-477 -j DROP + inet/filter/limit-1026 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1026 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1026 - inet6/filter/limit-1026 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-477 - inet6/filter/limit-1026 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-477 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-477 -j DROP + inet6/filter/limit-1026 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1026 -j ACCEPT -Filter 1028 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1028 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1027 - inet/filter/limit-1027 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-478 - inet/filter/limit-1027 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1027 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-478 -m limit --limit 1/second -j LOG - inet/filter/logdrop-478 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1027 - inet6/filter/limit-1027 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-478 - inet6/filter/limit-1027 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-478 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-478 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1029 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1029 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1028 - inet/filter/limit-1028 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-479 - inet/filter/limit-1028 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-479 -m limit --limit 1/second -j LOG - inet/filter/logdrop-479 -j DROP + inet/filter/limit-1028 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1028 -m limit --limit 1/second -j LOG + inet/filter/limit-1028 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1028 - inet6/filter/limit-1028 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-479 - inet6/filter/logdrop-479 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-479 -j DROP + inet6/filter/limit-1028 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1028 -m limit --limit 1/second -j LOG + inet6/filter/limit-1028 -j ACCEPT -Filter 1030 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 1030 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1029 - inet/filter/limit-1029 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-480 - inet/filter/limit-1029 -j ACCEPT - inet/filter/logdrop-480 -m limit --limit 1/second -j LOG - inet/filter/logdrop-480 -j DROP + inet/filter/limit-1029 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1029 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1029 - inet6/filter/limit-1029 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-480 - inet6/filter/limit-1029 -j ACCEPT - inet6/filter/logdrop-480 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-480 -j DROP + inet6/filter/limit-1029 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1029 -m limit --limit 1/second -j LOG -Filter 1031 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 1031 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-481 - inet/filter/logdrop-481 -m limit --limit 1/second -j LOG - inet/filter/logdrop-481 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-481 - inet6/filter/logdrop-481 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-481 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1030 + inet/filter/limit-1030 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1030 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1030 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1030 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1030 + inet6/filter/limit-1030 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1030 -j TEE --gateway fc00::2 + inet6/filter/limit-1030 -j ACCEPT -Filter 1032 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1032 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1031 - inet/filter/limit-1031 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-482 - inet/filter/limit-1031 -m limit --limit 1/second -j LOG - inet/filter/limit-1031 -j ACCEPT - inet/filter/logdrop-482 -m limit --limit 1/second -j LOG - inet/filter/logdrop-482 -j DROP + inet/filter/limit-1031 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1031 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1031 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1031 - inet6/filter/limit-1031 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-482 - inet6/filter/limit-1031 -m limit --limit 1/second -j LOG - inet6/filter/limit-1031 -j ACCEPT - inet6/filter/logdrop-482 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-482 -j DROP + inet6/filter/limit-1031 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1031 -j TEE --gateway fc00::2 -Filter 1033 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1033 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1032 - inet/filter/limit-1032 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-483 - inet/filter/limit-1032 -m limit --limit 1/second -j LOG - inet/filter/logdrop-483 -m limit --limit 1/second -j LOG - inet/filter/logdrop-483 -j DROP + inet/filter/limit-1032 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1032 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1032 - inet6/filter/limit-1032 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-483 - inet6/filter/limit-1032 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-483 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-483 -j DROP + inet6/filter/limit-1032 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1032 -j ACCEPT -Filter 1034 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1034 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1033 - inet/filter/limit-1033 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-484 - inet/filter/limit-1033 -j ACCEPT - inet/filter/logdrop-484 -m limit --limit 1/second -j LOG - inet/filter/logdrop-484 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1033 - inet6/filter/limit-1033 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-484 - inet6/filter/limit-1033 -j ACCEPT - inet6/filter/logdrop-484 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-484 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1035 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1035 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-485 - inet/filter/logdrop-485 -m limit --limit 1/second -j LOG - inet/filter/logdrop-485 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-485 - inet6/filter/logdrop-485 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-485 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1034 + inet/filter/limit-1034 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1034 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1034 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1034 + inet6/filter/limit-1034 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1034 -j ACCEPT -Filter 1036 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1036 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1035 - inet/filter/limit-1035 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-486 + inet/filter/limit-1035 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1035 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1035 -j ACCEPT - inet/filter/logdrop-486 -m limit --limit 1/second -j LOG - inet/filter/logdrop-486 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1035 - inet6/filter/limit-1035 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-486 - inet6/filter/limit-1035 -j ACCEPT - inet6/filter/logdrop-486 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-486 -j DROP + inet6/filter/limit-1035 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1037 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1037 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1036 - inet/filter/limit-1036 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-487 - inet/filter/limit-1036 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-487 -m limit --limit 1/second -j LOG - inet/filter/logdrop-487 -j DROP + inet/filter/limit-1036 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1036 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1036 - inet6/filter/limit-1036 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-487 - inet6/filter/logdrop-487 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-487 -j DROP + inet6/filter/limit-1036 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1036 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 1038 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} +Filter 1038 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1037 - inet/filter/limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-488 - inet/filter/limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-488 -m limit --limit 1/second -j LOG - inet/filter/logdrop-488 -j DROP + inet/filter/limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1037 - inet6/filter/limit-1037 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-488 - inet6/filter/limit-1037 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-488 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-488 -j DROP + inet6/filter/limit-1037 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1037 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1039 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} +Filter 1039 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1038 - inet/filter/limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-489 - inet/filter/limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-489 -m limit --limit 1/second -j LOG - inet/filter/logdrop-489 -j DROP + inet/filter/limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1038 -m limit --limit 1/second -j LOG + inet/filter/limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1038 - inet6/filter/limit-1038 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-489 - inet6/filter/limit-1038 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-489 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-489 -j DROP + inet6/filter/limit-1038 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1038 -m limit --limit 1/second -j LOG + inet6/filter/limit-1038 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 1040 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1040 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1039 - inet/filter/limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-490 - inet/filter/limit-1039 -m limit --limit 1/second -j LOG - inet/filter/limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-490 -m limit --limit 1/second -j LOG - inet/filter/logdrop-490 -j DROP + inet/filter/limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1039 - inet6/filter/limit-1039 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-490 - inet6/filter/limit-1039 -m limit --limit 1/second -j LOG - inet6/filter/limit-1039 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-490 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-490 -j DROP + inet6/filter/limit-1039 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1039 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1041 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1041 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1040 - inet/filter/limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-491 - inet/filter/limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-491 -m limit --limit 1/second -j LOG - inet/filter/logdrop-491 -j DROP + inet/filter/limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1040 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1040 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1040 - inet6/filter/limit-1040 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-491 - inet6/filter/limit-1040 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-491 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-491 -j DROP + inet6/filter/limit-1040 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1040 -j TEE --gateway fc00::2 + inet6/filter/limit-1040 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 1042 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1042 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1041 - inet/filter/limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-492 - inet/filter/limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-492 -m limit --limit 1/second -j LOG - inet/filter/logdrop-492 -j DROP + inet/filter/limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1041 - inet6/filter/limit-1041 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-492 - inet6/filter/limit-1041 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-492 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-492 -j DROP + inet6/filter/limit-1041 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1041 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 1043 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1043 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1042 - inet/filter/limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-493 - inet/filter/limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-493 -m limit --limit 1/second -j LOG - inet/filter/logdrop-493 -j DROP + inet/filter/limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1042 - inet6/filter/limit-1042 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-493 - inet6/filter/limit-1042 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-493 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-493 -j DROP + inet6/filter/limit-1042 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1042 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 1044 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1044 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1043 - inet/filter/limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-494 - inet/filter/limit-1043 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-494 -m limit --limit 1/second -j LOG - inet/filter/logdrop-494 -j DROP + inet/filter/limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1043 - inet6/filter/limit-1043 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-494 - inet6/filter/limit-1043 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-494 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-494 -j DROP + inet6/filter/limit-1043 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1043 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1045 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1045 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1044 - inet/filter/limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-495 - inet/filter/limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-495 -m limit --limit 1/second -j LOG - inet/filter/logdrop-495 -j DROP + inet/filter/limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1044 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1044 - inet6/filter/limit-1044 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-495 - inet6/filter/logdrop-495 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-495 -j DROP + inet6/filter/limit-1044 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1044 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 1046 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 1046 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1045 - inet/filter/limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-496 - inet/filter/limit-1045 -j ACCEPT - inet/filter/logdrop-496 -m limit --limit 1/second -j LOG - inet/filter/logdrop-496 -j DROP + inet/filter/limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1045 - inet6/filter/limit-1045 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-496 - inet6/filter/limit-1045 -j ACCEPT - inet6/filter/logdrop-496 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-496 -j DROP + inet6/filter/limit-1045 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -Filter 1047 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 1047 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-497 - inet/filter/logdrop-497 -m limit --limit 1/second -j LOG - inet/filter/logdrop-497 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-497 - inet6/filter/logdrop-497 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-497 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1046 + inet/filter/limit-1046 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1046 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1046 + inet6/filter/limit-1046 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1046 -j ACCEPT -Filter 1048 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1048 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1047 - inet/filter/limit-1047 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-498 - inet/filter/limit-1047 -m limit --limit 1/second -j LOG - inet/filter/limit-1047 -j ACCEPT - inet/filter/logdrop-498 -m limit --limit 1/second -j LOG - inet/filter/logdrop-498 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1047 - inet6/filter/limit-1047 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-498 - inet6/filter/limit-1047 -m limit --limit 1/second -j LOG - inet6/filter/limit-1047 -j ACCEPT - inet6/filter/logdrop-498 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-498 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1049 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1049 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1048 - inet/filter/limit-1048 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-499 + inet/filter/limit-1048 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1048 -m limit --limit 1/second -j LOG - inet/filter/logdrop-499 -m limit --limit 1/second -j LOG - inet/filter/logdrop-499 -j DROP + inet/filter/limit-1048 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1048 - inet6/filter/limit-1048 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-499 + inet6/filter/limit-1048 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1048 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-499 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-499 -j DROP + inet6/filter/limit-1048 -j ACCEPT -Filter 1050 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1050 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1049 - inet/filter/limit-1049 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-500 - inet/filter/limit-1049 -j ACCEPT - inet/filter/logdrop-500 -m limit --limit 1/second -j LOG - inet/filter/logdrop-500 -j DROP + inet/filter/limit-1049 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1049 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1049 - inet6/filter/limit-1049 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-500 - inet6/filter/limit-1049 -j ACCEPT - inet6/filter/logdrop-500 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-500 -j DROP + inet6/filter/limit-1049 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1049 -m limit --limit 1/second -j LOG -Filter 1051 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1051 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-501 - inet/filter/logdrop-501 -m limit --limit 1/second -j LOG - inet/filter/logdrop-501 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-501 - inet6/filter/logdrop-501 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-501 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1050 + inet/filter/limit-1050 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1050 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1050 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1050 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1050 + inet6/filter/limit-1050 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1050 -j TEE --gateway fc00::2 + inet6/filter/limit-1050 -j ACCEPT -Filter 1052 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1052 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1051 - inet/filter/limit-1051 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-502 - inet/filter/limit-1051 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1051 -j ACCEPT - inet/filter/logdrop-502 -m limit --limit 1/second -j LOG - inet/filter/logdrop-502 -j DROP + inet/filter/limit-1051 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1051 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1051 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1051 - inet6/filter/limit-1051 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-502 - inet6/filter/limit-1051 -j ACCEPT - inet6/filter/logdrop-502 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-502 -j DROP + inet6/filter/limit-1051 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1051 -j TEE --gateway fc00::2 -Filter 1053 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1053 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1052 - inet/filter/limit-1052 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-503 - inet/filter/limit-1052 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-503 -m limit --limit 1/second -j LOG - inet/filter/logdrop-503 -j DROP + inet/filter/limit-1052 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1052 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1052 - inet6/filter/limit-1052 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-503 - inet6/filter/logdrop-503 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-503 -j DROP + inet6/filter/limit-1052 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1052 -j ACCEPT -Filter 1054 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} +Filter 1054 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1053 - inet/filter/limit-1053 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-504 - inet/filter/limit-1053 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-504 -m limit --limit 1/second -j LOG - inet/filter/logdrop-504 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1053 - inet6/filter/limit-1053 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-504 - inet6/filter/limit-1053 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-504 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-504 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1055 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} +Filter 1055 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1054 - inet/filter/limit-1054 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-505 - inet/filter/limit-1054 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-505 -m limit --limit 1/second -j LOG - inet/filter/logdrop-505 -j DROP + inet/filter/limit-1054 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1054 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1054 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1054 - inet6/filter/limit-1054 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-505 - inet6/filter/limit-1054 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-505 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-505 -j DROP + inet6/filter/limit-1054 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1054 -j ACCEPT -Filter 1056 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1056 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1055 - inet/filter/limit-1055 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-506 - inet/filter/limit-1055 -m limit --limit 1/second -j LOG - inet/filter/limit-1055 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-506 -m limit --limit 1/second -j LOG - inet/filter/logdrop-506 -j DROP + inet/filter/limit-1055 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1055 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1055 - inet6/filter/limit-1055 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-506 - inet6/filter/limit-1055 -m limit --limit 1/second -j LOG - inet6/filter/limit-1055 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-506 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-506 -j DROP + inet6/filter/limit-1055 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1057 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1057 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1056 - inet/filter/limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-507 - inet/filter/limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-507 -m limit --limit 1/second -j LOG - inet/filter/logdrop-507 -j DROP + inet/filter/limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1056 - inet6/filter/limit-1056 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-507 - inet6/filter/limit-1056 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-507 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-507 -j DROP + inet6/filter/limit-1056 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1056 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 1058 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1058 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1057 - inet/filter/limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-508 - inet/filter/limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-508 -m limit --limit 1/second -j LOG - inet/filter/logdrop-508 -j DROP + inet/filter/limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1057 - inet6/filter/limit-1057 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-508 - inet6/filter/limit-1057 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-508 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-508 -j DROP + inet6/filter/limit-1057 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1057 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1059 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1059 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1058 - inet/filter/limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-509 - inet/filter/limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-509 -m limit --limit 1/second -j LOG - inet/filter/logdrop-509 -j DROP + inet/filter/limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1058 -m limit --limit 1/second -j LOG + inet/filter/limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1058 - inet6/filter/limit-1058 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-509 - inet6/filter/limit-1058 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-509 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-509 -j DROP + inet6/filter/limit-1058 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1058 -m limit --limit 1/second -j LOG + inet6/filter/limit-1058 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 1060 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1060 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1059 - inet/filter/limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-510 - inet/filter/limit-1059 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-510 -m limit --limit 1/second -j LOG - inet/filter/logdrop-510 -j DROP + inet/filter/limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1059 - inet6/filter/limit-1059 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-510 - inet6/filter/limit-1059 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-510 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-510 -j DROP + inet6/filter/limit-1059 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1059 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1061 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1061 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1060 - inet/filter/limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-511 - inet/filter/limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-511 -m limit --limit 1/second -j LOG - inet/filter/logdrop-511 -j DROP + inet/filter/limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1060 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1060 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1060 - inet6/filter/limit-1060 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-511 - inet6/filter/logdrop-511 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-511 -j DROP + inet6/filter/limit-1060 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1060 -j TEE --gateway fc00::2 + inet6/filter/limit-1060 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 1062 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 1062 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1061 - inet/filter/limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-512 - inet/filter/limit-1061 -j ACCEPT - inet/filter/logdrop-512 -m limit --limit 1/second -j LOG - inet/filter/logdrop-512 -j DROP + inet/filter/limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1061 - inet6/filter/limit-1061 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-512 - inet6/filter/limit-1061 -j ACCEPT - inet6/filter/logdrop-512 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-512 -j DROP + inet6/filter/limit-1061 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1061 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 1063 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 1063 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-513 - inet/filter/logdrop-513 -m limit --limit 1/second -j LOG - inet/filter/logdrop-513 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-513 - inet6/filter/logdrop-513 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-513 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1062 + inet/filter/limit-1062 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1062 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1062 + inet6/filter/limit-1062 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1062 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 1064 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1064 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1063 - inet/filter/limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-514 - inet/filter/limit-1063 -m limit --limit 1/second -j LOG - inet/filter/limit-1063 -j ACCEPT - inet/filter/logdrop-514 -m limit --limit 1/second -j LOG - inet/filter/logdrop-514 -j DROP + inet/filter/limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1063 - inet6/filter/limit-1063 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-514 - inet6/filter/limit-1063 -m limit --limit 1/second -j LOG - inet6/filter/limit-1063 -j ACCEPT - inet6/filter/logdrop-514 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-514 -j DROP + inet6/filter/limit-1063 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1063 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1065 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1065 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1064 - inet/filter/limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-515 - inet/filter/limit-1064 -m limit --limit 1/second -j LOG - inet/filter/logdrop-515 -m limit --limit 1/second -j LOG - inet/filter/logdrop-515 -j DROP + inet/filter/limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1064 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1064 - inet6/filter/limit-1064 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-515 - inet6/filter/limit-1064 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-515 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-515 -j DROP + inet6/filter/limit-1064 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1064 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 1066 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1066 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1065 - inet/filter/limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-516 - inet/filter/limit-1065 -j ACCEPT - inet/filter/logdrop-516 -m limit --limit 1/second -j LOG - inet/filter/logdrop-516 -j DROP + inet/filter/limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1065 - inet6/filter/limit-1065 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-516 - inet6/filter/limit-1065 -j ACCEPT - inet6/filter/logdrop-516 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-516 -j DROP + inet6/filter/limit-1065 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -Filter 1067 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1067 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-517 - inet/filter/logdrop-517 -m limit --limit 1/second -j LOG - inet/filter/logdrop-517 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-517 - inet6/filter/logdrop-517 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-517 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1066 + inet/filter/limit-1066 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1066 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1066 + inet6/filter/limit-1066 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1066 -j ACCEPT -Filter 1068 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1068 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1067 - inet/filter/limit-1067 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-518 - inet/filter/limit-1067 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1067 -j ACCEPT - inet/filter/logdrop-518 -m limit --limit 1/second -j LOG - inet/filter/logdrop-518 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1067 - inet6/filter/limit-1067 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-518 - inet6/filter/limit-1067 -j ACCEPT - inet6/filter/logdrop-518 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-518 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1069 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1069 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1068 - inet/filter/limit-1068 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-519 - inet/filter/limit-1068 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-519 -m limit --limit 1/second -j LOG - inet/filter/logdrop-519 -j DROP + inet/filter/limit-1068 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1068 -m limit --limit 1/second -j LOG + inet/filter/limit-1068 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1068 - inet6/filter/limit-1068 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-519 - inet6/filter/logdrop-519 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-519 -j DROP + inet6/filter/limit-1068 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1068 -m limit --limit 1/second -j LOG + inet6/filter/limit-1068 -j ACCEPT -Filter 1070 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} +Filter 1070 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1069 - inet/filter/limit-1069 -m recent --name limit-1069 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1069 -m recent --name limit-1069 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-1069 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1069 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1069 - inet6/filter/limit-1069 -m recent --name limit-1069 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1069 -m recent --name limit-1069 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-1069 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1069 -m limit --limit 1/second -j LOG -Filter 1071 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} +Filter 1071 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1070 - inet/filter/limit-1070 -m recent --name limit-1070 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1070 -m recent --name limit-1070 --rsource --mask 255.255.255.255 --set + inet/filter/limit-1070 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1070 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1070 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1070 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1070 - inet6/filter/limit-1070 -m recent --name limit-1070 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1070 -m recent --name limit-1070 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-1070 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1070 -j TEE --gateway fc00::2 + inet6/filter/limit-1070 -j ACCEPT -Filter 1072 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 1072 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1071 - inet/filter/limit-1071 -m recent --name limit-1071 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1071 -m limit --limit 1/second -j LOG - inet/filter/limit-1071 -m recent --name limit-1071 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-1071 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1071 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1071 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1071 - inet6/filter/limit-1071 -m recent --name limit-1071 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1071 -m limit --limit 1/second -j LOG - inet6/filter/limit-1071 -m recent --name limit-1071 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-1071 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1071 -j TEE --gateway fc00::2 -Filter 1073 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 1073 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1072 - inet/filter/limit-1072 -m recent --name limit-1072 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1072 -m recent --name limit-1072 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-1072 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1072 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1072 - inet6/filter/limit-1072 -m recent --name limit-1072 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1072 -m recent --name limit-1072 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1072 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1072 -j ACCEPT -Filter 1074 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 1074 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1073 - inet/filter/limit-1073 -m recent --name limit-1073 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1073 -m recent --name limit-1073 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1073 - inet6/filter/limit-1073 -m recent --name limit-1073 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1073 -m recent --name limit-1073 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1075 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 1075 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1074 - inet/filter/limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set + inet/filter/limit-1074 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1074 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1074 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1074 - inet6/filter/limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-1074 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1074 -j ACCEPT -Filter 1076 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"ulog","out":"B"} +Filter 1076 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1075 - inet/filter/limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1075 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1075 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1075 - inet6/filter/limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-1075 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1077 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"ulog","out":"B"} +Filter 1077 {"conn-limit":{},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1076 - inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-560 + inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-560 -m limit --limit 1/second -j LOG + inet/filter/logdrop-560 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1076 - inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-560 + inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-560 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-560 -j DROP -Filter 1078 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 1078 {"action":"pass","conn-limit":{},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1077 - inet/filter/limit-1077 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1077 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-561 + inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-561 -m limit --limit 1/second -j LOG + inet/filter/logdrop-561 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1077 - inet6/filter/limit-1077 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1077 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-561 + inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-561 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-561 -j DROP -Filter 1079 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 1079 {"conn-limit":{},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1078 - inet/filter/limit-1078 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1078 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-562 + inet/filter/limit-1078 -m limit --limit 1/second -j LOG + inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-562 -m limit --limit 1/second -j LOG + inet/filter/logdrop-562 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1078 - inet6/filter/limit-1078 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1078 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-562 + inet6/filter/limit-1078 -m limit --limit 1/second -j LOG + inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-562 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-562 -j DROP -Filter 1080 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1080 {"action":"pass","conn-limit":{},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1079 - inet/filter/limit-1079 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1079 -m limit --limit 1/second -j LOG - inet/filter/limit-1079 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-563 + inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-563 -m limit --limit 1/second -j LOG + inet/filter/logdrop-563 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1079 - inet6/filter/limit-1079 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1079 -m limit --limit 1/second -j LOG - inet6/filter/limit-1079 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-563 + inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-563 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-563 -j DROP -Filter 1081 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1081 {"conn-limit":{},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1080 - inet/filter/limit-1080 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1080 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-564 + inet/filter/limit-1080 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1080 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-564 -m limit --limit 1/second -j LOG + inet/filter/logdrop-564 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1080 - inet6/filter/limit-1080 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1080 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-564 + inet6/filter/limit-1080 -j TEE --gateway fc00::2 + inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-564 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-564 -j DROP -Filter 1082 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1082 {"action":"pass","conn-limit":{},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1081 - inet/filter/limit-1081 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1081 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-565 + inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-565 -m limit --limit 1/second -j LOG + inet/filter/logdrop-565 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1081 - inet6/filter/limit-1081 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1081 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-565 + inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-565 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-565 -j DROP -Filter 1083 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1083 {"conn-limit":{},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1082 - inet/filter/limit-1082 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1082 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-566 + inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-566 -m limit --limit 1/second -j LOG + inet/filter/logdrop-566 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1082 - inet6/filter/limit-1082 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1082 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-566 + inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-566 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-566 -j DROP -Filter 1084 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1084 {"action":"pass","conn-limit":{},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1083 - inet/filter/limit-1083 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1083 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1083 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-567 + inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-567 -m limit --limit 1/second -j LOG + inet/filter/logdrop-567 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1083 - inet6/filter/limit-1083 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1083 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-567 + inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-567 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-567 -j DROP -Filter 1085 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1085 {"conn-limit":{},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1084 - inet/filter/limit-1084 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1084 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-568 + inet/filter/limit-1084 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-568 -m limit --limit 1/second -j LOG + inet/filter/logdrop-568 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1084 - inet6/filter/limit-1084 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-568 + inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-568 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-568 -j DROP -Filter 1086 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 1086 {"action":"pass","conn-limit":{},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1085 - inet/filter/limit-1085 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1085 -j ACCEPT + inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-569 + inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-569 -m limit --limit 1/second -j LOG + inet/filter/logdrop-569 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1085 - inet6/filter/limit-1085 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1085 -j ACCEPT + inet6/filter/limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-569 + inet6/filter/logdrop-569 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-569 -j DROP -Filter 1087 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 1087 {"conn-limit":{"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1086 + inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-570 + inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-570 -m limit --limit 1/second -j LOG + inet/filter/logdrop-570 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1086 + inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-570 + inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-570 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-570 -j DROP -Filter 1088 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1088 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1087 - inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1087 -m limit --limit 1/second -j LOG - inet/filter/limit-1087 -j ACCEPT + inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-571 + inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-571 -m limit --limit 1/second -j LOG + inet/filter/logdrop-571 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1087 - inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1087 -m limit --limit 1/second -j LOG - inet6/filter/limit-1087 -j ACCEPT + inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-571 + inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-571 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-571 -j DROP -Filter 1089 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1089 {"conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1088 - inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-572 inet/filter/limit-1088 -m limit --limit 1/second -j LOG + inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-572 -m limit --limit 1/second -j LOG + inet/filter/logdrop-572 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1088 - inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-572 inet6/filter/limit-1088 -m limit --limit 1/second -j LOG + inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-572 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-572 -j DROP -Filter 1090 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1090 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1089 - inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1089 -j ACCEPT + inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-573 + inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-573 -m limit --limit 1/second -j LOG + inet/filter/logdrop-573 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1089 - inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1089 -j ACCEPT + inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-573 + inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-573 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-573 -j DROP -Filter 1091 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1091 {"conn-limit":{"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1090 + inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-574 + inet/filter/limit-1090 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1090 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-574 -m limit --limit 1/second -j LOG + inet/filter/logdrop-574 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1090 + inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-574 + inet6/filter/limit-1090 -j TEE --gateway fc00::2 + inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-574 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-574 -j DROP -Filter 1092 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1092 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1091 - inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1091 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1091 -j ACCEPT + inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-575 + inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-575 -m limit --limit 1/second -j LOG + inet/filter/logdrop-575 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1091 - inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1091 -j ACCEPT + inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-575 + inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-575 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-575 -j DROP -Filter 1093 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1093 {"conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1092 - inet/filter/limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1092 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-576 + inet/filter/limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-576 -m limit --limit 1/second -j LOG + inet/filter/logdrop-576 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1092 - inet6/filter/limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-576 + inet6/filter/limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-576 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-576 -j DROP -Filter 1094 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 1094 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1093 - inet/filter/limit-1093 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1093 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-1093 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-577 + inet/filter/limit-1093 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-577 -m limit --limit 1/second -j LOG + inet/filter/logdrop-577 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1093 - inet6/filter/limit-1093 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1093 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-1093 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-577 + inet6/filter/limit-1093 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-577 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-577 -j DROP -Filter 1095 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 1095 {"conn-limit":{"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1094 - inet/filter/limit-1094 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1094 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-578 + inet/filter/limit-1094 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-578 -m limit --limit 1/second -j LOG + inet/filter/logdrop-578 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1094 - inet6/filter/limit-1094 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1094 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-578 + inet6/filter/limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-578 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-578 -j DROP -Filter 1096 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1096 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1095 - inet/filter/limit-1095 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1095 -m limit --limit 1/second -j LOG - inet/filter/limit-1095 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-579 + inet/filter/limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-579 -m limit --limit 1/second -j LOG + inet/filter/logdrop-579 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1095 - inet6/filter/limit-1095 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1095 -m limit --limit 1/second -j LOG - inet6/filter/limit-1095 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-579 + inet6/filter/logdrop-579 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-579 -j DROP -Filter 1097 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1097 {"conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1096 - inet/filter/limit-1096 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1096 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-580 + inet/filter/limit-1096 -j ACCEPT + inet/filter/logdrop-580 -m limit --limit 1/second -j LOG + inet/filter/logdrop-580 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1096 - inet6/filter/limit-1096 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1096 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-580 + inet6/filter/limit-1096 -j ACCEPT + inet6/filter/logdrop-580 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-580 -j DROP -Filter 1098 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1098 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1097 - inet/filter/limit-1097 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1097 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1097 - inet6/filter/limit-1097 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1097 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-581 + inet/filter/logdrop-581 -m limit --limit 1/second -j LOG + inet/filter/logdrop-581 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-581 + inet6/filter/logdrop-581 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-581 -j DROP -Filter 1099 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1099 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1098 - inet/filter/limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/limit-1098 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-582 + inet/filter/limit-1098 -m limit --limit 1/second -j LOG + inet/filter/limit-1098 -j ACCEPT + inet/filter/logdrop-582 -m limit --limit 1/second -j LOG + inet/filter/logdrop-582 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1098 - inet6/filter/limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-1098 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-582 + inet6/filter/limit-1098 -m limit --limit 1/second -j LOG + inet6/filter/limit-1098 -j ACCEPT + inet6/filter/logdrop-582 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-582 -j DROP -Filter 1100 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1100 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1099 - inet/filter/limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1099 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-1099 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-583 + inet/filter/limit-1099 -m limit --limit 1/second -j LOG + inet/filter/logdrop-583 -m limit --limit 1/second -j LOG + inet/filter/logdrop-583 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1099 - inet6/filter/limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-1099 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-583 + inet6/filter/limit-1099 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-583 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-583 -j DROP -Filter 1101 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1101 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1100 - inet/filter/limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-1100 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-584 + inet/filter/limit-1100 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1100 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1100 -j ACCEPT + inet/filter/logdrop-584 -m limit --limit 1/second -j LOG + inet/filter/logdrop-584 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1100 - inet6/filter/limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1100 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-584 + inet6/filter/limit-1100 -j TEE --gateway fc00::2 + inet6/filter/limit-1100 -j ACCEPT + inet6/filter/logdrop-584 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-584 -j DROP -Filter 1102 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 1102 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1101 - inet/filter/limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1101 -j ACCEPT + inet/filter/limit-1101 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-585 + inet/filter/limit-1101 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1101 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-585 -m limit --limit 1/second -j LOG + inet/filter/logdrop-585 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1101 - inet6/filter/limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1101 -j ACCEPT + inet6/filter/limit-1101 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-585 + inet6/filter/limit-1101 -j TEE --gateway fc00::2 + inet6/filter/logdrop-585 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-585 -j DROP -Filter 1103 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 1103 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1102 + inet/filter/limit-1102 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-586 + inet/filter/limit-1102 -j ACCEPT + inet/filter/logdrop-586 -m limit --limit 1/second -j LOG + inet/filter/logdrop-586 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1102 + inet6/filter/limit-1102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-586 + inet6/filter/limit-1102 -j ACCEPT + inet6/filter/logdrop-586 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-586 -j DROP -Filter 1104 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1104 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1103 - inet/filter/limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1103 -m limit --limit 1/second -j LOG - inet/filter/limit-1103 -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1103 - inet6/filter/limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1103 -m limit --limit 1/second -j LOG - inet6/filter/limit-1103 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-587 + inet/filter/logdrop-587 -m limit --limit 1/second -j LOG + inet/filter/logdrop-587 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-587 + inet6/filter/logdrop-587 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-587 -j DROP -Filter 1105 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1105 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1104 - inet/filter/limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1104 -m limit --limit 1/second -j LOG + inet/filter/limit-1104 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-588 + inet/filter/limit-1104 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1104 -j ACCEPT + inet/filter/logdrop-588 -m limit --limit 1/second -j LOG + inet/filter/logdrop-588 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1104 - inet6/filter/limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1104 -m limit --limit 1/second -j LOG + inet6/filter/limit-1104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-588 + inet6/filter/limit-1104 -j ACCEPT + inet6/filter/logdrop-588 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-588 -j DROP -Filter 1106 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1106 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1105 - inet/filter/limit-1105 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1105 -j ACCEPT + inet/filter/limit-1105 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-589 + inet/filter/limit-1105 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-589 -m limit --limit 1/second -j LOG + inet/filter/logdrop-589 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1105 - inet6/filter/limit-1105 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1105 -j ACCEPT + inet6/filter/limit-1105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-589 + inet6/filter/logdrop-589 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-589 -j DROP -Filter 1107 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1107 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1106 + inet/filter/limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-590 + inet/filter/limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-590 -m limit --limit 1/second -j LOG + inet/filter/logdrop-590 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1106 + inet6/filter/limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-590 + inet6/filter/limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-590 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-590 -j DROP -Filter 1108 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1108 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1107 - inet/filter/limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1107 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1107 -j ACCEPT + inet/filter/limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-591 + inet/filter/limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-591 -m limit --limit 1/second -j LOG + inet/filter/logdrop-591 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1107 - inet6/filter/limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1107 -j ACCEPT + inet6/filter/limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-591 + inet6/filter/limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-591 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-591 -j DROP -Filter 1109 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1109 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1108 - inet/filter/limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1108 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-592 + inet/filter/limit-1108 -m limit --limit 1/second -j LOG + inet/filter/limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-592 -m limit --limit 1/second -j LOG + inet/filter/logdrop-592 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1108 - inet6/filter/limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-592 + inet6/filter/limit-1108 -m limit --limit 1/second -j LOG + inet6/filter/limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-592 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-592 -j DROP -Filter 1110 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 1110 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1109 - inet/filter/limit-1109 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1109 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-1109 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-593 + inet/filter/limit-1109 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-593 -m limit --limit 1/second -j LOG + inet/filter/logdrop-593 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1109 - inet6/filter/limit-1109 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1109 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-1109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-593 + inet6/filter/limit-1109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-593 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-593 -j DROP -Filter 1111 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 1111 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1110 - inet/filter/limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-1110 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-594 + inet/filter/limit-1110 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1110 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1110 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-594 -m limit --limit 1/second -j LOG + inet/filter/logdrop-594 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1110 - inet6/filter/limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1110 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-1110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-594 + inet6/filter/limit-1110 -j TEE --gateway fc00::2 + inet6/filter/limit-1110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-594 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-594 -j DROP -Filter 1112 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1112 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1111 - inet/filter/limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1111 -m limit --limit 1/second -j LOG - inet/filter/limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-595 + inet/filter/limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-595 -m limit --limit 1/second -j LOG + inet/filter/logdrop-595 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1111 - inet6/filter/limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1111 -m limit --limit 1/second -j LOG - inet6/filter/limit-1111 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-1111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-595 + inet6/filter/limit-1111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-595 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-595 -j DROP -Filter 1113 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1113 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1112 - inet/filter/limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-1112 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-596 + inet/filter/limit-1112 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-596 -m limit --limit 1/second -j LOG + inet/filter/logdrop-596 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1112 - inet6/filter/limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-596 + inet6/filter/limit-1112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-596 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-596 -j DROP -Filter 1114 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1114 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1113 - inet/filter/limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-1113 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-597 + inet/filter/limit-1113 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-597 -m limit --limit 1/second -j LOG + inet/filter/logdrop-597 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1113 - inet6/filter/limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-1113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-597 + inet6/filter/limit-1113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-597 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-597 -j DROP -Filter 1115 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1115 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1114 - inet/filter/limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/limit-1114 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-598 + inet/filter/limit-1114 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1114 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-598 -m limit --limit 1/second -j LOG + inet/filter/logdrop-598 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1114 - inet6/filter/limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1114 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-1114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-598 + inet6/filter/limit-1114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-598 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-598 -j DROP -Filter 1116 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1116 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1115 - inet/filter/limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1115 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-1115 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-599 + inet/filter/limit-1115 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-599 -m limit --limit 1/second -j LOG + inet/filter/logdrop-599 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1115 - inet6/filter/limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1115 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-1115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-599 + inet6/filter/logdrop-599 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-599 -j DROP -Filter 1117 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1117 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1116 - inet/filter/limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-1116 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-600 + inet/filter/limit-1116 -j ACCEPT + inet/filter/logdrop-600 -m limit --limit 1/second -j LOG + inet/filter/logdrop-600 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1116 - inet6/filter/limit-1116 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-600 + inet6/filter/limit-1116 -j ACCEPT + inet6/filter/logdrop-600 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-600 -j DROP -Filter 1118 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 1118 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1117 - inet/filter/limit-1117 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1117 -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1117 - inet6/filter/limit-1117 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1117 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-601 + inet/filter/logdrop-601 -m limit --limit 1/second -j LOG + inet/filter/logdrop-601 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-601 + inet6/filter/logdrop-601 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-601 -j DROP -Filter 1119 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 1119 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1118 + inet/filter/limit-1118 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-602 + inet/filter/limit-1118 -m limit --limit 1/second -j LOG + inet/filter/limit-1118 -j ACCEPT + inet/filter/logdrop-602 -m limit --limit 1/second -j LOG + inet/filter/logdrop-602 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1118 + inet6/filter/limit-1118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-602 + inet6/filter/limit-1118 -m limit --limit 1/second -j LOG + inet6/filter/limit-1118 -j ACCEPT + inet6/filter/logdrop-602 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-602 -j DROP -Filter 1120 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1120 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1119 - inet/filter/limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1119 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-603 inet/filter/limit-1119 -m limit --limit 1/second -j LOG - inet/filter/limit-1119 -j ACCEPT + inet/filter/logdrop-603 -m limit --limit 1/second -j LOG + inet/filter/logdrop-603 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1119 - inet6/filter/limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-603 inet6/filter/limit-1119 -m limit --limit 1/second -j LOG - inet6/filter/limit-1119 -j ACCEPT + inet6/filter/logdrop-603 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-603 -j DROP -Filter 1121 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1121 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1120 - inet/filter/limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1120 -m limit --limit 1/second -j LOG + inet/filter/limit-1120 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-604 + inet/filter/limit-1120 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1120 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1120 -j ACCEPT + inet/filter/logdrop-604 -m limit --limit 1/second -j LOG + inet/filter/logdrop-604 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1120 - inet6/filter/limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1120 -m limit --limit 1/second -j LOG + inet6/filter/limit-1120 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-604 + inet6/filter/limit-1120 -j TEE --gateway fc00::2 + inet6/filter/limit-1120 -j ACCEPT + inet6/filter/logdrop-604 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-604 -j DROP -Filter 1122 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1122 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1121 - inet/filter/limit-1121 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1121 -j ACCEPT + inet/filter/limit-1121 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-605 + inet/filter/limit-1121 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1121 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-605 -m limit --limit 1/second -j LOG + inet/filter/logdrop-605 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1121 - inet6/filter/limit-1121 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1121 -j ACCEPT + inet6/filter/limit-1121 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-605 + inet6/filter/limit-1121 -j TEE --gateway fc00::2 + inet6/filter/logdrop-605 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-605 -j DROP -Filter 1123 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1123 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1122 + inet/filter/limit-1122 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-606 + inet/filter/limit-1122 -j ACCEPT + inet/filter/logdrop-606 -m limit --limit 1/second -j LOG + inet/filter/logdrop-606 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1122 + inet6/filter/limit-1122 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-606 + inet6/filter/limit-1122 -j ACCEPT + inet6/filter/logdrop-606 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-606 -j DROP -Filter 1124 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1124 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1123 - inet/filter/limit-1123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1123 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1123 -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1123 - inet6/filter/limit-1123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1123 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-607 + inet/filter/logdrop-607 -m limit --limit 1/second -j LOG + inet/filter/logdrop-607 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-607 + inet6/filter/logdrop-607 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-607 -j DROP -Filter 1125 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1125 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1124 - inet/filter/limit-1124 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1124 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-608 inet/filter/limit-1124 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1124 -j ACCEPT + inet/filter/logdrop-608 -m limit --limit 1/second -j LOG + inet/filter/logdrop-608 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1124 - inet6/filter/limit-1124 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1124 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-608 + inet6/filter/limit-1124 -j ACCEPT + inet6/filter/logdrop-608 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-608 -j DROP -Filter 1126 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 1126 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1125 - inet/filter/limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-1125 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-609 + inet/filter/limit-1125 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-609 -m limit --limit 1/second -j LOG + inet/filter/logdrop-609 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1125 - inet6/filter/limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-1125 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-609 + inet6/filter/logdrop-609 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-609 -j DROP -Filter 1127 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 1127 {"conn-limit":{"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1126 - inet/filter/limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-1126 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-610 + inet/filter/limit-1126 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-610 -m limit --limit 1/second -j LOG + inet/filter/logdrop-610 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1126 - inet6/filter/limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1126 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-1126 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-610 + inet6/filter/limit-1126 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-610 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-610 -j DROP -Filter 1128 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1128 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1127 - inet/filter/limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1127 -m limit --limit 1/second -j LOG - inet/filter/limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-1127 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-611 + inet/filter/limit-1127 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-611 -m limit --limit 1/second -j LOG + inet/filter/logdrop-611 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1127 - inet6/filter/limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1127 -m limit --limit 1/second -j LOG - inet6/filter/limit-1127 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-1127 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-611 + inet6/filter/limit-1127 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-611 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-611 -j DROP -Filter 1129 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1129 {"conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1128 - inet/filter/limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/limit-1128 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-612 + inet/filter/limit-1128 -m limit --limit 1/second -j LOG + inet/filter/limit-1128 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-612 -m limit --limit 1/second -j LOG + inet/filter/logdrop-612 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1128 - inet6/filter/limit-1128 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1128 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1128 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-612 + inet6/filter/limit-1128 -m limit --limit 1/second -j LOG + inet6/filter/limit-1128 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-612 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-612 -j DROP -Filter 1130 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1130 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1129 - inet/filter/limit-1129 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1129 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-1129 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-613 + inet/filter/limit-1129 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-613 -m limit --limit 1/second -j LOG + inet/filter/logdrop-613 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1129 - inet6/filter/limit-1129 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1129 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-1129 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-613 + inet6/filter/limit-1129 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-613 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-613 -j DROP -Filter 1131 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1131 {"conn-limit":{"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1130 - inet/filter/limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/limit-1130 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-614 + inet/filter/limit-1130 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1130 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1130 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-614 -m limit --limit 1/second -j LOG + inet/filter/logdrop-614 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1130 - inet6/filter/limit-1130 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1130 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-1130 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-614 + inet6/filter/limit-1130 -j TEE --gateway fc00::2 + inet6/filter/limit-1130 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-614 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-614 -j DROP -Filter 1132 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1132 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1131 - inet/filter/limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1131 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-615 + inet/filter/limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-615 -m limit --limit 1/second -j LOG + inet/filter/logdrop-615 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1131 - inet6/filter/limit-1131 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1131 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-1131 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-615 + inet6/filter/limit-1131 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-615 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-615 -j DROP -Filter 1133 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1133 {"conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1132 - inet/filter/limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/limit-1132 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-616 + inet/filter/limit-1132 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-616 -m limit --limit 1/second -j LOG + inet/filter/logdrop-616 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1132 - inet6/filter/limit-1132 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1132 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-616 + inet6/filter/limit-1132 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-616 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-616 -j DROP -Filter 1134 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 1134 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1133 - inet/filter/limit-1133 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1133 -j ACCEPT + inet/filter/limit-1133 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-617 + inet/filter/limit-1133 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-617 -m limit --limit 1/second -j LOG + inet/filter/logdrop-617 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1133 - inet6/filter/limit-1133 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1133 -j ACCEPT + inet6/filter/limit-1133 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-617 + inet6/filter/limit-1133 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-617 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-617 -j DROP -Filter 1135 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 1135 {"conn-limit":{"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1134 + inet/filter/limit-1134 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-618 + inet/filter/limit-1134 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1134 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-618 -m limit --limit 1/second -j LOG + inet/filter/logdrop-618 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1134 + inet6/filter/limit-1134 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-618 + inet6/filter/limit-1134 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-618 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-618 -j DROP -Filter 1136 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1136 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1135 - inet/filter/limit-1135 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1135 -m limit --limit 1/second -j LOG - inet/filter/limit-1135 -j ACCEPT + inet/filter/limit-1135 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-619 + inet/filter/limit-1135 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-619 -m limit --limit 1/second -j LOG + inet/filter/logdrop-619 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1135 - inet6/filter/limit-1135 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1135 -m limit --limit 1/second -j LOG - inet6/filter/limit-1135 -j ACCEPT + inet6/filter/limit-1135 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-619 + inet6/filter/logdrop-619 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-619 -j DROP -Filter 1137 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1137 {"conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1136 - inet/filter/limit-1136 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1136 -m limit --limit 1/second -j LOG + inet/filter/limit-1136 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-620 + inet/filter/limit-1136 -j ACCEPT + inet/filter/logdrop-620 -m limit --limit 1/second -j LOG + inet/filter/logdrop-620 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1136 - inet6/filter/limit-1136 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1136 -m limit --limit 1/second -j LOG + inet6/filter/limit-1136 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-620 + inet6/filter/limit-1136 -j ACCEPT + inet6/filter/logdrop-620 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-620 -j DROP -Filter 1138 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1138 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1137 - inet/filter/limit-1137 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1137 -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1137 - inet6/filter/limit-1137 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1137 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-621 + inet/filter/logdrop-621 -m limit --limit 1/second -j LOG + inet/filter/logdrop-621 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-621 + inet6/filter/logdrop-621 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-621 -j DROP -Filter 1139 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1139 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1138 + inet/filter/limit-1138 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-622 + inet/filter/limit-1138 -m limit --limit 1/second -j LOG + inet/filter/limit-1138 -j ACCEPT + inet/filter/logdrop-622 -m limit --limit 1/second -j LOG + inet/filter/logdrop-622 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1138 + inet6/filter/limit-1138 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-622 + inet6/filter/limit-1138 -m limit --limit 1/second -j LOG + inet6/filter/limit-1138 -j ACCEPT + inet6/filter/logdrop-622 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-622 -j DROP -Filter 1140 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1140 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1139 - inet/filter/limit-1139 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1139 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1139 -j ACCEPT + inet/filter/limit-1139 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-623 + inet/filter/limit-1139 -m limit --limit 1/second -j LOG + inet/filter/logdrop-623 -m limit --limit 1/second -j LOG + inet/filter/logdrop-623 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1139 - inet6/filter/limit-1139 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1139 -j ACCEPT + inet6/filter/limit-1139 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-623 + inet6/filter/limit-1139 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-623 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-623 -j DROP -Filter 1141 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1141 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1140 - inet/filter/limit-1140 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1140 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1140 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-624 + inet/filter/limit-1140 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1140 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1140 -j ACCEPT + inet/filter/logdrop-624 -m limit --limit 1/second -j LOG + inet/filter/logdrop-624 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1140 - inet6/filter/limit-1140 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1140 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-624 + inet6/filter/limit-1140 -j TEE --gateway fc00::2 + inet6/filter/limit-1140 -j ACCEPT + inet6/filter/logdrop-624 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-624 -j DROP -Filter 1142 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","out":"B"} +Filter 1142 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1141 - inet/filter/limit-1141 -m recent --name limit-1141 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-520 - inet/filter/limit-1141 -m recent --name limit-1141 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-520 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-520 -j DROP + inet/filter/limit-1141 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-625 + inet/filter/limit-1141 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1141 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-625 -m limit --limit 1/second -j LOG + inet/filter/logdrop-625 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1141 - inet6/filter/limit-1141 -m recent --name limit-1141 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-520 - inet6/filter/limit-1141 -m recent --name limit-1141 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-520 -j DROP + inet6/filter/limit-1141 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-625 + inet6/filter/limit-1141 -j TEE --gateway fc00::2 + inet6/filter/logdrop-625 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-625 -j DROP -Filter 1143 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","out":"B"} +Filter 1143 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1142 - inet/filter/limit-1142 -m recent --name limit-1142 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-521 - inet/filter/limit-1142 -m recent --name limit-1142 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-521 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-521 -j DROP + inet/filter/limit-1142 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-626 + inet/filter/limit-1142 -j ACCEPT + inet/filter/logdrop-626 -m limit --limit 1/second -j LOG + inet/filter/logdrop-626 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1142 - inet6/filter/limit-1142 -m recent --name limit-1142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-521 - inet6/filter/limit-1142 -m recent --name limit-1142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-521 -j DROP + inet6/filter/limit-1142 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-626 + inet6/filter/limit-1142 -j ACCEPT + inet6/filter/logdrop-626 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-626 -j DROP -Filter 1144 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":true,"out":"B"} +Filter 1144 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1143 - inet/filter/limit-1143 -m recent --name limit-1143 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-522 - inet/filter/limit-1143 -m limit --limit 1/second -j LOG - inet/filter/limit-1143 -m recent --name limit-1143 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-522 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-522 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1143 - inet6/filter/limit-1143 -m recent --name limit-1143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-522 - inet6/filter/limit-1143 -m limit --limit 1/second -j LOG - inet6/filter/limit-1143 -m recent --name limit-1143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-522 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-627 + inet/filter/logdrop-627 -m limit --limit 1/second -j LOG + inet/filter/logdrop-627 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-627 + inet6/filter/logdrop-627 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-627 -j DROP -Filter 1145 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":true,"out":"B"} +Filter 1145 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1144 - inet/filter/limit-1144 -m recent --name limit-1144 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-523 - inet/filter/limit-1144 -m recent --name limit-1144 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-523 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-523 -j DROP + inet/filter/limit-1144 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-628 + inet/filter/limit-1144 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1144 -j ACCEPT + inet/filter/logdrop-628 -m limit --limit 1/second -j LOG + inet/filter/logdrop-628 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1144 - inet6/filter/limit-1144 -m recent --name limit-1144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-523 - inet6/filter/limit-1144 -m recent --name limit-1144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-523 -j DROP + inet6/filter/limit-1144 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-628 + inet6/filter/limit-1144 -j ACCEPT + inet6/filter/logdrop-628 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-628 -j DROP -Filter 1146 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"none","out":"B"} +Filter 1146 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1145 - inet/filter/limit-1145 -m recent --name limit-1145 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-524 - inet/filter/limit-1145 -m recent --name limit-1145 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-524 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-524 -j DROP + inet/filter/limit-1145 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-629 + inet/filter/limit-1145 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-629 -m limit --limit 1/second -j LOG + inet/filter/logdrop-629 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1145 - inet6/filter/limit-1145 -m recent --name limit-1145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-524 - inet6/filter/limit-1145 -m recent --name limit-1145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-524 -j DROP + inet6/filter/limit-1145 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-629 + inet6/filter/logdrop-629 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-629 -j DROP -Filter 1147 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"none","out":"B"} +Filter 1147 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1146 - inet/filter/limit-1146 -m recent --name limit-1146 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-525 - inet/filter/limit-1146 -m recent --name limit-1146 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-525 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-525 -j DROP + inet/filter/limit-1146 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-630 + inet/filter/limit-1146 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-630 -m limit --limit 1/second -j LOG + inet/filter/logdrop-630 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1146 - inet6/filter/limit-1146 -m recent --name limit-1146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-525 - inet6/filter/limit-1146 -m recent --name limit-1146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-525 -j DROP + inet6/filter/limit-1146 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-630 + inet6/filter/limit-1146 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-630 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-630 -j DROP -Filter 1148 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} +Filter 1148 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1147 - inet/filter/limit-1147 -m recent --name limit-1147 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-526 - inet/filter/limit-1147 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1147 -m recent --name limit-1147 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-526 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-526 -j DROP + inet/filter/limit-1147 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-631 + inet/filter/limit-1147 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-631 -m limit --limit 1/second -j LOG + inet/filter/logdrop-631 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1147 - inet6/filter/limit-1147 -m recent --name limit-1147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-526 - inet6/filter/limit-1147 -m recent --name limit-1147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-526 -j DROP + inet6/filter/limit-1147 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-631 + inet6/filter/limit-1147 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-631 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-631 -j DROP -Filter 1149 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} +Filter 1149 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1148 - inet/filter/limit-1148 -m recent --name limit-1148 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-527 - inet/filter/limit-1148 -m recent --name limit-1148 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-527 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-527 -j DROP + inet/filter/limit-1148 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-632 + inet/filter/limit-1148 -m limit --limit 1/second -j LOG + inet/filter/limit-1148 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-632 -m limit --limit 1/second -j LOG + inet/filter/logdrop-632 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1148 - inet6/filter/limit-1148 -m recent --name limit-1148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-527 - inet6/filter/logdrop-527 -j DROP + inet6/filter/limit-1148 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-632 + inet6/filter/limit-1148 -m limit --limit 1/second -j LOG + inet6/filter/limit-1148 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-632 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-632 -j DROP -Filter 1150 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} +Filter 1150 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1149 - inet/filter/limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-528 - inet/filter/limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-528 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-528 -j DROP + inet/filter/limit-1149 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-633 + inet/filter/limit-1149 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-633 -m limit --limit 1/second -j LOG + inet/filter/logdrop-633 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1149 - inet6/filter/limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-528 - inet6/filter/limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-528 -j DROP + inet6/filter/limit-1149 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-633 + inet6/filter/limit-1149 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-633 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-633 -j DROP -Filter 1151 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} +Filter 1151 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1150 - inet/filter/limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-529 - inet/filter/limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-529 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-529 -j DROP + inet/filter/limit-1150 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-634 + inet/filter/limit-1150 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1150 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1150 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-634 -m limit --limit 1/second -j LOG + inet/filter/logdrop-634 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1150 - inet6/filter/limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-529 - inet6/filter/limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-529 -j DROP + inet6/filter/limit-1150 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-634 + inet6/filter/limit-1150 -j TEE --gateway fc00::2 + inet6/filter/limit-1150 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-634 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-634 -j DROP -Filter 1152 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1152 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1151 - inet/filter/limit-1151 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-530 - inet/filter/limit-1151 -m limit --limit 1/second -j LOG - inet/filter/limit-1151 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-530 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-530 -j DROP + inet/filter/limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-635 + inet/filter/limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-635 -m limit --limit 1/second -j LOG + inet/filter/logdrop-635 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1151 - inet6/filter/limit-1151 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-530 - inet6/filter/limit-1151 -m limit --limit 1/second -j LOG - inet6/filter/limit-1151 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-530 -j DROP + inet6/filter/limit-1151 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-635 + inet6/filter/limit-1151 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-635 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-635 -j DROP -Filter 1153 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1153 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1152 - inet/filter/limit-1152 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-531 - inet/filter/limit-1152 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-531 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-531 -j DROP + inet/filter/limit-1152 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-636 + inet/filter/limit-1152 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-636 -m limit --limit 1/second -j LOG + inet/filter/logdrop-636 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1152 - inet6/filter/limit-1152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-531 - inet6/filter/limit-1152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-531 -j DROP + inet6/filter/limit-1152 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-636 + inet6/filter/limit-1152 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-636 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-636 -j DROP -Filter 1154 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1154 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1153 - inet/filter/limit-1153 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-532 - inet/filter/limit-1153 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-532 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-532 -j DROP + inet/filter/limit-1153 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-637 + inet/filter/limit-1153 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-637 -m limit --limit 1/second -j LOG + inet/filter/logdrop-637 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1153 - inet6/filter/limit-1153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-532 - inet6/filter/limit-1153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-532 -j DROP + inet6/filter/limit-1153 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-637 + inet6/filter/limit-1153 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-637 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-637 -j DROP -Filter 1155 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1155 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1154 - inet/filter/limit-1154 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-533 - inet/filter/limit-1154 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-533 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-533 -j DROP + inet/filter/limit-1154 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-638 + inet/filter/limit-1154 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1154 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-638 -m limit --limit 1/second -j LOG + inet/filter/logdrop-638 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1154 - inet6/filter/limit-1154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-533 - inet6/filter/limit-1154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-533 -j DROP + inet6/filter/limit-1154 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-638 + inet6/filter/limit-1154 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-638 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-638 -j DROP -Filter 1156 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1156 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1155 - inet/filter/limit-1155 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-534 - inet/filter/limit-1155 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1155 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-534 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-534 -j DROP + inet/filter/limit-1155 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-639 + inet/filter/limit-1155 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-639 -m limit --limit 1/second -j LOG + inet/filter/logdrop-639 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1155 - inet6/filter/limit-1155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-534 - inet6/filter/limit-1155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-534 -j DROP + inet6/filter/limit-1155 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-639 + inet6/filter/logdrop-639 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-639 -j DROP -Filter 1157 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1157 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1156 - inet/filter/limit-1156 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-535 - inet/filter/limit-1156 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-535 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-535 -j DROP + inet/filter/limit-1156 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-640 + inet/filter/limit-1156 -j ACCEPT + inet/filter/logdrop-640 -m limit --limit 1/second -j LOG + inet/filter/logdrop-640 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1156 - inet6/filter/limit-1156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-535 - inet6/filter/logdrop-535 -j DROP + inet6/filter/limit-1156 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-640 + inet6/filter/limit-1156 -j ACCEPT + inet6/filter/logdrop-640 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-640 -j DROP -Filter 1158 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} +Filter 1158 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1157 - inet/filter/limit-1157 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-536 - inet/filter/limit-1157 -j ACCEPT - inet/filter/logdrop-536 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-536 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1157 - inet6/filter/limit-1157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-536 - inet6/filter/limit-1157 -j ACCEPT - inet6/filter/logdrop-536 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-641 + inet/filter/logdrop-641 -m limit --limit 1/second -j LOG + inet/filter/logdrop-641 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-641 + inet6/filter/logdrop-641 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-641 -j DROP -Filter 1159 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} +Filter 1159 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-537 - inet/filter/logdrop-537 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-537 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-537 - inet6/filter/logdrop-537 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1158 + inet/filter/limit-1158 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-642 + inet/filter/limit-1158 -m limit --limit 1/second -j LOG + inet/filter/limit-1158 -j ACCEPT + inet/filter/logdrop-642 -m limit --limit 1/second -j LOG + inet/filter/logdrop-642 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1158 + inet6/filter/limit-1158 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-642 + inet6/filter/limit-1158 -m limit --limit 1/second -j LOG + inet6/filter/limit-1158 -j ACCEPT + inet6/filter/logdrop-642 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-642 -j DROP -Filter 1160 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1160 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1159 - inet/filter/limit-1159 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-538 + inet/filter/limit-1159 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-643 inet/filter/limit-1159 -m limit --limit 1/second -j LOG - inet/filter/limit-1159 -j ACCEPT - inet/filter/logdrop-538 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-538 -j DROP + inet/filter/logdrop-643 -m limit --limit 1/second -j LOG + inet/filter/logdrop-643 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1159 - inet6/filter/limit-1159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-538 + inet6/filter/limit-1159 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-643 inet6/filter/limit-1159 -m limit --limit 1/second -j LOG - inet6/filter/limit-1159 -j ACCEPT - inet6/filter/logdrop-538 -j DROP + inet6/filter/logdrop-643 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-643 -j DROP -Filter 1161 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1161 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1160 - inet/filter/limit-1160 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-539 - inet/filter/limit-1160 -m limit --limit 1/second -j LOG - inet/filter/logdrop-539 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-539 -j DROP + inet/filter/limit-1160 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-644 + inet/filter/limit-1160 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1160 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1160 -j ACCEPT + inet/filter/logdrop-644 -m limit --limit 1/second -j LOG + inet/filter/logdrop-644 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1160 - inet6/filter/limit-1160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-539 - inet6/filter/limit-1160 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-539 -j DROP + inet6/filter/limit-1160 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-644 + inet6/filter/limit-1160 -j TEE --gateway fc00::2 + inet6/filter/limit-1160 -j ACCEPT + inet6/filter/logdrop-644 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-644 -j DROP -Filter 1162 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1162 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1161 - inet/filter/limit-1161 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-540 - inet/filter/limit-1161 -j ACCEPT - inet/filter/logdrop-540 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-540 -j DROP + inet/filter/limit-1161 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-645 + inet/filter/limit-1161 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1161 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-645 -m limit --limit 1/second -j LOG + inet/filter/logdrop-645 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1161 - inet6/filter/limit-1161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-540 - inet6/filter/limit-1161 -j ACCEPT - inet6/filter/logdrop-540 -j DROP + inet6/filter/limit-1161 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-645 + inet6/filter/limit-1161 -j TEE --gateway fc00::2 + inet6/filter/logdrop-645 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-645 -j DROP -Filter 1163 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1163 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-541 - inet/filter/logdrop-541 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-541 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-541 - inet6/filter/logdrop-541 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1162 + inet/filter/limit-1162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-646 + inet/filter/limit-1162 -j ACCEPT + inet/filter/logdrop-646 -m limit --limit 1/second -j LOG + inet/filter/logdrop-646 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1162 + inet6/filter/limit-1162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-646 + inet6/filter/limit-1162 -j ACCEPT + inet6/filter/logdrop-646 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-646 -j DROP -Filter 1164 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1164 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1163 - inet/filter/limit-1163 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-542 - inet/filter/limit-1163 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1163 -j ACCEPT - inet/filter/logdrop-542 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-542 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1163 - inet6/filter/limit-1163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-542 - inet6/filter/limit-1163 -j ACCEPT - inet6/filter/logdrop-542 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-647 + inet/filter/logdrop-647 -m limit --limit 1/second -j LOG + inet/filter/logdrop-647 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-647 + inet6/filter/logdrop-647 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-647 -j DROP -Filter 1165 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1165 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1164 - inet/filter/limit-1164 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-543 + inet/filter/limit-1164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-648 inet/filter/limit-1164 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-543 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-543 -j DROP + inet/filter/limit-1164 -j ACCEPT + inet/filter/logdrop-648 -m limit --limit 1/second -j LOG + inet/filter/logdrop-648 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1164 - inet6/filter/limit-1164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-543 - inet6/filter/logdrop-543 -j DROP + inet6/filter/limit-1164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-648 + inet6/filter/limit-1164 -j ACCEPT + inet6/filter/logdrop-648 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-648 -j DROP -Filter 1166 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} +Filter 1166 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1165 - inet/filter/limit-1165 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-544 - inet/filter/limit-1165 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-544 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-544 -j DROP + inet/filter/limit-1165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-649 + inet/filter/limit-1165 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-649 -m limit --limit 1/second -j LOG + inet/filter/logdrop-649 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1165 - inet6/filter/limit-1165 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-544 - inet6/filter/limit-1165 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-544 -j DROP + inet6/filter/limit-1165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-649 + inet6/filter/logdrop-649 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-649 -j DROP -Filter 1167 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} +Filter 1167 {"conn-limit":{"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1166 - inet/filter/limit-1166 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-545 - inet/filter/limit-1166 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-545 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-545 -j DROP + inet/filter/limit-1166 -m recent --name limit-1166 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-650 + inet/filter/limit-1166 -m recent --name limit-1166 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-650 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-650 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-650 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1166 - inet6/filter/limit-1166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-545 - inet6/filter/limit-1166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-545 -j DROP + inet6/filter/limit-1166 -m recent --name limit-1166 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-650 + inet6/filter/limit-1166 -m recent --name limit-1166 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-650 -j TEE --gateway fc00::2 + inet6/filter/logdrop-650 -j DROP -Filter 1168 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1168 {"action":"pass","conn-limit":{"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1167 - inet/filter/limit-1167 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-546 - inet/filter/limit-1167 -m limit --limit 1/second -j LOG - inet/filter/limit-1167 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-546 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-546 -j DROP + inet/filter/limit-1167 -m recent --name limit-1167 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-651 + inet/filter/limit-1167 -m recent --name limit-1167 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-651 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-651 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-651 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1167 - inet6/filter/limit-1167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-546 - inet6/filter/limit-1167 -m limit --limit 1/second -j LOG - inet6/filter/limit-1167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-546 -j DROP + inet6/filter/limit-1167 -m recent --name limit-1167 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-651 + inet6/filter/limit-1167 -m recent --name limit-1167 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-651 -j TEE --gateway fc00::2 + inet6/filter/logdrop-651 -j DROP -Filter 1169 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 1169 {"conn-limit":{"log":"mirror"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1168 - inet/filter/limit-1168 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-547 - inet/filter/limit-1168 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-547 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-547 -j DROP + inet/filter/limit-1168 -m recent --name limit-1168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-652 + inet/filter/limit-1168 -m limit --limit 1/second -j LOG + inet/filter/limit-1168 -m recent --name limit-1168 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-652 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-652 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-652 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1168 - inet6/filter/limit-1168 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-547 - inet6/filter/limit-1168 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-547 -j DROP + inet6/filter/limit-1168 -m recent --name limit-1168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-652 + inet6/filter/limit-1168 -m limit --limit 1/second -j LOG + inet6/filter/limit-1168 -m recent --name limit-1168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-652 -j TEE --gateway fc00::2 + inet6/filter/logdrop-652 -j DROP -Filter 1170 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1170 {"action":"pass","conn-limit":{"log":"mirror"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1169 - inet/filter/limit-1169 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-548 - inet/filter/limit-1169 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-548 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-548 -j DROP + inet/filter/limit-1169 -m recent --name limit-1169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-653 + inet/filter/limit-1169 -m recent --name limit-1169 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-653 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-653 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-653 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1169 - inet6/filter/limit-1169 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-548 - inet6/filter/limit-1169 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-548 -j DROP + inet6/filter/limit-1169 -m recent --name limit-1169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-653 + inet6/filter/limit-1169 -m recent --name limit-1169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-653 -j TEE --gateway fc00::2 + inet6/filter/logdrop-653 -j DROP -Filter 1171 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 1171 {"conn-limit":{"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1170 - inet/filter/limit-1170 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-549 - inet/filter/limit-1170 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-549 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-549 -j DROP + inet/filter/limit-1170 -m recent --name limit-1170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-654 + inet/filter/limit-1170 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1170 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1170 -m recent --name limit-1170 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-654 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-654 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-654 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1170 - inet6/filter/limit-1170 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-549 - inet6/filter/limit-1170 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-549 -j DROP + inet6/filter/limit-1170 -m recent --name limit-1170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-654 + inet6/filter/limit-1170 -j TEE --gateway fc00::2 + inet6/filter/limit-1170 -m recent --name limit-1170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-654 -j TEE --gateway fc00::2 + inet6/filter/logdrop-654 -j DROP -Filter 1172 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1172 {"action":"pass","conn-limit":{"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1171 - inet/filter/limit-1171 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-550 - inet/filter/limit-1171 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1171 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-550 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-550 -j DROP + inet/filter/limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-655 + inet/filter/limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-655 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-655 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-655 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1171 - inet6/filter/limit-1171 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-550 - inet6/filter/limit-1171 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-550 -j DROP + inet6/filter/limit-1171 -m recent --name limit-1171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-655 + inet6/filter/limit-1171 -m recent --name limit-1171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-655 -j TEE --gateway fc00::2 + inet6/filter/logdrop-655 -j DROP -Filter 1173 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} +Filter 1173 {"conn-limit":{"log":"mirror"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1172 - inet/filter/limit-1172 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-551 - inet/filter/limit-1172 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-551 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-551 -j DROP + inet/filter/limit-1172 -m recent --name limit-1172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-656 + inet/filter/limit-1172 -m recent --name limit-1172 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-656 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-656 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-656 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1172 - inet6/filter/limit-1172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-551 - inet6/filter/logdrop-551 -j DROP + inet6/filter/limit-1172 -m recent --name limit-1172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-656 + inet6/filter/limit-1172 -m recent --name limit-1172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-656 -j TEE --gateway fc00::2 + inet6/filter/logdrop-656 -j DROP -Filter 1174 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} +Filter 1174 {"action":"pass","conn-limit":{"log":"mirror"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1173 - inet/filter/limit-1173 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-552 - inet/filter/limit-1173 -j ACCEPT - inet/filter/logdrop-552 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-552 -j DROP + inet/filter/limit-1173 -m recent --name limit-1173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-657 + inet/filter/limit-1173 -m recent --name limit-1173 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-657 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-657 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-657 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1173 - inet6/filter/limit-1173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-552 - inet6/filter/limit-1173 -j ACCEPT - inet6/filter/logdrop-552 -j DROP + inet6/filter/limit-1173 -m recent --name limit-1173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-657 + inet6/filter/limit-1173 -m recent --name limit-1173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-657 -j TEE --gateway fc00::2 + inet6/filter/logdrop-657 -j DROP -Filter 1175 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} +Filter 1175 {"conn-limit":{"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-553 - inet/filter/logdrop-553 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-553 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-553 - inet6/filter/logdrop-553 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1174 + inet/filter/limit-1174 -m recent --name limit-1174 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-658 + inet/filter/limit-1174 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1174 -m recent --name limit-1174 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-658 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-658 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-658 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1174 + inet6/filter/limit-1174 -m recent --name limit-1174 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-658 + inet6/filter/limit-1174 -m recent --name limit-1174 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-658 -j TEE --gateway fc00::2 + inet6/filter/logdrop-658 -j DROP -Filter 1176 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1176 {"action":"pass","conn-limit":{"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1175 - inet/filter/limit-1175 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-554 - inet/filter/limit-1175 -m limit --limit 1/second -j LOG - inet/filter/limit-1175 -j ACCEPT - inet/filter/logdrop-554 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-554 -j DROP + inet/filter/limit-1175 -m recent --name limit-1175 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-659 + inet/filter/limit-1175 -m recent --name limit-1175 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-659 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-659 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-659 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1175 - inet6/filter/limit-1175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-554 - inet6/filter/limit-1175 -m limit --limit 1/second -j LOG - inet6/filter/limit-1175 -j ACCEPT - inet6/filter/logdrop-554 -j DROP + inet6/filter/limit-1175 -m recent --name limit-1175 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-659 + inet6/filter/logdrop-659 -j TEE --gateway fc00::2 + inet6/filter/logdrop-659 -j DROP -Filter 1177 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1177 {"conn-limit":{"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1176 - inet/filter/limit-1176 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-555 - inet/filter/limit-1176 -m limit --limit 1/second -j LOG - inet/filter/logdrop-555 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-555 -j DROP + inet/filter/limit-1176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-660 + inet/filter/limit-1176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-660 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-660 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-660 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1176 - inet6/filter/limit-1176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-555 - inet6/filter/limit-1176 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-555 -j DROP + inet6/filter/limit-1176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-660 + inet6/filter/limit-1176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-660 -j TEE --gateway fc00::2 + inet6/filter/logdrop-660 -j DROP -Filter 1178 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1178 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1177 - inet/filter/limit-1177 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-556 - inet/filter/limit-1177 -j ACCEPT - inet/filter/logdrop-556 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-556 -j DROP + inet/filter/limit-1177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-661 + inet/filter/limit-1177 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-661 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-661 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-661 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1177 - inet6/filter/limit-1177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-556 - inet6/filter/limit-1177 -j ACCEPT - inet6/filter/logdrop-556 -j DROP + inet6/filter/limit-1177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-661 + inet6/filter/limit-1177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-661 -j TEE --gateway fc00::2 + inet6/filter/logdrop-661 -j DROP -Filter 1179 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1179 {"conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-557 - inet/filter/logdrop-557 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-557 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-557 - inet6/filter/logdrop-557 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1178 + inet/filter/limit-1178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-662 + inet/filter/limit-1178 -m limit --limit 1/second -j LOG + inet/filter/limit-1178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-662 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-662 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-662 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1178 + inet6/filter/limit-1178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-662 + inet6/filter/limit-1178 -m limit --limit 1/second -j LOG + inet6/filter/limit-1178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-662 -j TEE --gateway fc00::2 + inet6/filter/logdrop-662 -j DROP -Filter 1180 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1180 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1179 - inet/filter/limit-1179 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-558 - inet/filter/limit-1179 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1179 -j ACCEPT - inet/filter/logdrop-558 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-558 -j DROP + inet/filter/limit-1179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-663 + inet/filter/limit-1179 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-663 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-663 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-663 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1179 - inet6/filter/limit-1179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-558 - inet6/filter/limit-1179 -j ACCEPT - inet6/filter/logdrop-558 -j DROP + inet6/filter/limit-1179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-663 + inet6/filter/limit-1179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-663 -j TEE --gateway fc00::2 + inet6/filter/logdrop-663 -j DROP -Filter 1181 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1181 {"conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1180 - inet/filter/limit-1180 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-559 - inet/filter/limit-1180 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-559 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-559 -j DROP + inet/filter/limit-1180 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-664 + inet/filter/limit-1180 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1180 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1180 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-664 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-664 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-664 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1180 - inet6/filter/limit-1180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-559 - inet6/filter/logdrop-559 -j DROP + inet6/filter/limit-1180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-664 + inet6/filter/limit-1180 -j TEE --gateway fc00::2 + inet6/filter/limit-1180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-664 -j TEE --gateway fc00::2 + inet6/filter/logdrop-664 -j DROP -Filter 1182 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} +Filter 1182 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1181 - inet/filter/limit-1181 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-560 - inet/filter/limit-1181 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-560 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-560 -j DROP + inet/filter/limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-665 + inet/filter/limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-665 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-665 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-665 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1181 - inet6/filter/limit-1181 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-560 - inet6/filter/limit-1181 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-560 -j DROP + inet6/filter/limit-1181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-665 + inet6/filter/limit-1181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-665 -j TEE --gateway fc00::2 + inet6/filter/logdrop-665 -j DROP -Filter 1183 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} +Filter 1183 {"conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1182 - inet/filter/limit-1182 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-561 - inet/filter/limit-1182 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-561 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-561 -j DROP + inet/filter/limit-1182 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-666 + inet/filter/limit-1182 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-666 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-666 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-666 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1182 - inet6/filter/limit-1182 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-561 - inet6/filter/limit-1182 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-561 -j DROP + inet6/filter/limit-1182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-666 + inet6/filter/limit-1182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-666 -j TEE --gateway fc00::2 + inet6/filter/logdrop-666 -j DROP -Filter 1184 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1184 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1183 - inet/filter/limit-1183 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-562 - inet/filter/limit-1183 -m limit --limit 1/second -j LOG - inet/filter/limit-1183 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-562 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-562 -j DROP + inet/filter/limit-1183 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-667 + inet/filter/limit-1183 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-667 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-667 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-667 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1183 - inet6/filter/limit-1183 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-562 - inet6/filter/limit-1183 -m limit --limit 1/second -j LOG - inet6/filter/limit-1183 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-562 -j DROP + inet6/filter/limit-1183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-667 + inet6/filter/limit-1183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-667 -j TEE --gateway fc00::2 + inet6/filter/logdrop-667 -j DROP -Filter 1185 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1185 {"conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1184 - inet/filter/limit-1184 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-563 - inet/filter/limit-1184 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-563 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-563 -j DROP + inet/filter/limit-1184 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-668 + inet/filter/limit-1184 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1184 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-668 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-668 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-668 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1184 - inet6/filter/limit-1184 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-563 - inet6/filter/limit-1184 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-563 -j DROP + inet6/filter/limit-1184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-668 + inet6/filter/limit-1184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-668 -j TEE --gateway fc00::2 + inet6/filter/logdrop-668 -j DROP -Filter 1186 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1186 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1185 - inet/filter/limit-1185 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-564 - inet/filter/limit-1185 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-564 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-564 -j DROP + inet/filter/limit-1185 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-669 + inet/filter/limit-1185 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-669 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-669 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-669 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1185 - inet6/filter/limit-1185 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-564 - inet6/filter/limit-1185 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-564 -j DROP + inet6/filter/limit-1185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-669 + inet6/filter/logdrop-669 -j TEE --gateway fc00::2 + inet6/filter/logdrop-669 -j DROP -Filter 1187 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1187 {"conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1186 - inet/filter/limit-1186 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-565 - inet/filter/limit-1186 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-565 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-565 -j DROP + inet/filter/limit-1186 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-670 + inet/filter/limit-1186 -j ACCEPT + inet/filter/logdrop-670 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-670 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-670 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1186 - inet6/filter/limit-1186 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-565 - inet6/filter/limit-1186 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-565 -j DROP + inet6/filter/limit-1186 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-670 + inet6/filter/limit-1186 -j ACCEPT + inet6/filter/logdrop-670 -j TEE --gateway fc00::2 + inet6/filter/logdrop-670 -j DROP -Filter 1188 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1188 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1187 - inet/filter/limit-1187 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-566 - inet/filter/limit-1187 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1187 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-566 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-566 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1187 - inet6/filter/limit-1187 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-566 - inet6/filter/limit-1187 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-566 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-671 + inet/filter/logdrop-671 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-671 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-671 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-671 + inet6/filter/logdrop-671 -j TEE --gateway fc00::2 + inet6/filter/logdrop-671 -j DROP -Filter 1189 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1189 {"conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1188 - inet/filter/limit-1188 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-567 - inet/filter/limit-1188 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-567 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-567 -j DROP + inet/filter/limit-1188 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-672 + inet/filter/limit-1188 -m limit --limit 1/second -j LOG + inet/filter/limit-1188 -j ACCEPT + inet/filter/logdrop-672 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-672 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-672 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1188 - inet6/filter/limit-1188 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-567 - inet6/filter/logdrop-567 -j DROP + inet6/filter/limit-1188 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-672 + inet6/filter/limit-1188 -m limit --limit 1/second -j LOG + inet6/filter/limit-1188 -j ACCEPT + inet6/filter/logdrop-672 -j TEE --gateway fc00::2 + inet6/filter/logdrop-672 -j DROP -Filter 1190 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} +Filter 1190 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1189 - inet/filter/limit-1189 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-568 - inet/filter/limit-1189 -j ACCEPT - inet/filter/logdrop-568 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-568 -j DROP + inet/filter/limit-1189 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-673 + inet/filter/limit-1189 -m limit --limit 1/second -j LOG + inet/filter/logdrop-673 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-673 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-673 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1189 - inet6/filter/limit-1189 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-568 - inet6/filter/limit-1189 -j ACCEPT - inet6/filter/logdrop-568 -j DROP + inet6/filter/limit-1189 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-673 + inet6/filter/limit-1189 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-673 -j TEE --gateway fc00::2 + inet6/filter/logdrop-673 -j DROP -Filter 1191 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} +Filter 1191 {"conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-569 - inet/filter/logdrop-569 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-569 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-569 - inet6/filter/logdrop-569 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1190 + inet/filter/limit-1190 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-674 + inet/filter/limit-1190 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1190 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1190 -j ACCEPT + inet/filter/logdrop-674 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-674 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-674 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1190 + inet6/filter/limit-1190 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-674 + inet6/filter/limit-1190 -j TEE --gateway fc00::2 + inet6/filter/limit-1190 -j ACCEPT + inet6/filter/logdrop-674 -j TEE --gateway fc00::2 + inet6/filter/logdrop-674 -j DROP -Filter 1192 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1192 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1191 - inet/filter/limit-1191 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-570 - inet/filter/limit-1191 -m limit --limit 1/second -j LOG - inet/filter/limit-1191 -j ACCEPT - inet/filter/logdrop-570 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-570 -j DROP + inet/filter/limit-1191 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-675 + inet/filter/limit-1191 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1191 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-675 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-675 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-675 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1191 - inet6/filter/limit-1191 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-570 - inet6/filter/limit-1191 -m limit --limit 1/second -j LOG - inet6/filter/limit-1191 -j ACCEPT - inet6/filter/logdrop-570 -j DROP + inet6/filter/limit-1191 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-675 + inet6/filter/limit-1191 -j TEE --gateway fc00::2 + inet6/filter/logdrop-675 -j TEE --gateway fc00::2 + inet6/filter/logdrop-675 -j DROP -Filter 1193 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1193 {"conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1192 - inet/filter/limit-1192 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-571 - inet/filter/limit-1192 -m limit --limit 1/second -j LOG - inet/filter/logdrop-571 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-571 -j DROP + inet/filter/limit-1192 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-676 + inet/filter/limit-1192 -j ACCEPT + inet/filter/logdrop-676 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-676 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-676 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1192 - inet6/filter/limit-1192 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-571 - inet6/filter/limit-1192 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-571 -j DROP + inet6/filter/limit-1192 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-676 + inet6/filter/limit-1192 -j ACCEPT + inet6/filter/logdrop-676 -j TEE --gateway fc00::2 + inet6/filter/logdrop-676 -j DROP -Filter 1194 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1194 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1193 - inet/filter/limit-1193 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-572 - inet/filter/limit-1193 -j ACCEPT - inet/filter/logdrop-572 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-572 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1193 - inet6/filter/limit-1193 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-572 - inet6/filter/limit-1193 -j ACCEPT - inet6/filter/logdrop-572 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-677 + inet/filter/logdrop-677 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-677 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-677 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-677 + inet6/filter/logdrop-677 -j TEE --gateway fc00::2 + inet6/filter/logdrop-677 -j DROP -Filter 1195 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1195 {"conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-573 - inet/filter/logdrop-573 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-573 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-573 - inet6/filter/logdrop-573 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1194 + inet/filter/limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-678 + inet/filter/limit-1194 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1194 -j ACCEPT + inet/filter/logdrop-678 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-678 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-678 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1194 + inet6/filter/limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-678 + inet6/filter/limit-1194 -j ACCEPT + inet6/filter/logdrop-678 -j TEE --gateway fc00::2 + inet6/filter/logdrop-678 -j DROP -Filter 1196 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1196 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1195 - inet/filter/limit-1195 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-574 + inet/filter/limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-679 inet/filter/limit-1195 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1195 -j ACCEPT - inet/filter/logdrop-574 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-574 -j DROP + inet/filter/logdrop-679 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-679 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-679 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1195 - inet6/filter/limit-1195 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-574 - inet6/filter/limit-1195 -j ACCEPT - inet6/filter/logdrop-574 -j DROP + inet6/filter/limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-679 + inet6/filter/logdrop-679 -j TEE --gateway fc00::2 + inet6/filter/logdrop-679 -j DROP -Filter 1197 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1197 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1196 - inet/filter/limit-1196 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-575 - inet/filter/limit-1196 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-575 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-575 -j DROP + inet/filter/limit-1196 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-680 + inet/filter/limit-1196 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-680 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-680 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-680 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1196 - inet6/filter/limit-1196 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-575 - inet6/filter/logdrop-575 -j DROP + inet6/filter/limit-1196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-680 + inet6/filter/limit-1196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-680 -j TEE --gateway fc00::2 + inet6/filter/logdrop-680 -j DROP -Filter 1198 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} +Filter 1198 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1197 - inet/filter/limit-1197 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-576 - inet/filter/limit-1197 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-576 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-576 -j DROP + inet/filter/limit-1197 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-681 + inet/filter/limit-1197 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-681 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-681 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-681 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1197 - inet6/filter/limit-1197 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-576 - inet6/filter/limit-1197 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-576 -j DROP + inet6/filter/limit-1197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-681 + inet6/filter/limit-1197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-681 -j TEE --gateway fc00::2 + inet6/filter/logdrop-681 -j DROP -Filter 1199 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} +Filter 1199 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1198 - inet/filter/limit-1198 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-577 - inet/filter/limit-1198 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-577 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-577 -j DROP + inet/filter/limit-1198 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-682 + inet/filter/limit-1198 -m limit --limit 1/second -j LOG + inet/filter/limit-1198 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-682 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-682 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-682 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1198 - inet6/filter/limit-1198 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-577 - inet6/filter/limit-1198 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-577 -j DROP + inet6/filter/limit-1198 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-682 + inet6/filter/limit-1198 -m limit --limit 1/second -j LOG + inet6/filter/limit-1198 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-682 -j TEE --gateway fc00::2 + inet6/filter/logdrop-682 -j DROP -Filter 1200 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1200 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1199 - inet/filter/limit-1199 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-578 - inet/filter/limit-1199 -m limit --limit 1/second -j LOG - inet/filter/limit-1199 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-578 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-578 -j DROP + inet/filter/limit-1199 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-683 + inet/filter/limit-1199 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-683 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-683 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-683 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1199 - inet6/filter/limit-1199 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-578 - inet6/filter/limit-1199 -m limit --limit 1/second -j LOG - inet6/filter/limit-1199 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-578 -j DROP + inet6/filter/limit-1199 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-683 + inet6/filter/limit-1199 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-683 -j TEE --gateway fc00::2 + inet6/filter/logdrop-683 -j DROP -Filter 1201 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 1201 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1200 - inet/filter/limit-1200 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-579 - inet/filter/limit-1200 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-579 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-579 -j DROP + inet/filter/limit-1200 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-684 + inet/filter/limit-1200 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1200 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1200 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-684 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-684 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-684 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1200 - inet6/filter/limit-1200 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-579 - inet6/filter/limit-1200 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-579 -j DROP + inet6/filter/limit-1200 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-684 + inet6/filter/limit-1200 -j TEE --gateway fc00::2 + inet6/filter/limit-1200 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-684 -j TEE --gateway fc00::2 + inet6/filter/logdrop-684 -j DROP -Filter 1202 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1202 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1201 - inet/filter/limit-1201 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-580 - inet/filter/limit-1201 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-580 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-580 -j DROP + inet/filter/limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-685 + inet/filter/limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-685 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-685 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-685 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1201 - inet6/filter/limit-1201 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-580 - inet6/filter/limit-1201 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-580 -j DROP + inet6/filter/limit-1201 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-685 + inet6/filter/limit-1201 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-685 -j TEE --gateway fc00::2 + inet6/filter/logdrop-685 -j DROP -Filter 1203 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 1203 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1202 - inet/filter/limit-1202 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-581 - inet/filter/limit-1202 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-581 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-581 -j DROP + inet/filter/limit-1202 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-686 + inet/filter/limit-1202 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-686 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-686 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-686 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1202 - inet6/filter/limit-1202 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-581 - inet6/filter/limit-1202 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-581 -j DROP + inet6/filter/limit-1202 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-686 + inet6/filter/limit-1202 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-686 -j TEE --gateway fc00::2 + inet6/filter/logdrop-686 -j DROP -Filter 1204 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1204 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1203 - inet/filter/limit-1203 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-582 - inet/filter/limit-1203 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1203 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-582 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-582 -j DROP + inet/filter/limit-1203 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-687 + inet/filter/limit-1203 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-687 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-687 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-687 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1203 - inet6/filter/limit-1203 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-582 - inet6/filter/limit-1203 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-582 -j DROP + inet6/filter/limit-1203 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-687 + inet6/filter/limit-1203 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-687 -j TEE --gateway fc00::2 + inet6/filter/logdrop-687 -j DROP -Filter 1205 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} +Filter 1205 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1204 - inet/filter/limit-1204 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-583 - inet/filter/limit-1204 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-583 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-583 -j DROP + inet/filter/limit-1204 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-688 + inet/filter/limit-1204 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1204 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-688 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-688 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-688 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1204 - inet6/filter/limit-1204 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-583 - inet6/filter/logdrop-583 -j DROP + inet6/filter/limit-1204 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-688 + inet6/filter/limit-1204 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-688 -j TEE --gateway fc00::2 + inet6/filter/logdrop-688 -j DROP -Filter 1206 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} +Filter 1206 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1205 - inet/filter/limit-1205 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-584 - inet/filter/limit-1205 -j ACCEPT - inet/filter/logdrop-584 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-584 -j DROP + inet/filter/limit-1205 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-689 + inet/filter/limit-1205 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-689 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-689 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-689 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1205 - inet6/filter/limit-1205 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-584 - inet6/filter/limit-1205 -j ACCEPT - inet6/filter/logdrop-584 -j DROP + inet6/filter/limit-1205 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-689 + inet6/filter/logdrop-689 -j TEE --gateway fc00::2 + inet6/filter/logdrop-689 -j DROP -Filter 1207 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} +Filter 1207 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-585 - inet/filter/logdrop-585 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-585 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-585 - inet6/filter/logdrop-585 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1206 + inet/filter/limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-690 + inet/filter/limit-1206 -j ACCEPT + inet/filter/logdrop-690 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-690 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-690 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1206 + inet6/filter/limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-690 + inet6/filter/limit-1206 -j ACCEPT + inet6/filter/logdrop-690 -j TEE --gateway fc00::2 + inet6/filter/logdrop-690 -j DROP -Filter 1208 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1208 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1207 - inet/filter/limit-1207 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-586 - inet/filter/limit-1207 -m limit --limit 1/second -j LOG - inet/filter/limit-1207 -j ACCEPT - inet/filter/logdrop-586 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-586 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1207 - inet6/filter/limit-1207 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-586 - inet6/filter/limit-1207 -m limit --limit 1/second -j LOG - inet6/filter/limit-1207 -j ACCEPT - inet6/filter/logdrop-586 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-691 + inet/filter/logdrop-691 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-691 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-691 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-691 + inet6/filter/logdrop-691 -j TEE --gateway fc00::2 + inet6/filter/logdrop-691 -j DROP -Filter 1209 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 1209 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1208 - inet/filter/limit-1208 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-587 + inet/filter/limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-692 inet/filter/limit-1208 -m limit --limit 1/second -j LOG - inet/filter/logdrop-587 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-587 -j DROP + inet/filter/limit-1208 -j ACCEPT + inet/filter/logdrop-692 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-692 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-692 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1208 - inet6/filter/limit-1208 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-587 + inet6/filter/limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-692 inet6/filter/limit-1208 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-587 -j DROP + inet6/filter/limit-1208 -j ACCEPT + inet6/filter/logdrop-692 -j TEE --gateway fc00::2 + inet6/filter/logdrop-692 -j DROP -Filter 1210 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1210 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1209 - inet/filter/limit-1209 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-588 - inet/filter/limit-1209 -j ACCEPT - inet/filter/logdrop-588 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-588 -j DROP + inet/filter/limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-693 + inet/filter/limit-1209 -m limit --limit 1/second -j LOG + inet/filter/logdrop-693 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-693 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-693 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1209 - inet6/filter/limit-1209 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-588 - inet6/filter/limit-1209 -j ACCEPT - inet6/filter/logdrop-588 -j DROP + inet6/filter/limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-693 + inet6/filter/limit-1209 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-693 -j TEE --gateway fc00::2 + inet6/filter/logdrop-693 -j DROP -Filter 1211 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 1211 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-589 - inet/filter/logdrop-589 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-589 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-589 - inet6/filter/logdrop-589 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1210 + inet/filter/limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-694 + inet/filter/limit-1210 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1210 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1210 -j ACCEPT + inet/filter/logdrop-694 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-694 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-694 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1210 + inet6/filter/limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-694 + inet6/filter/limit-1210 -j TEE --gateway fc00::2 + inet6/filter/limit-1210 -j ACCEPT + inet6/filter/logdrop-694 -j TEE --gateway fc00::2 + inet6/filter/logdrop-694 -j DROP -Filter 1212 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1212 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1211 - inet/filter/limit-1211 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-590 - inet/filter/limit-1211 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1211 -j ACCEPT - inet/filter/logdrop-590 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-590 -j DROP + inet/filter/limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-695 + inet/filter/limit-1211 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1211 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-695 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-695 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-695 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1211 - inet6/filter/limit-1211 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-590 - inet6/filter/limit-1211 -j ACCEPT - inet6/filter/logdrop-590 -j DROP + inet6/filter/limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-695 + inet6/filter/limit-1211 -j TEE --gateway fc00::2 + inet6/filter/logdrop-695 -j TEE --gateway fc00::2 + inet6/filter/logdrop-695 -j DROP -Filter 1213 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1213 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1212 - inet/filter/limit-1212 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-591 - inet/filter/limit-1212 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-591 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-591 -j DROP + inet/filter/limit-1212 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-696 + inet/filter/limit-1212 -j ACCEPT + inet/filter/logdrop-696 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-696 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-696 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1212 - inet6/filter/limit-1212 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-591 - inet6/filter/logdrop-591 -j DROP + inet6/filter/limit-1212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-696 + inet6/filter/limit-1212 -j ACCEPT + inet6/filter/logdrop-696 -j TEE --gateway fc00::2 + inet6/filter/logdrop-696 -j DROP -Filter 1214 {"conn-limit":150,"in":"_fw","out":"B"} +Filter 1214 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1213 - inet/filter/limit-1213 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1213 -j ACCEPT - inet/filter/limit-1213 -m limit --limit 1/second -j LOG - inet/filter/limit-1213 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1213 - inet6/filter/limit-1213 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1213 -j ACCEPT - inet6/filter/limit-1213 -m limit --limit 1/second -j LOG - inet6/filter/limit-1213 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-697 + inet/filter/logdrop-697 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-697 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-697 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-697 + inet6/filter/logdrop-697 -j TEE --gateway fc00::2 + inet6/filter/logdrop-697 -j DROP -Filter 1215 {"action":"pass","conn-limit":150,"in":"_fw","out":"B"} +Filter 1215 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1214 - inet/filter/limit-1214 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1214 -j RETURN - inet/filter/limit-1214 -m limit --limit 1/second -j LOG - inet/filter/limit-1214 -j DROP + inet/filter/limit-1214 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-698 + inet/filter/limit-1214 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1214 -j ACCEPT + inet/filter/logdrop-698 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-698 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-698 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1214 - inet6/filter/limit-1214 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1214 -j RETURN - inet6/filter/limit-1214 -m limit --limit 1/second -j LOG - inet6/filter/limit-1214 -j DROP + inet6/filter/limit-1214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-698 + inet6/filter/limit-1214 -j ACCEPT + inet6/filter/logdrop-698 -j TEE --gateway fc00::2 + inet6/filter/logdrop-698 -j DROP -Filter 1216 {"conn-limit":150,"in":"_fw","log":true,"out":"B"} +Filter 1216 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1215 - inet/filter/limit-1215 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1215 -j logaccept-18 - inet/filter/limit-1215 -m limit --limit 1/second -j LOG - inet/filter/limit-1215 -j DROP - inet/filter/logaccept-18 -m limit --limit 1/second -j LOG - inet/filter/logaccept-18 -j ACCEPT + inet/filter/limit-1215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-699 + inet/filter/limit-1215 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-699 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-699 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-699 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1215 - inet6/filter/limit-1215 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1215 -j logaccept-18 - inet6/filter/limit-1215 -m limit --limit 1/second -j LOG - inet6/filter/limit-1215 -j DROP - inet6/filter/logaccept-18 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-18 -j ACCEPT + inet6/filter/limit-1215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-699 + inet6/filter/logdrop-699 -j TEE --gateway fc00::2 + inet6/filter/logdrop-699 -j DROP -Filter 1217 {"conn-limit":150,"in":"_fw","log":"none","out":"B"} +Filter 1217 {"conn-limit":{"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1216 - inet/filter/limit-1216 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1216 -j ACCEPT - inet/filter/limit-1216 -m limit --limit 1/second -j LOG - inet/filter/limit-1216 -j DROP + inet/filter/limit-1216 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-700 + inet/filter/limit-1216 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-700 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-700 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-700 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1216 - inet6/filter/limit-1216 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1216 -j ACCEPT - inet6/filter/limit-1216 -m limit --limit 1/second -j LOG - inet6/filter/limit-1216 -j DROP + inet6/filter/limit-1216 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-700 + inet6/filter/limit-1216 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-700 -j TEE --gateway fc00::2 + inet6/filter/logdrop-700 -j DROP -Filter 1218 {"conn-limit":150,"in":"_fw","log":"ulog","out":"B"} +Filter 1218 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1217 - inet/filter/limit-1217 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1217 -j logaccept-19 - inet/filter/limit-1217 -m limit --limit 1/second -j LOG - inet/filter/limit-1217 -j DROP - inet/filter/logaccept-19 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-19 -j ACCEPT + inet/filter/limit-1217 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-701 + inet/filter/limit-1217 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-701 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-701 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-701 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1217 - inet6/filter/limit-1217 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1217 -j logaccept-19 - inet6/filter/limit-1217 -m limit --limit 1/second -j LOG - inet6/filter/limit-1217 -j DROP - inet6/filter/logaccept-19 -j ACCEPT + inet6/filter/limit-1217 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-701 + inet6/filter/limit-1217 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-701 -j TEE --gateway fc00::2 + inet6/filter/logdrop-701 -j DROP -Filter 1219 {"conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} +Filter 1219 {"conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1218 - inet/filter/limit-1218 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1218 -j ACCEPT - inet/filter/limit-1218 -j DROP + inet/filter/limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-702 + inet/filter/limit-1218 -m limit --limit 1/second -j LOG + inet/filter/limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-702 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-702 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-702 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1218 - inet6/filter/limit-1218 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1218 -j ACCEPT - inet6/filter/limit-1218 -j DROP + inet6/filter/limit-1218 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-702 + inet6/filter/limit-1218 -m limit --limit 1/second -j LOG + inet6/filter/limit-1218 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-702 -j TEE --gateway fc00::2 + inet6/filter/logdrop-702 -j DROP -Filter 1220 {"action":"pass","conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} +Filter 1220 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1219 - inet/filter/limit-1219 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1219 -j RETURN - inet/filter/limit-1219 -j DROP + inet/filter/limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-703 + inet/filter/limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-703 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-703 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-703 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1219 - inet6/filter/limit-1219 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1219 -j RETURN - inet6/filter/limit-1219 -j DROP + inet6/filter/limit-1219 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-703 + inet6/filter/limit-1219 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-703 -j TEE --gateway fc00::2 + inet6/filter/logdrop-703 -j DROP -Filter 1221 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":true,"out":"B"} +Filter 1221 {"conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1220 - inet/filter/limit-1220 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1220 -j logaccept-20 - inet/filter/limit-1220 -j DROP - inet/filter/logaccept-20 -m limit --limit 1/second -j LOG - inet/filter/logaccept-20 -j ACCEPT + inet/filter/limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-704 + inet/filter/limit-1220 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1220 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-704 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-704 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-704 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1220 - inet6/filter/limit-1220 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1220 -j logaccept-20 - inet6/filter/limit-1220 -j DROP - inet6/filter/logaccept-20 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-20 -j ACCEPT + inet6/filter/limit-1220 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-704 + inet6/filter/limit-1220 -j TEE --gateway fc00::2 + inet6/filter/limit-1220 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-704 -j TEE --gateway fc00::2 + inet6/filter/logdrop-704 -j DROP -Filter 1222 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"none","out":"B"} +Filter 1222 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1221 - inet/filter/limit-1221 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1221 -j ACCEPT - inet/filter/limit-1221 -j DROP + inet/filter/limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-705 + inet/filter/limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-705 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-705 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-705 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1221 - inet6/filter/limit-1221 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1221 -j ACCEPT - inet6/filter/limit-1221 -j DROP + inet6/filter/limit-1221 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-705 + inet6/filter/limit-1221 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-705 -j TEE --gateway fc00::2 + inet6/filter/logdrop-705 -j DROP -Filter 1223 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1223 {"conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1222 - inet/filter/limit-1222 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1222 -j logaccept-21 - inet/filter/limit-1222 -j DROP - inet/filter/logaccept-21 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-21 -j ACCEPT + inet/filter/limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-706 + inet/filter/limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-706 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-706 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-706 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1222 - inet6/filter/limit-1222 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1222 -j logaccept-21 - inet6/filter/limit-1222 -j DROP - inet6/filter/logaccept-21 -j ACCEPT + inet6/filter/limit-1222 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-706 + inet6/filter/limit-1222 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-706 -j TEE --gateway fc00::2 + inet6/filter/logdrop-706 -j DROP -Filter 1224 {"conn-limit":{"count":150},"in":"_fw","out":"B"} +Filter 1224 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1223 - inet/filter/limit-1223 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1223 -j ACCEPT - inet/filter/limit-1223 -m limit --limit 1/second -j LOG - inet/filter/limit-1223 -j DROP + inet/filter/limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-707 + inet/filter/limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-707 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-707 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-707 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1223 - inet6/filter/limit-1223 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1223 -j ACCEPT - inet6/filter/limit-1223 -m limit --limit 1/second -j LOG - inet6/filter/limit-1223 -j DROP + inet6/filter/limit-1223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-707 + inet6/filter/limit-1223 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-707 -j TEE --gateway fc00::2 + inet6/filter/logdrop-707 -j DROP -Filter 1225 {"action":"pass","conn-limit":{"count":150},"in":"_fw","out":"B"} +Filter 1225 {"conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1224 - inet/filter/limit-1224 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1224 -j RETURN - inet/filter/limit-1224 -m limit --limit 1/second -j LOG - inet/filter/limit-1224 -j DROP + inet/filter/limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-708 + inet/filter/limit-1224 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-708 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-708 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-708 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1224 - inet6/filter/limit-1224 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1224 -j RETURN - inet6/filter/limit-1224 -m limit --limit 1/second -j LOG - inet6/filter/limit-1224 -j DROP + inet6/filter/limit-1224 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-708 + inet6/filter/limit-1224 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-708 -j TEE --gateway fc00::2 + inet6/filter/logdrop-708 -j DROP -Filter 1226 {"conn-limit":{"count":150},"in":"_fw","log":true,"out":"B"} +Filter 1226 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1225 - inet/filter/limit-1225 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1225 -j logaccept-22 - inet/filter/limit-1225 -m limit --limit 1/second -j LOG - inet/filter/limit-1225 -j DROP - inet/filter/logaccept-22 -m limit --limit 1/second -j LOG - inet/filter/logaccept-22 -j ACCEPT + inet/filter/limit-1225 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-709 + inet/filter/limit-1225 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-709 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-709 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-709 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1225 - inet6/filter/limit-1225 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1225 -j logaccept-22 - inet6/filter/limit-1225 -m limit --limit 1/second -j LOG - inet6/filter/limit-1225 -j DROP - inet6/filter/logaccept-22 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-22 -j ACCEPT + inet6/filter/limit-1225 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-709 + inet6/filter/logdrop-709 -j TEE --gateway fc00::2 + inet6/filter/logdrop-709 -j DROP -Filter 1227 {"conn-limit":{"count":150},"in":"_fw","log":"none","out":"B"} +Filter 1227 {"conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1226 - inet/filter/limit-1226 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1226 -j ACCEPT - inet/filter/limit-1226 -m limit --limit 1/second -j LOG - inet/filter/limit-1226 -j DROP + inet/filter/limit-1226 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-710 + inet/filter/limit-1226 -j ACCEPT + inet/filter/logdrop-710 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-710 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-710 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1226 - inet6/filter/limit-1226 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1226 -j ACCEPT - inet6/filter/limit-1226 -m limit --limit 1/second -j LOG - inet6/filter/limit-1226 -j DROP + inet6/filter/limit-1226 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-710 + inet6/filter/limit-1226 -j ACCEPT + inet6/filter/logdrop-710 -j TEE --gateway fc00::2 + inet6/filter/logdrop-710 -j DROP -Filter 1228 {"conn-limit":{"count":150},"in":"_fw","log":"ulog","out":"B"} +Filter 1228 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1227 - inet/filter/limit-1227 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1227 -j logaccept-23 - inet/filter/limit-1227 -m limit --limit 1/second -j LOG - inet/filter/limit-1227 -j DROP - inet/filter/logaccept-23 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-23 -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1227 - inet6/filter/limit-1227 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1227 -j logaccept-23 - inet6/filter/limit-1227 -m limit --limit 1/second -j LOG - inet6/filter/limit-1227 -j DROP - inet6/filter/logaccept-23 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-711 + inet/filter/logdrop-711 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-711 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-711 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-711 + inet6/filter/logdrop-711 -j TEE --gateway fc00::2 + inet6/filter/logdrop-711 -j DROP -Filter 1229 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} +Filter 1229 {"conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1228 - inet/filter/limit-1228 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1228 -j ACCEPT - inet/filter/limit-1228 -j DROP + inet/filter/limit-1228 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-712 + inet/filter/limit-1228 -m limit --limit 1/second -j LOG + inet/filter/limit-1228 -j ACCEPT + inet/filter/logdrop-712 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-712 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-712 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1228 - inet6/filter/limit-1228 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1228 -j ACCEPT - inet6/filter/limit-1228 -j DROP + inet6/filter/limit-1228 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-712 + inet6/filter/limit-1228 -m limit --limit 1/second -j LOG + inet6/filter/limit-1228 -j ACCEPT + inet6/filter/logdrop-712 -j TEE --gateway fc00::2 + inet6/filter/logdrop-712 -j DROP -Filter 1230 {"action":"pass","conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} +Filter 1230 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1229 - inet/filter/limit-1229 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1229 -j RETURN - inet/filter/limit-1229 -j DROP + inet/filter/limit-1229 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-713 + inet/filter/limit-1229 -m limit --limit 1/second -j LOG + inet/filter/logdrop-713 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-713 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-713 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1229 - inet6/filter/limit-1229 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1229 -j RETURN - inet6/filter/limit-1229 -j DROP + inet6/filter/limit-1229 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-713 + inet6/filter/limit-1229 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-713 -j TEE --gateway fc00::2 + inet6/filter/logdrop-713 -j DROP -Filter 1231 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 1231 {"conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1230 - inet/filter/limit-1230 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1230 -j logaccept-24 - inet/filter/limit-1230 -j DROP - inet/filter/logaccept-24 -m limit --limit 1/second -j LOG - inet/filter/logaccept-24 -j ACCEPT + inet/filter/limit-1230 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-714 + inet/filter/limit-1230 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1230 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1230 -j ACCEPT + inet/filter/logdrop-714 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-714 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-714 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1230 - inet6/filter/limit-1230 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1230 -j logaccept-24 - inet6/filter/limit-1230 -j DROP - inet6/filter/logaccept-24 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-24 -j ACCEPT + inet6/filter/limit-1230 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-714 + inet6/filter/limit-1230 -j TEE --gateway fc00::2 + inet6/filter/limit-1230 -j ACCEPT + inet6/filter/logdrop-714 -j TEE --gateway fc00::2 + inet6/filter/logdrop-714 -j DROP -Filter 1232 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 1232 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1231 - inet/filter/limit-1231 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1231 -j ACCEPT - inet/filter/limit-1231 -j DROP + inet/filter/limit-1231 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-715 + inet/filter/limit-1231 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1231 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-715 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-715 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-715 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1231 - inet6/filter/limit-1231 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1231 -j ACCEPT - inet6/filter/limit-1231 -j DROP + inet6/filter/limit-1231 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-715 + inet6/filter/limit-1231 -j TEE --gateway fc00::2 + inet6/filter/logdrop-715 -j TEE --gateway fc00::2 + inet6/filter/logdrop-715 -j DROP -Filter 1233 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"ulog","out":"B"} +Filter 1233 {"conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1232 - inet/filter/limit-1232 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1232 -j logaccept-25 - inet/filter/limit-1232 -j DROP - inet/filter/logaccept-25 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-25 -j ACCEPT + inet/filter/limit-1232 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-716 + inet/filter/limit-1232 -j ACCEPT + inet/filter/logdrop-716 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-716 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-716 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1232 - inet6/filter/limit-1232 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1232 -j logaccept-25 - inet6/filter/limit-1232 -j DROP - inet6/filter/logaccept-25 -j ACCEPT + inet6/filter/limit-1232 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-716 + inet6/filter/limit-1232 -j ACCEPT + inet6/filter/logdrop-716 -j TEE --gateway fc00::2 + inet6/filter/logdrop-716 -j DROP -Filter 1234 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","out":"B"} +Filter 1234 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1233 - inet/filter/limit-1233 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1233 -j ACCEPT - inet/filter/limit-1233 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1233 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1233 - inet6/filter/limit-1233 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1233 -j ACCEPT - inet6/filter/limit-1233 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-717 + inet/filter/logdrop-717 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-717 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-717 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-717 + inet6/filter/logdrop-717 -j TEE --gateway fc00::2 + inet6/filter/logdrop-717 -j DROP -Filter 1235 {"action":"pass","conn-limit":{"count":150,"log":"ulog"},"in":"_fw","out":"B"} +Filter 1235 {"conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1234 - inet/filter/limit-1234 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1234 -j RETURN + inet/filter/limit-1234 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-718 inet/filter/limit-1234 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1234 -j DROP + inet/filter/limit-1234 -j ACCEPT + inet/filter/logdrop-718 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-718 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-718 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1234 - inet6/filter/limit-1234 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1234 -j RETURN - inet6/filter/limit-1234 -j DROP + inet6/filter/limit-1234 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-718 + inet6/filter/limit-1234 -j ACCEPT + inet6/filter/logdrop-718 -j TEE --gateway fc00::2 + inet6/filter/logdrop-718 -j DROP -Filter 1236 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","log":true,"out":"B"} +Filter 1236 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1235 - inet/filter/limit-1235 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1235 -j logaccept-26 + inet/filter/limit-1235 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-719 inet/filter/limit-1235 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1235 -j DROP - inet/filter/logaccept-26 -m limit --limit 1/second -j LOG - inet/filter/logaccept-26 -j ACCEPT + inet/filter/logdrop-719 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-719 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-719 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1235 - inet6/filter/limit-1235 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1235 -j logaccept-26 - inet6/filter/limit-1235 -j DROP - inet6/filter/logaccept-26 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-26 -j ACCEPT + inet6/filter/limit-1235 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-719 + inet6/filter/logdrop-719 -j TEE --gateway fc00::2 + inet6/filter/logdrop-719 -j DROP -Filter 1237 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","log":"none","out":"B"} +Filter 1237 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1236 - inet/filter/limit-1236 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1236 -j ACCEPT - inet/filter/limit-1236 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1236 -j DROP + inet/filter/limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-720 + inet/filter/limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-720 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-720 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-720 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1236 - inet6/filter/limit-1236 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1236 -j ACCEPT - inet6/filter/limit-1236 -j DROP + inet6/filter/limit-1236 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-720 + inet6/filter/limit-1236 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-720 -j TEE --gateway fc00::2 + inet6/filter/logdrop-720 -j DROP -Filter 1238 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} +Filter 1238 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1237 - inet/filter/limit-1237 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1237 -j logaccept-27 - inet/filter/limit-1237 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1237 -j DROP - inet/filter/logaccept-27 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-27 -j ACCEPT + inet/filter/limit-1237 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-721 + inet/filter/limit-1237 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-721 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-721 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-721 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1237 - inet6/filter/limit-1237 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1237 -j logaccept-27 - inet6/filter/limit-1237 -j DROP - inet6/filter/logaccept-27 -j ACCEPT + inet6/filter/limit-1237 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-721 + inet6/filter/limit-1237 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-721 -j TEE --gateway fc00::2 + inet6/filter/logdrop-721 -j DROP -Filter 1239 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} +Filter 1239 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1238 - inet/filter/limit-1238 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1238 -j ACCEPT - inet/filter/limit-1238 -j DROP + inet/filter/limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-722 + inet/filter/limit-1238 -m limit --limit 1/second -j LOG + inet/filter/limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-722 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-722 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-722 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1238 - inet6/filter/limit-1238 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1238 -j ACCEPT - inet6/filter/limit-1238 -j DROP + inet6/filter/limit-1238 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-722 + inet6/filter/limit-1238 -m limit --limit 1/second -j LOG + inet6/filter/limit-1238 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-722 -j TEE --gateway fc00::2 + inet6/filter/logdrop-722 -j DROP -Filter 1240 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} +Filter 1240 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1239 - inet/filter/limit-1239 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1239 -j RETURN - inet/filter/limit-1239 -j DROP + inet/filter/limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-723 + inet/filter/limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-723 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-723 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-723 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1239 - inet6/filter/limit-1239 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1239 -j RETURN - inet6/filter/limit-1239 -j DROP + inet6/filter/limit-1239 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-723 + inet6/filter/limit-1239 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-723 -j TEE --gateway fc00::2 + inet6/filter/logdrop-723 -j DROP -Filter 1241 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +Filter 1241 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1240 - inet/filter/limit-1240 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1240 -j logaccept-28 - inet/filter/limit-1240 -j DROP - inet/filter/logaccept-28 -m limit --limit 1/second -j LOG - inet/filter/logaccept-28 -j ACCEPT + inet/filter/limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-724 + inet/filter/limit-1240 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1240 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-724 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-724 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-724 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1240 - inet6/filter/limit-1240 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1240 -j logaccept-28 - inet6/filter/limit-1240 -j DROP - inet6/filter/logaccept-28 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-28 -j ACCEPT + inet6/filter/limit-1240 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-724 + inet6/filter/limit-1240 -j TEE --gateway fc00::2 + inet6/filter/limit-1240 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-724 -j TEE --gateway fc00::2 + inet6/filter/logdrop-724 -j DROP -Filter 1242 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +Filter 1242 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1241 - inet/filter/limit-1241 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1241 -j ACCEPT - inet/filter/limit-1241 -j DROP + inet/filter/limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-725 + inet/filter/limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-725 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-725 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-725 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1241 - inet6/filter/limit-1241 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1241 -j ACCEPT - inet6/filter/limit-1241 -j DROP + inet6/filter/limit-1241 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-725 + inet6/filter/limit-1241 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-725 -j TEE --gateway fc00::2 + inet6/filter/logdrop-725 -j DROP -Filter 1243 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"ulog","out":"B"} +Filter 1243 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1242 - inet/filter/limit-1242 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1242 -j logaccept-29 - inet/filter/limit-1242 -j DROP - inet/filter/logaccept-29 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-29 -j ACCEPT + inet/filter/limit-1242 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-726 + inet/filter/limit-1242 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-726 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-726 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-726 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1242 - inet6/filter/limit-1242 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1242 -j logaccept-29 - inet6/filter/limit-1242 -j DROP - inet6/filter/logaccept-29 -j ACCEPT + inet6/filter/limit-1242 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-726 + inet6/filter/limit-1242 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-726 -j TEE --gateway fc00::2 + inet6/filter/logdrop-726 -j DROP -Filter 1244 {"conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} +Filter 1244 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1243 - inet/filter/limit-1243 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1243 -j ACCEPT - inet/filter/limit-1243 -m limit --limit 1/second -j LOG - inet/filter/limit-1243 -j DROP + inet/filter/limit-1243 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-727 + inet/filter/limit-1243 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-727 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-727 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-727 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1243 - inet6/filter/limit-1243 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1243 -j ACCEPT - inet6/filter/limit-1243 -m limit --limit 1/second -j LOG - inet6/filter/limit-1243 -j DROP + inet6/filter/limit-1243 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-727 + inet6/filter/limit-1243 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-727 -j TEE --gateway fc00::2 + inet6/filter/logdrop-727 -j DROP -Filter 1245 {"action":"pass","conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} +Filter 1245 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1244 - inet/filter/limit-1244 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1244 -j RETURN - inet/filter/limit-1244 -m limit --limit 1/second -j LOG - inet/filter/limit-1244 -j DROP + inet/filter/limit-1244 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-728 + inet/filter/limit-1244 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1244 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-728 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-728 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-728 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1244 - inet6/filter/limit-1244 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1244 -j RETURN - inet6/filter/limit-1244 -m limit --limit 1/second -j LOG - inet6/filter/limit-1244 -j DROP + inet6/filter/limit-1244 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-728 + inet6/filter/limit-1244 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-728 -j TEE --gateway fc00::2 + inet6/filter/logdrop-728 -j DROP -Filter 1246 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":true,"out":"B"} +Filter 1246 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1245 - inet/filter/limit-1245 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1245 -j logaccept-30 - inet/filter/limit-1245 -m limit --limit 1/second -j LOG - inet/filter/limit-1245 -j DROP - inet/filter/logaccept-30 -m limit --limit 1/second -j LOG - inet/filter/logaccept-30 -j ACCEPT + inet/filter/limit-1245 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-729 + inet/filter/limit-1245 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-729 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-729 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-729 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1245 - inet6/filter/limit-1245 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1245 -j logaccept-30 - inet6/filter/limit-1245 -m limit --limit 1/second -j LOG - inet6/filter/limit-1245 -j DROP - inet6/filter/logaccept-30 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-30 -j ACCEPT + inet6/filter/limit-1245 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-729 + inet6/filter/logdrop-729 -j TEE --gateway fc00::2 + inet6/filter/logdrop-729 -j DROP -Filter 1247 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"none","out":"B"} +Filter 1247 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1246 - inet/filter/limit-1246 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1246 -j ACCEPT - inet/filter/limit-1246 -m limit --limit 1/second -j LOG - inet/filter/limit-1246 -j DROP + inet/filter/limit-1246 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-730 + inet/filter/limit-1246 -j ACCEPT + inet/filter/logdrop-730 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-730 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-730 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1246 - inet6/filter/limit-1246 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1246 -j ACCEPT - inet6/filter/limit-1246 -m limit --limit 1/second -j LOG - inet6/filter/limit-1246 -j DROP + inet6/filter/limit-1246 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-730 + inet6/filter/limit-1246 -j ACCEPT + inet6/filter/logdrop-730 -j TEE --gateway fc00::2 + inet6/filter/logdrop-730 -j DROP -Filter 1248 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"ulog","out":"B"} +Filter 1248 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1247 - inet/filter/limit-1247 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1247 -j logaccept-31 - inet/filter/limit-1247 -m limit --limit 1/second -j LOG - inet/filter/limit-1247 -j DROP - inet/filter/logaccept-31 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-31 -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1247 - inet6/filter/limit-1247 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1247 -j logaccept-31 - inet6/filter/limit-1247 -m limit --limit 1/second -j LOG - inet6/filter/limit-1247 -j DROP - inet6/filter/logaccept-31 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-731 + inet/filter/logdrop-731 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-731 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-731 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-731 + inet6/filter/logdrop-731 -j TEE --gateway fc00::2 + inet6/filter/logdrop-731 -j DROP -Filter 1249 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} +Filter 1249 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1248 - inet/filter/limit-1248 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1248 -j ACCEPT - inet/filter/limit-1248 -j DROP + inet/filter/limit-1248 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-732 + inet/filter/limit-1248 -m limit --limit 1/second -j LOG + inet/filter/limit-1248 -j ACCEPT + inet/filter/logdrop-732 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-732 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-732 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1248 - inet6/filter/limit-1248 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1248 -j ACCEPT - inet6/filter/limit-1248 -j DROP + inet6/filter/limit-1248 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-732 + inet6/filter/limit-1248 -m limit --limit 1/second -j LOG + inet6/filter/limit-1248 -j ACCEPT + inet6/filter/logdrop-732 -j TEE --gateway fc00::2 + inet6/filter/logdrop-732 -j DROP -Filter 1250 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} +Filter 1250 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1249 - inet/filter/limit-1249 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1249 -j RETURN - inet/filter/limit-1249 -j DROP + inet/filter/limit-1249 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-733 + inet/filter/limit-1249 -m limit --limit 1/second -j LOG + inet/filter/logdrop-733 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-733 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-733 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1249 - inet6/filter/limit-1249 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1249 -j RETURN - inet6/filter/limit-1249 -j DROP + inet6/filter/limit-1249 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-733 + inet6/filter/limit-1249 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-733 -j TEE --gateway fc00::2 + inet6/filter/logdrop-733 -j DROP -Filter 1251 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 1251 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1250 - inet/filter/limit-1250 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1250 -j logaccept-32 - inet/filter/limit-1250 -j DROP - inet/filter/logaccept-32 -m limit --limit 1/second -j LOG - inet/filter/logaccept-32 -j ACCEPT + inet/filter/limit-1250 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-734 + inet/filter/limit-1250 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1250 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1250 -j ACCEPT + inet/filter/logdrop-734 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-734 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-734 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1250 - inet6/filter/limit-1250 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1250 -j logaccept-32 - inet6/filter/limit-1250 -j DROP - inet6/filter/logaccept-32 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-32 -j ACCEPT + inet6/filter/limit-1250 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-734 + inet6/filter/limit-1250 -j TEE --gateway fc00::2 + inet6/filter/limit-1250 -j ACCEPT + inet6/filter/logdrop-734 -j TEE --gateway fc00::2 + inet6/filter/logdrop-734 -j DROP -Filter 1252 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 1252 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1251 - inet/filter/limit-1251 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1251 -j ACCEPT - inet/filter/limit-1251 -j DROP + inet/filter/limit-1251 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-735 + inet/filter/limit-1251 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1251 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-735 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-735 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-735 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1251 - inet6/filter/limit-1251 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1251 -j ACCEPT - inet6/filter/limit-1251 -j DROP + inet6/filter/limit-1251 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-735 + inet6/filter/limit-1251 -j TEE --gateway fc00::2 + inet6/filter/logdrop-735 -j TEE --gateway fc00::2 + inet6/filter/logdrop-735 -j DROP -Filter 1253 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"ulog","out":"B"} +Filter 1253 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1252 - inet/filter/limit-1252 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1252 -j logaccept-33 - inet/filter/limit-1252 -j DROP - inet/filter/logaccept-33 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-33 -j ACCEPT + inet/filter/limit-1252 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-736 + inet/filter/limit-1252 -j ACCEPT + inet/filter/logdrop-736 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-736 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-736 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1252 - inet6/filter/limit-1252 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1252 -j logaccept-33 - inet6/filter/limit-1252 -j DROP - inet6/filter/logaccept-33 -j ACCEPT + inet6/filter/limit-1252 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-736 + inet6/filter/limit-1252 -j ACCEPT + inet6/filter/logdrop-736 -j TEE --gateway fc00::2 + inet6/filter/logdrop-736 -j DROP -Filter 1254 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","out":"B"} +Filter 1254 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1253 - inet/filter/limit-1253 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1253 -j ACCEPT - inet/filter/limit-1253 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1253 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1253 - inet6/filter/limit-1253 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1253 -j ACCEPT - inet6/filter/limit-1253 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-737 + inet/filter/logdrop-737 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-737 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-737 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-737 + inet6/filter/logdrop-737 -j TEE --gateway fc00::2 + inet6/filter/logdrop-737 -j DROP -Filter 1255 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","out":"B"} +Filter 1255 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1254 - inet/filter/limit-1254 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1254 -j RETURN + inet/filter/limit-1254 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-738 inet/filter/limit-1254 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1254 -j DROP + inet/filter/limit-1254 -j ACCEPT + inet/filter/logdrop-738 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-738 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-738 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1254 - inet6/filter/limit-1254 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1254 -j RETURN - inet6/filter/limit-1254 -j DROP + inet6/filter/limit-1254 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-738 + inet6/filter/limit-1254 -j ACCEPT + inet6/filter/logdrop-738 -j TEE --gateway fc00::2 + inet6/filter/logdrop-738 -j DROP -Filter 1256 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","log":true,"out":"B"} +Filter 1256 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1255 - inet/filter/limit-1255 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1255 -j logaccept-34 + inet/filter/limit-1255 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-739 inet/filter/limit-1255 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1255 -j DROP - inet/filter/logaccept-34 -m limit --limit 1/second -j LOG - inet/filter/logaccept-34 -j ACCEPT + inet/filter/logdrop-739 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-739 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-739 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1255 - inet6/filter/limit-1255 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1255 -j logaccept-34 - inet6/filter/limit-1255 -j DROP - inet6/filter/logaccept-34 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-34 -j ACCEPT + inet6/filter/limit-1255 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-739 + inet6/filter/logdrop-739 -j TEE --gateway fc00::2 + inet6/filter/logdrop-739 -j DROP -Filter 1257 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","log":"none","out":"B"} +Filter 1257 {"conn-limit":{"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1256 - inet/filter/limit-1256 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1256 -j ACCEPT - inet/filter/limit-1256 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1256 -j DROP + inet/filter/limit-1256 -m recent --name limit-1256 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1256 -m recent --name limit-1256 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1256 - inet6/filter/limit-1256 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1256 -j ACCEPT - inet6/filter/limit-1256 -j DROP + inet6/filter/limit-1256 -m recent --name limit-1256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1256 -m recent --name limit-1256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1258 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} +Filter 1258 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1257 - inet/filter/limit-1257 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1257 -j logaccept-35 - inet/filter/limit-1257 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1257 -j DROP - inet/filter/logaccept-35 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-35 -j ACCEPT + inet/filter/limit-1257 -m recent --name limit-1257 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1257 -m recent --name limit-1257 --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1257 - inet6/filter/limit-1257 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1257 -j logaccept-35 - inet6/filter/limit-1257 -j DROP - inet6/filter/logaccept-35 -j ACCEPT + inet6/filter/limit-1257 -m recent --name limit-1257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1257 -m recent --name limit-1257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1259 {"conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1258 + inet/filter/limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1258 -m limit --limit 1/second -j LOG + inet/filter/limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1258 + inet6/filter/limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1258 -m limit --limit 1/second -j LOG + inet6/filter/limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1260 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1259 + inet/filter/limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1259 + inet6/filter/limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1261 {"conn-limit":{"log":"none"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1260 + inet/filter/limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1260 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1260 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1260 + inet6/filter/limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1260 -j TEE --gateway fc00::2 + inet6/filter/limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1262 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1261 + inet/filter/limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1261 + inet6/filter/limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 1263 {"conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1262 + inet/filter/limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1262 + inet6/filter/limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1264 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1263 + inet/filter/limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1263 + inet6/filter/limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1259 {"flow-limit":1} +Filter 1265 {"conn-limit":{"log":"none"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1258 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1258 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1258 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-592 - inet/filter/limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-592 -m limit --limit 1/second -j LOG - inet/filter/logdrop-592 -j DROP - inet6/filter/FORWARD -j limit-1258 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1258 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1258 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-592 - inet6/filter/limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-592 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-592 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1264 + inet/filter/limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1264 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1264 + inet6/filter/limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1260 {"action":"pass","flow-limit":1} +Filter 1266 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1259 - inet/filter/INPUT -j limit-1259 - inet/filter/OUTPUT -j limit-1259 - inet/filter/limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-593 - inet/filter/limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-593 -m limit --limit 1/second -j LOG - inet/filter/logdrop-593 -j DROP - inet6/filter/FORWARD -j limit-1259 - inet6/filter/INPUT -j limit-1259 - inet6/filter/OUTPUT -j limit-1259 - inet6/filter/limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-593 - inet6/filter/limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-593 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-593 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1265 + inet/filter/limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1265 + inet6/filter/limit-1265 -m recent --name limit-1265 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + +Filter 1267 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1266 + inet/filter/limit-1266 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1266 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1266 + inet6/filter/limit-1266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1268 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1267 + inet/filter/limit-1267 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1267 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1267 + inet6/filter/limit-1267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1269 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1268 + inet/filter/limit-1268 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1268 -m limit --limit 1/second -j LOG + inet/filter/limit-1268 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1268 + inet6/filter/limit-1268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1268 -m limit --limit 1/second -j LOG + inet6/filter/limit-1268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1270 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1269 + inet/filter/limit-1269 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1269 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1269 + inet6/filter/limit-1269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1271 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1270 + inet/filter/limit-1270 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1270 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1270 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1270 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1270 + inet6/filter/limit-1270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1270 -j TEE --gateway fc00::2 + inet6/filter/limit-1270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1272 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1271 + inet/filter/limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1271 + inet6/filter/limit-1271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 1273 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1272 + inet/filter/limit-1272 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1272 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1272 + inet6/filter/limit-1272 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1272 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1274 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1273 + inet/filter/limit-1273 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1273 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1273 + inet6/filter/limit-1273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1275 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1274 + inet/filter/limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1274 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1274 + inet6/filter/limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1261 {"flow-limit":1,"log":true} +Filter 1276 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1260 - inet/filter/FORWARD -j logaccept-final-0 - inet/filter/INPUT -j limit-1260 - inet/filter/INPUT -j logaccept-final-0 - inet/filter/OUTPUT -j limit-1260 - inet/filter/OUTPUT -j logaccept-final-0 - inet/filter/limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-594 - inet/filter/limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-0 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-0 -j ACCEPT - inet/filter/logdrop-594 -m limit --limit 1/second -j LOG - inet/filter/logdrop-594 -j DROP - inet6/filter/FORWARD -j limit-1260 - inet6/filter/FORWARD -j logaccept-final-0 - inet6/filter/INPUT -j limit-1260 - inet6/filter/INPUT -j logaccept-final-0 - inet6/filter/OUTPUT -j limit-1260 - inet6/filter/OUTPUT -j logaccept-final-0 - inet6/filter/limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-594 - inet6/filter/limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-0 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-0 -j ACCEPT - inet6/filter/logdrop-594 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-594 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1275 + inet/filter/limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1275 + inet6/filter/limit-1275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 1262 {"action":"pass","flow-limit":1,"log":true} +Filter 1277 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1261 - inet/filter/INPUT -j limit-1261 - inet/filter/OUTPUT -j limit-1261 - inet/filter/limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-595 - inet/filter/limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-595 -m limit --limit 1/second -j LOG - inet/filter/logdrop-595 -j DROP - inet6/filter/FORWARD -j limit-1261 - inet6/filter/INPUT -j limit-1261 - inet6/filter/OUTPUT -j limit-1261 - inet6/filter/limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-595 - inet6/filter/limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-595 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-595 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1276 + inet/filter/limit-1276 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1276 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1276 + inet6/filter/limit-1276 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1276 -j ACCEPT -Filter 1263 {"flow-limit":1,"log":"none"} +Filter 1278 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1262 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1262 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1262 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-596 - inet/filter/limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-596 -m limit --limit 1/second -j LOG - inet/filter/logdrop-596 -j DROP - inet6/filter/FORWARD -j limit-1262 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1262 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1262 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-596 - inet6/filter/limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-596 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-596 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1279 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1278 + inet/filter/limit-1278 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1278 -m limit --limit 1/second -j LOG + inet/filter/limit-1278 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1278 + inet6/filter/limit-1278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1278 -m limit --limit 1/second -j LOG + inet6/filter/limit-1278 -j ACCEPT + +Filter 1280 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1279 + inet/filter/limit-1279 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1279 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1279 + inet6/filter/limit-1279 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1279 -m limit --limit 1/second -j LOG + +Filter 1281 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1280 + inet/filter/limit-1280 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1280 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1280 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1280 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1280 + inet6/filter/limit-1280 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1280 -j TEE --gateway fc00::2 + inet6/filter/limit-1280 -j ACCEPT + +Filter 1282 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1281 + inet/filter/limit-1281 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1281 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1281 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1281 + inet6/filter/limit-1281 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1281 -j TEE --gateway fc00::2 + +Filter 1283 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1282 + inet/filter/limit-1282 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1282 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1282 + inet6/filter/limit-1282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1282 -j ACCEPT -Filter 1264 {"action":"pass","flow-limit":1,"log":"none"} +Filter 1284 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1263 - inet/filter/INPUT -j limit-1263 - inet/filter/OUTPUT -j limit-1263 - inet/filter/limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-597 - inet/filter/limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-597 -m limit --limit 1/second -j LOG - inet/filter/logdrop-597 -j DROP - inet6/filter/FORWARD -j limit-1263 - inet6/filter/INPUT -j limit-1263 - inet6/filter/OUTPUT -j limit-1263 - inet6/filter/limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-597 - inet6/filter/limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-597 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-597 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1265 {"flow-limit":1,"log":"ulog"} +Filter 1285 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1264 - inet/filter/FORWARD -j logaccept-final-1 - inet/filter/INPUT -j limit-1264 - inet/filter/INPUT -j logaccept-final-1 - inet/filter/OUTPUT -j limit-1264 - inet/filter/OUTPUT -j logaccept-final-1 - inet/filter/limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-598 - inet/filter/limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-1 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-1 -j ACCEPT - inet/filter/logdrop-598 -m limit --limit 1/second -j LOG - inet/filter/logdrop-598 -j DROP - inet6/filter/FORWARD -j limit-1264 - inet6/filter/FORWARD -j logaccept-final-1 - inet6/filter/INPUT -j limit-1264 - inet6/filter/INPUT -j logaccept-final-1 - inet6/filter/OUTPUT -j limit-1264 - inet6/filter/OUTPUT -j logaccept-final-1 - inet6/filter/limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-598 - inet6/filter/limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-1 -j ACCEPT - inet6/filter/logdrop-598 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-598 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1284 + inet/filter/limit-1284 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1284 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1284 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1284 + inet6/filter/limit-1284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1284 -j ACCEPT -Filter 1266 {"action":"pass","flow-limit":1,"log":"ulog"} +Filter 1286 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1265 - inet/filter/INPUT -j limit-1265 - inet/filter/OUTPUT -j limit-1265 - inet/filter/limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-599 - inet/filter/limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-599 -m limit --limit 1/second -j LOG - inet/filter/logdrop-599 -j DROP - inet6/filter/FORWARD -j limit-1265 - inet6/filter/INPUT -j limit-1265 - inet6/filter/OUTPUT -j limit-1265 - inet6/filter/limit-1265 -m recent --name limit-1265 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-599 - inet6/filter/logdrop-599 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-599 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1285 + inet/filter/limit-1285 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1285 -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1285 + inet6/filter/limit-1285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1267 {"flow-limit":{"log":false}} +Filter 1287 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1266 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1266 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1266 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1266 -m recent --name limit-1266 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1266 -m recent --name limit-1266 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1266 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1266 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1266 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1266 -m recent --name limit-1266 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1266 -m recent --name limit-1266 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1286 + inet/filter/limit-1286 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1286 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1286 + inet6/filter/limit-1286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1268 {"action":"pass","flow-limit":{"log":false}} +Filter 1288 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1267 - inet/filter/INPUT -j limit-1267 - inet/filter/OUTPUT -j limit-1267 - inet/filter/limit-1267 -m recent --name limit-1267 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1267 -m recent --name limit-1267 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1267 - inet6/filter/INPUT -j limit-1267 - inet6/filter/OUTPUT -j limit-1267 - inet6/filter/limit-1267 -m recent --name limit-1267 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1267 -m recent --name limit-1267 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1287 + inet/filter/limit-1287 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1287 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1287 + inet6/filter/limit-1287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1269 {"flow-limit":{"log":false},"log":true} +Filter 1289 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1268 - inet/filter/FORWARD -j logaccept-final-2 - inet/filter/INPUT -j limit-1268 - inet/filter/INPUT -j logaccept-final-2 - inet/filter/OUTPUT -j limit-1268 - inet/filter/OUTPUT -j logaccept-final-2 - inet/filter/limit-1268 -m recent --name limit-1268 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1268 -m recent --name limit-1268 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-2 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-2 -j ACCEPT - inet6/filter/FORWARD -j limit-1268 - inet6/filter/FORWARD -j logaccept-final-2 - inet6/filter/INPUT -j limit-1268 - inet6/filter/INPUT -j logaccept-final-2 - inet6/filter/OUTPUT -j limit-1268 - inet6/filter/OUTPUT -j logaccept-final-2 - inet6/filter/limit-1268 -m recent --name limit-1268 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1268 -m recent --name limit-1268 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-2 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-2 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1288 + inet/filter/limit-1288 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1288 -m limit --limit 1/second -j LOG + inet/filter/limit-1288 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1288 + inet6/filter/limit-1288 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1288 -m limit --limit 1/second -j LOG + inet6/filter/limit-1288 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1270 {"action":"pass","flow-limit":{"log":false},"log":true} +Filter 1290 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1269 - inet/filter/INPUT -j limit-1269 - inet/filter/OUTPUT -j limit-1269 - inet/filter/limit-1269 -m recent --name limit-1269 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1269 -m recent --name limit-1269 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1269 - inet6/filter/INPUT -j limit-1269 - inet6/filter/OUTPUT -j limit-1269 - inet6/filter/limit-1269 -m recent --name limit-1269 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1269 -m recent --name limit-1269 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1289 + inet/filter/limit-1289 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1289 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1289 + inet6/filter/limit-1289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1271 {"flow-limit":{"log":false},"log":"none"} +Filter 1291 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1270 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1270 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1270 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1270 -m recent --name limit-1270 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1270 -m recent --name limit-1270 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1270 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1270 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1270 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1270 -m recent --name limit-1270 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1270 -m recent --name limit-1270 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1290 + inet/filter/limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1290 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1290 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1290 + inet6/filter/limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1290 -j TEE --gateway fc00::2 + inet6/filter/limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1272 {"action":"pass","flow-limit":{"log":false},"log":"none"} +Filter 1292 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1271 - inet/filter/INPUT -j limit-1271 - inet/filter/OUTPUT -j limit-1271 - inet/filter/limit-1271 -m recent --name limit-1271 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1271 -m recent --name limit-1271 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1271 - inet6/filter/INPUT -j limit-1271 - inet6/filter/OUTPUT -j limit-1271 - inet6/filter/limit-1271 -m recent --name limit-1271 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1271 -m recent --name limit-1271 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1291 + inet/filter/limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1291 + inet6/filter/limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 1273 {"flow-limit":{"log":false},"log":"ulog"} +Filter 1293 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1272 - inet/filter/FORWARD -j logaccept-final-3 - inet/filter/INPUT -j limit-1272 - inet/filter/INPUT -j logaccept-final-3 - inet/filter/OUTPUT -j limit-1272 - inet/filter/OUTPUT -j logaccept-final-3 - inet/filter/limit-1272 -m recent --name limit-1272 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1272 -m recent --name limit-1272 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-3 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-3 -j ACCEPT - inet6/filter/FORWARD -j limit-1272 - inet6/filter/FORWARD -j logaccept-final-3 - inet6/filter/INPUT -j limit-1272 - inet6/filter/INPUT -j logaccept-final-3 - inet6/filter/OUTPUT -j limit-1272 - inet6/filter/OUTPUT -j logaccept-final-3 - inet6/filter/limit-1272 -m recent --name limit-1272 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1272 -m recent --name limit-1272 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-3 -j ACCEPT - -Filter 1274 {"action":"pass","flow-limit":{"log":false},"log":"ulog"} -(filter-limit) - inet/filter/FORWARD -j limit-1273 - inet/filter/INPUT -j limit-1273 - inet/filter/OUTPUT -j limit-1273 - inet/filter/limit-1273 -m recent --name limit-1273 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1273 -m recent --name limit-1273 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1273 - inet6/filter/INPUT -j limit-1273 - inet6/filter/OUTPUT -j limit-1273 - inet6/filter/limit-1273 -m recent --name limit-1273 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - -Filter 1275 {"flow-limit":{"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-1274 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1274 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1274 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1274 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1274 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1274 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1276 {"action":"pass","flow-limit":{"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-1275 - inet/filter/INPUT -j limit-1275 - inet/filter/OUTPUT -j limit-1275 - inet/filter/limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1275 - inet6/filter/INPUT -j limit-1275 - inet6/filter/OUTPUT -j limit-1275 - inet6/filter/limit-1275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1277 {"flow-limit":{"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1276 - inet/filter/FORWARD -j logaccept-final-4 - inet/filter/INPUT -j limit-1276 - inet/filter/INPUT -j logaccept-final-4 - inet/filter/OUTPUT -j limit-1276 - inet/filter/OUTPUT -j logaccept-final-4 - inet/filter/limit-1276 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1276 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-4 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-4 -j ACCEPT - inet6/filter/FORWARD -j limit-1276 - inet6/filter/FORWARD -j logaccept-final-4 - inet6/filter/INPUT -j limit-1276 - inet6/filter/INPUT -j logaccept-final-4 - inet6/filter/OUTPUT -j limit-1276 - inet6/filter/OUTPUT -j logaccept-final-4 - inet6/filter/limit-1276 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1276 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-4 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-4 -j ACCEPT - -Filter 1278 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1277 - inet/filter/INPUT -j limit-1277 - inet/filter/OUTPUT -j limit-1277 - inet/filter/limit-1277 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1277 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1277 - inet6/filter/INPUT -j limit-1277 - inet6/filter/OUTPUT -j limit-1277 - inet6/filter/limit-1277 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1277 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 1279 {"flow-limit":{"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1278 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1278 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1278 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1278 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1278 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1278 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1278 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1278 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1280 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1279 - inet/filter/INPUT -j limit-1279 - inet/filter/OUTPUT -j limit-1279 - inet/filter/limit-1279 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1279 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1279 - inet6/filter/INPUT -j limit-1279 - inet6/filter/OUTPUT -j limit-1279 - inet6/filter/limit-1279 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1279 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1281 {"flow-limit":{"log":false,"name":"A"},"log":"ulog"} -(filter-limit) - inet/filter/FORWARD -j limit-1280 - inet/filter/FORWARD -j logaccept-final-5 - inet/filter/INPUT -j limit-1280 - inet/filter/INPUT -j logaccept-final-5 - inet/filter/OUTPUT -j limit-1280 - inet/filter/OUTPUT -j logaccept-final-5 - inet/filter/limit-1280 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1280 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-5 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-5 -j ACCEPT - inet6/filter/FORWARD -j limit-1280 - inet6/filter/FORWARD -j logaccept-final-5 - inet6/filter/INPUT -j limit-1280 - inet6/filter/INPUT -j logaccept-final-5 - inet6/filter/OUTPUT -j limit-1280 - inet6/filter/OUTPUT -j logaccept-final-5 - inet6/filter/limit-1280 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1280 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-5 -j ACCEPT - -Filter 1282 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"ulog"} -(filter-limit) - inet/filter/FORWARD -j limit-1281 - inet/filter/INPUT -j limit-1281 - inet/filter/OUTPUT -j limit-1281 - inet/filter/limit-1281 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1281 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1281 - inet6/filter/INPUT -j limit-1281 - inet6/filter/OUTPUT -j limit-1281 - inet6/filter/limit-1281 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - -Filter 1283 {"flow-limit":{"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1282 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1282 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1282 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1282 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1282 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1282 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1282 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1284 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-1283 - inet/filter/INPUT -j limit-1283 - inet/filter/OUTPUT -j limit-1283 - inet/filter/limit-1283 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1283 - inet6/filter/INPUT -j limit-1283 - inet6/filter/OUTPUT -j limit-1283 - inet6/filter/limit-1283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1285 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1284 - inet/filter/FORWARD -j logaccept-final-6 - inet/filter/INPUT -j limit-1284 - inet/filter/INPUT -j logaccept-final-6 - inet/filter/OUTPUT -j limit-1284 - inet/filter/OUTPUT -j logaccept-final-6 - inet/filter/limit-1284 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-6 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-6 -j ACCEPT - inet6/filter/FORWARD -j limit-1284 - inet6/filter/FORWARD -j logaccept-final-6 - inet6/filter/INPUT -j limit-1284 - inet6/filter/INPUT -j logaccept-final-6 - inet6/filter/OUTPUT -j limit-1284 - inet6/filter/OUTPUT -j logaccept-final-6 - inet6/filter/limit-1284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-6 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-6 -j ACCEPT - -Filter 1286 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1285 - inet/filter/INPUT -j limit-1285 - inet/filter/OUTPUT -j limit-1285 - inet/filter/limit-1285 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1285 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1285 - inet6/filter/INPUT -j limit-1285 - inet6/filter/OUTPUT -j limit-1285 - inet6/filter/limit-1285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1285 -m limit --limit 1/second -j LOG - -Filter 1287 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1286 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1286 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1286 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1286 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1286 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1286 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1286 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1288 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-1287 - inet/filter/INPUT -j limit-1287 - inet/filter/OUTPUT -j limit-1287 - inet/filter/limit-1287 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1287 - inet6/filter/INPUT -j limit-1287 - inet6/filter/OUTPUT -j limit-1287 - inet6/filter/limit-1287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1289 {"flow-limit":{"log":false,"name":"A","update":false},"log":"ulog"} -(filter-limit) - inet/filter/FORWARD -j limit-1288 - inet/filter/FORWARD -j logaccept-final-7 - inet/filter/INPUT -j limit-1288 - inet/filter/INPUT -j logaccept-final-7 - inet/filter/OUTPUT -j limit-1288 - inet/filter/OUTPUT -j logaccept-final-7 - inet/filter/limit-1288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-7 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-7 -j ACCEPT - inet6/filter/FORWARD -j limit-1288 - inet6/filter/FORWARD -j logaccept-final-7 - inet6/filter/INPUT -j limit-1288 - inet6/filter/INPUT -j logaccept-final-7 - inet6/filter/OUTPUT -j limit-1288 - inet6/filter/OUTPUT -j logaccept-final-7 - inet6/filter/limit-1288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-7 -j ACCEPT - -Filter 1290 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"ulog"} -(filter-limit) - inet/filter/FORWARD -j limit-1289 - inet/filter/INPUT -j limit-1289 - inet/filter/OUTPUT -j limit-1289 - inet/filter/limit-1289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1289 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1289 - inet6/filter/INPUT -j limit-1289 - inet6/filter/OUTPUT -j limit-1289 - inet6/filter/limit-1289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1291 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-1290 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1290 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1290 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1290 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1290 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1290 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1292 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-1291 - inet/filter/INPUT -j limit-1291 - inet/filter/OUTPUT -j limit-1291 - inet/filter/limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1291 - inet6/filter/INPUT -j limit-1291 - inet6/filter/OUTPUT -j limit-1291 - inet6/filter/limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 1293 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1292 - inet/filter/FORWARD -j logaccept-final-8 - inet/filter/INPUT -j limit-1292 - inet/filter/INPUT -j logaccept-final-8 - inet/filter/OUTPUT -j limit-1292 - inet/filter/OUTPUT -j logaccept-final-8 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1292 inet/filter/limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-8 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-8 -j ACCEPT - inet6/filter/FORWARD -j limit-1292 - inet6/filter/FORWARD -j logaccept-final-8 - inet6/filter/INPUT -j limit-1292 - inet6/filter/INPUT -j logaccept-final-8 - inet6/filter/OUTPUT -j limit-1292 - inet6/filter/OUTPUT -j logaccept-final-8 + inet/filter/limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1292 inet6/filter/limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-8 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-8 -j ACCEPT + inet6/filter/limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1294 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +Filter 1294 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1293 - inet/filter/INPUT -j limit-1293 - inet/filter/OUTPUT -j limit-1293 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1293 inet/filter/limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1293 - inet6/filter/INPUT -j limit-1293 - inet6/filter/OUTPUT -j limit-1293 + inet/filter/limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1293 inet6/filter/limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1295 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +Filter 1295 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1294 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1294 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1294 - inet/filter/OUTPUT -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1294 inet/filter/limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1294 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1294 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1294 - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-1294 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1294 inet6/filter/limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 1296 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +Filter 1296 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1295 - inet/filter/INPUT -j limit-1295 - inet/filter/OUTPUT -j limit-1295 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1295 inet/filter/limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1295 - inet6/filter/INPUT -j limit-1295 - inet6/filter/OUTPUT -j limit-1295 + inet/filter/limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1295 inet6/filter/limit-1295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1297 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog"} +Filter 1297 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1296 - inet/filter/FORWARD -j logaccept-final-9 - inet/filter/INPUT -j limit-1296 - inet/filter/INPUT -j logaccept-final-9 - inet/filter/OUTPUT -j limit-1296 - inet/filter/OUTPUT -j logaccept-final-9 - inet/filter/limit-1296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1296 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-9 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-9 -j ACCEPT - inet6/filter/FORWARD -j limit-1296 - inet6/filter/FORWARD -j logaccept-final-9 - inet6/filter/INPUT -j limit-1296 - inet6/filter/INPUT -j logaccept-final-9 - inet6/filter/OUTPUT -j limit-1296 - inet6/filter/OUTPUT -j logaccept-final-9 - inet6/filter/limit-1296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-9 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1296 + inet/filter/limit-1296 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1296 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1296 + inet6/filter/limit-1296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1296 -j ACCEPT -Filter 1298 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog"} +Filter 1298 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1297 - inet/filter/INPUT -j limit-1297 - inet/filter/OUTPUT -j limit-1297 - inet/filter/limit-1297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1297 - inet6/filter/INPUT -j limit-1297 - inet6/filter/OUTPUT -j limit-1297 - inet6/filter/limit-1297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1299 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +Filter 1299 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1298 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1298 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1298 - inet/filter/OUTPUT -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1298 inet/filter/limit-1298 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1298 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1298 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1298 - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-1298 -m limit --limit 1/second -j LOG + inet/filter/limit-1298 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1298 inet6/filter/limit-1298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1298 -m limit --limit 1/second -j LOG + inet6/filter/limit-1298 -j ACCEPT -Filter 1300 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +Filter 1300 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1299 - inet/filter/INPUT -j limit-1299 - inet/filter/OUTPUT -j limit-1299 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1299 inet/filter/limit-1299 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1299 - inet6/filter/INPUT -j limit-1299 - inet6/filter/OUTPUT -j limit-1299 + inet/filter/limit-1299 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1299 inet6/filter/limit-1299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1299 -m limit --limit 1/second -j LOG -Filter 1301 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +Filter 1301 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1300 - inet/filter/FORWARD -j logaccept-final-10 - inet/filter/INPUT -j limit-1300 - inet/filter/INPUT -j logaccept-final-10 - inet/filter/OUTPUT -j limit-1300 - inet/filter/OUTPUT -j logaccept-final-10 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1300 inet/filter/limit-1300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-10 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-10 -j ACCEPT - inet6/filter/FORWARD -j limit-1300 - inet6/filter/FORWARD -j logaccept-final-10 - inet6/filter/INPUT -j limit-1300 - inet6/filter/INPUT -j logaccept-final-10 - inet6/filter/OUTPUT -j limit-1300 - inet6/filter/OUTPUT -j logaccept-final-10 + inet/filter/limit-1300 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1300 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1300 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1300 inet6/filter/limit-1300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-10 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-10 -j ACCEPT + inet6/filter/limit-1300 -j TEE --gateway fc00::2 + inet6/filter/limit-1300 -j ACCEPT -Filter 1302 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +Filter 1302 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1301 - inet/filter/INPUT -j limit-1301 - inet/filter/OUTPUT -j limit-1301 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1301 inet/filter/limit-1301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1301 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1301 - inet6/filter/INPUT -j limit-1301 - inet6/filter/OUTPUT -j limit-1301 + inet/filter/limit-1301 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1301 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1301 inet6/filter/limit-1301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1301 -m limit --limit 1/second -j LOG + inet6/filter/limit-1301 -j TEE --gateway fc00::2 -Filter 1303 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +Filter 1303 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1302 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1302 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1302 - inet/filter/OUTPUT -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1302 inet/filter/limit-1302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1302 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1302 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1302 - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-1302 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1302 inet6/filter/limit-1302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1302 -j ACCEPT -Filter 1304 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +Filter 1304 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1303 - inet/filter/INPUT -j limit-1303 - inet/filter/OUTPUT -j limit-1303 - inet/filter/limit-1303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1303 - inet6/filter/INPUT -j limit-1303 - inet6/filter/OUTPUT -j limit-1303 - inet6/filter/limit-1303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1305 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog"} +Filter 1305 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1304 - inet/filter/FORWARD -j logaccept-final-11 - inet/filter/INPUT -j limit-1304 - inet/filter/INPUT -j logaccept-final-11 - inet/filter/OUTPUT -j limit-1304 - inet/filter/OUTPUT -j logaccept-final-11 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1304 inet/filter/limit-1304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-11 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-11 -j ACCEPT - inet6/filter/FORWARD -j limit-1304 - inet6/filter/FORWARD -j logaccept-final-11 - inet6/filter/INPUT -j limit-1304 - inet6/filter/INPUT -j logaccept-final-11 - inet6/filter/OUTPUT -j limit-1304 - inet6/filter/OUTPUT -j logaccept-final-11 + inet/filter/limit-1304 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1304 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1304 inet6/filter/limit-1304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-11 -j ACCEPT + inet6/filter/limit-1304 -j ACCEPT -Filter 1306 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog"} +Filter 1306 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1305 - inet/filter/INPUT -j limit-1305 - inet/filter/OUTPUT -j limit-1305 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1305 inet/filter/limit-1305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1305 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1305 - inet6/filter/INPUT -j limit-1305 - inet6/filter/OUTPUT -j limit-1305 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1305 inet6/filter/limit-1305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1307 {"flow-limit":{"log":false,"name":"C"}} +Filter 1307 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1306 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1306 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1306 - inet/filter/OUTPUT -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1306 inet/filter/limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1306 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1306 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1306 - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1306 inet6/filter/limit-1306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1306 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-1306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 1308 {"action":"pass","flow-limit":{"log":false,"name":"C"}} +Filter 1308 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1307 - inet/filter/INPUT -j limit-1307 - inet/filter/OUTPUT -j limit-1307 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1307 inet/filter/limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1307 - inet6/filter/INPUT -j limit-1307 - inet6/filter/OUTPUT -j limit-1307 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1307 inet6/filter/limit-1307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1307 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1309 {"flow-limit":{"log":false,"name":"C"},"log":true} +Filter 1309 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1308 - inet/filter/FORWARD -j logaccept-final-12 - inet/filter/INPUT -j limit-1308 - inet/filter/INPUT -j logaccept-final-12 - inet/filter/OUTPUT -j limit-1308 - inet/filter/OUTPUT -j logaccept-final-12 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1308 inet/filter/limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-12 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-12 -j ACCEPT - inet6/filter/FORWARD -j limit-1308 - inet6/filter/FORWARD -j logaccept-final-12 - inet6/filter/INPUT -j limit-1308 - inet6/filter/INPUT -j logaccept-final-12 - inet6/filter/OUTPUT -j limit-1308 - inet6/filter/OUTPUT -j logaccept-final-12 + inet/filter/limit-1308 -m limit --limit 1/second -j LOG + inet/filter/limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1308 inet6/filter/limit-1308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1308 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-12 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-12 -j ACCEPT + inet6/filter/limit-1308 -m limit --limit 1/second -j LOG + inet6/filter/limit-1308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 1310 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} +Filter 1310 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1309 - inet/filter/INPUT -j limit-1309 - inet/filter/OUTPUT -j limit-1309 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1309 inet/filter/limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1309 - inet6/filter/INPUT -j limit-1309 - inet6/filter/OUTPUT -j limit-1309 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1309 inet6/filter/limit-1309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1311 {"flow-limit":{"log":false,"name":"C"},"log":"none"} +Filter 1311 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1310 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1310 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1310 - inet/filter/OUTPUT -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1310 inet/filter/limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1310 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1310 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1310 - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-1310 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1310 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1310 inet6/filter/limit-1310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1310 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-1310 -j TEE --gateway fc00::2 + inet6/filter/limit-1310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 1312 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} +Filter 1312 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1311 - inet/filter/INPUT -j limit-1311 - inet/filter/OUTPUT -j limit-1311 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1311 inet/filter/limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1311 - inet6/filter/INPUT -j limit-1311 - inet6/filter/OUTPUT -j limit-1311 + inet/filter/limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1311 inet6/filter/limit-1311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1311 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/limit-1311 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 1313 {"flow-limit":{"log":false,"name":"C"},"log":"ulog"} +Filter 1313 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1312 - inet/filter/FORWARD -j logaccept-final-13 - inet/filter/INPUT -j limit-1312 - inet/filter/INPUT -j logaccept-final-13 - inet/filter/OUTPUT -j limit-1312 - inet/filter/OUTPUT -j logaccept-final-13 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1312 inet/filter/limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-13 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-13 -j ACCEPT - inet6/filter/FORWARD -j limit-1312 - inet6/filter/FORWARD -j logaccept-final-13 - inet6/filter/INPUT -j limit-1312 - inet6/filter/INPUT -j logaccept-final-13 - inet6/filter/OUTPUT -j limit-1312 - inet6/filter/OUTPUT -j logaccept-final-13 + inet/filter/limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1312 inet6/filter/limit-1312 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1312 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-13 -j ACCEPT + inet6/filter/limit-1312 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 1314 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"ulog"} +Filter 1314 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1313 - inet/filter/INPUT -j limit-1313 - inet/filter/OUTPUT -j limit-1313 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1313 inet/filter/limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1313 - inet6/filter/INPUT -j limit-1313 - inet6/filter/OUTPUT -j limit-1313 + inet/filter/limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1313 inet6/filter/limit-1313 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1313 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1315 {"flow-limit":{"log":false,"name":"C","update":false}} +Filter 1315 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1314 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1314 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1314 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1314 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1314 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1314 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1314 + inet/filter/limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1314 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1314 + inet6/filter/limit-1314 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1314 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 1316 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} +Filter 1316 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1315 - inet/filter/INPUT -j limit-1315 - inet/filter/OUTPUT -j limit-1315 - inet/filter/limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1315 - inet6/filter/INPUT -j limit-1315 - inet6/filter/OUTPUT -j limit-1315 - inet6/filter/limit-1315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1315 + inet/filter/limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1315 + inet6/filter/limit-1315 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -Filter 1317 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} +Filter 1317 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1316 - inet/filter/FORWARD -j logaccept-final-14 - inet/filter/INPUT -j limit-1316 - inet/filter/INPUT -j logaccept-final-14 - inet/filter/OUTPUT -j limit-1316 - inet/filter/OUTPUT -j logaccept-final-14 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1316 inet/filter/limit-1316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-14 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-14 -j ACCEPT - inet6/filter/FORWARD -j limit-1316 - inet6/filter/FORWARD -j logaccept-final-14 - inet6/filter/INPUT -j limit-1316 - inet6/filter/INPUT -j logaccept-final-14 - inet6/filter/OUTPUT -j limit-1316 - inet6/filter/OUTPUT -j logaccept-final-14 + inet/filter/limit-1316 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1316 inet6/filter/limit-1316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-14 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-14 -j ACCEPT + inet6/filter/limit-1316 -j ACCEPT -Filter 1318 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} +Filter 1318 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1317 - inet/filter/INPUT -j limit-1317 - inet/filter/OUTPUT -j limit-1317 - inet/filter/limit-1317 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1317 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1317 - inet6/filter/INPUT -j limit-1317 - inet6/filter/OUTPUT -j limit-1317 - inet6/filter/limit-1317 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1317 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1319 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +Filter 1319 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1318 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1318 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1318 - inet/filter/OUTPUT -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1318 inet/filter/limit-1318 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1318 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1318 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1318 - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-1318 -m limit --limit 1/second -j LOG + inet/filter/limit-1318 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1318 inet6/filter/limit-1318 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1318 -m limit --limit 1/second -j LOG + inet6/filter/limit-1318 -j ACCEPT -Filter 1320 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +Filter 1320 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1319 - inet/filter/INPUT -j limit-1319 - inet/filter/OUTPUT -j limit-1319 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1319 inet/filter/limit-1319 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1319 - inet6/filter/INPUT -j limit-1319 - inet6/filter/OUTPUT -j limit-1319 + inet/filter/limit-1319 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1319 inet6/filter/limit-1319 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1319 -m limit --limit 1/second -j LOG -Filter 1321 {"flow-limit":{"log":false,"name":"C","update":false},"log":"ulog"} +Filter 1321 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1320 - inet/filter/FORWARD -j logaccept-final-15 - inet/filter/INPUT -j limit-1320 - inet/filter/INPUT -j logaccept-final-15 - inet/filter/OUTPUT -j limit-1320 - inet/filter/OUTPUT -j logaccept-final-15 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1320 inet/filter/limit-1320 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-15 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-15 -j ACCEPT - inet6/filter/FORWARD -j limit-1320 - inet6/filter/FORWARD -j logaccept-final-15 - inet6/filter/INPUT -j limit-1320 - inet6/filter/INPUT -j logaccept-final-15 - inet6/filter/OUTPUT -j limit-1320 - inet6/filter/OUTPUT -j logaccept-final-15 + inet/filter/limit-1320 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1320 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1320 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1320 inet6/filter/limit-1320 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-15 -j ACCEPT + inet6/filter/limit-1320 -j TEE --gateway fc00::2 + inet6/filter/limit-1320 -j ACCEPT -Filter 1322 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"ulog"} +Filter 1322 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1321 - inet/filter/INPUT -j limit-1321 - inet/filter/OUTPUT -j limit-1321 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1321 inet/filter/limit-1321 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1321 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1321 - inet6/filter/INPUT -j limit-1321 - inet6/filter/OUTPUT -j limit-1321 + inet/filter/limit-1321 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1321 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1321 inet6/filter/limit-1321 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1321 -j TEE --gateway fc00::2 -Filter 1323 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} +Filter 1323 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1322 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1322 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1322 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1322 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1322 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1322 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1322 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1322 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1322 + inet/filter/limit-1322 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1322 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1322 + inet6/filter/limit-1322 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1322 -j ACCEPT -Filter 1324 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} +Filter 1324 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1323 - inet/filter/INPUT -j limit-1323 - inet/filter/OUTPUT -j limit-1323 - inet/filter/limit-1323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1323 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1323 - inet6/filter/INPUT -j limit-1323 - inet6/filter/OUTPUT -j limit-1323 - inet6/filter/limit-1323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1323 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1325 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +Filter 1325 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1324 - inet/filter/FORWARD -j logaccept-final-16 - inet/filter/INPUT -j limit-1324 - inet/filter/INPUT -j logaccept-final-16 - inet/filter/OUTPUT -j limit-1324 - inet/filter/OUTPUT -j logaccept-final-16 - inet/filter/limit-1324 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1324 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-16 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-16 -j ACCEPT - inet6/filter/FORWARD -j limit-1324 - inet6/filter/FORWARD -j logaccept-final-16 - inet6/filter/INPUT -j limit-1324 - inet6/filter/INPUT -j logaccept-final-16 - inet6/filter/OUTPUT -j limit-1324 - inet6/filter/OUTPUT -j logaccept-final-16 - inet6/filter/limit-1324 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1324 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-16 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-16 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1324 + inet/filter/limit-1324 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1324 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1324 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1324 + inet6/filter/limit-1324 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1324 -j ACCEPT -Filter 1326 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +Filter 1326 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1325 - inet/filter/INPUT -j limit-1325 - inet/filter/OUTPUT -j limit-1325 - inet/filter/limit-1325 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1325 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1325 - inet6/filter/INPUT -j limit-1325 - inet6/filter/OUTPUT -j limit-1325 - inet6/filter/limit-1325 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1325 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1325 + inet/filter/limit-1325 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1325 -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1325 + inet6/filter/limit-1325 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1327 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +Filter 1327 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1326 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1326 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1326 - inet/filter/OUTPUT -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1326 inet/filter/limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1326 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1326 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1326 - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1326 inet6/filter/limit-1326 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1326 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-1326 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 1328 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +Filter 1328 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1327 - inet/filter/INPUT -j limit-1327 - inet/filter/OUTPUT -j limit-1327 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1327 inet/filter/limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1327 - inet6/filter/INPUT -j limit-1327 - inet6/filter/OUTPUT -j limit-1327 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1327 inet6/filter/limit-1327 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1327 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1329 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog"} +Filter 1329 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1328 - inet/filter/FORWARD -j logaccept-final-17 - inet/filter/INPUT -j limit-1328 - inet/filter/INPUT -j logaccept-final-17 - inet/filter/OUTPUT -j limit-1328 - inet/filter/OUTPUT -j logaccept-final-17 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1328 inet/filter/limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-17 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-17 -j ACCEPT - inet6/filter/FORWARD -j limit-1328 - inet6/filter/FORWARD -j logaccept-final-17 - inet6/filter/INPUT -j limit-1328 - inet6/filter/INPUT -j logaccept-final-17 - inet6/filter/OUTPUT -j limit-1328 - inet6/filter/OUTPUT -j logaccept-final-17 + inet/filter/limit-1328 -m limit --limit 1/second -j LOG + inet/filter/limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1328 inet6/filter/limit-1328 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1328 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-17 -j ACCEPT + inet6/filter/limit-1328 -m limit --limit 1/second -j LOG + inet6/filter/limit-1328 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 1330 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog"} +Filter 1330 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1329 - inet/filter/INPUT -j limit-1329 - inet/filter/OUTPUT -j limit-1329 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1329 inet/filter/limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1329 - inet6/filter/INPUT -j limit-1329 - inet6/filter/OUTPUT -j limit-1329 + inet/filter/limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1329 inet6/filter/limit-1329 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1329 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1331 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1330 + inet/filter/limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1330 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1330 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1330 + inet6/filter/limit-1330 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1330 -j TEE --gateway fc00::2 + inet6/filter/limit-1330 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1332 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1331 + inet/filter/limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1331 + inet6/filter/limit-1331 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1331 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + +Filter 1333 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1332 + inet/filter/limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1332 + inet6/filter/limit-1332 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1332 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1334 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1333 + inet/filter/limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1333 + inet6/filter/limit-1333 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1333 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1335 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1334 + inet/filter/limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1334 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1334 + inet6/filter/limit-1334 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1334 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1336 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1335 + inet/filter/limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1335 + inet6/filter/limit-1335 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + +Filter 1337 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1336 + inet/filter/limit-1336 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1336 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1336 + inet6/filter/limit-1336 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1336 -j ACCEPT -Filter 1331 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +Filter 1338 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1330 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1330 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1330 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1330 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1330 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1330 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1330 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1332 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +Filter 1339 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1338 + inet/filter/limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1338 -m limit --limit 1/second -j LOG + inet/filter/limit-1338 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1338 + inet6/filter/limit-1338 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1338 -m limit --limit 1/second -j LOG + inet6/filter/limit-1338 -j ACCEPT + +Filter 1340 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1339 + inet/filter/limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1339 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1339 + inet6/filter/limit-1339 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1339 -m limit --limit 1/second -j LOG + +Filter 1341 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1340 + inet/filter/limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1340 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1340 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1340 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1340 + inet6/filter/limit-1340 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1340 -j TEE --gateway fc00::2 + inet6/filter/limit-1340 -j ACCEPT + +Filter 1342 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1341 + inet/filter/limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1341 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1341 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1341 + inet6/filter/limit-1341 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1341 -j TEE --gateway fc00::2 + +Filter 1343 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1342 + inet/filter/limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1342 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1342 + inet6/filter/limit-1342 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1342 -j ACCEPT + +Filter 1344 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1331 - inet/filter/INPUT -j limit-1331 - inet/filter/OUTPUT -j limit-1331 - inet/filter/limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1331 - inet6/filter/INPUT -j limit-1331 - inet6/filter/OUTPUT -j limit-1331 - inet6/filter/limit-1331 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1333 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +Filter 1345 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1332 - inet/filter/FORWARD -j logaccept-final-18 - inet/filter/INPUT -j limit-1332 - inet/filter/INPUT -j logaccept-final-18 - inet/filter/OUTPUT -j limit-1332 - inet/filter/OUTPUT -j logaccept-final-18 - inet/filter/limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-18 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-18 -j ACCEPT - inet6/filter/FORWARD -j limit-1332 - inet6/filter/FORWARD -j logaccept-final-18 - inet6/filter/INPUT -j limit-1332 - inet6/filter/INPUT -j logaccept-final-18 - inet6/filter/OUTPUT -j limit-1332 - inet6/filter/OUTPUT -j logaccept-final-18 - inet6/filter/limit-1332 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-18 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-18 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1344 + inet/filter/limit-1344 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1344 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1344 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1344 + inet6/filter/limit-1344 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1344 -j ACCEPT -Filter 1334 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +Filter 1346 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1333 - inet/filter/INPUT -j limit-1333 - inet/filter/OUTPUT -j limit-1333 - inet/filter/limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1333 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1333 - inet6/filter/INPUT -j limit-1333 - inet6/filter/OUTPUT -j limit-1333 - inet6/filter/limit-1333 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1333 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1345 + inet/filter/limit-1345 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1345 -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1345 + inet6/filter/limit-1345 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1335 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +Filter 1347 {"conn-limit":{"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1334 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1334 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1334 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1334 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1334 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1334 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1334 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1346 + inet/filter/limit-1346 -m recent --name limit-1346 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-740 + inet/filter/limit-1346 -m recent --name limit-1346 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-740 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-740 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1346 + inet6/filter/limit-1346 -m recent --name limit-1346 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-740 + inet6/filter/limit-1346 -m recent --name limit-1346 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-740 -j DROP -Filter 1336 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +Filter 1348 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1335 - inet/filter/INPUT -j limit-1335 - inet/filter/OUTPUT -j limit-1335 - inet/filter/limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1335 - inet6/filter/INPUT -j limit-1335 - inet6/filter/OUTPUT -j limit-1335 - inet6/filter/limit-1335 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1347 + inet/filter/limit-1347 -m recent --name limit-1347 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-741 + inet/filter/limit-1347 -m recent --name limit-1347 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-741 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-741 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1347 + inet6/filter/limit-1347 -m recent --name limit-1347 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-741 + inet6/filter/limit-1347 -m recent --name limit-1347 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-741 -j DROP -Filter 1337 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog"} +Filter 1349 {"conn-limit":{"log":"ulog"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1336 - inet/filter/FORWARD -j logaccept-final-19 - inet/filter/INPUT -j limit-1336 - inet/filter/INPUT -j logaccept-final-19 - inet/filter/OUTPUT -j limit-1336 - inet/filter/OUTPUT -j logaccept-final-19 - inet/filter/limit-1336 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-19 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-19 -j ACCEPT - inet6/filter/FORWARD -j limit-1336 - inet6/filter/FORWARD -j logaccept-final-19 - inet6/filter/INPUT -j limit-1336 - inet6/filter/INPUT -j logaccept-final-19 - inet6/filter/OUTPUT -j limit-1336 - inet6/filter/OUTPUT -j logaccept-final-19 - inet6/filter/limit-1336 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-19 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1348 + inet/filter/limit-1348 -m recent --name limit-1348 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-742 + inet/filter/limit-1348 -m limit --limit 1/second -j LOG + inet/filter/limit-1348 -m recent --name limit-1348 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-742 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-742 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1348 + inet6/filter/limit-1348 -m recent --name limit-1348 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-742 + inet6/filter/limit-1348 -m limit --limit 1/second -j LOG + inet6/filter/limit-1348 -m recent --name limit-1348 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-742 -j DROP -Filter 1338 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog"} +Filter 1350 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1337 - inet/filter/INPUT -j limit-1337 - inet/filter/OUTPUT -j limit-1337 - inet/filter/limit-1337 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1337 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1337 - inet6/filter/INPUT -j limit-1337 - inet6/filter/OUTPUT -j limit-1337 - inet6/filter/limit-1337 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1349 + inet/filter/limit-1349 -m recent --name limit-1349 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-743 + inet/filter/limit-1349 -m recent --name limit-1349 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-743 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-743 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1349 + inet6/filter/limit-1349 -m recent --name limit-1349 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-743 + inet6/filter/limit-1349 -m recent --name limit-1349 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-743 -j DROP -Filter 1339 {"flow-limit":{}} +Filter 1351 {"conn-limit":{"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1338 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1338 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1338 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1338 -m recent --name limit-1338 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-600 - inet/filter/limit-1338 -m recent --name limit-1338 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-600 -m limit --limit 1/second -j LOG - inet/filter/logdrop-600 -j DROP - inet6/filter/FORWARD -j limit-1338 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1338 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1338 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1338 -m recent --name limit-1338 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-600 - inet6/filter/limit-1338 -m recent --name limit-1338 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-600 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-600 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1350 + inet/filter/limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-744 + inet/filter/limit-1350 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1350 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-744 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-744 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1350 + inet6/filter/limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-744 + inet6/filter/limit-1350 -j TEE --gateway fc00::2 + inet6/filter/limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-744 -j DROP -Filter 1340 {"action":"pass","flow-limit":{}} +Filter 1352 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1339 - inet/filter/INPUT -j limit-1339 - inet/filter/OUTPUT -j limit-1339 - inet/filter/limit-1339 -m recent --name limit-1339 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-601 - inet/filter/limit-1339 -m recent --name limit-1339 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-601 -m limit --limit 1/second -j LOG - inet/filter/logdrop-601 -j DROP - inet6/filter/FORWARD -j limit-1339 - inet6/filter/INPUT -j limit-1339 - inet6/filter/OUTPUT -j limit-1339 - inet6/filter/limit-1339 -m recent --name limit-1339 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-601 - inet6/filter/limit-1339 -m recent --name limit-1339 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-601 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-601 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1351 + inet/filter/limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-745 + inet/filter/limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-745 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-745 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1351 + inet6/filter/limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-745 + inet6/filter/limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-745 -j DROP -Filter 1341 {"flow-limit":{},"log":true} +Filter 1353 {"conn-limit":{"log":"ulog"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1340 - inet/filter/FORWARD -j logaccept-final-20 - inet/filter/INPUT -j limit-1340 - inet/filter/INPUT -j logaccept-final-20 - inet/filter/OUTPUT -j limit-1340 - inet/filter/OUTPUT -j logaccept-final-20 - inet/filter/limit-1340 -m recent --name limit-1340 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-602 - inet/filter/limit-1340 -m recent --name limit-1340 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-20 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-20 -j ACCEPT - inet/filter/logdrop-602 -m limit --limit 1/second -j LOG - inet/filter/logdrop-602 -j DROP - inet6/filter/FORWARD -j limit-1340 - inet6/filter/FORWARD -j logaccept-final-20 - inet6/filter/INPUT -j limit-1340 - inet6/filter/INPUT -j logaccept-final-20 - inet6/filter/OUTPUT -j limit-1340 - inet6/filter/OUTPUT -j logaccept-final-20 - inet6/filter/limit-1340 -m recent --name limit-1340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-602 - inet6/filter/limit-1340 -m recent --name limit-1340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-20 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-20 -j ACCEPT - inet6/filter/logdrop-602 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-602 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1352 + inet/filter/limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-746 + inet/filter/limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-746 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-746 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1352 + inet6/filter/limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-746 + inet6/filter/limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-746 -j DROP -Filter 1342 {"action":"pass","flow-limit":{},"log":true} +Filter 1354 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1341 - inet/filter/INPUT -j limit-1341 - inet/filter/OUTPUT -j limit-1341 - inet/filter/limit-1341 -m recent --name limit-1341 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-603 - inet/filter/limit-1341 -m recent --name limit-1341 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-603 -m limit --limit 1/second -j LOG - inet/filter/logdrop-603 -j DROP - inet6/filter/FORWARD -j limit-1341 - inet6/filter/INPUT -j limit-1341 - inet6/filter/OUTPUT -j limit-1341 - inet6/filter/limit-1341 -m recent --name limit-1341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-603 - inet6/filter/limit-1341 -m recent --name limit-1341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-603 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-603 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1353 + inet/filter/limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-747 + inet/filter/limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-747 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-747 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1353 + inet6/filter/limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-747 + inet6/filter/limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-747 -j DROP -Filter 1343 {"flow-limit":{},"log":"none"} +Filter 1355 {"conn-limit":{"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1342 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1342 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1342 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1342 -m recent --name limit-1342 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-604 - inet/filter/limit-1342 -m recent --name limit-1342 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-604 -m limit --limit 1/second -j LOG - inet/filter/logdrop-604 -j DROP - inet6/filter/FORWARD -j limit-1342 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1342 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1342 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1342 -m recent --name limit-1342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-604 - inet6/filter/limit-1342 -m recent --name limit-1342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-604 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-604 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1354 + inet/filter/limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-748 + inet/filter/limit-1354 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-748 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-748 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1354 + inet6/filter/limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-748 + inet6/filter/limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-748 -j DROP -Filter 1344 {"action":"pass","flow-limit":{},"log":"none"} +Filter 1356 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1343 - inet/filter/INPUT -j limit-1343 - inet/filter/OUTPUT -j limit-1343 - inet/filter/limit-1343 -m recent --name limit-1343 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-605 - inet/filter/limit-1343 -m recent --name limit-1343 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-605 -m limit --limit 1/second -j LOG - inet/filter/logdrop-605 -j DROP - inet6/filter/FORWARD -j limit-1343 - inet6/filter/INPUT -j limit-1343 - inet6/filter/OUTPUT -j limit-1343 - inet6/filter/limit-1343 -m recent --name limit-1343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-605 - inet6/filter/limit-1343 -m recent --name limit-1343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-605 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-605 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1355 + inet/filter/limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-749 + inet/filter/limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-749 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-749 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1355 + inet6/filter/limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-749 + inet6/filter/logdrop-749 -j DROP -Filter 1345 {"flow-limit":{},"log":"ulog"} +Filter 1357 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1344 - inet/filter/FORWARD -j logaccept-final-21 - inet/filter/INPUT -j limit-1344 - inet/filter/INPUT -j logaccept-final-21 - inet/filter/OUTPUT -j limit-1344 - inet/filter/OUTPUT -j logaccept-final-21 - inet/filter/limit-1344 -m recent --name limit-1344 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-606 - inet/filter/limit-1344 -m recent --name limit-1344 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-21 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-21 -j ACCEPT - inet/filter/logdrop-606 -m limit --limit 1/second -j LOG - inet/filter/logdrop-606 -j DROP - inet6/filter/FORWARD -j limit-1344 - inet6/filter/FORWARD -j logaccept-final-21 - inet6/filter/INPUT -j limit-1344 - inet6/filter/INPUT -j logaccept-final-21 - inet6/filter/OUTPUT -j limit-1344 - inet6/filter/OUTPUT -j logaccept-final-21 - inet6/filter/limit-1344 -m recent --name limit-1344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-606 - inet6/filter/limit-1344 -m recent --name limit-1344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-21 -j ACCEPT - inet6/filter/logdrop-606 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-606 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1356 + inet/filter/limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-750 + inet/filter/limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-750 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-750 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1356 + inet6/filter/limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-750 + inet6/filter/limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-750 -j DROP -Filter 1346 {"action":"pass","flow-limit":{},"log":"ulog"} +Filter 1358 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1345 - inet/filter/INPUT -j limit-1345 - inet/filter/OUTPUT -j limit-1345 - inet/filter/limit-1345 -m recent --name limit-1345 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-607 - inet/filter/limit-1345 -m recent --name limit-1345 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-607 -m limit --limit 1/second -j LOG - inet/filter/logdrop-607 -j DROP - inet6/filter/FORWARD -j limit-1345 - inet6/filter/INPUT -j limit-1345 - inet6/filter/OUTPUT -j limit-1345 - inet6/filter/limit-1345 -m recent --name limit-1345 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-607 - inet6/filter/logdrop-607 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-607 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1357 + inet/filter/limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-751 + inet/filter/limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-751 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-751 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1357 + inet6/filter/limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-751 + inet6/filter/limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-751 -j DROP -Filter 1347 {"flow-limit":{"name":"A"}} +Filter 1359 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1346 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1346 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1346 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1346 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-608 - inet/filter/limit-1346 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-608 -m limit --limit 1/second -j LOG - inet/filter/logdrop-608 -j DROP - inet6/filter/FORWARD -j limit-1346 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1346 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1346 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-608 - inet6/filter/limit-1346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-608 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-608 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1358 + inet/filter/limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-752 + inet/filter/limit-1358 -m limit --limit 1/second -j LOG + inet/filter/limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-752 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-752 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1358 + inet6/filter/limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-752 + inet6/filter/limit-1358 -m limit --limit 1/second -j LOG + inet6/filter/limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-752 -j DROP -Filter 1348 {"action":"pass","flow-limit":{"name":"A"}} +Filter 1360 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1347 - inet/filter/INPUT -j limit-1347 - inet/filter/OUTPUT -j limit-1347 - inet/filter/limit-1347 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-609 - inet/filter/limit-1347 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-609 -m limit --limit 1/second -j LOG - inet/filter/logdrop-609 -j DROP - inet6/filter/FORWARD -j limit-1347 - inet6/filter/INPUT -j limit-1347 - inet6/filter/OUTPUT -j limit-1347 - inet6/filter/limit-1347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-609 - inet6/filter/limit-1347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-609 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-609 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1359 + inet/filter/limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-753 + inet/filter/limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-753 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-753 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1359 + inet6/filter/limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-753 + inet6/filter/limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-753 -j DROP -Filter 1349 {"flow-limit":{"name":"A"},"log":true} +Filter 1361 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1348 - inet/filter/FORWARD -j logaccept-final-22 - inet/filter/INPUT -j limit-1348 - inet/filter/INPUT -j logaccept-final-22 - inet/filter/OUTPUT -j limit-1348 - inet/filter/OUTPUT -j logaccept-final-22 - inet/filter/limit-1348 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-610 - inet/filter/limit-1348 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-22 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-22 -j ACCEPT - inet/filter/logdrop-610 -m limit --limit 1/second -j LOG - inet/filter/logdrop-610 -j DROP - inet6/filter/FORWARD -j limit-1348 - inet6/filter/FORWARD -j logaccept-final-22 - inet6/filter/INPUT -j limit-1348 - inet6/filter/INPUT -j logaccept-final-22 - inet6/filter/OUTPUT -j limit-1348 - inet6/filter/OUTPUT -j logaccept-final-22 - inet6/filter/limit-1348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-610 - inet6/filter/limit-1348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-22 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-22 -j ACCEPT - inet6/filter/logdrop-610 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-610 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1360 + inet/filter/limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-754 + inet/filter/limit-1360 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1360 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-754 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-754 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1360 + inet6/filter/limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-754 + inet6/filter/limit-1360 -j TEE --gateway fc00::2 + inet6/filter/limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-754 -j DROP -Filter 1350 {"action":"pass","flow-limit":{"name":"A"},"log":true} +Filter 1362 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1349 - inet/filter/INPUT -j limit-1349 - inet/filter/OUTPUT -j limit-1349 - inet/filter/limit-1349 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-611 - inet/filter/limit-1349 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-611 -m limit --limit 1/second -j LOG - inet/filter/logdrop-611 -j DROP - inet6/filter/FORWARD -j limit-1349 - inet6/filter/INPUT -j limit-1349 - inet6/filter/OUTPUT -j limit-1349 - inet6/filter/limit-1349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-611 - inet6/filter/limit-1349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-611 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-611 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1361 + inet/filter/limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-755 + inet/filter/limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-755 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-755 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1361 + inet6/filter/limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-755 + inet6/filter/limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-755 -j DROP -Filter 1351 {"flow-limit":{"name":"A"},"log":"none"} +Filter 1363 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1350 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1350 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1350 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1350 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-612 - inet/filter/limit-1350 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-612 -m limit --limit 1/second -j LOG - inet/filter/logdrop-612 -j DROP - inet6/filter/FORWARD -j limit-1350 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1350 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1350 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-612 - inet6/filter/limit-1350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-612 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-612 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1362 + inet/filter/limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-756 + inet/filter/limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-756 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-756 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1362 + inet6/filter/limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-756 + inet6/filter/limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-756 -j DROP -Filter 1352 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} +Filter 1364 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1351 - inet/filter/INPUT -j limit-1351 - inet/filter/OUTPUT -j limit-1351 - inet/filter/limit-1351 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-613 - inet/filter/limit-1351 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-613 -m limit --limit 1/second -j LOG - inet/filter/logdrop-613 -j DROP - inet6/filter/FORWARD -j limit-1351 - inet6/filter/INPUT -j limit-1351 - inet6/filter/OUTPUT -j limit-1351 - inet6/filter/limit-1351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-613 - inet6/filter/limit-1351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-613 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-613 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1363 + inet/filter/limit-1363 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-757 + inet/filter/limit-1363 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-757 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-757 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1363 + inet6/filter/limit-1363 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-757 + inet6/filter/limit-1363 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-757 -j DROP -Filter 1353 {"flow-limit":{"name":"A"},"log":"ulog"} +Filter 1365 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1352 - inet/filter/FORWARD -j logaccept-final-23 - inet/filter/INPUT -j limit-1352 - inet/filter/INPUT -j logaccept-final-23 - inet/filter/OUTPUT -j limit-1352 - inet/filter/OUTPUT -j logaccept-final-23 - inet/filter/limit-1352 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-614 - inet/filter/limit-1352 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-23 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-23 -j ACCEPT - inet/filter/logdrop-614 -m limit --limit 1/second -j LOG - inet/filter/logdrop-614 -j DROP - inet6/filter/FORWARD -j limit-1352 - inet6/filter/FORWARD -j logaccept-final-23 - inet6/filter/INPUT -j limit-1352 - inet6/filter/INPUT -j logaccept-final-23 - inet6/filter/OUTPUT -j limit-1352 - inet6/filter/OUTPUT -j logaccept-final-23 - inet6/filter/limit-1352 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-614 - inet6/filter/limit-1352 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-23 -j ACCEPT - inet6/filter/logdrop-614 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-614 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1364 + inet/filter/limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-758 + inet/filter/limit-1364 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-758 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-758 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1364 + inet6/filter/limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-758 + inet6/filter/limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-758 -j DROP -Filter 1354 {"action":"pass","flow-limit":{"name":"A"},"log":"ulog"} +Filter 1366 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1353 - inet/filter/INPUT -j limit-1353 - inet/filter/OUTPUT -j limit-1353 - inet/filter/limit-1353 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-615 - inet/filter/limit-1353 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-615 -m limit --limit 1/second -j LOG - inet/filter/logdrop-615 -j DROP - inet6/filter/FORWARD -j limit-1353 - inet6/filter/INPUT -j limit-1353 - inet6/filter/OUTPUT -j limit-1353 - inet6/filter/limit-1353 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-615 - inet6/filter/logdrop-615 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-615 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1365 + inet/filter/limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-759 + inet/filter/limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-759 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-759 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1365 + inet6/filter/limit-1365 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-759 + inet6/filter/logdrop-759 -j DROP -Filter 1355 {"flow-limit":{"name":"A","update":false}} +Filter 1367 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1354 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1354 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1354 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1354 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-616 - inet/filter/logdrop-616 -m limit --limit 1/second -j LOG - inet/filter/logdrop-616 -j DROP - inet6/filter/FORWARD -j limit-1354 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1354 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1354 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1354 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-616 - inet6/filter/logdrop-616 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-616 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1366 + inet/filter/limit-1366 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-760 + inet/filter/limit-1366 -j ACCEPT + inet/filter/logdrop-760 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-760 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1366 + inet6/filter/limit-1366 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-760 + inet6/filter/limit-1366 -j ACCEPT + inet6/filter/logdrop-760 -j DROP -Filter 1356 {"action":"pass","flow-limit":{"name":"A","update":false}} +Filter 1368 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1355 - inet/filter/INPUT -j limit-1355 - inet/filter/OUTPUT -j limit-1355 - inet/filter/limit-1355 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-617 - inet/filter/logdrop-617 -m limit --limit 1/second -j LOG - inet/filter/logdrop-617 -j DROP - inet6/filter/FORWARD -j limit-1355 - inet6/filter/INPUT -j limit-1355 - inet6/filter/OUTPUT -j limit-1355 - inet6/filter/limit-1355 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-617 - inet6/filter/logdrop-617 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-617 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-761 + inet/filter/logdrop-761 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-761 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-761 + inet6/filter/logdrop-761 -j DROP -Filter 1357 {"flow-limit":{"name":"A","update":false},"log":true} +Filter 1369 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1356 - inet/filter/FORWARD -j logaccept-final-24 - inet/filter/INPUT -j limit-1356 - inet/filter/INPUT -j logaccept-final-24 - inet/filter/OUTPUT -j limit-1356 - inet/filter/OUTPUT -j logaccept-final-24 - inet/filter/limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-618 - inet/filter/logaccept-final-24 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-24 -j ACCEPT - inet/filter/logdrop-618 -m limit --limit 1/second -j LOG - inet/filter/logdrop-618 -j DROP - inet6/filter/FORWARD -j limit-1356 - inet6/filter/FORWARD -j logaccept-final-24 - inet6/filter/INPUT -j limit-1356 - inet6/filter/INPUT -j logaccept-final-24 - inet6/filter/OUTPUT -j limit-1356 - inet6/filter/OUTPUT -j logaccept-final-24 - inet6/filter/limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-618 - inet6/filter/logaccept-final-24 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-24 -j ACCEPT - inet6/filter/logdrop-618 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-618 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1368 + inet/filter/limit-1368 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-762 + inet/filter/limit-1368 -m limit --limit 1/second -j LOG + inet/filter/limit-1368 -j ACCEPT + inet/filter/logdrop-762 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-762 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1368 + inet6/filter/limit-1368 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-762 + inet6/filter/limit-1368 -m limit --limit 1/second -j LOG + inet6/filter/limit-1368 -j ACCEPT + inet6/filter/logdrop-762 -j DROP -Filter 1358 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} +Filter 1370 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1357 - inet/filter/INPUT -j limit-1357 - inet/filter/OUTPUT -j limit-1357 - inet/filter/limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-619 - inet/filter/limit-1357 -m limit --limit 1/second -j LOG - inet/filter/logdrop-619 -m limit --limit 1/second -j LOG - inet/filter/logdrop-619 -j DROP - inet6/filter/FORWARD -j limit-1357 - inet6/filter/INPUT -j limit-1357 - inet6/filter/OUTPUT -j limit-1357 - inet6/filter/limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-619 - inet6/filter/limit-1357 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-619 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-619 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1369 + inet/filter/limit-1369 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-763 + inet/filter/limit-1369 -m limit --limit 1/second -j LOG + inet/filter/logdrop-763 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-763 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1369 + inet6/filter/limit-1369 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-763 + inet6/filter/limit-1369 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-763 -j DROP -Filter 1359 {"flow-limit":{"name":"A","update":false},"log":"none"} +Filter 1371 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1358 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1358 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1358 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-620 - inet/filter/logdrop-620 -m limit --limit 1/second -j LOG - inet/filter/logdrop-620 -j DROP - inet6/filter/FORWARD -j limit-1358 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1358 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1358 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-620 - inet6/filter/logdrop-620 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-620 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1370 + inet/filter/limit-1370 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-764 + inet/filter/limit-1370 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1370 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1370 -j ACCEPT + inet/filter/logdrop-764 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-764 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1370 + inet6/filter/limit-1370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-764 + inet6/filter/limit-1370 -j TEE --gateway fc00::2 + inet6/filter/limit-1370 -j ACCEPT + inet6/filter/logdrop-764 -j DROP -Filter 1360 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} +Filter 1372 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1359 - inet/filter/INPUT -j limit-1359 - inet/filter/OUTPUT -j limit-1359 - inet/filter/limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-621 - inet/filter/logdrop-621 -m limit --limit 1/second -j LOG - inet/filter/logdrop-621 -j DROP - inet6/filter/FORWARD -j limit-1359 - inet6/filter/INPUT -j limit-1359 - inet6/filter/OUTPUT -j limit-1359 - inet6/filter/limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-621 - inet6/filter/logdrop-621 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-621 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1371 + inet/filter/limit-1371 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-765 + inet/filter/limit-1371 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1371 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-765 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-765 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1371 + inet6/filter/limit-1371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-765 + inet6/filter/limit-1371 -j TEE --gateway fc00::2 + inet6/filter/logdrop-765 -j DROP -Filter 1361 {"flow-limit":{"name":"A","update":false},"log":"ulog"} +Filter 1373 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1360 - inet/filter/FORWARD -j logaccept-final-25 - inet/filter/INPUT -j limit-1360 - inet/filter/INPUT -j logaccept-final-25 - inet/filter/OUTPUT -j limit-1360 - inet/filter/OUTPUT -j logaccept-final-25 - inet/filter/limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-622 - inet/filter/logaccept-final-25 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-25 -j ACCEPT - inet/filter/logdrop-622 -m limit --limit 1/second -j LOG - inet/filter/logdrop-622 -j DROP - inet6/filter/FORWARD -j limit-1360 - inet6/filter/FORWARD -j logaccept-final-25 - inet6/filter/INPUT -j limit-1360 - inet6/filter/INPUT -j logaccept-final-25 - inet6/filter/OUTPUT -j limit-1360 - inet6/filter/OUTPUT -j logaccept-final-25 - inet6/filter/limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-622 - inet6/filter/logaccept-final-25 -j ACCEPT - inet6/filter/logdrop-622 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-622 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1372 + inet/filter/limit-1372 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-766 + inet/filter/limit-1372 -j ACCEPT + inet/filter/logdrop-766 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-766 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1372 + inet6/filter/limit-1372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-766 + inet6/filter/limit-1372 -j ACCEPT + inet6/filter/logdrop-766 -j DROP -Filter 1362 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"ulog"} +Filter 1374 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1361 - inet/filter/INPUT -j limit-1361 - inet/filter/OUTPUT -j limit-1361 - inet/filter/limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-623 - inet/filter/limit-1361 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-623 -m limit --limit 1/second -j LOG - inet/filter/logdrop-623 -j DROP - inet6/filter/FORWARD -j limit-1361 - inet6/filter/INPUT -j limit-1361 - inet6/filter/OUTPUT -j limit-1361 - inet6/filter/limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-623 - inet6/filter/logdrop-623 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-623 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-767 + inet/filter/logdrop-767 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-767 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-767 + inet6/filter/logdrop-767 -j DROP -Filter 1363 {"flow-limit":{"addr":"dest","name":"A"}} +Filter 1375 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1362 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1362 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1362 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1362 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-624 - inet/filter/limit-1362 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-624 -m limit --limit 1/second -j LOG - inet/filter/logdrop-624 -j DROP - inet6/filter/FORWARD -j limit-1362 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1362 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1362 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-624 - inet6/filter/limit-1362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-624 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-624 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1374 + inet/filter/limit-1374 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-768 + inet/filter/limit-1374 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1374 -j ACCEPT + inet/filter/logdrop-768 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-768 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1374 + inet6/filter/limit-1374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-768 + inet6/filter/limit-1374 -j ACCEPT + inet6/filter/logdrop-768 -j DROP -Filter 1364 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} +Filter 1376 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1363 - inet/filter/INPUT -j limit-1363 - inet/filter/OUTPUT -j limit-1363 - inet/filter/limit-1363 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-625 - inet/filter/limit-1363 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-625 -m limit --limit 1/second -j LOG - inet/filter/logdrop-625 -j DROP - inet6/filter/FORWARD -j limit-1363 - inet6/filter/INPUT -j limit-1363 - inet6/filter/OUTPUT -j limit-1363 - inet6/filter/limit-1363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-625 - inet6/filter/limit-1363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-625 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-625 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1375 + inet/filter/limit-1375 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-769 + inet/filter/limit-1375 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-769 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-769 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1375 + inet6/filter/limit-1375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-769 + inet6/filter/logdrop-769 -j DROP -Filter 1365 {"flow-limit":{"addr":"dest","name":"A"},"log":true} +Filter 1377 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1364 - inet/filter/FORWARD -j logaccept-final-26 - inet/filter/INPUT -j limit-1364 - inet/filter/INPUT -j logaccept-final-26 - inet/filter/OUTPUT -j limit-1364 - inet/filter/OUTPUT -j logaccept-final-26 - inet/filter/limit-1364 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-626 - inet/filter/limit-1364 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-26 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-26 -j ACCEPT - inet/filter/logdrop-626 -m limit --limit 1/second -j LOG - inet/filter/logdrop-626 -j DROP - inet6/filter/FORWARD -j limit-1364 - inet6/filter/FORWARD -j logaccept-final-26 - inet6/filter/INPUT -j limit-1364 - inet6/filter/INPUT -j logaccept-final-26 - inet6/filter/OUTPUT -j limit-1364 - inet6/filter/OUTPUT -j logaccept-final-26 - inet6/filter/limit-1364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-626 - inet6/filter/limit-1364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-26 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-26 -j ACCEPT - inet6/filter/logdrop-626 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-626 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1376 + inet/filter/limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-770 + inet/filter/limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-770 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-770 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1376 + inet6/filter/limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-770 + inet6/filter/limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-770 -j DROP -Filter 1366 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} +Filter 1378 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1365 - inet/filter/INPUT -j limit-1365 - inet/filter/OUTPUT -j limit-1365 - inet/filter/limit-1365 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-627 - inet/filter/limit-1365 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-627 -m limit --limit 1/second -j LOG - inet/filter/logdrop-627 -j DROP - inet6/filter/FORWARD -j limit-1365 - inet6/filter/INPUT -j limit-1365 - inet6/filter/OUTPUT -j limit-1365 - inet6/filter/limit-1365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-627 - inet6/filter/limit-1365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-627 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-627 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1377 + inet/filter/limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-771 + inet/filter/limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-771 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-771 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1377 + inet6/filter/limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-771 + inet6/filter/limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-771 -j DROP -Filter 1367 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} +Filter 1379 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1366 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1366 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1366 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1366 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-628 - inet/filter/limit-1366 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-628 -m limit --limit 1/second -j LOG - inet/filter/logdrop-628 -j DROP - inet6/filter/FORWARD -j limit-1366 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1366 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1366 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-628 - inet6/filter/limit-1366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-628 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-628 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1378 + inet/filter/limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-772 + inet/filter/limit-1378 -m limit --limit 1/second -j LOG + inet/filter/limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-772 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-772 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1378 + inet6/filter/limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-772 + inet6/filter/limit-1378 -m limit --limit 1/second -j LOG + inet6/filter/limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-772 -j DROP -Filter 1368 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} +Filter 1380 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1367 - inet/filter/INPUT -j limit-1367 - inet/filter/OUTPUT -j limit-1367 - inet/filter/limit-1367 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-629 - inet/filter/limit-1367 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-629 -m limit --limit 1/second -j LOG - inet/filter/logdrop-629 -j DROP - inet6/filter/FORWARD -j limit-1367 - inet6/filter/INPUT -j limit-1367 - inet6/filter/OUTPUT -j limit-1367 - inet6/filter/limit-1367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-629 - inet6/filter/limit-1367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-629 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-629 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1379 + inet/filter/limit-1379 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-773 + inet/filter/limit-1379 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-773 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-773 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1379 + inet6/filter/limit-1379 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-773 + inet6/filter/limit-1379 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-773 -j DROP -Filter 1369 {"flow-limit":{"addr":"dest","name":"A"},"log":"ulog"} +Filter 1381 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1368 - inet/filter/FORWARD -j logaccept-final-27 - inet/filter/INPUT -j limit-1368 - inet/filter/INPUT -j logaccept-final-27 - inet/filter/OUTPUT -j limit-1368 - inet/filter/OUTPUT -j logaccept-final-27 - inet/filter/limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-630 - inet/filter/limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-27 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-27 -j ACCEPT - inet/filter/logdrop-630 -m limit --limit 1/second -j LOG - inet/filter/logdrop-630 -j DROP - inet6/filter/FORWARD -j limit-1368 - inet6/filter/FORWARD -j logaccept-final-27 - inet6/filter/INPUT -j limit-1368 - inet6/filter/INPUT -j logaccept-final-27 - inet6/filter/OUTPUT -j limit-1368 - inet6/filter/OUTPUT -j logaccept-final-27 - inet6/filter/limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-630 - inet6/filter/limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-27 -j ACCEPT - inet6/filter/logdrop-630 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-630 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1380 + inet/filter/limit-1380 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-774 + inet/filter/limit-1380 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1380 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1380 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-774 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-774 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1380 + inet6/filter/limit-1380 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-774 + inet6/filter/limit-1380 -j TEE --gateway fc00::2 + inet6/filter/limit-1380 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-774 -j DROP -Filter 1370 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"ulog"} +Filter 1382 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1369 - inet/filter/INPUT -j limit-1369 - inet/filter/OUTPUT -j limit-1369 - inet/filter/limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-631 - inet/filter/limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-631 -m limit --limit 1/second -j LOG - inet/filter/logdrop-631 -j DROP - inet6/filter/FORWARD -j limit-1369 - inet6/filter/INPUT -j limit-1369 - inet6/filter/OUTPUT -j limit-1369 - inet6/filter/limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-631 - inet6/filter/logdrop-631 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-631 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1381 + inet/filter/limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-775 + inet/filter/limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-775 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-775 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1381 + inet6/filter/limit-1381 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-775 + inet6/filter/limit-1381 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-775 -j DROP -Filter 1371 {"flow-limit":{"addr":"dest","name":"A","update":false}} +Filter 1383 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1370 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1370 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1370 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-632 - inet/filter/logdrop-632 -m limit --limit 1/second -j LOG - inet/filter/logdrop-632 -j DROP - inet6/filter/FORWARD -j limit-1370 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1370 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1370 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-632 - inet6/filter/logdrop-632 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-632 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1382 + inet/filter/limit-1382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-776 + inet/filter/limit-1382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-776 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-776 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1382 + inet6/filter/limit-1382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-776 + inet6/filter/limit-1382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-776 -j DROP -Filter 1372 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} +Filter 1384 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1371 - inet/filter/INPUT -j limit-1371 - inet/filter/OUTPUT -j limit-1371 - inet/filter/limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-633 - inet/filter/logdrop-633 -m limit --limit 1/second -j LOG - inet/filter/logdrop-633 -j DROP - inet6/filter/FORWARD -j limit-1371 - inet6/filter/INPUT -j limit-1371 - inet6/filter/OUTPUT -j limit-1371 - inet6/filter/limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-633 - inet6/filter/logdrop-633 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-633 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1383 + inet/filter/limit-1383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-777 + inet/filter/limit-1383 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-777 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-777 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1383 + inet6/filter/limit-1383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-777 + inet6/filter/limit-1383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-777 -j DROP -Filter 1373 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +Filter 1385 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1372 - inet/filter/FORWARD -j logaccept-final-28 - inet/filter/INPUT -j limit-1372 - inet/filter/INPUT -j logaccept-final-28 - inet/filter/OUTPUT -j limit-1372 - inet/filter/OUTPUT -j logaccept-final-28 - inet/filter/limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-634 - inet/filter/logaccept-final-28 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-28 -j ACCEPT - inet/filter/logdrop-634 -m limit --limit 1/second -j LOG - inet/filter/logdrop-634 -j DROP - inet6/filter/FORWARD -j limit-1372 - inet6/filter/FORWARD -j logaccept-final-28 - inet6/filter/INPUT -j limit-1372 - inet6/filter/INPUT -j logaccept-final-28 - inet6/filter/OUTPUT -j limit-1372 - inet6/filter/OUTPUT -j logaccept-final-28 - inet6/filter/limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-634 - inet6/filter/logaccept-final-28 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-28 -j ACCEPT - inet6/filter/logdrop-634 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-634 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1384 + inet/filter/limit-1384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-778 + inet/filter/limit-1384 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-778 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-778 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1384 + inet6/filter/limit-1384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-778 + inet6/filter/limit-1384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-778 -j DROP -Filter 1374 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +Filter 1386 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1373 - inet/filter/INPUT -j limit-1373 - inet/filter/OUTPUT -j limit-1373 - inet/filter/limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-635 - inet/filter/limit-1373 -m limit --limit 1/second -j LOG - inet/filter/logdrop-635 -m limit --limit 1/second -j LOG - inet/filter/logdrop-635 -j DROP - inet6/filter/FORWARD -j limit-1373 - inet6/filter/INPUT -j limit-1373 - inet6/filter/OUTPUT -j limit-1373 - inet6/filter/limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-635 - inet6/filter/limit-1373 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-635 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-635 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1385 + inet/filter/limit-1385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-779 + inet/filter/limit-1385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-779 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-779 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1385 + inet6/filter/limit-1385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-779 + inet6/filter/logdrop-779 -j DROP -Filter 1375 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +Filter 1387 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1374 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1374 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1374 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1374 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-636 - inet/filter/logdrop-636 -m limit --limit 1/second -j LOG - inet/filter/logdrop-636 -j DROP - inet6/filter/FORWARD -j limit-1374 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1374 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1374 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1374 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-636 - inet6/filter/logdrop-636 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-636 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1386 + inet/filter/limit-1386 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-780 + inet/filter/limit-1386 -j ACCEPT + inet/filter/logdrop-780 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-780 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1386 + inet6/filter/limit-1386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-780 + inet6/filter/limit-1386 -j ACCEPT + inet6/filter/logdrop-780 -j DROP -Filter 1376 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +Filter 1388 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1375 - inet/filter/INPUT -j limit-1375 - inet/filter/OUTPUT -j limit-1375 - inet/filter/limit-1375 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-637 - inet/filter/logdrop-637 -m limit --limit 1/second -j LOG - inet/filter/logdrop-637 -j DROP - inet6/filter/FORWARD -j limit-1375 - inet6/filter/INPUT -j limit-1375 - inet6/filter/OUTPUT -j limit-1375 - inet6/filter/limit-1375 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-637 - inet6/filter/logdrop-637 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-637 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-781 + inet/filter/logdrop-781 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-781 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-781 + inet6/filter/logdrop-781 -j DROP -Filter 1377 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"ulog"} +Filter 1389 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1376 - inet/filter/FORWARD -j logaccept-final-29 - inet/filter/INPUT -j limit-1376 - inet/filter/INPUT -j logaccept-final-29 - inet/filter/OUTPUT -j limit-1376 - inet/filter/OUTPUT -j logaccept-final-29 - inet/filter/limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-638 - inet/filter/logaccept-final-29 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-29 -j ACCEPT - inet/filter/logdrop-638 -m limit --limit 1/second -j LOG - inet/filter/logdrop-638 -j DROP - inet6/filter/FORWARD -j limit-1376 - inet6/filter/FORWARD -j logaccept-final-29 - inet6/filter/INPUT -j limit-1376 - inet6/filter/INPUT -j logaccept-final-29 - inet6/filter/OUTPUT -j limit-1376 - inet6/filter/OUTPUT -j logaccept-final-29 - inet6/filter/limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-638 - inet6/filter/logaccept-final-29 -j ACCEPT - inet6/filter/logdrop-638 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-638 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1388 + inet/filter/limit-1388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-782 + inet/filter/limit-1388 -m limit --limit 1/second -j LOG + inet/filter/limit-1388 -j ACCEPT + inet/filter/logdrop-782 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-782 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1388 + inet6/filter/limit-1388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-782 + inet6/filter/limit-1388 -m limit --limit 1/second -j LOG + inet6/filter/limit-1388 -j ACCEPT + inet6/filter/logdrop-782 -j DROP -Filter 1378 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"ulog"} +Filter 1390 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1377 - inet/filter/INPUT -j limit-1377 - inet/filter/OUTPUT -j limit-1377 - inet/filter/limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-639 - inet/filter/limit-1377 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-639 -m limit --limit 1/second -j LOG - inet/filter/logdrop-639 -j DROP - inet6/filter/FORWARD -j limit-1377 - inet6/filter/INPUT -j limit-1377 - inet6/filter/OUTPUT -j limit-1377 - inet6/filter/limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-639 - inet6/filter/logdrop-639 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-639 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1389 + inet/filter/limit-1389 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-783 + inet/filter/limit-1389 -m limit --limit 1/second -j LOG + inet/filter/logdrop-783 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-783 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1389 + inet6/filter/limit-1389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-783 + inet6/filter/limit-1389 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-783 -j DROP -Filter 1379 {"flow-limit":{"name":"C"}} +Filter 1391 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1378 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1378 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1378 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1378 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-640 - inet/filter/limit-1378 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-640 -m limit --limit 1/second -j LOG - inet/filter/logdrop-640 -j DROP - inet6/filter/FORWARD -j limit-1378 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1378 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1378 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1378 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-640 - inet6/filter/limit-1378 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-640 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-640 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1390 + inet/filter/limit-1390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-784 + inet/filter/limit-1390 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1390 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1390 -j ACCEPT + inet/filter/logdrop-784 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-784 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1390 + inet6/filter/limit-1390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-784 + inet6/filter/limit-1390 -j TEE --gateway fc00::2 + inet6/filter/limit-1390 -j ACCEPT + inet6/filter/logdrop-784 -j DROP -Filter 1380 {"action":"pass","flow-limit":{"name":"C"}} +Filter 1392 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1379 - inet/filter/INPUT -j limit-1379 - inet/filter/OUTPUT -j limit-1379 - inet/filter/limit-1379 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-641 - inet/filter/limit-1379 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-641 -m limit --limit 1/second -j LOG - inet/filter/logdrop-641 -j DROP - inet6/filter/FORWARD -j limit-1379 - inet6/filter/INPUT -j limit-1379 - inet6/filter/OUTPUT -j limit-1379 - inet6/filter/limit-1379 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-641 - inet6/filter/limit-1379 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-641 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-641 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1391 + inet/filter/limit-1391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-785 + inet/filter/limit-1391 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1391 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-785 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-785 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1391 + inet6/filter/limit-1391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-785 + inet6/filter/limit-1391 -j TEE --gateway fc00::2 + inet6/filter/logdrop-785 -j DROP -Filter 1381 {"flow-limit":{"name":"C"},"log":true} +Filter 1393 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1380 - inet/filter/FORWARD -j logaccept-final-30 - inet/filter/INPUT -j limit-1380 - inet/filter/INPUT -j logaccept-final-30 - inet/filter/OUTPUT -j limit-1380 - inet/filter/OUTPUT -j logaccept-final-30 - inet/filter/limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-642 - inet/filter/limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-30 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-30 -j ACCEPT - inet/filter/logdrop-642 -m limit --limit 1/second -j LOG - inet/filter/logdrop-642 -j DROP - inet6/filter/FORWARD -j limit-1380 - inet6/filter/FORWARD -j logaccept-final-30 - inet6/filter/INPUT -j limit-1380 - inet6/filter/INPUT -j logaccept-final-30 - inet6/filter/OUTPUT -j limit-1380 - inet6/filter/OUTPUT -j logaccept-final-30 - inet6/filter/limit-1380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-642 - inet6/filter/limit-1380 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-30 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-30 -j ACCEPT - inet6/filter/logdrop-642 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-642 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1392 + inet/filter/limit-1392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-786 + inet/filter/limit-1392 -j ACCEPT + inet/filter/logdrop-786 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-786 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1392 + inet6/filter/limit-1392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-786 + inet6/filter/limit-1392 -j ACCEPT + inet6/filter/logdrop-786 -j DROP -Filter 1382 {"action":"pass","flow-limit":{"name":"C"},"log":true} +Filter 1394 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1381 - inet/filter/INPUT -j limit-1381 - inet/filter/OUTPUT -j limit-1381 - inet/filter/limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-643 - inet/filter/limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-643 -m limit --limit 1/second -j LOG - inet/filter/logdrop-643 -j DROP - inet6/filter/FORWARD -j limit-1381 - inet6/filter/INPUT -j limit-1381 - inet6/filter/OUTPUT -j limit-1381 - inet6/filter/limit-1381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-643 - inet6/filter/limit-1381 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-643 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-643 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-787 + inet/filter/logdrop-787 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-787 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-787 + inet6/filter/logdrop-787 -j DROP -Filter 1383 {"flow-limit":{"name":"C"},"log":"none"} +Filter 1395 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1382 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1382 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1382 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-644 - inet/filter/limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-644 -m limit --limit 1/second -j LOG - inet/filter/logdrop-644 -j DROP - inet6/filter/FORWARD -j limit-1382 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1382 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1382 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1382 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-644 - inet6/filter/limit-1382 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-644 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-644 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1394 + inet/filter/limit-1394 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-788 + inet/filter/limit-1394 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1394 -j ACCEPT + inet/filter/logdrop-788 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-788 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1394 + inet6/filter/limit-1394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-788 + inet6/filter/limit-1394 -j ACCEPT + inet6/filter/logdrop-788 -j DROP -Filter 1384 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} +Filter 1396 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1383 - inet/filter/INPUT -j limit-1383 - inet/filter/OUTPUT -j limit-1383 - inet/filter/limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-645 - inet/filter/limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-645 -m limit --limit 1/second -j LOG - inet/filter/logdrop-645 -j DROP - inet6/filter/FORWARD -j limit-1383 - inet6/filter/INPUT -j limit-1383 - inet6/filter/OUTPUT -j limit-1383 - inet6/filter/limit-1383 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-645 - inet6/filter/limit-1383 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-645 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-645 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1395 + inet/filter/limit-1395 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-789 + inet/filter/limit-1395 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-789 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-789 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1395 + inet6/filter/limit-1395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-789 + inet6/filter/logdrop-789 -j DROP -Filter 1385 {"flow-limit":{"name":"C"},"log":"ulog"} +Filter 1397 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1384 - inet/filter/FORWARD -j logaccept-final-31 - inet/filter/INPUT -j limit-1384 - inet/filter/INPUT -j logaccept-final-31 - inet/filter/OUTPUT -j limit-1384 - inet/filter/OUTPUT -j logaccept-final-31 - inet/filter/limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-646 - inet/filter/limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-31 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-31 -j ACCEPT - inet/filter/logdrop-646 -m limit --limit 1/second -j LOG - inet/filter/logdrop-646 -j DROP - inet6/filter/FORWARD -j limit-1384 - inet6/filter/FORWARD -j logaccept-final-31 - inet6/filter/INPUT -j limit-1384 - inet6/filter/INPUT -j logaccept-final-31 - inet6/filter/OUTPUT -j limit-1384 - inet6/filter/OUTPUT -j logaccept-final-31 - inet6/filter/limit-1384 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-646 - inet6/filter/limit-1384 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-31 -j ACCEPT - inet6/filter/logdrop-646 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-646 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1396 + inet/filter/limit-1396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-790 + inet/filter/limit-1396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-790 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-790 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1396 + inet6/filter/limit-1396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-790 + inet6/filter/limit-1396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-790 -j DROP -Filter 1386 {"action":"pass","flow-limit":{"name":"C"},"log":"ulog"} +Filter 1398 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1385 - inet/filter/INPUT -j limit-1385 - inet/filter/OUTPUT -j limit-1385 - inet/filter/limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-647 - inet/filter/limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-647 -m limit --limit 1/second -j LOG - inet/filter/logdrop-647 -j DROP - inet6/filter/FORWARD -j limit-1385 - inet6/filter/INPUT -j limit-1385 - inet6/filter/OUTPUT -j limit-1385 - inet6/filter/limit-1385 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-647 - inet6/filter/logdrop-647 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-647 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1397 + inet/filter/limit-1397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-791 + inet/filter/limit-1397 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-791 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-791 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1397 + inet6/filter/limit-1397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-791 + inet6/filter/limit-1397 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-791 -j DROP -Filter 1387 {"flow-limit":{"name":"C","update":false}} +Filter 1399 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1386 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1386 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1386 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-648 - inet/filter/logdrop-648 -m limit --limit 1/second -j LOG - inet/filter/logdrop-648 -j DROP - inet6/filter/FORWARD -j limit-1386 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1386 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1386 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-648 - inet6/filter/logdrop-648 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-648 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1398 + inet/filter/limit-1398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-792 + inet/filter/limit-1398 -m limit --limit 1/second -j LOG + inet/filter/limit-1398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-792 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-792 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1398 + inet6/filter/limit-1398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-792 + inet6/filter/limit-1398 -m limit --limit 1/second -j LOG + inet6/filter/limit-1398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-792 -j DROP -Filter 1388 {"action":"pass","flow-limit":{"name":"C","update":false}} +Filter 1400 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1387 - inet/filter/INPUT -j limit-1387 - inet/filter/OUTPUT -j limit-1387 - inet/filter/limit-1387 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-649 - inet/filter/logdrop-649 -m limit --limit 1/second -j LOG - inet/filter/logdrop-649 -j DROP - inet6/filter/FORWARD -j limit-1387 - inet6/filter/INPUT -j limit-1387 - inet6/filter/OUTPUT -j limit-1387 - inet6/filter/limit-1387 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-649 - inet6/filter/logdrop-649 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-649 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1399 + inet/filter/limit-1399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-793 + inet/filter/limit-1399 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-793 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-793 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1399 + inet6/filter/limit-1399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-793 + inet6/filter/limit-1399 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-793 -j DROP -Filter 1389 {"flow-limit":{"name":"C","update":false},"log":true} +Filter 1401 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1388 - inet/filter/FORWARD -j logaccept-final-32 - inet/filter/INPUT -j limit-1388 - inet/filter/INPUT -j logaccept-final-32 - inet/filter/OUTPUT -j limit-1388 - inet/filter/OUTPUT -j logaccept-final-32 - inet/filter/limit-1388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-650 - inet/filter/logaccept-final-32 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-32 -j ACCEPT - inet/filter/logdrop-650 -m limit --limit 1/second -j LOG - inet/filter/logdrop-650 -j DROP - inet6/filter/FORWARD -j limit-1388 - inet6/filter/FORWARD -j logaccept-final-32 - inet6/filter/INPUT -j limit-1388 - inet6/filter/INPUT -j logaccept-final-32 - inet6/filter/OUTPUT -j limit-1388 - inet6/filter/OUTPUT -j logaccept-final-32 - inet6/filter/limit-1388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-650 - inet6/filter/logaccept-final-32 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-32 -j ACCEPT - inet6/filter/logdrop-650 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-650 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1400 + inet/filter/limit-1400 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-794 + inet/filter/limit-1400 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1400 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1400 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-794 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-794 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1400 + inet6/filter/limit-1400 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-794 + inet6/filter/limit-1400 -j TEE --gateway fc00::2 + inet6/filter/limit-1400 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-794 -j DROP -Filter 1390 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} +Filter 1402 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1389 - inet/filter/INPUT -j limit-1389 - inet/filter/OUTPUT -j limit-1389 - inet/filter/limit-1389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-651 - inet/filter/limit-1389 -m limit --limit 1/second -j LOG - inet/filter/logdrop-651 -m limit --limit 1/second -j LOG - inet/filter/logdrop-651 -j DROP - inet6/filter/FORWARD -j limit-1389 - inet6/filter/INPUT -j limit-1389 - inet6/filter/OUTPUT -j limit-1389 - inet6/filter/limit-1389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-651 - inet6/filter/limit-1389 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-651 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-651 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1401 + inet/filter/limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-795 + inet/filter/limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-795 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-795 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1401 + inet6/filter/limit-1401 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-795 + inet6/filter/limit-1401 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-795 -j DROP -Filter 1391 {"flow-limit":{"name":"C","update":false},"log":"none"} +Filter 1403 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1390 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1390 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1390 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-652 - inet/filter/logdrop-652 -m limit --limit 1/second -j LOG - inet/filter/logdrop-652 -j DROP - inet6/filter/FORWARD -j limit-1390 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1390 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1390 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-652 - inet6/filter/logdrop-652 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-652 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1402 + inet/filter/limit-1402 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-796 + inet/filter/limit-1402 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-796 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-796 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1402 + inet6/filter/limit-1402 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-796 + inet6/filter/limit-1402 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-796 -j DROP -Filter 1392 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} +Filter 1404 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1391 - inet/filter/INPUT -j limit-1391 - inet/filter/OUTPUT -j limit-1391 - inet/filter/limit-1391 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-653 - inet/filter/logdrop-653 -m limit --limit 1/second -j LOG - inet/filter/logdrop-653 -j DROP - inet6/filter/FORWARD -j limit-1391 - inet6/filter/INPUT -j limit-1391 - inet6/filter/OUTPUT -j limit-1391 - inet6/filter/limit-1391 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-653 - inet6/filter/logdrop-653 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-653 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1403 + inet/filter/limit-1403 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-797 + inet/filter/limit-1403 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-797 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-797 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1403 + inet6/filter/limit-1403 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-797 + inet6/filter/limit-1403 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-797 -j DROP -Filter 1393 {"flow-limit":{"name":"C","update":false},"log":"ulog"} +Filter 1405 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1392 - inet/filter/FORWARD -j logaccept-final-33 - inet/filter/INPUT -j limit-1392 - inet/filter/INPUT -j logaccept-final-33 - inet/filter/OUTPUT -j limit-1392 - inet/filter/OUTPUT -j logaccept-final-33 - inet/filter/limit-1392 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-654 - inet/filter/logaccept-final-33 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-33 -j ACCEPT - inet/filter/logdrop-654 -m limit --limit 1/second -j LOG - inet/filter/logdrop-654 -j DROP - inet6/filter/FORWARD -j limit-1392 - inet6/filter/FORWARD -j logaccept-final-33 - inet6/filter/INPUT -j limit-1392 - inet6/filter/INPUT -j logaccept-final-33 - inet6/filter/OUTPUT -j limit-1392 - inet6/filter/OUTPUT -j logaccept-final-33 - inet6/filter/limit-1392 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-654 - inet6/filter/logaccept-final-33 -j ACCEPT - inet6/filter/logdrop-654 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-654 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1404 + inet/filter/limit-1404 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-798 + inet/filter/limit-1404 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1404 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-798 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-798 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1404 + inet6/filter/limit-1404 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-798 + inet6/filter/limit-1404 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-798 -j DROP -Filter 1394 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"ulog"} +Filter 1406 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1393 - inet/filter/INPUT -j limit-1393 - inet/filter/OUTPUT -j limit-1393 - inet/filter/limit-1393 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-655 - inet/filter/limit-1393 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-655 -m limit --limit 1/second -j LOG - inet/filter/logdrop-655 -j DROP - inet6/filter/FORWARD -j limit-1393 - inet6/filter/INPUT -j limit-1393 - inet6/filter/OUTPUT -j limit-1393 - inet6/filter/limit-1393 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-655 - inet6/filter/logdrop-655 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-655 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1405 + inet/filter/limit-1405 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-799 + inet/filter/limit-1405 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-799 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-799 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1405 + inet6/filter/limit-1405 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-799 + inet6/filter/logdrop-799 -j DROP -Filter 1395 {"flow-limit":{"addr":"dest","name":"C"}} +Filter 1407 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1394 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1394 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1394 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-656 - inet/filter/limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-656 -m limit --limit 1/second -j LOG - inet/filter/logdrop-656 -j DROP - inet6/filter/FORWARD -j limit-1394 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1394 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1394 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-656 - inet6/filter/limit-1394 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-656 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-656 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1406 + inet/filter/limit-1406 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-800 + inet/filter/limit-1406 -j ACCEPT + inet/filter/logdrop-800 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-800 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1406 + inet6/filter/limit-1406 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-800 + inet6/filter/limit-1406 -j ACCEPT + inet6/filter/logdrop-800 -j DROP -Filter 1396 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} +Filter 1408 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1395 - inet/filter/INPUT -j limit-1395 - inet/filter/OUTPUT -j limit-1395 - inet/filter/limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-657 - inet/filter/limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-657 -m limit --limit 1/second -j LOG - inet/filter/logdrop-657 -j DROP - inet6/filter/FORWARD -j limit-1395 - inet6/filter/INPUT -j limit-1395 - inet6/filter/OUTPUT -j limit-1395 - inet6/filter/limit-1395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-657 - inet6/filter/limit-1395 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-657 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-657 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-801 + inet/filter/logdrop-801 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-801 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-801 + inet6/filter/logdrop-801 -j DROP -Filter 1397 {"flow-limit":{"addr":"dest","name":"C"},"log":true} +Filter 1409 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1396 - inet/filter/FORWARD -j logaccept-final-34 - inet/filter/INPUT -j limit-1396 - inet/filter/INPUT -j logaccept-final-34 - inet/filter/OUTPUT -j limit-1396 - inet/filter/OUTPUT -j logaccept-final-34 - inet/filter/limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-658 - inet/filter/limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-34 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-34 -j ACCEPT - inet/filter/logdrop-658 -m limit --limit 1/second -j LOG - inet/filter/logdrop-658 -j DROP - inet6/filter/FORWARD -j limit-1396 - inet6/filter/FORWARD -j logaccept-final-34 - inet6/filter/INPUT -j limit-1396 - inet6/filter/INPUT -j logaccept-final-34 - inet6/filter/OUTPUT -j limit-1396 - inet6/filter/OUTPUT -j logaccept-final-34 - inet6/filter/limit-1396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-658 - inet6/filter/limit-1396 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-34 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-34 -j ACCEPT - inet6/filter/logdrop-658 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-658 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1408 + inet/filter/limit-1408 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-802 + inet/filter/limit-1408 -m limit --limit 1/second -j LOG + inet/filter/limit-1408 -j ACCEPT + inet/filter/logdrop-802 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-802 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1408 + inet6/filter/limit-1408 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-802 + inet6/filter/limit-1408 -m limit --limit 1/second -j LOG + inet6/filter/limit-1408 -j ACCEPT + inet6/filter/logdrop-802 -j DROP -Filter 1398 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} +Filter 1410 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1397 - inet/filter/INPUT -j limit-1397 - inet/filter/OUTPUT -j limit-1397 - inet/filter/limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-659 - inet/filter/limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-659 -m limit --limit 1/second -j LOG - inet/filter/logdrop-659 -j DROP - inet6/filter/FORWARD -j limit-1397 - inet6/filter/INPUT -j limit-1397 - inet6/filter/OUTPUT -j limit-1397 - inet6/filter/limit-1397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-659 - inet6/filter/limit-1397 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-659 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-659 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1409 + inet/filter/limit-1409 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-803 + inet/filter/limit-1409 -m limit --limit 1/second -j LOG + inet/filter/logdrop-803 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-803 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1409 + inet6/filter/limit-1409 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-803 + inet6/filter/limit-1409 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-803 -j DROP -Filter 1399 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} +Filter 1411 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1398 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1398 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1398 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-660 - inet/filter/limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-660 -m limit --limit 1/second -j LOG - inet/filter/logdrop-660 -j DROP - inet6/filter/FORWARD -j limit-1398 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1398 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1398 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1398 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-660 - inet6/filter/limit-1398 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-660 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-660 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1410 + inet/filter/limit-1410 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-804 + inet/filter/limit-1410 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1410 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1410 -j ACCEPT + inet/filter/logdrop-804 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-804 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1410 + inet6/filter/limit-1410 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-804 + inet6/filter/limit-1410 -j TEE --gateway fc00::2 + inet6/filter/limit-1410 -j ACCEPT + inet6/filter/logdrop-804 -j DROP -Filter 1400 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} +Filter 1412 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1399 - inet/filter/INPUT -j limit-1399 - inet/filter/OUTPUT -j limit-1399 - inet/filter/limit-1399 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-661 - inet/filter/limit-1399 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-661 -m limit --limit 1/second -j LOG - inet/filter/logdrop-661 -j DROP - inet6/filter/FORWARD -j limit-1399 - inet6/filter/INPUT -j limit-1399 - inet6/filter/OUTPUT -j limit-1399 - inet6/filter/limit-1399 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-661 - inet6/filter/limit-1399 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-661 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-661 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1411 + inet/filter/limit-1411 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-805 + inet/filter/limit-1411 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1411 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-805 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-805 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1411 + inet6/filter/limit-1411 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-805 + inet6/filter/limit-1411 -j TEE --gateway fc00::2 + inet6/filter/logdrop-805 -j DROP -Filter 1401 {"flow-limit":{"addr":"dest","name":"C"},"log":"ulog"} +Filter 1413 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1400 - inet/filter/FORWARD -j logaccept-final-35 - inet/filter/INPUT -j limit-1400 - inet/filter/INPUT -j logaccept-final-35 - inet/filter/OUTPUT -j limit-1400 - inet/filter/OUTPUT -j logaccept-final-35 - inet/filter/limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-662 - inet/filter/limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-35 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-35 -j ACCEPT - inet/filter/logdrop-662 -m limit --limit 1/second -j LOG - inet/filter/logdrop-662 -j DROP - inet6/filter/FORWARD -j limit-1400 - inet6/filter/FORWARD -j logaccept-final-35 - inet6/filter/INPUT -j limit-1400 - inet6/filter/INPUT -j logaccept-final-35 - inet6/filter/OUTPUT -j limit-1400 - inet6/filter/OUTPUT -j logaccept-final-35 - inet6/filter/limit-1400 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-662 - inet6/filter/limit-1400 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-35 -j ACCEPT - inet6/filter/logdrop-662 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-662 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1412 + inet/filter/limit-1412 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-806 + inet/filter/limit-1412 -j ACCEPT + inet/filter/logdrop-806 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-806 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1412 + inet6/filter/limit-1412 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-806 + inet6/filter/limit-1412 -j ACCEPT + inet6/filter/logdrop-806 -j DROP -Filter 1402 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"ulog"} +Filter 1414 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1401 - inet/filter/INPUT -j limit-1401 - inet/filter/OUTPUT -j limit-1401 - inet/filter/limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-663 - inet/filter/limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-663 -m limit --limit 1/second -j LOG - inet/filter/logdrop-663 -j DROP - inet6/filter/FORWARD -j limit-1401 - inet6/filter/INPUT -j limit-1401 - inet6/filter/OUTPUT -j limit-1401 - inet6/filter/limit-1401 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-663 - inet6/filter/logdrop-663 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-663 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-807 + inet/filter/logdrop-807 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-807 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-807 + inet6/filter/logdrop-807 -j DROP -Filter 1403 {"flow-limit":{"addr":"dest","name":"C","update":false}} +Filter 1415 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1402 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1402 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1402 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-664 - inet/filter/logdrop-664 -m limit --limit 1/second -j LOG - inet/filter/logdrop-664 -j DROP - inet6/filter/FORWARD -j limit-1402 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1402 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1402 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-664 - inet6/filter/logdrop-664 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-664 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1414 + inet/filter/limit-1414 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-808 + inet/filter/limit-1414 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1414 -j ACCEPT + inet/filter/logdrop-808 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-808 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1414 + inet6/filter/limit-1414 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-808 + inet6/filter/limit-1414 -j ACCEPT + inet6/filter/logdrop-808 -j DROP -Filter 1404 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} +Filter 1416 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1403 - inet/filter/INPUT -j limit-1403 - inet/filter/OUTPUT -j limit-1403 - inet/filter/limit-1403 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-665 - inet/filter/logdrop-665 -m limit --limit 1/second -j LOG - inet/filter/logdrop-665 -j DROP - inet6/filter/FORWARD -j limit-1403 - inet6/filter/INPUT -j limit-1403 - inet6/filter/OUTPUT -j limit-1403 - inet6/filter/limit-1403 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-665 - inet6/filter/logdrop-665 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-665 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1415 + inet/filter/limit-1415 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-809 + inet/filter/limit-1415 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-809 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-809 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1415 + inet6/filter/limit-1415 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-809 + inet6/filter/logdrop-809 -j DROP -Filter 1405 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +Filter 1417 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1404 - inet/filter/FORWARD -j logaccept-final-36 - inet/filter/INPUT -j limit-1404 - inet/filter/INPUT -j logaccept-final-36 - inet/filter/OUTPUT -j limit-1404 - inet/filter/OUTPUT -j logaccept-final-36 - inet/filter/limit-1404 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-666 - inet/filter/logaccept-final-36 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-36 -j ACCEPT - inet/filter/logdrop-666 -m limit --limit 1/second -j LOG - inet/filter/logdrop-666 -j DROP - inet6/filter/FORWARD -j limit-1404 - inet6/filter/FORWARD -j logaccept-final-36 - inet6/filter/INPUT -j limit-1404 - inet6/filter/INPUT -j logaccept-final-36 - inet6/filter/OUTPUT -j limit-1404 - inet6/filter/OUTPUT -j logaccept-final-36 - inet6/filter/limit-1404 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-666 - inet6/filter/logaccept-final-36 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-36 -j ACCEPT - inet6/filter/logdrop-666 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-666 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1416 + inet/filter/limit-1416 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-810 + inet/filter/limit-1416 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-810 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-810 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1416 + inet6/filter/limit-1416 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-810 + inet6/filter/limit-1416 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-810 -j DROP -Filter 1406 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +Filter 1418 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1405 - inet/filter/INPUT -j limit-1405 - inet/filter/OUTPUT -j limit-1405 - inet/filter/limit-1405 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-667 - inet/filter/limit-1405 -m limit --limit 1/second -j LOG - inet/filter/logdrop-667 -m limit --limit 1/second -j LOG - inet/filter/logdrop-667 -j DROP - inet6/filter/FORWARD -j limit-1405 - inet6/filter/INPUT -j limit-1405 - inet6/filter/OUTPUT -j limit-1405 - inet6/filter/limit-1405 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-667 - inet6/filter/limit-1405 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-667 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-667 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1417 + inet/filter/limit-1417 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-811 + inet/filter/limit-1417 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-811 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-811 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1417 + inet6/filter/limit-1417 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-811 + inet6/filter/limit-1417 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-811 -j DROP -Filter 1407 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +Filter 1419 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1406 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1406 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1406 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1406 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-668 - inet/filter/logdrop-668 -m limit --limit 1/second -j LOG - inet/filter/logdrop-668 -j DROP - inet6/filter/FORWARD -j limit-1406 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1406 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1406 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1406 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-668 - inet6/filter/logdrop-668 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-668 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1418 + inet/filter/limit-1418 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-812 + inet/filter/limit-1418 -m limit --limit 1/second -j LOG + inet/filter/limit-1418 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-812 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-812 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1418 + inet6/filter/limit-1418 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-812 + inet6/filter/limit-1418 -m limit --limit 1/second -j LOG + inet6/filter/limit-1418 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-812 -j DROP -Filter 1408 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +Filter 1420 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1407 - inet/filter/INPUT -j limit-1407 - inet/filter/OUTPUT -j limit-1407 - inet/filter/limit-1407 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-669 - inet/filter/logdrop-669 -m limit --limit 1/second -j LOG - inet/filter/logdrop-669 -j DROP - inet6/filter/FORWARD -j limit-1407 - inet6/filter/INPUT -j limit-1407 - inet6/filter/OUTPUT -j limit-1407 - inet6/filter/limit-1407 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-669 - inet6/filter/logdrop-669 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-669 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1419 + inet/filter/limit-1419 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-813 + inet/filter/limit-1419 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-813 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-813 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1419 + inet6/filter/limit-1419 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-813 + inet6/filter/limit-1419 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-813 -j DROP -Filter 1409 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"ulog"} +Filter 1421 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1408 - inet/filter/FORWARD -j logaccept-final-37 - inet/filter/INPUT -j limit-1408 - inet/filter/INPUT -j logaccept-final-37 - inet/filter/OUTPUT -j limit-1408 - inet/filter/OUTPUT -j logaccept-final-37 - inet/filter/limit-1408 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-670 - inet/filter/logaccept-final-37 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-37 -j ACCEPT - inet/filter/logdrop-670 -m limit --limit 1/second -j LOG - inet/filter/logdrop-670 -j DROP - inet6/filter/FORWARD -j limit-1408 - inet6/filter/FORWARD -j logaccept-final-37 - inet6/filter/INPUT -j limit-1408 - inet6/filter/INPUT -j logaccept-final-37 - inet6/filter/OUTPUT -j limit-1408 - inet6/filter/OUTPUT -j logaccept-final-37 - inet6/filter/limit-1408 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-670 - inet6/filter/logaccept-final-37 -j ACCEPT - inet6/filter/logdrop-670 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-670 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1420 + inet/filter/limit-1420 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-814 + inet/filter/limit-1420 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1420 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1420 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-814 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-814 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1420 + inet6/filter/limit-1420 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-814 + inet6/filter/limit-1420 -j TEE --gateway fc00::2 + inet6/filter/limit-1420 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-814 -j DROP -Filter 1410 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"ulog"} +Filter 1422 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1409 - inet/filter/INPUT -j limit-1409 - inet/filter/OUTPUT -j limit-1409 - inet/filter/limit-1409 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-671 - inet/filter/limit-1409 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-671 -m limit --limit 1/second -j LOG - inet/filter/logdrop-671 -j DROP - inet6/filter/FORWARD -j limit-1409 - inet6/filter/INPUT -j limit-1409 - inet6/filter/OUTPUT -j limit-1409 - inet6/filter/limit-1409 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-671 - inet6/filter/logdrop-671 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-671 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1421 + inet/filter/limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-815 + inet/filter/limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-815 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-815 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1421 + inet6/filter/limit-1421 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-815 + inet6/filter/limit-1421 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-815 -j DROP -Filter 1411 {"flow-limit":{"log":"none"}} +Filter 1423 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1410 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1410 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1410 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1410 -m recent --name limit-1410 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1410 -m recent --name limit-1410 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1410 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1410 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1410 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1410 -m recent --name limit-1410 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1410 -m recent --name limit-1410 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1422 + inet/filter/limit-1422 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-816 + inet/filter/limit-1422 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-816 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-816 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1422 + inet6/filter/limit-1422 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-816 + inet6/filter/limit-1422 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-816 -j DROP -Filter 1412 {"action":"pass","flow-limit":{"log":"none"}} +Filter 1424 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1411 - inet/filter/INPUT -j limit-1411 - inet/filter/OUTPUT -j limit-1411 - inet/filter/limit-1411 -m recent --name limit-1411 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1411 -m recent --name limit-1411 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1411 - inet6/filter/INPUT -j limit-1411 - inet6/filter/OUTPUT -j limit-1411 - inet6/filter/limit-1411 -m recent --name limit-1411 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1411 -m recent --name limit-1411 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1423 + inet/filter/limit-1423 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-817 + inet/filter/limit-1423 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-817 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-817 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1423 + inet6/filter/limit-1423 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-817 + inet6/filter/limit-1423 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-817 -j DROP -Filter 1413 {"flow-limit":{"log":"none"},"log":true} +Filter 1425 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1412 - inet/filter/FORWARD -j logaccept-final-38 - inet/filter/INPUT -j limit-1412 - inet/filter/INPUT -j logaccept-final-38 - inet/filter/OUTPUT -j limit-1412 - inet/filter/OUTPUT -j logaccept-final-38 - inet/filter/limit-1412 -m recent --name limit-1412 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1412 -m recent --name limit-1412 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-38 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-38 -j ACCEPT - inet6/filter/FORWARD -j limit-1412 - inet6/filter/FORWARD -j logaccept-final-38 - inet6/filter/INPUT -j limit-1412 - inet6/filter/INPUT -j logaccept-final-38 - inet6/filter/OUTPUT -j limit-1412 - inet6/filter/OUTPUT -j logaccept-final-38 - inet6/filter/limit-1412 -m recent --name limit-1412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1412 -m recent --name limit-1412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-38 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-38 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1424 + inet/filter/limit-1424 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-818 + inet/filter/limit-1424 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1424 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-818 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-818 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1424 + inet6/filter/limit-1424 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-818 + inet6/filter/limit-1424 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-818 -j DROP -Filter 1414 {"action":"pass","flow-limit":{"log":"none"},"log":true} +Filter 1426 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1413 - inet/filter/INPUT -j limit-1413 - inet/filter/OUTPUT -j limit-1413 - inet/filter/limit-1413 -m recent --name limit-1413 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1413 -m recent --name limit-1413 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1413 - inet6/filter/INPUT -j limit-1413 - inet6/filter/OUTPUT -j limit-1413 - inet6/filter/limit-1413 -m recent --name limit-1413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1413 -m recent --name limit-1413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1425 + inet/filter/limit-1425 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-819 + inet/filter/limit-1425 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-819 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-819 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1425 + inet6/filter/limit-1425 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-819 + inet6/filter/logdrop-819 -j DROP -Filter 1415 {"flow-limit":{"log":"none"},"log":"none"} +Filter 1427 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1414 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1414 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1414 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1414 -m recent --name limit-1414 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1414 -m recent --name limit-1414 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1414 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1414 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1414 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1414 -m recent --name limit-1414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1414 -m recent --name limit-1414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1426 + inet/filter/limit-1426 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-820 + inet/filter/limit-1426 -j ACCEPT + inet/filter/logdrop-820 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-820 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1426 + inet6/filter/limit-1426 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-820 + inet6/filter/limit-1426 -j ACCEPT + inet6/filter/logdrop-820 -j DROP -Filter 1416 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} +Filter 1428 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1415 - inet/filter/INPUT -j limit-1415 - inet/filter/OUTPUT -j limit-1415 - inet/filter/limit-1415 -m recent --name limit-1415 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1415 -m recent --name limit-1415 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1415 - inet6/filter/INPUT -j limit-1415 - inet6/filter/OUTPUT -j limit-1415 - inet6/filter/limit-1415 -m recent --name limit-1415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1415 -m recent --name limit-1415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-821 + inet/filter/logdrop-821 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-821 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-821 + inet6/filter/logdrop-821 -j DROP -Filter 1417 {"flow-limit":{"log":"none"},"log":"ulog"} +Filter 1429 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1416 - inet/filter/FORWARD -j logaccept-final-39 - inet/filter/INPUT -j limit-1416 - inet/filter/INPUT -j logaccept-final-39 - inet/filter/OUTPUT -j limit-1416 - inet/filter/OUTPUT -j logaccept-final-39 - inet/filter/limit-1416 -m recent --name limit-1416 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1416 -m recent --name limit-1416 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-39 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-39 -j ACCEPT - inet6/filter/FORWARD -j limit-1416 - inet6/filter/FORWARD -j logaccept-final-39 - inet6/filter/INPUT -j limit-1416 - inet6/filter/INPUT -j logaccept-final-39 - inet6/filter/OUTPUT -j limit-1416 - inet6/filter/OUTPUT -j logaccept-final-39 - inet6/filter/limit-1416 -m recent --name limit-1416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1416 -m recent --name limit-1416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-39 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1428 + inet/filter/limit-1428 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-822 + inet/filter/limit-1428 -m limit --limit 1/second -j LOG + inet/filter/limit-1428 -j ACCEPT + inet/filter/logdrop-822 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-822 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1428 + inet6/filter/limit-1428 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-822 + inet6/filter/limit-1428 -m limit --limit 1/second -j LOG + inet6/filter/limit-1428 -j ACCEPT + inet6/filter/logdrop-822 -j DROP -Filter 1418 {"action":"pass","flow-limit":{"log":"none"},"log":"ulog"} +Filter 1430 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1417 - inet/filter/INPUT -j limit-1417 - inet/filter/OUTPUT -j limit-1417 - inet/filter/limit-1417 -m recent --name limit-1417 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1417 -m recent --name limit-1417 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1417 - inet6/filter/INPUT -j limit-1417 - inet6/filter/OUTPUT -j limit-1417 - inet6/filter/limit-1417 -m recent --name limit-1417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1429 + inet/filter/limit-1429 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-823 + inet/filter/limit-1429 -m limit --limit 1/second -j LOG + inet/filter/logdrop-823 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-823 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1429 + inet6/filter/limit-1429 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-823 + inet6/filter/limit-1429 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-823 -j DROP -Filter 1419 {"flow-limit":{"log":"none","name":"A"}} +Filter 1431 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1418 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1418 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1418 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1418 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1418 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1418 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1418 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1418 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1418 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1418 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1430 + inet/filter/limit-1430 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-824 + inet/filter/limit-1430 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1430 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1430 -j ACCEPT + inet/filter/logdrop-824 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-824 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1430 + inet6/filter/limit-1430 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-824 + inet6/filter/limit-1430 -j TEE --gateway fc00::2 + inet6/filter/limit-1430 -j ACCEPT + inet6/filter/logdrop-824 -j DROP -Filter 1420 {"action":"pass","flow-limit":{"log":"none","name":"A"}} +Filter 1432 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1419 - inet/filter/INPUT -j limit-1419 - inet/filter/OUTPUT -j limit-1419 - inet/filter/limit-1419 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1419 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1419 - inet6/filter/INPUT -j limit-1419 - inet6/filter/OUTPUT -j limit-1419 - inet6/filter/limit-1419 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1419 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1431 + inet/filter/limit-1431 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-825 + inet/filter/limit-1431 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1431 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-825 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-825 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1431 + inet6/filter/limit-1431 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-825 + inet6/filter/limit-1431 -j TEE --gateway fc00::2 + inet6/filter/logdrop-825 -j DROP -Filter 1421 {"flow-limit":{"log":"none","name":"A"},"log":true} +Filter 1433 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1420 - inet/filter/FORWARD -j logaccept-final-40 - inet/filter/INPUT -j limit-1420 - inet/filter/INPUT -j logaccept-final-40 - inet/filter/OUTPUT -j limit-1420 - inet/filter/OUTPUT -j logaccept-final-40 - inet/filter/limit-1420 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1420 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-40 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-40 -j ACCEPT - inet6/filter/FORWARD -j limit-1420 - inet6/filter/FORWARD -j logaccept-final-40 - inet6/filter/INPUT -j limit-1420 - inet6/filter/INPUT -j logaccept-final-40 - inet6/filter/OUTPUT -j limit-1420 - inet6/filter/OUTPUT -j logaccept-final-40 - inet6/filter/limit-1420 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1420 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-40 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-40 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1432 + inet/filter/limit-1432 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-826 + inet/filter/limit-1432 -j ACCEPT + inet/filter/logdrop-826 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-826 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1432 + inet6/filter/limit-1432 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-826 + inet6/filter/limit-1432 -j ACCEPT + inet6/filter/logdrop-826 -j DROP -Filter 1422 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} +Filter 1434 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1421 - inet/filter/INPUT -j limit-1421 - inet/filter/OUTPUT -j limit-1421 - inet/filter/limit-1421 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1421 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1421 - inet6/filter/INPUT -j limit-1421 - inet6/filter/OUTPUT -j limit-1421 - inet6/filter/limit-1421 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1421 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-827 + inet/filter/logdrop-827 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-827 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-827 + inet6/filter/logdrop-827 -j DROP -Filter 1423 {"flow-limit":{"log":"none","name":"A"},"log":"none"} +Filter 1435 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1422 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1422 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1422 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1422 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1422 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1422 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1422 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1422 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1434 + inet/filter/limit-1434 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-828 + inet/filter/limit-1434 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1434 -j ACCEPT + inet/filter/logdrop-828 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-828 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1434 + inet6/filter/limit-1434 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-828 + inet6/filter/limit-1434 -j ACCEPT + inet6/filter/logdrop-828 -j DROP -Filter 1424 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} +Filter 1436 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1423 - inet/filter/INPUT -j limit-1423 - inet/filter/OUTPUT -j limit-1423 - inet/filter/limit-1423 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1423 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1423 - inet6/filter/INPUT -j limit-1423 - inet6/filter/OUTPUT -j limit-1423 - inet6/filter/limit-1423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1435 + inet/filter/limit-1435 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-829 + inet/filter/limit-1435 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-829 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-829 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1435 + inet6/filter/limit-1435 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-829 + inet6/filter/logdrop-829 -j DROP -Filter 1425 {"flow-limit":{"log":"none","name":"A"},"log":"ulog"} +Filter 1437 {"conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1436 + inet/filter/limit-1436 -m recent --name limit-1436 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1436 -m recent --name limit-1436 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1436 + inet6/filter/limit-1436 -m recent --name limit-1436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1436 -m recent --name limit-1436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1438 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1437 + inet/filter/limit-1437 -m recent --name limit-1437 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1437 -m recent --name limit-1437 --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1437 + inet6/filter/limit-1437 -m recent --name limit-1437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1437 -m recent --name limit-1437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1439 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1438 + inet/filter/limit-1438 -m recent --name limit-1438 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1438 -m limit --limit 1/second -j LOG + inet/filter/limit-1438 -m recent --name limit-1438 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1438 + inet6/filter/limit-1438 -m recent --name limit-1438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1438 -m limit --limit 1/second -j LOG + inet6/filter/limit-1438 -m recent --name limit-1438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1440 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1439 + inet/filter/limit-1439 -m recent --name limit-1439 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1439 -m recent --name limit-1439 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1439 + inet6/filter/limit-1439 -m recent --name limit-1439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1439 -m recent --name limit-1439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1441 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1440 + inet/filter/limit-1440 -m recent --name limit-1440 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1440 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1440 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1440 -m recent --name limit-1440 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1440 + inet6/filter/limit-1440 -m recent --name limit-1440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1440 -j TEE --gateway fc00::2 + inet6/filter/limit-1440 -m recent --name limit-1440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1442 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1441 + inet/filter/limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1441 + inet6/filter/limit-1441 -m recent --name limit-1441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1441 -m recent --name limit-1441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 1443 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1442 + inet/filter/limit-1442 -m recent --name limit-1442 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1442 -m recent --name limit-1442 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1442 + inet6/filter/limit-1442 -m recent --name limit-1442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1442 -m recent --name limit-1442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1444 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1443 + inet/filter/limit-1443 -m recent --name limit-1443 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1443 -m recent --name limit-1443 --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1443 + inet6/filter/limit-1443 -m recent --name limit-1443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1443 -m recent --name limit-1443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1445 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1444 + inet/filter/limit-1444 -m recent --name limit-1444 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1444 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1444 -m recent --name limit-1444 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1444 + inet6/filter/limit-1444 -m recent --name limit-1444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1444 -m recent --name limit-1444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1446 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1445 + inet/filter/limit-1445 -m recent --name limit-1445 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1445 -m recent --name limit-1445 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1445 + inet6/filter/limit-1445 -m recent --name limit-1445 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 1447 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1446 + inet/filter/limit-1446 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1446 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1446 + inet6/filter/limit-1446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1448 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1447 + inet/filter/limit-1447 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1447 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1447 + inet6/filter/limit-1447 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1447 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1449 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1448 + inet/filter/limit-1448 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1448 -m limit --limit 1/second -j LOG + inet/filter/limit-1448 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1448 + inet6/filter/limit-1448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1448 -m limit --limit 1/second -j LOG + inet6/filter/limit-1448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1450 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1449 + inet/filter/limit-1449 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1449 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1449 + inet6/filter/limit-1449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1451 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1450 + inet/filter/limit-1450 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1450 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1450 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1450 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1450 + inet6/filter/limit-1450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1450 -j TEE --gateway fc00::2 + inet6/filter/limit-1450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1452 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1451 + inet/filter/limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1451 + inet6/filter/limit-1451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 1453 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1452 + inet/filter/limit-1452 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1452 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1452 + inet6/filter/limit-1452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1454 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1453 + inet/filter/limit-1453 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1453 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1453 + inet6/filter/limit-1453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1455 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1454 + inet/filter/limit-1454 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1454 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1454 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1454 + inet6/filter/limit-1454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1456 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1455 + inet/filter/limit-1455 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1455 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1455 + inet6/filter/limit-1455 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 1457 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1456 + inet/filter/limit-1456 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1456 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1456 + inet6/filter/limit-1456 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1456 -j ACCEPT + +Filter 1458 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1424 - inet/filter/FORWARD -j logaccept-final-41 - inet/filter/INPUT -j limit-1424 - inet/filter/INPUT -j logaccept-final-41 - inet/filter/OUTPUT -j limit-1424 - inet/filter/OUTPUT -j logaccept-final-41 - inet/filter/limit-1424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1424 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-41 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-41 -j ACCEPT - inet6/filter/FORWARD -j limit-1424 - inet6/filter/FORWARD -j logaccept-final-41 - inet6/filter/INPUT -j limit-1424 - inet6/filter/INPUT -j logaccept-final-41 - inet6/filter/OUTPUT -j limit-1424 - inet6/filter/OUTPUT -j logaccept-final-41 - inet6/filter/limit-1424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-41 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1426 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"ulog"} +Filter 1459 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1458 + inet/filter/limit-1458 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1458 -m limit --limit 1/second -j LOG + inet/filter/limit-1458 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1458 + inet6/filter/limit-1458 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1458 -m limit --limit 1/second -j LOG + inet6/filter/limit-1458 -j ACCEPT + +Filter 1460 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1459 + inet/filter/limit-1459 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1459 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1459 + inet6/filter/limit-1459 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1459 -m limit --limit 1/second -j LOG + +Filter 1461 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1460 + inet/filter/limit-1460 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1460 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1460 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1460 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1460 + inet6/filter/limit-1460 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1460 -j TEE --gateway fc00::2 + inet6/filter/limit-1460 -j ACCEPT + +Filter 1462 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1461 + inet/filter/limit-1461 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1461 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1461 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1461 + inet6/filter/limit-1461 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1461 -j TEE --gateway fc00::2 + +Filter 1463 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1462 + inet/filter/limit-1462 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1462 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1462 + inet6/filter/limit-1462 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1462 -j ACCEPT + +Filter 1464 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1425 - inet/filter/INPUT -j limit-1425 - inet/filter/OUTPUT -j limit-1425 - inet/filter/limit-1425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1425 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1425 - inet6/filter/INPUT -j limit-1425 - inet6/filter/OUTPUT -j limit-1425 - inet6/filter/limit-1425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1427 {"flow-limit":{"log":"none","name":"A","update":false}} +Filter 1465 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1426 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1426 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1426 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1426 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1426 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1426 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1426 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1464 + inet/filter/limit-1464 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1464 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1464 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1464 + inet6/filter/limit-1464 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1464 -j ACCEPT -Filter 1428 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} +Filter 1466 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1427 - inet/filter/INPUT -j limit-1427 - inet/filter/OUTPUT -j limit-1427 - inet/filter/limit-1427 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1427 - inet6/filter/INPUT -j limit-1427 - inet6/filter/OUTPUT -j limit-1427 - inet6/filter/limit-1427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 1429 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1465 + inet/filter/limit-1465 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1465 -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1465 + inet6/filter/limit-1465 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1467 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1466 + inet/filter/limit-1466 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1466 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1466 + inet6/filter/limit-1466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1468 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1467 + inet/filter/limit-1467 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1467 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1467 + inet6/filter/limit-1467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1469 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1468 + inet/filter/limit-1468 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1468 -m limit --limit 1/second -j LOG + inet/filter/limit-1468 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1468 + inet6/filter/limit-1468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1468 -m limit --limit 1/second -j LOG + inet6/filter/limit-1468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1470 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1469 + inet/filter/limit-1469 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1469 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1469 + inet6/filter/limit-1469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1471 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1470 + inet/filter/limit-1470 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1470 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1470 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1470 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1470 + inet6/filter/limit-1470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1470 -j TEE --gateway fc00::2 + inet6/filter/limit-1470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1472 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1471 + inet/filter/limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1471 + inet6/filter/limit-1471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 1473 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1472 + inet/filter/limit-1472 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1472 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1472 + inet6/filter/limit-1472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1474 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1473 + inet/filter/limit-1473 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1473 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1473 + inet6/filter/limit-1473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1475 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1474 + inet/filter/limit-1474 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1474 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1474 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1474 + inet6/filter/limit-1474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1476 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1475 + inet/filter/limit-1475 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1475 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1475 + inet6/filter/limit-1475 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 1477 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1476 + inet/filter/limit-1476 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1476 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1476 + inet6/filter/limit-1476 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1476 -j ACCEPT + +Filter 1478 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1428 - inet/filter/FORWARD -j logaccept-final-42 - inet/filter/INPUT -j limit-1428 - inet/filter/INPUT -j logaccept-final-42 - inet/filter/OUTPUT -j limit-1428 - inet/filter/OUTPUT -j logaccept-final-42 - inet/filter/limit-1428 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-42 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-42 -j ACCEPT - inet6/filter/FORWARD -j limit-1428 - inet6/filter/FORWARD -j logaccept-final-42 - inet6/filter/INPUT -j limit-1428 - inet6/filter/INPUT -j logaccept-final-42 - inet6/filter/OUTPUT -j limit-1428 - inet6/filter/OUTPUT -j logaccept-final-42 - inet6/filter/limit-1428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-42 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-42 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1430 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} +Filter 1479 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1478 + inet/filter/limit-1478 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1478 -m limit --limit 1/second -j LOG + inet/filter/limit-1478 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1478 + inet6/filter/limit-1478 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1478 -m limit --limit 1/second -j LOG + inet6/filter/limit-1478 -j ACCEPT + +Filter 1480 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1479 + inet/filter/limit-1479 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1479 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1479 + inet6/filter/limit-1479 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1479 -m limit --limit 1/second -j LOG + +Filter 1481 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1480 + inet/filter/limit-1480 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1480 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1480 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1480 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1480 + inet6/filter/limit-1480 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1480 -j TEE --gateway fc00::2 + inet6/filter/limit-1480 -j ACCEPT + +Filter 1482 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1481 + inet/filter/limit-1481 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1481 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1481 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1481 + inet6/filter/limit-1481 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1481 -j TEE --gateway fc00::2 + +Filter 1483 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1482 + inet/filter/limit-1482 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1482 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1482 + inet6/filter/limit-1482 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1482 -j ACCEPT + +Filter 1484 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1429 - inet/filter/INPUT -j limit-1429 - inet/filter/OUTPUT -j limit-1429 - inet/filter/limit-1429 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1429 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1429 - inet6/filter/INPUT -j limit-1429 - inet6/filter/OUTPUT -j limit-1429 - inet6/filter/limit-1429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1429 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1431 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +Filter 1485 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1484 + inet/filter/limit-1484 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1484 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1484 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1484 + inet6/filter/limit-1484 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1484 -j ACCEPT + +Filter 1486 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1485 + inet/filter/limit-1485 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1485 -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1485 + inet6/filter/limit-1485 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1487 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1486 + inet/filter/limit-1486 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1486 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1486 + inet6/filter/limit-1486 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1486 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 1488 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1487 + inet/filter/limit-1487 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1487 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1487 + inet6/filter/limit-1487 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1487 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1489 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1488 + inet/filter/limit-1488 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1488 -m limit --limit 1/second -j LOG + inet/filter/limit-1488 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1488 + inet6/filter/limit-1488 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1488 -m limit --limit 1/second -j LOG + inet6/filter/limit-1488 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 1490 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1489 + inet/filter/limit-1489 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1489 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1489 + inet6/filter/limit-1489 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1489 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1491 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1490 + inet/filter/limit-1490 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1490 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1490 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1490 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1490 + inet6/filter/limit-1490 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1490 -j TEE --gateway fc00::2 + inet6/filter/limit-1490 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 1492 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1491 + inet/filter/limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1491 + inet6/filter/limit-1491 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1491 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + +Filter 1493 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1492 + inet/filter/limit-1492 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1492 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1492 + inet6/filter/limit-1492 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1492 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 1494 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1493 + inet/filter/limit-1493 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1493 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1493 + inet6/filter/limit-1493 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1493 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1495 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1494 + inet/filter/limit-1494 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1494 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1494 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1494 + inet6/filter/limit-1494 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1494 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 1496 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1495 + inet/filter/limit-1495 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1495 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1495 + inet6/filter/limit-1495 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + +Filter 1497 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1496 + inet/filter/limit-1496 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1496 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1496 + inet6/filter/limit-1496 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1496 -j ACCEPT + +Filter 1498 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1430 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1430 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1430 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1430 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1430 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1430 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1432 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +Filter 1499 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1498 + inet/filter/limit-1498 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1498 -m limit --limit 1/second -j LOG + inet/filter/limit-1498 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1498 + inet6/filter/limit-1498 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1498 -m limit --limit 1/second -j LOG + inet6/filter/limit-1498 -j ACCEPT + +Filter 1500 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1499 + inet/filter/limit-1499 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1499 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1499 + inet6/filter/limit-1499 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1499 -m limit --limit 1/second -j LOG + +Filter 1501 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1500 + inet/filter/limit-1500 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1500 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1500 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1500 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1500 + inet6/filter/limit-1500 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1500 -j TEE --gateway fc00::2 + inet6/filter/limit-1500 -j ACCEPT + +Filter 1502 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1501 + inet/filter/limit-1501 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1501 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1501 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1501 + inet6/filter/limit-1501 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1501 -j TEE --gateway fc00::2 + +Filter 1503 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1502 + inet/filter/limit-1502 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1502 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1502 + inet6/filter/limit-1502 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1502 -j ACCEPT + +Filter 1504 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1431 - inet/filter/INPUT -j limit-1431 - inet/filter/OUTPUT -j limit-1431 - inet/filter/limit-1431 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1431 - inet6/filter/INPUT -j limit-1431 - inet6/filter/OUTPUT -j limit-1431 - inet6/filter/limit-1431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1433 {"flow-limit":{"log":"none","name":"A","update":false},"log":"ulog"} +Filter 1505 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1432 - inet/filter/FORWARD -j logaccept-final-43 - inet/filter/INPUT -j limit-1432 - inet/filter/INPUT -j logaccept-final-43 - inet/filter/OUTPUT -j limit-1432 - inet/filter/OUTPUT -j logaccept-final-43 - inet/filter/limit-1432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-43 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-43 -j ACCEPT - inet6/filter/FORWARD -j limit-1432 - inet6/filter/FORWARD -j logaccept-final-43 - inet6/filter/INPUT -j limit-1432 - inet6/filter/INPUT -j logaccept-final-43 - inet6/filter/OUTPUT -j limit-1432 - inet6/filter/OUTPUT -j logaccept-final-43 - inet6/filter/limit-1432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-43 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1504 + inet/filter/limit-1504 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1504 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1504 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1504 + inet6/filter/limit-1504 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1504 -j ACCEPT -Filter 1434 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"ulog"} +Filter 1506 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1505 + inet/filter/limit-1505 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1505 -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1505 + inet6/filter/limit-1505 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1507 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1506 + inet/filter/limit-1506 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1506 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1506 + inet6/filter/limit-1506 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1506 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1508 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1507 + inet/filter/limit-1507 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1507 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1507 + inet6/filter/limit-1507 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1507 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1509 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1508 + inet/filter/limit-1508 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1508 -m limit --limit 1/second -j LOG + inet/filter/limit-1508 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1508 + inet6/filter/limit-1508 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1508 -m limit --limit 1/second -j LOG + inet6/filter/limit-1508 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1510 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1509 + inet/filter/limit-1509 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1509 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1509 + inet6/filter/limit-1509 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1509 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1511 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1510 + inet/filter/limit-1510 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1510 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1510 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1510 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1510 + inet6/filter/limit-1510 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1510 -j TEE --gateway fc00::2 + inet6/filter/limit-1510 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1512 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1511 + inet/filter/limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1511 + inet6/filter/limit-1511 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1511 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + +Filter 1513 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1512 + inet/filter/limit-1512 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1512 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1512 + inet6/filter/limit-1512 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1512 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1514 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1513 + inet/filter/limit-1513 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1513 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1513 + inet6/filter/limit-1513 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1513 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1515 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1514 + inet/filter/limit-1514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1514 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1514 + inet6/filter/limit-1514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1516 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1515 + inet/filter/limit-1515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1515 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1515 + inet6/filter/limit-1515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + +Filter 1517 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1516 + inet/filter/limit-1516 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1516 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1516 + inet6/filter/limit-1516 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1516 -j ACCEPT + +Filter 1518 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1433 - inet/filter/INPUT -j limit-1433 - inet/filter/OUTPUT -j limit-1433 - inet/filter/limit-1433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1433 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1433 - inet6/filter/INPUT -j limit-1433 - inet6/filter/OUTPUT -j limit-1433 - inet6/filter/limit-1433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1435 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} +Filter 1519 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1518 + inet/filter/limit-1518 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1518 -m limit --limit 1/second -j LOG + inet/filter/limit-1518 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1518 + inet6/filter/limit-1518 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1518 -m limit --limit 1/second -j LOG + inet6/filter/limit-1518 -j ACCEPT + +Filter 1520 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1519 + inet/filter/limit-1519 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1519 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1519 + inet6/filter/limit-1519 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1519 -m limit --limit 1/second -j LOG + +Filter 1521 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1520 + inet/filter/limit-1520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1520 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1520 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1520 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1520 + inet6/filter/limit-1520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1520 -j TEE --gateway fc00::2 + inet6/filter/limit-1520 -j ACCEPT + +Filter 1522 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1521 + inet/filter/limit-1521 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1521 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1521 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1521 + inet6/filter/limit-1521 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1521 -j TEE --gateway fc00::2 + +Filter 1523 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1522 + inet/filter/limit-1522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1522 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1522 + inet6/filter/limit-1522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1522 -j ACCEPT + +Filter 1524 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1434 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1434 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1434 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1434 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1434 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1434 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1434 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1434 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1436 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} +Filter 1525 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1435 - inet/filter/INPUT -j limit-1435 - inet/filter/OUTPUT -j limit-1435 - inet/filter/limit-1435 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1435 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1435 - inet6/filter/INPUT -j limit-1435 - inet6/filter/OUTPUT -j limit-1435 - inet6/filter/limit-1435 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1435 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1524 + inet/filter/limit-1524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1524 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1524 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1524 + inet6/filter/limit-1524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1524 -j ACCEPT -Filter 1437 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +Filter 1526 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1436 - inet/filter/FORWARD -j logaccept-final-44 - inet/filter/INPUT -j limit-1436 - inet/filter/INPUT -j logaccept-final-44 - inet/filter/OUTPUT -j limit-1436 - inet/filter/OUTPUT -j logaccept-final-44 - inet/filter/limit-1436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1436 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-44 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-44 -j ACCEPT - inet6/filter/FORWARD -j limit-1436 - inet6/filter/FORWARD -j logaccept-final-44 - inet6/filter/INPUT -j limit-1436 - inet6/filter/INPUT -j logaccept-final-44 - inet6/filter/OUTPUT -j limit-1436 - inet6/filter/OUTPUT -j logaccept-final-44 - inet6/filter/limit-1436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-44 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-44 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1525 + inet/filter/limit-1525 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1525 -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1525 + inet6/filter/limit-1525 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1438 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +Filter 1527 {"conn-limit":{"interval":5},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1437 - inet/filter/INPUT -j limit-1437 - inet/filter/OUTPUT -j limit-1437 - inet/filter/limit-1437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1437 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1437 - inet6/filter/INPUT -j limit-1437 - inet6/filter/OUTPUT -j limit-1437 - inet6/filter/limit-1437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1526 + inet/filter/limit-1526 -m recent --name limit-1526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-830 + inet/filter/limit-1526 -m recent --name limit-1526 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-830 -m limit --limit 1/second -j LOG + inet/filter/logdrop-830 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1526 + inet6/filter/limit-1526 -m recent --name limit-1526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-830 + inet6/filter/limit-1526 -m recent --name limit-1526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-830 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-830 -j DROP -Filter 1439 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +Filter 1528 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1438 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1438 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1438 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1438 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1438 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1438 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1438 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1527 + inet/filter/limit-1527 -m recent --name limit-1527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-831 + inet/filter/limit-1527 -m recent --name limit-1527 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-831 -m limit --limit 1/second -j LOG + inet/filter/logdrop-831 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1527 + inet6/filter/limit-1527 -m recent --name limit-1527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-831 + inet6/filter/limit-1527 -m recent --name limit-1527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-831 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-831 -j DROP -Filter 1440 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +Filter 1529 {"conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1439 - inet/filter/INPUT -j limit-1439 - inet/filter/OUTPUT -j limit-1439 - inet/filter/limit-1439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1439 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1439 - inet6/filter/INPUT -j limit-1439 - inet6/filter/OUTPUT -j limit-1439 - inet6/filter/limit-1439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1528 + inet/filter/limit-1528 -m recent --name limit-1528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-832 + inet/filter/limit-1528 -m limit --limit 1/second -j LOG + inet/filter/limit-1528 -m recent --name limit-1528 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-832 -m limit --limit 1/second -j LOG + inet/filter/logdrop-832 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1528 + inet6/filter/limit-1528 -m recent --name limit-1528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-832 + inet6/filter/limit-1528 -m limit --limit 1/second -j LOG + inet6/filter/limit-1528 -m recent --name limit-1528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-832 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-832 -j DROP -Filter 1441 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog"} +Filter 1530 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1440 - inet/filter/FORWARD -j logaccept-final-45 - inet/filter/INPUT -j limit-1440 - inet/filter/INPUT -j logaccept-final-45 - inet/filter/OUTPUT -j limit-1440 - inet/filter/OUTPUT -j logaccept-final-45 - inet/filter/limit-1440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1440 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-45 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-45 -j ACCEPT - inet6/filter/FORWARD -j limit-1440 - inet6/filter/FORWARD -j logaccept-final-45 - inet6/filter/INPUT -j limit-1440 - inet6/filter/INPUT -j logaccept-final-45 - inet6/filter/OUTPUT -j limit-1440 - inet6/filter/OUTPUT -j logaccept-final-45 - inet6/filter/limit-1440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-45 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1529 + inet/filter/limit-1529 -m recent --name limit-1529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-833 + inet/filter/limit-1529 -m recent --name limit-1529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-833 -m limit --limit 1/second -j LOG + inet/filter/logdrop-833 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1529 + inet6/filter/limit-1529 -m recent --name limit-1529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-833 + inet6/filter/limit-1529 -m recent --name limit-1529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-833 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-833 -j DROP -Filter 1442 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog"} +Filter 1531 {"conn-limit":{"interval":5},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1441 - inet/filter/INPUT -j limit-1441 - inet/filter/OUTPUT -j limit-1441 - inet/filter/limit-1441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1441 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1441 - inet6/filter/INPUT -j limit-1441 - inet6/filter/OUTPUT -j limit-1441 - inet6/filter/limit-1441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1530 + inet/filter/limit-1530 -m recent --name limit-1530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-834 + inet/filter/limit-1530 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1530 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1530 -m recent --name limit-1530 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-834 -m limit --limit 1/second -j LOG + inet/filter/logdrop-834 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1530 + inet6/filter/limit-1530 -m recent --name limit-1530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-834 + inet6/filter/limit-1530 -j TEE --gateway fc00::2 + inet6/filter/limit-1530 -m recent --name limit-1530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-834 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-834 -j DROP -Filter 1443 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +Filter 1532 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1442 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1442 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1442 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1442 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1442 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1442 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1531 + inet/filter/limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-835 + inet/filter/limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-835 -m limit --limit 1/second -j LOG + inet/filter/logdrop-835 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1531 + inet6/filter/limit-1531 -m recent --name limit-1531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-835 + inet6/filter/limit-1531 -m recent --name limit-1531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-835 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-835 -j DROP -Filter 1444 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +Filter 1533 {"conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1443 - inet/filter/INPUT -j limit-1443 - inet/filter/OUTPUT -j limit-1443 - inet/filter/limit-1443 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1443 - inet6/filter/INPUT -j limit-1443 - inet6/filter/OUTPUT -j limit-1443 - inet6/filter/limit-1443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1532 + inet/filter/limit-1532 -m recent --name limit-1532 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-836 + inet/filter/limit-1532 -m recent --name limit-1532 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-836 -m limit --limit 1/second -j LOG + inet/filter/logdrop-836 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1532 + inet6/filter/limit-1532 -m recent --name limit-1532 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-836 + inet6/filter/limit-1532 -m recent --name limit-1532 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-836 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-836 -j DROP -Filter 1445 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +Filter 1534 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1444 - inet/filter/FORWARD -j logaccept-final-46 - inet/filter/INPUT -j limit-1444 - inet/filter/INPUT -j logaccept-final-46 - inet/filter/OUTPUT -j limit-1444 - inet/filter/OUTPUT -j logaccept-final-46 - inet/filter/limit-1444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-46 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-46 -j ACCEPT - inet6/filter/FORWARD -j limit-1444 - inet6/filter/FORWARD -j logaccept-final-46 - inet6/filter/INPUT -j limit-1444 - inet6/filter/INPUT -j logaccept-final-46 - inet6/filter/OUTPUT -j limit-1444 - inet6/filter/OUTPUT -j logaccept-final-46 - inet6/filter/limit-1444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-46 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-46 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1533 + inet/filter/limit-1533 -m recent --name limit-1533 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-837 + inet/filter/limit-1533 -m recent --name limit-1533 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-837 -m limit --limit 1/second -j LOG + inet/filter/logdrop-837 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1533 + inet6/filter/limit-1533 -m recent --name limit-1533 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-837 + inet6/filter/limit-1533 -m recent --name limit-1533 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-837 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-837 -j DROP -Filter 1446 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +Filter 1535 {"conn-limit":{"interval":5},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1445 - inet/filter/INPUT -j limit-1445 - inet/filter/OUTPUT -j limit-1445 - inet/filter/limit-1445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1445 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1445 - inet6/filter/INPUT -j limit-1445 - inet6/filter/OUTPUT -j limit-1445 - inet6/filter/limit-1445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1445 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1534 + inet/filter/limit-1534 -m recent --name limit-1534 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-838 + inet/filter/limit-1534 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1534 -m recent --name limit-1534 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-838 -m limit --limit 1/second -j LOG + inet/filter/logdrop-838 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1534 + inet6/filter/limit-1534 -m recent --name limit-1534 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-838 + inet6/filter/limit-1534 -m recent --name limit-1534 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-838 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-838 -j DROP -Filter 1447 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +Filter 1536 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1446 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1446 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1446 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1446 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1446 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1446 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1535 + inet/filter/limit-1535 -m recent --name limit-1535 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-839 + inet/filter/limit-1535 -m recent --name limit-1535 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-839 -m limit --limit 1/second -j LOG + inet/filter/logdrop-839 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1535 + inet6/filter/limit-1535 -m recent --name limit-1535 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-839 + inet6/filter/logdrop-839 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-839 -j DROP -Filter 1448 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +Filter 1537 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1447 - inet/filter/INPUT -j limit-1447 - inet/filter/OUTPUT -j limit-1447 - inet/filter/limit-1447 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1447 - inet6/filter/INPUT -j limit-1447 - inet6/filter/OUTPUT -j limit-1447 - inet6/filter/limit-1447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1536 + inet/filter/limit-1536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-840 + inet/filter/limit-1536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-840 -m limit --limit 1/second -j LOG + inet/filter/logdrop-840 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1536 + inet6/filter/limit-1536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-840 + inet6/filter/limit-1536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-840 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-840 -j DROP -Filter 1449 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog"} +Filter 1538 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1448 - inet/filter/FORWARD -j logaccept-final-47 - inet/filter/INPUT -j limit-1448 - inet/filter/INPUT -j logaccept-final-47 - inet/filter/OUTPUT -j limit-1448 - inet/filter/OUTPUT -j logaccept-final-47 - inet/filter/limit-1448 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-47 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-47 -j ACCEPT - inet6/filter/FORWARD -j limit-1448 - inet6/filter/FORWARD -j logaccept-final-47 - inet6/filter/INPUT -j limit-1448 - inet6/filter/INPUT -j logaccept-final-47 - inet6/filter/OUTPUT -j limit-1448 - inet6/filter/OUTPUT -j logaccept-final-47 - inet6/filter/limit-1448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-47 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1537 + inet/filter/limit-1537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-841 + inet/filter/limit-1537 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-841 -m limit --limit 1/second -j LOG + inet/filter/logdrop-841 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1537 + inet6/filter/limit-1537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-841 + inet6/filter/limit-1537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-841 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-841 -j DROP -Filter 1450 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog"} +Filter 1539 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1449 - inet/filter/INPUT -j limit-1449 - inet/filter/OUTPUT -j limit-1449 - inet/filter/limit-1449 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1449 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1449 - inet6/filter/INPUT -j limit-1449 - inet6/filter/OUTPUT -j limit-1449 - inet6/filter/limit-1449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1538 + inet/filter/limit-1538 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-842 + inet/filter/limit-1538 -m limit --limit 1/second -j LOG + inet/filter/limit-1538 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-842 -m limit --limit 1/second -j LOG + inet/filter/logdrop-842 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1538 + inet6/filter/limit-1538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-842 + inet6/filter/limit-1538 -m limit --limit 1/second -j LOG + inet6/filter/limit-1538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-842 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-842 -j DROP -Filter 1451 {"flow-limit":{"log":"none","name":"C"}} +Filter 1540 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1450 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1450 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1450 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1450 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1450 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1450 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1450 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1450 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1539 + inet/filter/limit-1539 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-843 + inet/filter/limit-1539 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-843 -m limit --limit 1/second -j LOG + inet/filter/logdrop-843 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1539 + inet6/filter/limit-1539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-843 + inet6/filter/limit-1539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-843 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-843 -j DROP -Filter 1452 {"action":"pass","flow-limit":{"log":"none","name":"C"}} +Filter 1541 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1451 - inet/filter/INPUT -j limit-1451 - inet/filter/OUTPUT -j limit-1451 - inet/filter/limit-1451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1451 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1451 - inet6/filter/INPUT -j limit-1451 - inet6/filter/OUTPUT -j limit-1451 - inet6/filter/limit-1451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1451 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1540 + inet/filter/limit-1540 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-844 + inet/filter/limit-1540 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1540 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1540 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-844 -m limit --limit 1/second -j LOG + inet/filter/logdrop-844 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1540 + inet6/filter/limit-1540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-844 + inet6/filter/limit-1540 -j TEE --gateway fc00::2 + inet6/filter/limit-1540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-844 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-844 -j DROP -Filter 1453 {"flow-limit":{"log":"none","name":"C"},"log":true} +Filter 1542 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1452 - inet/filter/FORWARD -j logaccept-final-48 - inet/filter/INPUT -j limit-1452 - inet/filter/INPUT -j logaccept-final-48 - inet/filter/OUTPUT -j limit-1452 - inet/filter/OUTPUT -j logaccept-final-48 - inet/filter/limit-1452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1452 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-48 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-48 -j ACCEPT - inet6/filter/FORWARD -j limit-1452 - inet6/filter/FORWARD -j logaccept-final-48 - inet6/filter/INPUT -j limit-1452 - inet6/filter/INPUT -j logaccept-final-48 - inet6/filter/OUTPUT -j limit-1452 - inet6/filter/OUTPUT -j logaccept-final-48 - inet6/filter/limit-1452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1452 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-48 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-48 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1541 + inet/filter/limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-845 + inet/filter/limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-845 -m limit --limit 1/second -j LOG + inet/filter/logdrop-845 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1541 + inet6/filter/limit-1541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-845 + inet6/filter/limit-1541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-845 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-845 -j DROP -Filter 1454 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} +Filter 1543 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1453 - inet/filter/INPUT -j limit-1453 - inet/filter/OUTPUT -j limit-1453 - inet/filter/limit-1453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1453 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1453 - inet6/filter/INPUT -j limit-1453 - inet6/filter/OUTPUT -j limit-1453 - inet6/filter/limit-1453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1453 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1542 + inet/filter/limit-1542 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-846 + inet/filter/limit-1542 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-846 -m limit --limit 1/second -j LOG + inet/filter/logdrop-846 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1542 + inet6/filter/limit-1542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-846 + inet6/filter/limit-1542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-846 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-846 -j DROP -Filter 1455 {"flow-limit":{"log":"none","name":"C"},"log":"none"} +Filter 1544 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1454 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1454 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1454 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1454 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1454 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1454 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1454 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1454 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1454 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1454 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1543 + inet/filter/limit-1543 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-847 + inet/filter/limit-1543 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-847 -m limit --limit 1/second -j LOG + inet/filter/logdrop-847 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1543 + inet6/filter/limit-1543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-847 + inet6/filter/limit-1543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-847 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-847 -j DROP -Filter 1456 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} +Filter 1545 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1455 - inet/filter/INPUT -j limit-1455 - inet/filter/OUTPUT -j limit-1455 - inet/filter/limit-1455 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1455 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1455 - inet6/filter/INPUT -j limit-1455 - inet6/filter/OUTPUT -j limit-1455 - inet6/filter/limit-1455 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1455 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1544 + inet/filter/limit-1544 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-848 + inet/filter/limit-1544 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1544 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-848 -m limit --limit 1/second -j LOG + inet/filter/logdrop-848 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1544 + inet6/filter/limit-1544 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-848 + inet6/filter/limit-1544 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-848 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-848 -j DROP -Filter 1457 {"flow-limit":{"log":"none","name":"C"},"log":"ulog"} +Filter 1546 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1456 - inet/filter/FORWARD -j logaccept-final-49 - inet/filter/INPUT -j limit-1456 - inet/filter/INPUT -j logaccept-final-49 - inet/filter/OUTPUT -j limit-1456 - inet/filter/OUTPUT -j logaccept-final-49 - inet/filter/limit-1456 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1456 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-49 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-49 -j ACCEPT - inet6/filter/FORWARD -j limit-1456 - inet6/filter/FORWARD -j logaccept-final-49 - inet6/filter/INPUT -j limit-1456 - inet6/filter/INPUT -j logaccept-final-49 - inet6/filter/OUTPUT -j limit-1456 - inet6/filter/OUTPUT -j logaccept-final-49 - inet6/filter/limit-1456 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1456 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-49 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1545 + inet/filter/limit-1545 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-849 + inet/filter/limit-1545 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-849 -m limit --limit 1/second -j LOG + inet/filter/logdrop-849 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1545 + inet6/filter/limit-1545 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-849 + inet6/filter/logdrop-849 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-849 -j DROP -Filter 1458 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"ulog"} +Filter 1547 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1457 - inet/filter/INPUT -j limit-1457 - inet/filter/OUTPUT -j limit-1457 - inet/filter/limit-1457 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1457 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1457 - inet6/filter/INPUT -j limit-1457 - inet6/filter/OUTPUT -j limit-1457 - inet6/filter/limit-1457 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1546 + inet/filter/limit-1546 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-850 + inet/filter/limit-1546 -j ACCEPT + inet/filter/logdrop-850 -m limit --limit 1/second -j LOG + inet/filter/logdrop-850 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1546 + inet6/filter/limit-1546 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-850 + inet6/filter/limit-1546 -j ACCEPT + inet6/filter/logdrop-850 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-850 -j DROP -Filter 1459 {"flow-limit":{"log":"none","name":"C","update":false}} +Filter 1548 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1458 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1458 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1458 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1458 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1458 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1458 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-851 + inet/filter/logdrop-851 -m limit --limit 1/second -j LOG + inet/filter/logdrop-851 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-851 + inet6/filter/logdrop-851 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-851 -j DROP -Filter 1460 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} +Filter 1549 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1459 - inet/filter/INPUT -j limit-1459 - inet/filter/OUTPUT -j limit-1459 - inet/filter/limit-1459 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1459 - inet6/filter/INPUT -j limit-1459 - inet6/filter/OUTPUT -j limit-1459 - inet6/filter/limit-1459 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1548 + inet/filter/limit-1548 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-852 + inet/filter/limit-1548 -m limit --limit 1/second -j LOG + inet/filter/limit-1548 -j ACCEPT + inet/filter/logdrop-852 -m limit --limit 1/second -j LOG + inet/filter/logdrop-852 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1548 + inet6/filter/limit-1548 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-852 + inet6/filter/limit-1548 -m limit --limit 1/second -j LOG + inet6/filter/limit-1548 -j ACCEPT + inet6/filter/logdrop-852 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-852 -j DROP -Filter 1461 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} +Filter 1550 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1460 - inet/filter/FORWARD -j logaccept-final-50 - inet/filter/INPUT -j limit-1460 - inet/filter/INPUT -j logaccept-final-50 - inet/filter/OUTPUT -j limit-1460 - inet/filter/OUTPUT -j logaccept-final-50 - inet/filter/limit-1460 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-50 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-50 -j ACCEPT - inet6/filter/FORWARD -j limit-1460 - inet6/filter/FORWARD -j logaccept-final-50 - inet6/filter/INPUT -j limit-1460 - inet6/filter/INPUT -j logaccept-final-50 - inet6/filter/OUTPUT -j limit-1460 - inet6/filter/OUTPUT -j logaccept-final-50 - inet6/filter/limit-1460 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-50 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-50 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1549 + inet/filter/limit-1549 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-853 + inet/filter/limit-1549 -m limit --limit 1/second -j LOG + inet/filter/logdrop-853 -m limit --limit 1/second -j LOG + inet/filter/logdrop-853 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1549 + inet6/filter/limit-1549 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-853 + inet6/filter/limit-1549 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-853 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-853 -j DROP -Filter 1462 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} +Filter 1551 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1461 - inet/filter/INPUT -j limit-1461 - inet/filter/OUTPUT -j limit-1461 - inet/filter/limit-1461 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1461 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1461 - inet6/filter/INPUT -j limit-1461 - inet6/filter/OUTPUT -j limit-1461 - inet6/filter/limit-1461 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1461 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1550 + inet/filter/limit-1550 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-854 + inet/filter/limit-1550 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1550 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1550 -j ACCEPT + inet/filter/logdrop-854 -m limit --limit 1/second -j LOG + inet/filter/logdrop-854 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1550 + inet6/filter/limit-1550 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-854 + inet6/filter/limit-1550 -j TEE --gateway fc00::2 + inet6/filter/limit-1550 -j ACCEPT + inet6/filter/logdrop-854 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-854 -j DROP -Filter 1463 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +Filter 1552 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1462 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1462 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1462 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1462 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1462 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1462 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1462 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1462 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1551 + inet/filter/limit-1551 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-855 + inet/filter/limit-1551 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1551 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-855 -m limit --limit 1/second -j LOG + inet/filter/logdrop-855 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1551 + inet6/filter/limit-1551 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-855 + inet6/filter/limit-1551 -j TEE --gateway fc00::2 + inet6/filter/logdrop-855 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-855 -j DROP -Filter 1464 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +Filter 1553 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1463 - inet/filter/INPUT -j limit-1463 - inet/filter/OUTPUT -j limit-1463 - inet/filter/limit-1463 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1463 - inet6/filter/INPUT -j limit-1463 - inet6/filter/OUTPUT -j limit-1463 - inet6/filter/limit-1463 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1552 + inet/filter/limit-1552 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-856 + inet/filter/limit-1552 -j ACCEPT + inet/filter/logdrop-856 -m limit --limit 1/second -j LOG + inet/filter/logdrop-856 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1552 + inet6/filter/limit-1552 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-856 + inet6/filter/limit-1552 -j ACCEPT + inet6/filter/logdrop-856 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-856 -j DROP -Filter 1465 {"flow-limit":{"log":"none","name":"C","update":false},"log":"ulog"} +Filter 1554 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1464 - inet/filter/FORWARD -j logaccept-final-51 - inet/filter/INPUT -j limit-1464 - inet/filter/INPUT -j logaccept-final-51 - inet/filter/OUTPUT -j limit-1464 - inet/filter/OUTPUT -j logaccept-final-51 - inet/filter/limit-1464 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-51 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-51 -j ACCEPT - inet6/filter/FORWARD -j limit-1464 - inet6/filter/FORWARD -j logaccept-final-51 - inet6/filter/INPUT -j limit-1464 - inet6/filter/INPUT -j logaccept-final-51 - inet6/filter/OUTPUT -j limit-1464 - inet6/filter/OUTPUT -j logaccept-final-51 - inet6/filter/limit-1464 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-51 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-857 + inet/filter/logdrop-857 -m limit --limit 1/second -j LOG + inet/filter/logdrop-857 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-857 + inet6/filter/logdrop-857 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-857 -j DROP -Filter 1466 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"ulog"} +Filter 1555 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1465 - inet/filter/INPUT -j limit-1465 - inet/filter/OUTPUT -j limit-1465 - inet/filter/limit-1465 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1465 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1465 - inet6/filter/INPUT -j limit-1465 - inet6/filter/OUTPUT -j limit-1465 - inet6/filter/limit-1465 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1554 + inet/filter/limit-1554 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-858 + inet/filter/limit-1554 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1554 -j ACCEPT + inet/filter/logdrop-858 -m limit --limit 1/second -j LOG + inet/filter/logdrop-858 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1554 + inet6/filter/limit-1554 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-858 + inet6/filter/limit-1554 -j ACCEPT + inet6/filter/logdrop-858 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-858 -j DROP -Filter 1467 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} +Filter 1556 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1466 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1466 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1466 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1466 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1466 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1466 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1466 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1466 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1466 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1466 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1555 + inet/filter/limit-1555 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-859 + inet/filter/limit-1555 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-859 -m limit --limit 1/second -j LOG + inet/filter/logdrop-859 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1555 + inet6/filter/limit-1555 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-859 + inet6/filter/logdrop-859 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-859 -j DROP -Filter 1468 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} +Filter 1557 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1467 - inet/filter/INPUT -j limit-1467 - inet/filter/OUTPUT -j limit-1467 - inet/filter/limit-1467 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1467 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1467 - inet6/filter/INPUT -j limit-1467 - inet6/filter/OUTPUT -j limit-1467 - inet6/filter/limit-1467 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1467 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1556 + inet/filter/limit-1556 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-860 + inet/filter/limit-1556 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-860 -m limit --limit 1/second -j LOG + inet/filter/logdrop-860 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1556 + inet6/filter/limit-1556 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-860 + inet6/filter/limit-1556 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-860 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-860 -j DROP -Filter 1469 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +Filter 1558 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1468 - inet/filter/FORWARD -j logaccept-final-52 - inet/filter/INPUT -j limit-1468 - inet/filter/INPUT -j logaccept-final-52 - inet/filter/OUTPUT -j limit-1468 - inet/filter/OUTPUT -j logaccept-final-52 - inet/filter/limit-1468 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1468 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-52 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-52 -j ACCEPT - inet6/filter/FORWARD -j limit-1468 - inet6/filter/FORWARD -j logaccept-final-52 - inet6/filter/INPUT -j limit-1468 - inet6/filter/INPUT -j logaccept-final-52 - inet6/filter/OUTPUT -j limit-1468 - inet6/filter/OUTPUT -j logaccept-final-52 - inet6/filter/limit-1468 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1468 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-52 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-52 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1557 + inet/filter/limit-1557 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-861 + inet/filter/limit-1557 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-861 -m limit --limit 1/second -j LOG + inet/filter/logdrop-861 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1557 + inet6/filter/limit-1557 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-861 + inet6/filter/limit-1557 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-861 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-861 -j DROP -Filter 1470 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +Filter 1559 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1469 - inet/filter/INPUT -j limit-1469 - inet/filter/OUTPUT -j limit-1469 - inet/filter/limit-1469 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1469 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1469 - inet6/filter/INPUT -j limit-1469 - inet6/filter/OUTPUT -j limit-1469 - inet6/filter/limit-1469 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1469 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1558 + inet/filter/limit-1558 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-862 + inet/filter/limit-1558 -m limit --limit 1/second -j LOG + inet/filter/limit-1558 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-862 -m limit --limit 1/second -j LOG + inet/filter/logdrop-862 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1558 + inet6/filter/limit-1558 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-862 + inet6/filter/limit-1558 -m limit --limit 1/second -j LOG + inet6/filter/limit-1558 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-862 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-862 -j DROP -Filter 1471 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +Filter 1560 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1470 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1470 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1470 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1470 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1470 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1470 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1470 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1470 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1470 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1470 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1559 + inet/filter/limit-1559 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-863 + inet/filter/limit-1559 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-863 -m limit --limit 1/second -j LOG + inet/filter/logdrop-863 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1559 + inet6/filter/limit-1559 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-863 + inet6/filter/limit-1559 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-863 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-863 -j DROP -Filter 1472 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +Filter 1561 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1471 - inet/filter/INPUT -j limit-1471 - inet/filter/OUTPUT -j limit-1471 - inet/filter/limit-1471 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1471 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1471 - inet6/filter/INPUT -j limit-1471 - inet6/filter/OUTPUT -j limit-1471 - inet6/filter/limit-1471 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1471 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1560 + inet/filter/limit-1560 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-864 + inet/filter/limit-1560 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1560 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1560 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-864 -m limit --limit 1/second -j LOG + inet/filter/logdrop-864 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1560 + inet6/filter/limit-1560 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-864 + inet6/filter/limit-1560 -j TEE --gateway fc00::2 + inet6/filter/limit-1560 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-864 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-864 -j DROP -Filter 1473 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog"} +Filter 1562 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1472 - inet/filter/FORWARD -j logaccept-final-53 - inet/filter/INPUT -j limit-1472 - inet/filter/INPUT -j logaccept-final-53 - inet/filter/OUTPUT -j limit-1472 - inet/filter/OUTPUT -j logaccept-final-53 - inet/filter/limit-1472 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1472 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-53 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-53 -j ACCEPT - inet6/filter/FORWARD -j limit-1472 - inet6/filter/FORWARD -j logaccept-final-53 - inet6/filter/INPUT -j limit-1472 - inet6/filter/INPUT -j logaccept-final-53 - inet6/filter/OUTPUT -j limit-1472 - inet6/filter/OUTPUT -j logaccept-final-53 - inet6/filter/limit-1472 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1472 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-53 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1561 + inet/filter/limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-865 + inet/filter/limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-865 -m limit --limit 1/second -j LOG + inet/filter/logdrop-865 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1561 + inet6/filter/limit-1561 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-865 + inet6/filter/limit-1561 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-865 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-865 -j DROP -Filter 1474 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog"} +Filter 1563 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1473 - inet/filter/INPUT -j limit-1473 - inet/filter/OUTPUT -j limit-1473 - inet/filter/limit-1473 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1473 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1473 - inet6/filter/INPUT -j limit-1473 - inet6/filter/OUTPUT -j limit-1473 - inet6/filter/limit-1473 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1562 + inet/filter/limit-1562 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-866 + inet/filter/limit-1562 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-866 -m limit --limit 1/second -j LOG + inet/filter/logdrop-866 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1562 + inet6/filter/limit-1562 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-866 + inet6/filter/limit-1562 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-866 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-866 -j DROP -Filter 1475 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +Filter 1564 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1474 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1474 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1474 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1474 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1474 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1474 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1474 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1474 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1563 + inet/filter/limit-1563 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-867 + inet/filter/limit-1563 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-867 -m limit --limit 1/second -j LOG + inet/filter/logdrop-867 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1563 + inet6/filter/limit-1563 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-867 + inet6/filter/limit-1563 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-867 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-867 -j DROP -Filter 1476 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +Filter 1565 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1475 - inet/filter/INPUT -j limit-1475 - inet/filter/OUTPUT -j limit-1475 - inet/filter/limit-1475 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1475 - inet6/filter/INPUT -j limit-1475 - inet6/filter/OUTPUT -j limit-1475 - inet6/filter/limit-1475 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1564 + inet/filter/limit-1564 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-868 + inet/filter/limit-1564 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1564 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-868 -m limit --limit 1/second -j LOG + inet/filter/logdrop-868 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1564 + inet6/filter/limit-1564 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-868 + inet6/filter/limit-1564 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-868 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-868 -j DROP -Filter 1477 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +Filter 1566 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1476 - inet/filter/FORWARD -j logaccept-final-54 - inet/filter/INPUT -j limit-1476 - inet/filter/INPUT -j logaccept-final-54 - inet/filter/OUTPUT -j limit-1476 - inet/filter/OUTPUT -j logaccept-final-54 - inet/filter/limit-1476 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-54 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-54 -j ACCEPT - inet6/filter/FORWARD -j limit-1476 - inet6/filter/FORWARD -j logaccept-final-54 - inet6/filter/INPUT -j limit-1476 - inet6/filter/INPUT -j logaccept-final-54 - inet6/filter/OUTPUT -j limit-1476 - inet6/filter/OUTPUT -j logaccept-final-54 - inet6/filter/limit-1476 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-54 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-54 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1565 + inet/filter/limit-1565 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-869 + inet/filter/limit-1565 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-869 -m limit --limit 1/second -j LOG + inet/filter/logdrop-869 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1565 + inet6/filter/limit-1565 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-869 + inet6/filter/logdrop-869 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-869 -j DROP -Filter 1478 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +Filter 1567 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1477 - inet/filter/INPUT -j limit-1477 - inet/filter/OUTPUT -j limit-1477 - inet/filter/limit-1477 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1477 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1477 - inet6/filter/INPUT -j limit-1477 - inet6/filter/OUTPUT -j limit-1477 - inet6/filter/limit-1477 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1477 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1566 + inet/filter/limit-1566 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-870 + inet/filter/limit-1566 -j ACCEPT + inet/filter/logdrop-870 -m limit --limit 1/second -j LOG + inet/filter/logdrop-870 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1566 + inet6/filter/limit-1566 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-870 + inet6/filter/limit-1566 -j ACCEPT + inet6/filter/logdrop-870 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-870 -j DROP -Filter 1479 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +Filter 1568 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1478 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1478 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1478 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1478 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1478 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1478 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1478 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1478 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-871 + inet/filter/logdrop-871 -m limit --limit 1/second -j LOG + inet/filter/logdrop-871 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-871 + inet6/filter/logdrop-871 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-871 -j DROP -Filter 1480 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +Filter 1569 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1479 - inet/filter/INPUT -j limit-1479 - inet/filter/OUTPUT -j limit-1479 - inet/filter/limit-1479 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -j limit-1479 - inet6/filter/INPUT -j limit-1479 - inet6/filter/OUTPUT -j limit-1479 - inet6/filter/limit-1479 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1568 + inet/filter/limit-1568 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-872 + inet/filter/limit-1568 -m limit --limit 1/second -j LOG + inet/filter/limit-1568 -j ACCEPT + inet/filter/logdrop-872 -m limit --limit 1/second -j LOG + inet/filter/logdrop-872 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1568 + inet6/filter/limit-1568 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-872 + inet6/filter/limit-1568 -m limit --limit 1/second -j LOG + inet6/filter/limit-1568 -j ACCEPT + inet6/filter/logdrop-872 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-872 -j DROP -Filter 1481 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog"} +Filter 1570 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1480 - inet/filter/FORWARD -j logaccept-final-55 - inet/filter/INPUT -j limit-1480 - inet/filter/INPUT -j logaccept-final-55 - inet/filter/OUTPUT -j limit-1480 - inet/filter/OUTPUT -j logaccept-final-55 - inet/filter/limit-1480 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/logaccept-final-55 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-55 -j ACCEPT - inet6/filter/FORWARD -j limit-1480 - inet6/filter/FORWARD -j logaccept-final-55 - inet6/filter/INPUT -j limit-1480 - inet6/filter/INPUT -j logaccept-final-55 - inet6/filter/OUTPUT -j limit-1480 - inet6/filter/OUTPUT -j logaccept-final-55 - inet6/filter/limit-1480 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/logaccept-final-55 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1569 + inet/filter/limit-1569 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-873 + inet/filter/limit-1569 -m limit --limit 1/second -j LOG + inet/filter/logdrop-873 -m limit --limit 1/second -j LOG + inet/filter/logdrop-873 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1569 + inet6/filter/limit-1569 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-873 + inet6/filter/limit-1569 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-873 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-873 -j DROP -Filter 1482 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog"} +Filter 1571 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1481 - inet/filter/INPUT -j limit-1481 - inet/filter/OUTPUT -j limit-1481 - inet/filter/limit-1481 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1481 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1481 - inet6/filter/INPUT -j limit-1481 - inet6/filter/OUTPUT -j limit-1481 - inet6/filter/limit-1481 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1570 + inet/filter/limit-1570 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-874 + inet/filter/limit-1570 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1570 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1570 -j ACCEPT + inet/filter/logdrop-874 -m limit --limit 1/second -j LOG + inet/filter/logdrop-874 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1570 + inet6/filter/limit-1570 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-874 + inet6/filter/limit-1570 -j TEE --gateway fc00::2 + inet6/filter/limit-1570 -j ACCEPT + inet6/filter/logdrop-874 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-874 -j DROP -Filter 1483 {"flow-limit":{"log":"ulog"}} +Filter 1572 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1482 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1482 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1482 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1482 -m recent --name limit-1482 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-672 - inet/filter/limit-1482 -m recent --name limit-1482 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-672 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-672 -j DROP - inet6/filter/FORWARD -j limit-1482 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1482 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1482 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1482 -m recent --name limit-1482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-672 - inet6/filter/limit-1482 -m recent --name limit-1482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-672 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1571 + inet/filter/limit-1571 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-875 + inet/filter/limit-1571 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1571 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-875 -m limit --limit 1/second -j LOG + inet/filter/logdrop-875 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1571 + inet6/filter/limit-1571 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-875 + inet6/filter/limit-1571 -j TEE --gateway fc00::2 + inet6/filter/logdrop-875 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-875 -j DROP -Filter 1484 {"action":"pass","flow-limit":{"log":"ulog"}} +Filter 1573 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1483 - inet/filter/INPUT -j limit-1483 - inet/filter/OUTPUT -j limit-1483 - inet/filter/limit-1483 -m recent --name limit-1483 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-673 - inet/filter/limit-1483 -m recent --name limit-1483 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-673 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-673 -j DROP - inet6/filter/FORWARD -j limit-1483 - inet6/filter/INPUT -j limit-1483 - inet6/filter/OUTPUT -j limit-1483 - inet6/filter/limit-1483 -m recent --name limit-1483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-673 - inet6/filter/limit-1483 -m recent --name limit-1483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-673 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1572 + inet/filter/limit-1572 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-876 + inet/filter/limit-1572 -j ACCEPT + inet/filter/logdrop-876 -m limit --limit 1/second -j LOG + inet/filter/logdrop-876 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1572 + inet6/filter/limit-1572 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-876 + inet6/filter/limit-1572 -j ACCEPT + inet6/filter/logdrop-876 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-876 -j DROP -Filter 1485 {"flow-limit":{"log":"ulog"},"log":true} +Filter 1574 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1484 - inet/filter/FORWARD -j logaccept-final-56 - inet/filter/INPUT -j limit-1484 - inet/filter/INPUT -j logaccept-final-56 - inet/filter/OUTPUT -j limit-1484 - inet/filter/OUTPUT -j logaccept-final-56 - inet/filter/limit-1484 -m recent --name limit-1484 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-674 - inet/filter/limit-1484 -m recent --name limit-1484 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-56 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-56 -j ACCEPT - inet/filter/logdrop-674 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-674 -j DROP - inet6/filter/FORWARD -j limit-1484 - inet6/filter/FORWARD -j logaccept-final-56 - inet6/filter/INPUT -j limit-1484 - inet6/filter/INPUT -j logaccept-final-56 - inet6/filter/OUTPUT -j limit-1484 - inet6/filter/OUTPUT -j logaccept-final-56 - inet6/filter/limit-1484 -m recent --name limit-1484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-674 - inet6/filter/limit-1484 -m recent --name limit-1484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-56 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-56 -j ACCEPT - inet6/filter/logdrop-674 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-877 + inet/filter/logdrop-877 -m limit --limit 1/second -j LOG + inet/filter/logdrop-877 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-877 + inet6/filter/logdrop-877 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-877 -j DROP -Filter 1486 {"action":"pass","flow-limit":{"log":"ulog"},"log":true} +Filter 1575 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1485 - inet/filter/INPUT -j limit-1485 - inet/filter/OUTPUT -j limit-1485 - inet/filter/limit-1485 -m recent --name limit-1485 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-675 - inet/filter/limit-1485 -m recent --name limit-1485 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-675 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-675 -j DROP - inet6/filter/FORWARD -j limit-1485 - inet6/filter/INPUT -j limit-1485 - inet6/filter/OUTPUT -j limit-1485 - inet6/filter/limit-1485 -m recent --name limit-1485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-675 - inet6/filter/limit-1485 -m recent --name limit-1485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-675 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1574 + inet/filter/limit-1574 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-878 + inet/filter/limit-1574 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1574 -j ACCEPT + inet/filter/logdrop-878 -m limit --limit 1/second -j LOG + inet/filter/logdrop-878 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1574 + inet6/filter/limit-1574 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-878 + inet6/filter/limit-1574 -j ACCEPT + inet6/filter/logdrop-878 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-878 -j DROP -Filter 1487 {"flow-limit":{"log":"ulog"},"log":"none"} +Filter 1576 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1486 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1486 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1486 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1486 -m recent --name limit-1486 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-676 - inet/filter/limit-1486 -m recent --name limit-1486 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-676 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-676 -j DROP - inet6/filter/FORWARD -j limit-1486 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1486 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1486 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1486 -m recent --name limit-1486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-676 - inet6/filter/limit-1486 -m recent --name limit-1486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-676 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1575 + inet/filter/limit-1575 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-879 + inet/filter/limit-1575 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-879 -m limit --limit 1/second -j LOG + inet/filter/logdrop-879 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1575 + inet6/filter/limit-1575 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-879 + inet6/filter/logdrop-879 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-879 -j DROP -Filter 1488 {"action":"pass","flow-limit":{"log":"ulog"},"log":"none"} +Filter 1577 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1487 - inet/filter/INPUT -j limit-1487 - inet/filter/OUTPUT -j limit-1487 - inet/filter/limit-1487 -m recent --name limit-1487 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-677 - inet/filter/limit-1487 -m recent --name limit-1487 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-677 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-677 -j DROP - inet6/filter/FORWARD -j limit-1487 - inet6/filter/INPUT -j limit-1487 - inet6/filter/OUTPUT -j limit-1487 - inet6/filter/limit-1487 -m recent --name limit-1487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-677 - inet6/filter/limit-1487 -m recent --name limit-1487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-677 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1576 + inet/filter/limit-1576 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-880 + inet/filter/limit-1576 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-880 -m limit --limit 1/second -j LOG + inet/filter/logdrop-880 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1576 + inet6/filter/limit-1576 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-880 + inet6/filter/limit-1576 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-880 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-880 -j DROP -Filter 1489 {"flow-limit":{"log":"ulog"},"log":"ulog"} +Filter 1578 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1488 - inet/filter/FORWARD -j logaccept-final-57 - inet/filter/INPUT -j limit-1488 - inet/filter/INPUT -j logaccept-final-57 - inet/filter/OUTPUT -j limit-1488 - inet/filter/OUTPUT -j logaccept-final-57 - inet/filter/limit-1488 -m recent --name limit-1488 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-678 - inet/filter/limit-1488 -m recent --name limit-1488 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-57 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-57 -j ACCEPT - inet/filter/logdrop-678 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-678 -j DROP - inet6/filter/FORWARD -j limit-1488 - inet6/filter/FORWARD -j logaccept-final-57 - inet6/filter/INPUT -j limit-1488 - inet6/filter/INPUT -j logaccept-final-57 - inet6/filter/OUTPUT -j limit-1488 - inet6/filter/OUTPUT -j logaccept-final-57 - inet6/filter/limit-1488 -m recent --name limit-1488 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-678 - inet6/filter/limit-1488 -m recent --name limit-1488 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-57 -j ACCEPT - inet6/filter/logdrop-678 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1577 + inet/filter/limit-1577 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-881 + inet/filter/limit-1577 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-881 -m limit --limit 1/second -j LOG + inet/filter/logdrop-881 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1577 + inet6/filter/limit-1577 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-881 + inet6/filter/limit-1577 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-881 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-881 -j DROP -Filter 1490 {"action":"pass","flow-limit":{"log":"ulog"},"log":"ulog"} +Filter 1579 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1489 - inet/filter/INPUT -j limit-1489 - inet/filter/OUTPUT -j limit-1489 - inet/filter/limit-1489 -m recent --name limit-1489 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-679 - inet/filter/limit-1489 -m recent --name limit-1489 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-679 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-679 -j DROP - inet6/filter/FORWARD -j limit-1489 - inet6/filter/INPUT -j limit-1489 - inet6/filter/OUTPUT -j limit-1489 - inet6/filter/limit-1489 -m recent --name limit-1489 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-679 - inet6/filter/logdrop-679 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1578 + inet/filter/limit-1578 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-882 + inet/filter/limit-1578 -m limit --limit 1/second -j LOG + inet/filter/limit-1578 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-882 -m limit --limit 1/second -j LOG + inet/filter/logdrop-882 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1578 + inet6/filter/limit-1578 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-882 + inet6/filter/limit-1578 -m limit --limit 1/second -j LOG + inet6/filter/limit-1578 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-882 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-882 -j DROP -Filter 1491 {"flow-limit":{"log":"ulog","name":"A"}} +Filter 1580 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1490 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1490 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1490 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1490 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-680 - inet/filter/limit-1490 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-680 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-680 -j DROP - inet6/filter/FORWARD -j limit-1490 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1490 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1490 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-680 - inet6/filter/limit-1490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-680 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1579 + inet/filter/limit-1579 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-883 + inet/filter/limit-1579 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-883 -m limit --limit 1/second -j LOG + inet/filter/logdrop-883 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1579 + inet6/filter/limit-1579 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-883 + inet6/filter/limit-1579 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-883 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-883 -j DROP -Filter 1492 {"action":"pass","flow-limit":{"log":"ulog","name":"A"}} +Filter 1581 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1491 - inet/filter/INPUT -j limit-1491 - inet/filter/OUTPUT -j limit-1491 - inet/filter/limit-1491 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-681 - inet/filter/limit-1491 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-681 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-681 -j DROP - inet6/filter/FORWARD -j limit-1491 - inet6/filter/INPUT -j limit-1491 - inet6/filter/OUTPUT -j limit-1491 - inet6/filter/limit-1491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-681 - inet6/filter/limit-1491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-681 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1580 + inet/filter/limit-1580 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-884 + inet/filter/limit-1580 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1580 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1580 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-884 -m limit --limit 1/second -j LOG + inet/filter/logdrop-884 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1580 + inet6/filter/limit-1580 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-884 + inet6/filter/limit-1580 -j TEE --gateway fc00::2 + inet6/filter/limit-1580 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-884 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-884 -j DROP -Filter 1493 {"flow-limit":{"log":"ulog","name":"A"},"log":true} +Filter 1582 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1492 - inet/filter/FORWARD -j logaccept-final-58 - inet/filter/INPUT -j limit-1492 - inet/filter/INPUT -j logaccept-final-58 - inet/filter/OUTPUT -j limit-1492 - inet/filter/OUTPUT -j logaccept-final-58 - inet/filter/limit-1492 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-682 - inet/filter/limit-1492 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-58 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-58 -j ACCEPT - inet/filter/logdrop-682 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-682 -j DROP - inet6/filter/FORWARD -j limit-1492 - inet6/filter/FORWARD -j logaccept-final-58 - inet6/filter/INPUT -j limit-1492 - inet6/filter/INPUT -j logaccept-final-58 - inet6/filter/OUTPUT -j limit-1492 - inet6/filter/OUTPUT -j logaccept-final-58 - inet6/filter/limit-1492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-682 - inet6/filter/limit-1492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-58 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-58 -j ACCEPT - inet6/filter/logdrop-682 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1581 + inet/filter/limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-885 + inet/filter/limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-885 -m limit --limit 1/second -j LOG + inet/filter/logdrop-885 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1581 + inet6/filter/limit-1581 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-885 + inet6/filter/limit-1581 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-885 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-885 -j DROP -Filter 1494 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"log":true} +Filter 1583 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1493 - inet/filter/INPUT -j limit-1493 - inet/filter/OUTPUT -j limit-1493 - inet/filter/limit-1493 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-683 - inet/filter/limit-1493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-683 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-683 -j DROP - inet6/filter/FORWARD -j limit-1493 - inet6/filter/INPUT -j limit-1493 - inet6/filter/OUTPUT -j limit-1493 - inet6/filter/limit-1493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-683 - inet6/filter/limit-1493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-683 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1582 + inet/filter/limit-1582 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-886 + inet/filter/limit-1582 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-886 -m limit --limit 1/second -j LOG + inet/filter/logdrop-886 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1582 + inet6/filter/limit-1582 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-886 + inet6/filter/limit-1582 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-886 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-886 -j DROP -Filter 1495 {"flow-limit":{"log":"ulog","name":"A"},"log":"none"} +Filter 1584 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1494 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1494 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1494 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1494 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-684 - inet/filter/limit-1494 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-684 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-684 -j DROP - inet6/filter/FORWARD -j limit-1494 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1494 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1494 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-684 - inet6/filter/limit-1494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-684 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1583 + inet/filter/limit-1583 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-887 + inet/filter/limit-1583 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-887 -m limit --limit 1/second -j LOG + inet/filter/logdrop-887 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1583 + inet6/filter/limit-1583 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-887 + inet6/filter/limit-1583 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-887 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-887 -j DROP -Filter 1496 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"log":"none"} +Filter 1585 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1495 - inet/filter/INPUT -j limit-1495 - inet/filter/OUTPUT -j limit-1495 - inet/filter/limit-1495 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-685 - inet/filter/limit-1495 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-685 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-685 -j DROP - inet6/filter/FORWARD -j limit-1495 - inet6/filter/INPUT -j limit-1495 - inet6/filter/OUTPUT -j limit-1495 - inet6/filter/limit-1495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-685 - inet6/filter/limit-1495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-685 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1584 + inet/filter/limit-1584 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-888 + inet/filter/limit-1584 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1584 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-888 -m limit --limit 1/second -j LOG + inet/filter/logdrop-888 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1584 + inet6/filter/limit-1584 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-888 + inet6/filter/limit-1584 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-888 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-888 -j DROP -Filter 1497 {"flow-limit":{"log":"ulog","name":"A"},"log":"ulog"} +Filter 1586 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1496 - inet/filter/FORWARD -j logaccept-final-59 - inet/filter/INPUT -j limit-1496 - inet/filter/INPUT -j logaccept-final-59 - inet/filter/OUTPUT -j limit-1496 - inet/filter/OUTPUT -j logaccept-final-59 - inet/filter/limit-1496 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-686 - inet/filter/limit-1496 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-59 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-59 -j ACCEPT - inet/filter/logdrop-686 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-686 -j DROP - inet6/filter/FORWARD -j limit-1496 - inet6/filter/FORWARD -j logaccept-final-59 - inet6/filter/INPUT -j limit-1496 - inet6/filter/INPUT -j logaccept-final-59 - inet6/filter/OUTPUT -j limit-1496 - inet6/filter/OUTPUT -j logaccept-final-59 - inet6/filter/limit-1496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-686 - inet6/filter/limit-1496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-59 -j ACCEPT - inet6/filter/logdrop-686 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1585 + inet/filter/limit-1585 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-889 + inet/filter/limit-1585 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-889 -m limit --limit 1/second -j LOG + inet/filter/logdrop-889 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1585 + inet6/filter/limit-1585 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-889 + inet6/filter/logdrop-889 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-889 -j DROP -Filter 1498 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"log":"ulog"} +Filter 1587 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1497 - inet/filter/INPUT -j limit-1497 - inet/filter/OUTPUT -j limit-1497 - inet/filter/limit-1497 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-687 - inet/filter/limit-1497 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-687 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-687 -j DROP - inet6/filter/FORWARD -j limit-1497 - inet6/filter/INPUT -j limit-1497 - inet6/filter/OUTPUT -j limit-1497 - inet6/filter/limit-1497 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-687 - inet6/filter/logdrop-687 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1586 + inet/filter/limit-1586 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-890 + inet/filter/limit-1586 -j ACCEPT + inet/filter/logdrop-890 -m limit --limit 1/second -j LOG + inet/filter/logdrop-890 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1586 + inet6/filter/limit-1586 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-890 + inet6/filter/limit-1586 -j ACCEPT + inet6/filter/logdrop-890 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-890 -j DROP -Filter 1499 {"flow-limit":{"log":"ulog","name":"A","update":false}} +Filter 1588 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1498 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1498 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1498 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1498 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-688 - inet/filter/logdrop-688 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-688 -j DROP - inet6/filter/FORWARD -j limit-1498 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1498 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1498 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1498 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-688 - inet6/filter/logdrop-688 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-891 + inet/filter/logdrop-891 -m limit --limit 1/second -j LOG + inet/filter/logdrop-891 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-891 + inet6/filter/logdrop-891 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-891 -j DROP -Filter 1500 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false}} +Filter 1589 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1499 - inet/filter/INPUT -j limit-1499 - inet/filter/OUTPUT -j limit-1499 - inet/filter/limit-1499 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-689 - inet/filter/logdrop-689 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-689 -j DROP - inet6/filter/FORWARD -j limit-1499 - inet6/filter/INPUT -j limit-1499 - inet6/filter/OUTPUT -j limit-1499 - inet6/filter/limit-1499 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-689 - inet6/filter/logdrop-689 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1588 + inet/filter/limit-1588 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-892 + inet/filter/limit-1588 -m limit --limit 1/second -j LOG + inet/filter/limit-1588 -j ACCEPT + inet/filter/logdrop-892 -m limit --limit 1/second -j LOG + inet/filter/logdrop-892 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1588 + inet6/filter/limit-1588 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-892 + inet6/filter/limit-1588 -m limit --limit 1/second -j LOG + inet6/filter/limit-1588 -j ACCEPT + inet6/filter/logdrop-892 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-892 -j DROP -Filter 1501 {"flow-limit":{"log":"ulog","name":"A","update":false},"log":true} +Filter 1590 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1500 - inet/filter/FORWARD -j logaccept-final-60 - inet/filter/INPUT -j limit-1500 - inet/filter/INPUT -j logaccept-final-60 - inet/filter/OUTPUT -j limit-1500 - inet/filter/OUTPUT -j logaccept-final-60 - inet/filter/limit-1500 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-690 - inet/filter/logaccept-final-60 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-60 -j ACCEPT - inet/filter/logdrop-690 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-690 -j DROP - inet6/filter/FORWARD -j limit-1500 - inet6/filter/FORWARD -j logaccept-final-60 - inet6/filter/INPUT -j limit-1500 - inet6/filter/INPUT -j logaccept-final-60 - inet6/filter/OUTPUT -j limit-1500 - inet6/filter/OUTPUT -j logaccept-final-60 - inet6/filter/limit-1500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-690 - inet6/filter/logaccept-final-60 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-60 -j ACCEPT - inet6/filter/logdrop-690 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1589 + inet/filter/limit-1589 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-893 + inet/filter/limit-1589 -m limit --limit 1/second -j LOG + inet/filter/logdrop-893 -m limit --limit 1/second -j LOG + inet/filter/logdrop-893 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1589 + inet6/filter/limit-1589 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-893 + inet6/filter/limit-1589 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-893 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-893 -j DROP -Filter 1502 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"log":true} +Filter 1591 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1501 - inet/filter/INPUT -j limit-1501 - inet/filter/OUTPUT -j limit-1501 - inet/filter/limit-1501 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-691 - inet/filter/limit-1501 -m limit --limit 1/second -j LOG - inet/filter/logdrop-691 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-691 -j DROP - inet6/filter/FORWARD -j limit-1501 - inet6/filter/INPUT -j limit-1501 - inet6/filter/OUTPUT -j limit-1501 - inet6/filter/limit-1501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-691 - inet6/filter/limit-1501 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-691 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1590 + inet/filter/limit-1590 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-894 + inet/filter/limit-1590 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1590 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1590 -j ACCEPT + inet/filter/logdrop-894 -m limit --limit 1/second -j LOG + inet/filter/logdrop-894 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1590 + inet6/filter/limit-1590 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-894 + inet6/filter/limit-1590 -j TEE --gateway fc00::2 + inet6/filter/limit-1590 -j ACCEPT + inet6/filter/logdrop-894 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-894 -j DROP -Filter 1503 {"flow-limit":{"log":"ulog","name":"A","update":false},"log":"none"} +Filter 1592 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1502 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1502 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1502 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1502 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-692 - inet/filter/logdrop-692 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-692 -j DROP - inet6/filter/FORWARD -j limit-1502 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1502 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1502 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-692 - inet6/filter/logdrop-692 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1591 + inet/filter/limit-1591 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-895 + inet/filter/limit-1591 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1591 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-895 -m limit --limit 1/second -j LOG + inet/filter/logdrop-895 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1591 + inet6/filter/limit-1591 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-895 + inet6/filter/limit-1591 -j TEE --gateway fc00::2 + inet6/filter/logdrop-895 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-895 -j DROP -Filter 1504 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"log":"none"} +Filter 1593 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1503 - inet/filter/INPUT -j limit-1503 - inet/filter/OUTPUT -j limit-1503 - inet/filter/limit-1503 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-693 - inet/filter/logdrop-693 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-693 -j DROP - inet6/filter/FORWARD -j limit-1503 - inet6/filter/INPUT -j limit-1503 - inet6/filter/OUTPUT -j limit-1503 - inet6/filter/limit-1503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-693 - inet6/filter/logdrop-693 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1592 + inet/filter/limit-1592 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-896 + inet/filter/limit-1592 -j ACCEPT + inet/filter/logdrop-896 -m limit --limit 1/second -j LOG + inet/filter/logdrop-896 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1592 + inet6/filter/limit-1592 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-896 + inet6/filter/limit-1592 -j ACCEPT + inet6/filter/logdrop-896 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-896 -j DROP -Filter 1505 {"flow-limit":{"log":"ulog","name":"A","update":false},"log":"ulog"} +Filter 1594 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1504 - inet/filter/FORWARD -j logaccept-final-61 - inet/filter/INPUT -j limit-1504 - inet/filter/INPUT -j logaccept-final-61 - inet/filter/OUTPUT -j limit-1504 - inet/filter/OUTPUT -j logaccept-final-61 - inet/filter/limit-1504 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-694 - inet/filter/logaccept-final-61 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-61 -j ACCEPT - inet/filter/logdrop-694 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-694 -j DROP - inet6/filter/FORWARD -j limit-1504 - inet6/filter/FORWARD -j logaccept-final-61 - inet6/filter/INPUT -j limit-1504 - inet6/filter/INPUT -j logaccept-final-61 - inet6/filter/OUTPUT -j limit-1504 - inet6/filter/OUTPUT -j logaccept-final-61 - inet6/filter/limit-1504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-694 - inet6/filter/logaccept-final-61 -j ACCEPT - inet6/filter/logdrop-694 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-897 + inet/filter/logdrop-897 -m limit --limit 1/second -j LOG + inet/filter/logdrop-897 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-897 + inet6/filter/logdrop-897 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-897 -j DROP -Filter 1506 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"log":"ulog"} +Filter 1595 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1505 - inet/filter/INPUT -j limit-1505 - inet/filter/OUTPUT -j limit-1505 - inet/filter/limit-1505 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-695 - inet/filter/limit-1505 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-695 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-695 -j DROP - inet6/filter/FORWARD -j limit-1505 - inet6/filter/INPUT -j limit-1505 - inet6/filter/OUTPUT -j limit-1505 - inet6/filter/limit-1505 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-695 - inet6/filter/logdrop-695 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1594 + inet/filter/limit-1594 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-898 + inet/filter/limit-1594 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1594 -j ACCEPT + inet/filter/logdrop-898 -m limit --limit 1/second -j LOG + inet/filter/logdrop-898 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1594 + inet6/filter/limit-1594 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-898 + inet6/filter/limit-1594 -j ACCEPT + inet6/filter/logdrop-898 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-898 -j DROP -Filter 1507 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"}} +Filter 1596 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1506 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1506 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1506 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1506 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-696 - inet/filter/limit-1506 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-696 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-696 -j DROP - inet6/filter/FORWARD -j limit-1506 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1506 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1506 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-696 - inet6/filter/limit-1506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-696 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1595 + inet/filter/limit-1595 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-899 + inet/filter/limit-1595 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-899 -m limit --limit 1/second -j LOG + inet/filter/logdrop-899 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1595 + inet6/filter/limit-1595 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-899 + inet6/filter/logdrop-899 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-899 -j DROP -Filter 1508 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"}} +Filter 1597 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1507 - inet/filter/INPUT -j limit-1507 - inet/filter/OUTPUT -j limit-1507 - inet/filter/limit-1507 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-697 - inet/filter/limit-1507 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-697 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-697 -j DROP - inet6/filter/FORWARD -j limit-1507 - inet6/filter/INPUT -j limit-1507 - inet6/filter/OUTPUT -j limit-1507 - inet6/filter/limit-1507 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-697 - inet6/filter/limit-1507 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-697 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1596 + inet/filter/limit-1596 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-900 + inet/filter/limit-1596 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-900 -m limit --limit 1/second -j LOG + inet/filter/logdrop-900 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1596 + inet6/filter/limit-1596 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-900 + inet6/filter/limit-1596 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-900 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-900 -j DROP -Filter 1509 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true} +Filter 1598 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1508 - inet/filter/FORWARD -j logaccept-final-62 - inet/filter/INPUT -j limit-1508 - inet/filter/INPUT -j logaccept-final-62 - inet/filter/OUTPUT -j limit-1508 - inet/filter/OUTPUT -j logaccept-final-62 - inet/filter/limit-1508 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-698 - inet/filter/limit-1508 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-62 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-62 -j ACCEPT - inet/filter/logdrop-698 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-698 -j DROP - inet6/filter/FORWARD -j limit-1508 - inet6/filter/FORWARD -j logaccept-final-62 - inet6/filter/INPUT -j limit-1508 - inet6/filter/INPUT -j logaccept-final-62 - inet6/filter/OUTPUT -j limit-1508 - inet6/filter/OUTPUT -j logaccept-final-62 - inet6/filter/limit-1508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-698 - inet6/filter/limit-1508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-62 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-62 -j ACCEPT - inet6/filter/logdrop-698 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1597 + inet/filter/limit-1597 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-901 + inet/filter/limit-1597 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-901 -m limit --limit 1/second -j LOG + inet/filter/logdrop-901 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1597 + inet6/filter/limit-1597 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-901 + inet6/filter/limit-1597 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-901 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-901 -j DROP -Filter 1510 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true} +Filter 1599 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1509 - inet/filter/INPUT -j limit-1509 - inet/filter/OUTPUT -j limit-1509 - inet/filter/limit-1509 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-699 - inet/filter/limit-1509 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-699 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-699 -j DROP - inet6/filter/FORWARD -j limit-1509 - inet6/filter/INPUT -j limit-1509 - inet6/filter/OUTPUT -j limit-1509 - inet6/filter/limit-1509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-699 - inet6/filter/limit-1509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-699 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1598 + inet/filter/limit-1598 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-902 + inet/filter/limit-1598 -m limit --limit 1/second -j LOG + inet/filter/limit-1598 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-902 -m limit --limit 1/second -j LOG + inet/filter/logdrop-902 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1598 + inet6/filter/limit-1598 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-902 + inet6/filter/limit-1598 -m limit --limit 1/second -j LOG + inet6/filter/limit-1598 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-902 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-902 -j DROP -Filter 1511 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none"} +Filter 1600 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1510 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1510 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1510 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1510 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-700 - inet/filter/limit-1510 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-700 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-700 -j DROP - inet6/filter/FORWARD -j limit-1510 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1510 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1510 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-700 - inet6/filter/limit-1510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-700 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1599 + inet/filter/limit-1599 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-903 + inet/filter/limit-1599 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-903 -m limit --limit 1/second -j LOG + inet/filter/logdrop-903 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1599 + inet6/filter/limit-1599 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-903 + inet6/filter/limit-1599 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-903 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-903 -j DROP -Filter 1512 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none"} +Filter 1601 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1511 - inet/filter/INPUT -j limit-1511 - inet/filter/OUTPUT -j limit-1511 - inet/filter/limit-1511 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-701 - inet/filter/limit-1511 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-701 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-701 -j DROP - inet6/filter/FORWARD -j limit-1511 - inet6/filter/INPUT -j limit-1511 - inet6/filter/OUTPUT -j limit-1511 - inet6/filter/limit-1511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-701 - inet6/filter/limit-1511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-701 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1600 + inet/filter/limit-1600 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-904 + inet/filter/limit-1600 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1600 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1600 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-904 -m limit --limit 1/second -j LOG + inet/filter/logdrop-904 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1600 + inet6/filter/limit-1600 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-904 + inet6/filter/limit-1600 -j TEE --gateway fc00::2 + inet6/filter/limit-1600 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-904 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-904 -j DROP -Filter 1513 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog"} +Filter 1602 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1512 - inet/filter/FORWARD -j logaccept-final-63 - inet/filter/INPUT -j limit-1512 - inet/filter/INPUT -j logaccept-final-63 - inet/filter/OUTPUT -j limit-1512 - inet/filter/OUTPUT -j logaccept-final-63 - inet/filter/limit-1512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-702 - inet/filter/limit-1512 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-63 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-63 -j ACCEPT - inet/filter/logdrop-702 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-702 -j DROP - inet6/filter/FORWARD -j limit-1512 - inet6/filter/FORWARD -j logaccept-final-63 - inet6/filter/INPUT -j limit-1512 - inet6/filter/INPUT -j logaccept-final-63 - inet6/filter/OUTPUT -j limit-1512 - inet6/filter/OUTPUT -j logaccept-final-63 - inet6/filter/limit-1512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-702 - inet6/filter/limit-1512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-63 -j ACCEPT - inet6/filter/logdrop-702 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1601 + inet/filter/limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-905 + inet/filter/limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-905 -m limit --limit 1/second -j LOG + inet/filter/logdrop-905 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1601 + inet6/filter/limit-1601 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-905 + inet6/filter/limit-1601 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-905 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-905 -j DROP -Filter 1514 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog"} +Filter 1603 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1513 - inet/filter/INPUT -j limit-1513 - inet/filter/OUTPUT -j limit-1513 - inet/filter/limit-1513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-703 - inet/filter/limit-1513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-703 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-703 -j DROP - inet6/filter/FORWARD -j limit-1513 - inet6/filter/INPUT -j limit-1513 - inet6/filter/OUTPUT -j limit-1513 - inet6/filter/limit-1513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-703 - inet6/filter/logdrop-703 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1602 + inet/filter/limit-1602 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-906 + inet/filter/limit-1602 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-906 -m limit --limit 1/second -j LOG + inet/filter/logdrop-906 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1602 + inet6/filter/limit-1602 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-906 + inet6/filter/limit-1602 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-906 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-906 -j DROP -Filter 1515 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false}} +Filter 1604 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1514 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1514 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1514 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1514 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-704 - inet/filter/logdrop-704 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-704 -j DROP - inet6/filter/FORWARD -j limit-1514 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1514 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1514 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-704 - inet6/filter/logdrop-704 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1603 + inet/filter/limit-1603 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-907 + inet/filter/limit-1603 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-907 -m limit --limit 1/second -j LOG + inet/filter/logdrop-907 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1603 + inet6/filter/limit-1603 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-907 + inet6/filter/limit-1603 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-907 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-907 -j DROP -Filter 1516 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false}} +Filter 1605 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1515 - inet/filter/INPUT -j limit-1515 - inet/filter/OUTPUT -j limit-1515 - inet/filter/limit-1515 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-705 - inet/filter/logdrop-705 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-705 -j DROP - inet6/filter/FORWARD -j limit-1515 - inet6/filter/INPUT -j limit-1515 - inet6/filter/OUTPUT -j limit-1515 - inet6/filter/limit-1515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-705 - inet6/filter/logdrop-705 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1604 + inet/filter/limit-1604 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-908 + inet/filter/limit-1604 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1604 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-908 -m limit --limit 1/second -j LOG + inet/filter/logdrop-908 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1604 + inet6/filter/limit-1604 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-908 + inet6/filter/limit-1604 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-908 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-908 -j DROP -Filter 1517 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true} +Filter 1606 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1516 - inet/filter/FORWARD -j logaccept-final-64 - inet/filter/INPUT -j limit-1516 - inet/filter/INPUT -j logaccept-final-64 - inet/filter/OUTPUT -j limit-1516 - inet/filter/OUTPUT -j logaccept-final-64 - inet/filter/limit-1516 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-706 - inet/filter/logaccept-final-64 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-64 -j ACCEPT - inet/filter/logdrop-706 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-706 -j DROP - inet6/filter/FORWARD -j limit-1516 - inet6/filter/FORWARD -j logaccept-final-64 - inet6/filter/INPUT -j limit-1516 - inet6/filter/INPUT -j logaccept-final-64 - inet6/filter/OUTPUT -j limit-1516 - inet6/filter/OUTPUT -j logaccept-final-64 - inet6/filter/limit-1516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-706 - inet6/filter/logaccept-final-64 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-64 -j ACCEPT - inet6/filter/logdrop-706 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1605 + inet/filter/limit-1605 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-909 + inet/filter/limit-1605 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-909 -m limit --limit 1/second -j LOG + inet/filter/logdrop-909 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1605 + inet6/filter/limit-1605 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-909 + inet6/filter/logdrop-909 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-909 -j DROP -Filter 1518 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true} +Filter 1607 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1517 - inet/filter/INPUT -j limit-1517 - inet/filter/OUTPUT -j limit-1517 - inet/filter/limit-1517 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-707 - inet/filter/limit-1517 -m limit --limit 1/second -j LOG - inet/filter/logdrop-707 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-707 -j DROP - inet6/filter/FORWARD -j limit-1517 - inet6/filter/INPUT -j limit-1517 - inet6/filter/OUTPUT -j limit-1517 - inet6/filter/limit-1517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-707 - inet6/filter/limit-1517 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-707 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1606 + inet/filter/limit-1606 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-910 + inet/filter/limit-1606 -j ACCEPT + inet/filter/logdrop-910 -m limit --limit 1/second -j LOG + inet/filter/logdrop-910 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1606 + inet6/filter/limit-1606 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-910 + inet6/filter/limit-1606 -j ACCEPT + inet6/filter/logdrop-910 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-910 -j DROP -Filter 1519 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none"} +Filter 1608 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1518 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1518 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1518 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-708 - inet/filter/logdrop-708 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-708 -j DROP - inet6/filter/FORWARD -j limit-1518 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1518 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1518 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-708 - inet6/filter/logdrop-708 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-911 + inet/filter/logdrop-911 -m limit --limit 1/second -j LOG + inet/filter/logdrop-911 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-911 + inet6/filter/logdrop-911 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-911 -j DROP -Filter 1520 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none"} +Filter 1609 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1519 - inet/filter/INPUT -j limit-1519 - inet/filter/OUTPUT -j limit-1519 - inet/filter/limit-1519 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-709 - inet/filter/logdrop-709 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-709 -j DROP - inet6/filter/FORWARD -j limit-1519 - inet6/filter/INPUT -j limit-1519 - inet6/filter/OUTPUT -j limit-1519 - inet6/filter/limit-1519 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-709 - inet6/filter/logdrop-709 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1608 + inet/filter/limit-1608 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-912 + inet/filter/limit-1608 -m limit --limit 1/second -j LOG + inet/filter/limit-1608 -j ACCEPT + inet/filter/logdrop-912 -m limit --limit 1/second -j LOG + inet/filter/logdrop-912 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1608 + inet6/filter/limit-1608 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-912 + inet6/filter/limit-1608 -m limit --limit 1/second -j LOG + inet6/filter/limit-1608 -j ACCEPT + inet6/filter/logdrop-912 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-912 -j DROP -Filter 1521 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog"} +Filter 1610 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1520 - inet/filter/FORWARD -j logaccept-final-65 - inet/filter/INPUT -j limit-1520 - inet/filter/INPUT -j logaccept-final-65 - inet/filter/OUTPUT -j limit-1520 - inet/filter/OUTPUT -j logaccept-final-65 - inet/filter/limit-1520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-710 - inet/filter/logaccept-final-65 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-65 -j ACCEPT - inet/filter/logdrop-710 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-710 -j DROP - inet6/filter/FORWARD -j limit-1520 - inet6/filter/FORWARD -j logaccept-final-65 - inet6/filter/INPUT -j limit-1520 - inet6/filter/INPUT -j logaccept-final-65 - inet6/filter/OUTPUT -j limit-1520 - inet6/filter/OUTPUT -j logaccept-final-65 - inet6/filter/limit-1520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-710 - inet6/filter/logaccept-final-65 -j ACCEPT - inet6/filter/logdrop-710 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1609 + inet/filter/limit-1609 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-913 + inet/filter/limit-1609 -m limit --limit 1/second -j LOG + inet/filter/logdrop-913 -m limit --limit 1/second -j LOG + inet/filter/logdrop-913 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1609 + inet6/filter/limit-1609 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-913 + inet6/filter/limit-1609 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-913 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-913 -j DROP -Filter 1522 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog"} +Filter 1611 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1521 - inet/filter/INPUT -j limit-1521 - inet/filter/OUTPUT -j limit-1521 - inet/filter/limit-1521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-711 - inet/filter/limit-1521 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-711 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-711 -j DROP - inet6/filter/FORWARD -j limit-1521 - inet6/filter/INPUT -j limit-1521 - inet6/filter/OUTPUT -j limit-1521 - inet6/filter/limit-1521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-711 - inet6/filter/logdrop-711 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1610 + inet/filter/limit-1610 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-914 + inet/filter/limit-1610 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1610 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1610 -j ACCEPT + inet/filter/logdrop-914 -m limit --limit 1/second -j LOG + inet/filter/logdrop-914 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1610 + inet6/filter/limit-1610 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-914 + inet6/filter/limit-1610 -j TEE --gateway fc00::2 + inet6/filter/limit-1610 -j ACCEPT + inet6/filter/logdrop-914 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-914 -j DROP -Filter 1523 {"flow-limit":{"log":"ulog","name":"C"}} +Filter 1612 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1522 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1522 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1522 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1522 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-712 - inet/filter/limit-1522 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-712 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-712 -j DROP - inet6/filter/FORWARD -j limit-1522 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1522 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1522 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1522 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-712 - inet6/filter/limit-1522 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-712 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1611 + inet/filter/limit-1611 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-915 + inet/filter/limit-1611 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1611 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-915 -m limit --limit 1/second -j LOG + inet/filter/logdrop-915 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1611 + inet6/filter/limit-1611 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-915 + inet6/filter/limit-1611 -j TEE --gateway fc00::2 + inet6/filter/logdrop-915 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-915 -j DROP -Filter 1524 {"action":"pass","flow-limit":{"log":"ulog","name":"C"}} +Filter 1613 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1523 - inet/filter/INPUT -j limit-1523 - inet/filter/OUTPUT -j limit-1523 - inet/filter/limit-1523 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-713 - inet/filter/limit-1523 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-713 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-713 -j DROP - inet6/filter/FORWARD -j limit-1523 - inet6/filter/INPUT -j limit-1523 - inet6/filter/OUTPUT -j limit-1523 - inet6/filter/limit-1523 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-713 - inet6/filter/limit-1523 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-713 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1612 + inet/filter/limit-1612 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-916 + inet/filter/limit-1612 -j ACCEPT + inet/filter/logdrop-916 -m limit --limit 1/second -j LOG + inet/filter/logdrop-916 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1612 + inet6/filter/limit-1612 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-916 + inet6/filter/limit-1612 -j ACCEPT + inet6/filter/logdrop-916 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-916 -j DROP -Filter 1525 {"flow-limit":{"log":"ulog","name":"C"},"log":true} +Filter 1614 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1524 - inet/filter/FORWARD -j logaccept-final-66 - inet/filter/INPUT -j limit-1524 - inet/filter/INPUT -j logaccept-final-66 - inet/filter/OUTPUT -j limit-1524 - inet/filter/OUTPUT -j logaccept-final-66 - inet/filter/limit-1524 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-714 - inet/filter/limit-1524 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-66 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-66 -j ACCEPT - inet/filter/logdrop-714 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-714 -j DROP - inet6/filter/FORWARD -j limit-1524 - inet6/filter/FORWARD -j logaccept-final-66 - inet6/filter/INPUT -j limit-1524 - inet6/filter/INPUT -j logaccept-final-66 - inet6/filter/OUTPUT -j limit-1524 - inet6/filter/OUTPUT -j logaccept-final-66 - inet6/filter/limit-1524 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-714 - inet6/filter/limit-1524 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-66 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-66 -j ACCEPT - inet6/filter/logdrop-714 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-917 + inet/filter/logdrop-917 -m limit --limit 1/second -j LOG + inet/filter/logdrop-917 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-917 + inet6/filter/logdrop-917 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-917 -j DROP -Filter 1526 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"log":true} +Filter 1615 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1525 - inet/filter/INPUT -j limit-1525 - inet/filter/OUTPUT -j limit-1525 - inet/filter/limit-1525 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-715 - inet/filter/limit-1525 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-715 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-715 -j DROP - inet6/filter/FORWARD -j limit-1525 - inet6/filter/INPUT -j limit-1525 - inet6/filter/OUTPUT -j limit-1525 - inet6/filter/limit-1525 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-715 - inet6/filter/limit-1525 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-715 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1614 + inet/filter/limit-1614 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-918 + inet/filter/limit-1614 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1614 -j ACCEPT + inet/filter/logdrop-918 -m limit --limit 1/second -j LOG + inet/filter/logdrop-918 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1614 + inet6/filter/limit-1614 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-918 + inet6/filter/limit-1614 -j ACCEPT + inet6/filter/logdrop-918 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-918 -j DROP -Filter 1527 {"flow-limit":{"log":"ulog","name":"C"},"log":"none"} +Filter 1616 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1526 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1526 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1526 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1526 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-716 - inet/filter/limit-1526 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-716 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-716 -j DROP - inet6/filter/FORWARD -j limit-1526 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1526 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1526 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1526 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-716 - inet6/filter/limit-1526 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-716 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1615 + inet/filter/limit-1615 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-919 + inet/filter/limit-1615 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-919 -m limit --limit 1/second -j LOG + inet/filter/logdrop-919 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1615 + inet6/filter/limit-1615 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-919 + inet6/filter/logdrop-919 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-919 -j DROP -Filter 1528 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"log":"none"} +Filter 1617 {"conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1527 - inet/filter/INPUT -j limit-1527 - inet/filter/OUTPUT -j limit-1527 - inet/filter/limit-1527 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-717 - inet/filter/limit-1527 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-717 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-717 -j DROP - inet6/filter/FORWARD -j limit-1527 - inet6/filter/INPUT -j limit-1527 - inet6/filter/OUTPUT -j limit-1527 - inet6/filter/limit-1527 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-717 - inet6/filter/limit-1527 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-717 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1616 + inet/filter/limit-1616 -m recent --name limit-1616 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-920 + inet/filter/limit-1616 -m recent --name limit-1616 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-920 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-920 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-920 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1616 + inet6/filter/limit-1616 -m recent --name limit-1616 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-920 + inet6/filter/limit-1616 -m recent --name limit-1616 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-920 -j TEE --gateway fc00::2 + inet6/filter/logdrop-920 -j DROP -Filter 1529 {"flow-limit":{"log":"ulog","name":"C"},"log":"ulog"} +Filter 1618 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1528 - inet/filter/FORWARD -j logaccept-final-67 - inet/filter/INPUT -j limit-1528 - inet/filter/INPUT -j logaccept-final-67 - inet/filter/OUTPUT -j limit-1528 - inet/filter/OUTPUT -j logaccept-final-67 - inet/filter/limit-1528 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-718 - inet/filter/limit-1528 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-67 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-67 -j ACCEPT - inet/filter/logdrop-718 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-718 -j DROP - inet6/filter/FORWARD -j limit-1528 - inet6/filter/FORWARD -j logaccept-final-67 - inet6/filter/INPUT -j limit-1528 - inet6/filter/INPUT -j logaccept-final-67 - inet6/filter/OUTPUT -j limit-1528 - inet6/filter/OUTPUT -j logaccept-final-67 - inet6/filter/limit-1528 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-718 - inet6/filter/limit-1528 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-67 -j ACCEPT - inet6/filter/logdrop-718 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1617 + inet/filter/limit-1617 -m recent --name limit-1617 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-921 + inet/filter/limit-1617 -m recent --name limit-1617 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-921 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-921 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-921 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1617 + inet6/filter/limit-1617 -m recent --name limit-1617 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-921 + inet6/filter/limit-1617 -m recent --name limit-1617 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-921 -j TEE --gateway fc00::2 + inet6/filter/logdrop-921 -j DROP -Filter 1530 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"log":"ulog"} +Filter 1619 {"conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1529 - inet/filter/INPUT -j limit-1529 - inet/filter/OUTPUT -j limit-1529 - inet/filter/limit-1529 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-719 - inet/filter/limit-1529 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-719 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-719 -j DROP - inet6/filter/FORWARD -j limit-1529 - inet6/filter/INPUT -j limit-1529 - inet6/filter/OUTPUT -j limit-1529 - inet6/filter/limit-1529 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-719 - inet6/filter/logdrop-719 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1618 + inet/filter/limit-1618 -m recent --name limit-1618 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-922 + inet/filter/limit-1618 -m limit --limit 1/second -j LOG + inet/filter/limit-1618 -m recent --name limit-1618 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-922 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-922 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-922 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1618 + inet6/filter/limit-1618 -m recent --name limit-1618 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-922 + inet6/filter/limit-1618 -m limit --limit 1/second -j LOG + inet6/filter/limit-1618 -m recent --name limit-1618 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-922 -j TEE --gateway fc00::2 + inet6/filter/logdrop-922 -j DROP -Filter 1531 {"flow-limit":{"log":"ulog","name":"C","update":false}} +Filter 1620 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1530 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1530 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1530 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1530 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-720 - inet/filter/logdrop-720 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-720 -j DROP - inet6/filter/FORWARD -j limit-1530 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1530 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1530 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1530 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-720 - inet6/filter/logdrop-720 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1619 + inet/filter/limit-1619 -m recent --name limit-1619 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-923 + inet/filter/limit-1619 -m recent --name limit-1619 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-923 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-923 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-923 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1619 + inet6/filter/limit-1619 -m recent --name limit-1619 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-923 + inet6/filter/limit-1619 -m recent --name limit-1619 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-923 -j TEE --gateway fc00::2 + inet6/filter/logdrop-923 -j DROP -Filter 1532 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false}} +Filter 1621 {"conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1531 - inet/filter/INPUT -j limit-1531 - inet/filter/OUTPUT -j limit-1531 - inet/filter/limit-1531 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-721 - inet/filter/logdrop-721 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-721 -j DROP - inet6/filter/FORWARD -j limit-1531 - inet6/filter/INPUT -j limit-1531 - inet6/filter/OUTPUT -j limit-1531 - inet6/filter/limit-1531 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-721 - inet6/filter/logdrop-721 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1620 + inet/filter/limit-1620 -m recent --name limit-1620 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-924 + inet/filter/limit-1620 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1620 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1620 -m recent --name limit-1620 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-924 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-924 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-924 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1620 + inet6/filter/limit-1620 -m recent --name limit-1620 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-924 + inet6/filter/limit-1620 -j TEE --gateway fc00::2 + inet6/filter/limit-1620 -m recent --name limit-1620 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-924 -j TEE --gateway fc00::2 + inet6/filter/logdrop-924 -j DROP -Filter 1533 {"flow-limit":{"log":"ulog","name":"C","update":false},"log":true} +Filter 1622 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1532 - inet/filter/FORWARD -j logaccept-final-68 - inet/filter/INPUT -j limit-1532 - inet/filter/INPUT -j logaccept-final-68 - inet/filter/OUTPUT -j limit-1532 - inet/filter/OUTPUT -j logaccept-final-68 - inet/filter/limit-1532 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-722 - inet/filter/logaccept-final-68 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-68 -j ACCEPT - inet/filter/logdrop-722 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-722 -j DROP - inet6/filter/FORWARD -j limit-1532 - inet6/filter/FORWARD -j logaccept-final-68 - inet6/filter/INPUT -j limit-1532 - inet6/filter/INPUT -j logaccept-final-68 - inet6/filter/OUTPUT -j limit-1532 - inet6/filter/OUTPUT -j logaccept-final-68 - inet6/filter/limit-1532 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-722 - inet6/filter/logaccept-final-68 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-68 -j ACCEPT - inet6/filter/logdrop-722 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1621 + inet/filter/limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-925 + inet/filter/limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-925 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-925 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-925 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1621 + inet6/filter/limit-1621 -m recent --name limit-1621 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-925 + inet6/filter/limit-1621 -m recent --name limit-1621 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-925 -j TEE --gateway fc00::2 + inet6/filter/logdrop-925 -j DROP -Filter 1534 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"log":true} +Filter 1623 {"conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1533 - inet/filter/INPUT -j limit-1533 - inet/filter/OUTPUT -j limit-1533 - inet/filter/limit-1533 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-723 - inet/filter/limit-1533 -m limit --limit 1/second -j LOG - inet/filter/logdrop-723 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-723 -j DROP - inet6/filter/FORWARD -j limit-1533 - inet6/filter/INPUT -j limit-1533 - inet6/filter/OUTPUT -j limit-1533 - inet6/filter/limit-1533 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-723 - inet6/filter/limit-1533 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-723 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1622 + inet/filter/limit-1622 -m recent --name limit-1622 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-926 + inet/filter/limit-1622 -m recent --name limit-1622 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-926 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-926 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-926 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1622 + inet6/filter/limit-1622 -m recent --name limit-1622 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-926 + inet6/filter/limit-1622 -m recent --name limit-1622 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-926 -j TEE --gateway fc00::2 + inet6/filter/logdrop-926 -j DROP -Filter 1535 {"flow-limit":{"log":"ulog","name":"C","update":false},"log":"none"} +Filter 1624 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1534 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1534 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1534 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1534 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-724 - inet/filter/logdrop-724 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-724 -j DROP - inet6/filter/FORWARD -j limit-1534 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1534 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1534 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1534 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-724 - inet6/filter/logdrop-724 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1623 + inet/filter/limit-1623 -m recent --name limit-1623 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-927 + inet/filter/limit-1623 -m recent --name limit-1623 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-927 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-927 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-927 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1623 + inet6/filter/limit-1623 -m recent --name limit-1623 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-927 + inet6/filter/limit-1623 -m recent --name limit-1623 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-927 -j TEE --gateway fc00::2 + inet6/filter/logdrop-927 -j DROP -Filter 1536 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"log":"none"} +Filter 1625 {"conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1535 - inet/filter/INPUT -j limit-1535 - inet/filter/OUTPUT -j limit-1535 - inet/filter/limit-1535 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-725 - inet/filter/logdrop-725 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-725 -j DROP - inet6/filter/FORWARD -j limit-1535 - inet6/filter/INPUT -j limit-1535 - inet6/filter/OUTPUT -j limit-1535 - inet6/filter/limit-1535 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-725 - inet6/filter/logdrop-725 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1624 + inet/filter/limit-1624 -m recent --name limit-1624 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-928 + inet/filter/limit-1624 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1624 -m recent --name limit-1624 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-928 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-928 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-928 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1624 + inet6/filter/limit-1624 -m recent --name limit-1624 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-928 + inet6/filter/limit-1624 -m recent --name limit-1624 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-928 -j TEE --gateway fc00::2 + inet6/filter/logdrop-928 -j DROP -Filter 1537 {"flow-limit":{"log":"ulog","name":"C","update":false},"log":"ulog"} +Filter 1626 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1536 - inet/filter/FORWARD -j logaccept-final-69 - inet/filter/INPUT -j limit-1536 - inet/filter/INPUT -j logaccept-final-69 - inet/filter/OUTPUT -j limit-1536 - inet/filter/OUTPUT -j logaccept-final-69 - inet/filter/limit-1536 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-726 - inet/filter/logaccept-final-69 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-69 -j ACCEPT - inet/filter/logdrop-726 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-726 -j DROP - inet6/filter/FORWARD -j limit-1536 - inet6/filter/FORWARD -j logaccept-final-69 - inet6/filter/INPUT -j limit-1536 - inet6/filter/INPUT -j logaccept-final-69 - inet6/filter/OUTPUT -j limit-1536 - inet6/filter/OUTPUT -j logaccept-final-69 - inet6/filter/limit-1536 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-726 - inet6/filter/logaccept-final-69 -j ACCEPT - inet6/filter/logdrop-726 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1625 + inet/filter/limit-1625 -m recent --name limit-1625 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-929 + inet/filter/limit-1625 -m recent --name limit-1625 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-929 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-929 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-929 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1625 + inet6/filter/limit-1625 -m recent --name limit-1625 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-929 + inet6/filter/logdrop-929 -j TEE --gateway fc00::2 + inet6/filter/logdrop-929 -j DROP -Filter 1538 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"log":"ulog"} +Filter 1627 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1537 - inet/filter/INPUT -j limit-1537 - inet/filter/OUTPUT -j limit-1537 - inet/filter/limit-1537 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-727 - inet/filter/limit-1537 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-727 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-727 -j DROP - inet6/filter/FORWARD -j limit-1537 - inet6/filter/INPUT -j limit-1537 - inet6/filter/OUTPUT -j limit-1537 - inet6/filter/limit-1537 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-727 - inet6/filter/logdrop-727 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1626 + inet/filter/limit-1626 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-930 + inet/filter/limit-1626 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-930 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-930 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-930 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1626 + inet6/filter/limit-1626 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-930 + inet6/filter/limit-1626 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-930 -j TEE --gateway fc00::2 + inet6/filter/logdrop-930 -j DROP -Filter 1539 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"}} +Filter 1628 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1538 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1538 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1538 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-728 - inet/filter/limit-1538 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-728 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-728 -j DROP - inet6/filter/FORWARD -j limit-1538 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1538 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1538 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-728 - inet6/filter/limit-1538 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-728 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1627 + inet/filter/limit-1627 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-931 + inet/filter/limit-1627 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-931 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-931 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-931 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1627 + inet6/filter/limit-1627 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-931 + inet6/filter/limit-1627 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-931 -j TEE --gateway fc00::2 + inet6/filter/logdrop-931 -j DROP -Filter 1540 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"}} +Filter 1629 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1539 - inet/filter/INPUT -j limit-1539 - inet/filter/OUTPUT -j limit-1539 - inet/filter/limit-1539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-729 - inet/filter/limit-1539 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-729 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-729 -j DROP - inet6/filter/FORWARD -j limit-1539 - inet6/filter/INPUT -j limit-1539 - inet6/filter/OUTPUT -j limit-1539 - inet6/filter/limit-1539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-729 - inet6/filter/limit-1539 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-729 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1628 + inet/filter/limit-1628 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-932 + inet/filter/limit-1628 -m limit --limit 1/second -j LOG + inet/filter/limit-1628 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-932 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-932 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-932 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1628 + inet6/filter/limit-1628 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-932 + inet6/filter/limit-1628 -m limit --limit 1/second -j LOG + inet6/filter/limit-1628 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-932 -j TEE --gateway fc00::2 + inet6/filter/logdrop-932 -j DROP -Filter 1541 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true} +Filter 1630 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1540 - inet/filter/FORWARD -j logaccept-final-70 - inet/filter/INPUT -j limit-1540 - inet/filter/INPUT -j logaccept-final-70 - inet/filter/OUTPUT -j limit-1540 - inet/filter/OUTPUT -j logaccept-final-70 - inet/filter/limit-1540 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-730 - inet/filter/limit-1540 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-70 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-70 -j ACCEPT - inet/filter/logdrop-730 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-730 -j DROP - inet6/filter/FORWARD -j limit-1540 - inet6/filter/FORWARD -j logaccept-final-70 - inet6/filter/INPUT -j limit-1540 - inet6/filter/INPUT -j logaccept-final-70 - inet6/filter/OUTPUT -j limit-1540 - inet6/filter/OUTPUT -j logaccept-final-70 - inet6/filter/limit-1540 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-730 - inet6/filter/limit-1540 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-70 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-70 -j ACCEPT - inet6/filter/logdrop-730 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1629 + inet/filter/limit-1629 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-933 + inet/filter/limit-1629 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-933 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-933 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-933 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1629 + inet6/filter/limit-1629 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-933 + inet6/filter/limit-1629 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-933 -j TEE --gateway fc00::2 + inet6/filter/logdrop-933 -j DROP -Filter 1542 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true} +Filter 1631 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1541 - inet/filter/INPUT -j limit-1541 - inet/filter/OUTPUT -j limit-1541 - inet/filter/limit-1541 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-731 - inet/filter/limit-1541 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-731 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-731 -j DROP - inet6/filter/FORWARD -j limit-1541 - inet6/filter/INPUT -j limit-1541 - inet6/filter/OUTPUT -j limit-1541 - inet6/filter/limit-1541 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-731 - inet6/filter/limit-1541 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-731 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1630 + inet/filter/limit-1630 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-934 + inet/filter/limit-1630 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1630 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1630 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-934 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-934 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-934 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1630 + inet6/filter/limit-1630 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-934 + inet6/filter/limit-1630 -j TEE --gateway fc00::2 + inet6/filter/limit-1630 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-934 -j TEE --gateway fc00::2 + inet6/filter/logdrop-934 -j DROP -Filter 1543 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none"} +Filter 1632 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1542 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1542 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1542 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1542 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-732 - inet/filter/limit-1542 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-732 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-732 -j DROP - inet6/filter/FORWARD -j limit-1542 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1542 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1542 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1542 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-732 - inet6/filter/limit-1542 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-732 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1631 + inet/filter/limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-935 + inet/filter/limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-935 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-935 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-935 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1631 + inet6/filter/limit-1631 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-935 + inet6/filter/limit-1631 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-935 -j TEE --gateway fc00::2 + inet6/filter/logdrop-935 -j DROP -Filter 1544 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none"} +Filter 1633 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1543 - inet/filter/INPUT -j limit-1543 - inet/filter/OUTPUT -j limit-1543 - inet/filter/limit-1543 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-733 - inet/filter/limit-1543 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-733 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-733 -j DROP - inet6/filter/FORWARD -j limit-1543 - inet6/filter/INPUT -j limit-1543 - inet6/filter/OUTPUT -j limit-1543 - inet6/filter/limit-1543 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-733 - inet6/filter/limit-1543 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-733 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1632 + inet/filter/limit-1632 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-936 + inet/filter/limit-1632 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-936 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-936 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-936 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1632 + inet6/filter/limit-1632 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-936 + inet6/filter/limit-1632 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-936 -j TEE --gateway fc00::2 + inet6/filter/logdrop-936 -j DROP -Filter 1545 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog"} +Filter 1634 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1544 - inet/filter/FORWARD -j logaccept-final-71 - inet/filter/INPUT -j limit-1544 - inet/filter/INPUT -j logaccept-final-71 - inet/filter/OUTPUT -j limit-1544 - inet/filter/OUTPUT -j logaccept-final-71 - inet/filter/limit-1544 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-734 - inet/filter/limit-1544 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-71 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-71 -j ACCEPT - inet/filter/logdrop-734 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-734 -j DROP - inet6/filter/FORWARD -j limit-1544 - inet6/filter/FORWARD -j logaccept-final-71 - inet6/filter/INPUT -j limit-1544 - inet6/filter/INPUT -j logaccept-final-71 - inet6/filter/OUTPUT -j limit-1544 - inet6/filter/OUTPUT -j logaccept-final-71 - inet6/filter/limit-1544 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-734 - inet6/filter/limit-1544 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-71 -j ACCEPT - inet6/filter/logdrop-734 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1633 + inet/filter/limit-1633 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-937 + inet/filter/limit-1633 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-937 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-937 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-937 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1633 + inet6/filter/limit-1633 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-937 + inet6/filter/limit-1633 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-937 -j TEE --gateway fc00::2 + inet6/filter/logdrop-937 -j DROP -Filter 1546 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog"} +Filter 1635 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1545 - inet/filter/INPUT -j limit-1545 - inet/filter/OUTPUT -j limit-1545 - inet/filter/limit-1545 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-735 - inet/filter/limit-1545 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-735 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-735 -j DROP - inet6/filter/FORWARD -j limit-1545 - inet6/filter/INPUT -j limit-1545 - inet6/filter/OUTPUT -j limit-1545 - inet6/filter/limit-1545 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-735 - inet6/filter/logdrop-735 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1634 + inet/filter/limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-938 + inet/filter/limit-1634 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-938 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-938 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-938 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1634 + inet6/filter/limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-938 + inet6/filter/limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-938 -j TEE --gateway fc00::2 + inet6/filter/logdrop-938 -j DROP -Filter 1547 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false}} +Filter 1636 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1546 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1546 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1546 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-736 - inet/filter/logdrop-736 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-736 -j DROP - inet6/filter/FORWARD -j limit-1546 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1546 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1546 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-736 - inet6/filter/logdrop-736 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1635 + inet/filter/limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-939 + inet/filter/limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-939 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-939 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-939 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1635 + inet6/filter/limit-1635 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-939 + inet6/filter/logdrop-939 -j TEE --gateway fc00::2 + inet6/filter/logdrop-939 -j DROP -Filter 1548 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false}} +Filter 1637 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1547 - inet/filter/INPUT -j limit-1547 - inet/filter/OUTPUT -j limit-1547 - inet/filter/limit-1547 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-737 - inet/filter/logdrop-737 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-737 -j DROP - inet6/filter/FORWARD -j limit-1547 - inet6/filter/INPUT -j limit-1547 - inet6/filter/OUTPUT -j limit-1547 - inet6/filter/limit-1547 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-737 - inet6/filter/logdrop-737 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1636 + inet/filter/limit-1636 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-940 + inet/filter/limit-1636 -j ACCEPT + inet/filter/logdrop-940 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-940 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-940 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1636 + inet6/filter/limit-1636 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-940 + inet6/filter/limit-1636 -j ACCEPT + inet6/filter/logdrop-940 -j TEE --gateway fc00::2 + inet6/filter/logdrop-940 -j DROP -Filter 1549 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true} +Filter 1638 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1548 - inet/filter/FORWARD -j logaccept-final-72 - inet/filter/INPUT -j limit-1548 - inet/filter/INPUT -j logaccept-final-72 - inet/filter/OUTPUT -j limit-1548 - inet/filter/OUTPUT -j logaccept-final-72 - inet/filter/limit-1548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-738 - inet/filter/logaccept-final-72 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-72 -j ACCEPT - inet/filter/logdrop-738 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-738 -j DROP - inet6/filter/FORWARD -j limit-1548 - inet6/filter/FORWARD -j logaccept-final-72 - inet6/filter/INPUT -j limit-1548 - inet6/filter/INPUT -j logaccept-final-72 - inet6/filter/OUTPUT -j limit-1548 - inet6/filter/OUTPUT -j logaccept-final-72 - inet6/filter/limit-1548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-738 - inet6/filter/logaccept-final-72 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-72 -j ACCEPT - inet6/filter/logdrop-738 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-941 + inet/filter/logdrop-941 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-941 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-941 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-941 + inet6/filter/logdrop-941 -j TEE --gateway fc00::2 + inet6/filter/logdrop-941 -j DROP -Filter 1550 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true} +Filter 1639 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1549 - inet/filter/INPUT -j limit-1549 - inet/filter/OUTPUT -j limit-1549 - inet/filter/limit-1549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-739 - inet/filter/limit-1549 -m limit --limit 1/second -j LOG - inet/filter/logdrop-739 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-739 -j DROP - inet6/filter/FORWARD -j limit-1549 - inet6/filter/INPUT -j limit-1549 - inet6/filter/OUTPUT -j limit-1549 - inet6/filter/limit-1549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-739 - inet6/filter/limit-1549 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-739 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1638 + inet/filter/limit-1638 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-942 + inet/filter/limit-1638 -m limit --limit 1/second -j LOG + inet/filter/limit-1638 -j ACCEPT + inet/filter/logdrop-942 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-942 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-942 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1638 + inet6/filter/limit-1638 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-942 + inet6/filter/limit-1638 -m limit --limit 1/second -j LOG + inet6/filter/limit-1638 -j ACCEPT + inet6/filter/logdrop-942 -j TEE --gateway fc00::2 + inet6/filter/logdrop-942 -j DROP -Filter 1551 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none"} +Filter 1640 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1550 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1550 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1550 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1550 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-740 - inet/filter/logdrop-740 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-740 -j DROP - inet6/filter/FORWARD -j limit-1550 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1550 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1550 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1550 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-740 - inet6/filter/logdrop-740 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1639 + inet/filter/limit-1639 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-943 + inet/filter/limit-1639 -m limit --limit 1/second -j LOG + inet/filter/logdrop-943 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-943 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-943 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1639 + inet6/filter/limit-1639 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-943 + inet6/filter/limit-1639 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-943 -j TEE --gateway fc00::2 + inet6/filter/logdrop-943 -j DROP -Filter 1552 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none"} +Filter 1641 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1551 - inet/filter/INPUT -j limit-1551 - inet/filter/OUTPUT -j limit-1551 - inet/filter/limit-1551 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-741 - inet/filter/logdrop-741 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-741 -j DROP - inet6/filter/FORWARD -j limit-1551 - inet6/filter/INPUT -j limit-1551 - inet6/filter/OUTPUT -j limit-1551 - inet6/filter/limit-1551 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-741 - inet6/filter/logdrop-741 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1640 + inet/filter/limit-1640 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-944 + inet/filter/limit-1640 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1640 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1640 -j ACCEPT + inet/filter/logdrop-944 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-944 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-944 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1640 + inet6/filter/limit-1640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-944 + inet6/filter/limit-1640 -j TEE --gateway fc00::2 + inet6/filter/limit-1640 -j ACCEPT + inet6/filter/logdrop-944 -j TEE --gateway fc00::2 + inet6/filter/logdrop-944 -j DROP -Filter 1553 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog"} +Filter 1642 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1552 - inet/filter/FORWARD -j logaccept-final-73 - inet/filter/INPUT -j limit-1552 - inet/filter/INPUT -j logaccept-final-73 - inet/filter/OUTPUT -j limit-1552 - inet/filter/OUTPUT -j logaccept-final-73 - inet/filter/limit-1552 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-742 - inet/filter/logaccept-final-73 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-73 -j ACCEPT - inet/filter/logdrop-742 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-742 -j DROP - inet6/filter/FORWARD -j limit-1552 - inet6/filter/FORWARD -j logaccept-final-73 - inet6/filter/INPUT -j limit-1552 - inet6/filter/INPUT -j logaccept-final-73 - inet6/filter/OUTPUT -j limit-1552 - inet6/filter/OUTPUT -j logaccept-final-73 - inet6/filter/limit-1552 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-742 - inet6/filter/logaccept-final-73 -j ACCEPT - inet6/filter/logdrop-742 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1641 + inet/filter/limit-1641 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-945 + inet/filter/limit-1641 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1641 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-945 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-945 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-945 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1641 + inet6/filter/limit-1641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-945 + inet6/filter/limit-1641 -j TEE --gateway fc00::2 + inet6/filter/logdrop-945 -j TEE --gateway fc00::2 + inet6/filter/logdrop-945 -j DROP -Filter 1554 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog"} +Filter 1643 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1553 - inet/filter/INPUT -j limit-1553 - inet/filter/OUTPUT -j limit-1553 - inet/filter/limit-1553 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-743 - inet/filter/limit-1553 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-743 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-743 -j DROP - inet6/filter/FORWARD -j limit-1553 - inet6/filter/INPUT -j limit-1553 - inet6/filter/OUTPUT -j limit-1553 - inet6/filter/limit-1553 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-743 - inet6/filter/logdrop-743 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1642 + inet/filter/limit-1642 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-946 + inet/filter/limit-1642 -j ACCEPT + inet/filter/logdrop-946 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-946 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-946 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1642 + inet6/filter/limit-1642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-946 + inet6/filter/limit-1642 -j ACCEPT + inet6/filter/logdrop-946 -j TEE --gateway fc00::2 + inet6/filter/logdrop-946 -j DROP -Filter 1555 {"flow-limit":{"interval":5,"log":false}} +Filter 1644 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1554 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1554 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1554 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1554 -m recent --name limit-1554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1554 -m recent --name limit-1554 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1554 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1554 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1554 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1554 -m recent --name limit-1554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1554 -m recent --name limit-1554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-947 + inet/filter/logdrop-947 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-947 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-947 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-947 + inet6/filter/logdrop-947 -j TEE --gateway fc00::2 + inet6/filter/logdrop-947 -j DROP -Filter 1556 {"action":"pass","flow-limit":{"interval":5,"log":false}} +Filter 1645 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1555 - inet/filter/INPUT -j limit-1555 - inet/filter/OUTPUT -j limit-1555 - inet/filter/limit-1555 -m recent --name limit-1555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1555 -m recent --name limit-1555 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1555 - inet6/filter/INPUT -j limit-1555 - inet6/filter/OUTPUT -j limit-1555 - inet6/filter/limit-1555 -m recent --name limit-1555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1555 -m recent --name limit-1555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1644 + inet/filter/limit-1644 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-948 + inet/filter/limit-1644 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1644 -j ACCEPT + inet/filter/logdrop-948 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-948 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-948 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1644 + inet6/filter/limit-1644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-948 + inet6/filter/limit-1644 -j ACCEPT + inet6/filter/logdrop-948 -j TEE --gateway fc00::2 + inet6/filter/logdrop-948 -j DROP -Filter 1557 {"flow-limit":{"interval":5,"log":false},"log":true} +Filter 1646 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1556 - inet/filter/FORWARD -j logaccept-final-74 - inet/filter/INPUT -j limit-1556 - inet/filter/INPUT -j logaccept-final-74 - inet/filter/OUTPUT -j limit-1556 - inet/filter/OUTPUT -j logaccept-final-74 - inet/filter/limit-1556 -m recent --name limit-1556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1556 -m recent --name limit-1556 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-74 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-74 -j ACCEPT - inet6/filter/FORWARD -j limit-1556 - inet6/filter/FORWARD -j logaccept-final-74 - inet6/filter/INPUT -j limit-1556 - inet6/filter/INPUT -j logaccept-final-74 - inet6/filter/OUTPUT -j limit-1556 - inet6/filter/OUTPUT -j logaccept-final-74 - inet6/filter/limit-1556 -m recent --name limit-1556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1556 -m recent --name limit-1556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-74 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-74 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1645 + inet/filter/limit-1645 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-949 + inet/filter/limit-1645 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-949 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-949 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-949 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1645 + inet6/filter/limit-1645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-949 + inet6/filter/logdrop-949 -j TEE --gateway fc00::2 + inet6/filter/logdrop-949 -j DROP -Filter 1558 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} +Filter 1647 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1557 - inet/filter/INPUT -j limit-1557 - inet/filter/OUTPUT -j limit-1557 - inet/filter/limit-1557 -m recent --name limit-1557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1557 -m recent --name limit-1557 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1557 - inet6/filter/INPUT -j limit-1557 - inet6/filter/OUTPUT -j limit-1557 - inet6/filter/limit-1557 -m recent --name limit-1557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1557 -m recent --name limit-1557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1646 + inet/filter/limit-1646 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-950 + inet/filter/limit-1646 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-950 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-950 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-950 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1646 + inet6/filter/limit-1646 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-950 + inet6/filter/limit-1646 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-950 -j TEE --gateway fc00::2 + inet6/filter/logdrop-950 -j DROP -Filter 1559 {"flow-limit":{"interval":5,"log":false},"log":"none"} +Filter 1648 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1558 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1558 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1558 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1558 -m recent --name limit-1558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1558 -m recent --name limit-1558 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1558 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1558 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1558 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1558 -m recent --name limit-1558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1558 -m recent --name limit-1558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1647 + inet/filter/limit-1647 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-951 + inet/filter/limit-1647 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-951 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-951 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-951 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1647 + inet6/filter/limit-1647 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-951 + inet6/filter/limit-1647 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-951 -j TEE --gateway fc00::2 + inet6/filter/logdrop-951 -j DROP -Filter 1560 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} +Filter 1649 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1559 - inet/filter/INPUT -j limit-1559 - inet/filter/OUTPUT -j limit-1559 - inet/filter/limit-1559 -m recent --name limit-1559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1559 -m recent --name limit-1559 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1559 - inet6/filter/INPUT -j limit-1559 - inet6/filter/OUTPUT -j limit-1559 - inet6/filter/limit-1559 -m recent --name limit-1559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1559 -m recent --name limit-1559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1648 + inet/filter/limit-1648 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-952 + inet/filter/limit-1648 -m limit --limit 1/second -j LOG + inet/filter/limit-1648 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-952 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-952 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-952 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1648 + inet6/filter/limit-1648 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-952 + inet6/filter/limit-1648 -m limit --limit 1/second -j LOG + inet6/filter/limit-1648 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-952 -j TEE --gateway fc00::2 + inet6/filter/logdrop-952 -j DROP -Filter 1561 {"flow-limit":{"interval":5,"log":false},"log":"ulog"} +Filter 1650 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1560 - inet/filter/FORWARD -j logaccept-final-75 - inet/filter/INPUT -j limit-1560 - inet/filter/INPUT -j logaccept-final-75 - inet/filter/OUTPUT -j limit-1560 - inet/filter/OUTPUT -j logaccept-final-75 - inet/filter/limit-1560 -m recent --name limit-1560 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1560 -m recent --name limit-1560 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-75 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-75 -j ACCEPT - inet6/filter/FORWARD -j limit-1560 - inet6/filter/FORWARD -j logaccept-final-75 - inet6/filter/INPUT -j limit-1560 - inet6/filter/INPUT -j logaccept-final-75 - inet6/filter/OUTPUT -j limit-1560 - inet6/filter/OUTPUT -j logaccept-final-75 - inet6/filter/limit-1560 -m recent --name limit-1560 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1560 -m recent --name limit-1560 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-75 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1649 + inet/filter/limit-1649 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-953 + inet/filter/limit-1649 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-953 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-953 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-953 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1649 + inet6/filter/limit-1649 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-953 + inet6/filter/limit-1649 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-953 -j TEE --gateway fc00::2 + inet6/filter/logdrop-953 -j DROP -Filter 1562 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"ulog"} +Filter 1651 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1561 - inet/filter/INPUT -j limit-1561 - inet/filter/OUTPUT -j limit-1561 - inet/filter/limit-1561 -m recent --name limit-1561 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1561 -m recent --name limit-1561 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1561 - inet6/filter/INPUT -j limit-1561 - inet6/filter/OUTPUT -j limit-1561 - inet6/filter/limit-1561 -m recent --name limit-1561 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1650 + inet/filter/limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-954 + inet/filter/limit-1650 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1650 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-954 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-954 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-954 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1650 + inet6/filter/limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-954 + inet6/filter/limit-1650 -j TEE --gateway fc00::2 + inet6/filter/limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-954 -j TEE --gateway fc00::2 + inet6/filter/logdrop-954 -j DROP -Filter 1563 {"flow-limit":{"interval":5,"log":false,"name":"A"}} +Filter 1652 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1562 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1562 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1562 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1562 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1562 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1562 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1562 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1651 + inet/filter/limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-955 + inet/filter/limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-955 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-955 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-955 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1651 + inet6/filter/limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-955 + inet6/filter/limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-955 -j TEE --gateway fc00::2 + inet6/filter/logdrop-955 -j DROP -Filter 1564 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} +Filter 1653 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1563 - inet/filter/INPUT -j limit-1563 - inet/filter/OUTPUT -j limit-1563 - inet/filter/limit-1563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1563 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1563 - inet6/filter/INPUT -j limit-1563 - inet6/filter/OUTPUT -j limit-1563 - inet6/filter/limit-1563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1652 + inet/filter/limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-956 + inet/filter/limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-956 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-956 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-956 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1652 + inet6/filter/limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-956 + inet6/filter/limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-956 -j TEE --gateway fc00::2 + inet6/filter/logdrop-956 -j DROP -Filter 1565 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +Filter 1654 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1564 - inet/filter/FORWARD -j logaccept-final-76 - inet/filter/INPUT -j limit-1564 - inet/filter/INPUT -j logaccept-final-76 - inet/filter/OUTPUT -j limit-1564 - inet/filter/OUTPUT -j logaccept-final-76 - inet/filter/limit-1564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1564 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-76 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-76 -j ACCEPT - inet6/filter/FORWARD -j limit-1564 - inet6/filter/FORWARD -j logaccept-final-76 - inet6/filter/INPUT -j limit-1564 - inet6/filter/INPUT -j logaccept-final-76 - inet6/filter/OUTPUT -j limit-1564 - inet6/filter/OUTPUT -j logaccept-final-76 - inet6/filter/limit-1564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-76 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-76 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1653 + inet/filter/limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-957 + inet/filter/limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-957 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-957 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-957 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1653 + inet6/filter/limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-957 + inet6/filter/limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-957 -j TEE --gateway fc00::2 + inet6/filter/logdrop-957 -j DROP -Filter 1566 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +Filter 1655 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1565 - inet/filter/INPUT -j limit-1565 - inet/filter/OUTPUT -j limit-1565 - inet/filter/limit-1565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1565 - inet6/filter/INPUT -j limit-1565 - inet6/filter/OUTPUT -j limit-1565 - inet6/filter/limit-1565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1654 + inet/filter/limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-958 + inet/filter/limit-1654 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-958 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-958 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-958 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1654 + inet6/filter/limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-958 + inet6/filter/limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-958 -j TEE --gateway fc00::2 + inet6/filter/logdrop-958 -j DROP -Filter 1567 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +Filter 1656 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1566 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1566 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1566 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1566 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1566 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1566 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1566 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1655 + inet/filter/limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-959 + inet/filter/limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-959 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-959 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-959 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1655 + inet6/filter/limit-1655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-959 + inet6/filter/logdrop-959 -j TEE --gateway fc00::2 + inet6/filter/logdrop-959 -j DROP -Filter 1568 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +Filter 1657 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1567 - inet/filter/INPUT -j limit-1567 - inet/filter/OUTPUT -j limit-1567 - inet/filter/limit-1567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1567 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1567 - inet6/filter/INPUT -j limit-1567 - inet6/filter/OUTPUT -j limit-1567 - inet6/filter/limit-1567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1656 + inet/filter/limit-1656 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-960 + inet/filter/limit-1656 -j ACCEPT + inet/filter/logdrop-960 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-960 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-960 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1656 + inet6/filter/limit-1656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-960 + inet6/filter/limit-1656 -j ACCEPT + inet6/filter/logdrop-960 -j TEE --gateway fc00::2 + inet6/filter/logdrop-960 -j DROP -Filter 1569 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog"} +Filter 1658 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1568 - inet/filter/FORWARD -j logaccept-final-77 - inet/filter/INPUT -j limit-1568 - inet/filter/INPUT -j logaccept-final-77 - inet/filter/OUTPUT -j limit-1568 - inet/filter/OUTPUT -j logaccept-final-77 - inet/filter/limit-1568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1568 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-77 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-77 -j ACCEPT - inet6/filter/FORWARD -j limit-1568 - inet6/filter/FORWARD -j logaccept-final-77 - inet6/filter/INPUT -j limit-1568 - inet6/filter/INPUT -j logaccept-final-77 - inet6/filter/OUTPUT -j limit-1568 - inet6/filter/OUTPUT -j logaccept-final-77 - inet6/filter/limit-1568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-77 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-961 + inet/filter/logdrop-961 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-961 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-961 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-961 + inet6/filter/logdrop-961 -j TEE --gateway fc00::2 + inet6/filter/logdrop-961 -j DROP -Filter 1570 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog"} +Filter 1659 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1569 - inet/filter/INPUT -j limit-1569 - inet/filter/OUTPUT -j limit-1569 - inet/filter/limit-1569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1569 - inet6/filter/INPUT -j limit-1569 - inet6/filter/OUTPUT -j limit-1569 - inet6/filter/limit-1569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1658 + inet/filter/limit-1658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-962 + inet/filter/limit-1658 -m limit --limit 1/second -j LOG + inet/filter/limit-1658 -j ACCEPT + inet/filter/logdrop-962 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-962 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-962 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1658 + inet6/filter/limit-1658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-962 + inet6/filter/limit-1658 -m limit --limit 1/second -j LOG + inet6/filter/limit-1658 -j ACCEPT + inet6/filter/logdrop-962 -j TEE --gateway fc00::2 + inet6/filter/logdrop-962 -j DROP -Filter 1571 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +Filter 1660 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1570 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1570 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1570 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1570 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1570 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1570 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1659 + inet/filter/limit-1659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-963 + inet/filter/limit-1659 -m limit --limit 1/second -j LOG + inet/filter/logdrop-963 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-963 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-963 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1659 + inet6/filter/limit-1659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-963 + inet6/filter/limit-1659 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-963 -j TEE --gateway fc00::2 + inet6/filter/logdrop-963 -j DROP -Filter 1572 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +Filter 1661 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1571 - inet/filter/INPUT -j limit-1571 - inet/filter/OUTPUT -j limit-1571 - inet/filter/limit-1571 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1571 - inet6/filter/INPUT -j limit-1571 - inet6/filter/OUTPUT -j limit-1571 - inet6/filter/limit-1571 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1660 + inet/filter/limit-1660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-964 + inet/filter/limit-1660 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1660 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1660 -j ACCEPT + inet/filter/logdrop-964 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-964 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-964 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1660 + inet6/filter/limit-1660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-964 + inet6/filter/limit-1660 -j TEE --gateway fc00::2 + inet6/filter/limit-1660 -j ACCEPT + inet6/filter/logdrop-964 -j TEE --gateway fc00::2 + inet6/filter/logdrop-964 -j DROP -Filter 1573 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 1662 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1572 - inet/filter/FORWARD -j logaccept-final-78 - inet/filter/INPUT -j limit-1572 - inet/filter/INPUT -j logaccept-final-78 - inet/filter/OUTPUT -j limit-1572 - inet/filter/OUTPUT -j logaccept-final-78 - inet/filter/limit-1572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-78 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-78 -j ACCEPT - inet6/filter/FORWARD -j limit-1572 - inet6/filter/FORWARD -j logaccept-final-78 - inet6/filter/INPUT -j limit-1572 - inet6/filter/INPUT -j logaccept-final-78 - inet6/filter/OUTPUT -j limit-1572 - inet6/filter/OUTPUT -j logaccept-final-78 - inet6/filter/limit-1572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-78 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-78 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1661 + inet/filter/limit-1661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-965 + inet/filter/limit-1661 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1661 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-965 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-965 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-965 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1661 + inet6/filter/limit-1661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-965 + inet6/filter/limit-1661 -j TEE --gateway fc00::2 + inet6/filter/logdrop-965 -j TEE --gateway fc00::2 + inet6/filter/logdrop-965 -j DROP -Filter 1574 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 1663 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1573 - inet/filter/INPUT -j limit-1573 - inet/filter/OUTPUT -j limit-1573 - inet/filter/limit-1573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1573 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1573 - inet6/filter/INPUT -j limit-1573 - inet6/filter/OUTPUT -j limit-1573 - inet6/filter/limit-1573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1573 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1662 + inet/filter/limit-1662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-966 + inet/filter/limit-1662 -j ACCEPT + inet/filter/logdrop-966 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-966 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-966 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1662 + inet6/filter/limit-1662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-966 + inet6/filter/limit-1662 -j ACCEPT + inet6/filter/logdrop-966 -j TEE --gateway fc00::2 + inet6/filter/logdrop-966 -j DROP -Filter 1575 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 1664 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1574 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1574 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1574 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1574 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1574 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1574 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-967 + inet/filter/logdrop-967 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-967 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-967 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-967 + inet6/filter/logdrop-967 -j TEE --gateway fc00::2 + inet6/filter/logdrop-967 -j DROP -Filter 1576 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 1665 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1575 - inet/filter/INPUT -j limit-1575 - inet/filter/OUTPUT -j limit-1575 - inet/filter/limit-1575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1575 - inet6/filter/INPUT -j limit-1575 - inet6/filter/OUTPUT -j limit-1575 - inet6/filter/limit-1575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1664 + inet/filter/limit-1664 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-968 + inet/filter/limit-1664 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1664 -j ACCEPT + inet/filter/logdrop-968 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-968 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-968 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1664 + inet6/filter/limit-1664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-968 + inet6/filter/limit-1664 -j ACCEPT + inet6/filter/logdrop-968 -j TEE --gateway fc00::2 + inet6/filter/logdrop-968 -j DROP -Filter 1577 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog"} +Filter 1666 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1576 - inet/filter/FORWARD -j logaccept-final-79 - inet/filter/INPUT -j limit-1576 - inet/filter/INPUT -j logaccept-final-79 - inet/filter/OUTPUT -j limit-1576 - inet/filter/OUTPUT -j logaccept-final-79 - inet/filter/limit-1576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-79 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-79 -j ACCEPT - inet6/filter/FORWARD -j limit-1576 - inet6/filter/FORWARD -j logaccept-final-79 - inet6/filter/INPUT -j limit-1576 - inet6/filter/INPUT -j logaccept-final-79 - inet6/filter/OUTPUT -j limit-1576 - inet6/filter/OUTPUT -j logaccept-final-79 - inet6/filter/limit-1576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-79 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1665 + inet/filter/limit-1665 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-969 + inet/filter/limit-1665 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-969 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-969 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-969 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1665 + inet6/filter/limit-1665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-969 + inet6/filter/logdrop-969 -j TEE --gateway fc00::2 + inet6/filter/logdrop-969 -j DROP -Filter 1578 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog"} +Filter 1667 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1577 - inet/filter/INPUT -j limit-1577 - inet/filter/OUTPUT -j limit-1577 - inet/filter/limit-1577 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1577 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1577 - inet6/filter/INPUT -j limit-1577 - inet6/filter/OUTPUT -j limit-1577 - inet6/filter/limit-1577 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1666 + inet/filter/limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-970 + inet/filter/limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-970 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-970 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-970 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1666 + inet6/filter/limit-1666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-970 + inet6/filter/limit-1666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-970 -j TEE --gateway fc00::2 + inet6/filter/logdrop-970 -j DROP -Filter 1579 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +Filter 1668 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1578 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1578 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1578 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1578 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1578 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1578 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1578 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1578 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1578 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1578 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1667 + inet/filter/limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-971 + inet/filter/limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-971 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-971 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-971 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1667 + inet6/filter/limit-1667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-971 + inet6/filter/limit-1667 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-971 -j TEE --gateway fc00::2 + inet6/filter/logdrop-971 -j DROP -Filter 1580 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +Filter 1669 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1579 - inet/filter/INPUT -j limit-1579 - inet/filter/OUTPUT -j limit-1579 - inet/filter/limit-1579 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1579 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1579 - inet6/filter/INPUT -j limit-1579 - inet6/filter/OUTPUT -j limit-1579 - inet6/filter/limit-1579 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1579 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1668 + inet/filter/limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-972 + inet/filter/limit-1668 -m limit --limit 1/second -j LOG + inet/filter/limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-972 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-972 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-972 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1668 + inet6/filter/limit-1668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-972 + inet6/filter/limit-1668 -m limit --limit 1/second -j LOG + inet6/filter/limit-1668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-972 -j TEE --gateway fc00::2 + inet6/filter/logdrop-972 -j DROP -Filter 1581 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +Filter 1670 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1580 - inet/filter/FORWARD -j logaccept-final-80 - inet/filter/INPUT -j limit-1580 - inet/filter/INPUT -j logaccept-final-80 - inet/filter/OUTPUT -j limit-1580 - inet/filter/OUTPUT -j logaccept-final-80 - inet/filter/limit-1580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1580 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-80 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-80 -j ACCEPT - inet6/filter/FORWARD -j limit-1580 - inet6/filter/FORWARD -j logaccept-final-80 - inet6/filter/INPUT -j limit-1580 - inet6/filter/INPUT -j logaccept-final-80 - inet6/filter/OUTPUT -j limit-1580 - inet6/filter/OUTPUT -j logaccept-final-80 - inet6/filter/limit-1580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-80 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-80 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1669 + inet/filter/limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-973 + inet/filter/limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-973 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-973 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-973 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1669 + inet6/filter/limit-1669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-973 + inet6/filter/limit-1669 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-973 -j TEE --gateway fc00::2 + inet6/filter/logdrop-973 -j DROP -Filter 1582 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +Filter 1671 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1581 - inet/filter/INPUT -j limit-1581 - inet/filter/OUTPUT -j limit-1581 - inet/filter/limit-1581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1581 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1581 - inet6/filter/INPUT -j limit-1581 - inet6/filter/OUTPUT -j limit-1581 - inet6/filter/limit-1581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1670 + inet/filter/limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-974 + inet/filter/limit-1670 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1670 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-974 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-974 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-974 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1670 + inet6/filter/limit-1670 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-974 + inet6/filter/limit-1670 -j TEE --gateway fc00::2 + inet6/filter/limit-1670 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-974 -j TEE --gateway fc00::2 + inet6/filter/logdrop-974 -j DROP -Filter 1583 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +Filter 1672 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1582 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1582 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1582 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1582 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1582 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1582 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1582 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1671 + inet/filter/limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-975 + inet/filter/limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-975 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-975 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-975 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1671 + inet6/filter/limit-1671 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-975 + inet6/filter/limit-1671 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-975 -j TEE --gateway fc00::2 + inet6/filter/logdrop-975 -j DROP -Filter 1584 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +Filter 1673 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1583 - inet/filter/INPUT -j limit-1583 - inet/filter/OUTPUT -j limit-1583 - inet/filter/limit-1583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1583 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1583 - inet6/filter/INPUT -j limit-1583 - inet6/filter/OUTPUT -j limit-1583 - inet6/filter/limit-1583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1672 + inet/filter/limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-976 + inet/filter/limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-976 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-976 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-976 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1672 + inet6/filter/limit-1672 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-976 + inet6/filter/limit-1672 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-976 -j TEE --gateway fc00::2 + inet6/filter/logdrop-976 -j DROP -Filter 1585 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog"} +Filter 1674 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1584 - inet/filter/FORWARD -j logaccept-final-81 - inet/filter/INPUT -j limit-1584 - inet/filter/INPUT -j logaccept-final-81 - inet/filter/OUTPUT -j limit-1584 - inet/filter/OUTPUT -j logaccept-final-81 - inet/filter/limit-1584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1584 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-81 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-81 -j ACCEPT - inet6/filter/FORWARD -j limit-1584 - inet6/filter/FORWARD -j logaccept-final-81 - inet6/filter/INPUT -j limit-1584 - inet6/filter/INPUT -j logaccept-final-81 - inet6/filter/OUTPUT -j limit-1584 - inet6/filter/OUTPUT -j logaccept-final-81 - inet6/filter/limit-1584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-81 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1673 + inet/filter/limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-977 + inet/filter/limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-977 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-977 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-977 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1673 + inet6/filter/limit-1673 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-977 + inet6/filter/limit-1673 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-977 -j TEE --gateway fc00::2 + inet6/filter/logdrop-977 -j DROP -Filter 1586 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog"} +Filter 1675 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1585 - inet/filter/INPUT -j limit-1585 - inet/filter/OUTPUT -j limit-1585 - inet/filter/limit-1585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1585 - inet6/filter/INPUT -j limit-1585 - inet6/filter/OUTPUT -j limit-1585 - inet6/filter/limit-1585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1674 + inet/filter/limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-978 + inet/filter/limit-1674 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-978 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-978 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-978 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1674 + inet6/filter/limit-1674 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-978 + inet6/filter/limit-1674 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-978 -j TEE --gateway fc00::2 + inet6/filter/logdrop-978 -j DROP -Filter 1587 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +Filter 1676 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1586 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1586 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1586 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1586 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1586 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1586 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1586 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1675 + inet/filter/limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-979 + inet/filter/limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-979 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-979 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-979 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1675 + inet6/filter/limit-1675 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-979 + inet6/filter/logdrop-979 -j TEE --gateway fc00::2 + inet6/filter/logdrop-979 -j DROP -Filter 1588 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +Filter 1677 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1587 - inet/filter/INPUT -j limit-1587 - inet/filter/OUTPUT -j limit-1587 - inet/filter/limit-1587 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1587 - inet6/filter/INPUT -j limit-1587 - inet6/filter/OUTPUT -j limit-1587 - inet6/filter/limit-1587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1676 + inet/filter/limit-1676 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-980 + inet/filter/limit-1676 -j ACCEPT + inet/filter/logdrop-980 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-980 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-980 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1676 + inet6/filter/limit-1676 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-980 + inet6/filter/limit-1676 -j ACCEPT + inet6/filter/logdrop-980 -j TEE --gateway fc00::2 + inet6/filter/logdrop-980 -j DROP -Filter 1589 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 1678 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1588 - inet/filter/FORWARD -j logaccept-final-82 - inet/filter/INPUT -j limit-1588 - inet/filter/INPUT -j logaccept-final-82 - inet/filter/OUTPUT -j limit-1588 - inet/filter/OUTPUT -j logaccept-final-82 - inet/filter/limit-1588 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-82 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-82 -j ACCEPT - inet6/filter/FORWARD -j limit-1588 - inet6/filter/FORWARD -j logaccept-final-82 - inet6/filter/INPUT -j limit-1588 - inet6/filter/INPUT -j logaccept-final-82 - inet6/filter/OUTPUT -j limit-1588 - inet6/filter/OUTPUT -j logaccept-final-82 - inet6/filter/limit-1588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-82 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-82 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-981 + inet/filter/logdrop-981 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-981 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-981 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-981 + inet6/filter/logdrop-981 -j TEE --gateway fc00::2 + inet6/filter/logdrop-981 -j DROP -Filter 1590 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 1679 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1589 - inet/filter/INPUT -j limit-1589 - inet/filter/OUTPUT -j limit-1589 - inet/filter/limit-1589 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1589 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1589 - inet6/filter/INPUT -j limit-1589 - inet6/filter/OUTPUT -j limit-1589 - inet6/filter/limit-1589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1589 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1678 + inet/filter/limit-1678 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-982 + inet/filter/limit-1678 -m limit --limit 1/second -j LOG + inet/filter/limit-1678 -j ACCEPT + inet/filter/logdrop-982 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-982 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-982 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1678 + inet6/filter/limit-1678 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-982 + inet6/filter/limit-1678 -m limit --limit 1/second -j LOG + inet6/filter/limit-1678 -j ACCEPT + inet6/filter/logdrop-982 -j TEE --gateway fc00::2 + inet6/filter/logdrop-982 -j DROP -Filter 1591 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 1680 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1590 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1590 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1590 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1590 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1590 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1590 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1679 + inet/filter/limit-1679 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-983 + inet/filter/limit-1679 -m limit --limit 1/second -j LOG + inet/filter/logdrop-983 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-983 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-983 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1679 + inet6/filter/limit-1679 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-983 + inet6/filter/limit-1679 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-983 -j TEE --gateway fc00::2 + inet6/filter/logdrop-983 -j DROP -Filter 1592 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 1681 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1591 - inet/filter/INPUT -j limit-1591 - inet/filter/OUTPUT -j limit-1591 - inet/filter/limit-1591 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1591 - inet6/filter/INPUT -j limit-1591 - inet6/filter/OUTPUT -j limit-1591 - inet6/filter/limit-1591 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1680 + inet/filter/limit-1680 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-984 + inet/filter/limit-1680 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1680 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1680 -j ACCEPT + inet/filter/logdrop-984 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-984 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-984 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1680 + inet6/filter/limit-1680 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-984 + inet6/filter/limit-1680 -j TEE --gateway fc00::2 + inet6/filter/limit-1680 -j ACCEPT + inet6/filter/logdrop-984 -j TEE --gateway fc00::2 + inet6/filter/logdrop-984 -j DROP -Filter 1593 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog"} +Filter 1682 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1592 - inet/filter/FORWARD -j logaccept-final-83 - inet/filter/INPUT -j limit-1592 - inet/filter/INPUT -j logaccept-final-83 - inet/filter/OUTPUT -j limit-1592 - inet/filter/OUTPUT -j logaccept-final-83 - inet/filter/limit-1592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-83 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-83 -j ACCEPT - inet6/filter/FORWARD -j limit-1592 - inet6/filter/FORWARD -j logaccept-final-83 - inet6/filter/INPUT -j limit-1592 - inet6/filter/INPUT -j logaccept-final-83 - inet6/filter/OUTPUT -j limit-1592 - inet6/filter/OUTPUT -j logaccept-final-83 - inet6/filter/limit-1592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-83 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1681 + inet/filter/limit-1681 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-985 + inet/filter/limit-1681 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1681 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-985 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-985 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-985 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1681 + inet6/filter/limit-1681 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-985 + inet6/filter/limit-1681 -j TEE --gateway fc00::2 + inet6/filter/logdrop-985 -j TEE --gateway fc00::2 + inet6/filter/logdrop-985 -j DROP -Filter 1594 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog"} +Filter 1683 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1593 - inet/filter/INPUT -j limit-1593 - inet/filter/OUTPUT -j limit-1593 - inet/filter/limit-1593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1593 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1593 - inet6/filter/INPUT -j limit-1593 - inet6/filter/OUTPUT -j limit-1593 - inet6/filter/limit-1593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1682 + inet/filter/limit-1682 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-986 + inet/filter/limit-1682 -j ACCEPT + inet/filter/logdrop-986 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-986 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-986 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1682 + inet6/filter/limit-1682 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-986 + inet6/filter/limit-1682 -j ACCEPT + inet6/filter/logdrop-986 -j TEE --gateway fc00::2 + inet6/filter/logdrop-986 -j DROP -Filter 1595 {"flow-limit":{"interval":5,"log":false,"name":"C"}} +Filter 1684 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1594 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1594 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1594 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1594 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1594 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1594 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1594 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1594 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1594 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1594 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-987 + inet/filter/logdrop-987 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-987 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-987 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-987 + inet6/filter/logdrop-987 -j TEE --gateway fc00::2 + inet6/filter/logdrop-987 -j DROP -Filter 1596 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} +Filter 1685 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1595 - inet/filter/INPUT -j limit-1595 - inet/filter/OUTPUT -j limit-1595 - inet/filter/limit-1595 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1595 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1595 - inet6/filter/INPUT -j limit-1595 - inet6/filter/OUTPUT -j limit-1595 - inet6/filter/limit-1595 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1595 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1684 + inet/filter/limit-1684 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-988 + inet/filter/limit-1684 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1684 -j ACCEPT + inet/filter/logdrop-988 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-988 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-988 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1684 + inet6/filter/limit-1684 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-988 + inet6/filter/limit-1684 -j ACCEPT + inet6/filter/logdrop-988 -j TEE --gateway fc00::2 + inet6/filter/logdrop-988 -j DROP -Filter 1597 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +Filter 1686 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1596 - inet/filter/FORWARD -j logaccept-final-84 - inet/filter/INPUT -j limit-1596 - inet/filter/INPUT -j logaccept-final-84 - inet/filter/OUTPUT -j limit-1596 - inet/filter/OUTPUT -j logaccept-final-84 - inet/filter/limit-1596 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1596 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-84 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-84 -j ACCEPT - inet6/filter/FORWARD -j limit-1596 - inet6/filter/FORWARD -j logaccept-final-84 - inet6/filter/INPUT -j limit-1596 - inet6/filter/INPUT -j logaccept-final-84 - inet6/filter/OUTPUT -j limit-1596 - inet6/filter/OUTPUT -j logaccept-final-84 - inet6/filter/limit-1596 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1596 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-84 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-84 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1685 + inet/filter/limit-1685 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-989 + inet/filter/limit-1685 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-989 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-989 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-989 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1685 + inet6/filter/limit-1685 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-989 + inet6/filter/logdrop-989 -j TEE --gateway fc00::2 + inet6/filter/logdrop-989 -j DROP -Filter 1598 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +Filter 1687 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1597 - inet/filter/INPUT -j limit-1597 - inet/filter/OUTPUT -j limit-1597 - inet/filter/limit-1597 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1597 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1597 - inet6/filter/INPUT -j limit-1597 - inet6/filter/OUTPUT -j limit-1597 - inet6/filter/limit-1597 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1597 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1686 + inet/filter/limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-990 + inet/filter/limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-990 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-990 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-990 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1686 + inet6/filter/limit-1686 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-990 + inet6/filter/limit-1686 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-990 -j TEE --gateway fc00::2 + inet6/filter/logdrop-990 -j DROP -Filter 1599 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +Filter 1688 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1598 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1598 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1598 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1598 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1598 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1598 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1598 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1598 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1598 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1598 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1687 + inet/filter/limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-991 + inet/filter/limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-991 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-991 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-991 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1687 + inet6/filter/limit-1687 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-991 + inet6/filter/limit-1687 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-991 -j TEE --gateway fc00::2 + inet6/filter/logdrop-991 -j DROP -Filter 1600 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +Filter 1689 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1599 - inet/filter/INPUT -j limit-1599 - inet/filter/OUTPUT -j limit-1599 - inet/filter/limit-1599 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1599 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1599 - inet6/filter/INPUT -j limit-1599 - inet6/filter/OUTPUT -j limit-1599 - inet6/filter/limit-1599 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1599 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1688 + inet/filter/limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-992 + inet/filter/limit-1688 -m limit --limit 1/second -j LOG + inet/filter/limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-992 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-992 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-992 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1688 + inet6/filter/limit-1688 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-992 + inet6/filter/limit-1688 -m limit --limit 1/second -j LOG + inet6/filter/limit-1688 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-992 -j TEE --gateway fc00::2 + inet6/filter/logdrop-992 -j DROP -Filter 1601 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog"} +Filter 1690 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1600 - inet/filter/FORWARD -j logaccept-final-85 - inet/filter/INPUT -j limit-1600 - inet/filter/INPUT -j logaccept-final-85 - inet/filter/OUTPUT -j limit-1600 - inet/filter/OUTPUT -j logaccept-final-85 - inet/filter/limit-1600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1600 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-85 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-85 -j ACCEPT - inet6/filter/FORWARD -j limit-1600 - inet6/filter/FORWARD -j logaccept-final-85 - inet6/filter/INPUT -j limit-1600 - inet6/filter/INPUT -j logaccept-final-85 - inet6/filter/OUTPUT -j limit-1600 - inet6/filter/OUTPUT -j logaccept-final-85 - inet6/filter/limit-1600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1600 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-85 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1689 + inet/filter/limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-993 + inet/filter/limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-993 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-993 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-993 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1689 + inet6/filter/limit-1689 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-993 + inet6/filter/limit-1689 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-993 -j TEE --gateway fc00::2 + inet6/filter/logdrop-993 -j DROP -Filter 1602 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog"} +Filter 1691 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1601 - inet/filter/INPUT -j limit-1601 - inet/filter/OUTPUT -j limit-1601 - inet/filter/limit-1601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1601 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1601 - inet6/filter/INPUT -j limit-1601 - inet6/filter/OUTPUT -j limit-1601 - inet6/filter/limit-1601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1690 + inet/filter/limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-994 + inet/filter/limit-1690 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1690 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-994 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-994 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-994 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1690 + inet6/filter/limit-1690 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-994 + inet6/filter/limit-1690 -j TEE --gateway fc00::2 + inet6/filter/limit-1690 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-994 -j TEE --gateway fc00::2 + inet6/filter/logdrop-994 -j DROP -Filter 1603 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +Filter 1692 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1602 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1602 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1602 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1602 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1602 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1602 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1602 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1602 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1691 + inet/filter/limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-995 + inet/filter/limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-995 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-995 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-995 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1691 + inet6/filter/limit-1691 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-995 + inet6/filter/limit-1691 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-995 -j TEE --gateway fc00::2 + inet6/filter/logdrop-995 -j DROP -Filter 1604 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +Filter 1693 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1603 - inet/filter/INPUT -j limit-1603 - inet/filter/OUTPUT -j limit-1603 - inet/filter/limit-1603 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1603 - inet6/filter/INPUT -j limit-1603 - inet6/filter/OUTPUT -j limit-1603 - inet6/filter/limit-1603 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1692 + inet/filter/limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-996 + inet/filter/limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-996 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-996 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-996 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1692 + inet6/filter/limit-1692 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-996 + inet6/filter/limit-1692 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-996 -j TEE --gateway fc00::2 + inet6/filter/logdrop-996 -j DROP -Filter 1605 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 1694 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1604 - inet/filter/FORWARD -j logaccept-final-86 - inet/filter/INPUT -j limit-1604 - inet/filter/INPUT -j logaccept-final-86 - inet/filter/OUTPUT -j limit-1604 - inet/filter/OUTPUT -j logaccept-final-86 - inet/filter/limit-1604 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-86 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-86 -j ACCEPT - inet6/filter/FORWARD -j limit-1604 - inet6/filter/FORWARD -j logaccept-final-86 - inet6/filter/INPUT -j limit-1604 - inet6/filter/INPUT -j logaccept-final-86 - inet6/filter/OUTPUT -j limit-1604 - inet6/filter/OUTPUT -j logaccept-final-86 - inet6/filter/limit-1604 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-86 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-86 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1693 + inet/filter/limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-997 + inet/filter/limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-997 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-997 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-997 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1693 + inet6/filter/limit-1693 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-997 + inet6/filter/limit-1693 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-997 -j TEE --gateway fc00::2 + inet6/filter/logdrop-997 -j DROP -Filter 1606 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 1695 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1605 - inet/filter/INPUT -j limit-1605 - inet/filter/OUTPUT -j limit-1605 - inet/filter/limit-1605 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1605 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1605 - inet6/filter/INPUT -j limit-1605 - inet6/filter/OUTPUT -j limit-1605 - inet6/filter/limit-1605 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1605 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1694 + inet/filter/limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-998 + inet/filter/limit-1694 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-998 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-998 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-998 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1694 + inet6/filter/limit-1694 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-998 + inet6/filter/limit-1694 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-998 -j TEE --gateway fc00::2 + inet6/filter/logdrop-998 -j DROP -Filter 1607 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 1696 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1606 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1606 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1606 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1606 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1606 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1606 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1606 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1606 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1695 + inet/filter/limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-999 + inet/filter/limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-999 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-999 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-999 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1695 + inet6/filter/limit-1695 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-999 + inet6/filter/logdrop-999 -j TEE --gateway fc00::2 + inet6/filter/logdrop-999 -j DROP -Filter 1608 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 1697 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1607 - inet/filter/INPUT -j limit-1607 - inet/filter/OUTPUT -j limit-1607 - inet/filter/limit-1607 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1607 - inet6/filter/INPUT -j limit-1607 - inet6/filter/OUTPUT -j limit-1607 - inet6/filter/limit-1607 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1696 + inet/filter/limit-1696 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1000 + inet/filter/limit-1696 -j ACCEPT + inet/filter/logdrop-1000 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1000 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1000 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1696 + inet6/filter/limit-1696 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1000 + inet6/filter/limit-1696 -j ACCEPT + inet6/filter/logdrop-1000 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1000 -j DROP -Filter 1609 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog"} +Filter 1698 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1608 - inet/filter/FORWARD -j logaccept-final-87 - inet/filter/INPUT -j limit-1608 - inet/filter/INPUT -j logaccept-final-87 - inet/filter/OUTPUT -j limit-1608 - inet/filter/OUTPUT -j logaccept-final-87 - inet/filter/limit-1608 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-87 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-87 -j ACCEPT - inet6/filter/FORWARD -j limit-1608 - inet6/filter/FORWARD -j logaccept-final-87 - inet6/filter/INPUT -j limit-1608 - inet6/filter/INPUT -j logaccept-final-87 - inet6/filter/OUTPUT -j limit-1608 - inet6/filter/OUTPUT -j logaccept-final-87 - inet6/filter/limit-1608 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-87 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1001 + inet/filter/logdrop-1001 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1001 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1001 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1001 + inet6/filter/logdrop-1001 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1001 -j DROP -Filter 1610 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog"} +Filter 1699 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1609 - inet/filter/INPUT -j limit-1609 - inet/filter/OUTPUT -j limit-1609 - inet/filter/limit-1609 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1609 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1609 - inet6/filter/INPUT -j limit-1609 - inet6/filter/OUTPUT -j limit-1609 - inet6/filter/limit-1609 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1698 + inet/filter/limit-1698 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1002 + inet/filter/limit-1698 -m limit --limit 1/second -j LOG + inet/filter/limit-1698 -j ACCEPT + inet/filter/logdrop-1002 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1002 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1002 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1698 + inet6/filter/limit-1698 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1002 + inet6/filter/limit-1698 -m limit --limit 1/second -j LOG + inet6/filter/limit-1698 -j ACCEPT + inet6/filter/logdrop-1002 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1002 -j DROP -Filter 1611 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +Filter 1700 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1610 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1610 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1610 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1610 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1610 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1610 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1610 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1610 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1610 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1610 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1699 + inet/filter/limit-1699 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1003 + inet/filter/limit-1699 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1003 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1003 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1003 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1699 + inet6/filter/limit-1699 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1003 + inet6/filter/limit-1699 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1003 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1003 -j DROP -Filter 1612 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +Filter 1701 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1611 - inet/filter/INPUT -j limit-1611 - inet/filter/OUTPUT -j limit-1611 - inet/filter/limit-1611 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1611 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1611 - inet6/filter/INPUT -j limit-1611 - inet6/filter/OUTPUT -j limit-1611 - inet6/filter/limit-1611 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1611 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1700 + inet/filter/limit-1700 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1004 + inet/filter/limit-1700 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1700 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1700 -j ACCEPT + inet/filter/logdrop-1004 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1004 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1004 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1700 + inet6/filter/limit-1700 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1004 + inet6/filter/limit-1700 -j TEE --gateway fc00::2 + inet6/filter/limit-1700 -j ACCEPT + inet6/filter/logdrop-1004 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1004 -j DROP -Filter 1613 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +Filter 1702 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1612 - inet/filter/FORWARD -j logaccept-final-88 - inet/filter/INPUT -j limit-1612 - inet/filter/INPUT -j logaccept-final-88 - inet/filter/OUTPUT -j limit-1612 - inet/filter/OUTPUT -j logaccept-final-88 - inet/filter/limit-1612 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1612 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-88 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-88 -j ACCEPT - inet6/filter/FORWARD -j limit-1612 - inet6/filter/FORWARD -j logaccept-final-88 - inet6/filter/INPUT -j limit-1612 - inet6/filter/INPUT -j logaccept-final-88 - inet6/filter/OUTPUT -j limit-1612 - inet6/filter/OUTPUT -j logaccept-final-88 - inet6/filter/limit-1612 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1612 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-88 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-88 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1701 + inet/filter/limit-1701 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1005 + inet/filter/limit-1701 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1701 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1005 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1005 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1005 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1701 + inet6/filter/limit-1701 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1005 + inet6/filter/limit-1701 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1005 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1005 -j DROP -Filter 1614 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +Filter 1703 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1613 - inet/filter/INPUT -j limit-1613 - inet/filter/OUTPUT -j limit-1613 - inet/filter/limit-1613 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1613 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1613 - inet6/filter/INPUT -j limit-1613 - inet6/filter/OUTPUT -j limit-1613 - inet6/filter/limit-1613 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1613 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1702 + inet/filter/limit-1702 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1006 + inet/filter/limit-1702 -j ACCEPT + inet/filter/logdrop-1006 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1006 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1006 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1702 + inet6/filter/limit-1702 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1006 + inet6/filter/limit-1702 -j ACCEPT + inet6/filter/logdrop-1006 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1006 -j DROP -Filter 1615 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +Filter 1704 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1614 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1614 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1614 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1614 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1614 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1614 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1614 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1614 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1614 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1614 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1007 + inet/filter/logdrop-1007 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1007 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1007 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1007 + inet6/filter/logdrop-1007 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1007 -j DROP -Filter 1616 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +Filter 1705 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1615 - inet/filter/INPUT -j limit-1615 - inet/filter/OUTPUT -j limit-1615 - inet/filter/limit-1615 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1615 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1615 - inet6/filter/INPUT -j limit-1615 - inet6/filter/OUTPUT -j limit-1615 - inet6/filter/limit-1615 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1615 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1704 + inet/filter/limit-1704 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1008 + inet/filter/limit-1704 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1704 -j ACCEPT + inet/filter/logdrop-1008 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1008 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1008 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1704 + inet6/filter/limit-1704 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1008 + inet6/filter/limit-1704 -j ACCEPT + inet6/filter/logdrop-1008 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1008 -j DROP -Filter 1617 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog"} +Filter 1706 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1616 - inet/filter/FORWARD -j logaccept-final-89 - inet/filter/INPUT -j limit-1616 - inet/filter/INPUT -j logaccept-final-89 - inet/filter/OUTPUT -j limit-1616 - inet/filter/OUTPUT -j logaccept-final-89 - inet/filter/limit-1616 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1616 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-89 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-89 -j ACCEPT - inet6/filter/FORWARD -j limit-1616 - inet6/filter/FORWARD -j logaccept-final-89 - inet6/filter/INPUT -j limit-1616 - inet6/filter/INPUT -j logaccept-final-89 - inet6/filter/OUTPUT -j limit-1616 - inet6/filter/OUTPUT -j logaccept-final-89 - inet6/filter/limit-1616 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1616 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-89 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1705 + inet/filter/limit-1705 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1009 + inet/filter/limit-1705 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1009 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1009 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1009 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1705 + inet6/filter/limit-1705 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1009 + inet6/filter/logdrop-1009 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1009 -j DROP -Filter 1618 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog"} +Filter 1707 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1706 + inet/filter/limit-1706 -m recent --name limit-1706 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1706 -m recent --name limit-1706 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1706 + inet6/filter/limit-1706 -m recent --name limit-1706 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1706 -m recent --name limit-1706 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1708 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1707 + inet/filter/limit-1707 -m recent --name limit-1707 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1707 -m recent --name limit-1707 --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1707 + inet6/filter/limit-1707 -m recent --name limit-1707 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1707 -m recent --name limit-1707 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1709 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1708 + inet/filter/limit-1708 -m recent --name limit-1708 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1708 -m limit --limit 1/second -j LOG + inet/filter/limit-1708 -m recent --name limit-1708 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1708 + inet6/filter/limit-1708 -m recent --name limit-1708 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1708 -m limit --limit 1/second -j LOG + inet6/filter/limit-1708 -m recent --name limit-1708 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1710 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1709 + inet/filter/limit-1709 -m recent --name limit-1709 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1709 -m recent --name limit-1709 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1709 + inet6/filter/limit-1709 -m recent --name limit-1709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1709 -m recent --name limit-1709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1711 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1710 + inet/filter/limit-1710 -m recent --name limit-1710 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1710 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1710 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1710 -m recent --name limit-1710 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1710 + inet6/filter/limit-1710 -m recent --name limit-1710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1710 -j TEE --gateway fc00::2 + inet6/filter/limit-1710 -m recent --name limit-1710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1712 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1711 + inet/filter/limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1711 + inet6/filter/limit-1711 -m recent --name limit-1711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1711 -m recent --name limit-1711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 1713 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1712 + inet/filter/limit-1712 -m recent --name limit-1712 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1712 -m recent --name limit-1712 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1712 + inet6/filter/limit-1712 -m recent --name limit-1712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1712 -m recent --name limit-1712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1714 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1713 + inet/filter/limit-1713 -m recent --name limit-1713 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1713 -m recent --name limit-1713 --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1713 + inet6/filter/limit-1713 -m recent --name limit-1713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1713 -m recent --name limit-1713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1715 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1714 + inet/filter/limit-1714 -m recent --name limit-1714 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1714 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1714 -m recent --name limit-1714 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1714 + inet6/filter/limit-1714 -m recent --name limit-1714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1714 -m recent --name limit-1714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1716 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1715 + inet/filter/limit-1715 -m recent --name limit-1715 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1715 -m recent --name limit-1715 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1715 + inet6/filter/limit-1715 -m recent --name limit-1715 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 1717 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1716 + inet/filter/limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1716 + inet6/filter/limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1718 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1717 + inet/filter/limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1717 + inet6/filter/limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1719 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1718 + inet/filter/limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1718 -m limit --limit 1/second -j LOG + inet/filter/limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1718 + inet6/filter/limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1718 -m limit --limit 1/second -j LOG + inet6/filter/limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1720 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1719 + inet/filter/limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1719 + inet6/filter/limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1721 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1720 + inet/filter/limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1720 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1720 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1720 + inet6/filter/limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1720 -j TEE --gateway fc00::2 + inet6/filter/limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1722 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1721 + inet/filter/limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1721 + inet6/filter/limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 1723 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1722 + inet/filter/limit-1722 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1722 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1722 + inet6/filter/limit-1722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1724 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1723 + inet/filter/limit-1723 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1723 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1723 + inet6/filter/limit-1723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1725 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1724 + inet/filter/limit-1724 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1724 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1724 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1724 + inet6/filter/limit-1724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1726 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1725 + inet/filter/limit-1725 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1725 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1725 + inet6/filter/limit-1725 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 1727 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1726 + inet/filter/limit-1726 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1726 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1726 + inet6/filter/limit-1726 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1726 -j ACCEPT + +Filter 1728 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1617 - inet/filter/INPUT -j limit-1617 - inet/filter/OUTPUT -j limit-1617 - inet/filter/limit-1617 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1617 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1617 - inet6/filter/INPUT -j limit-1617 - inet6/filter/OUTPUT -j limit-1617 - inet6/filter/limit-1617 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1619 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +Filter 1729 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1728 + inet/filter/limit-1728 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1728 -m limit --limit 1/second -j LOG + inet/filter/limit-1728 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1728 + inet6/filter/limit-1728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1728 -m limit --limit 1/second -j LOG + inet6/filter/limit-1728 -j ACCEPT + +Filter 1730 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1729 + inet/filter/limit-1729 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1729 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1729 + inet6/filter/limit-1729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1729 -m limit --limit 1/second -j LOG + +Filter 1731 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1730 + inet/filter/limit-1730 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1730 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1730 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1730 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1730 + inet6/filter/limit-1730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1730 -j TEE --gateway fc00::2 + inet6/filter/limit-1730 -j ACCEPT + +Filter 1732 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1731 + inet/filter/limit-1731 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1731 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1731 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1731 + inet6/filter/limit-1731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1731 -j TEE --gateway fc00::2 + +Filter 1733 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1732 + inet/filter/limit-1732 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1732 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1732 + inet6/filter/limit-1732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1732 -j ACCEPT + +Filter 1734 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1618 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1618 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1618 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1618 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1618 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1618 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1618 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1618 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1620 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +Filter 1735 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1734 + inet/filter/limit-1734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1734 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1734 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1734 + inet6/filter/limit-1734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1734 -j ACCEPT + +Filter 1736 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1735 + inet/filter/limit-1735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1735 -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1735 + inet6/filter/limit-1735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1737 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1736 + inet/filter/limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1736 + inet6/filter/limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1738 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1737 + inet/filter/limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1737 + inet6/filter/limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1739 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1738 + inet/filter/limit-1738 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1738 -m limit --limit 1/second -j LOG + inet/filter/limit-1738 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1738 + inet6/filter/limit-1738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1738 -m limit --limit 1/second -j LOG + inet6/filter/limit-1738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1740 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1739 + inet/filter/limit-1739 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1739 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1739 + inet6/filter/limit-1739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1741 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1740 + inet/filter/limit-1740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1740 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1740 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1740 + inet6/filter/limit-1740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1740 -j TEE --gateway fc00::2 + inet6/filter/limit-1740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1742 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1741 + inet/filter/limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1741 + inet6/filter/limit-1741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 1743 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1742 + inet/filter/limit-1742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1742 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1742 + inet6/filter/limit-1742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1744 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1743 + inet/filter/limit-1743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1743 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1743 + inet6/filter/limit-1743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1745 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1744 + inet/filter/limit-1744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1744 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1744 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1744 + inet6/filter/limit-1744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 1746 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1745 + inet/filter/limit-1745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1745 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1745 + inet6/filter/limit-1745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 1747 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1746 + inet/filter/limit-1746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1746 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1746 + inet6/filter/limit-1746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1746 -j ACCEPT + +Filter 1748 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1619 - inet/filter/INPUT -j limit-1619 - inet/filter/OUTPUT -j limit-1619 - inet/filter/limit-1619 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1619 - inet6/filter/INPUT -j limit-1619 - inet6/filter/OUTPUT -j limit-1619 - inet6/filter/limit-1619 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1621 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 1749 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1620 - inet/filter/FORWARD -j logaccept-final-90 - inet/filter/INPUT -j limit-1620 - inet/filter/INPUT -j logaccept-final-90 - inet/filter/OUTPUT -j limit-1620 - inet/filter/OUTPUT -j logaccept-final-90 - inet/filter/limit-1620 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-90 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-90 -j ACCEPT - inet6/filter/FORWARD -j limit-1620 - inet6/filter/FORWARD -j logaccept-final-90 - inet6/filter/INPUT -j limit-1620 - inet6/filter/INPUT -j logaccept-final-90 - inet6/filter/OUTPUT -j limit-1620 - inet6/filter/OUTPUT -j logaccept-final-90 - inet6/filter/limit-1620 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-90 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-90 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1748 + inet/filter/limit-1748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1748 -m limit --limit 1/second -j LOG + inet/filter/limit-1748 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1748 + inet6/filter/limit-1748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1748 -m limit --limit 1/second -j LOG + inet6/filter/limit-1748 -j ACCEPT -Filter 1622 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 1750 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1621 - inet/filter/INPUT -j limit-1621 - inet/filter/OUTPUT -j limit-1621 - inet/filter/limit-1621 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1621 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1621 - inet6/filter/INPUT -j limit-1621 - inet6/filter/OUTPUT -j limit-1621 - inet6/filter/limit-1621 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1621 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1749 + inet/filter/limit-1749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1749 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1749 + inet6/filter/limit-1749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1749 -m limit --limit 1/second -j LOG -Filter 1623 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 1751 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1622 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1622 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1622 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1622 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1622 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1622 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1622 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1622 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1750 + inet/filter/limit-1750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1750 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1750 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1750 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1750 + inet6/filter/limit-1750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1750 -j TEE --gateway fc00::2 + inet6/filter/limit-1750 -j ACCEPT -Filter 1624 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 1752 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1623 - inet/filter/INPUT -j limit-1623 - inet/filter/OUTPUT -j limit-1623 - inet/filter/limit-1623 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1623 - inet6/filter/INPUT -j limit-1623 - inet6/filter/OUTPUT -j limit-1623 - inet6/filter/limit-1623 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1751 + inet/filter/limit-1751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1751 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1751 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1751 + inet6/filter/limit-1751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1751 -j TEE --gateway fc00::2 -Filter 1625 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog"} +Filter 1753 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1624 - inet/filter/FORWARD -j logaccept-final-91 - inet/filter/INPUT -j limit-1624 - inet/filter/INPUT -j logaccept-final-91 - inet/filter/OUTPUT -j limit-1624 - inet/filter/OUTPUT -j logaccept-final-91 - inet/filter/limit-1624 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-91 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-91 -j ACCEPT - inet6/filter/FORWARD -j limit-1624 - inet6/filter/FORWARD -j logaccept-final-91 - inet6/filter/INPUT -j limit-1624 - inet6/filter/INPUT -j logaccept-final-91 - inet6/filter/OUTPUT -j limit-1624 - inet6/filter/OUTPUT -j logaccept-final-91 - inet6/filter/limit-1624 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-91 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1752 + inet/filter/limit-1752 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1752 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1752 + inet6/filter/limit-1752 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1752 -j ACCEPT -Filter 1626 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog"} +Filter 1754 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1625 - inet/filter/INPUT -j limit-1625 - inet/filter/OUTPUT -j limit-1625 - inet/filter/limit-1625 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1625 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1625 - inet6/filter/INPUT -j limit-1625 - inet6/filter/OUTPUT -j limit-1625 - inet6/filter/limit-1625 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1627 {"flow-limit":{"interval":5}} +Filter 1755 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1754 + inet/filter/limit-1754 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1754 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1754 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1754 + inet6/filter/limit-1754 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1754 -j ACCEPT + +Filter 1756 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1755 + inet/filter/limit-1755 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1755 -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1755 + inet6/filter/limit-1755 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1757 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1756 + inet/filter/limit-1756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1756 + inet6/filter/limit-1756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1756 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 1758 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1757 + inet/filter/limit-1757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1757 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1757 + inet6/filter/limit-1757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1757 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1759 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1758 + inet/filter/limit-1758 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1758 -m limit --limit 1/second -j LOG + inet/filter/limit-1758 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1758 + inet6/filter/limit-1758 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1758 -m limit --limit 1/second -j LOG + inet6/filter/limit-1758 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 1760 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1759 + inet/filter/limit-1759 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1759 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1759 + inet6/filter/limit-1759 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1759 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1761 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1760 + inet/filter/limit-1760 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1760 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1760 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1760 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1760 + inet6/filter/limit-1760 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1760 -j TEE --gateway fc00::2 + inet6/filter/limit-1760 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 1762 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1761 + inet/filter/limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1761 + inet6/filter/limit-1761 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1761 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + +Filter 1763 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1762 + inet/filter/limit-1762 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1762 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1762 + inet6/filter/limit-1762 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1762 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 1764 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1763 + inet/filter/limit-1763 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1763 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1763 + inet6/filter/limit-1763 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1763 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1765 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1764 + inet/filter/limit-1764 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1764 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1764 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1764 + inet6/filter/limit-1764 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1764 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 1766 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1765 + inet/filter/limit-1765 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1765 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1765 + inet6/filter/limit-1765 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + +Filter 1767 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1766 + inet/filter/limit-1766 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1766 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1766 + inet6/filter/limit-1766 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1766 -j ACCEPT + +Filter 1768 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1626 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1626 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1626 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1626 -m recent --name limit-1626 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-744 - inet/filter/limit-1626 -m recent --name limit-1626 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-744 -m limit --limit 1/second -j LOG - inet/filter/logdrop-744 -j DROP - inet6/filter/FORWARD -j limit-1626 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1626 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1626 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1626 -m recent --name limit-1626 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-744 - inet6/filter/limit-1626 -m recent --name limit-1626 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-744 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-744 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1628 {"action":"pass","flow-limit":{"interval":5}} +Filter 1769 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1768 + inet/filter/limit-1768 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1768 -m limit --limit 1/second -j LOG + inet/filter/limit-1768 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1768 + inet6/filter/limit-1768 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1768 -m limit --limit 1/second -j LOG + inet6/filter/limit-1768 -j ACCEPT + +Filter 1770 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1769 + inet/filter/limit-1769 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1769 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1769 + inet6/filter/limit-1769 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1769 -m limit --limit 1/second -j LOG + +Filter 1771 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1770 + inet/filter/limit-1770 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1770 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1770 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1770 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1770 + inet6/filter/limit-1770 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1770 -j TEE --gateway fc00::2 + inet6/filter/limit-1770 -j ACCEPT + +Filter 1772 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1771 + inet/filter/limit-1771 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1771 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1771 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1771 + inet6/filter/limit-1771 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1771 -j TEE --gateway fc00::2 + +Filter 1773 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1772 + inet/filter/limit-1772 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1772 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1772 + inet6/filter/limit-1772 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1772 -j ACCEPT + +Filter 1774 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1627 - inet/filter/INPUT -j limit-1627 - inet/filter/OUTPUT -j limit-1627 - inet/filter/limit-1627 -m recent --name limit-1627 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-745 - inet/filter/limit-1627 -m recent --name limit-1627 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-745 -m limit --limit 1/second -j LOG - inet/filter/logdrop-745 -j DROP - inet6/filter/FORWARD -j limit-1627 - inet6/filter/INPUT -j limit-1627 - inet6/filter/OUTPUT -j limit-1627 - inet6/filter/limit-1627 -m recent --name limit-1627 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-745 - inet6/filter/limit-1627 -m recent --name limit-1627 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-745 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-745 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1629 {"flow-limit":{"interval":5},"log":true} +Filter 1775 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1774 + inet/filter/limit-1774 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1774 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1774 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1774 + inet6/filter/limit-1774 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1774 -j ACCEPT + +Filter 1776 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1775 + inet/filter/limit-1775 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1775 -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1775 + inet6/filter/limit-1775 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1777 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1776 + inet/filter/limit-1776 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1776 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1776 + inet6/filter/limit-1776 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1776 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1778 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1777 + inet/filter/limit-1777 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1777 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1777 + inet6/filter/limit-1777 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1777 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1779 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1778 + inet/filter/limit-1778 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1778 -m limit --limit 1/second -j LOG + inet/filter/limit-1778 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1778 + inet6/filter/limit-1778 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1778 -m limit --limit 1/second -j LOG + inet6/filter/limit-1778 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1780 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1779 + inet/filter/limit-1779 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1779 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1779 + inet6/filter/limit-1779 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1779 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1781 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1780 + inet/filter/limit-1780 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1780 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1780 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1780 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1780 + inet6/filter/limit-1780 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1780 -j TEE --gateway fc00::2 + inet6/filter/limit-1780 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1782 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1781 + inet/filter/limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1781 + inet6/filter/limit-1781 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1781 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + +Filter 1783 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1782 + inet/filter/limit-1782 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1782 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1782 + inet6/filter/limit-1782 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1782 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1784 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1783 + inet/filter/limit-1783 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1783 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1783 + inet6/filter/limit-1783 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1783 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1785 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1784 + inet/filter/limit-1784 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1784 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1784 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1784 + inet6/filter/limit-1784 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1784 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 1786 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1785 + inet/filter/limit-1785 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1785 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1785 + inet6/filter/limit-1785 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + +Filter 1787 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1786 + inet/filter/limit-1786 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1786 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1786 + inet6/filter/limit-1786 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1786 -j ACCEPT + +Filter 1788 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1628 - inet/filter/FORWARD -j logaccept-final-92 - inet/filter/INPUT -j limit-1628 - inet/filter/INPUT -j logaccept-final-92 - inet/filter/OUTPUT -j limit-1628 - inet/filter/OUTPUT -j logaccept-final-92 - inet/filter/limit-1628 -m recent --name limit-1628 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-746 - inet/filter/limit-1628 -m recent --name limit-1628 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-92 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-92 -j ACCEPT - inet/filter/logdrop-746 -m limit --limit 1/second -j LOG - inet/filter/logdrop-746 -j DROP - inet6/filter/FORWARD -j limit-1628 - inet6/filter/FORWARD -j logaccept-final-92 - inet6/filter/INPUT -j limit-1628 - inet6/filter/INPUT -j logaccept-final-92 - inet6/filter/OUTPUT -j limit-1628 - inet6/filter/OUTPUT -j logaccept-final-92 - inet6/filter/limit-1628 -m recent --name limit-1628 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-746 - inet6/filter/limit-1628 -m recent --name limit-1628 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-92 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-92 -j ACCEPT - inet6/filter/logdrop-746 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-746 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1630 {"action":"pass","flow-limit":{"interval":5},"log":true} +Filter 1789 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1629 - inet/filter/INPUT -j limit-1629 - inet/filter/OUTPUT -j limit-1629 - inet/filter/limit-1629 -m recent --name limit-1629 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-747 - inet/filter/limit-1629 -m recent --name limit-1629 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-747 -m limit --limit 1/second -j LOG - inet/filter/logdrop-747 -j DROP - inet6/filter/FORWARD -j limit-1629 - inet6/filter/INPUT -j limit-1629 - inet6/filter/OUTPUT -j limit-1629 - inet6/filter/limit-1629 -m recent --name limit-1629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-747 - inet6/filter/limit-1629 -m recent --name limit-1629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-747 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-747 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1788 + inet/filter/limit-1788 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1788 -m limit --limit 1/second -j LOG + inet/filter/limit-1788 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1788 + inet6/filter/limit-1788 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1788 -m limit --limit 1/second -j LOG + inet6/filter/limit-1788 -j ACCEPT -Filter 1631 {"flow-limit":{"interval":5},"log":"none"} +Filter 1790 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1630 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1630 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1630 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1630 -m recent --name limit-1630 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-748 - inet/filter/limit-1630 -m recent --name limit-1630 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-748 -m limit --limit 1/second -j LOG - inet/filter/logdrop-748 -j DROP - inet6/filter/FORWARD -j limit-1630 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1630 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1630 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1630 -m recent --name limit-1630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-748 - inet6/filter/limit-1630 -m recent --name limit-1630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-748 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-748 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1789 + inet/filter/limit-1789 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1789 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1789 + inet6/filter/limit-1789 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1789 -m limit --limit 1/second -j LOG -Filter 1632 {"action":"pass","flow-limit":{"interval":5},"log":"none"} +Filter 1791 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1631 - inet/filter/INPUT -j limit-1631 - inet/filter/OUTPUT -j limit-1631 - inet/filter/limit-1631 -m recent --name limit-1631 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-749 - inet/filter/limit-1631 -m recent --name limit-1631 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-749 -m limit --limit 1/second -j LOG - inet/filter/logdrop-749 -j DROP - inet6/filter/FORWARD -j limit-1631 - inet6/filter/INPUT -j limit-1631 - inet6/filter/OUTPUT -j limit-1631 - inet6/filter/limit-1631 -m recent --name limit-1631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-749 - inet6/filter/limit-1631 -m recent --name limit-1631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-749 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-749 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1790 + inet/filter/limit-1790 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1790 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1790 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1790 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1790 + inet6/filter/limit-1790 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1790 -j TEE --gateway fc00::2 + inet6/filter/limit-1790 -j ACCEPT -Filter 1633 {"flow-limit":{"interval":5},"log":"ulog"} +Filter 1792 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1632 - inet/filter/FORWARD -j logaccept-final-93 - inet/filter/INPUT -j limit-1632 - inet/filter/INPUT -j logaccept-final-93 - inet/filter/OUTPUT -j limit-1632 - inet/filter/OUTPUT -j logaccept-final-93 - inet/filter/limit-1632 -m recent --name limit-1632 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-750 - inet/filter/limit-1632 -m recent --name limit-1632 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-93 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-93 -j ACCEPT - inet/filter/logdrop-750 -m limit --limit 1/second -j LOG - inet/filter/logdrop-750 -j DROP - inet6/filter/FORWARD -j limit-1632 - inet6/filter/FORWARD -j logaccept-final-93 - inet6/filter/INPUT -j limit-1632 - inet6/filter/INPUT -j logaccept-final-93 - inet6/filter/OUTPUT -j limit-1632 - inet6/filter/OUTPUT -j logaccept-final-93 - inet6/filter/limit-1632 -m recent --name limit-1632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-750 - inet6/filter/limit-1632 -m recent --name limit-1632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-93 -j ACCEPT - inet6/filter/logdrop-750 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-750 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1791 + inet/filter/limit-1791 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1791 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1791 -j TEE --gateway 10.0.0.2 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1791 + inet6/filter/limit-1791 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1791 -j TEE --gateway fc00::2 -Filter 1634 {"action":"pass","flow-limit":{"interval":5},"log":"ulog"} +Filter 1793 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1633 - inet/filter/INPUT -j limit-1633 - inet/filter/OUTPUT -j limit-1633 - inet/filter/limit-1633 -m recent --name limit-1633 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-751 - inet/filter/limit-1633 -m recent --name limit-1633 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-751 -m limit --limit 1/second -j LOG - inet/filter/logdrop-751 -j DROP - inet6/filter/FORWARD -j limit-1633 - inet6/filter/INPUT -j limit-1633 - inet6/filter/OUTPUT -j limit-1633 - inet6/filter/limit-1633 -m recent --name limit-1633 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-751 - inet6/filter/logdrop-751 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-751 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1792 + inet/filter/limit-1792 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1792 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1792 + inet6/filter/limit-1792 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1792 -j ACCEPT -Filter 1635 {"flow-limit":{"interval":5,"name":"A"}} +Filter 1794 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1634 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1634 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1634 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-752 - inet/filter/limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-752 -m limit --limit 1/second -j LOG - inet/filter/logdrop-752 -j DROP - inet6/filter/FORWARD -j limit-1634 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1634 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1634 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-752 - inet6/filter/limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-752 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-752 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1636 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} +Filter 1795 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1635 - inet/filter/INPUT -j limit-1635 - inet/filter/OUTPUT -j limit-1635 - inet/filter/limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-753 - inet/filter/limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-753 -m limit --limit 1/second -j LOG - inet/filter/logdrop-753 -j DROP - inet6/filter/FORWARD -j limit-1635 - inet6/filter/INPUT -j limit-1635 - inet6/filter/OUTPUT -j limit-1635 - inet6/filter/limit-1635 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-753 - inet6/filter/limit-1635 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-753 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-753 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1794 + inet/filter/limit-1794 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1794 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1794 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1794 + inet6/filter/limit-1794 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1794 -j ACCEPT -Filter 1637 {"flow-limit":{"interval":5,"name":"A"},"log":true} +Filter 1796 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1636 - inet/filter/FORWARD -j logaccept-final-94 - inet/filter/INPUT -j limit-1636 - inet/filter/INPUT -j logaccept-final-94 - inet/filter/OUTPUT -j limit-1636 - inet/filter/OUTPUT -j logaccept-final-94 - inet/filter/limit-1636 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-754 - inet/filter/limit-1636 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-94 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-94 -j ACCEPT - inet/filter/logdrop-754 -m limit --limit 1/second -j LOG - inet/filter/logdrop-754 -j DROP - inet6/filter/FORWARD -j limit-1636 - inet6/filter/FORWARD -j logaccept-final-94 - inet6/filter/INPUT -j limit-1636 - inet6/filter/INPUT -j logaccept-final-94 - inet6/filter/OUTPUT -j limit-1636 - inet6/filter/OUTPUT -j logaccept-final-94 - inet6/filter/limit-1636 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-754 - inet6/filter/limit-1636 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-94 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-94 -j ACCEPT - inet6/filter/logdrop-754 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-754 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1795 + inet/filter/limit-1795 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1795 -m limit --limit 12/minute -j ULOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1795 + inet6/filter/limit-1795 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1638 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} +Filter 1797 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1637 - inet/filter/INPUT -j limit-1637 - inet/filter/OUTPUT -j limit-1637 - inet/filter/limit-1637 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-755 - inet/filter/limit-1637 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-755 -m limit --limit 1/second -j LOG - inet/filter/logdrop-755 -j DROP - inet6/filter/FORWARD -j limit-1637 - inet6/filter/INPUT -j limit-1637 - inet6/filter/OUTPUT -j limit-1637 - inet6/filter/limit-1637 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-755 - inet6/filter/limit-1637 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-755 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-755 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1796 + inet/filter/limit-1796 -m recent --name limit-1796 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1010 + inet/filter/limit-1796 -m recent --name limit-1796 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1010 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1010 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1796 + inet6/filter/limit-1796 -m recent --name limit-1796 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1010 + inet6/filter/limit-1796 -m recent --name limit-1796 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1010 -j DROP -Filter 1639 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} +Filter 1798 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1638 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1638 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1638 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1638 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-756 - inet/filter/limit-1638 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-756 -m limit --limit 1/second -j LOG - inet/filter/logdrop-756 -j DROP - inet6/filter/FORWARD -j limit-1638 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1638 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1638 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1638 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-756 - inet6/filter/limit-1638 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-756 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-756 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1797 + inet/filter/limit-1797 -m recent --name limit-1797 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1011 + inet/filter/limit-1797 -m recent --name limit-1797 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1011 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1011 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1797 + inet6/filter/limit-1797 -m recent --name limit-1797 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1011 + inet6/filter/limit-1797 -m recent --name limit-1797 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1011 -j DROP -Filter 1640 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} +Filter 1799 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1639 - inet/filter/INPUT -j limit-1639 - inet/filter/OUTPUT -j limit-1639 - inet/filter/limit-1639 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-757 - inet/filter/limit-1639 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-757 -m limit --limit 1/second -j LOG - inet/filter/logdrop-757 -j DROP - inet6/filter/FORWARD -j limit-1639 - inet6/filter/INPUT -j limit-1639 - inet6/filter/OUTPUT -j limit-1639 - inet6/filter/limit-1639 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-757 - inet6/filter/limit-1639 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-757 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-757 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1798 + inet/filter/limit-1798 -m recent --name limit-1798 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1012 + inet/filter/limit-1798 -m limit --limit 1/second -j LOG + inet/filter/limit-1798 -m recent --name limit-1798 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1012 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1012 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1798 + inet6/filter/limit-1798 -m recent --name limit-1798 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1012 + inet6/filter/limit-1798 -m limit --limit 1/second -j LOG + inet6/filter/limit-1798 -m recent --name limit-1798 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1012 -j DROP -Filter 1641 {"flow-limit":{"interval":5,"name":"A"},"log":"ulog"} +Filter 1800 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1640 - inet/filter/FORWARD -j logaccept-final-95 - inet/filter/INPUT -j limit-1640 - inet/filter/INPUT -j logaccept-final-95 - inet/filter/OUTPUT -j limit-1640 - inet/filter/OUTPUT -j logaccept-final-95 - inet/filter/limit-1640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-758 - inet/filter/limit-1640 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-95 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-95 -j ACCEPT - inet/filter/logdrop-758 -m limit --limit 1/second -j LOG - inet/filter/logdrop-758 -j DROP - inet6/filter/FORWARD -j limit-1640 - inet6/filter/FORWARD -j logaccept-final-95 - inet6/filter/INPUT -j limit-1640 - inet6/filter/INPUT -j logaccept-final-95 - inet6/filter/OUTPUT -j limit-1640 - inet6/filter/OUTPUT -j logaccept-final-95 - inet6/filter/limit-1640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-758 - inet6/filter/limit-1640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-95 -j ACCEPT - inet6/filter/logdrop-758 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-758 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1799 + inet/filter/limit-1799 -m recent --name limit-1799 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1013 + inet/filter/limit-1799 -m recent --name limit-1799 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1013 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1013 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1799 + inet6/filter/limit-1799 -m recent --name limit-1799 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1013 + inet6/filter/limit-1799 -m recent --name limit-1799 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1013 -j DROP -Filter 1642 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"ulog"} +Filter 1801 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1641 - inet/filter/INPUT -j limit-1641 - inet/filter/OUTPUT -j limit-1641 - inet/filter/limit-1641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-759 - inet/filter/limit-1641 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-759 -m limit --limit 1/second -j LOG - inet/filter/logdrop-759 -j DROP - inet6/filter/FORWARD -j limit-1641 - inet6/filter/INPUT -j limit-1641 - inet6/filter/OUTPUT -j limit-1641 - inet6/filter/limit-1641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-759 - inet6/filter/logdrop-759 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-759 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1800 + inet/filter/limit-1800 -m recent --name limit-1800 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1014 + inet/filter/limit-1800 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1800 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1800 -m recent --name limit-1800 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1014 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1014 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1800 + inet6/filter/limit-1800 -m recent --name limit-1800 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1014 + inet6/filter/limit-1800 -j TEE --gateway fc00::2 + inet6/filter/limit-1800 -m recent --name limit-1800 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1014 -j DROP -Filter 1643 {"flow-limit":{"interval":5,"name":"A","update":false}} +Filter 1802 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1642 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1642 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1642 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1642 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-760 - inet/filter/logdrop-760 -m limit --limit 1/second -j LOG - inet/filter/logdrop-760 -j DROP - inet6/filter/FORWARD -j limit-1642 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1642 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1642 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-760 - inet6/filter/logdrop-760 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-760 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1801 + inet/filter/limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1015 + inet/filter/limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1015 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1015 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1801 + inet6/filter/limit-1801 -m recent --name limit-1801 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1015 + inet6/filter/limit-1801 -m recent --name limit-1801 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1015 -j DROP -Filter 1644 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} +Filter 1803 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1643 - inet/filter/INPUT -j limit-1643 - inet/filter/OUTPUT -j limit-1643 - inet/filter/limit-1643 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-761 - inet/filter/logdrop-761 -m limit --limit 1/second -j LOG - inet/filter/logdrop-761 -j DROP - inet6/filter/FORWARD -j limit-1643 - inet6/filter/INPUT -j limit-1643 - inet6/filter/OUTPUT -j limit-1643 - inet6/filter/limit-1643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-761 - inet6/filter/logdrop-761 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-761 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1802 + inet/filter/limit-1802 -m recent --name limit-1802 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1016 + inet/filter/limit-1802 -m recent --name limit-1802 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1016 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1016 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1802 + inet6/filter/limit-1802 -m recent --name limit-1802 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1016 + inet6/filter/limit-1802 -m recent --name limit-1802 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1016 -j DROP -Filter 1645 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} +Filter 1804 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1644 - inet/filter/FORWARD -j logaccept-final-96 - inet/filter/INPUT -j limit-1644 - inet/filter/INPUT -j logaccept-final-96 - inet/filter/OUTPUT -j limit-1644 - inet/filter/OUTPUT -j logaccept-final-96 - inet/filter/limit-1644 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-762 - inet/filter/logaccept-final-96 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-96 -j ACCEPT - inet/filter/logdrop-762 -m limit --limit 1/second -j LOG - inet/filter/logdrop-762 -j DROP - inet6/filter/FORWARD -j limit-1644 - inet6/filter/FORWARD -j logaccept-final-96 - inet6/filter/INPUT -j limit-1644 - inet6/filter/INPUT -j logaccept-final-96 - inet6/filter/OUTPUT -j limit-1644 - inet6/filter/OUTPUT -j logaccept-final-96 - inet6/filter/limit-1644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-762 - inet6/filter/logaccept-final-96 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-96 -j ACCEPT - inet6/filter/logdrop-762 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-762 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1803 + inet/filter/limit-1803 -m recent --name limit-1803 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1017 + inet/filter/limit-1803 -m recent --name limit-1803 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1017 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1017 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1803 + inet6/filter/limit-1803 -m recent --name limit-1803 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1017 + inet6/filter/limit-1803 -m recent --name limit-1803 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1017 -j DROP -Filter 1646 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} +Filter 1805 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1645 - inet/filter/INPUT -j limit-1645 - inet/filter/OUTPUT -j limit-1645 - inet/filter/limit-1645 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-763 - inet/filter/limit-1645 -m limit --limit 1/second -j LOG - inet/filter/logdrop-763 -m limit --limit 1/second -j LOG - inet/filter/logdrop-763 -j DROP - inet6/filter/FORWARD -j limit-1645 - inet6/filter/INPUT -j limit-1645 - inet6/filter/OUTPUT -j limit-1645 - inet6/filter/limit-1645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-763 - inet6/filter/limit-1645 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-763 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-763 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1804 + inet/filter/limit-1804 -m recent --name limit-1804 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1018 + inet/filter/limit-1804 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1804 -m recent --name limit-1804 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1018 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1018 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1804 + inet6/filter/limit-1804 -m recent --name limit-1804 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1018 + inet6/filter/limit-1804 -m recent --name limit-1804 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1018 -j DROP -Filter 1647 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +Filter 1806 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1646 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1646 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1646 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-764 - inet/filter/logdrop-764 -m limit --limit 1/second -j LOG - inet/filter/logdrop-764 -j DROP - inet6/filter/FORWARD -j limit-1646 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1646 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1646 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-764 - inet6/filter/logdrop-764 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-764 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1805 + inet/filter/limit-1805 -m recent --name limit-1805 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1019 + inet/filter/limit-1805 -m recent --name limit-1805 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1019 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1019 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1805 + inet6/filter/limit-1805 -m recent --name limit-1805 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1019 + inet6/filter/logdrop-1019 -j DROP -Filter 1648 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +Filter 1807 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1647 - inet/filter/INPUT -j limit-1647 - inet/filter/OUTPUT -j limit-1647 - inet/filter/limit-1647 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-765 - inet/filter/logdrop-765 -m limit --limit 1/second -j LOG - inet/filter/logdrop-765 -j DROP - inet6/filter/FORWARD -j limit-1647 - inet6/filter/INPUT -j limit-1647 - inet6/filter/OUTPUT -j limit-1647 - inet6/filter/limit-1647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-765 - inet6/filter/logdrop-765 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-765 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1806 + inet/filter/limit-1806 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1020 + inet/filter/limit-1806 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1020 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1020 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1806 + inet6/filter/limit-1806 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1020 + inet6/filter/limit-1806 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1020 -j DROP -Filter 1649 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"ulog"} +Filter 1808 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1648 - inet/filter/FORWARD -j logaccept-final-97 - inet/filter/INPUT -j limit-1648 - inet/filter/INPUT -j logaccept-final-97 - inet/filter/OUTPUT -j limit-1648 - inet/filter/OUTPUT -j logaccept-final-97 - inet/filter/limit-1648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-766 - inet/filter/logaccept-final-97 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-97 -j ACCEPT - inet/filter/logdrop-766 -m limit --limit 1/second -j LOG - inet/filter/logdrop-766 -j DROP - inet6/filter/FORWARD -j limit-1648 - inet6/filter/FORWARD -j logaccept-final-97 - inet6/filter/INPUT -j limit-1648 - inet6/filter/INPUT -j logaccept-final-97 - inet6/filter/OUTPUT -j limit-1648 - inet6/filter/OUTPUT -j logaccept-final-97 - inet6/filter/limit-1648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-766 - inet6/filter/logaccept-final-97 -j ACCEPT - inet6/filter/logdrop-766 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-766 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1807 + inet/filter/limit-1807 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1021 + inet/filter/limit-1807 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1021 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1021 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1807 + inet6/filter/limit-1807 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1021 + inet6/filter/limit-1807 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1021 -j DROP -Filter 1650 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"ulog"} +Filter 1809 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1649 - inet/filter/INPUT -j limit-1649 - inet/filter/OUTPUT -j limit-1649 - inet/filter/limit-1649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-767 - inet/filter/limit-1649 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-767 -m limit --limit 1/second -j LOG - inet/filter/logdrop-767 -j DROP - inet6/filter/FORWARD -j limit-1649 - inet6/filter/INPUT -j limit-1649 - inet6/filter/OUTPUT -j limit-1649 - inet6/filter/limit-1649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-767 - inet6/filter/logdrop-767 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-767 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1808 + inet/filter/limit-1808 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1022 + inet/filter/limit-1808 -m limit --limit 1/second -j LOG + inet/filter/limit-1808 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1022 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1022 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1808 + inet6/filter/limit-1808 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1022 + inet6/filter/limit-1808 -m limit --limit 1/second -j LOG + inet6/filter/limit-1808 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1022 -j DROP -Filter 1651 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} +Filter 1810 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1650 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1650 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1650 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-768 - inet/filter/limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-768 -m limit --limit 1/second -j LOG - inet/filter/logdrop-768 -j DROP - inet6/filter/FORWARD -j limit-1650 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1650 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1650 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-768 - inet6/filter/limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-768 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-768 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1809 + inet/filter/limit-1809 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1023 + inet/filter/limit-1809 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1023 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1023 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1809 + inet6/filter/limit-1809 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1023 + inet6/filter/limit-1809 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1023 -j DROP -Filter 1652 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} +Filter 1811 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1651 - inet/filter/INPUT -j limit-1651 - inet/filter/OUTPUT -j limit-1651 - inet/filter/limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-769 - inet/filter/limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-769 -m limit --limit 1/second -j LOG - inet/filter/logdrop-769 -j DROP - inet6/filter/FORWARD -j limit-1651 - inet6/filter/INPUT -j limit-1651 - inet6/filter/OUTPUT -j limit-1651 - inet6/filter/limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-769 - inet6/filter/limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-769 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-769 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1810 + inet/filter/limit-1810 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1024 + inet/filter/limit-1810 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1810 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1810 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1024 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1024 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1810 + inet6/filter/limit-1810 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1024 + inet6/filter/limit-1810 -j TEE --gateway fc00::2 + inet6/filter/limit-1810 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1024 -j DROP -Filter 1653 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +Filter 1812 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1652 - inet/filter/FORWARD -j logaccept-final-98 - inet/filter/INPUT -j limit-1652 - inet/filter/INPUT -j logaccept-final-98 - inet/filter/OUTPUT -j limit-1652 - inet/filter/OUTPUT -j logaccept-final-98 - inet/filter/limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-770 - inet/filter/limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-98 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-98 -j ACCEPT - inet/filter/logdrop-770 -m limit --limit 1/second -j LOG - inet/filter/logdrop-770 -j DROP - inet6/filter/FORWARD -j limit-1652 - inet6/filter/FORWARD -j logaccept-final-98 - inet6/filter/INPUT -j limit-1652 - inet6/filter/INPUT -j logaccept-final-98 - inet6/filter/OUTPUT -j limit-1652 - inet6/filter/OUTPUT -j logaccept-final-98 - inet6/filter/limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-770 - inet6/filter/limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-98 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-98 -j ACCEPT - inet6/filter/logdrop-770 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-770 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1811 + inet/filter/limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1025 + inet/filter/limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1025 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1025 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1811 + inet6/filter/limit-1811 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1025 + inet6/filter/limit-1811 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1025 -j DROP -Filter 1654 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +Filter 1813 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1653 - inet/filter/INPUT -j limit-1653 - inet/filter/OUTPUT -j limit-1653 - inet/filter/limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-771 - inet/filter/limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-771 -m limit --limit 1/second -j LOG - inet/filter/logdrop-771 -j DROP - inet6/filter/FORWARD -j limit-1653 - inet6/filter/INPUT -j limit-1653 - inet6/filter/OUTPUT -j limit-1653 - inet6/filter/limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-771 - inet6/filter/limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-771 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-771 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1812 + inet/filter/limit-1812 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1026 + inet/filter/limit-1812 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1026 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1026 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1812 + inet6/filter/limit-1812 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1026 + inet6/filter/limit-1812 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1026 -j DROP -Filter 1655 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +Filter 1814 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1654 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1654 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1654 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-772 - inet/filter/limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-772 -m limit --limit 1/second -j LOG - inet/filter/logdrop-772 -j DROP - inet6/filter/FORWARD -j limit-1654 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1654 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1654 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-772 - inet6/filter/limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-772 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-772 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1813 + inet/filter/limit-1813 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1027 + inet/filter/limit-1813 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1027 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1027 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1813 + inet6/filter/limit-1813 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1027 + inet6/filter/limit-1813 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1027 -j DROP -Filter 1656 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +Filter 1815 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1655 - inet/filter/INPUT -j limit-1655 - inet/filter/OUTPUT -j limit-1655 - inet/filter/limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-773 - inet/filter/limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-773 -m limit --limit 1/second -j LOG - inet/filter/logdrop-773 -j DROP - inet6/filter/FORWARD -j limit-1655 - inet6/filter/INPUT -j limit-1655 - inet6/filter/OUTPUT -j limit-1655 - inet6/filter/limit-1655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-773 - inet6/filter/limit-1655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-773 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-773 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1814 + inet/filter/limit-1814 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1028 + inet/filter/limit-1814 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1814 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1028 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1028 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1814 + inet6/filter/limit-1814 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1028 + inet6/filter/limit-1814 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1028 -j DROP -Filter 1657 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog"} +Filter 1816 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1656 - inet/filter/FORWARD -j logaccept-final-99 - inet/filter/INPUT -j limit-1656 - inet/filter/INPUT -j logaccept-final-99 - inet/filter/OUTPUT -j limit-1656 - inet/filter/OUTPUT -j logaccept-final-99 - inet/filter/limit-1656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-774 - inet/filter/limit-1656 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-99 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-99 -j ACCEPT - inet/filter/logdrop-774 -m limit --limit 1/second -j LOG - inet/filter/logdrop-774 -j DROP - inet6/filter/FORWARD -j limit-1656 - inet6/filter/FORWARD -j logaccept-final-99 - inet6/filter/INPUT -j limit-1656 - inet6/filter/INPUT -j logaccept-final-99 - inet6/filter/OUTPUT -j limit-1656 - inet6/filter/OUTPUT -j logaccept-final-99 - inet6/filter/limit-1656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-774 - inet6/filter/limit-1656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-99 -j ACCEPT - inet6/filter/logdrop-774 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-774 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1815 + inet/filter/limit-1815 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1029 + inet/filter/limit-1815 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1029 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1029 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1815 + inet6/filter/limit-1815 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1029 + inet6/filter/logdrop-1029 -j DROP -Filter 1658 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog"} +Filter 1817 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1657 - inet/filter/INPUT -j limit-1657 - inet/filter/OUTPUT -j limit-1657 - inet/filter/limit-1657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-775 - inet/filter/limit-1657 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-775 -m limit --limit 1/second -j LOG - inet/filter/logdrop-775 -j DROP - inet6/filter/FORWARD -j limit-1657 - inet6/filter/INPUT -j limit-1657 - inet6/filter/OUTPUT -j limit-1657 - inet6/filter/limit-1657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-775 - inet6/filter/logdrop-775 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-775 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1816 + inet/filter/limit-1816 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1030 + inet/filter/limit-1816 -j ACCEPT + inet/filter/logdrop-1030 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1030 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1816 + inet6/filter/limit-1816 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1030 + inet6/filter/limit-1816 -j ACCEPT + inet6/filter/logdrop-1030 -j DROP -Filter 1659 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +Filter 1818 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1658 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1658 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1658 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-776 - inet/filter/logdrop-776 -m limit --limit 1/second -j LOG - inet/filter/logdrop-776 -j DROP - inet6/filter/FORWARD -j limit-1658 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1658 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1658 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-776 - inet6/filter/logdrop-776 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-776 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1031 + inet/filter/logdrop-1031 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1031 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1031 + inet6/filter/logdrop-1031 -j DROP -Filter 1660 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +Filter 1819 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1659 - inet/filter/INPUT -j limit-1659 - inet/filter/OUTPUT -j limit-1659 - inet/filter/limit-1659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-777 - inet/filter/logdrop-777 -m limit --limit 1/second -j LOG - inet/filter/logdrop-777 -j DROP - inet6/filter/FORWARD -j limit-1659 - inet6/filter/INPUT -j limit-1659 - inet6/filter/OUTPUT -j limit-1659 - inet6/filter/limit-1659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-777 - inet6/filter/logdrop-777 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-777 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1818 + inet/filter/limit-1818 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1032 + inet/filter/limit-1818 -m limit --limit 1/second -j LOG + inet/filter/limit-1818 -j ACCEPT + inet/filter/logdrop-1032 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1032 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1818 + inet6/filter/limit-1818 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1032 + inet6/filter/limit-1818 -m limit --limit 1/second -j LOG + inet6/filter/limit-1818 -j ACCEPT + inet6/filter/logdrop-1032 -j DROP -Filter 1661 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +Filter 1820 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1660 - inet/filter/FORWARD -j logaccept-final-100 - inet/filter/INPUT -j limit-1660 - inet/filter/INPUT -j logaccept-final-100 - inet/filter/OUTPUT -j limit-1660 - inet/filter/OUTPUT -j logaccept-final-100 - inet/filter/limit-1660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-778 - inet/filter/logaccept-final-100 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-100 -j ACCEPT - inet/filter/logdrop-778 -m limit --limit 1/second -j LOG - inet/filter/logdrop-778 -j DROP - inet6/filter/FORWARD -j limit-1660 - inet6/filter/FORWARD -j logaccept-final-100 - inet6/filter/INPUT -j limit-1660 - inet6/filter/INPUT -j logaccept-final-100 - inet6/filter/OUTPUT -j limit-1660 - inet6/filter/OUTPUT -j logaccept-final-100 - inet6/filter/limit-1660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-778 - inet6/filter/logaccept-final-100 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-100 -j ACCEPT - inet6/filter/logdrop-778 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-778 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1819 + inet/filter/limit-1819 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1033 + inet/filter/limit-1819 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1033 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1033 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1819 + inet6/filter/limit-1819 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1033 + inet6/filter/limit-1819 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1033 -j DROP -Filter 1662 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +Filter 1821 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1661 - inet/filter/INPUT -j limit-1661 - inet/filter/OUTPUT -j limit-1661 - inet/filter/limit-1661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-779 - inet/filter/limit-1661 -m limit --limit 1/second -j LOG - inet/filter/logdrop-779 -m limit --limit 1/second -j LOG - inet/filter/logdrop-779 -j DROP - inet6/filter/FORWARD -j limit-1661 - inet6/filter/INPUT -j limit-1661 - inet6/filter/OUTPUT -j limit-1661 - inet6/filter/limit-1661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-779 - inet6/filter/limit-1661 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-779 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-779 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1820 + inet/filter/limit-1820 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1034 + inet/filter/limit-1820 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1820 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1820 -j ACCEPT + inet/filter/logdrop-1034 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1034 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1820 + inet6/filter/limit-1820 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1034 + inet6/filter/limit-1820 -j TEE --gateway fc00::2 + inet6/filter/limit-1820 -j ACCEPT + inet6/filter/logdrop-1034 -j DROP -Filter 1663 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +Filter 1822 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1662 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1662 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1662 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-780 - inet/filter/logdrop-780 -m limit --limit 1/second -j LOG - inet/filter/logdrop-780 -j DROP - inet6/filter/FORWARD -j limit-1662 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1662 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1662 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-780 - inet6/filter/logdrop-780 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-780 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1821 + inet/filter/limit-1821 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1035 + inet/filter/limit-1821 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1821 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1035 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1035 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1821 + inet6/filter/limit-1821 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1035 + inet6/filter/limit-1821 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1035 -j DROP -Filter 1664 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +Filter 1823 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1663 - inet/filter/INPUT -j limit-1663 - inet/filter/OUTPUT -j limit-1663 - inet/filter/limit-1663 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-781 - inet/filter/logdrop-781 -m limit --limit 1/second -j LOG - inet/filter/logdrop-781 -j DROP - inet6/filter/FORWARD -j limit-1663 - inet6/filter/INPUT -j limit-1663 - inet6/filter/OUTPUT -j limit-1663 - inet6/filter/limit-1663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-781 - inet6/filter/logdrop-781 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-781 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1822 + inet/filter/limit-1822 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1036 + inet/filter/limit-1822 -j ACCEPT + inet/filter/logdrop-1036 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1036 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1822 + inet6/filter/limit-1822 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1036 + inet6/filter/limit-1822 -j ACCEPT + inet6/filter/logdrop-1036 -j DROP -Filter 1665 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog"} +Filter 1824 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1664 - inet/filter/FORWARD -j logaccept-final-101 - inet/filter/INPUT -j limit-1664 - inet/filter/INPUT -j logaccept-final-101 - inet/filter/OUTPUT -j limit-1664 - inet/filter/OUTPUT -j logaccept-final-101 - inet/filter/limit-1664 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-782 - inet/filter/logaccept-final-101 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-101 -j ACCEPT - inet/filter/logdrop-782 -m limit --limit 1/second -j LOG - inet/filter/logdrop-782 -j DROP - inet6/filter/FORWARD -j limit-1664 - inet6/filter/FORWARD -j logaccept-final-101 - inet6/filter/INPUT -j limit-1664 - inet6/filter/INPUT -j logaccept-final-101 - inet6/filter/OUTPUT -j limit-1664 - inet6/filter/OUTPUT -j logaccept-final-101 - inet6/filter/limit-1664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-782 - inet6/filter/logaccept-final-101 -j ACCEPT - inet6/filter/logdrop-782 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-782 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1037 + inet/filter/logdrop-1037 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1037 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1037 + inet6/filter/logdrop-1037 -j DROP -Filter 1666 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog"} +Filter 1825 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1665 - inet/filter/INPUT -j limit-1665 - inet/filter/OUTPUT -j limit-1665 - inet/filter/limit-1665 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-783 - inet/filter/limit-1665 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-783 -m limit --limit 1/second -j LOG - inet/filter/logdrop-783 -j DROP - inet6/filter/FORWARD -j limit-1665 - inet6/filter/INPUT -j limit-1665 - inet6/filter/OUTPUT -j limit-1665 - inet6/filter/limit-1665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-783 - inet6/filter/logdrop-783 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-783 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1824 + inet/filter/limit-1824 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1038 + inet/filter/limit-1824 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1824 -j ACCEPT + inet/filter/logdrop-1038 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1038 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1824 + inet6/filter/limit-1824 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1038 + inet6/filter/limit-1824 -j ACCEPT + inet6/filter/logdrop-1038 -j DROP -Filter 1667 {"flow-limit":{"interval":5,"name":"C"}} +Filter 1826 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1666 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1666 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1666 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-784 - inet/filter/limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-784 -m limit --limit 1/second -j LOG - inet/filter/logdrop-784 -j DROP - inet6/filter/FORWARD -j limit-1666 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1666 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1666 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-784 - inet6/filter/limit-1666 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-784 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-784 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1825 + inet/filter/limit-1825 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1039 + inet/filter/limit-1825 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1039 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1039 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1825 + inet6/filter/limit-1825 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1039 + inet6/filter/logdrop-1039 -j DROP -Filter 1668 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} +Filter 1827 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1667 - inet/filter/INPUT -j limit-1667 - inet/filter/OUTPUT -j limit-1667 - inet/filter/limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-785 - inet/filter/limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-785 -m limit --limit 1/second -j LOG - inet/filter/logdrop-785 -j DROP - inet6/filter/FORWARD -j limit-1667 - inet6/filter/INPUT -j limit-1667 - inet6/filter/OUTPUT -j limit-1667 - inet6/filter/limit-1667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-785 - inet6/filter/limit-1667 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-785 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-785 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1826 + inet/filter/limit-1826 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1040 + inet/filter/limit-1826 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1040 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1040 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1826 + inet6/filter/limit-1826 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1040 + inet6/filter/limit-1826 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1040 -j DROP -Filter 1669 {"flow-limit":{"interval":5,"name":"C"},"log":true} +Filter 1828 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1668 - inet/filter/FORWARD -j logaccept-final-102 - inet/filter/INPUT -j limit-1668 - inet/filter/INPUT -j logaccept-final-102 - inet/filter/OUTPUT -j limit-1668 - inet/filter/OUTPUT -j logaccept-final-102 - inet/filter/limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-786 - inet/filter/limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-102 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-102 -j ACCEPT - inet/filter/logdrop-786 -m limit --limit 1/second -j LOG - inet/filter/logdrop-786 -j DROP - inet6/filter/FORWARD -j limit-1668 - inet6/filter/FORWARD -j logaccept-final-102 - inet6/filter/INPUT -j limit-1668 - inet6/filter/INPUT -j logaccept-final-102 - inet6/filter/OUTPUT -j limit-1668 - inet6/filter/OUTPUT -j logaccept-final-102 - inet6/filter/limit-1668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-786 - inet6/filter/limit-1668 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-102 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-102 -j ACCEPT - inet6/filter/logdrop-786 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-786 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1827 + inet/filter/limit-1827 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1041 + inet/filter/limit-1827 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1041 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1041 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1827 + inet6/filter/limit-1827 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1041 + inet6/filter/limit-1827 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1041 -j DROP -Filter 1670 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} +Filter 1829 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1669 - inet/filter/INPUT -j limit-1669 - inet/filter/OUTPUT -j limit-1669 - inet/filter/limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-787 - inet/filter/limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-787 -m limit --limit 1/second -j LOG - inet/filter/logdrop-787 -j DROP - inet6/filter/FORWARD -j limit-1669 - inet6/filter/INPUT -j limit-1669 - inet6/filter/OUTPUT -j limit-1669 - inet6/filter/limit-1669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-787 - inet6/filter/limit-1669 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-787 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-787 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1828 + inet/filter/limit-1828 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1042 + inet/filter/limit-1828 -m limit --limit 1/second -j LOG + inet/filter/limit-1828 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1042 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1042 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1828 + inet6/filter/limit-1828 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1042 + inet6/filter/limit-1828 -m limit --limit 1/second -j LOG + inet6/filter/limit-1828 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1042 -j DROP -Filter 1671 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} +Filter 1830 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1670 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1670 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1670 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-788 - inet/filter/limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-788 -m limit --limit 1/second -j LOG - inet/filter/logdrop-788 -j DROP - inet6/filter/FORWARD -j limit-1670 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1670 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1670 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1670 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-788 - inet6/filter/limit-1670 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-788 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-788 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1829 + inet/filter/limit-1829 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1043 + inet/filter/limit-1829 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1043 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1043 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1829 + inet6/filter/limit-1829 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1043 + inet6/filter/limit-1829 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1043 -j DROP -Filter 1672 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} +Filter 1831 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1671 - inet/filter/INPUT -j limit-1671 - inet/filter/OUTPUT -j limit-1671 - inet/filter/limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-789 - inet/filter/limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-789 -m limit --limit 1/second -j LOG - inet/filter/logdrop-789 -j DROP - inet6/filter/FORWARD -j limit-1671 - inet6/filter/INPUT -j limit-1671 - inet6/filter/OUTPUT -j limit-1671 - inet6/filter/limit-1671 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-789 - inet6/filter/limit-1671 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-789 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-789 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1830 + inet/filter/limit-1830 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1044 + inet/filter/limit-1830 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1830 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1830 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1044 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1044 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1830 + inet6/filter/limit-1830 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1044 + inet6/filter/limit-1830 -j TEE --gateway fc00::2 + inet6/filter/limit-1830 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1044 -j DROP -Filter 1673 {"flow-limit":{"interval":5,"name":"C"},"log":"ulog"} +Filter 1832 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1672 - inet/filter/FORWARD -j logaccept-final-103 - inet/filter/INPUT -j limit-1672 - inet/filter/INPUT -j logaccept-final-103 - inet/filter/OUTPUT -j limit-1672 - inet/filter/OUTPUT -j logaccept-final-103 - inet/filter/limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-790 - inet/filter/limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-103 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-103 -j ACCEPT - inet/filter/logdrop-790 -m limit --limit 1/second -j LOG - inet/filter/logdrop-790 -j DROP - inet6/filter/FORWARD -j limit-1672 - inet6/filter/FORWARD -j logaccept-final-103 - inet6/filter/INPUT -j limit-1672 - inet6/filter/INPUT -j logaccept-final-103 - inet6/filter/OUTPUT -j limit-1672 - inet6/filter/OUTPUT -j logaccept-final-103 - inet6/filter/limit-1672 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-790 - inet6/filter/limit-1672 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-103 -j ACCEPT - inet6/filter/logdrop-790 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-790 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1831 + inet/filter/limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1045 + inet/filter/limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1045 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1045 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1831 + inet6/filter/limit-1831 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1045 + inet6/filter/limit-1831 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1045 -j DROP -Filter 1674 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"ulog"} +Filter 1833 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1673 - inet/filter/INPUT -j limit-1673 - inet/filter/OUTPUT -j limit-1673 - inet/filter/limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-791 - inet/filter/limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-791 -m limit --limit 1/second -j LOG - inet/filter/logdrop-791 -j DROP - inet6/filter/FORWARD -j limit-1673 - inet6/filter/INPUT -j limit-1673 - inet6/filter/OUTPUT -j limit-1673 - inet6/filter/limit-1673 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-791 - inet6/filter/logdrop-791 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-791 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1832 + inet/filter/limit-1832 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1046 + inet/filter/limit-1832 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1046 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1046 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1832 + inet6/filter/limit-1832 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1046 + inet6/filter/limit-1832 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1046 -j DROP -Filter 1675 {"flow-limit":{"interval":5,"name":"C","update":false}} +Filter 1834 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1674 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1674 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1674 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-792 - inet/filter/logdrop-792 -m limit --limit 1/second -j LOG - inet/filter/logdrop-792 -j DROP - inet6/filter/FORWARD -j limit-1674 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1674 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1674 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-792 - inet6/filter/logdrop-792 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-792 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1833 + inet/filter/limit-1833 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1047 + inet/filter/limit-1833 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1047 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1047 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1833 + inet6/filter/limit-1833 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1047 + inet6/filter/limit-1833 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1047 -j DROP -Filter 1676 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} +Filter 1835 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1675 - inet/filter/INPUT -j limit-1675 - inet/filter/OUTPUT -j limit-1675 - inet/filter/limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-793 - inet/filter/logdrop-793 -m limit --limit 1/second -j LOG - inet/filter/logdrop-793 -j DROP - inet6/filter/FORWARD -j limit-1675 - inet6/filter/INPUT -j limit-1675 - inet6/filter/OUTPUT -j limit-1675 - inet6/filter/limit-1675 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-793 - inet6/filter/logdrop-793 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-793 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1834 + inet/filter/limit-1834 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1048 + inet/filter/limit-1834 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1834 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1048 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1048 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1834 + inet6/filter/limit-1834 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1048 + inet6/filter/limit-1834 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1048 -j DROP -Filter 1677 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} +Filter 1836 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1676 - inet/filter/FORWARD -j logaccept-final-104 - inet/filter/INPUT -j limit-1676 - inet/filter/INPUT -j logaccept-final-104 - inet/filter/OUTPUT -j limit-1676 - inet/filter/OUTPUT -j logaccept-final-104 - inet/filter/limit-1676 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-794 - inet/filter/logaccept-final-104 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-104 -j ACCEPT - inet/filter/logdrop-794 -m limit --limit 1/second -j LOG - inet/filter/logdrop-794 -j DROP - inet6/filter/FORWARD -j limit-1676 - inet6/filter/FORWARD -j logaccept-final-104 - inet6/filter/INPUT -j limit-1676 - inet6/filter/INPUT -j logaccept-final-104 - inet6/filter/OUTPUT -j limit-1676 - inet6/filter/OUTPUT -j logaccept-final-104 - inet6/filter/limit-1676 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-794 - inet6/filter/logaccept-final-104 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-104 -j ACCEPT - inet6/filter/logdrop-794 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-794 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1835 + inet/filter/limit-1835 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1049 + inet/filter/limit-1835 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1049 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1049 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1835 + inet6/filter/limit-1835 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1049 + inet6/filter/logdrop-1049 -j DROP -Filter 1678 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} +Filter 1837 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1677 - inet/filter/INPUT -j limit-1677 - inet/filter/OUTPUT -j limit-1677 - inet/filter/limit-1677 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-795 - inet/filter/limit-1677 -m limit --limit 1/second -j LOG - inet/filter/logdrop-795 -m limit --limit 1/second -j LOG - inet/filter/logdrop-795 -j DROP - inet6/filter/FORWARD -j limit-1677 - inet6/filter/INPUT -j limit-1677 - inet6/filter/OUTPUT -j limit-1677 - inet6/filter/limit-1677 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-795 - inet6/filter/limit-1677 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-795 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-795 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1836 + inet/filter/limit-1836 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1050 + inet/filter/limit-1836 -j ACCEPT + inet/filter/logdrop-1050 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1050 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1836 + inet6/filter/limit-1836 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1050 + inet6/filter/limit-1836 -j ACCEPT + inet6/filter/logdrop-1050 -j DROP -Filter 1679 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +Filter 1838 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1678 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1678 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1678 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1678 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-796 - inet/filter/logdrop-796 -m limit --limit 1/second -j LOG - inet/filter/logdrop-796 -j DROP - inet6/filter/FORWARD -j limit-1678 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1678 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1678 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1678 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-796 - inet6/filter/logdrop-796 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-796 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1051 + inet/filter/logdrop-1051 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1051 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1051 + inet6/filter/logdrop-1051 -j DROP -Filter 1680 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +Filter 1839 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1679 - inet/filter/INPUT -j limit-1679 - inet/filter/OUTPUT -j limit-1679 - inet/filter/limit-1679 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-797 - inet/filter/logdrop-797 -m limit --limit 1/second -j LOG - inet/filter/logdrop-797 -j DROP - inet6/filter/FORWARD -j limit-1679 - inet6/filter/INPUT -j limit-1679 - inet6/filter/OUTPUT -j limit-1679 - inet6/filter/limit-1679 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-797 - inet6/filter/logdrop-797 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-797 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1838 + inet/filter/limit-1838 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1052 + inet/filter/limit-1838 -m limit --limit 1/second -j LOG + inet/filter/limit-1838 -j ACCEPT + inet/filter/logdrop-1052 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1052 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1838 + inet6/filter/limit-1838 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1052 + inet6/filter/limit-1838 -m limit --limit 1/second -j LOG + inet6/filter/limit-1838 -j ACCEPT + inet6/filter/logdrop-1052 -j DROP -Filter 1681 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"ulog"} +Filter 1840 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1680 - inet/filter/FORWARD -j logaccept-final-105 - inet/filter/INPUT -j limit-1680 - inet/filter/INPUT -j logaccept-final-105 - inet/filter/OUTPUT -j limit-1680 - inet/filter/OUTPUT -j logaccept-final-105 - inet/filter/limit-1680 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-798 - inet/filter/logaccept-final-105 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-105 -j ACCEPT - inet/filter/logdrop-798 -m limit --limit 1/second -j LOG - inet/filter/logdrop-798 -j DROP - inet6/filter/FORWARD -j limit-1680 - inet6/filter/FORWARD -j logaccept-final-105 - inet6/filter/INPUT -j limit-1680 - inet6/filter/INPUT -j logaccept-final-105 - inet6/filter/OUTPUT -j limit-1680 - inet6/filter/OUTPUT -j logaccept-final-105 - inet6/filter/limit-1680 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-798 - inet6/filter/logaccept-final-105 -j ACCEPT - inet6/filter/logdrop-798 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-798 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1839 + inet/filter/limit-1839 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1053 + inet/filter/limit-1839 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1053 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1053 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1839 + inet6/filter/limit-1839 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1053 + inet6/filter/limit-1839 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1053 -j DROP -Filter 1682 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"ulog"} +Filter 1841 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1681 - inet/filter/INPUT -j limit-1681 - inet/filter/OUTPUT -j limit-1681 - inet/filter/limit-1681 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-799 - inet/filter/limit-1681 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-799 -m limit --limit 1/second -j LOG - inet/filter/logdrop-799 -j DROP - inet6/filter/FORWARD -j limit-1681 - inet6/filter/INPUT -j limit-1681 - inet6/filter/OUTPUT -j limit-1681 - inet6/filter/limit-1681 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-799 - inet6/filter/logdrop-799 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-799 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1840 + inet/filter/limit-1840 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1054 + inet/filter/limit-1840 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1840 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1840 -j ACCEPT + inet/filter/logdrop-1054 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1054 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1840 + inet6/filter/limit-1840 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1054 + inet6/filter/limit-1840 -j TEE --gateway fc00::2 + inet6/filter/limit-1840 -j ACCEPT + inet6/filter/logdrop-1054 -j DROP -Filter 1683 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} +Filter 1842 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1682 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1682 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1682 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1682 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-800 - inet/filter/limit-1682 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-800 -m limit --limit 1/second -j LOG - inet/filter/logdrop-800 -j DROP - inet6/filter/FORWARD -j limit-1682 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1682 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1682 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1682 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-800 - inet6/filter/limit-1682 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-800 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-800 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1841 + inet/filter/limit-1841 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1055 + inet/filter/limit-1841 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1841 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1055 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1055 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1841 + inet6/filter/limit-1841 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1055 + inet6/filter/limit-1841 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1055 -j DROP -Filter 1684 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} +Filter 1843 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1683 - inet/filter/INPUT -j limit-1683 - inet/filter/OUTPUT -j limit-1683 - inet/filter/limit-1683 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-801 - inet/filter/limit-1683 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-801 -m limit --limit 1/second -j LOG - inet/filter/logdrop-801 -j DROP - inet6/filter/FORWARD -j limit-1683 - inet6/filter/INPUT -j limit-1683 - inet6/filter/OUTPUT -j limit-1683 - inet6/filter/limit-1683 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-801 - inet6/filter/limit-1683 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-801 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-801 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1842 + inet/filter/limit-1842 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 + inet/filter/limit-1842 -j ACCEPT + inet/filter/logdrop-1056 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1056 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1842 + inet6/filter/limit-1842 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 + inet6/filter/limit-1842 -j ACCEPT + inet6/filter/logdrop-1056 -j DROP -Filter 1685 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +Filter 1844 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1684 - inet/filter/FORWARD -j logaccept-final-106 - inet/filter/INPUT -j limit-1684 - inet/filter/INPUT -j logaccept-final-106 - inet/filter/OUTPUT -j limit-1684 - inet/filter/OUTPUT -j logaccept-final-106 - inet/filter/limit-1684 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-802 - inet/filter/limit-1684 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-106 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-106 -j ACCEPT - inet/filter/logdrop-802 -m limit --limit 1/second -j LOG - inet/filter/logdrop-802 -j DROP - inet6/filter/FORWARD -j limit-1684 - inet6/filter/FORWARD -j logaccept-final-106 - inet6/filter/INPUT -j limit-1684 - inet6/filter/INPUT -j logaccept-final-106 - inet6/filter/OUTPUT -j limit-1684 - inet6/filter/OUTPUT -j logaccept-final-106 - inet6/filter/limit-1684 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-802 - inet6/filter/limit-1684 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-106 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-106 -j ACCEPT - inet6/filter/logdrop-802 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-802 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 + inet/filter/logdrop-1057 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1057 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 + inet6/filter/logdrop-1057 -j DROP -Filter 1686 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +Filter 1845 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1685 - inet/filter/INPUT -j limit-1685 - inet/filter/OUTPUT -j limit-1685 - inet/filter/limit-1685 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-803 - inet/filter/limit-1685 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-803 -m limit --limit 1/second -j LOG - inet/filter/logdrop-803 -j DROP - inet6/filter/FORWARD -j limit-1685 - inet6/filter/INPUT -j limit-1685 - inet6/filter/OUTPUT -j limit-1685 - inet6/filter/limit-1685 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-803 - inet6/filter/limit-1685 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-803 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-803 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1844 + inet/filter/limit-1844 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 + inet/filter/limit-1844 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1844 -j ACCEPT + inet/filter/logdrop-1058 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1058 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1844 + inet6/filter/limit-1844 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 + inet6/filter/limit-1844 -j ACCEPT + inet6/filter/logdrop-1058 -j DROP -Filter 1687 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +Filter 1846 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1686 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1686 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1686 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-804 - inet/filter/limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-804 -m limit --limit 1/second -j LOG - inet/filter/logdrop-804 -j DROP - inet6/filter/FORWARD -j limit-1686 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1686 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1686 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1686 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-804 - inet6/filter/limit-1686 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-804 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-804 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1845 + inet/filter/limit-1845 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 + inet/filter/limit-1845 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1059 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1059 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1845 + inet6/filter/limit-1845 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 + inet6/filter/logdrop-1059 -j DROP -Filter 1688 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +Filter 1847 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1687 - inet/filter/INPUT -j limit-1687 - inet/filter/OUTPUT -j limit-1687 - inet/filter/limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-805 - inet/filter/limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-805 -m limit --limit 1/second -j LOG - inet/filter/logdrop-805 -j DROP - inet6/filter/FORWARD -j limit-1687 - inet6/filter/INPUT -j limit-1687 - inet6/filter/OUTPUT -j limit-1687 - inet6/filter/limit-1687 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-805 - inet6/filter/limit-1687 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-805 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-805 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1846 + inet/filter/limit-1846 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1060 + inet/filter/limit-1846 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1060 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1060 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1846 + inet6/filter/limit-1846 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1060 + inet6/filter/limit-1846 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1060 -j DROP -Filter 1689 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog"} +Filter 1848 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1688 - inet/filter/FORWARD -j logaccept-final-107 - inet/filter/INPUT -j limit-1688 - inet/filter/INPUT -j logaccept-final-107 - inet/filter/OUTPUT -j limit-1688 - inet/filter/OUTPUT -j logaccept-final-107 - inet/filter/limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-806 - inet/filter/limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-107 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-107 -j ACCEPT - inet/filter/logdrop-806 -m limit --limit 1/second -j LOG - inet/filter/logdrop-806 -j DROP - inet6/filter/FORWARD -j limit-1688 - inet6/filter/FORWARD -j logaccept-final-107 - inet6/filter/INPUT -j limit-1688 - inet6/filter/INPUT -j logaccept-final-107 - inet6/filter/OUTPUT -j limit-1688 - inet6/filter/OUTPUT -j logaccept-final-107 - inet6/filter/limit-1688 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-806 - inet6/filter/limit-1688 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-107 -j ACCEPT - inet6/filter/logdrop-806 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-806 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1847 + inet/filter/limit-1847 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1061 + inet/filter/limit-1847 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1061 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1061 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1847 + inet6/filter/limit-1847 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1061 + inet6/filter/limit-1847 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1061 -j DROP -Filter 1690 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog"} +Filter 1849 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1689 - inet/filter/INPUT -j limit-1689 - inet/filter/OUTPUT -j limit-1689 - inet/filter/limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-807 - inet/filter/limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-807 -m limit --limit 1/second -j LOG - inet/filter/logdrop-807 -j DROP - inet6/filter/FORWARD -j limit-1689 - inet6/filter/INPUT -j limit-1689 - inet6/filter/OUTPUT -j limit-1689 - inet6/filter/limit-1689 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-807 - inet6/filter/logdrop-807 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-807 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1848 + inet/filter/limit-1848 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1062 + inet/filter/limit-1848 -m limit --limit 1/second -j LOG + inet/filter/limit-1848 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1062 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1062 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1848 + inet6/filter/limit-1848 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1062 + inet6/filter/limit-1848 -m limit --limit 1/second -j LOG + inet6/filter/limit-1848 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1062 -j DROP -Filter 1691 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +Filter 1850 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1690 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1690 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1690 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-808 - inet/filter/logdrop-808 -m limit --limit 1/second -j LOG - inet/filter/logdrop-808 -j DROP - inet6/filter/FORWARD -j limit-1690 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1690 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1690 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1690 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-808 - inet6/filter/logdrop-808 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-808 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1849 + inet/filter/limit-1849 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1063 + inet/filter/limit-1849 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1063 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1063 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1849 + inet6/filter/limit-1849 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1063 + inet6/filter/limit-1849 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1063 -j DROP -Filter 1692 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +Filter 1851 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1691 - inet/filter/INPUT -j limit-1691 - inet/filter/OUTPUT -j limit-1691 - inet/filter/limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-809 - inet/filter/logdrop-809 -m limit --limit 1/second -j LOG - inet/filter/logdrop-809 -j DROP - inet6/filter/FORWARD -j limit-1691 - inet6/filter/INPUT -j limit-1691 - inet6/filter/OUTPUT -j limit-1691 - inet6/filter/limit-1691 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-809 - inet6/filter/logdrop-809 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-809 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1850 + inet/filter/limit-1850 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1064 + inet/filter/limit-1850 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1850 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1850 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1064 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1064 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1850 + inet6/filter/limit-1850 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1064 + inet6/filter/limit-1850 -j TEE --gateway fc00::2 + inet6/filter/limit-1850 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1064 -j DROP -Filter 1693 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +Filter 1852 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1692 - inet/filter/FORWARD -j logaccept-final-108 - inet/filter/INPUT -j limit-1692 - inet/filter/INPUT -j logaccept-final-108 - inet/filter/OUTPUT -j limit-1692 - inet/filter/OUTPUT -j logaccept-final-108 - inet/filter/limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-810 - inet/filter/logaccept-final-108 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-108 -j ACCEPT - inet/filter/logdrop-810 -m limit --limit 1/second -j LOG - inet/filter/logdrop-810 -j DROP - inet6/filter/FORWARD -j limit-1692 - inet6/filter/FORWARD -j logaccept-final-108 - inet6/filter/INPUT -j limit-1692 - inet6/filter/INPUT -j logaccept-final-108 - inet6/filter/OUTPUT -j limit-1692 - inet6/filter/OUTPUT -j logaccept-final-108 - inet6/filter/limit-1692 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-810 - inet6/filter/logaccept-final-108 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-108 -j ACCEPT - inet6/filter/logdrop-810 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-810 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1851 + inet/filter/limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1065 + inet/filter/limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1065 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1065 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1851 + inet6/filter/limit-1851 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1065 + inet6/filter/limit-1851 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1065 -j DROP -Filter 1694 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +Filter 1853 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1693 - inet/filter/INPUT -j limit-1693 - inet/filter/OUTPUT -j limit-1693 - inet/filter/limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-811 - inet/filter/limit-1693 -m limit --limit 1/second -j LOG - inet/filter/logdrop-811 -m limit --limit 1/second -j LOG - inet/filter/logdrop-811 -j DROP - inet6/filter/FORWARD -j limit-1693 - inet6/filter/INPUT -j limit-1693 - inet6/filter/OUTPUT -j limit-1693 - inet6/filter/limit-1693 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-811 - inet6/filter/limit-1693 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-811 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-811 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1852 + inet/filter/limit-1852 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1066 + inet/filter/limit-1852 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1066 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1066 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1852 + inet6/filter/limit-1852 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1066 + inet6/filter/limit-1852 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1066 -j DROP -Filter 1695 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +Filter 1854 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1694 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1694 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1694 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-812 - inet/filter/logdrop-812 -m limit --limit 1/second -j LOG - inet/filter/logdrop-812 -j DROP - inet6/filter/FORWARD -j limit-1694 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1694 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1694 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1694 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-812 - inet6/filter/logdrop-812 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-812 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1853 + inet/filter/limit-1853 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1067 + inet/filter/limit-1853 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1067 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1067 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1853 + inet6/filter/limit-1853 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1067 + inet6/filter/limit-1853 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1067 -j DROP -Filter 1696 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +Filter 1855 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1695 - inet/filter/INPUT -j limit-1695 - inet/filter/OUTPUT -j limit-1695 - inet/filter/limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-813 - inet/filter/logdrop-813 -m limit --limit 1/second -j LOG - inet/filter/logdrop-813 -j DROP - inet6/filter/FORWARD -j limit-1695 - inet6/filter/INPUT -j limit-1695 - inet6/filter/OUTPUT -j limit-1695 - inet6/filter/limit-1695 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-813 - inet6/filter/logdrop-813 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-813 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1854 + inet/filter/limit-1854 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1068 + inet/filter/limit-1854 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1854 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1068 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1068 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1854 + inet6/filter/limit-1854 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1068 + inet6/filter/limit-1854 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1068 -j DROP -Filter 1697 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog"} +Filter 1856 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1696 - inet/filter/FORWARD -j logaccept-final-109 - inet/filter/INPUT -j limit-1696 - inet/filter/INPUT -j logaccept-final-109 - inet/filter/OUTPUT -j limit-1696 - inet/filter/OUTPUT -j logaccept-final-109 - inet/filter/limit-1696 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-814 - inet/filter/logaccept-final-109 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-109 -j ACCEPT - inet/filter/logdrop-814 -m limit --limit 1/second -j LOG - inet/filter/logdrop-814 -j DROP - inet6/filter/FORWARD -j limit-1696 - inet6/filter/FORWARD -j logaccept-final-109 - inet6/filter/INPUT -j limit-1696 - inet6/filter/INPUT -j logaccept-final-109 - inet6/filter/OUTPUT -j limit-1696 - inet6/filter/OUTPUT -j logaccept-final-109 - inet6/filter/limit-1696 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-814 - inet6/filter/logaccept-final-109 -j ACCEPT - inet6/filter/logdrop-814 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-814 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1855 + inet/filter/limit-1855 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1069 + inet/filter/limit-1855 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1069 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1069 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1855 + inet6/filter/limit-1855 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1069 + inet6/filter/logdrop-1069 -j DROP -Filter 1698 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog"} +Filter 1857 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1697 - inet/filter/INPUT -j limit-1697 - inet/filter/OUTPUT -j limit-1697 - inet/filter/limit-1697 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-815 - inet/filter/limit-1697 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-815 -m limit --limit 1/second -j LOG - inet/filter/logdrop-815 -j DROP - inet6/filter/FORWARD -j limit-1697 - inet6/filter/INPUT -j limit-1697 - inet6/filter/OUTPUT -j limit-1697 - inet6/filter/limit-1697 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-815 - inet6/filter/logdrop-815 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-815 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1856 + inet/filter/limit-1856 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1070 + inet/filter/limit-1856 -j ACCEPT + inet/filter/logdrop-1070 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1070 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1856 + inet6/filter/limit-1856 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1070 + inet6/filter/limit-1856 -j ACCEPT + inet6/filter/logdrop-1070 -j DROP -Filter 1699 {"flow-limit":{"interval":5,"log":"none"}} +Filter 1858 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1698 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1698 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1698 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1698 -m recent --name limit-1698 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1698 -m recent --name limit-1698 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1698 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1698 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1698 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1698 -m recent --name limit-1698 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1698 -m recent --name limit-1698 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1071 + inet/filter/logdrop-1071 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1071 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1071 + inet6/filter/logdrop-1071 -j DROP -Filter 1700 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} +Filter 1859 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1699 - inet/filter/INPUT -j limit-1699 - inet/filter/OUTPUT -j limit-1699 - inet/filter/limit-1699 -m recent --name limit-1699 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1699 -m recent --name limit-1699 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1699 - inet6/filter/INPUT -j limit-1699 - inet6/filter/OUTPUT -j limit-1699 - inet6/filter/limit-1699 -m recent --name limit-1699 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1699 -m recent --name limit-1699 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1858 + inet/filter/limit-1858 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 + inet/filter/limit-1858 -m limit --limit 1/second -j LOG + inet/filter/limit-1858 -j ACCEPT + inet/filter/logdrop-1072 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1072 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1858 + inet6/filter/limit-1858 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 + inet6/filter/limit-1858 -m limit --limit 1/second -j LOG + inet6/filter/limit-1858 -j ACCEPT + inet6/filter/logdrop-1072 -j DROP -Filter 1701 {"flow-limit":{"interval":5,"log":"none"},"log":true} +Filter 1860 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1700 - inet/filter/FORWARD -j logaccept-final-110 - inet/filter/INPUT -j limit-1700 - inet/filter/INPUT -j logaccept-final-110 - inet/filter/OUTPUT -j limit-1700 - inet/filter/OUTPUT -j logaccept-final-110 - inet/filter/limit-1700 -m recent --name limit-1700 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1700 -m recent --name limit-1700 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-110 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-110 -j ACCEPT - inet6/filter/FORWARD -j limit-1700 - inet6/filter/FORWARD -j logaccept-final-110 - inet6/filter/INPUT -j limit-1700 - inet6/filter/INPUT -j logaccept-final-110 - inet6/filter/OUTPUT -j limit-1700 - inet6/filter/OUTPUT -j logaccept-final-110 - inet6/filter/limit-1700 -m recent --name limit-1700 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1700 -m recent --name limit-1700 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-110 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-110 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1859 + inet/filter/limit-1859 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 + inet/filter/limit-1859 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1073 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1073 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1859 + inet6/filter/limit-1859 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 + inet6/filter/limit-1859 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1073 -j DROP -Filter 1702 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} +Filter 1861 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1701 - inet/filter/INPUT -j limit-1701 - inet/filter/OUTPUT -j limit-1701 - inet/filter/limit-1701 -m recent --name limit-1701 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1701 -m recent --name limit-1701 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1701 - inet6/filter/INPUT -j limit-1701 - inet6/filter/OUTPUT -j limit-1701 - inet6/filter/limit-1701 -m recent --name limit-1701 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1701 -m recent --name limit-1701 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1860 + inet/filter/limit-1860 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 + inet/filter/limit-1860 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1860 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1860 -j ACCEPT + inet/filter/logdrop-1074 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1074 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1860 + inet6/filter/limit-1860 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 + inet6/filter/limit-1860 -j TEE --gateway fc00::2 + inet6/filter/limit-1860 -j ACCEPT + inet6/filter/logdrop-1074 -j DROP -Filter 1703 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} +Filter 1862 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1702 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1702 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1702 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1702 -m recent --name limit-1702 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1702 -m recent --name limit-1702 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1702 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1702 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1702 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1702 -m recent --name limit-1702 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1702 -m recent --name limit-1702 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1861 + inet/filter/limit-1861 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 + inet/filter/limit-1861 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1861 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1075 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1075 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1861 + inet6/filter/limit-1861 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 + inet6/filter/limit-1861 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1075 -j DROP -Filter 1704 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} +Filter 1863 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1703 - inet/filter/INPUT -j limit-1703 - inet/filter/OUTPUT -j limit-1703 - inet/filter/limit-1703 -m recent --name limit-1703 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1703 -m recent --name limit-1703 --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1703 - inet6/filter/INPUT -j limit-1703 - inet6/filter/OUTPUT -j limit-1703 - inet6/filter/limit-1703 -m recent --name limit-1703 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1703 -m recent --name limit-1703 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1862 + inet/filter/limit-1862 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 + inet/filter/limit-1862 -j ACCEPT + inet/filter/logdrop-1076 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1076 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1862 + inet6/filter/limit-1862 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 + inet6/filter/limit-1862 -j ACCEPT + inet6/filter/logdrop-1076 -j DROP -Filter 1705 {"flow-limit":{"interval":5,"log":"none"},"log":"ulog"} +Filter 1864 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1704 - inet/filter/FORWARD -j logaccept-final-111 - inet/filter/INPUT -j limit-1704 - inet/filter/INPUT -j logaccept-final-111 - inet/filter/OUTPUT -j limit-1704 - inet/filter/OUTPUT -j logaccept-final-111 - inet/filter/limit-1704 -m recent --name limit-1704 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1704 -m recent --name limit-1704 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-111 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-111 -j ACCEPT - inet6/filter/FORWARD -j limit-1704 - inet6/filter/FORWARD -j logaccept-final-111 - inet6/filter/INPUT -j limit-1704 - inet6/filter/INPUT -j logaccept-final-111 - inet6/filter/OUTPUT -j limit-1704 - inet6/filter/OUTPUT -j logaccept-final-111 - inet6/filter/limit-1704 -m recent --name limit-1704 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1704 -m recent --name limit-1704 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-111 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 + inet/filter/logdrop-1077 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1077 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 + inet6/filter/logdrop-1077 -j DROP -Filter 1706 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"ulog"} +Filter 1865 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1705 - inet/filter/INPUT -j limit-1705 - inet/filter/OUTPUT -j limit-1705 - inet/filter/limit-1705 -m recent --name limit-1705 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1705 -m recent --name limit-1705 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1705 - inet6/filter/INPUT -j limit-1705 - inet6/filter/OUTPUT -j limit-1705 - inet6/filter/limit-1705 -m recent --name limit-1705 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1864 + inet/filter/limit-1864 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 + inet/filter/limit-1864 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1864 -j ACCEPT + inet/filter/logdrop-1078 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1078 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1864 + inet6/filter/limit-1864 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 + inet6/filter/limit-1864 -j ACCEPT + inet6/filter/logdrop-1078 -j DROP -Filter 1707 {"flow-limit":{"interval":5,"log":"none","name":"A"}} +Filter 1866 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1706 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1706 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1706 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1706 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1706 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1706 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1706 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1706 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1706 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1706 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1865 + inet/filter/limit-1865 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 + inet/filter/limit-1865 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1079 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1079 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1865 + inet6/filter/limit-1865 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 + inet6/filter/logdrop-1079 -j DROP -Filter 1708 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} +Filter 1867 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1707 - inet/filter/INPUT -j limit-1707 - inet/filter/OUTPUT -j limit-1707 - inet/filter/limit-1707 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1707 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1707 - inet6/filter/INPUT -j limit-1707 - inet6/filter/OUTPUT -j limit-1707 - inet6/filter/limit-1707 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1707 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1866 + inet/filter/limit-1866 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1080 + inet/filter/limit-1866 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1080 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1080 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1866 + inet6/filter/limit-1866 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1080 + inet6/filter/limit-1866 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1080 -j DROP -Filter 1709 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +Filter 1868 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1708 - inet/filter/FORWARD -j logaccept-final-112 - inet/filter/INPUT -j limit-1708 - inet/filter/INPUT -j logaccept-final-112 - inet/filter/OUTPUT -j limit-1708 - inet/filter/OUTPUT -j logaccept-final-112 - inet/filter/limit-1708 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1708 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-112 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-112 -j ACCEPT - inet6/filter/FORWARD -j limit-1708 - inet6/filter/FORWARD -j logaccept-final-112 - inet6/filter/INPUT -j limit-1708 - inet6/filter/INPUT -j logaccept-final-112 - inet6/filter/OUTPUT -j limit-1708 - inet6/filter/OUTPUT -j logaccept-final-112 - inet6/filter/limit-1708 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1708 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-112 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-112 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1867 + inet/filter/limit-1867 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1081 + inet/filter/limit-1867 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1081 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1081 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1867 + inet6/filter/limit-1867 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1081 + inet6/filter/limit-1867 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1081 -j DROP -Filter 1710 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +Filter 1869 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1709 - inet/filter/INPUT -j limit-1709 - inet/filter/OUTPUT -j limit-1709 - inet/filter/limit-1709 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1709 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1709 - inet6/filter/INPUT -j limit-1709 - inet6/filter/OUTPUT -j limit-1709 - inet6/filter/limit-1709 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1709 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1868 + inet/filter/limit-1868 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1082 + inet/filter/limit-1868 -m limit --limit 1/second -j LOG + inet/filter/limit-1868 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1082 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1082 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1868 + inet6/filter/limit-1868 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1082 + inet6/filter/limit-1868 -m limit --limit 1/second -j LOG + inet6/filter/limit-1868 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1082 -j DROP -Filter 1711 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +Filter 1870 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1710 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1710 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1710 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1710 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1710 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1710 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1710 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1710 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1710 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1710 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1869 + inet/filter/limit-1869 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1083 + inet/filter/limit-1869 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1083 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1083 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1869 + inet6/filter/limit-1869 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1083 + inet6/filter/limit-1869 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1083 -j DROP -Filter 1712 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +Filter 1871 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1711 - inet/filter/INPUT -j limit-1711 - inet/filter/OUTPUT -j limit-1711 - inet/filter/limit-1711 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1711 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1711 - inet6/filter/INPUT -j limit-1711 - inet6/filter/OUTPUT -j limit-1711 - inet6/filter/limit-1711 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1711 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1870 + inet/filter/limit-1870 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1084 + inet/filter/limit-1870 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1870 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1870 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1084 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1084 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1870 + inet6/filter/limit-1870 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1084 + inet6/filter/limit-1870 -j TEE --gateway fc00::2 + inet6/filter/limit-1870 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1084 -j DROP -Filter 1713 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog"} +Filter 1872 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1712 - inet/filter/FORWARD -j logaccept-final-113 - inet/filter/INPUT -j limit-1712 - inet/filter/INPUT -j logaccept-final-113 - inet/filter/OUTPUT -j limit-1712 - inet/filter/OUTPUT -j logaccept-final-113 - inet/filter/limit-1712 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1712 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-113 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-113 -j ACCEPT - inet6/filter/FORWARD -j limit-1712 - inet6/filter/FORWARD -j logaccept-final-113 - inet6/filter/INPUT -j limit-1712 - inet6/filter/INPUT -j logaccept-final-113 - inet6/filter/OUTPUT -j limit-1712 - inet6/filter/OUTPUT -j logaccept-final-113 - inet6/filter/limit-1712 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1712 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-113 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1871 + inet/filter/limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1085 + inet/filter/limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1085 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1085 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1871 + inet6/filter/limit-1871 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1085 + inet6/filter/limit-1871 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1085 -j DROP -Filter 1714 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog"} +Filter 1873 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1713 - inet/filter/INPUT -j limit-1713 - inet/filter/OUTPUT -j limit-1713 - inet/filter/limit-1713 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1713 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1713 - inet6/filter/INPUT -j limit-1713 - inet6/filter/OUTPUT -j limit-1713 - inet6/filter/limit-1713 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1872 + inet/filter/limit-1872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1086 + inet/filter/limit-1872 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1086 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1086 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1872 + inet6/filter/limit-1872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1086 + inet6/filter/limit-1872 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1086 -j DROP -Filter 1715 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +Filter 1874 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1714 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1714 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1714 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1714 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1714 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1714 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1714 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1714 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1873 + inet/filter/limit-1873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1087 + inet/filter/limit-1873 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1087 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1087 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1873 + inet6/filter/limit-1873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1087 + inet6/filter/limit-1873 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1087 -j DROP -Filter 1716 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +Filter 1875 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1715 - inet/filter/INPUT -j limit-1715 - inet/filter/OUTPUT -j limit-1715 - inet/filter/limit-1715 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1715 - inet6/filter/INPUT -j limit-1715 - inet6/filter/OUTPUT -j limit-1715 - inet6/filter/limit-1715 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1874 + inet/filter/limit-1874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1088 + inet/filter/limit-1874 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1874 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1088 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1088 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1874 + inet6/filter/limit-1874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1088 + inet6/filter/limit-1874 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1088 -j DROP -Filter 1717 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 1876 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1716 - inet/filter/FORWARD -j logaccept-final-114 - inet/filter/INPUT -j limit-1716 - inet/filter/INPUT -j logaccept-final-114 - inet/filter/OUTPUT -j limit-1716 - inet/filter/OUTPUT -j logaccept-final-114 - inet/filter/limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-114 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-114 -j ACCEPT - inet6/filter/FORWARD -j limit-1716 - inet6/filter/FORWARD -j logaccept-final-114 - inet6/filter/INPUT -j limit-1716 - inet6/filter/INPUT -j logaccept-final-114 - inet6/filter/OUTPUT -j limit-1716 - inet6/filter/OUTPUT -j logaccept-final-114 - inet6/filter/limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-114 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-114 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1875 + inet/filter/limit-1875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1089 + inet/filter/limit-1875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1089 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1089 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1875 + inet6/filter/limit-1875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1089 + inet6/filter/logdrop-1089 -j DROP -Filter 1718 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 1877 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1717 - inet/filter/INPUT -j limit-1717 - inet/filter/OUTPUT -j limit-1717 - inet/filter/limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1717 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1717 - inet6/filter/INPUT -j limit-1717 - inet6/filter/OUTPUT -j limit-1717 - inet6/filter/limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1717 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1876 + inet/filter/limit-1876 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 + inet/filter/limit-1876 -j ACCEPT + inet/filter/logdrop-1090 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1090 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1876 + inet6/filter/limit-1876 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 + inet6/filter/limit-1876 -j ACCEPT + inet6/filter/logdrop-1090 -j DROP -Filter 1719 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 1878 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1718 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1718 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1718 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1718 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1718 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1718 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 + inet/filter/logdrop-1091 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1091 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 + inet6/filter/logdrop-1091 -j DROP -Filter 1720 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 1879 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1719 - inet/filter/INPUT -j limit-1719 - inet/filter/OUTPUT -j limit-1719 - inet/filter/limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1719 - inet6/filter/INPUT -j limit-1719 - inet6/filter/OUTPUT -j limit-1719 - inet6/filter/limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1878 + inet/filter/limit-1878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 + inet/filter/limit-1878 -m limit --limit 1/second -j LOG + inet/filter/limit-1878 -j ACCEPT + inet/filter/logdrop-1092 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1092 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1878 + inet6/filter/limit-1878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 + inet6/filter/limit-1878 -m limit --limit 1/second -j LOG + inet6/filter/limit-1878 -j ACCEPT + inet6/filter/logdrop-1092 -j DROP -Filter 1721 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog"} +Filter 1880 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1720 - inet/filter/FORWARD -j logaccept-final-115 - inet/filter/INPUT -j limit-1720 - inet/filter/INPUT -j logaccept-final-115 - inet/filter/OUTPUT -j limit-1720 - inet/filter/OUTPUT -j logaccept-final-115 - inet/filter/limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-115 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-115 -j ACCEPT - inet6/filter/FORWARD -j limit-1720 - inet6/filter/FORWARD -j logaccept-final-115 - inet6/filter/INPUT -j limit-1720 - inet6/filter/INPUT -j logaccept-final-115 - inet6/filter/OUTPUT -j limit-1720 - inet6/filter/OUTPUT -j logaccept-final-115 - inet6/filter/limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-115 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1879 + inet/filter/limit-1879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 + inet/filter/limit-1879 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1093 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1093 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1879 + inet6/filter/limit-1879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 + inet6/filter/limit-1879 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1093 -j DROP -Filter 1722 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog"} +Filter 1881 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1721 - inet/filter/INPUT -j limit-1721 - inet/filter/OUTPUT -j limit-1721 - inet/filter/limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1721 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1721 - inet6/filter/INPUT -j limit-1721 - inet6/filter/OUTPUT -j limit-1721 - inet6/filter/limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1880 + inet/filter/limit-1880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 + inet/filter/limit-1880 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1880 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1880 -j ACCEPT + inet/filter/logdrop-1094 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1094 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1880 + inet6/filter/limit-1880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 + inet6/filter/limit-1880 -j TEE --gateway fc00::2 + inet6/filter/limit-1880 -j ACCEPT + inet6/filter/logdrop-1094 -j DROP -Filter 1723 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +Filter 1882 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1722 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1722 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1722 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1722 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1722 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1722 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1722 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1722 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1722 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1722 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1881 + inet/filter/limit-1881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 + inet/filter/limit-1881 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1881 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1095 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1095 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1881 + inet6/filter/limit-1881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 + inet6/filter/limit-1881 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1095 -j DROP -Filter 1724 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +Filter 1883 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1723 - inet/filter/INPUT -j limit-1723 - inet/filter/OUTPUT -j limit-1723 - inet/filter/limit-1723 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1723 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1723 - inet6/filter/INPUT -j limit-1723 - inet6/filter/OUTPUT -j limit-1723 - inet6/filter/limit-1723 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1723 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1882 + inet/filter/limit-1882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1096 + inet/filter/limit-1882 -j ACCEPT + inet/filter/logdrop-1096 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1096 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1882 + inet6/filter/limit-1882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1096 + inet6/filter/limit-1882 -j ACCEPT + inet6/filter/logdrop-1096 -j DROP -Filter 1725 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +Filter 1884 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1724 - inet/filter/FORWARD -j logaccept-final-116 - inet/filter/INPUT -j limit-1724 - inet/filter/INPUT -j logaccept-final-116 - inet/filter/OUTPUT -j limit-1724 - inet/filter/OUTPUT -j logaccept-final-116 - inet/filter/limit-1724 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1724 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-116 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-116 -j ACCEPT - inet6/filter/FORWARD -j limit-1724 - inet6/filter/FORWARD -j logaccept-final-116 - inet6/filter/INPUT -j limit-1724 - inet6/filter/INPUT -j logaccept-final-116 - inet6/filter/OUTPUT -j limit-1724 - inet6/filter/OUTPUT -j logaccept-final-116 - inet6/filter/limit-1724 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1724 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-116 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-116 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1097 + inet/filter/logdrop-1097 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1097 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1097 + inet6/filter/logdrop-1097 -j DROP -Filter 1726 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +Filter 1885 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1725 - inet/filter/INPUT -j limit-1725 - inet/filter/OUTPUT -j limit-1725 - inet/filter/limit-1725 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1725 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1725 - inet6/filter/INPUT -j limit-1725 - inet6/filter/OUTPUT -j limit-1725 - inet6/filter/limit-1725 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1725 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1884 + inet/filter/limit-1884 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1098 + inet/filter/limit-1884 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1884 -j ACCEPT + inet/filter/logdrop-1098 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1098 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1884 + inet6/filter/limit-1884 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1098 + inet6/filter/limit-1884 -j ACCEPT + inet6/filter/logdrop-1098 -j DROP -Filter 1727 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +Filter 1886 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1726 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1726 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1726 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1726 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1726 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1726 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1726 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1726 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1726 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1726 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1885 + inet/filter/limit-1885 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1099 + inet/filter/limit-1885 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1099 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1099 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1885 + inet6/filter/limit-1885 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1099 + inet6/filter/logdrop-1099 -j DROP -Filter 1728 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +Filter 1887 {"conn-limit":150,"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1727 - inet/filter/INPUT -j limit-1727 - inet/filter/OUTPUT -j limit-1727 - inet/filter/limit-1727 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1727 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/FORWARD -j limit-1727 - inet6/filter/INPUT -j limit-1727 - inet6/filter/OUTPUT -j limit-1727 - inet6/filter/limit-1727 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1727 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1886 + inet/filter/limit-1886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1886 -j ACCEPT + inet/filter/limit-1886 -m limit --limit 1/second -j LOG + inet/filter/limit-1886 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1886 + inet6/filter/limit-1886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1886 -j ACCEPT + inet6/filter/limit-1886 -m limit --limit 1/second -j LOG + inet6/filter/limit-1886 -j DROP -Filter 1729 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog"} +Filter 1888 {"action":"pass","conn-limit":150,"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1728 - inet/filter/FORWARD -j logaccept-final-117 - inet/filter/INPUT -j limit-1728 - inet/filter/INPUT -j logaccept-final-117 - inet/filter/OUTPUT -j limit-1728 - inet/filter/OUTPUT -j logaccept-final-117 - inet/filter/limit-1728 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1728 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-117 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-117 -j ACCEPT - inet6/filter/FORWARD -j limit-1728 - inet6/filter/FORWARD -j logaccept-final-117 - inet6/filter/INPUT -j limit-1728 - inet6/filter/INPUT -j logaccept-final-117 - inet6/filter/OUTPUT -j limit-1728 - inet6/filter/OUTPUT -j logaccept-final-117 - inet6/filter/limit-1728 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1728 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-117 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1887 + inet/filter/limit-1887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1887 -j RETURN + inet/filter/limit-1887 -m limit --limit 1/second -j LOG + inet/filter/limit-1887 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1887 + inet6/filter/limit-1887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1887 -j RETURN + inet6/filter/limit-1887 -m limit --limit 1/second -j LOG + inet6/filter/limit-1887 -j DROP -Filter 1730 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog"} +Filter 1889 {"conn-limit":150,"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1729 - inet/filter/INPUT -j limit-1729 - inet/filter/OUTPUT -j limit-1729 - inet/filter/limit-1729 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1729 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1729 - inet6/filter/INPUT -j limit-1729 - inet6/filter/OUTPUT -j limit-1729 - inet6/filter/limit-1729 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1888 + inet/filter/limit-1888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1888 -j logaccept-33 + inet/filter/limit-1888 -m limit --limit 1/second -j LOG + inet/filter/limit-1888 -j DROP + inet/filter/logaccept-33 -m limit --limit 1/second -j LOG + inet/filter/logaccept-33 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1888 + inet6/filter/limit-1888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1888 -j logaccept-33 + inet6/filter/limit-1888 -m limit --limit 1/second -j LOG + inet6/filter/limit-1888 -j DROP + inet6/filter/logaccept-33 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-33 -j ACCEPT -Filter 1731 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +Filter 1890 {"conn-limit":150,"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1730 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1730 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1730 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1730 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1730 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1730 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1730 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1730 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1889 + inet/filter/limit-1889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1889 -j logaccept-34 + inet/filter/limit-1889 -m limit --limit 1/second -j LOG + inet/filter/limit-1889 -j DROP + inet/filter/logaccept-34 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-34 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-34 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1889 + inet6/filter/limit-1889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1889 -j logaccept-34 + inet6/filter/limit-1889 -m limit --limit 1/second -j LOG + inet6/filter/limit-1889 -j DROP + inet6/filter/logaccept-34 -j TEE --gateway fc00::2 + inet6/filter/logaccept-34 -j ACCEPT -Filter 1732 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +Filter 1891 {"conn-limit":150,"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1731 - inet/filter/INPUT -j limit-1731 - inet/filter/OUTPUT -j limit-1731 - inet/filter/limit-1731 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1731 - inet6/filter/INPUT -j limit-1731 - inet6/filter/OUTPUT -j limit-1731 - inet6/filter/limit-1731 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1890 + inet/filter/limit-1890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1890 -j ACCEPT + inet/filter/limit-1890 -m limit --limit 1/second -j LOG + inet/filter/limit-1890 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1890 + inet6/filter/limit-1890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1890 -j ACCEPT + inet6/filter/limit-1890 -m limit --limit 1/second -j LOG + inet6/filter/limit-1890 -j DROP -Filter 1733 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 1892 {"conn-limit":150,"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1732 - inet/filter/FORWARD -j logaccept-final-118 - inet/filter/INPUT -j limit-1732 - inet/filter/INPUT -j logaccept-final-118 - inet/filter/OUTPUT -j limit-1732 - inet/filter/OUTPUT -j logaccept-final-118 - inet/filter/limit-1732 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-118 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-118 -j ACCEPT - inet6/filter/FORWARD -j limit-1732 - inet6/filter/FORWARD -j logaccept-final-118 - inet6/filter/INPUT -j limit-1732 - inet6/filter/INPUT -j logaccept-final-118 - inet6/filter/OUTPUT -j limit-1732 - inet6/filter/OUTPUT -j logaccept-final-118 - inet6/filter/limit-1732 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-118 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-118 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1891 + inet/filter/limit-1891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1891 -j logaccept-35 + inet/filter/limit-1891 -m limit --limit 1/second -j LOG + inet/filter/limit-1891 -j DROP + inet/filter/logaccept-35 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-35 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1891 + inet6/filter/limit-1891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1891 -j logaccept-35 + inet6/filter/limit-1891 -m limit --limit 1/second -j LOG + inet6/filter/limit-1891 -j DROP + inet6/filter/logaccept-35 -j ACCEPT -Filter 1734 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 1893 {"conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1733 - inet/filter/INPUT -j limit-1733 - inet/filter/OUTPUT -j limit-1733 - inet/filter/limit-1733 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1733 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1733 - inet6/filter/INPUT -j limit-1733 - inet6/filter/OUTPUT -j limit-1733 - inet6/filter/limit-1733 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1733 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1892 + inet/filter/limit-1892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1892 -j ACCEPT + inet/filter/limit-1892 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1892 + inet6/filter/limit-1892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1892 -j ACCEPT + inet6/filter/limit-1892 -j DROP -Filter 1735 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 1894 {"action":"pass","conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1734 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1734 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1734 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1734 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1734 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1734 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1734 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1734 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1893 + inet/filter/limit-1893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1893 -j RETURN + inet/filter/limit-1893 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1893 + inet6/filter/limit-1893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1893 -j RETURN + inet6/filter/limit-1893 -j DROP -Filter 1736 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 1895 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1735 - inet/filter/INPUT -j limit-1735 - inet/filter/OUTPUT -j limit-1735 - inet/filter/limit-1735 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1735 - inet6/filter/INPUT -j limit-1735 - inet6/filter/OUTPUT -j limit-1735 - inet6/filter/limit-1735 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1894 + inet/filter/limit-1894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1894 -j logaccept-36 + inet/filter/limit-1894 -j DROP + inet/filter/logaccept-36 -m limit --limit 1/second -j LOG + inet/filter/logaccept-36 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1894 + inet6/filter/limit-1894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1894 -j logaccept-36 + inet6/filter/limit-1894 -j DROP + inet6/filter/logaccept-36 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-36 -j ACCEPT -Filter 1737 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog"} +Filter 1896 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1736 - inet/filter/FORWARD -j logaccept-final-119 - inet/filter/INPUT -j limit-1736 - inet/filter/INPUT -j logaccept-final-119 - inet/filter/OUTPUT -j limit-1736 - inet/filter/OUTPUT -j logaccept-final-119 - inet/filter/limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-119 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-119 -j ACCEPT - inet6/filter/FORWARD -j limit-1736 - inet6/filter/FORWARD -j logaccept-final-119 - inet6/filter/INPUT -j limit-1736 - inet6/filter/INPUT -j logaccept-final-119 - inet6/filter/OUTPUT -j limit-1736 - inet6/filter/OUTPUT -j logaccept-final-119 - inet6/filter/limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-119 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1895 + inet/filter/limit-1895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1895 -j logaccept-37 + inet/filter/limit-1895 -j DROP + inet/filter/logaccept-37 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-37 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-37 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1895 + inet6/filter/limit-1895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1895 -j logaccept-37 + inet6/filter/limit-1895 -j DROP + inet6/filter/logaccept-37 -j TEE --gateway fc00::2 + inet6/filter/logaccept-37 -j ACCEPT -Filter 1738 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog"} +Filter 1897 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1737 - inet/filter/INPUT -j limit-1737 - inet/filter/OUTPUT -j limit-1737 - inet/filter/limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1737 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1737 - inet6/filter/INPUT -j limit-1737 - inet6/filter/OUTPUT -j limit-1737 - inet6/filter/limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1896 + inet/filter/limit-1896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1896 -j ACCEPT + inet/filter/limit-1896 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1896 + inet6/filter/limit-1896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1896 -j ACCEPT + inet6/filter/limit-1896 -j DROP -Filter 1739 {"flow-limit":{"interval":5,"log":"none","name":"C"}} +Filter 1898 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1738 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1738 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1738 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1738 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1738 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1738 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1738 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1738 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1738 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1738 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1897 + inet/filter/limit-1897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1897 -j logaccept-38 + inet/filter/limit-1897 -j DROP + inet/filter/logaccept-38 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-38 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1897 + inet6/filter/limit-1897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1897 -j logaccept-38 + inet6/filter/limit-1897 -j DROP + inet6/filter/logaccept-38 -j ACCEPT -Filter 1740 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} +Filter 1899 {"conn-limit":{"count":150},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1898 + inet/filter/limit-1898 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1898 -j ACCEPT + inet/filter/limit-1898 -m limit --limit 1/second -j LOG + inet/filter/limit-1898 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1898 + inet6/filter/limit-1898 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1898 -j ACCEPT + inet6/filter/limit-1898 -m limit --limit 1/second -j LOG + inet6/filter/limit-1898 -j DROP + +Filter 1900 {"action":"pass","conn-limit":{"count":150},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1899 + inet/filter/limit-1899 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1899 -j RETURN + inet/filter/limit-1899 -m limit --limit 1/second -j LOG + inet/filter/limit-1899 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1899 + inet6/filter/limit-1899 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1899 -j RETURN + inet6/filter/limit-1899 -m limit --limit 1/second -j LOG + inet6/filter/limit-1899 -j DROP + +Filter 1901 {"conn-limit":{"count":150},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1900 + inet/filter/limit-1900 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1900 -j logaccept-39 + inet/filter/limit-1900 -m limit --limit 1/second -j LOG + inet/filter/limit-1900 -j DROP + inet/filter/logaccept-39 -m limit --limit 1/second -j LOG + inet/filter/logaccept-39 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1900 + inet6/filter/limit-1900 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1900 -j logaccept-39 + inet6/filter/limit-1900 -m limit --limit 1/second -j LOG + inet6/filter/limit-1900 -j DROP + inet6/filter/logaccept-39 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-39 -j ACCEPT + +Filter 1902 {"conn-limit":{"count":150},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1739 - inet/filter/INPUT -j limit-1739 - inet/filter/OUTPUT -j limit-1739 - inet/filter/limit-1739 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1739 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1739 - inet6/filter/INPUT -j limit-1739 - inet6/filter/OUTPUT -j limit-1739 - inet6/filter/limit-1739 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1739 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1901 + inet/filter/limit-1901 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1901 -j logaccept-40 + inet/filter/limit-1901 -m limit --limit 1/second -j LOG + inet/filter/limit-1901 -j DROP + inet/filter/logaccept-40 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-40 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-40 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1901 + inet6/filter/limit-1901 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1901 -j logaccept-40 + inet6/filter/limit-1901 -m limit --limit 1/second -j LOG + inet6/filter/limit-1901 -j DROP + inet6/filter/logaccept-40 -j TEE --gateway fc00::2 + inet6/filter/logaccept-40 -j ACCEPT -Filter 1741 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +Filter 1903 {"conn-limit":{"count":150},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1740 - inet/filter/FORWARD -j logaccept-final-120 - inet/filter/INPUT -j limit-1740 - inet/filter/INPUT -j logaccept-final-120 - inet/filter/OUTPUT -j limit-1740 - inet/filter/OUTPUT -j logaccept-final-120 - inet/filter/limit-1740 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1740 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-120 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-120 -j ACCEPT - inet6/filter/FORWARD -j limit-1740 - inet6/filter/FORWARD -j logaccept-final-120 - inet6/filter/INPUT -j limit-1740 - inet6/filter/INPUT -j logaccept-final-120 - inet6/filter/OUTPUT -j limit-1740 - inet6/filter/OUTPUT -j logaccept-final-120 - inet6/filter/limit-1740 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1740 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-120 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-120 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1902 + inet/filter/limit-1902 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1902 -j ACCEPT + inet/filter/limit-1902 -m limit --limit 1/second -j LOG + inet/filter/limit-1902 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1902 + inet6/filter/limit-1902 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1902 -j ACCEPT + inet6/filter/limit-1902 -m limit --limit 1/second -j LOG + inet6/filter/limit-1902 -j DROP -Filter 1742 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +Filter 1904 {"conn-limit":{"count":150},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1741 - inet/filter/INPUT -j limit-1741 - inet/filter/OUTPUT -j limit-1741 - inet/filter/limit-1741 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1741 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1741 - inet6/filter/INPUT -j limit-1741 - inet6/filter/OUTPUT -j limit-1741 - inet6/filter/limit-1741 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1741 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1903 + inet/filter/limit-1903 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1903 -j logaccept-41 + inet/filter/limit-1903 -m limit --limit 1/second -j LOG + inet/filter/limit-1903 -j DROP + inet/filter/logaccept-41 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-41 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1903 + inet6/filter/limit-1903 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1903 -j logaccept-41 + inet6/filter/limit-1903 -m limit --limit 1/second -j LOG + inet6/filter/limit-1903 -j DROP + inet6/filter/logaccept-41 -j ACCEPT + +Filter 1905 {"conn-limit":{"count":150,"log":"mirror"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1904 + inet/filter/limit-1904 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1904 -j ACCEPT + inet/filter/limit-1904 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1904 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1904 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1904 + inet6/filter/limit-1904 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1904 -j ACCEPT + inet6/filter/limit-1904 -j TEE --gateway fc00::2 + inet6/filter/limit-1904 -j DROP + +Filter 1906 {"action":"pass","conn-limit":{"count":150,"log":"mirror"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1905 + inet/filter/limit-1905 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1905 -j RETURN + inet/filter/limit-1905 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1905 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1905 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1905 + inet6/filter/limit-1905 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1905 -j RETURN + inet6/filter/limit-1905 -j TEE --gateway fc00::2 + inet6/filter/limit-1905 -j DROP + +Filter 1907 {"conn-limit":{"count":150,"log":"mirror"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1906 + inet/filter/limit-1906 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1906 -j logaccept-42 + inet/filter/limit-1906 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1906 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1906 -j DROP + inet/filter/logaccept-42 -m limit --limit 1/second -j LOG + inet/filter/logaccept-42 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1906 + inet6/filter/limit-1906 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1906 -j logaccept-42 + inet6/filter/limit-1906 -j TEE --gateway fc00::2 + inet6/filter/limit-1906 -j DROP + inet6/filter/logaccept-42 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-42 -j ACCEPT -Filter 1743 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +Filter 1908 {"conn-limit":{"count":150,"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1742 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1742 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1742 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1742 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1742 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1742 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1742 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1742 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1742 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1742 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1907 + inet/filter/limit-1907 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1907 -j logaccept-43 + inet/filter/limit-1907 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1907 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1907 -j DROP + inet/filter/logaccept-43 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-43 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-43 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1907 + inet6/filter/limit-1907 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1907 -j logaccept-43 + inet6/filter/limit-1907 -j TEE --gateway fc00::2 + inet6/filter/limit-1907 -j DROP + inet6/filter/logaccept-43 -j TEE --gateway fc00::2 + inet6/filter/logaccept-43 -j ACCEPT + +Filter 1909 {"conn-limit":{"count":150,"log":"mirror"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1908 + inet/filter/limit-1908 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1908 -j ACCEPT + inet/filter/limit-1908 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1908 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1908 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1908 + inet6/filter/limit-1908 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1908 -j ACCEPT + inet6/filter/limit-1908 -j TEE --gateway fc00::2 + inet6/filter/limit-1908 -j DROP + +Filter 1910 {"conn-limit":{"count":150,"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1909 + inet/filter/limit-1909 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1909 -j logaccept-44 + inet/filter/limit-1909 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1909 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1909 -j DROP + inet/filter/logaccept-44 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-44 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1909 + inet6/filter/limit-1909 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1909 -j logaccept-44 + inet6/filter/limit-1909 -j TEE --gateway fc00::2 + inet6/filter/limit-1909 -j DROP + inet6/filter/logaccept-44 -j ACCEPT -Filter 1744 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +Filter 1911 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1743 - inet/filter/INPUT -j limit-1743 - inet/filter/OUTPUT -j limit-1743 - inet/filter/limit-1743 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1743 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1743 - inet6/filter/INPUT -j limit-1743 - inet6/filter/OUTPUT -j limit-1743 - inet6/filter/limit-1743 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1743 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1910 + inet/filter/limit-1910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1910 -j ACCEPT + inet/filter/limit-1910 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1910 + inet6/filter/limit-1910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1910 -j ACCEPT + inet6/filter/limit-1910 -j DROP -Filter 1745 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog"} +Filter 1912 {"action":"pass","conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1744 - inet/filter/FORWARD -j logaccept-final-121 - inet/filter/INPUT -j limit-1744 - inet/filter/INPUT -j logaccept-final-121 - inet/filter/OUTPUT -j limit-1744 - inet/filter/OUTPUT -j logaccept-final-121 - inet/filter/limit-1744 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1744 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-121 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-121 -j ACCEPT - inet6/filter/FORWARD -j limit-1744 - inet6/filter/FORWARD -j logaccept-final-121 - inet6/filter/INPUT -j limit-1744 - inet6/filter/INPUT -j logaccept-final-121 - inet6/filter/OUTPUT -j limit-1744 - inet6/filter/OUTPUT -j logaccept-final-121 - inet6/filter/limit-1744 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1744 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-121 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1911 + inet/filter/limit-1911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1911 -j RETURN + inet/filter/limit-1911 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1911 + inet6/filter/limit-1911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1911 -j RETURN + inet6/filter/limit-1911 -j DROP -Filter 1746 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog"} +Filter 1913 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1745 - inet/filter/INPUT -j limit-1745 - inet/filter/OUTPUT -j limit-1745 - inet/filter/limit-1745 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1745 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1745 - inet6/filter/INPUT -j limit-1745 - inet6/filter/OUTPUT -j limit-1745 - inet6/filter/limit-1745 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1912 + inet/filter/limit-1912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1912 -j logaccept-45 + inet/filter/limit-1912 -j DROP + inet/filter/logaccept-45 -m limit --limit 1/second -j LOG + inet/filter/logaccept-45 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1912 + inet6/filter/limit-1912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1912 -j logaccept-45 + inet6/filter/limit-1912 -j DROP + inet6/filter/logaccept-45 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-45 -j ACCEPT -Filter 1747 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +Filter 1914 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1746 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1746 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1746 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1746 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1746 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1746 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1746 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1746 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1913 + inet/filter/limit-1913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1913 -j logaccept-46 + inet/filter/limit-1913 -j DROP + inet/filter/logaccept-46 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-46 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-46 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1913 + inet6/filter/limit-1913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1913 -j logaccept-46 + inet6/filter/limit-1913 -j DROP + inet6/filter/logaccept-46 -j TEE --gateway fc00::2 + inet6/filter/logaccept-46 -j ACCEPT -Filter 1748 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +Filter 1915 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1747 - inet/filter/INPUT -j limit-1747 - inet/filter/OUTPUT -j limit-1747 - inet/filter/limit-1747 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1747 - inet6/filter/INPUT -j limit-1747 - inet6/filter/OUTPUT -j limit-1747 - inet6/filter/limit-1747 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1914 + inet/filter/limit-1914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1914 -j ACCEPT + inet/filter/limit-1914 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1914 + inet6/filter/limit-1914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1914 -j ACCEPT + inet6/filter/limit-1914 -j DROP -Filter 1749 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 1916 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1748 - inet/filter/FORWARD -j logaccept-final-122 - inet/filter/INPUT -j limit-1748 - inet/filter/INPUT -j logaccept-final-122 - inet/filter/OUTPUT -j limit-1748 - inet/filter/OUTPUT -j logaccept-final-122 - inet/filter/limit-1748 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-122 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-122 -j ACCEPT - inet6/filter/FORWARD -j limit-1748 - inet6/filter/FORWARD -j logaccept-final-122 - inet6/filter/INPUT -j limit-1748 - inet6/filter/INPUT -j logaccept-final-122 - inet6/filter/OUTPUT -j limit-1748 - inet6/filter/OUTPUT -j logaccept-final-122 - inet6/filter/limit-1748 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-122 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-122 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1915 + inet/filter/limit-1915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1915 -j logaccept-47 + inet/filter/limit-1915 -j DROP + inet/filter/logaccept-47 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-47 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1915 + inet6/filter/limit-1915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1915 -j logaccept-47 + inet6/filter/limit-1915 -j DROP + inet6/filter/logaccept-47 -j ACCEPT -Filter 1750 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 1917 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1749 - inet/filter/INPUT -j limit-1749 - inet/filter/OUTPUT -j limit-1749 - inet/filter/limit-1749 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1749 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1749 - inet6/filter/INPUT -j limit-1749 - inet6/filter/OUTPUT -j limit-1749 - inet6/filter/limit-1749 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1749 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1916 + inet/filter/limit-1916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1916 -j ACCEPT + inet/filter/limit-1916 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1916 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1916 + inet6/filter/limit-1916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1916 -j ACCEPT + inet6/filter/limit-1916 -j DROP -Filter 1751 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 1918 {"action":"pass","conn-limit":{"count":150,"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1750 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1750 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1750 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1750 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1750 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1750 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1750 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1750 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1917 + inet/filter/limit-1917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1917 -j RETURN + inet/filter/limit-1917 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1917 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1917 + inet6/filter/limit-1917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1917 -j RETURN + inet6/filter/limit-1917 -j DROP -Filter 1752 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 1919 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1751 - inet/filter/INPUT -j limit-1751 - inet/filter/OUTPUT -j limit-1751 - inet/filter/limit-1751 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1751 - inet6/filter/INPUT -j limit-1751 - inet6/filter/OUTPUT -j limit-1751 - inet6/filter/limit-1751 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1918 + inet/filter/limit-1918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1918 -j logaccept-48 + inet/filter/limit-1918 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1918 -j DROP + inet/filter/logaccept-48 -m limit --limit 1/second -j LOG + inet/filter/logaccept-48 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1918 + inet6/filter/limit-1918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1918 -j logaccept-48 + inet6/filter/limit-1918 -j DROP + inet6/filter/logaccept-48 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-48 -j ACCEPT -Filter 1753 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog"} +Filter 1920 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1752 - inet/filter/FORWARD -j logaccept-final-123 - inet/filter/INPUT -j limit-1752 - inet/filter/INPUT -j logaccept-final-123 - inet/filter/OUTPUT -j limit-1752 - inet/filter/OUTPUT -j logaccept-final-123 - inet/filter/limit-1752 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-123 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-123 -j ACCEPT - inet6/filter/FORWARD -j limit-1752 - inet6/filter/FORWARD -j logaccept-final-123 - inet6/filter/INPUT -j limit-1752 - inet6/filter/INPUT -j logaccept-final-123 - inet6/filter/OUTPUT -j limit-1752 - inet6/filter/OUTPUT -j logaccept-final-123 - inet6/filter/limit-1752 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-123 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1919 + inet/filter/limit-1919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1919 -j logaccept-49 + inet/filter/limit-1919 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1919 -j DROP + inet/filter/logaccept-49 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-49 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-49 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1919 + inet6/filter/limit-1919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1919 -j logaccept-49 + inet6/filter/limit-1919 -j DROP + inet6/filter/logaccept-49 -j TEE --gateway fc00::2 + inet6/filter/logaccept-49 -j ACCEPT -Filter 1754 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog"} +Filter 1921 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1753 - inet/filter/INPUT -j limit-1753 - inet/filter/OUTPUT -j limit-1753 - inet/filter/limit-1753 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1753 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1753 - inet6/filter/INPUT -j limit-1753 - inet6/filter/OUTPUT -j limit-1753 - inet6/filter/limit-1753 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1920 + inet/filter/limit-1920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1920 -j ACCEPT + inet/filter/limit-1920 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1920 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1920 + inet6/filter/limit-1920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1920 -j ACCEPT + inet6/filter/limit-1920 -j DROP -Filter 1755 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +Filter 1922 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1754 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1754 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1754 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1754 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1754 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1754 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1754 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1754 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1754 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1754 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1921 + inet/filter/limit-1921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1921 -j logaccept-50 + inet/filter/limit-1921 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1921 -j DROP + inet/filter/logaccept-50 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-50 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1921 + inet6/filter/limit-1921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1921 -j logaccept-50 + inet6/filter/limit-1921 -j DROP + inet6/filter/logaccept-50 -j ACCEPT -Filter 1756 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +Filter 1923 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1755 - inet/filter/INPUT -j limit-1755 - inet/filter/OUTPUT -j limit-1755 - inet/filter/limit-1755 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1755 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1755 - inet6/filter/INPUT -j limit-1755 - inet6/filter/OUTPUT -j limit-1755 - inet6/filter/limit-1755 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1755 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1922 + inet/filter/limit-1922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1922 -j ACCEPT + inet/filter/limit-1922 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1922 + inet6/filter/limit-1922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1922 -j ACCEPT + inet6/filter/limit-1922 -j DROP -Filter 1757 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +Filter 1924 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1756 - inet/filter/FORWARD -j logaccept-final-124 - inet/filter/INPUT -j limit-1756 - inet/filter/INPUT -j logaccept-final-124 - inet/filter/OUTPUT -j limit-1756 - inet/filter/OUTPUT -j logaccept-final-124 - inet/filter/limit-1756 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1756 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-124 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-124 -j ACCEPT - inet6/filter/FORWARD -j limit-1756 - inet6/filter/FORWARD -j logaccept-final-124 - inet6/filter/INPUT -j limit-1756 - inet6/filter/INPUT -j logaccept-final-124 - inet6/filter/OUTPUT -j limit-1756 - inet6/filter/OUTPUT -j logaccept-final-124 - inet6/filter/limit-1756 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1756 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-124 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-124 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1923 + inet/filter/limit-1923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1923 -j RETURN + inet/filter/limit-1923 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1923 + inet6/filter/limit-1923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1923 -j RETURN + inet6/filter/limit-1923 -j DROP + +Filter 1925 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1924 + inet/filter/limit-1924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1924 -j logaccept-51 + inet/filter/limit-1924 -j DROP + inet/filter/logaccept-51 -m limit --limit 1/second -j LOG + inet/filter/logaccept-51 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1924 + inet6/filter/limit-1924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1924 -j logaccept-51 + inet6/filter/limit-1924 -j DROP + inet6/filter/logaccept-51 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-51 -j ACCEPT + +Filter 1926 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1925 + inet/filter/limit-1925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1925 -j logaccept-52 + inet/filter/limit-1925 -j DROP + inet/filter/logaccept-52 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-52 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-52 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1925 + inet6/filter/limit-1925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1925 -j logaccept-52 + inet6/filter/limit-1925 -j DROP + inet6/filter/logaccept-52 -j TEE --gateway fc00::2 + inet6/filter/logaccept-52 -j ACCEPT + +Filter 1927 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1926 + inet/filter/limit-1926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1926 -j ACCEPT + inet/filter/limit-1926 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1926 + inet6/filter/limit-1926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1926 -j ACCEPT + inet6/filter/limit-1926 -j DROP + +Filter 1928 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1927 + inet/filter/limit-1927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1927 -j logaccept-53 + inet/filter/limit-1927 -j DROP + inet/filter/logaccept-53 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-53 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1927 + inet6/filter/limit-1927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1927 -j logaccept-53 + inet6/filter/limit-1927 -j DROP + inet6/filter/logaccept-53 -j ACCEPT + +Filter 1929 {"conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1928 + inet/filter/limit-1928 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1928 -j ACCEPT + inet/filter/limit-1928 -m limit --limit 1/second -j LOG + inet/filter/limit-1928 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1928 + inet6/filter/limit-1928 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1928 -j ACCEPT + inet6/filter/limit-1928 -m limit --limit 1/second -j LOG + inet6/filter/limit-1928 -j DROP -Filter 1758 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +Filter 1930 {"action":"pass","conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1757 - inet/filter/INPUT -j limit-1757 - inet/filter/OUTPUT -j limit-1757 - inet/filter/limit-1757 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1757 - inet6/filter/INPUT -j limit-1757 - inet6/filter/OUTPUT -j limit-1757 - inet6/filter/limit-1757 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1757 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1929 + inet/filter/limit-1929 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1929 -j RETURN + inet/filter/limit-1929 -m limit --limit 1/second -j LOG + inet/filter/limit-1929 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1929 + inet6/filter/limit-1929 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1929 -j RETURN + inet6/filter/limit-1929 -m limit --limit 1/second -j LOG + inet6/filter/limit-1929 -j DROP + +Filter 1931 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1930 + inet/filter/limit-1930 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1930 -j logaccept-54 + inet/filter/limit-1930 -m limit --limit 1/second -j LOG + inet/filter/limit-1930 -j DROP + inet/filter/logaccept-54 -m limit --limit 1/second -j LOG + inet/filter/logaccept-54 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1930 + inet6/filter/limit-1930 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1930 -j logaccept-54 + inet6/filter/limit-1930 -m limit --limit 1/second -j LOG + inet6/filter/limit-1930 -j DROP + inet6/filter/logaccept-54 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-54 -j ACCEPT -Filter 1759 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +Filter 1932 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"mirror","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-1758 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1931 + inet/filter/limit-1931 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1931 -j logaccept-55 + inet/filter/limit-1931 -m limit --limit 1/second -j LOG + inet/filter/limit-1931 -j DROP + inet/filter/logaccept-55 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-55 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-55 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1931 + inet6/filter/limit-1931 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1931 -j logaccept-55 + inet6/filter/limit-1931 -m limit --limit 1/second -j LOG + inet6/filter/limit-1931 -j DROP + inet6/filter/logaccept-55 -j TEE --gateway fc00::2 + inet6/filter/logaccept-55 -j ACCEPT + +Filter 1933 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1932 + inet/filter/limit-1932 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1932 -j ACCEPT + inet/filter/limit-1932 -m limit --limit 1/second -j LOG + inet/filter/limit-1932 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1932 + inet6/filter/limit-1932 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1932 -j ACCEPT + inet6/filter/limit-1932 -m limit --limit 1/second -j LOG + inet6/filter/limit-1932 -j DROP + +Filter 1934 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1933 + inet/filter/limit-1933 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1933 -j logaccept-56 + inet/filter/limit-1933 -m limit --limit 1/second -j LOG + inet/filter/limit-1933 -j DROP + inet/filter/logaccept-56 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-56 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1933 + inet6/filter/limit-1933 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1933 -j logaccept-56 + inet6/filter/limit-1933 -m limit --limit 1/second -j LOG + inet6/filter/limit-1933 -j DROP + inet6/filter/logaccept-56 -j ACCEPT + +Filter 1935 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1934 + inet/filter/limit-1934 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1934 -j ACCEPT + inet/filter/limit-1934 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1934 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1934 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1934 + inet6/filter/limit-1934 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1934 -j ACCEPT + inet6/filter/limit-1934 -j TEE --gateway fc00::2 + inet6/filter/limit-1934 -j DROP + +Filter 1936 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1935 + inet/filter/limit-1935 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1935 -j RETURN + inet/filter/limit-1935 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1935 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1935 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1935 + inet6/filter/limit-1935 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1935 -j RETURN + inet6/filter/limit-1935 -j TEE --gateway fc00::2 + inet6/filter/limit-1935 -j DROP + +Filter 1937 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1936 + inet/filter/limit-1936 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1936 -j logaccept-57 + inet/filter/limit-1936 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1936 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1936 -j DROP + inet/filter/logaccept-57 -m limit --limit 1/second -j LOG + inet/filter/logaccept-57 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1936 + inet6/filter/limit-1936 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1936 -j logaccept-57 + inet6/filter/limit-1936 -j TEE --gateway fc00::2 + inet6/filter/limit-1936 -j DROP + inet6/filter/logaccept-57 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-57 -j ACCEPT + +Filter 1938 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1937 + inet/filter/limit-1937 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1937 -j logaccept-58 + inet/filter/limit-1937 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1937 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1937 -j DROP + inet/filter/logaccept-58 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-58 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-58 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1937 + inet6/filter/limit-1937 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1937 -j logaccept-58 + inet6/filter/limit-1937 -j TEE --gateway fc00::2 + inet6/filter/limit-1937 -j DROP + inet6/filter/logaccept-58 -j TEE --gateway fc00::2 + inet6/filter/logaccept-58 -j ACCEPT + +Filter 1939 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1938 + inet/filter/limit-1938 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1938 -j ACCEPT + inet/filter/limit-1938 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1938 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1938 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1938 + inet6/filter/limit-1938 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1938 -j ACCEPT + inet6/filter/limit-1938 -j TEE --gateway fc00::2 + inet6/filter/limit-1938 -j DROP + +Filter 1940 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1939 + inet/filter/limit-1939 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1939 -j logaccept-59 + inet/filter/limit-1939 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1939 -j TEE --gateway 10.0.0.2 + inet/filter/limit-1939 -j DROP + inet/filter/logaccept-59 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-59 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1939 + inet6/filter/limit-1939 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1939 -j logaccept-59 + inet6/filter/limit-1939 -j TEE --gateway fc00::2 + inet6/filter/limit-1939 -j DROP + inet6/filter/logaccept-59 -j ACCEPT + +Filter 1941 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1940 + inet/filter/limit-1940 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1940 -j ACCEPT + inet/filter/limit-1940 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1940 + inet6/filter/limit-1940 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1940 -j ACCEPT + inet6/filter/limit-1940 -j DROP + +Filter 1942 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1941 + inet/filter/limit-1941 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1941 -j RETURN + inet/filter/limit-1941 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1941 + inet6/filter/limit-1941 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1941 -j RETURN + inet6/filter/limit-1941 -j DROP + +Filter 1943 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1942 + inet/filter/limit-1942 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1942 -j logaccept-60 + inet/filter/limit-1942 -j DROP + inet/filter/logaccept-60 -m limit --limit 1/second -j LOG + inet/filter/logaccept-60 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1942 + inet6/filter/limit-1942 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1942 -j logaccept-60 + inet6/filter/limit-1942 -j DROP + inet6/filter/logaccept-60 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-60 -j ACCEPT + +Filter 1944 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1943 + inet/filter/limit-1943 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1943 -j logaccept-61 + inet/filter/limit-1943 -j DROP + inet/filter/logaccept-61 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-61 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-61 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1943 + inet6/filter/limit-1943 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1943 -j logaccept-61 + inet6/filter/limit-1943 -j DROP + inet6/filter/logaccept-61 -j TEE --gateway fc00::2 + inet6/filter/logaccept-61 -j ACCEPT + +Filter 1945 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1944 + inet/filter/limit-1944 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1944 -j ACCEPT + inet/filter/limit-1944 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1944 + inet6/filter/limit-1944 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1944 -j ACCEPT + inet6/filter/limit-1944 -j DROP + +Filter 1946 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1945 + inet/filter/limit-1945 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1945 -j logaccept-62 + inet/filter/limit-1945 -j DROP + inet/filter/logaccept-62 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-62 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1945 + inet6/filter/limit-1945 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1945 -j logaccept-62 + inet6/filter/limit-1945 -j DROP + inet6/filter/logaccept-62 -j ACCEPT + +Filter 1947 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1946 + inet/filter/limit-1946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1946 -j ACCEPT + inet/filter/limit-1946 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1946 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1946 + inet6/filter/limit-1946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1946 -j ACCEPT + inet6/filter/limit-1946 -j DROP + +Filter 1948 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1947 + inet/filter/limit-1947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1947 -j RETURN + inet/filter/limit-1947 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1947 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1947 + inet6/filter/limit-1947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1947 -j RETURN + inet6/filter/limit-1947 -j DROP + +Filter 1949 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1948 + inet/filter/limit-1948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1948 -j logaccept-63 + inet/filter/limit-1948 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1948 -j DROP + inet/filter/logaccept-63 -m limit --limit 1/second -j LOG + inet/filter/logaccept-63 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1948 + inet6/filter/limit-1948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1948 -j logaccept-63 + inet6/filter/limit-1948 -j DROP + inet6/filter/logaccept-63 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-63 -j ACCEPT + +Filter 1950 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1949 + inet/filter/limit-1949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1949 -j logaccept-64 + inet/filter/limit-1949 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1949 -j DROP + inet/filter/logaccept-64 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-64 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-64 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1949 + inet6/filter/limit-1949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1949 -j logaccept-64 + inet6/filter/limit-1949 -j DROP + inet6/filter/logaccept-64 -j TEE --gateway fc00::2 + inet6/filter/logaccept-64 -j ACCEPT + +Filter 1951 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1950 + inet/filter/limit-1950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1950 -j ACCEPT + inet/filter/limit-1950 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1950 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1950 + inet6/filter/limit-1950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1950 -j ACCEPT + inet6/filter/limit-1950 -j DROP + +Filter 1952 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1951 + inet/filter/limit-1951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1951 -j logaccept-65 + inet/filter/limit-1951 -m limit --limit 12/minute -j ULOG + inet/filter/limit-1951 -j DROP + inet/filter/logaccept-65 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-65 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1951 + inet6/filter/limit-1951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1951 -j logaccept-65 + inet6/filter/limit-1951 -j DROP + inet6/filter/logaccept-65 -j ACCEPT + +Filter 1953 {"flow-limit":1} +(filter-limit) + inet/filter/FORWARD -j limit-1952 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1758 + inet/filter/INPUT -j limit-1952 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1758 + inet/filter/OUTPUT -j limit-1952 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1758 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1758 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1758 + inet/filter/limit-1952 -m recent --name limit-1952 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1100 + inet/filter/limit-1952 -m recent --name limit-1952 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1100 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1100 -j DROP + inet6/filter/FORWARD -j limit-1952 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1758 + inet6/filter/INPUT -j limit-1952 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1758 + inet6/filter/OUTPUT -j limit-1952 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1758 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1758 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/limit-1952 -m recent --name limit-1952 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1100 + inet6/filter/limit-1952 -m recent --name limit-1952 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1100 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1100 -j DROP -Filter 1760 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +Filter 1954 {"action":"pass","flow-limit":1} (filter-limit) - inet/filter/FORWARD -j limit-1759 - inet/filter/INPUT -j limit-1759 - inet/filter/OUTPUT -j limit-1759 - inet/filter/limit-1759 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1759 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/FORWARD -j limit-1759 - inet6/filter/INPUT -j limit-1759 - inet6/filter/OUTPUT -j limit-1759 - inet6/filter/limit-1759 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1759 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j limit-1953 + inet/filter/INPUT -j limit-1953 + inet/filter/OUTPUT -j limit-1953 + inet/filter/limit-1953 -m recent --name limit-1953 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1101 + inet/filter/limit-1953 -m recent --name limit-1953 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1101 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1101 -j DROP + inet6/filter/FORWARD -j limit-1953 + inet6/filter/INPUT -j limit-1953 + inet6/filter/OUTPUT -j limit-1953 + inet6/filter/limit-1953 -m recent --name limit-1953 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1101 + inet6/filter/limit-1953 -m recent --name limit-1953 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1101 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1101 -j DROP -Filter 1761 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog"} +Filter 1955 {"flow-limit":1,"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1760 - inet/filter/FORWARD -j logaccept-final-125 - inet/filter/INPUT -j limit-1760 - inet/filter/INPUT -j logaccept-final-125 - inet/filter/OUTPUT -j limit-1760 - inet/filter/OUTPUT -j logaccept-final-125 - inet/filter/limit-1760 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1760 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-125 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-125 -j ACCEPT - inet6/filter/FORWARD -j limit-1760 - inet6/filter/FORWARD -j logaccept-final-125 - inet6/filter/INPUT -j limit-1760 - inet6/filter/INPUT -j logaccept-final-125 - inet6/filter/OUTPUT -j limit-1760 - inet6/filter/OUTPUT -j logaccept-final-125 - inet6/filter/limit-1760 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1760 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-125 -j ACCEPT + inet/filter/FORWARD -j limit-1954 + inet/filter/FORWARD -j logaccept-final-0 + inet/filter/INPUT -j limit-1954 + inet/filter/INPUT -j logaccept-final-0 + inet/filter/OUTPUT -j limit-1954 + inet/filter/OUTPUT -j logaccept-final-0 + inet/filter/limit-1954 -m recent --name limit-1954 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1102 + inet/filter/limit-1954 -m recent --name limit-1954 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-0 -j ACCEPT + inet/filter/logdrop-1102 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1102 -j DROP + inet6/filter/FORWARD -j limit-1954 + inet6/filter/FORWARD -j logaccept-final-0 + inet6/filter/INPUT -j limit-1954 + inet6/filter/INPUT -j logaccept-final-0 + inet6/filter/OUTPUT -j limit-1954 + inet6/filter/OUTPUT -j logaccept-final-0 + inet6/filter/limit-1954 -m recent --name limit-1954 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1102 + inet6/filter/limit-1954 -m recent --name limit-1954 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-0 -j ACCEPT + inet6/filter/logdrop-1102 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1102 -j DROP + +Filter 1956 {"action":"pass","flow-limit":1,"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1955 + inet/filter/INPUT -j limit-1955 + inet/filter/OUTPUT -j limit-1955 + inet/filter/limit-1955 -m recent --name limit-1955 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1103 + inet/filter/limit-1955 -m recent --name limit-1955 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1103 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1103 -j DROP + inet6/filter/FORWARD -j limit-1955 + inet6/filter/INPUT -j limit-1955 + inet6/filter/OUTPUT -j limit-1955 + inet6/filter/limit-1955 -m recent --name limit-1955 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1103 + inet6/filter/limit-1955 -m recent --name limit-1955 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1103 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1103 -j DROP + +Filter 1957 {"flow-limit":1,"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-1956 + inet/filter/FORWARD -j logaccept-final-1 + inet/filter/INPUT -j limit-1956 + inet/filter/INPUT -j logaccept-final-1 + inet/filter/OUTPUT -j limit-1956 + inet/filter/OUTPUT -j logaccept-final-1 + inet/filter/limit-1956 -m recent --name limit-1956 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1104 + inet/filter/limit-1956 -m recent --name limit-1956 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-1 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-1 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-1 -j ACCEPT + inet/filter/logdrop-1104 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1104 -j DROP + inet6/filter/FORWARD -j limit-1956 + inet6/filter/FORWARD -j logaccept-final-1 + inet6/filter/INPUT -j limit-1956 + inet6/filter/INPUT -j logaccept-final-1 + inet6/filter/OUTPUT -j limit-1956 + inet6/filter/OUTPUT -j logaccept-final-1 + inet6/filter/limit-1956 -m recent --name limit-1956 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1104 + inet6/filter/limit-1956 -m recent --name limit-1956 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-1 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-1 -j ACCEPT + inet6/filter/logdrop-1104 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1104 -j DROP -Filter 1762 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog"} +Filter 1958 {"action":"pass","flow-limit":1,"log":"mirror"} (filter-limit) - inet/filter/FORWARD -j limit-1761 - inet/filter/INPUT -j limit-1761 - inet/filter/OUTPUT -j limit-1761 - inet/filter/limit-1761 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1761 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1761 - inet6/filter/INPUT -j limit-1761 - inet6/filter/OUTPUT -j limit-1761 - inet6/filter/limit-1761 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j limit-1957 + inet/filter/INPUT -j limit-1957 + inet/filter/OUTPUT -j limit-1957 + inet/filter/limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1105 + inet/filter/limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1105 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1105 -j DROP + inet6/filter/FORWARD -j limit-1957 + inet6/filter/INPUT -j limit-1957 + inet6/filter/OUTPUT -j limit-1957 + inet6/filter/limit-1957 -m recent --name limit-1957 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1105 + inet6/filter/limit-1957 -m recent --name limit-1957 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1105 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1105 -j DROP -Filter 1763 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +Filter 1959 {"flow-limit":1,"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1762 + inet/filter/FORWARD -j limit-1958 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1762 + inet/filter/INPUT -j limit-1958 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1762 + inet/filter/OUTPUT -j limit-1958 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1762 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1762 + inet/filter/limit-1958 -m recent --name limit-1958 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1106 + inet/filter/limit-1958 -m recent --name limit-1958 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1106 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1106 -j DROP + inet6/filter/FORWARD -j limit-1958 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1762 + inet6/filter/INPUT -j limit-1958 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1762 + inet6/filter/OUTPUT -j limit-1958 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1762 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1958 -m recent --name limit-1958 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1106 + inet6/filter/limit-1958 -m recent --name limit-1958 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1106 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1106 -j DROP -Filter 1764 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +Filter 1960 {"action":"pass","flow-limit":1,"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1763 - inet/filter/INPUT -j limit-1763 - inet/filter/OUTPUT -j limit-1763 - inet/filter/limit-1763 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1763 - inet6/filter/INPUT -j limit-1763 - inet6/filter/OUTPUT -j limit-1763 - inet6/filter/limit-1763 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j limit-1959 + inet/filter/INPUT -j limit-1959 + inet/filter/OUTPUT -j limit-1959 + inet/filter/limit-1959 -m recent --name limit-1959 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1107 + inet/filter/limit-1959 -m recent --name limit-1959 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1107 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1107 -j DROP + inet6/filter/FORWARD -j limit-1959 + inet6/filter/INPUT -j limit-1959 + inet6/filter/OUTPUT -j limit-1959 + inet6/filter/limit-1959 -m recent --name limit-1959 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1107 + inet6/filter/limit-1959 -m recent --name limit-1959 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1107 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1107 -j DROP -Filter 1765 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 1961 {"flow-limit":1,"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1764 - inet/filter/FORWARD -j logaccept-final-126 - inet/filter/INPUT -j limit-1764 - inet/filter/INPUT -j logaccept-final-126 - inet/filter/OUTPUT -j limit-1764 - inet/filter/OUTPUT -j logaccept-final-126 - inet/filter/limit-1764 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-126 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-126 -j ACCEPT - inet6/filter/FORWARD -j limit-1764 - inet6/filter/FORWARD -j logaccept-final-126 - inet6/filter/INPUT -j limit-1764 - inet6/filter/INPUT -j logaccept-final-126 - inet6/filter/OUTPUT -j limit-1764 - inet6/filter/OUTPUT -j logaccept-final-126 - inet6/filter/limit-1764 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-126 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-126 -j ACCEPT + inet/filter/FORWARD -j limit-1960 + inet/filter/FORWARD -j logaccept-final-2 + inet/filter/INPUT -j limit-1960 + inet/filter/INPUT -j logaccept-final-2 + inet/filter/OUTPUT -j limit-1960 + inet/filter/OUTPUT -j logaccept-final-2 + inet/filter/limit-1960 -m recent --name limit-1960 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1108 + inet/filter/limit-1960 -m recent --name limit-1960 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-2 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-2 -j ACCEPT + inet/filter/logdrop-1108 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1108 -j DROP + inet6/filter/FORWARD -j limit-1960 + inet6/filter/FORWARD -j logaccept-final-2 + inet6/filter/INPUT -j limit-1960 + inet6/filter/INPUT -j logaccept-final-2 + inet6/filter/OUTPUT -j limit-1960 + inet6/filter/OUTPUT -j logaccept-final-2 + inet6/filter/limit-1960 -m recent --name limit-1960 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1108 + inet6/filter/limit-1960 -m recent --name limit-1960 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-2 -j ACCEPT + inet6/filter/logdrop-1108 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1108 -j DROP -Filter 1766 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 1962 {"action":"pass","flow-limit":1,"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1765 - inet/filter/INPUT -j limit-1765 - inet/filter/OUTPUT -j limit-1765 - inet/filter/limit-1765 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1765 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -j limit-1765 - inet6/filter/INPUT -j limit-1765 - inet6/filter/OUTPUT -j limit-1765 - inet6/filter/limit-1765 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-1765 -m limit --limit 1/second -j LOG + inet/filter/FORWARD -j limit-1961 + inet/filter/INPUT -j limit-1961 + inet/filter/OUTPUT -j limit-1961 + inet/filter/limit-1961 -m recent --name limit-1961 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1109 + inet/filter/limit-1961 -m recent --name limit-1961 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1109 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1109 -j DROP + inet6/filter/FORWARD -j limit-1961 + inet6/filter/INPUT -j limit-1961 + inet6/filter/OUTPUT -j limit-1961 + inet6/filter/limit-1961 -m recent --name limit-1961 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1109 + inet6/filter/logdrop-1109 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1109 -j DROP -Filter 1767 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 1963 {"flow-limit":{"log":false}} (filter-limit) - inet/filter/FORWARD -j limit-1766 + inet/filter/FORWARD -j limit-1962 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1766 + inet/filter/INPUT -j limit-1962 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1766 + inet/filter/OUTPUT -j limit-1962 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1766 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1766 + inet/filter/limit-1962 -m recent --name limit-1962 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1962 -m recent --name limit-1962 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1962 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1766 + inet6/filter/INPUT -j limit-1962 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1766 + inet6/filter/OUTPUT -j limit-1962 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1766 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1962 -m recent --name limit-1962 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1962 -m recent --name limit-1962 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1768 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 1964 {"action":"pass","flow-limit":{"log":false}} (filter-limit) - inet/filter/FORWARD -j limit-1767 - inet/filter/INPUT -j limit-1767 - inet/filter/OUTPUT -j limit-1767 - inet/filter/limit-1767 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -j limit-1767 - inet6/filter/INPUT -j limit-1767 - inet6/filter/OUTPUT -j limit-1767 - inet6/filter/limit-1767 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j limit-1963 + inet/filter/INPUT -j limit-1963 + inet/filter/OUTPUT -j limit-1963 + inet/filter/limit-1963 -m recent --name limit-1963 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1963 -m recent --name limit-1963 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1963 + inet6/filter/INPUT -j limit-1963 + inet6/filter/OUTPUT -j limit-1963 + inet6/filter/limit-1963 -m recent --name limit-1963 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1963 -m recent --name limit-1963 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1769 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog"} +Filter 1965 {"flow-limit":{"log":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1768 - inet/filter/FORWARD -j logaccept-final-127 - inet/filter/INPUT -j limit-1768 - inet/filter/INPUT -j logaccept-final-127 - inet/filter/OUTPUT -j limit-1768 - inet/filter/OUTPUT -j logaccept-final-127 - inet/filter/limit-1768 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/logaccept-final-127 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-127 -j ACCEPT - inet6/filter/FORWARD -j limit-1768 - inet6/filter/FORWARD -j logaccept-final-127 - inet6/filter/INPUT -j limit-1768 - inet6/filter/INPUT -j logaccept-final-127 - inet6/filter/OUTPUT -j limit-1768 - inet6/filter/OUTPUT -j logaccept-final-127 - inet6/filter/limit-1768 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/logaccept-final-127 -j ACCEPT + inet/filter/FORWARD -j limit-1964 + inet/filter/FORWARD -j logaccept-final-3 + inet/filter/INPUT -j limit-1964 + inet/filter/INPUT -j logaccept-final-3 + inet/filter/OUTPUT -j limit-1964 + inet/filter/OUTPUT -j logaccept-final-3 + inet/filter/limit-1964 -m recent --name limit-1964 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1964 -m recent --name limit-1964 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-3 -j ACCEPT + inet6/filter/FORWARD -j limit-1964 + inet6/filter/FORWARD -j logaccept-final-3 + inet6/filter/INPUT -j limit-1964 + inet6/filter/INPUT -j logaccept-final-3 + inet6/filter/OUTPUT -j limit-1964 + inet6/filter/OUTPUT -j logaccept-final-3 + inet6/filter/limit-1964 -m recent --name limit-1964 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1964 -m recent --name limit-1964 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-3 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-3 -j ACCEPT + +Filter 1966 {"action":"pass","flow-limit":{"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1965 + inet/filter/INPUT -j limit-1965 + inet/filter/OUTPUT -j limit-1965 + inet/filter/limit-1965 -m recent --name limit-1965 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1965 -m recent --name limit-1965 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-1965 + inet6/filter/INPUT -j limit-1965 + inet6/filter/OUTPUT -j limit-1965 + inet6/filter/limit-1965 -m recent --name limit-1965 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1965 -m recent --name limit-1965 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1967 {"flow-limit":{"log":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-1966 + inet/filter/FORWARD -j logaccept-final-4 + inet/filter/INPUT -j limit-1966 + inet/filter/INPUT -j logaccept-final-4 + inet/filter/OUTPUT -j limit-1966 + inet/filter/OUTPUT -j logaccept-final-4 + inet/filter/limit-1966 -m recent --name limit-1966 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1966 -m recent --name limit-1966 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-4 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-4 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-4 -j ACCEPT + inet6/filter/FORWARD -j limit-1966 + inet6/filter/FORWARD -j logaccept-final-4 + inet6/filter/INPUT -j limit-1966 + inet6/filter/INPUT -j logaccept-final-4 + inet6/filter/OUTPUT -j limit-1966 + inet6/filter/OUTPUT -j logaccept-final-4 + inet6/filter/limit-1966 -m recent --name limit-1966 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1966 -m recent --name limit-1966 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-4 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-4 -j ACCEPT -Filter 1770 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog"} +Filter 1968 {"action":"pass","flow-limit":{"log":false},"log":"mirror"} (filter-limit) - inet/filter/FORWARD -j limit-1769 - inet/filter/INPUT -j limit-1769 - inet/filter/OUTPUT -j limit-1769 - inet/filter/limit-1769 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-1769 -m limit --limit 12/minute -j ULOG - inet6/filter/FORWARD -j limit-1769 - inet6/filter/INPUT -j limit-1769 - inet6/filter/OUTPUT -j limit-1769 - inet6/filter/limit-1769 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j limit-1967 + inet/filter/INPUT -j limit-1967 + inet/filter/OUTPUT -j limit-1967 + inet/filter/limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-1967 + inet6/filter/INPUT -j limit-1967 + inet6/filter/OUTPUT -j limit-1967 + inet6/filter/limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 1771 {"flow-limit":{"interval":5,"log":"ulog"}} +Filter 1969 {"flow-limit":{"log":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1770 + inet/filter/FORWARD -j limit-1968 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1770 + inet/filter/INPUT -j limit-1968 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1770 + inet/filter/OUTPUT -j limit-1968 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1770 -m recent --name limit-1770 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-816 - inet/filter/limit-1770 -m recent --name limit-1770 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-816 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-816 -j DROP - inet6/filter/FORWARD -j limit-1770 + inet/filter/limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1968 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1770 + inet6/filter/INPUT -j limit-1968 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1770 + inet6/filter/OUTPUT -j limit-1968 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1770 -m recent --name limit-1770 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-816 - inet6/filter/limit-1770 -m recent --name limit-1770 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-816 -j DROP + inet6/filter/limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1772 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"}} +Filter 1970 {"action":"pass","flow-limit":{"log":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1771 - inet/filter/INPUT -j limit-1771 - inet/filter/OUTPUT -j limit-1771 - inet/filter/limit-1771 -m recent --name limit-1771 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-817 - inet/filter/limit-1771 -m recent --name limit-1771 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-817 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-817 -j DROP - inet6/filter/FORWARD -j limit-1771 - inet6/filter/INPUT -j limit-1771 - inet6/filter/OUTPUT -j limit-1771 - inet6/filter/limit-1771 -m recent --name limit-1771 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-817 - inet6/filter/limit-1771 -m recent --name limit-1771 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-817 -j DROP + inet/filter/FORWARD -j limit-1969 + inet/filter/INPUT -j limit-1969 + inet/filter/OUTPUT -j limit-1969 + inet/filter/limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1969 + inet6/filter/INPUT -j limit-1969 + inet6/filter/OUTPUT -j limit-1969 + inet6/filter/limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1773 {"flow-limit":{"interval":5,"log":"ulog"},"log":true} +Filter 1971 {"flow-limit":{"log":false},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1772 - inet/filter/FORWARD -j logaccept-final-128 - inet/filter/INPUT -j limit-1772 - inet/filter/INPUT -j logaccept-final-128 - inet/filter/OUTPUT -j limit-1772 - inet/filter/OUTPUT -j logaccept-final-128 - inet/filter/limit-1772 -m recent --name limit-1772 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-818 - inet/filter/limit-1772 -m recent --name limit-1772 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-128 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-128 -j ACCEPT - inet/filter/logdrop-818 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-818 -j DROP - inet6/filter/FORWARD -j limit-1772 - inet6/filter/FORWARD -j logaccept-final-128 - inet6/filter/INPUT -j limit-1772 - inet6/filter/INPUT -j logaccept-final-128 - inet6/filter/OUTPUT -j limit-1772 - inet6/filter/OUTPUT -j logaccept-final-128 - inet6/filter/limit-1772 -m recent --name limit-1772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-818 - inet6/filter/limit-1772 -m recent --name limit-1772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-128 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-128 -j ACCEPT - inet6/filter/logdrop-818 -j DROP + inet/filter/FORWARD -j limit-1970 + inet/filter/FORWARD -j logaccept-final-5 + inet/filter/INPUT -j limit-1970 + inet/filter/INPUT -j logaccept-final-5 + inet/filter/OUTPUT -j limit-1970 + inet/filter/OUTPUT -j logaccept-final-5 + inet/filter/limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-5 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-5 -j ACCEPT + inet6/filter/FORWARD -j limit-1970 + inet6/filter/FORWARD -j logaccept-final-5 + inet6/filter/INPUT -j limit-1970 + inet6/filter/INPUT -j logaccept-final-5 + inet6/filter/OUTPUT -j limit-1970 + inet6/filter/OUTPUT -j logaccept-final-5 + inet6/filter/limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-5 -j ACCEPT -Filter 1774 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"log":true} +Filter 1972 {"action":"pass","flow-limit":{"log":false},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1773 - inet/filter/INPUT -j limit-1773 - inet/filter/OUTPUT -j limit-1773 - inet/filter/limit-1773 -m recent --name limit-1773 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-819 - inet/filter/limit-1773 -m recent --name limit-1773 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-819 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-819 -j DROP - inet6/filter/FORWARD -j limit-1773 - inet6/filter/INPUT -j limit-1773 - inet6/filter/OUTPUT -j limit-1773 - inet6/filter/limit-1773 -m recent --name limit-1773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-819 - inet6/filter/limit-1773 -m recent --name limit-1773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-819 -j DROP + inet/filter/FORWARD -j limit-1971 + inet/filter/INPUT -j limit-1971 + inet/filter/OUTPUT -j limit-1971 + inet/filter/limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-1971 + inet6/filter/INPUT -j limit-1971 + inet6/filter/OUTPUT -j limit-1971 + inet6/filter/limit-1971 -m recent --name limit-1971 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 1775 {"flow-limit":{"interval":5,"log":"ulog"},"log":"none"} +Filter 1973 {"flow-limit":{"log":false,"name":"A"}} (filter-limit) - inet/filter/FORWARD -j limit-1774 + inet/filter/FORWARD -j limit-1972 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1774 + inet/filter/INPUT -j limit-1972 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1774 + inet/filter/OUTPUT -j limit-1972 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1774 -m recent --name limit-1774 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-820 - inet/filter/limit-1774 -m recent --name limit-1774 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-820 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-820 -j DROP - inet6/filter/FORWARD -j limit-1774 + inet/filter/limit-1972 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1972 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1972 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1774 + inet6/filter/INPUT -j limit-1972 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1774 + inet6/filter/OUTPUT -j limit-1972 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1774 -m recent --name limit-1774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-820 - inet6/filter/limit-1774 -m recent --name limit-1774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-820 -j DROP + inet6/filter/limit-1972 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1972 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1776 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"log":"none"} +Filter 1974 {"action":"pass","flow-limit":{"log":false,"name":"A"}} (filter-limit) - inet/filter/FORWARD -j limit-1775 - inet/filter/INPUT -j limit-1775 - inet/filter/OUTPUT -j limit-1775 - inet/filter/limit-1775 -m recent --name limit-1775 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-821 - inet/filter/limit-1775 -m recent --name limit-1775 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-821 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-821 -j DROP - inet6/filter/FORWARD -j limit-1775 - inet6/filter/INPUT -j limit-1775 - inet6/filter/OUTPUT -j limit-1775 - inet6/filter/limit-1775 -m recent --name limit-1775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-821 - inet6/filter/limit-1775 -m recent --name limit-1775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-821 -j DROP + inet/filter/FORWARD -j limit-1973 + inet/filter/INPUT -j limit-1973 + inet/filter/OUTPUT -j limit-1973 + inet/filter/limit-1973 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1973 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1973 + inet6/filter/INPUT -j limit-1973 + inet6/filter/OUTPUT -j limit-1973 + inet6/filter/limit-1973 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1973 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1777 {"flow-limit":{"interval":5,"log":"ulog"},"log":"ulog"} +Filter 1975 {"flow-limit":{"log":false,"name":"A"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1776 - inet/filter/FORWARD -j logaccept-final-129 - inet/filter/INPUT -j limit-1776 - inet/filter/INPUT -j logaccept-final-129 - inet/filter/OUTPUT -j limit-1776 - inet/filter/OUTPUT -j logaccept-final-129 - inet/filter/limit-1776 -m recent --name limit-1776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-822 - inet/filter/limit-1776 -m recent --name limit-1776 --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-129 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-129 -j ACCEPT - inet/filter/logdrop-822 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-822 -j DROP - inet6/filter/FORWARD -j limit-1776 - inet6/filter/FORWARD -j logaccept-final-129 - inet6/filter/INPUT -j limit-1776 - inet6/filter/INPUT -j logaccept-final-129 - inet6/filter/OUTPUT -j limit-1776 - inet6/filter/OUTPUT -j logaccept-final-129 - inet6/filter/limit-1776 -m recent --name limit-1776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-822 - inet6/filter/limit-1776 -m recent --name limit-1776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-129 -j ACCEPT - inet6/filter/logdrop-822 -j DROP + inet/filter/FORWARD -j limit-1974 + inet/filter/FORWARD -j logaccept-final-6 + inet/filter/INPUT -j limit-1974 + inet/filter/INPUT -j logaccept-final-6 + inet/filter/OUTPUT -j limit-1974 + inet/filter/OUTPUT -j logaccept-final-6 + inet/filter/limit-1974 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1974 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-6 -j ACCEPT + inet6/filter/FORWARD -j limit-1974 + inet6/filter/FORWARD -j logaccept-final-6 + inet6/filter/INPUT -j limit-1974 + inet6/filter/INPUT -j logaccept-final-6 + inet6/filter/OUTPUT -j limit-1974 + inet6/filter/OUTPUT -j logaccept-final-6 + inet6/filter/limit-1974 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1974 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-6 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-6 -j ACCEPT -Filter 1778 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"log":"ulog"} +Filter 1976 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1777 - inet/filter/INPUT -j limit-1777 - inet/filter/OUTPUT -j limit-1777 - inet/filter/limit-1777 -m recent --name limit-1777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-823 - inet/filter/limit-1777 -m recent --name limit-1777 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-823 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-823 -j DROP - inet6/filter/FORWARD -j limit-1777 - inet6/filter/INPUT -j limit-1777 - inet6/filter/OUTPUT -j limit-1777 - inet6/filter/limit-1777 -m recent --name limit-1777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-823 - inet6/filter/logdrop-823 -j DROP + inet/filter/FORWARD -j limit-1975 + inet/filter/INPUT -j limit-1975 + inet/filter/OUTPUT -j limit-1975 + inet/filter/limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-1975 + inet6/filter/INPUT -j limit-1975 + inet6/filter/OUTPUT -j limit-1975 + inet6/filter/limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1977 {"flow-limit":{"log":false,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-1976 + inet/filter/FORWARD -j logaccept-final-7 + inet/filter/INPUT -j limit-1976 + inet/filter/INPUT -j logaccept-final-7 + inet/filter/OUTPUT -j limit-1976 + inet/filter/OUTPUT -j logaccept-final-7 + inet/filter/limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-7 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-7 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-7 -j ACCEPT + inet6/filter/FORWARD -j limit-1976 + inet6/filter/FORWARD -j logaccept-final-7 + inet6/filter/INPUT -j limit-1976 + inet6/filter/INPUT -j logaccept-final-7 + inet6/filter/OUTPUT -j limit-1976 + inet6/filter/OUTPUT -j logaccept-final-7 + inet6/filter/limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-7 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-7 -j ACCEPT + +Filter 1978 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-1977 + inet/filter/INPUT -j limit-1977 + inet/filter/OUTPUT -j limit-1977 + inet/filter/limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-1977 + inet6/filter/INPUT -j limit-1977 + inet6/filter/OUTPUT -j limit-1977 + inet6/filter/limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 1779 {"flow-limit":{"interval":5,"log":"ulog","name":"A"}} +Filter 1979 {"flow-limit":{"log":false,"name":"A"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1778 + inet/filter/FORWARD -j limit-1978 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1778 + inet/filter/INPUT -j limit-1978 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1778 + inet/filter/OUTPUT -j limit-1978 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1778 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-824 - inet/filter/limit-1778 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-824 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-824 -j DROP - inet6/filter/FORWARD -j limit-1778 + inet/filter/limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1978 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1778 + inet6/filter/INPUT -j limit-1978 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1778 + inet6/filter/OUTPUT -j limit-1978 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1778 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-824 - inet6/filter/limit-1778 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-824 -j DROP + inet6/filter/limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1780 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"}} +Filter 1980 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1779 - inet/filter/INPUT -j limit-1779 - inet/filter/OUTPUT -j limit-1779 - inet/filter/limit-1779 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-825 - inet/filter/limit-1779 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-825 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-825 -j DROP - inet6/filter/FORWARD -j limit-1779 - inet6/filter/INPUT -j limit-1779 - inet6/filter/OUTPUT -j limit-1779 - inet6/filter/limit-1779 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-825 - inet6/filter/limit-1779 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-825 -j DROP + inet/filter/FORWARD -j limit-1979 + inet/filter/INPUT -j limit-1979 + inet/filter/OUTPUT -j limit-1979 + inet/filter/limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1979 + inet6/filter/INPUT -j limit-1979 + inet6/filter/OUTPUT -j limit-1979 + inet6/filter/limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1781 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":true} +Filter 1981 {"flow-limit":{"log":false,"name":"A"},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1780 - inet/filter/FORWARD -j logaccept-final-130 - inet/filter/INPUT -j limit-1780 - inet/filter/INPUT -j logaccept-final-130 - inet/filter/OUTPUT -j limit-1780 - inet/filter/OUTPUT -j logaccept-final-130 - inet/filter/limit-1780 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-826 - inet/filter/limit-1780 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-130 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-130 -j ACCEPT - inet/filter/logdrop-826 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-826 -j DROP - inet6/filter/FORWARD -j limit-1780 - inet6/filter/FORWARD -j logaccept-final-130 - inet6/filter/INPUT -j limit-1780 - inet6/filter/INPUT -j logaccept-final-130 - inet6/filter/OUTPUT -j limit-1780 - inet6/filter/OUTPUT -j logaccept-final-130 - inet6/filter/limit-1780 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-826 - inet6/filter/limit-1780 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-130 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-130 -j ACCEPT - inet6/filter/logdrop-826 -j DROP + inet/filter/FORWARD -j limit-1980 + inet/filter/FORWARD -j logaccept-final-8 + inet/filter/INPUT -j limit-1980 + inet/filter/INPUT -j logaccept-final-8 + inet/filter/OUTPUT -j limit-1980 + inet/filter/OUTPUT -j logaccept-final-8 + inet/filter/limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-8 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-8 -j ACCEPT + inet6/filter/FORWARD -j limit-1980 + inet6/filter/FORWARD -j logaccept-final-8 + inet6/filter/INPUT -j limit-1980 + inet6/filter/INPUT -j logaccept-final-8 + inet6/filter/OUTPUT -j limit-1980 + inet6/filter/OUTPUT -j logaccept-final-8 + inet6/filter/limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-8 -j ACCEPT -Filter 1782 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":true} +Filter 1982 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1781 - inet/filter/INPUT -j limit-1781 - inet/filter/OUTPUT -j limit-1781 - inet/filter/limit-1781 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-827 - inet/filter/limit-1781 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-827 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-827 -j DROP - inet6/filter/FORWARD -j limit-1781 - inet6/filter/INPUT -j limit-1781 - inet6/filter/OUTPUT -j limit-1781 - inet6/filter/limit-1781 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-827 - inet6/filter/limit-1781 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-827 -j DROP + inet/filter/FORWARD -j limit-1981 + inet/filter/INPUT -j limit-1981 + inet/filter/OUTPUT -j limit-1981 + inet/filter/limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-1981 + inet6/filter/INPUT -j limit-1981 + inet6/filter/OUTPUT -j limit-1981 + inet6/filter/limit-1981 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 1783 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none"} +Filter 1983 {"flow-limit":{"log":false,"name":"A","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-1782 + inet/filter/FORWARD -j limit-1982 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1782 + inet/filter/INPUT -j limit-1982 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1782 + inet/filter/OUTPUT -j limit-1982 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-828 - inet/filter/limit-1782 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-828 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-828 -j DROP - inet6/filter/FORWARD -j limit-1782 + inet/filter/limit-1982 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-1982 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1782 + inet6/filter/INPUT -j limit-1982 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1782 + inet6/filter/OUTPUT -j limit-1982 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-828 - inet6/filter/limit-1782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-828 -j DROP + inet6/filter/limit-1982 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1784 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none"} +Filter 1984 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-1783 - inet/filter/INPUT -j limit-1783 - inet/filter/OUTPUT -j limit-1783 - inet/filter/limit-1783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-829 - inet/filter/limit-1783 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-829 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-829 -j DROP - inet6/filter/FORWARD -j limit-1783 - inet6/filter/INPUT -j limit-1783 - inet6/filter/OUTPUT -j limit-1783 - inet6/filter/limit-1783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-829 - inet6/filter/limit-1783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-829 -j DROP + inet/filter/FORWARD -j limit-1983 + inet/filter/INPUT -j limit-1983 + inet/filter/OUTPUT -j limit-1983 + inet/filter/limit-1983 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-1983 + inet6/filter/INPUT -j limit-1983 + inet6/filter/OUTPUT -j limit-1983 + inet6/filter/limit-1983 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1785 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog"} +Filter 1985 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1784 - inet/filter/FORWARD -j logaccept-final-131 - inet/filter/INPUT -j limit-1784 - inet/filter/INPUT -j logaccept-final-131 - inet/filter/OUTPUT -j limit-1784 - inet/filter/OUTPUT -j logaccept-final-131 - inet/filter/limit-1784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-830 - inet/filter/limit-1784 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logaccept-final-131 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-131 -j ACCEPT - inet/filter/logdrop-830 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-830 -j DROP - inet6/filter/FORWARD -j limit-1784 - inet6/filter/FORWARD -j logaccept-final-131 - inet6/filter/INPUT -j limit-1784 - inet6/filter/INPUT -j logaccept-final-131 - inet6/filter/OUTPUT -j limit-1784 - inet6/filter/OUTPUT -j logaccept-final-131 - inet6/filter/limit-1784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-830 - inet6/filter/limit-1784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-131 -j ACCEPT - inet6/filter/logdrop-830 -j DROP + inet/filter/FORWARD -j limit-1984 + inet/filter/FORWARD -j logaccept-final-9 + inet/filter/INPUT -j limit-1984 + inet/filter/INPUT -j logaccept-final-9 + inet/filter/OUTPUT -j limit-1984 + inet/filter/OUTPUT -j logaccept-final-9 + inet/filter/limit-1984 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-9 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-9 -j ACCEPT + inet6/filter/FORWARD -j limit-1984 + inet6/filter/FORWARD -j logaccept-final-9 + inet6/filter/INPUT -j limit-1984 + inet6/filter/INPUT -j logaccept-final-9 + inet6/filter/OUTPUT -j limit-1984 + inet6/filter/OUTPUT -j logaccept-final-9 + inet6/filter/limit-1984 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-9 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-9 -j ACCEPT -Filter 1786 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog"} +Filter 1986 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1785 - inet/filter/INPUT -j limit-1785 - inet/filter/OUTPUT -j limit-1785 - inet/filter/limit-1785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-831 - inet/filter/limit-1785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-831 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-831 -j DROP - inet6/filter/FORWARD -j limit-1785 - inet6/filter/INPUT -j limit-1785 - inet6/filter/OUTPUT -j limit-1785 - inet6/filter/limit-1785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-831 - inet6/filter/logdrop-831 -j DROP + inet/filter/FORWARD -j limit-1985 + inet/filter/INPUT -j limit-1985 + inet/filter/OUTPUT -j limit-1985 + inet/filter/limit-1985 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1985 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-1985 + inet6/filter/INPUT -j limit-1985 + inet6/filter/OUTPUT -j limit-1985 + inet6/filter/limit-1985 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1985 -m limit --limit 1/second -j LOG + +Filter 1987 {"flow-limit":{"log":false,"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-1986 + inet/filter/FORWARD -j logaccept-final-10 + inet/filter/INPUT -j limit-1986 + inet/filter/INPUT -j logaccept-final-10 + inet/filter/OUTPUT -j limit-1986 + inet/filter/OUTPUT -j logaccept-final-10 + inet/filter/limit-1986 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-10 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-10 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-10 -j ACCEPT + inet6/filter/FORWARD -j limit-1986 + inet6/filter/FORWARD -j logaccept-final-10 + inet6/filter/INPUT -j limit-1986 + inet6/filter/INPUT -j logaccept-final-10 + inet6/filter/OUTPUT -j limit-1986 + inet6/filter/OUTPUT -j logaccept-final-10 + inet6/filter/limit-1986 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-10 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-10 -j ACCEPT -Filter 1787 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false}} +Filter 1988 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"mirror"} (filter-limit) - inet/filter/FORWARD -j limit-1786 + inet/filter/FORWARD -j limit-1987 + inet/filter/INPUT -j limit-1987 + inet/filter/OUTPUT -j limit-1987 + inet/filter/limit-1987 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1987 -j TEE --gateway 10.0.0.1 + inet/filter/limit-1987 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-1987 + inet6/filter/INPUT -j limit-1987 + inet6/filter/OUTPUT -j limit-1987 + inet6/filter/limit-1987 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1987 -j TEE --gateway fc00::2 + +Filter 1989 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1988 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1786 + inet/filter/INPUT -j limit-1988 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1786 + inet/filter/OUTPUT -j limit-1988 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1786 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-832 - inet/filter/logdrop-832 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-832 -j DROP - inet6/filter/FORWARD -j limit-1786 + inet/filter/limit-1988 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-1988 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1786 + inet6/filter/INPUT -j limit-1988 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1786 + inet6/filter/OUTPUT -j limit-1988 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-832 - inet6/filter/logdrop-832 -j DROP + inet6/filter/limit-1988 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1788 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false}} +Filter 1990 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1787 - inet/filter/INPUT -j limit-1787 - inet/filter/OUTPUT -j limit-1787 - inet/filter/limit-1787 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-833 - inet/filter/logdrop-833 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-833 -j DROP - inet6/filter/FORWARD -j limit-1787 - inet6/filter/INPUT -j limit-1787 - inet6/filter/OUTPUT -j limit-1787 - inet6/filter/limit-1787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-833 - inet6/filter/logdrop-833 -j DROP + inet/filter/FORWARD -j limit-1989 + inet/filter/INPUT -j limit-1989 + inet/filter/OUTPUT -j limit-1989 + inet/filter/limit-1989 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-1989 + inet6/filter/INPUT -j limit-1989 + inet6/filter/OUTPUT -j limit-1989 + inet6/filter/limit-1989 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1789 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true} +Filter 1991 {"flow-limit":{"log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1788 - inet/filter/FORWARD -j logaccept-final-132 - inet/filter/INPUT -j limit-1788 - inet/filter/INPUT -j logaccept-final-132 - inet/filter/OUTPUT -j limit-1788 - inet/filter/OUTPUT -j logaccept-final-132 - inet/filter/limit-1788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-834 - inet/filter/logaccept-final-132 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-132 -j ACCEPT - inet/filter/logdrop-834 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-834 -j DROP - inet6/filter/FORWARD -j limit-1788 - inet6/filter/FORWARD -j logaccept-final-132 - inet6/filter/INPUT -j limit-1788 - inet6/filter/INPUT -j logaccept-final-132 - inet6/filter/OUTPUT -j limit-1788 - inet6/filter/OUTPUT -j logaccept-final-132 - inet6/filter/limit-1788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-834 - inet6/filter/logaccept-final-132 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-132 -j ACCEPT - inet6/filter/logdrop-834 -j DROP + inet/filter/FORWARD -j limit-1990 + inet/filter/FORWARD -j logaccept-final-11 + inet/filter/INPUT -j limit-1990 + inet/filter/INPUT -j logaccept-final-11 + inet/filter/OUTPUT -j limit-1990 + inet/filter/OUTPUT -j logaccept-final-11 + inet/filter/limit-1990 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-11 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-11 -j ACCEPT + inet6/filter/FORWARD -j limit-1990 + inet6/filter/FORWARD -j logaccept-final-11 + inet6/filter/INPUT -j limit-1990 + inet6/filter/INPUT -j logaccept-final-11 + inet6/filter/OUTPUT -j limit-1990 + inet6/filter/OUTPUT -j logaccept-final-11 + inet6/filter/limit-1990 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-11 -j ACCEPT -Filter 1790 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true} +Filter 1992 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1789 - inet/filter/INPUT -j limit-1789 - inet/filter/OUTPUT -j limit-1789 - inet/filter/limit-1789 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-835 - inet/filter/limit-1789 -m limit --limit 1/second -j LOG - inet/filter/logdrop-835 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-835 -j DROP - inet6/filter/FORWARD -j limit-1789 - inet6/filter/INPUT -j limit-1789 - inet6/filter/OUTPUT -j limit-1789 - inet6/filter/limit-1789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-835 - inet6/filter/limit-1789 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-835 -j DROP + inet/filter/FORWARD -j limit-1991 + inet/filter/INPUT -j limit-1991 + inet/filter/OUTPUT -j limit-1991 + inet/filter/limit-1991 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1991 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-1991 + inet6/filter/INPUT -j limit-1991 + inet6/filter/OUTPUT -j limit-1991 + inet6/filter/limit-1991 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1791 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none"} +Filter 1993 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} (filter-limit) - inet/filter/FORWARD -j limit-1790 + inet/filter/FORWARD -j limit-1992 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1790 + inet/filter/INPUT -j limit-1992 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1790 + inet/filter/OUTPUT -j limit-1992 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-836 - inet/filter/logdrop-836 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-836 -j DROP - inet6/filter/FORWARD -j limit-1790 + inet/filter/limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1992 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1790 + inet6/filter/INPUT -j limit-1992 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1790 + inet6/filter/OUTPUT -j limit-1992 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-836 - inet6/filter/logdrop-836 -j DROP + inet6/filter/limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1792 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none"} +Filter 1994 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} (filter-limit) - inet/filter/FORWARD -j limit-1791 - inet/filter/INPUT -j limit-1791 - inet/filter/OUTPUT -j limit-1791 - inet/filter/limit-1791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-837 - inet/filter/logdrop-837 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-837 -j DROP - inet6/filter/FORWARD -j limit-1791 - inet6/filter/INPUT -j limit-1791 - inet6/filter/OUTPUT -j limit-1791 - inet6/filter/limit-1791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-837 - inet6/filter/logdrop-837 -j DROP + inet/filter/FORWARD -j limit-1993 + inet/filter/INPUT -j limit-1993 + inet/filter/OUTPUT -j limit-1993 + inet/filter/limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1993 + inet6/filter/INPUT -j limit-1993 + inet6/filter/OUTPUT -j limit-1993 + inet6/filter/limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1793 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} +Filter 1995 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1792 - inet/filter/FORWARD -j logaccept-final-133 - inet/filter/INPUT -j limit-1792 - inet/filter/INPUT -j logaccept-final-133 - inet/filter/OUTPUT -j limit-1792 - inet/filter/OUTPUT -j logaccept-final-133 - inet/filter/limit-1792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-838 - inet/filter/logaccept-final-133 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-133 -j ACCEPT - inet/filter/logdrop-838 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-838 -j DROP - inet6/filter/FORWARD -j limit-1792 - inet6/filter/FORWARD -j logaccept-final-133 - inet6/filter/INPUT -j limit-1792 - inet6/filter/INPUT -j logaccept-final-133 - inet6/filter/OUTPUT -j limit-1792 - inet6/filter/OUTPUT -j logaccept-final-133 - inet6/filter/limit-1792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-838 - inet6/filter/logaccept-final-133 -j ACCEPT - inet6/filter/logdrop-838 -j DROP + inet/filter/FORWARD -j limit-1994 + inet/filter/FORWARD -j logaccept-final-12 + inet/filter/INPUT -j limit-1994 + inet/filter/INPUT -j logaccept-final-12 + inet/filter/OUTPUT -j limit-1994 + inet/filter/OUTPUT -j logaccept-final-12 + inet/filter/limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-12 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-12 -j ACCEPT + inet6/filter/FORWARD -j limit-1994 + inet6/filter/FORWARD -j logaccept-final-12 + inet6/filter/INPUT -j limit-1994 + inet6/filter/INPUT -j logaccept-final-12 + inet6/filter/OUTPUT -j limit-1994 + inet6/filter/OUTPUT -j logaccept-final-12 + inet6/filter/limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-12 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-12 -j ACCEPT -Filter 1794 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} +Filter 1996 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1793 - inet/filter/INPUT -j limit-1793 - inet/filter/OUTPUT -j limit-1793 - inet/filter/limit-1793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-839 - inet/filter/limit-1793 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-839 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-839 -j DROP - inet6/filter/FORWARD -j limit-1793 - inet6/filter/INPUT -j limit-1793 - inet6/filter/OUTPUT -j limit-1793 - inet6/filter/limit-1793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-839 - inet6/filter/logdrop-839 -j DROP + inet/filter/FORWARD -j limit-1995 + inet/filter/INPUT -j limit-1995 + inet/filter/OUTPUT -j limit-1995 + inet/filter/limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-1995 + inet6/filter/INPUT -j limit-1995 + inet6/filter/OUTPUT -j limit-1995 + inet6/filter/limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1997 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-1996 + inet/filter/FORWARD -j logaccept-final-13 + inet/filter/INPUT -j limit-1996 + inet/filter/INPUT -j logaccept-final-13 + inet/filter/OUTPUT -j limit-1996 + inet/filter/OUTPUT -j logaccept-final-13 + inet/filter/limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-13 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-13 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-13 -j ACCEPT + inet6/filter/FORWARD -j limit-1996 + inet6/filter/FORWARD -j logaccept-final-13 + inet6/filter/INPUT -j limit-1996 + inet6/filter/INPUT -j logaccept-final-13 + inet6/filter/OUTPUT -j limit-1996 + inet6/filter/OUTPUT -j logaccept-final-13 + inet6/filter/limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-13 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-13 -j ACCEPT + +Filter 1998 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-1997 + inet/filter/INPUT -j limit-1997 + inet/filter/OUTPUT -j limit-1997 + inet/filter/limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-1997 + inet6/filter/INPUT -j limit-1997 + inet6/filter/OUTPUT -j limit-1997 + inet6/filter/limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -Filter 1795 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"}} +Filter 1999 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1794 + inet/filter/FORWARD -j limit-1998 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1794 + inet/filter/INPUT -j limit-1998 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1794 + inet/filter/OUTPUT -j limit-1998 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-840 - inet/filter/limit-1794 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-840 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-840 -j DROP - inet6/filter/FORWARD -j limit-1794 + inet/filter/limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1998 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1794 + inet6/filter/INPUT -j limit-1998 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1794 + inet6/filter/OUTPUT -j limit-1998 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-840 - inet6/filter/limit-1794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-840 -j DROP + inet6/filter/limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1796 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"}} +Filter 2000 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1795 - inet/filter/INPUT -j limit-1795 - inet/filter/OUTPUT -j limit-1795 - inet/filter/limit-1795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-841 - inet/filter/limit-1795 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-841 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-841 -j DROP - inet6/filter/FORWARD -j limit-1795 - inet6/filter/INPUT -j limit-1795 - inet6/filter/OUTPUT -j limit-1795 - inet6/filter/limit-1795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-841 - inet6/filter/limit-1795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-841 -j DROP + inet/filter/FORWARD -j limit-1999 + inet/filter/INPUT -j limit-1999 + inet/filter/OUTPUT -j limit-1999 + inet/filter/limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-1999 + inet6/filter/INPUT -j limit-1999 + inet6/filter/OUTPUT -j limit-1999 + inet6/filter/limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1797 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true} +Filter 2001 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1796 - inet/filter/FORWARD -j logaccept-final-134 - inet/filter/INPUT -j limit-1796 - inet/filter/INPUT -j logaccept-final-134 - inet/filter/OUTPUT -j limit-1796 - inet/filter/OUTPUT -j logaccept-final-134 - inet/filter/limit-1796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-842 - inet/filter/limit-1796 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-134 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-134 -j ACCEPT - inet/filter/logdrop-842 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-842 -j DROP - inet6/filter/FORWARD -j limit-1796 - inet6/filter/FORWARD -j logaccept-final-134 - inet6/filter/INPUT -j limit-1796 - inet6/filter/INPUT -j logaccept-final-134 - inet6/filter/OUTPUT -j limit-1796 - inet6/filter/OUTPUT -j logaccept-final-134 - inet6/filter/limit-1796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-842 - inet6/filter/limit-1796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-134 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-134 -j ACCEPT - inet6/filter/logdrop-842 -j DROP + inet/filter/FORWARD -j limit-2000 + inet/filter/FORWARD -j logaccept-final-14 + inet/filter/INPUT -j limit-2000 + inet/filter/INPUT -j logaccept-final-14 + inet/filter/OUTPUT -j limit-2000 + inet/filter/OUTPUT -j logaccept-final-14 + inet/filter/limit-2000 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2000 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-14 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-14 -j ACCEPT + inet6/filter/FORWARD -j limit-2000 + inet6/filter/FORWARD -j logaccept-final-14 + inet6/filter/INPUT -j limit-2000 + inet6/filter/INPUT -j logaccept-final-14 + inet6/filter/OUTPUT -j limit-2000 + inet6/filter/OUTPUT -j logaccept-final-14 + inet6/filter/limit-2000 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2000 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-14 -j ACCEPT -Filter 1798 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true} +Filter 2002 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1797 - inet/filter/INPUT -j limit-1797 - inet/filter/OUTPUT -j limit-1797 - inet/filter/limit-1797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-843 - inet/filter/limit-1797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-843 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-843 -j DROP - inet6/filter/FORWARD -j limit-1797 - inet6/filter/INPUT -j limit-1797 - inet6/filter/OUTPUT -j limit-1797 - inet6/filter/limit-1797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-843 - inet6/filter/limit-1797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-843 -j DROP + inet/filter/FORWARD -j limit-2001 + inet/filter/INPUT -j limit-2001 + inet/filter/OUTPUT -j limit-2001 + inet/filter/limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2001 + inet6/filter/INPUT -j limit-2001 + inet6/filter/OUTPUT -j limit-2001 + inet6/filter/limit-2001 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -Filter 1799 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none"} +Filter 2003 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-1798 + inet/filter/FORWARD -j limit-2002 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1798 + inet/filter/INPUT -j limit-2002 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1798 + inet/filter/OUTPUT -j limit-2002 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-844 - inet/filter/limit-1798 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-844 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-844 -j DROP - inet6/filter/FORWARD -j limit-1798 + inet/filter/limit-2002 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2002 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1798 + inet6/filter/INPUT -j limit-2002 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1798 + inet6/filter/OUTPUT -j limit-2002 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-844 - inet6/filter/limit-1798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-844 -j DROP + inet6/filter/limit-2002 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1800 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none"} +Filter 2004 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-1799 - inet/filter/INPUT -j limit-1799 - inet/filter/OUTPUT -j limit-1799 - inet/filter/limit-1799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-845 - inet/filter/limit-1799 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-845 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-845 -j DROP - inet6/filter/FORWARD -j limit-1799 - inet6/filter/INPUT -j limit-1799 - inet6/filter/OUTPUT -j limit-1799 - inet6/filter/limit-1799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-845 - inet6/filter/limit-1799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-845 -j DROP + inet/filter/FORWARD -j limit-2003 + inet/filter/INPUT -j limit-2003 + inet/filter/OUTPUT -j limit-2003 + inet/filter/limit-2003 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2003 + inet6/filter/INPUT -j limit-2003 + inet6/filter/OUTPUT -j limit-2003 + inet6/filter/limit-2003 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1801 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog"} +Filter 2005 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1800 - inet/filter/FORWARD -j logaccept-final-135 - inet/filter/INPUT -j limit-1800 - inet/filter/INPUT -j logaccept-final-135 - inet/filter/OUTPUT -j limit-1800 - inet/filter/OUTPUT -j logaccept-final-135 - inet/filter/limit-1800 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-846 - inet/filter/limit-1800 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logaccept-final-135 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-135 -j ACCEPT - inet/filter/logdrop-846 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-846 -j DROP - inet6/filter/FORWARD -j limit-1800 - inet6/filter/FORWARD -j logaccept-final-135 - inet6/filter/INPUT -j limit-1800 - inet6/filter/INPUT -j logaccept-final-135 - inet6/filter/OUTPUT -j limit-1800 - inet6/filter/OUTPUT -j logaccept-final-135 - inet6/filter/limit-1800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-846 - inet6/filter/limit-1800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logaccept-final-135 -j ACCEPT - inet6/filter/logdrop-846 -j DROP + inet/filter/FORWARD -j limit-2004 + inet/filter/FORWARD -j logaccept-final-15 + inet/filter/INPUT -j limit-2004 + inet/filter/INPUT -j logaccept-final-15 + inet/filter/OUTPUT -j limit-2004 + inet/filter/OUTPUT -j logaccept-final-15 + inet/filter/limit-2004 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-15 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-15 -j ACCEPT + inet6/filter/FORWARD -j limit-2004 + inet6/filter/FORWARD -j logaccept-final-15 + inet6/filter/INPUT -j limit-2004 + inet6/filter/INPUT -j logaccept-final-15 + inet6/filter/OUTPUT -j limit-2004 + inet6/filter/OUTPUT -j logaccept-final-15 + inet6/filter/limit-2004 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-15 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-15 -j ACCEPT -Filter 1802 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog"} +Filter 2006 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1801 - inet/filter/INPUT -j limit-1801 - inet/filter/OUTPUT -j limit-1801 - inet/filter/limit-1801 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-847 - inet/filter/limit-1801 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-847 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-847 -j DROP - inet6/filter/FORWARD -j limit-1801 - inet6/filter/INPUT -j limit-1801 - inet6/filter/OUTPUT -j limit-1801 - inet6/filter/limit-1801 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-847 - inet6/filter/logdrop-847 -j DROP + inet/filter/FORWARD -j limit-2005 + inet/filter/INPUT -j limit-2005 + inet/filter/OUTPUT -j limit-2005 + inet/filter/limit-2005 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2005 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2005 + inet6/filter/INPUT -j limit-2005 + inet6/filter/OUTPUT -j limit-2005 + inet6/filter/limit-2005 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2005 -m limit --limit 1/second -j LOG + +Filter 2007 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2006 + inet/filter/FORWARD -j logaccept-final-16 + inet/filter/INPUT -j limit-2006 + inet/filter/INPUT -j logaccept-final-16 + inet/filter/OUTPUT -j limit-2006 + inet/filter/OUTPUT -j logaccept-final-16 + inet/filter/limit-2006 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-16 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-16 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-16 -j ACCEPT + inet6/filter/FORWARD -j limit-2006 + inet6/filter/FORWARD -j logaccept-final-16 + inet6/filter/INPUT -j limit-2006 + inet6/filter/INPUT -j logaccept-final-16 + inet6/filter/OUTPUT -j limit-2006 + inet6/filter/OUTPUT -j logaccept-final-16 + inet6/filter/limit-2006 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-16 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-16 -j ACCEPT + +Filter 2008 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2007 + inet/filter/INPUT -j limit-2007 + inet/filter/OUTPUT -j limit-2007 + inet/filter/limit-2007 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2007 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2007 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2007 + inet6/filter/INPUT -j limit-2007 + inet6/filter/OUTPUT -j limit-2007 + inet6/filter/limit-2007 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2007 -j TEE --gateway fc00::2 -Filter 1803 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false}} +Filter 2009 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1802 + inet/filter/FORWARD -j limit-2008 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1802 + inet/filter/INPUT -j limit-2008 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1802 + inet/filter/OUTPUT -j limit-2008 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-848 - inet/filter/logdrop-848 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-848 -j DROP - inet6/filter/FORWARD -j limit-1802 + inet/filter/limit-2008 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2008 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1802 + inet6/filter/INPUT -j limit-2008 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1802 + inet6/filter/OUTPUT -j limit-2008 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-848 - inet6/filter/logdrop-848 -j DROP + inet6/filter/limit-2008 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1804 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false}} +Filter 2010 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1803 - inet/filter/INPUT -j limit-1803 - inet/filter/OUTPUT -j limit-1803 - inet/filter/limit-1803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-849 - inet/filter/logdrop-849 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-849 -j DROP - inet6/filter/FORWARD -j limit-1803 - inet6/filter/INPUT -j limit-1803 - inet6/filter/OUTPUT -j limit-1803 - inet6/filter/limit-1803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-849 - inet6/filter/logdrop-849 -j DROP + inet/filter/FORWARD -j limit-2009 + inet/filter/INPUT -j limit-2009 + inet/filter/OUTPUT -j limit-2009 + inet/filter/limit-2009 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2009 + inet6/filter/INPUT -j limit-2009 + inet6/filter/OUTPUT -j limit-2009 + inet6/filter/limit-2009 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1805 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true} +Filter 2011 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1804 - inet/filter/FORWARD -j logaccept-final-136 - inet/filter/INPUT -j limit-1804 - inet/filter/INPUT -j logaccept-final-136 - inet/filter/OUTPUT -j limit-1804 - inet/filter/OUTPUT -j logaccept-final-136 - inet/filter/limit-1804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-850 - inet/filter/logaccept-final-136 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-136 -j ACCEPT - inet/filter/logdrop-850 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-850 -j DROP - inet6/filter/FORWARD -j limit-1804 - inet6/filter/FORWARD -j logaccept-final-136 - inet6/filter/INPUT -j limit-1804 - inet6/filter/INPUT -j logaccept-final-136 - inet6/filter/OUTPUT -j limit-1804 - inet6/filter/OUTPUT -j logaccept-final-136 - inet6/filter/limit-1804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-850 - inet6/filter/logaccept-final-136 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-136 -j ACCEPT - inet6/filter/logdrop-850 -j DROP + inet/filter/FORWARD -j limit-2010 + inet/filter/FORWARD -j logaccept-final-17 + inet/filter/INPUT -j limit-2010 + inet/filter/INPUT -j logaccept-final-17 + inet/filter/OUTPUT -j limit-2010 + inet/filter/OUTPUT -j logaccept-final-17 + inet/filter/limit-2010 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-17 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-17 -j ACCEPT + inet6/filter/FORWARD -j limit-2010 + inet6/filter/FORWARD -j logaccept-final-17 + inet6/filter/INPUT -j limit-2010 + inet6/filter/INPUT -j logaccept-final-17 + inet6/filter/OUTPUT -j limit-2010 + inet6/filter/OUTPUT -j logaccept-final-17 + inet6/filter/limit-2010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-17 -j ACCEPT -Filter 1806 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true} +Filter 2012 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1805 - inet/filter/INPUT -j limit-1805 - inet/filter/OUTPUT -j limit-1805 - inet/filter/limit-1805 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-851 - inet/filter/limit-1805 -m limit --limit 1/second -j LOG - inet/filter/logdrop-851 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-851 -j DROP - inet6/filter/FORWARD -j limit-1805 - inet6/filter/INPUT -j limit-1805 - inet6/filter/OUTPUT -j limit-1805 - inet6/filter/limit-1805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-851 - inet6/filter/limit-1805 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-851 -j DROP + inet/filter/FORWARD -j limit-2011 + inet/filter/INPUT -j limit-2011 + inet/filter/OUTPUT -j limit-2011 + inet/filter/limit-2011 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2011 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2011 + inet6/filter/INPUT -j limit-2011 + inet6/filter/OUTPUT -j limit-2011 + inet6/filter/limit-2011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1807 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none"} +Filter 2013 {"flow-limit":{"log":false,"name":"C"}} (filter-limit) - inet/filter/FORWARD -j limit-1806 + inet/filter/FORWARD -j limit-2012 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1806 + inet/filter/INPUT -j limit-2012 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1806 + inet/filter/OUTPUT -j limit-2012 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1806 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-852 - inet/filter/logdrop-852 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-852 -j DROP - inet6/filter/FORWARD -j limit-1806 + inet/filter/limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2012 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1806 + inet6/filter/INPUT -j limit-2012 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1806 + inet6/filter/OUTPUT -j limit-2012 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-852 - inet6/filter/logdrop-852 -j DROP + inet6/filter/limit-2012 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2012 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1808 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none"} +Filter 2014 {"action":"pass","flow-limit":{"log":false,"name":"C"}} (filter-limit) - inet/filter/FORWARD -j limit-1807 - inet/filter/INPUT -j limit-1807 - inet/filter/OUTPUT -j limit-1807 - inet/filter/limit-1807 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-853 - inet/filter/logdrop-853 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-853 -j DROP - inet6/filter/FORWARD -j limit-1807 - inet6/filter/INPUT -j limit-1807 - inet6/filter/OUTPUT -j limit-1807 - inet6/filter/limit-1807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-853 - inet6/filter/logdrop-853 -j DROP + inet/filter/FORWARD -j limit-2013 + inet/filter/INPUT -j limit-2013 + inet/filter/OUTPUT -j limit-2013 + inet/filter/limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2013 + inet6/filter/INPUT -j limit-2013 + inet6/filter/OUTPUT -j limit-2013 + inet6/filter/limit-2013 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2013 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1809 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} +Filter 2015 {"flow-limit":{"log":false,"name":"C"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1808 - inet/filter/FORWARD -j logaccept-final-137 - inet/filter/INPUT -j limit-1808 - inet/filter/INPUT -j logaccept-final-137 - inet/filter/OUTPUT -j limit-1808 - inet/filter/OUTPUT -j logaccept-final-137 - inet/filter/limit-1808 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-854 - inet/filter/logaccept-final-137 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-137 -j ACCEPT - inet/filter/logdrop-854 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-854 -j DROP - inet6/filter/FORWARD -j limit-1808 - inet6/filter/FORWARD -j logaccept-final-137 - inet6/filter/INPUT -j limit-1808 - inet6/filter/INPUT -j logaccept-final-137 - inet6/filter/OUTPUT -j limit-1808 - inet6/filter/OUTPUT -j logaccept-final-137 - inet6/filter/limit-1808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-854 - inet6/filter/logaccept-final-137 -j ACCEPT - inet6/filter/logdrop-854 -j DROP + inet/filter/FORWARD -j limit-2014 + inet/filter/FORWARD -j logaccept-final-18 + inet/filter/INPUT -j limit-2014 + inet/filter/INPUT -j logaccept-final-18 + inet/filter/OUTPUT -j limit-2014 + inet/filter/OUTPUT -j logaccept-final-18 + inet/filter/limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-18 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-18 -j ACCEPT + inet6/filter/FORWARD -j limit-2014 + inet6/filter/FORWARD -j logaccept-final-18 + inet6/filter/INPUT -j limit-2014 + inet6/filter/INPUT -j logaccept-final-18 + inet6/filter/OUTPUT -j limit-2014 + inet6/filter/OUTPUT -j logaccept-final-18 + inet6/filter/limit-2014 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2014 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-18 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-18 -j ACCEPT -Filter 1810 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} +Filter 2016 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1809 - inet/filter/INPUT -j limit-1809 - inet/filter/OUTPUT -j limit-1809 - inet/filter/limit-1809 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-855 - inet/filter/limit-1809 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-855 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-855 -j DROP - inet6/filter/FORWARD -j limit-1809 - inet6/filter/INPUT -j limit-1809 - inet6/filter/OUTPUT -j limit-1809 - inet6/filter/limit-1809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-855 - inet6/filter/logdrop-855 -j DROP + inet/filter/FORWARD -j limit-2015 + inet/filter/INPUT -j limit-2015 + inet/filter/OUTPUT -j limit-2015 + inet/filter/limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2015 + inet6/filter/INPUT -j limit-2015 + inet6/filter/OUTPUT -j limit-2015 + inet6/filter/limit-2015 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2015 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 2017 {"flow-limit":{"log":false,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2016 + inet/filter/FORWARD -j logaccept-final-19 + inet/filter/INPUT -j limit-2016 + inet/filter/INPUT -j logaccept-final-19 + inet/filter/OUTPUT -j limit-2016 + inet/filter/OUTPUT -j logaccept-final-19 + inet/filter/limit-2016 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2016 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-19 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-19 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-19 -j ACCEPT + inet6/filter/FORWARD -j limit-2016 + inet6/filter/FORWARD -j logaccept-final-19 + inet6/filter/INPUT -j limit-2016 + inet6/filter/INPUT -j logaccept-final-19 + inet6/filter/OUTPUT -j limit-2016 + inet6/filter/OUTPUT -j logaccept-final-19 + inet6/filter/limit-2016 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2016 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-19 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-19 -j ACCEPT + +Filter 2018 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2017 + inet/filter/INPUT -j limit-2017 + inet/filter/OUTPUT -j limit-2017 + inet/filter/limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2017 + inet6/filter/INPUT -j limit-2017 + inet6/filter/OUTPUT -j limit-2017 + inet6/filter/limit-2017 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2017 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 1811 {"flow-limit":{"interval":5,"log":"ulog","name":"C"}} +Filter 2019 {"flow-limit":{"log":false,"name":"C"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1810 + inet/filter/FORWARD -j limit-2018 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1810 + inet/filter/INPUT -j limit-2018 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1810 + inet/filter/OUTPUT -j limit-2018 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-856 - inet/filter/limit-1810 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-856 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-856 -j DROP - inet6/filter/FORWARD -j limit-1810 + inet/filter/limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2018 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1810 + inet6/filter/INPUT -j limit-2018 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1810 + inet6/filter/OUTPUT -j limit-2018 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-856 - inet6/filter/limit-1810 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-856 -j DROP + inet6/filter/limit-2018 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2018 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1812 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"}} +Filter 2020 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1811 - inet/filter/INPUT -j limit-1811 - inet/filter/OUTPUT -j limit-1811 - inet/filter/limit-1811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-857 - inet/filter/limit-1811 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-857 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-857 -j DROP - inet6/filter/FORWARD -j limit-1811 - inet6/filter/INPUT -j limit-1811 - inet6/filter/OUTPUT -j limit-1811 - inet6/filter/limit-1811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-857 - inet6/filter/limit-1811 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-857 -j DROP + inet/filter/FORWARD -j limit-2019 + inet/filter/INPUT -j limit-2019 + inet/filter/OUTPUT -j limit-2019 + inet/filter/limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2019 + inet6/filter/INPUT -j limit-2019 + inet6/filter/OUTPUT -j limit-2019 + inet6/filter/limit-2019 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2019 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1813 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":true} +Filter 2021 {"flow-limit":{"log":false,"name":"C"},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1812 - inet/filter/FORWARD -j logaccept-final-138 - inet/filter/INPUT -j limit-1812 - inet/filter/INPUT -j logaccept-final-138 - inet/filter/OUTPUT -j limit-1812 - inet/filter/OUTPUT -j logaccept-final-138 - inet/filter/limit-1812 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-858 - inet/filter/limit-1812 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-138 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-138 -j ACCEPT - inet/filter/logdrop-858 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-858 -j DROP - inet6/filter/FORWARD -j limit-1812 - inet6/filter/FORWARD -j logaccept-final-138 - inet6/filter/INPUT -j limit-1812 - inet6/filter/INPUT -j logaccept-final-138 - inet6/filter/OUTPUT -j limit-1812 - inet6/filter/OUTPUT -j logaccept-final-138 - inet6/filter/limit-1812 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-858 - inet6/filter/limit-1812 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-138 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-138 -j ACCEPT - inet6/filter/logdrop-858 -j DROP + inet/filter/FORWARD -j limit-2020 + inet/filter/FORWARD -j logaccept-final-20 + inet/filter/INPUT -j limit-2020 + inet/filter/INPUT -j logaccept-final-20 + inet/filter/OUTPUT -j limit-2020 + inet/filter/OUTPUT -j logaccept-final-20 + inet/filter/limit-2020 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2020 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-20 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-20 -j ACCEPT + inet6/filter/FORWARD -j limit-2020 + inet6/filter/FORWARD -j logaccept-final-20 + inet6/filter/INPUT -j limit-2020 + inet6/filter/INPUT -j logaccept-final-20 + inet6/filter/OUTPUT -j limit-2020 + inet6/filter/OUTPUT -j logaccept-final-20 + inet6/filter/limit-2020 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2020 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-20 -j ACCEPT -Filter 1814 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":true} +Filter 2022 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1813 - inet/filter/INPUT -j limit-1813 - inet/filter/OUTPUT -j limit-1813 - inet/filter/limit-1813 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-859 - inet/filter/limit-1813 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-859 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-859 -j DROP - inet6/filter/FORWARD -j limit-1813 - inet6/filter/INPUT -j limit-1813 - inet6/filter/OUTPUT -j limit-1813 - inet6/filter/limit-1813 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-859 - inet6/filter/limit-1813 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-859 -j DROP + inet/filter/FORWARD -j limit-2021 + inet/filter/INPUT -j limit-2021 + inet/filter/OUTPUT -j limit-2021 + inet/filter/limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2021 + inet6/filter/INPUT -j limit-2021 + inet6/filter/OUTPUT -j limit-2021 + inet6/filter/limit-2021 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -Filter 1815 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none"} +Filter 2023 {"flow-limit":{"log":false,"name":"C","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-1814 + inet/filter/FORWARD -j limit-2022 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1814 + inet/filter/INPUT -j limit-2022 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1814 + inet/filter/OUTPUT -j limit-2022 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1814 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-860 - inet/filter/limit-1814 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-860 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-860 -j DROP - inet6/filter/FORWARD -j limit-1814 + inet/filter/limit-2022 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2022 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1814 + inet6/filter/INPUT -j limit-2022 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1814 + inet6/filter/OUTPUT -j limit-2022 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1814 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-860 - inet6/filter/limit-1814 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-860 -j DROP + inet6/filter/limit-2022 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1816 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none"} +Filter 2024 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-1815 - inet/filter/INPUT -j limit-1815 - inet/filter/OUTPUT -j limit-1815 - inet/filter/limit-1815 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-861 - inet/filter/limit-1815 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-861 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-861 -j DROP - inet6/filter/FORWARD -j limit-1815 - inet6/filter/INPUT -j limit-1815 - inet6/filter/OUTPUT -j limit-1815 - inet6/filter/limit-1815 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-861 - inet6/filter/limit-1815 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-861 -j DROP + inet/filter/FORWARD -j limit-2023 + inet/filter/INPUT -j limit-2023 + inet/filter/OUTPUT -j limit-2023 + inet/filter/limit-2023 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2023 + inet6/filter/INPUT -j limit-2023 + inet6/filter/OUTPUT -j limit-2023 + inet6/filter/limit-2023 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1817 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog"} +Filter 2025 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1816 - inet/filter/FORWARD -j logaccept-final-139 - inet/filter/INPUT -j limit-1816 - inet/filter/INPUT -j logaccept-final-139 - inet/filter/OUTPUT -j limit-1816 - inet/filter/OUTPUT -j logaccept-final-139 - inet/filter/limit-1816 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-862 - inet/filter/limit-1816 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logaccept-final-139 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-139 -j ACCEPT - inet/filter/logdrop-862 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-862 -j DROP - inet6/filter/FORWARD -j limit-1816 - inet6/filter/FORWARD -j logaccept-final-139 - inet6/filter/INPUT -j limit-1816 - inet6/filter/INPUT -j logaccept-final-139 - inet6/filter/OUTPUT -j limit-1816 - inet6/filter/OUTPUT -j logaccept-final-139 - inet6/filter/limit-1816 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-862 - inet6/filter/limit-1816 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logaccept-final-139 -j ACCEPT - inet6/filter/logdrop-862 -j DROP + inet/filter/FORWARD -j limit-2024 + inet/filter/FORWARD -j logaccept-final-21 + inet/filter/INPUT -j limit-2024 + inet/filter/INPUT -j logaccept-final-21 + inet/filter/OUTPUT -j limit-2024 + inet/filter/OUTPUT -j logaccept-final-21 + inet/filter/limit-2024 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-21 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-21 -j ACCEPT + inet6/filter/FORWARD -j limit-2024 + inet6/filter/FORWARD -j logaccept-final-21 + inet6/filter/INPUT -j limit-2024 + inet6/filter/INPUT -j logaccept-final-21 + inet6/filter/OUTPUT -j limit-2024 + inet6/filter/OUTPUT -j logaccept-final-21 + inet6/filter/limit-2024 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-21 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-21 -j ACCEPT -Filter 1818 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog"} +Filter 2026 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1817 - inet/filter/INPUT -j limit-1817 - inet/filter/OUTPUT -j limit-1817 - inet/filter/limit-1817 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-863 - inet/filter/limit-1817 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-863 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-863 -j DROP - inet6/filter/FORWARD -j limit-1817 - inet6/filter/INPUT -j limit-1817 - inet6/filter/OUTPUT -j limit-1817 - inet6/filter/limit-1817 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-863 - inet6/filter/logdrop-863 -j DROP + inet/filter/FORWARD -j limit-2025 + inet/filter/INPUT -j limit-2025 + inet/filter/OUTPUT -j limit-2025 + inet/filter/limit-2025 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2025 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2025 + inet6/filter/INPUT -j limit-2025 + inet6/filter/OUTPUT -j limit-2025 + inet6/filter/limit-2025 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2025 -m limit --limit 1/second -j LOG + +Filter 2027 {"flow-limit":{"log":false,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2026 + inet/filter/FORWARD -j logaccept-final-22 + inet/filter/INPUT -j limit-2026 + inet/filter/INPUT -j logaccept-final-22 + inet/filter/OUTPUT -j limit-2026 + inet/filter/OUTPUT -j logaccept-final-22 + inet/filter/limit-2026 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-22 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-22 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-22 -j ACCEPT + inet6/filter/FORWARD -j limit-2026 + inet6/filter/FORWARD -j logaccept-final-22 + inet6/filter/INPUT -j limit-2026 + inet6/filter/INPUT -j logaccept-final-22 + inet6/filter/OUTPUT -j limit-2026 + inet6/filter/OUTPUT -j logaccept-final-22 + inet6/filter/limit-2026 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-22 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-22 -j ACCEPT + +Filter 2028 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2027 + inet/filter/INPUT -j limit-2027 + inet/filter/OUTPUT -j limit-2027 + inet/filter/limit-2027 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2027 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2027 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2027 + inet6/filter/INPUT -j limit-2027 + inet6/filter/OUTPUT -j limit-2027 + inet6/filter/limit-2027 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2027 -j TEE --gateway fc00::2 -Filter 1819 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false}} +Filter 2029 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1818 + inet/filter/FORWARD -j limit-2028 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1818 + inet/filter/INPUT -j limit-2028 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1818 + inet/filter/OUTPUT -j limit-2028 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1818 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-864 - inet/filter/logdrop-864 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-864 -j DROP - inet6/filter/FORWARD -j limit-1818 + inet/filter/limit-2028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2028 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1818 + inet6/filter/INPUT -j limit-2028 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1818 + inet6/filter/OUTPUT -j limit-2028 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1818 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-864 - inet6/filter/logdrop-864 -j DROP + inet6/filter/limit-2028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1820 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false}} +Filter 2030 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1819 - inet/filter/INPUT -j limit-1819 - inet/filter/OUTPUT -j limit-1819 - inet/filter/limit-1819 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-865 - inet/filter/logdrop-865 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-865 -j DROP - inet6/filter/FORWARD -j limit-1819 - inet6/filter/INPUT -j limit-1819 - inet6/filter/OUTPUT -j limit-1819 - inet6/filter/limit-1819 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-865 - inet6/filter/logdrop-865 -j DROP + inet/filter/FORWARD -j limit-2029 + inet/filter/INPUT -j limit-2029 + inet/filter/OUTPUT -j limit-2029 + inet/filter/limit-2029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2029 + inet6/filter/INPUT -j limit-2029 + inet6/filter/OUTPUT -j limit-2029 + inet6/filter/limit-2029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1821 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true} +Filter 2031 {"flow-limit":{"log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1820 - inet/filter/FORWARD -j logaccept-final-140 - inet/filter/INPUT -j limit-1820 - inet/filter/INPUT -j logaccept-final-140 - inet/filter/OUTPUT -j limit-1820 - inet/filter/OUTPUT -j logaccept-final-140 - inet/filter/limit-1820 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-866 - inet/filter/logaccept-final-140 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-140 -j ACCEPT - inet/filter/logdrop-866 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-866 -j DROP - inet6/filter/FORWARD -j limit-1820 - inet6/filter/FORWARD -j logaccept-final-140 - inet6/filter/INPUT -j limit-1820 - inet6/filter/INPUT -j logaccept-final-140 - inet6/filter/OUTPUT -j limit-1820 - inet6/filter/OUTPUT -j logaccept-final-140 - inet6/filter/limit-1820 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-866 - inet6/filter/logaccept-final-140 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-140 -j ACCEPT - inet6/filter/logdrop-866 -j DROP + inet/filter/FORWARD -j limit-2030 + inet/filter/FORWARD -j logaccept-final-23 + inet/filter/INPUT -j limit-2030 + inet/filter/INPUT -j logaccept-final-23 + inet/filter/OUTPUT -j limit-2030 + inet/filter/OUTPUT -j logaccept-final-23 + inet/filter/limit-2030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-23 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-23 -j ACCEPT + inet6/filter/FORWARD -j limit-2030 + inet6/filter/FORWARD -j logaccept-final-23 + inet6/filter/INPUT -j limit-2030 + inet6/filter/INPUT -j logaccept-final-23 + inet6/filter/OUTPUT -j limit-2030 + inet6/filter/OUTPUT -j logaccept-final-23 + inet6/filter/limit-2030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-23 -j ACCEPT -Filter 1822 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true} +Filter 2032 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1821 - inet/filter/INPUT -j limit-1821 - inet/filter/OUTPUT -j limit-1821 - inet/filter/limit-1821 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-867 - inet/filter/limit-1821 -m limit --limit 1/second -j LOG - inet/filter/logdrop-867 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-867 -j DROP - inet6/filter/FORWARD -j limit-1821 - inet6/filter/INPUT -j limit-1821 - inet6/filter/OUTPUT -j limit-1821 - inet6/filter/limit-1821 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-867 - inet6/filter/limit-1821 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-867 -j DROP + inet/filter/FORWARD -j limit-2031 + inet/filter/INPUT -j limit-2031 + inet/filter/OUTPUT -j limit-2031 + inet/filter/limit-2031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2031 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2031 + inet6/filter/INPUT -j limit-2031 + inet6/filter/OUTPUT -j limit-2031 + inet6/filter/limit-2031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1823 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none"} +Filter 2033 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} (filter-limit) - inet/filter/FORWARD -j limit-1822 + inet/filter/FORWARD -j limit-2032 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1822 + inet/filter/INPUT -j limit-2032 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1822 + inet/filter/OUTPUT -j limit-2032 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1822 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-868 - inet/filter/logdrop-868 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-868 -j DROP - inet6/filter/FORWARD -j limit-1822 + inet/filter/limit-2032 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2032 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2032 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1822 + inet6/filter/INPUT -j limit-2032 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1822 + inet6/filter/OUTPUT -j limit-2032 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1822 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-868 - inet6/filter/logdrop-868 -j DROP + inet6/filter/limit-2032 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2032 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1824 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none"} +Filter 2034 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} (filter-limit) - inet/filter/FORWARD -j limit-1823 - inet/filter/INPUT -j limit-1823 - inet/filter/OUTPUT -j limit-1823 - inet/filter/limit-1823 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-869 - inet/filter/logdrop-869 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-869 -j DROP - inet6/filter/FORWARD -j limit-1823 - inet6/filter/INPUT -j limit-1823 - inet6/filter/OUTPUT -j limit-1823 - inet6/filter/limit-1823 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-869 - inet6/filter/logdrop-869 -j DROP + inet/filter/FORWARD -j limit-2033 + inet/filter/INPUT -j limit-2033 + inet/filter/OUTPUT -j limit-2033 + inet/filter/limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2033 + inet6/filter/INPUT -j limit-2033 + inet6/filter/OUTPUT -j limit-2033 + inet6/filter/limit-2033 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2033 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1825 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} +Filter 2035 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1824 - inet/filter/FORWARD -j logaccept-final-141 - inet/filter/INPUT -j limit-1824 - inet/filter/INPUT -j logaccept-final-141 - inet/filter/OUTPUT -j limit-1824 - inet/filter/OUTPUT -j logaccept-final-141 - inet/filter/limit-1824 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-870 - inet/filter/logaccept-final-141 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-141 -j ACCEPT - inet/filter/logdrop-870 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-870 -j DROP - inet6/filter/FORWARD -j limit-1824 - inet6/filter/FORWARD -j logaccept-final-141 - inet6/filter/INPUT -j limit-1824 - inet6/filter/INPUT -j logaccept-final-141 - inet6/filter/OUTPUT -j limit-1824 - inet6/filter/OUTPUT -j logaccept-final-141 - inet6/filter/limit-1824 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-870 - inet6/filter/logaccept-final-141 -j ACCEPT - inet6/filter/logdrop-870 -j DROP + inet/filter/FORWARD -j limit-2034 + inet/filter/FORWARD -j logaccept-final-24 + inet/filter/INPUT -j limit-2034 + inet/filter/INPUT -j logaccept-final-24 + inet/filter/OUTPUT -j limit-2034 + inet/filter/OUTPUT -j logaccept-final-24 + inet/filter/limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-24 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-24 -j ACCEPT + inet6/filter/FORWARD -j limit-2034 + inet6/filter/FORWARD -j logaccept-final-24 + inet6/filter/INPUT -j limit-2034 + inet6/filter/INPUT -j logaccept-final-24 + inet6/filter/OUTPUT -j limit-2034 + inet6/filter/OUTPUT -j logaccept-final-24 + inet6/filter/limit-2034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2034 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-24 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-24 -j ACCEPT -Filter 1826 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} +Filter 2036 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1825 - inet/filter/INPUT -j limit-1825 - inet/filter/OUTPUT -j limit-1825 - inet/filter/limit-1825 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-871 - inet/filter/limit-1825 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-871 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-871 -j DROP - inet6/filter/FORWARD -j limit-1825 - inet6/filter/INPUT -j limit-1825 - inet6/filter/OUTPUT -j limit-1825 - inet6/filter/limit-1825 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-871 - inet6/filter/logdrop-871 -j DROP + inet/filter/FORWARD -j limit-2035 + inet/filter/INPUT -j limit-2035 + inet/filter/OUTPUT -j limit-2035 + inet/filter/limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2035 + inet6/filter/INPUT -j limit-2035 + inet6/filter/OUTPUT -j limit-2035 + inet6/filter/limit-2035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2035 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 2037 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2036 + inet/filter/FORWARD -j logaccept-final-25 + inet/filter/INPUT -j limit-2036 + inet/filter/INPUT -j logaccept-final-25 + inet/filter/OUTPUT -j limit-2036 + inet/filter/OUTPUT -j logaccept-final-25 + inet/filter/limit-2036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2036 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-25 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-25 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-25 -j ACCEPT + inet6/filter/FORWARD -j limit-2036 + inet6/filter/FORWARD -j logaccept-final-25 + inet6/filter/INPUT -j limit-2036 + inet6/filter/INPUT -j logaccept-final-25 + inet6/filter/OUTPUT -j limit-2036 + inet6/filter/OUTPUT -j logaccept-final-25 + inet6/filter/limit-2036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2036 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-25 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-25 -j ACCEPT + +Filter 2038 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2037 + inet/filter/INPUT -j limit-2037 + inet/filter/OUTPUT -j limit-2037 + inet/filter/limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2037 + inet6/filter/INPUT -j limit-2037 + inet6/filter/OUTPUT -j limit-2037 + inet6/filter/limit-2037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2037 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -Filter 1827 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"}} +Filter 2039 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1826 + inet/filter/FORWARD -j limit-2038 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1826 + inet/filter/INPUT -j limit-2038 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1826 + inet/filter/OUTPUT -j limit-2038 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1826 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-872 - inet/filter/limit-1826 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-872 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-872 -j DROP - inet6/filter/FORWARD -j limit-1826 + inet/filter/limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2038 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1826 + inet6/filter/INPUT -j limit-2038 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1826 + inet6/filter/OUTPUT -j limit-2038 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1826 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-872 - inet6/filter/limit-1826 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-872 -j DROP + inet6/filter/limit-2038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2038 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1828 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"}} +Filter 2040 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1827 - inet/filter/INPUT -j limit-1827 - inet/filter/OUTPUT -j limit-1827 - inet/filter/limit-1827 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-873 - inet/filter/limit-1827 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-873 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-873 -j DROP - inet6/filter/FORWARD -j limit-1827 - inet6/filter/INPUT -j limit-1827 - inet6/filter/OUTPUT -j limit-1827 - inet6/filter/limit-1827 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-873 - inet6/filter/limit-1827 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-873 -j DROP + inet/filter/FORWARD -j limit-2039 + inet/filter/INPUT -j limit-2039 + inet/filter/OUTPUT -j limit-2039 + inet/filter/limit-2039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2039 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2039 + inet6/filter/INPUT -j limit-2039 + inet6/filter/OUTPUT -j limit-2039 + inet6/filter/limit-2039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2039 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1829 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true} +Filter 2041 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1828 - inet/filter/FORWARD -j logaccept-final-142 - inet/filter/INPUT -j limit-1828 - inet/filter/INPUT -j logaccept-final-142 - inet/filter/OUTPUT -j limit-1828 - inet/filter/OUTPUT -j logaccept-final-142 - inet/filter/limit-1828 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-874 - inet/filter/limit-1828 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-142 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-142 -j ACCEPT - inet/filter/logdrop-874 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-874 -j DROP - inet6/filter/FORWARD -j limit-1828 - inet6/filter/FORWARD -j logaccept-final-142 - inet6/filter/INPUT -j limit-1828 - inet6/filter/INPUT -j logaccept-final-142 - inet6/filter/OUTPUT -j limit-1828 - inet6/filter/OUTPUT -j logaccept-final-142 - inet6/filter/limit-1828 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-874 - inet6/filter/limit-1828 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-142 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-142 -j ACCEPT - inet6/filter/logdrop-874 -j DROP + inet/filter/FORWARD -j limit-2040 + inet/filter/FORWARD -j logaccept-final-26 + inet/filter/INPUT -j limit-2040 + inet/filter/INPUT -j logaccept-final-26 + inet/filter/OUTPUT -j limit-2040 + inet/filter/OUTPUT -j logaccept-final-26 + inet/filter/limit-2040 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2040 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-26 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-26 -j ACCEPT + inet6/filter/FORWARD -j limit-2040 + inet6/filter/FORWARD -j logaccept-final-26 + inet6/filter/INPUT -j limit-2040 + inet6/filter/INPUT -j logaccept-final-26 + inet6/filter/OUTPUT -j limit-2040 + inet6/filter/OUTPUT -j logaccept-final-26 + inet6/filter/limit-2040 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2040 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-26 -j ACCEPT -Filter 1830 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true} +Filter 2042 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1829 - inet/filter/INPUT -j limit-1829 - inet/filter/OUTPUT -j limit-1829 - inet/filter/limit-1829 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-875 - inet/filter/limit-1829 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-875 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-875 -j DROP - inet6/filter/FORWARD -j limit-1829 - inet6/filter/INPUT -j limit-1829 - inet6/filter/OUTPUT -j limit-1829 - inet6/filter/limit-1829 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-875 - inet6/filter/limit-1829 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-875 -j DROP + inet/filter/FORWARD -j limit-2041 + inet/filter/INPUT -j limit-2041 + inet/filter/OUTPUT -j limit-2041 + inet/filter/limit-2041 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2041 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2041 + inet6/filter/INPUT -j limit-2041 + inet6/filter/OUTPUT -j limit-2041 + inet6/filter/limit-2041 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -Filter 1831 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none"} +Filter 2043 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-1830 + inet/filter/FORWARD -j limit-2042 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1830 + inet/filter/INPUT -j limit-2042 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1830 + inet/filter/OUTPUT -j limit-2042 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1830 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-876 - inet/filter/limit-1830 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-876 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-876 -j DROP - inet6/filter/FORWARD -j limit-1830 + inet/filter/limit-2042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2042 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1830 + inet6/filter/INPUT -j limit-2042 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1830 + inet6/filter/OUTPUT -j limit-2042 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1830 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-876 - inet6/filter/limit-1830 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-876 -j DROP + inet6/filter/limit-2042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1832 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none"} +Filter 2044 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-1831 - inet/filter/INPUT -j limit-1831 - inet/filter/OUTPUT -j limit-1831 - inet/filter/limit-1831 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-877 - inet/filter/limit-1831 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-877 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-877 -j DROP - inet6/filter/FORWARD -j limit-1831 - inet6/filter/INPUT -j limit-1831 - inet6/filter/OUTPUT -j limit-1831 - inet6/filter/limit-1831 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-877 - inet6/filter/limit-1831 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-877 -j DROP + inet/filter/FORWARD -j limit-2043 + inet/filter/INPUT -j limit-2043 + inet/filter/OUTPUT -j limit-2043 + inet/filter/limit-2043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2043 + inet6/filter/INPUT -j limit-2043 + inet6/filter/OUTPUT -j limit-2043 + inet6/filter/limit-2043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1833 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog"} +Filter 2045 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1832 - inet/filter/FORWARD -j logaccept-final-143 - inet/filter/INPUT -j limit-1832 - inet/filter/INPUT -j logaccept-final-143 - inet/filter/OUTPUT -j limit-1832 - inet/filter/OUTPUT -j logaccept-final-143 - inet/filter/limit-1832 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-878 - inet/filter/limit-1832 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logaccept-final-143 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-143 -j ACCEPT - inet/filter/logdrop-878 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-878 -j DROP - inet6/filter/FORWARD -j limit-1832 - inet6/filter/FORWARD -j logaccept-final-143 - inet6/filter/INPUT -j limit-1832 - inet6/filter/INPUT -j logaccept-final-143 - inet6/filter/OUTPUT -j limit-1832 - inet6/filter/OUTPUT -j logaccept-final-143 - inet6/filter/limit-1832 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-878 - inet6/filter/limit-1832 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logaccept-final-143 -j ACCEPT - inet6/filter/logdrop-878 -j DROP + inet/filter/FORWARD -j limit-2044 + inet/filter/FORWARD -j logaccept-final-27 + inet/filter/INPUT -j limit-2044 + inet/filter/INPUT -j logaccept-final-27 + inet/filter/OUTPUT -j limit-2044 + inet/filter/OUTPUT -j logaccept-final-27 + inet/filter/limit-2044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-27 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-27 -j ACCEPT + inet6/filter/FORWARD -j limit-2044 + inet6/filter/FORWARD -j logaccept-final-27 + inet6/filter/INPUT -j limit-2044 + inet6/filter/INPUT -j logaccept-final-27 + inet6/filter/OUTPUT -j limit-2044 + inet6/filter/OUTPUT -j logaccept-final-27 + inet6/filter/limit-2044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-27 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-27 -j ACCEPT -Filter 1834 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog"} +Filter 2046 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-1833 - inet/filter/INPUT -j limit-1833 - inet/filter/OUTPUT -j limit-1833 - inet/filter/limit-1833 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-879 - inet/filter/limit-1833 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-879 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-879 -j DROP - inet6/filter/FORWARD -j limit-1833 - inet6/filter/INPUT -j limit-1833 - inet6/filter/OUTPUT -j limit-1833 - inet6/filter/limit-1833 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-879 - inet6/filter/logdrop-879 -j DROP + inet/filter/FORWARD -j limit-2045 + inet/filter/INPUT -j limit-2045 + inet/filter/OUTPUT -j limit-2045 + inet/filter/limit-2045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2045 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2045 + inet6/filter/INPUT -j limit-2045 + inet6/filter/OUTPUT -j limit-2045 + inet6/filter/limit-2045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2045 -m limit --limit 1/second -j LOG + +Filter 2047 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2046 + inet/filter/FORWARD -j logaccept-final-28 + inet/filter/INPUT -j limit-2046 + inet/filter/INPUT -j logaccept-final-28 + inet/filter/OUTPUT -j limit-2046 + inet/filter/OUTPUT -j logaccept-final-28 + inet/filter/limit-2046 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-28 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-28 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-28 -j ACCEPT + inet6/filter/FORWARD -j limit-2046 + inet6/filter/FORWARD -j logaccept-final-28 + inet6/filter/INPUT -j limit-2046 + inet6/filter/INPUT -j logaccept-final-28 + inet6/filter/OUTPUT -j limit-2046 + inet6/filter/OUTPUT -j logaccept-final-28 + inet6/filter/limit-2046 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-28 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-28 -j ACCEPT + +Filter 2048 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2047 + inet/filter/INPUT -j limit-2047 + inet/filter/OUTPUT -j limit-2047 + inet/filter/limit-2047 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2047 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2047 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2047 + inet6/filter/INPUT -j limit-2047 + inet6/filter/OUTPUT -j limit-2047 + inet6/filter/limit-2047 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2047 -j TEE --gateway fc00::2 -Filter 1835 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false}} +Filter 2049 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1834 + inet/filter/FORWARD -j limit-2048 inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1834 + inet/filter/INPUT -j limit-2048 inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1834 + inet/filter/OUTPUT -j limit-2048 inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1834 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-880 - inet/filter/logdrop-880 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-880 -j DROP - inet6/filter/FORWARD -j limit-1834 + inet/filter/limit-2048 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2048 inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1834 + inet6/filter/INPUT -j limit-2048 inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1834 + inet6/filter/OUTPUT -j limit-2048 inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1834 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-880 - inet6/filter/logdrop-880 -j DROP + inet6/filter/limit-2048 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1836 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false}} +Filter 2050 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-1835 - inet/filter/INPUT -j limit-1835 - inet/filter/OUTPUT -j limit-1835 - inet/filter/limit-1835 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-881 - inet/filter/logdrop-881 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-881 -j DROP - inet6/filter/FORWARD -j limit-1835 - inet6/filter/INPUT -j limit-1835 - inet6/filter/OUTPUT -j limit-1835 - inet6/filter/limit-1835 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-881 - inet6/filter/logdrop-881 -j DROP + inet/filter/FORWARD -j limit-2049 + inet/filter/INPUT -j limit-2049 + inet/filter/OUTPUT -j limit-2049 + inet/filter/limit-2049 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2049 + inet6/filter/INPUT -j limit-2049 + inet6/filter/OUTPUT -j limit-2049 + inet6/filter/limit-2049 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1837 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true} +Filter 2051 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1836 - inet/filter/FORWARD -j logaccept-final-144 - inet/filter/INPUT -j limit-1836 - inet/filter/INPUT -j logaccept-final-144 - inet/filter/OUTPUT -j limit-1836 - inet/filter/OUTPUT -j logaccept-final-144 - inet/filter/limit-1836 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-882 - inet/filter/logaccept-final-144 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-144 -j ACCEPT - inet/filter/logdrop-882 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-882 -j DROP - inet6/filter/FORWARD -j limit-1836 - inet6/filter/FORWARD -j logaccept-final-144 - inet6/filter/INPUT -j limit-1836 - inet6/filter/INPUT -j logaccept-final-144 - inet6/filter/OUTPUT -j limit-1836 - inet6/filter/OUTPUT -j logaccept-final-144 - inet6/filter/limit-1836 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-882 - inet6/filter/logaccept-final-144 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-144 -j ACCEPT - inet6/filter/logdrop-882 -j DROP + inet/filter/FORWARD -j limit-2050 + inet/filter/FORWARD -j logaccept-final-29 + inet/filter/INPUT -j limit-2050 + inet/filter/INPUT -j logaccept-final-29 + inet/filter/OUTPUT -j limit-2050 + inet/filter/OUTPUT -j logaccept-final-29 + inet/filter/limit-2050 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-29 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-29 -j ACCEPT + inet6/filter/FORWARD -j limit-2050 + inet6/filter/FORWARD -j logaccept-final-29 + inet6/filter/INPUT -j limit-2050 + inet6/filter/INPUT -j logaccept-final-29 + inet6/filter/OUTPUT -j limit-2050 + inet6/filter/OUTPUT -j logaccept-final-29 + inet6/filter/limit-2050 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-29 -j ACCEPT -Filter 1838 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true} +Filter 2052 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) - inet/filter/FORWARD -j limit-1837 - inet/filter/INPUT -j limit-1837 - inet/filter/OUTPUT -j limit-1837 - inet/filter/limit-1837 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-883 - inet/filter/limit-1837 -m limit --limit 1/second -j LOG - inet/filter/logdrop-883 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-883 -j DROP - inet6/filter/FORWARD -j limit-1837 - inet6/filter/INPUT -j limit-1837 - inet6/filter/OUTPUT -j limit-1837 - inet6/filter/limit-1837 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-883 - inet6/filter/limit-1837 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-883 -j DROP + inet/filter/FORWARD -j limit-2051 + inet/filter/INPUT -j limit-2051 + inet/filter/OUTPUT -j limit-2051 + inet/filter/limit-2051 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2051 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2051 + inet6/filter/INPUT -j limit-2051 + inet6/filter/OUTPUT -j limit-2051 + inet6/filter/limit-2051 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2053 {"flow-limit":{}} +(filter-limit) + inet/filter/FORWARD -j limit-2052 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2052 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2052 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2052 -m recent --name limit-2052 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1110 + inet/filter/limit-2052 -m recent --name limit-2052 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1110 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1110 -j DROP + inet6/filter/FORWARD -j limit-2052 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2052 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2052 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2052 -m recent --name limit-2052 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1110 + inet6/filter/limit-2052 -m recent --name limit-2052 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1110 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1110 -j DROP + +Filter 2054 {"action":"pass","flow-limit":{}} +(filter-limit) + inet/filter/FORWARD -j limit-2053 + inet/filter/INPUT -j limit-2053 + inet/filter/OUTPUT -j limit-2053 + inet/filter/limit-2053 -m recent --name limit-2053 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1111 + inet/filter/limit-2053 -m recent --name limit-2053 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1111 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1111 -j DROP + inet6/filter/FORWARD -j limit-2053 + inet6/filter/INPUT -j limit-2053 + inet6/filter/OUTPUT -j limit-2053 + inet6/filter/limit-2053 -m recent --name limit-2053 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1111 + inet6/filter/limit-2053 -m recent --name limit-2053 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1111 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1111 -j DROP + +Filter 2055 {"flow-limit":{},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2054 + inet/filter/FORWARD -j logaccept-final-30 + inet/filter/INPUT -j limit-2054 + inet/filter/INPUT -j logaccept-final-30 + inet/filter/OUTPUT -j limit-2054 + inet/filter/OUTPUT -j logaccept-final-30 + inet/filter/limit-2054 -m recent --name limit-2054 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1112 + inet/filter/limit-2054 -m recent --name limit-2054 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-30 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-30 -j ACCEPT + inet/filter/logdrop-1112 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1112 -j DROP + inet6/filter/FORWARD -j limit-2054 + inet6/filter/FORWARD -j logaccept-final-30 + inet6/filter/INPUT -j limit-2054 + inet6/filter/INPUT -j logaccept-final-30 + inet6/filter/OUTPUT -j limit-2054 + inet6/filter/OUTPUT -j logaccept-final-30 + inet6/filter/limit-2054 -m recent --name limit-2054 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1112 + inet6/filter/limit-2054 -m recent --name limit-2054 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-30 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-30 -j ACCEPT + inet6/filter/logdrop-1112 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1112 -j DROP + +Filter 2056 {"action":"pass","flow-limit":{},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2055 + inet/filter/INPUT -j limit-2055 + inet/filter/OUTPUT -j limit-2055 + inet/filter/limit-2055 -m recent --name limit-2055 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1113 + inet/filter/limit-2055 -m recent --name limit-2055 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1113 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1113 -j DROP + inet6/filter/FORWARD -j limit-2055 + inet6/filter/INPUT -j limit-2055 + inet6/filter/OUTPUT -j limit-2055 + inet6/filter/limit-2055 -m recent --name limit-2055 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1113 + inet6/filter/limit-2055 -m recent --name limit-2055 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1113 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1113 -j DROP + +Filter 2057 {"flow-limit":{},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2056 + inet/filter/FORWARD -j logaccept-final-31 + inet/filter/INPUT -j limit-2056 + inet/filter/INPUT -j logaccept-final-31 + inet/filter/OUTPUT -j limit-2056 + inet/filter/OUTPUT -j logaccept-final-31 + inet/filter/limit-2056 -m recent --name limit-2056 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1114 + inet/filter/limit-2056 -m recent --name limit-2056 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-31 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-31 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-31 -j ACCEPT + inet/filter/logdrop-1114 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1114 -j DROP + inet6/filter/FORWARD -j limit-2056 + inet6/filter/FORWARD -j logaccept-final-31 + inet6/filter/INPUT -j limit-2056 + inet6/filter/INPUT -j logaccept-final-31 + inet6/filter/OUTPUT -j limit-2056 + inet6/filter/OUTPUT -j logaccept-final-31 + inet6/filter/limit-2056 -m recent --name limit-2056 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1114 + inet6/filter/limit-2056 -m recent --name limit-2056 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-31 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-31 -j ACCEPT + inet6/filter/logdrop-1114 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1114 -j DROP + +Filter 2058 {"action":"pass","flow-limit":{},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2057 + inet/filter/INPUT -j limit-2057 + inet/filter/OUTPUT -j limit-2057 + inet/filter/limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1115 + inet/filter/limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1115 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1115 -j DROP + inet6/filter/FORWARD -j limit-2057 + inet6/filter/INPUT -j limit-2057 + inet6/filter/OUTPUT -j limit-2057 + inet6/filter/limit-2057 -m recent --name limit-2057 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1115 + inet6/filter/limit-2057 -m recent --name limit-2057 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1115 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1115 -j DROP + +Filter 2059 {"flow-limit":{},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2058 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2058 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2058 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2058 -m recent --name limit-2058 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1116 + inet/filter/limit-2058 -m recent --name limit-2058 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1116 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1116 -j DROP + inet6/filter/FORWARD -j limit-2058 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2058 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2058 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2058 -m recent --name limit-2058 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1116 + inet6/filter/limit-2058 -m recent --name limit-2058 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1116 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1116 -j DROP + +Filter 2060 {"action":"pass","flow-limit":{},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2059 + inet/filter/INPUT -j limit-2059 + inet/filter/OUTPUT -j limit-2059 + inet/filter/limit-2059 -m recent --name limit-2059 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1117 + inet/filter/limit-2059 -m recent --name limit-2059 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1117 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1117 -j DROP + inet6/filter/FORWARD -j limit-2059 + inet6/filter/INPUT -j limit-2059 + inet6/filter/OUTPUT -j limit-2059 + inet6/filter/limit-2059 -m recent --name limit-2059 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1117 + inet6/filter/limit-2059 -m recent --name limit-2059 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1117 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1117 -j DROP + +Filter 2061 {"flow-limit":{},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2060 + inet/filter/FORWARD -j logaccept-final-32 + inet/filter/INPUT -j limit-2060 + inet/filter/INPUT -j logaccept-final-32 + inet/filter/OUTPUT -j limit-2060 + inet/filter/OUTPUT -j logaccept-final-32 + inet/filter/limit-2060 -m recent --name limit-2060 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1118 + inet/filter/limit-2060 -m recent --name limit-2060 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-32 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-32 -j ACCEPT + inet/filter/logdrop-1118 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1118 -j DROP + inet6/filter/FORWARD -j limit-2060 + inet6/filter/FORWARD -j logaccept-final-32 + inet6/filter/INPUT -j limit-2060 + inet6/filter/INPUT -j logaccept-final-32 + inet6/filter/OUTPUT -j limit-2060 + inet6/filter/OUTPUT -j logaccept-final-32 + inet6/filter/limit-2060 -m recent --name limit-2060 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1118 + inet6/filter/limit-2060 -m recent --name limit-2060 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-32 -j ACCEPT + inet6/filter/logdrop-1118 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1118 -j DROP + +Filter 2062 {"action":"pass","flow-limit":{},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2061 + inet/filter/INPUT -j limit-2061 + inet/filter/OUTPUT -j limit-2061 + inet/filter/limit-2061 -m recent --name limit-2061 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1119 + inet/filter/limit-2061 -m recent --name limit-2061 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1119 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1119 -j DROP + inet6/filter/FORWARD -j limit-2061 + inet6/filter/INPUT -j limit-2061 + inet6/filter/OUTPUT -j limit-2061 + inet6/filter/limit-2061 -m recent --name limit-2061 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1119 + inet6/filter/logdrop-1119 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1119 -j DROP + +Filter 2063 {"flow-limit":{"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2062 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2062 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2062 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1120 + inet/filter/limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1120 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1120 -j DROP + inet6/filter/FORWARD -j limit-2062 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2062 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2062 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1120 + inet6/filter/limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1120 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1120 -j DROP + +Filter 2064 {"action":"pass","flow-limit":{"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2063 + inet/filter/INPUT -j limit-2063 + inet/filter/OUTPUT -j limit-2063 + inet/filter/limit-2063 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1121 + inet/filter/limit-2063 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1121 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1121 -j DROP + inet6/filter/FORWARD -j limit-2063 + inet6/filter/INPUT -j limit-2063 + inet6/filter/OUTPUT -j limit-2063 + inet6/filter/limit-2063 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1121 + inet6/filter/limit-2063 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1121 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1121 -j DROP + +Filter 2065 {"flow-limit":{"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2064 + inet/filter/FORWARD -j logaccept-final-33 + inet/filter/INPUT -j limit-2064 + inet/filter/INPUT -j logaccept-final-33 + inet/filter/OUTPUT -j limit-2064 + inet/filter/OUTPUT -j logaccept-final-33 + inet/filter/limit-2064 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1122 + inet/filter/limit-2064 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-33 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-33 -j ACCEPT + inet/filter/logdrop-1122 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1122 -j DROP + inet6/filter/FORWARD -j limit-2064 + inet6/filter/FORWARD -j logaccept-final-33 + inet6/filter/INPUT -j limit-2064 + inet6/filter/INPUT -j logaccept-final-33 + inet6/filter/OUTPUT -j limit-2064 + inet6/filter/OUTPUT -j logaccept-final-33 + inet6/filter/limit-2064 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1122 + inet6/filter/limit-2064 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-33 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-33 -j ACCEPT + inet6/filter/logdrop-1122 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1122 -j DROP + +Filter 2066 {"action":"pass","flow-limit":{"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2065 + inet/filter/INPUT -j limit-2065 + inet/filter/OUTPUT -j limit-2065 + inet/filter/limit-2065 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1123 + inet/filter/limit-2065 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1123 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1123 -j DROP + inet6/filter/FORWARD -j limit-2065 + inet6/filter/INPUT -j limit-2065 + inet6/filter/OUTPUT -j limit-2065 + inet6/filter/limit-2065 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1123 + inet6/filter/limit-2065 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1123 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1123 -j DROP + +Filter 2067 {"flow-limit":{"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2066 + inet/filter/FORWARD -j logaccept-final-34 + inet/filter/INPUT -j limit-2066 + inet/filter/INPUT -j logaccept-final-34 + inet/filter/OUTPUT -j limit-2066 + inet/filter/OUTPUT -j logaccept-final-34 + inet/filter/limit-2066 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1124 + inet/filter/limit-2066 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-34 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-34 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-34 -j ACCEPT + inet/filter/logdrop-1124 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1124 -j DROP + inet6/filter/FORWARD -j limit-2066 + inet6/filter/FORWARD -j logaccept-final-34 + inet6/filter/INPUT -j limit-2066 + inet6/filter/INPUT -j logaccept-final-34 + inet6/filter/OUTPUT -j limit-2066 + inet6/filter/OUTPUT -j logaccept-final-34 + inet6/filter/limit-2066 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1124 + inet6/filter/limit-2066 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-34 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-34 -j ACCEPT + inet6/filter/logdrop-1124 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1124 -j DROP + +Filter 2068 {"action":"pass","flow-limit":{"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2067 + inet/filter/INPUT -j limit-2067 + inet/filter/OUTPUT -j limit-2067 + inet/filter/limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1125 + inet/filter/limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1125 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1125 -j DROP + inet6/filter/FORWARD -j limit-2067 + inet6/filter/INPUT -j limit-2067 + inet6/filter/OUTPUT -j limit-2067 + inet6/filter/limit-2067 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1125 + inet6/filter/limit-2067 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1125 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1125 -j DROP + +Filter 2069 {"flow-limit":{"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2068 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2068 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2068 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2068 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1126 + inet/filter/limit-2068 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1126 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1126 -j DROP + inet6/filter/FORWARD -j limit-2068 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2068 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2068 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2068 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1126 + inet6/filter/limit-2068 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1126 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1126 -j DROP + +Filter 2070 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2069 + inet/filter/INPUT -j limit-2069 + inet/filter/OUTPUT -j limit-2069 + inet/filter/limit-2069 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1127 + inet/filter/limit-2069 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1127 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1127 -j DROP + inet6/filter/FORWARD -j limit-2069 + inet6/filter/INPUT -j limit-2069 + inet6/filter/OUTPUT -j limit-2069 + inet6/filter/limit-2069 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1127 + inet6/filter/limit-2069 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1127 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1127 -j DROP + +Filter 2071 {"flow-limit":{"name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2070 + inet/filter/FORWARD -j logaccept-final-35 + inet/filter/INPUT -j limit-2070 + inet/filter/INPUT -j logaccept-final-35 + inet/filter/OUTPUT -j limit-2070 + inet/filter/OUTPUT -j logaccept-final-35 + inet/filter/limit-2070 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1128 + inet/filter/limit-2070 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-35 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-35 -j ACCEPT + inet/filter/logdrop-1128 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1128 -j DROP + inet6/filter/FORWARD -j limit-2070 + inet6/filter/FORWARD -j logaccept-final-35 + inet6/filter/INPUT -j limit-2070 + inet6/filter/INPUT -j logaccept-final-35 + inet6/filter/OUTPUT -j limit-2070 + inet6/filter/OUTPUT -j logaccept-final-35 + inet6/filter/limit-2070 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1128 + inet6/filter/limit-2070 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-35 -j ACCEPT + inet6/filter/logdrop-1128 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1128 -j DROP + +Filter 2072 {"action":"pass","flow-limit":{"name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2071 + inet/filter/INPUT -j limit-2071 + inet/filter/OUTPUT -j limit-2071 + inet/filter/limit-2071 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1129 + inet/filter/limit-2071 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1129 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1129 -j DROP + inet6/filter/FORWARD -j limit-2071 + inet6/filter/INPUT -j limit-2071 + inet6/filter/OUTPUT -j limit-2071 + inet6/filter/limit-2071 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1129 + inet6/filter/logdrop-1129 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1129 -j DROP + +Filter 2073 {"flow-limit":{"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2072 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2072 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2072 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2072 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1130 + inet/filter/logdrop-1130 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1130 -j DROP + inet6/filter/FORWARD -j limit-2072 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2072 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2072 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2072 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1130 + inet6/filter/logdrop-1130 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1130 -j DROP + +Filter 2074 {"action":"pass","flow-limit":{"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2073 + inet/filter/INPUT -j limit-2073 + inet/filter/OUTPUT -j limit-2073 + inet/filter/limit-2073 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1131 + inet/filter/logdrop-1131 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1131 -j DROP + inet6/filter/FORWARD -j limit-2073 + inet6/filter/INPUT -j limit-2073 + inet6/filter/OUTPUT -j limit-2073 + inet6/filter/limit-2073 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1131 + inet6/filter/logdrop-1131 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1131 -j DROP + +Filter 2075 {"flow-limit":{"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2074 + inet/filter/FORWARD -j logaccept-final-36 + inet/filter/INPUT -j limit-2074 + inet/filter/INPUT -j logaccept-final-36 + inet/filter/OUTPUT -j limit-2074 + inet/filter/OUTPUT -j logaccept-final-36 + inet/filter/limit-2074 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1132 + inet/filter/logaccept-final-36 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-36 -j ACCEPT + inet/filter/logdrop-1132 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1132 -j DROP + inet6/filter/FORWARD -j limit-2074 + inet6/filter/FORWARD -j logaccept-final-36 + inet6/filter/INPUT -j limit-2074 + inet6/filter/INPUT -j logaccept-final-36 + inet6/filter/OUTPUT -j limit-2074 + inet6/filter/OUTPUT -j logaccept-final-36 + inet6/filter/limit-2074 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1132 + inet6/filter/logaccept-final-36 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-36 -j ACCEPT + inet6/filter/logdrop-1132 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1132 -j DROP + +Filter 2076 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2075 + inet/filter/INPUT -j limit-2075 + inet/filter/OUTPUT -j limit-2075 + inet/filter/limit-2075 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1133 + inet/filter/limit-2075 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1133 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1133 -j DROP + inet6/filter/FORWARD -j limit-2075 + inet6/filter/INPUT -j limit-2075 + inet6/filter/OUTPUT -j limit-2075 + inet6/filter/limit-2075 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1133 + inet6/filter/limit-2075 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1133 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1133 -j DROP + +Filter 2077 {"flow-limit":{"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2076 + inet/filter/FORWARD -j logaccept-final-37 + inet/filter/INPUT -j limit-2076 + inet/filter/INPUT -j logaccept-final-37 + inet/filter/OUTPUT -j limit-2076 + inet/filter/OUTPUT -j logaccept-final-37 + inet/filter/limit-2076 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1134 + inet/filter/logaccept-final-37 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-37 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-37 -j ACCEPT + inet/filter/logdrop-1134 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1134 -j DROP + inet6/filter/FORWARD -j limit-2076 + inet6/filter/FORWARD -j logaccept-final-37 + inet6/filter/INPUT -j limit-2076 + inet6/filter/INPUT -j logaccept-final-37 + inet6/filter/OUTPUT -j limit-2076 + inet6/filter/OUTPUT -j logaccept-final-37 + inet6/filter/limit-2076 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1134 + inet6/filter/logaccept-final-37 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-37 -j ACCEPT + inet6/filter/logdrop-1134 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1134 -j DROP + +Filter 2078 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2077 + inet/filter/INPUT -j limit-2077 + inet/filter/OUTPUT -j limit-2077 + inet/filter/limit-2077 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1135 + inet/filter/limit-2077 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2077 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1135 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1135 -j DROP + inet6/filter/FORWARD -j limit-2077 + inet6/filter/INPUT -j limit-2077 + inet6/filter/OUTPUT -j limit-2077 + inet6/filter/limit-2077 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1135 + inet6/filter/limit-2077 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1135 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1135 -j DROP + +Filter 2079 {"flow-limit":{"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2078 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2078 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2078 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2078 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1136 + inet/filter/logdrop-1136 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1136 -j DROP + inet6/filter/FORWARD -j limit-2078 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2078 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2078 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2078 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1136 + inet6/filter/logdrop-1136 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1136 -j DROP + +Filter 2080 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2079 + inet/filter/INPUT -j limit-2079 + inet/filter/OUTPUT -j limit-2079 + inet/filter/limit-2079 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1137 + inet/filter/logdrop-1137 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1137 -j DROP + inet6/filter/FORWARD -j limit-2079 + inet6/filter/INPUT -j limit-2079 + inet6/filter/OUTPUT -j limit-2079 + inet6/filter/limit-2079 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1137 + inet6/filter/logdrop-1137 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1137 -j DROP + +Filter 2081 {"flow-limit":{"name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2080 + inet/filter/FORWARD -j logaccept-final-38 + inet/filter/INPUT -j limit-2080 + inet/filter/INPUT -j logaccept-final-38 + inet/filter/OUTPUT -j limit-2080 + inet/filter/OUTPUT -j logaccept-final-38 + inet/filter/limit-2080 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1138 + inet/filter/logaccept-final-38 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-38 -j ACCEPT + inet/filter/logdrop-1138 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1138 -j DROP + inet6/filter/FORWARD -j limit-2080 + inet6/filter/FORWARD -j logaccept-final-38 + inet6/filter/INPUT -j limit-2080 + inet6/filter/INPUT -j logaccept-final-38 + inet6/filter/OUTPUT -j limit-2080 + inet6/filter/OUTPUT -j logaccept-final-38 + inet6/filter/limit-2080 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1138 + inet6/filter/logaccept-final-38 -j ACCEPT + inet6/filter/logdrop-1138 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1138 -j DROP + +Filter 2082 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2081 + inet/filter/INPUT -j limit-2081 + inet/filter/OUTPUT -j limit-2081 + inet/filter/limit-2081 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1139 + inet/filter/limit-2081 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1139 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1139 -j DROP + inet6/filter/FORWARD -j limit-2081 + inet6/filter/INPUT -j limit-2081 + inet6/filter/OUTPUT -j limit-2081 + inet6/filter/limit-2081 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1139 + inet6/filter/logdrop-1139 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1139 -j DROP + +Filter 2083 {"flow-limit":{"addr":"dest","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2082 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2082 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2082 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2082 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1140 + inet/filter/limit-2082 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1140 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1140 -j DROP + inet6/filter/FORWARD -j limit-2082 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2082 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2082 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2082 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1140 + inet6/filter/limit-2082 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1140 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1140 -j DROP + +Filter 2084 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2083 + inet/filter/INPUT -j limit-2083 + inet/filter/OUTPUT -j limit-2083 + inet/filter/limit-2083 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1141 + inet/filter/limit-2083 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1141 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1141 -j DROP + inet6/filter/FORWARD -j limit-2083 + inet6/filter/INPUT -j limit-2083 + inet6/filter/OUTPUT -j limit-2083 + inet6/filter/limit-2083 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1141 + inet6/filter/limit-2083 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1141 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1141 -j DROP + +Filter 2085 {"flow-limit":{"addr":"dest","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2084 + inet/filter/FORWARD -j logaccept-final-39 + inet/filter/INPUT -j limit-2084 + inet/filter/INPUT -j logaccept-final-39 + inet/filter/OUTPUT -j limit-2084 + inet/filter/OUTPUT -j logaccept-final-39 + inet/filter/limit-2084 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1142 + inet/filter/limit-2084 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-39 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-39 -j ACCEPT + inet/filter/logdrop-1142 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1142 -j DROP + inet6/filter/FORWARD -j limit-2084 + inet6/filter/FORWARD -j logaccept-final-39 + inet6/filter/INPUT -j limit-2084 + inet6/filter/INPUT -j logaccept-final-39 + inet6/filter/OUTPUT -j limit-2084 + inet6/filter/OUTPUT -j logaccept-final-39 + inet6/filter/limit-2084 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1142 + inet6/filter/limit-2084 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-39 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-39 -j ACCEPT + inet6/filter/logdrop-1142 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1142 -j DROP + +Filter 2086 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2085 + inet/filter/INPUT -j limit-2085 + inet/filter/OUTPUT -j limit-2085 + inet/filter/limit-2085 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1143 + inet/filter/limit-2085 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1143 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1143 -j DROP + inet6/filter/FORWARD -j limit-2085 + inet6/filter/INPUT -j limit-2085 + inet6/filter/OUTPUT -j limit-2085 + inet6/filter/limit-2085 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1143 + inet6/filter/limit-2085 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1143 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1143 -j DROP + +Filter 2087 {"flow-limit":{"addr":"dest","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2086 + inet/filter/FORWARD -j logaccept-final-40 + inet/filter/INPUT -j limit-2086 + inet/filter/INPUT -j logaccept-final-40 + inet/filter/OUTPUT -j limit-2086 + inet/filter/OUTPUT -j logaccept-final-40 + inet/filter/limit-2086 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1144 + inet/filter/limit-2086 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-40 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-40 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-40 -j ACCEPT + inet/filter/logdrop-1144 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1144 -j DROP + inet6/filter/FORWARD -j limit-2086 + inet6/filter/FORWARD -j logaccept-final-40 + inet6/filter/INPUT -j limit-2086 + inet6/filter/INPUT -j logaccept-final-40 + inet6/filter/OUTPUT -j limit-2086 + inet6/filter/OUTPUT -j logaccept-final-40 + inet6/filter/limit-2086 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1144 + inet6/filter/limit-2086 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-40 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-40 -j ACCEPT + inet6/filter/logdrop-1144 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1144 -j DROP + +Filter 2088 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2087 + inet/filter/INPUT -j limit-2087 + inet/filter/OUTPUT -j limit-2087 + inet/filter/limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1145 + inet/filter/limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1145 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1145 -j DROP + inet6/filter/FORWARD -j limit-2087 + inet6/filter/INPUT -j limit-2087 + inet6/filter/OUTPUT -j limit-2087 + inet6/filter/limit-2087 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1145 + inet6/filter/limit-2087 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1145 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1145 -j DROP + +Filter 2089 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2088 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2088 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2088 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2088 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1146 + inet/filter/limit-2088 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1146 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1146 -j DROP + inet6/filter/FORWARD -j limit-2088 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2088 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2088 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2088 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1146 + inet6/filter/limit-2088 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1146 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1146 -j DROP + +Filter 2090 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2089 + inet/filter/INPUT -j limit-2089 + inet/filter/OUTPUT -j limit-2089 + inet/filter/limit-2089 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1147 + inet/filter/limit-2089 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1147 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1147 -j DROP + inet6/filter/FORWARD -j limit-2089 + inet6/filter/INPUT -j limit-2089 + inet6/filter/OUTPUT -j limit-2089 + inet6/filter/limit-2089 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1147 + inet6/filter/limit-2089 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1147 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1147 -j DROP + +Filter 2091 {"flow-limit":{"addr":"dest","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2090 + inet/filter/FORWARD -j logaccept-final-41 + inet/filter/INPUT -j limit-2090 + inet/filter/INPUT -j logaccept-final-41 + inet/filter/OUTPUT -j limit-2090 + inet/filter/OUTPUT -j logaccept-final-41 + inet/filter/limit-2090 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1148 + inet/filter/limit-2090 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-41 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-41 -j ACCEPT + inet/filter/logdrop-1148 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1148 -j DROP + inet6/filter/FORWARD -j limit-2090 + inet6/filter/FORWARD -j logaccept-final-41 + inet6/filter/INPUT -j limit-2090 + inet6/filter/INPUT -j logaccept-final-41 + inet6/filter/OUTPUT -j limit-2090 + inet6/filter/OUTPUT -j logaccept-final-41 + inet6/filter/limit-2090 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1148 + inet6/filter/limit-2090 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-41 -j ACCEPT + inet6/filter/logdrop-1148 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1148 -j DROP + +Filter 2092 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2091 + inet/filter/INPUT -j limit-2091 + inet/filter/OUTPUT -j limit-2091 + inet/filter/limit-2091 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1149 + inet/filter/limit-2091 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1149 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1149 -j DROP + inet6/filter/FORWARD -j limit-2091 + inet6/filter/INPUT -j limit-2091 + inet6/filter/OUTPUT -j limit-2091 + inet6/filter/limit-2091 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1149 + inet6/filter/logdrop-1149 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1149 -j DROP + +Filter 2093 {"flow-limit":{"addr":"dest","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2092 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2092 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2092 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2092 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1150 + inet/filter/logdrop-1150 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1150 -j DROP + inet6/filter/FORWARD -j limit-2092 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2092 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2092 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2092 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1150 + inet6/filter/logdrop-1150 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1150 -j DROP + +Filter 2094 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2093 + inet/filter/INPUT -j limit-2093 + inet/filter/OUTPUT -j limit-2093 + inet/filter/limit-2093 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1151 + inet/filter/logdrop-1151 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1151 -j DROP + inet6/filter/FORWARD -j limit-2093 + inet6/filter/INPUT -j limit-2093 + inet6/filter/OUTPUT -j limit-2093 + inet6/filter/limit-2093 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1151 + inet6/filter/logdrop-1151 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1151 -j DROP + +Filter 2095 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2094 + inet/filter/FORWARD -j logaccept-final-42 + inet/filter/INPUT -j limit-2094 + inet/filter/INPUT -j logaccept-final-42 + inet/filter/OUTPUT -j limit-2094 + inet/filter/OUTPUT -j logaccept-final-42 + inet/filter/limit-2094 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1152 + inet/filter/logaccept-final-42 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-42 -j ACCEPT + inet/filter/logdrop-1152 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1152 -j DROP + inet6/filter/FORWARD -j limit-2094 + inet6/filter/FORWARD -j logaccept-final-42 + inet6/filter/INPUT -j limit-2094 + inet6/filter/INPUT -j logaccept-final-42 + inet6/filter/OUTPUT -j limit-2094 + inet6/filter/OUTPUT -j logaccept-final-42 + inet6/filter/limit-2094 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1152 + inet6/filter/logaccept-final-42 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-42 -j ACCEPT + inet6/filter/logdrop-1152 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1152 -j DROP + +Filter 2096 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2095 + inet/filter/INPUT -j limit-2095 + inet/filter/OUTPUT -j limit-2095 + inet/filter/limit-2095 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1153 + inet/filter/limit-2095 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1153 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1153 -j DROP + inet6/filter/FORWARD -j limit-2095 + inet6/filter/INPUT -j limit-2095 + inet6/filter/OUTPUT -j limit-2095 + inet6/filter/limit-2095 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1153 + inet6/filter/limit-2095 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1153 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1153 -j DROP + +Filter 2097 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2096 + inet/filter/FORWARD -j logaccept-final-43 + inet/filter/INPUT -j limit-2096 + inet/filter/INPUT -j logaccept-final-43 + inet/filter/OUTPUT -j limit-2096 + inet/filter/OUTPUT -j logaccept-final-43 + inet/filter/limit-2096 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1154 + inet/filter/logaccept-final-43 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-43 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-43 -j ACCEPT + inet/filter/logdrop-1154 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1154 -j DROP + inet6/filter/FORWARD -j limit-2096 + inet6/filter/FORWARD -j logaccept-final-43 + inet6/filter/INPUT -j limit-2096 + inet6/filter/INPUT -j logaccept-final-43 + inet6/filter/OUTPUT -j limit-2096 + inet6/filter/OUTPUT -j logaccept-final-43 + inet6/filter/limit-2096 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1154 + inet6/filter/logaccept-final-43 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-43 -j ACCEPT + inet6/filter/logdrop-1154 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1154 -j DROP + +Filter 2098 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2097 + inet/filter/INPUT -j limit-2097 + inet/filter/OUTPUT -j limit-2097 + inet/filter/limit-2097 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1155 + inet/filter/limit-2097 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2097 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1155 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1155 -j DROP + inet6/filter/FORWARD -j limit-2097 + inet6/filter/INPUT -j limit-2097 + inet6/filter/OUTPUT -j limit-2097 + inet6/filter/limit-2097 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1155 + inet6/filter/limit-2097 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1155 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1155 -j DROP + +Filter 2099 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2098 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2098 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2098 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2098 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1156 + inet/filter/logdrop-1156 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1156 -j DROP + inet6/filter/FORWARD -j limit-2098 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2098 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2098 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1156 + inet6/filter/logdrop-1156 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1156 -j DROP + +Filter 2100 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2099 + inet/filter/INPUT -j limit-2099 + inet/filter/OUTPUT -j limit-2099 + inet/filter/limit-2099 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1157 + inet/filter/logdrop-1157 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1157 -j DROP + inet6/filter/FORWARD -j limit-2099 + inet6/filter/INPUT -j limit-2099 + inet6/filter/OUTPUT -j limit-2099 + inet6/filter/limit-2099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1157 + inet6/filter/logdrop-1157 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1157 -j DROP + +Filter 2101 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2100 + inet/filter/FORWARD -j logaccept-final-44 + inet/filter/INPUT -j limit-2100 + inet/filter/INPUT -j logaccept-final-44 + inet/filter/OUTPUT -j limit-2100 + inet/filter/OUTPUT -j logaccept-final-44 + inet/filter/limit-2100 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1158 + inet/filter/logaccept-final-44 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-44 -j ACCEPT + inet/filter/logdrop-1158 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1158 -j DROP + inet6/filter/FORWARD -j limit-2100 + inet6/filter/FORWARD -j logaccept-final-44 + inet6/filter/INPUT -j limit-2100 + inet6/filter/INPUT -j logaccept-final-44 + inet6/filter/OUTPUT -j limit-2100 + inet6/filter/OUTPUT -j logaccept-final-44 + inet6/filter/limit-2100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1158 + inet6/filter/logaccept-final-44 -j ACCEPT + inet6/filter/logdrop-1158 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1158 -j DROP + +Filter 2102 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2101 + inet/filter/INPUT -j limit-2101 + inet/filter/OUTPUT -j limit-2101 + inet/filter/limit-2101 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1159 + inet/filter/limit-2101 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1159 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1159 -j DROP + inet6/filter/FORWARD -j limit-2101 + inet6/filter/INPUT -j limit-2101 + inet6/filter/OUTPUT -j limit-2101 + inet6/filter/limit-2101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1159 + inet6/filter/logdrop-1159 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1159 -j DROP + +Filter 2103 {"flow-limit":{"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2102 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2102 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2102 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2102 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1160 + inet/filter/limit-2102 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1160 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1160 -j DROP + inet6/filter/FORWARD -j limit-2102 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2102 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2102 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2102 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1160 + inet6/filter/limit-2102 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1160 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1160 -j DROP + +Filter 2104 {"action":"pass","flow-limit":{"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2103 + inet/filter/INPUT -j limit-2103 + inet/filter/OUTPUT -j limit-2103 + inet/filter/limit-2103 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1161 + inet/filter/limit-2103 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1161 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1161 -j DROP + inet6/filter/FORWARD -j limit-2103 + inet6/filter/INPUT -j limit-2103 + inet6/filter/OUTPUT -j limit-2103 + inet6/filter/limit-2103 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1161 + inet6/filter/limit-2103 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1161 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1161 -j DROP + +Filter 2105 {"flow-limit":{"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2104 + inet/filter/FORWARD -j logaccept-final-45 + inet/filter/INPUT -j limit-2104 + inet/filter/INPUT -j logaccept-final-45 + inet/filter/OUTPUT -j limit-2104 + inet/filter/OUTPUT -j logaccept-final-45 + inet/filter/limit-2104 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1162 + inet/filter/limit-2104 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-45 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-45 -j ACCEPT + inet/filter/logdrop-1162 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1162 -j DROP + inet6/filter/FORWARD -j limit-2104 + inet6/filter/FORWARD -j logaccept-final-45 + inet6/filter/INPUT -j limit-2104 + inet6/filter/INPUT -j logaccept-final-45 + inet6/filter/OUTPUT -j limit-2104 + inet6/filter/OUTPUT -j logaccept-final-45 + inet6/filter/limit-2104 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1162 + inet6/filter/limit-2104 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-45 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-45 -j ACCEPT + inet6/filter/logdrop-1162 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1162 -j DROP + +Filter 2106 {"action":"pass","flow-limit":{"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2105 + inet/filter/INPUT -j limit-2105 + inet/filter/OUTPUT -j limit-2105 + inet/filter/limit-2105 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1163 + inet/filter/limit-2105 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1163 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1163 -j DROP + inet6/filter/FORWARD -j limit-2105 + inet6/filter/INPUT -j limit-2105 + inet6/filter/OUTPUT -j limit-2105 + inet6/filter/limit-2105 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1163 + inet6/filter/limit-2105 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1163 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1163 -j DROP + +Filter 2107 {"flow-limit":{"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2106 + inet/filter/FORWARD -j logaccept-final-46 + inet/filter/INPUT -j limit-2106 + inet/filter/INPUT -j logaccept-final-46 + inet/filter/OUTPUT -j limit-2106 + inet/filter/OUTPUT -j logaccept-final-46 + inet/filter/limit-2106 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1164 + inet/filter/limit-2106 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-46 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-46 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-46 -j ACCEPT + inet/filter/logdrop-1164 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1164 -j DROP + inet6/filter/FORWARD -j limit-2106 + inet6/filter/FORWARD -j logaccept-final-46 + inet6/filter/INPUT -j limit-2106 + inet6/filter/INPUT -j logaccept-final-46 + inet6/filter/OUTPUT -j limit-2106 + inet6/filter/OUTPUT -j logaccept-final-46 + inet6/filter/limit-2106 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1164 + inet6/filter/limit-2106 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-46 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-46 -j ACCEPT + inet6/filter/logdrop-1164 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1164 -j DROP + +Filter 2108 {"action":"pass","flow-limit":{"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2107 + inet/filter/INPUT -j limit-2107 + inet/filter/OUTPUT -j limit-2107 + inet/filter/limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1165 + inet/filter/limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1165 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1165 -j DROP + inet6/filter/FORWARD -j limit-2107 + inet6/filter/INPUT -j limit-2107 + inet6/filter/OUTPUT -j limit-2107 + inet6/filter/limit-2107 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1165 + inet6/filter/limit-2107 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1165 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1165 -j DROP + +Filter 2109 {"flow-limit":{"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2108 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2108 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2108 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2108 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1166 + inet/filter/limit-2108 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1166 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1166 -j DROP + inet6/filter/FORWARD -j limit-2108 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2108 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2108 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2108 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1166 + inet6/filter/limit-2108 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1166 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1166 -j DROP + +Filter 2110 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2109 + inet/filter/INPUT -j limit-2109 + inet/filter/OUTPUT -j limit-2109 + inet/filter/limit-2109 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1167 + inet/filter/limit-2109 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1167 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1167 -j DROP + inet6/filter/FORWARD -j limit-2109 + inet6/filter/INPUT -j limit-2109 + inet6/filter/OUTPUT -j limit-2109 + inet6/filter/limit-2109 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1167 + inet6/filter/limit-2109 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1167 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1167 -j DROP + +Filter 2111 {"flow-limit":{"name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2110 + inet/filter/FORWARD -j logaccept-final-47 + inet/filter/INPUT -j limit-2110 + inet/filter/INPUT -j logaccept-final-47 + inet/filter/OUTPUT -j limit-2110 + inet/filter/OUTPUT -j logaccept-final-47 + inet/filter/limit-2110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1168 + inet/filter/limit-2110 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-47 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-47 -j ACCEPT + inet/filter/logdrop-1168 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1168 -j DROP + inet6/filter/FORWARD -j limit-2110 + inet6/filter/FORWARD -j logaccept-final-47 + inet6/filter/INPUT -j limit-2110 + inet6/filter/INPUT -j logaccept-final-47 + inet6/filter/OUTPUT -j limit-2110 + inet6/filter/OUTPUT -j logaccept-final-47 + inet6/filter/limit-2110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1168 + inet6/filter/limit-2110 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-47 -j ACCEPT + inet6/filter/logdrop-1168 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1168 -j DROP + +Filter 2112 {"action":"pass","flow-limit":{"name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2111 + inet/filter/INPUT -j limit-2111 + inet/filter/OUTPUT -j limit-2111 + inet/filter/limit-2111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1169 + inet/filter/limit-2111 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1169 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1169 -j DROP + inet6/filter/FORWARD -j limit-2111 + inet6/filter/INPUT -j limit-2111 + inet6/filter/OUTPUT -j limit-2111 + inet6/filter/limit-2111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1169 + inet6/filter/logdrop-1169 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1169 -j DROP + +Filter 2113 {"flow-limit":{"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2112 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2112 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2112 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2112 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1170 + inet/filter/logdrop-1170 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1170 -j DROP + inet6/filter/FORWARD -j limit-2112 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2112 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2112 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2112 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1170 + inet6/filter/logdrop-1170 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1170 -j DROP + +Filter 2114 {"action":"pass","flow-limit":{"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2113 + inet/filter/INPUT -j limit-2113 + inet/filter/OUTPUT -j limit-2113 + inet/filter/limit-2113 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1171 + inet/filter/logdrop-1171 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1171 -j DROP + inet6/filter/FORWARD -j limit-2113 + inet6/filter/INPUT -j limit-2113 + inet6/filter/OUTPUT -j limit-2113 + inet6/filter/limit-2113 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1171 + inet6/filter/logdrop-1171 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1171 -j DROP + +Filter 2115 {"flow-limit":{"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2114 + inet/filter/FORWARD -j logaccept-final-48 + inet/filter/INPUT -j limit-2114 + inet/filter/INPUT -j logaccept-final-48 + inet/filter/OUTPUT -j limit-2114 + inet/filter/OUTPUT -j logaccept-final-48 + inet/filter/limit-2114 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1172 + inet/filter/logaccept-final-48 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-48 -j ACCEPT + inet/filter/logdrop-1172 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1172 -j DROP + inet6/filter/FORWARD -j limit-2114 + inet6/filter/FORWARD -j logaccept-final-48 + inet6/filter/INPUT -j limit-2114 + inet6/filter/INPUT -j logaccept-final-48 + inet6/filter/OUTPUT -j limit-2114 + inet6/filter/OUTPUT -j logaccept-final-48 + inet6/filter/limit-2114 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1172 + inet6/filter/logaccept-final-48 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-48 -j ACCEPT + inet6/filter/logdrop-1172 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1172 -j DROP + +Filter 2116 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2115 + inet/filter/INPUT -j limit-2115 + inet/filter/OUTPUT -j limit-2115 + inet/filter/limit-2115 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1173 + inet/filter/limit-2115 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1173 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1173 -j DROP + inet6/filter/FORWARD -j limit-2115 + inet6/filter/INPUT -j limit-2115 + inet6/filter/OUTPUT -j limit-2115 + inet6/filter/limit-2115 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1173 + inet6/filter/limit-2115 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1173 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1173 -j DROP + +Filter 2117 {"flow-limit":{"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2116 + inet/filter/FORWARD -j logaccept-final-49 + inet/filter/INPUT -j limit-2116 + inet/filter/INPUT -j logaccept-final-49 + inet/filter/OUTPUT -j limit-2116 + inet/filter/OUTPUT -j logaccept-final-49 + inet/filter/limit-2116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1174 + inet/filter/logaccept-final-49 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-49 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-49 -j ACCEPT + inet/filter/logdrop-1174 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1174 -j DROP + inet6/filter/FORWARD -j limit-2116 + inet6/filter/FORWARD -j logaccept-final-49 + inet6/filter/INPUT -j limit-2116 + inet6/filter/INPUT -j logaccept-final-49 + inet6/filter/OUTPUT -j limit-2116 + inet6/filter/OUTPUT -j logaccept-final-49 + inet6/filter/limit-2116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1174 + inet6/filter/logaccept-final-49 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-49 -j ACCEPT + inet6/filter/logdrop-1174 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1174 -j DROP + +Filter 2118 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2117 + inet/filter/INPUT -j limit-2117 + inet/filter/OUTPUT -j limit-2117 + inet/filter/limit-2117 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1175 + inet/filter/limit-2117 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2117 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1175 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1175 -j DROP + inet6/filter/FORWARD -j limit-2117 + inet6/filter/INPUT -j limit-2117 + inet6/filter/OUTPUT -j limit-2117 + inet6/filter/limit-2117 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1175 + inet6/filter/limit-2117 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1175 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1175 -j DROP + +Filter 2119 {"flow-limit":{"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2118 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2118 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2118 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1176 + inet/filter/logdrop-1176 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1176 -j DROP + inet6/filter/FORWARD -j limit-2118 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2118 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2118 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1176 + inet6/filter/logdrop-1176 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1176 -j DROP + +Filter 2120 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2119 + inet/filter/INPUT -j limit-2119 + inet/filter/OUTPUT -j limit-2119 + inet/filter/limit-2119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1177 + inet/filter/logdrop-1177 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1177 -j DROP + inet6/filter/FORWARD -j limit-2119 + inet6/filter/INPUT -j limit-2119 + inet6/filter/OUTPUT -j limit-2119 + inet6/filter/limit-2119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1177 + inet6/filter/logdrop-1177 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1177 -j DROP + +Filter 2121 {"flow-limit":{"name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2120 + inet/filter/FORWARD -j logaccept-final-50 + inet/filter/INPUT -j limit-2120 + inet/filter/INPUT -j logaccept-final-50 + inet/filter/OUTPUT -j limit-2120 + inet/filter/OUTPUT -j logaccept-final-50 + inet/filter/limit-2120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1178 + inet/filter/logaccept-final-50 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-50 -j ACCEPT + inet/filter/logdrop-1178 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1178 -j DROP + inet6/filter/FORWARD -j limit-2120 + inet6/filter/FORWARD -j logaccept-final-50 + inet6/filter/INPUT -j limit-2120 + inet6/filter/INPUT -j logaccept-final-50 + inet6/filter/OUTPUT -j limit-2120 + inet6/filter/OUTPUT -j logaccept-final-50 + inet6/filter/limit-2120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1178 + inet6/filter/logaccept-final-50 -j ACCEPT + inet6/filter/logdrop-1178 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1178 -j DROP + +Filter 2122 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2121 + inet/filter/INPUT -j limit-2121 + inet/filter/OUTPUT -j limit-2121 + inet/filter/limit-2121 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1179 + inet/filter/limit-2121 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1179 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1179 -j DROP + inet6/filter/FORWARD -j limit-2121 + inet6/filter/INPUT -j limit-2121 + inet6/filter/OUTPUT -j limit-2121 + inet6/filter/limit-2121 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1179 + inet6/filter/logdrop-1179 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1179 -j DROP + +Filter 2123 {"flow-limit":{"addr":"dest","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2122 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2122 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2122 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1180 + inet/filter/limit-2122 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1180 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1180 -j DROP + inet6/filter/FORWARD -j limit-2122 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2122 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2122 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1180 + inet6/filter/limit-2122 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1180 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1180 -j DROP + +Filter 2124 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2123 + inet/filter/INPUT -j limit-2123 + inet/filter/OUTPUT -j limit-2123 + inet/filter/limit-2123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1181 + inet/filter/limit-2123 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1181 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1181 -j DROP + inet6/filter/FORWARD -j limit-2123 + inet6/filter/INPUT -j limit-2123 + inet6/filter/OUTPUT -j limit-2123 + inet6/filter/limit-2123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1181 + inet6/filter/limit-2123 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1181 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1181 -j DROP + +Filter 2125 {"flow-limit":{"addr":"dest","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2124 + inet/filter/FORWARD -j logaccept-final-51 + inet/filter/INPUT -j limit-2124 + inet/filter/INPUT -j logaccept-final-51 + inet/filter/OUTPUT -j limit-2124 + inet/filter/OUTPUT -j logaccept-final-51 + inet/filter/limit-2124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1182 + inet/filter/limit-2124 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-51 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-51 -j ACCEPT + inet/filter/logdrop-1182 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1182 -j DROP + inet6/filter/FORWARD -j limit-2124 + inet6/filter/FORWARD -j logaccept-final-51 + inet6/filter/INPUT -j limit-2124 + inet6/filter/INPUT -j logaccept-final-51 + inet6/filter/OUTPUT -j limit-2124 + inet6/filter/OUTPUT -j logaccept-final-51 + inet6/filter/limit-2124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1182 + inet6/filter/limit-2124 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-51 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-51 -j ACCEPT + inet6/filter/logdrop-1182 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1182 -j DROP + +Filter 2126 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2125 + inet/filter/INPUT -j limit-2125 + inet/filter/OUTPUT -j limit-2125 + inet/filter/limit-2125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1183 + inet/filter/limit-2125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1183 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1183 -j DROP + inet6/filter/FORWARD -j limit-2125 + inet6/filter/INPUT -j limit-2125 + inet6/filter/OUTPUT -j limit-2125 + inet6/filter/limit-2125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1183 + inet6/filter/limit-2125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1183 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1183 -j DROP + +Filter 2127 {"flow-limit":{"addr":"dest","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2126 + inet/filter/FORWARD -j logaccept-final-52 + inet/filter/INPUT -j limit-2126 + inet/filter/INPUT -j logaccept-final-52 + inet/filter/OUTPUT -j limit-2126 + inet/filter/OUTPUT -j logaccept-final-52 + inet/filter/limit-2126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1184 + inet/filter/limit-2126 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-52 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-52 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-52 -j ACCEPT + inet/filter/logdrop-1184 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1184 -j DROP + inet6/filter/FORWARD -j limit-2126 + inet6/filter/FORWARD -j logaccept-final-52 + inet6/filter/INPUT -j limit-2126 + inet6/filter/INPUT -j logaccept-final-52 + inet6/filter/OUTPUT -j limit-2126 + inet6/filter/OUTPUT -j logaccept-final-52 + inet6/filter/limit-2126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1184 + inet6/filter/limit-2126 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-52 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-52 -j ACCEPT + inet6/filter/logdrop-1184 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1184 -j DROP + +Filter 2128 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2127 + inet/filter/INPUT -j limit-2127 + inet/filter/OUTPUT -j limit-2127 + inet/filter/limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1185 + inet/filter/limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1185 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1185 -j DROP + inet6/filter/FORWARD -j limit-2127 + inet6/filter/INPUT -j limit-2127 + inet6/filter/OUTPUT -j limit-2127 + inet6/filter/limit-2127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1185 + inet6/filter/limit-2127 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1185 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1185 -j DROP + +Filter 2129 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2128 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2128 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2128 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2128 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1186 + inet/filter/limit-2128 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1186 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1186 -j DROP + inet6/filter/FORWARD -j limit-2128 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2128 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2128 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2128 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1186 + inet6/filter/limit-2128 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1186 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1186 -j DROP + +Filter 2130 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2129 + inet/filter/INPUT -j limit-2129 + inet/filter/OUTPUT -j limit-2129 + inet/filter/limit-2129 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1187 + inet/filter/limit-2129 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1187 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1187 -j DROP + inet6/filter/FORWARD -j limit-2129 + inet6/filter/INPUT -j limit-2129 + inet6/filter/OUTPUT -j limit-2129 + inet6/filter/limit-2129 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1187 + inet6/filter/limit-2129 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1187 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1187 -j DROP + +Filter 2131 {"flow-limit":{"addr":"dest","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2130 + inet/filter/FORWARD -j logaccept-final-53 + inet/filter/INPUT -j limit-2130 + inet/filter/INPUT -j logaccept-final-53 + inet/filter/OUTPUT -j limit-2130 + inet/filter/OUTPUT -j logaccept-final-53 + inet/filter/limit-2130 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1188 + inet/filter/limit-2130 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-53 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-53 -j ACCEPT + inet/filter/logdrop-1188 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1188 -j DROP + inet6/filter/FORWARD -j limit-2130 + inet6/filter/FORWARD -j logaccept-final-53 + inet6/filter/INPUT -j limit-2130 + inet6/filter/INPUT -j logaccept-final-53 + inet6/filter/OUTPUT -j limit-2130 + inet6/filter/OUTPUT -j logaccept-final-53 + inet6/filter/limit-2130 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1188 + inet6/filter/limit-2130 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-53 -j ACCEPT + inet6/filter/logdrop-1188 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1188 -j DROP + +Filter 2132 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2131 + inet/filter/INPUT -j limit-2131 + inet/filter/OUTPUT -j limit-2131 + inet/filter/limit-2131 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1189 + inet/filter/limit-2131 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1189 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1189 -j DROP + inet6/filter/FORWARD -j limit-2131 + inet6/filter/INPUT -j limit-2131 + inet6/filter/OUTPUT -j limit-2131 + inet6/filter/limit-2131 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1189 + inet6/filter/logdrop-1189 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1189 -j DROP + +Filter 2133 {"flow-limit":{"addr":"dest","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2132 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2132 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2132 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1190 + inet/filter/logdrop-1190 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1190 -j DROP + inet6/filter/FORWARD -j limit-2132 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2132 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2132 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1190 + inet6/filter/logdrop-1190 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1190 -j DROP + +Filter 2134 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2133 + inet/filter/INPUT -j limit-2133 + inet/filter/OUTPUT -j limit-2133 + inet/filter/limit-2133 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1191 + inet/filter/logdrop-1191 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1191 -j DROP + inet6/filter/FORWARD -j limit-2133 + inet6/filter/INPUT -j limit-2133 + inet6/filter/OUTPUT -j limit-2133 + inet6/filter/limit-2133 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1191 + inet6/filter/logdrop-1191 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1191 -j DROP + +Filter 2135 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2134 + inet/filter/FORWARD -j logaccept-final-54 + inet/filter/INPUT -j limit-2134 + inet/filter/INPUT -j logaccept-final-54 + inet/filter/OUTPUT -j limit-2134 + inet/filter/OUTPUT -j logaccept-final-54 + inet/filter/limit-2134 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1192 + inet/filter/logaccept-final-54 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-54 -j ACCEPT + inet/filter/logdrop-1192 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1192 -j DROP + inet6/filter/FORWARD -j limit-2134 + inet6/filter/FORWARD -j logaccept-final-54 + inet6/filter/INPUT -j limit-2134 + inet6/filter/INPUT -j logaccept-final-54 + inet6/filter/OUTPUT -j limit-2134 + inet6/filter/OUTPUT -j logaccept-final-54 + inet6/filter/limit-2134 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1192 + inet6/filter/logaccept-final-54 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-54 -j ACCEPT + inet6/filter/logdrop-1192 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1192 -j DROP + +Filter 2136 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2135 + inet/filter/INPUT -j limit-2135 + inet/filter/OUTPUT -j limit-2135 + inet/filter/limit-2135 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1193 + inet/filter/limit-2135 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1193 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1193 -j DROP + inet6/filter/FORWARD -j limit-2135 + inet6/filter/INPUT -j limit-2135 + inet6/filter/OUTPUT -j limit-2135 + inet6/filter/limit-2135 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1193 + inet6/filter/limit-2135 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1193 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1193 -j DROP + +Filter 2137 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2136 + inet/filter/FORWARD -j logaccept-final-55 + inet/filter/INPUT -j limit-2136 + inet/filter/INPUT -j logaccept-final-55 + inet/filter/OUTPUT -j limit-2136 + inet/filter/OUTPUT -j logaccept-final-55 + inet/filter/limit-2136 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1194 + inet/filter/logaccept-final-55 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-55 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-55 -j ACCEPT + inet/filter/logdrop-1194 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1194 -j DROP + inet6/filter/FORWARD -j limit-2136 + inet6/filter/FORWARD -j logaccept-final-55 + inet6/filter/INPUT -j limit-2136 + inet6/filter/INPUT -j logaccept-final-55 + inet6/filter/OUTPUT -j limit-2136 + inet6/filter/OUTPUT -j logaccept-final-55 + inet6/filter/limit-2136 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1194 + inet6/filter/logaccept-final-55 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-55 -j ACCEPT + inet6/filter/logdrop-1194 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1194 -j DROP + +Filter 2138 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2137 + inet/filter/INPUT -j limit-2137 + inet/filter/OUTPUT -j limit-2137 + inet/filter/limit-2137 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1195 + inet/filter/limit-2137 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2137 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1195 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1195 -j DROP + inet6/filter/FORWARD -j limit-2137 + inet6/filter/INPUT -j limit-2137 + inet6/filter/OUTPUT -j limit-2137 + inet6/filter/limit-2137 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1195 + inet6/filter/limit-2137 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1195 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1195 -j DROP + +Filter 2139 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2138 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2138 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2138 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2138 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1196 + inet/filter/logdrop-1196 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1196 -j DROP + inet6/filter/FORWARD -j limit-2138 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2138 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2138 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2138 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1196 + inet6/filter/logdrop-1196 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1196 -j DROP + +Filter 2140 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2139 + inet/filter/INPUT -j limit-2139 + inet/filter/OUTPUT -j limit-2139 + inet/filter/limit-2139 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1197 + inet/filter/logdrop-1197 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1197 -j DROP + inet6/filter/FORWARD -j limit-2139 + inet6/filter/INPUT -j limit-2139 + inet6/filter/OUTPUT -j limit-2139 + inet6/filter/limit-2139 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1197 + inet6/filter/logdrop-1197 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1197 -j DROP + +Filter 2141 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2140 + inet/filter/FORWARD -j logaccept-final-56 + inet/filter/INPUT -j limit-2140 + inet/filter/INPUT -j logaccept-final-56 + inet/filter/OUTPUT -j limit-2140 + inet/filter/OUTPUT -j logaccept-final-56 + inet/filter/limit-2140 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1198 + inet/filter/logaccept-final-56 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-56 -j ACCEPT + inet/filter/logdrop-1198 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1198 -j DROP + inet6/filter/FORWARD -j limit-2140 + inet6/filter/FORWARD -j logaccept-final-56 + inet6/filter/INPUT -j limit-2140 + inet6/filter/INPUT -j logaccept-final-56 + inet6/filter/OUTPUT -j limit-2140 + inet6/filter/OUTPUT -j logaccept-final-56 + inet6/filter/limit-2140 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1198 + inet6/filter/logaccept-final-56 -j ACCEPT + inet6/filter/logdrop-1198 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1198 -j DROP + +Filter 2142 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2141 + inet/filter/INPUT -j limit-2141 + inet/filter/OUTPUT -j limit-2141 + inet/filter/limit-2141 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1199 + inet/filter/limit-2141 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1199 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1199 -j DROP + inet6/filter/FORWARD -j limit-2141 + inet6/filter/INPUT -j limit-2141 + inet6/filter/OUTPUT -j limit-2141 + inet6/filter/limit-2141 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1199 + inet6/filter/logdrop-1199 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1199 -j DROP + +Filter 2143 {"flow-limit":{"log":"mirror"}} +(filter-limit) + inet/filter/FORWARD -j limit-2142 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2142 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2142 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2142 -m recent --name limit-2142 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1200 + inet/filter/limit-2142 -m recent --name limit-2142 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1200 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1200 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1200 -j DROP + inet6/filter/FORWARD -j limit-2142 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2142 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2142 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2142 -m recent --name limit-2142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1200 + inet6/filter/limit-2142 -m recent --name limit-2142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1200 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1200 -j DROP + +Filter 2144 {"action":"pass","flow-limit":{"log":"mirror"}} +(filter-limit) + inet/filter/FORWARD -j limit-2143 + inet/filter/INPUT -j limit-2143 + inet/filter/OUTPUT -j limit-2143 + inet/filter/limit-2143 -m recent --name limit-2143 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1201 + inet/filter/limit-2143 -m recent --name limit-2143 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1201 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1201 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1201 -j DROP + inet6/filter/FORWARD -j limit-2143 + inet6/filter/INPUT -j limit-2143 + inet6/filter/OUTPUT -j limit-2143 + inet6/filter/limit-2143 -m recent --name limit-2143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1201 + inet6/filter/limit-2143 -m recent --name limit-2143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1201 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1201 -j DROP + +Filter 2145 {"flow-limit":{"log":"mirror"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2144 + inet/filter/FORWARD -j logaccept-final-57 + inet/filter/INPUT -j limit-2144 + inet/filter/INPUT -j logaccept-final-57 + inet/filter/OUTPUT -j limit-2144 + inet/filter/OUTPUT -j logaccept-final-57 + inet/filter/limit-2144 -m recent --name limit-2144 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1202 + inet/filter/limit-2144 -m recent --name limit-2144 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-57 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-57 -j ACCEPT + inet/filter/logdrop-1202 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1202 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1202 -j DROP + inet6/filter/FORWARD -j limit-2144 + inet6/filter/FORWARD -j logaccept-final-57 + inet6/filter/INPUT -j limit-2144 + inet6/filter/INPUT -j logaccept-final-57 + inet6/filter/OUTPUT -j limit-2144 + inet6/filter/OUTPUT -j logaccept-final-57 + inet6/filter/limit-2144 -m recent --name limit-2144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1202 + inet6/filter/limit-2144 -m recent --name limit-2144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-57 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-57 -j ACCEPT + inet6/filter/logdrop-1202 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1202 -j DROP + +Filter 2146 {"action":"pass","flow-limit":{"log":"mirror"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2145 + inet/filter/INPUT -j limit-2145 + inet/filter/OUTPUT -j limit-2145 + inet/filter/limit-2145 -m recent --name limit-2145 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1203 + inet/filter/limit-2145 -m recent --name limit-2145 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1203 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1203 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1203 -j DROP + inet6/filter/FORWARD -j limit-2145 + inet6/filter/INPUT -j limit-2145 + inet6/filter/OUTPUT -j limit-2145 + inet6/filter/limit-2145 -m recent --name limit-2145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1203 + inet6/filter/limit-2145 -m recent --name limit-2145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1203 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1203 -j DROP + +Filter 2147 {"flow-limit":{"log":"mirror"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2146 + inet/filter/FORWARD -j logaccept-final-58 + inet/filter/INPUT -j limit-2146 + inet/filter/INPUT -j logaccept-final-58 + inet/filter/OUTPUT -j limit-2146 + inet/filter/OUTPUT -j logaccept-final-58 + inet/filter/limit-2146 -m recent --name limit-2146 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1204 + inet/filter/limit-2146 -m recent --name limit-2146 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-58 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-58 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-58 -j ACCEPT + inet/filter/logdrop-1204 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1204 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1204 -j DROP + inet6/filter/FORWARD -j limit-2146 + inet6/filter/FORWARD -j logaccept-final-58 + inet6/filter/INPUT -j limit-2146 + inet6/filter/INPUT -j logaccept-final-58 + inet6/filter/OUTPUT -j limit-2146 + inet6/filter/OUTPUT -j logaccept-final-58 + inet6/filter/limit-2146 -m recent --name limit-2146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1204 + inet6/filter/limit-2146 -m recent --name limit-2146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-58 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-58 -j ACCEPT + inet6/filter/logdrop-1204 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1204 -j DROP + +Filter 2148 {"action":"pass","flow-limit":{"log":"mirror"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2147 + inet/filter/INPUT -j limit-2147 + inet/filter/OUTPUT -j limit-2147 + inet/filter/limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1205 + inet/filter/limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1205 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1205 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1205 -j DROP + inet6/filter/FORWARD -j limit-2147 + inet6/filter/INPUT -j limit-2147 + inet6/filter/OUTPUT -j limit-2147 + inet6/filter/limit-2147 -m recent --name limit-2147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1205 + inet6/filter/limit-2147 -m recent --name limit-2147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1205 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1205 -j DROP + +Filter 2149 {"flow-limit":{"log":"mirror"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2148 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2148 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2148 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2148 -m recent --name limit-2148 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1206 + inet/filter/limit-2148 -m recent --name limit-2148 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1206 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1206 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1206 -j DROP + inet6/filter/FORWARD -j limit-2148 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2148 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2148 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2148 -m recent --name limit-2148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1206 + inet6/filter/limit-2148 -m recent --name limit-2148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1206 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1206 -j DROP + +Filter 2150 {"action":"pass","flow-limit":{"log":"mirror"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2149 + inet/filter/INPUT -j limit-2149 + inet/filter/OUTPUT -j limit-2149 + inet/filter/limit-2149 -m recent --name limit-2149 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1207 + inet/filter/limit-2149 -m recent --name limit-2149 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1207 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1207 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1207 -j DROP + inet6/filter/FORWARD -j limit-2149 + inet6/filter/INPUT -j limit-2149 + inet6/filter/OUTPUT -j limit-2149 + inet6/filter/limit-2149 -m recent --name limit-2149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1207 + inet6/filter/limit-2149 -m recent --name limit-2149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1207 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1207 -j DROP + +Filter 2151 {"flow-limit":{"log":"mirror"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2150 + inet/filter/FORWARD -j logaccept-final-59 + inet/filter/INPUT -j limit-2150 + inet/filter/INPUT -j logaccept-final-59 + inet/filter/OUTPUT -j limit-2150 + inet/filter/OUTPUT -j logaccept-final-59 + inet/filter/limit-2150 -m recent --name limit-2150 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1208 + inet/filter/limit-2150 -m recent --name limit-2150 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-59 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-59 -j ACCEPT + inet/filter/logdrop-1208 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1208 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1208 -j DROP + inet6/filter/FORWARD -j limit-2150 + inet6/filter/FORWARD -j logaccept-final-59 + inet6/filter/INPUT -j limit-2150 + inet6/filter/INPUT -j logaccept-final-59 + inet6/filter/OUTPUT -j limit-2150 + inet6/filter/OUTPUT -j logaccept-final-59 + inet6/filter/limit-2150 -m recent --name limit-2150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1208 + inet6/filter/limit-2150 -m recent --name limit-2150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-59 -j ACCEPT + inet6/filter/logdrop-1208 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1208 -j DROP + +Filter 2152 {"action":"pass","flow-limit":{"log":"mirror"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2151 + inet/filter/INPUT -j limit-2151 + inet/filter/OUTPUT -j limit-2151 + inet/filter/limit-2151 -m recent --name limit-2151 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1209 + inet/filter/limit-2151 -m recent --name limit-2151 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1209 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1209 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1209 -j DROP + inet6/filter/FORWARD -j limit-2151 + inet6/filter/INPUT -j limit-2151 + inet6/filter/OUTPUT -j limit-2151 + inet6/filter/limit-2151 -m recent --name limit-2151 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1209 + inet6/filter/logdrop-1209 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1209 -j DROP + +Filter 2153 {"flow-limit":{"log":"mirror","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2152 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2152 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2152 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2152 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1210 + inet/filter/limit-2152 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1210 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1210 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1210 -j DROP + inet6/filter/FORWARD -j limit-2152 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2152 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2152 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1210 + inet6/filter/limit-2152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1210 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1210 -j DROP + +Filter 2154 {"action":"pass","flow-limit":{"log":"mirror","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2153 + inet/filter/INPUT -j limit-2153 + inet/filter/OUTPUT -j limit-2153 + inet/filter/limit-2153 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1211 + inet/filter/limit-2153 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1211 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1211 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1211 -j DROP + inet6/filter/FORWARD -j limit-2153 + inet6/filter/INPUT -j limit-2153 + inet6/filter/OUTPUT -j limit-2153 + inet6/filter/limit-2153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1211 + inet6/filter/limit-2153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1211 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1211 -j DROP + +Filter 2155 {"flow-limit":{"log":"mirror","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2154 + inet/filter/FORWARD -j logaccept-final-60 + inet/filter/INPUT -j limit-2154 + inet/filter/INPUT -j logaccept-final-60 + inet/filter/OUTPUT -j limit-2154 + inet/filter/OUTPUT -j logaccept-final-60 + inet/filter/limit-2154 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1212 + inet/filter/limit-2154 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-60 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-60 -j ACCEPT + inet/filter/logdrop-1212 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1212 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1212 -j DROP + inet6/filter/FORWARD -j limit-2154 + inet6/filter/FORWARD -j logaccept-final-60 + inet6/filter/INPUT -j limit-2154 + inet6/filter/INPUT -j logaccept-final-60 + inet6/filter/OUTPUT -j limit-2154 + inet6/filter/OUTPUT -j logaccept-final-60 + inet6/filter/limit-2154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1212 + inet6/filter/limit-2154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-60 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-60 -j ACCEPT + inet6/filter/logdrop-1212 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1212 -j DROP + +Filter 2156 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2155 + inet/filter/INPUT -j limit-2155 + inet/filter/OUTPUT -j limit-2155 + inet/filter/limit-2155 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1213 + inet/filter/limit-2155 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1213 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1213 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1213 -j DROP + inet6/filter/FORWARD -j limit-2155 + inet6/filter/INPUT -j limit-2155 + inet6/filter/OUTPUT -j limit-2155 + inet6/filter/limit-2155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1213 + inet6/filter/limit-2155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1213 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1213 -j DROP + +Filter 2157 {"flow-limit":{"log":"mirror","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2156 + inet/filter/FORWARD -j logaccept-final-61 + inet/filter/INPUT -j limit-2156 + inet/filter/INPUT -j logaccept-final-61 + inet/filter/OUTPUT -j limit-2156 + inet/filter/OUTPUT -j logaccept-final-61 + inet/filter/limit-2156 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1214 + inet/filter/limit-2156 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-61 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-61 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-61 -j ACCEPT + inet/filter/logdrop-1214 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1214 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1214 -j DROP + inet6/filter/FORWARD -j limit-2156 + inet6/filter/FORWARD -j logaccept-final-61 + inet6/filter/INPUT -j limit-2156 + inet6/filter/INPUT -j logaccept-final-61 + inet6/filter/OUTPUT -j limit-2156 + inet6/filter/OUTPUT -j logaccept-final-61 + inet6/filter/limit-2156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1214 + inet6/filter/limit-2156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-61 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-61 -j ACCEPT + inet6/filter/logdrop-1214 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1214 -j DROP + +Filter 2158 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2157 + inet/filter/INPUT -j limit-2157 + inet/filter/OUTPUT -j limit-2157 + inet/filter/limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1215 + inet/filter/limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1215 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1215 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1215 -j DROP + inet6/filter/FORWARD -j limit-2157 + inet6/filter/INPUT -j limit-2157 + inet6/filter/OUTPUT -j limit-2157 + inet6/filter/limit-2157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1215 + inet6/filter/limit-2157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1215 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1215 -j DROP + +Filter 2159 {"flow-limit":{"log":"mirror","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2158 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2158 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2158 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2158 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1216 + inet/filter/limit-2158 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1216 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1216 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1216 -j DROP + inet6/filter/FORWARD -j limit-2158 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2158 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2158 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2158 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1216 + inet6/filter/limit-2158 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1216 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1216 -j DROP + +Filter 2160 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2159 + inet/filter/INPUT -j limit-2159 + inet/filter/OUTPUT -j limit-2159 + inet/filter/limit-2159 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1217 + inet/filter/limit-2159 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1217 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1217 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1217 -j DROP + inet6/filter/FORWARD -j limit-2159 + inet6/filter/INPUT -j limit-2159 + inet6/filter/OUTPUT -j limit-2159 + inet6/filter/limit-2159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1217 + inet6/filter/limit-2159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1217 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1217 -j DROP + +Filter 2161 {"flow-limit":{"log":"mirror","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2160 + inet/filter/FORWARD -j logaccept-final-62 + inet/filter/INPUT -j limit-2160 + inet/filter/INPUT -j logaccept-final-62 + inet/filter/OUTPUT -j limit-2160 + inet/filter/OUTPUT -j logaccept-final-62 + inet/filter/limit-2160 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1218 + inet/filter/limit-2160 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-62 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-62 -j ACCEPT + inet/filter/logdrop-1218 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1218 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1218 -j DROP + inet6/filter/FORWARD -j limit-2160 + inet6/filter/FORWARD -j logaccept-final-62 + inet6/filter/INPUT -j limit-2160 + inet6/filter/INPUT -j logaccept-final-62 + inet6/filter/OUTPUT -j limit-2160 + inet6/filter/OUTPUT -j logaccept-final-62 + inet6/filter/limit-2160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1218 + inet6/filter/limit-2160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-62 -j ACCEPT + inet6/filter/logdrop-1218 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1218 -j DROP + +Filter 2162 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2161 + inet/filter/INPUT -j limit-2161 + inet/filter/OUTPUT -j limit-2161 + inet/filter/limit-2161 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1219 + inet/filter/limit-2161 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1219 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1219 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1219 -j DROP + inet6/filter/FORWARD -j limit-2161 + inet6/filter/INPUT -j limit-2161 + inet6/filter/OUTPUT -j limit-2161 + inet6/filter/limit-2161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1219 + inet6/filter/logdrop-1219 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1219 -j DROP + +Filter 2163 {"flow-limit":{"log":"mirror","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2162 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2162 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2162 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2162 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1220 + inet/filter/logdrop-1220 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1220 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1220 -j DROP + inet6/filter/FORWARD -j limit-2162 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2162 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2162 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1220 + inet6/filter/logdrop-1220 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1220 -j DROP + +Filter 2164 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2163 + inet/filter/INPUT -j limit-2163 + inet/filter/OUTPUT -j limit-2163 + inet/filter/limit-2163 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1221 + inet/filter/logdrop-1221 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1221 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1221 -j DROP + inet6/filter/FORWARD -j limit-2163 + inet6/filter/INPUT -j limit-2163 + inet6/filter/OUTPUT -j limit-2163 + inet6/filter/limit-2163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1221 + inet6/filter/logdrop-1221 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1221 -j DROP + +Filter 2165 {"flow-limit":{"log":"mirror","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2164 + inet/filter/FORWARD -j logaccept-final-63 + inet/filter/INPUT -j limit-2164 + inet/filter/INPUT -j logaccept-final-63 + inet/filter/OUTPUT -j limit-2164 + inet/filter/OUTPUT -j logaccept-final-63 + inet/filter/limit-2164 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1222 + inet/filter/logaccept-final-63 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-63 -j ACCEPT + inet/filter/logdrop-1222 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1222 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1222 -j DROP + inet6/filter/FORWARD -j limit-2164 + inet6/filter/FORWARD -j logaccept-final-63 + inet6/filter/INPUT -j limit-2164 + inet6/filter/INPUT -j logaccept-final-63 + inet6/filter/OUTPUT -j limit-2164 + inet6/filter/OUTPUT -j logaccept-final-63 + inet6/filter/limit-2164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1222 + inet6/filter/logaccept-final-63 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-63 -j ACCEPT + inet6/filter/logdrop-1222 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1222 -j DROP + +Filter 2166 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2165 + inet/filter/INPUT -j limit-2165 + inet/filter/OUTPUT -j limit-2165 + inet/filter/limit-2165 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1223 + inet/filter/limit-2165 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1223 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1223 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1223 -j DROP + inet6/filter/FORWARD -j limit-2165 + inet6/filter/INPUT -j limit-2165 + inet6/filter/OUTPUT -j limit-2165 + inet6/filter/limit-2165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1223 + inet6/filter/limit-2165 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1223 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1223 -j DROP + +Filter 2167 {"flow-limit":{"log":"mirror","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2166 + inet/filter/FORWARD -j logaccept-final-64 + inet/filter/INPUT -j limit-2166 + inet/filter/INPUT -j logaccept-final-64 + inet/filter/OUTPUT -j limit-2166 + inet/filter/OUTPUT -j logaccept-final-64 + inet/filter/limit-2166 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1224 + inet/filter/logaccept-final-64 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-64 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-64 -j ACCEPT + inet/filter/logdrop-1224 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1224 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1224 -j DROP + inet6/filter/FORWARD -j limit-2166 + inet6/filter/FORWARD -j logaccept-final-64 + inet6/filter/INPUT -j limit-2166 + inet6/filter/INPUT -j logaccept-final-64 + inet6/filter/OUTPUT -j limit-2166 + inet6/filter/OUTPUT -j logaccept-final-64 + inet6/filter/limit-2166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1224 + inet6/filter/logaccept-final-64 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-64 -j ACCEPT + inet6/filter/logdrop-1224 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1224 -j DROP + +Filter 2168 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2167 + inet/filter/INPUT -j limit-2167 + inet/filter/OUTPUT -j limit-2167 + inet/filter/limit-2167 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1225 + inet/filter/limit-2167 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2167 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1225 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1225 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1225 -j DROP + inet6/filter/FORWARD -j limit-2167 + inet6/filter/INPUT -j limit-2167 + inet6/filter/OUTPUT -j limit-2167 + inet6/filter/limit-2167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1225 + inet6/filter/limit-2167 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1225 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1225 -j DROP + +Filter 2169 {"flow-limit":{"log":"mirror","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2168 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2168 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2168 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1226 + inet/filter/logdrop-1226 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1226 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1226 -j DROP + inet6/filter/FORWARD -j limit-2168 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2168 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2168 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1226 + inet6/filter/logdrop-1226 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1226 -j DROP + +Filter 2170 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2169 + inet/filter/INPUT -j limit-2169 + inet/filter/OUTPUT -j limit-2169 + inet/filter/limit-2169 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1227 + inet/filter/logdrop-1227 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1227 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1227 -j DROP + inet6/filter/FORWARD -j limit-2169 + inet6/filter/INPUT -j limit-2169 + inet6/filter/OUTPUT -j limit-2169 + inet6/filter/limit-2169 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1227 + inet6/filter/logdrop-1227 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1227 -j DROP + +Filter 2171 {"flow-limit":{"log":"mirror","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2170 + inet/filter/FORWARD -j logaccept-final-65 + inet/filter/INPUT -j limit-2170 + inet/filter/INPUT -j logaccept-final-65 + inet/filter/OUTPUT -j limit-2170 + inet/filter/OUTPUT -j logaccept-final-65 + inet/filter/limit-2170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1228 + inet/filter/logaccept-final-65 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-65 -j ACCEPT + inet/filter/logdrop-1228 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1228 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1228 -j DROP + inet6/filter/FORWARD -j limit-2170 + inet6/filter/FORWARD -j logaccept-final-65 + inet6/filter/INPUT -j limit-2170 + inet6/filter/INPUT -j logaccept-final-65 + inet6/filter/OUTPUT -j limit-2170 + inet6/filter/OUTPUT -j logaccept-final-65 + inet6/filter/limit-2170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1228 + inet6/filter/logaccept-final-65 -j ACCEPT + inet6/filter/logdrop-1228 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1228 -j DROP + +Filter 2172 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2171 + inet/filter/INPUT -j limit-2171 + inet/filter/OUTPUT -j limit-2171 + inet/filter/limit-2171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1229 + inet/filter/limit-2171 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1229 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1229 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1229 -j DROP + inet6/filter/FORWARD -j limit-2171 + inet6/filter/INPUT -j limit-2171 + inet6/filter/OUTPUT -j limit-2171 + inet6/filter/limit-2171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1229 + inet6/filter/logdrop-1229 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1229 -j DROP + +Filter 2173 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2172 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2172 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2172 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2172 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1230 + inet/filter/limit-2172 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1230 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1230 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1230 -j DROP + inet6/filter/FORWARD -j limit-2172 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2172 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2172 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1230 + inet6/filter/limit-2172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1230 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1230 -j DROP + +Filter 2174 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2173 + inet/filter/INPUT -j limit-2173 + inet/filter/OUTPUT -j limit-2173 + inet/filter/limit-2173 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1231 + inet/filter/limit-2173 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1231 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1231 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1231 -j DROP + inet6/filter/FORWARD -j limit-2173 + inet6/filter/INPUT -j limit-2173 + inet6/filter/OUTPUT -j limit-2173 + inet6/filter/limit-2173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1231 + inet6/filter/limit-2173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1231 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1231 -j DROP + +Filter 2175 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2174 + inet/filter/FORWARD -j logaccept-final-66 + inet/filter/INPUT -j limit-2174 + inet/filter/INPUT -j logaccept-final-66 + inet/filter/OUTPUT -j limit-2174 + inet/filter/OUTPUT -j logaccept-final-66 + inet/filter/limit-2174 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1232 + inet/filter/limit-2174 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-66 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-66 -j ACCEPT + inet/filter/logdrop-1232 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1232 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1232 -j DROP + inet6/filter/FORWARD -j limit-2174 + inet6/filter/FORWARD -j logaccept-final-66 + inet6/filter/INPUT -j limit-2174 + inet6/filter/INPUT -j logaccept-final-66 + inet6/filter/OUTPUT -j limit-2174 + inet6/filter/OUTPUT -j logaccept-final-66 + inet6/filter/limit-2174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1232 + inet6/filter/limit-2174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-66 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-66 -j ACCEPT + inet6/filter/logdrop-1232 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1232 -j DROP + +Filter 2176 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2175 + inet/filter/INPUT -j limit-2175 + inet/filter/OUTPUT -j limit-2175 + inet/filter/limit-2175 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1233 + inet/filter/limit-2175 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1233 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1233 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1233 -j DROP + inet6/filter/FORWARD -j limit-2175 + inet6/filter/INPUT -j limit-2175 + inet6/filter/OUTPUT -j limit-2175 + inet6/filter/limit-2175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1233 + inet6/filter/limit-2175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1233 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1233 -j DROP + +Filter 2177 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2176 + inet/filter/FORWARD -j logaccept-final-67 + inet/filter/INPUT -j limit-2176 + inet/filter/INPUT -j logaccept-final-67 + inet/filter/OUTPUT -j limit-2176 + inet/filter/OUTPUT -j logaccept-final-67 + inet/filter/limit-2176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1234 + inet/filter/limit-2176 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-67 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-67 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-67 -j ACCEPT + inet/filter/logdrop-1234 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1234 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1234 -j DROP + inet6/filter/FORWARD -j limit-2176 + inet6/filter/FORWARD -j logaccept-final-67 + inet6/filter/INPUT -j limit-2176 + inet6/filter/INPUT -j logaccept-final-67 + inet6/filter/OUTPUT -j limit-2176 + inet6/filter/OUTPUT -j logaccept-final-67 + inet6/filter/limit-2176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1234 + inet6/filter/limit-2176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-67 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-67 -j ACCEPT + inet6/filter/logdrop-1234 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1234 -j DROP + +Filter 2178 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2177 + inet/filter/INPUT -j limit-2177 + inet/filter/OUTPUT -j limit-2177 + inet/filter/limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1235 + inet/filter/limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1235 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1235 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1235 -j DROP + inet6/filter/FORWARD -j limit-2177 + inet6/filter/INPUT -j limit-2177 + inet6/filter/OUTPUT -j limit-2177 + inet6/filter/limit-2177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1235 + inet6/filter/limit-2177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1235 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1235 -j DROP + +Filter 2179 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2178 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2178 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2178 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1236 + inet/filter/limit-2178 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1236 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1236 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1236 -j DROP + inet6/filter/FORWARD -j limit-2178 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2178 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2178 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1236 + inet6/filter/limit-2178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1236 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1236 -j DROP + +Filter 2180 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2179 + inet/filter/INPUT -j limit-2179 + inet/filter/OUTPUT -j limit-2179 + inet/filter/limit-2179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1237 + inet/filter/limit-2179 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1237 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1237 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1237 -j DROP + inet6/filter/FORWARD -j limit-2179 + inet6/filter/INPUT -j limit-2179 + inet6/filter/OUTPUT -j limit-2179 + inet6/filter/limit-2179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1237 + inet6/filter/limit-2179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1237 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1237 -j DROP + +Filter 2181 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2180 + inet/filter/FORWARD -j logaccept-final-68 + inet/filter/INPUT -j limit-2180 + inet/filter/INPUT -j logaccept-final-68 + inet/filter/OUTPUT -j limit-2180 + inet/filter/OUTPUT -j logaccept-final-68 + inet/filter/limit-2180 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1238 + inet/filter/limit-2180 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-68 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-68 -j ACCEPT + inet/filter/logdrop-1238 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1238 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1238 -j DROP + inet6/filter/FORWARD -j limit-2180 + inet6/filter/FORWARD -j logaccept-final-68 + inet6/filter/INPUT -j limit-2180 + inet6/filter/INPUT -j logaccept-final-68 + inet6/filter/OUTPUT -j limit-2180 + inet6/filter/OUTPUT -j logaccept-final-68 + inet6/filter/limit-2180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1238 + inet6/filter/limit-2180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-68 -j ACCEPT + inet6/filter/logdrop-1238 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1238 -j DROP + +Filter 2182 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2181 + inet/filter/INPUT -j limit-2181 + inet/filter/OUTPUT -j limit-2181 + inet/filter/limit-2181 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1239 + inet/filter/limit-2181 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1239 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1239 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1239 -j DROP + inet6/filter/FORWARD -j limit-2181 + inet6/filter/INPUT -j limit-2181 + inet6/filter/OUTPUT -j limit-2181 + inet6/filter/limit-2181 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1239 + inet6/filter/logdrop-1239 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1239 -j DROP + +Filter 2183 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2182 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2182 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2182 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2182 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1240 + inet/filter/logdrop-1240 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1240 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1240 -j DROP + inet6/filter/FORWARD -j limit-2182 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2182 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2182 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1240 + inet6/filter/logdrop-1240 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1240 -j DROP + +Filter 2184 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2183 + inet/filter/INPUT -j limit-2183 + inet/filter/OUTPUT -j limit-2183 + inet/filter/limit-2183 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1241 + inet/filter/logdrop-1241 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1241 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1241 -j DROP + inet6/filter/FORWARD -j limit-2183 + inet6/filter/INPUT -j limit-2183 + inet6/filter/OUTPUT -j limit-2183 + inet6/filter/limit-2183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1241 + inet6/filter/logdrop-1241 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1241 -j DROP + +Filter 2185 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2184 + inet/filter/FORWARD -j logaccept-final-69 + inet/filter/INPUT -j limit-2184 + inet/filter/INPUT -j logaccept-final-69 + inet/filter/OUTPUT -j limit-2184 + inet/filter/OUTPUT -j logaccept-final-69 + inet/filter/limit-2184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1242 + inet/filter/logaccept-final-69 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-69 -j ACCEPT + inet/filter/logdrop-1242 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1242 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1242 -j DROP + inet6/filter/FORWARD -j limit-2184 + inet6/filter/FORWARD -j logaccept-final-69 + inet6/filter/INPUT -j limit-2184 + inet6/filter/INPUT -j logaccept-final-69 + inet6/filter/OUTPUT -j limit-2184 + inet6/filter/OUTPUT -j logaccept-final-69 + inet6/filter/limit-2184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1242 + inet6/filter/logaccept-final-69 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-69 -j ACCEPT + inet6/filter/logdrop-1242 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1242 -j DROP + +Filter 2186 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2185 + inet/filter/INPUT -j limit-2185 + inet/filter/OUTPUT -j limit-2185 + inet/filter/limit-2185 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1243 + inet/filter/limit-2185 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1243 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1243 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1243 -j DROP + inet6/filter/FORWARD -j limit-2185 + inet6/filter/INPUT -j limit-2185 + inet6/filter/OUTPUT -j limit-2185 + inet6/filter/limit-2185 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1243 + inet6/filter/limit-2185 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1243 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1243 -j DROP + +Filter 2187 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2186 + inet/filter/FORWARD -j logaccept-final-70 + inet/filter/INPUT -j limit-2186 + inet/filter/INPUT -j logaccept-final-70 + inet/filter/OUTPUT -j limit-2186 + inet/filter/OUTPUT -j logaccept-final-70 + inet/filter/limit-2186 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1244 + inet/filter/logaccept-final-70 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-70 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-70 -j ACCEPT + inet/filter/logdrop-1244 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1244 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1244 -j DROP + inet6/filter/FORWARD -j limit-2186 + inet6/filter/FORWARD -j logaccept-final-70 + inet6/filter/INPUT -j limit-2186 + inet6/filter/INPUT -j logaccept-final-70 + inet6/filter/OUTPUT -j limit-2186 + inet6/filter/OUTPUT -j logaccept-final-70 + inet6/filter/limit-2186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1244 + inet6/filter/logaccept-final-70 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-70 -j ACCEPT + inet6/filter/logdrop-1244 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1244 -j DROP + +Filter 2188 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2187 + inet/filter/INPUT -j limit-2187 + inet/filter/OUTPUT -j limit-2187 + inet/filter/limit-2187 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1245 + inet/filter/limit-2187 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2187 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1245 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1245 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1245 -j DROP + inet6/filter/FORWARD -j limit-2187 + inet6/filter/INPUT -j limit-2187 + inet6/filter/OUTPUT -j limit-2187 + inet6/filter/limit-2187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1245 + inet6/filter/limit-2187 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1245 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1245 -j DROP + +Filter 2189 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2188 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2188 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2188 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2188 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1246 + inet/filter/logdrop-1246 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1246 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1246 -j DROP + inet6/filter/FORWARD -j limit-2188 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2188 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2188 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1246 + inet6/filter/logdrop-1246 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1246 -j DROP + +Filter 2190 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2189 + inet/filter/INPUT -j limit-2189 + inet/filter/OUTPUT -j limit-2189 + inet/filter/limit-2189 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1247 + inet/filter/logdrop-1247 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1247 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1247 -j DROP + inet6/filter/FORWARD -j limit-2189 + inet6/filter/INPUT -j limit-2189 + inet6/filter/OUTPUT -j limit-2189 + inet6/filter/limit-2189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1247 + inet6/filter/logdrop-1247 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1247 -j DROP + +Filter 2191 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2190 + inet/filter/FORWARD -j logaccept-final-71 + inet/filter/INPUT -j limit-2190 + inet/filter/INPUT -j logaccept-final-71 + inet/filter/OUTPUT -j limit-2190 + inet/filter/OUTPUT -j logaccept-final-71 + inet/filter/limit-2190 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1248 + inet/filter/logaccept-final-71 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-71 -j ACCEPT + inet/filter/logdrop-1248 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1248 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1248 -j DROP + inet6/filter/FORWARD -j limit-2190 + inet6/filter/FORWARD -j logaccept-final-71 + inet6/filter/INPUT -j limit-2190 + inet6/filter/INPUT -j logaccept-final-71 + inet6/filter/OUTPUT -j limit-2190 + inet6/filter/OUTPUT -j logaccept-final-71 + inet6/filter/limit-2190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1248 + inet6/filter/logaccept-final-71 -j ACCEPT + inet6/filter/logdrop-1248 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1248 -j DROP + +Filter 2192 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2191 + inet/filter/INPUT -j limit-2191 + inet/filter/OUTPUT -j limit-2191 + inet/filter/limit-2191 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1249 + inet/filter/limit-2191 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1249 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1249 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1249 -j DROP + inet6/filter/FORWARD -j limit-2191 + inet6/filter/INPUT -j limit-2191 + inet6/filter/OUTPUT -j limit-2191 + inet6/filter/limit-2191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1249 + inet6/filter/logdrop-1249 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1249 -j DROP + +Filter 2193 {"flow-limit":{"log":"mirror","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2192 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2192 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2192 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2192 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1250 + inet/filter/limit-2192 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1250 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1250 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1250 -j DROP + inet6/filter/FORWARD -j limit-2192 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2192 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2192 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2192 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1250 + inet6/filter/limit-2192 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1250 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1250 -j DROP + +Filter 2194 {"action":"pass","flow-limit":{"log":"mirror","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2193 + inet/filter/INPUT -j limit-2193 + inet/filter/OUTPUT -j limit-2193 + inet/filter/limit-2193 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1251 + inet/filter/limit-2193 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1251 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1251 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1251 -j DROP + inet6/filter/FORWARD -j limit-2193 + inet6/filter/INPUT -j limit-2193 + inet6/filter/OUTPUT -j limit-2193 + inet6/filter/limit-2193 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1251 + inet6/filter/limit-2193 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1251 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1251 -j DROP + +Filter 2195 {"flow-limit":{"log":"mirror","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2194 + inet/filter/FORWARD -j logaccept-final-72 + inet/filter/INPUT -j limit-2194 + inet/filter/INPUT -j logaccept-final-72 + inet/filter/OUTPUT -j limit-2194 + inet/filter/OUTPUT -j logaccept-final-72 + inet/filter/limit-2194 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1252 + inet/filter/limit-2194 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-72 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-72 -j ACCEPT + inet/filter/logdrop-1252 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1252 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1252 -j DROP + inet6/filter/FORWARD -j limit-2194 + inet6/filter/FORWARD -j logaccept-final-72 + inet6/filter/INPUT -j limit-2194 + inet6/filter/INPUT -j logaccept-final-72 + inet6/filter/OUTPUT -j limit-2194 + inet6/filter/OUTPUT -j logaccept-final-72 + inet6/filter/limit-2194 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1252 + inet6/filter/limit-2194 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-72 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-72 -j ACCEPT + inet6/filter/logdrop-1252 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1252 -j DROP + +Filter 2196 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2195 + inet/filter/INPUT -j limit-2195 + inet/filter/OUTPUT -j limit-2195 + inet/filter/limit-2195 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1253 + inet/filter/limit-2195 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1253 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1253 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1253 -j DROP + inet6/filter/FORWARD -j limit-2195 + inet6/filter/INPUT -j limit-2195 + inet6/filter/OUTPUT -j limit-2195 + inet6/filter/limit-2195 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1253 + inet6/filter/limit-2195 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1253 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1253 -j DROP + +Filter 2197 {"flow-limit":{"log":"mirror","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2196 + inet/filter/FORWARD -j logaccept-final-73 + inet/filter/INPUT -j limit-2196 + inet/filter/INPUT -j logaccept-final-73 + inet/filter/OUTPUT -j limit-2196 + inet/filter/OUTPUT -j logaccept-final-73 + inet/filter/limit-2196 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1254 + inet/filter/limit-2196 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-73 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-73 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-73 -j ACCEPT + inet/filter/logdrop-1254 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1254 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1254 -j DROP + inet6/filter/FORWARD -j limit-2196 + inet6/filter/FORWARD -j logaccept-final-73 + inet6/filter/INPUT -j limit-2196 + inet6/filter/INPUT -j logaccept-final-73 + inet6/filter/OUTPUT -j limit-2196 + inet6/filter/OUTPUT -j logaccept-final-73 + inet6/filter/limit-2196 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1254 + inet6/filter/limit-2196 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-73 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-73 -j ACCEPT + inet6/filter/logdrop-1254 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1254 -j DROP + +Filter 2198 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2197 + inet/filter/INPUT -j limit-2197 + inet/filter/OUTPUT -j limit-2197 + inet/filter/limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1255 + inet/filter/limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1255 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1255 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1255 -j DROP + inet6/filter/FORWARD -j limit-2197 + inet6/filter/INPUT -j limit-2197 + inet6/filter/OUTPUT -j limit-2197 + inet6/filter/limit-2197 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1255 + inet6/filter/limit-2197 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1255 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1255 -j DROP + +Filter 2199 {"flow-limit":{"log":"mirror","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2198 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2198 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2198 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1256 + inet/filter/limit-2198 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1256 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1256 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1256 -j DROP + inet6/filter/FORWARD -j limit-2198 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2198 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2198 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1256 + inet6/filter/limit-2198 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1256 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1256 -j DROP + +Filter 2200 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2199 + inet/filter/INPUT -j limit-2199 + inet/filter/OUTPUT -j limit-2199 + inet/filter/limit-2199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1257 + inet/filter/limit-2199 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1257 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1257 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1257 -j DROP + inet6/filter/FORWARD -j limit-2199 + inet6/filter/INPUT -j limit-2199 + inet6/filter/OUTPUT -j limit-2199 + inet6/filter/limit-2199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1257 + inet6/filter/limit-2199 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1257 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1257 -j DROP + +Filter 2201 {"flow-limit":{"log":"mirror","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2200 + inet/filter/FORWARD -j logaccept-final-74 + inet/filter/INPUT -j limit-2200 + inet/filter/INPUT -j logaccept-final-74 + inet/filter/OUTPUT -j limit-2200 + inet/filter/OUTPUT -j logaccept-final-74 + inet/filter/limit-2200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1258 + inet/filter/limit-2200 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-74 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-74 -j ACCEPT + inet/filter/logdrop-1258 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1258 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1258 -j DROP + inet6/filter/FORWARD -j limit-2200 + inet6/filter/FORWARD -j logaccept-final-74 + inet6/filter/INPUT -j limit-2200 + inet6/filter/INPUT -j logaccept-final-74 + inet6/filter/OUTPUT -j limit-2200 + inet6/filter/OUTPUT -j logaccept-final-74 + inet6/filter/limit-2200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1258 + inet6/filter/limit-2200 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-74 -j ACCEPT + inet6/filter/logdrop-1258 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1258 -j DROP + +Filter 2202 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2201 + inet/filter/INPUT -j limit-2201 + inet/filter/OUTPUT -j limit-2201 + inet/filter/limit-2201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1259 + inet/filter/limit-2201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1259 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1259 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1259 -j DROP + inet6/filter/FORWARD -j limit-2201 + inet6/filter/INPUT -j limit-2201 + inet6/filter/OUTPUT -j limit-2201 + inet6/filter/limit-2201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1259 + inet6/filter/logdrop-1259 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1259 -j DROP + +Filter 2203 {"flow-limit":{"log":"mirror","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2202 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2202 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2202 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2202 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1260 + inet/filter/logdrop-1260 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1260 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1260 -j DROP + inet6/filter/FORWARD -j limit-2202 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2202 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2202 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2202 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1260 + inet6/filter/logdrop-1260 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1260 -j DROP + +Filter 2204 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2203 + inet/filter/INPUT -j limit-2203 + inet/filter/OUTPUT -j limit-2203 + inet/filter/limit-2203 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1261 + inet/filter/logdrop-1261 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1261 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1261 -j DROP + inet6/filter/FORWARD -j limit-2203 + inet6/filter/INPUT -j limit-2203 + inet6/filter/OUTPUT -j limit-2203 + inet6/filter/limit-2203 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1261 + inet6/filter/logdrop-1261 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1261 -j DROP + +Filter 2205 {"flow-limit":{"log":"mirror","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2204 + inet/filter/FORWARD -j logaccept-final-75 + inet/filter/INPUT -j limit-2204 + inet/filter/INPUT -j logaccept-final-75 + inet/filter/OUTPUT -j limit-2204 + inet/filter/OUTPUT -j logaccept-final-75 + inet/filter/limit-2204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1262 + inet/filter/logaccept-final-75 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-75 -j ACCEPT + inet/filter/logdrop-1262 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1262 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1262 -j DROP + inet6/filter/FORWARD -j limit-2204 + inet6/filter/FORWARD -j logaccept-final-75 + inet6/filter/INPUT -j limit-2204 + inet6/filter/INPUT -j logaccept-final-75 + inet6/filter/OUTPUT -j limit-2204 + inet6/filter/OUTPUT -j logaccept-final-75 + inet6/filter/limit-2204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1262 + inet6/filter/logaccept-final-75 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-75 -j ACCEPT + inet6/filter/logdrop-1262 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1262 -j DROP + +Filter 2206 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2205 + inet/filter/INPUT -j limit-2205 + inet/filter/OUTPUT -j limit-2205 + inet/filter/limit-2205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1263 + inet/filter/limit-2205 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1263 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1263 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1263 -j DROP + inet6/filter/FORWARD -j limit-2205 + inet6/filter/INPUT -j limit-2205 + inet6/filter/OUTPUT -j limit-2205 + inet6/filter/limit-2205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1263 + inet6/filter/limit-2205 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1263 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1263 -j DROP + +Filter 2207 {"flow-limit":{"log":"mirror","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2206 + inet/filter/FORWARD -j logaccept-final-76 + inet/filter/INPUT -j limit-2206 + inet/filter/INPUT -j logaccept-final-76 + inet/filter/OUTPUT -j limit-2206 + inet/filter/OUTPUT -j logaccept-final-76 + inet/filter/limit-2206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1264 + inet/filter/logaccept-final-76 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-76 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-76 -j ACCEPT + inet/filter/logdrop-1264 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1264 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1264 -j DROP + inet6/filter/FORWARD -j limit-2206 + inet6/filter/FORWARD -j logaccept-final-76 + inet6/filter/INPUT -j limit-2206 + inet6/filter/INPUT -j logaccept-final-76 + inet6/filter/OUTPUT -j limit-2206 + inet6/filter/OUTPUT -j logaccept-final-76 + inet6/filter/limit-2206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1264 + inet6/filter/logaccept-final-76 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-76 -j ACCEPT + inet6/filter/logdrop-1264 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1264 -j DROP + +Filter 2208 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2207 + inet/filter/INPUT -j limit-2207 + inet/filter/OUTPUT -j limit-2207 + inet/filter/limit-2207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1265 + inet/filter/limit-2207 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2207 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1265 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1265 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1265 -j DROP + inet6/filter/FORWARD -j limit-2207 + inet6/filter/INPUT -j limit-2207 + inet6/filter/OUTPUT -j limit-2207 + inet6/filter/limit-2207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1265 + inet6/filter/limit-2207 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1265 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1265 -j DROP + +Filter 2209 {"flow-limit":{"log":"mirror","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2208 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2208 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2208 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1266 + inet/filter/logdrop-1266 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1266 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1266 -j DROP + inet6/filter/FORWARD -j limit-2208 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2208 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2208 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1266 + inet6/filter/logdrop-1266 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1266 -j DROP + +Filter 2210 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2209 + inet/filter/INPUT -j limit-2209 + inet/filter/OUTPUT -j limit-2209 + inet/filter/limit-2209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1267 + inet/filter/logdrop-1267 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1267 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1267 -j DROP + inet6/filter/FORWARD -j limit-2209 + inet6/filter/INPUT -j limit-2209 + inet6/filter/OUTPUT -j limit-2209 + inet6/filter/limit-2209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1267 + inet6/filter/logdrop-1267 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1267 -j DROP + +Filter 2211 {"flow-limit":{"log":"mirror","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2210 + inet/filter/FORWARD -j logaccept-final-77 + inet/filter/INPUT -j limit-2210 + inet/filter/INPUT -j logaccept-final-77 + inet/filter/OUTPUT -j limit-2210 + inet/filter/OUTPUT -j logaccept-final-77 + inet/filter/limit-2210 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1268 + inet/filter/logaccept-final-77 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-77 -j ACCEPT + inet/filter/logdrop-1268 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1268 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1268 -j DROP + inet6/filter/FORWARD -j limit-2210 + inet6/filter/FORWARD -j logaccept-final-77 + inet6/filter/INPUT -j limit-2210 + inet6/filter/INPUT -j logaccept-final-77 + inet6/filter/OUTPUT -j limit-2210 + inet6/filter/OUTPUT -j logaccept-final-77 + inet6/filter/limit-2210 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1268 + inet6/filter/logaccept-final-77 -j ACCEPT + inet6/filter/logdrop-1268 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1268 -j DROP + +Filter 2212 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2211 + inet/filter/INPUT -j limit-2211 + inet/filter/OUTPUT -j limit-2211 + inet/filter/limit-2211 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1269 + inet/filter/limit-2211 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1269 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1269 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1269 -j DROP + inet6/filter/FORWARD -j limit-2211 + inet6/filter/INPUT -j limit-2211 + inet6/filter/OUTPUT -j limit-2211 + inet6/filter/limit-2211 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1269 + inet6/filter/logdrop-1269 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1269 -j DROP + +Filter 2213 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2212 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2212 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2212 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1270 + inet/filter/limit-2212 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1270 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1270 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1270 -j DROP + inet6/filter/FORWARD -j limit-2212 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2212 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2212 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1270 + inet6/filter/limit-2212 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1270 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1270 -j DROP + +Filter 2214 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2213 + inet/filter/INPUT -j limit-2213 + inet/filter/OUTPUT -j limit-2213 + inet/filter/limit-2213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1271 + inet/filter/limit-2213 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1271 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1271 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1271 -j DROP + inet6/filter/FORWARD -j limit-2213 + inet6/filter/INPUT -j limit-2213 + inet6/filter/OUTPUT -j limit-2213 + inet6/filter/limit-2213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1271 + inet6/filter/limit-2213 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1271 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1271 -j DROP + +Filter 2215 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2214 + inet/filter/FORWARD -j logaccept-final-78 + inet/filter/INPUT -j limit-2214 + inet/filter/INPUT -j logaccept-final-78 + inet/filter/OUTPUT -j limit-2214 + inet/filter/OUTPUT -j logaccept-final-78 + inet/filter/limit-2214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1272 + inet/filter/limit-2214 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-78 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-78 -j ACCEPT + inet/filter/logdrop-1272 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1272 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1272 -j DROP + inet6/filter/FORWARD -j limit-2214 + inet6/filter/FORWARD -j logaccept-final-78 + inet6/filter/INPUT -j limit-2214 + inet6/filter/INPUT -j logaccept-final-78 + inet6/filter/OUTPUT -j limit-2214 + inet6/filter/OUTPUT -j logaccept-final-78 + inet6/filter/limit-2214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1272 + inet6/filter/limit-2214 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-78 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-78 -j ACCEPT + inet6/filter/logdrop-1272 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1272 -j DROP + +Filter 2216 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2215 + inet/filter/INPUT -j limit-2215 + inet/filter/OUTPUT -j limit-2215 + inet/filter/limit-2215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1273 + inet/filter/limit-2215 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1273 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1273 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1273 -j DROP + inet6/filter/FORWARD -j limit-2215 + inet6/filter/INPUT -j limit-2215 + inet6/filter/OUTPUT -j limit-2215 + inet6/filter/limit-2215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1273 + inet6/filter/limit-2215 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1273 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1273 -j DROP + +Filter 2217 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2216 + inet/filter/FORWARD -j logaccept-final-79 + inet/filter/INPUT -j limit-2216 + inet/filter/INPUT -j logaccept-final-79 + inet/filter/OUTPUT -j limit-2216 + inet/filter/OUTPUT -j logaccept-final-79 + inet/filter/limit-2216 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1274 + inet/filter/limit-2216 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-79 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-79 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-79 -j ACCEPT + inet/filter/logdrop-1274 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1274 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1274 -j DROP + inet6/filter/FORWARD -j limit-2216 + inet6/filter/FORWARD -j logaccept-final-79 + inet6/filter/INPUT -j limit-2216 + inet6/filter/INPUT -j logaccept-final-79 + inet6/filter/OUTPUT -j limit-2216 + inet6/filter/OUTPUT -j logaccept-final-79 + inet6/filter/limit-2216 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1274 + inet6/filter/limit-2216 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-79 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-79 -j ACCEPT + inet6/filter/logdrop-1274 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1274 -j DROP + +Filter 2218 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2217 + inet/filter/INPUT -j limit-2217 + inet/filter/OUTPUT -j limit-2217 + inet/filter/limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1275 + inet/filter/limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1275 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1275 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1275 -j DROP + inet6/filter/FORWARD -j limit-2217 + inet6/filter/INPUT -j limit-2217 + inet6/filter/OUTPUT -j limit-2217 + inet6/filter/limit-2217 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1275 + inet6/filter/limit-2217 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1275 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1275 -j DROP + +Filter 2219 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2218 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2218 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2218 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2218 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1276 + inet/filter/limit-2218 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1276 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1276 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1276 -j DROP + inet6/filter/FORWARD -j limit-2218 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2218 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2218 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2218 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1276 + inet6/filter/limit-2218 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1276 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1276 -j DROP + +Filter 2220 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2219 + inet/filter/INPUT -j limit-2219 + inet/filter/OUTPUT -j limit-2219 + inet/filter/limit-2219 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1277 + inet/filter/limit-2219 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1277 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1277 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1277 -j DROP + inet6/filter/FORWARD -j limit-2219 + inet6/filter/INPUT -j limit-2219 + inet6/filter/OUTPUT -j limit-2219 + inet6/filter/limit-2219 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1277 + inet6/filter/limit-2219 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1277 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1277 -j DROP + +Filter 2221 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2220 + inet/filter/FORWARD -j logaccept-final-80 + inet/filter/INPUT -j limit-2220 + inet/filter/INPUT -j logaccept-final-80 + inet/filter/OUTPUT -j limit-2220 + inet/filter/OUTPUT -j logaccept-final-80 + inet/filter/limit-2220 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1278 + inet/filter/limit-2220 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-80 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-80 -j ACCEPT + inet/filter/logdrop-1278 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1278 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1278 -j DROP + inet6/filter/FORWARD -j limit-2220 + inet6/filter/FORWARD -j logaccept-final-80 + inet6/filter/INPUT -j limit-2220 + inet6/filter/INPUT -j logaccept-final-80 + inet6/filter/OUTPUT -j limit-2220 + inet6/filter/OUTPUT -j logaccept-final-80 + inet6/filter/limit-2220 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1278 + inet6/filter/limit-2220 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-80 -j ACCEPT + inet6/filter/logdrop-1278 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1278 -j DROP + +Filter 2222 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2221 + inet/filter/INPUT -j limit-2221 + inet/filter/OUTPUT -j limit-2221 + inet/filter/limit-2221 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1279 + inet/filter/limit-2221 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1279 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1279 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1279 -j DROP + inet6/filter/FORWARD -j limit-2221 + inet6/filter/INPUT -j limit-2221 + inet6/filter/OUTPUT -j limit-2221 + inet6/filter/limit-2221 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1279 + inet6/filter/logdrop-1279 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1279 -j DROP + +Filter 2223 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2222 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2222 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2222 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2222 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1280 + inet/filter/logdrop-1280 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1280 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1280 -j DROP + inet6/filter/FORWARD -j limit-2222 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2222 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2222 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2222 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1280 + inet6/filter/logdrop-1280 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1280 -j DROP + +Filter 2224 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2223 + inet/filter/INPUT -j limit-2223 + inet/filter/OUTPUT -j limit-2223 + inet/filter/limit-2223 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1281 + inet/filter/logdrop-1281 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1281 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1281 -j DROP + inet6/filter/FORWARD -j limit-2223 + inet6/filter/INPUT -j limit-2223 + inet6/filter/OUTPUT -j limit-2223 + inet6/filter/limit-2223 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1281 + inet6/filter/logdrop-1281 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1281 -j DROP + +Filter 2225 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2224 + inet/filter/FORWARD -j logaccept-final-81 + inet/filter/INPUT -j limit-2224 + inet/filter/INPUT -j logaccept-final-81 + inet/filter/OUTPUT -j limit-2224 + inet/filter/OUTPUT -j logaccept-final-81 + inet/filter/limit-2224 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1282 + inet/filter/logaccept-final-81 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-81 -j ACCEPT + inet/filter/logdrop-1282 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1282 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1282 -j DROP + inet6/filter/FORWARD -j limit-2224 + inet6/filter/FORWARD -j logaccept-final-81 + inet6/filter/INPUT -j limit-2224 + inet6/filter/INPUT -j logaccept-final-81 + inet6/filter/OUTPUT -j limit-2224 + inet6/filter/OUTPUT -j logaccept-final-81 + inet6/filter/limit-2224 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1282 + inet6/filter/logaccept-final-81 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-81 -j ACCEPT + inet6/filter/logdrop-1282 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1282 -j DROP + +Filter 2226 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2225 + inet/filter/INPUT -j limit-2225 + inet/filter/OUTPUT -j limit-2225 + inet/filter/limit-2225 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1283 + inet/filter/limit-2225 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1283 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1283 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1283 -j DROP + inet6/filter/FORWARD -j limit-2225 + inet6/filter/INPUT -j limit-2225 + inet6/filter/OUTPUT -j limit-2225 + inet6/filter/limit-2225 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1283 + inet6/filter/limit-2225 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1283 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1283 -j DROP + +Filter 2227 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2226 + inet/filter/FORWARD -j logaccept-final-82 + inet/filter/INPUT -j limit-2226 + inet/filter/INPUT -j logaccept-final-82 + inet/filter/OUTPUT -j limit-2226 + inet/filter/OUTPUT -j logaccept-final-82 + inet/filter/limit-2226 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1284 + inet/filter/logaccept-final-82 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-82 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-82 -j ACCEPT + inet/filter/logdrop-1284 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1284 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1284 -j DROP + inet6/filter/FORWARD -j limit-2226 + inet6/filter/FORWARD -j logaccept-final-82 + inet6/filter/INPUT -j limit-2226 + inet6/filter/INPUT -j logaccept-final-82 + inet6/filter/OUTPUT -j limit-2226 + inet6/filter/OUTPUT -j logaccept-final-82 + inet6/filter/limit-2226 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1284 + inet6/filter/logaccept-final-82 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-82 -j ACCEPT + inet6/filter/logdrop-1284 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1284 -j DROP + +Filter 2228 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2227 + inet/filter/INPUT -j limit-2227 + inet/filter/OUTPUT -j limit-2227 + inet/filter/limit-2227 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1285 + inet/filter/limit-2227 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2227 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1285 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1285 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1285 -j DROP + inet6/filter/FORWARD -j limit-2227 + inet6/filter/INPUT -j limit-2227 + inet6/filter/OUTPUT -j limit-2227 + inet6/filter/limit-2227 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1285 + inet6/filter/limit-2227 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1285 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1285 -j DROP + +Filter 2229 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2228 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2228 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2228 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2228 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1286 + inet/filter/logdrop-1286 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1286 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1286 -j DROP + inet6/filter/FORWARD -j limit-2228 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2228 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2228 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2228 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1286 + inet6/filter/logdrop-1286 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1286 -j DROP + +Filter 2230 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2229 + inet/filter/INPUT -j limit-2229 + inet/filter/OUTPUT -j limit-2229 + inet/filter/limit-2229 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1287 + inet/filter/logdrop-1287 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1287 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1287 -j DROP + inet6/filter/FORWARD -j limit-2229 + inet6/filter/INPUT -j limit-2229 + inet6/filter/OUTPUT -j limit-2229 + inet6/filter/limit-2229 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1287 + inet6/filter/logdrop-1287 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1287 -j DROP + +Filter 2231 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2230 + inet/filter/FORWARD -j logaccept-final-83 + inet/filter/INPUT -j limit-2230 + inet/filter/INPUT -j logaccept-final-83 + inet/filter/OUTPUT -j limit-2230 + inet/filter/OUTPUT -j logaccept-final-83 + inet/filter/limit-2230 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1288 + inet/filter/logaccept-final-83 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-83 -j ACCEPT + inet/filter/logdrop-1288 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1288 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1288 -j DROP + inet6/filter/FORWARD -j limit-2230 + inet6/filter/FORWARD -j logaccept-final-83 + inet6/filter/INPUT -j limit-2230 + inet6/filter/INPUT -j logaccept-final-83 + inet6/filter/OUTPUT -j limit-2230 + inet6/filter/OUTPUT -j logaccept-final-83 + inet6/filter/limit-2230 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1288 + inet6/filter/logaccept-final-83 -j ACCEPT + inet6/filter/logdrop-1288 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1288 -j DROP + +Filter 2232 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2231 + inet/filter/INPUT -j limit-2231 + inet/filter/OUTPUT -j limit-2231 + inet/filter/limit-2231 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1289 + inet/filter/limit-2231 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1289 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1289 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1289 -j DROP + inet6/filter/FORWARD -j limit-2231 + inet6/filter/INPUT -j limit-2231 + inet6/filter/OUTPUT -j limit-2231 + inet6/filter/limit-2231 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1289 + inet6/filter/logdrop-1289 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1289 -j DROP + +Filter 2233 {"flow-limit":{"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-2232 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2232 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2232 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2232 -m recent --name limit-2232 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2232 -m recent --name limit-2232 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2232 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2232 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2232 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2232 -m recent --name limit-2232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2232 -m recent --name limit-2232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2234 {"action":"pass","flow-limit":{"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-2233 + inet/filter/INPUT -j limit-2233 + inet/filter/OUTPUT -j limit-2233 + inet/filter/limit-2233 -m recent --name limit-2233 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2233 -m recent --name limit-2233 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2233 + inet6/filter/INPUT -j limit-2233 + inet6/filter/OUTPUT -j limit-2233 + inet6/filter/limit-2233 -m recent --name limit-2233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2233 -m recent --name limit-2233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2235 {"flow-limit":{"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2234 + inet/filter/FORWARD -j logaccept-final-84 + inet/filter/INPUT -j limit-2234 + inet/filter/INPUT -j logaccept-final-84 + inet/filter/OUTPUT -j limit-2234 + inet/filter/OUTPUT -j logaccept-final-84 + inet/filter/limit-2234 -m recent --name limit-2234 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2234 -m recent --name limit-2234 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-84 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-84 -j ACCEPT + inet6/filter/FORWARD -j limit-2234 + inet6/filter/FORWARD -j logaccept-final-84 + inet6/filter/INPUT -j limit-2234 + inet6/filter/INPUT -j logaccept-final-84 + inet6/filter/OUTPUT -j limit-2234 + inet6/filter/OUTPUT -j logaccept-final-84 + inet6/filter/limit-2234 -m recent --name limit-2234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2234 -m recent --name limit-2234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-84 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-84 -j ACCEPT + +Filter 2236 {"action":"pass","flow-limit":{"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2235 + inet/filter/INPUT -j limit-2235 + inet/filter/OUTPUT -j limit-2235 + inet/filter/limit-2235 -m recent --name limit-2235 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2235 -m recent --name limit-2235 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2235 + inet6/filter/INPUT -j limit-2235 + inet6/filter/OUTPUT -j limit-2235 + inet6/filter/limit-2235 -m recent --name limit-2235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2235 -m recent --name limit-2235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 2237 {"flow-limit":{"log":"none"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2236 + inet/filter/FORWARD -j logaccept-final-85 + inet/filter/INPUT -j limit-2236 + inet/filter/INPUT -j logaccept-final-85 + inet/filter/OUTPUT -j limit-2236 + inet/filter/OUTPUT -j logaccept-final-85 + inet/filter/limit-2236 -m recent --name limit-2236 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2236 -m recent --name limit-2236 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-85 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-85 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-85 -j ACCEPT + inet6/filter/FORWARD -j limit-2236 + inet6/filter/FORWARD -j logaccept-final-85 + inet6/filter/INPUT -j limit-2236 + inet6/filter/INPUT -j logaccept-final-85 + inet6/filter/OUTPUT -j limit-2236 + inet6/filter/OUTPUT -j logaccept-final-85 + inet6/filter/limit-2236 -m recent --name limit-2236 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2236 -m recent --name limit-2236 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-85 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-85 -j ACCEPT + +Filter 2238 {"action":"pass","flow-limit":{"log":"none"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2237 + inet/filter/INPUT -j limit-2237 + inet/filter/OUTPUT -j limit-2237 + inet/filter/limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2237 + inet6/filter/INPUT -j limit-2237 + inet6/filter/OUTPUT -j limit-2237 + inet6/filter/limit-2237 -m recent --name limit-2237 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2237 -m recent --name limit-2237 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 2239 {"flow-limit":{"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2238 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2238 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2238 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2238 -m recent --name limit-2238 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2238 -m recent --name limit-2238 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2238 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2238 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2238 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2238 -m recent --name limit-2238 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2238 -m recent --name limit-2238 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2240 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2239 + inet/filter/INPUT -j limit-2239 + inet/filter/OUTPUT -j limit-2239 + inet/filter/limit-2239 -m recent --name limit-2239 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2239 -m recent --name limit-2239 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2239 + inet6/filter/INPUT -j limit-2239 + inet6/filter/OUTPUT -j limit-2239 + inet6/filter/limit-2239 -m recent --name limit-2239 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2239 -m recent --name limit-2239 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2241 {"flow-limit":{"log":"none"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2240 + inet/filter/FORWARD -j logaccept-final-86 + inet/filter/INPUT -j limit-2240 + inet/filter/INPUT -j logaccept-final-86 + inet/filter/OUTPUT -j limit-2240 + inet/filter/OUTPUT -j logaccept-final-86 + inet/filter/limit-2240 -m recent --name limit-2240 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2240 -m recent --name limit-2240 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-86 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-86 -j ACCEPT + inet6/filter/FORWARD -j limit-2240 + inet6/filter/FORWARD -j logaccept-final-86 + inet6/filter/INPUT -j limit-2240 + inet6/filter/INPUT -j logaccept-final-86 + inet6/filter/OUTPUT -j limit-2240 + inet6/filter/OUTPUT -j logaccept-final-86 + inet6/filter/limit-2240 -m recent --name limit-2240 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2240 -m recent --name limit-2240 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-86 -j ACCEPT + +Filter 2242 {"action":"pass","flow-limit":{"log":"none"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2241 + inet/filter/INPUT -j limit-2241 + inet/filter/OUTPUT -j limit-2241 + inet/filter/limit-2241 -m recent --name limit-2241 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2241 -m recent --name limit-2241 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2241 + inet6/filter/INPUT -j limit-2241 + inet6/filter/OUTPUT -j limit-2241 + inet6/filter/limit-2241 -m recent --name limit-2241 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + +Filter 2243 {"flow-limit":{"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2242 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2242 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2242 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2242 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2242 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2242 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2242 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2242 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2244 {"action":"pass","flow-limit":{"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2243 + inet/filter/INPUT -j limit-2243 + inet/filter/OUTPUT -j limit-2243 + inet/filter/limit-2243 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2243 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2243 + inet6/filter/INPUT -j limit-2243 + inet6/filter/OUTPUT -j limit-2243 + inet6/filter/limit-2243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2245 {"flow-limit":{"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2244 + inet/filter/FORWARD -j logaccept-final-87 + inet/filter/INPUT -j limit-2244 + inet/filter/INPUT -j logaccept-final-87 + inet/filter/OUTPUT -j limit-2244 + inet/filter/OUTPUT -j logaccept-final-87 + inet/filter/limit-2244 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2244 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-87 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-87 -j ACCEPT + inet6/filter/FORWARD -j limit-2244 + inet6/filter/FORWARD -j logaccept-final-87 + inet6/filter/INPUT -j limit-2244 + inet6/filter/INPUT -j logaccept-final-87 + inet6/filter/OUTPUT -j limit-2244 + inet6/filter/OUTPUT -j logaccept-final-87 + inet6/filter/limit-2244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-87 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-87 -j ACCEPT + +Filter 2246 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2245 + inet/filter/INPUT -j limit-2245 + inet/filter/OUTPUT -j limit-2245 + inet/filter/limit-2245 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2245 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2245 + inet6/filter/INPUT -j limit-2245 + inet6/filter/OUTPUT -j limit-2245 + inet6/filter/limit-2245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 2247 {"flow-limit":{"log":"none","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2246 + inet/filter/FORWARD -j logaccept-final-88 + inet/filter/INPUT -j limit-2246 + inet/filter/INPUT -j logaccept-final-88 + inet/filter/OUTPUT -j limit-2246 + inet/filter/OUTPUT -j logaccept-final-88 + inet/filter/limit-2246 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2246 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-88 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-88 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-88 -j ACCEPT + inet6/filter/FORWARD -j limit-2246 + inet6/filter/FORWARD -j logaccept-final-88 + inet6/filter/INPUT -j limit-2246 + inet6/filter/INPUT -j logaccept-final-88 + inet6/filter/OUTPUT -j limit-2246 + inet6/filter/OUTPUT -j logaccept-final-88 + inet6/filter/limit-2246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-88 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-88 -j ACCEPT + +Filter 2248 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2247 + inet/filter/INPUT -j limit-2247 + inet/filter/OUTPUT -j limit-2247 + inet/filter/limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2247 + inet6/filter/INPUT -j limit-2247 + inet6/filter/OUTPUT -j limit-2247 + inet6/filter/limit-2247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 2249 {"flow-limit":{"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2248 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2248 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2248 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2248 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2248 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2248 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2248 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2250 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2249 + inet/filter/INPUT -j limit-2249 + inet/filter/OUTPUT -j limit-2249 + inet/filter/limit-2249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2249 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2249 + inet6/filter/INPUT -j limit-2249 + inet6/filter/OUTPUT -j limit-2249 + inet6/filter/limit-2249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2251 {"flow-limit":{"log":"none","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2250 + inet/filter/FORWARD -j logaccept-final-89 + inet/filter/INPUT -j limit-2250 + inet/filter/INPUT -j logaccept-final-89 + inet/filter/OUTPUT -j limit-2250 + inet/filter/OUTPUT -j logaccept-final-89 + inet/filter/limit-2250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2250 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-89 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-89 -j ACCEPT + inet6/filter/FORWARD -j limit-2250 + inet6/filter/FORWARD -j logaccept-final-89 + inet6/filter/INPUT -j limit-2250 + inet6/filter/INPUT -j logaccept-final-89 + inet6/filter/OUTPUT -j limit-2250 + inet6/filter/OUTPUT -j logaccept-final-89 + inet6/filter/limit-2250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-89 -j ACCEPT + +Filter 2252 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2251 + inet/filter/INPUT -j limit-2251 + inet/filter/OUTPUT -j limit-2251 + inet/filter/limit-2251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2251 + inet6/filter/INPUT -j limit-2251 + inet6/filter/OUTPUT -j limit-2251 + inet6/filter/limit-2251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + +Filter 2253 {"flow-limit":{"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2252 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2252 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2252 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2252 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2252 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2252 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2252 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2254 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2253 + inet/filter/INPUT -j limit-2253 + inet/filter/OUTPUT -j limit-2253 + inet/filter/limit-2253 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2253 + inet6/filter/INPUT -j limit-2253 + inet6/filter/OUTPUT -j limit-2253 + inet6/filter/limit-2253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2255 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2254 + inet/filter/FORWARD -j logaccept-final-90 + inet/filter/INPUT -j limit-2254 + inet/filter/INPUT -j logaccept-final-90 + inet/filter/OUTPUT -j limit-2254 + inet/filter/OUTPUT -j logaccept-final-90 + inet/filter/limit-2254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-90 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-90 -j ACCEPT + inet6/filter/FORWARD -j limit-2254 + inet6/filter/FORWARD -j logaccept-final-90 + inet6/filter/INPUT -j limit-2254 + inet6/filter/INPUT -j logaccept-final-90 + inet6/filter/OUTPUT -j limit-2254 + inet6/filter/OUTPUT -j logaccept-final-90 + inet6/filter/limit-2254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-90 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-90 -j ACCEPT + +Filter 2256 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2255 + inet/filter/INPUT -j limit-2255 + inet/filter/OUTPUT -j limit-2255 + inet/filter/limit-2255 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2255 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2255 + inet6/filter/INPUT -j limit-2255 + inet6/filter/OUTPUT -j limit-2255 + inet6/filter/limit-2255 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2255 -m limit --limit 1/second -j LOG + +Filter 2257 {"flow-limit":{"log":"none","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2256 + inet/filter/FORWARD -j logaccept-final-91 + inet/filter/INPUT -j limit-2256 + inet/filter/INPUT -j logaccept-final-91 + inet/filter/OUTPUT -j limit-2256 + inet/filter/OUTPUT -j logaccept-final-91 + inet/filter/limit-2256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-91 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-91 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-91 -j ACCEPT + inet6/filter/FORWARD -j limit-2256 + inet6/filter/FORWARD -j logaccept-final-91 + inet6/filter/INPUT -j limit-2256 + inet6/filter/INPUT -j logaccept-final-91 + inet6/filter/OUTPUT -j limit-2256 + inet6/filter/OUTPUT -j logaccept-final-91 + inet6/filter/limit-2256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-91 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-91 -j ACCEPT + +Filter 2258 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2257 + inet/filter/INPUT -j limit-2257 + inet/filter/OUTPUT -j limit-2257 + inet/filter/limit-2257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2257 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2257 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2257 + inet6/filter/INPUT -j limit-2257 + inet6/filter/OUTPUT -j limit-2257 + inet6/filter/limit-2257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2257 -j TEE --gateway fc00::2 + +Filter 2259 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2258 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2258 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2258 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2258 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2258 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2258 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2260 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2259 + inet/filter/INPUT -j limit-2259 + inet/filter/OUTPUT -j limit-2259 + inet/filter/limit-2259 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2259 + inet6/filter/INPUT -j limit-2259 + inet6/filter/OUTPUT -j limit-2259 + inet6/filter/limit-2259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2261 {"flow-limit":{"log":"none","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2260 + inet/filter/FORWARD -j logaccept-final-92 + inet/filter/INPUT -j limit-2260 + inet/filter/INPUT -j logaccept-final-92 + inet/filter/OUTPUT -j limit-2260 + inet/filter/OUTPUT -j logaccept-final-92 + inet/filter/limit-2260 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-92 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-92 -j ACCEPT + inet6/filter/FORWARD -j limit-2260 + inet6/filter/FORWARD -j logaccept-final-92 + inet6/filter/INPUT -j limit-2260 + inet6/filter/INPUT -j logaccept-final-92 + inet6/filter/OUTPUT -j limit-2260 + inet6/filter/OUTPUT -j logaccept-final-92 + inet6/filter/limit-2260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-92 -j ACCEPT + +Filter 2262 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2261 + inet/filter/INPUT -j limit-2261 + inet/filter/OUTPUT -j limit-2261 + inet/filter/limit-2261 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2261 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2261 + inet6/filter/INPUT -j limit-2261 + inet6/filter/OUTPUT -j limit-2261 + inet6/filter/limit-2261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2263 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2262 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2262 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2262 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2262 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2262 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2262 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2262 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2264 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2263 + inet/filter/INPUT -j limit-2263 + inet/filter/OUTPUT -j limit-2263 + inet/filter/limit-2263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2263 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2263 + inet6/filter/INPUT -j limit-2263 + inet6/filter/OUTPUT -j limit-2263 + inet6/filter/limit-2263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2265 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2264 + inet/filter/FORWARD -j logaccept-final-93 + inet/filter/INPUT -j limit-2264 + inet/filter/INPUT -j logaccept-final-93 + inet/filter/OUTPUT -j limit-2264 + inet/filter/OUTPUT -j logaccept-final-93 + inet/filter/limit-2264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2264 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-93 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-93 -j ACCEPT + inet6/filter/FORWARD -j limit-2264 + inet6/filter/FORWARD -j logaccept-final-93 + inet6/filter/INPUT -j limit-2264 + inet6/filter/INPUT -j logaccept-final-93 + inet6/filter/OUTPUT -j limit-2264 + inet6/filter/OUTPUT -j logaccept-final-93 + inet6/filter/limit-2264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-93 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-93 -j ACCEPT + +Filter 2266 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2265 + inet/filter/INPUT -j limit-2265 + inet/filter/OUTPUT -j limit-2265 + inet/filter/limit-2265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2265 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2265 + inet6/filter/INPUT -j limit-2265 + inet6/filter/OUTPUT -j limit-2265 + inet6/filter/limit-2265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 2267 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2266 + inet/filter/FORWARD -j logaccept-final-94 + inet/filter/INPUT -j limit-2266 + inet/filter/INPUT -j logaccept-final-94 + inet/filter/OUTPUT -j limit-2266 + inet/filter/OUTPUT -j logaccept-final-94 + inet/filter/limit-2266 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2266 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-94 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-94 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-94 -j ACCEPT + inet6/filter/FORWARD -j limit-2266 + inet6/filter/FORWARD -j logaccept-final-94 + inet6/filter/INPUT -j limit-2266 + inet6/filter/INPUT -j logaccept-final-94 + inet6/filter/OUTPUT -j limit-2266 + inet6/filter/OUTPUT -j logaccept-final-94 + inet6/filter/limit-2266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-94 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-94 -j ACCEPT + +Filter 2268 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2267 + inet/filter/INPUT -j limit-2267 + inet/filter/OUTPUT -j limit-2267 + inet/filter/limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2267 + inet6/filter/INPUT -j limit-2267 + inet6/filter/OUTPUT -j limit-2267 + inet6/filter/limit-2267 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2267 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 2269 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2268 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2268 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2268 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2268 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2268 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2268 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2268 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2268 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2270 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2269 + inet/filter/INPUT -j limit-2269 + inet/filter/OUTPUT -j limit-2269 + inet/filter/limit-2269 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2269 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2269 + inet6/filter/INPUT -j limit-2269 + inet6/filter/OUTPUT -j limit-2269 + inet6/filter/limit-2269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2271 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2270 + inet/filter/FORWARD -j logaccept-final-95 + inet/filter/INPUT -j limit-2270 + inet/filter/INPUT -j logaccept-final-95 + inet/filter/OUTPUT -j limit-2270 + inet/filter/OUTPUT -j logaccept-final-95 + inet/filter/limit-2270 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2270 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-95 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-95 -j ACCEPT + inet6/filter/FORWARD -j limit-2270 + inet6/filter/FORWARD -j logaccept-final-95 + inet6/filter/INPUT -j limit-2270 + inet6/filter/INPUT -j logaccept-final-95 + inet6/filter/OUTPUT -j limit-2270 + inet6/filter/OUTPUT -j logaccept-final-95 + inet6/filter/limit-2270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-95 -j ACCEPT + +Filter 2272 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2271 + inet/filter/INPUT -j limit-2271 + inet/filter/OUTPUT -j limit-2271 + inet/filter/limit-2271 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2271 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2271 + inet6/filter/INPUT -j limit-2271 + inet6/filter/OUTPUT -j limit-2271 + inet6/filter/limit-2271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + +Filter 2273 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2272 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2272 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2272 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2272 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2272 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2272 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2272 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2274 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2273 + inet/filter/INPUT -j limit-2273 + inet/filter/OUTPUT -j limit-2273 + inet/filter/limit-2273 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2273 + inet6/filter/INPUT -j limit-2273 + inet6/filter/OUTPUT -j limit-2273 + inet6/filter/limit-2273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2275 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2274 + inet/filter/FORWARD -j logaccept-final-96 + inet/filter/INPUT -j limit-2274 + inet/filter/INPUT -j logaccept-final-96 + inet/filter/OUTPUT -j limit-2274 + inet/filter/OUTPUT -j logaccept-final-96 + inet/filter/limit-2274 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-96 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-96 -j ACCEPT + inet6/filter/FORWARD -j limit-2274 + inet6/filter/FORWARD -j logaccept-final-96 + inet6/filter/INPUT -j limit-2274 + inet6/filter/INPUT -j logaccept-final-96 + inet6/filter/OUTPUT -j limit-2274 + inet6/filter/OUTPUT -j logaccept-final-96 + inet6/filter/limit-2274 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-96 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-96 -j ACCEPT + +Filter 2276 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2275 + inet/filter/INPUT -j limit-2275 + inet/filter/OUTPUT -j limit-2275 + inet/filter/limit-2275 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2275 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2275 + inet6/filter/INPUT -j limit-2275 + inet6/filter/OUTPUT -j limit-2275 + inet6/filter/limit-2275 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2275 -m limit --limit 1/second -j LOG + +Filter 2277 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2276 + inet/filter/FORWARD -j logaccept-final-97 + inet/filter/INPUT -j limit-2276 + inet/filter/INPUT -j logaccept-final-97 + inet/filter/OUTPUT -j limit-2276 + inet/filter/OUTPUT -j logaccept-final-97 + inet/filter/limit-2276 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-97 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-97 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-97 -j ACCEPT + inet6/filter/FORWARD -j limit-2276 + inet6/filter/FORWARD -j logaccept-final-97 + inet6/filter/INPUT -j limit-2276 + inet6/filter/INPUT -j logaccept-final-97 + inet6/filter/OUTPUT -j limit-2276 + inet6/filter/OUTPUT -j logaccept-final-97 + inet6/filter/limit-2276 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-97 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-97 -j ACCEPT + +Filter 2278 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2277 + inet/filter/INPUT -j limit-2277 + inet/filter/OUTPUT -j limit-2277 + inet/filter/limit-2277 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2277 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2277 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2277 + inet6/filter/INPUT -j limit-2277 + inet6/filter/OUTPUT -j limit-2277 + inet6/filter/limit-2277 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2277 -j TEE --gateway fc00::2 + +Filter 2279 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2278 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2278 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2278 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2278 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2278 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2278 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2278 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2278 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2280 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2279 + inet/filter/INPUT -j limit-2279 + inet/filter/OUTPUT -j limit-2279 + inet/filter/limit-2279 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2279 + inet6/filter/INPUT -j limit-2279 + inet6/filter/OUTPUT -j limit-2279 + inet6/filter/limit-2279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2281 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2280 + inet/filter/FORWARD -j logaccept-final-98 + inet/filter/INPUT -j limit-2280 + inet/filter/INPUT -j logaccept-final-98 + inet/filter/OUTPUT -j limit-2280 + inet/filter/OUTPUT -j logaccept-final-98 + inet/filter/limit-2280 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-98 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-98 -j ACCEPT + inet6/filter/FORWARD -j limit-2280 + inet6/filter/FORWARD -j logaccept-final-98 + inet6/filter/INPUT -j limit-2280 + inet6/filter/INPUT -j logaccept-final-98 + inet6/filter/OUTPUT -j limit-2280 + inet6/filter/OUTPUT -j logaccept-final-98 + inet6/filter/limit-2280 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-98 -j ACCEPT + +Filter 2282 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2281 + inet/filter/INPUT -j limit-2281 + inet/filter/OUTPUT -j limit-2281 + inet/filter/limit-2281 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2281 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2281 + inet6/filter/INPUT -j limit-2281 + inet6/filter/OUTPUT -j limit-2281 + inet6/filter/limit-2281 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2283 {"flow-limit":{"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2282 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2282 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2282 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2282 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2282 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2282 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2282 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2282 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2282 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2282 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2284 {"action":"pass","flow-limit":{"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2283 + inet/filter/INPUT -j limit-2283 + inet/filter/OUTPUT -j limit-2283 + inet/filter/limit-2283 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2283 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2283 + inet6/filter/INPUT -j limit-2283 + inet6/filter/OUTPUT -j limit-2283 + inet6/filter/limit-2283 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2283 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2285 {"flow-limit":{"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2284 + inet/filter/FORWARD -j logaccept-final-99 + inet/filter/INPUT -j limit-2284 + inet/filter/INPUT -j logaccept-final-99 + inet/filter/OUTPUT -j limit-2284 + inet/filter/OUTPUT -j logaccept-final-99 + inet/filter/limit-2284 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2284 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-99 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-99 -j ACCEPT + inet6/filter/FORWARD -j limit-2284 + inet6/filter/FORWARD -j logaccept-final-99 + inet6/filter/INPUT -j limit-2284 + inet6/filter/INPUT -j logaccept-final-99 + inet6/filter/OUTPUT -j limit-2284 + inet6/filter/OUTPUT -j logaccept-final-99 + inet6/filter/limit-2284 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2284 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-99 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-99 -j ACCEPT + +Filter 2286 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2285 + inet/filter/INPUT -j limit-2285 + inet/filter/OUTPUT -j limit-2285 + inet/filter/limit-2285 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2285 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2285 + inet6/filter/INPUT -j limit-2285 + inet6/filter/OUTPUT -j limit-2285 + inet6/filter/limit-2285 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2285 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 2287 {"flow-limit":{"log":"none","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2286 + inet/filter/FORWARD -j logaccept-final-100 + inet/filter/INPUT -j limit-2286 + inet/filter/INPUT -j logaccept-final-100 + inet/filter/OUTPUT -j limit-2286 + inet/filter/OUTPUT -j logaccept-final-100 + inet/filter/limit-2286 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2286 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-100 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-100 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-100 -j ACCEPT + inet6/filter/FORWARD -j limit-2286 + inet6/filter/FORWARD -j logaccept-final-100 + inet6/filter/INPUT -j limit-2286 + inet6/filter/INPUT -j logaccept-final-100 + inet6/filter/OUTPUT -j limit-2286 + inet6/filter/OUTPUT -j logaccept-final-100 + inet6/filter/limit-2286 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2286 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-100 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-100 -j ACCEPT + +Filter 2288 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2287 + inet/filter/INPUT -j limit-2287 + inet/filter/OUTPUT -j limit-2287 + inet/filter/limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2287 + inet6/filter/INPUT -j limit-2287 + inet6/filter/OUTPUT -j limit-2287 + inet6/filter/limit-2287 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2287 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + +Filter 2289 {"flow-limit":{"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2288 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2288 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2288 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2288 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2288 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2288 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2288 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2288 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2288 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2288 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2290 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2289 + inet/filter/INPUT -j limit-2289 + inet/filter/OUTPUT -j limit-2289 + inet/filter/limit-2289 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2289 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2289 + inet6/filter/INPUT -j limit-2289 + inet6/filter/OUTPUT -j limit-2289 + inet6/filter/limit-2289 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2289 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2291 {"flow-limit":{"log":"none","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2290 + inet/filter/FORWARD -j logaccept-final-101 + inet/filter/INPUT -j limit-2290 + inet/filter/INPUT -j logaccept-final-101 + inet/filter/OUTPUT -j limit-2290 + inet/filter/OUTPUT -j logaccept-final-101 + inet/filter/limit-2290 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2290 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-101 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-101 -j ACCEPT + inet6/filter/FORWARD -j limit-2290 + inet6/filter/FORWARD -j logaccept-final-101 + inet6/filter/INPUT -j limit-2290 + inet6/filter/INPUT -j logaccept-final-101 + inet6/filter/OUTPUT -j limit-2290 + inet6/filter/OUTPUT -j logaccept-final-101 + inet6/filter/limit-2290 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2290 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-101 -j ACCEPT + +Filter 2292 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2291 + inet/filter/INPUT -j limit-2291 + inet/filter/OUTPUT -j limit-2291 + inet/filter/limit-2291 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2291 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2291 + inet6/filter/INPUT -j limit-2291 + inet6/filter/OUTPUT -j limit-2291 + inet6/filter/limit-2291 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + +Filter 2293 {"flow-limit":{"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2292 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2292 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2292 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2292 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2292 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2292 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2292 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2292 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2294 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2293 + inet/filter/INPUT -j limit-2293 + inet/filter/OUTPUT -j limit-2293 + inet/filter/limit-2293 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2293 + inet6/filter/INPUT -j limit-2293 + inet6/filter/OUTPUT -j limit-2293 + inet6/filter/limit-2293 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2295 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2294 + inet/filter/FORWARD -j logaccept-final-102 + inet/filter/INPUT -j limit-2294 + inet/filter/INPUT -j logaccept-final-102 + inet/filter/OUTPUT -j limit-2294 + inet/filter/OUTPUT -j logaccept-final-102 + inet/filter/limit-2294 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-102 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-102 -j ACCEPT + inet6/filter/FORWARD -j limit-2294 + inet6/filter/FORWARD -j logaccept-final-102 + inet6/filter/INPUT -j limit-2294 + inet6/filter/INPUT -j logaccept-final-102 + inet6/filter/OUTPUT -j limit-2294 + inet6/filter/OUTPUT -j logaccept-final-102 + inet6/filter/limit-2294 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-102 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-102 -j ACCEPT + +Filter 2296 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2295 + inet/filter/INPUT -j limit-2295 + inet/filter/OUTPUT -j limit-2295 + inet/filter/limit-2295 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2295 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2295 + inet6/filter/INPUT -j limit-2295 + inet6/filter/OUTPUT -j limit-2295 + inet6/filter/limit-2295 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2295 -m limit --limit 1/second -j LOG + +Filter 2297 {"flow-limit":{"log":"none","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2296 + inet/filter/FORWARD -j logaccept-final-103 + inet/filter/INPUT -j limit-2296 + inet/filter/INPUT -j logaccept-final-103 + inet/filter/OUTPUT -j limit-2296 + inet/filter/OUTPUT -j logaccept-final-103 + inet/filter/limit-2296 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-103 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-103 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-103 -j ACCEPT + inet6/filter/FORWARD -j limit-2296 + inet6/filter/FORWARD -j logaccept-final-103 + inet6/filter/INPUT -j limit-2296 + inet6/filter/INPUT -j logaccept-final-103 + inet6/filter/OUTPUT -j limit-2296 + inet6/filter/OUTPUT -j logaccept-final-103 + inet6/filter/limit-2296 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-103 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-103 -j ACCEPT + +Filter 2298 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2297 + inet/filter/INPUT -j limit-2297 + inet/filter/OUTPUT -j limit-2297 + inet/filter/limit-2297 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2297 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2297 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2297 + inet6/filter/INPUT -j limit-2297 + inet6/filter/OUTPUT -j limit-2297 + inet6/filter/limit-2297 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2297 -j TEE --gateway fc00::2 + +Filter 2299 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2298 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2298 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2298 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2298 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2298 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2298 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2298 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2298 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2300 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2299 + inet/filter/INPUT -j limit-2299 + inet/filter/OUTPUT -j limit-2299 + inet/filter/limit-2299 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2299 + inet6/filter/INPUT -j limit-2299 + inet6/filter/OUTPUT -j limit-2299 + inet6/filter/limit-2299 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2301 {"flow-limit":{"log":"none","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2300 + inet/filter/FORWARD -j logaccept-final-104 + inet/filter/INPUT -j limit-2300 + inet/filter/INPUT -j logaccept-final-104 + inet/filter/OUTPUT -j limit-2300 + inet/filter/OUTPUT -j logaccept-final-104 + inet/filter/limit-2300 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-104 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-104 -j ACCEPT + inet6/filter/FORWARD -j limit-2300 + inet6/filter/FORWARD -j logaccept-final-104 + inet6/filter/INPUT -j limit-2300 + inet6/filter/INPUT -j logaccept-final-104 + inet6/filter/OUTPUT -j limit-2300 + inet6/filter/OUTPUT -j logaccept-final-104 + inet6/filter/limit-2300 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-104 -j ACCEPT + +Filter 2302 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2301 + inet/filter/INPUT -j limit-2301 + inet/filter/OUTPUT -j limit-2301 + inet/filter/limit-2301 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2301 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2301 + inet6/filter/INPUT -j limit-2301 + inet6/filter/OUTPUT -j limit-2301 + inet6/filter/limit-2301 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2303 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2302 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2302 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2302 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2302 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2302 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2302 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2302 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2302 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2302 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2302 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2304 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2303 + inet/filter/INPUT -j limit-2303 + inet/filter/OUTPUT -j limit-2303 + inet/filter/limit-2303 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2303 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2303 + inet6/filter/INPUT -j limit-2303 + inet6/filter/OUTPUT -j limit-2303 + inet6/filter/limit-2303 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2303 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2305 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2304 + inet/filter/FORWARD -j logaccept-final-105 + inet/filter/INPUT -j limit-2304 + inet/filter/INPUT -j logaccept-final-105 + inet/filter/OUTPUT -j limit-2304 + inet/filter/OUTPUT -j logaccept-final-105 + inet/filter/limit-2304 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2304 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-105 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-105 -j ACCEPT + inet6/filter/FORWARD -j limit-2304 + inet6/filter/FORWARD -j logaccept-final-105 + inet6/filter/INPUT -j limit-2304 + inet6/filter/INPUT -j logaccept-final-105 + inet6/filter/OUTPUT -j limit-2304 + inet6/filter/OUTPUT -j logaccept-final-105 + inet6/filter/limit-2304 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2304 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-105 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-105 -j ACCEPT + +Filter 2306 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2305 + inet/filter/INPUT -j limit-2305 + inet/filter/OUTPUT -j limit-2305 + inet/filter/limit-2305 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2305 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2305 + inet6/filter/INPUT -j limit-2305 + inet6/filter/OUTPUT -j limit-2305 + inet6/filter/limit-2305 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2305 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 2307 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2306 + inet/filter/FORWARD -j logaccept-final-106 + inet/filter/INPUT -j limit-2306 + inet/filter/INPUT -j logaccept-final-106 + inet/filter/OUTPUT -j limit-2306 + inet/filter/OUTPUT -j logaccept-final-106 + inet/filter/limit-2306 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2306 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-106 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-106 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-106 -j ACCEPT + inet6/filter/FORWARD -j limit-2306 + inet6/filter/FORWARD -j logaccept-final-106 + inet6/filter/INPUT -j limit-2306 + inet6/filter/INPUT -j logaccept-final-106 + inet6/filter/OUTPUT -j limit-2306 + inet6/filter/OUTPUT -j logaccept-final-106 + inet6/filter/limit-2306 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2306 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-106 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-106 -j ACCEPT + +Filter 2308 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2307 + inet/filter/INPUT -j limit-2307 + inet/filter/OUTPUT -j limit-2307 + inet/filter/limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2307 + inet6/filter/INPUT -j limit-2307 + inet6/filter/OUTPUT -j limit-2307 + inet6/filter/limit-2307 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2307 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + +Filter 2309 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2308 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2308 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2308 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2308 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2308 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2308 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2308 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2308 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2308 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2308 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2310 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2309 + inet/filter/INPUT -j limit-2309 + inet/filter/OUTPUT -j limit-2309 + inet/filter/limit-2309 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2309 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2309 + inet6/filter/INPUT -j limit-2309 + inet6/filter/OUTPUT -j limit-2309 + inet6/filter/limit-2309 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2309 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2311 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2310 + inet/filter/FORWARD -j logaccept-final-107 + inet/filter/INPUT -j limit-2310 + inet/filter/INPUT -j logaccept-final-107 + inet/filter/OUTPUT -j limit-2310 + inet/filter/OUTPUT -j logaccept-final-107 + inet/filter/limit-2310 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2310 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-107 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-107 -j ACCEPT + inet6/filter/FORWARD -j limit-2310 + inet6/filter/FORWARD -j logaccept-final-107 + inet6/filter/INPUT -j limit-2310 + inet6/filter/INPUT -j logaccept-final-107 + inet6/filter/OUTPUT -j limit-2310 + inet6/filter/OUTPUT -j logaccept-final-107 + inet6/filter/limit-2310 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2310 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-107 -j ACCEPT + +Filter 2312 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2311 + inet/filter/INPUT -j limit-2311 + inet/filter/OUTPUT -j limit-2311 + inet/filter/limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2311 + inet6/filter/INPUT -j limit-2311 + inet6/filter/OUTPUT -j limit-2311 + inet6/filter/limit-2311 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + +Filter 2313 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2312 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2312 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2312 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2312 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2312 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2312 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2312 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2312 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2314 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2313 + inet/filter/INPUT -j limit-2313 + inet/filter/OUTPUT -j limit-2313 + inet/filter/limit-2313 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2313 + inet6/filter/INPUT -j limit-2313 + inet6/filter/OUTPUT -j limit-2313 + inet6/filter/limit-2313 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2315 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2314 + inet/filter/FORWARD -j logaccept-final-108 + inet/filter/INPUT -j limit-2314 + inet/filter/INPUT -j logaccept-final-108 + inet/filter/OUTPUT -j limit-2314 + inet/filter/OUTPUT -j logaccept-final-108 + inet/filter/limit-2314 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-108 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-108 -j ACCEPT + inet6/filter/FORWARD -j limit-2314 + inet6/filter/FORWARD -j logaccept-final-108 + inet6/filter/INPUT -j limit-2314 + inet6/filter/INPUT -j logaccept-final-108 + inet6/filter/OUTPUT -j limit-2314 + inet6/filter/OUTPUT -j logaccept-final-108 + inet6/filter/limit-2314 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-108 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-108 -j ACCEPT + +Filter 2316 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2315 + inet/filter/INPUT -j limit-2315 + inet/filter/OUTPUT -j limit-2315 + inet/filter/limit-2315 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2315 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2315 + inet6/filter/INPUT -j limit-2315 + inet6/filter/OUTPUT -j limit-2315 + inet6/filter/limit-2315 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2315 -m limit --limit 1/second -j LOG + +Filter 2317 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2316 + inet/filter/FORWARD -j logaccept-final-109 + inet/filter/INPUT -j limit-2316 + inet/filter/INPUT -j logaccept-final-109 + inet/filter/OUTPUT -j limit-2316 + inet/filter/OUTPUT -j logaccept-final-109 + inet/filter/limit-2316 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-109 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-109 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-109 -j ACCEPT + inet6/filter/FORWARD -j limit-2316 + inet6/filter/FORWARD -j logaccept-final-109 + inet6/filter/INPUT -j limit-2316 + inet6/filter/INPUT -j logaccept-final-109 + inet6/filter/OUTPUT -j limit-2316 + inet6/filter/OUTPUT -j logaccept-final-109 + inet6/filter/limit-2316 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-109 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-109 -j ACCEPT + +Filter 2318 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2317 + inet/filter/INPUT -j limit-2317 + inet/filter/OUTPUT -j limit-2317 + inet/filter/limit-2317 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2317 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2317 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2317 + inet6/filter/INPUT -j limit-2317 + inet6/filter/OUTPUT -j limit-2317 + inet6/filter/limit-2317 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2317 -j TEE --gateway fc00::2 + +Filter 2319 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2318 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2318 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2318 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2318 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2318 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2318 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2318 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2318 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2320 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2319 + inet/filter/INPUT -j limit-2319 + inet/filter/OUTPUT -j limit-2319 + inet/filter/limit-2319 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -j limit-2319 + inet6/filter/INPUT -j limit-2319 + inet6/filter/OUTPUT -j limit-2319 + inet6/filter/limit-2319 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2321 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2320 + inet/filter/FORWARD -j logaccept-final-110 + inet/filter/INPUT -j limit-2320 + inet/filter/INPUT -j logaccept-final-110 + inet/filter/OUTPUT -j limit-2320 + inet/filter/OUTPUT -j logaccept-final-110 + inet/filter/limit-2320 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/logaccept-final-110 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-110 -j ACCEPT + inet6/filter/FORWARD -j limit-2320 + inet6/filter/FORWARD -j logaccept-final-110 + inet6/filter/INPUT -j limit-2320 + inet6/filter/INPUT -j logaccept-final-110 + inet6/filter/OUTPUT -j limit-2320 + inet6/filter/OUTPUT -j logaccept-final-110 + inet6/filter/limit-2320 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/logaccept-final-110 -j ACCEPT + +Filter 2322 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2321 + inet/filter/INPUT -j limit-2321 + inet/filter/OUTPUT -j limit-2321 + inet/filter/limit-2321 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2321 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2321 + inet6/filter/INPUT -j limit-2321 + inet6/filter/OUTPUT -j limit-2321 + inet6/filter/limit-2321 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 2323 {"flow-limit":{"log":"ulog"}} +(filter-limit) + inet/filter/FORWARD -j limit-2322 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2322 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2322 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2322 -m recent --name limit-2322 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1290 + inet/filter/limit-2322 -m recent --name limit-2322 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1290 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1290 -j DROP + inet6/filter/FORWARD -j limit-2322 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2322 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2322 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2322 -m recent --name limit-2322 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1290 + inet6/filter/limit-2322 -m recent --name limit-2322 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1290 -j DROP + +Filter 2324 {"action":"pass","flow-limit":{"log":"ulog"}} +(filter-limit) + inet/filter/FORWARD -j limit-2323 + inet/filter/INPUT -j limit-2323 + inet/filter/OUTPUT -j limit-2323 + inet/filter/limit-2323 -m recent --name limit-2323 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1291 + inet/filter/limit-2323 -m recent --name limit-2323 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1291 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1291 -j DROP + inet6/filter/FORWARD -j limit-2323 + inet6/filter/INPUT -j limit-2323 + inet6/filter/OUTPUT -j limit-2323 + inet6/filter/limit-2323 -m recent --name limit-2323 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1291 + inet6/filter/limit-2323 -m recent --name limit-2323 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1291 -j DROP + +Filter 2325 {"flow-limit":{"log":"ulog"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2324 + inet/filter/FORWARD -j logaccept-final-111 + inet/filter/INPUT -j limit-2324 + inet/filter/INPUT -j logaccept-final-111 + inet/filter/OUTPUT -j limit-2324 + inet/filter/OUTPUT -j logaccept-final-111 + inet/filter/limit-2324 -m recent --name limit-2324 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1292 + inet/filter/limit-2324 -m recent --name limit-2324 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-111 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-111 -j ACCEPT + inet/filter/logdrop-1292 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1292 -j DROP + inet6/filter/FORWARD -j limit-2324 + inet6/filter/FORWARD -j logaccept-final-111 + inet6/filter/INPUT -j limit-2324 + inet6/filter/INPUT -j logaccept-final-111 + inet6/filter/OUTPUT -j limit-2324 + inet6/filter/OUTPUT -j logaccept-final-111 + inet6/filter/limit-2324 -m recent --name limit-2324 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1292 + inet6/filter/limit-2324 -m recent --name limit-2324 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-111 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-111 -j ACCEPT + inet6/filter/logdrop-1292 -j DROP + +Filter 2326 {"action":"pass","flow-limit":{"log":"ulog"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2325 + inet/filter/INPUT -j limit-2325 + inet/filter/OUTPUT -j limit-2325 + inet/filter/limit-2325 -m recent --name limit-2325 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1293 + inet/filter/limit-2325 -m recent --name limit-2325 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1293 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1293 -j DROP + inet6/filter/FORWARD -j limit-2325 + inet6/filter/INPUT -j limit-2325 + inet6/filter/OUTPUT -j limit-2325 + inet6/filter/limit-2325 -m recent --name limit-2325 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1293 + inet6/filter/limit-2325 -m recent --name limit-2325 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1293 -j DROP + +Filter 2327 {"flow-limit":{"log":"ulog"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2326 + inet/filter/FORWARD -j logaccept-final-112 + inet/filter/INPUT -j limit-2326 + inet/filter/INPUT -j logaccept-final-112 + inet/filter/OUTPUT -j limit-2326 + inet/filter/OUTPUT -j logaccept-final-112 + inet/filter/limit-2326 -m recent --name limit-2326 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1294 + inet/filter/limit-2326 -m recent --name limit-2326 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-112 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-112 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-112 -j ACCEPT + inet/filter/logdrop-1294 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1294 -j DROP + inet6/filter/FORWARD -j limit-2326 + inet6/filter/FORWARD -j logaccept-final-112 + inet6/filter/INPUT -j limit-2326 + inet6/filter/INPUT -j logaccept-final-112 + inet6/filter/OUTPUT -j limit-2326 + inet6/filter/OUTPUT -j logaccept-final-112 + inet6/filter/limit-2326 -m recent --name limit-2326 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1294 + inet6/filter/limit-2326 -m recent --name limit-2326 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-112 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-112 -j ACCEPT + inet6/filter/logdrop-1294 -j DROP + +Filter 2328 {"action":"pass","flow-limit":{"log":"ulog"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2327 + inet/filter/INPUT -j limit-2327 + inet/filter/OUTPUT -j limit-2327 + inet/filter/limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1295 + inet/filter/limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1295 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1295 -j DROP + inet6/filter/FORWARD -j limit-2327 + inet6/filter/INPUT -j limit-2327 + inet6/filter/OUTPUT -j limit-2327 + inet6/filter/limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1295 + inet6/filter/limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1295 -j DROP + +Filter 2329 {"flow-limit":{"log":"ulog"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2328 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2328 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2328 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1296 + inet/filter/limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1296 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1296 -j DROP + inet6/filter/FORWARD -j limit-2328 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2328 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2328 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1296 + inet6/filter/limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1296 -j DROP + +Filter 2330 {"action":"pass","flow-limit":{"log":"ulog"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2329 + inet/filter/INPUT -j limit-2329 + inet/filter/OUTPUT -j limit-2329 + inet/filter/limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1297 + inet/filter/limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1297 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1297 -j DROP + inet6/filter/FORWARD -j limit-2329 + inet6/filter/INPUT -j limit-2329 + inet6/filter/OUTPUT -j limit-2329 + inet6/filter/limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1297 + inet6/filter/limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1297 -j DROP + +Filter 2331 {"flow-limit":{"log":"ulog"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2330 + inet/filter/FORWARD -j logaccept-final-113 + inet/filter/INPUT -j limit-2330 + inet/filter/INPUT -j logaccept-final-113 + inet/filter/OUTPUT -j limit-2330 + inet/filter/OUTPUT -j logaccept-final-113 + inet/filter/limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1298 + inet/filter/limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-113 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-113 -j ACCEPT + inet/filter/logdrop-1298 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1298 -j DROP + inet6/filter/FORWARD -j limit-2330 + inet6/filter/FORWARD -j logaccept-final-113 + inet6/filter/INPUT -j limit-2330 + inet6/filter/INPUT -j logaccept-final-113 + inet6/filter/OUTPUT -j limit-2330 + inet6/filter/OUTPUT -j logaccept-final-113 + inet6/filter/limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1298 + inet6/filter/limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-113 -j ACCEPT + inet6/filter/logdrop-1298 -j DROP + +Filter 2332 {"action":"pass","flow-limit":{"log":"ulog"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2331 + inet/filter/INPUT -j limit-2331 + inet/filter/OUTPUT -j limit-2331 + inet/filter/limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1299 + inet/filter/limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1299 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1299 -j DROP + inet6/filter/FORWARD -j limit-2331 + inet6/filter/INPUT -j limit-2331 + inet6/filter/OUTPUT -j limit-2331 + inet6/filter/limit-2331 -m recent --name limit-2331 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1299 + inet6/filter/logdrop-1299 -j DROP + +Filter 2333 {"flow-limit":{"log":"ulog","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2332 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2332 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2332 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2332 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1300 + inet/filter/limit-2332 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1300 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1300 -j DROP + inet6/filter/FORWARD -j limit-2332 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2332 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2332 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2332 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1300 + inet6/filter/limit-2332 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1300 -j DROP + +Filter 2334 {"action":"pass","flow-limit":{"log":"ulog","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2333 + inet/filter/INPUT -j limit-2333 + inet/filter/OUTPUT -j limit-2333 + inet/filter/limit-2333 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1301 + inet/filter/limit-2333 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1301 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1301 -j DROP + inet6/filter/FORWARD -j limit-2333 + inet6/filter/INPUT -j limit-2333 + inet6/filter/OUTPUT -j limit-2333 + inet6/filter/limit-2333 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1301 + inet6/filter/limit-2333 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1301 -j DROP + +Filter 2335 {"flow-limit":{"log":"ulog","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2334 + inet/filter/FORWARD -j logaccept-final-114 + inet/filter/INPUT -j limit-2334 + inet/filter/INPUT -j logaccept-final-114 + inet/filter/OUTPUT -j limit-2334 + inet/filter/OUTPUT -j logaccept-final-114 + inet/filter/limit-2334 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1302 + inet/filter/limit-2334 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-114 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-114 -j ACCEPT + inet/filter/logdrop-1302 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1302 -j DROP + inet6/filter/FORWARD -j limit-2334 + inet6/filter/FORWARD -j logaccept-final-114 + inet6/filter/INPUT -j limit-2334 + inet6/filter/INPUT -j logaccept-final-114 + inet6/filter/OUTPUT -j limit-2334 + inet6/filter/OUTPUT -j logaccept-final-114 + inet6/filter/limit-2334 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1302 + inet6/filter/limit-2334 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-114 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-114 -j ACCEPT + inet6/filter/logdrop-1302 -j DROP + +Filter 2336 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2335 + inet/filter/INPUT -j limit-2335 + inet/filter/OUTPUT -j limit-2335 + inet/filter/limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1303 + inet/filter/limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1303 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1303 -j DROP + inet6/filter/FORWARD -j limit-2335 + inet6/filter/INPUT -j limit-2335 + inet6/filter/OUTPUT -j limit-2335 + inet6/filter/limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1303 + inet6/filter/limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1303 -j DROP + +Filter 2337 {"flow-limit":{"log":"ulog","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2336 + inet/filter/FORWARD -j logaccept-final-115 + inet/filter/INPUT -j limit-2336 + inet/filter/INPUT -j logaccept-final-115 + inet/filter/OUTPUT -j limit-2336 + inet/filter/OUTPUT -j logaccept-final-115 + inet/filter/limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1304 + inet/filter/limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-115 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-115 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-115 -j ACCEPT + inet/filter/logdrop-1304 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1304 -j DROP + inet6/filter/FORWARD -j limit-2336 + inet6/filter/FORWARD -j logaccept-final-115 + inet6/filter/INPUT -j limit-2336 + inet6/filter/INPUT -j logaccept-final-115 + inet6/filter/OUTPUT -j limit-2336 + inet6/filter/OUTPUT -j logaccept-final-115 + inet6/filter/limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1304 + inet6/filter/limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-115 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-115 -j ACCEPT + inet6/filter/logdrop-1304 -j DROP + +Filter 2338 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2337 + inet/filter/INPUT -j limit-2337 + inet/filter/OUTPUT -j limit-2337 + inet/filter/limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1305 + inet/filter/limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1305 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1305 -j DROP + inet6/filter/FORWARD -j limit-2337 + inet6/filter/INPUT -j limit-2337 + inet6/filter/OUTPUT -j limit-2337 + inet6/filter/limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1305 + inet6/filter/limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1305 -j DROP + +Filter 2339 {"flow-limit":{"log":"ulog","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2338 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2338 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2338 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1306 + inet/filter/limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1306 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1306 -j DROP + inet6/filter/FORWARD -j limit-2338 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2338 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2338 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1306 + inet6/filter/limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1306 -j DROP + +Filter 2340 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2339 + inet/filter/INPUT -j limit-2339 + inet/filter/OUTPUT -j limit-2339 + inet/filter/limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1307 + inet/filter/limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1307 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1307 -j DROP + inet6/filter/FORWARD -j limit-2339 + inet6/filter/INPUT -j limit-2339 + inet6/filter/OUTPUT -j limit-2339 + inet6/filter/limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1307 + inet6/filter/limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1307 -j DROP + +Filter 2341 {"flow-limit":{"log":"ulog","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2340 + inet/filter/FORWARD -j logaccept-final-116 + inet/filter/INPUT -j limit-2340 + inet/filter/INPUT -j logaccept-final-116 + inet/filter/OUTPUT -j limit-2340 + inet/filter/OUTPUT -j logaccept-final-116 + inet/filter/limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1308 + inet/filter/limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-116 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-116 -j ACCEPT + inet/filter/logdrop-1308 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1308 -j DROP + inet6/filter/FORWARD -j limit-2340 + inet6/filter/FORWARD -j logaccept-final-116 + inet6/filter/INPUT -j limit-2340 + inet6/filter/INPUT -j logaccept-final-116 + inet6/filter/OUTPUT -j limit-2340 + inet6/filter/OUTPUT -j logaccept-final-116 + inet6/filter/limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1308 + inet6/filter/limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-116 -j ACCEPT + inet6/filter/logdrop-1308 -j DROP + +Filter 2342 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2341 + inet/filter/INPUT -j limit-2341 + inet/filter/OUTPUT -j limit-2341 + inet/filter/limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1309 + inet/filter/limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1309 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1309 -j DROP + inet6/filter/FORWARD -j limit-2341 + inet6/filter/INPUT -j limit-2341 + inet6/filter/OUTPUT -j limit-2341 + inet6/filter/limit-2341 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1309 + inet6/filter/logdrop-1309 -j DROP + +Filter 2343 {"flow-limit":{"log":"ulog","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2342 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2342 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2342 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2342 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1310 + inet/filter/logdrop-1310 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1310 -j DROP + inet6/filter/FORWARD -j limit-2342 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2342 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2342 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2342 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1310 + inet6/filter/logdrop-1310 -j DROP + +Filter 2344 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2343 + inet/filter/INPUT -j limit-2343 + inet/filter/OUTPUT -j limit-2343 + inet/filter/limit-2343 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1311 + inet/filter/logdrop-1311 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1311 -j DROP + inet6/filter/FORWARD -j limit-2343 + inet6/filter/INPUT -j limit-2343 + inet6/filter/OUTPUT -j limit-2343 + inet6/filter/limit-2343 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1311 + inet6/filter/logdrop-1311 -j DROP + +Filter 2345 {"flow-limit":{"log":"ulog","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2344 + inet/filter/FORWARD -j logaccept-final-117 + inet/filter/INPUT -j limit-2344 + inet/filter/INPUT -j logaccept-final-117 + inet/filter/OUTPUT -j limit-2344 + inet/filter/OUTPUT -j logaccept-final-117 + inet/filter/limit-2344 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1312 + inet/filter/logaccept-final-117 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-117 -j ACCEPT + inet/filter/logdrop-1312 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1312 -j DROP + inet6/filter/FORWARD -j limit-2344 + inet6/filter/FORWARD -j logaccept-final-117 + inet6/filter/INPUT -j limit-2344 + inet6/filter/INPUT -j logaccept-final-117 + inet6/filter/OUTPUT -j limit-2344 + inet6/filter/OUTPUT -j logaccept-final-117 + inet6/filter/limit-2344 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1312 + inet6/filter/logaccept-final-117 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-117 -j ACCEPT + inet6/filter/logdrop-1312 -j DROP + +Filter 2346 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2345 + inet/filter/INPUT -j limit-2345 + inet/filter/OUTPUT -j limit-2345 + inet/filter/limit-2345 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1313 + inet/filter/limit-2345 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1313 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1313 -j DROP + inet6/filter/FORWARD -j limit-2345 + inet6/filter/INPUT -j limit-2345 + inet6/filter/OUTPUT -j limit-2345 + inet6/filter/limit-2345 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1313 + inet6/filter/limit-2345 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1313 -j DROP + +Filter 2347 {"flow-limit":{"log":"ulog","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2346 + inet/filter/FORWARD -j logaccept-final-118 + inet/filter/INPUT -j limit-2346 + inet/filter/INPUT -j logaccept-final-118 + inet/filter/OUTPUT -j limit-2346 + inet/filter/OUTPUT -j logaccept-final-118 + inet/filter/limit-2346 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1314 + inet/filter/logaccept-final-118 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-118 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-118 -j ACCEPT + inet/filter/logdrop-1314 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1314 -j DROP + inet6/filter/FORWARD -j limit-2346 + inet6/filter/FORWARD -j logaccept-final-118 + inet6/filter/INPUT -j limit-2346 + inet6/filter/INPUT -j logaccept-final-118 + inet6/filter/OUTPUT -j limit-2346 + inet6/filter/OUTPUT -j logaccept-final-118 + inet6/filter/limit-2346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1314 + inet6/filter/logaccept-final-118 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-118 -j ACCEPT + inet6/filter/logdrop-1314 -j DROP + +Filter 2348 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2347 + inet/filter/INPUT -j limit-2347 + inet/filter/OUTPUT -j limit-2347 + inet/filter/limit-2347 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1315 + inet/filter/limit-2347 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2347 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1315 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1315 -j DROP + inet6/filter/FORWARD -j limit-2347 + inet6/filter/INPUT -j limit-2347 + inet6/filter/OUTPUT -j limit-2347 + inet6/filter/limit-2347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1315 + inet6/filter/limit-2347 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1315 -j DROP + +Filter 2349 {"flow-limit":{"log":"ulog","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2348 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2348 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2348 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2348 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1316 + inet/filter/logdrop-1316 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1316 -j DROP + inet6/filter/FORWARD -j limit-2348 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2348 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2348 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1316 + inet6/filter/logdrop-1316 -j DROP + +Filter 2350 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2349 + inet/filter/INPUT -j limit-2349 + inet/filter/OUTPUT -j limit-2349 + inet/filter/limit-2349 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1317 + inet/filter/logdrop-1317 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1317 -j DROP + inet6/filter/FORWARD -j limit-2349 + inet6/filter/INPUT -j limit-2349 + inet6/filter/OUTPUT -j limit-2349 + inet6/filter/limit-2349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1317 + inet6/filter/logdrop-1317 -j DROP + +Filter 2351 {"flow-limit":{"log":"ulog","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2350 + inet/filter/FORWARD -j logaccept-final-119 + inet/filter/INPUT -j limit-2350 + inet/filter/INPUT -j logaccept-final-119 + inet/filter/OUTPUT -j limit-2350 + inet/filter/OUTPUT -j logaccept-final-119 + inet/filter/limit-2350 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1318 + inet/filter/logaccept-final-119 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-119 -j ACCEPT + inet/filter/logdrop-1318 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1318 -j DROP + inet6/filter/FORWARD -j limit-2350 + inet6/filter/FORWARD -j logaccept-final-119 + inet6/filter/INPUT -j limit-2350 + inet6/filter/INPUT -j logaccept-final-119 + inet6/filter/OUTPUT -j limit-2350 + inet6/filter/OUTPUT -j logaccept-final-119 + inet6/filter/limit-2350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1318 + inet6/filter/logaccept-final-119 -j ACCEPT + inet6/filter/logdrop-1318 -j DROP + +Filter 2352 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2351 + inet/filter/INPUT -j limit-2351 + inet/filter/OUTPUT -j limit-2351 + inet/filter/limit-2351 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1319 + inet/filter/limit-2351 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1319 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1319 -j DROP + inet6/filter/FORWARD -j limit-2351 + inet6/filter/INPUT -j limit-2351 + inet6/filter/OUTPUT -j limit-2351 + inet6/filter/limit-2351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1319 + inet6/filter/logdrop-1319 -j DROP + +Filter 2353 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2352 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2352 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2352 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1320 + inet/filter/limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1320 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1320 -j DROP + inet6/filter/FORWARD -j limit-2352 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2352 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2352 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1320 + inet6/filter/limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1320 -j DROP + +Filter 2354 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2353 + inet/filter/INPUT -j limit-2353 + inet/filter/OUTPUT -j limit-2353 + inet/filter/limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1321 + inet/filter/limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1321 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1321 -j DROP + inet6/filter/FORWARD -j limit-2353 + inet6/filter/INPUT -j limit-2353 + inet6/filter/OUTPUT -j limit-2353 + inet6/filter/limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1321 + inet6/filter/limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1321 -j DROP + +Filter 2355 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2354 + inet/filter/FORWARD -j logaccept-final-120 + inet/filter/INPUT -j limit-2354 + inet/filter/INPUT -j logaccept-final-120 + inet/filter/OUTPUT -j limit-2354 + inet/filter/OUTPUT -j logaccept-final-120 + inet/filter/limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1322 + inet/filter/limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-120 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-120 -j ACCEPT + inet/filter/logdrop-1322 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1322 -j DROP + inet6/filter/FORWARD -j limit-2354 + inet6/filter/FORWARD -j logaccept-final-120 + inet6/filter/INPUT -j limit-2354 + inet6/filter/INPUT -j logaccept-final-120 + inet6/filter/OUTPUT -j limit-2354 + inet6/filter/OUTPUT -j logaccept-final-120 + inet6/filter/limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1322 + inet6/filter/limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-120 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-120 -j ACCEPT + inet6/filter/logdrop-1322 -j DROP + +Filter 2356 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2355 + inet/filter/INPUT -j limit-2355 + inet/filter/OUTPUT -j limit-2355 + inet/filter/limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1323 + inet/filter/limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1323 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1323 -j DROP + inet6/filter/FORWARD -j limit-2355 + inet6/filter/INPUT -j limit-2355 + inet6/filter/OUTPUT -j limit-2355 + inet6/filter/limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1323 + inet6/filter/limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1323 -j DROP + +Filter 2357 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2356 + inet/filter/FORWARD -j logaccept-final-121 + inet/filter/INPUT -j limit-2356 + inet/filter/INPUT -j logaccept-final-121 + inet/filter/OUTPUT -j limit-2356 + inet/filter/OUTPUT -j logaccept-final-121 + inet/filter/limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1324 + inet/filter/limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-121 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-121 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-121 -j ACCEPT + inet/filter/logdrop-1324 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1324 -j DROP + inet6/filter/FORWARD -j limit-2356 + inet6/filter/FORWARD -j logaccept-final-121 + inet6/filter/INPUT -j limit-2356 + inet6/filter/INPUT -j logaccept-final-121 + inet6/filter/OUTPUT -j limit-2356 + inet6/filter/OUTPUT -j logaccept-final-121 + inet6/filter/limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1324 + inet6/filter/limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-121 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-121 -j ACCEPT + inet6/filter/logdrop-1324 -j DROP + +Filter 2358 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2357 + inet/filter/INPUT -j limit-2357 + inet/filter/OUTPUT -j limit-2357 + inet/filter/limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1325 + inet/filter/limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1325 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1325 -j DROP + inet6/filter/FORWARD -j limit-2357 + inet6/filter/INPUT -j limit-2357 + inet6/filter/OUTPUT -j limit-2357 + inet6/filter/limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1325 + inet6/filter/limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1325 -j DROP + +Filter 2359 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2358 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2358 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2358 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1326 + inet/filter/limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1326 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1326 -j DROP + inet6/filter/FORWARD -j limit-2358 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2358 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2358 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1326 + inet6/filter/limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1326 -j DROP + +Filter 2360 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2359 + inet/filter/INPUT -j limit-2359 + inet/filter/OUTPUT -j limit-2359 + inet/filter/limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1327 + inet/filter/limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1327 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1327 -j DROP + inet6/filter/FORWARD -j limit-2359 + inet6/filter/INPUT -j limit-2359 + inet6/filter/OUTPUT -j limit-2359 + inet6/filter/limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1327 + inet6/filter/limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1327 -j DROP + +Filter 2361 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2360 + inet/filter/FORWARD -j logaccept-final-122 + inet/filter/INPUT -j limit-2360 + inet/filter/INPUT -j logaccept-final-122 + inet/filter/OUTPUT -j limit-2360 + inet/filter/OUTPUT -j logaccept-final-122 + inet/filter/limit-2360 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1328 + inet/filter/limit-2360 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-122 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-122 -j ACCEPT + inet/filter/logdrop-1328 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1328 -j DROP + inet6/filter/FORWARD -j limit-2360 + inet6/filter/FORWARD -j logaccept-final-122 + inet6/filter/INPUT -j limit-2360 + inet6/filter/INPUT -j logaccept-final-122 + inet6/filter/OUTPUT -j limit-2360 + inet6/filter/OUTPUT -j logaccept-final-122 + inet6/filter/limit-2360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1328 + inet6/filter/limit-2360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-122 -j ACCEPT + inet6/filter/logdrop-1328 -j DROP + +Filter 2362 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2361 + inet/filter/INPUT -j limit-2361 + inet/filter/OUTPUT -j limit-2361 + inet/filter/limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1329 + inet/filter/limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1329 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1329 -j DROP + inet6/filter/FORWARD -j limit-2361 + inet6/filter/INPUT -j limit-2361 + inet6/filter/OUTPUT -j limit-2361 + inet6/filter/limit-2361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1329 + inet6/filter/logdrop-1329 -j DROP + +Filter 2363 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2362 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2362 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2362 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2362 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1330 + inet/filter/logdrop-1330 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1330 -j DROP + inet6/filter/FORWARD -j limit-2362 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2362 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2362 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1330 + inet6/filter/logdrop-1330 -j DROP + +Filter 2364 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2363 + inet/filter/INPUT -j limit-2363 + inet/filter/OUTPUT -j limit-2363 + inet/filter/limit-2363 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1331 + inet/filter/logdrop-1331 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1331 -j DROP + inet6/filter/FORWARD -j limit-2363 + inet6/filter/INPUT -j limit-2363 + inet6/filter/OUTPUT -j limit-2363 + inet6/filter/limit-2363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1331 + inet6/filter/logdrop-1331 -j DROP + +Filter 2365 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2364 + inet/filter/FORWARD -j logaccept-final-123 + inet/filter/INPUT -j limit-2364 + inet/filter/INPUT -j logaccept-final-123 + inet/filter/OUTPUT -j limit-2364 + inet/filter/OUTPUT -j logaccept-final-123 + inet/filter/limit-2364 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1332 + inet/filter/logaccept-final-123 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-123 -j ACCEPT + inet/filter/logdrop-1332 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1332 -j DROP + inet6/filter/FORWARD -j limit-2364 + inet6/filter/FORWARD -j logaccept-final-123 + inet6/filter/INPUT -j limit-2364 + inet6/filter/INPUT -j logaccept-final-123 + inet6/filter/OUTPUT -j limit-2364 + inet6/filter/OUTPUT -j logaccept-final-123 + inet6/filter/limit-2364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1332 + inet6/filter/logaccept-final-123 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-123 -j ACCEPT + inet6/filter/logdrop-1332 -j DROP + +Filter 2366 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2365 + inet/filter/INPUT -j limit-2365 + inet/filter/OUTPUT -j limit-2365 + inet/filter/limit-2365 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1333 + inet/filter/limit-2365 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1333 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1333 -j DROP + inet6/filter/FORWARD -j limit-2365 + inet6/filter/INPUT -j limit-2365 + inet6/filter/OUTPUT -j limit-2365 + inet6/filter/limit-2365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1333 + inet6/filter/limit-2365 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1333 -j DROP + +Filter 2367 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2366 + inet/filter/FORWARD -j logaccept-final-124 + inet/filter/INPUT -j limit-2366 + inet/filter/INPUT -j logaccept-final-124 + inet/filter/OUTPUT -j limit-2366 + inet/filter/OUTPUT -j logaccept-final-124 + inet/filter/limit-2366 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1334 + inet/filter/logaccept-final-124 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-124 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-124 -j ACCEPT + inet/filter/logdrop-1334 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1334 -j DROP + inet6/filter/FORWARD -j limit-2366 + inet6/filter/FORWARD -j logaccept-final-124 + inet6/filter/INPUT -j limit-2366 + inet6/filter/INPUT -j logaccept-final-124 + inet6/filter/OUTPUT -j limit-2366 + inet6/filter/OUTPUT -j logaccept-final-124 + inet6/filter/limit-2366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1334 + inet6/filter/logaccept-final-124 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-124 -j ACCEPT + inet6/filter/logdrop-1334 -j DROP + +Filter 2368 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2367 + inet/filter/INPUT -j limit-2367 + inet/filter/OUTPUT -j limit-2367 + inet/filter/limit-2367 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1335 + inet/filter/limit-2367 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2367 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1335 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1335 -j DROP + inet6/filter/FORWARD -j limit-2367 + inet6/filter/INPUT -j limit-2367 + inet6/filter/OUTPUT -j limit-2367 + inet6/filter/limit-2367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1335 + inet6/filter/limit-2367 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1335 -j DROP + +Filter 2369 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2368 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2368 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2368 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2368 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1336 + inet/filter/logdrop-1336 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1336 -j DROP + inet6/filter/FORWARD -j limit-2368 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2368 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2368 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1336 + inet6/filter/logdrop-1336 -j DROP + +Filter 2370 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2369 + inet/filter/INPUT -j limit-2369 + inet/filter/OUTPUT -j limit-2369 + inet/filter/limit-2369 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1337 + inet/filter/logdrop-1337 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1337 -j DROP + inet6/filter/FORWARD -j limit-2369 + inet6/filter/INPUT -j limit-2369 + inet6/filter/OUTPUT -j limit-2369 + inet6/filter/limit-2369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1337 + inet6/filter/logdrop-1337 -j DROP + +Filter 2371 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2370 + inet/filter/FORWARD -j logaccept-final-125 + inet/filter/INPUT -j limit-2370 + inet/filter/INPUT -j logaccept-final-125 + inet/filter/OUTPUT -j limit-2370 + inet/filter/OUTPUT -j logaccept-final-125 + inet/filter/limit-2370 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1338 + inet/filter/logaccept-final-125 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-125 -j ACCEPT + inet/filter/logdrop-1338 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1338 -j DROP + inet6/filter/FORWARD -j limit-2370 + inet6/filter/FORWARD -j logaccept-final-125 + inet6/filter/INPUT -j limit-2370 + inet6/filter/INPUT -j logaccept-final-125 + inet6/filter/OUTPUT -j limit-2370 + inet6/filter/OUTPUT -j logaccept-final-125 + inet6/filter/limit-2370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1338 + inet6/filter/logaccept-final-125 -j ACCEPT + inet6/filter/logdrop-1338 -j DROP + +Filter 2372 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2371 + inet/filter/INPUT -j limit-2371 + inet/filter/OUTPUT -j limit-2371 + inet/filter/limit-2371 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1339 + inet/filter/limit-2371 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1339 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1339 -j DROP + inet6/filter/FORWARD -j limit-2371 + inet6/filter/INPUT -j limit-2371 + inet6/filter/OUTPUT -j limit-2371 + inet6/filter/limit-2371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1339 + inet6/filter/logdrop-1339 -j DROP + +Filter 2373 {"flow-limit":{"log":"ulog","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2372 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2372 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2372 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1340 + inet/filter/limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1340 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1340 -j DROP + inet6/filter/FORWARD -j limit-2372 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2372 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2372 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2372 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1340 + inet6/filter/limit-2372 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1340 -j DROP + +Filter 2374 {"action":"pass","flow-limit":{"log":"ulog","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2373 + inet/filter/INPUT -j limit-2373 + inet/filter/OUTPUT -j limit-2373 + inet/filter/limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1341 + inet/filter/limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1341 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1341 -j DROP + inet6/filter/FORWARD -j limit-2373 + inet6/filter/INPUT -j limit-2373 + inet6/filter/OUTPUT -j limit-2373 + inet6/filter/limit-2373 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1341 + inet6/filter/limit-2373 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1341 -j DROP + +Filter 2375 {"flow-limit":{"log":"ulog","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2374 + inet/filter/FORWARD -j logaccept-final-126 + inet/filter/INPUT -j limit-2374 + inet/filter/INPUT -j logaccept-final-126 + inet/filter/OUTPUT -j limit-2374 + inet/filter/OUTPUT -j logaccept-final-126 + inet/filter/limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1342 + inet/filter/limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-126 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-126 -j ACCEPT + inet/filter/logdrop-1342 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1342 -j DROP + inet6/filter/FORWARD -j limit-2374 + inet6/filter/FORWARD -j logaccept-final-126 + inet6/filter/INPUT -j limit-2374 + inet6/filter/INPUT -j logaccept-final-126 + inet6/filter/OUTPUT -j limit-2374 + inet6/filter/OUTPUT -j logaccept-final-126 + inet6/filter/limit-2374 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1342 + inet6/filter/limit-2374 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-126 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-126 -j ACCEPT + inet6/filter/logdrop-1342 -j DROP + +Filter 2376 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2375 + inet/filter/INPUT -j limit-2375 + inet/filter/OUTPUT -j limit-2375 + inet/filter/limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1343 + inet/filter/limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1343 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1343 -j DROP + inet6/filter/FORWARD -j limit-2375 + inet6/filter/INPUT -j limit-2375 + inet6/filter/OUTPUT -j limit-2375 + inet6/filter/limit-2375 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1343 + inet6/filter/limit-2375 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1343 -j DROP + +Filter 2377 {"flow-limit":{"log":"ulog","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2376 + inet/filter/FORWARD -j logaccept-final-127 + inet/filter/INPUT -j limit-2376 + inet/filter/INPUT -j logaccept-final-127 + inet/filter/OUTPUT -j limit-2376 + inet/filter/OUTPUT -j logaccept-final-127 + inet/filter/limit-2376 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1344 + inet/filter/limit-2376 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-127 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-127 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-127 -j ACCEPT + inet/filter/logdrop-1344 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1344 -j DROP + inet6/filter/FORWARD -j limit-2376 + inet6/filter/FORWARD -j logaccept-final-127 + inet6/filter/INPUT -j limit-2376 + inet6/filter/INPUT -j logaccept-final-127 + inet6/filter/OUTPUT -j limit-2376 + inet6/filter/OUTPUT -j logaccept-final-127 + inet6/filter/limit-2376 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1344 + inet6/filter/limit-2376 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-127 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-127 -j ACCEPT + inet6/filter/logdrop-1344 -j DROP + +Filter 2378 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2377 + inet/filter/INPUT -j limit-2377 + inet/filter/OUTPUT -j limit-2377 + inet/filter/limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1345 + inet/filter/limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1345 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1345 -j DROP + inet6/filter/FORWARD -j limit-2377 + inet6/filter/INPUT -j limit-2377 + inet6/filter/OUTPUT -j limit-2377 + inet6/filter/limit-2377 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1345 + inet6/filter/limit-2377 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1345 -j DROP + +Filter 2379 {"flow-limit":{"log":"ulog","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2378 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2378 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2378 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1346 + inet/filter/limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1346 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1346 -j DROP + inet6/filter/FORWARD -j limit-2378 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2378 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2378 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2378 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1346 + inet6/filter/limit-2378 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1346 -j DROP + +Filter 2380 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2379 + inet/filter/INPUT -j limit-2379 + inet/filter/OUTPUT -j limit-2379 + inet/filter/limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1347 + inet/filter/limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1347 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1347 -j DROP + inet6/filter/FORWARD -j limit-2379 + inet6/filter/INPUT -j limit-2379 + inet6/filter/OUTPUT -j limit-2379 + inet6/filter/limit-2379 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1347 + inet6/filter/limit-2379 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1347 -j DROP + +Filter 2381 {"flow-limit":{"log":"ulog","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2380 + inet/filter/FORWARD -j logaccept-final-128 + inet/filter/INPUT -j limit-2380 + inet/filter/INPUT -j logaccept-final-128 + inet/filter/OUTPUT -j limit-2380 + inet/filter/OUTPUT -j logaccept-final-128 + inet/filter/limit-2380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1348 + inet/filter/limit-2380 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-128 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-128 -j ACCEPT + inet/filter/logdrop-1348 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1348 -j DROP + inet6/filter/FORWARD -j limit-2380 + inet6/filter/FORWARD -j logaccept-final-128 + inet6/filter/INPUT -j limit-2380 + inet6/filter/INPUT -j logaccept-final-128 + inet6/filter/OUTPUT -j limit-2380 + inet6/filter/OUTPUT -j logaccept-final-128 + inet6/filter/limit-2380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1348 + inet6/filter/limit-2380 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-128 -j ACCEPT + inet6/filter/logdrop-1348 -j DROP + +Filter 2382 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2381 + inet/filter/INPUT -j limit-2381 + inet/filter/OUTPUT -j limit-2381 + inet/filter/limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1349 + inet/filter/limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1349 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1349 -j DROP + inet6/filter/FORWARD -j limit-2381 + inet6/filter/INPUT -j limit-2381 + inet6/filter/OUTPUT -j limit-2381 + inet6/filter/limit-2381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1349 + inet6/filter/logdrop-1349 -j DROP + +Filter 2383 {"flow-limit":{"log":"ulog","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2382 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2382 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2382 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2382 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1350 + inet/filter/logdrop-1350 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1350 -j DROP + inet6/filter/FORWARD -j limit-2382 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2382 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2382 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2382 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1350 + inet6/filter/logdrop-1350 -j DROP + +Filter 2384 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2383 + inet/filter/INPUT -j limit-2383 + inet/filter/OUTPUT -j limit-2383 + inet/filter/limit-2383 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1351 + inet/filter/logdrop-1351 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1351 -j DROP + inet6/filter/FORWARD -j limit-2383 + inet6/filter/INPUT -j limit-2383 + inet6/filter/OUTPUT -j limit-2383 + inet6/filter/limit-2383 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1351 + inet6/filter/logdrop-1351 -j DROP + +Filter 2385 {"flow-limit":{"log":"ulog","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2384 + inet/filter/FORWARD -j logaccept-final-129 + inet/filter/INPUT -j limit-2384 + inet/filter/INPUT -j logaccept-final-129 + inet/filter/OUTPUT -j limit-2384 + inet/filter/OUTPUT -j logaccept-final-129 + inet/filter/limit-2384 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1352 + inet/filter/logaccept-final-129 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-129 -j ACCEPT + inet/filter/logdrop-1352 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1352 -j DROP + inet6/filter/FORWARD -j limit-2384 + inet6/filter/FORWARD -j logaccept-final-129 + inet6/filter/INPUT -j limit-2384 + inet6/filter/INPUT -j logaccept-final-129 + inet6/filter/OUTPUT -j limit-2384 + inet6/filter/OUTPUT -j logaccept-final-129 + inet6/filter/limit-2384 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1352 + inet6/filter/logaccept-final-129 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-129 -j ACCEPT + inet6/filter/logdrop-1352 -j DROP + +Filter 2386 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2385 + inet/filter/INPUT -j limit-2385 + inet/filter/OUTPUT -j limit-2385 + inet/filter/limit-2385 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1353 + inet/filter/limit-2385 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1353 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1353 -j DROP + inet6/filter/FORWARD -j limit-2385 + inet6/filter/INPUT -j limit-2385 + inet6/filter/OUTPUT -j limit-2385 + inet6/filter/limit-2385 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1353 + inet6/filter/limit-2385 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1353 -j DROP + +Filter 2387 {"flow-limit":{"log":"ulog","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2386 + inet/filter/FORWARD -j logaccept-final-130 + inet/filter/INPUT -j limit-2386 + inet/filter/INPUT -j logaccept-final-130 + inet/filter/OUTPUT -j limit-2386 + inet/filter/OUTPUT -j logaccept-final-130 + inet/filter/limit-2386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1354 + inet/filter/logaccept-final-130 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-130 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-130 -j ACCEPT + inet/filter/logdrop-1354 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1354 -j DROP + inet6/filter/FORWARD -j limit-2386 + inet6/filter/FORWARD -j logaccept-final-130 + inet6/filter/INPUT -j limit-2386 + inet6/filter/INPUT -j logaccept-final-130 + inet6/filter/OUTPUT -j limit-2386 + inet6/filter/OUTPUT -j logaccept-final-130 + inet6/filter/limit-2386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1354 + inet6/filter/logaccept-final-130 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-130 -j ACCEPT + inet6/filter/logdrop-1354 -j DROP + +Filter 2388 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2387 + inet/filter/INPUT -j limit-2387 + inet/filter/OUTPUT -j limit-2387 + inet/filter/limit-2387 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1355 + inet/filter/limit-2387 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2387 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1355 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1355 -j DROP + inet6/filter/FORWARD -j limit-2387 + inet6/filter/INPUT -j limit-2387 + inet6/filter/OUTPUT -j limit-2387 + inet6/filter/limit-2387 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1355 + inet6/filter/limit-2387 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1355 -j DROP + +Filter 2389 {"flow-limit":{"log":"ulog","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2388 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2388 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2388 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1356 + inet/filter/logdrop-1356 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1356 -j DROP + inet6/filter/FORWARD -j limit-2388 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2388 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2388 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1356 + inet6/filter/logdrop-1356 -j DROP + +Filter 2390 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2389 + inet/filter/INPUT -j limit-2389 + inet/filter/OUTPUT -j limit-2389 + inet/filter/limit-2389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1357 + inet/filter/logdrop-1357 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1357 -j DROP + inet6/filter/FORWARD -j limit-2389 + inet6/filter/INPUT -j limit-2389 + inet6/filter/OUTPUT -j limit-2389 + inet6/filter/limit-2389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1357 + inet6/filter/logdrop-1357 -j DROP + +Filter 2391 {"flow-limit":{"log":"ulog","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2390 + inet/filter/FORWARD -j logaccept-final-131 + inet/filter/INPUT -j limit-2390 + inet/filter/INPUT -j logaccept-final-131 + inet/filter/OUTPUT -j limit-2390 + inet/filter/OUTPUT -j logaccept-final-131 + inet/filter/limit-2390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1358 + inet/filter/logaccept-final-131 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-131 -j ACCEPT + inet/filter/logdrop-1358 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1358 -j DROP + inet6/filter/FORWARD -j limit-2390 + inet6/filter/FORWARD -j logaccept-final-131 + inet6/filter/INPUT -j limit-2390 + inet6/filter/INPUT -j logaccept-final-131 + inet6/filter/OUTPUT -j limit-2390 + inet6/filter/OUTPUT -j logaccept-final-131 + inet6/filter/limit-2390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1358 + inet6/filter/logaccept-final-131 -j ACCEPT + inet6/filter/logdrop-1358 -j DROP + +Filter 2392 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2391 + inet/filter/INPUT -j limit-2391 + inet/filter/OUTPUT -j limit-2391 + inet/filter/limit-2391 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1359 + inet/filter/limit-2391 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1359 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1359 -j DROP + inet6/filter/FORWARD -j limit-2391 + inet6/filter/INPUT -j limit-2391 + inet6/filter/OUTPUT -j limit-2391 + inet6/filter/limit-2391 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1359 + inet6/filter/logdrop-1359 -j DROP + +Filter 2393 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2392 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2392 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2392 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2392 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1360 + inet/filter/limit-2392 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1360 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1360 -j DROP + inet6/filter/FORWARD -j limit-2392 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2392 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2392 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2392 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1360 + inet6/filter/limit-2392 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1360 -j DROP + +Filter 2394 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2393 + inet/filter/INPUT -j limit-2393 + inet/filter/OUTPUT -j limit-2393 + inet/filter/limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1361 + inet/filter/limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1361 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1361 -j DROP + inet6/filter/FORWARD -j limit-2393 + inet6/filter/INPUT -j limit-2393 + inet6/filter/OUTPUT -j limit-2393 + inet6/filter/limit-2393 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1361 + inet6/filter/limit-2393 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1361 -j DROP + +Filter 2395 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2394 + inet/filter/FORWARD -j logaccept-final-132 + inet/filter/INPUT -j limit-2394 + inet/filter/INPUT -j logaccept-final-132 + inet/filter/OUTPUT -j limit-2394 + inet/filter/OUTPUT -j logaccept-final-132 + inet/filter/limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1362 + inet/filter/limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-132 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-132 -j ACCEPT + inet/filter/logdrop-1362 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1362 -j DROP + inet6/filter/FORWARD -j limit-2394 + inet6/filter/FORWARD -j logaccept-final-132 + inet6/filter/INPUT -j limit-2394 + inet6/filter/INPUT -j logaccept-final-132 + inet6/filter/OUTPUT -j limit-2394 + inet6/filter/OUTPUT -j logaccept-final-132 + inet6/filter/limit-2394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1362 + inet6/filter/limit-2394 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-132 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-132 -j ACCEPT + inet6/filter/logdrop-1362 -j DROP + +Filter 2396 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2395 + inet/filter/INPUT -j limit-2395 + inet/filter/OUTPUT -j limit-2395 + inet/filter/limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1363 + inet/filter/limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1363 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1363 -j DROP + inet6/filter/FORWARD -j limit-2395 + inet6/filter/INPUT -j limit-2395 + inet6/filter/OUTPUT -j limit-2395 + inet6/filter/limit-2395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1363 + inet6/filter/limit-2395 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1363 -j DROP + +Filter 2397 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2396 + inet/filter/FORWARD -j logaccept-final-133 + inet/filter/INPUT -j limit-2396 + inet/filter/INPUT -j logaccept-final-133 + inet/filter/OUTPUT -j limit-2396 + inet/filter/OUTPUT -j logaccept-final-133 + inet/filter/limit-2396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1364 + inet/filter/limit-2396 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-133 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-133 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-133 -j ACCEPT + inet/filter/logdrop-1364 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1364 -j DROP + inet6/filter/FORWARD -j limit-2396 + inet6/filter/FORWARD -j logaccept-final-133 + inet6/filter/INPUT -j limit-2396 + inet6/filter/INPUT -j logaccept-final-133 + inet6/filter/OUTPUT -j limit-2396 + inet6/filter/OUTPUT -j logaccept-final-133 + inet6/filter/limit-2396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1364 + inet6/filter/limit-2396 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-133 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-133 -j ACCEPT + inet6/filter/logdrop-1364 -j DROP + +Filter 2398 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2397 + inet/filter/INPUT -j limit-2397 + inet/filter/OUTPUT -j limit-2397 + inet/filter/limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1365 + inet/filter/limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1365 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1365 -j DROP + inet6/filter/FORWARD -j limit-2397 + inet6/filter/INPUT -j limit-2397 + inet6/filter/OUTPUT -j limit-2397 + inet6/filter/limit-2397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1365 + inet6/filter/limit-2397 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1365 -j DROP + +Filter 2399 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2398 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2398 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2398 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1366 + inet/filter/limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1366 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1366 -j DROP + inet6/filter/FORWARD -j limit-2398 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2398 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2398 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2398 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1366 + inet6/filter/limit-2398 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1366 -j DROP + +Filter 2400 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2399 + inet/filter/INPUT -j limit-2399 + inet/filter/OUTPUT -j limit-2399 + inet/filter/limit-2399 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1367 + inet/filter/limit-2399 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1367 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1367 -j DROP + inet6/filter/FORWARD -j limit-2399 + inet6/filter/INPUT -j limit-2399 + inet6/filter/OUTPUT -j limit-2399 + inet6/filter/limit-2399 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1367 + inet6/filter/limit-2399 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1367 -j DROP + +Filter 2401 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2400 + inet/filter/FORWARD -j logaccept-final-134 + inet/filter/INPUT -j limit-2400 + inet/filter/INPUT -j logaccept-final-134 + inet/filter/OUTPUT -j limit-2400 + inet/filter/OUTPUT -j logaccept-final-134 + inet/filter/limit-2400 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1368 + inet/filter/limit-2400 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-134 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-134 -j ACCEPT + inet/filter/logdrop-1368 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1368 -j DROP + inet6/filter/FORWARD -j limit-2400 + inet6/filter/FORWARD -j logaccept-final-134 + inet6/filter/INPUT -j limit-2400 + inet6/filter/INPUT -j logaccept-final-134 + inet6/filter/OUTPUT -j limit-2400 + inet6/filter/OUTPUT -j logaccept-final-134 + inet6/filter/limit-2400 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1368 + inet6/filter/limit-2400 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-134 -j ACCEPT + inet6/filter/logdrop-1368 -j DROP + +Filter 2402 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2401 + inet/filter/INPUT -j limit-2401 + inet/filter/OUTPUT -j limit-2401 + inet/filter/limit-2401 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1369 + inet/filter/limit-2401 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1369 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1369 -j DROP + inet6/filter/FORWARD -j limit-2401 + inet6/filter/INPUT -j limit-2401 + inet6/filter/OUTPUT -j limit-2401 + inet6/filter/limit-2401 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1369 + inet6/filter/logdrop-1369 -j DROP + +Filter 2403 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2402 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2402 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2402 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1370 + inet/filter/logdrop-1370 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1370 -j DROP + inet6/filter/FORWARD -j limit-2402 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2402 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2402 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1370 + inet6/filter/logdrop-1370 -j DROP + +Filter 2404 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2403 + inet/filter/INPUT -j limit-2403 + inet/filter/OUTPUT -j limit-2403 + inet/filter/limit-2403 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1371 + inet/filter/logdrop-1371 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1371 -j DROP + inet6/filter/FORWARD -j limit-2403 + inet6/filter/INPUT -j limit-2403 + inet6/filter/OUTPUT -j limit-2403 + inet6/filter/limit-2403 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1371 + inet6/filter/logdrop-1371 -j DROP + +Filter 2405 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2404 + inet/filter/FORWARD -j logaccept-final-135 + inet/filter/INPUT -j limit-2404 + inet/filter/INPUT -j logaccept-final-135 + inet/filter/OUTPUT -j limit-2404 + inet/filter/OUTPUT -j logaccept-final-135 + inet/filter/limit-2404 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1372 + inet/filter/logaccept-final-135 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-135 -j ACCEPT + inet/filter/logdrop-1372 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1372 -j DROP + inet6/filter/FORWARD -j limit-2404 + inet6/filter/FORWARD -j logaccept-final-135 + inet6/filter/INPUT -j limit-2404 + inet6/filter/INPUT -j logaccept-final-135 + inet6/filter/OUTPUT -j limit-2404 + inet6/filter/OUTPUT -j logaccept-final-135 + inet6/filter/limit-2404 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1372 + inet6/filter/logaccept-final-135 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-135 -j ACCEPT + inet6/filter/logdrop-1372 -j DROP + +Filter 2406 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2405 + inet/filter/INPUT -j limit-2405 + inet/filter/OUTPUT -j limit-2405 + inet/filter/limit-2405 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1373 + inet/filter/limit-2405 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1373 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1373 -j DROP + inet6/filter/FORWARD -j limit-2405 + inet6/filter/INPUT -j limit-2405 + inet6/filter/OUTPUT -j limit-2405 + inet6/filter/limit-2405 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1373 + inet6/filter/limit-2405 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1373 -j DROP + +Filter 2407 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2406 + inet/filter/FORWARD -j logaccept-final-136 + inet/filter/INPUT -j limit-2406 + inet/filter/INPUT -j logaccept-final-136 + inet/filter/OUTPUT -j limit-2406 + inet/filter/OUTPUT -j logaccept-final-136 + inet/filter/limit-2406 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1374 + inet/filter/logaccept-final-136 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-136 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-136 -j ACCEPT + inet/filter/logdrop-1374 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1374 -j DROP + inet6/filter/FORWARD -j limit-2406 + inet6/filter/FORWARD -j logaccept-final-136 + inet6/filter/INPUT -j limit-2406 + inet6/filter/INPUT -j logaccept-final-136 + inet6/filter/OUTPUT -j limit-2406 + inet6/filter/OUTPUT -j logaccept-final-136 + inet6/filter/limit-2406 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1374 + inet6/filter/logaccept-final-136 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-136 -j ACCEPT + inet6/filter/logdrop-1374 -j DROP + +Filter 2408 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2407 + inet/filter/INPUT -j limit-2407 + inet/filter/OUTPUT -j limit-2407 + inet/filter/limit-2407 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1375 + inet/filter/limit-2407 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2407 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1375 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1375 -j DROP + inet6/filter/FORWARD -j limit-2407 + inet6/filter/INPUT -j limit-2407 + inet6/filter/OUTPUT -j limit-2407 + inet6/filter/limit-2407 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1375 + inet6/filter/limit-2407 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1375 -j DROP + +Filter 2409 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2408 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2408 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2408 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2408 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1376 + inet/filter/logdrop-1376 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1376 -j DROP + inet6/filter/FORWARD -j limit-2408 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2408 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2408 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2408 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1376 + inet6/filter/logdrop-1376 -j DROP + +Filter 2410 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2409 + inet/filter/INPUT -j limit-2409 + inet/filter/OUTPUT -j limit-2409 + inet/filter/limit-2409 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1377 + inet/filter/logdrop-1377 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1377 -j DROP + inet6/filter/FORWARD -j limit-2409 + inet6/filter/INPUT -j limit-2409 + inet6/filter/OUTPUT -j limit-2409 + inet6/filter/limit-2409 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1377 + inet6/filter/logdrop-1377 -j DROP + +Filter 2411 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2410 + inet/filter/FORWARD -j logaccept-final-137 + inet/filter/INPUT -j limit-2410 + inet/filter/INPUT -j logaccept-final-137 + inet/filter/OUTPUT -j limit-2410 + inet/filter/OUTPUT -j logaccept-final-137 + inet/filter/limit-2410 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1378 + inet/filter/logaccept-final-137 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-137 -j ACCEPT + inet/filter/logdrop-1378 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1378 -j DROP + inet6/filter/FORWARD -j limit-2410 + inet6/filter/FORWARD -j logaccept-final-137 + inet6/filter/INPUT -j limit-2410 + inet6/filter/INPUT -j logaccept-final-137 + inet6/filter/OUTPUT -j limit-2410 + inet6/filter/OUTPUT -j logaccept-final-137 + inet6/filter/limit-2410 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1378 + inet6/filter/logaccept-final-137 -j ACCEPT + inet6/filter/logdrop-1378 -j DROP + +Filter 2412 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2411 + inet/filter/INPUT -j limit-2411 + inet/filter/OUTPUT -j limit-2411 + inet/filter/limit-2411 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1379 + inet/filter/limit-2411 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1379 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1379 -j DROP + inet6/filter/FORWARD -j limit-2411 + inet6/filter/INPUT -j limit-2411 + inet6/filter/OUTPUT -j limit-2411 + inet6/filter/limit-2411 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1379 + inet6/filter/logdrop-1379 -j DROP + +Filter 2413 {"flow-limit":{"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2412 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2412 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2412 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2412 -m recent --name limit-2412 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2412 -m recent --name limit-2412 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2412 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2412 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2412 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2412 -m recent --name limit-2412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2412 -m recent --name limit-2412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2414 {"action":"pass","flow-limit":{"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2413 + inet/filter/INPUT -j limit-2413 + inet/filter/OUTPUT -j limit-2413 + inet/filter/limit-2413 -m recent --name limit-2413 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2413 -m recent --name limit-2413 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2413 + inet6/filter/INPUT -j limit-2413 + inet6/filter/OUTPUT -j limit-2413 + inet6/filter/limit-2413 -m recent --name limit-2413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2413 -m recent --name limit-2413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2415 {"flow-limit":{"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2414 + inet/filter/FORWARD -j logaccept-final-138 + inet/filter/INPUT -j limit-2414 + inet/filter/INPUT -j logaccept-final-138 + inet/filter/OUTPUT -j limit-2414 + inet/filter/OUTPUT -j logaccept-final-138 + inet/filter/limit-2414 -m recent --name limit-2414 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2414 -m recent --name limit-2414 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-138 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-138 -j ACCEPT + inet6/filter/FORWARD -j limit-2414 + inet6/filter/FORWARD -j logaccept-final-138 + inet6/filter/INPUT -j limit-2414 + inet6/filter/INPUT -j logaccept-final-138 + inet6/filter/OUTPUT -j limit-2414 + inet6/filter/OUTPUT -j logaccept-final-138 + inet6/filter/limit-2414 -m recent --name limit-2414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2414 -m recent --name limit-2414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-138 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-138 -j ACCEPT + +Filter 2416 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2415 + inet/filter/INPUT -j limit-2415 + inet/filter/OUTPUT -j limit-2415 + inet/filter/limit-2415 -m recent --name limit-2415 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2415 -m recent --name limit-2415 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2415 + inet6/filter/INPUT -j limit-2415 + inet6/filter/OUTPUT -j limit-2415 + inet6/filter/limit-2415 -m recent --name limit-2415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2415 -m recent --name limit-2415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 2417 {"flow-limit":{"interval":5,"log":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2416 + inet/filter/FORWARD -j logaccept-final-139 + inet/filter/INPUT -j limit-2416 + inet/filter/INPUT -j logaccept-final-139 + inet/filter/OUTPUT -j limit-2416 + inet/filter/OUTPUT -j logaccept-final-139 + inet/filter/limit-2416 -m recent --name limit-2416 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2416 -m recent --name limit-2416 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-139 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-139 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-139 -j ACCEPT + inet6/filter/FORWARD -j limit-2416 + inet6/filter/FORWARD -j logaccept-final-139 + inet6/filter/INPUT -j limit-2416 + inet6/filter/INPUT -j logaccept-final-139 + inet6/filter/OUTPUT -j limit-2416 + inet6/filter/OUTPUT -j logaccept-final-139 + inet6/filter/limit-2416 -m recent --name limit-2416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2416 -m recent --name limit-2416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-139 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-139 -j ACCEPT + +Filter 2418 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2417 + inet/filter/INPUT -j limit-2417 + inet/filter/OUTPUT -j limit-2417 + inet/filter/limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2417 + inet6/filter/INPUT -j limit-2417 + inet6/filter/OUTPUT -j limit-2417 + inet6/filter/limit-2417 -m recent --name limit-2417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2417 -m recent --name limit-2417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 2419 {"flow-limit":{"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2418 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2418 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2418 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2418 -m recent --name limit-2418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2418 -m recent --name limit-2418 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2418 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2418 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2418 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2418 -m recent --name limit-2418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2418 -m recent --name limit-2418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2420 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2419 + inet/filter/INPUT -j limit-2419 + inet/filter/OUTPUT -j limit-2419 + inet/filter/limit-2419 -m recent --name limit-2419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2419 -m recent --name limit-2419 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2419 + inet6/filter/INPUT -j limit-2419 + inet6/filter/OUTPUT -j limit-2419 + inet6/filter/limit-2419 -m recent --name limit-2419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2419 -m recent --name limit-2419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2421 {"flow-limit":{"interval":5,"log":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2420 + inet/filter/FORWARD -j logaccept-final-140 + inet/filter/INPUT -j limit-2420 + inet/filter/INPUT -j logaccept-final-140 + inet/filter/OUTPUT -j limit-2420 + inet/filter/OUTPUT -j logaccept-final-140 + inet/filter/limit-2420 -m recent --name limit-2420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2420 -m recent --name limit-2420 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-140 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-140 -j ACCEPT + inet6/filter/FORWARD -j limit-2420 + inet6/filter/FORWARD -j logaccept-final-140 + inet6/filter/INPUT -j limit-2420 + inet6/filter/INPUT -j logaccept-final-140 + inet6/filter/OUTPUT -j limit-2420 + inet6/filter/OUTPUT -j logaccept-final-140 + inet6/filter/limit-2420 -m recent --name limit-2420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2420 -m recent --name limit-2420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-140 -j ACCEPT + +Filter 2422 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2421 + inet/filter/INPUT -j limit-2421 + inet/filter/OUTPUT -j limit-2421 + inet/filter/limit-2421 -m recent --name limit-2421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2421 -m recent --name limit-2421 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2421 + inet6/filter/INPUT -j limit-2421 + inet6/filter/OUTPUT -j limit-2421 + inet6/filter/limit-2421 -m recent --name limit-2421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 2423 {"flow-limit":{"interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2422 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2422 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2422 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2422 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2422 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2422 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2424 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2423 + inet/filter/INPUT -j limit-2423 + inet/filter/OUTPUT -j limit-2423 + inet/filter/limit-2423 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2423 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2423 + inet6/filter/INPUT -j limit-2423 + inet6/filter/OUTPUT -j limit-2423 + inet6/filter/limit-2423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2425 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2424 + inet/filter/FORWARD -j logaccept-final-141 + inet/filter/INPUT -j limit-2424 + inet/filter/INPUT -j logaccept-final-141 + inet/filter/OUTPUT -j limit-2424 + inet/filter/OUTPUT -j logaccept-final-141 + inet/filter/limit-2424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2424 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-141 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-141 -j ACCEPT + inet6/filter/FORWARD -j limit-2424 + inet6/filter/FORWARD -j logaccept-final-141 + inet6/filter/INPUT -j limit-2424 + inet6/filter/INPUT -j logaccept-final-141 + inet6/filter/OUTPUT -j limit-2424 + inet6/filter/OUTPUT -j logaccept-final-141 + inet6/filter/limit-2424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-141 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-141 -j ACCEPT + +Filter 2426 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2425 + inet/filter/INPUT -j limit-2425 + inet/filter/OUTPUT -j limit-2425 + inet/filter/limit-2425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2425 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2425 + inet6/filter/INPUT -j limit-2425 + inet6/filter/OUTPUT -j limit-2425 + inet6/filter/limit-2425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 2427 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2426 + inet/filter/FORWARD -j logaccept-final-142 + inet/filter/INPUT -j limit-2426 + inet/filter/INPUT -j logaccept-final-142 + inet/filter/OUTPUT -j limit-2426 + inet/filter/OUTPUT -j logaccept-final-142 + inet/filter/limit-2426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2426 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-142 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-142 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-142 -j ACCEPT + inet6/filter/FORWARD -j limit-2426 + inet6/filter/FORWARD -j logaccept-final-142 + inet6/filter/INPUT -j limit-2426 + inet6/filter/INPUT -j logaccept-final-142 + inet6/filter/OUTPUT -j limit-2426 + inet6/filter/OUTPUT -j logaccept-final-142 + inet6/filter/limit-2426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-142 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-142 -j ACCEPT + +Filter 2428 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2427 + inet/filter/INPUT -j limit-2427 + inet/filter/OUTPUT -j limit-2427 + inet/filter/limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2427 + inet6/filter/INPUT -j limit-2427 + inet6/filter/OUTPUT -j limit-2427 + inet6/filter/limit-2427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 2429 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2428 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2428 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2428 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2428 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2428 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2428 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2428 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2430 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2429 + inet/filter/INPUT -j limit-2429 + inet/filter/OUTPUT -j limit-2429 + inet/filter/limit-2429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2429 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2429 + inet6/filter/INPUT -j limit-2429 + inet6/filter/OUTPUT -j limit-2429 + inet6/filter/limit-2429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2431 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2430 + inet/filter/FORWARD -j logaccept-final-143 + inet/filter/INPUT -j limit-2430 + inet/filter/INPUT -j logaccept-final-143 + inet/filter/OUTPUT -j limit-2430 + inet/filter/OUTPUT -j logaccept-final-143 + inet/filter/limit-2430 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2430 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-143 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-143 -j ACCEPT + inet6/filter/FORWARD -j limit-2430 + inet6/filter/FORWARD -j logaccept-final-143 + inet6/filter/INPUT -j limit-2430 + inet6/filter/INPUT -j logaccept-final-143 + inet6/filter/OUTPUT -j limit-2430 + inet6/filter/OUTPUT -j logaccept-final-143 + inet6/filter/limit-2430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-143 -j ACCEPT + +Filter 2432 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2431 + inet/filter/INPUT -j limit-2431 + inet/filter/OUTPUT -j limit-2431 + inet/filter/limit-2431 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2431 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2431 + inet6/filter/INPUT -j limit-2431 + inet6/filter/OUTPUT -j limit-2431 + inet6/filter/limit-2431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 2433 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2432 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2432 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2432 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2432 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2432 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2432 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2434 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2433 + inet/filter/INPUT -j limit-2433 + inet/filter/OUTPUT -j limit-2433 + inet/filter/limit-2433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2433 + inet6/filter/INPUT -j limit-2433 + inet6/filter/OUTPUT -j limit-2433 + inet6/filter/limit-2433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2435 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2434 + inet/filter/FORWARD -j logaccept-final-144 + inet/filter/INPUT -j limit-2434 + inet/filter/INPUT -j logaccept-final-144 + inet/filter/OUTPUT -j limit-2434 + inet/filter/OUTPUT -j logaccept-final-144 + inet/filter/limit-2434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-144 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-144 -j ACCEPT + inet6/filter/FORWARD -j limit-2434 + inet6/filter/FORWARD -j logaccept-final-144 + inet6/filter/INPUT -j limit-2434 + inet6/filter/INPUT -j logaccept-final-144 + inet6/filter/OUTPUT -j limit-2434 + inet6/filter/OUTPUT -j logaccept-final-144 + inet6/filter/limit-2434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-144 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-144 -j ACCEPT + +Filter 2436 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2435 + inet/filter/INPUT -j limit-2435 + inet/filter/OUTPUT -j limit-2435 + inet/filter/limit-2435 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2435 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2435 + inet6/filter/INPUT -j limit-2435 + inet6/filter/OUTPUT -j limit-2435 + inet6/filter/limit-2435 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2435 -m limit --limit 1/second -j LOG + +Filter 2437 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2436 + inet/filter/FORWARD -j logaccept-final-145 + inet/filter/INPUT -j limit-2436 + inet/filter/INPUT -j logaccept-final-145 + inet/filter/OUTPUT -j limit-2436 + inet/filter/OUTPUT -j logaccept-final-145 + inet/filter/limit-2436 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-145 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-145 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-145 -j ACCEPT + inet6/filter/FORWARD -j limit-2436 + inet6/filter/FORWARD -j logaccept-final-145 + inet6/filter/INPUT -j limit-2436 + inet6/filter/INPUT -j logaccept-final-145 + inet6/filter/OUTPUT -j limit-2436 + inet6/filter/OUTPUT -j logaccept-final-145 + inet6/filter/limit-2436 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-145 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-145 -j ACCEPT + +Filter 2438 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2437 + inet/filter/INPUT -j limit-2437 + inet/filter/OUTPUT -j limit-2437 + inet/filter/limit-2437 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2437 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2437 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2437 + inet6/filter/INPUT -j limit-2437 + inet6/filter/OUTPUT -j limit-2437 + inet6/filter/limit-2437 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2437 -j TEE --gateway fc00::2 + +Filter 2439 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2438 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2438 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2438 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2438 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2438 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2438 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2438 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2438 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2440 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2439 + inet/filter/INPUT -j limit-2439 + inet/filter/OUTPUT -j limit-2439 + inet/filter/limit-2439 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2439 + inet6/filter/INPUT -j limit-2439 + inet6/filter/OUTPUT -j limit-2439 + inet6/filter/limit-2439 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2441 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2440 + inet/filter/FORWARD -j logaccept-final-146 + inet/filter/INPUT -j limit-2440 + inet/filter/INPUT -j logaccept-final-146 + inet/filter/OUTPUT -j limit-2440 + inet/filter/OUTPUT -j logaccept-final-146 + inet/filter/limit-2440 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-146 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-146 -j ACCEPT + inet6/filter/FORWARD -j limit-2440 + inet6/filter/FORWARD -j logaccept-final-146 + inet6/filter/INPUT -j limit-2440 + inet6/filter/INPUT -j logaccept-final-146 + inet6/filter/OUTPUT -j limit-2440 + inet6/filter/OUTPUT -j logaccept-final-146 + inet6/filter/limit-2440 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-146 -j ACCEPT + +Filter 2442 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2441 + inet/filter/INPUT -j limit-2441 + inet/filter/OUTPUT -j limit-2441 + inet/filter/limit-2441 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2441 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2441 + inet6/filter/INPUT -j limit-2441 + inet6/filter/OUTPUT -j limit-2441 + inet6/filter/limit-2441 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2443 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2442 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2442 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2442 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2442 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2442 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2442 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2442 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2442 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2444 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2443 + inet/filter/INPUT -j limit-2443 + inet/filter/OUTPUT -j limit-2443 + inet/filter/limit-2443 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2443 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2443 + inet6/filter/INPUT -j limit-2443 + inet6/filter/OUTPUT -j limit-2443 + inet6/filter/limit-2443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2445 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2444 + inet/filter/FORWARD -j logaccept-final-147 + inet/filter/INPUT -j limit-2444 + inet/filter/INPUT -j logaccept-final-147 + inet/filter/OUTPUT -j limit-2444 + inet/filter/OUTPUT -j logaccept-final-147 + inet/filter/limit-2444 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2444 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-147 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-147 -j ACCEPT + inet6/filter/FORWARD -j limit-2444 + inet6/filter/FORWARD -j logaccept-final-147 + inet6/filter/INPUT -j limit-2444 + inet6/filter/INPUT -j logaccept-final-147 + inet6/filter/OUTPUT -j limit-2444 + inet6/filter/OUTPUT -j logaccept-final-147 + inet6/filter/limit-2444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-147 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-147 -j ACCEPT + +Filter 2446 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2445 + inet/filter/INPUT -j limit-2445 + inet/filter/OUTPUT -j limit-2445 + inet/filter/limit-2445 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2445 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2445 + inet6/filter/INPUT -j limit-2445 + inet6/filter/OUTPUT -j limit-2445 + inet6/filter/limit-2445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 2447 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2446 + inet/filter/FORWARD -j logaccept-final-148 + inet/filter/INPUT -j limit-2446 + inet/filter/INPUT -j logaccept-final-148 + inet/filter/OUTPUT -j limit-2446 + inet/filter/OUTPUT -j logaccept-final-148 + inet/filter/limit-2446 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2446 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-148 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-148 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-148 -j ACCEPT + inet6/filter/FORWARD -j limit-2446 + inet6/filter/FORWARD -j logaccept-final-148 + inet6/filter/INPUT -j limit-2446 + inet6/filter/INPUT -j logaccept-final-148 + inet6/filter/OUTPUT -j limit-2446 + inet6/filter/OUTPUT -j logaccept-final-148 + inet6/filter/limit-2446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-148 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-148 -j ACCEPT + +Filter 2448 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2447 + inet/filter/INPUT -j limit-2447 + inet/filter/OUTPUT -j limit-2447 + inet/filter/limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2447 + inet6/filter/INPUT -j limit-2447 + inet6/filter/OUTPUT -j limit-2447 + inet6/filter/limit-2447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 2449 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2448 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2448 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2448 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2448 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2448 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2448 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2448 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2448 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2450 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2449 + inet/filter/INPUT -j limit-2449 + inet/filter/OUTPUT -j limit-2449 + inet/filter/limit-2449 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2449 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2449 + inet6/filter/INPUT -j limit-2449 + inet6/filter/OUTPUT -j limit-2449 + inet6/filter/limit-2449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2451 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2450 + inet/filter/FORWARD -j logaccept-final-149 + inet/filter/INPUT -j limit-2450 + inet/filter/INPUT -j logaccept-final-149 + inet/filter/OUTPUT -j limit-2450 + inet/filter/OUTPUT -j logaccept-final-149 + inet/filter/limit-2450 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2450 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-149 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-149 -j ACCEPT + inet6/filter/FORWARD -j limit-2450 + inet6/filter/FORWARD -j logaccept-final-149 + inet6/filter/INPUT -j limit-2450 + inet6/filter/INPUT -j logaccept-final-149 + inet6/filter/OUTPUT -j limit-2450 + inet6/filter/OUTPUT -j logaccept-final-149 + inet6/filter/limit-2450 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2450 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-149 -j ACCEPT + +Filter 2452 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2451 + inet/filter/INPUT -j limit-2451 + inet/filter/OUTPUT -j limit-2451 + inet/filter/limit-2451 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2451 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2451 + inet6/filter/INPUT -j limit-2451 + inet6/filter/OUTPUT -j limit-2451 + inet6/filter/limit-2451 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 2453 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2452 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2452 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2452 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2452 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2452 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2452 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2452 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2452 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2454 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2453 + inet/filter/INPUT -j limit-2453 + inet/filter/OUTPUT -j limit-2453 + inet/filter/limit-2453 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2453 + inet6/filter/INPUT -j limit-2453 + inet6/filter/OUTPUT -j limit-2453 + inet6/filter/limit-2453 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2455 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2454 + inet/filter/FORWARD -j logaccept-final-150 + inet/filter/INPUT -j limit-2454 + inet/filter/INPUT -j logaccept-final-150 + inet/filter/OUTPUT -j limit-2454 + inet/filter/OUTPUT -j logaccept-final-150 + inet/filter/limit-2454 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-150 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-150 -j ACCEPT + inet6/filter/FORWARD -j limit-2454 + inet6/filter/FORWARD -j logaccept-final-150 + inet6/filter/INPUT -j limit-2454 + inet6/filter/INPUT -j logaccept-final-150 + inet6/filter/OUTPUT -j limit-2454 + inet6/filter/OUTPUT -j logaccept-final-150 + inet6/filter/limit-2454 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-150 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-150 -j ACCEPT + +Filter 2456 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2455 + inet/filter/INPUT -j limit-2455 + inet/filter/OUTPUT -j limit-2455 + inet/filter/limit-2455 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2455 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2455 + inet6/filter/INPUT -j limit-2455 + inet6/filter/OUTPUT -j limit-2455 + inet6/filter/limit-2455 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2455 -m limit --limit 1/second -j LOG + +Filter 2457 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2456 + inet/filter/FORWARD -j logaccept-final-151 + inet/filter/INPUT -j limit-2456 + inet/filter/INPUT -j logaccept-final-151 + inet/filter/OUTPUT -j limit-2456 + inet/filter/OUTPUT -j logaccept-final-151 + inet/filter/limit-2456 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-151 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-151 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-151 -j ACCEPT + inet6/filter/FORWARD -j limit-2456 + inet6/filter/FORWARD -j logaccept-final-151 + inet6/filter/INPUT -j limit-2456 + inet6/filter/INPUT -j logaccept-final-151 + inet6/filter/OUTPUT -j limit-2456 + inet6/filter/OUTPUT -j logaccept-final-151 + inet6/filter/limit-2456 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-151 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-151 -j ACCEPT + +Filter 2458 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2457 + inet/filter/INPUT -j limit-2457 + inet/filter/OUTPUT -j limit-2457 + inet/filter/limit-2457 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2457 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2457 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2457 + inet6/filter/INPUT -j limit-2457 + inet6/filter/OUTPUT -j limit-2457 + inet6/filter/limit-2457 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2457 -j TEE --gateway fc00::2 + +Filter 2459 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2458 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2458 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2458 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2458 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2458 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2458 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2458 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2458 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2460 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2459 + inet/filter/INPUT -j limit-2459 + inet/filter/OUTPUT -j limit-2459 + inet/filter/limit-2459 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2459 + inet6/filter/INPUT -j limit-2459 + inet6/filter/OUTPUT -j limit-2459 + inet6/filter/limit-2459 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2461 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2460 + inet/filter/FORWARD -j logaccept-final-152 + inet/filter/INPUT -j limit-2460 + inet/filter/INPUT -j logaccept-final-152 + inet/filter/OUTPUT -j limit-2460 + inet/filter/OUTPUT -j logaccept-final-152 + inet/filter/limit-2460 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-152 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-152 -j ACCEPT + inet6/filter/FORWARD -j limit-2460 + inet6/filter/FORWARD -j logaccept-final-152 + inet6/filter/INPUT -j limit-2460 + inet6/filter/INPUT -j logaccept-final-152 + inet6/filter/OUTPUT -j limit-2460 + inet6/filter/OUTPUT -j logaccept-final-152 + inet6/filter/limit-2460 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-152 -j ACCEPT + +Filter 2462 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2461 + inet/filter/INPUT -j limit-2461 + inet/filter/OUTPUT -j limit-2461 + inet/filter/limit-2461 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2461 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2461 + inet6/filter/INPUT -j limit-2461 + inet6/filter/OUTPUT -j limit-2461 + inet6/filter/limit-2461 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2463 {"flow-limit":{"interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2462 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2462 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2462 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2462 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2462 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2462 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2462 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2462 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2462 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2462 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2464 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2463 + inet/filter/INPUT -j limit-2463 + inet/filter/OUTPUT -j limit-2463 + inet/filter/limit-2463 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2463 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2463 + inet6/filter/INPUT -j limit-2463 + inet6/filter/OUTPUT -j limit-2463 + inet6/filter/limit-2463 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2463 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2465 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2464 + inet/filter/FORWARD -j logaccept-final-153 + inet/filter/INPUT -j limit-2464 + inet/filter/INPUT -j logaccept-final-153 + inet/filter/OUTPUT -j limit-2464 + inet/filter/OUTPUT -j logaccept-final-153 + inet/filter/limit-2464 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2464 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-153 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-153 -j ACCEPT + inet6/filter/FORWARD -j limit-2464 + inet6/filter/FORWARD -j logaccept-final-153 + inet6/filter/INPUT -j limit-2464 + inet6/filter/INPUT -j logaccept-final-153 + inet6/filter/OUTPUT -j limit-2464 + inet6/filter/OUTPUT -j logaccept-final-153 + inet6/filter/limit-2464 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2464 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-153 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-153 -j ACCEPT + +Filter 2466 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2465 + inet/filter/INPUT -j limit-2465 + inet/filter/OUTPUT -j limit-2465 + inet/filter/limit-2465 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2465 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2465 + inet6/filter/INPUT -j limit-2465 + inet6/filter/OUTPUT -j limit-2465 + inet6/filter/limit-2465 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2465 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 2467 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2466 + inet/filter/FORWARD -j logaccept-final-154 + inet/filter/INPUT -j limit-2466 + inet/filter/INPUT -j logaccept-final-154 + inet/filter/OUTPUT -j limit-2466 + inet/filter/OUTPUT -j logaccept-final-154 + inet/filter/limit-2466 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2466 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-154 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-154 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-154 -j ACCEPT + inet6/filter/FORWARD -j limit-2466 + inet6/filter/FORWARD -j logaccept-final-154 + inet6/filter/INPUT -j limit-2466 + inet6/filter/INPUT -j logaccept-final-154 + inet6/filter/OUTPUT -j limit-2466 + inet6/filter/OUTPUT -j logaccept-final-154 + inet6/filter/limit-2466 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2466 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-154 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-154 -j ACCEPT + +Filter 2468 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2467 + inet/filter/INPUT -j limit-2467 + inet/filter/OUTPUT -j limit-2467 + inet/filter/limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2467 + inet6/filter/INPUT -j limit-2467 + inet6/filter/OUTPUT -j limit-2467 + inet6/filter/limit-2467 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2467 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + +Filter 2469 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2468 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2468 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2468 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2468 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2468 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2468 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2468 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2468 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2468 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2468 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2470 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2469 + inet/filter/INPUT -j limit-2469 + inet/filter/OUTPUT -j limit-2469 + inet/filter/limit-2469 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2469 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2469 + inet6/filter/INPUT -j limit-2469 + inet6/filter/OUTPUT -j limit-2469 + inet6/filter/limit-2469 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2469 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2471 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2470 + inet/filter/FORWARD -j logaccept-final-155 + inet/filter/INPUT -j limit-2470 + inet/filter/INPUT -j logaccept-final-155 + inet/filter/OUTPUT -j limit-2470 + inet/filter/OUTPUT -j logaccept-final-155 + inet/filter/limit-2470 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2470 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-155 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-155 -j ACCEPT + inet6/filter/FORWARD -j limit-2470 + inet6/filter/FORWARD -j logaccept-final-155 + inet6/filter/INPUT -j limit-2470 + inet6/filter/INPUT -j logaccept-final-155 + inet6/filter/OUTPUT -j limit-2470 + inet6/filter/OUTPUT -j logaccept-final-155 + inet6/filter/limit-2470 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2470 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-155 -j ACCEPT + +Filter 2472 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2471 + inet/filter/INPUT -j limit-2471 + inet/filter/OUTPUT -j limit-2471 + inet/filter/limit-2471 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2471 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2471 + inet6/filter/INPUT -j limit-2471 + inet6/filter/OUTPUT -j limit-2471 + inet6/filter/limit-2471 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + +Filter 2473 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2472 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2472 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2472 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2472 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2472 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2472 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2472 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2472 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2474 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2473 + inet/filter/INPUT -j limit-2473 + inet/filter/OUTPUT -j limit-2473 + inet/filter/limit-2473 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2473 + inet6/filter/INPUT -j limit-2473 + inet6/filter/OUTPUT -j limit-2473 + inet6/filter/limit-2473 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2475 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2474 + inet/filter/FORWARD -j logaccept-final-156 + inet/filter/INPUT -j limit-2474 + inet/filter/INPUT -j logaccept-final-156 + inet/filter/OUTPUT -j limit-2474 + inet/filter/OUTPUT -j logaccept-final-156 + inet/filter/limit-2474 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-156 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-156 -j ACCEPT + inet6/filter/FORWARD -j limit-2474 + inet6/filter/FORWARD -j logaccept-final-156 + inet6/filter/INPUT -j limit-2474 + inet6/filter/INPUT -j logaccept-final-156 + inet6/filter/OUTPUT -j limit-2474 + inet6/filter/OUTPUT -j logaccept-final-156 + inet6/filter/limit-2474 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-156 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-156 -j ACCEPT + +Filter 2476 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2475 + inet/filter/INPUT -j limit-2475 + inet/filter/OUTPUT -j limit-2475 + inet/filter/limit-2475 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2475 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2475 + inet6/filter/INPUT -j limit-2475 + inet6/filter/OUTPUT -j limit-2475 + inet6/filter/limit-2475 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2475 -m limit --limit 1/second -j LOG + +Filter 2477 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2476 + inet/filter/FORWARD -j logaccept-final-157 + inet/filter/INPUT -j limit-2476 + inet/filter/INPUT -j logaccept-final-157 + inet/filter/OUTPUT -j limit-2476 + inet/filter/OUTPUT -j logaccept-final-157 + inet/filter/limit-2476 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-157 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-157 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-157 -j ACCEPT + inet6/filter/FORWARD -j limit-2476 + inet6/filter/FORWARD -j logaccept-final-157 + inet6/filter/INPUT -j limit-2476 + inet6/filter/INPUT -j logaccept-final-157 + inet6/filter/OUTPUT -j limit-2476 + inet6/filter/OUTPUT -j logaccept-final-157 + inet6/filter/limit-2476 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-157 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-157 -j ACCEPT + +Filter 2478 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2477 + inet/filter/INPUT -j limit-2477 + inet/filter/OUTPUT -j limit-2477 + inet/filter/limit-2477 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2477 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2477 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2477 + inet6/filter/INPUT -j limit-2477 + inet6/filter/OUTPUT -j limit-2477 + inet6/filter/limit-2477 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2477 -j TEE --gateway fc00::2 + +Filter 2479 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2478 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2478 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2478 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2478 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2478 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2478 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2478 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2478 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2480 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2479 + inet/filter/INPUT -j limit-2479 + inet/filter/OUTPUT -j limit-2479 + inet/filter/limit-2479 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2479 + inet6/filter/INPUT -j limit-2479 + inet6/filter/OUTPUT -j limit-2479 + inet6/filter/limit-2479 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2481 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2480 + inet/filter/FORWARD -j logaccept-final-158 + inet/filter/INPUT -j limit-2480 + inet/filter/INPUT -j logaccept-final-158 + inet/filter/OUTPUT -j limit-2480 + inet/filter/OUTPUT -j logaccept-final-158 + inet/filter/limit-2480 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-158 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-158 -j ACCEPT + inet6/filter/FORWARD -j limit-2480 + inet6/filter/FORWARD -j logaccept-final-158 + inet6/filter/INPUT -j limit-2480 + inet6/filter/INPUT -j logaccept-final-158 + inet6/filter/OUTPUT -j limit-2480 + inet6/filter/OUTPUT -j logaccept-final-158 + inet6/filter/limit-2480 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-158 -j ACCEPT + +Filter 2482 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2481 + inet/filter/INPUT -j limit-2481 + inet/filter/OUTPUT -j limit-2481 + inet/filter/limit-2481 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2481 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2481 + inet6/filter/INPUT -j limit-2481 + inet6/filter/OUTPUT -j limit-2481 + inet6/filter/limit-2481 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2483 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2482 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2482 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2482 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2482 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2482 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2482 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2482 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2482 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2482 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2482 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2484 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2483 + inet/filter/INPUT -j limit-2483 + inet/filter/OUTPUT -j limit-2483 + inet/filter/limit-2483 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2483 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2483 + inet6/filter/INPUT -j limit-2483 + inet6/filter/OUTPUT -j limit-2483 + inet6/filter/limit-2483 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2483 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2485 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2484 + inet/filter/FORWARD -j logaccept-final-159 + inet/filter/INPUT -j limit-2484 + inet/filter/INPUT -j logaccept-final-159 + inet/filter/OUTPUT -j limit-2484 + inet/filter/OUTPUT -j logaccept-final-159 + inet/filter/limit-2484 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2484 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-159 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-159 -j ACCEPT + inet6/filter/FORWARD -j limit-2484 + inet6/filter/FORWARD -j logaccept-final-159 + inet6/filter/INPUT -j limit-2484 + inet6/filter/INPUT -j logaccept-final-159 + inet6/filter/OUTPUT -j limit-2484 + inet6/filter/OUTPUT -j logaccept-final-159 + inet6/filter/limit-2484 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2484 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-159 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-159 -j ACCEPT + +Filter 2486 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2485 + inet/filter/INPUT -j limit-2485 + inet/filter/OUTPUT -j limit-2485 + inet/filter/limit-2485 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2485 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2485 + inet6/filter/INPUT -j limit-2485 + inet6/filter/OUTPUT -j limit-2485 + inet6/filter/limit-2485 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2485 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 2487 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2486 + inet/filter/FORWARD -j logaccept-final-160 + inet/filter/INPUT -j limit-2486 + inet/filter/INPUT -j logaccept-final-160 + inet/filter/OUTPUT -j limit-2486 + inet/filter/OUTPUT -j logaccept-final-160 + inet/filter/limit-2486 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2486 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-160 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-160 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-160 -j ACCEPT + inet6/filter/FORWARD -j limit-2486 + inet6/filter/FORWARD -j logaccept-final-160 + inet6/filter/INPUT -j limit-2486 + inet6/filter/INPUT -j logaccept-final-160 + inet6/filter/OUTPUT -j limit-2486 + inet6/filter/OUTPUT -j logaccept-final-160 + inet6/filter/limit-2486 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2486 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-160 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-160 -j ACCEPT + +Filter 2488 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2487 + inet/filter/INPUT -j limit-2487 + inet/filter/OUTPUT -j limit-2487 + inet/filter/limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2487 + inet6/filter/INPUT -j limit-2487 + inet6/filter/OUTPUT -j limit-2487 + inet6/filter/limit-2487 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2487 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + +Filter 2489 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2488 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2488 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2488 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2488 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2488 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2488 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2488 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2488 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2488 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2488 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2490 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2489 + inet/filter/INPUT -j limit-2489 + inet/filter/OUTPUT -j limit-2489 + inet/filter/limit-2489 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2489 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2489 + inet6/filter/INPUT -j limit-2489 + inet6/filter/OUTPUT -j limit-2489 + inet6/filter/limit-2489 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2489 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2491 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2490 + inet/filter/FORWARD -j logaccept-final-161 + inet/filter/INPUT -j limit-2490 + inet/filter/INPUT -j logaccept-final-161 + inet/filter/OUTPUT -j limit-2490 + inet/filter/OUTPUT -j logaccept-final-161 + inet/filter/limit-2490 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2490 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-161 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-161 -j ACCEPT + inet6/filter/FORWARD -j limit-2490 + inet6/filter/FORWARD -j logaccept-final-161 + inet6/filter/INPUT -j limit-2490 + inet6/filter/INPUT -j logaccept-final-161 + inet6/filter/OUTPUT -j limit-2490 + inet6/filter/OUTPUT -j logaccept-final-161 + inet6/filter/limit-2490 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2490 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-161 -j ACCEPT + +Filter 2492 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2491 + inet/filter/INPUT -j limit-2491 + inet/filter/OUTPUT -j limit-2491 + inet/filter/limit-2491 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2491 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2491 + inet6/filter/INPUT -j limit-2491 + inet6/filter/OUTPUT -j limit-2491 + inet6/filter/limit-2491 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + +Filter 2493 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2492 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2492 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2492 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2492 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2492 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2492 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2492 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2492 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2494 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2493 + inet/filter/INPUT -j limit-2493 + inet/filter/OUTPUT -j limit-2493 + inet/filter/limit-2493 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2493 + inet6/filter/INPUT -j limit-2493 + inet6/filter/OUTPUT -j limit-2493 + inet6/filter/limit-2493 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2495 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2494 + inet/filter/FORWARD -j logaccept-final-162 + inet/filter/INPUT -j limit-2494 + inet/filter/INPUT -j logaccept-final-162 + inet/filter/OUTPUT -j limit-2494 + inet/filter/OUTPUT -j logaccept-final-162 + inet/filter/limit-2494 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-162 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-162 -j ACCEPT + inet6/filter/FORWARD -j limit-2494 + inet6/filter/FORWARD -j logaccept-final-162 + inet6/filter/INPUT -j limit-2494 + inet6/filter/INPUT -j logaccept-final-162 + inet6/filter/OUTPUT -j limit-2494 + inet6/filter/OUTPUT -j logaccept-final-162 + inet6/filter/limit-2494 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-162 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-162 -j ACCEPT + +Filter 2496 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2495 + inet/filter/INPUT -j limit-2495 + inet/filter/OUTPUT -j limit-2495 + inet/filter/limit-2495 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2495 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2495 + inet6/filter/INPUT -j limit-2495 + inet6/filter/OUTPUT -j limit-2495 + inet6/filter/limit-2495 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2495 -m limit --limit 1/second -j LOG + +Filter 2497 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2496 + inet/filter/FORWARD -j logaccept-final-163 + inet/filter/INPUT -j limit-2496 + inet/filter/INPUT -j logaccept-final-163 + inet/filter/OUTPUT -j limit-2496 + inet/filter/OUTPUT -j logaccept-final-163 + inet/filter/limit-2496 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-163 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-163 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-163 -j ACCEPT + inet6/filter/FORWARD -j limit-2496 + inet6/filter/FORWARD -j logaccept-final-163 + inet6/filter/INPUT -j limit-2496 + inet6/filter/INPUT -j logaccept-final-163 + inet6/filter/OUTPUT -j limit-2496 + inet6/filter/OUTPUT -j logaccept-final-163 + inet6/filter/limit-2496 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-163 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-163 -j ACCEPT + +Filter 2498 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2497 + inet/filter/INPUT -j limit-2497 + inet/filter/OUTPUT -j limit-2497 + inet/filter/limit-2497 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2497 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2497 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2497 + inet6/filter/INPUT -j limit-2497 + inet6/filter/OUTPUT -j limit-2497 + inet6/filter/limit-2497 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2497 -j TEE --gateway fc00::2 + +Filter 2499 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2498 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2498 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2498 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2498 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2498 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2498 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2498 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2498 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2500 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2499 + inet/filter/INPUT -j limit-2499 + inet/filter/OUTPUT -j limit-2499 + inet/filter/limit-2499 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2499 + inet6/filter/INPUT -j limit-2499 + inet6/filter/OUTPUT -j limit-2499 + inet6/filter/limit-2499 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2501 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2500 + inet/filter/FORWARD -j logaccept-final-164 + inet/filter/INPUT -j limit-2500 + inet/filter/INPUT -j logaccept-final-164 + inet/filter/OUTPUT -j limit-2500 + inet/filter/OUTPUT -j logaccept-final-164 + inet/filter/limit-2500 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-164 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-164 -j ACCEPT + inet6/filter/FORWARD -j limit-2500 + inet6/filter/FORWARD -j logaccept-final-164 + inet6/filter/INPUT -j limit-2500 + inet6/filter/INPUT -j logaccept-final-164 + inet6/filter/OUTPUT -j limit-2500 + inet6/filter/OUTPUT -j logaccept-final-164 + inet6/filter/limit-2500 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-164 -j ACCEPT + +Filter 2502 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2501 + inet/filter/INPUT -j limit-2501 + inet/filter/OUTPUT -j limit-2501 + inet/filter/limit-2501 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2501 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2501 + inet6/filter/INPUT -j limit-2501 + inet6/filter/OUTPUT -j limit-2501 + inet6/filter/limit-2501 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2503 {"flow-limit":{"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-2502 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2502 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2502 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2502 -m recent --name limit-2502 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1380 + inet/filter/limit-2502 -m recent --name limit-2502 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1380 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1380 -j DROP + inet6/filter/FORWARD -j limit-2502 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2502 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2502 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2502 -m recent --name limit-2502 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1380 + inet6/filter/limit-2502 -m recent --name limit-2502 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1380 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1380 -j DROP + +Filter 2504 {"action":"pass","flow-limit":{"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-2503 + inet/filter/INPUT -j limit-2503 + inet/filter/OUTPUT -j limit-2503 + inet/filter/limit-2503 -m recent --name limit-2503 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1381 + inet/filter/limit-2503 -m recent --name limit-2503 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1381 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1381 -j DROP + inet6/filter/FORWARD -j limit-2503 + inet6/filter/INPUT -j limit-2503 + inet6/filter/OUTPUT -j limit-2503 + inet6/filter/limit-2503 -m recent --name limit-2503 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1381 + inet6/filter/limit-2503 -m recent --name limit-2503 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1381 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1381 -j DROP + +Filter 2505 {"flow-limit":{"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2504 + inet/filter/FORWARD -j logaccept-final-165 + inet/filter/INPUT -j limit-2504 + inet/filter/INPUT -j logaccept-final-165 + inet/filter/OUTPUT -j limit-2504 + inet/filter/OUTPUT -j logaccept-final-165 + inet/filter/limit-2504 -m recent --name limit-2504 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1382 + inet/filter/limit-2504 -m recent --name limit-2504 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-165 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-165 -j ACCEPT + inet/filter/logdrop-1382 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1382 -j DROP + inet6/filter/FORWARD -j limit-2504 + inet6/filter/FORWARD -j logaccept-final-165 + inet6/filter/INPUT -j limit-2504 + inet6/filter/INPUT -j logaccept-final-165 + inet6/filter/OUTPUT -j limit-2504 + inet6/filter/OUTPUT -j logaccept-final-165 + inet6/filter/limit-2504 -m recent --name limit-2504 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1382 + inet6/filter/limit-2504 -m recent --name limit-2504 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-165 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-165 -j ACCEPT + inet6/filter/logdrop-1382 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1382 -j DROP + +Filter 2506 {"action":"pass","flow-limit":{"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2505 + inet/filter/INPUT -j limit-2505 + inet/filter/OUTPUT -j limit-2505 + inet/filter/limit-2505 -m recent --name limit-2505 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1383 + inet/filter/limit-2505 -m recent --name limit-2505 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1383 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1383 -j DROP + inet6/filter/FORWARD -j limit-2505 + inet6/filter/INPUT -j limit-2505 + inet6/filter/OUTPUT -j limit-2505 + inet6/filter/limit-2505 -m recent --name limit-2505 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1383 + inet6/filter/limit-2505 -m recent --name limit-2505 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1383 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1383 -j DROP + +Filter 2507 {"flow-limit":{"interval":5},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2506 + inet/filter/FORWARD -j logaccept-final-166 + inet/filter/INPUT -j limit-2506 + inet/filter/INPUT -j logaccept-final-166 + inet/filter/OUTPUT -j limit-2506 + inet/filter/OUTPUT -j logaccept-final-166 + inet/filter/limit-2506 -m recent --name limit-2506 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1384 + inet/filter/limit-2506 -m recent --name limit-2506 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-166 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-166 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-166 -j ACCEPT + inet/filter/logdrop-1384 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1384 -j DROP + inet6/filter/FORWARD -j limit-2506 + inet6/filter/FORWARD -j logaccept-final-166 + inet6/filter/INPUT -j limit-2506 + inet6/filter/INPUT -j logaccept-final-166 + inet6/filter/OUTPUT -j limit-2506 + inet6/filter/OUTPUT -j logaccept-final-166 + inet6/filter/limit-2506 -m recent --name limit-2506 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1384 + inet6/filter/limit-2506 -m recent --name limit-2506 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-166 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-166 -j ACCEPT + inet6/filter/logdrop-1384 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1384 -j DROP + +Filter 2508 {"action":"pass","flow-limit":{"interval":5},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2507 + inet/filter/INPUT -j limit-2507 + inet/filter/OUTPUT -j limit-2507 + inet/filter/limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1385 + inet/filter/limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1385 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1385 -j DROP + inet6/filter/FORWARD -j limit-2507 + inet6/filter/INPUT -j limit-2507 + inet6/filter/OUTPUT -j limit-2507 + inet6/filter/limit-2507 -m recent --name limit-2507 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1385 + inet6/filter/limit-2507 -m recent --name limit-2507 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1385 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1385 -j DROP + +Filter 2509 {"flow-limit":{"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2508 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2508 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2508 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2508 -m recent --name limit-2508 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1386 + inet/filter/limit-2508 -m recent --name limit-2508 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1386 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1386 -j DROP + inet6/filter/FORWARD -j limit-2508 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2508 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2508 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2508 -m recent --name limit-2508 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1386 + inet6/filter/limit-2508 -m recent --name limit-2508 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1386 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1386 -j DROP + +Filter 2510 {"action":"pass","flow-limit":{"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2509 + inet/filter/INPUT -j limit-2509 + inet/filter/OUTPUT -j limit-2509 + inet/filter/limit-2509 -m recent --name limit-2509 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1387 + inet/filter/limit-2509 -m recent --name limit-2509 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1387 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1387 -j DROP + inet6/filter/FORWARD -j limit-2509 + inet6/filter/INPUT -j limit-2509 + inet6/filter/OUTPUT -j limit-2509 + inet6/filter/limit-2509 -m recent --name limit-2509 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1387 + inet6/filter/limit-2509 -m recent --name limit-2509 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1387 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1387 -j DROP + +Filter 2511 {"flow-limit":{"interval":5},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2510 + inet/filter/FORWARD -j logaccept-final-167 + inet/filter/INPUT -j limit-2510 + inet/filter/INPUT -j logaccept-final-167 + inet/filter/OUTPUT -j limit-2510 + inet/filter/OUTPUT -j logaccept-final-167 + inet/filter/limit-2510 -m recent --name limit-2510 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1388 + inet/filter/limit-2510 -m recent --name limit-2510 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-167 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-167 -j ACCEPT + inet/filter/logdrop-1388 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1388 -j DROP + inet6/filter/FORWARD -j limit-2510 + inet6/filter/FORWARD -j logaccept-final-167 + inet6/filter/INPUT -j limit-2510 + inet6/filter/INPUT -j logaccept-final-167 + inet6/filter/OUTPUT -j limit-2510 + inet6/filter/OUTPUT -j logaccept-final-167 + inet6/filter/limit-2510 -m recent --name limit-2510 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1388 + inet6/filter/limit-2510 -m recent --name limit-2510 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-167 -j ACCEPT + inet6/filter/logdrop-1388 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1388 -j DROP + +Filter 2512 {"action":"pass","flow-limit":{"interval":5},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2511 + inet/filter/INPUT -j limit-2511 + inet/filter/OUTPUT -j limit-2511 + inet/filter/limit-2511 -m recent --name limit-2511 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1389 + inet/filter/limit-2511 -m recent --name limit-2511 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1389 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1389 -j DROP + inet6/filter/FORWARD -j limit-2511 + inet6/filter/INPUT -j limit-2511 + inet6/filter/OUTPUT -j limit-2511 + inet6/filter/limit-2511 -m recent --name limit-2511 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1389 + inet6/filter/logdrop-1389 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1389 -j DROP + +Filter 2513 {"flow-limit":{"interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2512 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2512 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2512 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2512 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1390 + inet/filter/limit-2512 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1390 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1390 -j DROP + inet6/filter/FORWARD -j limit-2512 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2512 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2512 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2512 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1390 + inet6/filter/limit-2512 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1390 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1390 -j DROP + +Filter 2514 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2513 + inet/filter/INPUT -j limit-2513 + inet/filter/OUTPUT -j limit-2513 + inet/filter/limit-2513 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1391 + inet/filter/limit-2513 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1391 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1391 -j DROP + inet6/filter/FORWARD -j limit-2513 + inet6/filter/INPUT -j limit-2513 + inet6/filter/OUTPUT -j limit-2513 + inet6/filter/limit-2513 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1391 + inet6/filter/limit-2513 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1391 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1391 -j DROP + +Filter 2515 {"flow-limit":{"interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2514 + inet/filter/FORWARD -j logaccept-final-168 + inet/filter/INPUT -j limit-2514 + inet/filter/INPUT -j logaccept-final-168 + inet/filter/OUTPUT -j limit-2514 + inet/filter/OUTPUT -j logaccept-final-168 + inet/filter/limit-2514 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1392 + inet/filter/limit-2514 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-168 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-168 -j ACCEPT + inet/filter/logdrop-1392 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1392 -j DROP + inet6/filter/FORWARD -j limit-2514 + inet6/filter/FORWARD -j logaccept-final-168 + inet6/filter/INPUT -j limit-2514 + inet6/filter/INPUT -j logaccept-final-168 + inet6/filter/OUTPUT -j limit-2514 + inet6/filter/OUTPUT -j logaccept-final-168 + inet6/filter/limit-2514 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1392 + inet6/filter/limit-2514 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-168 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-168 -j ACCEPT + inet6/filter/logdrop-1392 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1392 -j DROP + +Filter 2516 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2515 + inet/filter/INPUT -j limit-2515 + inet/filter/OUTPUT -j limit-2515 + inet/filter/limit-2515 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1393 + inet/filter/limit-2515 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1393 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1393 -j DROP + inet6/filter/FORWARD -j limit-2515 + inet6/filter/INPUT -j limit-2515 + inet6/filter/OUTPUT -j limit-2515 + inet6/filter/limit-2515 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1393 + inet6/filter/limit-2515 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1393 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1393 -j DROP + +Filter 2517 {"flow-limit":{"interval":5,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2516 + inet/filter/FORWARD -j logaccept-final-169 + inet/filter/INPUT -j limit-2516 + inet/filter/INPUT -j logaccept-final-169 + inet/filter/OUTPUT -j limit-2516 + inet/filter/OUTPUT -j logaccept-final-169 + inet/filter/limit-2516 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1394 + inet/filter/limit-2516 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-169 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-169 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-169 -j ACCEPT + inet/filter/logdrop-1394 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1394 -j DROP + inet6/filter/FORWARD -j limit-2516 + inet6/filter/FORWARD -j logaccept-final-169 + inet6/filter/INPUT -j limit-2516 + inet6/filter/INPUT -j logaccept-final-169 + inet6/filter/OUTPUT -j limit-2516 + inet6/filter/OUTPUT -j logaccept-final-169 + inet6/filter/limit-2516 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1394 + inet6/filter/limit-2516 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-169 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-169 -j ACCEPT + inet6/filter/logdrop-1394 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1394 -j DROP + +Filter 2518 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2517 + inet/filter/INPUT -j limit-2517 + inet/filter/OUTPUT -j limit-2517 + inet/filter/limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1395 + inet/filter/limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1395 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1395 -j DROP + inet6/filter/FORWARD -j limit-2517 + inet6/filter/INPUT -j limit-2517 + inet6/filter/OUTPUT -j limit-2517 + inet6/filter/limit-2517 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1395 + inet6/filter/limit-2517 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1395 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1395 -j DROP + +Filter 2519 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2518 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2518 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2518 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2518 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1396 + inet/filter/limit-2518 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1396 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1396 -j DROP + inet6/filter/FORWARD -j limit-2518 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2518 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2518 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2518 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1396 + inet6/filter/limit-2518 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1396 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1396 -j DROP + +Filter 2520 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2519 + inet/filter/INPUT -j limit-2519 + inet/filter/OUTPUT -j limit-2519 + inet/filter/limit-2519 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1397 + inet/filter/limit-2519 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1397 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1397 -j DROP + inet6/filter/FORWARD -j limit-2519 + inet6/filter/INPUT -j limit-2519 + inet6/filter/OUTPUT -j limit-2519 + inet6/filter/limit-2519 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1397 + inet6/filter/limit-2519 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1397 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1397 -j DROP + +Filter 2521 {"flow-limit":{"interval":5,"name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2520 + inet/filter/FORWARD -j logaccept-final-170 + inet/filter/INPUT -j limit-2520 + inet/filter/INPUT -j logaccept-final-170 + inet/filter/OUTPUT -j limit-2520 + inet/filter/OUTPUT -j logaccept-final-170 + inet/filter/limit-2520 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1398 + inet/filter/limit-2520 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-170 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-170 -j ACCEPT + inet/filter/logdrop-1398 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1398 -j DROP + inet6/filter/FORWARD -j limit-2520 + inet6/filter/FORWARD -j logaccept-final-170 + inet6/filter/INPUT -j limit-2520 + inet6/filter/INPUT -j logaccept-final-170 + inet6/filter/OUTPUT -j limit-2520 + inet6/filter/OUTPUT -j logaccept-final-170 + inet6/filter/limit-2520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1398 + inet6/filter/limit-2520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-170 -j ACCEPT + inet6/filter/logdrop-1398 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1398 -j DROP + +Filter 2522 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2521 + inet/filter/INPUT -j limit-2521 + inet/filter/OUTPUT -j limit-2521 + inet/filter/limit-2521 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1399 + inet/filter/limit-2521 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1399 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1399 -j DROP + inet6/filter/FORWARD -j limit-2521 + inet6/filter/INPUT -j limit-2521 + inet6/filter/OUTPUT -j limit-2521 + inet6/filter/limit-2521 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1399 + inet6/filter/logdrop-1399 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1399 -j DROP + +Filter 2523 {"flow-limit":{"interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2522 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2522 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2522 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2522 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1400 + inet/filter/logdrop-1400 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1400 -j DROP + inet6/filter/FORWARD -j limit-2522 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2522 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2522 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2522 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1400 + inet6/filter/logdrop-1400 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1400 -j DROP + +Filter 2524 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2523 + inet/filter/INPUT -j limit-2523 + inet/filter/OUTPUT -j limit-2523 + inet/filter/limit-2523 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1401 + inet/filter/logdrop-1401 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1401 -j DROP + inet6/filter/FORWARD -j limit-2523 + inet6/filter/INPUT -j limit-2523 + inet6/filter/OUTPUT -j limit-2523 + inet6/filter/limit-2523 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1401 + inet6/filter/logdrop-1401 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1401 -j DROP + +Filter 2525 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2524 + inet/filter/FORWARD -j logaccept-final-171 + inet/filter/INPUT -j limit-2524 + inet/filter/INPUT -j logaccept-final-171 + inet/filter/OUTPUT -j limit-2524 + inet/filter/OUTPUT -j logaccept-final-171 + inet/filter/limit-2524 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1402 + inet/filter/logaccept-final-171 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-171 -j ACCEPT + inet/filter/logdrop-1402 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1402 -j DROP + inet6/filter/FORWARD -j limit-2524 + inet6/filter/FORWARD -j logaccept-final-171 + inet6/filter/INPUT -j limit-2524 + inet6/filter/INPUT -j logaccept-final-171 + inet6/filter/OUTPUT -j limit-2524 + inet6/filter/OUTPUT -j logaccept-final-171 + inet6/filter/limit-2524 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1402 + inet6/filter/logaccept-final-171 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-171 -j ACCEPT + inet6/filter/logdrop-1402 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1402 -j DROP + +Filter 2526 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2525 + inet/filter/INPUT -j limit-2525 + inet/filter/OUTPUT -j limit-2525 + inet/filter/limit-2525 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1403 + inet/filter/limit-2525 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1403 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1403 -j DROP + inet6/filter/FORWARD -j limit-2525 + inet6/filter/INPUT -j limit-2525 + inet6/filter/OUTPUT -j limit-2525 + inet6/filter/limit-2525 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1403 + inet6/filter/limit-2525 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1403 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1403 -j DROP + +Filter 2527 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2526 + inet/filter/FORWARD -j logaccept-final-172 + inet/filter/INPUT -j limit-2526 + inet/filter/INPUT -j logaccept-final-172 + inet/filter/OUTPUT -j limit-2526 + inet/filter/OUTPUT -j logaccept-final-172 + inet/filter/limit-2526 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1404 + inet/filter/logaccept-final-172 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-172 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-172 -j ACCEPT + inet/filter/logdrop-1404 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1404 -j DROP + inet6/filter/FORWARD -j limit-2526 + inet6/filter/FORWARD -j logaccept-final-172 + inet6/filter/INPUT -j limit-2526 + inet6/filter/INPUT -j logaccept-final-172 + inet6/filter/OUTPUT -j limit-2526 + inet6/filter/OUTPUT -j logaccept-final-172 + inet6/filter/limit-2526 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1404 + inet6/filter/logaccept-final-172 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-172 -j ACCEPT + inet6/filter/logdrop-1404 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1404 -j DROP + +Filter 2528 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2527 + inet/filter/INPUT -j limit-2527 + inet/filter/OUTPUT -j limit-2527 + inet/filter/limit-2527 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1405 + inet/filter/limit-2527 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2527 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1405 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1405 -j DROP + inet6/filter/FORWARD -j limit-2527 + inet6/filter/INPUT -j limit-2527 + inet6/filter/OUTPUT -j limit-2527 + inet6/filter/limit-2527 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1405 + inet6/filter/limit-2527 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1405 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1405 -j DROP + +Filter 2529 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2528 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2528 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2528 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2528 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1406 + inet/filter/logdrop-1406 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1406 -j DROP + inet6/filter/FORWARD -j limit-2528 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2528 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2528 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2528 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1406 + inet6/filter/logdrop-1406 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1406 -j DROP + +Filter 2530 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2529 + inet/filter/INPUT -j limit-2529 + inet/filter/OUTPUT -j limit-2529 + inet/filter/limit-2529 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1407 + inet/filter/logdrop-1407 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1407 -j DROP + inet6/filter/FORWARD -j limit-2529 + inet6/filter/INPUT -j limit-2529 + inet6/filter/OUTPUT -j limit-2529 + inet6/filter/limit-2529 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1407 + inet6/filter/logdrop-1407 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1407 -j DROP + +Filter 2531 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2530 + inet/filter/FORWARD -j logaccept-final-173 + inet/filter/INPUT -j limit-2530 + inet/filter/INPUT -j logaccept-final-173 + inet/filter/OUTPUT -j limit-2530 + inet/filter/OUTPUT -j logaccept-final-173 + inet/filter/limit-2530 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1408 + inet/filter/logaccept-final-173 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-173 -j ACCEPT + inet/filter/logdrop-1408 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1408 -j DROP + inet6/filter/FORWARD -j limit-2530 + inet6/filter/FORWARD -j logaccept-final-173 + inet6/filter/INPUT -j limit-2530 + inet6/filter/INPUT -j logaccept-final-173 + inet6/filter/OUTPUT -j limit-2530 + inet6/filter/OUTPUT -j logaccept-final-173 + inet6/filter/limit-2530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1408 + inet6/filter/logaccept-final-173 -j ACCEPT + inet6/filter/logdrop-1408 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1408 -j DROP + +Filter 2532 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2531 + inet/filter/INPUT -j limit-2531 + inet/filter/OUTPUT -j limit-2531 + inet/filter/limit-2531 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1409 + inet/filter/limit-2531 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1409 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1409 -j DROP + inet6/filter/FORWARD -j limit-2531 + inet6/filter/INPUT -j limit-2531 + inet6/filter/OUTPUT -j limit-2531 + inet6/filter/limit-2531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1409 + inet6/filter/logdrop-1409 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1409 -j DROP + +Filter 2533 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2532 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2532 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2532 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2532 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1410 + inet/filter/limit-2532 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1410 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1410 -j DROP + inet6/filter/FORWARD -j limit-2532 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2532 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2532 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2532 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1410 + inet6/filter/limit-2532 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1410 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1410 -j DROP + +Filter 2534 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2533 + inet/filter/INPUT -j limit-2533 + inet/filter/OUTPUT -j limit-2533 + inet/filter/limit-2533 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1411 + inet/filter/limit-2533 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1411 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1411 -j DROP + inet6/filter/FORWARD -j limit-2533 + inet6/filter/INPUT -j limit-2533 + inet6/filter/OUTPUT -j limit-2533 + inet6/filter/limit-2533 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1411 + inet6/filter/limit-2533 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1411 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1411 -j DROP + +Filter 2535 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2534 + inet/filter/FORWARD -j logaccept-final-174 + inet/filter/INPUT -j limit-2534 + inet/filter/INPUT -j logaccept-final-174 + inet/filter/OUTPUT -j limit-2534 + inet/filter/OUTPUT -j logaccept-final-174 + inet/filter/limit-2534 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1412 + inet/filter/limit-2534 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-174 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-174 -j ACCEPT + inet/filter/logdrop-1412 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1412 -j DROP + inet6/filter/FORWARD -j limit-2534 + inet6/filter/FORWARD -j logaccept-final-174 + inet6/filter/INPUT -j limit-2534 + inet6/filter/INPUT -j logaccept-final-174 + inet6/filter/OUTPUT -j limit-2534 + inet6/filter/OUTPUT -j logaccept-final-174 + inet6/filter/limit-2534 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1412 + inet6/filter/limit-2534 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-174 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-174 -j ACCEPT + inet6/filter/logdrop-1412 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1412 -j DROP + +Filter 2536 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2535 + inet/filter/INPUT -j limit-2535 + inet/filter/OUTPUT -j limit-2535 + inet/filter/limit-2535 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1413 + inet/filter/limit-2535 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1413 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1413 -j DROP + inet6/filter/FORWARD -j limit-2535 + inet6/filter/INPUT -j limit-2535 + inet6/filter/OUTPUT -j limit-2535 + inet6/filter/limit-2535 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1413 + inet6/filter/limit-2535 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1413 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1413 -j DROP + +Filter 2537 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2536 + inet/filter/FORWARD -j logaccept-final-175 + inet/filter/INPUT -j limit-2536 + inet/filter/INPUT -j logaccept-final-175 + inet/filter/OUTPUT -j limit-2536 + inet/filter/OUTPUT -j logaccept-final-175 + inet/filter/limit-2536 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1414 + inet/filter/limit-2536 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-175 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-175 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-175 -j ACCEPT + inet/filter/logdrop-1414 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1414 -j DROP + inet6/filter/FORWARD -j limit-2536 + inet6/filter/FORWARD -j logaccept-final-175 + inet6/filter/INPUT -j limit-2536 + inet6/filter/INPUT -j logaccept-final-175 + inet6/filter/OUTPUT -j limit-2536 + inet6/filter/OUTPUT -j logaccept-final-175 + inet6/filter/limit-2536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1414 + inet6/filter/limit-2536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-175 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-175 -j ACCEPT + inet6/filter/logdrop-1414 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1414 -j DROP + +Filter 2538 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2537 + inet/filter/INPUT -j limit-2537 + inet/filter/OUTPUT -j limit-2537 + inet/filter/limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1415 + inet/filter/limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1415 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1415 -j DROP + inet6/filter/FORWARD -j limit-2537 + inet6/filter/INPUT -j limit-2537 + inet6/filter/OUTPUT -j limit-2537 + inet6/filter/limit-2537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1415 + inet6/filter/limit-2537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1415 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1415 -j DROP + +Filter 2539 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2538 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2538 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2538 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2538 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1416 + inet/filter/limit-2538 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1416 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1416 -j DROP + inet6/filter/FORWARD -j limit-2538 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2538 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2538 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1416 + inet6/filter/limit-2538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1416 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1416 -j DROP + +Filter 2540 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2539 + inet/filter/INPUT -j limit-2539 + inet/filter/OUTPUT -j limit-2539 + inet/filter/limit-2539 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1417 + inet/filter/limit-2539 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1417 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1417 -j DROP + inet6/filter/FORWARD -j limit-2539 + inet6/filter/INPUT -j limit-2539 + inet6/filter/OUTPUT -j limit-2539 + inet6/filter/limit-2539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1417 + inet6/filter/limit-2539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1417 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1417 -j DROP + +Filter 2541 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2540 + inet/filter/FORWARD -j logaccept-final-176 + inet/filter/INPUT -j limit-2540 + inet/filter/INPUT -j logaccept-final-176 + inet/filter/OUTPUT -j limit-2540 + inet/filter/OUTPUT -j logaccept-final-176 + inet/filter/limit-2540 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1418 + inet/filter/limit-2540 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-176 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-176 -j ACCEPT + inet/filter/logdrop-1418 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1418 -j DROP + inet6/filter/FORWARD -j limit-2540 + inet6/filter/FORWARD -j logaccept-final-176 + inet6/filter/INPUT -j limit-2540 + inet6/filter/INPUT -j logaccept-final-176 + inet6/filter/OUTPUT -j limit-2540 + inet6/filter/OUTPUT -j logaccept-final-176 + inet6/filter/limit-2540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1418 + inet6/filter/limit-2540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-176 -j ACCEPT + inet6/filter/logdrop-1418 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1418 -j DROP + +Filter 2542 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2541 + inet/filter/INPUT -j limit-2541 + inet/filter/OUTPUT -j limit-2541 + inet/filter/limit-2541 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1419 + inet/filter/limit-2541 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1419 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1419 -j DROP + inet6/filter/FORWARD -j limit-2541 + inet6/filter/INPUT -j limit-2541 + inet6/filter/OUTPUT -j limit-2541 + inet6/filter/limit-2541 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1419 + inet6/filter/logdrop-1419 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1419 -j DROP + +Filter 2543 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2542 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2542 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2542 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2542 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1420 + inet/filter/logdrop-1420 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1420 -j DROP + inet6/filter/FORWARD -j limit-2542 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2542 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2542 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1420 + inet6/filter/logdrop-1420 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1420 -j DROP + +Filter 2544 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2543 + inet/filter/INPUT -j limit-2543 + inet/filter/OUTPUT -j limit-2543 + inet/filter/limit-2543 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1421 + inet/filter/logdrop-1421 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1421 -j DROP + inet6/filter/FORWARD -j limit-2543 + inet6/filter/INPUT -j limit-2543 + inet6/filter/OUTPUT -j limit-2543 + inet6/filter/limit-2543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1421 + inet6/filter/logdrop-1421 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1421 -j DROP + +Filter 2545 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2544 + inet/filter/FORWARD -j logaccept-final-177 + inet/filter/INPUT -j limit-2544 + inet/filter/INPUT -j logaccept-final-177 + inet/filter/OUTPUT -j limit-2544 + inet/filter/OUTPUT -j logaccept-final-177 + inet/filter/limit-2544 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1422 + inet/filter/logaccept-final-177 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-177 -j ACCEPT + inet/filter/logdrop-1422 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1422 -j DROP + inet6/filter/FORWARD -j limit-2544 + inet6/filter/FORWARD -j logaccept-final-177 + inet6/filter/INPUT -j limit-2544 + inet6/filter/INPUT -j logaccept-final-177 + inet6/filter/OUTPUT -j limit-2544 + inet6/filter/OUTPUT -j logaccept-final-177 + inet6/filter/limit-2544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1422 + inet6/filter/logaccept-final-177 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-177 -j ACCEPT + inet6/filter/logdrop-1422 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1422 -j DROP + +Filter 2546 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2545 + inet/filter/INPUT -j limit-2545 + inet/filter/OUTPUT -j limit-2545 + inet/filter/limit-2545 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1423 + inet/filter/limit-2545 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1423 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1423 -j DROP + inet6/filter/FORWARD -j limit-2545 + inet6/filter/INPUT -j limit-2545 + inet6/filter/OUTPUT -j limit-2545 + inet6/filter/limit-2545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1423 + inet6/filter/limit-2545 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1423 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1423 -j DROP + +Filter 2547 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2546 + inet/filter/FORWARD -j logaccept-final-178 + inet/filter/INPUT -j limit-2546 + inet/filter/INPUT -j logaccept-final-178 + inet/filter/OUTPUT -j limit-2546 + inet/filter/OUTPUT -j logaccept-final-178 + inet/filter/limit-2546 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1424 + inet/filter/logaccept-final-178 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-178 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-178 -j ACCEPT + inet/filter/logdrop-1424 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1424 -j DROP + inet6/filter/FORWARD -j limit-2546 + inet6/filter/FORWARD -j logaccept-final-178 + inet6/filter/INPUT -j limit-2546 + inet6/filter/INPUT -j logaccept-final-178 + inet6/filter/OUTPUT -j limit-2546 + inet6/filter/OUTPUT -j logaccept-final-178 + inet6/filter/limit-2546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1424 + inet6/filter/logaccept-final-178 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-178 -j ACCEPT + inet6/filter/logdrop-1424 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1424 -j DROP + +Filter 2548 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2547 + inet/filter/INPUT -j limit-2547 + inet/filter/OUTPUT -j limit-2547 + inet/filter/limit-2547 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1425 + inet/filter/limit-2547 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2547 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1425 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1425 -j DROP + inet6/filter/FORWARD -j limit-2547 + inet6/filter/INPUT -j limit-2547 + inet6/filter/OUTPUT -j limit-2547 + inet6/filter/limit-2547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1425 + inet6/filter/limit-2547 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1425 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1425 -j DROP + +Filter 2549 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2548 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2548 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2548 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2548 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1426 + inet/filter/logdrop-1426 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1426 -j DROP + inet6/filter/FORWARD -j limit-2548 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2548 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2548 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1426 + inet6/filter/logdrop-1426 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1426 -j DROP + +Filter 2550 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2549 + inet/filter/INPUT -j limit-2549 + inet/filter/OUTPUT -j limit-2549 + inet/filter/limit-2549 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1427 + inet/filter/logdrop-1427 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1427 -j DROP + inet6/filter/FORWARD -j limit-2549 + inet6/filter/INPUT -j limit-2549 + inet6/filter/OUTPUT -j limit-2549 + inet6/filter/limit-2549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1427 + inet6/filter/logdrop-1427 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1427 -j DROP + +Filter 2551 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2550 + inet/filter/FORWARD -j logaccept-final-179 + inet/filter/INPUT -j limit-2550 + inet/filter/INPUT -j logaccept-final-179 + inet/filter/OUTPUT -j limit-2550 + inet/filter/OUTPUT -j logaccept-final-179 + inet/filter/limit-2550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1428 + inet/filter/logaccept-final-179 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-179 -j ACCEPT + inet/filter/logdrop-1428 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1428 -j DROP + inet6/filter/FORWARD -j limit-2550 + inet6/filter/FORWARD -j logaccept-final-179 + inet6/filter/INPUT -j limit-2550 + inet6/filter/INPUT -j logaccept-final-179 + inet6/filter/OUTPUT -j limit-2550 + inet6/filter/OUTPUT -j logaccept-final-179 + inet6/filter/limit-2550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1428 + inet6/filter/logaccept-final-179 -j ACCEPT + inet6/filter/logdrop-1428 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1428 -j DROP + +Filter 2552 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2551 + inet/filter/INPUT -j limit-2551 + inet/filter/OUTPUT -j limit-2551 + inet/filter/limit-2551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1429 + inet/filter/limit-2551 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1429 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1429 -j DROP + inet6/filter/FORWARD -j limit-2551 + inet6/filter/INPUT -j limit-2551 + inet6/filter/OUTPUT -j limit-2551 + inet6/filter/limit-2551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1429 + inet6/filter/logdrop-1429 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1429 -j DROP + +Filter 2553 {"flow-limit":{"interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2552 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2552 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2552 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2552 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1430 + inet/filter/limit-2552 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1430 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1430 -j DROP + inet6/filter/FORWARD -j limit-2552 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2552 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2552 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2552 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1430 + inet6/filter/limit-2552 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1430 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1430 -j DROP + +Filter 2554 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2553 + inet/filter/INPUT -j limit-2553 + inet/filter/OUTPUT -j limit-2553 + inet/filter/limit-2553 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1431 + inet/filter/limit-2553 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1431 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1431 -j DROP + inet6/filter/FORWARD -j limit-2553 + inet6/filter/INPUT -j limit-2553 + inet6/filter/OUTPUT -j limit-2553 + inet6/filter/limit-2553 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1431 + inet6/filter/limit-2553 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1431 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1431 -j DROP + +Filter 2555 {"flow-limit":{"interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2554 + inet/filter/FORWARD -j logaccept-final-180 + inet/filter/INPUT -j limit-2554 + inet/filter/INPUT -j logaccept-final-180 + inet/filter/OUTPUT -j limit-2554 + inet/filter/OUTPUT -j logaccept-final-180 + inet/filter/limit-2554 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1432 + inet/filter/limit-2554 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-180 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-180 -j ACCEPT + inet/filter/logdrop-1432 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1432 -j DROP + inet6/filter/FORWARD -j limit-2554 + inet6/filter/FORWARD -j logaccept-final-180 + inet6/filter/INPUT -j limit-2554 + inet6/filter/INPUT -j logaccept-final-180 + inet6/filter/OUTPUT -j limit-2554 + inet6/filter/OUTPUT -j logaccept-final-180 + inet6/filter/limit-2554 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1432 + inet6/filter/limit-2554 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-180 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-180 -j ACCEPT + inet6/filter/logdrop-1432 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1432 -j DROP + +Filter 2556 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2555 + inet/filter/INPUT -j limit-2555 + inet/filter/OUTPUT -j limit-2555 + inet/filter/limit-2555 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1433 + inet/filter/limit-2555 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1433 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1433 -j DROP + inet6/filter/FORWARD -j limit-2555 + inet6/filter/INPUT -j limit-2555 + inet6/filter/OUTPUT -j limit-2555 + inet6/filter/limit-2555 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1433 + inet6/filter/limit-2555 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1433 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1433 -j DROP + +Filter 2557 {"flow-limit":{"interval":5,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2556 + inet/filter/FORWARD -j logaccept-final-181 + inet/filter/INPUT -j limit-2556 + inet/filter/INPUT -j logaccept-final-181 + inet/filter/OUTPUT -j limit-2556 + inet/filter/OUTPUT -j logaccept-final-181 + inet/filter/limit-2556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1434 + inet/filter/limit-2556 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-181 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-181 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-181 -j ACCEPT + inet/filter/logdrop-1434 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1434 -j DROP + inet6/filter/FORWARD -j limit-2556 + inet6/filter/FORWARD -j logaccept-final-181 + inet6/filter/INPUT -j limit-2556 + inet6/filter/INPUT -j logaccept-final-181 + inet6/filter/OUTPUT -j limit-2556 + inet6/filter/OUTPUT -j logaccept-final-181 + inet6/filter/limit-2556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1434 + inet6/filter/limit-2556 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-181 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-181 -j ACCEPT + inet6/filter/logdrop-1434 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1434 -j DROP + +Filter 2558 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2557 + inet/filter/INPUT -j limit-2557 + inet/filter/OUTPUT -j limit-2557 + inet/filter/limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1435 + inet/filter/limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1435 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1435 -j DROP + inet6/filter/FORWARD -j limit-2557 + inet6/filter/INPUT -j limit-2557 + inet6/filter/OUTPUT -j limit-2557 + inet6/filter/limit-2557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1435 + inet6/filter/limit-2557 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1435 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1435 -j DROP + +Filter 2559 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2558 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2558 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2558 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1436 + inet/filter/limit-2558 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1436 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1436 -j DROP + inet6/filter/FORWARD -j limit-2558 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2558 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2558 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1436 + inet6/filter/limit-2558 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1436 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1436 -j DROP + +Filter 2560 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2559 + inet/filter/INPUT -j limit-2559 + inet/filter/OUTPUT -j limit-2559 + inet/filter/limit-2559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1437 + inet/filter/limit-2559 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1437 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1437 -j DROP + inet6/filter/FORWARD -j limit-2559 + inet6/filter/INPUT -j limit-2559 + inet6/filter/OUTPUT -j limit-2559 + inet6/filter/limit-2559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1437 + inet6/filter/limit-2559 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1437 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1437 -j DROP + +Filter 2561 {"flow-limit":{"interval":5,"name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2560 + inet/filter/FORWARD -j logaccept-final-182 + inet/filter/INPUT -j limit-2560 + inet/filter/INPUT -j logaccept-final-182 + inet/filter/OUTPUT -j limit-2560 + inet/filter/OUTPUT -j logaccept-final-182 + inet/filter/limit-2560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1438 + inet/filter/limit-2560 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-182 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-182 -j ACCEPT + inet/filter/logdrop-1438 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1438 -j DROP + inet6/filter/FORWARD -j limit-2560 + inet6/filter/FORWARD -j logaccept-final-182 + inet6/filter/INPUT -j limit-2560 + inet6/filter/INPUT -j logaccept-final-182 + inet6/filter/OUTPUT -j limit-2560 + inet6/filter/OUTPUT -j logaccept-final-182 + inet6/filter/limit-2560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1438 + inet6/filter/limit-2560 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-182 -j ACCEPT + inet6/filter/logdrop-1438 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1438 -j DROP + +Filter 2562 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2561 + inet/filter/INPUT -j limit-2561 + inet/filter/OUTPUT -j limit-2561 + inet/filter/limit-2561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1439 + inet/filter/limit-2561 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1439 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1439 -j DROP + inet6/filter/FORWARD -j limit-2561 + inet6/filter/INPUT -j limit-2561 + inet6/filter/OUTPUT -j limit-2561 + inet6/filter/limit-2561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1439 + inet6/filter/logdrop-1439 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1439 -j DROP + +Filter 2563 {"flow-limit":{"interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2562 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2562 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2562 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1440 + inet/filter/logdrop-1440 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1440 -j DROP + inet6/filter/FORWARD -j limit-2562 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2562 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2562 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1440 + inet6/filter/logdrop-1440 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1440 -j DROP + +Filter 2564 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2563 + inet/filter/INPUT -j limit-2563 + inet/filter/OUTPUT -j limit-2563 + inet/filter/limit-2563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1441 + inet/filter/logdrop-1441 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1441 -j DROP + inet6/filter/FORWARD -j limit-2563 + inet6/filter/INPUT -j limit-2563 + inet6/filter/OUTPUT -j limit-2563 + inet6/filter/limit-2563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1441 + inet6/filter/logdrop-1441 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1441 -j DROP + +Filter 2565 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2564 + inet/filter/FORWARD -j logaccept-final-183 + inet/filter/INPUT -j limit-2564 + inet/filter/INPUT -j logaccept-final-183 + inet/filter/OUTPUT -j limit-2564 + inet/filter/OUTPUT -j logaccept-final-183 + inet/filter/limit-2564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1442 + inet/filter/logaccept-final-183 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-183 -j ACCEPT + inet/filter/logdrop-1442 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1442 -j DROP + inet6/filter/FORWARD -j limit-2564 + inet6/filter/FORWARD -j logaccept-final-183 + inet6/filter/INPUT -j limit-2564 + inet6/filter/INPUT -j logaccept-final-183 + inet6/filter/OUTPUT -j limit-2564 + inet6/filter/OUTPUT -j logaccept-final-183 + inet6/filter/limit-2564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1442 + inet6/filter/logaccept-final-183 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-183 -j ACCEPT + inet6/filter/logdrop-1442 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1442 -j DROP + +Filter 2566 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2565 + inet/filter/INPUT -j limit-2565 + inet/filter/OUTPUT -j limit-2565 + inet/filter/limit-2565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1443 + inet/filter/limit-2565 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1443 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1443 -j DROP + inet6/filter/FORWARD -j limit-2565 + inet6/filter/INPUT -j limit-2565 + inet6/filter/OUTPUT -j limit-2565 + inet6/filter/limit-2565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1443 + inet6/filter/limit-2565 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1443 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1443 -j DROP + +Filter 2567 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2566 + inet/filter/FORWARD -j logaccept-final-184 + inet/filter/INPUT -j limit-2566 + inet/filter/INPUT -j logaccept-final-184 + inet/filter/OUTPUT -j limit-2566 + inet/filter/OUTPUT -j logaccept-final-184 + inet/filter/limit-2566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1444 + inet/filter/logaccept-final-184 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-184 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-184 -j ACCEPT + inet/filter/logdrop-1444 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1444 -j DROP + inet6/filter/FORWARD -j limit-2566 + inet6/filter/FORWARD -j logaccept-final-184 + inet6/filter/INPUT -j limit-2566 + inet6/filter/INPUT -j logaccept-final-184 + inet6/filter/OUTPUT -j limit-2566 + inet6/filter/OUTPUT -j logaccept-final-184 + inet6/filter/limit-2566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1444 + inet6/filter/logaccept-final-184 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-184 -j ACCEPT + inet6/filter/logdrop-1444 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1444 -j DROP + +Filter 2568 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2567 + inet/filter/INPUT -j limit-2567 + inet/filter/OUTPUT -j limit-2567 + inet/filter/limit-2567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1445 + inet/filter/limit-2567 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2567 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1445 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1445 -j DROP + inet6/filter/FORWARD -j limit-2567 + inet6/filter/INPUT -j limit-2567 + inet6/filter/OUTPUT -j limit-2567 + inet6/filter/limit-2567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1445 + inet6/filter/limit-2567 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1445 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1445 -j DROP + +Filter 2569 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2568 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2568 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2568 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2568 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1446 + inet/filter/logdrop-1446 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1446 -j DROP + inet6/filter/FORWARD -j limit-2568 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2568 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2568 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2568 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1446 + inet6/filter/logdrop-1446 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1446 -j DROP + +Filter 2570 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2569 + inet/filter/INPUT -j limit-2569 + inet/filter/OUTPUT -j limit-2569 + inet/filter/limit-2569 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1447 + inet/filter/logdrop-1447 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1447 -j DROP + inet6/filter/FORWARD -j limit-2569 + inet6/filter/INPUT -j limit-2569 + inet6/filter/OUTPUT -j limit-2569 + inet6/filter/limit-2569 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1447 + inet6/filter/logdrop-1447 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1447 -j DROP + +Filter 2571 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2570 + inet/filter/FORWARD -j logaccept-final-185 + inet/filter/INPUT -j limit-2570 + inet/filter/INPUT -j logaccept-final-185 + inet/filter/OUTPUT -j limit-2570 + inet/filter/OUTPUT -j logaccept-final-185 + inet/filter/limit-2570 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1448 + inet/filter/logaccept-final-185 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-185 -j ACCEPT + inet/filter/logdrop-1448 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1448 -j DROP + inet6/filter/FORWARD -j limit-2570 + inet6/filter/FORWARD -j logaccept-final-185 + inet6/filter/INPUT -j limit-2570 + inet6/filter/INPUT -j logaccept-final-185 + inet6/filter/OUTPUT -j limit-2570 + inet6/filter/OUTPUT -j logaccept-final-185 + inet6/filter/limit-2570 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1448 + inet6/filter/logaccept-final-185 -j ACCEPT + inet6/filter/logdrop-1448 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1448 -j DROP + +Filter 2572 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2571 + inet/filter/INPUT -j limit-2571 + inet/filter/OUTPUT -j limit-2571 + inet/filter/limit-2571 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1449 + inet/filter/limit-2571 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1449 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1449 -j DROP + inet6/filter/FORWARD -j limit-2571 + inet6/filter/INPUT -j limit-2571 + inet6/filter/OUTPUT -j limit-2571 + inet6/filter/limit-2571 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1449 + inet6/filter/logdrop-1449 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1449 -j DROP + +Filter 2573 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2572 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2572 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2572 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1450 + inet/filter/limit-2572 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1450 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1450 -j DROP + inet6/filter/FORWARD -j limit-2572 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2572 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2572 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1450 + inet6/filter/limit-2572 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1450 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1450 -j DROP + +Filter 2574 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2573 + inet/filter/INPUT -j limit-2573 + inet/filter/OUTPUT -j limit-2573 + inet/filter/limit-2573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1451 + inet/filter/limit-2573 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1451 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1451 -j DROP + inet6/filter/FORWARD -j limit-2573 + inet6/filter/INPUT -j limit-2573 + inet6/filter/OUTPUT -j limit-2573 + inet6/filter/limit-2573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1451 + inet6/filter/limit-2573 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1451 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1451 -j DROP + +Filter 2575 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2574 + inet/filter/FORWARD -j logaccept-final-186 + inet/filter/INPUT -j limit-2574 + inet/filter/INPUT -j logaccept-final-186 + inet/filter/OUTPUT -j limit-2574 + inet/filter/OUTPUT -j logaccept-final-186 + inet/filter/limit-2574 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1452 + inet/filter/limit-2574 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-186 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-186 -j ACCEPT + inet/filter/logdrop-1452 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1452 -j DROP + inet6/filter/FORWARD -j limit-2574 + inet6/filter/FORWARD -j logaccept-final-186 + inet6/filter/INPUT -j limit-2574 + inet6/filter/INPUT -j logaccept-final-186 + inet6/filter/OUTPUT -j limit-2574 + inet6/filter/OUTPUT -j logaccept-final-186 + inet6/filter/limit-2574 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1452 + inet6/filter/limit-2574 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-186 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-186 -j ACCEPT + inet6/filter/logdrop-1452 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1452 -j DROP + +Filter 2576 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2575 + inet/filter/INPUT -j limit-2575 + inet/filter/OUTPUT -j limit-2575 + inet/filter/limit-2575 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1453 + inet/filter/limit-2575 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1453 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1453 -j DROP + inet6/filter/FORWARD -j limit-2575 + inet6/filter/INPUT -j limit-2575 + inet6/filter/OUTPUT -j limit-2575 + inet6/filter/limit-2575 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1453 + inet6/filter/limit-2575 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1453 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1453 -j DROP + +Filter 2577 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2576 + inet/filter/FORWARD -j logaccept-final-187 + inet/filter/INPUT -j limit-2576 + inet/filter/INPUT -j logaccept-final-187 + inet/filter/OUTPUT -j limit-2576 + inet/filter/OUTPUT -j logaccept-final-187 + inet/filter/limit-2576 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1454 + inet/filter/limit-2576 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-187 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-187 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-187 -j ACCEPT + inet/filter/logdrop-1454 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1454 -j DROP + inet6/filter/FORWARD -j limit-2576 + inet6/filter/FORWARD -j logaccept-final-187 + inet6/filter/INPUT -j limit-2576 + inet6/filter/INPUT -j logaccept-final-187 + inet6/filter/OUTPUT -j limit-2576 + inet6/filter/OUTPUT -j logaccept-final-187 + inet6/filter/limit-2576 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1454 + inet6/filter/limit-2576 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-187 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-187 -j ACCEPT + inet6/filter/logdrop-1454 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1454 -j DROP + +Filter 2578 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2577 + inet/filter/INPUT -j limit-2577 + inet/filter/OUTPUT -j limit-2577 + inet/filter/limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1455 + inet/filter/limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1455 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1455 -j DROP + inet6/filter/FORWARD -j limit-2577 + inet6/filter/INPUT -j limit-2577 + inet6/filter/OUTPUT -j limit-2577 + inet6/filter/limit-2577 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1455 + inet6/filter/limit-2577 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1455 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1455 -j DROP + +Filter 2579 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2578 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2578 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2578 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2578 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1456 + inet/filter/limit-2578 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1456 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1456 -j DROP + inet6/filter/FORWARD -j limit-2578 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2578 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2578 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2578 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1456 + inet6/filter/limit-2578 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1456 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1456 -j DROP + +Filter 2580 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2579 + inet/filter/INPUT -j limit-2579 + inet/filter/OUTPUT -j limit-2579 + inet/filter/limit-2579 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1457 + inet/filter/limit-2579 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1457 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1457 -j DROP + inet6/filter/FORWARD -j limit-2579 + inet6/filter/INPUT -j limit-2579 + inet6/filter/OUTPUT -j limit-2579 + inet6/filter/limit-2579 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1457 + inet6/filter/limit-2579 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1457 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1457 -j DROP + +Filter 2581 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2580 + inet/filter/FORWARD -j logaccept-final-188 + inet/filter/INPUT -j limit-2580 + inet/filter/INPUT -j logaccept-final-188 + inet/filter/OUTPUT -j limit-2580 + inet/filter/OUTPUT -j logaccept-final-188 + inet/filter/limit-2580 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1458 + inet/filter/limit-2580 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-188 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-188 -j ACCEPT + inet/filter/logdrop-1458 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1458 -j DROP + inet6/filter/FORWARD -j limit-2580 + inet6/filter/FORWARD -j logaccept-final-188 + inet6/filter/INPUT -j limit-2580 + inet6/filter/INPUT -j logaccept-final-188 + inet6/filter/OUTPUT -j limit-2580 + inet6/filter/OUTPUT -j logaccept-final-188 + inet6/filter/limit-2580 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1458 + inet6/filter/limit-2580 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-188 -j ACCEPT + inet6/filter/logdrop-1458 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1458 -j DROP + +Filter 2582 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2581 + inet/filter/INPUT -j limit-2581 + inet/filter/OUTPUT -j limit-2581 + inet/filter/limit-2581 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1459 + inet/filter/limit-2581 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1459 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1459 -j DROP + inet6/filter/FORWARD -j limit-2581 + inet6/filter/INPUT -j limit-2581 + inet6/filter/OUTPUT -j limit-2581 + inet6/filter/limit-2581 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1459 + inet6/filter/logdrop-1459 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1459 -j DROP + +Filter 2583 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2582 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2582 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2582 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2582 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1460 + inet/filter/logdrop-1460 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1460 -j DROP + inet6/filter/FORWARD -j limit-2582 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2582 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2582 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2582 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1460 + inet6/filter/logdrop-1460 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1460 -j DROP + +Filter 2584 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2583 + inet/filter/INPUT -j limit-2583 + inet/filter/OUTPUT -j limit-2583 + inet/filter/limit-2583 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1461 + inet/filter/logdrop-1461 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1461 -j DROP + inet6/filter/FORWARD -j limit-2583 + inet6/filter/INPUT -j limit-2583 + inet6/filter/OUTPUT -j limit-2583 + inet6/filter/limit-2583 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1461 + inet6/filter/logdrop-1461 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1461 -j DROP + +Filter 2585 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2584 + inet/filter/FORWARD -j logaccept-final-189 + inet/filter/INPUT -j limit-2584 + inet/filter/INPUT -j logaccept-final-189 + inet/filter/OUTPUT -j limit-2584 + inet/filter/OUTPUT -j logaccept-final-189 + inet/filter/limit-2584 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1462 + inet/filter/logaccept-final-189 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-189 -j ACCEPT + inet/filter/logdrop-1462 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1462 -j DROP + inet6/filter/FORWARD -j limit-2584 + inet6/filter/FORWARD -j logaccept-final-189 + inet6/filter/INPUT -j limit-2584 + inet6/filter/INPUT -j logaccept-final-189 + inet6/filter/OUTPUT -j limit-2584 + inet6/filter/OUTPUT -j logaccept-final-189 + inet6/filter/limit-2584 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1462 + inet6/filter/logaccept-final-189 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-189 -j ACCEPT + inet6/filter/logdrop-1462 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1462 -j DROP + +Filter 2586 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2585 + inet/filter/INPUT -j limit-2585 + inet/filter/OUTPUT -j limit-2585 + inet/filter/limit-2585 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1463 + inet/filter/limit-2585 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1463 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1463 -j DROP + inet6/filter/FORWARD -j limit-2585 + inet6/filter/INPUT -j limit-2585 + inet6/filter/OUTPUT -j limit-2585 + inet6/filter/limit-2585 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1463 + inet6/filter/limit-2585 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1463 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1463 -j DROP + +Filter 2587 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2586 + inet/filter/FORWARD -j logaccept-final-190 + inet/filter/INPUT -j limit-2586 + inet/filter/INPUT -j logaccept-final-190 + inet/filter/OUTPUT -j limit-2586 + inet/filter/OUTPUT -j logaccept-final-190 + inet/filter/limit-2586 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1464 + inet/filter/logaccept-final-190 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-190 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-190 -j ACCEPT + inet/filter/logdrop-1464 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1464 -j DROP + inet6/filter/FORWARD -j limit-2586 + inet6/filter/FORWARD -j logaccept-final-190 + inet6/filter/INPUT -j limit-2586 + inet6/filter/INPUT -j logaccept-final-190 + inet6/filter/OUTPUT -j limit-2586 + inet6/filter/OUTPUT -j logaccept-final-190 + inet6/filter/limit-2586 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1464 + inet6/filter/logaccept-final-190 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-190 -j ACCEPT + inet6/filter/logdrop-1464 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1464 -j DROP + +Filter 2588 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2587 + inet/filter/INPUT -j limit-2587 + inet/filter/OUTPUT -j limit-2587 + inet/filter/limit-2587 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1465 + inet/filter/limit-2587 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2587 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1465 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1465 -j DROP + inet6/filter/FORWARD -j limit-2587 + inet6/filter/INPUT -j limit-2587 + inet6/filter/OUTPUT -j limit-2587 + inet6/filter/limit-2587 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1465 + inet6/filter/limit-2587 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1465 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1465 -j DROP + +Filter 2589 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2588 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2588 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2588 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2588 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1466 + inet/filter/logdrop-1466 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1466 -j DROP + inet6/filter/FORWARD -j limit-2588 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2588 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2588 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2588 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1466 + inet6/filter/logdrop-1466 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1466 -j DROP + +Filter 2590 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2589 + inet/filter/INPUT -j limit-2589 + inet/filter/OUTPUT -j limit-2589 + inet/filter/limit-2589 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1467 + inet/filter/logdrop-1467 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1467 -j DROP + inet6/filter/FORWARD -j limit-2589 + inet6/filter/INPUT -j limit-2589 + inet6/filter/OUTPUT -j limit-2589 + inet6/filter/limit-2589 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1467 + inet6/filter/logdrop-1467 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1467 -j DROP + +Filter 2591 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2590 + inet/filter/FORWARD -j logaccept-final-191 + inet/filter/INPUT -j limit-2590 + inet/filter/INPUT -j logaccept-final-191 + inet/filter/OUTPUT -j limit-2590 + inet/filter/OUTPUT -j logaccept-final-191 + inet/filter/limit-2590 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1468 + inet/filter/logaccept-final-191 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-191 -j ACCEPT + inet/filter/logdrop-1468 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1468 -j DROP + inet6/filter/FORWARD -j limit-2590 + inet6/filter/FORWARD -j logaccept-final-191 + inet6/filter/INPUT -j limit-2590 + inet6/filter/INPUT -j logaccept-final-191 + inet6/filter/OUTPUT -j limit-2590 + inet6/filter/OUTPUT -j logaccept-final-191 + inet6/filter/limit-2590 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1468 + inet6/filter/logaccept-final-191 -j ACCEPT + inet6/filter/logdrop-1468 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1468 -j DROP + +Filter 2592 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2591 + inet/filter/INPUT -j limit-2591 + inet/filter/OUTPUT -j limit-2591 + inet/filter/limit-2591 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1469 + inet/filter/limit-2591 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1469 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1469 -j DROP + inet6/filter/FORWARD -j limit-2591 + inet6/filter/INPUT -j limit-2591 + inet6/filter/OUTPUT -j limit-2591 + inet6/filter/limit-2591 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1469 + inet6/filter/logdrop-1469 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1469 -j DROP + +Filter 2593 {"flow-limit":{"interval":5,"log":"mirror"}} +(filter-limit) + inet/filter/FORWARD -j limit-2592 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2592 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2592 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2592 -m recent --name limit-2592 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1470 + inet/filter/limit-2592 -m recent --name limit-2592 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1470 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1470 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1470 -j DROP + inet6/filter/FORWARD -j limit-2592 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2592 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2592 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2592 -m recent --name limit-2592 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1470 + inet6/filter/limit-2592 -m recent --name limit-2592 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1470 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1470 -j DROP + +Filter 2594 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"}} +(filter-limit) + inet/filter/FORWARD -j limit-2593 + inet/filter/INPUT -j limit-2593 + inet/filter/OUTPUT -j limit-2593 + inet/filter/limit-2593 -m recent --name limit-2593 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1471 + inet/filter/limit-2593 -m recent --name limit-2593 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1471 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1471 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1471 -j DROP + inet6/filter/FORWARD -j limit-2593 + inet6/filter/INPUT -j limit-2593 + inet6/filter/OUTPUT -j limit-2593 + inet6/filter/limit-2593 -m recent --name limit-2593 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1471 + inet6/filter/limit-2593 -m recent --name limit-2593 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1471 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1471 -j DROP + +Filter 2595 {"flow-limit":{"interval":5,"log":"mirror"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2594 + inet/filter/FORWARD -j logaccept-final-192 + inet/filter/INPUT -j limit-2594 + inet/filter/INPUT -j logaccept-final-192 + inet/filter/OUTPUT -j limit-2594 + inet/filter/OUTPUT -j logaccept-final-192 + inet/filter/limit-2594 -m recent --name limit-2594 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1472 + inet/filter/limit-2594 -m recent --name limit-2594 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-192 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-192 -j ACCEPT + inet/filter/logdrop-1472 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1472 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1472 -j DROP + inet6/filter/FORWARD -j limit-2594 + inet6/filter/FORWARD -j logaccept-final-192 + inet6/filter/INPUT -j limit-2594 + inet6/filter/INPUT -j logaccept-final-192 + inet6/filter/OUTPUT -j limit-2594 + inet6/filter/OUTPUT -j logaccept-final-192 + inet6/filter/limit-2594 -m recent --name limit-2594 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1472 + inet6/filter/limit-2594 -m recent --name limit-2594 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-192 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-192 -j ACCEPT + inet6/filter/logdrop-1472 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1472 -j DROP + +Filter 2596 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2595 + inet/filter/INPUT -j limit-2595 + inet/filter/OUTPUT -j limit-2595 + inet/filter/limit-2595 -m recent --name limit-2595 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1473 + inet/filter/limit-2595 -m recent --name limit-2595 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1473 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1473 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1473 -j DROP + inet6/filter/FORWARD -j limit-2595 + inet6/filter/INPUT -j limit-2595 + inet6/filter/OUTPUT -j limit-2595 + inet6/filter/limit-2595 -m recent --name limit-2595 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1473 + inet6/filter/limit-2595 -m recent --name limit-2595 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1473 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1473 -j DROP + +Filter 2597 {"flow-limit":{"interval":5,"log":"mirror"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2596 + inet/filter/FORWARD -j logaccept-final-193 + inet/filter/INPUT -j limit-2596 + inet/filter/INPUT -j logaccept-final-193 + inet/filter/OUTPUT -j limit-2596 + inet/filter/OUTPUT -j logaccept-final-193 + inet/filter/limit-2596 -m recent --name limit-2596 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1474 + inet/filter/limit-2596 -m recent --name limit-2596 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-193 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-193 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-193 -j ACCEPT + inet/filter/logdrop-1474 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1474 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1474 -j DROP + inet6/filter/FORWARD -j limit-2596 + inet6/filter/FORWARD -j logaccept-final-193 + inet6/filter/INPUT -j limit-2596 + inet6/filter/INPUT -j logaccept-final-193 + inet6/filter/OUTPUT -j limit-2596 + inet6/filter/OUTPUT -j logaccept-final-193 + inet6/filter/limit-2596 -m recent --name limit-2596 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1474 + inet6/filter/limit-2596 -m recent --name limit-2596 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-193 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-193 -j ACCEPT + inet6/filter/logdrop-1474 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1474 -j DROP + +Filter 2598 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2597 + inet/filter/INPUT -j limit-2597 + inet/filter/OUTPUT -j limit-2597 + inet/filter/limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1475 + inet/filter/limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1475 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1475 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1475 -j DROP + inet6/filter/FORWARD -j limit-2597 + inet6/filter/INPUT -j limit-2597 + inet6/filter/OUTPUT -j limit-2597 + inet6/filter/limit-2597 -m recent --name limit-2597 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1475 + inet6/filter/limit-2597 -m recent --name limit-2597 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1475 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1475 -j DROP + +Filter 2599 {"flow-limit":{"interval":5,"log":"mirror"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2598 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2598 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2598 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2598 -m recent --name limit-2598 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1476 + inet/filter/limit-2598 -m recent --name limit-2598 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1476 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1476 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1476 -j DROP + inet6/filter/FORWARD -j limit-2598 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2598 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2598 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2598 -m recent --name limit-2598 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1476 + inet6/filter/limit-2598 -m recent --name limit-2598 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1476 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1476 -j DROP + +Filter 2600 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2599 + inet/filter/INPUT -j limit-2599 + inet/filter/OUTPUT -j limit-2599 + inet/filter/limit-2599 -m recent --name limit-2599 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1477 + inet/filter/limit-2599 -m recent --name limit-2599 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1477 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1477 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1477 -j DROP + inet6/filter/FORWARD -j limit-2599 + inet6/filter/INPUT -j limit-2599 + inet6/filter/OUTPUT -j limit-2599 + inet6/filter/limit-2599 -m recent --name limit-2599 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1477 + inet6/filter/limit-2599 -m recent --name limit-2599 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1477 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1477 -j DROP + +Filter 2601 {"flow-limit":{"interval":5,"log":"mirror"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2600 + inet/filter/FORWARD -j logaccept-final-194 + inet/filter/INPUT -j limit-2600 + inet/filter/INPUT -j logaccept-final-194 + inet/filter/OUTPUT -j limit-2600 + inet/filter/OUTPUT -j logaccept-final-194 + inet/filter/limit-2600 -m recent --name limit-2600 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1478 + inet/filter/limit-2600 -m recent --name limit-2600 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-194 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-194 -j ACCEPT + inet/filter/logdrop-1478 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1478 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1478 -j DROP + inet6/filter/FORWARD -j limit-2600 + inet6/filter/FORWARD -j logaccept-final-194 + inet6/filter/INPUT -j limit-2600 + inet6/filter/INPUT -j logaccept-final-194 + inet6/filter/OUTPUT -j limit-2600 + inet6/filter/OUTPUT -j logaccept-final-194 + inet6/filter/limit-2600 -m recent --name limit-2600 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1478 + inet6/filter/limit-2600 -m recent --name limit-2600 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-194 -j ACCEPT + inet6/filter/logdrop-1478 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1478 -j DROP + +Filter 2602 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2601 + inet/filter/INPUT -j limit-2601 + inet/filter/OUTPUT -j limit-2601 + inet/filter/limit-2601 -m recent --name limit-2601 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1479 + inet/filter/limit-2601 -m recent --name limit-2601 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1479 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1479 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1479 -j DROP + inet6/filter/FORWARD -j limit-2601 + inet6/filter/INPUT -j limit-2601 + inet6/filter/OUTPUT -j limit-2601 + inet6/filter/limit-2601 -m recent --name limit-2601 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1479 + inet6/filter/logdrop-1479 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1479 -j DROP + +Filter 2603 {"flow-limit":{"interval":5,"log":"mirror","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2602 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2602 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2602 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2602 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1480 + inet/filter/limit-2602 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1480 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1480 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1480 -j DROP + inet6/filter/FORWARD -j limit-2602 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2602 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2602 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2602 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1480 + inet6/filter/limit-2602 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1480 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1480 -j DROP + +Filter 2604 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2603 + inet/filter/INPUT -j limit-2603 + inet/filter/OUTPUT -j limit-2603 + inet/filter/limit-2603 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1481 + inet/filter/limit-2603 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1481 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1481 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1481 -j DROP + inet6/filter/FORWARD -j limit-2603 + inet6/filter/INPUT -j limit-2603 + inet6/filter/OUTPUT -j limit-2603 + inet6/filter/limit-2603 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1481 + inet6/filter/limit-2603 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1481 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1481 -j DROP + +Filter 2605 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2604 + inet/filter/FORWARD -j logaccept-final-195 + inet/filter/INPUT -j limit-2604 + inet/filter/INPUT -j logaccept-final-195 + inet/filter/OUTPUT -j limit-2604 + inet/filter/OUTPUT -j logaccept-final-195 + inet/filter/limit-2604 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1482 + inet/filter/limit-2604 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-195 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-195 -j ACCEPT + inet/filter/logdrop-1482 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1482 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1482 -j DROP + inet6/filter/FORWARD -j limit-2604 + inet6/filter/FORWARD -j logaccept-final-195 + inet6/filter/INPUT -j limit-2604 + inet6/filter/INPUT -j logaccept-final-195 + inet6/filter/OUTPUT -j limit-2604 + inet6/filter/OUTPUT -j logaccept-final-195 + inet6/filter/limit-2604 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1482 + inet6/filter/limit-2604 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-195 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-195 -j ACCEPT + inet6/filter/logdrop-1482 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1482 -j DROP + +Filter 2606 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2605 + inet/filter/INPUT -j limit-2605 + inet/filter/OUTPUT -j limit-2605 + inet/filter/limit-2605 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1483 + inet/filter/limit-2605 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1483 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1483 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1483 -j DROP + inet6/filter/FORWARD -j limit-2605 + inet6/filter/INPUT -j limit-2605 + inet6/filter/OUTPUT -j limit-2605 + inet6/filter/limit-2605 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1483 + inet6/filter/limit-2605 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1483 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1483 -j DROP + +Filter 2607 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2606 + inet/filter/FORWARD -j logaccept-final-196 + inet/filter/INPUT -j limit-2606 + inet/filter/INPUT -j logaccept-final-196 + inet/filter/OUTPUT -j limit-2606 + inet/filter/OUTPUT -j logaccept-final-196 + inet/filter/limit-2606 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1484 + inet/filter/limit-2606 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-196 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-196 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-196 -j ACCEPT + inet/filter/logdrop-1484 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1484 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1484 -j DROP + inet6/filter/FORWARD -j limit-2606 + inet6/filter/FORWARD -j logaccept-final-196 + inet6/filter/INPUT -j limit-2606 + inet6/filter/INPUT -j logaccept-final-196 + inet6/filter/OUTPUT -j limit-2606 + inet6/filter/OUTPUT -j logaccept-final-196 + inet6/filter/limit-2606 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1484 + inet6/filter/limit-2606 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-196 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-196 -j ACCEPT + inet6/filter/logdrop-1484 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1484 -j DROP + +Filter 2608 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2607 + inet/filter/INPUT -j limit-2607 + inet/filter/OUTPUT -j limit-2607 + inet/filter/limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1485 + inet/filter/limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1485 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1485 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1485 -j DROP + inet6/filter/FORWARD -j limit-2607 + inet6/filter/INPUT -j limit-2607 + inet6/filter/OUTPUT -j limit-2607 + inet6/filter/limit-2607 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1485 + inet6/filter/limit-2607 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1485 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1485 -j DROP + +Filter 2609 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2608 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2608 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2608 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2608 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1486 + inet/filter/limit-2608 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1486 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1486 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1486 -j DROP + inet6/filter/FORWARD -j limit-2608 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2608 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2608 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2608 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1486 + inet6/filter/limit-2608 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1486 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1486 -j DROP + +Filter 2610 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2609 + inet/filter/INPUT -j limit-2609 + inet/filter/OUTPUT -j limit-2609 + inet/filter/limit-2609 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1487 + inet/filter/limit-2609 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1487 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1487 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1487 -j DROP + inet6/filter/FORWARD -j limit-2609 + inet6/filter/INPUT -j limit-2609 + inet6/filter/OUTPUT -j limit-2609 + inet6/filter/limit-2609 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1487 + inet6/filter/limit-2609 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1487 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1487 -j DROP + +Filter 2611 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2610 + inet/filter/FORWARD -j logaccept-final-197 + inet/filter/INPUT -j limit-2610 + inet/filter/INPUT -j logaccept-final-197 + inet/filter/OUTPUT -j limit-2610 + inet/filter/OUTPUT -j logaccept-final-197 + inet/filter/limit-2610 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1488 + inet/filter/limit-2610 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-197 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-197 -j ACCEPT + inet/filter/logdrop-1488 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1488 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1488 -j DROP + inet6/filter/FORWARD -j limit-2610 + inet6/filter/FORWARD -j logaccept-final-197 + inet6/filter/INPUT -j limit-2610 + inet6/filter/INPUT -j logaccept-final-197 + inet6/filter/OUTPUT -j limit-2610 + inet6/filter/OUTPUT -j logaccept-final-197 + inet6/filter/limit-2610 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1488 + inet6/filter/limit-2610 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-197 -j ACCEPT + inet6/filter/logdrop-1488 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1488 -j DROP + +Filter 2612 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2611 + inet/filter/INPUT -j limit-2611 + inet/filter/OUTPUT -j limit-2611 + inet/filter/limit-2611 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1489 + inet/filter/limit-2611 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1489 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1489 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1489 -j DROP + inet6/filter/FORWARD -j limit-2611 + inet6/filter/INPUT -j limit-2611 + inet6/filter/OUTPUT -j limit-2611 + inet6/filter/limit-2611 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1489 + inet6/filter/logdrop-1489 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1489 -j DROP + +Filter 2613 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2612 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2612 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2612 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2612 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1490 + inet/filter/logdrop-1490 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1490 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1490 -j DROP + inet6/filter/FORWARD -j limit-2612 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2612 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2612 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2612 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1490 + inet6/filter/logdrop-1490 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1490 -j DROP + +Filter 2614 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2613 + inet/filter/INPUT -j limit-2613 + inet/filter/OUTPUT -j limit-2613 + inet/filter/limit-2613 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1491 + inet/filter/logdrop-1491 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1491 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1491 -j DROP + inet6/filter/FORWARD -j limit-2613 + inet6/filter/INPUT -j limit-2613 + inet6/filter/OUTPUT -j limit-2613 + inet6/filter/limit-2613 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1491 + inet6/filter/logdrop-1491 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1491 -j DROP + +Filter 2615 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2614 + inet/filter/FORWARD -j logaccept-final-198 + inet/filter/INPUT -j limit-2614 + inet/filter/INPUT -j logaccept-final-198 + inet/filter/OUTPUT -j limit-2614 + inet/filter/OUTPUT -j logaccept-final-198 + inet/filter/limit-2614 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1492 + inet/filter/logaccept-final-198 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-198 -j ACCEPT + inet/filter/logdrop-1492 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1492 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1492 -j DROP + inet6/filter/FORWARD -j limit-2614 + inet6/filter/FORWARD -j logaccept-final-198 + inet6/filter/INPUT -j limit-2614 + inet6/filter/INPUT -j logaccept-final-198 + inet6/filter/OUTPUT -j limit-2614 + inet6/filter/OUTPUT -j logaccept-final-198 + inet6/filter/limit-2614 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1492 + inet6/filter/logaccept-final-198 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-198 -j ACCEPT + inet6/filter/logdrop-1492 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1492 -j DROP + +Filter 2616 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2615 + inet/filter/INPUT -j limit-2615 + inet/filter/OUTPUT -j limit-2615 + inet/filter/limit-2615 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1493 + inet/filter/limit-2615 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1493 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1493 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1493 -j DROP + inet6/filter/FORWARD -j limit-2615 + inet6/filter/INPUT -j limit-2615 + inet6/filter/OUTPUT -j limit-2615 + inet6/filter/limit-2615 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1493 + inet6/filter/limit-2615 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1493 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1493 -j DROP + +Filter 2617 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2616 + inet/filter/FORWARD -j logaccept-final-199 + inet/filter/INPUT -j limit-2616 + inet/filter/INPUT -j logaccept-final-199 + inet/filter/OUTPUT -j limit-2616 + inet/filter/OUTPUT -j logaccept-final-199 + inet/filter/limit-2616 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1494 + inet/filter/logaccept-final-199 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-199 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-199 -j ACCEPT + inet/filter/logdrop-1494 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1494 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1494 -j DROP + inet6/filter/FORWARD -j limit-2616 + inet6/filter/FORWARD -j logaccept-final-199 + inet6/filter/INPUT -j limit-2616 + inet6/filter/INPUT -j logaccept-final-199 + inet6/filter/OUTPUT -j limit-2616 + inet6/filter/OUTPUT -j logaccept-final-199 + inet6/filter/limit-2616 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1494 + inet6/filter/logaccept-final-199 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-199 -j ACCEPT + inet6/filter/logdrop-1494 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1494 -j DROP + +Filter 2618 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2617 + inet/filter/INPUT -j limit-2617 + inet/filter/OUTPUT -j limit-2617 + inet/filter/limit-2617 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1495 + inet/filter/limit-2617 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2617 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1495 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1495 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1495 -j DROP + inet6/filter/FORWARD -j limit-2617 + inet6/filter/INPUT -j limit-2617 + inet6/filter/OUTPUT -j limit-2617 + inet6/filter/limit-2617 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1495 + inet6/filter/limit-2617 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1495 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1495 -j DROP + +Filter 2619 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2618 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2618 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2618 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2618 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1496 + inet/filter/logdrop-1496 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1496 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1496 -j DROP + inet6/filter/FORWARD -j limit-2618 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2618 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2618 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2618 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1496 + inet6/filter/logdrop-1496 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1496 -j DROP + +Filter 2620 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2619 + inet/filter/INPUT -j limit-2619 + inet/filter/OUTPUT -j limit-2619 + inet/filter/limit-2619 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1497 + inet/filter/logdrop-1497 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1497 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1497 -j DROP + inet6/filter/FORWARD -j limit-2619 + inet6/filter/INPUT -j limit-2619 + inet6/filter/OUTPUT -j limit-2619 + inet6/filter/limit-2619 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1497 + inet6/filter/logdrop-1497 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1497 -j DROP + +Filter 2621 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2620 + inet/filter/FORWARD -j logaccept-final-200 + inet/filter/INPUT -j limit-2620 + inet/filter/INPUT -j logaccept-final-200 + inet/filter/OUTPUT -j limit-2620 + inet/filter/OUTPUT -j logaccept-final-200 + inet/filter/limit-2620 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1498 + inet/filter/logaccept-final-200 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-200 -j ACCEPT + inet/filter/logdrop-1498 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1498 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1498 -j DROP + inet6/filter/FORWARD -j limit-2620 + inet6/filter/FORWARD -j logaccept-final-200 + inet6/filter/INPUT -j limit-2620 + inet6/filter/INPUT -j logaccept-final-200 + inet6/filter/OUTPUT -j limit-2620 + inet6/filter/OUTPUT -j logaccept-final-200 + inet6/filter/limit-2620 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1498 + inet6/filter/logaccept-final-200 -j ACCEPT + inet6/filter/logdrop-1498 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1498 -j DROP + +Filter 2622 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2621 + inet/filter/INPUT -j limit-2621 + inet/filter/OUTPUT -j limit-2621 + inet/filter/limit-2621 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1499 + inet/filter/limit-2621 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1499 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1499 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1499 -j DROP + inet6/filter/FORWARD -j limit-2621 + inet6/filter/INPUT -j limit-2621 + inet6/filter/OUTPUT -j limit-2621 + inet6/filter/limit-2621 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1499 + inet6/filter/logdrop-1499 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1499 -j DROP + +Filter 2623 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2622 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2622 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2622 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2622 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1500 + inet/filter/limit-2622 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1500 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1500 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1500 -j DROP + inet6/filter/FORWARD -j limit-2622 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2622 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2622 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2622 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1500 + inet6/filter/limit-2622 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1500 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1500 -j DROP + +Filter 2624 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2623 + inet/filter/INPUT -j limit-2623 + inet/filter/OUTPUT -j limit-2623 + inet/filter/limit-2623 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1501 + inet/filter/limit-2623 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1501 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1501 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1501 -j DROP + inet6/filter/FORWARD -j limit-2623 + inet6/filter/INPUT -j limit-2623 + inet6/filter/OUTPUT -j limit-2623 + inet6/filter/limit-2623 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1501 + inet6/filter/limit-2623 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1501 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1501 -j DROP + +Filter 2625 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2624 + inet/filter/FORWARD -j logaccept-final-201 + inet/filter/INPUT -j limit-2624 + inet/filter/INPUT -j logaccept-final-201 + inet/filter/OUTPUT -j limit-2624 + inet/filter/OUTPUT -j logaccept-final-201 + inet/filter/limit-2624 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1502 + inet/filter/limit-2624 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-201 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-201 -j ACCEPT + inet/filter/logdrop-1502 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1502 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1502 -j DROP + inet6/filter/FORWARD -j limit-2624 + inet6/filter/FORWARD -j logaccept-final-201 + inet6/filter/INPUT -j limit-2624 + inet6/filter/INPUT -j logaccept-final-201 + inet6/filter/OUTPUT -j limit-2624 + inet6/filter/OUTPUT -j logaccept-final-201 + inet6/filter/limit-2624 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1502 + inet6/filter/limit-2624 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-201 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-201 -j ACCEPT + inet6/filter/logdrop-1502 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1502 -j DROP + +Filter 2626 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2625 + inet/filter/INPUT -j limit-2625 + inet/filter/OUTPUT -j limit-2625 + inet/filter/limit-2625 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1503 + inet/filter/limit-2625 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1503 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1503 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1503 -j DROP + inet6/filter/FORWARD -j limit-2625 + inet6/filter/INPUT -j limit-2625 + inet6/filter/OUTPUT -j limit-2625 + inet6/filter/limit-2625 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1503 + inet6/filter/limit-2625 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1503 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1503 -j DROP + +Filter 2627 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2626 + inet/filter/FORWARD -j logaccept-final-202 + inet/filter/INPUT -j limit-2626 + inet/filter/INPUT -j logaccept-final-202 + inet/filter/OUTPUT -j limit-2626 + inet/filter/OUTPUT -j logaccept-final-202 + inet/filter/limit-2626 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1504 + inet/filter/limit-2626 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-202 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-202 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-202 -j ACCEPT + inet/filter/logdrop-1504 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1504 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1504 -j DROP + inet6/filter/FORWARD -j limit-2626 + inet6/filter/FORWARD -j logaccept-final-202 + inet6/filter/INPUT -j limit-2626 + inet6/filter/INPUT -j logaccept-final-202 + inet6/filter/OUTPUT -j limit-2626 + inet6/filter/OUTPUT -j logaccept-final-202 + inet6/filter/limit-2626 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1504 + inet6/filter/limit-2626 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-202 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-202 -j ACCEPT + inet6/filter/logdrop-1504 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1504 -j DROP + +Filter 2628 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2627 + inet/filter/INPUT -j limit-2627 + inet/filter/OUTPUT -j limit-2627 + inet/filter/limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1505 + inet/filter/limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1505 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1505 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1505 -j DROP + inet6/filter/FORWARD -j limit-2627 + inet6/filter/INPUT -j limit-2627 + inet6/filter/OUTPUT -j limit-2627 + inet6/filter/limit-2627 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1505 + inet6/filter/limit-2627 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1505 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1505 -j DROP + +Filter 2629 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2628 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2628 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2628 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2628 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1506 + inet/filter/limit-2628 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1506 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1506 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1506 -j DROP + inet6/filter/FORWARD -j limit-2628 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2628 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2628 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2628 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1506 + inet6/filter/limit-2628 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1506 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1506 -j DROP + +Filter 2630 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2629 + inet/filter/INPUT -j limit-2629 + inet/filter/OUTPUT -j limit-2629 + inet/filter/limit-2629 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1507 + inet/filter/limit-2629 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1507 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1507 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1507 -j DROP + inet6/filter/FORWARD -j limit-2629 + inet6/filter/INPUT -j limit-2629 + inet6/filter/OUTPUT -j limit-2629 + inet6/filter/limit-2629 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1507 + inet6/filter/limit-2629 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1507 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1507 -j DROP + +Filter 2631 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2630 + inet/filter/FORWARD -j logaccept-final-203 + inet/filter/INPUT -j limit-2630 + inet/filter/INPUT -j logaccept-final-203 + inet/filter/OUTPUT -j limit-2630 + inet/filter/OUTPUT -j logaccept-final-203 + inet/filter/limit-2630 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1508 + inet/filter/limit-2630 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-203 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-203 -j ACCEPT + inet/filter/logdrop-1508 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1508 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1508 -j DROP + inet6/filter/FORWARD -j limit-2630 + inet6/filter/FORWARD -j logaccept-final-203 + inet6/filter/INPUT -j limit-2630 + inet6/filter/INPUT -j logaccept-final-203 + inet6/filter/OUTPUT -j limit-2630 + inet6/filter/OUTPUT -j logaccept-final-203 + inet6/filter/limit-2630 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1508 + inet6/filter/limit-2630 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-203 -j ACCEPT + inet6/filter/logdrop-1508 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1508 -j DROP + +Filter 2632 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2631 + inet/filter/INPUT -j limit-2631 + inet/filter/OUTPUT -j limit-2631 + inet/filter/limit-2631 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1509 + inet/filter/limit-2631 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1509 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1509 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1509 -j DROP + inet6/filter/FORWARD -j limit-2631 + inet6/filter/INPUT -j limit-2631 + inet6/filter/OUTPUT -j limit-2631 + inet6/filter/limit-2631 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1509 + inet6/filter/logdrop-1509 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1509 -j DROP + +Filter 2633 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2632 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2632 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2632 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2632 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1510 + inet/filter/logdrop-1510 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1510 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1510 -j DROP + inet6/filter/FORWARD -j limit-2632 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2632 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2632 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2632 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1510 + inet6/filter/logdrop-1510 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1510 -j DROP + +Filter 2634 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2633 + inet/filter/INPUT -j limit-2633 + inet/filter/OUTPUT -j limit-2633 + inet/filter/limit-2633 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1511 + inet/filter/logdrop-1511 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1511 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1511 -j DROP + inet6/filter/FORWARD -j limit-2633 + inet6/filter/INPUT -j limit-2633 + inet6/filter/OUTPUT -j limit-2633 + inet6/filter/limit-2633 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1511 + inet6/filter/logdrop-1511 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1511 -j DROP + +Filter 2635 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2634 + inet/filter/FORWARD -j logaccept-final-204 + inet/filter/INPUT -j limit-2634 + inet/filter/INPUT -j logaccept-final-204 + inet/filter/OUTPUT -j limit-2634 + inet/filter/OUTPUT -j logaccept-final-204 + inet/filter/limit-2634 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1512 + inet/filter/logaccept-final-204 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-204 -j ACCEPT + inet/filter/logdrop-1512 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1512 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1512 -j DROP + inet6/filter/FORWARD -j limit-2634 + inet6/filter/FORWARD -j logaccept-final-204 + inet6/filter/INPUT -j limit-2634 + inet6/filter/INPUT -j logaccept-final-204 + inet6/filter/OUTPUT -j limit-2634 + inet6/filter/OUTPUT -j logaccept-final-204 + inet6/filter/limit-2634 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1512 + inet6/filter/logaccept-final-204 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-204 -j ACCEPT + inet6/filter/logdrop-1512 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1512 -j DROP + +Filter 2636 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2635 + inet/filter/INPUT -j limit-2635 + inet/filter/OUTPUT -j limit-2635 + inet/filter/limit-2635 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1513 + inet/filter/limit-2635 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1513 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1513 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1513 -j DROP + inet6/filter/FORWARD -j limit-2635 + inet6/filter/INPUT -j limit-2635 + inet6/filter/OUTPUT -j limit-2635 + inet6/filter/limit-2635 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1513 + inet6/filter/limit-2635 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1513 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1513 -j DROP + +Filter 2637 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2636 + inet/filter/FORWARD -j logaccept-final-205 + inet/filter/INPUT -j limit-2636 + inet/filter/INPUT -j logaccept-final-205 + inet/filter/OUTPUT -j limit-2636 + inet/filter/OUTPUT -j logaccept-final-205 + inet/filter/limit-2636 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1514 + inet/filter/logaccept-final-205 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-205 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-205 -j ACCEPT + inet/filter/logdrop-1514 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1514 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1514 -j DROP + inet6/filter/FORWARD -j limit-2636 + inet6/filter/FORWARD -j logaccept-final-205 + inet6/filter/INPUT -j limit-2636 + inet6/filter/INPUT -j logaccept-final-205 + inet6/filter/OUTPUT -j limit-2636 + inet6/filter/OUTPUT -j logaccept-final-205 + inet6/filter/limit-2636 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1514 + inet6/filter/logaccept-final-205 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-205 -j ACCEPT + inet6/filter/logdrop-1514 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1514 -j DROP + +Filter 2638 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2637 + inet/filter/INPUT -j limit-2637 + inet/filter/OUTPUT -j limit-2637 + inet/filter/limit-2637 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1515 + inet/filter/limit-2637 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2637 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1515 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1515 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1515 -j DROP + inet6/filter/FORWARD -j limit-2637 + inet6/filter/INPUT -j limit-2637 + inet6/filter/OUTPUT -j limit-2637 + inet6/filter/limit-2637 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1515 + inet6/filter/limit-2637 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1515 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1515 -j DROP + +Filter 2639 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2638 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2638 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2638 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2638 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1516 + inet/filter/logdrop-1516 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1516 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1516 -j DROP + inet6/filter/FORWARD -j limit-2638 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2638 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2638 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2638 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1516 + inet6/filter/logdrop-1516 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1516 -j DROP + +Filter 2640 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2639 + inet/filter/INPUT -j limit-2639 + inet/filter/OUTPUT -j limit-2639 + inet/filter/limit-2639 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1517 + inet/filter/logdrop-1517 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1517 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1517 -j DROP + inet6/filter/FORWARD -j limit-2639 + inet6/filter/INPUT -j limit-2639 + inet6/filter/OUTPUT -j limit-2639 + inet6/filter/limit-2639 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1517 + inet6/filter/logdrop-1517 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1517 -j DROP + +Filter 2641 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2640 + inet/filter/FORWARD -j logaccept-final-206 + inet/filter/INPUT -j limit-2640 + inet/filter/INPUT -j logaccept-final-206 + inet/filter/OUTPUT -j limit-2640 + inet/filter/OUTPUT -j logaccept-final-206 + inet/filter/limit-2640 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1518 + inet/filter/logaccept-final-206 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-206 -j ACCEPT + inet/filter/logdrop-1518 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1518 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1518 -j DROP + inet6/filter/FORWARD -j limit-2640 + inet6/filter/FORWARD -j logaccept-final-206 + inet6/filter/INPUT -j limit-2640 + inet6/filter/INPUT -j logaccept-final-206 + inet6/filter/OUTPUT -j limit-2640 + inet6/filter/OUTPUT -j logaccept-final-206 + inet6/filter/limit-2640 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1518 + inet6/filter/logaccept-final-206 -j ACCEPT + inet6/filter/logdrop-1518 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1518 -j DROP + +Filter 2642 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2641 + inet/filter/INPUT -j limit-2641 + inet/filter/OUTPUT -j limit-2641 + inet/filter/limit-2641 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1519 + inet/filter/limit-2641 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1519 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1519 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1519 -j DROP + inet6/filter/FORWARD -j limit-2641 + inet6/filter/INPUT -j limit-2641 + inet6/filter/OUTPUT -j limit-2641 + inet6/filter/limit-2641 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1519 + inet6/filter/logdrop-1519 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1519 -j DROP + +Filter 2643 {"flow-limit":{"interval":5,"log":"mirror","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2642 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2642 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2642 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2642 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1520 + inet/filter/limit-2642 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1520 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1520 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1520 -j DROP + inet6/filter/FORWARD -j limit-2642 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2642 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2642 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2642 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1520 + inet6/filter/limit-2642 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1520 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1520 -j DROP + +Filter 2644 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2643 + inet/filter/INPUT -j limit-2643 + inet/filter/OUTPUT -j limit-2643 + inet/filter/limit-2643 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1521 + inet/filter/limit-2643 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1521 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1521 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1521 -j DROP + inet6/filter/FORWARD -j limit-2643 + inet6/filter/INPUT -j limit-2643 + inet6/filter/OUTPUT -j limit-2643 + inet6/filter/limit-2643 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1521 + inet6/filter/limit-2643 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1521 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1521 -j DROP + +Filter 2645 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2644 + inet/filter/FORWARD -j logaccept-final-207 + inet/filter/INPUT -j limit-2644 + inet/filter/INPUT -j logaccept-final-207 + inet/filter/OUTPUT -j limit-2644 + inet/filter/OUTPUT -j logaccept-final-207 + inet/filter/limit-2644 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1522 + inet/filter/limit-2644 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-207 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-207 -j ACCEPT + inet/filter/logdrop-1522 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1522 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1522 -j DROP + inet6/filter/FORWARD -j limit-2644 + inet6/filter/FORWARD -j logaccept-final-207 + inet6/filter/INPUT -j limit-2644 + inet6/filter/INPUT -j logaccept-final-207 + inet6/filter/OUTPUT -j limit-2644 + inet6/filter/OUTPUT -j logaccept-final-207 + inet6/filter/limit-2644 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1522 + inet6/filter/limit-2644 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-207 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-207 -j ACCEPT + inet6/filter/logdrop-1522 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1522 -j DROP + +Filter 2646 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2645 + inet/filter/INPUT -j limit-2645 + inet/filter/OUTPUT -j limit-2645 + inet/filter/limit-2645 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1523 + inet/filter/limit-2645 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1523 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1523 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1523 -j DROP + inet6/filter/FORWARD -j limit-2645 + inet6/filter/INPUT -j limit-2645 + inet6/filter/OUTPUT -j limit-2645 + inet6/filter/limit-2645 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1523 + inet6/filter/limit-2645 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1523 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1523 -j DROP + +Filter 2647 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2646 + inet/filter/FORWARD -j logaccept-final-208 + inet/filter/INPUT -j limit-2646 + inet/filter/INPUT -j logaccept-final-208 + inet/filter/OUTPUT -j limit-2646 + inet/filter/OUTPUT -j logaccept-final-208 + inet/filter/limit-2646 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1524 + inet/filter/limit-2646 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-208 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-208 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-208 -j ACCEPT + inet/filter/logdrop-1524 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1524 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1524 -j DROP + inet6/filter/FORWARD -j limit-2646 + inet6/filter/FORWARD -j logaccept-final-208 + inet6/filter/INPUT -j limit-2646 + inet6/filter/INPUT -j logaccept-final-208 + inet6/filter/OUTPUT -j limit-2646 + inet6/filter/OUTPUT -j logaccept-final-208 + inet6/filter/limit-2646 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1524 + inet6/filter/limit-2646 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-208 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-208 -j ACCEPT + inet6/filter/logdrop-1524 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1524 -j DROP + +Filter 2648 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2647 + inet/filter/INPUT -j limit-2647 + inet/filter/OUTPUT -j limit-2647 + inet/filter/limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1525 + inet/filter/limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1525 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1525 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1525 -j DROP + inet6/filter/FORWARD -j limit-2647 + inet6/filter/INPUT -j limit-2647 + inet6/filter/OUTPUT -j limit-2647 + inet6/filter/limit-2647 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1525 + inet6/filter/limit-2647 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1525 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1525 -j DROP + +Filter 2649 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2648 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2648 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2648 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2648 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1526 + inet/filter/limit-2648 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1526 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1526 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1526 -j DROP + inet6/filter/FORWARD -j limit-2648 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2648 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2648 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2648 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1526 + inet6/filter/limit-2648 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1526 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1526 -j DROP + +Filter 2650 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2649 + inet/filter/INPUT -j limit-2649 + inet/filter/OUTPUT -j limit-2649 + inet/filter/limit-2649 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1527 + inet/filter/limit-2649 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1527 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1527 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1527 -j DROP + inet6/filter/FORWARD -j limit-2649 + inet6/filter/INPUT -j limit-2649 + inet6/filter/OUTPUT -j limit-2649 + inet6/filter/limit-2649 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1527 + inet6/filter/limit-2649 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1527 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1527 -j DROP + +Filter 2651 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2650 + inet/filter/FORWARD -j logaccept-final-209 + inet/filter/INPUT -j limit-2650 + inet/filter/INPUT -j logaccept-final-209 + inet/filter/OUTPUT -j limit-2650 + inet/filter/OUTPUT -j logaccept-final-209 + inet/filter/limit-2650 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1528 + inet/filter/limit-2650 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-209 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-209 -j ACCEPT + inet/filter/logdrop-1528 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1528 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1528 -j DROP + inet6/filter/FORWARD -j limit-2650 + inet6/filter/FORWARD -j logaccept-final-209 + inet6/filter/INPUT -j limit-2650 + inet6/filter/INPUT -j logaccept-final-209 + inet6/filter/OUTPUT -j limit-2650 + inet6/filter/OUTPUT -j logaccept-final-209 + inet6/filter/limit-2650 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1528 + inet6/filter/limit-2650 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-209 -j ACCEPT + inet6/filter/logdrop-1528 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1528 -j DROP + +Filter 2652 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2651 + inet/filter/INPUT -j limit-2651 + inet/filter/OUTPUT -j limit-2651 + inet/filter/limit-2651 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1529 + inet/filter/limit-2651 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1529 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1529 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1529 -j DROP + inet6/filter/FORWARD -j limit-2651 + inet6/filter/INPUT -j limit-2651 + inet6/filter/OUTPUT -j limit-2651 + inet6/filter/limit-2651 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1529 + inet6/filter/logdrop-1529 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1529 -j DROP + +Filter 2653 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2652 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2652 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2652 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2652 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1530 + inet/filter/logdrop-1530 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1530 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1530 -j DROP + inet6/filter/FORWARD -j limit-2652 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2652 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2652 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2652 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1530 + inet6/filter/logdrop-1530 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1530 -j DROP + +Filter 2654 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2653 + inet/filter/INPUT -j limit-2653 + inet/filter/OUTPUT -j limit-2653 + inet/filter/limit-2653 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1531 + inet/filter/logdrop-1531 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1531 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1531 -j DROP + inet6/filter/FORWARD -j limit-2653 + inet6/filter/INPUT -j limit-2653 + inet6/filter/OUTPUT -j limit-2653 + inet6/filter/limit-2653 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1531 + inet6/filter/logdrop-1531 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1531 -j DROP + +Filter 2655 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2654 + inet/filter/FORWARD -j logaccept-final-210 + inet/filter/INPUT -j limit-2654 + inet/filter/INPUT -j logaccept-final-210 + inet/filter/OUTPUT -j limit-2654 + inet/filter/OUTPUT -j logaccept-final-210 + inet/filter/limit-2654 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1532 + inet/filter/logaccept-final-210 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-210 -j ACCEPT + inet/filter/logdrop-1532 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1532 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1532 -j DROP + inet6/filter/FORWARD -j limit-2654 + inet6/filter/FORWARD -j logaccept-final-210 + inet6/filter/INPUT -j limit-2654 + inet6/filter/INPUT -j logaccept-final-210 + inet6/filter/OUTPUT -j limit-2654 + inet6/filter/OUTPUT -j logaccept-final-210 + inet6/filter/limit-2654 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1532 + inet6/filter/logaccept-final-210 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-210 -j ACCEPT + inet6/filter/logdrop-1532 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1532 -j DROP + +Filter 2656 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2655 + inet/filter/INPUT -j limit-2655 + inet/filter/OUTPUT -j limit-2655 + inet/filter/limit-2655 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1533 + inet/filter/limit-2655 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1533 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1533 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1533 -j DROP + inet6/filter/FORWARD -j limit-2655 + inet6/filter/INPUT -j limit-2655 + inet6/filter/OUTPUT -j limit-2655 + inet6/filter/limit-2655 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1533 + inet6/filter/limit-2655 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1533 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1533 -j DROP + +Filter 2657 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2656 + inet/filter/FORWARD -j logaccept-final-211 + inet/filter/INPUT -j limit-2656 + inet/filter/INPUT -j logaccept-final-211 + inet/filter/OUTPUT -j limit-2656 + inet/filter/OUTPUT -j logaccept-final-211 + inet/filter/limit-2656 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1534 + inet/filter/logaccept-final-211 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-211 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-211 -j ACCEPT + inet/filter/logdrop-1534 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1534 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1534 -j DROP + inet6/filter/FORWARD -j limit-2656 + inet6/filter/FORWARD -j logaccept-final-211 + inet6/filter/INPUT -j limit-2656 + inet6/filter/INPUT -j logaccept-final-211 + inet6/filter/OUTPUT -j limit-2656 + inet6/filter/OUTPUT -j logaccept-final-211 + inet6/filter/limit-2656 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1534 + inet6/filter/logaccept-final-211 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-211 -j ACCEPT + inet6/filter/logdrop-1534 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1534 -j DROP + +Filter 2658 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2657 + inet/filter/INPUT -j limit-2657 + inet/filter/OUTPUT -j limit-2657 + inet/filter/limit-2657 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1535 + inet/filter/limit-2657 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2657 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1535 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1535 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1535 -j DROP + inet6/filter/FORWARD -j limit-2657 + inet6/filter/INPUT -j limit-2657 + inet6/filter/OUTPUT -j limit-2657 + inet6/filter/limit-2657 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1535 + inet6/filter/limit-2657 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1535 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1535 -j DROP + +Filter 2659 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2658 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2658 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2658 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2658 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1536 + inet/filter/logdrop-1536 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1536 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1536 -j DROP + inet6/filter/FORWARD -j limit-2658 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2658 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2658 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2658 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1536 + inet6/filter/logdrop-1536 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1536 -j DROP + +Filter 2660 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2659 + inet/filter/INPUT -j limit-2659 + inet/filter/OUTPUT -j limit-2659 + inet/filter/limit-2659 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1537 + inet/filter/logdrop-1537 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1537 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1537 -j DROP + inet6/filter/FORWARD -j limit-2659 + inet6/filter/INPUT -j limit-2659 + inet6/filter/OUTPUT -j limit-2659 + inet6/filter/limit-2659 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1537 + inet6/filter/logdrop-1537 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1537 -j DROP + +Filter 2661 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2660 + inet/filter/FORWARD -j logaccept-final-212 + inet/filter/INPUT -j limit-2660 + inet/filter/INPUT -j logaccept-final-212 + inet/filter/OUTPUT -j limit-2660 + inet/filter/OUTPUT -j logaccept-final-212 + inet/filter/limit-2660 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1538 + inet/filter/logaccept-final-212 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-212 -j ACCEPT + inet/filter/logdrop-1538 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1538 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1538 -j DROP + inet6/filter/FORWARD -j limit-2660 + inet6/filter/FORWARD -j logaccept-final-212 + inet6/filter/INPUT -j limit-2660 + inet6/filter/INPUT -j logaccept-final-212 + inet6/filter/OUTPUT -j limit-2660 + inet6/filter/OUTPUT -j logaccept-final-212 + inet6/filter/limit-2660 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1538 + inet6/filter/logaccept-final-212 -j ACCEPT + inet6/filter/logdrop-1538 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1538 -j DROP + +Filter 2662 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2661 + inet/filter/INPUT -j limit-2661 + inet/filter/OUTPUT -j limit-2661 + inet/filter/limit-2661 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1539 + inet/filter/limit-2661 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1539 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1539 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1539 -j DROP + inet6/filter/FORWARD -j limit-2661 + inet6/filter/INPUT -j limit-2661 + inet6/filter/OUTPUT -j limit-2661 + inet6/filter/limit-2661 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1539 + inet6/filter/logdrop-1539 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1539 -j DROP + +Filter 2663 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2662 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2662 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2662 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2662 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1540 + inet/filter/limit-2662 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1540 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1540 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1540 -j DROP + inet6/filter/FORWARD -j limit-2662 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2662 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2662 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2662 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1540 + inet6/filter/limit-2662 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1540 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1540 -j DROP + +Filter 2664 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2663 + inet/filter/INPUT -j limit-2663 + inet/filter/OUTPUT -j limit-2663 + inet/filter/limit-2663 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1541 + inet/filter/limit-2663 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1541 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1541 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1541 -j DROP + inet6/filter/FORWARD -j limit-2663 + inet6/filter/INPUT -j limit-2663 + inet6/filter/OUTPUT -j limit-2663 + inet6/filter/limit-2663 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1541 + inet6/filter/limit-2663 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1541 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1541 -j DROP + +Filter 2665 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2664 + inet/filter/FORWARD -j logaccept-final-213 + inet/filter/INPUT -j limit-2664 + inet/filter/INPUT -j logaccept-final-213 + inet/filter/OUTPUT -j limit-2664 + inet/filter/OUTPUT -j logaccept-final-213 + inet/filter/limit-2664 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1542 + inet/filter/limit-2664 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-213 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-213 -j ACCEPT + inet/filter/logdrop-1542 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1542 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1542 -j DROP + inet6/filter/FORWARD -j limit-2664 + inet6/filter/FORWARD -j logaccept-final-213 + inet6/filter/INPUT -j limit-2664 + inet6/filter/INPUT -j logaccept-final-213 + inet6/filter/OUTPUT -j limit-2664 + inet6/filter/OUTPUT -j logaccept-final-213 + inet6/filter/limit-2664 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1542 + inet6/filter/limit-2664 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-213 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-213 -j ACCEPT + inet6/filter/logdrop-1542 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1542 -j DROP + +Filter 2666 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2665 + inet/filter/INPUT -j limit-2665 + inet/filter/OUTPUT -j limit-2665 + inet/filter/limit-2665 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1543 + inet/filter/limit-2665 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1543 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1543 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1543 -j DROP + inet6/filter/FORWARD -j limit-2665 + inet6/filter/INPUT -j limit-2665 + inet6/filter/OUTPUT -j limit-2665 + inet6/filter/limit-2665 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1543 + inet6/filter/limit-2665 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1543 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1543 -j DROP + +Filter 2667 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2666 + inet/filter/FORWARD -j logaccept-final-214 + inet/filter/INPUT -j limit-2666 + inet/filter/INPUT -j logaccept-final-214 + inet/filter/OUTPUT -j limit-2666 + inet/filter/OUTPUT -j logaccept-final-214 + inet/filter/limit-2666 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1544 + inet/filter/limit-2666 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-214 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-214 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-214 -j ACCEPT + inet/filter/logdrop-1544 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1544 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1544 -j DROP + inet6/filter/FORWARD -j limit-2666 + inet6/filter/FORWARD -j logaccept-final-214 + inet6/filter/INPUT -j limit-2666 + inet6/filter/INPUT -j logaccept-final-214 + inet6/filter/OUTPUT -j limit-2666 + inet6/filter/OUTPUT -j logaccept-final-214 + inet6/filter/limit-2666 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1544 + inet6/filter/limit-2666 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-214 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-214 -j ACCEPT + inet6/filter/logdrop-1544 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1544 -j DROP + +Filter 2668 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2667 + inet/filter/INPUT -j limit-2667 + inet/filter/OUTPUT -j limit-2667 + inet/filter/limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1545 + inet/filter/limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1545 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1545 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1545 -j DROP + inet6/filter/FORWARD -j limit-2667 + inet6/filter/INPUT -j limit-2667 + inet6/filter/OUTPUT -j limit-2667 + inet6/filter/limit-2667 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1545 + inet6/filter/limit-2667 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1545 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1545 -j DROP + +Filter 2669 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2668 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2668 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2668 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2668 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1546 + inet/filter/limit-2668 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1546 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1546 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1546 -j DROP + inet6/filter/FORWARD -j limit-2668 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2668 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2668 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2668 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1546 + inet6/filter/limit-2668 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1546 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1546 -j DROP + +Filter 2670 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2669 + inet/filter/INPUT -j limit-2669 + inet/filter/OUTPUT -j limit-2669 + inet/filter/limit-2669 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1547 + inet/filter/limit-2669 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1547 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1547 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1547 -j DROP + inet6/filter/FORWARD -j limit-2669 + inet6/filter/INPUT -j limit-2669 + inet6/filter/OUTPUT -j limit-2669 + inet6/filter/limit-2669 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1547 + inet6/filter/limit-2669 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1547 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1547 -j DROP + +Filter 2671 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2670 + inet/filter/FORWARD -j logaccept-final-215 + inet/filter/INPUT -j limit-2670 + inet/filter/INPUT -j logaccept-final-215 + inet/filter/OUTPUT -j limit-2670 + inet/filter/OUTPUT -j logaccept-final-215 + inet/filter/limit-2670 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1548 + inet/filter/limit-2670 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-215 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-215 -j ACCEPT + inet/filter/logdrop-1548 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1548 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1548 -j DROP + inet6/filter/FORWARD -j limit-2670 + inet6/filter/FORWARD -j logaccept-final-215 + inet6/filter/INPUT -j limit-2670 + inet6/filter/INPUT -j logaccept-final-215 + inet6/filter/OUTPUT -j limit-2670 + inet6/filter/OUTPUT -j logaccept-final-215 + inet6/filter/limit-2670 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1548 + inet6/filter/limit-2670 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-215 -j ACCEPT + inet6/filter/logdrop-1548 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1548 -j DROP + +Filter 2672 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2671 + inet/filter/INPUT -j limit-2671 + inet/filter/OUTPUT -j limit-2671 + inet/filter/limit-2671 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1549 + inet/filter/limit-2671 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1549 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1549 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1549 -j DROP + inet6/filter/FORWARD -j limit-2671 + inet6/filter/INPUT -j limit-2671 + inet6/filter/OUTPUT -j limit-2671 + inet6/filter/limit-2671 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1549 + inet6/filter/logdrop-1549 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1549 -j DROP + +Filter 2673 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2672 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2672 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2672 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2672 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1550 + inet/filter/logdrop-1550 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1550 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1550 -j DROP + inet6/filter/FORWARD -j limit-2672 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2672 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2672 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2672 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1550 + inet6/filter/logdrop-1550 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1550 -j DROP + +Filter 2674 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2673 + inet/filter/INPUT -j limit-2673 + inet/filter/OUTPUT -j limit-2673 + inet/filter/limit-2673 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1551 + inet/filter/logdrop-1551 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1551 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1551 -j DROP + inet6/filter/FORWARD -j limit-2673 + inet6/filter/INPUT -j limit-2673 + inet6/filter/OUTPUT -j limit-2673 + inet6/filter/limit-2673 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1551 + inet6/filter/logdrop-1551 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1551 -j DROP + +Filter 2675 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2674 + inet/filter/FORWARD -j logaccept-final-216 + inet/filter/INPUT -j limit-2674 + inet/filter/INPUT -j logaccept-final-216 + inet/filter/OUTPUT -j limit-2674 + inet/filter/OUTPUT -j logaccept-final-216 + inet/filter/limit-2674 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1552 + inet/filter/logaccept-final-216 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-216 -j ACCEPT + inet/filter/logdrop-1552 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1552 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1552 -j DROP + inet6/filter/FORWARD -j limit-2674 + inet6/filter/FORWARD -j logaccept-final-216 + inet6/filter/INPUT -j limit-2674 + inet6/filter/INPUT -j logaccept-final-216 + inet6/filter/OUTPUT -j limit-2674 + inet6/filter/OUTPUT -j logaccept-final-216 + inet6/filter/limit-2674 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1552 + inet6/filter/logaccept-final-216 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-216 -j ACCEPT + inet6/filter/logdrop-1552 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1552 -j DROP + +Filter 2676 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2675 + inet/filter/INPUT -j limit-2675 + inet/filter/OUTPUT -j limit-2675 + inet/filter/limit-2675 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1553 + inet/filter/limit-2675 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1553 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1553 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1553 -j DROP + inet6/filter/FORWARD -j limit-2675 + inet6/filter/INPUT -j limit-2675 + inet6/filter/OUTPUT -j limit-2675 + inet6/filter/limit-2675 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1553 + inet6/filter/limit-2675 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1553 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1553 -j DROP + +Filter 2677 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2676 + inet/filter/FORWARD -j logaccept-final-217 + inet/filter/INPUT -j limit-2676 + inet/filter/INPUT -j logaccept-final-217 + inet/filter/OUTPUT -j limit-2676 + inet/filter/OUTPUT -j logaccept-final-217 + inet/filter/limit-2676 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1554 + inet/filter/logaccept-final-217 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-217 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-217 -j ACCEPT + inet/filter/logdrop-1554 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1554 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1554 -j DROP + inet6/filter/FORWARD -j limit-2676 + inet6/filter/FORWARD -j logaccept-final-217 + inet6/filter/INPUT -j limit-2676 + inet6/filter/INPUT -j logaccept-final-217 + inet6/filter/OUTPUT -j limit-2676 + inet6/filter/OUTPUT -j logaccept-final-217 + inet6/filter/limit-2676 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1554 + inet6/filter/logaccept-final-217 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-217 -j ACCEPT + inet6/filter/logdrop-1554 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1554 -j DROP + +Filter 2678 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2677 + inet/filter/INPUT -j limit-2677 + inet/filter/OUTPUT -j limit-2677 + inet/filter/limit-2677 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1555 + inet/filter/limit-2677 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2677 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1555 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1555 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1555 -j DROP + inet6/filter/FORWARD -j limit-2677 + inet6/filter/INPUT -j limit-2677 + inet6/filter/OUTPUT -j limit-2677 + inet6/filter/limit-2677 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1555 + inet6/filter/limit-2677 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1555 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1555 -j DROP + +Filter 2679 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2678 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2678 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2678 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2678 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1556 + inet/filter/logdrop-1556 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1556 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1556 -j DROP + inet6/filter/FORWARD -j limit-2678 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2678 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2678 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2678 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1556 + inet6/filter/logdrop-1556 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1556 -j DROP + +Filter 2680 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2679 + inet/filter/INPUT -j limit-2679 + inet/filter/OUTPUT -j limit-2679 + inet/filter/limit-2679 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1557 + inet/filter/logdrop-1557 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1557 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1557 -j DROP + inet6/filter/FORWARD -j limit-2679 + inet6/filter/INPUT -j limit-2679 + inet6/filter/OUTPUT -j limit-2679 + inet6/filter/limit-2679 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1557 + inet6/filter/logdrop-1557 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1557 -j DROP + +Filter 2681 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2680 + inet/filter/FORWARD -j logaccept-final-218 + inet/filter/INPUT -j limit-2680 + inet/filter/INPUT -j logaccept-final-218 + inet/filter/OUTPUT -j limit-2680 + inet/filter/OUTPUT -j logaccept-final-218 + inet/filter/limit-2680 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1558 + inet/filter/logaccept-final-218 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-218 -j ACCEPT + inet/filter/logdrop-1558 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1558 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1558 -j DROP + inet6/filter/FORWARD -j limit-2680 + inet6/filter/FORWARD -j logaccept-final-218 + inet6/filter/INPUT -j limit-2680 + inet6/filter/INPUT -j logaccept-final-218 + inet6/filter/OUTPUT -j limit-2680 + inet6/filter/OUTPUT -j logaccept-final-218 + inet6/filter/limit-2680 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1558 + inet6/filter/logaccept-final-218 -j ACCEPT + inet6/filter/logdrop-1558 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1558 -j DROP + +Filter 2682 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2681 + inet/filter/INPUT -j limit-2681 + inet/filter/OUTPUT -j limit-2681 + inet/filter/limit-2681 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1559 + inet/filter/limit-2681 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1559 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1559 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1559 -j DROP + inet6/filter/FORWARD -j limit-2681 + inet6/filter/INPUT -j limit-2681 + inet6/filter/OUTPUT -j limit-2681 + inet6/filter/limit-2681 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1559 + inet6/filter/logdrop-1559 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1559 -j DROP + +Filter 2683 {"flow-limit":{"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-2682 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2682 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2682 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2682 -m recent --name limit-2682 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2682 -m recent --name limit-2682 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2682 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2682 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2682 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2682 -m recent --name limit-2682 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2682 -m recent --name limit-2682 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2684 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-2683 + inet/filter/INPUT -j limit-2683 + inet/filter/OUTPUT -j limit-2683 + inet/filter/limit-2683 -m recent --name limit-2683 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2683 -m recent --name limit-2683 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2683 + inet6/filter/INPUT -j limit-2683 + inet6/filter/OUTPUT -j limit-2683 + inet6/filter/limit-2683 -m recent --name limit-2683 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2683 -m recent --name limit-2683 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2685 {"flow-limit":{"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2684 + inet/filter/FORWARD -j logaccept-final-219 + inet/filter/INPUT -j limit-2684 + inet/filter/INPUT -j logaccept-final-219 + inet/filter/OUTPUT -j limit-2684 + inet/filter/OUTPUT -j logaccept-final-219 + inet/filter/limit-2684 -m recent --name limit-2684 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2684 -m recent --name limit-2684 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-219 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-219 -j ACCEPT + inet6/filter/FORWARD -j limit-2684 + inet6/filter/FORWARD -j logaccept-final-219 + inet6/filter/INPUT -j limit-2684 + inet6/filter/INPUT -j logaccept-final-219 + inet6/filter/OUTPUT -j limit-2684 + inet6/filter/OUTPUT -j logaccept-final-219 + inet6/filter/limit-2684 -m recent --name limit-2684 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2684 -m recent --name limit-2684 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-219 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-219 -j ACCEPT + +Filter 2686 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2685 + inet/filter/INPUT -j limit-2685 + inet/filter/OUTPUT -j limit-2685 + inet/filter/limit-2685 -m recent --name limit-2685 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2685 -m recent --name limit-2685 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2685 + inet6/filter/INPUT -j limit-2685 + inet6/filter/OUTPUT -j limit-2685 + inet6/filter/limit-2685 -m recent --name limit-2685 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2685 -m recent --name limit-2685 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 2687 {"flow-limit":{"interval":5,"log":"none"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2686 + inet/filter/FORWARD -j logaccept-final-220 + inet/filter/INPUT -j limit-2686 + inet/filter/INPUT -j logaccept-final-220 + inet/filter/OUTPUT -j limit-2686 + inet/filter/OUTPUT -j logaccept-final-220 + inet/filter/limit-2686 -m recent --name limit-2686 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2686 -m recent --name limit-2686 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-220 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-220 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-220 -j ACCEPT + inet6/filter/FORWARD -j limit-2686 + inet6/filter/FORWARD -j logaccept-final-220 + inet6/filter/INPUT -j limit-2686 + inet6/filter/INPUT -j logaccept-final-220 + inet6/filter/OUTPUT -j limit-2686 + inet6/filter/OUTPUT -j logaccept-final-220 + inet6/filter/limit-2686 -m recent --name limit-2686 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2686 -m recent --name limit-2686 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-220 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-220 -j ACCEPT + +Filter 2688 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2687 + inet/filter/INPUT -j limit-2687 + inet/filter/OUTPUT -j limit-2687 + inet/filter/limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2687 + inet6/filter/INPUT -j limit-2687 + inet6/filter/OUTPUT -j limit-2687 + inet6/filter/limit-2687 -m recent --name limit-2687 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2687 -m recent --name limit-2687 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 2689 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2688 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2688 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2688 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2688 -m recent --name limit-2688 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2688 -m recent --name limit-2688 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2688 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2688 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2688 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2688 -m recent --name limit-2688 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2688 -m recent --name limit-2688 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2690 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2689 + inet/filter/INPUT -j limit-2689 + inet/filter/OUTPUT -j limit-2689 + inet/filter/limit-2689 -m recent --name limit-2689 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2689 -m recent --name limit-2689 --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2689 + inet6/filter/INPUT -j limit-2689 + inet6/filter/OUTPUT -j limit-2689 + inet6/filter/limit-2689 -m recent --name limit-2689 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2689 -m recent --name limit-2689 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2691 {"flow-limit":{"interval":5,"log":"none"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2690 + inet/filter/FORWARD -j logaccept-final-221 + inet/filter/INPUT -j limit-2690 + inet/filter/INPUT -j logaccept-final-221 + inet/filter/OUTPUT -j limit-2690 + inet/filter/OUTPUT -j logaccept-final-221 + inet/filter/limit-2690 -m recent --name limit-2690 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2690 -m recent --name limit-2690 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-221 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-221 -j ACCEPT + inet6/filter/FORWARD -j limit-2690 + inet6/filter/FORWARD -j logaccept-final-221 + inet6/filter/INPUT -j limit-2690 + inet6/filter/INPUT -j logaccept-final-221 + inet6/filter/OUTPUT -j limit-2690 + inet6/filter/OUTPUT -j logaccept-final-221 + inet6/filter/limit-2690 -m recent --name limit-2690 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2690 -m recent --name limit-2690 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-221 -j ACCEPT + +Filter 2692 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2691 + inet/filter/INPUT -j limit-2691 + inet/filter/OUTPUT -j limit-2691 + inet/filter/limit-2691 -m recent --name limit-2691 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2691 -m recent --name limit-2691 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2691 + inet6/filter/INPUT -j limit-2691 + inet6/filter/OUTPUT -j limit-2691 + inet6/filter/limit-2691 -m recent --name limit-2691 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 2693 {"flow-limit":{"interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2692 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2692 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2692 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2692 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2692 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2692 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2692 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2692 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2692 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2692 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2694 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2693 + inet/filter/INPUT -j limit-2693 + inet/filter/OUTPUT -j limit-2693 + inet/filter/limit-2693 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2693 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2693 + inet6/filter/INPUT -j limit-2693 + inet6/filter/OUTPUT -j limit-2693 + inet6/filter/limit-2693 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2693 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2695 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2694 + inet/filter/FORWARD -j logaccept-final-222 + inet/filter/INPUT -j limit-2694 + inet/filter/INPUT -j logaccept-final-222 + inet/filter/OUTPUT -j limit-2694 + inet/filter/OUTPUT -j logaccept-final-222 + inet/filter/limit-2694 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2694 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-222 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-222 -j ACCEPT + inet6/filter/FORWARD -j limit-2694 + inet6/filter/FORWARD -j logaccept-final-222 + inet6/filter/INPUT -j limit-2694 + inet6/filter/INPUT -j logaccept-final-222 + inet6/filter/OUTPUT -j limit-2694 + inet6/filter/OUTPUT -j logaccept-final-222 + inet6/filter/limit-2694 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2694 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-222 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-222 -j ACCEPT + +Filter 2696 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2695 + inet/filter/INPUT -j limit-2695 + inet/filter/OUTPUT -j limit-2695 + inet/filter/limit-2695 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2695 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2695 + inet6/filter/INPUT -j limit-2695 + inet6/filter/OUTPUT -j limit-2695 + inet6/filter/limit-2695 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2695 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 2697 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2696 + inet/filter/FORWARD -j logaccept-final-223 + inet/filter/INPUT -j limit-2696 + inet/filter/INPUT -j logaccept-final-223 + inet/filter/OUTPUT -j limit-2696 + inet/filter/OUTPUT -j logaccept-final-223 + inet/filter/limit-2696 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2696 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-223 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-223 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-223 -j ACCEPT + inet6/filter/FORWARD -j limit-2696 + inet6/filter/FORWARD -j logaccept-final-223 + inet6/filter/INPUT -j limit-2696 + inet6/filter/INPUT -j logaccept-final-223 + inet6/filter/OUTPUT -j limit-2696 + inet6/filter/OUTPUT -j logaccept-final-223 + inet6/filter/limit-2696 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2696 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-223 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-223 -j ACCEPT + +Filter 2698 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2697 + inet/filter/INPUT -j limit-2697 + inet/filter/OUTPUT -j limit-2697 + inet/filter/limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2697 + inet6/filter/INPUT -j limit-2697 + inet6/filter/OUTPUT -j limit-2697 + inet6/filter/limit-2697 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2697 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 2699 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2698 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2698 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2698 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2698 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2698 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2698 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2698 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2698 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2698 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2698 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2700 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2699 + inet/filter/INPUT -j limit-2699 + inet/filter/OUTPUT -j limit-2699 + inet/filter/limit-2699 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2699 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2699 + inet6/filter/INPUT -j limit-2699 + inet6/filter/OUTPUT -j limit-2699 + inet6/filter/limit-2699 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2699 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2701 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2700 + inet/filter/FORWARD -j logaccept-final-224 + inet/filter/INPUT -j limit-2700 + inet/filter/INPUT -j logaccept-final-224 + inet/filter/OUTPUT -j limit-2700 + inet/filter/OUTPUT -j logaccept-final-224 + inet/filter/limit-2700 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2700 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-224 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-224 -j ACCEPT + inet6/filter/FORWARD -j limit-2700 + inet6/filter/FORWARD -j logaccept-final-224 + inet6/filter/INPUT -j limit-2700 + inet6/filter/INPUT -j logaccept-final-224 + inet6/filter/OUTPUT -j limit-2700 + inet6/filter/OUTPUT -j logaccept-final-224 + inet6/filter/limit-2700 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2700 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-224 -j ACCEPT + +Filter 2702 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2701 + inet/filter/INPUT -j limit-2701 + inet/filter/OUTPUT -j limit-2701 + inet/filter/limit-2701 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2701 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2701 + inet6/filter/INPUT -j limit-2701 + inet6/filter/OUTPUT -j limit-2701 + inet6/filter/limit-2701 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 2703 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2702 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2702 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2702 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2702 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2702 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2702 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2702 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2702 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2704 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2703 + inet/filter/INPUT -j limit-2703 + inet/filter/OUTPUT -j limit-2703 + inet/filter/limit-2703 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2703 + inet6/filter/INPUT -j limit-2703 + inet6/filter/OUTPUT -j limit-2703 + inet6/filter/limit-2703 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2705 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2704 + inet/filter/FORWARD -j logaccept-final-225 + inet/filter/INPUT -j limit-2704 + inet/filter/INPUT -j logaccept-final-225 + inet/filter/OUTPUT -j limit-2704 + inet/filter/OUTPUT -j logaccept-final-225 + inet/filter/limit-2704 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-225 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-225 -j ACCEPT + inet6/filter/FORWARD -j limit-2704 + inet6/filter/FORWARD -j logaccept-final-225 + inet6/filter/INPUT -j limit-2704 + inet6/filter/INPUT -j logaccept-final-225 + inet6/filter/OUTPUT -j limit-2704 + inet6/filter/OUTPUT -j logaccept-final-225 + inet6/filter/limit-2704 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-225 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-225 -j ACCEPT + +Filter 2706 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2705 + inet/filter/INPUT -j limit-2705 + inet/filter/OUTPUT -j limit-2705 + inet/filter/limit-2705 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2705 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2705 + inet6/filter/INPUT -j limit-2705 + inet6/filter/OUTPUT -j limit-2705 + inet6/filter/limit-2705 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2705 -m limit --limit 1/second -j LOG + +Filter 2707 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2706 + inet/filter/FORWARD -j logaccept-final-226 + inet/filter/INPUT -j limit-2706 + inet/filter/INPUT -j logaccept-final-226 + inet/filter/OUTPUT -j limit-2706 + inet/filter/OUTPUT -j logaccept-final-226 + inet/filter/limit-2706 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-226 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-226 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-226 -j ACCEPT + inet6/filter/FORWARD -j limit-2706 + inet6/filter/FORWARD -j logaccept-final-226 + inet6/filter/INPUT -j limit-2706 + inet6/filter/INPUT -j logaccept-final-226 + inet6/filter/OUTPUT -j limit-2706 + inet6/filter/OUTPUT -j logaccept-final-226 + inet6/filter/limit-2706 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-226 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-226 -j ACCEPT + +Filter 2708 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2707 + inet/filter/INPUT -j limit-2707 + inet/filter/OUTPUT -j limit-2707 + inet/filter/limit-2707 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2707 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2707 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2707 + inet6/filter/INPUT -j limit-2707 + inet6/filter/OUTPUT -j limit-2707 + inet6/filter/limit-2707 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2707 -j TEE --gateway fc00::2 + +Filter 2709 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2708 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2708 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2708 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2708 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2708 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2708 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2708 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2708 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2710 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2709 + inet/filter/INPUT -j limit-2709 + inet/filter/OUTPUT -j limit-2709 + inet/filter/limit-2709 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2709 + inet6/filter/INPUT -j limit-2709 + inet6/filter/OUTPUT -j limit-2709 + inet6/filter/limit-2709 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2711 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2710 + inet/filter/FORWARD -j logaccept-final-227 + inet/filter/INPUT -j limit-2710 + inet/filter/INPUT -j logaccept-final-227 + inet/filter/OUTPUT -j limit-2710 + inet/filter/OUTPUT -j logaccept-final-227 + inet/filter/limit-2710 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-227 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-227 -j ACCEPT + inet6/filter/FORWARD -j limit-2710 + inet6/filter/FORWARD -j logaccept-final-227 + inet6/filter/INPUT -j limit-2710 + inet6/filter/INPUT -j logaccept-final-227 + inet6/filter/OUTPUT -j limit-2710 + inet6/filter/OUTPUT -j logaccept-final-227 + inet6/filter/limit-2710 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-227 -j ACCEPT + +Filter 2712 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2711 + inet/filter/INPUT -j limit-2711 + inet/filter/OUTPUT -j limit-2711 + inet/filter/limit-2711 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2711 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2711 + inet6/filter/INPUT -j limit-2711 + inet6/filter/OUTPUT -j limit-2711 + inet6/filter/limit-2711 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2713 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2712 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2712 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2712 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2712 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2712 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2712 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2712 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2712 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2712 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2712 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2714 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2713 + inet/filter/INPUT -j limit-2713 + inet/filter/OUTPUT -j limit-2713 + inet/filter/limit-2713 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2713 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2713 + inet6/filter/INPUT -j limit-2713 + inet6/filter/OUTPUT -j limit-2713 + inet6/filter/limit-2713 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2713 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2715 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2714 + inet/filter/FORWARD -j logaccept-final-228 + inet/filter/INPUT -j limit-2714 + inet/filter/INPUT -j logaccept-final-228 + inet/filter/OUTPUT -j limit-2714 + inet/filter/OUTPUT -j logaccept-final-228 + inet/filter/limit-2714 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2714 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-228 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-228 -j ACCEPT + inet6/filter/FORWARD -j limit-2714 + inet6/filter/FORWARD -j logaccept-final-228 + inet6/filter/INPUT -j limit-2714 + inet6/filter/INPUT -j logaccept-final-228 + inet6/filter/OUTPUT -j limit-2714 + inet6/filter/OUTPUT -j logaccept-final-228 + inet6/filter/limit-2714 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2714 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-228 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-228 -j ACCEPT + +Filter 2716 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2715 + inet/filter/INPUT -j limit-2715 + inet/filter/OUTPUT -j limit-2715 + inet/filter/limit-2715 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2715 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2715 + inet6/filter/INPUT -j limit-2715 + inet6/filter/OUTPUT -j limit-2715 + inet6/filter/limit-2715 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2715 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 2717 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2716 + inet/filter/FORWARD -j logaccept-final-229 + inet/filter/INPUT -j limit-2716 + inet/filter/INPUT -j logaccept-final-229 + inet/filter/OUTPUT -j limit-2716 + inet/filter/OUTPUT -j logaccept-final-229 + inet/filter/limit-2716 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2716 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-229 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-229 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-229 -j ACCEPT + inet6/filter/FORWARD -j limit-2716 + inet6/filter/FORWARD -j logaccept-final-229 + inet6/filter/INPUT -j limit-2716 + inet6/filter/INPUT -j logaccept-final-229 + inet6/filter/OUTPUT -j limit-2716 + inet6/filter/OUTPUT -j logaccept-final-229 + inet6/filter/limit-2716 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2716 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-229 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-229 -j ACCEPT + +Filter 2718 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2717 + inet/filter/INPUT -j limit-2717 + inet/filter/OUTPUT -j limit-2717 + inet/filter/limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2717 + inet6/filter/INPUT -j limit-2717 + inet6/filter/OUTPUT -j limit-2717 + inet6/filter/limit-2717 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2717 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + +Filter 2719 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2718 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2718 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2718 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2718 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2718 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2718 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2718 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2718 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2718 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2718 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2720 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2719 + inet/filter/INPUT -j limit-2719 + inet/filter/OUTPUT -j limit-2719 + inet/filter/limit-2719 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2719 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/FORWARD -j limit-2719 + inet6/filter/INPUT -j limit-2719 + inet6/filter/OUTPUT -j limit-2719 + inet6/filter/limit-2719 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2719 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 2721 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2720 + inet/filter/FORWARD -j logaccept-final-230 + inet/filter/INPUT -j limit-2720 + inet/filter/INPUT -j logaccept-final-230 + inet/filter/OUTPUT -j limit-2720 + inet/filter/OUTPUT -j logaccept-final-230 + inet/filter/limit-2720 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2720 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-230 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-230 -j ACCEPT + inet6/filter/FORWARD -j limit-2720 + inet6/filter/FORWARD -j logaccept-final-230 + inet6/filter/INPUT -j limit-2720 + inet6/filter/INPUT -j logaccept-final-230 + inet6/filter/OUTPUT -j limit-2720 + inet6/filter/OUTPUT -j logaccept-final-230 + inet6/filter/limit-2720 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2720 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-230 -j ACCEPT + +Filter 2722 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2721 + inet/filter/INPUT -j limit-2721 + inet/filter/OUTPUT -j limit-2721 + inet/filter/limit-2721 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2721 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2721 + inet6/filter/INPUT -j limit-2721 + inet6/filter/OUTPUT -j limit-2721 + inet6/filter/limit-2721 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + +Filter 2723 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2722 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2722 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2722 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2722 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2722 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2722 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2722 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2722 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2724 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2723 + inet/filter/INPUT -j limit-2723 + inet/filter/OUTPUT -j limit-2723 + inet/filter/limit-2723 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2723 + inet6/filter/INPUT -j limit-2723 + inet6/filter/OUTPUT -j limit-2723 + inet6/filter/limit-2723 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2725 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2724 + inet/filter/FORWARD -j logaccept-final-231 + inet/filter/INPUT -j limit-2724 + inet/filter/INPUT -j logaccept-final-231 + inet/filter/OUTPUT -j limit-2724 + inet/filter/OUTPUT -j logaccept-final-231 + inet/filter/limit-2724 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-231 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-231 -j ACCEPT + inet6/filter/FORWARD -j limit-2724 + inet6/filter/FORWARD -j logaccept-final-231 + inet6/filter/INPUT -j limit-2724 + inet6/filter/INPUT -j logaccept-final-231 + inet6/filter/OUTPUT -j limit-2724 + inet6/filter/OUTPUT -j logaccept-final-231 + inet6/filter/limit-2724 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-231 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-231 -j ACCEPT + +Filter 2726 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2725 + inet/filter/INPUT -j limit-2725 + inet/filter/OUTPUT -j limit-2725 + inet/filter/limit-2725 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2725 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2725 + inet6/filter/INPUT -j limit-2725 + inet6/filter/OUTPUT -j limit-2725 + inet6/filter/limit-2725 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2725 -m limit --limit 1/second -j LOG + +Filter 2727 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2726 + inet/filter/FORWARD -j logaccept-final-232 + inet/filter/INPUT -j limit-2726 + inet/filter/INPUT -j logaccept-final-232 + inet/filter/OUTPUT -j limit-2726 + inet/filter/OUTPUT -j logaccept-final-232 + inet/filter/limit-2726 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-232 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-232 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-232 -j ACCEPT + inet6/filter/FORWARD -j limit-2726 + inet6/filter/FORWARD -j logaccept-final-232 + inet6/filter/INPUT -j limit-2726 + inet6/filter/INPUT -j logaccept-final-232 + inet6/filter/OUTPUT -j limit-2726 + inet6/filter/OUTPUT -j logaccept-final-232 + inet6/filter/limit-2726 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-232 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-232 -j ACCEPT + +Filter 2728 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2727 + inet/filter/INPUT -j limit-2727 + inet/filter/OUTPUT -j limit-2727 + inet/filter/limit-2727 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2727 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2727 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2727 + inet6/filter/INPUT -j limit-2727 + inet6/filter/OUTPUT -j limit-2727 + inet6/filter/limit-2727 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2727 -j TEE --gateway fc00::2 + +Filter 2729 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2728 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2728 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2728 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2728 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2728 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2728 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2728 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2728 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2730 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2729 + inet/filter/INPUT -j limit-2729 + inet/filter/OUTPUT -j limit-2729 + inet/filter/limit-2729 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2729 + inet6/filter/INPUT -j limit-2729 + inet6/filter/OUTPUT -j limit-2729 + inet6/filter/limit-2729 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2731 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2730 + inet/filter/FORWARD -j logaccept-final-233 + inet/filter/INPUT -j limit-2730 + inet/filter/INPUT -j logaccept-final-233 + inet/filter/OUTPUT -j limit-2730 + inet/filter/OUTPUT -j logaccept-final-233 + inet/filter/limit-2730 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-233 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-233 -j ACCEPT + inet6/filter/FORWARD -j limit-2730 + inet6/filter/FORWARD -j logaccept-final-233 + inet6/filter/INPUT -j limit-2730 + inet6/filter/INPUT -j logaccept-final-233 + inet6/filter/OUTPUT -j limit-2730 + inet6/filter/OUTPUT -j logaccept-final-233 + inet6/filter/limit-2730 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-233 -j ACCEPT + +Filter 2732 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2731 + inet/filter/INPUT -j limit-2731 + inet/filter/OUTPUT -j limit-2731 + inet/filter/limit-2731 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2731 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2731 + inet6/filter/INPUT -j limit-2731 + inet6/filter/OUTPUT -j limit-2731 + inet6/filter/limit-2731 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2733 {"flow-limit":{"interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2732 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2732 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2732 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2732 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2732 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2732 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2732 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2732 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2732 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2732 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2734 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2733 + inet/filter/INPUT -j limit-2733 + inet/filter/OUTPUT -j limit-2733 + inet/filter/limit-2733 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2733 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2733 + inet6/filter/INPUT -j limit-2733 + inet6/filter/OUTPUT -j limit-2733 + inet6/filter/limit-2733 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2733 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2735 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2734 + inet/filter/FORWARD -j logaccept-final-234 + inet/filter/INPUT -j limit-2734 + inet/filter/INPUT -j logaccept-final-234 + inet/filter/OUTPUT -j limit-2734 + inet/filter/OUTPUT -j logaccept-final-234 + inet/filter/limit-2734 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2734 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-234 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-234 -j ACCEPT + inet6/filter/FORWARD -j limit-2734 + inet6/filter/FORWARD -j logaccept-final-234 + inet6/filter/INPUT -j limit-2734 + inet6/filter/INPUT -j logaccept-final-234 + inet6/filter/OUTPUT -j limit-2734 + inet6/filter/OUTPUT -j logaccept-final-234 + inet6/filter/limit-2734 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2734 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-234 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-234 -j ACCEPT + +Filter 2736 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2735 + inet/filter/INPUT -j limit-2735 + inet/filter/OUTPUT -j limit-2735 + inet/filter/limit-2735 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2735 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2735 + inet6/filter/INPUT -j limit-2735 + inet6/filter/OUTPUT -j limit-2735 + inet6/filter/limit-2735 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2735 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 2737 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2736 + inet/filter/FORWARD -j logaccept-final-235 + inet/filter/INPUT -j limit-2736 + inet/filter/INPUT -j logaccept-final-235 + inet/filter/OUTPUT -j limit-2736 + inet/filter/OUTPUT -j logaccept-final-235 + inet/filter/limit-2736 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2736 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-235 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-235 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-235 -j ACCEPT + inet6/filter/FORWARD -j limit-2736 + inet6/filter/FORWARD -j logaccept-final-235 + inet6/filter/INPUT -j limit-2736 + inet6/filter/INPUT -j logaccept-final-235 + inet6/filter/OUTPUT -j limit-2736 + inet6/filter/OUTPUT -j logaccept-final-235 + inet6/filter/limit-2736 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2736 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-235 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-235 -j ACCEPT + +Filter 2738 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2737 + inet/filter/INPUT -j limit-2737 + inet/filter/OUTPUT -j limit-2737 + inet/filter/limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2737 + inet6/filter/INPUT -j limit-2737 + inet6/filter/OUTPUT -j limit-2737 + inet6/filter/limit-2737 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2737 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + +Filter 2739 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2738 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2738 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2738 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2738 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2738 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2738 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2738 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2738 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2738 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2738 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2740 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2739 + inet/filter/INPUT -j limit-2739 + inet/filter/OUTPUT -j limit-2739 + inet/filter/limit-2739 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2739 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2739 + inet6/filter/INPUT -j limit-2739 + inet6/filter/OUTPUT -j limit-2739 + inet6/filter/limit-2739 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2739 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 2741 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2740 + inet/filter/FORWARD -j logaccept-final-236 + inet/filter/INPUT -j limit-2740 + inet/filter/INPUT -j logaccept-final-236 + inet/filter/OUTPUT -j limit-2740 + inet/filter/OUTPUT -j logaccept-final-236 + inet/filter/limit-2740 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2740 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-236 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-236 -j ACCEPT + inet6/filter/FORWARD -j limit-2740 + inet6/filter/FORWARD -j logaccept-final-236 + inet6/filter/INPUT -j limit-2740 + inet6/filter/INPUT -j logaccept-final-236 + inet6/filter/OUTPUT -j limit-2740 + inet6/filter/OUTPUT -j logaccept-final-236 + inet6/filter/limit-2740 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2740 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-236 -j ACCEPT + +Filter 2742 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2741 + inet/filter/INPUT -j limit-2741 + inet/filter/OUTPUT -j limit-2741 + inet/filter/limit-2741 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2741 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2741 + inet6/filter/INPUT -j limit-2741 + inet6/filter/OUTPUT -j limit-2741 + inet6/filter/limit-2741 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + +Filter 2743 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2742 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2742 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2742 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2742 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2742 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2742 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2742 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2742 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2744 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2743 + inet/filter/INPUT -j limit-2743 + inet/filter/OUTPUT -j limit-2743 + inet/filter/limit-2743 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2743 + inet6/filter/INPUT -j limit-2743 + inet6/filter/OUTPUT -j limit-2743 + inet6/filter/limit-2743 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2745 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2744 + inet/filter/FORWARD -j logaccept-final-237 + inet/filter/INPUT -j limit-2744 + inet/filter/INPUT -j logaccept-final-237 + inet/filter/OUTPUT -j limit-2744 + inet/filter/OUTPUT -j logaccept-final-237 + inet/filter/limit-2744 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-237 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-237 -j ACCEPT + inet6/filter/FORWARD -j limit-2744 + inet6/filter/FORWARD -j logaccept-final-237 + inet6/filter/INPUT -j limit-2744 + inet6/filter/INPUT -j logaccept-final-237 + inet6/filter/OUTPUT -j limit-2744 + inet6/filter/OUTPUT -j logaccept-final-237 + inet6/filter/limit-2744 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-237 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-237 -j ACCEPT + +Filter 2746 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2745 + inet/filter/INPUT -j limit-2745 + inet/filter/OUTPUT -j limit-2745 + inet/filter/limit-2745 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2745 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2745 + inet6/filter/INPUT -j limit-2745 + inet6/filter/OUTPUT -j limit-2745 + inet6/filter/limit-2745 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2745 -m limit --limit 1/second -j LOG + +Filter 2747 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2746 + inet/filter/FORWARD -j logaccept-final-238 + inet/filter/INPUT -j limit-2746 + inet/filter/INPUT -j logaccept-final-238 + inet/filter/OUTPUT -j limit-2746 + inet/filter/OUTPUT -j logaccept-final-238 + inet/filter/limit-2746 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-238 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-238 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-238 -j ACCEPT + inet6/filter/FORWARD -j limit-2746 + inet6/filter/FORWARD -j logaccept-final-238 + inet6/filter/INPUT -j limit-2746 + inet6/filter/INPUT -j logaccept-final-238 + inet6/filter/OUTPUT -j limit-2746 + inet6/filter/OUTPUT -j logaccept-final-238 + inet6/filter/limit-2746 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-238 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-238 -j ACCEPT + +Filter 2748 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2747 + inet/filter/INPUT -j limit-2747 + inet/filter/OUTPUT -j limit-2747 + inet/filter/limit-2747 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2747 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2747 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2747 + inet6/filter/INPUT -j limit-2747 + inet6/filter/OUTPUT -j limit-2747 + inet6/filter/limit-2747 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2747 -j TEE --gateway fc00::2 + +Filter 2749 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2748 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2748 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2748 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2748 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2748 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2748 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2748 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2748 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2750 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2749 + inet/filter/INPUT -j limit-2749 + inet/filter/OUTPUT -j limit-2749 + inet/filter/limit-2749 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2749 + inet6/filter/INPUT -j limit-2749 + inet6/filter/OUTPUT -j limit-2749 + inet6/filter/limit-2749 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2751 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2750 + inet/filter/FORWARD -j logaccept-final-239 + inet/filter/INPUT -j limit-2750 + inet/filter/INPUT -j logaccept-final-239 + inet/filter/OUTPUT -j limit-2750 + inet/filter/OUTPUT -j logaccept-final-239 + inet/filter/limit-2750 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-239 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-239 -j ACCEPT + inet6/filter/FORWARD -j limit-2750 + inet6/filter/FORWARD -j logaccept-final-239 + inet6/filter/INPUT -j limit-2750 + inet6/filter/INPUT -j logaccept-final-239 + inet6/filter/OUTPUT -j limit-2750 + inet6/filter/OUTPUT -j logaccept-final-239 + inet6/filter/limit-2750 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-239 -j ACCEPT + +Filter 2752 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2751 + inet/filter/INPUT -j limit-2751 + inet/filter/OUTPUT -j limit-2751 + inet/filter/limit-2751 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2751 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2751 + inet6/filter/INPUT -j limit-2751 + inet6/filter/OUTPUT -j limit-2751 + inet6/filter/limit-2751 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2753 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2752 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2752 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2752 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2752 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2752 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2752 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2752 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2752 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2752 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2752 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2754 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2753 + inet/filter/INPUT -j limit-2753 + inet/filter/OUTPUT -j limit-2753 + inet/filter/limit-2753 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2753 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2753 + inet6/filter/INPUT -j limit-2753 + inet6/filter/OUTPUT -j limit-2753 + inet6/filter/limit-2753 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2753 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2755 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2754 + inet/filter/FORWARD -j logaccept-final-240 + inet/filter/INPUT -j limit-2754 + inet/filter/INPUT -j logaccept-final-240 + inet/filter/OUTPUT -j limit-2754 + inet/filter/OUTPUT -j logaccept-final-240 + inet/filter/limit-2754 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2754 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-240 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-240 -j ACCEPT + inet6/filter/FORWARD -j limit-2754 + inet6/filter/FORWARD -j logaccept-final-240 + inet6/filter/INPUT -j limit-2754 + inet6/filter/INPUT -j logaccept-final-240 + inet6/filter/OUTPUT -j limit-2754 + inet6/filter/OUTPUT -j logaccept-final-240 + inet6/filter/limit-2754 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2754 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-240 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-240 -j ACCEPT + +Filter 2756 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2755 + inet/filter/INPUT -j limit-2755 + inet/filter/OUTPUT -j limit-2755 + inet/filter/limit-2755 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2755 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2755 + inet6/filter/INPUT -j limit-2755 + inet6/filter/OUTPUT -j limit-2755 + inet6/filter/limit-2755 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2755 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 2757 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2756 + inet/filter/FORWARD -j logaccept-final-241 + inet/filter/INPUT -j limit-2756 + inet/filter/INPUT -j logaccept-final-241 + inet/filter/OUTPUT -j limit-2756 + inet/filter/OUTPUT -j logaccept-final-241 + inet/filter/limit-2756 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2756 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-241 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-241 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-241 -j ACCEPT + inet6/filter/FORWARD -j limit-2756 + inet6/filter/FORWARD -j logaccept-final-241 + inet6/filter/INPUT -j limit-2756 + inet6/filter/INPUT -j logaccept-final-241 + inet6/filter/OUTPUT -j limit-2756 + inet6/filter/OUTPUT -j logaccept-final-241 + inet6/filter/limit-2756 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2756 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-241 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-241 -j ACCEPT + +Filter 2758 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2757 + inet/filter/INPUT -j limit-2757 + inet/filter/OUTPUT -j limit-2757 + inet/filter/limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2757 + inet6/filter/INPUT -j limit-2757 + inet6/filter/OUTPUT -j limit-2757 + inet6/filter/limit-2757 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2757 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + +Filter 2759 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2758 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2758 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2758 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2758 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2758 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2758 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2758 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2758 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2758 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2758 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2760 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2759 + inet/filter/INPUT -j limit-2759 + inet/filter/OUTPUT -j limit-2759 + inet/filter/limit-2759 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2759 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/FORWARD -j limit-2759 + inet6/filter/INPUT -j limit-2759 + inet6/filter/OUTPUT -j limit-2759 + inet6/filter/limit-2759 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2759 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 2761 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2760 + inet/filter/FORWARD -j logaccept-final-242 + inet/filter/INPUT -j limit-2760 + inet/filter/INPUT -j logaccept-final-242 + inet/filter/OUTPUT -j limit-2760 + inet/filter/OUTPUT -j logaccept-final-242 + inet/filter/limit-2760 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2760 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-242 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-242 -j ACCEPT + inet6/filter/FORWARD -j limit-2760 + inet6/filter/FORWARD -j logaccept-final-242 + inet6/filter/INPUT -j limit-2760 + inet6/filter/INPUT -j logaccept-final-242 + inet6/filter/OUTPUT -j limit-2760 + inet6/filter/OUTPUT -j logaccept-final-242 + inet6/filter/limit-2760 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2760 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-242 -j ACCEPT + +Filter 2762 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2761 + inet/filter/INPUT -j limit-2761 + inet/filter/OUTPUT -j limit-2761 + inet/filter/limit-2761 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2761 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2761 + inet6/filter/INPUT -j limit-2761 + inet6/filter/OUTPUT -j limit-2761 + inet6/filter/limit-2761 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + +Filter 2763 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2762 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2762 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2762 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2762 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2762 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2762 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2762 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2762 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2764 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2763 + inet/filter/INPUT -j limit-2763 + inet/filter/OUTPUT -j limit-2763 + inet/filter/limit-2763 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2763 + inet6/filter/INPUT -j limit-2763 + inet6/filter/OUTPUT -j limit-2763 + inet6/filter/limit-2763 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2765 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2764 + inet/filter/FORWARD -j logaccept-final-243 + inet/filter/INPUT -j limit-2764 + inet/filter/INPUT -j logaccept-final-243 + inet/filter/OUTPUT -j limit-2764 + inet/filter/OUTPUT -j logaccept-final-243 + inet/filter/limit-2764 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-243 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-243 -j ACCEPT + inet6/filter/FORWARD -j limit-2764 + inet6/filter/FORWARD -j logaccept-final-243 + inet6/filter/INPUT -j limit-2764 + inet6/filter/INPUT -j logaccept-final-243 + inet6/filter/OUTPUT -j limit-2764 + inet6/filter/OUTPUT -j logaccept-final-243 + inet6/filter/limit-2764 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-243 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-243 -j ACCEPT + +Filter 2766 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2765 + inet/filter/INPUT -j limit-2765 + inet/filter/OUTPUT -j limit-2765 + inet/filter/limit-2765 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2765 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -j limit-2765 + inet6/filter/INPUT -j limit-2765 + inet6/filter/OUTPUT -j limit-2765 + inet6/filter/limit-2765 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2765 -m limit --limit 1/second -j LOG + +Filter 2767 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2766 + inet/filter/FORWARD -j logaccept-final-244 + inet/filter/INPUT -j limit-2766 + inet/filter/INPUT -j logaccept-final-244 + inet/filter/OUTPUT -j limit-2766 + inet/filter/OUTPUT -j logaccept-final-244 + inet/filter/limit-2766 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-244 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-244 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-244 -j ACCEPT + inet6/filter/FORWARD -j limit-2766 + inet6/filter/FORWARD -j logaccept-final-244 + inet6/filter/INPUT -j limit-2766 + inet6/filter/INPUT -j logaccept-final-244 + inet6/filter/OUTPUT -j limit-2766 + inet6/filter/OUTPUT -j logaccept-final-244 + inet6/filter/limit-2766 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-244 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-244 -j ACCEPT + +Filter 2768 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2767 + inet/filter/INPUT -j limit-2767 + inet/filter/OUTPUT -j limit-2767 + inet/filter/limit-2767 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2767 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2767 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j limit-2767 + inet6/filter/INPUT -j limit-2767 + inet6/filter/OUTPUT -j limit-2767 + inet6/filter/limit-2767 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-2767 -j TEE --gateway fc00::2 + +Filter 2769 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2768 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2768 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2768 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2768 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2768 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2768 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2768 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2768 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2770 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2769 + inet/filter/INPUT -j limit-2769 + inet/filter/OUTPUT -j limit-2769 + inet/filter/limit-2769 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -j limit-2769 + inet6/filter/INPUT -j limit-2769 + inet6/filter/OUTPUT -j limit-2769 + inet6/filter/limit-2769 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2771 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2770 + inet/filter/FORWARD -j logaccept-final-245 + inet/filter/INPUT -j limit-2770 + inet/filter/INPUT -j logaccept-final-245 + inet/filter/OUTPUT -j limit-2770 + inet/filter/OUTPUT -j logaccept-final-245 + inet/filter/limit-2770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/logaccept-final-245 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-245 -j ACCEPT + inet6/filter/FORWARD -j limit-2770 + inet6/filter/FORWARD -j logaccept-final-245 + inet6/filter/INPUT -j limit-2770 + inet6/filter/INPUT -j logaccept-final-245 + inet6/filter/OUTPUT -j limit-2770 + inet6/filter/OUTPUT -j logaccept-final-245 + inet6/filter/limit-2770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/logaccept-final-245 -j ACCEPT + +Filter 2772 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2771 + inet/filter/INPUT -j limit-2771 + inet/filter/OUTPUT -j limit-2771 + inet/filter/limit-2771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-2771 -m limit --limit 12/minute -j ULOG + inet6/filter/FORWARD -j limit-2771 + inet6/filter/INPUT -j limit-2771 + inet6/filter/OUTPUT -j limit-2771 + inet6/filter/limit-2771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 2773 {"flow-limit":{"interval":5,"log":"ulog"}} +(filter-limit) + inet/filter/FORWARD -j limit-2772 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2772 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2772 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2772 -m recent --name limit-2772 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1560 + inet/filter/limit-2772 -m recent --name limit-2772 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1560 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1560 -j DROP + inet6/filter/FORWARD -j limit-2772 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2772 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2772 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2772 -m recent --name limit-2772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1560 + inet6/filter/limit-2772 -m recent --name limit-2772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1560 -j DROP + +Filter 2774 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"}} +(filter-limit) + inet/filter/FORWARD -j limit-2773 + inet/filter/INPUT -j limit-2773 + inet/filter/OUTPUT -j limit-2773 + inet/filter/limit-2773 -m recent --name limit-2773 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1561 + inet/filter/limit-2773 -m recent --name limit-2773 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1561 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1561 -j DROP + inet6/filter/FORWARD -j limit-2773 + inet6/filter/INPUT -j limit-2773 + inet6/filter/OUTPUT -j limit-2773 + inet6/filter/limit-2773 -m recent --name limit-2773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1561 + inet6/filter/limit-2773 -m recent --name limit-2773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1561 -j DROP + +Filter 2775 {"flow-limit":{"interval":5,"log":"ulog"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2774 + inet/filter/FORWARD -j logaccept-final-246 + inet/filter/INPUT -j limit-2774 + inet/filter/INPUT -j logaccept-final-246 + inet/filter/OUTPUT -j limit-2774 + inet/filter/OUTPUT -j logaccept-final-246 + inet/filter/limit-2774 -m recent --name limit-2774 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1562 + inet/filter/limit-2774 -m recent --name limit-2774 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-246 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-246 -j ACCEPT + inet/filter/logdrop-1562 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1562 -j DROP + inet6/filter/FORWARD -j limit-2774 + inet6/filter/FORWARD -j logaccept-final-246 + inet6/filter/INPUT -j limit-2774 + inet6/filter/INPUT -j logaccept-final-246 + inet6/filter/OUTPUT -j limit-2774 + inet6/filter/OUTPUT -j logaccept-final-246 + inet6/filter/limit-2774 -m recent --name limit-2774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1562 + inet6/filter/limit-2774 -m recent --name limit-2774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-246 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-246 -j ACCEPT + inet6/filter/logdrop-1562 -j DROP + +Filter 2776 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2775 + inet/filter/INPUT -j limit-2775 + inet/filter/OUTPUT -j limit-2775 + inet/filter/limit-2775 -m recent --name limit-2775 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1563 + inet/filter/limit-2775 -m recent --name limit-2775 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1563 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1563 -j DROP + inet6/filter/FORWARD -j limit-2775 + inet6/filter/INPUT -j limit-2775 + inet6/filter/OUTPUT -j limit-2775 + inet6/filter/limit-2775 -m recent --name limit-2775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1563 + inet6/filter/limit-2775 -m recent --name limit-2775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1563 -j DROP + +Filter 2777 {"flow-limit":{"interval":5,"log":"ulog"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2776 + inet/filter/FORWARD -j logaccept-final-247 + inet/filter/INPUT -j limit-2776 + inet/filter/INPUT -j logaccept-final-247 + inet/filter/OUTPUT -j limit-2776 + inet/filter/OUTPUT -j logaccept-final-247 + inet/filter/limit-2776 -m recent --name limit-2776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1564 + inet/filter/limit-2776 -m recent --name limit-2776 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-247 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-247 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-247 -j ACCEPT + inet/filter/logdrop-1564 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1564 -j DROP + inet6/filter/FORWARD -j limit-2776 + inet6/filter/FORWARD -j logaccept-final-247 + inet6/filter/INPUT -j limit-2776 + inet6/filter/INPUT -j logaccept-final-247 + inet6/filter/OUTPUT -j limit-2776 + inet6/filter/OUTPUT -j logaccept-final-247 + inet6/filter/limit-2776 -m recent --name limit-2776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1564 + inet6/filter/limit-2776 -m recent --name limit-2776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-247 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-247 -j ACCEPT + inet6/filter/logdrop-1564 -j DROP + +Filter 2778 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2777 + inet/filter/INPUT -j limit-2777 + inet/filter/OUTPUT -j limit-2777 + inet/filter/limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1565 + inet/filter/limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1565 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1565 -j DROP + inet6/filter/FORWARD -j limit-2777 + inet6/filter/INPUT -j limit-2777 + inet6/filter/OUTPUT -j limit-2777 + inet6/filter/limit-2777 -m recent --name limit-2777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1565 + inet6/filter/limit-2777 -m recent --name limit-2777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1565 -j DROP + +Filter 2779 {"flow-limit":{"interval":5,"log":"ulog"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2778 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2778 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2778 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2778 -m recent --name limit-2778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1566 + inet/filter/limit-2778 -m recent --name limit-2778 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1566 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1566 -j DROP + inet6/filter/FORWARD -j limit-2778 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2778 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2778 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2778 -m recent --name limit-2778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1566 + inet6/filter/limit-2778 -m recent --name limit-2778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1566 -j DROP + +Filter 2780 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2779 + inet/filter/INPUT -j limit-2779 + inet/filter/OUTPUT -j limit-2779 + inet/filter/limit-2779 -m recent --name limit-2779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1567 + inet/filter/limit-2779 -m recent --name limit-2779 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1567 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1567 -j DROP + inet6/filter/FORWARD -j limit-2779 + inet6/filter/INPUT -j limit-2779 + inet6/filter/OUTPUT -j limit-2779 + inet6/filter/limit-2779 -m recent --name limit-2779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1567 + inet6/filter/limit-2779 -m recent --name limit-2779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1567 -j DROP + +Filter 2781 {"flow-limit":{"interval":5,"log":"ulog"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2780 + inet/filter/FORWARD -j logaccept-final-248 + inet/filter/INPUT -j limit-2780 + inet/filter/INPUT -j logaccept-final-248 + inet/filter/OUTPUT -j limit-2780 + inet/filter/OUTPUT -j logaccept-final-248 + inet/filter/limit-2780 -m recent --name limit-2780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1568 + inet/filter/limit-2780 -m recent --name limit-2780 --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-248 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-248 -j ACCEPT + inet/filter/logdrop-1568 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1568 -j DROP + inet6/filter/FORWARD -j limit-2780 + inet6/filter/FORWARD -j logaccept-final-248 + inet6/filter/INPUT -j limit-2780 + inet6/filter/INPUT -j logaccept-final-248 + inet6/filter/OUTPUT -j limit-2780 + inet6/filter/OUTPUT -j logaccept-final-248 + inet6/filter/limit-2780 -m recent --name limit-2780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1568 + inet6/filter/limit-2780 -m recent --name limit-2780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-248 -j ACCEPT + inet6/filter/logdrop-1568 -j DROP + +Filter 2782 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2781 + inet/filter/INPUT -j limit-2781 + inet/filter/OUTPUT -j limit-2781 + inet/filter/limit-2781 -m recent --name limit-2781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1569 + inet/filter/limit-2781 -m recent --name limit-2781 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1569 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1569 -j DROP + inet6/filter/FORWARD -j limit-2781 + inet6/filter/INPUT -j limit-2781 + inet6/filter/OUTPUT -j limit-2781 + inet6/filter/limit-2781 -m recent --name limit-2781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1569 + inet6/filter/logdrop-1569 -j DROP + +Filter 2783 {"flow-limit":{"interval":5,"log":"ulog","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2782 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2782 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2782 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1570 + inet/filter/limit-2782 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1570 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1570 -j DROP + inet6/filter/FORWARD -j limit-2782 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2782 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2782 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1570 + inet6/filter/limit-2782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1570 -j DROP + +Filter 2784 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2783 + inet/filter/INPUT -j limit-2783 + inet/filter/OUTPUT -j limit-2783 + inet/filter/limit-2783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1571 + inet/filter/limit-2783 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1571 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1571 -j DROP + inet6/filter/FORWARD -j limit-2783 + inet6/filter/INPUT -j limit-2783 + inet6/filter/OUTPUT -j limit-2783 + inet6/filter/limit-2783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1571 + inet6/filter/limit-2783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1571 -j DROP + +Filter 2785 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2784 + inet/filter/FORWARD -j logaccept-final-249 + inet/filter/INPUT -j limit-2784 + inet/filter/INPUT -j logaccept-final-249 + inet/filter/OUTPUT -j limit-2784 + inet/filter/OUTPUT -j logaccept-final-249 + inet/filter/limit-2784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1572 + inet/filter/limit-2784 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-249 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-249 -j ACCEPT + inet/filter/logdrop-1572 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1572 -j DROP + inet6/filter/FORWARD -j limit-2784 + inet6/filter/FORWARD -j logaccept-final-249 + inet6/filter/INPUT -j limit-2784 + inet6/filter/INPUT -j logaccept-final-249 + inet6/filter/OUTPUT -j limit-2784 + inet6/filter/OUTPUT -j logaccept-final-249 + inet6/filter/limit-2784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1572 + inet6/filter/limit-2784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-249 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-249 -j ACCEPT + inet6/filter/logdrop-1572 -j DROP + +Filter 2786 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2785 + inet/filter/INPUT -j limit-2785 + inet/filter/OUTPUT -j limit-2785 + inet/filter/limit-2785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1573 + inet/filter/limit-2785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1573 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1573 -j DROP + inet6/filter/FORWARD -j limit-2785 + inet6/filter/INPUT -j limit-2785 + inet6/filter/OUTPUT -j limit-2785 + inet6/filter/limit-2785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1573 + inet6/filter/limit-2785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1573 -j DROP + +Filter 2787 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2786 + inet/filter/FORWARD -j logaccept-final-250 + inet/filter/INPUT -j limit-2786 + inet/filter/INPUT -j logaccept-final-250 + inet/filter/OUTPUT -j limit-2786 + inet/filter/OUTPUT -j logaccept-final-250 + inet/filter/limit-2786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1574 + inet/filter/limit-2786 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-250 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-250 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-250 -j ACCEPT + inet/filter/logdrop-1574 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1574 -j DROP + inet6/filter/FORWARD -j limit-2786 + inet6/filter/FORWARD -j logaccept-final-250 + inet6/filter/INPUT -j limit-2786 + inet6/filter/INPUT -j logaccept-final-250 + inet6/filter/OUTPUT -j limit-2786 + inet6/filter/OUTPUT -j logaccept-final-250 + inet6/filter/limit-2786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1574 + inet6/filter/limit-2786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-250 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-250 -j ACCEPT + inet6/filter/logdrop-1574 -j DROP + +Filter 2788 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2787 + inet/filter/INPUT -j limit-2787 + inet/filter/OUTPUT -j limit-2787 + inet/filter/limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1575 + inet/filter/limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1575 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1575 -j DROP + inet6/filter/FORWARD -j limit-2787 + inet6/filter/INPUT -j limit-2787 + inet6/filter/OUTPUT -j limit-2787 + inet6/filter/limit-2787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1575 + inet6/filter/limit-2787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1575 -j DROP + +Filter 2789 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2788 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2788 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2788 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2788 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1576 + inet/filter/limit-2788 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1576 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1576 -j DROP + inet6/filter/FORWARD -j limit-2788 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2788 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2788 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1576 + inet6/filter/limit-2788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1576 -j DROP + +Filter 2790 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2789 + inet/filter/INPUT -j limit-2789 + inet/filter/OUTPUT -j limit-2789 + inet/filter/limit-2789 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1577 + inet/filter/limit-2789 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1577 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1577 -j DROP + inet6/filter/FORWARD -j limit-2789 + inet6/filter/INPUT -j limit-2789 + inet6/filter/OUTPUT -j limit-2789 + inet6/filter/limit-2789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1577 + inet6/filter/limit-2789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1577 -j DROP + +Filter 2791 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2790 + inet/filter/FORWARD -j logaccept-final-251 + inet/filter/INPUT -j limit-2790 + inet/filter/INPUT -j logaccept-final-251 + inet/filter/OUTPUT -j limit-2790 + inet/filter/OUTPUT -j logaccept-final-251 + inet/filter/limit-2790 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1578 + inet/filter/limit-2790 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logaccept-final-251 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-251 -j ACCEPT + inet/filter/logdrop-1578 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1578 -j DROP + inet6/filter/FORWARD -j limit-2790 + inet6/filter/FORWARD -j logaccept-final-251 + inet6/filter/INPUT -j limit-2790 + inet6/filter/INPUT -j logaccept-final-251 + inet6/filter/OUTPUT -j limit-2790 + inet6/filter/OUTPUT -j logaccept-final-251 + inet6/filter/limit-2790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1578 + inet6/filter/limit-2790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-251 -j ACCEPT + inet6/filter/logdrop-1578 -j DROP + +Filter 2792 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2791 + inet/filter/INPUT -j limit-2791 + inet/filter/OUTPUT -j limit-2791 + inet/filter/limit-2791 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1579 + inet/filter/limit-2791 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1579 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1579 -j DROP + inet6/filter/FORWARD -j limit-2791 + inet6/filter/INPUT -j limit-2791 + inet6/filter/OUTPUT -j limit-2791 + inet6/filter/limit-2791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1579 + inet6/filter/logdrop-1579 -j DROP + +Filter 2793 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2792 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2792 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2792 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1580 + inet/filter/logdrop-1580 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1580 -j DROP + inet6/filter/FORWARD -j limit-2792 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2792 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2792 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1580 + inet6/filter/logdrop-1580 -j DROP + +Filter 2794 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2793 + inet/filter/INPUT -j limit-2793 + inet/filter/OUTPUT -j limit-2793 + inet/filter/limit-2793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1581 + inet/filter/logdrop-1581 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1581 -j DROP + inet6/filter/FORWARD -j limit-2793 + inet6/filter/INPUT -j limit-2793 + inet6/filter/OUTPUT -j limit-2793 + inet6/filter/limit-2793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1581 + inet6/filter/logdrop-1581 -j DROP + +Filter 2795 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2794 + inet/filter/FORWARD -j logaccept-final-252 + inet/filter/INPUT -j limit-2794 + inet/filter/INPUT -j logaccept-final-252 + inet/filter/OUTPUT -j limit-2794 + inet/filter/OUTPUT -j logaccept-final-252 + inet/filter/limit-2794 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1582 + inet/filter/logaccept-final-252 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-252 -j ACCEPT + inet/filter/logdrop-1582 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1582 -j DROP + inet6/filter/FORWARD -j limit-2794 + inet6/filter/FORWARD -j logaccept-final-252 + inet6/filter/INPUT -j limit-2794 + inet6/filter/INPUT -j logaccept-final-252 + inet6/filter/OUTPUT -j limit-2794 + inet6/filter/OUTPUT -j logaccept-final-252 + inet6/filter/limit-2794 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1582 + inet6/filter/logaccept-final-252 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-252 -j ACCEPT + inet6/filter/logdrop-1582 -j DROP + +Filter 2796 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2795 + inet/filter/INPUT -j limit-2795 + inet/filter/OUTPUT -j limit-2795 + inet/filter/limit-2795 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1583 + inet/filter/limit-2795 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1583 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1583 -j DROP + inet6/filter/FORWARD -j limit-2795 + inet6/filter/INPUT -j limit-2795 + inet6/filter/OUTPUT -j limit-2795 + inet6/filter/limit-2795 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1583 + inet6/filter/limit-2795 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1583 -j DROP + +Filter 2797 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2796 + inet/filter/FORWARD -j logaccept-final-253 + inet/filter/INPUT -j limit-2796 + inet/filter/INPUT -j logaccept-final-253 + inet/filter/OUTPUT -j limit-2796 + inet/filter/OUTPUT -j logaccept-final-253 + inet/filter/limit-2796 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1584 + inet/filter/logaccept-final-253 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-253 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-253 -j ACCEPT + inet/filter/logdrop-1584 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1584 -j DROP + inet6/filter/FORWARD -j limit-2796 + inet6/filter/FORWARD -j logaccept-final-253 + inet6/filter/INPUT -j limit-2796 + inet6/filter/INPUT -j logaccept-final-253 + inet6/filter/OUTPUT -j limit-2796 + inet6/filter/OUTPUT -j logaccept-final-253 + inet6/filter/limit-2796 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1584 + inet6/filter/logaccept-final-253 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-253 -j ACCEPT + inet6/filter/logdrop-1584 -j DROP + +Filter 2798 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2797 + inet/filter/INPUT -j limit-2797 + inet/filter/OUTPUT -j limit-2797 + inet/filter/limit-2797 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1585 + inet/filter/limit-2797 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2797 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1585 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1585 -j DROP + inet6/filter/FORWARD -j limit-2797 + inet6/filter/INPUT -j limit-2797 + inet6/filter/OUTPUT -j limit-2797 + inet6/filter/limit-2797 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1585 + inet6/filter/limit-2797 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1585 -j DROP + +Filter 2799 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2798 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2798 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2798 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2798 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1586 + inet/filter/logdrop-1586 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1586 -j DROP + inet6/filter/FORWARD -j limit-2798 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2798 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2798 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2798 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1586 + inet6/filter/logdrop-1586 -j DROP + +Filter 2800 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2799 + inet/filter/INPUT -j limit-2799 + inet/filter/OUTPUT -j limit-2799 + inet/filter/limit-2799 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1587 + inet/filter/logdrop-1587 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1587 -j DROP + inet6/filter/FORWARD -j limit-2799 + inet6/filter/INPUT -j limit-2799 + inet6/filter/OUTPUT -j limit-2799 + inet6/filter/limit-2799 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1587 + inet6/filter/logdrop-1587 -j DROP + +Filter 2801 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2800 + inet/filter/FORWARD -j logaccept-final-254 + inet/filter/INPUT -j limit-2800 + inet/filter/INPUT -j logaccept-final-254 + inet/filter/OUTPUT -j limit-2800 + inet/filter/OUTPUT -j logaccept-final-254 + inet/filter/limit-2800 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1588 + inet/filter/logaccept-final-254 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-254 -j ACCEPT + inet/filter/logdrop-1588 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1588 -j DROP + inet6/filter/FORWARD -j limit-2800 + inet6/filter/FORWARD -j logaccept-final-254 + inet6/filter/INPUT -j limit-2800 + inet6/filter/INPUT -j logaccept-final-254 + inet6/filter/OUTPUT -j limit-2800 + inet6/filter/OUTPUT -j logaccept-final-254 + inet6/filter/limit-2800 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1588 + inet6/filter/logaccept-final-254 -j ACCEPT + inet6/filter/logdrop-1588 -j DROP + +Filter 2802 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2801 + inet/filter/INPUT -j limit-2801 + inet/filter/OUTPUT -j limit-2801 + inet/filter/limit-2801 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1589 + inet/filter/limit-2801 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1589 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1589 -j DROP + inet6/filter/FORWARD -j limit-2801 + inet6/filter/INPUT -j limit-2801 + inet6/filter/OUTPUT -j limit-2801 + inet6/filter/limit-2801 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1589 + inet6/filter/logdrop-1589 -j DROP + +Filter 2803 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2802 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2802 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2802 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2802 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1590 + inet/filter/limit-2802 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1590 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1590 -j DROP + inet6/filter/FORWARD -j limit-2802 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2802 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2802 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1590 + inet6/filter/limit-2802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1590 -j DROP + +Filter 2804 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-2803 + inet/filter/INPUT -j limit-2803 + inet/filter/OUTPUT -j limit-2803 + inet/filter/limit-2803 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1591 + inet/filter/limit-2803 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1591 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1591 -j DROP + inet6/filter/FORWARD -j limit-2803 + inet6/filter/INPUT -j limit-2803 + inet6/filter/OUTPUT -j limit-2803 + inet6/filter/limit-2803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1591 + inet6/filter/limit-2803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1591 -j DROP + +Filter 2805 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2804 + inet/filter/FORWARD -j logaccept-final-255 + inet/filter/INPUT -j limit-2804 + inet/filter/INPUT -j logaccept-final-255 + inet/filter/OUTPUT -j limit-2804 + inet/filter/OUTPUT -j logaccept-final-255 + inet/filter/limit-2804 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1592 + inet/filter/limit-2804 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-255 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-255 -j ACCEPT + inet/filter/logdrop-1592 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1592 -j DROP + inet6/filter/FORWARD -j limit-2804 + inet6/filter/FORWARD -j logaccept-final-255 + inet6/filter/INPUT -j limit-2804 + inet6/filter/INPUT -j logaccept-final-255 + inet6/filter/OUTPUT -j limit-2804 + inet6/filter/OUTPUT -j logaccept-final-255 + inet6/filter/limit-2804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1592 + inet6/filter/limit-2804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-255 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-255 -j ACCEPT + inet6/filter/logdrop-1592 -j DROP + +Filter 2806 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2805 + inet/filter/INPUT -j limit-2805 + inet/filter/OUTPUT -j limit-2805 + inet/filter/limit-2805 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1593 + inet/filter/limit-2805 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1593 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1593 -j DROP + inet6/filter/FORWARD -j limit-2805 + inet6/filter/INPUT -j limit-2805 + inet6/filter/OUTPUT -j limit-2805 + inet6/filter/limit-2805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1593 + inet6/filter/limit-2805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1593 -j DROP + +Filter 2807 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2806 + inet/filter/FORWARD -j logaccept-final-256 + inet/filter/INPUT -j limit-2806 + inet/filter/INPUT -j logaccept-final-256 + inet/filter/OUTPUT -j limit-2806 + inet/filter/OUTPUT -j logaccept-final-256 + inet/filter/limit-2806 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1594 + inet/filter/limit-2806 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-256 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-256 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-256 -j ACCEPT + inet/filter/logdrop-1594 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1594 -j DROP + inet6/filter/FORWARD -j limit-2806 + inet6/filter/FORWARD -j logaccept-final-256 + inet6/filter/INPUT -j limit-2806 + inet6/filter/INPUT -j logaccept-final-256 + inet6/filter/OUTPUT -j limit-2806 + inet6/filter/OUTPUT -j logaccept-final-256 + inet6/filter/limit-2806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1594 + inet6/filter/limit-2806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-256 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-256 -j ACCEPT + inet6/filter/logdrop-1594 -j DROP + +Filter 2808 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2807 + inet/filter/INPUT -j limit-2807 + inet/filter/OUTPUT -j limit-2807 + inet/filter/limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1595 + inet/filter/limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1595 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1595 -j DROP + inet6/filter/FORWARD -j limit-2807 + inet6/filter/INPUT -j limit-2807 + inet6/filter/OUTPUT -j limit-2807 + inet6/filter/limit-2807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1595 + inet6/filter/limit-2807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1595 -j DROP + +Filter 2809 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2808 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2808 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2808 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2808 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1596 + inet/filter/limit-2808 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1596 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1596 -j DROP + inet6/filter/FORWARD -j limit-2808 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2808 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2808 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1596 + inet6/filter/limit-2808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1596 -j DROP + +Filter 2810 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2809 + inet/filter/INPUT -j limit-2809 + inet/filter/OUTPUT -j limit-2809 + inet/filter/limit-2809 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1597 + inet/filter/limit-2809 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1597 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1597 -j DROP + inet6/filter/FORWARD -j limit-2809 + inet6/filter/INPUT -j limit-2809 + inet6/filter/OUTPUT -j limit-2809 + inet6/filter/limit-2809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1597 + inet6/filter/limit-2809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1597 -j DROP + +Filter 2811 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2810 + inet/filter/FORWARD -j logaccept-final-257 + inet/filter/INPUT -j limit-2810 + inet/filter/INPUT -j logaccept-final-257 + inet/filter/OUTPUT -j limit-2810 + inet/filter/OUTPUT -j logaccept-final-257 + inet/filter/limit-2810 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1598 + inet/filter/limit-2810 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logaccept-final-257 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-257 -j ACCEPT + inet/filter/logdrop-1598 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1598 -j DROP + inet6/filter/FORWARD -j limit-2810 + inet6/filter/FORWARD -j logaccept-final-257 + inet6/filter/INPUT -j limit-2810 + inet6/filter/INPUT -j logaccept-final-257 + inet6/filter/OUTPUT -j limit-2810 + inet6/filter/OUTPUT -j logaccept-final-257 + inet6/filter/limit-2810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1598 + inet6/filter/limit-2810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logaccept-final-257 -j ACCEPT + inet6/filter/logdrop-1598 -j DROP + +Filter 2812 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2811 + inet/filter/INPUT -j limit-2811 + inet/filter/OUTPUT -j limit-2811 + inet/filter/limit-2811 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1599 + inet/filter/limit-2811 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1599 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1599 -j DROP + inet6/filter/FORWARD -j limit-2811 + inet6/filter/INPUT -j limit-2811 + inet6/filter/OUTPUT -j limit-2811 + inet6/filter/limit-2811 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1599 + inet6/filter/logdrop-1599 -j DROP + +Filter 2813 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2812 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2812 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2812 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2812 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1600 + inet/filter/logdrop-1600 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1600 -j DROP + inet6/filter/FORWARD -j limit-2812 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2812 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2812 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2812 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1600 + inet6/filter/logdrop-1600 -j DROP + +Filter 2814 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2813 + inet/filter/INPUT -j limit-2813 + inet/filter/OUTPUT -j limit-2813 + inet/filter/limit-2813 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1601 + inet/filter/logdrop-1601 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1601 -j DROP + inet6/filter/FORWARD -j limit-2813 + inet6/filter/INPUT -j limit-2813 + inet6/filter/OUTPUT -j limit-2813 + inet6/filter/limit-2813 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1601 + inet6/filter/logdrop-1601 -j DROP + +Filter 2815 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2814 + inet/filter/FORWARD -j logaccept-final-258 + inet/filter/INPUT -j limit-2814 + inet/filter/INPUT -j logaccept-final-258 + inet/filter/OUTPUT -j limit-2814 + inet/filter/OUTPUT -j logaccept-final-258 + inet/filter/limit-2814 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1602 + inet/filter/logaccept-final-258 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-258 -j ACCEPT + inet/filter/logdrop-1602 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1602 -j DROP + inet6/filter/FORWARD -j limit-2814 + inet6/filter/FORWARD -j logaccept-final-258 + inet6/filter/INPUT -j limit-2814 + inet6/filter/INPUT -j logaccept-final-258 + inet6/filter/OUTPUT -j limit-2814 + inet6/filter/OUTPUT -j logaccept-final-258 + inet6/filter/limit-2814 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1602 + inet6/filter/logaccept-final-258 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-258 -j ACCEPT + inet6/filter/logdrop-1602 -j DROP + +Filter 2816 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2815 + inet/filter/INPUT -j limit-2815 + inet/filter/OUTPUT -j limit-2815 + inet/filter/limit-2815 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1603 + inet/filter/limit-2815 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1603 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1603 -j DROP + inet6/filter/FORWARD -j limit-2815 + inet6/filter/INPUT -j limit-2815 + inet6/filter/OUTPUT -j limit-2815 + inet6/filter/limit-2815 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1603 + inet6/filter/limit-2815 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1603 -j DROP + +Filter 2817 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2816 + inet/filter/FORWARD -j logaccept-final-259 + inet/filter/INPUT -j limit-2816 + inet/filter/INPUT -j logaccept-final-259 + inet/filter/OUTPUT -j limit-2816 + inet/filter/OUTPUT -j logaccept-final-259 + inet/filter/limit-2816 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1604 + inet/filter/logaccept-final-259 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-259 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-259 -j ACCEPT + inet/filter/logdrop-1604 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1604 -j DROP + inet6/filter/FORWARD -j limit-2816 + inet6/filter/FORWARD -j logaccept-final-259 + inet6/filter/INPUT -j limit-2816 + inet6/filter/INPUT -j logaccept-final-259 + inet6/filter/OUTPUT -j limit-2816 + inet6/filter/OUTPUT -j logaccept-final-259 + inet6/filter/limit-2816 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1604 + inet6/filter/logaccept-final-259 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-259 -j ACCEPT + inet6/filter/logdrop-1604 -j DROP + +Filter 2818 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2817 + inet/filter/INPUT -j limit-2817 + inet/filter/OUTPUT -j limit-2817 + inet/filter/limit-2817 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1605 + inet/filter/limit-2817 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2817 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1605 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1605 -j DROP + inet6/filter/FORWARD -j limit-2817 + inet6/filter/INPUT -j limit-2817 + inet6/filter/OUTPUT -j limit-2817 + inet6/filter/limit-2817 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1605 + inet6/filter/limit-2817 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1605 -j DROP + +Filter 2819 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2818 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2818 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2818 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2818 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1606 + inet/filter/logdrop-1606 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1606 -j DROP + inet6/filter/FORWARD -j limit-2818 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2818 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2818 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2818 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1606 + inet6/filter/logdrop-1606 -j DROP + +Filter 2820 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2819 + inet/filter/INPUT -j limit-2819 + inet/filter/OUTPUT -j limit-2819 + inet/filter/limit-2819 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1607 + inet/filter/logdrop-1607 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1607 -j DROP + inet6/filter/FORWARD -j limit-2819 + inet6/filter/INPUT -j limit-2819 + inet6/filter/OUTPUT -j limit-2819 + inet6/filter/limit-2819 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1607 + inet6/filter/logdrop-1607 -j DROP + +Filter 2821 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2820 + inet/filter/FORWARD -j logaccept-final-260 + inet/filter/INPUT -j limit-2820 + inet/filter/INPUT -j logaccept-final-260 + inet/filter/OUTPUT -j limit-2820 + inet/filter/OUTPUT -j logaccept-final-260 + inet/filter/limit-2820 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1608 + inet/filter/logaccept-final-260 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-260 -j ACCEPT + inet/filter/logdrop-1608 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1608 -j DROP + inet6/filter/FORWARD -j limit-2820 + inet6/filter/FORWARD -j logaccept-final-260 + inet6/filter/INPUT -j limit-2820 + inet6/filter/INPUT -j logaccept-final-260 + inet6/filter/OUTPUT -j limit-2820 + inet6/filter/OUTPUT -j logaccept-final-260 + inet6/filter/limit-2820 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1608 + inet6/filter/logaccept-final-260 -j ACCEPT + inet6/filter/logdrop-1608 -j DROP + +Filter 2822 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2821 + inet/filter/INPUT -j limit-2821 + inet/filter/OUTPUT -j limit-2821 + inet/filter/limit-2821 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1609 + inet/filter/limit-2821 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1609 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1609 -j DROP + inet6/filter/FORWARD -j limit-2821 + inet6/filter/INPUT -j limit-2821 + inet6/filter/OUTPUT -j limit-2821 + inet6/filter/limit-2821 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1609 + inet6/filter/logdrop-1609 -j DROP + +Filter 2823 {"flow-limit":{"interval":5,"log":"ulog","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2822 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2822 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2822 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2822 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1610 + inet/filter/limit-2822 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1610 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1610 -j DROP + inet6/filter/FORWARD -j limit-2822 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2822 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2822 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2822 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1610 + inet6/filter/limit-2822 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1610 -j DROP + +Filter 2824 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2823 + inet/filter/INPUT -j limit-2823 + inet/filter/OUTPUT -j limit-2823 + inet/filter/limit-2823 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1611 + inet/filter/limit-2823 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1611 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1611 -j DROP + inet6/filter/FORWARD -j limit-2823 + inet6/filter/INPUT -j limit-2823 + inet6/filter/OUTPUT -j limit-2823 + inet6/filter/limit-2823 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1611 + inet6/filter/limit-2823 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1611 -j DROP + +Filter 2825 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2824 + inet/filter/FORWARD -j logaccept-final-261 + inet/filter/INPUT -j limit-2824 + inet/filter/INPUT -j logaccept-final-261 + inet/filter/OUTPUT -j limit-2824 + inet/filter/OUTPUT -j logaccept-final-261 + inet/filter/limit-2824 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1612 + inet/filter/limit-2824 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-261 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-261 -j ACCEPT + inet/filter/logdrop-1612 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1612 -j DROP + inet6/filter/FORWARD -j limit-2824 + inet6/filter/FORWARD -j logaccept-final-261 + inet6/filter/INPUT -j limit-2824 + inet6/filter/INPUT -j logaccept-final-261 + inet6/filter/OUTPUT -j limit-2824 + inet6/filter/OUTPUT -j logaccept-final-261 + inet6/filter/limit-2824 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1612 + inet6/filter/limit-2824 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-261 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-261 -j ACCEPT + inet6/filter/logdrop-1612 -j DROP + +Filter 2826 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2825 + inet/filter/INPUT -j limit-2825 + inet/filter/OUTPUT -j limit-2825 + inet/filter/limit-2825 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1613 + inet/filter/limit-2825 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1613 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1613 -j DROP + inet6/filter/FORWARD -j limit-2825 + inet6/filter/INPUT -j limit-2825 + inet6/filter/OUTPUT -j limit-2825 + inet6/filter/limit-2825 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1613 + inet6/filter/limit-2825 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1613 -j DROP + +Filter 2827 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2826 + inet/filter/FORWARD -j logaccept-final-262 + inet/filter/INPUT -j limit-2826 + inet/filter/INPUT -j logaccept-final-262 + inet/filter/OUTPUT -j limit-2826 + inet/filter/OUTPUT -j logaccept-final-262 + inet/filter/limit-2826 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1614 + inet/filter/limit-2826 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-262 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-262 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-262 -j ACCEPT + inet/filter/logdrop-1614 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1614 -j DROP + inet6/filter/FORWARD -j limit-2826 + inet6/filter/FORWARD -j logaccept-final-262 + inet6/filter/INPUT -j limit-2826 + inet6/filter/INPUT -j logaccept-final-262 + inet6/filter/OUTPUT -j limit-2826 + inet6/filter/OUTPUT -j logaccept-final-262 + inet6/filter/limit-2826 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1614 + inet6/filter/limit-2826 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-262 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-262 -j ACCEPT + inet6/filter/logdrop-1614 -j DROP + +Filter 2828 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2827 + inet/filter/INPUT -j limit-2827 + inet/filter/OUTPUT -j limit-2827 + inet/filter/limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1615 + inet/filter/limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1615 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1615 -j DROP + inet6/filter/FORWARD -j limit-2827 + inet6/filter/INPUT -j limit-2827 + inet6/filter/OUTPUT -j limit-2827 + inet6/filter/limit-2827 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1615 + inet6/filter/limit-2827 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1615 -j DROP + +Filter 2829 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2828 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2828 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2828 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2828 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1616 + inet/filter/limit-2828 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1616 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1616 -j DROP + inet6/filter/FORWARD -j limit-2828 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2828 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2828 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2828 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1616 + inet6/filter/limit-2828 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1616 -j DROP + +Filter 2830 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2829 + inet/filter/INPUT -j limit-2829 + inet/filter/OUTPUT -j limit-2829 + inet/filter/limit-2829 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1617 + inet/filter/limit-2829 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1617 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1617 -j DROP + inet6/filter/FORWARD -j limit-2829 + inet6/filter/INPUT -j limit-2829 + inet6/filter/OUTPUT -j limit-2829 + inet6/filter/limit-2829 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1617 + inet6/filter/limit-2829 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1617 -j DROP + +Filter 2831 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2830 + inet/filter/FORWARD -j logaccept-final-263 + inet/filter/INPUT -j limit-2830 + inet/filter/INPUT -j logaccept-final-263 + inet/filter/OUTPUT -j limit-2830 + inet/filter/OUTPUT -j logaccept-final-263 + inet/filter/limit-2830 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1618 + inet/filter/limit-2830 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logaccept-final-263 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-263 -j ACCEPT + inet/filter/logdrop-1618 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1618 -j DROP + inet6/filter/FORWARD -j limit-2830 + inet6/filter/FORWARD -j logaccept-final-263 + inet6/filter/INPUT -j limit-2830 + inet6/filter/INPUT -j logaccept-final-263 + inet6/filter/OUTPUT -j limit-2830 + inet6/filter/OUTPUT -j logaccept-final-263 + inet6/filter/limit-2830 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1618 + inet6/filter/limit-2830 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logaccept-final-263 -j ACCEPT + inet6/filter/logdrop-1618 -j DROP + +Filter 2832 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2831 + inet/filter/INPUT -j limit-2831 + inet/filter/OUTPUT -j limit-2831 + inet/filter/limit-2831 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1619 + inet/filter/limit-2831 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1619 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1619 -j DROP + inet6/filter/FORWARD -j limit-2831 + inet6/filter/INPUT -j limit-2831 + inet6/filter/OUTPUT -j limit-2831 + inet6/filter/limit-2831 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1619 + inet6/filter/logdrop-1619 -j DROP + +Filter 2833 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2832 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2832 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2832 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2832 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1620 + inet/filter/logdrop-1620 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1620 -j DROP + inet6/filter/FORWARD -j limit-2832 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2832 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2832 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2832 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1620 + inet6/filter/logdrop-1620 -j DROP + +Filter 2834 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2833 + inet/filter/INPUT -j limit-2833 + inet/filter/OUTPUT -j limit-2833 + inet/filter/limit-2833 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1621 + inet/filter/logdrop-1621 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1621 -j DROP + inet6/filter/FORWARD -j limit-2833 + inet6/filter/INPUT -j limit-2833 + inet6/filter/OUTPUT -j limit-2833 + inet6/filter/limit-2833 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1621 + inet6/filter/logdrop-1621 -j DROP + +Filter 2835 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2834 + inet/filter/FORWARD -j logaccept-final-264 + inet/filter/INPUT -j limit-2834 + inet/filter/INPUT -j logaccept-final-264 + inet/filter/OUTPUT -j limit-2834 + inet/filter/OUTPUT -j logaccept-final-264 + inet/filter/limit-2834 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1622 + inet/filter/logaccept-final-264 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-264 -j ACCEPT + inet/filter/logdrop-1622 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1622 -j DROP + inet6/filter/FORWARD -j limit-2834 + inet6/filter/FORWARD -j logaccept-final-264 + inet6/filter/INPUT -j limit-2834 + inet6/filter/INPUT -j logaccept-final-264 + inet6/filter/OUTPUT -j limit-2834 + inet6/filter/OUTPUT -j logaccept-final-264 + inet6/filter/limit-2834 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1622 + inet6/filter/logaccept-final-264 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-264 -j ACCEPT + inet6/filter/logdrop-1622 -j DROP + +Filter 2836 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2835 + inet/filter/INPUT -j limit-2835 + inet/filter/OUTPUT -j limit-2835 + inet/filter/limit-2835 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1623 + inet/filter/limit-2835 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1623 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1623 -j DROP + inet6/filter/FORWARD -j limit-2835 + inet6/filter/INPUT -j limit-2835 + inet6/filter/OUTPUT -j limit-2835 + inet6/filter/limit-2835 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1623 + inet6/filter/limit-2835 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1623 -j DROP + +Filter 2837 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2836 + inet/filter/FORWARD -j logaccept-final-265 + inet/filter/INPUT -j limit-2836 + inet/filter/INPUT -j logaccept-final-265 + inet/filter/OUTPUT -j limit-2836 + inet/filter/OUTPUT -j logaccept-final-265 + inet/filter/limit-2836 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1624 + inet/filter/logaccept-final-265 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-265 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-265 -j ACCEPT + inet/filter/logdrop-1624 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1624 -j DROP + inet6/filter/FORWARD -j limit-2836 + inet6/filter/FORWARD -j logaccept-final-265 + inet6/filter/INPUT -j limit-2836 + inet6/filter/INPUT -j logaccept-final-265 + inet6/filter/OUTPUT -j limit-2836 + inet6/filter/OUTPUT -j logaccept-final-265 + inet6/filter/limit-2836 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1624 + inet6/filter/logaccept-final-265 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-265 -j ACCEPT + inet6/filter/logdrop-1624 -j DROP + +Filter 2838 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2837 + inet/filter/INPUT -j limit-2837 + inet/filter/OUTPUT -j limit-2837 + inet/filter/limit-2837 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1625 + inet/filter/limit-2837 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2837 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1625 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1625 -j DROP + inet6/filter/FORWARD -j limit-2837 + inet6/filter/INPUT -j limit-2837 + inet6/filter/OUTPUT -j limit-2837 + inet6/filter/limit-2837 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1625 + inet6/filter/limit-2837 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1625 -j DROP + +Filter 2839 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2838 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2838 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2838 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2838 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1626 + inet/filter/logdrop-1626 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1626 -j DROP + inet6/filter/FORWARD -j limit-2838 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2838 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2838 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2838 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1626 + inet6/filter/logdrop-1626 -j DROP + +Filter 2840 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2839 + inet/filter/INPUT -j limit-2839 + inet/filter/OUTPUT -j limit-2839 + inet/filter/limit-2839 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1627 + inet/filter/logdrop-1627 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1627 -j DROP + inet6/filter/FORWARD -j limit-2839 + inet6/filter/INPUT -j limit-2839 + inet6/filter/OUTPUT -j limit-2839 + inet6/filter/limit-2839 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1627 + inet6/filter/logdrop-1627 -j DROP + +Filter 2841 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2840 + inet/filter/FORWARD -j logaccept-final-266 + inet/filter/INPUT -j limit-2840 + inet/filter/INPUT -j logaccept-final-266 + inet/filter/OUTPUT -j limit-2840 + inet/filter/OUTPUT -j logaccept-final-266 + inet/filter/limit-2840 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1628 + inet/filter/logaccept-final-266 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-266 -j ACCEPT + inet/filter/logdrop-1628 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1628 -j DROP + inet6/filter/FORWARD -j limit-2840 + inet6/filter/FORWARD -j logaccept-final-266 + inet6/filter/INPUT -j limit-2840 + inet6/filter/INPUT -j logaccept-final-266 + inet6/filter/OUTPUT -j limit-2840 + inet6/filter/OUTPUT -j logaccept-final-266 + inet6/filter/limit-2840 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1628 + inet6/filter/logaccept-final-266 -j ACCEPT + inet6/filter/logdrop-1628 -j DROP + +Filter 2842 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2841 + inet/filter/INPUT -j limit-2841 + inet/filter/OUTPUT -j limit-2841 + inet/filter/limit-2841 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1629 + inet/filter/limit-2841 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1629 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1629 -j DROP + inet6/filter/FORWARD -j limit-2841 + inet6/filter/INPUT -j limit-2841 + inet6/filter/OUTPUT -j limit-2841 + inet6/filter/limit-2841 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1629 + inet6/filter/logdrop-1629 -j DROP + +Filter 2843 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2842 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2842 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2842 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2842 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1630 + inet/filter/limit-2842 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1630 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1630 -j DROP + inet6/filter/FORWARD -j limit-2842 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2842 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2842 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2842 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1630 + inet6/filter/limit-2842 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1630 -j DROP + +Filter 2844 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-2843 + inet/filter/INPUT -j limit-2843 + inet/filter/OUTPUT -j limit-2843 + inet/filter/limit-2843 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1631 + inet/filter/limit-2843 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1631 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1631 -j DROP + inet6/filter/FORWARD -j limit-2843 + inet6/filter/INPUT -j limit-2843 + inet6/filter/OUTPUT -j limit-2843 + inet6/filter/limit-2843 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1631 + inet6/filter/limit-2843 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1631 -j DROP + +Filter 2845 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2844 + inet/filter/FORWARD -j logaccept-final-267 + inet/filter/INPUT -j limit-2844 + inet/filter/INPUT -j logaccept-final-267 + inet/filter/OUTPUT -j limit-2844 + inet/filter/OUTPUT -j logaccept-final-267 + inet/filter/limit-2844 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1632 + inet/filter/limit-2844 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-267 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-267 -j ACCEPT + inet/filter/logdrop-1632 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1632 -j DROP + inet6/filter/FORWARD -j limit-2844 + inet6/filter/FORWARD -j logaccept-final-267 + inet6/filter/INPUT -j limit-2844 + inet6/filter/INPUT -j logaccept-final-267 + inet6/filter/OUTPUT -j limit-2844 + inet6/filter/OUTPUT -j logaccept-final-267 + inet6/filter/limit-2844 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1632 + inet6/filter/limit-2844 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-267 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-267 -j ACCEPT + inet6/filter/logdrop-1632 -j DROP + +Filter 2846 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2845 + inet/filter/INPUT -j limit-2845 + inet/filter/OUTPUT -j limit-2845 + inet/filter/limit-2845 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1633 + inet/filter/limit-2845 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1633 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1633 -j DROP + inet6/filter/FORWARD -j limit-2845 + inet6/filter/INPUT -j limit-2845 + inet6/filter/OUTPUT -j limit-2845 + inet6/filter/limit-2845 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1633 + inet6/filter/limit-2845 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1633 -j DROP + +Filter 2847 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2846 + inet/filter/FORWARD -j logaccept-final-268 + inet/filter/INPUT -j limit-2846 + inet/filter/INPUT -j logaccept-final-268 + inet/filter/OUTPUT -j limit-2846 + inet/filter/OUTPUT -j logaccept-final-268 + inet/filter/limit-2846 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1634 + inet/filter/limit-2846 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-268 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-268 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-268 -j ACCEPT + inet/filter/logdrop-1634 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1634 -j DROP + inet6/filter/FORWARD -j limit-2846 + inet6/filter/FORWARD -j logaccept-final-268 + inet6/filter/INPUT -j limit-2846 + inet6/filter/INPUT -j logaccept-final-268 + inet6/filter/OUTPUT -j limit-2846 + inet6/filter/OUTPUT -j logaccept-final-268 + inet6/filter/limit-2846 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1634 + inet6/filter/limit-2846 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-268 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-268 -j ACCEPT + inet6/filter/logdrop-1634 -j DROP + +Filter 2848 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2847 + inet/filter/INPUT -j limit-2847 + inet/filter/OUTPUT -j limit-2847 + inet/filter/limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1635 + inet/filter/limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1635 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1635 -j DROP + inet6/filter/FORWARD -j limit-2847 + inet6/filter/INPUT -j limit-2847 + inet6/filter/OUTPUT -j limit-2847 + inet6/filter/limit-2847 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1635 + inet6/filter/limit-2847 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1635 -j DROP + +Filter 2849 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2848 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2848 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2848 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2848 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1636 + inet/filter/limit-2848 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1636 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1636 -j DROP + inet6/filter/FORWARD -j limit-2848 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2848 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2848 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2848 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1636 + inet6/filter/limit-2848 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1636 -j DROP + +Filter 2850 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2849 + inet/filter/INPUT -j limit-2849 + inet/filter/OUTPUT -j limit-2849 + inet/filter/limit-2849 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1637 + inet/filter/limit-2849 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1637 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1637 -j DROP + inet6/filter/FORWARD -j limit-2849 + inet6/filter/INPUT -j limit-2849 + inet6/filter/OUTPUT -j limit-2849 + inet6/filter/limit-2849 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1637 + inet6/filter/limit-2849 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1637 -j DROP + +Filter 2851 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2850 + inet/filter/FORWARD -j logaccept-final-269 + inet/filter/INPUT -j limit-2850 + inet/filter/INPUT -j logaccept-final-269 + inet/filter/OUTPUT -j limit-2850 + inet/filter/OUTPUT -j logaccept-final-269 + inet/filter/limit-2850 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1638 + inet/filter/limit-2850 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logaccept-final-269 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-269 -j ACCEPT + inet/filter/logdrop-1638 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1638 -j DROP + inet6/filter/FORWARD -j limit-2850 + inet6/filter/FORWARD -j logaccept-final-269 + inet6/filter/INPUT -j limit-2850 + inet6/filter/INPUT -j logaccept-final-269 + inet6/filter/OUTPUT -j limit-2850 + inet6/filter/OUTPUT -j logaccept-final-269 + inet6/filter/limit-2850 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1638 + inet6/filter/limit-2850 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logaccept-final-269 -j ACCEPT + inet6/filter/logdrop-1638 -j DROP + +Filter 2852 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2851 + inet/filter/INPUT -j limit-2851 + inet/filter/OUTPUT -j limit-2851 + inet/filter/limit-2851 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1639 + inet/filter/limit-2851 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1639 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1639 -j DROP + inet6/filter/FORWARD -j limit-2851 + inet6/filter/INPUT -j limit-2851 + inet6/filter/OUTPUT -j limit-2851 + inet6/filter/limit-2851 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1639 + inet6/filter/logdrop-1639 -j DROP + +Filter 2853 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2852 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2852 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2852 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2852 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1640 + inet/filter/logdrop-1640 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1640 -j DROP + inet6/filter/FORWARD -j limit-2852 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2852 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2852 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2852 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1640 + inet6/filter/logdrop-1640 -j DROP + +Filter 2854 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2853 + inet/filter/INPUT -j limit-2853 + inet/filter/OUTPUT -j limit-2853 + inet/filter/limit-2853 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1641 + inet/filter/logdrop-1641 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1641 -j DROP + inet6/filter/FORWARD -j limit-2853 + inet6/filter/INPUT -j limit-2853 + inet6/filter/OUTPUT -j limit-2853 + inet6/filter/limit-2853 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1641 + inet6/filter/logdrop-1641 -j DROP + +Filter 2855 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2854 + inet/filter/FORWARD -j logaccept-final-270 + inet/filter/INPUT -j limit-2854 + inet/filter/INPUT -j logaccept-final-270 + inet/filter/OUTPUT -j limit-2854 + inet/filter/OUTPUT -j logaccept-final-270 + inet/filter/limit-2854 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1642 + inet/filter/logaccept-final-270 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-270 -j ACCEPT + inet/filter/logdrop-1642 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1642 -j DROP + inet6/filter/FORWARD -j limit-2854 + inet6/filter/FORWARD -j logaccept-final-270 + inet6/filter/INPUT -j limit-2854 + inet6/filter/INPUT -j logaccept-final-270 + inet6/filter/OUTPUT -j limit-2854 + inet6/filter/OUTPUT -j logaccept-final-270 + inet6/filter/limit-2854 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1642 + inet6/filter/logaccept-final-270 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-270 -j ACCEPT + inet6/filter/logdrop-1642 -j DROP + +Filter 2856 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2855 + inet/filter/INPUT -j limit-2855 + inet/filter/OUTPUT -j limit-2855 + inet/filter/limit-2855 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1643 + inet/filter/limit-2855 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1643 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1643 -j DROP + inet6/filter/FORWARD -j limit-2855 + inet6/filter/INPUT -j limit-2855 + inet6/filter/OUTPUT -j limit-2855 + inet6/filter/limit-2855 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1643 + inet6/filter/limit-2855 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1643 -j DROP + +Filter 2857 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2856 + inet/filter/FORWARD -j logaccept-final-271 + inet/filter/INPUT -j limit-2856 + inet/filter/INPUT -j logaccept-final-271 + inet/filter/OUTPUT -j limit-2856 + inet/filter/OUTPUT -j logaccept-final-271 + inet/filter/limit-2856 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1644 + inet/filter/logaccept-final-271 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-271 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-271 -j ACCEPT + inet/filter/logdrop-1644 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1644 -j DROP + inet6/filter/FORWARD -j limit-2856 + inet6/filter/FORWARD -j logaccept-final-271 + inet6/filter/INPUT -j limit-2856 + inet6/filter/INPUT -j logaccept-final-271 + inet6/filter/OUTPUT -j limit-2856 + inet6/filter/OUTPUT -j logaccept-final-271 + inet6/filter/limit-2856 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1644 + inet6/filter/logaccept-final-271 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-271 -j ACCEPT + inet6/filter/logdrop-1644 -j DROP + +Filter 2858 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2857 + inet/filter/INPUT -j limit-2857 + inet/filter/OUTPUT -j limit-2857 + inet/filter/limit-2857 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1645 + inet/filter/limit-2857 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2857 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1645 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1645 -j DROP + inet6/filter/FORWARD -j limit-2857 + inet6/filter/INPUT -j limit-2857 + inet6/filter/OUTPUT -j limit-2857 + inet6/filter/limit-2857 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1645 + inet6/filter/limit-2857 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1645 -j DROP + +Filter 2859 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2858 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2858 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2858 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2858 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1646 + inet/filter/logdrop-1646 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1646 -j DROP + inet6/filter/FORWARD -j limit-2858 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2858 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2858 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2858 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1646 + inet6/filter/logdrop-1646 -j DROP + +Filter 2860 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2859 + inet/filter/INPUT -j limit-2859 + inet/filter/OUTPUT -j limit-2859 + inet/filter/limit-2859 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1647 + inet/filter/logdrop-1647 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1647 -j DROP + inet6/filter/FORWARD -j limit-2859 + inet6/filter/INPUT -j limit-2859 + inet6/filter/OUTPUT -j limit-2859 + inet6/filter/limit-2859 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1647 + inet6/filter/logdrop-1647 -j DROP + +Filter 2861 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2860 + inet/filter/FORWARD -j logaccept-final-272 + inet/filter/INPUT -j limit-2860 + inet/filter/INPUT -j logaccept-final-272 + inet/filter/OUTPUT -j limit-2860 + inet/filter/OUTPUT -j logaccept-final-272 + inet/filter/limit-2860 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1648 + inet/filter/logaccept-final-272 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-272 -j ACCEPT + inet/filter/logdrop-1648 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1648 -j DROP + inet6/filter/FORWARD -j limit-2860 + inet6/filter/FORWARD -j logaccept-final-272 + inet6/filter/INPUT -j limit-2860 + inet6/filter/INPUT -j logaccept-final-272 + inet6/filter/OUTPUT -j limit-2860 + inet6/filter/OUTPUT -j logaccept-final-272 + inet6/filter/limit-2860 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1648 + inet6/filter/logaccept-final-272 -j ACCEPT + inet6/filter/logdrop-1648 -j DROP + +Filter 2862 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2861 + inet/filter/INPUT -j limit-2861 + inet/filter/OUTPUT -j limit-2861 + inet/filter/limit-2861 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1649 + inet/filter/limit-2861 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1649 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1649 -j DROP + inet6/filter/FORWARD -j limit-2861 + inet6/filter/INPUT -j limit-2861 + inet6/filter/OUTPUT -j limit-2861 + inet6/filter/limit-2861 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1649 + inet6/filter/logdrop-1649 -j DROP + +Filter 2863 {"flow-limit":150} +(filter-limit) + inet/filter/FORWARD -j limit-2862 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2862 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2862 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2862 -j RETURN + inet/filter/limit-2862 -m limit --limit 1/second -j LOG + inet/filter/limit-2862 -j DROP + inet6/filter/FORWARD -j limit-2862 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2862 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2862 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2862 -j RETURN + inet6/filter/limit-2862 -m limit --limit 1/second -j LOG + inet6/filter/limit-2862 -j DROP + +Filter 2864 {"action":"pass","flow-limit":150} +(filter-limit) + inet/filter/FORWARD -j limit-2863 + inet/filter/INPUT -j limit-2863 + inet/filter/OUTPUT -j limit-2863 + inet/filter/limit-2863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2863 -j RETURN + inet/filter/limit-2863 -m limit --limit 1/second -j LOG + inet/filter/limit-2863 -j DROP + inet6/filter/FORWARD -j limit-2863 + inet6/filter/INPUT -j limit-2863 + inet6/filter/OUTPUT -j limit-2863 + inet6/filter/limit-2863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2863 -j RETURN + inet6/filter/limit-2863 -m limit --limit 1/second -j LOG + inet6/filter/limit-2863 -j DROP + +Filter 2865 {"flow-limit":150,"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2864 + inet/filter/FORWARD -j logaccept-final-273 + inet/filter/INPUT -j limit-2864 + inet/filter/INPUT -j logaccept-final-273 + inet/filter/OUTPUT -j limit-2864 + inet/filter/OUTPUT -j logaccept-final-273 + inet/filter/limit-2864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2864 -j RETURN + inet/filter/limit-2864 -m limit --limit 1/second -j LOG + inet/filter/limit-2864 -j DROP + inet/filter/logaccept-final-273 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-273 -j ACCEPT + inet6/filter/FORWARD -j limit-2864 + inet6/filter/FORWARD -j logaccept-final-273 + inet6/filter/INPUT -j limit-2864 + inet6/filter/INPUT -j logaccept-final-273 + inet6/filter/OUTPUT -j limit-2864 + inet6/filter/OUTPUT -j logaccept-final-273 + inet6/filter/limit-2864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2864 -j RETURN + inet6/filter/limit-2864 -m limit --limit 1/second -j LOG + inet6/filter/limit-2864 -j DROP + inet6/filter/logaccept-final-273 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-273 -j ACCEPT + +Filter 2866 {"flow-limit":150,"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2865 + inet/filter/FORWARD -j logaccept-final-274 + inet/filter/INPUT -j limit-2865 + inet/filter/INPUT -j logaccept-final-274 + inet/filter/OUTPUT -j limit-2865 + inet/filter/OUTPUT -j logaccept-final-274 + inet/filter/limit-2865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2865 -j RETURN + inet/filter/limit-2865 -m limit --limit 1/second -j LOG + inet/filter/limit-2865 -j DROP + inet/filter/logaccept-final-274 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-274 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-274 -j ACCEPT + inet6/filter/FORWARD -j limit-2865 + inet6/filter/FORWARD -j logaccept-final-274 + inet6/filter/INPUT -j limit-2865 + inet6/filter/INPUT -j logaccept-final-274 + inet6/filter/OUTPUT -j limit-2865 + inet6/filter/OUTPUT -j logaccept-final-274 + inet6/filter/limit-2865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2865 -j RETURN + inet6/filter/limit-2865 -m limit --limit 1/second -j LOG + inet6/filter/limit-2865 -j DROP + inet6/filter/logaccept-final-274 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-274 -j ACCEPT + +Filter 2867 {"flow-limit":150,"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2866 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2866 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2866 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2866 -j RETURN + inet/filter/limit-2866 -m limit --limit 1/second -j LOG + inet/filter/limit-2866 -j DROP + inet6/filter/FORWARD -j limit-2866 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2866 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2866 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2866 -j RETURN + inet6/filter/limit-2866 -m limit --limit 1/second -j LOG + inet6/filter/limit-2866 -j DROP + +Filter 2868 {"flow-limit":150,"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2867 + inet/filter/FORWARD -j logaccept-final-275 + inet/filter/INPUT -j limit-2867 + inet/filter/INPUT -j logaccept-final-275 + inet/filter/OUTPUT -j limit-2867 + inet/filter/OUTPUT -j logaccept-final-275 + inet/filter/limit-2867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2867 -j RETURN + inet/filter/limit-2867 -m limit --limit 1/second -j LOG + inet/filter/limit-2867 -j DROP + inet/filter/logaccept-final-275 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-275 -j ACCEPT + inet6/filter/FORWARD -j limit-2867 + inet6/filter/FORWARD -j logaccept-final-275 + inet6/filter/INPUT -j limit-2867 + inet6/filter/INPUT -j logaccept-final-275 + inet6/filter/OUTPUT -j limit-2867 + inet6/filter/OUTPUT -j logaccept-final-275 + inet6/filter/limit-2867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2867 -j RETURN + inet6/filter/limit-2867 -m limit --limit 1/second -j LOG + inet6/filter/limit-2867 -j DROP + inet6/filter/logaccept-final-275 -j ACCEPT + +Filter 2869 {"flow-limit":{"count":150,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2868 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2868 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2868 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2868 -j RETURN + inet/filter/limit-2868 -j DROP + inet6/filter/FORWARD -j limit-2868 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2868 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2868 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2868 -j RETURN + inet6/filter/limit-2868 -j DROP + +Filter 2870 {"action":"pass","flow-limit":{"count":150,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2869 + inet/filter/INPUT -j limit-2869 + inet/filter/OUTPUT -j limit-2869 + inet/filter/limit-2869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2869 -j RETURN + inet/filter/limit-2869 -j DROP + inet6/filter/FORWARD -j limit-2869 + inet6/filter/INPUT -j limit-2869 + inet6/filter/OUTPUT -j limit-2869 + inet6/filter/limit-2869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2869 -j RETURN + inet6/filter/limit-2869 -j DROP + +Filter 2871 {"flow-limit":{"count":150,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2870 + inet/filter/FORWARD -j logaccept-final-276 + inet/filter/INPUT -j limit-2870 + inet/filter/INPUT -j logaccept-final-276 + inet/filter/OUTPUT -j limit-2870 + inet/filter/OUTPUT -j logaccept-final-276 + inet/filter/limit-2870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2870 -j RETURN + inet/filter/limit-2870 -j DROP + inet/filter/logaccept-final-276 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-276 -j ACCEPT + inet6/filter/FORWARD -j limit-2870 + inet6/filter/FORWARD -j logaccept-final-276 + inet6/filter/INPUT -j limit-2870 + inet6/filter/INPUT -j logaccept-final-276 + inet6/filter/OUTPUT -j limit-2870 + inet6/filter/OUTPUT -j logaccept-final-276 + inet6/filter/limit-2870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2870 -j RETURN + inet6/filter/limit-2870 -j DROP + inet6/filter/logaccept-final-276 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-276 -j ACCEPT + +Filter 2872 {"flow-limit":{"count":150,"log":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2871 + inet/filter/FORWARD -j logaccept-final-277 + inet/filter/INPUT -j limit-2871 + inet/filter/INPUT -j logaccept-final-277 + inet/filter/OUTPUT -j limit-2871 + inet/filter/OUTPUT -j logaccept-final-277 + inet/filter/limit-2871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2871 -j RETURN + inet/filter/limit-2871 -j DROP + inet/filter/logaccept-final-277 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-277 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-277 -j ACCEPT + inet6/filter/FORWARD -j limit-2871 + inet6/filter/FORWARD -j logaccept-final-277 + inet6/filter/INPUT -j limit-2871 + inet6/filter/INPUT -j logaccept-final-277 + inet6/filter/OUTPUT -j limit-2871 + inet6/filter/OUTPUT -j logaccept-final-277 + inet6/filter/limit-2871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2871 -j RETURN + inet6/filter/limit-2871 -j DROP + inet6/filter/logaccept-final-277 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-277 -j ACCEPT + +Filter 2873 {"flow-limit":{"count":150,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2872 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2872 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2872 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2872 -j RETURN + inet/filter/limit-2872 -j DROP + inet6/filter/FORWARD -j limit-2872 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2872 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2872 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2872 -j RETURN + inet6/filter/limit-2872 -j DROP + +Filter 2874 {"flow-limit":{"count":150,"log":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2873 + inet/filter/FORWARD -j logaccept-final-278 + inet/filter/INPUT -j limit-2873 + inet/filter/INPUT -j logaccept-final-278 + inet/filter/OUTPUT -j limit-2873 + inet/filter/OUTPUT -j logaccept-final-278 + inet/filter/limit-2873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2873 -j RETURN + inet/filter/limit-2873 -j DROP + inet/filter/logaccept-final-278 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-278 -j ACCEPT + inet6/filter/FORWARD -j limit-2873 + inet6/filter/FORWARD -j logaccept-final-278 + inet6/filter/INPUT -j limit-2873 + inet6/filter/INPUT -j logaccept-final-278 + inet6/filter/OUTPUT -j limit-2873 + inet6/filter/OUTPUT -j logaccept-final-278 + inet6/filter/limit-2873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2873 -j RETURN + inet6/filter/limit-2873 -j DROP + inet6/filter/logaccept-final-278 -j ACCEPT + +Filter 2875 {"flow-limit":{"count":150}} +(filter-limit) + inet/filter/FORWARD -j limit-2874 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2874 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2874 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2874 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2874 -j RETURN + inet/filter/limit-2874 -m limit --limit 1/second -j LOG + inet/filter/limit-2874 -j DROP + inet6/filter/FORWARD -j limit-2874 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2874 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2874 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2874 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2874 -j RETURN + inet6/filter/limit-2874 -m limit --limit 1/second -j LOG + inet6/filter/limit-2874 -j DROP + +Filter 2876 {"action":"pass","flow-limit":{"count":150}} +(filter-limit) + inet/filter/FORWARD -j limit-2875 + inet/filter/INPUT -j limit-2875 + inet/filter/OUTPUT -j limit-2875 + inet/filter/limit-2875 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2875 -j RETURN + inet/filter/limit-2875 -m limit --limit 1/second -j LOG + inet/filter/limit-2875 -j DROP + inet6/filter/FORWARD -j limit-2875 + inet6/filter/INPUT -j limit-2875 + inet6/filter/OUTPUT -j limit-2875 + inet6/filter/limit-2875 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2875 -j RETURN + inet6/filter/limit-2875 -m limit --limit 1/second -j LOG + inet6/filter/limit-2875 -j DROP + +Filter 2877 {"flow-limit":{"count":150},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2876 + inet/filter/FORWARD -j logaccept-final-279 + inet/filter/INPUT -j limit-2876 + inet/filter/INPUT -j logaccept-final-279 + inet/filter/OUTPUT -j limit-2876 + inet/filter/OUTPUT -j logaccept-final-279 + inet/filter/limit-2876 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2876 -j RETURN + inet/filter/limit-2876 -m limit --limit 1/second -j LOG + inet/filter/limit-2876 -j DROP + inet/filter/logaccept-final-279 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-279 -j ACCEPT + inet6/filter/FORWARD -j limit-2876 + inet6/filter/FORWARD -j logaccept-final-279 + inet6/filter/INPUT -j limit-2876 + inet6/filter/INPUT -j logaccept-final-279 + inet6/filter/OUTPUT -j limit-2876 + inet6/filter/OUTPUT -j logaccept-final-279 + inet6/filter/limit-2876 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2876 -j RETURN + inet6/filter/limit-2876 -m limit --limit 1/second -j LOG + inet6/filter/limit-2876 -j DROP + inet6/filter/logaccept-final-279 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-279 -j ACCEPT + +Filter 2878 {"flow-limit":{"count":150},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2877 + inet/filter/FORWARD -j logaccept-final-280 + inet/filter/INPUT -j limit-2877 + inet/filter/INPUT -j logaccept-final-280 + inet/filter/OUTPUT -j limit-2877 + inet/filter/OUTPUT -j logaccept-final-280 + inet/filter/limit-2877 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2877 -j RETURN + inet/filter/limit-2877 -m limit --limit 1/second -j LOG + inet/filter/limit-2877 -j DROP + inet/filter/logaccept-final-280 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-280 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-280 -j ACCEPT + inet6/filter/FORWARD -j limit-2877 + inet6/filter/FORWARD -j logaccept-final-280 + inet6/filter/INPUT -j limit-2877 + inet6/filter/INPUT -j logaccept-final-280 + inet6/filter/OUTPUT -j limit-2877 + inet6/filter/OUTPUT -j logaccept-final-280 + inet6/filter/limit-2877 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2877 -j RETURN + inet6/filter/limit-2877 -m limit --limit 1/second -j LOG + inet6/filter/limit-2877 -j DROP + inet6/filter/logaccept-final-280 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-280 -j ACCEPT + +Filter 2879 {"flow-limit":{"count":150},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2878 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2878 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2878 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2878 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2878 -j RETURN + inet/filter/limit-2878 -m limit --limit 1/second -j LOG + inet/filter/limit-2878 -j DROP + inet6/filter/FORWARD -j limit-2878 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2878 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2878 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2878 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2878 -j RETURN + inet6/filter/limit-2878 -m limit --limit 1/second -j LOG + inet6/filter/limit-2878 -j DROP + +Filter 2880 {"flow-limit":{"count":150},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2879 + inet/filter/FORWARD -j logaccept-final-281 + inet/filter/INPUT -j limit-2879 + inet/filter/INPUT -j logaccept-final-281 + inet/filter/OUTPUT -j limit-2879 + inet/filter/OUTPUT -j logaccept-final-281 + inet/filter/limit-2879 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2879 -j RETURN + inet/filter/limit-2879 -m limit --limit 1/second -j LOG + inet/filter/limit-2879 -j DROP + inet/filter/logaccept-final-281 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-281 -j ACCEPT + inet6/filter/FORWARD -j limit-2879 + inet6/filter/FORWARD -j logaccept-final-281 + inet6/filter/INPUT -j limit-2879 + inet6/filter/INPUT -j logaccept-final-281 + inet6/filter/OUTPUT -j limit-2879 + inet6/filter/OUTPUT -j logaccept-final-281 + inet6/filter/limit-2879 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2879 -j RETURN + inet6/filter/limit-2879 -m limit --limit 1/second -j LOG + inet6/filter/limit-2879 -j DROP + inet6/filter/logaccept-final-281 -j ACCEPT + +Filter 2881 {"flow-limit":{"count":150,"log":"mirror"}} +(filter-limit) + inet/filter/FORWARD -j limit-2880 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2880 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2880 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2880 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2880 -j RETURN + inet/filter/limit-2880 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2880 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2880 -j DROP + inet6/filter/FORWARD -j limit-2880 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2880 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2880 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2880 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2880 -j RETURN + inet6/filter/limit-2880 -j TEE --gateway fc00::2 + inet6/filter/limit-2880 -j DROP + +Filter 2882 {"action":"pass","flow-limit":{"count":150,"log":"mirror"}} +(filter-limit) + inet/filter/FORWARD -j limit-2881 + inet/filter/INPUT -j limit-2881 + inet/filter/OUTPUT -j limit-2881 + inet/filter/limit-2881 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2881 -j RETURN + inet/filter/limit-2881 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2881 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2881 -j DROP + inet6/filter/FORWARD -j limit-2881 + inet6/filter/INPUT -j limit-2881 + inet6/filter/OUTPUT -j limit-2881 + inet6/filter/limit-2881 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2881 -j RETURN + inet6/filter/limit-2881 -j TEE --gateway fc00::2 + inet6/filter/limit-2881 -j DROP + +Filter 2883 {"flow-limit":{"count":150,"log":"mirror"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2882 + inet/filter/FORWARD -j logaccept-final-282 + inet/filter/INPUT -j limit-2882 + inet/filter/INPUT -j logaccept-final-282 + inet/filter/OUTPUT -j limit-2882 + inet/filter/OUTPUT -j logaccept-final-282 + inet/filter/limit-2882 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2882 -j RETURN + inet/filter/limit-2882 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2882 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2882 -j DROP + inet/filter/logaccept-final-282 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-282 -j ACCEPT + inet6/filter/FORWARD -j limit-2882 + inet6/filter/FORWARD -j logaccept-final-282 + inet6/filter/INPUT -j limit-2882 + inet6/filter/INPUT -j logaccept-final-282 + inet6/filter/OUTPUT -j limit-2882 + inet6/filter/OUTPUT -j logaccept-final-282 + inet6/filter/limit-2882 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2882 -j RETURN + inet6/filter/limit-2882 -j TEE --gateway fc00::2 + inet6/filter/limit-2882 -j DROP + inet6/filter/logaccept-final-282 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-282 -j ACCEPT + +Filter 2884 {"flow-limit":{"count":150,"log":"mirror"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2883 + inet/filter/FORWARD -j logaccept-final-283 + inet/filter/INPUT -j limit-2883 + inet/filter/INPUT -j logaccept-final-283 + inet/filter/OUTPUT -j limit-2883 + inet/filter/OUTPUT -j logaccept-final-283 + inet/filter/limit-2883 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2883 -j RETURN + inet/filter/limit-2883 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2883 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2883 -j DROP + inet/filter/logaccept-final-283 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-283 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-283 -j ACCEPT + inet6/filter/FORWARD -j limit-2883 + inet6/filter/FORWARD -j logaccept-final-283 + inet6/filter/INPUT -j limit-2883 + inet6/filter/INPUT -j logaccept-final-283 + inet6/filter/OUTPUT -j limit-2883 + inet6/filter/OUTPUT -j logaccept-final-283 + inet6/filter/limit-2883 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2883 -j RETURN + inet6/filter/limit-2883 -j TEE --gateway fc00::2 + inet6/filter/limit-2883 -j DROP + inet6/filter/logaccept-final-283 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-283 -j ACCEPT + +Filter 2885 {"flow-limit":{"count":150,"log":"mirror"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2884 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2884 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2884 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2884 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2884 -j RETURN + inet/filter/limit-2884 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2884 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2884 -j DROP + inet6/filter/FORWARD -j limit-2884 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2884 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2884 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2884 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2884 -j RETURN + inet6/filter/limit-2884 -j TEE --gateway fc00::2 + inet6/filter/limit-2884 -j DROP + +Filter 2886 {"flow-limit":{"count":150,"log":"mirror"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2885 + inet/filter/FORWARD -j logaccept-final-284 + inet/filter/INPUT -j limit-2885 + inet/filter/INPUT -j logaccept-final-284 + inet/filter/OUTPUT -j limit-2885 + inet/filter/OUTPUT -j logaccept-final-284 + inet/filter/limit-2885 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2885 -j RETURN + inet/filter/limit-2885 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2885 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2885 -j DROP + inet/filter/logaccept-final-284 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-284 -j ACCEPT + inet6/filter/FORWARD -j limit-2885 + inet6/filter/FORWARD -j logaccept-final-284 + inet6/filter/INPUT -j limit-2885 + inet6/filter/INPUT -j logaccept-final-284 + inet6/filter/OUTPUT -j limit-2885 + inet6/filter/OUTPUT -j logaccept-final-284 + inet6/filter/limit-2885 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2885 -j RETURN + inet6/filter/limit-2885 -j TEE --gateway fc00::2 + inet6/filter/limit-2885 -j DROP + inet6/filter/logaccept-final-284 -j ACCEPT + +Filter 2887 {"flow-limit":{"count":150,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-2886 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2886 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2886 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2886 -j RETURN + inet/filter/limit-2886 -j DROP + inet6/filter/FORWARD -j limit-2886 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2886 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2886 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2886 -j RETURN + inet6/filter/limit-2886 -j DROP + +Filter 2888 {"action":"pass","flow-limit":{"count":150,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-2887 + inet/filter/INPUT -j limit-2887 + inet/filter/OUTPUT -j limit-2887 + inet/filter/limit-2887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2887 -j RETURN + inet/filter/limit-2887 -j DROP + inet6/filter/FORWARD -j limit-2887 + inet6/filter/INPUT -j limit-2887 + inet6/filter/OUTPUT -j limit-2887 + inet6/filter/limit-2887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2887 -j RETURN + inet6/filter/limit-2887 -j DROP + +Filter 2889 {"flow-limit":{"count":150,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2888 + inet/filter/FORWARD -j logaccept-final-285 + inet/filter/INPUT -j limit-2888 + inet/filter/INPUT -j logaccept-final-285 + inet/filter/OUTPUT -j limit-2888 + inet/filter/OUTPUT -j logaccept-final-285 + inet/filter/limit-2888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2888 -j RETURN + inet/filter/limit-2888 -j DROP + inet/filter/logaccept-final-285 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-285 -j ACCEPT + inet6/filter/FORWARD -j limit-2888 + inet6/filter/FORWARD -j logaccept-final-285 + inet6/filter/INPUT -j limit-2888 + inet6/filter/INPUT -j logaccept-final-285 + inet6/filter/OUTPUT -j limit-2888 + inet6/filter/OUTPUT -j logaccept-final-285 + inet6/filter/limit-2888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2888 -j RETURN + inet6/filter/limit-2888 -j DROP + inet6/filter/logaccept-final-285 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-285 -j ACCEPT + +Filter 2890 {"flow-limit":{"count":150,"log":"none"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2889 + inet/filter/FORWARD -j logaccept-final-286 + inet/filter/INPUT -j limit-2889 + inet/filter/INPUT -j logaccept-final-286 + inet/filter/OUTPUT -j limit-2889 + inet/filter/OUTPUT -j logaccept-final-286 + inet/filter/limit-2889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2889 -j RETURN + inet/filter/limit-2889 -j DROP + inet/filter/logaccept-final-286 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-286 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-286 -j ACCEPT + inet6/filter/FORWARD -j limit-2889 + inet6/filter/FORWARD -j logaccept-final-286 + inet6/filter/INPUT -j limit-2889 + inet6/filter/INPUT -j logaccept-final-286 + inet6/filter/OUTPUT -j limit-2889 + inet6/filter/OUTPUT -j logaccept-final-286 + inet6/filter/limit-2889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2889 -j RETURN + inet6/filter/limit-2889 -j DROP + inet6/filter/logaccept-final-286 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-286 -j ACCEPT + +Filter 2891 {"flow-limit":{"count":150,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2890 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2890 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2890 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2890 -j RETURN + inet/filter/limit-2890 -j DROP + inet6/filter/FORWARD -j limit-2890 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2890 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2890 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2890 -j RETURN + inet6/filter/limit-2890 -j DROP + +Filter 2892 {"flow-limit":{"count":150,"log":"none"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2891 + inet/filter/FORWARD -j logaccept-final-287 + inet/filter/INPUT -j limit-2891 + inet/filter/INPUT -j logaccept-final-287 + inet/filter/OUTPUT -j limit-2891 + inet/filter/OUTPUT -j logaccept-final-287 + inet/filter/limit-2891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2891 -j RETURN + inet/filter/limit-2891 -j DROP + inet/filter/logaccept-final-287 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-287 -j ACCEPT + inet6/filter/FORWARD -j limit-2891 + inet6/filter/FORWARD -j logaccept-final-287 + inet6/filter/INPUT -j limit-2891 + inet6/filter/INPUT -j logaccept-final-287 + inet6/filter/OUTPUT -j limit-2891 + inet6/filter/OUTPUT -j logaccept-final-287 + inet6/filter/limit-2891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2891 -j RETURN + inet6/filter/limit-2891 -j DROP + inet6/filter/logaccept-final-287 -j ACCEPT + +Filter 2893 {"flow-limit":{"count":150,"log":"ulog"}} +(filter-limit) + inet/filter/FORWARD -j limit-2892 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2892 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2892 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2892 -j RETURN + inet/filter/limit-2892 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2892 -j DROP + inet6/filter/FORWARD -j limit-2892 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2892 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2892 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2892 -j RETURN + inet6/filter/limit-2892 -j DROP + +Filter 2894 {"action":"pass","flow-limit":{"count":150,"log":"ulog"}} +(filter-limit) + inet/filter/FORWARD -j limit-2893 + inet/filter/INPUT -j limit-2893 + inet/filter/OUTPUT -j limit-2893 + inet/filter/limit-2893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2893 -j RETURN + inet/filter/limit-2893 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2893 -j DROP + inet6/filter/FORWARD -j limit-2893 + inet6/filter/INPUT -j limit-2893 + inet6/filter/OUTPUT -j limit-2893 + inet6/filter/limit-2893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2893 -j RETURN + inet6/filter/limit-2893 -j DROP + +Filter 2895 {"flow-limit":{"count":150,"log":"ulog"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2894 + inet/filter/FORWARD -j logaccept-final-288 + inet/filter/INPUT -j limit-2894 + inet/filter/INPUT -j logaccept-final-288 + inet/filter/OUTPUT -j limit-2894 + inet/filter/OUTPUT -j logaccept-final-288 + inet/filter/limit-2894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2894 -j RETURN + inet/filter/limit-2894 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2894 -j DROP + inet/filter/logaccept-final-288 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-288 -j ACCEPT + inet6/filter/FORWARD -j limit-2894 + inet6/filter/FORWARD -j logaccept-final-288 + inet6/filter/INPUT -j limit-2894 + inet6/filter/INPUT -j logaccept-final-288 + inet6/filter/OUTPUT -j limit-2894 + inet6/filter/OUTPUT -j logaccept-final-288 + inet6/filter/limit-2894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2894 -j RETURN + inet6/filter/limit-2894 -j DROP + inet6/filter/logaccept-final-288 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-288 -j ACCEPT + +Filter 2896 {"flow-limit":{"count":150,"log":"ulog"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2895 + inet/filter/FORWARD -j logaccept-final-289 + inet/filter/INPUT -j limit-2895 + inet/filter/INPUT -j logaccept-final-289 + inet/filter/OUTPUT -j limit-2895 + inet/filter/OUTPUT -j logaccept-final-289 + inet/filter/limit-2895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2895 -j RETURN + inet/filter/limit-2895 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2895 -j DROP + inet/filter/logaccept-final-289 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-289 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-289 -j ACCEPT + inet6/filter/FORWARD -j limit-2895 + inet6/filter/FORWARD -j logaccept-final-289 + inet6/filter/INPUT -j limit-2895 + inet6/filter/INPUT -j logaccept-final-289 + inet6/filter/OUTPUT -j limit-2895 + inet6/filter/OUTPUT -j logaccept-final-289 + inet6/filter/limit-2895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2895 -j RETURN + inet6/filter/limit-2895 -j DROP + inet6/filter/logaccept-final-289 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-289 -j ACCEPT + +Filter 2897 {"flow-limit":{"count":150,"log":"ulog"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2896 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2896 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2896 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2896 -j RETURN + inet/filter/limit-2896 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2896 -j DROP + inet6/filter/FORWARD -j limit-2896 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2896 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2896 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2896 -j RETURN + inet6/filter/limit-2896 -j DROP + +Filter 2898 {"flow-limit":{"count":150,"log":"ulog"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2897 + inet/filter/FORWARD -j logaccept-final-290 + inet/filter/INPUT -j limit-2897 + inet/filter/INPUT -j logaccept-final-290 + inet/filter/OUTPUT -j limit-2897 + inet/filter/OUTPUT -j logaccept-final-290 + inet/filter/limit-2897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2897 -j RETURN + inet/filter/limit-2897 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2897 -j DROP + inet/filter/logaccept-final-290 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-290 -j ACCEPT + inet6/filter/FORWARD -j limit-2897 + inet6/filter/FORWARD -j logaccept-final-290 + inet6/filter/INPUT -j limit-2897 + inet6/filter/INPUT -j logaccept-final-290 + inet6/filter/OUTPUT -j limit-2897 + inet6/filter/OUTPUT -j logaccept-final-290 + inet6/filter/limit-2897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2897 -j RETURN + inet6/filter/limit-2897 -j DROP + inet6/filter/logaccept-final-290 -j ACCEPT + +Filter 2899 {"flow-limit":{"count":150,"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2898 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2898 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2898 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2898 -j RETURN + inet/filter/limit-2898 -j DROP + inet6/filter/FORWARD -j limit-2898 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2898 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2898 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2898 -j RETURN + inet6/filter/limit-2898 -j DROP + +Filter 2900 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-2899 + inet/filter/INPUT -j limit-2899 + inet/filter/OUTPUT -j limit-2899 + inet/filter/limit-2899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2899 -j RETURN + inet/filter/limit-2899 -j DROP + inet6/filter/FORWARD -j limit-2899 + inet6/filter/INPUT -j limit-2899 + inet6/filter/OUTPUT -j limit-2899 + inet6/filter/limit-2899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2899 -j RETURN + inet6/filter/limit-2899 -j DROP + +Filter 2901 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2900 + inet/filter/FORWARD -j logaccept-final-291 + inet/filter/INPUT -j limit-2900 + inet/filter/INPUT -j logaccept-final-291 + inet/filter/OUTPUT -j limit-2900 + inet/filter/OUTPUT -j logaccept-final-291 + inet/filter/limit-2900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2900 -j RETURN + inet/filter/limit-2900 -j DROP + inet/filter/logaccept-final-291 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-291 -j ACCEPT + inet6/filter/FORWARD -j limit-2900 + inet6/filter/FORWARD -j logaccept-final-291 + inet6/filter/INPUT -j limit-2900 + inet6/filter/INPUT -j logaccept-final-291 + inet6/filter/OUTPUT -j limit-2900 + inet6/filter/OUTPUT -j logaccept-final-291 + inet6/filter/limit-2900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2900 -j RETURN + inet6/filter/limit-2900 -j DROP + inet6/filter/logaccept-final-291 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-291 -j ACCEPT + +Filter 2902 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2901 + inet/filter/FORWARD -j logaccept-final-292 + inet/filter/INPUT -j limit-2901 + inet/filter/INPUT -j logaccept-final-292 + inet/filter/OUTPUT -j limit-2901 + inet/filter/OUTPUT -j logaccept-final-292 + inet/filter/limit-2901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2901 -j RETURN + inet/filter/limit-2901 -j DROP + inet/filter/logaccept-final-292 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-292 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-292 -j ACCEPT + inet6/filter/FORWARD -j limit-2901 + inet6/filter/FORWARD -j logaccept-final-292 + inet6/filter/INPUT -j limit-2901 + inet6/filter/INPUT -j logaccept-final-292 + inet6/filter/OUTPUT -j limit-2901 + inet6/filter/OUTPUT -j logaccept-final-292 + inet6/filter/limit-2901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2901 -j RETURN + inet6/filter/limit-2901 -j DROP + inet6/filter/logaccept-final-292 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-292 -j ACCEPT + +Filter 2903 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2902 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2902 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2902 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2902 -j RETURN + inet/filter/limit-2902 -j DROP + inet6/filter/FORWARD -j limit-2902 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2902 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2902 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2902 -j RETURN + inet6/filter/limit-2902 -j DROP + +Filter 2904 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2903 + inet/filter/FORWARD -j logaccept-final-293 + inet/filter/INPUT -j limit-2903 + inet/filter/INPUT -j logaccept-final-293 + inet/filter/OUTPUT -j limit-2903 + inet/filter/OUTPUT -j logaccept-final-293 + inet/filter/limit-2903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2903 -j RETURN + inet/filter/limit-2903 -j DROP + inet/filter/logaccept-final-293 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-293 -j ACCEPT + inet6/filter/FORWARD -j limit-2903 + inet6/filter/FORWARD -j logaccept-final-293 + inet6/filter/INPUT -j limit-2903 + inet6/filter/INPUT -j logaccept-final-293 + inet6/filter/OUTPUT -j limit-2903 + inet6/filter/OUTPUT -j logaccept-final-293 + inet6/filter/limit-2903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2903 -j RETURN + inet6/filter/limit-2903 -j DROP + inet6/filter/logaccept-final-293 -j ACCEPT + +Filter 2905 {"flow-limit":{"count":150,"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-2904 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2904 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2904 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2904 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2904 -j RETURN + inet/filter/limit-2904 -m limit --limit 1/second -j LOG + inet/filter/limit-2904 -j DROP + inet6/filter/FORWARD -j limit-2904 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2904 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2904 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2904 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2904 -j RETURN + inet6/filter/limit-2904 -m limit --limit 1/second -j LOG + inet6/filter/limit-2904 -j DROP + +Filter 2906 {"action":"pass","flow-limit":{"count":150,"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-2905 + inet/filter/INPUT -j limit-2905 + inet/filter/OUTPUT -j limit-2905 + inet/filter/limit-2905 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2905 -j RETURN + inet/filter/limit-2905 -m limit --limit 1/second -j LOG + inet/filter/limit-2905 -j DROP + inet6/filter/FORWARD -j limit-2905 + inet6/filter/INPUT -j limit-2905 + inet6/filter/OUTPUT -j limit-2905 + inet6/filter/limit-2905 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2905 -j RETURN + inet6/filter/limit-2905 -m limit --limit 1/second -j LOG + inet6/filter/limit-2905 -j DROP + +Filter 2907 {"flow-limit":{"count":150,"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2906 + inet/filter/FORWARD -j logaccept-final-294 + inet/filter/INPUT -j limit-2906 + inet/filter/INPUT -j logaccept-final-294 + inet/filter/OUTPUT -j limit-2906 + inet/filter/OUTPUT -j logaccept-final-294 + inet/filter/limit-2906 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2906 -j RETURN + inet/filter/limit-2906 -m limit --limit 1/second -j LOG + inet/filter/limit-2906 -j DROP + inet/filter/logaccept-final-294 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-294 -j ACCEPT + inet6/filter/FORWARD -j limit-2906 + inet6/filter/FORWARD -j logaccept-final-294 + inet6/filter/INPUT -j limit-2906 + inet6/filter/INPUT -j logaccept-final-294 + inet6/filter/OUTPUT -j limit-2906 + inet6/filter/OUTPUT -j logaccept-final-294 + inet6/filter/limit-2906 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2906 -j RETURN + inet6/filter/limit-2906 -m limit --limit 1/second -j LOG + inet6/filter/limit-2906 -j DROP + inet6/filter/logaccept-final-294 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-294 -j ACCEPT + +Filter 2908 {"flow-limit":{"count":150,"interval":5},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2907 + inet/filter/FORWARD -j logaccept-final-295 + inet/filter/INPUT -j limit-2907 + inet/filter/INPUT -j logaccept-final-295 + inet/filter/OUTPUT -j limit-2907 + inet/filter/OUTPUT -j logaccept-final-295 + inet/filter/limit-2907 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2907 -j RETURN + inet/filter/limit-2907 -m limit --limit 1/second -j LOG + inet/filter/limit-2907 -j DROP + inet/filter/logaccept-final-295 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-295 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-295 -j ACCEPT + inet6/filter/FORWARD -j limit-2907 + inet6/filter/FORWARD -j logaccept-final-295 + inet6/filter/INPUT -j limit-2907 + inet6/filter/INPUT -j logaccept-final-295 + inet6/filter/OUTPUT -j limit-2907 + inet6/filter/OUTPUT -j logaccept-final-295 + inet6/filter/limit-2907 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2907 -j RETURN + inet6/filter/limit-2907 -m limit --limit 1/second -j LOG + inet6/filter/limit-2907 -j DROP + inet6/filter/logaccept-final-295 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-295 -j ACCEPT + +Filter 2909 {"flow-limit":{"count":150,"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2908 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2908 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2908 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2908 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2908 -j RETURN + inet/filter/limit-2908 -m limit --limit 1/second -j LOG + inet/filter/limit-2908 -j DROP + inet6/filter/FORWARD -j limit-2908 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2908 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2908 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2908 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2908 -j RETURN + inet6/filter/limit-2908 -m limit --limit 1/second -j LOG + inet6/filter/limit-2908 -j DROP + +Filter 2910 {"flow-limit":{"count":150,"interval":5},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2909 + inet/filter/FORWARD -j logaccept-final-296 + inet/filter/INPUT -j limit-2909 + inet/filter/INPUT -j logaccept-final-296 + inet/filter/OUTPUT -j limit-2909 + inet/filter/OUTPUT -j logaccept-final-296 + inet/filter/limit-2909 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2909 -j RETURN + inet/filter/limit-2909 -m limit --limit 1/second -j LOG + inet/filter/limit-2909 -j DROP + inet/filter/logaccept-final-296 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-296 -j ACCEPT + inet6/filter/FORWARD -j limit-2909 + inet6/filter/FORWARD -j logaccept-final-296 + inet6/filter/INPUT -j limit-2909 + inet6/filter/INPUT -j logaccept-final-296 + inet6/filter/OUTPUT -j limit-2909 + inet6/filter/OUTPUT -j logaccept-final-296 + inet6/filter/limit-2909 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2909 -j RETURN + inet6/filter/limit-2909 -m limit --limit 1/second -j LOG + inet6/filter/limit-2909 -j DROP + inet6/filter/logaccept-final-296 -j ACCEPT + +Filter 2911 {"flow-limit":{"count":150,"interval":5,"log":"mirror"}} +(filter-limit) + inet/filter/FORWARD -j limit-2910 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2910 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2910 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2910 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2910 -j RETURN + inet/filter/limit-2910 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2910 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2910 -j DROP + inet6/filter/FORWARD -j limit-2910 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2910 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2910 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2910 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2910 -j RETURN + inet6/filter/limit-2910 -j TEE --gateway fc00::2 + inet6/filter/limit-2910 -j DROP + +Filter 2912 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"mirror"}} +(filter-limit) + inet/filter/FORWARD -j limit-2911 + inet/filter/INPUT -j limit-2911 + inet/filter/OUTPUT -j limit-2911 + inet/filter/limit-2911 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2911 -j RETURN + inet/filter/limit-2911 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2911 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2911 -j DROP + inet6/filter/FORWARD -j limit-2911 + inet6/filter/INPUT -j limit-2911 + inet6/filter/OUTPUT -j limit-2911 + inet6/filter/limit-2911 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2911 -j RETURN + inet6/filter/limit-2911 -j TEE --gateway fc00::2 + inet6/filter/limit-2911 -j DROP + +Filter 2913 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2912 + inet/filter/FORWARD -j logaccept-final-297 + inet/filter/INPUT -j limit-2912 + inet/filter/INPUT -j logaccept-final-297 + inet/filter/OUTPUT -j limit-2912 + inet/filter/OUTPUT -j logaccept-final-297 + inet/filter/limit-2912 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2912 -j RETURN + inet/filter/limit-2912 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2912 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2912 -j DROP + inet/filter/logaccept-final-297 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-297 -j ACCEPT + inet6/filter/FORWARD -j limit-2912 + inet6/filter/FORWARD -j logaccept-final-297 + inet6/filter/INPUT -j limit-2912 + inet6/filter/INPUT -j logaccept-final-297 + inet6/filter/OUTPUT -j limit-2912 + inet6/filter/OUTPUT -j logaccept-final-297 + inet6/filter/limit-2912 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2912 -j RETURN + inet6/filter/limit-2912 -j TEE --gateway fc00::2 + inet6/filter/limit-2912 -j DROP + inet6/filter/logaccept-final-297 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-297 -j ACCEPT + +Filter 2914 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2913 + inet/filter/FORWARD -j logaccept-final-298 + inet/filter/INPUT -j limit-2913 + inet/filter/INPUT -j logaccept-final-298 + inet/filter/OUTPUT -j limit-2913 + inet/filter/OUTPUT -j logaccept-final-298 + inet/filter/limit-2913 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2913 -j RETURN + inet/filter/limit-2913 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2913 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2913 -j DROP + inet/filter/logaccept-final-298 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-298 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-298 -j ACCEPT + inet6/filter/FORWARD -j limit-2913 + inet6/filter/FORWARD -j logaccept-final-298 + inet6/filter/INPUT -j limit-2913 + inet6/filter/INPUT -j logaccept-final-298 + inet6/filter/OUTPUT -j limit-2913 + inet6/filter/OUTPUT -j logaccept-final-298 + inet6/filter/limit-2913 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2913 -j RETURN + inet6/filter/limit-2913 -j TEE --gateway fc00::2 + inet6/filter/limit-2913 -j DROP + inet6/filter/logaccept-final-298 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-298 -j ACCEPT + +Filter 2915 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2914 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2914 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2914 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2914 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2914 -j RETURN + inet/filter/limit-2914 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2914 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2914 -j DROP + inet6/filter/FORWARD -j limit-2914 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2914 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2914 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2914 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2914 -j RETURN + inet6/filter/limit-2914 -j TEE --gateway fc00::2 + inet6/filter/limit-2914 -j DROP + +Filter 2916 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2915 + inet/filter/FORWARD -j logaccept-final-299 + inet/filter/INPUT -j limit-2915 + inet/filter/INPUT -j logaccept-final-299 + inet/filter/OUTPUT -j limit-2915 + inet/filter/OUTPUT -j logaccept-final-299 + inet/filter/limit-2915 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2915 -j RETURN + inet/filter/limit-2915 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2915 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2915 -j DROP + inet/filter/logaccept-final-299 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-299 -j ACCEPT + inet6/filter/FORWARD -j limit-2915 + inet6/filter/FORWARD -j logaccept-final-299 + inet6/filter/INPUT -j limit-2915 + inet6/filter/INPUT -j logaccept-final-299 + inet6/filter/OUTPUT -j limit-2915 + inet6/filter/OUTPUT -j logaccept-final-299 + inet6/filter/limit-2915 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2915 -j RETURN + inet6/filter/limit-2915 -j TEE --gateway fc00::2 + inet6/filter/limit-2915 -j DROP + inet6/filter/logaccept-final-299 -j ACCEPT + +Filter 2917 {"flow-limit":{"count":150,"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-2916 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2916 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2916 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2916 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2916 -j RETURN + inet/filter/limit-2916 -j DROP + inet6/filter/FORWARD -j limit-2916 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2916 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2916 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2916 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2916 -j RETURN + inet6/filter/limit-2916 -j DROP + +Filter 2918 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-2917 + inet/filter/INPUT -j limit-2917 + inet/filter/OUTPUT -j limit-2917 + inet/filter/limit-2917 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2917 -j RETURN + inet/filter/limit-2917 -j DROP + inet6/filter/FORWARD -j limit-2917 + inet6/filter/INPUT -j limit-2917 + inet6/filter/OUTPUT -j limit-2917 + inet6/filter/limit-2917 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2917 -j RETURN + inet6/filter/limit-2917 -j DROP + +Filter 2919 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2918 + inet/filter/FORWARD -j logaccept-final-300 + inet/filter/INPUT -j limit-2918 + inet/filter/INPUT -j logaccept-final-300 + inet/filter/OUTPUT -j limit-2918 + inet/filter/OUTPUT -j logaccept-final-300 + inet/filter/limit-2918 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2918 -j RETURN + inet/filter/limit-2918 -j DROP + inet/filter/logaccept-final-300 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-300 -j ACCEPT + inet6/filter/FORWARD -j limit-2918 + inet6/filter/FORWARD -j logaccept-final-300 + inet6/filter/INPUT -j limit-2918 + inet6/filter/INPUT -j logaccept-final-300 + inet6/filter/OUTPUT -j limit-2918 + inet6/filter/OUTPUT -j logaccept-final-300 + inet6/filter/limit-2918 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2918 -j RETURN + inet6/filter/limit-2918 -j DROP + inet6/filter/logaccept-final-300 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-300 -j ACCEPT + +Filter 2920 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2919 + inet/filter/FORWARD -j logaccept-final-301 + inet/filter/INPUT -j limit-2919 + inet/filter/INPUT -j logaccept-final-301 + inet/filter/OUTPUT -j limit-2919 + inet/filter/OUTPUT -j logaccept-final-301 + inet/filter/limit-2919 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2919 -j RETURN + inet/filter/limit-2919 -j DROP + inet/filter/logaccept-final-301 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-301 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-301 -j ACCEPT + inet6/filter/FORWARD -j limit-2919 + inet6/filter/FORWARD -j logaccept-final-301 + inet6/filter/INPUT -j limit-2919 + inet6/filter/INPUT -j logaccept-final-301 + inet6/filter/OUTPUT -j limit-2919 + inet6/filter/OUTPUT -j logaccept-final-301 + inet6/filter/limit-2919 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2919 -j RETURN + inet6/filter/limit-2919 -j DROP + inet6/filter/logaccept-final-301 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-301 -j ACCEPT + +Filter 2921 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2920 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2920 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2920 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2920 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2920 -j RETURN + inet/filter/limit-2920 -j DROP + inet6/filter/FORWARD -j limit-2920 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2920 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2920 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2920 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2920 -j RETURN + inet6/filter/limit-2920 -j DROP + +Filter 2922 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2921 + inet/filter/FORWARD -j logaccept-final-302 + inet/filter/INPUT -j limit-2921 + inet/filter/INPUT -j logaccept-final-302 + inet/filter/OUTPUT -j limit-2921 + inet/filter/OUTPUT -j logaccept-final-302 + inet/filter/limit-2921 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2921 -j RETURN + inet/filter/limit-2921 -j DROP + inet/filter/logaccept-final-302 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-302 -j ACCEPT + inet6/filter/FORWARD -j limit-2921 + inet6/filter/FORWARD -j logaccept-final-302 + inet6/filter/INPUT -j limit-2921 + inet6/filter/INPUT -j logaccept-final-302 + inet6/filter/OUTPUT -j limit-2921 + inet6/filter/OUTPUT -j logaccept-final-302 + inet6/filter/limit-2921 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2921 -j RETURN + inet6/filter/limit-2921 -j DROP + inet6/filter/logaccept-final-302 -j ACCEPT + +Filter 2923 {"flow-limit":{"count":150,"interval":5,"log":"ulog"}} +(filter-limit) + inet/filter/FORWARD -j limit-2922 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2922 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2922 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2922 -j RETURN + inet/filter/limit-2922 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2922 -j DROP + inet6/filter/FORWARD -j limit-2922 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2922 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2922 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2922 -j RETURN + inet6/filter/limit-2922 -j DROP + +Filter 2924 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"ulog"}} +(filter-limit) + inet/filter/FORWARD -j limit-2923 + inet/filter/INPUT -j limit-2923 + inet/filter/OUTPUT -j limit-2923 + inet/filter/limit-2923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2923 -j RETURN + inet/filter/limit-2923 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2923 -j DROP + inet6/filter/FORWARD -j limit-2923 + inet6/filter/INPUT -j limit-2923 + inet6/filter/OUTPUT -j limit-2923 + inet6/filter/limit-2923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2923 -j RETURN + inet6/filter/limit-2923 -j DROP + +Filter 2925 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-2924 + inet/filter/FORWARD -j logaccept-final-303 + inet/filter/INPUT -j limit-2924 + inet/filter/INPUT -j logaccept-final-303 + inet/filter/OUTPUT -j limit-2924 + inet/filter/OUTPUT -j logaccept-final-303 + inet/filter/limit-2924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2924 -j RETURN + inet/filter/limit-2924 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2924 -j DROP + inet/filter/logaccept-final-303 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-303 -j ACCEPT + inet6/filter/FORWARD -j limit-2924 + inet6/filter/FORWARD -j logaccept-final-303 + inet6/filter/INPUT -j limit-2924 + inet6/filter/INPUT -j logaccept-final-303 + inet6/filter/OUTPUT -j limit-2924 + inet6/filter/OUTPUT -j logaccept-final-303 + inet6/filter/limit-2924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2924 -j RETURN + inet6/filter/limit-2924 -j DROP + inet6/filter/logaccept-final-303 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-303 -j ACCEPT + +Filter 2926 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"log":"mirror"} +(filter-limit) + inet/filter/FORWARD -j limit-2925 + inet/filter/FORWARD -j logaccept-final-304 + inet/filter/INPUT -j limit-2925 + inet/filter/INPUT -j logaccept-final-304 + inet/filter/OUTPUT -j limit-2925 + inet/filter/OUTPUT -j logaccept-final-304 + inet/filter/limit-2925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2925 -j RETURN + inet/filter/limit-2925 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2925 -j DROP + inet/filter/logaccept-final-304 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-final-304 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-final-304 -j ACCEPT + inet6/filter/FORWARD -j limit-2925 + inet6/filter/FORWARD -j logaccept-final-304 + inet6/filter/INPUT -j limit-2925 + inet6/filter/INPUT -j logaccept-final-304 + inet6/filter/OUTPUT -j limit-2925 + inet6/filter/OUTPUT -j logaccept-final-304 + inet6/filter/limit-2925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2925 -j RETURN + inet6/filter/limit-2925 -j DROP + inet6/filter/logaccept-final-304 -j TEE --gateway fc00::2 + inet6/filter/logaccept-final-304 -j ACCEPT + +Filter 2927 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-2926 + inet/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j limit-2926 + inet/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j limit-2926 + inet/filter/OUTPUT -j ACCEPT + inet/filter/limit-2926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2926 -j RETURN + inet/filter/limit-2926 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2926 -j DROP + inet6/filter/FORWARD -j limit-2926 + inet6/filter/FORWARD -j ACCEPT + inet6/filter/INPUT -j limit-2926 + inet6/filter/INPUT -j ACCEPT + inet6/filter/OUTPUT -j limit-2926 + inet6/filter/OUTPUT -j ACCEPT + inet6/filter/limit-2926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2926 -j RETURN + inet6/filter/limit-2926 -j DROP + +Filter 2928 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"log":"ulog"} +(filter-limit) + inet/filter/FORWARD -j limit-2927 + inet/filter/FORWARD -j logaccept-final-305 + inet/filter/INPUT -j limit-2927 + inet/filter/INPUT -j logaccept-final-305 + inet/filter/OUTPUT -j limit-2927 + inet/filter/OUTPUT -j logaccept-final-305 + inet/filter/limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2927 -j RETURN + inet/filter/limit-2927 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2927 -j DROP + inet/filter/logaccept-final-305 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-final-305 -j ACCEPT + inet6/filter/FORWARD -j limit-2927 + inet6/filter/FORWARD -j logaccept-final-305 + inet6/filter/INPUT -j limit-2927 + inet6/filter/INPUT -j logaccept-final-305 + inet6/filter/OUTPUT -j limit-2927 + inet6/filter/OUTPUT -j logaccept-final-305 + inet6/filter/limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2927 -j RETURN + inet6/filter/limit-2927 -j DROP + inet6/filter/logaccept-final-305 -j ACCEPT + +Filter 2929 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2928 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1650 + inet/filter/limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1650 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1650 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2928 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1650 + inet6/filter/limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1650 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1650 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2930 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2929 + inet/filter/limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1651 + inet/filter/limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1651 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1651 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2929 + inet6/filter/limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1651 + inet6/filter/limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1651 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1651 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2931 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2930 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1652 + inet/filter/limit-2930 -m limit --limit 1/second -j LOG + inet/filter/limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1652 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1652 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2930 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1652 + inet6/filter/limit-2930 -m limit --limit 1/second -j LOG + inet6/filter/limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1652 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1652 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2932 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2931 + inet/filter/limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1653 + inet/filter/limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1653 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1653 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2931 + inet6/filter/limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1653 + inet6/filter/limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1653 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1653 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2933 {"flow-limit":1,"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2932 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1654 + inet/filter/limit-2932 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2932 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1654 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1654 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2932 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1654 + inet6/filter/limit-2932 -j TEE --gateway fc00::2 + inet6/filter/limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1654 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1654 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2934 {"action":"pass","flow-limit":1,"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2933 + inet/filter/limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1655 + inet/filter/limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1655 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1655 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2933 + inet6/filter/limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1655 + inet6/filter/limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1655 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1655 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2935 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2934 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1656 + inet/filter/limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1656 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1656 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2934 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1656 + inet6/filter/limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1656 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1656 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2936 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2935 + inet/filter/limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1657 + inet/filter/limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1657 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1657 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2935 + inet6/filter/limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1657 + inet6/filter/limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1657 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1657 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2937 {"flow-limit":1,"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2936 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1658 + inet/filter/limit-2936 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1658 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1658 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2936 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1658 + inet6/filter/limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1658 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1658 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2938 {"action":"pass","flow-limit":1,"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2937 + inet/filter/limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1659 + inet/filter/limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1659 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1659 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2937 + inet6/filter/limit-2937 -m recent --name limit-2937 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1659 + inet6/filter/logdrop-1659 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1659 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2939 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2938 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2938 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2940 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2939 + inet/filter/limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2939 + inet6/filter/limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2941 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2940 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2940 -m limit --limit 1/second -j LOG + inet/filter/limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2940 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2940 -m limit --limit 1/second -j LOG + inet6/filter/limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2942 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2941 + inet/filter/limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2941 + inet6/filter/limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2943 {"flow-limit":{"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2942 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2942 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2942 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2942 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2942 -j TEE --gateway fc00::2 + inet6/filter/limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2944 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2943 + inet/filter/limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2943 + inet6/filter/limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2945 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2944 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2944 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2946 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2945 + inet/filter/limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2945 + inet6/filter/limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2947 {"flow-limit":{"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2946 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2946 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2946 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2948 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2947 + inet/filter/limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2947 + inet6/filter/limit-2947 -m recent --name limit-2947 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2949 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2948 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2948 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2950 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2949 + inet/filter/limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2949 + inet6/filter/limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2951 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2950 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2950 -m limit --limit 1/second -j LOG + inet/filter/limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2950 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2950 -m limit --limit 1/second -j LOG + inet6/filter/limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2952 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2951 + inet/filter/limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2951 + inet6/filter/limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2953 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2952 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2952 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2952 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2952 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2952 -j TEE --gateway fc00::2 + inet6/filter/limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2954 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2953 + inet/filter/limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2953 + inet6/filter/limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2955 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2954 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2954 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2956 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2955 + inet/filter/limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2955 + inet6/filter/limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2957 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2956 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2956 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2956 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2958 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2957 + inet/filter/limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2957 + inet6/filter/limit-2957 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2959 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2958 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2958 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2958 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2958 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2958 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2958 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2960 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2961 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2960 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2960 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2960 -m limit --limit 1/second -j LOG + inet/filter/limit-2960 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2960 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2960 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2960 -m limit --limit 1/second -j LOG + inet6/filter/limit-2960 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2962 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2961 + inet/filter/limit-2961 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2961 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2961 + inet6/filter/limit-2961 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2961 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2963 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2962 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2962 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2962 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2962 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2962 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2962 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2962 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2962 -j TEE --gateway fc00::2 + inet6/filter/limit-2962 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2964 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2963 + inet/filter/limit-2963 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2963 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2963 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2963 + inet6/filter/limit-2963 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2963 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2965 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2964 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2964 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2964 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2964 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2964 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2964 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2966 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2967 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2966 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2966 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2966 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2966 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2966 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2966 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2966 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2968 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2967 + inet/filter/limit-2967 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2967 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2967 + inet6/filter/limit-2967 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2969 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2968 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2968 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2970 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2969 + inet/filter/limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2969 + inet6/filter/limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2971 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2970 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2970 -m limit --limit 1/second -j LOG + inet/filter/limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2970 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2970 -m limit --limit 1/second -j LOG + inet6/filter/limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2972 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2971 + inet/filter/limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2971 + inet6/filter/limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2973 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2972 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2972 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2972 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2972 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2972 -j TEE --gateway fc00::2 + inet6/filter/limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2974 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2973 + inet/filter/limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2973 + inet6/filter/limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2975 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2974 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2974 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2976 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2975 + inet/filter/limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2975 + inet6/filter/limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2977 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2976 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2976 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2976 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2978 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2977 + inet/filter/limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2977 + inet6/filter/limit-2977 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2979 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2978 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2978 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2978 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2978 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2978 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2978 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2980 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2981 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2980 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2980 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2980 -m limit --limit 1/second -j LOG + inet/filter/limit-2980 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2980 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2980 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2980 -m limit --limit 1/second -j LOG + inet6/filter/limit-2980 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2982 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2981 + inet/filter/limit-2981 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2981 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2981 + inet6/filter/limit-2981 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2981 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2983 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2982 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2982 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2982 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2982 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2982 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2982 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2982 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2982 -j TEE --gateway fc00::2 + inet6/filter/limit-2982 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2984 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2983 + inet/filter/limit-2983 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2983 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2983 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2983 + inet6/filter/limit-2983 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2983 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2985 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2984 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2984 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2984 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2984 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2984 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2984 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2986 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2987 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2986 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2986 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2986 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2986 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2986 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2986 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2986 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2988 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2987 + inet/filter/limit-2987 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2987 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2987 + inet6/filter/limit-2987 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2989 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2988 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2988 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2988 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2988 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2990 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2989 + inet/filter/limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2989 + inet6/filter/limit-2989 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2989 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2991 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2990 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2990 -m limit --limit 1/second -j LOG + inet/filter/limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2990 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2990 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2990 -m limit --limit 1/second -j LOG + inet6/filter/limit-2990 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2992 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2991 + inet/filter/limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2991 + inet6/filter/limit-2991 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2991 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2993 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2992 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2992 -j TEE --gateway 10.0.0.1 + inet/filter/limit-2992 -j TEE --gateway 10.0.0.2 + inet/filter/limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2992 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2992 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2992 -j TEE --gateway fc00::2 + inet6/filter/limit-2992 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2994 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2993 + inet/filter/limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2993 + inet6/filter/limit-2993 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2993 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2995 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2994 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2994 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2994 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2994 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2996 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2995 + inet/filter/limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2995 + inet6/filter/limit-2995 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2995 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2997 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2996 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2996 -m limit --limit 12/minute -j ULOG + inet/filter/limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2996 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2996 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2996 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2998 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2997 + inet/filter/limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2997 + inet6/filter/limit-2997 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 2999 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-2998 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-2998 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-2998 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-2998 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-2998 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-2998 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3000 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3001 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3000 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3000 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3000 -m limit --limit 1/second -j LOG + inet/filter/limit-3000 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3000 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3000 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3000 -m limit --limit 1/second -j LOG + inet6/filter/limit-3000 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3002 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3001 + inet/filter/limit-3001 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3001 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3001 + inet6/filter/limit-3001 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3001 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3003 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3002 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3002 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3002 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3002 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3002 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3002 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3002 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3002 -j TEE --gateway fc00::2 + inet6/filter/limit-3002 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3004 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3003 + inet/filter/limit-3003 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3003 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3003 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3003 + inet6/filter/limit-3003 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3003 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3005 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3004 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3004 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3004 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3004 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3004 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3004 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3006 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3007 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3006 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3006 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3006 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3006 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3006 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3006 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3006 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3008 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3007 + inet/filter/limit-3007 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3007 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3007 + inet6/filter/limit-3007 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3009 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3008 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3008 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3008 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3008 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3010 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3009 + inet/filter/limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3009 + inet6/filter/limit-3009 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3009 -m recent --name user:C --rdest --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3011 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3010 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3010 -m limit --limit 1/second -j LOG + inet/filter/limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3010 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3010 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3010 -m limit --limit 1/second -j LOG + inet6/filter/limit-3010 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3012 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3011 + inet/filter/limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3011 + inet6/filter/limit-3011 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3011 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3013 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3012 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3012 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3012 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3012 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3012 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3012 -j TEE --gateway fc00::2 + inet6/filter/limit-3012 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3014 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3013 + inet/filter/limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3013 + inet6/filter/limit-3013 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3013 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3015 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3014 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3014 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3014 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3014 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3016 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3015 + inet/filter/limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3015 + inet6/filter/limit-3015 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3015 -m recent --name user:C --rdest --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3017 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3016 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3016 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3016 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3016 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3016 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3018 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3017 + inet/filter/limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3017 + inet6/filter/limit-3017 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3019 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3018 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3018 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3018 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3018 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3018 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3018 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3020 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3021 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3020 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3020 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3020 -m limit --limit 1/second -j LOG + inet/filter/limit-3020 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3020 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3020 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3020 -m limit --limit 1/second -j LOG + inet6/filter/limit-3020 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3022 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3021 + inet/filter/limit-3021 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3021 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3021 + inet6/filter/limit-3021 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3021 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3023 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3022 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3022 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3022 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3022 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3022 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3022 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3022 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3022 -j TEE --gateway fc00::2 + inet6/filter/limit-3022 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3024 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3023 + inet/filter/limit-3023 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3023 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3023 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3023 + inet6/filter/limit-3023 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3023 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3025 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3024 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3024 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3024 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3024 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3024 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3024 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3026 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3027 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3026 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3026 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3026 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3026 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3026 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3026 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3026 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3028 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3027 + inet/filter/limit-3027 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3027 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3027 + inet6/filter/limit-3027 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3029 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3028 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1660 + inet/filter/limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1660 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1660 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3028 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1660 + inet6/filter/limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1660 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1660 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3030 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3029 + inet/filter/limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1661 + inet/filter/limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1661 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1661 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3029 + inet6/filter/limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1661 + inet6/filter/limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1661 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1661 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3031 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3030 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1662 + inet/filter/limit-3030 -m limit --limit 1/second -j LOG + inet/filter/limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1662 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1662 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3030 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1662 + inet6/filter/limit-3030 -m limit --limit 1/second -j LOG + inet6/filter/limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1662 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1662 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3032 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3031 + inet/filter/limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1663 + inet/filter/limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1663 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1663 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3031 + inet6/filter/limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1663 + inet6/filter/limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1663 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1663 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3033 {"flow-limit":{},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3032 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1664 + inet/filter/limit-3032 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3032 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1664 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1664 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3032 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1664 + inet6/filter/limit-3032 -j TEE --gateway fc00::2 + inet6/filter/limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1664 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1664 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3034 {"action":"pass","flow-limit":{},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3033 + inet/filter/limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1665 + inet/filter/limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1665 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1665 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3033 + inet6/filter/limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1665 + inet6/filter/limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1665 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1665 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3035 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3034 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1666 + inet/filter/limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1666 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1666 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3034 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1666 + inet6/filter/limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1666 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1666 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3036 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3035 + inet/filter/limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1667 + inet/filter/limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1667 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1667 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3035 + inet6/filter/limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1667 + inet6/filter/limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1667 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1667 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3037 {"flow-limit":{},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3036 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1668 + inet/filter/limit-3036 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1668 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1668 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3036 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1668 + inet6/filter/limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1668 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1668 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3038 {"action":"pass","flow-limit":{},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3037 + inet/filter/limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1669 + inet/filter/limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1669 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1669 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3037 + inet6/filter/limit-3037 -m recent --name limit-3037 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1669 + inet6/filter/logdrop-1669 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1669 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3039 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3038 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1670 + inet/filter/limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1670 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1670 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3038 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1670 + inet6/filter/limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1670 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1670 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3040 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3039 + inet/filter/limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1671 + inet/filter/limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1671 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1671 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3039 + inet6/filter/limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1671 + inet6/filter/limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1671 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1671 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3041 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3040 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1672 + inet/filter/limit-3040 -m limit --limit 1/second -j LOG + inet/filter/limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1672 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1672 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3040 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1672 + inet6/filter/limit-3040 -m limit --limit 1/second -j LOG + inet6/filter/limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1672 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1672 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3042 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3041 + inet/filter/limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1673 + inet/filter/limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1673 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1673 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3041 + inet6/filter/limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1673 + inet6/filter/limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1673 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1673 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3043 {"flow-limit":{"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3042 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1674 + inet/filter/limit-3042 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3042 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1674 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1674 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3042 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1674 + inet6/filter/limit-3042 -j TEE --gateway fc00::2 + inet6/filter/limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1674 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1674 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3044 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3043 + inet/filter/limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1675 + inet/filter/limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1675 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1675 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3043 + inet6/filter/limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1675 + inet6/filter/limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1675 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1675 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3045 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3044 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1676 + inet/filter/limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1676 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1676 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3044 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1676 + inet6/filter/limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1676 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1676 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3046 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3045 + inet/filter/limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1677 + inet/filter/limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1677 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1677 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3045 + inet6/filter/limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1677 + inet6/filter/limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1677 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1677 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3047 {"flow-limit":{"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3046 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1678 + inet/filter/limit-3046 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1678 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1678 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3046 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1678 + inet6/filter/limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1678 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1678 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3048 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3047 + inet/filter/limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1679 + inet/filter/limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1679 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1679 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3047 + inet6/filter/limit-3047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1679 + inet6/filter/logdrop-1679 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1679 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3049 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3048 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3048 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 + inet/filter/limit-3048 -j ACCEPT + inet/filter/logdrop-1680 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1680 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3048 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 + inet6/filter/limit-3048 -j ACCEPT + inet6/filter/logdrop-1680 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1680 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3050 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 + inet/filter/logdrop-1681 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1681 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 + inet6/filter/logdrop-1681 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1681 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3051 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3050 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3050 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 + inet/filter/limit-3050 -m limit --limit 1/second -j LOG + inet/filter/limit-3050 -j ACCEPT + inet/filter/logdrop-1682 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1682 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3050 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 + inet6/filter/limit-3050 -m limit --limit 1/second -j LOG + inet6/filter/limit-3050 -j ACCEPT + inet6/filter/logdrop-1682 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1682 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3052 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3051 + inet/filter/limit-3051 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 + inet/filter/limit-3051 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1683 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1683 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3051 + inet6/filter/limit-3051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 + inet6/filter/limit-3051 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1683 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1683 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3053 {"flow-limit":{"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3052 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3052 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 + inet/filter/limit-3052 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3052 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3052 -j ACCEPT + inet/filter/logdrop-1684 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1684 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3052 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 + inet6/filter/limit-3052 -j TEE --gateway fc00::2 + inet6/filter/limit-3052 -j ACCEPT + inet6/filter/logdrop-1684 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1684 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3054 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3053 + inet/filter/limit-3053 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 + inet/filter/limit-3053 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3053 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1685 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1685 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3053 + inet6/filter/limit-3053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 + inet6/filter/limit-3053 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1685 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1685 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3055 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3054 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3054 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 + inet/filter/limit-3054 -j ACCEPT + inet/filter/logdrop-1686 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1686 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3054 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3054 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 + inet6/filter/limit-3054 -j ACCEPT + inet6/filter/logdrop-1686 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1686 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3056 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 + inet/filter/logdrop-1687 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1687 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 + inet6/filter/logdrop-1687 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1687 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3057 {"flow-limit":{"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3056 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3056 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 + inet/filter/limit-3056 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3056 -j ACCEPT + inet/filter/logdrop-1688 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1688 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3056 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3056 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 + inet6/filter/limit-3056 -j ACCEPT + inet6/filter/logdrop-1688 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1688 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3058 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3057 + inet/filter/limit-3057 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 + inet/filter/limit-3057 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1689 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1689 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3057 + inet6/filter/limit-3057 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 + inet6/filter/logdrop-1689 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1689 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3059 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3058 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1690 + inet/filter/limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1690 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1690 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3058 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1690 + inet6/filter/limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1690 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1690 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3060 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3059 + inet/filter/limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1691 + inet/filter/limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1691 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1691 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3059 + inet6/filter/limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1691 + inet6/filter/limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1691 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1691 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3061 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3060 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1692 + inet/filter/limit-3060 -m limit --limit 1/second -j LOG + inet/filter/limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1692 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1692 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3060 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1692 + inet6/filter/limit-3060 -m limit --limit 1/second -j LOG + inet6/filter/limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1692 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1692 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3062 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3061 + inet/filter/limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1693 + inet/filter/limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1693 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1693 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3061 + inet6/filter/limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1693 + inet6/filter/limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1693 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1693 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3063 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3062 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1694 + inet/filter/limit-3062 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3062 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1694 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1694 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3062 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1694 + inet6/filter/limit-3062 -j TEE --gateway fc00::2 + inet6/filter/limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1694 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1694 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3064 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3063 + inet/filter/limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1695 + inet/filter/limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1695 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1695 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3063 + inet6/filter/limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1695 + inet6/filter/limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1695 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1695 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3065 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3064 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1696 + inet/filter/limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1696 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1696 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3064 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1696 + inet6/filter/limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1696 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1696 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3066 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3065 + inet/filter/limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1697 + inet/filter/limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1697 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1697 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3065 + inet6/filter/limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1697 + inet6/filter/limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1697 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1697 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3067 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3066 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1698 + inet/filter/limit-3066 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1698 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1698 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3066 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1698 + inet6/filter/limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1698 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1698 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3068 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3067 + inet/filter/limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1699 + inet/filter/limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1699 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1699 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3067 + inet6/filter/limit-3067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1699 + inet6/filter/logdrop-1699 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1699 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3069 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3068 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3068 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 + inet/filter/limit-3068 -j ACCEPT + inet/filter/logdrop-1700 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1700 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3068 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 + inet6/filter/limit-3068 -j ACCEPT + inet6/filter/logdrop-1700 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1700 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3070 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 + inet/filter/logdrop-1701 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1701 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 + inet6/filter/logdrop-1701 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1701 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3071 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3070 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3070 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 + inet/filter/limit-3070 -m limit --limit 1/second -j LOG + inet/filter/limit-3070 -j ACCEPT + inet/filter/logdrop-1702 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1702 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3070 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3070 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 + inet6/filter/limit-3070 -m limit --limit 1/second -j LOG + inet6/filter/limit-3070 -j ACCEPT + inet6/filter/logdrop-1702 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1702 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3072 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3071 + inet/filter/limit-3071 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 + inet/filter/limit-3071 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1703 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1703 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3071 + inet6/filter/limit-3071 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 + inet6/filter/limit-3071 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1703 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1703 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3073 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3072 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3072 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 + inet/filter/limit-3072 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3072 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3072 -j ACCEPT + inet/filter/logdrop-1704 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1704 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3072 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3072 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 + inet6/filter/limit-3072 -j TEE --gateway fc00::2 + inet6/filter/limit-3072 -j ACCEPT + inet6/filter/logdrop-1704 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1704 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3074 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3073 + inet/filter/limit-3073 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 + inet/filter/limit-3073 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3073 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1705 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1705 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3073 + inet6/filter/limit-3073 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 + inet6/filter/limit-3073 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1705 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1705 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3075 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3074 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3074 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 + inet/filter/limit-3074 -j ACCEPT + inet/filter/logdrop-1706 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1706 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3074 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3074 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 + inet6/filter/limit-3074 -j ACCEPT + inet6/filter/logdrop-1706 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1706 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3076 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 + inet/filter/logdrop-1707 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1707 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 + inet6/filter/logdrop-1707 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1707 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3077 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3076 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3076 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 + inet/filter/limit-3076 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3076 -j ACCEPT + inet/filter/logdrop-1708 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1708 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3076 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3076 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 + inet6/filter/limit-3076 -j ACCEPT + inet6/filter/logdrop-1708 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1708 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3078 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3077 + inet/filter/limit-3077 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 + inet/filter/limit-3077 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1709 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1709 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3077 + inet6/filter/limit-3077 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 + inet6/filter/logdrop-1709 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1709 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3079 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3078 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1710 + inet/filter/limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1710 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1710 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3078 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3078 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1710 + inet6/filter/limit-3078 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1710 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1710 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3080 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3079 + inet/filter/limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1711 + inet/filter/limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1711 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1711 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3079 + inet6/filter/limit-3079 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1711 + inet6/filter/limit-3079 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1711 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1711 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3081 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3080 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1712 + inet/filter/limit-3080 -m limit --limit 1/second -j LOG + inet/filter/limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1712 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1712 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3080 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3080 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1712 + inet6/filter/limit-3080 -m limit --limit 1/second -j LOG + inet6/filter/limit-3080 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1712 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1712 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3082 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3081 + inet/filter/limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1713 + inet/filter/limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1713 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1713 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3081 + inet6/filter/limit-3081 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1713 + inet6/filter/limit-3081 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1713 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1713 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3083 {"flow-limit":{"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3082 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1714 + inet/filter/limit-3082 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3082 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1714 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1714 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3082 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3082 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1714 + inet6/filter/limit-3082 -j TEE --gateway fc00::2 + inet6/filter/limit-3082 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1714 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1714 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3084 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3083 + inet/filter/limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1715 + inet/filter/limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1715 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1715 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3083 + inet6/filter/limit-3083 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1715 + inet6/filter/limit-3083 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1715 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1715 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3085 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3084 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1716 + inet/filter/limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1716 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1716 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3084 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3084 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1716 + inet6/filter/limit-3084 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1716 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1716 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3086 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3085 + inet/filter/limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1717 + inet/filter/limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1717 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1717 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3085 + inet6/filter/limit-3085 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1717 + inet6/filter/limit-3085 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1717 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1717 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3087 {"flow-limit":{"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3086 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1718 + inet/filter/limit-3086 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1718 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1718 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3086 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3086 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1718 + inet6/filter/limit-3086 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1718 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1718 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3088 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3087 + inet/filter/limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1719 + inet/filter/limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1719 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1719 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3087 + inet6/filter/limit-3087 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1719 + inet6/filter/logdrop-1719 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1719 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3089 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3088 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3088 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 + inet/filter/limit-3088 -j ACCEPT + inet/filter/logdrop-1720 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1720 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3088 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3088 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 + inet6/filter/limit-3088 -j ACCEPT + inet6/filter/logdrop-1720 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1720 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3090 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 + inet/filter/logdrop-1721 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1721 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 + inet6/filter/logdrop-1721 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1721 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3091 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3090 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3090 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 + inet/filter/limit-3090 -m limit --limit 1/second -j LOG + inet/filter/limit-3090 -j ACCEPT + inet/filter/logdrop-1722 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1722 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3090 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3090 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 + inet6/filter/limit-3090 -m limit --limit 1/second -j LOG + inet6/filter/limit-3090 -j ACCEPT + inet6/filter/logdrop-1722 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1722 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3092 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3091 + inet/filter/limit-3091 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 + inet/filter/limit-3091 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1723 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1723 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3091 + inet6/filter/limit-3091 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 + inet6/filter/limit-3091 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1723 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1723 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3093 {"flow-limit":{"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3092 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3092 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 + inet/filter/limit-3092 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3092 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3092 -j ACCEPT + inet/filter/logdrop-1724 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1724 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3092 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3092 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 + inet6/filter/limit-3092 -j TEE --gateway fc00::2 + inet6/filter/limit-3092 -j ACCEPT + inet6/filter/logdrop-1724 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1724 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3094 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3093 + inet/filter/limit-3093 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 + inet/filter/limit-3093 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3093 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1725 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1725 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3093 + inet6/filter/limit-3093 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 + inet6/filter/limit-3093 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1725 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1725 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3095 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3094 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3094 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 + inet/filter/limit-3094 -j ACCEPT + inet/filter/logdrop-1726 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1726 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3094 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3094 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 + inet6/filter/limit-3094 -j ACCEPT + inet6/filter/logdrop-1726 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1726 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3096 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 + inet/filter/logdrop-1727 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1727 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 + inet6/filter/logdrop-1727 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1727 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3097 {"flow-limit":{"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3096 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3096 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 + inet/filter/limit-3096 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3096 -j ACCEPT + inet/filter/logdrop-1728 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1728 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3096 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3096 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 + inet6/filter/limit-3096 -j ACCEPT + inet6/filter/logdrop-1728 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1728 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3098 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3097 + inet/filter/limit-3097 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 + inet/filter/limit-3097 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1729 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1729 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3097 + inet6/filter/limit-3097 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 + inet6/filter/logdrop-1729 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1729 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3099 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3098 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1730 + inet/filter/limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1730 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1730 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3098 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3098 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1730 + inet6/filter/limit-3098 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1730 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1730 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3100 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3099 + inet/filter/limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1731 + inet/filter/limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1731 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1731 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3099 + inet6/filter/limit-3099 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1731 + inet6/filter/limit-3099 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1731 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1731 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3101 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3100 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1732 + inet/filter/limit-3100 -m limit --limit 1/second -j LOG + inet/filter/limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1732 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1732 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3100 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3100 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1732 + inet6/filter/limit-3100 -m limit --limit 1/second -j LOG + inet6/filter/limit-3100 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1732 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1732 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3102 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3101 + inet/filter/limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1733 + inet/filter/limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1733 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1733 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3101 + inet6/filter/limit-3101 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1733 + inet6/filter/limit-3101 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1733 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1733 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3103 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3102 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1734 + inet/filter/limit-3102 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3102 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1734 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1734 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3102 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1734 + inet6/filter/limit-3102 -j TEE --gateway fc00::2 + inet6/filter/limit-3102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1734 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1734 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3104 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3103 + inet/filter/limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1735 + inet/filter/limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1735 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1735 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3103 + inet6/filter/limit-3103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1735 + inet6/filter/limit-3103 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1735 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1735 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3105 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3104 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1736 + inet/filter/limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1736 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1736 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3104 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1736 + inet6/filter/limit-3104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1736 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1736 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3106 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3105 + inet/filter/limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1737 + inet/filter/limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1737 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1737 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3105 + inet6/filter/limit-3105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1737 + inet6/filter/limit-3105 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1737 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1737 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3107 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3106 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1738 + inet/filter/limit-3106 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1738 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1738 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3106 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1738 + inet6/filter/limit-3106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1738 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1738 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3108 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3107 + inet/filter/limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1739 + inet/filter/limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1739 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1739 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3107 + inet6/filter/limit-3107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1739 + inet6/filter/logdrop-1739 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1739 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3109 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3108 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 + inet/filter/limit-3108 -j ACCEPT + inet/filter/logdrop-1740 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1740 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3108 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 + inet6/filter/limit-3108 -j ACCEPT + inet6/filter/logdrop-1740 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1740 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3110 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 + inet/filter/logdrop-1741 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1741 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 + inet6/filter/logdrop-1741 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1741 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3111 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3110 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 + inet/filter/limit-3110 -m limit --limit 1/second -j LOG + inet/filter/limit-3110 -j ACCEPT + inet/filter/logdrop-1742 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1742 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3110 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 + inet6/filter/limit-3110 -m limit --limit 1/second -j LOG + inet6/filter/limit-3110 -j ACCEPT + inet6/filter/logdrop-1742 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1742 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3112 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3111 + inet/filter/limit-3111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 + inet/filter/limit-3111 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1743 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1743 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3111 + inet6/filter/limit-3111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 + inet6/filter/limit-3111 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1743 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1743 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3113 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3112 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 + inet/filter/limit-3112 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3112 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3112 -j ACCEPT + inet/filter/logdrop-1744 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1744 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3112 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 + inet6/filter/limit-3112 -j TEE --gateway fc00::2 + inet6/filter/limit-3112 -j ACCEPT + inet6/filter/logdrop-1744 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1744 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3114 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3113 + inet/filter/limit-3113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 + inet/filter/limit-3113 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3113 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1745 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1745 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3113 + inet6/filter/limit-3113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 + inet6/filter/limit-3113 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1745 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1745 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3115 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3114 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3114 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 + inet/filter/limit-3114 -j ACCEPT + inet/filter/logdrop-1746 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1746 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3114 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3114 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 + inet6/filter/limit-3114 -j ACCEPT + inet6/filter/logdrop-1746 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1746 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3116 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 + inet/filter/logdrop-1747 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1747 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 + inet6/filter/logdrop-1747 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1747 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3117 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3116 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3116 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 + inet/filter/limit-3116 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3116 -j ACCEPT + inet/filter/logdrop-1748 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1748 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3116 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3116 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 + inet6/filter/limit-3116 -j ACCEPT + inet6/filter/logdrop-1748 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1748 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3118 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3117 + inet/filter/limit-3117 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 + inet/filter/limit-3117 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1749 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1749 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3117 + inet6/filter/limit-3117 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 + inet6/filter/logdrop-1749 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1749 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3119 {"flow-limit":{"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3118 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1750 + inet/filter/limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1750 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1750 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1750 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3118 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1750 + inet6/filter/limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1750 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1750 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3120 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3119 + inet/filter/limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1751 + inet/filter/limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1751 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1751 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1751 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3119 + inet6/filter/limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1751 + inet6/filter/limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1751 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1751 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3121 {"flow-limit":{"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3120 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1752 + inet/filter/limit-3120 -m limit --limit 1/second -j LOG + inet/filter/limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1752 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1752 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1752 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3120 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1752 + inet6/filter/limit-3120 -m limit --limit 1/second -j LOG + inet6/filter/limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1752 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1752 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3122 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3121 + inet/filter/limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1753 + inet/filter/limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1753 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1753 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1753 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3121 + inet6/filter/limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1753 + inet6/filter/limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1753 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1753 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3123 {"flow-limit":{"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3122 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1754 + inet/filter/limit-3122 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3122 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1754 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1754 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1754 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3122 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1754 + inet6/filter/limit-3122 -j TEE --gateway fc00::2 + inet6/filter/limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1754 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1754 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3124 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3123 + inet/filter/limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1755 + inet/filter/limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1755 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1755 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1755 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3123 + inet6/filter/limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1755 + inet6/filter/limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1755 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1755 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3125 {"flow-limit":{"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3124 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1756 + inet/filter/limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1756 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1756 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1756 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3124 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1756 + inet6/filter/limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1756 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1756 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3126 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3125 + inet/filter/limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1757 + inet/filter/limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1757 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1757 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1757 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3125 + inet6/filter/limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1757 + inet6/filter/limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1757 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1757 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3127 {"flow-limit":{"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3126 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1758 + inet/filter/limit-3126 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1758 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1758 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1758 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3126 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1758 + inet6/filter/limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1758 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1758 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3128 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3127 + inet/filter/limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1759 + inet/filter/limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1759 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1759 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1759 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3127 + inet6/filter/limit-3127 -m recent --name limit-3127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1759 + inet6/filter/logdrop-1759 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1759 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3129 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3128 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1760 + inet/filter/limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1760 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1760 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1760 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3128 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1760 + inet6/filter/limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1760 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1760 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3130 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3129 + inet/filter/limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1761 + inet/filter/limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1761 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1761 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1761 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3129 + inet6/filter/limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1761 + inet6/filter/limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1761 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1761 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3131 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3130 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1762 + inet/filter/limit-3130 -m limit --limit 1/second -j LOG + inet/filter/limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1762 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1762 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1762 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3130 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1762 + inet6/filter/limit-3130 -m limit --limit 1/second -j LOG + inet6/filter/limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1762 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1762 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3132 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3131 + inet/filter/limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1763 + inet/filter/limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1763 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1763 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1763 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3131 + inet6/filter/limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1763 + inet6/filter/limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1763 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1763 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3133 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3132 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1764 + inet/filter/limit-3132 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3132 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1764 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1764 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1764 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3132 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1764 + inet6/filter/limit-3132 -j TEE --gateway fc00::2 + inet6/filter/limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1764 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1764 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3134 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3133 + inet/filter/limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1765 + inet/filter/limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1765 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1765 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1765 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3133 + inet6/filter/limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1765 + inet6/filter/limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1765 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1765 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3135 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3134 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1766 + inet/filter/limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1766 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1766 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1766 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3134 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1766 + inet6/filter/limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1766 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1766 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3136 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3135 + inet/filter/limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1767 + inet/filter/limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1767 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1767 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1767 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3135 + inet6/filter/limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1767 + inet6/filter/limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1767 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1767 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3137 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3136 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1768 + inet/filter/limit-3136 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1768 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1768 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1768 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3136 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1768 + inet6/filter/limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1768 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1768 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3138 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3137 + inet/filter/limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1769 + inet/filter/limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1769 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1769 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1769 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3137 + inet6/filter/limit-3137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1769 + inet6/filter/logdrop-1769 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1769 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3139 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3138 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3138 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 + inet/filter/limit-3138 -j ACCEPT + inet/filter/logdrop-1770 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1770 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1770 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3138 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3138 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 + inet6/filter/limit-3138 -j ACCEPT + inet6/filter/logdrop-1770 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1770 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3140 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 + inet/filter/logdrop-1771 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1771 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1771 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 + inet6/filter/logdrop-1771 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1771 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3141 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3140 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3140 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 + inet/filter/limit-3140 -m limit --limit 1/second -j LOG + inet/filter/limit-3140 -j ACCEPT + inet/filter/logdrop-1772 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1772 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1772 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3140 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 + inet6/filter/limit-3140 -m limit --limit 1/second -j LOG + inet6/filter/limit-3140 -j ACCEPT + inet6/filter/logdrop-1772 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1772 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3142 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3141 + inet/filter/limit-3141 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 + inet/filter/limit-3141 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1773 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1773 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1773 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3141 + inet6/filter/limit-3141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 + inet6/filter/limit-3141 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1773 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1773 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3143 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3142 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3142 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 + inet/filter/limit-3142 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3142 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3142 -j ACCEPT + inet/filter/logdrop-1774 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1774 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1774 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3142 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 + inet6/filter/limit-3142 -j TEE --gateway fc00::2 + inet6/filter/limit-3142 -j ACCEPT + inet6/filter/logdrop-1774 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1774 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3144 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3143 + inet/filter/limit-3143 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 + inet/filter/limit-3143 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3143 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1775 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1775 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1775 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3143 + inet6/filter/limit-3143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 + inet6/filter/limit-3143 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1775 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1775 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3145 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3144 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3144 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 + inet/filter/limit-3144 -j ACCEPT + inet/filter/logdrop-1776 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1776 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1776 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3144 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 + inet6/filter/limit-3144 -j ACCEPT + inet6/filter/logdrop-1776 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1776 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3146 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 + inet/filter/logdrop-1777 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1777 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1777 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 + inet6/filter/logdrop-1777 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1777 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3147 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3146 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 + inet/filter/limit-3146 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3146 -j ACCEPT + inet/filter/logdrop-1778 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1778 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1778 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3146 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 + inet6/filter/limit-3146 -j ACCEPT + inet6/filter/logdrop-1778 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1778 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3148 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3147 + inet/filter/limit-3147 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 + inet/filter/limit-3147 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1779 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1779 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1779 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3147 + inet6/filter/limit-3147 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 + inet6/filter/logdrop-1779 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1779 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3149 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3148 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1780 + inet/filter/limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1780 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1780 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1780 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3148 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1780 + inet6/filter/limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1780 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1780 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3150 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3149 + inet/filter/limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1781 + inet/filter/limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1781 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1781 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1781 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3149 + inet6/filter/limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1781 + inet6/filter/limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1781 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1781 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3151 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3150 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1782 + inet/filter/limit-3150 -m limit --limit 1/second -j LOG + inet/filter/limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1782 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1782 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1782 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3150 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1782 + inet6/filter/limit-3150 -m limit --limit 1/second -j LOG + inet6/filter/limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1782 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1782 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3152 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3151 + inet/filter/limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1783 + inet/filter/limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1783 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1783 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1783 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3151 + inet6/filter/limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1783 + inet6/filter/limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1783 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1783 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3153 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3152 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1784 + inet/filter/limit-3152 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3152 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1784 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1784 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1784 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3152 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1784 + inet6/filter/limit-3152 -j TEE --gateway fc00::2 + inet6/filter/limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1784 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1784 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3154 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3153 + inet/filter/limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1785 + inet/filter/limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1785 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1785 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1785 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3153 + inet6/filter/limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1785 + inet6/filter/limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1785 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1785 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3155 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3154 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1786 + inet/filter/limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1786 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1786 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1786 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3154 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1786 + inet6/filter/limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1786 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1786 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3156 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3155 + inet/filter/limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1787 + inet/filter/limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1787 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1787 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1787 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3155 + inet6/filter/limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1787 + inet6/filter/limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1787 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1787 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3157 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3156 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1788 + inet/filter/limit-3156 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1788 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1788 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1788 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3156 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1788 + inet6/filter/limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1788 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1788 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3158 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3157 + inet/filter/limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1789 + inet/filter/limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1789 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1789 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1789 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3157 + inet6/filter/limit-3157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1789 + inet6/filter/logdrop-1789 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1789 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3159 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3158 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 + inet/filter/limit-3158 -j ACCEPT + inet/filter/logdrop-1790 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1790 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1790 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3158 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 + inet6/filter/limit-3158 -j ACCEPT + inet6/filter/logdrop-1790 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1790 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3160 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 + inet/filter/logdrop-1791 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1791 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1791 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 + inet6/filter/logdrop-1791 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1791 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3161 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3160 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 + inet/filter/limit-3160 -m limit --limit 1/second -j LOG + inet/filter/limit-3160 -j ACCEPT + inet/filter/logdrop-1792 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1792 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1792 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3160 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 + inet6/filter/limit-3160 -m limit --limit 1/second -j LOG + inet6/filter/limit-3160 -j ACCEPT + inet6/filter/logdrop-1792 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1792 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3162 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3161 + inet/filter/limit-3161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 + inet/filter/limit-3161 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1793 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1793 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1793 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3161 + inet6/filter/limit-3161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 + inet6/filter/limit-3161 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1793 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1793 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3163 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3162 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 + inet/filter/limit-3162 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3162 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3162 -j ACCEPT + inet/filter/logdrop-1794 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1794 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1794 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3162 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 + inet6/filter/limit-3162 -j TEE --gateway fc00::2 + inet6/filter/limit-3162 -j ACCEPT + inet6/filter/logdrop-1794 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1794 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3164 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3163 + inet/filter/limit-3163 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 + inet/filter/limit-3163 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3163 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1795 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1795 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1795 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3163 + inet6/filter/limit-3163 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 + inet6/filter/limit-3163 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1795 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1795 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3165 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3164 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3164 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 + inet/filter/limit-3164 -j ACCEPT + inet/filter/logdrop-1796 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1796 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1796 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3164 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3164 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 + inet6/filter/limit-3164 -j ACCEPT + inet6/filter/logdrop-1796 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1796 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3166 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 + inet/filter/logdrop-1797 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1797 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1797 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 + inet6/filter/logdrop-1797 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1797 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3167 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3166 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3166 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 + inet/filter/limit-3166 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3166 -j ACCEPT + inet/filter/logdrop-1798 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1798 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1798 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3166 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 + inet6/filter/limit-3166 -j ACCEPT + inet6/filter/logdrop-1798 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1798 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3168 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3167 + inet/filter/limit-3167 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 + inet/filter/limit-3167 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1799 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1799 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1799 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3167 + inet6/filter/limit-3167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 + inet6/filter/logdrop-1799 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1799 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3169 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3168 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1800 + inet/filter/limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1800 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1800 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1800 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3168 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1800 + inet6/filter/limit-3168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1800 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1800 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3170 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3169 + inet/filter/limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1801 + inet/filter/limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1801 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1801 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1801 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3169 + inet6/filter/limit-3169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1801 + inet6/filter/limit-3169 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1801 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1801 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3171 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3170 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1802 + inet/filter/limit-3170 -m limit --limit 1/second -j LOG + inet/filter/limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1802 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1802 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1802 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3170 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3170 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1802 + inet6/filter/limit-3170 -m limit --limit 1/second -j LOG + inet6/filter/limit-3170 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1802 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1802 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3172 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3171 + inet/filter/limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1803 + inet/filter/limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1803 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1803 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1803 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3171 + inet6/filter/limit-3171 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1803 + inet6/filter/limit-3171 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1803 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1803 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3173 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3172 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1804 + inet/filter/limit-3172 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3172 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1804 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1804 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1804 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3172 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3172 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1804 + inet6/filter/limit-3172 -j TEE --gateway fc00::2 + inet6/filter/limit-3172 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1804 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1804 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3174 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3173 + inet/filter/limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1805 + inet/filter/limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1805 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1805 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1805 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3173 + inet6/filter/limit-3173 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1805 + inet6/filter/limit-3173 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1805 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1805 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3175 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3174 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1806 + inet/filter/limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1806 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1806 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1806 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3174 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3174 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1806 + inet6/filter/limit-3174 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1806 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1806 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3176 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3175 + inet/filter/limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1807 + inet/filter/limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1807 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1807 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1807 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3175 + inet6/filter/limit-3175 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1807 + inet6/filter/limit-3175 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1807 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1807 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3177 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3176 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1808 + inet/filter/limit-3176 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1808 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1808 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1808 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3176 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3176 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1808 + inet6/filter/limit-3176 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1808 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1808 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3178 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3177 + inet/filter/limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1809 + inet/filter/limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1809 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1809 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1809 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3177 + inet6/filter/limit-3177 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1809 + inet6/filter/logdrop-1809 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1809 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3179 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3178 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3178 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 + inet/filter/limit-3178 -j ACCEPT + inet/filter/logdrop-1810 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1810 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1810 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3178 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3178 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 + inet6/filter/limit-3178 -j ACCEPT + inet6/filter/logdrop-1810 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1810 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3180 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 + inet/filter/logdrop-1811 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1811 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1811 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 + inet6/filter/logdrop-1811 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1811 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3181 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3180 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3180 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 + inet/filter/limit-3180 -m limit --limit 1/second -j LOG + inet/filter/limit-3180 -j ACCEPT + inet/filter/logdrop-1812 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1812 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1812 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3180 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3180 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 + inet6/filter/limit-3180 -m limit --limit 1/second -j LOG + inet6/filter/limit-3180 -j ACCEPT + inet6/filter/logdrop-1812 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1812 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3182 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3181 + inet/filter/limit-3181 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 + inet/filter/limit-3181 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1813 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1813 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1813 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3181 + inet6/filter/limit-3181 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 + inet6/filter/limit-3181 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1813 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1813 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3183 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3182 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3182 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 + inet/filter/limit-3182 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3182 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3182 -j ACCEPT + inet/filter/logdrop-1814 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1814 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1814 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3182 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3182 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 + inet6/filter/limit-3182 -j TEE --gateway fc00::2 + inet6/filter/limit-3182 -j ACCEPT + inet6/filter/logdrop-1814 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1814 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3184 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3183 + inet/filter/limit-3183 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 + inet/filter/limit-3183 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3183 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1815 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1815 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1815 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3183 + inet6/filter/limit-3183 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 + inet6/filter/limit-3183 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1815 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1815 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3185 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3184 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3184 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 + inet/filter/limit-3184 -j ACCEPT + inet/filter/logdrop-1816 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1816 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1816 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3184 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3184 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 + inet6/filter/limit-3184 -j ACCEPT + inet6/filter/logdrop-1816 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1816 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3186 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 + inet/filter/logdrop-1817 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1817 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1817 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 + inet6/filter/logdrop-1817 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1817 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3187 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3186 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3186 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 + inet/filter/limit-3186 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3186 -j ACCEPT + inet/filter/logdrop-1818 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1818 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1818 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3186 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3186 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 + inet6/filter/limit-3186 -j ACCEPT + inet6/filter/logdrop-1818 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1818 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3188 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3187 + inet/filter/limit-3187 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 + inet/filter/limit-3187 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1819 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1819 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1819 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3187 + inet6/filter/limit-3187 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 + inet6/filter/logdrop-1819 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1819 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3189 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3188 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1820 + inet/filter/limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1820 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1820 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1820 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3188 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3188 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1820 + inet6/filter/limit-3188 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1820 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1820 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3190 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3189 + inet/filter/limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1821 + inet/filter/limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1821 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1821 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1821 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3189 + inet6/filter/limit-3189 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1821 + inet6/filter/limit-3189 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1821 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1821 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3191 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3190 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1822 + inet/filter/limit-3190 -m limit --limit 1/second -j LOG + inet/filter/limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1822 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1822 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1822 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3190 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3190 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1822 + inet6/filter/limit-3190 -m limit --limit 1/second -j LOG + inet6/filter/limit-3190 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1822 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1822 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3192 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3191 + inet/filter/limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1823 + inet/filter/limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1823 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1823 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1823 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3191 + inet6/filter/limit-3191 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1823 + inet6/filter/limit-3191 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1823 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1823 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3193 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3192 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1824 + inet/filter/limit-3192 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3192 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1824 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1824 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1824 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3192 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3192 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1824 + inet6/filter/limit-3192 -j TEE --gateway fc00::2 + inet6/filter/limit-3192 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1824 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1824 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3194 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3193 + inet/filter/limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1825 + inet/filter/limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1825 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1825 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1825 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3193 + inet6/filter/limit-3193 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1825 + inet6/filter/limit-3193 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1825 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1825 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3195 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3194 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1826 + inet/filter/limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1826 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1826 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1826 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3194 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3194 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1826 + inet6/filter/limit-3194 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1826 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1826 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3196 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3195 + inet/filter/limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1827 + inet/filter/limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1827 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1827 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1827 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3195 + inet6/filter/limit-3195 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1827 + inet6/filter/limit-3195 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1827 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1827 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3197 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3196 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1828 + inet/filter/limit-3196 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1828 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1828 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1828 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3196 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3196 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1828 + inet6/filter/limit-3196 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1828 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1828 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3198 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3197 + inet/filter/limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1829 + inet/filter/limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1829 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1829 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1829 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3197 + inet6/filter/limit-3197 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1829 + inet6/filter/logdrop-1829 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1829 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3199 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3198 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3198 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 + inet/filter/limit-3198 -j ACCEPT + inet/filter/logdrop-1830 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1830 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1830 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3198 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3198 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 + inet6/filter/limit-3198 -j ACCEPT + inet6/filter/logdrop-1830 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1830 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3200 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 + inet/filter/logdrop-1831 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1831 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1831 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 + inet6/filter/logdrop-1831 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1831 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3201 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3200 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3200 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 + inet/filter/limit-3200 -m limit --limit 1/second -j LOG + inet/filter/limit-3200 -j ACCEPT + inet/filter/logdrop-1832 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1832 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1832 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3200 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3200 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 + inet6/filter/limit-3200 -m limit --limit 1/second -j LOG + inet6/filter/limit-3200 -j ACCEPT + inet6/filter/logdrop-1832 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1832 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3202 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3201 + inet/filter/limit-3201 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 + inet/filter/limit-3201 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1833 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1833 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1833 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3201 + inet6/filter/limit-3201 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 + inet6/filter/limit-3201 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1833 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1833 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3203 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3202 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3202 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 + inet/filter/limit-3202 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3202 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3202 -j ACCEPT + inet/filter/logdrop-1834 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1834 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1834 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3202 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3202 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 + inet6/filter/limit-3202 -j TEE --gateway fc00::2 + inet6/filter/limit-3202 -j ACCEPT + inet6/filter/logdrop-1834 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1834 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3204 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3203 + inet/filter/limit-3203 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 + inet/filter/limit-3203 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3203 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1835 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1835 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1835 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3203 + inet6/filter/limit-3203 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 + inet6/filter/limit-3203 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1835 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1835 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3205 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3204 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3204 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 + inet/filter/limit-3204 -j ACCEPT + inet/filter/logdrop-1836 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1836 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1836 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3204 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3204 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 + inet6/filter/limit-3204 -j ACCEPT + inet6/filter/logdrop-1836 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1836 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3206 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 + inet/filter/logdrop-1837 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1837 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1837 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 + inet6/filter/logdrop-1837 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1837 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3207 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3206 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3206 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 + inet/filter/limit-3206 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3206 -j ACCEPT + inet/filter/logdrop-1838 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1838 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1838 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3206 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3206 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 + inet6/filter/limit-3206 -j ACCEPT + inet6/filter/logdrop-1838 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1838 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3208 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3207 + inet/filter/limit-3207 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 + inet/filter/limit-3207 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1839 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-1839 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1839 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3207 + inet6/filter/limit-3207 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 + inet6/filter/logdrop-1839 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1839 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3209 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3208 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3208 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3210 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3209 + inet/filter/limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3209 + inet6/filter/limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3211 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3210 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3210 -m limit --limit 1/second -j LOG + inet/filter/limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3210 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3210 -m limit --limit 1/second -j LOG + inet6/filter/limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3212 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3211 + inet/filter/limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3211 + inet6/filter/limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3213 {"flow-limit":{"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3212 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3212 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3212 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3212 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3212 -j TEE --gateway fc00::2 + inet6/filter/limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3214 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3213 + inet/filter/limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3213 + inet6/filter/limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3215 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3214 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3214 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3216 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3215 + inet/filter/limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3215 + inet6/filter/limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3217 {"flow-limit":{"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3216 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3216 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3216 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3218 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3217 + inet/filter/limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3217 + inet6/filter/limit-3217 -m recent --name limit-3217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3219 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3218 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3218 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3220 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3219 + inet/filter/limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3219 + inet6/filter/limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3221 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3220 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3220 -m limit --limit 1/second -j LOG + inet/filter/limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3220 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3220 -m limit --limit 1/second -j LOG + inet6/filter/limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3222 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3221 + inet/filter/limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3221 + inet6/filter/limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3223 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3222 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3222 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3222 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3222 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3222 -j TEE --gateway fc00::2 + inet6/filter/limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3224 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3223 + inet/filter/limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3223 + inet6/filter/limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3225 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3224 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3224 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3226 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3225 + inet/filter/limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3225 + inet6/filter/limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3227 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3226 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3226 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3226 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3228 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3227 + inet/filter/limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3227 + inet6/filter/limit-3227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3229 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3228 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3228 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3228 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3228 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3228 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3230 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3231 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3230 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3230 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3230 -m limit --limit 1/second -j LOG + inet/filter/limit-3230 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3230 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3230 -m limit --limit 1/second -j LOG + inet6/filter/limit-3230 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3232 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3231 + inet/filter/limit-3231 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3231 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3231 + inet6/filter/limit-3231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3231 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3233 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3232 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3232 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3232 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3232 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3232 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3232 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3232 -j TEE --gateway fc00::2 + inet6/filter/limit-3232 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3234 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3233 + inet/filter/limit-3233 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3233 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3233 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3233 + inet6/filter/limit-3233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3233 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3235 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3234 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3234 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3234 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3234 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3236 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3237 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3236 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3236 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3236 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3236 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3236 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1839 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none"} +Filter 3238 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1838 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1838 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1838 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1838 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-884 - inet/filter/logdrop-884 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-884 -j DROP - inet6/filter/FORWARD -j limit-1838 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1838 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1838 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1838 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-884 - inet6/filter/logdrop-884 -j DROP + inet/filter/INPUT -i eth0 -j limit-3237 + inet/filter/limit-3237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3237 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3237 + inet6/filter/limit-3237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1840 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none"} +Filter 3239 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1839 - inet/filter/INPUT -j limit-1839 - inet/filter/OUTPUT -j limit-1839 - inet/filter/limit-1839 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-885 - inet/filter/logdrop-885 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-885 -j DROP - inet6/filter/FORWARD -j limit-1839 - inet6/filter/INPUT -j limit-1839 - inet6/filter/OUTPUT -j limit-1839 - inet6/filter/limit-1839 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-885 - inet6/filter/logdrop-885 -j DROP + inet/filter/INPUT -i eth0 -j limit-3238 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3238 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1841 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} +Filter 3240 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1840 - inet/filter/FORWARD -j logaccept-final-145 - inet/filter/INPUT -j limit-1840 - inet/filter/INPUT -j logaccept-final-145 - inet/filter/OUTPUT -j limit-1840 - inet/filter/OUTPUT -j logaccept-final-145 - inet/filter/limit-1840 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-886 - inet/filter/logaccept-final-145 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-145 -j ACCEPT - inet/filter/logdrop-886 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-886 -j DROP - inet6/filter/FORWARD -j limit-1840 - inet6/filter/FORWARD -j logaccept-final-145 - inet6/filter/INPUT -j limit-1840 - inet6/filter/INPUT -j logaccept-final-145 - inet6/filter/OUTPUT -j limit-1840 - inet6/filter/OUTPUT -j logaccept-final-145 - inet6/filter/limit-1840 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-886 - inet6/filter/logaccept-final-145 -j ACCEPT - inet6/filter/logdrop-886 -j DROP + inet/filter/INPUT -i eth0 -j limit-3239 + inet/filter/limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3239 + inet6/filter/limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1842 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} +Filter 3241 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1841 - inet/filter/INPUT -j limit-1841 - inet/filter/OUTPUT -j limit-1841 - inet/filter/limit-1841 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-887 - inet/filter/limit-1841 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-887 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-887 -j DROP - inet6/filter/FORWARD -j limit-1841 - inet6/filter/INPUT -j limit-1841 - inet6/filter/OUTPUT -j limit-1841 - inet6/filter/limit-1841 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-887 - inet6/filter/logdrop-887 -j DROP + inet/filter/INPUT -i eth0 -j limit-3240 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3240 -m limit --limit 1/second -j LOG + inet/filter/limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3240 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3240 -m limit --limit 1/second -j LOG + inet6/filter/limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1843 {"flow-limit":150} +Filter 3242 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1842 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1842 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1842 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1842 -j RETURN - inet/filter/limit-1842 -m limit --limit 1/second -j LOG - inet/filter/limit-1842 -j DROP - inet6/filter/FORWARD -j limit-1842 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1842 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1842 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1842 -j RETURN - inet6/filter/limit-1842 -m limit --limit 1/second -j LOG - inet6/filter/limit-1842 -j DROP - -Filter 1844 {"action":"pass","flow-limit":150} -(filter-limit) - inet/filter/FORWARD -j limit-1843 - inet/filter/INPUT -j limit-1843 - inet/filter/OUTPUT -j limit-1843 - inet/filter/limit-1843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1843 -j RETURN - inet/filter/limit-1843 -m limit --limit 1/second -j LOG - inet/filter/limit-1843 -j DROP - inet6/filter/FORWARD -j limit-1843 - inet6/filter/INPUT -j limit-1843 - inet6/filter/OUTPUT -j limit-1843 - inet6/filter/limit-1843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1843 -j RETURN - inet6/filter/limit-1843 -m limit --limit 1/second -j LOG - inet6/filter/limit-1843 -j DROP - -Filter 1845 {"flow-limit":150,"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1844 - inet/filter/FORWARD -j logaccept-final-146 - inet/filter/INPUT -j limit-1844 - inet/filter/INPUT -j logaccept-final-146 - inet/filter/OUTPUT -j limit-1844 - inet/filter/OUTPUT -j logaccept-final-146 - inet/filter/limit-1844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1844 -j RETURN - inet/filter/limit-1844 -m limit --limit 1/second -j LOG - inet/filter/limit-1844 -j DROP - inet/filter/logaccept-final-146 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-146 -j ACCEPT - inet6/filter/FORWARD -j limit-1844 - inet6/filter/FORWARD -j logaccept-final-146 - inet6/filter/INPUT -j limit-1844 - inet6/filter/INPUT -j logaccept-final-146 - inet6/filter/OUTPUT -j limit-1844 - inet6/filter/OUTPUT -j logaccept-final-146 - inet6/filter/limit-1844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1844 -j RETURN - inet6/filter/limit-1844 -m limit --limit 1/second -j LOG - inet6/filter/limit-1844 -j DROP - inet6/filter/logaccept-final-146 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-146 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3241 + inet/filter/limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3241 + inet6/filter/limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1846 {"flow-limit":150,"log":"none"} +Filter 3243 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1845 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1845 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1845 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1845 -j RETURN - inet/filter/limit-1845 -m limit --limit 1/second -j LOG - inet/filter/limit-1845 -j DROP - inet6/filter/FORWARD -j limit-1845 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1845 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1845 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1845 -j RETURN - inet6/filter/limit-1845 -m limit --limit 1/second -j LOG - inet6/filter/limit-1845 -j DROP + inet/filter/INPUT -i eth0 -j limit-3242 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3242 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3242 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3242 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3242 -j TEE --gateway fc00::2 + inet6/filter/limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1847 {"flow-limit":150,"log":"ulog"} +Filter 3244 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1846 - inet/filter/FORWARD -j logaccept-final-147 - inet/filter/INPUT -j limit-1846 - inet/filter/INPUT -j logaccept-final-147 - inet/filter/OUTPUT -j limit-1846 - inet/filter/OUTPUT -j logaccept-final-147 - inet/filter/limit-1846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1846 -j RETURN - inet/filter/limit-1846 -m limit --limit 1/second -j LOG - inet/filter/limit-1846 -j DROP - inet/filter/logaccept-final-147 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-147 -j ACCEPT - inet6/filter/FORWARD -j limit-1846 - inet6/filter/FORWARD -j logaccept-final-147 - inet6/filter/INPUT -j limit-1846 - inet6/filter/INPUT -j logaccept-final-147 - inet6/filter/OUTPUT -j limit-1846 - inet6/filter/OUTPUT -j logaccept-final-147 - inet6/filter/limit-1846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1846 -j RETURN - inet6/filter/limit-1846 -m limit --limit 1/second -j LOG - inet6/filter/limit-1846 -j DROP - inet6/filter/logaccept-final-147 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3243 + inet/filter/limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3243 + inet6/filter/limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1848 {"flow-limit":{"count":150,"log":false}} +Filter 3245 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1847 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1847 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1847 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1847 -j RETURN - inet/filter/limit-1847 -j DROP - inet6/filter/FORWARD -j limit-1847 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1847 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1847 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1847 -j RETURN - inet6/filter/limit-1847 -j DROP + inet/filter/INPUT -i eth0 -j limit-3244 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3244 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1849 {"action":"pass","flow-limit":{"count":150,"log":false}} +Filter 3246 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1848 - inet/filter/INPUT -j limit-1848 - inet/filter/OUTPUT -j limit-1848 - inet/filter/limit-1848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1848 -j RETURN - inet/filter/limit-1848 -j DROP - inet6/filter/FORWARD -j limit-1848 - inet6/filter/INPUT -j limit-1848 - inet6/filter/OUTPUT -j limit-1848 - inet6/filter/limit-1848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1848 -j RETURN - inet6/filter/limit-1848 -j DROP + inet/filter/INPUT -i eth0 -j limit-3245 + inet/filter/limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3245 + inet6/filter/limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1850 {"flow-limit":{"count":150,"log":false},"log":true} +Filter 3247 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1849 - inet/filter/FORWARD -j logaccept-final-148 - inet/filter/INPUT -j limit-1849 - inet/filter/INPUT -j logaccept-final-148 - inet/filter/OUTPUT -j limit-1849 - inet/filter/OUTPUT -j logaccept-final-148 - inet/filter/limit-1849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1849 -j RETURN - inet/filter/limit-1849 -j DROP - inet/filter/logaccept-final-148 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-148 -j ACCEPT - inet6/filter/FORWARD -j limit-1849 - inet6/filter/FORWARD -j logaccept-final-148 - inet6/filter/INPUT -j limit-1849 - inet6/filter/INPUT -j logaccept-final-148 - inet6/filter/OUTPUT -j limit-1849 - inet6/filter/OUTPUT -j logaccept-final-148 - inet6/filter/limit-1849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1849 -j RETURN - inet6/filter/limit-1849 -j DROP - inet6/filter/logaccept-final-148 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-148 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3246 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3246 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3246 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1851 {"flow-limit":{"count":150,"log":false},"log":"none"} +Filter 3248 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1850 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1850 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1850 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1850 -j RETURN - inet/filter/limit-1850 -j DROP - inet6/filter/FORWARD -j limit-1850 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1850 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1850 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1850 -j RETURN - inet6/filter/limit-1850 -j DROP + inet/filter/INPUT -i eth0 -j limit-3247 + inet/filter/limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3247 + inet6/filter/limit-3247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1852 {"flow-limit":{"count":150,"log":false},"log":"ulog"} +Filter 3249 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1851 - inet/filter/FORWARD -j logaccept-final-149 - inet/filter/INPUT -j limit-1851 - inet/filter/INPUT -j logaccept-final-149 - inet/filter/OUTPUT -j limit-1851 - inet/filter/OUTPUT -j logaccept-final-149 - inet/filter/limit-1851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1851 -j RETURN - inet/filter/limit-1851 -j DROP - inet/filter/logaccept-final-149 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-149 -j ACCEPT - inet6/filter/FORWARD -j limit-1851 - inet6/filter/FORWARD -j logaccept-final-149 - inet6/filter/INPUT -j limit-1851 - inet6/filter/INPUT -j logaccept-final-149 - inet6/filter/OUTPUT -j limit-1851 - inet6/filter/OUTPUT -j logaccept-final-149 - inet6/filter/limit-1851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1851 -j RETURN - inet6/filter/limit-1851 -j DROP - inet6/filter/logaccept-final-149 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3248 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3248 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3248 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3248 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1853 {"flow-limit":{"count":150}} +Filter 3250 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1852 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1852 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1852 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1852 -j RETURN - inet/filter/limit-1852 -m limit --limit 1/second -j LOG - inet/filter/limit-1852 -j DROP - inet6/filter/FORWARD -j limit-1852 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1852 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1852 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1852 -j RETURN - inet6/filter/limit-1852 -m limit --limit 1/second -j LOG - inet6/filter/limit-1852 -j DROP - -Filter 1854 {"action":"pass","flow-limit":{"count":150}} -(filter-limit) - inet/filter/FORWARD -j limit-1853 - inet/filter/INPUT -j limit-1853 - inet/filter/OUTPUT -j limit-1853 - inet/filter/limit-1853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1853 -j RETURN - inet/filter/limit-1853 -m limit --limit 1/second -j LOG - inet/filter/limit-1853 -j DROP - inet6/filter/FORWARD -j limit-1853 - inet6/filter/INPUT -j limit-1853 - inet6/filter/OUTPUT -j limit-1853 - inet6/filter/limit-1853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1853 -j RETURN - inet6/filter/limit-1853 -m limit --limit 1/second -j LOG - inet6/filter/limit-1853 -j DROP - -Filter 1855 {"flow-limit":{"count":150},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1854 - inet/filter/FORWARD -j logaccept-final-150 - inet/filter/INPUT -j limit-1854 - inet/filter/INPUT -j logaccept-final-150 - inet/filter/OUTPUT -j limit-1854 - inet/filter/OUTPUT -j logaccept-final-150 - inet/filter/limit-1854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1854 -j RETURN - inet/filter/limit-1854 -m limit --limit 1/second -j LOG - inet/filter/limit-1854 -j DROP - inet/filter/logaccept-final-150 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-150 -j ACCEPT - inet6/filter/FORWARD -j limit-1854 - inet6/filter/FORWARD -j logaccept-final-150 - inet6/filter/INPUT -j limit-1854 - inet6/filter/INPUT -j logaccept-final-150 - inet6/filter/OUTPUT -j limit-1854 - inet6/filter/OUTPUT -j logaccept-final-150 - inet6/filter/limit-1854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1854 -j RETURN - inet6/filter/limit-1854 -m limit --limit 1/second -j LOG - inet6/filter/limit-1854 -j DROP - inet6/filter/logaccept-final-150 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-150 -j ACCEPT + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1856 {"flow-limit":{"count":150},"log":"none"} +Filter 3251 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1855 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1855 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1855 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1855 -j RETURN - inet/filter/limit-1855 -m limit --limit 1/second -j LOG - inet/filter/limit-1855 -j DROP - inet6/filter/FORWARD -j limit-1855 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1855 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1855 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1855 -j RETURN - inet6/filter/limit-1855 -m limit --limit 1/second -j LOG - inet6/filter/limit-1855 -j DROP + inet/filter/INPUT -i eth0 -j limit-3250 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3250 -m limit --limit 1/second -j LOG + inet/filter/limit-3250 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3250 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3250 -m limit --limit 1/second -j LOG + inet6/filter/limit-3250 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1857 {"flow-limit":{"count":150},"log":"ulog"} +Filter 3252 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1856 - inet/filter/FORWARD -j logaccept-final-151 - inet/filter/INPUT -j limit-1856 - inet/filter/INPUT -j logaccept-final-151 - inet/filter/OUTPUT -j limit-1856 - inet/filter/OUTPUT -j logaccept-final-151 - inet/filter/limit-1856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1856 -j RETURN - inet/filter/limit-1856 -m limit --limit 1/second -j LOG - inet/filter/limit-1856 -j DROP - inet/filter/logaccept-final-151 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-151 -j ACCEPT - inet6/filter/FORWARD -j limit-1856 - inet6/filter/FORWARD -j logaccept-final-151 - inet6/filter/INPUT -j limit-1856 - inet6/filter/INPUT -j logaccept-final-151 - inet6/filter/OUTPUT -j limit-1856 - inet6/filter/OUTPUT -j logaccept-final-151 - inet6/filter/limit-1856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1856 -j RETURN - inet6/filter/limit-1856 -m limit --limit 1/second -j LOG - inet6/filter/limit-1856 -j DROP - inet6/filter/logaccept-final-151 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3251 + inet/filter/limit-3251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3251 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3251 + inet6/filter/limit-3251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3251 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1858 {"flow-limit":{"count":150,"log":"none"}} +Filter 3253 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1857 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1857 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1857 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1857 -j RETURN - inet/filter/limit-1857 -j DROP - inet6/filter/FORWARD -j limit-1857 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1857 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1857 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1857 -j RETURN - inet6/filter/limit-1857 -j DROP + inet/filter/INPUT -i eth0 -j limit-3252 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3252 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3252 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3252 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3252 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3252 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3252 -j TEE --gateway fc00::2 + inet6/filter/limit-3252 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1859 {"action":"pass","flow-limit":{"count":150,"log":"none"}} +Filter 3254 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1858 - inet/filter/INPUT -j limit-1858 - inet/filter/OUTPUT -j limit-1858 - inet/filter/limit-1858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1858 -j RETURN - inet/filter/limit-1858 -j DROP - inet6/filter/FORWARD -j limit-1858 - inet6/filter/INPUT -j limit-1858 - inet6/filter/OUTPUT -j limit-1858 - inet6/filter/limit-1858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1858 -j RETURN - inet6/filter/limit-1858 -j DROP + inet/filter/INPUT -i eth0 -j limit-3253 + inet/filter/limit-3253 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3253 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3253 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3253 + inet6/filter/limit-3253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3253 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1860 {"flow-limit":{"count":150,"log":"none"},"log":true} +Filter 3255 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1859 - inet/filter/FORWARD -j logaccept-final-152 - inet/filter/INPUT -j limit-1859 - inet/filter/INPUT -j logaccept-final-152 - inet/filter/OUTPUT -j limit-1859 - inet/filter/OUTPUT -j logaccept-final-152 - inet/filter/limit-1859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1859 -j RETURN - inet/filter/limit-1859 -j DROP - inet/filter/logaccept-final-152 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-152 -j ACCEPT - inet6/filter/FORWARD -j limit-1859 - inet6/filter/FORWARD -j logaccept-final-152 - inet6/filter/INPUT -j limit-1859 - inet6/filter/INPUT -j logaccept-final-152 - inet6/filter/OUTPUT -j limit-1859 - inet6/filter/OUTPUT -j logaccept-final-152 - inet6/filter/limit-1859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1859 -j RETURN - inet6/filter/limit-1859 -j DROP - inet6/filter/logaccept-final-152 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-152 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3254 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3254 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3254 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3254 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3254 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1861 {"flow-limit":{"count":150,"log":"none"},"log":"none"} +Filter 3256 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1860 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1860 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1860 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1860 -j RETURN - inet/filter/limit-1860 -j DROP - inet6/filter/FORWARD -j limit-1860 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1860 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1860 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1860 -j RETURN - inet6/filter/limit-1860 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1862 {"flow-limit":{"count":150,"log":"none"},"log":"ulog"} +Filter 3257 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1861 - inet/filter/FORWARD -j logaccept-final-153 - inet/filter/INPUT -j limit-1861 - inet/filter/INPUT -j logaccept-final-153 - inet/filter/OUTPUT -j limit-1861 - inet/filter/OUTPUT -j logaccept-final-153 - inet/filter/limit-1861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1861 -j RETURN - inet/filter/limit-1861 -j DROP - inet/filter/logaccept-final-153 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-153 -j ACCEPT - inet6/filter/FORWARD -j limit-1861 - inet6/filter/FORWARD -j logaccept-final-153 - inet6/filter/INPUT -j limit-1861 - inet6/filter/INPUT -j logaccept-final-153 - inet6/filter/OUTPUT -j limit-1861 - inet6/filter/OUTPUT -j logaccept-final-153 - inet6/filter/limit-1861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1861 -j RETURN - inet6/filter/limit-1861 -j DROP - inet6/filter/logaccept-final-153 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3256 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3256 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3256 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3256 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3256 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3256 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3256 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1863 {"flow-limit":{"count":150,"log":"ulog"}} +Filter 3258 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1862 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1862 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1862 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1862 -j RETURN - inet/filter/limit-1862 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1862 -j DROP - inet6/filter/FORWARD -j limit-1862 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1862 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1862 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1862 -j RETURN - inet6/filter/limit-1862 -j DROP - -Filter 1864 {"action":"pass","flow-limit":{"count":150,"log":"ulog"}} -(filter-limit) - inet/filter/FORWARD -j limit-1863 - inet/filter/INPUT -j limit-1863 - inet/filter/OUTPUT -j limit-1863 - inet/filter/limit-1863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1863 -j RETURN - inet/filter/limit-1863 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1863 -j DROP - inet6/filter/FORWARD -j limit-1863 - inet6/filter/INPUT -j limit-1863 - inet6/filter/OUTPUT -j limit-1863 - inet6/filter/limit-1863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1863 -j RETURN - inet6/filter/limit-1863 -j DROP - -Filter 1865 {"flow-limit":{"count":150,"log":"ulog"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1864 - inet/filter/FORWARD -j logaccept-final-154 - inet/filter/INPUT -j limit-1864 - inet/filter/INPUT -j logaccept-final-154 - inet/filter/OUTPUT -j limit-1864 - inet/filter/OUTPUT -j logaccept-final-154 - inet/filter/limit-1864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1864 -j RETURN - inet/filter/limit-1864 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1864 -j DROP - inet/filter/logaccept-final-154 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-154 -j ACCEPT - inet6/filter/FORWARD -j limit-1864 - inet6/filter/FORWARD -j logaccept-final-154 - inet6/filter/INPUT -j limit-1864 - inet6/filter/INPUT -j logaccept-final-154 - inet6/filter/OUTPUT -j limit-1864 - inet6/filter/OUTPUT -j logaccept-final-154 - inet6/filter/limit-1864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1864 -j RETURN - inet6/filter/limit-1864 -j DROP - inet6/filter/logaccept-final-154 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-154 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3257 + inet/filter/limit-3257 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3257 -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3257 + inet6/filter/limit-3257 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1866 {"flow-limit":{"count":150,"log":"ulog"},"log":"none"} +Filter 3259 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1865 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1865 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1865 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1865 -j RETURN - inet/filter/limit-1865 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1865 -j DROP - inet6/filter/FORWARD -j limit-1865 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1865 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1865 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1865 -j RETURN - inet6/filter/limit-1865 -j DROP + inet/filter/INPUT -i eth0 -j limit-3258 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3258 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3258 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3258 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1867 {"flow-limit":{"count":150,"log":"ulog"},"log":"ulog"} +Filter 3260 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1866 - inet/filter/FORWARD -j logaccept-final-155 - inet/filter/INPUT -j limit-1866 - inet/filter/INPUT -j logaccept-final-155 - inet/filter/OUTPUT -j limit-1866 - inet/filter/OUTPUT -j logaccept-final-155 - inet/filter/limit-1866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1866 -j RETURN - inet/filter/limit-1866 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1866 -j DROP - inet/filter/logaccept-final-155 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-155 -j ACCEPT - inet6/filter/FORWARD -j limit-1866 - inet6/filter/FORWARD -j logaccept-final-155 - inet6/filter/INPUT -j limit-1866 - inet6/filter/INPUT -j logaccept-final-155 - inet6/filter/OUTPUT -j limit-1866 - inet6/filter/OUTPUT -j logaccept-final-155 - inet6/filter/limit-1866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1866 -j RETURN - inet6/filter/limit-1866 -j DROP - inet6/filter/logaccept-final-155 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3259 + inet/filter/limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3259 + inet6/filter/limit-3259 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3259 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1868 {"flow-limit":{"count":150,"interval":5,"log":false}} +Filter 3261 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1867 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1867 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1867 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1867 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1867 -j RETURN - inet/filter/limit-1867 -j DROP - inet6/filter/FORWARD -j limit-1867 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1867 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1867 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1867 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1867 -j RETURN - inet6/filter/limit-1867 -j DROP + inet/filter/INPUT -i eth0 -j limit-3260 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3260 -m limit --limit 1/second -j LOG + inet/filter/limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3260 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3260 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3260 -m limit --limit 1/second -j LOG + inet6/filter/limit-3260 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1869 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} +Filter 3262 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1868 - inet/filter/INPUT -j limit-1868 - inet/filter/OUTPUT -j limit-1868 - inet/filter/limit-1868 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1868 -j RETURN - inet/filter/limit-1868 -j DROP - inet6/filter/FORWARD -j limit-1868 - inet6/filter/INPUT -j limit-1868 - inet6/filter/OUTPUT -j limit-1868 - inet6/filter/limit-1868 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1868 -j RETURN - inet6/filter/limit-1868 -j DROP + inet/filter/INPUT -i eth0 -j limit-3261 + inet/filter/limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3261 + inet6/filter/limit-3261 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3261 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1870 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} +Filter 3263 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1869 - inet/filter/FORWARD -j logaccept-final-156 - inet/filter/INPUT -j limit-1869 - inet/filter/INPUT -j logaccept-final-156 - inet/filter/OUTPUT -j limit-1869 - inet/filter/OUTPUT -j logaccept-final-156 - inet/filter/limit-1869 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1869 -j RETURN - inet/filter/limit-1869 -j DROP - inet/filter/logaccept-final-156 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-156 -j ACCEPT - inet6/filter/FORWARD -j limit-1869 - inet6/filter/FORWARD -j logaccept-final-156 - inet6/filter/INPUT -j limit-1869 - inet6/filter/INPUT -j logaccept-final-156 - inet6/filter/OUTPUT -j limit-1869 - inet6/filter/OUTPUT -j logaccept-final-156 - inet6/filter/limit-1869 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1869 -j RETURN - inet6/filter/limit-1869 -j DROP - inet6/filter/logaccept-final-156 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-156 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3262 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3262 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3262 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3262 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3262 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3262 -j TEE --gateway fc00::2 + inet6/filter/limit-3262 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1871 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} +Filter 3264 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1870 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1870 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1870 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1870 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1870 -j RETURN - inet/filter/limit-1870 -j DROP - inet6/filter/FORWARD -j limit-1870 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1870 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1870 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1870 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1870 -j RETURN - inet6/filter/limit-1870 -j DROP + inet/filter/INPUT -i eth0 -j limit-3263 + inet/filter/limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3263 + inet6/filter/limit-3263 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3263 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1872 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"ulog"} +Filter 3265 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1871 - inet/filter/FORWARD -j logaccept-final-157 - inet/filter/INPUT -j limit-1871 - inet/filter/INPUT -j logaccept-final-157 - inet/filter/OUTPUT -j limit-1871 - inet/filter/OUTPUT -j logaccept-final-157 - inet/filter/limit-1871 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1871 -j RETURN - inet/filter/limit-1871 -j DROP - inet/filter/logaccept-final-157 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-157 -j ACCEPT - inet6/filter/FORWARD -j limit-1871 - inet6/filter/FORWARD -j logaccept-final-157 - inet6/filter/INPUT -j limit-1871 - inet6/filter/INPUT -j logaccept-final-157 - inet6/filter/OUTPUT -j limit-1871 - inet6/filter/OUTPUT -j logaccept-final-157 - inet6/filter/limit-1871 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1871 -j RETURN - inet6/filter/limit-1871 -j DROP - inet6/filter/logaccept-final-157 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3264 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3264 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3264 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3264 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1873 {"flow-limit":{"count":150,"interval":5}} +Filter 3266 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1872 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1872 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1872 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1872 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1872 -j RETURN - inet/filter/limit-1872 -m limit --limit 1/second -j LOG - inet/filter/limit-1872 -j DROP - inet6/filter/FORWARD -j limit-1872 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1872 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1872 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1872 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1872 -j RETURN - inet6/filter/limit-1872 -m limit --limit 1/second -j LOG - inet6/filter/limit-1872 -j DROP - -Filter 1874 {"action":"pass","flow-limit":{"count":150,"interval":5}} -(filter-limit) - inet/filter/FORWARD -j limit-1873 - inet/filter/INPUT -j limit-1873 - inet/filter/OUTPUT -j limit-1873 - inet/filter/limit-1873 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1873 -j RETURN - inet/filter/limit-1873 -m limit --limit 1/second -j LOG - inet/filter/limit-1873 -j DROP - inet6/filter/FORWARD -j limit-1873 - inet6/filter/INPUT -j limit-1873 - inet6/filter/OUTPUT -j limit-1873 - inet6/filter/limit-1873 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1873 -j RETURN - inet6/filter/limit-1873 -m limit --limit 1/second -j LOG - inet6/filter/limit-1873 -j DROP - -Filter 1875 {"flow-limit":{"count":150,"interval":5},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1874 - inet/filter/FORWARD -j logaccept-final-158 - inet/filter/INPUT -j limit-1874 - inet/filter/INPUT -j logaccept-final-158 - inet/filter/OUTPUT -j limit-1874 - inet/filter/OUTPUT -j logaccept-final-158 - inet/filter/limit-1874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1874 -j RETURN - inet/filter/limit-1874 -m limit --limit 1/second -j LOG - inet/filter/limit-1874 -j DROP - inet/filter/logaccept-final-158 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-158 -j ACCEPT - inet6/filter/FORWARD -j limit-1874 - inet6/filter/FORWARD -j logaccept-final-158 - inet6/filter/INPUT -j limit-1874 - inet6/filter/INPUT -j logaccept-final-158 - inet6/filter/OUTPUT -j limit-1874 - inet6/filter/OUTPUT -j logaccept-final-158 - inet6/filter/limit-1874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1874 -j RETURN - inet6/filter/limit-1874 -m limit --limit 1/second -j LOG - inet6/filter/limit-1874 -j DROP - inet6/filter/logaccept-final-158 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-158 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3265 + inet/filter/limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3265 + inet6/filter/limit-3265 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3265 -m recent --name user:C --rsource --mask fe00:: --set + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1876 {"flow-limit":{"count":150,"interval":5},"log":"none"} +Filter 3267 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1875 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1875 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1875 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1875 -j RETURN - inet/filter/limit-1875 -m limit --limit 1/second -j LOG - inet/filter/limit-1875 -j DROP - inet6/filter/FORWARD -j limit-1875 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1875 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1875 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1875 -j RETURN - inet6/filter/limit-1875 -m limit --limit 1/second -j LOG - inet6/filter/limit-1875 -j DROP + inet/filter/INPUT -i eth0 -j limit-3266 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3266 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3266 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3266 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3266 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1877 {"flow-limit":{"count":150,"interval":5},"log":"ulog"} +Filter 3268 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1876 - inet/filter/FORWARD -j logaccept-final-159 - inet/filter/INPUT -j limit-1876 - inet/filter/INPUT -j logaccept-final-159 - inet/filter/OUTPUT -j limit-1876 - inet/filter/OUTPUT -j logaccept-final-159 - inet/filter/limit-1876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1876 -j RETURN - inet/filter/limit-1876 -m limit --limit 1/second -j LOG - inet/filter/limit-1876 -j DROP - inet/filter/logaccept-final-159 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-159 -j ACCEPT - inet6/filter/FORWARD -j limit-1876 - inet6/filter/FORWARD -j logaccept-final-159 - inet6/filter/INPUT -j limit-1876 - inet6/filter/INPUT -j logaccept-final-159 - inet6/filter/OUTPUT -j limit-1876 - inet6/filter/OUTPUT -j logaccept-final-159 - inet6/filter/limit-1876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1876 -j RETURN - inet6/filter/limit-1876 -m limit --limit 1/second -j LOG - inet6/filter/limit-1876 -j DROP - inet6/filter/logaccept-final-159 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3267 + inet/filter/limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3267 + inet6/filter/limit-3267 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1878 {"flow-limit":{"count":150,"interval":5,"log":"none"}} +Filter 3269 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1877 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1877 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1877 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1877 -j RETURN - inet/filter/limit-1877 -j DROP - inet6/filter/FORWARD -j limit-1877 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1877 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1877 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1877 -j RETURN - inet6/filter/limit-1877 -j DROP + inet/filter/INPUT -i eth0 -j limit-3268 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3268 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3268 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3268 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3268 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3268 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1879 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} +Filter 3270 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1878 - inet/filter/INPUT -j limit-1878 - inet/filter/OUTPUT -j limit-1878 - inet/filter/limit-1878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1878 -j RETURN - inet/filter/limit-1878 -j DROP - inet6/filter/FORWARD -j limit-1878 - inet6/filter/INPUT -j limit-1878 - inet6/filter/OUTPUT -j limit-1878 - inet6/filter/limit-1878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1878 -j RETURN - inet6/filter/limit-1878 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1880 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} +Filter 3271 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1879 - inet/filter/FORWARD -j logaccept-final-160 - inet/filter/INPUT -j limit-1879 - inet/filter/INPUT -j logaccept-final-160 - inet/filter/OUTPUT -j limit-1879 - inet/filter/OUTPUT -j logaccept-final-160 - inet/filter/limit-1879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1879 -j RETURN - inet/filter/limit-1879 -j DROP - inet/filter/logaccept-final-160 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-160 -j ACCEPT - inet6/filter/FORWARD -j limit-1879 - inet6/filter/FORWARD -j logaccept-final-160 - inet6/filter/INPUT -j limit-1879 - inet6/filter/INPUT -j logaccept-final-160 - inet6/filter/OUTPUT -j limit-1879 - inet6/filter/OUTPUT -j logaccept-final-160 - inet6/filter/limit-1879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1879 -j RETURN - inet6/filter/limit-1879 -j DROP - inet6/filter/logaccept-final-160 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-160 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3270 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3270 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3270 -m limit --limit 1/second -j LOG + inet/filter/limit-3270 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3270 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3270 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3270 -m limit --limit 1/second -j LOG + inet6/filter/limit-3270 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1881 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} +Filter 3272 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1880 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1880 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1880 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1880 -j RETURN - inet/filter/limit-1880 -j DROP - inet6/filter/FORWARD -j limit-1880 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1880 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1880 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1880 -j RETURN - inet6/filter/limit-1880 -j DROP + inet/filter/INPUT -i eth0 -j limit-3271 + inet/filter/limit-3271 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3271 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3271 + inet6/filter/limit-3271 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3271 -m limit --limit 1/second -j LOG + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1882 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"ulog"} +Filter 3273 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1881 - inet/filter/FORWARD -j logaccept-final-161 - inet/filter/INPUT -j limit-1881 - inet/filter/INPUT -j logaccept-final-161 - inet/filter/OUTPUT -j limit-1881 - inet/filter/OUTPUT -j logaccept-final-161 - inet/filter/limit-1881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1881 -j RETURN - inet/filter/limit-1881 -j DROP - inet/filter/logaccept-final-161 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-161 -j ACCEPT - inet6/filter/FORWARD -j limit-1881 - inet6/filter/FORWARD -j logaccept-final-161 - inet6/filter/INPUT -j limit-1881 - inet6/filter/INPUT -j logaccept-final-161 - inet6/filter/OUTPUT -j limit-1881 - inet6/filter/OUTPUT -j logaccept-final-161 - inet6/filter/limit-1881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1881 -j RETURN - inet6/filter/limit-1881 -j DROP - inet6/filter/logaccept-final-161 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3272 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3272 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3272 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3272 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3272 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3272 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3272 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3272 -j TEE --gateway fc00::2 + inet6/filter/limit-3272 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1883 {"flow-limit":{"count":150,"interval":5,"log":"ulog"}} +Filter 3274 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1882 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1882 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1882 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1882 -j RETURN - inet/filter/limit-1882 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1882 -j DROP - inet6/filter/FORWARD -j limit-1882 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1882 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1882 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1882 -j RETURN - inet6/filter/limit-1882 -j DROP - -Filter 1884 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"ulog"}} -(filter-limit) - inet/filter/FORWARD -j limit-1883 - inet/filter/INPUT -j limit-1883 - inet/filter/OUTPUT -j limit-1883 - inet/filter/limit-1883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1883 -j RETURN - inet/filter/limit-1883 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1883 -j DROP - inet6/filter/FORWARD -j limit-1883 - inet6/filter/INPUT -j limit-1883 - inet6/filter/OUTPUT -j limit-1883 - inet6/filter/limit-1883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1883 -j RETURN - inet6/filter/limit-1883 -j DROP - -Filter 1885 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-1884 - inet/filter/FORWARD -j logaccept-final-162 - inet/filter/INPUT -j limit-1884 - inet/filter/INPUT -j logaccept-final-162 - inet/filter/OUTPUT -j limit-1884 - inet/filter/OUTPUT -j logaccept-final-162 - inet/filter/limit-1884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1884 -j RETURN - inet/filter/limit-1884 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1884 -j DROP - inet/filter/logaccept-final-162 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-162 -j ACCEPT - inet6/filter/FORWARD -j limit-1884 - inet6/filter/FORWARD -j logaccept-final-162 - inet6/filter/INPUT -j limit-1884 - inet6/filter/INPUT -j logaccept-final-162 - inet6/filter/OUTPUT -j limit-1884 - inet6/filter/OUTPUT -j logaccept-final-162 - inet6/filter/limit-1884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1884 -j RETURN - inet6/filter/limit-1884 -j DROP - inet6/filter/logaccept-final-162 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-162 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-3273 + inet/filter/limit-3273 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3273 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3273 -j TEE --gateway 10.0.0.2 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3273 + inet6/filter/limit-3273 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3273 -j TEE --gateway fc00::2 + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1886 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"log":"none"} +Filter 3275 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1885 - inet/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j limit-1885 - inet/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j limit-1885 - inet/filter/OUTPUT -j ACCEPT - inet/filter/limit-1885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1885 -j RETURN - inet/filter/limit-1885 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1885 -j DROP - inet6/filter/FORWARD -j limit-1885 - inet6/filter/FORWARD -j ACCEPT - inet6/filter/INPUT -j limit-1885 - inet6/filter/INPUT -j ACCEPT - inet6/filter/OUTPUT -j limit-1885 - inet6/filter/OUTPUT -j ACCEPT - inet6/filter/limit-1885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1885 -j RETURN - inet6/filter/limit-1885 -j DROP + inet/filter/INPUT -i eth0 -j limit-3274 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3274 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3274 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3274 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3274 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3274 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1887 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"log":"ulog"} +Filter 3276 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-1886 - inet/filter/FORWARD -j logaccept-final-163 - inet/filter/INPUT -j limit-1886 - inet/filter/INPUT -j logaccept-final-163 - inet/filter/OUTPUT -j limit-1886 - inet/filter/OUTPUT -j logaccept-final-163 - inet/filter/limit-1886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1886 -j RETURN - inet/filter/limit-1886 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1886 -j DROP - inet/filter/logaccept-final-163 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-final-163 -j ACCEPT - inet6/filter/FORWARD -j limit-1886 - inet6/filter/FORWARD -j logaccept-final-163 - inet6/filter/INPUT -j limit-1886 - inet6/filter/INPUT -j logaccept-final-163 - inet6/filter/OUTPUT -j limit-1886 - inet6/filter/OUTPUT -j logaccept-final-163 - inet6/filter/limit-1886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1886 -j RETURN - inet6/filter/limit-1886 -j DROP - inet6/filter/logaccept-final-163 -j ACCEPT + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1888 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +Filter 3277 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1887 + inet/filter/INPUT -i eth0 -j limit-3276 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1887 -m recent --name limit-1887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-888 - inet/filter/limit-1887 -m recent --name limit-1887 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-888 -m limit --limit 1/second -j LOG - inet/filter/logdrop-888 -j DROP + inet/filter/limit-3276 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3276 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3276 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1887 + inet6/filter/INPUT -i eth0 -j limit-3276 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1887 -m recent --name limit-1887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-888 - inet6/filter/limit-1887 -m recent --name limit-1887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-888 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-888 -j DROP + inet6/filter/limit-3276 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3276 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1889 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +Filter 3278 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1888 - inet/filter/limit-1888 -m recent --name limit-1888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-889 - inet/filter/limit-1888 -m recent --name limit-1888 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-889 -m limit --limit 1/second -j LOG - inet/filter/logdrop-889 -j DROP + inet/filter/INPUT -i eth0 -j limit-3277 + inet/filter/limit-3277 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3277 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1888 - inet6/filter/limit-1888 -m recent --name limit-1888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-889 - inet6/filter/limit-1888 -m recent --name limit-1888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-889 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-889 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3277 + inet6/filter/limit-3277 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1890 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3279 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1889 + inet/filter/INPUT -i eth0 -j limit-3278 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1889 -m recent --name limit-1889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-890 - inet/filter/limit-1889 -m limit --limit 1/second -j LOG - inet/filter/limit-1889 -m recent --name limit-1889 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-890 -m limit --limit 1/second -j LOG - inet/filter/logdrop-890 -j DROP + inet/filter/limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1889 + inet6/filter/INPUT -i eth0 -j limit-3278 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1889 -m recent --name limit-1889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-890 - inet6/filter/limit-1889 -m limit --limit 1/second -j LOG - inet6/filter/limit-1889 -m recent --name limit-1889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-890 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-890 -j DROP + inet6/filter/limit-3278 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3278 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1891 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3280 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1890 - inet/filter/limit-1890 -m recent --name limit-1890 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-891 - inet/filter/limit-1890 -m recent --name limit-1890 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-891 -m limit --limit 1/second -j LOG - inet/filter/logdrop-891 -j DROP + inet/filter/INPUT -i eth0 -j limit-3279 + inet/filter/limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1890 - inet6/filter/limit-1890 -m recent --name limit-1890 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-891 - inet6/filter/limit-1890 -m recent --name limit-1890 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-891 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-891 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3279 + inet6/filter/limit-3279 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3279 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1892 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3281 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1891 + inet/filter/INPUT -i eth0 -j limit-3280 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1891 -m recent --name limit-1891 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-892 - inet/filter/limit-1891 -m recent --name limit-1891 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-892 -m limit --limit 1/second -j LOG - inet/filter/logdrop-892 -j DROP + inet/filter/limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3280 -m limit --limit 1/second -j LOG + inet/filter/limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1891 + inet6/filter/INPUT -i eth0 -j limit-3280 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1891 -m recent --name limit-1891 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-892 - inet6/filter/limit-1891 -m recent --name limit-1891 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-892 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-892 -j DROP + inet6/filter/limit-3280 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3280 -m limit --limit 1/second -j LOG + inet6/filter/limit-3280 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1893 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3282 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1892 - inet/filter/limit-1892 -m recent --name limit-1892 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-893 - inet/filter/limit-1892 -m recent --name limit-1892 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-893 -m limit --limit 1/second -j LOG - inet/filter/logdrop-893 -j DROP + inet/filter/INPUT -i eth0 -j limit-3281 + inet/filter/limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1892 - inet6/filter/limit-1892 -m recent --name limit-1892 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-893 - inet6/filter/limit-1892 -m recent --name limit-1892 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-893 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-893 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3281 + inet6/filter/limit-3281 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3281 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1894 {"flow-limit":1,"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3283 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1893 + inet/filter/INPUT -i eth0 -j limit-3282 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1893 -m recent --name limit-1893 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-894 - inet/filter/limit-1893 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1893 -m recent --name limit-1893 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-894 -m limit --limit 1/second -j LOG - inet/filter/logdrop-894 -j DROP + inet/filter/limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3282 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3282 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1893 + inet6/filter/INPUT -i eth0 -j limit-3282 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1893 -m recent --name limit-1893 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-894 - inet6/filter/limit-1893 -m recent --name limit-1893 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-894 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-894 -j DROP + inet6/filter/limit-3282 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3282 -j TEE --gateway fc00::2 + inet6/filter/limit-3282 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1895 {"action":"pass","flow-limit":1,"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3284 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1894 - inet/filter/limit-1894 -m recent --name limit-1894 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-895 - inet/filter/limit-1894 -m recent --name limit-1894 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-895 -m limit --limit 1/second -j LOG - inet/filter/logdrop-895 -j DROP + inet/filter/INPUT -i eth0 -j limit-3283 + inet/filter/limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1894 - inet6/filter/limit-1894 -m recent --name limit-1894 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-895 - inet6/filter/logdrop-895 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-895 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3283 + inet6/filter/limit-3283 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3283 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1896 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3285 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1895 + inet/filter/INPUT -i eth0 -j limit-3284 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1895 -m recent --name limit-1895 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1895 -m recent --name limit-1895 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1895 + inet6/filter/INPUT -i eth0 -j limit-3284 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1895 -m recent --name limit-1895 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1895 -m recent --name limit-1895 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1897 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3286 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1896 - inet/filter/limit-1896 -m recent --name limit-1896 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1896 -m recent --name limit-1896 --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3285 + inet/filter/limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1896 - inet6/filter/limit-1896 -m recent --name limit-1896 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1896 -m recent --name limit-1896 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3285 + inet6/filter/limit-3285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3285 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1898 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3287 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1897 + inet/filter/INPUT -i eth0 -j limit-3286 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1897 -m recent --name limit-1897 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1897 -m limit --limit 1/second -j LOG - inet/filter/limit-1897 -m recent --name limit-1897 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3286 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1897 + inet6/filter/INPUT -i eth0 -j limit-3286 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1897 -m recent --name limit-1897 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1897 -m limit --limit 1/second -j LOG - inet6/filter/limit-1897 -m recent --name limit-1897 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1899 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3288 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1898 - inet/filter/limit-1898 -m recent --name limit-1898 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1898 -m recent --name limit-1898 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3287 + inet/filter/limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1898 - inet6/filter/limit-1898 -m recent --name limit-1898 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1898 -m recent --name limit-1898 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3287 + inet6/filter/limit-3287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1900 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3289 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1899 + inet/filter/INPUT -i eth0 -j limit-3288 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1899 -m recent --name limit-1899 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1899 -m recent --name limit-1899 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3288 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3288 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1899 + inet6/filter/INPUT -i eth0 -j limit-3288 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1899 -m recent --name limit-1899 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1899 -m recent --name limit-1899 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3288 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3288 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1901 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3290 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1900 - inet/filter/limit-1900 -m recent --name limit-1900 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1900 -m recent --name limit-1900 --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1900 - inet6/filter/limit-1900 -m recent --name limit-1900 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1900 -m recent --name limit-1900 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1902 {"flow-limit":{"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3291 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1901 + inet/filter/INPUT -i eth0 -j limit-3290 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1901 -m recent --name limit-1901 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1901 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1901 -m recent --name limit-1901 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3290 -m limit --limit 1/second -j LOG + inet/filter/limit-3290 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1901 + inet6/filter/INPUT -i eth0 -j limit-3290 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1901 -m recent --name limit-1901 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1901 -m recent --name limit-1901 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3290 -m limit --limit 1/second -j LOG + inet6/filter/limit-3290 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1903 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3292 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1902 - inet/filter/limit-1902 -m recent --name limit-1902 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1902 -m recent --name limit-1902 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3291 + inet/filter/limit-3291 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3291 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1902 - inet6/filter/limit-1902 -m recent --name limit-1902 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3291 + inet6/filter/limit-3291 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3291 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1904 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3293 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1903 + inet/filter/INPUT -i eth0 -j limit-3292 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1903 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1903 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3292 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3292 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3292 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1903 + inet6/filter/INPUT -i eth0 -j limit-3292 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1903 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1903 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3292 -j TEE --gateway fc00::2 + inet6/filter/limit-3292 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1905 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3294 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1904 - inet/filter/limit-1904 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1904 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3293 + inet/filter/limit-3293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3293 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3293 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1904 - inet6/filter/limit-1904 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1904 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3293 + inet6/filter/limit-3293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3293 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1906 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3295 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1905 + inet/filter/INPUT -i eth0 -j limit-3294 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1905 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1905 -m limit --limit 1/second -j LOG - inet/filter/limit-1905 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3294 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1905 + inet6/filter/INPUT -i eth0 -j limit-3294 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1905 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1905 -m limit --limit 1/second -j LOG - inet6/filter/limit-1905 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3294 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1907 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3296 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1906 - inet/filter/limit-1906 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1906 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1906 - inet6/filter/limit-1906 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1906 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1908 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3297 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1907 + inet/filter/INPUT -i eth0 -j limit-3296 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1907 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1907 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3296 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3296 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3296 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1907 + inet6/filter/INPUT -i eth0 -j limit-3296 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1907 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1907 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3296 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-3296 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1909 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3298 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1908 - inet/filter/limit-1908 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1908 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3297 + inet/filter/limit-3297 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-3297 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1908 - inet6/filter/limit-1908 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1908 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3297 + inet6/filter/limit-3297 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1910 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3299 {"flow-limit":{"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1909 + inet/filter/INPUT -i eth0 -j limit-3298 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1909 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1909 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1909 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1840 + inet/filter/limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1840 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1840 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1909 + inet6/filter/INPUT -i eth0 -j limit-3298 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1909 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1909 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1840 + inet6/filter/limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1840 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1911 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3300 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1910 - inet/filter/limit-1910 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1910 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3299 + inet/filter/limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1841 + inet/filter/limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1841 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1841 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1910 - inet6/filter/limit-1910 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3299 + inet6/filter/limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1841 + inet6/filter/limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1841 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1912 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3301 {"flow-limit":{"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1911 + inet/filter/INPUT -i eth0 -j limit-3300 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1911 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1911 -j ACCEPT + inet/filter/limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1842 + inet/filter/limit-3300 -m limit --limit 1/second -j LOG + inet/filter/limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1842 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1842 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1911 + inet6/filter/INPUT -i eth0 -j limit-3300 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1911 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1911 -j ACCEPT + inet6/filter/limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1842 + inet6/filter/limit-3300 -m limit --limit 1/second -j LOG + inet6/filter/limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1842 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1913 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3302 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3301 + inet/filter/limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1843 + inet/filter/limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1843 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1843 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3301 + inet6/filter/limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1843 + inet6/filter/limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1843 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1914 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3303 {"flow-limit":{"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1913 + inet/filter/INPUT -i eth0 -j limit-3302 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1913 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1913 -m limit --limit 1/second -j LOG - inet/filter/limit-1913 -j ACCEPT + inet/filter/limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1844 + inet/filter/limit-3302 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3302 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1844 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1844 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1913 + inet6/filter/INPUT -i eth0 -j limit-3302 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1913 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1913 -m limit --limit 1/second -j LOG - inet6/filter/limit-1913 -j ACCEPT + inet6/filter/limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1844 + inet6/filter/limit-3302 -j TEE --gateway fc00::2 + inet6/filter/limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1844 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1915 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3304 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1914 - inet/filter/limit-1914 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1914 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3303 + inet/filter/limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1845 + inet/filter/limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1845 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1845 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1914 - inet6/filter/limit-1914 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1914 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3303 + inet6/filter/limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1845 + inet6/filter/limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1845 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1916 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3305 {"flow-limit":{"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1915 + inet/filter/INPUT -i eth0 -j limit-3304 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1915 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1915 -j ACCEPT + inet/filter/limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1846 + inet/filter/limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1846 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1846 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1915 + inet6/filter/INPUT -i eth0 -j limit-3304 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1915 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1915 -j ACCEPT + inet6/filter/limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1846 + inet6/filter/limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1846 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1917 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3306 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3305 + inet/filter/limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1847 + inet/filter/limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1847 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1847 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3305 + inet6/filter/limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1847 + inet6/filter/limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1847 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1918 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3307 {"flow-limit":{"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1917 + inet/filter/INPUT -i eth0 -j limit-3306 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1917 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1917 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1917 -j ACCEPT + inet/filter/limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1848 + inet/filter/limit-3306 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1848 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1848 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1917 + inet6/filter/INPUT -i eth0 -j limit-3306 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1917 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1917 -j ACCEPT + inet6/filter/limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1848 + inet6/filter/limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1848 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1919 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3308 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1918 - inet/filter/limit-1918 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1918 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3307 + inet/filter/limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1849 + inet/filter/limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1849 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1849 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1918 - inet6/filter/limit-1918 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3307 + inet6/filter/limit-3307 -m recent --name limit-3307 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1849 + inet6/filter/logdrop-1849 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1920 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3309 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1919 + inet/filter/INPUT -i eth0 -j limit-3308 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1919 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1919 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1850 + inet/filter/limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1850 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1850 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1919 + inet6/filter/INPUT -i eth0 -j limit-3308 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1919 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1919 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1850 + inet6/filter/limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1850 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1921 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3310 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1920 - inet/filter/limit-1920 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1920 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3309 + inet/filter/limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1851 + inet/filter/limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1851 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1851 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1920 - inet6/filter/limit-1920 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1920 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3309 + inet6/filter/limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1851 + inet6/filter/limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1851 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1922 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3311 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1921 + inet/filter/INPUT -i eth0 -j limit-3310 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1921 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1921 -m limit --limit 1/second -j LOG - inet/filter/limit-1921 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1852 + inet/filter/limit-3310 -m limit --limit 1/second -j LOG + inet/filter/limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1852 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1852 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1921 + inet6/filter/INPUT -i eth0 -j limit-3310 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1921 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1921 -m limit --limit 1/second -j LOG - inet6/filter/limit-1921 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1852 + inet6/filter/limit-3310 -m limit --limit 1/second -j LOG + inet6/filter/limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1852 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1923 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3312 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1922 - inet/filter/limit-1922 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1922 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3311 + inet/filter/limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1853 + inet/filter/limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1853 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1853 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1922 - inet6/filter/limit-1922 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1922 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3311 + inet6/filter/limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1853 + inet6/filter/limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1853 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1924 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3313 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1923 + inet/filter/INPUT -i eth0 -j limit-3312 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1923 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1923 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1854 + inet/filter/limit-3312 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3312 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1854 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1854 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1923 + inet6/filter/INPUT -i eth0 -j limit-3312 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1923 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1923 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1854 + inet6/filter/limit-3312 -j TEE --gateway fc00::2 + inet6/filter/limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1854 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1925 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3314 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1924 - inet/filter/limit-1924 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1924 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3313 + inet/filter/limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1855 + inet/filter/limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1855 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1855 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1924 - inet6/filter/limit-1924 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1924 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3313 + inet6/filter/limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1855 + inet6/filter/limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1855 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1926 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3315 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1925 + inet/filter/INPUT -i eth0 -j limit-3314 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1925 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1925 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1925 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1856 + inet/filter/limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1856 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1856 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1925 + inet6/filter/INPUT -i eth0 -j limit-3314 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1925 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1925 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1856 + inet6/filter/limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1856 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1927 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3316 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1926 - inet/filter/limit-1926 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1926 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3315 + inet/filter/limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1857 + inet/filter/limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1857 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1857 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1926 - inet6/filter/limit-1926 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3315 + inet6/filter/limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1857 + inet6/filter/limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1857 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1928 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3317 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1927 + inet/filter/INPUT -i eth0 -j limit-3316 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1927 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1927 -j ACCEPT + inet/filter/limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1858 + inet/filter/limit-3316 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1858 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1858 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1927 + inet6/filter/INPUT -i eth0 -j limit-3316 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1927 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1927 -j ACCEPT + inet6/filter/limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1858 + inet6/filter/limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1858 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1929 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3318 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3317 + inet/filter/limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1859 + inet/filter/limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1859 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1859 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3317 + inet6/filter/limit-3317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1859 + inet6/filter/logdrop-1859 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1930 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3319 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1929 + inet/filter/INPUT -i eth0 -j limit-3318 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1929 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1929 -m limit --limit 1/second -j LOG - inet/filter/limit-1929 -j ACCEPT + inet/filter/limit-3318 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 + inet/filter/limit-3318 -j ACCEPT + inet/filter/logdrop-1860 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1860 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1929 + inet6/filter/INPUT -i eth0 -j limit-3318 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1929 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1929 -m limit --limit 1/second -j LOG - inet6/filter/limit-1929 -j ACCEPT + inet6/filter/limit-3318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 + inet6/filter/limit-3318 -j ACCEPT + inet6/filter/logdrop-1860 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1931 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3320 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1930 - inet/filter/limit-1930 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1930 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 + inet/filter/logdrop-1861 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1861 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1930 - inet6/filter/limit-1930 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1930 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 + inet6/filter/logdrop-1861 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1932 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3321 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1931 + inet/filter/INPUT -i eth0 -j limit-3320 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1931 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1931 -j ACCEPT + inet/filter/limit-3320 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 + inet/filter/limit-3320 -m limit --limit 1/second -j LOG + inet/filter/limit-3320 -j ACCEPT + inet/filter/logdrop-1862 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1862 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1931 + inet6/filter/INPUT -i eth0 -j limit-3320 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1931 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1931 -j ACCEPT + inet6/filter/limit-3320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 + inet6/filter/limit-3320 -m limit --limit 1/second -j LOG + inet6/filter/limit-3320 -j ACCEPT + inet6/filter/logdrop-1862 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1933 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3322 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3321 + inet/filter/limit-3321 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 + inet/filter/limit-3321 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1863 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1863 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3321 + inet6/filter/limit-3321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 + inet6/filter/limit-3321 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1863 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1934 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3323 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1933 + inet/filter/INPUT -i eth0 -j limit-3322 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1933 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1933 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1933 -j ACCEPT + inet/filter/limit-3322 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 + inet/filter/limit-3322 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3322 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3322 -j ACCEPT + inet/filter/logdrop-1864 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1864 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1933 + inet6/filter/INPUT -i eth0 -j limit-3322 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1933 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1933 -j ACCEPT + inet6/filter/limit-3322 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 + inet6/filter/limit-3322 -j TEE --gateway fc00::2 + inet6/filter/limit-3322 -j ACCEPT + inet6/filter/logdrop-1864 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1935 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3324 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1934 - inet/filter/limit-1934 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1934 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3323 + inet/filter/limit-3323 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 + inet/filter/limit-3323 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3323 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1865 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1865 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1934 - inet6/filter/limit-1934 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3323 + inet6/filter/limit-3323 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 + inet6/filter/limit-3323 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1865 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1936 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3325 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1935 + inet/filter/INPUT -i eth0 -j limit-3324 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1935 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1935 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3324 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 + inet/filter/limit-3324 -j ACCEPT + inet/filter/logdrop-1866 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1866 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1935 + inet6/filter/INPUT -i eth0 -j limit-3324 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1935 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1935 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3324 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 + inet6/filter/limit-3324 -j ACCEPT + inet6/filter/logdrop-1866 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1937 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3326 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1936 - inet/filter/limit-1936 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1936 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 + inet/filter/logdrop-1867 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1867 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1936 - inet6/filter/limit-1936 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1936 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 + inet6/filter/logdrop-1867 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1938 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3327 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1937 + inet/filter/INPUT -i eth0 -j limit-3326 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1937 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1937 -m limit --limit 1/second -j LOG - inet/filter/limit-1937 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3326 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 + inet/filter/limit-3326 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3326 -j ACCEPT + inet/filter/logdrop-1868 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1868 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1937 + inet6/filter/INPUT -i eth0 -j limit-3326 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1937 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1937 -m limit --limit 1/second -j LOG - inet6/filter/limit-1937 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3326 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 + inet6/filter/limit-3326 -j ACCEPT + inet6/filter/logdrop-1868 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1939 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3328 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1938 - inet/filter/limit-1938 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1938 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3327 + inet/filter/limit-3327 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 + inet/filter/limit-3327 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1869 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1869 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1938 - inet6/filter/limit-1938 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1938 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3327 + inet6/filter/limit-3327 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 + inet6/filter/logdrop-1869 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1940 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3329 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1939 + inet/filter/INPUT -i eth0 -j limit-3328 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1939 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1939 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1870 + inet/filter/limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1870 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1870 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1939 + inet6/filter/INPUT -i eth0 -j limit-3328 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1939 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1939 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1870 + inet6/filter/limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1870 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1941 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3330 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1940 - inet/filter/limit-1940 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1940 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3329 + inet/filter/limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1871 + inet/filter/limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1871 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1871 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1940 - inet6/filter/limit-1940 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1940 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3329 + inet6/filter/limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1871 + inet6/filter/limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1871 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1942 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3331 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1941 + inet/filter/INPUT -i eth0 -j limit-3330 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1941 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1941 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1941 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1872 + inet/filter/limit-3330 -m limit --limit 1/second -j LOG + inet/filter/limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1872 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1872 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1941 + inet6/filter/INPUT -i eth0 -j limit-3330 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1941 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1941 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1872 + inet6/filter/limit-3330 -m limit --limit 1/second -j LOG + inet6/filter/limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1872 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1943 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3332 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1942 - inet/filter/limit-1942 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1942 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3331 + inet/filter/limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1873 + inet/filter/limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1873 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1873 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1942 - inet6/filter/limit-1942 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3331 + inet6/filter/limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1873 + inet6/filter/limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1873 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1944 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3333 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1943 + inet/filter/INPUT -i eth0 -j limit-3332 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1943 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1943 -j ACCEPT + inet/filter/limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1874 + inet/filter/limit-3332 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3332 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1874 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1874 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1943 + inet6/filter/INPUT -i eth0 -j limit-3332 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1943 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1943 -j ACCEPT + inet6/filter/limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1874 + inet6/filter/limit-3332 -j TEE --gateway fc00::2 + inet6/filter/limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1874 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1945 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3334 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3333 + inet/filter/limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1875 + inet/filter/limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1875 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1875 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3333 + inet6/filter/limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1875 + inet6/filter/limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1875 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1946 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3335 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1945 + inet/filter/INPUT -i eth0 -j limit-3334 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1945 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1945 -m limit --limit 1/second -j LOG - inet/filter/limit-1945 -j ACCEPT + inet/filter/limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1876 + inet/filter/limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1876 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1876 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1945 + inet6/filter/INPUT -i eth0 -j limit-3334 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1945 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1945 -m limit --limit 1/second -j LOG - inet6/filter/limit-1945 -j ACCEPT + inet6/filter/limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1876 + inet6/filter/limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1876 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1947 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3336 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1946 - inet/filter/limit-1946 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1946 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3335 + inet/filter/limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1877 + inet/filter/limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1877 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1877 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1946 - inet6/filter/limit-1946 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1946 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3335 + inet6/filter/limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1877 + inet6/filter/limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1877 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1948 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3337 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1947 + inet/filter/INPUT -i eth0 -j limit-3336 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1947 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1947 -j ACCEPT + inet/filter/limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1878 + inet/filter/limit-3336 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1878 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1878 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1947 + inet6/filter/INPUT -i eth0 -j limit-3336 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1947 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1947 -j ACCEPT + inet6/filter/limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1878 + inet6/filter/limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1878 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1949 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3338 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3337 + inet/filter/limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1879 + inet/filter/limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1879 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1879 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3337 + inet6/filter/limit-3337 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1879 + inet6/filter/logdrop-1879 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1950 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3339 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1949 + inet/filter/INPUT -i eth0 -j limit-3338 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1949 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1949 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1949 -j ACCEPT + inet/filter/limit-3338 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 + inet/filter/limit-3338 -j ACCEPT + inet/filter/logdrop-1880 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1880 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1949 + inet6/filter/INPUT -i eth0 -j limit-3338 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1949 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1949 -j ACCEPT + inet6/filter/limit-3338 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 + inet6/filter/limit-3338 -j ACCEPT + inet6/filter/logdrop-1880 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1951 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3340 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1950 - inet/filter/limit-1950 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1950 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 + inet/filter/logdrop-1881 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1881 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1950 - inet6/filter/limit-1950 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 + inet6/filter/logdrop-1881 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1952 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3341 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1951 + inet/filter/INPUT -i eth0 -j limit-3340 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1951 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1951 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3340 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 + inet/filter/limit-3340 -m limit --limit 1/second -j LOG + inet/filter/limit-3340 -j ACCEPT + inet/filter/logdrop-1882 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1882 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1951 + inet6/filter/INPUT -i eth0 -j limit-3340 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1951 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1951 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3340 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 + inet6/filter/limit-3340 -m limit --limit 1/second -j LOG + inet6/filter/limit-3340 -j ACCEPT + inet6/filter/logdrop-1882 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1953 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3342 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1952 - inet/filter/limit-1952 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1952 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3341 + inet/filter/limit-3341 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 + inet/filter/limit-3341 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1883 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1883 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1952 - inet6/filter/limit-1952 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1952 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3341 + inet6/filter/limit-3341 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 + inet6/filter/limit-3341 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1883 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1954 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3343 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1953 + inet/filter/INPUT -i eth0 -j limit-3342 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1953 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1953 -m limit --limit 1/second -j LOG - inet/filter/limit-1953 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3342 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 + inet/filter/limit-3342 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3342 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3342 -j ACCEPT + inet/filter/logdrop-1884 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1884 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1953 + inet6/filter/INPUT -i eth0 -j limit-3342 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1953 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1953 -m limit --limit 1/second -j LOG - inet6/filter/limit-1953 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3342 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 + inet6/filter/limit-3342 -j TEE --gateway fc00::2 + inet6/filter/limit-3342 -j ACCEPT + inet6/filter/logdrop-1884 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1955 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3344 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1954 - inet/filter/limit-1954 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1954 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3343 + inet/filter/limit-3343 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 + inet/filter/limit-3343 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3343 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1885 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1885 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1954 - inet6/filter/limit-1954 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1954 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3343 + inet6/filter/limit-3343 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 + inet6/filter/limit-3343 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1885 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1956 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3345 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1955 + inet/filter/INPUT -i eth0 -j limit-3344 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1955 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1955 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3344 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 + inet/filter/limit-3344 -j ACCEPT + inet/filter/logdrop-1886 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1886 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1955 + inet6/filter/INPUT -i eth0 -j limit-3344 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1955 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1955 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3344 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 + inet6/filter/limit-3344 -j ACCEPT + inet6/filter/logdrop-1886 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1957 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3346 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1956 - inet/filter/limit-1956 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1956 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 + inet/filter/logdrop-1887 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1887 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1956 - inet6/filter/limit-1956 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1956 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 + inet6/filter/logdrop-1887 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1958 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3347 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1957 + inet/filter/INPUT -i eth0 -j limit-3346 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1957 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1957 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1957 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3346 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 + inet/filter/limit-3346 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3346 -j ACCEPT + inet/filter/logdrop-1888 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1888 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1957 + inet6/filter/INPUT -i eth0 -j limit-3346 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1957 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1957 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3346 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 + inet6/filter/limit-3346 -j ACCEPT + inet6/filter/logdrop-1888 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1959 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3348 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1958 - inet/filter/limit-1958 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1958 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3347 + inet/filter/limit-3347 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 + inet/filter/limit-3347 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1889 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1889 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1958 - inet6/filter/limit-1958 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3347 + inet6/filter/limit-3347 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 + inet6/filter/logdrop-1889 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1960 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3349 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1959 + inet/filter/INPUT -i eth0 -j limit-3348 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1959 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1959 -j ACCEPT + inet/filter/limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1890 + inet/filter/limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1890 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1890 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1959 + inet6/filter/INPUT -i eth0 -j limit-3348 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1959 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1959 -j ACCEPT + inet6/filter/limit-3348 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1890 + inet6/filter/limit-3348 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1890 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1961 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3350 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3349 + inet/filter/limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1891 + inet/filter/limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1891 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1891 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3349 + inet6/filter/limit-3349 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1891 + inet6/filter/limit-3349 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1891 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1962 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3351 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1961 + inet/filter/INPUT -i eth0 -j limit-3350 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1961 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1961 -m limit --limit 1/second -j LOG - inet/filter/limit-1961 -j ACCEPT + inet/filter/limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1892 + inet/filter/limit-3350 -m limit --limit 1/second -j LOG + inet/filter/limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1892 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1892 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1961 + inet6/filter/INPUT -i eth0 -j limit-3350 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1961 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1961 -m limit --limit 1/second -j LOG - inet6/filter/limit-1961 -j ACCEPT + inet6/filter/limit-3350 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1892 + inet6/filter/limit-3350 -m limit --limit 1/second -j LOG + inet6/filter/limit-3350 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1892 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1963 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3352 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1962 - inet/filter/limit-1962 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1962 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3351 + inet/filter/limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1893 + inet/filter/limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1893 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1893 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1962 - inet6/filter/limit-1962 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1962 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3351 + inet6/filter/limit-3351 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1893 + inet6/filter/limit-3351 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1893 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1964 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3353 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1963 + inet/filter/INPUT -i eth0 -j limit-3352 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1963 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1963 -j ACCEPT + inet/filter/limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1894 + inet/filter/limit-3352 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3352 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1894 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1894 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1963 + inet6/filter/INPUT -i eth0 -j limit-3352 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1963 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1963 -j ACCEPT + inet6/filter/limit-3352 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1894 + inet6/filter/limit-3352 -j TEE --gateway fc00::2 + inet6/filter/limit-3352 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1894 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1965 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3354 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3353 + inet/filter/limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1895 + inet/filter/limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1895 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1895 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3353 + inet6/filter/limit-3353 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1895 + inet6/filter/limit-3353 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1895 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1966 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3355 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1965 + inet/filter/INPUT -i eth0 -j limit-3354 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1965 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1965 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1965 -j ACCEPT + inet/filter/limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1896 + inet/filter/limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1896 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1896 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1965 + inet6/filter/INPUT -i eth0 -j limit-3354 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1965 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-1965 -j ACCEPT + inet6/filter/limit-3354 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1896 + inet6/filter/limit-3354 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1896 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1967 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3356 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1966 - inet/filter/limit-1966 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-1966 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3355 + inet/filter/limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1897 + inet/filter/limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1897 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1897 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1966 - inet6/filter/limit-1966 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3355 + inet6/filter/limit-3355 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1897 + inet6/filter/limit-3355 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1897 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1968 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +Filter 3357 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1967 + inet/filter/INPUT -i eth0 -j limit-3356 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-896 - inet/filter/limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-896 -m limit --limit 1/second -j LOG - inet/filter/logdrop-896 -j DROP + inet/filter/limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1898 + inet/filter/limit-3356 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1898 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1898 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1967 + inet6/filter/INPUT -i eth0 -j limit-3356 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-896 - inet6/filter/limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-896 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-896 -j DROP + inet6/filter/limit-3356 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1898 + inet6/filter/limit-3356 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1898 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1969 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +Filter 3358 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1968 - inet/filter/limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-897 - inet/filter/limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-897 -m limit --limit 1/second -j LOG - inet/filter/logdrop-897 -j DROP + inet/filter/INPUT -i eth0 -j limit-3357 + inet/filter/limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1899 + inet/filter/limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1899 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1899 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1968 - inet6/filter/limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-897 - inet6/filter/limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-897 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-897 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3357 + inet6/filter/limit-3357 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1899 + inet6/filter/logdrop-1899 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1970 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3359 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1969 + inet/filter/INPUT -i eth0 -j limit-3358 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-898 - inet/filter/limit-1969 -m limit --limit 1/second -j LOG - inet/filter/limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-898 -m limit --limit 1/second -j LOG - inet/filter/logdrop-898 -j DROP + inet/filter/limit-3358 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 + inet/filter/limit-3358 -j ACCEPT + inet/filter/logdrop-1900 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1900 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1969 + inet6/filter/INPUT -i eth0 -j limit-3358 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-898 - inet6/filter/limit-1969 -m limit --limit 1/second -j LOG - inet6/filter/limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-898 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-898 -j DROP + inet6/filter/limit-3358 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 + inet6/filter/limit-3358 -j ACCEPT + inet6/filter/logdrop-1900 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1971 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3360 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1970 - inet/filter/limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-899 - inet/filter/limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-899 -m limit --limit 1/second -j LOG - inet/filter/logdrop-899 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 + inet/filter/logdrop-1901 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1901 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1970 - inet6/filter/limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-899 - inet6/filter/limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-899 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-899 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 + inet6/filter/logdrop-1901 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1972 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3361 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1971 + inet/filter/INPUT -i eth0 -j limit-3360 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-900 - inet/filter/limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-900 -m limit --limit 1/second -j LOG - inet/filter/logdrop-900 -j DROP + inet/filter/limit-3360 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 + inet/filter/limit-3360 -m limit --limit 1/second -j LOG + inet/filter/limit-3360 -j ACCEPT + inet/filter/logdrop-1902 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1902 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1971 + inet6/filter/INPUT -i eth0 -j limit-3360 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1971 -m recent --name limit-1971 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-900 - inet6/filter/limit-1971 -m recent --name limit-1971 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-900 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-900 -j DROP + inet6/filter/limit-3360 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 + inet6/filter/limit-3360 -m limit --limit 1/second -j LOG + inet6/filter/limit-3360 -j ACCEPT + inet6/filter/logdrop-1902 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1973 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3362 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1972 - inet/filter/limit-1972 -m recent --name limit-1972 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-901 - inet/filter/limit-1972 -m recent --name limit-1972 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-901 -m limit --limit 1/second -j LOG - inet/filter/logdrop-901 -j DROP + inet/filter/INPUT -i eth0 -j limit-3361 + inet/filter/limit-3361 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 + inet/filter/limit-3361 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1903 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1903 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1972 - inet6/filter/limit-1972 -m recent --name limit-1972 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-901 - inet6/filter/limit-1972 -m recent --name limit-1972 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-901 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-901 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3361 + inet6/filter/limit-3361 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 + inet6/filter/limit-3361 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1903 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1974 {"flow-limit":{},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3363 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1973 + inet/filter/INPUT -i eth0 -j limit-3362 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1973 -m recent --name limit-1973 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-902 - inet/filter/limit-1973 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1973 -m recent --name limit-1973 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-902 -m limit --limit 1/second -j LOG - inet/filter/logdrop-902 -j DROP + inet/filter/limit-3362 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 + inet/filter/limit-3362 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3362 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3362 -j ACCEPT + inet/filter/logdrop-1904 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1904 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1973 + inet6/filter/INPUT -i eth0 -j limit-3362 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1973 -m recent --name limit-1973 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-902 - inet6/filter/limit-1973 -m recent --name limit-1973 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-902 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-902 -j DROP + inet6/filter/limit-3362 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 + inet6/filter/limit-3362 -j TEE --gateway fc00::2 + inet6/filter/limit-3362 -j ACCEPT + inet6/filter/logdrop-1904 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1975 {"action":"pass","flow-limit":{},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3364 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1974 - inet/filter/limit-1974 -m recent --name limit-1974 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-903 - inet/filter/limit-1974 -m recent --name limit-1974 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-903 -m limit --limit 1/second -j LOG - inet/filter/logdrop-903 -j DROP + inet/filter/INPUT -i eth0 -j limit-3363 + inet/filter/limit-3363 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 + inet/filter/limit-3363 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3363 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1905 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1905 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1974 - inet6/filter/limit-1974 -m recent --name limit-1974 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-903 - inet6/filter/logdrop-903 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-903 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3363 + inet6/filter/limit-3363 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 + inet6/filter/limit-3363 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1905 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1976 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3365 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1975 + inet/filter/INPUT -i eth0 -j limit-3364 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-904 - inet/filter/limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-904 -m limit --limit 1/second -j LOG - inet/filter/logdrop-904 -j DROP + inet/filter/limit-3364 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 + inet/filter/limit-3364 -j ACCEPT + inet/filter/logdrop-1906 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1906 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1975 + inet6/filter/INPUT -i eth0 -j limit-3364 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-904 - inet6/filter/limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-904 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-904 -j DROP + inet6/filter/limit-3364 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 + inet6/filter/limit-3364 -j ACCEPT + inet6/filter/logdrop-1906 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1977 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3366 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1976 - inet/filter/limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-905 - inet/filter/limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-905 -m limit --limit 1/second -j LOG - inet/filter/logdrop-905 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 + inet/filter/logdrop-1907 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1907 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1976 - inet6/filter/limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-905 - inet6/filter/limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-905 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-905 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 + inet6/filter/logdrop-1907 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1978 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3367 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1977 + inet/filter/INPUT -i eth0 -j limit-3366 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-906 - inet/filter/limit-1977 -m limit --limit 1/second -j LOG - inet/filter/limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-906 -m limit --limit 1/second -j LOG - inet/filter/logdrop-906 -j DROP + inet/filter/limit-3366 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 + inet/filter/limit-3366 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3366 -j ACCEPT + inet/filter/logdrop-1908 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1908 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1977 + inet6/filter/INPUT -i eth0 -j limit-3366 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-906 - inet6/filter/limit-1977 -m limit --limit 1/second -j LOG - inet6/filter/limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-906 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-906 -j DROP + inet6/filter/limit-3366 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 + inet6/filter/limit-3366 -j ACCEPT + inet6/filter/logdrop-1908 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1979 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3368 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1978 - inet/filter/limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-907 - inet/filter/limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-907 -m limit --limit 1/second -j LOG - inet/filter/logdrop-907 -j DROP + inet/filter/INPUT -i eth0 -j limit-3367 + inet/filter/limit-3367 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 + inet/filter/limit-3367 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1909 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1909 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1978 - inet6/filter/limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-907 - inet6/filter/limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-907 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-907 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3367 + inet6/filter/limit-3367 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 + inet6/filter/logdrop-1909 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1980 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3369 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1979 + inet/filter/INPUT -i eth0 -j limit-3368 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-908 - inet/filter/limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-908 -m limit --limit 1/second -j LOG - inet/filter/logdrop-908 -j DROP + inet/filter/limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1910 + inet/filter/limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1910 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1910 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1979 + inet6/filter/INPUT -i eth0 -j limit-3368 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-908 - inet6/filter/limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-908 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-908 -j DROP + inet6/filter/limit-3368 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1910 + inet6/filter/limit-3368 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1910 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1981 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3370 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1980 - inet/filter/limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-909 - inet/filter/limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-909 -m limit --limit 1/second -j LOG - inet/filter/logdrop-909 -j DROP + inet/filter/INPUT -i eth0 -j limit-3369 + inet/filter/limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1911 + inet/filter/limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1911 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1911 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1980 - inet6/filter/limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-909 - inet6/filter/limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-909 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-909 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3369 + inet6/filter/limit-3369 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1911 + inet6/filter/limit-3369 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1911 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1982 {"flow-limit":{"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3371 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1981 + inet/filter/INPUT -i eth0 -j limit-3370 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-910 - inet/filter/limit-1981 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-910 -m limit --limit 1/second -j LOG - inet/filter/logdrop-910 -j DROP + inet/filter/limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1912 + inet/filter/limit-3370 -m limit --limit 1/second -j LOG + inet/filter/limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1912 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1912 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1981 + inet6/filter/INPUT -i eth0 -j limit-3370 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1981 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-910 - inet6/filter/limit-1981 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-910 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-910 -j DROP + inet6/filter/limit-3370 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1912 + inet6/filter/limit-3370 -m limit --limit 1/second -j LOG + inet6/filter/limit-3370 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1912 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1983 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3372 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1982 - inet/filter/limit-1982 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-911 - inet/filter/limit-1982 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-911 -m limit --limit 1/second -j LOG - inet/filter/logdrop-911 -j DROP + inet/filter/INPUT -i eth0 -j limit-3371 + inet/filter/limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1913 + inet/filter/limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1913 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1913 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1982 - inet6/filter/limit-1982 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-911 - inet6/filter/logdrop-911 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-911 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3371 + inet6/filter/limit-3371 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1913 + inet6/filter/limit-3371 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1913 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1984 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3373 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1983 + inet/filter/INPUT -i eth0 -j limit-3372 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1983 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-912 - inet/filter/limit-1983 -j ACCEPT - inet/filter/logdrop-912 -m limit --limit 1/second -j LOG - inet/filter/logdrop-912 -j DROP + inet/filter/limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1914 + inet/filter/limit-3372 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3372 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1914 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1914 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1983 + inet6/filter/INPUT -i eth0 -j limit-3372 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1983 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-912 - inet6/filter/limit-1983 -j ACCEPT - inet6/filter/logdrop-912 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-912 -j DROP + inet6/filter/limit-3372 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1914 + inet6/filter/limit-3372 -j TEE --gateway fc00::2 + inet6/filter/limit-3372 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1914 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1985 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3374 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-913 - inet/filter/logdrop-913 -m limit --limit 1/second -j LOG - inet/filter/logdrop-913 -j DROP + inet/filter/INPUT -i eth0 -j limit-3373 + inet/filter/limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1915 + inet/filter/limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1915 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1915 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-913 - inet6/filter/logdrop-913 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-913 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3373 + inet6/filter/limit-3373 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1915 + inet6/filter/limit-3373 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1915 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1986 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3375 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1985 + inet/filter/INPUT -i eth0 -j limit-3374 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1985 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-914 - inet/filter/limit-1985 -m limit --limit 1/second -j LOG - inet/filter/limit-1985 -j ACCEPT - inet/filter/logdrop-914 -m limit --limit 1/second -j LOG - inet/filter/logdrop-914 -j DROP + inet/filter/limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1916 + inet/filter/limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1916 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1916 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1985 + inet6/filter/INPUT -i eth0 -j limit-3374 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1985 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-914 - inet6/filter/limit-1985 -m limit --limit 1/second -j LOG - inet6/filter/limit-1985 -j ACCEPT - inet6/filter/logdrop-914 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-914 -j DROP + inet6/filter/limit-3374 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1916 + inet6/filter/limit-3374 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1916 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1987 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3376 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1986 - inet/filter/limit-1986 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-915 - inet/filter/limit-1986 -m limit --limit 1/second -j LOG - inet/filter/logdrop-915 -m limit --limit 1/second -j LOG - inet/filter/logdrop-915 -j DROP + inet/filter/INPUT -i eth0 -j limit-3375 + inet/filter/limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1917 + inet/filter/limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-1917 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1917 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1986 - inet6/filter/limit-1986 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-915 - inet6/filter/limit-1986 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-915 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-915 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3375 + inet6/filter/limit-3375 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1917 + inet6/filter/limit-3375 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-1917 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1988 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3377 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1987 + inet/filter/INPUT -i eth0 -j limit-3376 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1987 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-916 - inet/filter/limit-1987 -j ACCEPT - inet/filter/logdrop-916 -m limit --limit 1/second -j LOG - inet/filter/logdrop-916 -j DROP + inet/filter/limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1918 + inet/filter/limit-3376 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1918 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1918 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1987 + inet6/filter/INPUT -i eth0 -j limit-3376 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1987 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-916 - inet6/filter/limit-1987 -j ACCEPT - inet6/filter/logdrop-916 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-916 -j DROP + inet6/filter/limit-3376 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1918 + inet6/filter/limit-3376 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1918 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1989 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3378 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-917 - inet/filter/logdrop-917 -m limit --limit 1/second -j LOG - inet/filter/logdrop-917 -j DROP + inet/filter/INPUT -i eth0 -j limit-3377 + inet/filter/limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1919 + inet/filter/limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1919 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1919 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-917 - inet6/filter/logdrop-917 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-917 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3377 + inet6/filter/limit-3377 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1919 + inet6/filter/logdrop-1919 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1990 {"flow-limit":{"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3379 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1989 + inet/filter/INPUT -i eth0 -j limit-3378 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1989 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-918 - inet/filter/limit-1989 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1989 -j ACCEPT - inet/filter/logdrop-918 -m limit --limit 1/second -j LOG - inet/filter/logdrop-918 -j DROP + inet/filter/limit-3378 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 + inet/filter/limit-3378 -j ACCEPT + inet/filter/logdrop-1920 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1920 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1989 + inet6/filter/INPUT -i eth0 -j limit-3378 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1989 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-918 - inet6/filter/limit-1989 -j ACCEPT - inet6/filter/logdrop-918 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-918 -j DROP + inet6/filter/limit-3378 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 + inet6/filter/limit-3378 -j ACCEPT + inet6/filter/logdrop-1920 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1991 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3380 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1990 - inet/filter/limit-1990 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-919 - inet/filter/limit-1990 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-919 -m limit --limit 1/second -j LOG - inet/filter/logdrop-919 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 + inet/filter/logdrop-1921 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1921 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1990 - inet6/filter/limit-1990 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-919 - inet6/filter/logdrop-919 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-919 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 + inet6/filter/logdrop-1921 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1992 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3381 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1991 + inet/filter/INPUT -i eth0 -j limit-3380 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1991 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-920 - inet/filter/limit-1991 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-920 -m limit --limit 1/second -j LOG - inet/filter/logdrop-920 -j DROP + inet/filter/limit-3380 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 + inet/filter/limit-3380 -m limit --limit 1/second -j LOG + inet/filter/limit-3380 -j ACCEPT + inet/filter/logdrop-1922 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1922 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1991 + inet6/filter/INPUT -i eth0 -j limit-3380 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1991 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-920 - inet6/filter/limit-1991 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-920 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-920 -j DROP + inet6/filter/limit-3380 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 + inet6/filter/limit-3380 -m limit --limit 1/second -j LOG + inet6/filter/limit-3380 -j ACCEPT + inet6/filter/logdrop-1922 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1993 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3382 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1992 - inet/filter/limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-921 - inet/filter/limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-921 -m limit --limit 1/second -j LOG - inet/filter/logdrop-921 -j DROP + inet/filter/INPUT -i eth0 -j limit-3381 + inet/filter/limit-3381 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 + inet/filter/limit-3381 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1923 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1923 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1992 - inet6/filter/limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-921 - inet6/filter/limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-921 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-921 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3381 + inet6/filter/limit-3381 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 + inet6/filter/limit-3381 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1923 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1994 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3383 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1993 + inet/filter/INPUT -i eth0 -j limit-3382 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-922 - inet/filter/limit-1993 -m limit --limit 1/second -j LOG - inet/filter/limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-922 -m limit --limit 1/second -j LOG - inet/filter/logdrop-922 -j DROP + inet/filter/limit-3382 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 + inet/filter/limit-3382 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3382 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3382 -j ACCEPT + inet/filter/logdrop-1924 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1924 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1993 + inet6/filter/INPUT -i eth0 -j limit-3382 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-922 - inet6/filter/limit-1993 -m limit --limit 1/second -j LOG - inet6/filter/limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-922 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-922 -j DROP + inet6/filter/limit-3382 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 + inet6/filter/limit-3382 -j TEE --gateway fc00::2 + inet6/filter/limit-3382 -j ACCEPT + inet6/filter/logdrop-1924 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1995 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3384 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1994 - inet/filter/limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-923 - inet/filter/limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-923 -m limit --limit 1/second -j LOG - inet/filter/logdrop-923 -j DROP + inet/filter/INPUT -i eth0 -j limit-3383 + inet/filter/limit-3383 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 + inet/filter/limit-3383 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3383 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1925 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1925 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1994 - inet6/filter/limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-923 - inet6/filter/limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-923 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-923 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3383 + inet6/filter/limit-3383 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 + inet6/filter/limit-3383 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1925 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1996 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3385 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1995 + inet/filter/INPUT -i eth0 -j limit-3384 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-924 - inet/filter/limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-924 -m limit --limit 1/second -j LOG - inet/filter/logdrop-924 -j DROP + inet/filter/limit-3384 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 + inet/filter/limit-3384 -j ACCEPT + inet/filter/logdrop-1926 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1926 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1995 + inet6/filter/INPUT -i eth0 -j limit-3384 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-924 - inet6/filter/limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-924 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-924 -j DROP + inet6/filter/limit-3384 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 + inet6/filter/limit-3384 -j ACCEPT + inet6/filter/logdrop-1926 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1997 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3386 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1996 - inet/filter/limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-925 - inet/filter/limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-925 -m limit --limit 1/second -j LOG - inet/filter/logdrop-925 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 + inet/filter/logdrop-1927 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1927 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1996 - inet6/filter/limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-925 - inet6/filter/limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-925 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-925 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 + inet6/filter/logdrop-1927 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1998 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3387 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1997 + inet/filter/INPUT -i eth0 -j limit-3386 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-926 - inet/filter/limit-1997 -m limit --limit 12/minute -j ULOG - inet/filter/limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-926 -m limit --limit 1/second -j LOG - inet/filter/logdrop-926 -j DROP + inet/filter/limit-3386 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 + inet/filter/limit-3386 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3386 -j ACCEPT + inet/filter/logdrop-1928 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1928 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1997 + inet6/filter/INPUT -i eth0 -j limit-3386 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-926 - inet6/filter/limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-926 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-926 -j DROP + inet6/filter/limit-3386 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 + inet6/filter/limit-3386 -j ACCEPT + inet6/filter/logdrop-1928 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1999 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3388 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1998 - inet/filter/limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-927 - inet/filter/limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-927 -m limit --limit 1/second -j LOG - inet/filter/logdrop-927 -j DROP + inet/filter/INPUT -i eth0 -j limit-3387 + inet/filter/limit-3387 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 + inet/filter/limit-3387 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1929 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1929 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1998 - inet6/filter/limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-927 - inet6/filter/logdrop-927 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-927 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3387 + inet6/filter/limit-3387 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 + inet6/filter/logdrop-1929 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2000 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3389 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-1999 + inet/filter/INPUT -i eth0 -j limit-3388 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-928 - inet/filter/limit-1999 -j ACCEPT - inet/filter/logdrop-928 -m limit --limit 1/second -j LOG - inet/filter/logdrop-928 -j DROP + inet/filter/limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-1999 + inet6/filter/INPUT -i eth0 -j limit-3388 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-928 - inet6/filter/limit-1999 -j ACCEPT - inet6/filter/logdrop-928 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-928 -j DROP + inet6/filter/limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2001 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3390 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-929 - inet/filter/logdrop-929 -m limit --limit 1/second -j LOG - inet/filter/logdrop-929 -j DROP + inet/filter/INPUT -i eth0 -j limit-3389 + inet/filter/limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-929 - inet6/filter/logdrop-929 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-929 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3389 + inet6/filter/limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2002 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3391 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2001 + inet/filter/INPUT -i eth0 -j limit-3390 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-930 - inet/filter/limit-2001 -m limit --limit 1/second -j LOG - inet/filter/limit-2001 -j ACCEPT - inet/filter/logdrop-930 -m limit --limit 1/second -j LOG - inet/filter/logdrop-930 -j DROP + inet/filter/limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3390 -m limit --limit 1/second -j LOG + inet/filter/limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2001 + inet6/filter/INPUT -i eth0 -j limit-3390 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2001 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-930 - inet6/filter/limit-2001 -m limit --limit 1/second -j LOG - inet6/filter/limit-2001 -j ACCEPT - inet6/filter/logdrop-930 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-930 -j DROP + inet6/filter/limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3390 -m limit --limit 1/second -j LOG + inet6/filter/limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2003 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3392 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2002 - inet/filter/limit-2002 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-931 - inet/filter/limit-2002 -m limit --limit 1/second -j LOG - inet/filter/logdrop-931 -m limit --limit 1/second -j LOG - inet/filter/logdrop-931 -j DROP + inet/filter/INPUT -i eth0 -j limit-3391 + inet/filter/limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2002 - inet6/filter/limit-2002 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-931 - inet6/filter/limit-2002 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-931 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-931 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3391 + inet6/filter/limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2004 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3393 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2003 + inet/filter/INPUT -i eth0 -j limit-3392 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2003 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-932 - inet/filter/limit-2003 -j ACCEPT - inet/filter/logdrop-932 -m limit --limit 1/second -j LOG - inet/filter/logdrop-932 -j DROP + inet/filter/limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3392 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3392 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2003 + inet6/filter/INPUT -i eth0 -j limit-3392 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2003 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-932 - inet6/filter/limit-2003 -j ACCEPT - inet6/filter/logdrop-932 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-932 -j DROP + inet6/filter/limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3392 -j TEE --gateway fc00::2 + inet6/filter/limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2005 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3394 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-933 - inet/filter/logdrop-933 -m limit --limit 1/second -j LOG - inet/filter/logdrop-933 -j DROP + inet/filter/INPUT -i eth0 -j limit-3393 + inet/filter/limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-933 - inet6/filter/logdrop-933 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-933 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3393 + inet6/filter/limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2006 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3395 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2005 + inet/filter/INPUT -i eth0 -j limit-3394 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2005 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-934 - inet/filter/limit-2005 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2005 -j ACCEPT - inet/filter/logdrop-934 -m limit --limit 1/second -j LOG - inet/filter/logdrop-934 -j DROP + inet/filter/limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2005 + inet6/filter/INPUT -i eth0 -j limit-3394 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2005 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-934 - inet6/filter/limit-2005 -j ACCEPT - inet6/filter/logdrop-934 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-934 -j DROP + inet6/filter/limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2007 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3396 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2006 - inet/filter/limit-2006 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-935 - inet/filter/limit-2006 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-935 -m limit --limit 1/second -j LOG - inet/filter/logdrop-935 -j DROP + inet/filter/INPUT -i eth0 -j limit-3395 + inet/filter/limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2006 - inet6/filter/limit-2006 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-935 - inet6/filter/logdrop-935 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-935 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3395 + inet6/filter/limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2008 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3397 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2007 + inet/filter/INPUT -i eth0 -j limit-3396 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2007 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-936 - inet/filter/limit-2007 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-936 -m limit --limit 1/second -j LOG - inet/filter/logdrop-936 -j DROP + inet/filter/limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3396 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2007 + inet6/filter/INPUT -i eth0 -j limit-3396 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2007 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-936 - inet6/filter/limit-2007 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-936 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-936 -j DROP + inet6/filter/limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2009 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3398 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2008 - inet/filter/limit-2008 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-937 - inet/filter/limit-2008 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-937 -m limit --limit 1/second -j LOG - inet/filter/logdrop-937 -j DROP + inet/filter/INPUT -i eth0 -j limit-3397 + inet/filter/limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2008 - inet6/filter/limit-2008 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-937 - inet6/filter/limit-2008 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-937 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-937 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3397 + inet6/filter/limit-3397 -m recent --name limit-3397 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2010 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3399 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2009 + inet/filter/INPUT -i eth0 -j limit-3398 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2009 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-938 - inet/filter/limit-2009 -m limit --limit 1/second -j LOG - inet/filter/limit-2009 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-938 -m limit --limit 1/second -j LOG - inet/filter/logdrop-938 -j DROP + inet/filter/limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2009 + inet6/filter/INPUT -i eth0 -j limit-3398 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2009 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-938 - inet6/filter/limit-2009 -m limit --limit 1/second -j LOG - inet6/filter/limit-2009 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-938 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-938 -j DROP + inet6/filter/limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2011 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3400 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2010 - inet/filter/limit-2010 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-939 - inet/filter/limit-2010 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-939 -m limit --limit 1/second -j LOG - inet/filter/logdrop-939 -j DROP + inet/filter/INPUT -i eth0 -j limit-3399 + inet/filter/limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2010 - inet6/filter/limit-2010 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-939 - inet6/filter/limit-2010 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-939 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-939 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3399 + inet6/filter/limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2012 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3401 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2011 + inet/filter/INPUT -i eth0 -j limit-3400 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2011 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-940 - inet/filter/limit-2011 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-940 -m limit --limit 1/second -j LOG - inet/filter/logdrop-940 -j DROP + inet/filter/limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3400 -m limit --limit 1/second -j LOG + inet/filter/limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2011 + inet6/filter/INPUT -i eth0 -j limit-3400 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2011 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-940 - inet6/filter/limit-2011 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-940 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-940 -j DROP + inet6/filter/limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3400 -m limit --limit 1/second -j LOG + inet6/filter/limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2013 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3402 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2012 - inet/filter/limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-941 - inet/filter/limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-941 -m limit --limit 1/second -j LOG - inet/filter/logdrop-941 -j DROP + inet/filter/INPUT -i eth0 -j limit-3401 + inet/filter/limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2012 - inet6/filter/limit-2012 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-941 - inet6/filter/limit-2012 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-941 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-941 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3401 + inet6/filter/limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2014 {"flow-limit":{"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3403 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2013 + inet/filter/INPUT -i eth0 -j limit-3402 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-942 - inet/filter/limit-2013 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-942 -m limit --limit 1/second -j LOG - inet/filter/logdrop-942 -j DROP + inet/filter/limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3402 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3402 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2013 + inet6/filter/INPUT -i eth0 -j limit-3402 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2013 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-942 - inet6/filter/limit-2013 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-942 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-942 -j DROP + inet6/filter/limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3402 -j TEE --gateway fc00::2 + inet6/filter/limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2015 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3404 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2014 - inet/filter/limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-943 - inet/filter/limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-943 -m limit --limit 1/second -j LOG - inet/filter/logdrop-943 -j DROP + inet/filter/INPUT -i eth0 -j limit-3403 + inet/filter/limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2014 - inet6/filter/limit-2014 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-943 - inet6/filter/logdrop-943 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-943 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3403 + inet6/filter/limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2016 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3405 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2015 + inet/filter/INPUT -i eth0 -j limit-3404 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-944 - inet/filter/limit-2015 -j ACCEPT - inet/filter/logdrop-944 -m limit --limit 1/second -j LOG - inet/filter/logdrop-944 -j DROP + inet/filter/limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2015 + inet6/filter/INPUT -i eth0 -j limit-3404 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2015 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-944 - inet6/filter/limit-2015 -j ACCEPT - inet6/filter/logdrop-944 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-944 -j DROP + inet6/filter/limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2017 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3406 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-945 - inet/filter/logdrop-945 -m limit --limit 1/second -j LOG - inet/filter/logdrop-945 -j DROP + inet/filter/INPUT -i eth0 -j limit-3405 + inet/filter/limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-945 - inet6/filter/logdrop-945 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-945 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3405 + inet6/filter/limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2018 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3407 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2017 + inet/filter/INPUT -i eth0 -j limit-3406 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-946 - inet/filter/limit-2017 -m limit --limit 1/second -j LOG - inet/filter/limit-2017 -j ACCEPT - inet/filter/logdrop-946 -m limit --limit 1/second -j LOG - inet/filter/logdrop-946 -j DROP + inet/filter/limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3406 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2017 + inet6/filter/INPUT -i eth0 -j limit-3406 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2017 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-946 - inet6/filter/limit-2017 -m limit --limit 1/second -j LOG - inet6/filter/limit-2017 -j ACCEPT - inet6/filter/logdrop-946 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-946 -j DROP + inet6/filter/limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2019 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3408 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2018 - inet/filter/limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-947 - inet/filter/limit-2018 -m limit --limit 1/second -j LOG - inet/filter/logdrop-947 -m limit --limit 1/second -j LOG - inet/filter/logdrop-947 -j DROP + inet/filter/INPUT -i eth0 -j limit-3407 + inet/filter/limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2018 - inet6/filter/limit-2018 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-947 - inet6/filter/limit-2018 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-947 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-947 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3407 + inet6/filter/limit-3407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2020 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3409 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2019 + inet/filter/INPUT -i eth0 -j limit-3408 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-948 - inet/filter/limit-2019 -j ACCEPT - inet/filter/logdrop-948 -m limit --limit 1/second -j LOG - inet/filter/logdrop-948 -j DROP + inet/filter/limit-3408 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3408 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2019 + inet6/filter/INPUT -i eth0 -j limit-3408 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2019 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-948 - inet6/filter/limit-2019 -j ACCEPT - inet6/filter/logdrop-948 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-948 -j DROP + inet6/filter/limit-3408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3408 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2021 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3410 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-949 - inet/filter/logdrop-949 -m limit --limit 1/second -j LOG - inet/filter/logdrop-949 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-949 - inet6/filter/logdrop-949 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-949 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2022 {"flow-limit":{"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3411 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2021 + inet/filter/INPUT -i eth0 -j limit-3410 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-950 - inet/filter/limit-2021 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2021 -j ACCEPT - inet/filter/logdrop-950 -m limit --limit 1/second -j LOG - inet/filter/logdrop-950 -j DROP + inet/filter/limit-3410 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3410 -m limit --limit 1/second -j LOG + inet/filter/limit-3410 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2021 + inet6/filter/INPUT -i eth0 -j limit-3410 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2021 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-950 - inet6/filter/limit-2021 -j ACCEPT - inet6/filter/logdrop-950 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-950 -j DROP + inet6/filter/limit-3410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3410 -m limit --limit 1/second -j LOG + inet6/filter/limit-3410 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2023 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3412 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2022 - inet/filter/limit-2022 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-951 - inet/filter/limit-2022 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-951 -m limit --limit 1/second -j LOG - inet/filter/logdrop-951 -j DROP + inet/filter/INPUT -i eth0 -j limit-3411 + inet/filter/limit-3411 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3411 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2022 - inet6/filter/limit-2022 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-951 - inet6/filter/logdrop-951 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-951 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3411 + inet6/filter/limit-3411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3411 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2024 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3413 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2023 + inet/filter/INPUT -i eth0 -j limit-3412 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2023 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-952 - inet/filter/limit-2023 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-952 -m limit --limit 1/second -j LOG - inet/filter/logdrop-952 -j DROP + inet/filter/limit-3412 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3412 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3412 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3412 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2023 + inet6/filter/INPUT -i eth0 -j limit-3412 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2023 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-952 - inet6/filter/limit-2023 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-952 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-952 -j DROP + inet6/filter/limit-3412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3412 -j TEE --gateway fc00::2 + inet6/filter/limit-3412 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2025 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3414 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2024 - inet/filter/limit-2024 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-953 - inet/filter/limit-2024 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-953 -m limit --limit 1/second -j LOG - inet/filter/logdrop-953 -j DROP + inet/filter/INPUT -i eth0 -j limit-3413 + inet/filter/limit-3413 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3413 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3413 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2024 - inet6/filter/limit-2024 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-953 - inet6/filter/limit-2024 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-953 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-953 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3413 + inet6/filter/limit-3413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3413 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2026 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3415 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2025 + inet/filter/INPUT -i eth0 -j limit-3414 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2025 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-954 - inet/filter/limit-2025 -m limit --limit 1/second -j LOG - inet/filter/limit-2025 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-954 -m limit --limit 1/second -j LOG - inet/filter/logdrop-954 -j DROP + inet/filter/limit-3414 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3414 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2025 + inet6/filter/INPUT -i eth0 -j limit-3414 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2025 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-954 - inet6/filter/limit-2025 -m limit --limit 1/second -j LOG - inet6/filter/limit-2025 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-954 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-954 -j DROP + inet6/filter/limit-3414 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3414 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2027 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3416 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2026 - inet/filter/limit-2026 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-955 - inet/filter/limit-2026 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-955 -m limit --limit 1/second -j LOG - inet/filter/logdrop-955 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2026 - inet6/filter/limit-2026 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-955 - inet6/filter/limit-2026 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-955 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-955 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2028 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3417 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2027 + inet/filter/INPUT -i eth0 -j limit-3416 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2027 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-956 - inet/filter/limit-2027 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-956 -m limit --limit 1/second -j LOG - inet/filter/logdrop-956 -j DROP + inet/filter/limit-3416 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3416 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3416 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2027 + inet6/filter/INPUT -i eth0 -j limit-3416 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2027 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-956 - inet6/filter/limit-2027 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-956 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-956 -j DROP + inet6/filter/limit-3416 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3416 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2029 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3418 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2028 - inet/filter/limit-2028 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-957 - inet/filter/limit-2028 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-957 -m limit --limit 1/second -j LOG - inet/filter/logdrop-957 -j DROP + inet/filter/INPUT -i eth0 -j limit-3417 + inet/filter/limit-3417 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3417 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2028 - inet6/filter/limit-2028 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-957 - inet6/filter/limit-2028 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-957 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-957 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3417 + inet6/filter/limit-3417 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2030 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3419 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2029 + inet/filter/INPUT -i eth0 -j limit-3418 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2029 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-958 - inet/filter/limit-2029 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2029 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-958 -m limit --limit 1/second -j LOG - inet/filter/logdrop-958 -j DROP + inet/filter/limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2029 + inet6/filter/INPUT -i eth0 -j limit-3418 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2029 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-958 - inet6/filter/limit-2029 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-958 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-958 -j DROP + inet6/filter/limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2031 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3420 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2030 - inet/filter/limit-2030 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-959 - inet/filter/limit-2030 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-959 -m limit --limit 1/second -j LOG - inet/filter/logdrop-959 -j DROP + inet/filter/INPUT -i eth0 -j limit-3419 + inet/filter/limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2030 - inet6/filter/limit-2030 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-959 - inet6/filter/logdrop-959 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-959 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3419 + inet6/filter/limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2032 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3421 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2031 + inet/filter/INPUT -i eth0 -j limit-3420 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2031 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-960 - inet/filter/limit-2031 -j ACCEPT - inet/filter/logdrop-960 -m limit --limit 1/second -j LOG - inet/filter/logdrop-960 -j DROP + inet/filter/limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3420 -m limit --limit 1/second -j LOG + inet/filter/limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2031 + inet6/filter/INPUT -i eth0 -j limit-3420 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2031 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-960 - inet6/filter/limit-2031 -j ACCEPT - inet6/filter/logdrop-960 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-960 -j DROP + inet6/filter/limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3420 -m limit --limit 1/second -j LOG + inet6/filter/limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2033 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3422 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-961 - inet/filter/logdrop-961 -m limit --limit 1/second -j LOG - inet/filter/logdrop-961 -j DROP + inet/filter/INPUT -i eth0 -j limit-3421 + inet/filter/limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-961 - inet6/filter/logdrop-961 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-961 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3421 + inet6/filter/limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2034 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3423 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2033 + inet/filter/INPUT -i eth0 -j limit-3422 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-962 - inet/filter/limit-2033 -m limit --limit 1/second -j LOG - inet/filter/limit-2033 -j ACCEPT - inet/filter/logdrop-962 -m limit --limit 1/second -j LOG - inet/filter/logdrop-962 -j DROP + inet/filter/limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3422 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3422 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2033 + inet6/filter/INPUT -i eth0 -j limit-3422 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2033 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-962 - inet6/filter/limit-2033 -m limit --limit 1/second -j LOG - inet6/filter/limit-2033 -j ACCEPT - inet6/filter/logdrop-962 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-962 -j DROP + inet6/filter/limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3422 -j TEE --gateway fc00::2 + inet6/filter/limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2035 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3424 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2034 - inet/filter/limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-963 - inet/filter/limit-2034 -m limit --limit 1/second -j LOG - inet/filter/logdrop-963 -m limit --limit 1/second -j LOG - inet/filter/logdrop-963 -j DROP + inet/filter/INPUT -i eth0 -j limit-3423 + inet/filter/limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2034 - inet6/filter/limit-2034 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-963 - inet6/filter/limit-2034 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-963 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-963 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3423 + inet6/filter/limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2036 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3425 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2035 + inet/filter/INPUT -i eth0 -j limit-3424 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-964 - inet/filter/limit-2035 -j ACCEPT - inet/filter/logdrop-964 -m limit --limit 1/second -j LOG - inet/filter/logdrop-964 -j DROP + inet/filter/limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2035 + inet6/filter/INPUT -i eth0 -j limit-3424 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2035 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-964 - inet6/filter/limit-2035 -j ACCEPT - inet6/filter/logdrop-964 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-964 -j DROP + inet6/filter/limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2037 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3426 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-965 - inet/filter/logdrop-965 -m limit --limit 1/second -j LOG - inet/filter/logdrop-965 -j DROP + inet/filter/INPUT -i eth0 -j limit-3425 + inet/filter/limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-965 - inet6/filter/logdrop-965 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-965 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3425 + inet6/filter/limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2038 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3427 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2037 + inet/filter/INPUT -i eth0 -j limit-3426 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-966 - inet/filter/limit-2037 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2037 -j ACCEPT - inet/filter/logdrop-966 -m limit --limit 1/second -j LOG - inet/filter/logdrop-966 -j DROP + inet/filter/limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3426 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2037 + inet6/filter/INPUT -i eth0 -j limit-3426 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2037 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-966 - inet6/filter/limit-2037 -j ACCEPT - inet6/filter/logdrop-966 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-966 -j DROP + inet6/filter/limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2039 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3428 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2038 - inet/filter/limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-967 - inet/filter/limit-2038 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-967 -m limit --limit 1/second -j LOG - inet/filter/logdrop-967 -j DROP + inet/filter/INPUT -i eth0 -j limit-3427 + inet/filter/limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2038 - inet6/filter/limit-2038 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-967 - inet6/filter/logdrop-967 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-967 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3427 + inet6/filter/limit-3427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2040 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 3429 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2039 + inet/filter/INPUT -i eth0 -j limit-3428 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2039 -m recent --name limit-2039 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2039 -m recent --name limit-2039 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3428 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3428 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2039 + inet6/filter/INPUT -i eth0 -j limit-3428 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2039 -m recent --name limit-2039 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2039 -m recent --name limit-2039 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3428 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2041 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 3430 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2040 - inet/filter/limit-2040 -m recent --name limit-2040 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2040 -m recent --name limit-2040 --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2040 - inet6/filter/limit-2040 -m recent --name limit-2040 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2040 -m recent --name limit-2040 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2042 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3431 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2041 + inet/filter/INPUT -i eth0 -j limit-3430 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2041 -m recent --name limit-2041 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2041 -m limit --limit 1/second -j LOG - inet/filter/limit-2041 -m recent --name limit-2041 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3430 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3430 -m limit --limit 1/second -j LOG + inet/filter/limit-3430 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2041 + inet6/filter/INPUT -i eth0 -j limit-3430 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2041 -m recent --name limit-2041 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2041 -m limit --limit 1/second -j LOG - inet6/filter/limit-2041 -m recent --name limit-2041 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3430 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3430 -m limit --limit 1/second -j LOG + inet6/filter/limit-3430 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2043 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3432 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2042 - inet/filter/limit-2042 -m recent --name limit-2042 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2042 -m recent --name limit-2042 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3431 + inet/filter/limit-3431 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3431 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2042 - inet6/filter/limit-2042 -m recent --name limit-2042 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2042 -m recent --name limit-2042 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3431 + inet6/filter/limit-3431 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3431 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2044 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3433 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2043 + inet/filter/INPUT -i eth0 -j limit-3432 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2043 -m recent --name limit-2043 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2043 -m recent --name limit-2043 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3432 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3432 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3432 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3432 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2043 + inet6/filter/INPUT -i eth0 -j limit-3432 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2043 -m recent --name limit-2043 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2043 -m recent --name limit-2043 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3432 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3432 -j TEE --gateway fc00::2 + inet6/filter/limit-3432 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2045 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3434 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2044 - inet/filter/limit-2044 -m recent --name limit-2044 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2044 -m recent --name limit-2044 --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3433 + inet/filter/limit-3433 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3433 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3433 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2044 - inet6/filter/limit-2044 -m recent --name limit-2044 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2044 -m recent --name limit-2044 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3433 + inet6/filter/limit-3433 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3433 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2046 {"flow-limit":{"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3435 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2045 + inet/filter/INPUT -i eth0 -j limit-3434 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2045 -m recent --name limit-2045 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2045 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2045 -m recent --name limit-2045 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3434 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3434 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2045 + inet6/filter/INPUT -i eth0 -j limit-3434 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2045 -m recent --name limit-2045 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2045 -m recent --name limit-2045 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3434 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2047 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3436 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2046 - inet/filter/limit-2046 -m recent --name limit-2046 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2046 -m recent --name limit-2046 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2046 - inet6/filter/limit-2046 -m recent --name limit-2046 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2048 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3437 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2047 + inet/filter/INPUT -i eth0 -j limit-3436 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2047 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2047 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3436 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3436 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3436 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2047 + inet6/filter/INPUT -i eth0 -j limit-3436 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3436 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2049 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3438 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2048 - inet/filter/limit-2048 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2048 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3437 + inet/filter/limit-3437 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3437 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2048 - inet6/filter/limit-2048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3437 + inet6/filter/limit-3437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2050 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3439 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2049 + inet/filter/INPUT -i eth0 -j limit-3438 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2049 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2049 -m limit --limit 1/second -j LOG - inet/filter/limit-2049 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2049 + inet6/filter/INPUT -i eth0 -j limit-3438 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2049 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2049 -m limit --limit 1/second -j LOG - inet6/filter/limit-2049 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3438 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3438 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2051 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3440 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2050 - inet/filter/limit-2050 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2050 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3439 + inet/filter/limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2050 - inet6/filter/limit-2050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3439 + inet6/filter/limit-3439 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3439 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2052 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3441 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2051 + inet/filter/INPUT -i eth0 -j limit-3440 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2051 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2051 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3440 -m limit --limit 1/second -j LOG + inet/filter/limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2051 + inet6/filter/INPUT -i eth0 -j limit-3440 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3440 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3440 -m limit --limit 1/second -j LOG + inet6/filter/limit-3440 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2053 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3442 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2052 - inet/filter/limit-2052 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2052 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3441 + inet/filter/limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2052 - inet6/filter/limit-2052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3441 + inet6/filter/limit-3441 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3441 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2054 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3443 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2053 + inet/filter/INPUT -i eth0 -j limit-3442 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2053 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2053 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2053 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3442 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3442 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2053 + inet6/filter/INPUT -i eth0 -j limit-3442 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3442 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3442 -j TEE --gateway fc00::2 + inet6/filter/limit-3442 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2055 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3444 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2054 - inet/filter/limit-2054 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2054 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3443 + inet/filter/limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2054 - inet6/filter/limit-2054 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3443 + inet6/filter/limit-3443 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3443 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2056 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3445 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2055 + inet/filter/INPUT -i eth0 -j limit-3444 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2055 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2055 -j ACCEPT + inet/filter/limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2055 + inet6/filter/INPUT -i eth0 -j limit-3444 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2055 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2055 -j ACCEPT + inet6/filter/limit-3444 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3444 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2057 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3446 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3445 + inet/filter/limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3445 + inet6/filter/limit-3445 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3445 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2058 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3447 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2057 + inet/filter/INPUT -i eth0 -j limit-3446 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2057 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2057 -m limit --limit 1/second -j LOG - inet/filter/limit-2057 -j ACCEPT + inet/filter/limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3446 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2057 + inet6/filter/INPUT -i eth0 -j limit-3446 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2057 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2057 -m limit --limit 1/second -j LOG - inet6/filter/limit-2057 -j ACCEPT + inet6/filter/limit-3446 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3446 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2059 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3448 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2058 - inet/filter/limit-2058 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2058 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3447 + inet/filter/limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2058 - inet6/filter/limit-2058 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2058 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3447 + inet6/filter/limit-3447 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2060 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3449 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2059 + inet/filter/INPUT -i eth0 -j limit-3448 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2059 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2059 -j ACCEPT + inet/filter/limit-3448 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3448 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2059 + inet6/filter/INPUT -i eth0 -j limit-3448 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2059 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2059 -j ACCEPT + inet6/filter/limit-3448 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3448 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2061 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3450 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2062 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3451 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2061 + inet/filter/INPUT -i eth0 -j limit-3450 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2061 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2061 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2061 -j ACCEPT + inet/filter/limit-3450 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3450 -m limit --limit 1/second -j LOG + inet/filter/limit-3450 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2061 + inet6/filter/INPUT -i eth0 -j limit-3450 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2061 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2061 -j ACCEPT + inet6/filter/limit-3450 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3450 -m limit --limit 1/second -j LOG + inet6/filter/limit-3450 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2063 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3452 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2062 - inet/filter/limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2062 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3451 + inet/filter/limit-3451 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3451 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2062 - inet6/filter/limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3451 + inet6/filter/limit-3451 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3451 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2064 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3453 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2063 + inet/filter/INPUT -i eth0 -j limit-3452 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2063 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3452 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3452 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3452 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3452 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2063 + inet6/filter/INPUT -i eth0 -j limit-3452 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3452 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3452 -j TEE --gateway fc00::2 + inet6/filter/limit-3452 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2065 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3454 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2064 - inet/filter/limit-2064 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2064 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3453 + inet/filter/limit-3453 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3453 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3453 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2064 - inet6/filter/limit-2064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3453 + inet6/filter/limit-3453 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3453 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2066 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3455 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2065 + inet/filter/INPUT -i eth0 -j limit-3454 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2065 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2065 -m limit --limit 1/second -j LOG - inet/filter/limit-2065 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3454 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2065 + inet6/filter/INPUT -i eth0 -j limit-3454 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2065 -m limit --limit 1/second -j LOG - inet6/filter/limit-2065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3454 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2067 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3456 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2066 - inet/filter/limit-2066 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2066 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2066 - inet6/filter/limit-2066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2068 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3457 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2067 + inet/filter/INPUT -i eth0 -j limit-3456 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2067 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2067 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3456 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3456 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2067 + inet6/filter/INPUT -i eth0 -j limit-3456 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3456 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2069 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3458 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2068 - inet/filter/limit-2068 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2068 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3457 + inet/filter/limit-3457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3457 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2068 - inet6/filter/limit-2068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3457 + inet6/filter/limit-3457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2070 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3459 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2069 + inet/filter/INPUT -i eth0 -j limit-3458 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2069 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2069 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2069 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2069 + inet6/filter/INPUT -i eth0 -j limit-3458 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2069 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2069 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3458 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3458 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2071 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3460 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2070 - inet/filter/limit-2070 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2070 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3459 + inet/filter/limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2070 - inet6/filter/limit-2070 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3459 + inet6/filter/limit-3459 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3459 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2072 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3461 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2071 + inet/filter/INPUT -i eth0 -j limit-3460 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2071 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2071 -j ACCEPT + inet/filter/limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3460 -m limit --limit 1/second -j LOG + inet/filter/limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2071 + inet6/filter/INPUT -i eth0 -j limit-3460 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2071 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2071 -j ACCEPT + inet6/filter/limit-3460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3460 -m limit --limit 1/second -j LOG + inet6/filter/limit-3460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2073 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3462 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3461 + inet/filter/limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3461 + inet6/filter/limit-3461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3461 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2074 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3463 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2073 + inet/filter/INPUT -i eth0 -j limit-3462 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2073 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2073 -m limit --limit 1/second -j LOG - inet/filter/limit-2073 -j ACCEPT + inet/filter/limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3462 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3462 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2073 + inet6/filter/INPUT -i eth0 -j limit-3462 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2073 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2073 -m limit --limit 1/second -j LOG - inet6/filter/limit-2073 -j ACCEPT + inet6/filter/limit-3462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3462 -j TEE --gateway fc00::2 + inet6/filter/limit-3462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2075 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3464 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2074 - inet/filter/limit-2074 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2074 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3463 + inet/filter/limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2074 - inet6/filter/limit-2074 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2074 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3463 + inet6/filter/limit-3463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3463 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2076 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3465 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2075 + inet/filter/INPUT -i eth0 -j limit-3464 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2075 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2075 -j ACCEPT + inet/filter/limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2075 + inet6/filter/INPUT -i eth0 -j limit-3464 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2075 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2075 -j ACCEPT + inet6/filter/limit-3464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2077 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3466 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3465 + inet/filter/limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3465 + inet6/filter/limit-3465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3465 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2078 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3467 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2077 + inet/filter/INPUT -i eth0 -j limit-3466 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2077 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2077 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2077 -j ACCEPT + inet/filter/limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3466 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2077 + inet6/filter/INPUT -i eth0 -j limit-3466 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2077 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2077 -j ACCEPT + inet6/filter/limit-3466 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3466 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2079 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3468 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2078 - inet/filter/limit-2078 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2078 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3467 + inet/filter/limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2078 - inet6/filter/limit-2078 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3467 + inet6/filter/limit-3467 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2080 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3469 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2079 + inet/filter/INPUT -i eth0 -j limit-3468 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2079 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2079 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3468 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2079 + inet6/filter/INPUT -i eth0 -j limit-3468 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2079 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2079 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3468 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2081 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3470 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2080 - inet/filter/limit-2080 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2080 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2080 - inet6/filter/limit-2080 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2080 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2082 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3471 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2081 + inet/filter/INPUT -i eth0 -j limit-3470 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2081 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2081 -m limit --limit 1/second -j LOG - inet/filter/limit-2081 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3470 -m limit --limit 1/second -j LOG + inet/filter/limit-3470 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2081 + inet6/filter/INPUT -i eth0 -j limit-3470 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2081 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2081 -m limit --limit 1/second -j LOG - inet6/filter/limit-2081 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3470 -m limit --limit 1/second -j LOG + inet6/filter/limit-3470 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2083 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3472 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2082 - inet/filter/limit-2082 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2082 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3471 + inet/filter/limit-3471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3471 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2082 - inet6/filter/limit-2082 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2082 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3471 + inet6/filter/limit-3471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3471 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2084 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3473 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2083 + inet/filter/INPUT -i eth0 -j limit-3472 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2083 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3472 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3472 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3472 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3472 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2083 + inet6/filter/INPUT -i eth0 -j limit-3472 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2083 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2083 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3472 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3472 -j TEE --gateway fc00::2 + inet6/filter/limit-3472 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2085 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3474 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2084 - inet/filter/limit-2084 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2084 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3473 + inet/filter/limit-3473 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3473 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3473 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2084 - inet6/filter/limit-2084 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2084 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3473 + inet6/filter/limit-3473 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3473 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2086 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3475 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2085 + inet/filter/INPUT -i eth0 -j limit-3474 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2085 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2085 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2085 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3474 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3474 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2085 + inet6/filter/INPUT -i eth0 -j limit-3474 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2085 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2085 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3474 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3474 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2087 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3476 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2086 - inet/filter/limit-2086 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2086 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2086 - inet6/filter/limit-2086 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2088 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3477 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2087 + inet/filter/INPUT -i eth0 -j limit-3476 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2087 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2087 -j ACCEPT + inet/filter/limit-3476 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3476 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3476 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2087 + inet6/filter/INPUT -i eth0 -j limit-3476 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2087 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2087 -j ACCEPT + inet6/filter/limit-3476 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3476 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2089 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3478 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3477 + inet/filter/limit-3477 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3477 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3477 + inet6/filter/limit-3477 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2090 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3479 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2089 + inet/filter/INPUT -i eth0 -j limit-3478 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2089 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2089 -m limit --limit 1/second -j LOG - inet/filter/limit-2089 -j ACCEPT + inet/filter/limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1930 + inet/filter/limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1930 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1930 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2089 + inet6/filter/INPUT -i eth0 -j limit-3478 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2089 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2089 -m limit --limit 1/second -j LOG - inet6/filter/limit-2089 -j ACCEPT + inet6/filter/limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1930 + inet6/filter/limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1930 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1930 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2091 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3480 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2090 - inet/filter/limit-2090 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2090 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3479 + inet/filter/limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1931 + inet/filter/limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1931 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1931 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2090 - inet6/filter/limit-2090 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2090 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3479 + inet6/filter/limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1931 + inet6/filter/limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1931 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1931 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2092 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3481 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2091 + inet/filter/INPUT -i eth0 -j limit-3480 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2091 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2091 -j ACCEPT + inet/filter/limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1932 + inet/filter/limit-3480 -m limit --limit 1/second -j LOG + inet/filter/limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1932 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1932 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2091 + inet6/filter/INPUT -i eth0 -j limit-3480 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2091 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2091 -j ACCEPT + inet6/filter/limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1932 + inet6/filter/limit-3480 -m limit --limit 1/second -j LOG + inet6/filter/limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1932 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1932 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2093 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3482 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3481 + inet/filter/limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1933 + inet/filter/limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1933 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1933 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3481 + inet6/filter/limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1933 + inet6/filter/limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1933 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1933 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2094 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3483 {"flow-limit":{"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2093 + inet/filter/INPUT -i eth0 -j limit-3482 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2093 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2093 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2093 -j ACCEPT + inet/filter/limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1934 + inet/filter/limit-3482 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3482 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1934 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1934 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2093 + inet6/filter/INPUT -i eth0 -j limit-3482 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2093 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2093 -j ACCEPT + inet6/filter/limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1934 + inet6/filter/limit-3482 -j TEE --gateway fc00::2 + inet6/filter/limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1934 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1934 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2095 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3484 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2094 - inet/filter/limit-2094 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2094 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3483 + inet/filter/limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1935 + inet/filter/limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1935 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1935 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2094 - inet6/filter/limit-2094 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3483 + inet6/filter/limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1935 + inet6/filter/limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1935 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1935 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2096 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3485 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2095 + inet/filter/INPUT -i eth0 -j limit-3484 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2095 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2095 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1936 + inet/filter/limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1936 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1936 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2095 + inet6/filter/INPUT -i eth0 -j limit-3484 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2095 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2095 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1936 + inet6/filter/limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1936 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1936 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2097 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3486 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2096 - inet/filter/limit-2096 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2096 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3485 + inet/filter/limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1937 + inet/filter/limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1937 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1937 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2096 - inet6/filter/limit-2096 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2096 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3485 + inet6/filter/limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1937 + inet6/filter/limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1937 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1937 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2098 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3487 {"flow-limit":{"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2097 + inet/filter/INPUT -i eth0 -j limit-3486 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2097 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2097 -m limit --limit 1/second -j LOG - inet/filter/limit-2097 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1938 + inet/filter/limit-3486 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1938 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1938 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2097 + inet6/filter/INPUT -i eth0 -j limit-3486 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2097 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2097 -m limit --limit 1/second -j LOG - inet6/filter/limit-2097 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1938 + inet6/filter/limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1938 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1938 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2099 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3488 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2098 - inet/filter/limit-2098 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2098 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3487 + inet/filter/limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1939 + inet/filter/limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1939 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1939 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2098 - inet6/filter/limit-2098 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2098 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3487 + inet6/filter/limit-3487 -m recent --name limit-3487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1939 + inet6/filter/logdrop-1939 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1939 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2100 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3489 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2099 + inet/filter/INPUT -i eth0 -j limit-3488 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2099 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2099 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1940 + inet/filter/limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1940 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1940 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2099 + inet6/filter/INPUT -i eth0 -j limit-3488 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2099 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2099 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1940 + inet6/filter/limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1940 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1940 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2101 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3490 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2100 - inet/filter/limit-2100 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2100 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3489 + inet/filter/limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1941 + inet/filter/limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1941 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1941 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2100 - inet6/filter/limit-2100 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2100 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3489 + inet6/filter/limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1941 + inet6/filter/limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1941 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1941 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2102 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3491 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2101 + inet/filter/INPUT -i eth0 -j limit-3490 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2101 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2101 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2101 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1942 + inet/filter/limit-3490 -m limit --limit 1/second -j LOG + inet/filter/limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1942 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1942 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2101 + inet6/filter/INPUT -i eth0 -j limit-3490 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2101 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2101 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1942 + inet6/filter/limit-3490 -m limit --limit 1/second -j LOG + inet6/filter/limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1942 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1942 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2103 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3492 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2102 - inet/filter/limit-2102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3491 + inet/filter/limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1943 + inet/filter/limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1943 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1943 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2102 - inet6/filter/limit-2102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3491 + inet6/filter/limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1943 + inet6/filter/limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1943 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1943 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2104 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3493 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2103 + inet/filter/INPUT -i eth0 -j limit-3492 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2103 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2103 -j ACCEPT + inet/filter/limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1944 + inet/filter/limit-3492 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3492 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1944 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1944 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2103 + inet6/filter/INPUT -i eth0 -j limit-3492 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2103 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2103 -j ACCEPT + inet6/filter/limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1944 + inet6/filter/limit-3492 -j TEE --gateway fc00::2 + inet6/filter/limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1944 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1944 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2105 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3494 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3493 + inet/filter/limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1945 + inet/filter/limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1945 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1945 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3493 + inet6/filter/limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1945 + inet6/filter/limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1945 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1945 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2106 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3495 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2105 + inet/filter/INPUT -i eth0 -j limit-3494 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2105 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2105 -m limit --limit 1/second -j LOG - inet/filter/limit-2105 -j ACCEPT + inet/filter/limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1946 + inet/filter/limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1946 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1946 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2105 + inet6/filter/INPUT -i eth0 -j limit-3494 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2105 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2105 -m limit --limit 1/second -j LOG - inet6/filter/limit-2105 -j ACCEPT + inet6/filter/limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1946 + inet6/filter/limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1946 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1946 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2107 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3496 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2106 - inet/filter/limit-2106 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2106 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3495 + inet/filter/limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1947 + inet/filter/limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-1947 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1947 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2106 - inet6/filter/limit-2106 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2106 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3495 + inet6/filter/limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1947 + inet6/filter/limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1947 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1947 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2108 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3497 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2107 + inet/filter/INPUT -i eth0 -j limit-3496 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2107 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2107 -j ACCEPT + inet/filter/limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1948 + inet/filter/limit-3496 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1948 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1948 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2107 + inet6/filter/INPUT -i eth0 -j limit-3496 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2107 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2107 -j ACCEPT + inet6/filter/limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1948 + inet6/filter/limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1948 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1948 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2109 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3498 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/INPUT -i eth0 -j limit-3497 + inet/filter/limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1949 + inet/filter/limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1949 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1949 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3497 + inet6/filter/limit-3497 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1949 + inet6/filter/logdrop-1949 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1949 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2110 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3499 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2109 + inet/filter/INPUT -i eth0 -j limit-3498 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2109 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2109 -j ACCEPT + inet/filter/limit-3498 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 + inet/filter/limit-3498 -j ACCEPT + inet/filter/logdrop-1950 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1950 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2109 + inet6/filter/INPUT -i eth0 -j limit-3498 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-2109 -j ACCEPT + inet6/filter/limit-3498 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 + inet6/filter/limit-3498 -j ACCEPT + inet6/filter/logdrop-1950 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1950 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2111 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3500 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2110 - inet/filter/limit-2110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-2110 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 + inet/filter/logdrop-1951 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1951 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2110 - inet6/filter/limit-2110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 + inet6/filter/logdrop-1951 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1951 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2112 {"flow-limit":{"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} +Filter 3501 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2111 + inet/filter/INPUT -i eth0 -j limit-3500 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2111 -m recent --name limit-2111 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-968 - inet/filter/limit-2111 -m recent --name limit-2111 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-968 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-968 -j DROP + inet/filter/limit-3500 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 + inet/filter/limit-3500 -m limit --limit 1/second -j LOG + inet/filter/limit-3500 -j ACCEPT + inet/filter/logdrop-1952 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1952 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2111 + inet6/filter/INPUT -i eth0 -j limit-3500 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2111 -m recent --name limit-2111 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-968 - inet6/filter/limit-2111 -m recent --name limit-2111 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-968 -j DROP + inet6/filter/limit-3500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 + inet6/filter/limit-3500 -m limit --limit 1/second -j LOG + inet6/filter/limit-3500 -j ACCEPT + inet6/filter/logdrop-1952 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1952 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2113 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} +Filter 3502 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2112 - inet/filter/limit-2112 -m recent --name limit-2112 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-969 - inet/filter/limit-2112 -m recent --name limit-2112 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-969 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-969 -j DROP + inet/filter/INPUT -i eth0 -j limit-3501 + inet/filter/limit-3501 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 + inet/filter/limit-3501 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1953 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1953 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2112 - inet6/filter/limit-2112 -m recent --name limit-2112 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-969 - inet6/filter/limit-2112 -m recent --name limit-2112 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-969 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3501 + inet6/filter/limit-3501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 + inet6/filter/limit-3501 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1953 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1953 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2114 {"flow-limit":{"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3503 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2113 + inet/filter/INPUT -i eth0 -j limit-3502 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2113 -m recent --name limit-2113 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-970 - inet/filter/limit-2113 -m limit --limit 1/second -j LOG - inet/filter/limit-2113 -m recent --name limit-2113 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-970 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-970 -j DROP + inet/filter/limit-3502 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 + inet/filter/limit-3502 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3502 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3502 -j ACCEPT + inet/filter/logdrop-1954 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1954 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2113 + inet6/filter/INPUT -i eth0 -j limit-3502 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2113 -m recent --name limit-2113 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-970 - inet6/filter/limit-2113 -m limit --limit 1/second -j LOG - inet6/filter/limit-2113 -m recent --name limit-2113 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-970 -j DROP + inet6/filter/limit-3502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 + inet6/filter/limit-3502 -j TEE --gateway fc00::2 + inet6/filter/limit-3502 -j ACCEPT + inet6/filter/logdrop-1954 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1954 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2115 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3504 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2114 - inet/filter/limit-2114 -m recent --name limit-2114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-971 - inet/filter/limit-2114 -m recent --name limit-2114 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-971 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-971 -j DROP + inet/filter/INPUT -i eth0 -j limit-3503 + inet/filter/limit-3503 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 + inet/filter/limit-3503 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3503 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1955 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1955 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2114 - inet6/filter/limit-2114 -m recent --name limit-2114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-971 - inet6/filter/limit-2114 -m recent --name limit-2114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-971 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3503 + inet6/filter/limit-3503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 + inet6/filter/limit-3503 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1955 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1955 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2116 {"flow-limit":{"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3505 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2115 + inet/filter/INPUT -i eth0 -j limit-3504 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2115 -m recent --name limit-2115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-972 - inet/filter/limit-2115 -m recent --name limit-2115 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-972 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-972 -j DROP + inet/filter/limit-3504 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 + inet/filter/limit-3504 -j ACCEPT + inet/filter/logdrop-1956 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1956 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2115 + inet6/filter/INPUT -i eth0 -j limit-3504 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2115 -m recent --name limit-2115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-972 - inet6/filter/limit-2115 -m recent --name limit-2115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-972 -j DROP + inet6/filter/limit-3504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 + inet6/filter/limit-3504 -j ACCEPT + inet6/filter/logdrop-1956 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1956 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2117 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3506 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2116 - inet/filter/limit-2116 -m recent --name limit-2116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-973 - inet/filter/limit-2116 -m recent --name limit-2116 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-973 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-973 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 + inet/filter/logdrop-1957 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1957 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2116 - inet6/filter/limit-2116 -m recent --name limit-2116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-973 - inet6/filter/limit-2116 -m recent --name limit-2116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-973 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 + inet6/filter/logdrop-1957 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1957 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2118 {"flow-limit":{"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3507 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2117 + inet/filter/INPUT -i eth0 -j limit-3506 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2117 -m recent --name limit-2117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-974 - inet/filter/limit-2117 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2117 -m recent --name limit-2117 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-974 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-974 -j DROP + inet/filter/limit-3506 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 + inet/filter/limit-3506 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3506 -j ACCEPT + inet/filter/logdrop-1958 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1958 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2117 + inet6/filter/INPUT -i eth0 -j limit-3506 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2117 -m recent --name limit-2117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-974 - inet6/filter/limit-2117 -m recent --name limit-2117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-974 -j DROP + inet6/filter/limit-3506 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 + inet6/filter/limit-3506 -j ACCEPT + inet6/filter/logdrop-1958 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1958 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2119 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3508 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2118 - inet/filter/limit-2118 -m recent --name limit-2118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-975 - inet/filter/limit-2118 -m recent --name limit-2118 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-975 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-975 -j DROP + inet/filter/INPUT -i eth0 -j limit-3507 + inet/filter/limit-3507 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 + inet/filter/limit-3507 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1959 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1959 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2118 - inet6/filter/limit-2118 -m recent --name limit-2118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-975 - inet6/filter/logdrop-975 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3507 + inet6/filter/limit-3507 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 + inet6/filter/logdrop-1959 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1959 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2120 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3509 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2119 + inet/filter/INPUT -i eth0 -j limit-3508 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-976 - inet/filter/limit-2119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-976 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-976 -j DROP + inet/filter/limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1960 + inet/filter/limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1960 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1960 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2119 + inet6/filter/INPUT -i eth0 -j limit-3508 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-976 - inet6/filter/limit-2119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-976 -j DROP + inet6/filter/limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1960 + inet6/filter/limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1960 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1960 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2121 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3510 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2120 - inet/filter/limit-2120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-977 - inet/filter/limit-2120 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-977 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-977 -j DROP + inet/filter/INPUT -i eth0 -j limit-3509 + inet/filter/limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1961 + inet/filter/limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1961 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1961 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2120 - inet6/filter/limit-2120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-977 - inet6/filter/limit-2120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-977 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3509 + inet6/filter/limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1961 + inet6/filter/limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1961 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1961 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2122 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3511 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2121 + inet/filter/INPUT -i eth0 -j limit-3510 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-978 - inet/filter/limit-2121 -m limit --limit 1/second -j LOG - inet/filter/limit-2121 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-978 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-978 -j DROP + inet/filter/limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1962 + inet/filter/limit-3510 -m limit --limit 1/second -j LOG + inet/filter/limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1962 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1962 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2121 + inet6/filter/INPUT -i eth0 -j limit-3510 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-978 - inet6/filter/limit-2121 -m limit --limit 1/second -j LOG - inet6/filter/limit-2121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-978 -j DROP + inet6/filter/limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1962 + inet6/filter/limit-3510 -m limit --limit 1/second -j LOG + inet6/filter/limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1962 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1962 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2123 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3512 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2122 - inet/filter/limit-2122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-979 - inet/filter/limit-2122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-979 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-979 -j DROP + inet/filter/INPUT -i eth0 -j limit-3511 + inet/filter/limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1963 + inet/filter/limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1963 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1963 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2122 - inet6/filter/limit-2122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-979 - inet6/filter/limit-2122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-979 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3511 + inet6/filter/limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1963 + inet6/filter/limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1963 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1963 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2124 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3513 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2123 + inet/filter/INPUT -i eth0 -j limit-3512 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-980 - inet/filter/limit-2123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-980 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-980 -j DROP + inet/filter/limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1964 + inet/filter/limit-3512 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3512 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1964 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1964 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2123 + inet6/filter/INPUT -i eth0 -j limit-3512 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-980 - inet6/filter/limit-2123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-980 -j DROP + inet6/filter/limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1964 + inet6/filter/limit-3512 -j TEE --gateway fc00::2 + inet6/filter/limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1964 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1964 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2125 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3514 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2124 - inet/filter/limit-2124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-981 - inet/filter/limit-2124 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-981 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-981 -j DROP + inet/filter/INPUT -i eth0 -j limit-3513 + inet/filter/limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1965 + inet/filter/limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1965 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1965 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2124 - inet6/filter/limit-2124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-981 - inet6/filter/limit-2124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-981 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3513 + inet6/filter/limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1965 + inet6/filter/limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1965 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1965 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2126 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3515 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2125 + inet/filter/INPUT -i eth0 -j limit-3514 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-982 - inet/filter/limit-2125 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2125 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-982 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-982 -j DROP + inet/filter/limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1966 + inet/filter/limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1966 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1966 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2125 + inet6/filter/INPUT -i eth0 -j limit-3514 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-982 - inet6/filter/limit-2125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-982 -j DROP + inet6/filter/limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1966 + inet6/filter/limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1966 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1966 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2127 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3516 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2126 - inet/filter/limit-2126 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-983 - inet/filter/limit-2126 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-983 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-983 -j DROP + inet/filter/INPUT -i eth0 -j limit-3515 + inet/filter/limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1967 + inet/filter/limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-1967 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1967 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2126 - inet6/filter/limit-2126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-983 - inet6/filter/logdrop-983 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3515 + inet6/filter/limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1967 + inet6/filter/limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-1967 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1967 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2128 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3517 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2127 + inet/filter/INPUT -i eth0 -j limit-3516 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-984 - inet/filter/limit-2127 -j ACCEPT - inet/filter/logdrop-984 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-984 -j DROP + inet/filter/limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1968 + inet/filter/limit-3516 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-1968 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1968 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2127 + inet6/filter/INPUT -i eth0 -j limit-3516 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-984 - inet6/filter/limit-2127 -j ACCEPT - inet6/filter/logdrop-984 -j DROP + inet6/filter/limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1968 + inet6/filter/limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-1968 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1968 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2129 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3518 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-985 - inet/filter/logdrop-985 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-985 -j DROP + inet/filter/INPUT -i eth0 -j limit-3517 + inet/filter/limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1969 + inet/filter/limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1969 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1969 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-985 - inet6/filter/logdrop-985 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3517 + inet6/filter/limit-3517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1969 + inet6/filter/logdrop-1969 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1969 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2130 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3519 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2129 + inet/filter/INPUT -i eth0 -j limit-3518 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-986 - inet/filter/limit-2129 -m limit --limit 1/second -j LOG - inet/filter/limit-2129 -j ACCEPT - inet/filter/logdrop-986 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-986 -j DROP + inet/filter/limit-3518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 + inet/filter/limit-3518 -j ACCEPT + inet/filter/logdrop-1970 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1970 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2129 + inet6/filter/INPUT -i eth0 -j limit-3518 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-986 - inet6/filter/limit-2129 -m limit --limit 1/second -j LOG - inet6/filter/limit-2129 -j ACCEPT - inet6/filter/logdrop-986 -j DROP + inet6/filter/limit-3518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 + inet6/filter/limit-3518 -j ACCEPT + inet6/filter/logdrop-1970 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1970 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2131 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3520 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2130 - inet/filter/limit-2130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-987 - inet/filter/limit-2130 -m limit --limit 1/second -j LOG - inet/filter/logdrop-987 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-987 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 + inet/filter/logdrop-1971 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1971 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2130 - inet6/filter/limit-2130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-987 - inet6/filter/limit-2130 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-987 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 + inet6/filter/logdrop-1971 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1971 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2132 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3521 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2131 + inet/filter/INPUT -i eth0 -j limit-3520 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2131 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-988 - inet/filter/limit-2131 -j ACCEPT - inet/filter/logdrop-988 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-988 -j DROP + inet/filter/limit-3520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 + inet/filter/limit-3520 -m limit --limit 1/second -j LOG + inet/filter/limit-3520 -j ACCEPT + inet/filter/logdrop-1972 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1972 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2131 + inet6/filter/INPUT -i eth0 -j limit-3520 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-988 - inet6/filter/limit-2131 -j ACCEPT - inet6/filter/logdrop-988 -j DROP + inet6/filter/limit-3520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 + inet6/filter/limit-3520 -m limit --limit 1/second -j LOG + inet6/filter/limit-3520 -j ACCEPT + inet6/filter/logdrop-1972 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1972 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2133 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3522 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-989 - inet/filter/logdrop-989 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-989 -j DROP + inet/filter/INPUT -i eth0 -j limit-3521 + inet/filter/limit-3521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 + inet/filter/limit-3521 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1973 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1973 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-989 - inet6/filter/logdrop-989 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3521 + inet6/filter/limit-3521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 + inet6/filter/limit-3521 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1973 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1973 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2134 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3523 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2133 + inet/filter/INPUT -i eth0 -j limit-3522 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2133 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-990 - inet/filter/limit-2133 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2133 -j ACCEPT - inet/filter/logdrop-990 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-990 -j DROP + inet/filter/limit-3522 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 + inet/filter/limit-3522 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3522 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3522 -j ACCEPT + inet/filter/logdrop-1974 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1974 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2133 + inet6/filter/INPUT -i eth0 -j limit-3522 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-990 - inet6/filter/limit-2133 -j ACCEPT - inet6/filter/logdrop-990 -j DROP + inet6/filter/limit-3522 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 + inet6/filter/limit-3522 -j TEE --gateway fc00::2 + inet6/filter/limit-3522 -j ACCEPT + inet6/filter/logdrop-1974 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1974 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2135 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3524 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2134 - inet/filter/limit-2134 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-991 - inet/filter/limit-2134 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-991 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-991 -j DROP + inet/filter/INPUT -i eth0 -j limit-3523 + inet/filter/limit-3523 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 + inet/filter/limit-3523 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3523 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1975 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1975 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2134 - inet6/filter/limit-2134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-991 - inet6/filter/logdrop-991 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3523 + inet6/filter/limit-3523 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 + inet6/filter/limit-3523 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1975 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1975 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2136 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3525 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2135 + inet/filter/INPUT -i eth0 -j limit-3524 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-992 - inet/filter/limit-2135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-992 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-992 -j DROP + inet/filter/limit-3524 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 + inet/filter/limit-3524 -j ACCEPT + inet/filter/logdrop-1976 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1976 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2135 + inet6/filter/INPUT -i eth0 -j limit-3524 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-992 - inet6/filter/limit-2135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-992 -j DROP + inet6/filter/limit-3524 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 + inet6/filter/limit-3524 -j ACCEPT + inet6/filter/logdrop-1976 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1976 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2137 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3526 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2136 - inet/filter/limit-2136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-993 - inet/filter/limit-2136 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-993 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-993 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 + inet/filter/logdrop-1977 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1977 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2136 - inet6/filter/limit-2136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-993 - inet6/filter/limit-2136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-993 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 + inet6/filter/logdrop-1977 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1977 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2138 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3527 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2137 + inet/filter/INPUT -i eth0 -j limit-3526 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-994 - inet/filter/limit-2137 -m limit --limit 1/second -j LOG - inet/filter/limit-2137 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-994 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-994 -j DROP + inet/filter/limit-3526 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 + inet/filter/limit-3526 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3526 -j ACCEPT + inet/filter/logdrop-1978 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1978 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2137 + inet6/filter/INPUT -i eth0 -j limit-3526 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-994 - inet6/filter/limit-2137 -m limit --limit 1/second -j LOG - inet6/filter/limit-2137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-994 -j DROP + inet6/filter/limit-3526 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 + inet6/filter/limit-3526 -j ACCEPT + inet6/filter/logdrop-1978 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1978 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2139 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3528 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2138 - inet/filter/limit-2138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-995 - inet/filter/limit-2138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-995 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-995 -j DROP + inet/filter/INPUT -i eth0 -j limit-3527 + inet/filter/limit-3527 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 + inet/filter/limit-3527 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1979 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1979 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2138 - inet6/filter/limit-2138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-995 - inet6/filter/limit-2138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-995 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3527 + inet6/filter/limit-3527 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 + inet6/filter/logdrop-1979 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1979 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2140 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3529 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2139 + inet/filter/INPUT -i eth0 -j limit-3528 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-996 - inet/filter/limit-2139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-996 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-996 -j DROP + inet/filter/limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1980 + inet/filter/limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1980 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1980 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2139 + inet6/filter/INPUT -i eth0 -j limit-3528 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-996 - inet6/filter/limit-2139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-996 -j DROP + inet6/filter/limit-3528 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1980 + inet6/filter/limit-3528 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1980 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1980 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2141 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3530 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2140 - inet/filter/limit-2140 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-997 - inet/filter/limit-2140 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-997 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-997 -j DROP + inet/filter/INPUT -i eth0 -j limit-3529 + inet/filter/limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1981 + inet/filter/limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1981 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1981 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2140 - inet6/filter/limit-2140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-997 - inet6/filter/limit-2140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-997 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3529 + inet6/filter/limit-3529 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1981 + inet6/filter/limit-3529 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1981 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1981 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2142 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3531 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2141 + inet/filter/INPUT -i eth0 -j limit-3530 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2141 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-998 - inet/filter/limit-2141 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2141 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-998 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-998 -j DROP + inet/filter/limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1982 + inet/filter/limit-3530 -m limit --limit 1/second -j LOG + inet/filter/limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1982 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1982 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2141 + inet6/filter/INPUT -i eth0 -j limit-3530 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-998 - inet6/filter/limit-2141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-998 -j DROP + inet6/filter/limit-3530 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1982 + inet6/filter/limit-3530 -m limit --limit 1/second -j LOG + inet6/filter/limit-3530 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1982 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1982 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2143 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3532 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2142 - inet/filter/limit-2142 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-999 - inet/filter/limit-2142 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-999 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-999 -j DROP + inet/filter/INPUT -i eth0 -j limit-3531 + inet/filter/limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1983 + inet/filter/limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-1983 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1983 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2142 - inet6/filter/limit-2142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-999 - inet6/filter/logdrop-999 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3531 + inet6/filter/limit-3531 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1983 + inet6/filter/limit-3531 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1983 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1983 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2144 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3533 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2143 + inet/filter/INPUT -i eth0 -j limit-3532 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1000 - inet/filter/limit-2143 -j ACCEPT - inet/filter/logdrop-1000 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1000 -j DROP + inet/filter/limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1984 + inet/filter/limit-3532 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3532 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1984 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1984 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2143 + inet6/filter/INPUT -i eth0 -j limit-3532 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1000 - inet6/filter/limit-2143 -j ACCEPT - inet6/filter/logdrop-1000 -j DROP + inet6/filter/limit-3532 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1984 + inet6/filter/limit-3532 -j TEE --gateway fc00::2 + inet6/filter/limit-3532 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1984 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1984 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2145 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3534 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1001 - inet/filter/logdrop-1001 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1001 -j DROP + inet/filter/INPUT -i eth0 -j limit-3533 + inet/filter/limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1985 + inet/filter/limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1985 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1985 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1001 - inet6/filter/logdrop-1001 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3533 + inet6/filter/limit-3533 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1985 + inet6/filter/limit-3533 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-1985 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1985 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2146 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3535 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2145 + inet/filter/INPUT -i eth0 -j limit-3534 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1002 - inet/filter/limit-2145 -m limit --limit 1/second -j LOG - inet/filter/limit-2145 -j ACCEPT - inet/filter/logdrop-1002 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1002 -j DROP + inet/filter/limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1986 + inet/filter/limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1986 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1986 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2145 + inet6/filter/INPUT -i eth0 -j limit-3534 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1002 - inet6/filter/limit-2145 -m limit --limit 1/second -j LOG - inet6/filter/limit-2145 -j ACCEPT - inet6/filter/logdrop-1002 -j DROP + inet6/filter/limit-3534 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1986 + inet6/filter/limit-3534 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1986 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1986 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2147 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3536 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2146 - inet/filter/limit-2146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1003 - inet/filter/limit-2146 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1003 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1003 -j DROP + inet/filter/INPUT -i eth0 -j limit-3535 + inet/filter/limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1987 + inet/filter/limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-1987 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1987 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2146 - inet6/filter/limit-2146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1003 - inet6/filter/limit-2146 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1003 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3535 + inet6/filter/limit-3535 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1987 + inet6/filter/limit-3535 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-1987 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1987 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2148 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3537 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2147 + inet/filter/INPUT -i eth0 -j limit-3536 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2147 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1004 - inet/filter/limit-2147 -j ACCEPT - inet/filter/logdrop-1004 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1004 -j DROP + inet/filter/limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1988 + inet/filter/limit-3536 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-1988 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1988 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2147 + inet6/filter/INPUT -i eth0 -j limit-3536 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1004 - inet6/filter/limit-2147 -j ACCEPT - inet6/filter/logdrop-1004 -j DROP + inet6/filter/limit-3536 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1988 + inet6/filter/limit-3536 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-1988 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1988 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2149 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3538 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1005 - inet/filter/logdrop-1005 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1005 -j DROP + inet/filter/INPUT -i eth0 -j limit-3537 + inet/filter/limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1989 + inet/filter/limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1989 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1989 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1005 - inet6/filter/logdrop-1005 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3537 + inet6/filter/limit-3537 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1989 + inet6/filter/logdrop-1989 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1989 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2150 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3539 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2149 + inet/filter/INPUT -i eth0 -j limit-3538 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1006 - inet/filter/limit-2149 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2149 -j ACCEPT - inet/filter/logdrop-1006 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1006 -j DROP + inet/filter/limit-3538 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 + inet/filter/limit-3538 -j ACCEPT + inet/filter/logdrop-1990 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1990 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2149 + inet6/filter/INPUT -i eth0 -j limit-3538 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1006 - inet6/filter/limit-2149 -j ACCEPT - inet6/filter/logdrop-1006 -j DROP + inet6/filter/limit-3538 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 + inet6/filter/limit-3538 -j ACCEPT + inet6/filter/logdrop-1990 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1990 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2151 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3540 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2150 - inet/filter/limit-2150 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1007 - inet/filter/limit-2150 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1007 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1007 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 + inet/filter/logdrop-1991 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1991 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2150 - inet6/filter/limit-2150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1007 - inet6/filter/logdrop-1007 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 + inet6/filter/logdrop-1991 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1991 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2152 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3541 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2151 + inet/filter/INPUT -i eth0 -j limit-3540 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1008 - inet/filter/limit-2151 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1008 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1008 -j DROP + inet/filter/limit-3540 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 + inet/filter/limit-3540 -m limit --limit 1/second -j LOG + inet/filter/limit-3540 -j ACCEPT + inet/filter/logdrop-1992 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1992 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2151 + inet6/filter/INPUT -i eth0 -j limit-3540 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1008 - inet6/filter/limit-2151 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1008 -j DROP + inet6/filter/limit-3540 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 + inet6/filter/limit-3540 -m limit --limit 1/second -j LOG + inet6/filter/limit-3540 -j ACCEPT + inet6/filter/logdrop-1992 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1992 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2153 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3542 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2152 - inet/filter/limit-2152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1009 - inet/filter/limit-2152 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1009 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1009 -j DROP + inet/filter/INPUT -i eth0 -j limit-3541 + inet/filter/limit-3541 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 + inet/filter/limit-3541 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1993 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1993 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2152 - inet6/filter/limit-2152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1009 - inet6/filter/limit-2152 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1009 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3541 + inet6/filter/limit-3541 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 + inet6/filter/limit-3541 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1993 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1993 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2154 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3543 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2153 + inet/filter/INPUT -i eth0 -j limit-3542 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1010 - inet/filter/limit-2153 -m limit --limit 1/second -j LOG - inet/filter/limit-2153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1010 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1010 -j DROP + inet/filter/limit-3542 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 + inet/filter/limit-3542 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3542 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3542 -j ACCEPT + inet/filter/logdrop-1994 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1994 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2153 + inet6/filter/INPUT -i eth0 -j limit-3542 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1010 - inet6/filter/limit-2153 -m limit --limit 1/second -j LOG - inet6/filter/limit-2153 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1010 -j DROP + inet6/filter/limit-3542 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 + inet6/filter/limit-3542 -j TEE --gateway fc00::2 + inet6/filter/limit-3542 -j ACCEPT + inet6/filter/logdrop-1994 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1994 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2155 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3544 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2154 - inet/filter/limit-2154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1011 - inet/filter/limit-2154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1011 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1011 -j DROP + inet/filter/INPUT -i eth0 -j limit-3543 + inet/filter/limit-3543 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 + inet/filter/limit-3543 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3543 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-1995 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1995 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2154 - inet6/filter/limit-2154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1011 - inet6/filter/limit-2154 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1011 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3543 + inet6/filter/limit-3543 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 + inet6/filter/limit-3543 -j TEE --gateway fc00::2 + inet6/filter/logdrop-1995 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1995 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2156 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3545 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2155 + inet/filter/INPUT -i eth0 -j limit-3544 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1012 - inet/filter/limit-2155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1012 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1012 -j DROP + inet/filter/limit-3544 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 + inet/filter/limit-3544 -j ACCEPT + inet/filter/logdrop-1996 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1996 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2155 + inet6/filter/INPUT -i eth0 -j limit-3544 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1012 - inet6/filter/limit-2155 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1012 -j DROP + inet6/filter/limit-3544 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 + inet6/filter/limit-3544 -j ACCEPT + inet6/filter/logdrop-1996 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1996 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2157 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3546 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2156 - inet/filter/limit-2156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1013 - inet/filter/limit-2156 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1013 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1013 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 + inet/filter/logdrop-1997 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1997 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2156 - inet6/filter/limit-2156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1013 - inet6/filter/limit-2156 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1013 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 + inet6/filter/logdrop-1997 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1997 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2158 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3547 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2157 + inet/filter/INPUT -i eth0 -j limit-3546 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1014 - inet/filter/limit-2157 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2157 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1014 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1014 -j DROP + inet/filter/limit-3546 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 + inet/filter/limit-3546 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3546 -j ACCEPT + inet/filter/logdrop-1998 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1998 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2157 + inet6/filter/INPUT -i eth0 -j limit-3546 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1014 - inet6/filter/limit-2157 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1014 -j DROP + inet6/filter/limit-3546 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 + inet6/filter/limit-3546 -j ACCEPT + inet6/filter/logdrop-1998 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1998 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2159 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3548 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2158 - inet/filter/limit-2158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1015 - inet/filter/limit-2158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1015 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1015 -j DROP + inet/filter/INPUT -i eth0 -j limit-3547 + inet/filter/limit-3547 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 + inet/filter/limit-3547 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-1999 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1999 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2158 - inet6/filter/limit-2158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1015 - inet6/filter/logdrop-1015 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3547 + inet6/filter/limit-3547 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 + inet6/filter/logdrop-1999 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1999 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2160 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3549 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2159 + inet/filter/INPUT -i eth0 -j limit-3548 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2159 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1016 - inet/filter/limit-2159 -j ACCEPT - inet/filter/logdrop-1016 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1016 -j DROP + inet/filter/limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2000 + inet/filter/limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2000 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2000 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2159 + inet6/filter/INPUT -i eth0 -j limit-3548 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2159 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1016 - inet6/filter/limit-2159 -j ACCEPT - inet6/filter/logdrop-1016 -j DROP + inet6/filter/limit-3548 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2000 + inet6/filter/limit-3548 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2000 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2000 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2161 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3550 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1017 - inet/filter/logdrop-1017 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1017 -j DROP + inet/filter/INPUT -i eth0 -j limit-3549 + inet/filter/limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2001 + inet/filter/limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-2001 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2001 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1017 - inet6/filter/logdrop-1017 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3549 + inet6/filter/limit-3549 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2001 + inet6/filter/limit-3549 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-2001 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2001 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2162 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3551 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2161 + inet/filter/INPUT -i eth0 -j limit-3550 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2161 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1018 - inet/filter/limit-2161 -m limit --limit 1/second -j LOG - inet/filter/limit-2161 -j ACCEPT - inet/filter/logdrop-1018 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1018 -j DROP + inet/filter/limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2002 + inet/filter/limit-3550 -m limit --limit 1/second -j LOG + inet/filter/limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2002 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2002 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2161 + inet6/filter/INPUT -i eth0 -j limit-3550 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2161 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1018 - inet6/filter/limit-2161 -m limit --limit 1/second -j LOG - inet6/filter/limit-2161 -j ACCEPT - inet6/filter/logdrop-1018 -j DROP + inet6/filter/limit-3550 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2002 + inet6/filter/limit-3550 -m limit --limit 1/second -j LOG + inet6/filter/limit-3550 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2002 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2002 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2163 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3552 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2162 - inet/filter/limit-2162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1019 - inet/filter/limit-2162 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1019 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1019 -j DROP + inet/filter/INPUT -i eth0 -j limit-3551 + inet/filter/limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2003 + inet/filter/limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-2003 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2003 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2162 - inet6/filter/limit-2162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1019 - inet6/filter/limit-2162 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1019 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3551 + inet6/filter/limit-3551 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2003 + inet6/filter/limit-3551 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2003 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2003 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2164 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3553 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2163 + inet/filter/INPUT -i eth0 -j limit-3552 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1020 - inet/filter/limit-2163 -j ACCEPT - inet/filter/logdrop-1020 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1020 -j DROP + inet/filter/limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2004 + inet/filter/limit-3552 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3552 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2004 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2004 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2163 + inet6/filter/INPUT -i eth0 -j limit-3552 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1020 - inet6/filter/limit-2163 -j ACCEPT - inet6/filter/logdrop-1020 -j DROP + inet6/filter/limit-3552 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2004 + inet6/filter/limit-3552 -j TEE --gateway fc00::2 + inet6/filter/limit-3552 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2004 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2004 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2165 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3554 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1021 - inet/filter/logdrop-1021 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1021 -j DROP + inet/filter/INPUT -i eth0 -j limit-3553 + inet/filter/limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2005 + inet/filter/limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2005 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2005 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1021 - inet6/filter/logdrop-1021 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3553 + inet6/filter/limit-3553 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2005 + inet6/filter/limit-3553 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-2005 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2005 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2166 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3555 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2165 + inet/filter/INPUT -i eth0 -j limit-3554 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1022 - inet/filter/limit-2165 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2165 -j ACCEPT - inet/filter/logdrop-1022 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1022 -j DROP + inet/filter/limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2006 + inet/filter/limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2006 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2006 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2165 + inet6/filter/INPUT -i eth0 -j limit-3554 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1022 - inet6/filter/limit-2165 -j ACCEPT - inet6/filter/logdrop-1022 -j DROP + inet6/filter/limit-3554 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2006 + inet6/filter/limit-3554 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2006 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2006 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2167 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3556 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2166 - inet/filter/limit-2166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1023 - inet/filter/limit-2166 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1023 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1023 -j DROP + inet/filter/INPUT -i eth0 -j limit-3555 + inet/filter/limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2007 + inet/filter/limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-2007 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2007 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2166 - inet6/filter/limit-2166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1023 - inet6/filter/logdrop-1023 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3555 + inet6/filter/limit-3555 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2007 + inet6/filter/limit-3555 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-2007 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2007 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2168 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3557 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2167 + inet/filter/INPUT -i eth0 -j limit-3556 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2167 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1024 - inet/filter/limit-2167 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1024 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1024 -j DROP + inet/filter/limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2008 + inet/filter/limit-3556 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2008 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2008 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2167 + inet6/filter/INPUT -i eth0 -j limit-3556 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2167 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1024 - inet6/filter/limit-2167 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1024 -j DROP + inet6/filter/limit-3556 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2008 + inet6/filter/limit-3556 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2008 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2008 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2169 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3558 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2168 - inet/filter/limit-2168 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1025 - inet/filter/limit-2168 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1025 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1025 -j DROP + inet/filter/INPUT -i eth0 -j limit-3557 + inet/filter/limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2009 + inet/filter/limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2009 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2009 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2168 - inet6/filter/limit-2168 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1025 - inet6/filter/limit-2168 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1025 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3557 + inet6/filter/limit-3557 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2009 + inet6/filter/logdrop-2009 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2009 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2170 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3559 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2169 + inet/filter/INPUT -i eth0 -j limit-3558 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2169 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1026 - inet/filter/limit-2169 -m limit --limit 1/second -j LOG - inet/filter/limit-2169 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1026 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1026 -j DROP + inet/filter/limit-3558 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 + inet/filter/limit-3558 -j ACCEPT + inet/filter/logdrop-2010 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2010 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2169 + inet6/filter/INPUT -i eth0 -j limit-3558 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2169 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1026 - inet6/filter/limit-2169 -m limit --limit 1/second -j LOG - inet6/filter/limit-2169 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1026 -j DROP + inet6/filter/limit-3558 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 + inet6/filter/limit-3558 -j ACCEPT + inet6/filter/logdrop-2010 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2010 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2171 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3560 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2170 - inet/filter/limit-2170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1027 - inet/filter/limit-2170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1027 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1027 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 + inet/filter/logdrop-2011 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2011 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2170 - inet6/filter/limit-2170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1027 - inet6/filter/limit-2170 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1027 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 + inet6/filter/logdrop-2011 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2011 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2172 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3561 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2171 + inet/filter/INPUT -i eth0 -j limit-3560 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1028 - inet/filter/limit-2171 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1028 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1028 -j DROP + inet/filter/limit-3560 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 + inet/filter/limit-3560 -m limit --limit 1/second -j LOG + inet/filter/limit-3560 -j ACCEPT + inet/filter/logdrop-2012 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2012 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2171 + inet6/filter/INPUT -i eth0 -j limit-3560 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1028 - inet6/filter/limit-2171 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1028 -j DROP + inet6/filter/limit-3560 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 + inet6/filter/limit-3560 -m limit --limit 1/second -j LOG + inet6/filter/limit-3560 -j ACCEPT + inet6/filter/logdrop-2012 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2012 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2173 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3562 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2172 - inet/filter/limit-2172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1029 - inet/filter/limit-2172 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1029 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1029 -j DROP + inet/filter/INPUT -i eth0 -j limit-3561 + inet/filter/limit-3561 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 + inet/filter/limit-3561 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2013 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2013 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2172 - inet6/filter/limit-2172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1029 - inet6/filter/limit-2172 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1029 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3561 + inet6/filter/limit-3561 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 + inet6/filter/limit-3561 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2013 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2013 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2174 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3563 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2173 + inet/filter/INPUT -i eth0 -j limit-3562 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1030 - inet/filter/limit-2173 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1030 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1030 -j DROP + inet/filter/limit-3562 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 + inet/filter/limit-3562 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3562 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3562 -j ACCEPT + inet/filter/logdrop-2014 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2014 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2173 + inet6/filter/INPUT -i eth0 -j limit-3562 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1030 - inet6/filter/limit-2173 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1030 -j DROP + inet6/filter/limit-3562 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 + inet6/filter/limit-3562 -j TEE --gateway fc00::2 + inet6/filter/limit-3562 -j ACCEPT + inet6/filter/logdrop-2014 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2014 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2175 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3564 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2174 - inet/filter/limit-2174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1031 - inet/filter/limit-2174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1031 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1031 -j DROP + inet/filter/INPUT -i eth0 -j limit-3563 + inet/filter/limit-3563 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 + inet/filter/limit-3563 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3563 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2015 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2015 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2174 - inet6/filter/limit-2174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1031 - inet6/filter/logdrop-1031 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3563 + inet6/filter/limit-3563 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 + inet6/filter/limit-3563 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2015 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2015 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2176 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3565 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2175 + inet/filter/INPUT -i eth0 -j limit-3564 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2175 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1032 - inet/filter/limit-2175 -j ACCEPT - inet/filter/logdrop-1032 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1032 -j DROP + inet/filter/limit-3564 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 + inet/filter/limit-3564 -j ACCEPT + inet/filter/logdrop-2016 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2016 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2175 + inet6/filter/INPUT -i eth0 -j limit-3564 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2175 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1032 - inet6/filter/limit-2175 -j ACCEPT - inet6/filter/logdrop-1032 -j DROP + inet6/filter/limit-3564 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 + inet6/filter/limit-3564 -j ACCEPT + inet6/filter/logdrop-2016 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2016 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2177 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3566 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1033 - inet/filter/logdrop-1033 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1033 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 + inet/filter/logdrop-2017 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2017 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1033 - inet6/filter/logdrop-1033 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 + inet6/filter/logdrop-2017 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2017 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2178 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3567 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2177 + inet/filter/INPUT -i eth0 -j limit-3566 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2177 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1034 - inet/filter/limit-2177 -m limit --limit 1/second -j LOG - inet/filter/limit-2177 -j ACCEPT - inet/filter/logdrop-1034 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1034 -j DROP + inet/filter/limit-3566 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 + inet/filter/limit-3566 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3566 -j ACCEPT + inet/filter/logdrop-2018 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2018 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2177 + inet6/filter/INPUT -i eth0 -j limit-3566 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2177 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1034 - inet6/filter/limit-2177 -m limit --limit 1/second -j LOG - inet6/filter/limit-2177 -j ACCEPT - inet6/filter/logdrop-1034 -j DROP + inet6/filter/limit-3566 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 + inet6/filter/limit-3566 -j ACCEPT + inet6/filter/logdrop-2018 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2018 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2179 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3568 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2178 - inet/filter/limit-2178 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1035 - inet/filter/limit-2178 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1035 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1035 -j DROP + inet/filter/INPUT -i eth0 -j limit-3567 + inet/filter/limit-3567 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 + inet/filter/limit-3567 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2019 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2019 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2178 - inet6/filter/limit-2178 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1035 - inet6/filter/limit-2178 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1035 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3567 + inet6/filter/limit-3567 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 + inet6/filter/logdrop-2019 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2019 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2180 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3569 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2179 + inet/filter/INPUT -i eth0 -j limit-3568 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2179 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1036 - inet/filter/limit-2179 -j ACCEPT - inet/filter/logdrop-1036 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1036 -j DROP + inet/filter/limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2020 + inet/filter/limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2020 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2020 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2020 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2179 + inet6/filter/INPUT -i eth0 -j limit-3568 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2179 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1036 - inet6/filter/limit-2179 -j ACCEPT - inet6/filter/logdrop-1036 -j DROP + inet6/filter/limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2020 + inet6/filter/limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2020 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2020 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2181 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3570 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1037 - inet/filter/logdrop-1037 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1037 -j DROP + inet/filter/INPUT -i eth0 -j limit-3569 + inet/filter/limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2021 + inet/filter/limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-2021 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2021 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2021 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1037 - inet6/filter/logdrop-1037 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3569 + inet6/filter/limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2021 + inet6/filter/limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2021 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2021 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2182 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3571 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2181 + inet/filter/INPUT -i eth0 -j limit-3570 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2181 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1038 - inet/filter/limit-2181 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2181 -j ACCEPT - inet/filter/logdrop-1038 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1038 -j DROP + inet/filter/limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2022 + inet/filter/limit-3570 -m limit --limit 1/second -j LOG + inet/filter/limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2022 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2022 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2022 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2181 + inet6/filter/INPUT -i eth0 -j limit-3570 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2181 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1038 - inet6/filter/limit-2181 -j ACCEPT - inet6/filter/logdrop-1038 -j DROP + inet6/filter/limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2022 + inet6/filter/limit-3570 -m limit --limit 1/second -j LOG + inet6/filter/limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2022 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2022 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2183 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3572 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2182 - inet/filter/limit-2182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1039 - inet/filter/limit-2182 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1039 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1039 -j DROP + inet/filter/INPUT -i eth0 -j limit-3571 + inet/filter/limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2023 + inet/filter/limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-2023 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2023 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2023 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2182 - inet6/filter/limit-2182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1039 - inet6/filter/logdrop-1039 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3571 + inet6/filter/limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2023 + inet6/filter/limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2023 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2023 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2184 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3573 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2183 + inet/filter/INPUT -i eth0 -j limit-3572 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2183 -m recent --name limit-2183 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2183 -m recent --name limit-2183 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2024 + inet/filter/limit-3572 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3572 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2024 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2024 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2024 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2183 + inet6/filter/INPUT -i eth0 -j limit-3572 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2183 -m recent --name limit-2183 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2183 -m recent --name limit-2183 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2024 + inet6/filter/limit-3572 -j TEE --gateway fc00::2 + inet6/filter/limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2024 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2024 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2185 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3574 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2184 - inet/filter/limit-2184 -m recent --name limit-2184 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2184 -m recent --name limit-2184 --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3573 + inet/filter/limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2025 + inet/filter/limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2025 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2025 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2025 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2184 - inet6/filter/limit-2184 -m recent --name limit-2184 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2184 -m recent --name limit-2184 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3573 + inet6/filter/limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2025 + inet6/filter/limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-2025 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2025 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2186 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3575 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2185 + inet/filter/INPUT -i eth0 -j limit-3574 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2185 -m recent --name limit-2185 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2185 -m limit --limit 1/second -j LOG - inet/filter/limit-2185 -m recent --name limit-2185 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2026 + inet/filter/limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2026 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2026 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2026 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2185 + inet6/filter/INPUT -i eth0 -j limit-3574 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2185 -m recent --name limit-2185 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2185 -m limit --limit 1/second -j LOG - inet6/filter/limit-2185 -m recent --name limit-2185 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2026 + inet6/filter/limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2026 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2026 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2187 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3576 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2186 - inet/filter/limit-2186 -m recent --name limit-2186 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2186 -m recent --name limit-2186 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3575 + inet/filter/limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2027 + inet/filter/limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-2027 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2027 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2027 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2186 - inet6/filter/limit-2186 -m recent --name limit-2186 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2186 -m recent --name limit-2186 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3575 + inet6/filter/limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2027 + inet6/filter/limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2027 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2027 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2188 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3577 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2187 + inet/filter/INPUT -i eth0 -j limit-3576 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2187 -m recent --name limit-2187 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2187 -m recent --name limit-2187 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2028 + inet/filter/limit-3576 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2028 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2028 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2028 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2187 + inet6/filter/INPUT -i eth0 -j limit-3576 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2187 -m recent --name limit-2187 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2187 -m recent --name limit-2187 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2028 + inet6/filter/limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2028 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2028 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2189 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3578 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2188 - inet/filter/limit-2188 -m recent --name limit-2188 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2188 -m recent --name limit-2188 --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3577 + inet/filter/limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2029 + inet/filter/limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2029 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2029 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2029 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2188 - inet6/filter/limit-2188 -m recent --name limit-2188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2188 -m recent --name limit-2188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3577 + inet6/filter/limit-3577 -m recent --name limit-3577 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2029 + inet6/filter/logdrop-2029 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2029 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2190 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3579 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2189 + inet/filter/INPUT -i eth0 -j limit-3578 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2189 -m recent --name limit-2189 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2189 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2189 -m recent --name limit-2189 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2030 + inet/filter/limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2030 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2030 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2030 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2189 + inet6/filter/INPUT -i eth0 -j limit-3578 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2189 -m recent --name limit-2189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2189 -m recent --name limit-2189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2030 + inet6/filter/limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2030 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2030 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2191 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3580 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2190 - inet/filter/limit-2190 -m recent --name limit-2190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2190 -m recent --name limit-2190 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3579 + inet/filter/limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2031 + inet/filter/limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-2031 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2031 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2031 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2190 - inet6/filter/limit-2190 -m recent --name limit-2190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3579 + inet6/filter/limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2031 + inet6/filter/limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2031 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2031 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2192 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3581 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2191 + inet/filter/INPUT -i eth0 -j limit-3580 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2191 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2191 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2032 + inet/filter/limit-3580 -m limit --limit 1/second -j LOG + inet/filter/limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2032 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2032 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2032 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2191 + inet6/filter/INPUT -i eth0 -j limit-3580 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2191 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2191 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2032 + inet6/filter/limit-3580 -m limit --limit 1/second -j LOG + inet6/filter/limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2032 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2032 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2193 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3582 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2192 - inet/filter/limit-2192 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2192 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3581 + inet/filter/limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2033 + inet/filter/limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-2033 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2033 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2033 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2192 - inet6/filter/limit-2192 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2192 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3581 + inet6/filter/limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2033 + inet6/filter/limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2033 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2033 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2194 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3583 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2193 + inet/filter/INPUT -i eth0 -j limit-3582 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2193 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2193 -m limit --limit 1/second -j LOG - inet/filter/limit-2193 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2034 + inet/filter/limit-3582 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3582 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2034 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2034 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2034 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2193 + inet6/filter/INPUT -i eth0 -j limit-3582 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2193 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2193 -m limit --limit 1/second -j LOG - inet6/filter/limit-2193 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2034 + inet6/filter/limit-3582 -j TEE --gateway fc00::2 + inet6/filter/limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2034 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2034 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2195 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3584 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2194 - inet/filter/limit-2194 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2194 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3583 + inet/filter/limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2035 + inet/filter/limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2035 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2035 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2035 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2194 - inet6/filter/limit-2194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3583 + inet6/filter/limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2035 + inet6/filter/limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-2035 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2035 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2196 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3585 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2195 + inet/filter/INPUT -i eth0 -j limit-3584 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2195 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2195 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2036 + inet/filter/limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2036 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2036 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2036 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2195 + inet6/filter/INPUT -i eth0 -j limit-3584 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2036 + inet6/filter/limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2036 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2036 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2197 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3586 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2196 - inet/filter/limit-2196 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2196 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3585 + inet/filter/limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2037 + inet/filter/limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-2037 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2037 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2037 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2196 - inet6/filter/limit-2196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3585 + inet6/filter/limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2037 + inet6/filter/limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2037 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2037 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2198 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3587 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2197 + inet/filter/INPUT -i eth0 -j limit-3586 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2197 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2197 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2197 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2038 + inet/filter/limit-3586 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2038 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2038 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2038 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2197 + inet6/filter/INPUT -i eth0 -j limit-3586 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2038 + inet6/filter/limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2038 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2038 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2199 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3588 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2198 - inet/filter/limit-2198 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2198 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3587 + inet/filter/limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2039 + inet/filter/limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2039 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2039 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2039 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2198 - inet6/filter/limit-2198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3587 + inet6/filter/limit-3587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2039 + inet6/filter/logdrop-2039 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2039 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2200 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3589 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2199 + inet/filter/INPUT -i eth0 -j limit-3588 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2199 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2199 -j ACCEPT + inet/filter/limit-3588 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 + inet/filter/limit-3588 -j ACCEPT + inet/filter/logdrop-2040 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2040 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2040 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2199 + inet6/filter/INPUT -i eth0 -j limit-3588 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2199 -j ACCEPT + inet6/filter/limit-3588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 + inet6/filter/limit-3588 -j ACCEPT + inet6/filter/logdrop-2040 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2040 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2201 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3590 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 + inet/filter/logdrop-2041 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2041 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2041 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 + inet6/filter/logdrop-2041 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2041 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2202 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3591 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2201 + inet/filter/INPUT -i eth0 -j limit-3590 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2201 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2201 -m limit --limit 1/second -j LOG - inet/filter/limit-2201 -j ACCEPT + inet/filter/limit-3590 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 + inet/filter/limit-3590 -m limit --limit 1/second -j LOG + inet/filter/limit-3590 -j ACCEPT + inet/filter/logdrop-2042 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2042 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2042 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2201 + inet6/filter/INPUT -i eth0 -j limit-3590 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2201 -m limit --limit 1/second -j LOG - inet6/filter/limit-2201 -j ACCEPT + inet6/filter/limit-3590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 + inet6/filter/limit-3590 -m limit --limit 1/second -j LOG + inet6/filter/limit-3590 -j ACCEPT + inet6/filter/logdrop-2042 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2042 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2203 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3592 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2202 - inet/filter/limit-2202 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2202 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3591 + inet/filter/limit-3591 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 + inet/filter/limit-3591 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2043 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2043 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2043 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2202 - inet6/filter/limit-2202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2202 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3591 + inet6/filter/limit-3591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 + inet6/filter/limit-3591 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2043 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2043 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2204 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3593 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2203 + inet/filter/INPUT -i eth0 -j limit-3592 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2203 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2203 -j ACCEPT + inet/filter/limit-3592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 + inet/filter/limit-3592 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3592 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3592 -j ACCEPT + inet/filter/logdrop-2044 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2044 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2044 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2203 + inet6/filter/INPUT -i eth0 -j limit-3592 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2203 -j ACCEPT + inet6/filter/limit-3592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 + inet6/filter/limit-3592 -j TEE --gateway fc00::2 + inet6/filter/limit-3592 -j ACCEPT + inet6/filter/logdrop-2044 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2044 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2205 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3594 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3593 + inet/filter/limit-3593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 + inet/filter/limit-3593 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3593 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2045 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2045 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2045 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3593 + inet6/filter/limit-3593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 + inet6/filter/limit-3593 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2045 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2045 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2206 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3595 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2205 + inet/filter/INPUT -i eth0 -j limit-3594 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2205 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2205 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2205 -j ACCEPT + inet/filter/limit-3594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 + inet/filter/limit-3594 -j ACCEPT + inet/filter/logdrop-2046 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2046 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2046 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2205 + inet6/filter/INPUT -i eth0 -j limit-3594 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2205 -j ACCEPT + inet6/filter/limit-3594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 + inet6/filter/limit-3594 -j ACCEPT + inet6/filter/logdrop-2046 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2046 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2207 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3596 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2206 - inet/filter/limit-2206 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2206 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 + inet/filter/logdrop-2047 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2047 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2047 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2206 - inet6/filter/limit-2206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 + inet6/filter/logdrop-2047 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2047 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2208 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3597 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2207 + inet/filter/INPUT -i eth0 -j limit-3596 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2207 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2207 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 + inet/filter/limit-3596 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3596 -j ACCEPT + inet/filter/logdrop-2048 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2048 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2048 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2207 + inet6/filter/INPUT -i eth0 -j limit-3596 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 + inet6/filter/limit-3596 -j ACCEPT + inet6/filter/logdrop-2048 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2048 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2209 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3598 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2208 - inet/filter/limit-2208 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2208 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3597 + inet/filter/limit-3597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 + inet/filter/limit-3597 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2049 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2049 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2049 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2208 - inet6/filter/limit-2208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3597 + inet6/filter/limit-3597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 + inet6/filter/logdrop-2049 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2049 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2210 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3599 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2209 + inet/filter/INPUT -i eth0 -j limit-3598 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2209 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2209 -m limit --limit 1/second -j LOG - inet/filter/limit-2209 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2050 + inet/filter/limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2050 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2050 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2050 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2209 + inet6/filter/INPUT -i eth0 -j limit-3598 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2209 -m limit --limit 1/second -j LOG - inet6/filter/limit-2209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2050 + inet6/filter/limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2050 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2050 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2211 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3600 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2210 - inet/filter/limit-2210 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2210 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3599 + inet/filter/limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2051 + inet/filter/limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-2051 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2051 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2051 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2210 - inet6/filter/limit-2210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3599 + inet6/filter/limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2051 + inet6/filter/limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2051 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2051 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2212 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3601 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2211 + inet/filter/INPUT -i eth0 -j limit-3600 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2211 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2211 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2052 + inet/filter/limit-3600 -m limit --limit 1/second -j LOG + inet/filter/limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2052 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2052 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2052 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2211 + inet6/filter/INPUT -i eth0 -j limit-3600 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2052 + inet6/filter/limit-3600 -m limit --limit 1/second -j LOG + inet6/filter/limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2052 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2052 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2213 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3602 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2212 - inet/filter/limit-2212 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2212 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3601 + inet/filter/limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2053 + inet/filter/limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-2053 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2053 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2053 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2212 - inet6/filter/limit-2212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3601 + inet6/filter/limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2053 + inet6/filter/limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2053 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2053 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2214 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3603 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2213 + inet/filter/INPUT -i eth0 -j limit-3602 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2213 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2213 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2213 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2054 + inet/filter/limit-3602 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3602 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2054 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2054 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2054 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2213 + inet6/filter/INPUT -i eth0 -j limit-3602 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2213 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2213 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2054 + inet6/filter/limit-3602 -j TEE --gateway fc00::2 + inet6/filter/limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2054 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2054 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2215 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3604 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2214 - inet/filter/limit-2214 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2214 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3603 + inet/filter/limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2055 + inet/filter/limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2055 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2055 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2055 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2214 - inet6/filter/limit-2214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3603 + inet6/filter/limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2055 + inet6/filter/limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-2055 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2055 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2216 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3605 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2215 + inet/filter/INPUT -i eth0 -j limit-3604 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2215 -j ACCEPT + inet/filter/limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2056 + inet/filter/limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2056 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2056 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2056 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2215 + inet6/filter/INPUT -i eth0 -j limit-3604 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2215 -j ACCEPT + inet6/filter/limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2056 + inet6/filter/limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2056 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2056 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2217 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3606 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3605 + inet/filter/limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2057 + inet/filter/limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-2057 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2057 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2057 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3605 + inet6/filter/limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2057 + inet6/filter/limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2057 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2057 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2218 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3607 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2217 + inet/filter/INPUT -i eth0 -j limit-3606 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2217 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2217 -m limit --limit 1/second -j LOG - inet/filter/limit-2217 -j ACCEPT + inet/filter/limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2058 + inet/filter/limit-3606 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2058 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2058 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2058 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2217 + inet6/filter/INPUT -i eth0 -j limit-3606 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2217 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2217 -m limit --limit 1/second -j LOG - inet6/filter/limit-2217 -j ACCEPT + inet6/filter/limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2058 + inet6/filter/limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2058 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2058 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2219 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3608 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2218 - inet/filter/limit-2218 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2218 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3607 + inet/filter/limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2059 + inet/filter/limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2059 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2059 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2059 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2218 - inet6/filter/limit-2218 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2218 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3607 + inet6/filter/limit-3607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2059 + inet6/filter/logdrop-2059 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2059 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2220 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3609 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2219 + inet/filter/INPUT -i eth0 -j limit-3608 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2219 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2219 -j ACCEPT + inet/filter/limit-3608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 + inet/filter/limit-3608 -j ACCEPT + inet/filter/logdrop-2060 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2060 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2060 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2219 + inet6/filter/INPUT -i eth0 -j limit-3608 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2219 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2219 -j ACCEPT + inet6/filter/limit-3608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 + inet6/filter/limit-3608 -j ACCEPT + inet6/filter/logdrop-2060 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2060 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2221 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3610 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 + inet/filter/logdrop-2061 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2061 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2061 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 + inet6/filter/logdrop-2061 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2061 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2222 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3611 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2221 + inet/filter/INPUT -i eth0 -j limit-3610 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2221 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2221 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2221 -j ACCEPT + inet/filter/limit-3610 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 + inet/filter/limit-3610 -m limit --limit 1/second -j LOG + inet/filter/limit-3610 -j ACCEPT + inet/filter/logdrop-2062 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2062 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2062 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2221 + inet6/filter/INPUT -i eth0 -j limit-3610 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2221 -j ACCEPT + inet6/filter/limit-3610 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 + inet6/filter/limit-3610 -m limit --limit 1/second -j LOG + inet6/filter/limit-3610 -j ACCEPT + inet6/filter/logdrop-2062 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2062 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2223 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3612 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2222 - inet/filter/limit-2222 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2222 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3611 + inet/filter/limit-3611 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 + inet/filter/limit-3611 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2063 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2063 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2063 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2222 - inet6/filter/limit-2222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3611 + inet6/filter/limit-3611 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 + inet6/filter/limit-3611 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2063 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2063 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2224 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3613 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2223 + inet/filter/INPUT -i eth0 -j limit-3612 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2223 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3612 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 + inet/filter/limit-3612 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3612 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3612 -j ACCEPT + inet/filter/logdrop-2064 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2064 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2064 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2223 + inet6/filter/INPUT -i eth0 -j limit-3612 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2223 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3612 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 + inet6/filter/limit-3612 -j TEE --gateway fc00::2 + inet6/filter/limit-3612 -j ACCEPT + inet6/filter/logdrop-2064 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2064 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2225 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3614 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2224 - inet/filter/limit-2224 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2224 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3613 + inet/filter/limit-3613 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 + inet/filter/limit-3613 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3613 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2065 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2065 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2065 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2224 - inet6/filter/limit-2224 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2224 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3613 + inet6/filter/limit-3613 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 + inet6/filter/limit-3613 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2065 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2065 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2226 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3615 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2225 + inet/filter/INPUT -i eth0 -j limit-3614 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2225 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2225 -m limit --limit 1/second -j LOG - inet/filter/limit-2225 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3614 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 + inet/filter/limit-3614 -j ACCEPT + inet/filter/logdrop-2066 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2066 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2066 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2225 + inet6/filter/INPUT -i eth0 -j limit-3614 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2225 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2225 -m limit --limit 1/second -j LOG - inet6/filter/limit-2225 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3614 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 + inet6/filter/limit-3614 -j ACCEPT + inet6/filter/logdrop-2066 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2066 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2227 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3616 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2226 - inet/filter/limit-2226 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2226 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 + inet/filter/logdrop-2067 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2067 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2067 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2226 - inet6/filter/limit-2226 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2226 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 + inet6/filter/logdrop-2067 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2067 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2228 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3617 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2227 + inet/filter/INPUT -i eth0 -j limit-3616 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2227 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2227 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3616 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 + inet/filter/limit-3616 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3616 -j ACCEPT + inet/filter/logdrop-2068 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2068 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2068 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2227 + inet6/filter/INPUT -i eth0 -j limit-3616 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2227 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2227 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3616 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 + inet6/filter/limit-3616 -j ACCEPT + inet6/filter/logdrop-2068 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2068 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2229 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3618 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2228 - inet/filter/limit-2228 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2228 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3617 + inet/filter/limit-3617 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 + inet/filter/limit-3617 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2069 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2069 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2069 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2228 - inet6/filter/limit-2228 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2228 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3617 + inet6/filter/limit-3617 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 + inet6/filter/logdrop-2069 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2069 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2230 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3619 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2229 + inet/filter/INPUT -i eth0 -j limit-3618 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2229 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2229 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2229 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2070 + inet/filter/limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2070 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2070 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2070 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2229 + inet6/filter/INPUT -i eth0 -j limit-3618 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2229 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2229 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3618 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2070 + inet6/filter/limit-3618 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2070 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2070 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2231 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3620 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2230 - inet/filter/limit-2230 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2230 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3619 + inet/filter/limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2071 + inet/filter/limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-2071 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2071 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2071 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2230 - inet6/filter/limit-2230 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3619 + inet6/filter/limit-3619 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2071 + inet6/filter/limit-3619 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-2071 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2071 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2232 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3621 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2231 + inet/filter/INPUT -i eth0 -j limit-3620 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2231 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2231 -j ACCEPT + inet/filter/limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2072 + inet/filter/limit-3620 -m limit --limit 1/second -j LOG + inet/filter/limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2072 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2072 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2072 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2231 + inet6/filter/INPUT -i eth0 -j limit-3620 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2231 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2231 -j ACCEPT + inet6/filter/limit-3620 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2072 + inet6/filter/limit-3620 -m limit --limit 1/second -j LOG + inet6/filter/limit-3620 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2072 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2072 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2233 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3622 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3621 + inet/filter/limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2073 + inet/filter/limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-2073 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2073 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2073 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3621 + inet6/filter/limit-3621 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2073 + inet6/filter/limit-3621 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2073 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2073 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2234 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3623 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2233 + inet/filter/INPUT -i eth0 -j limit-3622 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2233 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2233 -m limit --limit 1/second -j LOG - inet/filter/limit-2233 -j ACCEPT + inet/filter/limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2074 + inet/filter/limit-3622 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3622 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2074 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2074 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2074 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2233 + inet6/filter/INPUT -i eth0 -j limit-3622 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2233 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2233 -m limit --limit 1/second -j LOG - inet6/filter/limit-2233 -j ACCEPT + inet6/filter/limit-3622 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2074 + inet6/filter/limit-3622 -j TEE --gateway fc00::2 + inet6/filter/limit-3622 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2074 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2074 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2235 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3624 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2234 - inet/filter/limit-2234 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2234 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3623 + inet/filter/limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2075 + inet/filter/limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2075 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2075 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2075 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2234 - inet6/filter/limit-2234 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2234 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3623 + inet6/filter/limit-3623 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2075 + inet6/filter/limit-3623 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-2075 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2075 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2236 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3625 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2235 + inet/filter/INPUT -i eth0 -j limit-3624 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2235 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2235 -j ACCEPT + inet/filter/limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2076 + inet/filter/limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2076 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2076 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2076 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2235 + inet6/filter/INPUT -i eth0 -j limit-3624 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2235 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2235 -j ACCEPT + inet6/filter/limit-3624 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2076 + inet6/filter/limit-3624 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2076 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2076 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2237 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3626 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3625 + inet/filter/limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2077 + inet/filter/limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-2077 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2077 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2077 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3625 + inet6/filter/limit-3625 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2077 + inet6/filter/limit-3625 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-2077 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2077 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2238 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3627 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2237 + inet/filter/INPUT -i eth0 -j limit-3626 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2237 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2237 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2237 -j ACCEPT + inet/filter/limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2078 + inet/filter/limit-3626 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2078 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2078 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2078 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2237 + inet6/filter/INPUT -i eth0 -j limit-3626 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2237 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2237 -j ACCEPT + inet6/filter/limit-3626 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2078 + inet6/filter/limit-3626 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2078 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2078 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2239 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3628 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2238 - inet/filter/limit-2238 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2238 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3627 + inet/filter/limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2079 + inet/filter/limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2079 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2079 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2079 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2238 - inet6/filter/limit-2238 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3627 + inet6/filter/limit-3627 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2079 + inet6/filter/logdrop-2079 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2079 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2240 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3629 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2239 + inet/filter/INPUT -i eth0 -j limit-3628 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2239 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2239 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3628 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 + inet/filter/limit-3628 -j ACCEPT + inet/filter/logdrop-2080 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2080 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2080 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2239 + inet6/filter/INPUT -i eth0 -j limit-3628 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2239 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2239 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3628 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 + inet6/filter/limit-3628 -j ACCEPT + inet6/filter/logdrop-2080 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2080 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2241 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3630 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2240 - inet/filter/limit-2240 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2240 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 + inet/filter/logdrop-2081 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2081 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2081 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2240 - inet6/filter/limit-2240 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2240 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 + inet6/filter/logdrop-2081 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2081 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2242 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3631 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2241 + inet/filter/INPUT -i eth0 -j limit-3630 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2241 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2241 -m limit --limit 1/second -j LOG - inet/filter/limit-2241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3630 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 + inet/filter/limit-3630 -m limit --limit 1/second -j LOG + inet/filter/limit-3630 -j ACCEPT + inet/filter/logdrop-2082 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2082 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2082 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2241 + inet6/filter/INPUT -i eth0 -j limit-3630 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2241 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2241 -m limit --limit 1/second -j LOG - inet6/filter/limit-2241 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3630 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 + inet6/filter/limit-3630 -m limit --limit 1/second -j LOG + inet6/filter/limit-3630 -j ACCEPT + inet6/filter/logdrop-2082 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2082 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2243 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3632 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2242 - inet/filter/limit-2242 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2242 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3631 + inet/filter/limit-3631 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 + inet/filter/limit-3631 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2083 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2083 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2083 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2242 - inet6/filter/limit-2242 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2242 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3631 + inet6/filter/limit-3631 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 + inet6/filter/limit-3631 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2083 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2083 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2244 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3633 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2243 + inet/filter/INPUT -i eth0 -j limit-3632 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2243 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2243 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3632 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 + inet/filter/limit-3632 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3632 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3632 -j ACCEPT + inet/filter/logdrop-2084 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2084 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2084 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2243 + inet6/filter/INPUT -i eth0 -j limit-3632 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2243 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2243 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3632 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 + inet6/filter/limit-3632 -j TEE --gateway fc00::2 + inet6/filter/limit-3632 -j ACCEPT + inet6/filter/logdrop-2084 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2084 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2245 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3634 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2244 - inet/filter/limit-2244 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2244 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3633 + inet/filter/limit-3633 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 + inet/filter/limit-3633 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3633 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2085 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2085 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2085 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2244 - inet6/filter/limit-2244 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2244 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3633 + inet6/filter/limit-3633 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 + inet6/filter/limit-3633 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2085 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2085 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2246 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3635 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2245 + inet/filter/INPUT -i eth0 -j limit-3634 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2245 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2245 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2245 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3634 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 + inet/filter/limit-3634 -j ACCEPT + inet/filter/logdrop-2086 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2086 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2086 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2245 + inet6/filter/INPUT -i eth0 -j limit-3634 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2245 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2245 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3634 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 + inet6/filter/limit-3634 -j ACCEPT + inet6/filter/logdrop-2086 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2086 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2247 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3636 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2246 - inet/filter/limit-2246 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2246 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 + inet/filter/logdrop-2087 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2087 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2087 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2246 - inet6/filter/limit-2246 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 + inet6/filter/logdrop-2087 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2087 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2248 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3637 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2247 + inet/filter/INPUT -i eth0 -j limit-3636 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2247 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2247 -j ACCEPT + inet/filter/limit-3636 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 + inet/filter/limit-3636 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3636 -j ACCEPT + inet/filter/logdrop-2088 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2088 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2088 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2247 + inet6/filter/INPUT -i eth0 -j limit-3636 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2247 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2247 -j ACCEPT + inet6/filter/limit-3636 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 + inet6/filter/limit-3636 -j ACCEPT + inet6/filter/logdrop-2088 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2088 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2249 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3638 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3637 + inet/filter/limit-3637 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 + inet/filter/limit-3637 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2089 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2089 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2089 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3637 + inet6/filter/limit-3637 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 + inet6/filter/logdrop-2089 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2089 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2250 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3639 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2249 + inet/filter/INPUT -i eth0 -j limit-3638 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2249 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2249 -m limit --limit 1/second -j LOG - inet/filter/limit-2249 -j ACCEPT + inet/filter/limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2090 + inet/filter/limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2090 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2090 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2090 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2249 + inet6/filter/INPUT -i eth0 -j limit-3638 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2249 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2249 -m limit --limit 1/second -j LOG - inet6/filter/limit-2249 -j ACCEPT + inet6/filter/limit-3638 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2090 + inet6/filter/limit-3638 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2090 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2090 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2251 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3640 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2250 - inet/filter/limit-2250 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2250 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3639 + inet/filter/limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2091 + inet/filter/limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-2091 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2091 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2091 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2250 - inet6/filter/limit-2250 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2250 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3639 + inet6/filter/limit-3639 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2091 + inet6/filter/limit-3639 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-2091 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2091 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2252 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3641 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2251 + inet/filter/INPUT -i eth0 -j limit-3640 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2251 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2251 -j ACCEPT + inet/filter/limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2092 + inet/filter/limit-3640 -m limit --limit 1/second -j LOG + inet/filter/limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2092 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2092 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2092 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2251 + inet6/filter/INPUT -i eth0 -j limit-3640 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2251 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2251 -j ACCEPT + inet6/filter/limit-3640 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2092 + inet6/filter/limit-3640 -m limit --limit 1/second -j LOG + inet6/filter/limit-3640 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2092 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2092 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2253 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3642 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3641 + inet/filter/limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2093 + inet/filter/limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-2093 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2093 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2093 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3641 + inet6/filter/limit-3641 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2093 + inet6/filter/limit-3641 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2093 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2093 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2254 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3643 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2253 + inet/filter/INPUT -i eth0 -j limit-3642 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2253 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2253 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2253 -j ACCEPT + inet/filter/limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2094 + inet/filter/limit-3642 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3642 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2094 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2094 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2094 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2253 + inet6/filter/INPUT -i eth0 -j limit-3642 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2253 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2253 -j ACCEPT + inet6/filter/limit-3642 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2094 + inet6/filter/limit-3642 -j TEE --gateway fc00::2 + inet6/filter/limit-3642 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2094 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2094 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2255 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3644 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2254 - inet/filter/limit-2254 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2254 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3643 + inet/filter/limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2095 + inet/filter/limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2095 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2095 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2095 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2254 - inet6/filter/limit-2254 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3643 + inet6/filter/limit-3643 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2095 + inet6/filter/limit-3643 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-2095 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2095 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2256 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 3645 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2255 + inet/filter/INPUT -i eth0 -j limit-3644 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2255 -m recent --name limit-2255 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1040 - inet/filter/limit-2255 -m recent --name limit-2255 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1040 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1040 -j DROP + inet/filter/limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2096 + inet/filter/limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2096 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2096 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2096 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2255 + inet6/filter/INPUT -i eth0 -j limit-3644 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2255 -m recent --name limit-2255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1040 - inet6/filter/limit-2255 -m recent --name limit-2255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1040 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1040 -j DROP + inet6/filter/limit-3644 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2096 + inet6/filter/limit-3644 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2096 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2096 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2257 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 3646 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2256 - inet/filter/limit-2256 -m recent --name limit-2256 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1041 - inet/filter/limit-2256 -m recent --name limit-2256 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1041 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1041 -j DROP + inet/filter/INPUT -i eth0 -j limit-3645 + inet/filter/limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2097 + inet/filter/limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-2097 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2097 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2097 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2256 - inet6/filter/limit-2256 -m recent --name limit-2256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1041 - inet6/filter/limit-2256 -m recent --name limit-2256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1041 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1041 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3645 + inet6/filter/limit-3645 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2097 + inet6/filter/limit-3645 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-2097 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2097 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2258 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3647 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2257 + inet/filter/INPUT -i eth0 -j limit-3646 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2257 -m recent --name limit-2257 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1042 - inet/filter/limit-2257 -m limit --limit 1/second -j LOG - inet/filter/limit-2257 -m recent --name limit-2257 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1042 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1042 -j DROP + inet/filter/limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2098 + inet/filter/limit-3646 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2098 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2098 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2098 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2257 + inet6/filter/INPUT -i eth0 -j limit-3646 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2257 -m recent --name limit-2257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1042 - inet6/filter/limit-2257 -m limit --limit 1/second -j LOG - inet6/filter/limit-2257 -m recent --name limit-2257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1042 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1042 -j DROP + inet6/filter/limit-3646 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2098 + inet6/filter/limit-3646 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2098 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2098 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2259 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3648 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2258 - inet/filter/limit-2258 -m recent --name limit-2258 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1043 - inet/filter/limit-2258 -m recent --name limit-2258 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1043 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1043 -j DROP + inet/filter/INPUT -i eth0 -j limit-3647 + inet/filter/limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2099 + inet/filter/limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2099 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2099 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2099 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2258 - inet6/filter/limit-2258 -m recent --name limit-2258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1043 - inet6/filter/limit-2258 -m recent --name limit-2258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1043 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1043 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3647 + inet6/filter/limit-3647 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2099 + inet6/filter/logdrop-2099 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2099 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2260 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3649 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2259 + inet/filter/INPUT -i eth0 -j limit-3648 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2259 -m recent --name limit-2259 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1044 - inet/filter/limit-2259 -m recent --name limit-2259 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1044 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1044 -j DROP + inet/filter/limit-3648 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 + inet/filter/limit-3648 -j ACCEPT + inet/filter/logdrop-2100 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2100 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2100 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2259 + inet6/filter/INPUT -i eth0 -j limit-3648 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2259 -m recent --name limit-2259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1044 - inet6/filter/limit-2259 -m recent --name limit-2259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1044 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1044 -j DROP + inet6/filter/limit-3648 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 + inet6/filter/limit-3648 -j ACCEPT + inet6/filter/logdrop-2100 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2100 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2261 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3650 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2260 - inet/filter/limit-2260 -m recent --name limit-2260 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1045 - inet/filter/limit-2260 -m recent --name limit-2260 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1045 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1045 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 + inet/filter/logdrop-2101 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2101 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2101 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2260 - inet6/filter/limit-2260 -m recent --name limit-2260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1045 - inet6/filter/limit-2260 -m recent --name limit-2260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1045 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1045 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 + inet6/filter/logdrop-2101 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2101 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2262 {"flow-limit":{"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3651 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2261 + inet/filter/INPUT -i eth0 -j limit-3650 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2261 -m recent --name limit-2261 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1046 - inet/filter/limit-2261 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2261 -m recent --name limit-2261 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1046 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1046 -j DROP + inet/filter/limit-3650 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 + inet/filter/limit-3650 -m limit --limit 1/second -j LOG + inet/filter/limit-3650 -j ACCEPT + inet/filter/logdrop-2102 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2102 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2102 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2261 + inet6/filter/INPUT -i eth0 -j limit-3650 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2261 -m recent --name limit-2261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1046 - inet6/filter/limit-2261 -m recent --name limit-2261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1046 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1046 -j DROP + inet6/filter/limit-3650 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 + inet6/filter/limit-3650 -m limit --limit 1/second -j LOG + inet6/filter/limit-3650 -j ACCEPT + inet6/filter/logdrop-2102 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2102 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2263 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3652 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2262 - inet/filter/limit-2262 -m recent --name limit-2262 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1047 - inet/filter/limit-2262 -m recent --name limit-2262 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1047 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1047 -j DROP + inet/filter/INPUT -i eth0 -j limit-3651 + inet/filter/limit-3651 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 + inet/filter/limit-3651 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2103 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2103 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2103 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2262 - inet6/filter/limit-2262 -m recent --name limit-2262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1047 - inet6/filter/logdrop-1047 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1047 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3651 + inet6/filter/limit-3651 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 + inet6/filter/limit-3651 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2103 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2103 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2264 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3653 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2263 + inet/filter/INPUT -i eth0 -j limit-3652 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2263 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1048 - inet/filter/limit-2263 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1048 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1048 -j DROP + inet/filter/limit-3652 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 + inet/filter/limit-3652 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3652 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3652 -j ACCEPT + inet/filter/logdrop-2104 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2104 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2104 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2263 + inet6/filter/INPUT -i eth0 -j limit-3652 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2263 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1048 - inet6/filter/limit-2263 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1048 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1048 -j DROP + inet6/filter/limit-3652 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 + inet6/filter/limit-3652 -j TEE --gateway fc00::2 + inet6/filter/limit-3652 -j ACCEPT + inet6/filter/logdrop-2104 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2104 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2265 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3654 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2264 - inet/filter/limit-2264 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1049 - inet/filter/limit-2264 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1049 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1049 -j DROP + inet/filter/INPUT -i eth0 -j limit-3653 + inet/filter/limit-3653 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 + inet/filter/limit-3653 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3653 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2105 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2105 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2105 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2264 - inet6/filter/limit-2264 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1049 - inet6/filter/limit-2264 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1049 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1049 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3653 + inet6/filter/limit-3653 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 + inet6/filter/limit-3653 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2105 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2105 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2266 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3655 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2265 + inet/filter/INPUT -i eth0 -j limit-3654 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2265 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1050 - inet/filter/limit-2265 -m limit --limit 1/second -j LOG - inet/filter/limit-2265 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1050 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1050 -j DROP + inet/filter/limit-3654 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 + inet/filter/limit-3654 -j ACCEPT + inet/filter/logdrop-2106 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2106 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2106 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2265 + inet6/filter/INPUT -i eth0 -j limit-3654 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2265 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1050 - inet6/filter/limit-2265 -m limit --limit 1/second -j LOG - inet6/filter/limit-2265 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1050 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1050 -j DROP + inet6/filter/limit-3654 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 + inet6/filter/limit-3654 -j ACCEPT + inet6/filter/logdrop-2106 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2106 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2267 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3656 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2266 - inet/filter/limit-2266 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1051 - inet/filter/limit-2266 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1051 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1051 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 + inet/filter/logdrop-2107 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2107 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2107 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2266 - inet6/filter/limit-2266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1051 - inet6/filter/limit-2266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1051 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1051 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 + inet6/filter/logdrop-2107 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2107 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2268 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3657 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2267 + inet/filter/INPUT -i eth0 -j limit-3656 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2267 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1052 - inet/filter/limit-2267 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1052 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1052 -j DROP + inet/filter/limit-3656 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 + inet/filter/limit-3656 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3656 -j ACCEPT + inet/filter/logdrop-2108 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2108 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2108 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2267 + inet6/filter/INPUT -i eth0 -j limit-3656 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1052 - inet6/filter/limit-2267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1052 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1052 -j DROP + inet6/filter/limit-3656 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 + inet6/filter/limit-3656 -j ACCEPT + inet6/filter/logdrop-2108 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2108 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2269 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3658 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2268 - inet/filter/limit-2268 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1053 - inet/filter/limit-2268 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1053 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1053 -j DROP + inet/filter/INPUT -i eth0 -j limit-3657 + inet/filter/limit-3657 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 + inet/filter/limit-3657 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2109 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2109 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2109 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2268 - inet6/filter/limit-2268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1053 - inet6/filter/limit-2268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1053 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1053 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3657 + inet6/filter/limit-3657 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 + inet6/filter/logdrop-2109 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2109 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2270 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3659 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2269 + inet/filter/INPUT -i eth0 -j limit-3658 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2269 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1054 - inet/filter/limit-2269 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2269 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1054 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1054 -j DROP + inet/filter/limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2269 + inet6/filter/INPUT -i eth0 -j limit-3658 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1054 - inet6/filter/limit-2269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1054 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1054 -j DROP + inet6/filter/limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2271 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3660 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2270 - inet/filter/limit-2270 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1055 - inet/filter/limit-2270 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1055 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1055 -j DROP + inet/filter/INPUT -i eth0 -j limit-3659 + inet/filter/limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2270 - inet6/filter/limit-2270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1055 - inet6/filter/logdrop-1055 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1055 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3659 + inet6/filter/limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2272 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3661 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2271 + inet/filter/INPUT -i eth0 -j limit-3660 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2271 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 - inet/filter/limit-2271 -j ACCEPT - inet/filter/logdrop-1056 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1056 -j DROP + inet/filter/limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3660 -m limit --limit 1/second -j LOG + inet/filter/limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2271 + inet6/filter/INPUT -i eth0 -j limit-3660 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 - inet6/filter/limit-2271 -j ACCEPT - inet6/filter/logdrop-1056 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1056 -j DROP + inet6/filter/limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3660 -m limit --limit 1/second -j LOG + inet6/filter/limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2273 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3662 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 - inet/filter/logdrop-1057 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1057 -j DROP + inet/filter/INPUT -i eth0 -j limit-3661 + inet/filter/limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 - inet6/filter/logdrop-1057 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1057 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3661 + inet6/filter/limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2274 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3663 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2273 + inet/filter/INPUT -i eth0 -j limit-3662 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2273 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 - inet/filter/limit-2273 -m limit --limit 1/second -j LOG - inet/filter/limit-2273 -j ACCEPT - inet/filter/logdrop-1058 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1058 -j DROP + inet/filter/limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3662 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3662 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2273 + inet6/filter/INPUT -i eth0 -j limit-3662 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 - inet6/filter/limit-2273 -m limit --limit 1/second -j LOG - inet6/filter/limit-2273 -j ACCEPT - inet6/filter/logdrop-1058 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1058 -j DROP + inet6/filter/limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3662 -j TEE --gateway fc00::2 + inet6/filter/limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2275 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3664 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2274 - inet/filter/limit-2274 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 - inet/filter/limit-2274 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1059 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1059 -j DROP + inet/filter/INPUT -i eth0 -j limit-3663 + inet/filter/limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2274 - inet6/filter/limit-2274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 - inet6/filter/limit-2274 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1059 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1059 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3663 + inet6/filter/limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2276 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3665 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2275 + inet/filter/INPUT -i eth0 -j limit-3664 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2275 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1060 - inet/filter/limit-2275 -j ACCEPT - inet/filter/logdrop-1060 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1060 -j DROP + inet/filter/limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2275 + inet6/filter/INPUT -i eth0 -j limit-3664 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1060 - inet6/filter/limit-2275 -j ACCEPT - inet6/filter/logdrop-1060 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1060 -j DROP + inet6/filter/limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2277 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3666 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1061 - inet/filter/logdrop-1061 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1061 -j DROP + inet/filter/INPUT -i eth0 -j limit-3665 + inet/filter/limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1061 - inet6/filter/logdrop-1061 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1061 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3665 + inet6/filter/limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2278 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3667 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2277 + inet/filter/INPUT -i eth0 -j limit-3666 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2277 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1062 - inet/filter/limit-2277 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2277 -j ACCEPT - inet/filter/logdrop-1062 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1062 -j DROP + inet/filter/limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3666 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2277 + inet6/filter/INPUT -i eth0 -j limit-3666 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2277 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1062 - inet6/filter/limit-2277 -j ACCEPT - inet6/filter/logdrop-1062 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1062 -j DROP + inet6/filter/limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2279 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3668 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2278 - inet/filter/limit-2278 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1063 - inet/filter/limit-2278 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1063 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1063 -j DROP + inet/filter/INPUT -i eth0 -j limit-3667 + inet/filter/limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2278 - inet6/filter/limit-2278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1063 - inet6/filter/logdrop-1063 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1063 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3667 + inet6/filter/limit-3667 -m recent --name limit-3667 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2280 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3669 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2279 + inet/filter/INPUT -i eth0 -j limit-3668 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2279 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1064 - inet/filter/limit-2279 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1064 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1064 -j DROP + inet/filter/limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2279 + inet6/filter/INPUT -i eth0 -j limit-3668 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1064 - inet6/filter/limit-2279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1064 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1064 -j DROP + inet6/filter/limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2281 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3670 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2280 - inet/filter/limit-2280 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1065 - inet/filter/limit-2280 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1065 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1065 -j DROP + inet/filter/INPUT -i eth0 -j limit-3669 + inet/filter/limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2280 - inet6/filter/limit-2280 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1065 - inet6/filter/limit-2280 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1065 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1065 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3669 + inet6/filter/limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2282 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3671 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2281 + inet/filter/INPUT -i eth0 -j limit-3670 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2281 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1066 - inet/filter/limit-2281 -m limit --limit 1/second -j LOG - inet/filter/limit-2281 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1066 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1066 -j DROP + inet/filter/limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3670 -m limit --limit 1/second -j LOG + inet/filter/limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2281 + inet6/filter/INPUT -i eth0 -j limit-3670 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2281 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1066 - inet6/filter/limit-2281 -m limit --limit 1/second -j LOG - inet6/filter/limit-2281 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1066 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1066 -j DROP + inet6/filter/limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3670 -m limit --limit 1/second -j LOG + inet6/filter/limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2283 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3672 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2282 - inet/filter/limit-2282 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1067 - inet/filter/limit-2282 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1067 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1067 -j DROP + inet/filter/INPUT -i eth0 -j limit-3671 + inet/filter/limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2282 - inet6/filter/limit-2282 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1067 - inet6/filter/limit-2282 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1067 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1067 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3671 + inet6/filter/limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2284 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3673 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2283 + inet/filter/INPUT -i eth0 -j limit-3672 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2283 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1068 - inet/filter/limit-2283 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1068 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1068 -j DROP + inet/filter/limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3672 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3672 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2283 + inet6/filter/INPUT -i eth0 -j limit-3672 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2283 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1068 - inet6/filter/limit-2283 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1068 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1068 -j DROP + inet6/filter/limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3672 -j TEE --gateway fc00::2 + inet6/filter/limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2285 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3674 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2284 - inet/filter/limit-2284 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1069 - inet/filter/limit-2284 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1069 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1069 -j DROP + inet/filter/INPUT -i eth0 -j limit-3673 + inet/filter/limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2284 - inet6/filter/limit-2284 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1069 - inet6/filter/limit-2284 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1069 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1069 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3673 + inet6/filter/limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2286 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3675 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2285 + inet/filter/INPUT -i eth0 -j limit-3674 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2285 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1070 - inet/filter/limit-2285 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2285 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1070 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1070 -j DROP + inet/filter/limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2285 + inet6/filter/INPUT -i eth0 -j limit-3674 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2285 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1070 - inet6/filter/limit-2285 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1070 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1070 -j DROP + inet6/filter/limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2287 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3676 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2286 - inet/filter/limit-2286 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1071 - inet/filter/limit-2286 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1071 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1071 -j DROP + inet/filter/INPUT -i eth0 -j limit-3675 + inet/filter/limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2286 - inet6/filter/limit-2286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1071 - inet6/filter/logdrop-1071 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1071 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3675 + inet6/filter/limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2288 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3677 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2287 + inet/filter/INPUT -i eth0 -j limit-3676 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2287 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 - inet/filter/limit-2287 -j ACCEPT - inet/filter/logdrop-1072 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1072 -j DROP + inet/filter/limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3676 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2287 + inet6/filter/INPUT -i eth0 -j limit-3676 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 - inet6/filter/limit-2287 -j ACCEPT - inet6/filter/logdrop-1072 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1072 -j DROP + inet6/filter/limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2289 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3678 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 - inet/filter/logdrop-1073 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1073 -j DROP + inet/filter/INPUT -i eth0 -j limit-3677 + inet/filter/limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 - inet6/filter/logdrop-1073 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1073 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3677 + inet6/filter/limit-3677 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2290 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3679 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2289 + inet/filter/INPUT -i eth0 -j limit-3678 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2289 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 - inet/filter/limit-2289 -m limit --limit 1/second -j LOG - inet/filter/limit-2289 -j ACCEPT - inet/filter/logdrop-1074 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1074 -j DROP + inet/filter/limit-3678 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3678 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2289 + inet6/filter/INPUT -i eth0 -j limit-3678 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 - inet6/filter/limit-2289 -m limit --limit 1/second -j LOG - inet6/filter/limit-2289 -j ACCEPT - inet6/filter/logdrop-1074 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1074 -j DROP + inet6/filter/limit-3678 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3678 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2291 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3680 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2290 - inet/filter/limit-2290 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 - inet/filter/limit-2290 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1075 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1075 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2290 - inet6/filter/limit-2290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 - inet6/filter/limit-2290 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1075 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1075 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2292 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3681 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2291 + inet/filter/INPUT -i eth0 -j limit-3680 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2291 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 - inet/filter/limit-2291 -j ACCEPT - inet/filter/logdrop-1076 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1076 -j DROP + inet/filter/limit-3680 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3680 -m limit --limit 1/second -j LOG + inet/filter/limit-3680 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2291 + inet6/filter/INPUT -i eth0 -j limit-3680 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 - inet6/filter/limit-2291 -j ACCEPT - inet6/filter/logdrop-1076 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1076 -j DROP + inet6/filter/limit-3680 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3680 -m limit --limit 1/second -j LOG + inet6/filter/limit-3680 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2293 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3682 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 - inet/filter/logdrop-1077 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1077 -j DROP + inet/filter/INPUT -i eth0 -j limit-3681 + inet/filter/limit-3681 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3681 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 - inet6/filter/logdrop-1077 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1077 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3681 + inet6/filter/limit-3681 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3681 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2294 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3683 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2293 + inet/filter/INPUT -i eth0 -j limit-3682 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2293 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 - inet/filter/limit-2293 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2293 -j ACCEPT - inet/filter/logdrop-1078 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1078 -j DROP + inet/filter/limit-3682 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3682 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3682 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3682 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2293 + inet6/filter/INPUT -i eth0 -j limit-3682 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 - inet6/filter/limit-2293 -j ACCEPT - inet6/filter/logdrop-1078 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1078 -j DROP + inet6/filter/limit-3682 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3682 -j TEE --gateway fc00::2 + inet6/filter/limit-3682 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2295 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3684 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2294 - inet/filter/limit-2294 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 - inet/filter/limit-2294 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1079 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1079 -j DROP + inet/filter/INPUT -i eth0 -j limit-3683 + inet/filter/limit-3683 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3683 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3683 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2294 - inet6/filter/limit-2294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 - inet6/filter/logdrop-1079 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1079 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3683 + inet6/filter/limit-3683 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3683 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2296 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3685 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2295 + inet/filter/INPUT -i eth0 -j limit-3684 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2295 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1080 - inet/filter/limit-2295 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1080 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1080 -j DROP + inet/filter/limit-3684 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3684 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2295 + inet6/filter/INPUT -i eth0 -j limit-3684 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2295 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1080 - inet6/filter/limit-2295 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1080 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1080 -j DROP + inet6/filter/limit-3684 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3684 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2297 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3686 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2296 - inet/filter/limit-2296 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1081 - inet/filter/limit-2296 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1081 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1081 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2296 - inet6/filter/limit-2296 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1081 - inet6/filter/limit-2296 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1081 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1081 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2298 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3687 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2297 + inet/filter/INPUT -i eth0 -j limit-3686 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2297 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1082 - inet/filter/limit-2297 -m limit --limit 1/second -j LOG - inet/filter/limit-2297 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1082 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1082 -j DROP + inet/filter/limit-3686 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3686 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3686 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2297 + inet6/filter/INPUT -i eth0 -j limit-3686 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2297 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1082 - inet6/filter/limit-2297 -m limit --limit 1/second -j LOG - inet6/filter/limit-2297 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1082 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1082 -j DROP + inet6/filter/limit-3686 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3686 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2299 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3688 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2298 - inet/filter/limit-2298 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1083 - inet/filter/limit-2298 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1083 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1083 -j DROP + inet/filter/INPUT -i eth0 -j limit-3687 + inet/filter/limit-3687 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3687 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2298 - inet6/filter/limit-2298 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1083 - inet6/filter/limit-2298 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1083 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1083 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3687 + inet6/filter/limit-3687 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2300 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3689 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2299 + inet/filter/INPUT -i eth0 -j limit-3688 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2299 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1084 - inet/filter/limit-2299 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1084 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1084 -j DROP + inet/filter/limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2299 + inet6/filter/INPUT -i eth0 -j limit-3688 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2299 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1084 - inet6/filter/limit-2299 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1084 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1084 -j DROP + inet6/filter/limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2301 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3690 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2300 - inet/filter/limit-2300 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1085 - inet/filter/limit-2300 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1085 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1085 -j DROP + inet/filter/INPUT -i eth0 -j limit-3689 + inet/filter/limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2300 - inet6/filter/limit-2300 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1085 - inet6/filter/limit-2300 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1085 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1085 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3689 + inet6/filter/limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2302 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3691 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2301 + inet/filter/INPUT -i eth0 -j limit-3690 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2301 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1086 - inet/filter/limit-2301 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2301 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1086 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1086 -j DROP + inet/filter/limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3690 -m limit --limit 1/second -j LOG + inet/filter/limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2301 + inet6/filter/INPUT -i eth0 -j limit-3690 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2301 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1086 - inet6/filter/limit-2301 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1086 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1086 -j DROP + inet6/filter/limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3690 -m limit --limit 1/second -j LOG + inet6/filter/limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2303 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3692 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2302 - inet/filter/limit-2302 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1087 - inet/filter/limit-2302 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1087 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1087 -j DROP + inet/filter/INPUT -i eth0 -j limit-3691 + inet/filter/limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2302 - inet6/filter/limit-2302 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1087 - inet6/filter/logdrop-1087 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1087 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3691 + inet6/filter/limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2304 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3693 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2303 + inet/filter/INPUT -i eth0 -j limit-3692 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2303 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1088 - inet/filter/limit-2303 -j ACCEPT - inet/filter/logdrop-1088 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1088 -j DROP + inet/filter/limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3692 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3692 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2303 + inet6/filter/INPUT -i eth0 -j limit-3692 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2303 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1088 - inet6/filter/limit-2303 -j ACCEPT - inet6/filter/logdrop-1088 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1088 -j DROP + inet6/filter/limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3692 -j TEE --gateway fc00::2 + inet6/filter/limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2305 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3694 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1089 - inet/filter/logdrop-1089 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1089 -j DROP + inet/filter/INPUT -i eth0 -j limit-3693 + inet/filter/limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1089 - inet6/filter/logdrop-1089 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1089 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3693 + inet6/filter/limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2306 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3695 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2305 + inet/filter/INPUT -i eth0 -j limit-3694 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2305 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 - inet/filter/limit-2305 -m limit --limit 1/second -j LOG - inet/filter/limit-2305 -j ACCEPT - inet/filter/logdrop-1090 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1090 -j DROP + inet/filter/limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2305 + inet6/filter/INPUT -i eth0 -j limit-3694 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2305 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 - inet6/filter/limit-2305 -m limit --limit 1/second -j LOG - inet6/filter/limit-2305 -j ACCEPT - inet6/filter/logdrop-1090 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1090 -j DROP + inet6/filter/limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2307 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3696 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2306 - inet/filter/limit-2306 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 - inet/filter/limit-2306 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1091 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1091 -j DROP + inet/filter/INPUT -i eth0 -j limit-3695 + inet/filter/limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2306 - inet6/filter/limit-2306 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 - inet6/filter/limit-2306 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1091 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1091 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3695 + inet6/filter/limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2308 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3697 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2307 + inet/filter/INPUT -i eth0 -j limit-3696 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2307 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 - inet/filter/limit-2307 -j ACCEPT - inet/filter/logdrop-1092 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1092 -j DROP + inet/filter/limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3696 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2307 + inet6/filter/INPUT -i eth0 -j limit-3696 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2307 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 - inet6/filter/limit-2307 -j ACCEPT - inet6/filter/logdrop-1092 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1092 -j DROP + inet6/filter/limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2309 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3698 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 - inet/filter/logdrop-1093 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1093 -j DROP + inet/filter/INPUT -i eth0 -j limit-3697 + inet/filter/limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 - inet6/filter/logdrop-1093 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1093 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3697 + inet6/filter/limit-3697 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2310 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3699 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2309 + inet/filter/INPUT -i eth0 -j limit-3698 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2309 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 - inet/filter/limit-2309 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2309 -j ACCEPT - inet/filter/logdrop-1094 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1094 -j DROP + inet/filter/limit-3698 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3698 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2309 + inet6/filter/INPUT -i eth0 -j limit-3698 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2309 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 - inet6/filter/limit-2309 -j ACCEPT - inet6/filter/logdrop-1094 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1094 -j DROP + inet6/filter/limit-3698 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3698 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2311 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3700 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2310 - inet/filter/limit-2310 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 - inet/filter/limit-2310 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1095 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1095 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2310 - inet6/filter/limit-2310 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 - inet6/filter/logdrop-1095 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1095 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2312 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3701 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2311 + inet/filter/INPUT -i eth0 -j limit-3700 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1096 - inet/filter/limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1096 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1096 -j DROP + inet/filter/limit-3700 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3700 -m limit --limit 1/second -j LOG + inet/filter/limit-3700 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2311 + inet6/filter/INPUT -i eth0 -j limit-3700 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2311 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1096 - inet6/filter/limit-2311 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1096 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1096 -j DROP + inet6/filter/limit-3700 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3700 -m limit --limit 1/second -j LOG + inet6/filter/limit-3700 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2313 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3702 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2312 - inet/filter/limit-2312 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1097 - inet/filter/limit-2312 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1097 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1097 -j DROP + inet/filter/INPUT -i eth0 -j limit-3701 + inet/filter/limit-3701 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3701 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2312 - inet6/filter/limit-2312 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1097 - inet6/filter/limit-2312 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1097 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1097 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3701 + inet6/filter/limit-3701 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3701 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2314 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3703 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2313 + inet/filter/INPUT -i eth0 -j limit-3702 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2313 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1098 - inet/filter/limit-2313 -m limit --limit 1/second -j LOG - inet/filter/limit-2313 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1098 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1098 -j DROP + inet/filter/limit-3702 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3702 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3702 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3702 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2313 + inet6/filter/INPUT -i eth0 -j limit-3702 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2313 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1098 - inet6/filter/limit-2313 -m limit --limit 1/second -j LOG - inet6/filter/limit-2313 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1098 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1098 -j DROP + inet6/filter/limit-3702 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3702 -j TEE --gateway fc00::2 + inet6/filter/limit-3702 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2315 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3704 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2314 - inet/filter/limit-2314 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1099 - inet/filter/limit-2314 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1099 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1099 -j DROP + inet/filter/INPUT -i eth0 -j limit-3703 + inet/filter/limit-3703 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3703 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3703 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2314 - inet6/filter/limit-2314 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1099 - inet6/filter/limit-2314 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1099 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1099 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3703 + inet6/filter/limit-3703 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3703 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2316 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3705 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2315 + inet/filter/INPUT -i eth0 -j limit-3704 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2315 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1100 - inet/filter/limit-2315 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1100 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1100 -j DROP + inet/filter/limit-3704 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3704 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2315 + inet6/filter/INPUT -i eth0 -j limit-3704 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2315 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1100 - inet6/filter/limit-2315 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1100 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1100 -j DROP + inet6/filter/limit-3704 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3704 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2317 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3706 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2316 - inet/filter/limit-2316 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1101 - inet/filter/limit-2316 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1101 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1101 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2316 - inet6/filter/limit-2316 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1101 - inet6/filter/limit-2316 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1101 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1101 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2318 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3707 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2317 + inet/filter/INPUT -i eth0 -j limit-3706 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2317 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1102 - inet/filter/limit-2317 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2317 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1102 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1102 -j DROP + inet/filter/limit-3706 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3706 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3706 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2317 + inet6/filter/INPUT -i eth0 -j limit-3706 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2317 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1102 - inet6/filter/limit-2317 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1102 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1102 -j DROP + inet6/filter/limit-3706 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3706 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2319 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3708 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2318 - inet/filter/limit-2318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1103 - inet/filter/limit-2318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1103 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1103 -j DROP + inet/filter/INPUT -i eth0 -j limit-3707 + inet/filter/limit-3707 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3707 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2318 - inet6/filter/limit-2318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1103 - inet6/filter/logdrop-1103 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1103 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3707 + inet6/filter/limit-3707 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2320 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3709 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2319 + inet/filter/INPUT -i eth0 -j limit-3708 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2319 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1104 - inet/filter/limit-2319 -j ACCEPT - inet/filter/logdrop-1104 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1104 -j DROP + inet/filter/limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2319 + inet6/filter/INPUT -i eth0 -j limit-3708 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2319 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1104 - inet6/filter/limit-2319 -j ACCEPT - inet6/filter/logdrop-1104 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1104 -j DROP + inet6/filter/limit-3708 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3708 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2321 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3710 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1105 - inet/filter/logdrop-1105 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1105 -j DROP + inet/filter/INPUT -i eth0 -j limit-3709 + inet/filter/limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1105 - inet6/filter/logdrop-1105 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1105 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3709 + inet6/filter/limit-3709 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3709 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2322 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3711 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2321 + inet/filter/INPUT -i eth0 -j limit-3710 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2321 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1106 - inet/filter/limit-2321 -m limit --limit 1/second -j LOG - inet/filter/limit-2321 -j ACCEPT - inet/filter/logdrop-1106 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1106 -j DROP + inet/filter/limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3710 -m limit --limit 1/second -j LOG + inet/filter/limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2321 + inet6/filter/INPUT -i eth0 -j limit-3710 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2321 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1106 - inet6/filter/limit-2321 -m limit --limit 1/second -j LOG - inet6/filter/limit-2321 -j ACCEPT - inet6/filter/logdrop-1106 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1106 -j DROP + inet6/filter/limit-3710 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3710 -m limit --limit 1/second -j LOG + inet6/filter/limit-3710 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2323 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3712 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2322 - inet/filter/limit-2322 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1107 - inet/filter/limit-2322 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1107 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1107 -j DROP + inet/filter/INPUT -i eth0 -j limit-3711 + inet/filter/limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2322 - inet6/filter/limit-2322 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1107 - inet6/filter/limit-2322 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1107 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1107 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3711 + inet6/filter/limit-3711 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3711 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2324 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3713 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2323 + inet/filter/INPUT -i eth0 -j limit-3712 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2323 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1108 - inet/filter/limit-2323 -j ACCEPT - inet/filter/logdrop-1108 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1108 -j DROP + inet/filter/limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3712 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3712 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2323 + inet6/filter/INPUT -i eth0 -j limit-3712 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2323 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1108 - inet6/filter/limit-2323 -j ACCEPT - inet6/filter/logdrop-1108 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1108 -j DROP + inet6/filter/limit-3712 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3712 -j TEE --gateway fc00::2 + inet6/filter/limit-3712 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2325 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3714 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1109 - inet/filter/logdrop-1109 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1109 -j DROP + inet/filter/INPUT -i eth0 -j limit-3713 + inet/filter/limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1109 - inet6/filter/logdrop-1109 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1109 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3713 + inet6/filter/limit-3713 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3713 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2326 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3715 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2325 + inet/filter/INPUT -i eth0 -j limit-3714 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2325 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1110 - inet/filter/limit-2325 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2325 -j ACCEPT - inet/filter/logdrop-1110 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1110 -j DROP + inet/filter/limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2325 + inet6/filter/INPUT -i eth0 -j limit-3714 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2325 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1110 - inet6/filter/limit-2325 -j ACCEPT - inet6/filter/logdrop-1110 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1110 -j DROP + inet6/filter/limit-3714 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3714 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2327 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3716 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2326 - inet/filter/limit-2326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1111 - inet/filter/limit-2326 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1111 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1111 -j DROP + inet/filter/INPUT -i eth0 -j limit-3715 + inet/filter/limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2326 - inet6/filter/limit-2326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1111 - inet6/filter/logdrop-1111 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1111 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3715 + inet6/filter/limit-3715 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3715 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2328 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 3717 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2327 + inet/filter/INPUT -i eth0 -j limit-3716 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3716 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2327 + inet6/filter/INPUT -i eth0 -j limit-3716 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3716 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3716 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2329 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 3718 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2328 - inet/filter/limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3717 + inet/filter/limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2328 - inet6/filter/limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3717 + inet6/filter/limit-3717 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2330 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3719 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2329 + inet/filter/INPUT -i eth0 -j limit-3718 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2329 -m limit --limit 1/second -j LOG - inet/filter/limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3718 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3718 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2329 + inet6/filter/INPUT -i eth0 -j limit-3718 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2329 -m limit --limit 1/second -j LOG - inet6/filter/limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3718 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3718 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2331 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3720 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2330 - inet/filter/limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2330 - inet6/filter/limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2332 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3721 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2331 + inet/filter/INPUT -i eth0 -j limit-3720 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3720 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3720 -m limit --limit 1/second -j LOG + inet/filter/limit-3720 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2331 + inet6/filter/INPUT -i eth0 -j limit-3720 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2331 -m recent --name limit-2331 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2331 -m recent --name limit-2331 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3720 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3720 -m limit --limit 1/second -j LOG + inet6/filter/limit-3720 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2333 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3722 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2332 - inet/filter/limit-2332 -m recent --name limit-2332 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2332 -m recent --name limit-2332 --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3721 + inet/filter/limit-3721 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3721 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2332 - inet6/filter/limit-2332 -m recent --name limit-2332 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2332 -m recent --name limit-2332 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3721 + inet6/filter/limit-3721 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3721 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2334 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3723 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2333 + inet/filter/INPUT -i eth0 -j limit-3722 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2333 -m recent --name limit-2333 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2333 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2333 -m recent --name limit-2333 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3722 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3722 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3722 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3722 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2333 + inet6/filter/INPUT -i eth0 -j limit-3722 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2333 -m recent --name limit-2333 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2333 -m recent --name limit-2333 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3722 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3722 -j TEE --gateway fc00::2 + inet6/filter/limit-3722 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2335 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3724 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2334 - inet/filter/limit-2334 -m recent --name limit-2334 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2334 -m recent --name limit-2334 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3723 + inet/filter/limit-3723 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3723 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3723 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2334 - inet6/filter/limit-2334 -m recent --name limit-2334 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3723 + inet6/filter/limit-3723 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3723 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2336 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3725 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2335 + inet/filter/INPUT -i eth0 -j limit-3724 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3724 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3724 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2335 + inet6/filter/INPUT -i eth0 -j limit-3724 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3724 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3724 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2337 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3726 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2336 - inet/filter/limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2336 - inet6/filter/limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2338 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3727 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2337 + inet/filter/INPUT -i eth0 -j limit-3726 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2337 -m limit --limit 1/second -j LOG - inet/filter/limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3726 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3726 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3726 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2337 + inet6/filter/INPUT -i eth0 -j limit-3726 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2337 -m limit --limit 1/second -j LOG - inet6/filter/limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3726 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3726 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2339 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3728 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2338 - inet/filter/limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3727 + inet/filter/limit-3727 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3727 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2338 - inet6/filter/limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3727 + inet6/filter/limit-3727 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2340 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3729 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2339 + inet/filter/INPUT -i eth0 -j limit-3728 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2339 + inet6/filter/INPUT -i eth0 -j limit-3728 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3728 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3728 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2341 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3730 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2340 - inet/filter/limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3729 + inet/filter/limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2340 - inet6/filter/limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3729 + inet6/filter/limit-3729 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3729 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2342 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3731 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2341 + inet/filter/INPUT -i eth0 -j limit-3730 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2341 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3730 -m limit --limit 1/second -j LOG + inet/filter/limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2341 + inet6/filter/INPUT -i eth0 -j limit-3730 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2341 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2341 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3730 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3730 -m limit --limit 1/second -j LOG + inet6/filter/limit-3730 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2343 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3732 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2342 - inet/filter/limit-2342 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2342 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3731 + inet/filter/limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2342 - inet6/filter/limit-2342 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3731 + inet6/filter/limit-3731 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3731 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2344 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3733 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2343 + inet/filter/INPUT -i eth0 -j limit-3732 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2343 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2343 -j ACCEPT + inet/filter/limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3732 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3732 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2343 + inet6/filter/INPUT -i eth0 -j limit-3732 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2343 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2343 -j ACCEPT + inet6/filter/limit-3732 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3732 -j TEE --gateway fc00::2 + inet6/filter/limit-3732 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2345 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3734 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3733 + inet/filter/limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3733 + inet6/filter/limit-3733 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3733 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2346 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3735 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2345 + inet/filter/INPUT -i eth0 -j limit-3734 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2345 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2345 -m limit --limit 1/second -j LOG - inet/filter/limit-2345 -j ACCEPT + inet/filter/limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2345 + inet6/filter/INPUT -i eth0 -j limit-3734 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2345 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2345 -m limit --limit 1/second -j LOG - inet6/filter/limit-2345 -j ACCEPT + inet6/filter/limit-3734 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3734 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2347 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3736 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2346 - inet/filter/limit-2346 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2346 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3735 + inet/filter/limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2346 - inet6/filter/limit-2346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2346 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3735 + inet6/filter/limit-3735 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3735 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2348 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3737 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2347 + inet/filter/INPUT -i eth0 -j limit-3736 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2347 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2347 -j ACCEPT + inet/filter/limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3736 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2347 + inet6/filter/INPUT -i eth0 -j limit-3736 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2347 -j ACCEPT + inet6/filter/limit-3736 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3736 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2349 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3738 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3737 + inet/filter/limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3737 + inet6/filter/limit-3737 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2350 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3739 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2349 + inet/filter/INPUT -i eth0 -j limit-3738 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2349 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2349 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2349 -j ACCEPT + inet/filter/limit-3738 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3738 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2349 + inet6/filter/INPUT -i eth0 -j limit-3738 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2349 -j ACCEPT + inet6/filter/limit-3738 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3738 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2351 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3740 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2350 - inet/filter/limit-2350 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2350 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2350 - inet6/filter/limit-2350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2352 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3741 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2351 + inet/filter/INPUT -i eth0 -j limit-3740 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2351 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2351 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3740 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3740 -m limit --limit 1/second -j LOG + inet/filter/limit-3740 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2351 + inet6/filter/INPUT -i eth0 -j limit-3740 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2351 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2351 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3740 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3740 -m limit --limit 1/second -j LOG + inet6/filter/limit-3740 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2353 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3742 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2352 - inet/filter/limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -j limit-3741 + inet/filter/limit-3741 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3741 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2352 - inet6/filter/limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -j limit-3741 + inet6/filter/limit-3741 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3741 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2354 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3743 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2353 + inet/filter/INPUT -i eth0 -j limit-3742 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2353 -m limit --limit 1/second -j LOG - inet/filter/limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3742 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3742 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3742 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3742 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2353 + inet6/filter/INPUT -i eth0 -j limit-3742 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2353 -m limit --limit 1/second -j LOG - inet6/filter/limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3742 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3742 -j TEE --gateway fc00::2 + inet6/filter/limit-3742 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2355 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3744 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2354 - inet/filter/limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3743 + inet/filter/limit-3743 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3743 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3743 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2354 - inet6/filter/limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3743 + inet6/filter/limit-3743 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3743 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2356 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3745 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2355 + inet/filter/INPUT -i eth0 -j limit-3744 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3744 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3744 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2355 + inet6/filter/INPUT -i eth0 -j limit-3744 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3744 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3744 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2357 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3746 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2356 - inet/filter/limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2356 - inet6/filter/limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2358 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3747 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2357 + inet/filter/INPUT -i eth0 -j limit-3746 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2357 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/limit-3746 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3746 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3746 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2357 + inet6/filter/INPUT -i eth0 -j limit-3746 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/limit-3746 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-3746 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2359 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3748 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2358 - inet/filter/limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3747 + inet/filter/limit-3747 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-3747 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2358 - inet6/filter/limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3747 + inet6/filter/limit-3747 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2360 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3749 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2359 + inet/filter/INPUT -i eth0 -j limit-3748 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2359 -j ACCEPT + inet/filter/limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2110 + inet/filter/limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2110 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2110 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2359 + inet6/filter/INPUT -i eth0 -j limit-3748 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2359 -j ACCEPT + inet6/filter/limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2110 + inet6/filter/limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2110 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2361 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3750 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3749 + inet/filter/limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2111 + inet/filter/limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-2111 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2111 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3749 + inet6/filter/limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2111 + inet6/filter/limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2111 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2362 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3751 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2361 + inet/filter/INPUT -i eth0 -j limit-3750 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2361 -m limit --limit 1/second -j LOG - inet/filter/limit-2361 -j ACCEPT + inet/filter/limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2112 + inet/filter/limit-3750 -m limit --limit 1/second -j LOG + inet/filter/limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2112 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2112 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2361 + inet6/filter/INPUT -i eth0 -j limit-3750 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2361 -m limit --limit 1/second -j LOG - inet6/filter/limit-2361 -j ACCEPT + inet6/filter/limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2112 + inet6/filter/limit-3750 -m limit --limit 1/second -j LOG + inet6/filter/limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2112 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2363 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3752 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2362 - inet/filter/limit-2362 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2362 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3751 + inet/filter/limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2113 + inet/filter/limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-2113 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2113 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2362 - inet6/filter/limit-2362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2362 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3751 + inet6/filter/limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2113 + inet6/filter/limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2113 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2364 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3753 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2363 + inet/filter/INPUT -i eth0 -j limit-3752 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2363 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2363 -j ACCEPT + inet/filter/limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2114 + inet/filter/limit-3752 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3752 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2114 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2114 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2363 + inet6/filter/INPUT -i eth0 -j limit-3752 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2363 -j ACCEPT + inet6/filter/limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2114 + inet6/filter/limit-3752 -j TEE --gateway fc00::2 + inet6/filter/limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2114 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2365 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3754 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3753 + inet/filter/limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2115 + inet/filter/limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2115 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2115 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3753 + inet6/filter/limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2115 + inet6/filter/limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-2115 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2366 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3755 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2365 + inet/filter/INPUT -i eth0 -j limit-3754 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2365 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2365 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2365 -j ACCEPT + inet/filter/limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2116 + inet/filter/limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2116 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2116 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2365 + inet6/filter/INPUT -i eth0 -j limit-3754 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2365 -j ACCEPT + inet6/filter/limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2116 + inet6/filter/limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2116 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2367 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3756 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2366 - inet/filter/limit-2366 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2366 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3755 + inet/filter/limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2117 + inet/filter/limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-2117 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2117 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2366 - inet6/filter/limit-2366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3755 + inet6/filter/limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2117 + inet6/filter/limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2117 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2368 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3757 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2367 + inet/filter/INPUT -i eth0 -j limit-3756 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2367 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2367 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2118 + inet/filter/limit-3756 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2118 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2118 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2367 + inet6/filter/INPUT -i eth0 -j limit-3756 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2367 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2367 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2118 + inet6/filter/limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2118 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2369 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3758 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2368 - inet/filter/limit-2368 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2368 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3757 + inet/filter/limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2119 + inet/filter/limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2119 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2119 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2368 - inet6/filter/limit-2368 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2368 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3757 + inet6/filter/limit-3757 -m recent --name limit-3757 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2119 + inet6/filter/logdrop-2119 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2370 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3759 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2369 + inet/filter/INPUT -i eth0 -j limit-3758 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2369 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2369 -m limit --limit 1/second -j LOG - inet/filter/limit-2369 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2120 + inet/filter/limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2120 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2120 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2369 + inet6/filter/INPUT -i eth0 -j limit-3758 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2369 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2369 -m limit --limit 1/second -j LOG - inet6/filter/limit-2369 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2120 + inet6/filter/limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2120 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2371 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3760 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2370 - inet/filter/limit-2370 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2370 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3759 + inet/filter/limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2121 + inet/filter/limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-2121 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2121 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2370 - inet6/filter/limit-2370 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2370 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3759 + inet6/filter/limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2121 + inet6/filter/limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2121 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2372 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3761 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2371 + inet/filter/INPUT -i eth0 -j limit-3760 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2371 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2371 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2122 + inet/filter/limit-3760 -m limit --limit 1/second -j LOG + inet/filter/limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2122 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2122 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2371 + inet6/filter/INPUT -i eth0 -j limit-3760 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2371 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2371 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2122 + inet6/filter/limit-3760 -m limit --limit 1/second -j LOG + inet6/filter/limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2122 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2373 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3762 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2372 - inet/filter/limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3761 + inet/filter/limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2123 + inet/filter/limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-2123 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2123 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2372 - inet6/filter/limit-2372 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2372 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3761 + inet6/filter/limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2123 + inet6/filter/limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2123 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2374 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3763 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2373 + inet/filter/INPUT -i eth0 -j limit-3762 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2373 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2124 + inet/filter/limit-3762 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3762 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2124 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2124 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2373 + inet6/filter/INPUT -i eth0 -j limit-3762 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2373 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2373 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2124 + inet6/filter/limit-3762 -j TEE --gateway fc00::2 + inet6/filter/limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2124 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2375 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3764 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2374 - inet/filter/limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3763 + inet/filter/limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2125 + inet/filter/limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2125 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2125 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2374 - inet6/filter/limit-2374 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3763 + inet6/filter/limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2125 + inet6/filter/limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-2125 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2376 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3765 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2375 + inet/filter/INPUT -i eth0 -j limit-3764 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2375 -j ACCEPT + inet/filter/limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2126 + inet/filter/limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2126 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2126 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2375 + inet6/filter/INPUT -i eth0 -j limit-3764 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2375 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2375 -j ACCEPT + inet6/filter/limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2126 + inet6/filter/limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2126 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2377 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3766 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3765 + inet/filter/limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2127 + inet/filter/limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet/filter/logdrop-2127 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2127 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3765 + inet6/filter/limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2127 + inet6/filter/limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2127 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2378 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3767 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2377 + inet/filter/INPUT -i eth0 -j limit-3766 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2377 -m limit --limit 1/second -j LOG - inet/filter/limit-2377 -j ACCEPT + inet/filter/limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2128 + inet/filter/limit-3766 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2128 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2128 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2377 + inet6/filter/INPUT -i eth0 -j limit-3766 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2377 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2377 -m limit --limit 1/second -j LOG - inet6/filter/limit-2377 -j ACCEPT + inet6/filter/limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2128 + inet6/filter/limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2128 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2379 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3768 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2378 - inet/filter/limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2378 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3767 + inet/filter/limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2129 + inet/filter/limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2129 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2129 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2378 - inet6/filter/limit-2378 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2378 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3767 + inet6/filter/limit-3767 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2129 + inet6/filter/logdrop-2129 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2380 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3769 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2379 + inet/filter/INPUT -i eth0 -j limit-3768 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2379 -j ACCEPT + inet/filter/limit-3768 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 + inet/filter/limit-3768 -j ACCEPT + inet/filter/logdrop-2130 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2130 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2379 + inet6/filter/INPUT -i eth0 -j limit-3768 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2379 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2379 -j ACCEPT + inet6/filter/limit-3768 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 + inet6/filter/limit-3768 -j ACCEPT + inet6/filter/logdrop-2130 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2381 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3770 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 + inet/filter/logdrop-2131 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2131 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 + inet6/filter/logdrop-2131 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2382 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3771 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2381 + inet/filter/INPUT -i eth0 -j limit-3770 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2381 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2381 -j ACCEPT + inet/filter/limit-3770 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 + inet/filter/limit-3770 -m limit --limit 1/second -j LOG + inet/filter/limit-3770 -j ACCEPT + inet/filter/logdrop-2132 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2132 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2381 + inet6/filter/INPUT -i eth0 -j limit-3770 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2381 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2381 -j ACCEPT + inet6/filter/limit-3770 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 + inet6/filter/limit-3770 -m limit --limit 1/second -j LOG + inet6/filter/limit-3770 -j ACCEPT + inet6/filter/logdrop-2132 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2383 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3772 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2382 - inet/filter/limit-2382 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2382 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3771 + inet/filter/limit-3771 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 + inet/filter/limit-3771 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2133 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2133 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2382 - inet6/filter/limit-2382 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3771 + inet6/filter/limit-3771 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 + inet6/filter/limit-3771 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2133 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2384 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3773 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2383 + inet/filter/INPUT -i eth0 -j limit-3772 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2383 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2383 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3772 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 + inet/filter/limit-3772 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3772 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3772 -j ACCEPT + inet/filter/logdrop-2134 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2134 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2383 + inet6/filter/INPUT -i eth0 -j limit-3772 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2383 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2383 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3772 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 + inet6/filter/limit-3772 -j TEE --gateway fc00::2 + inet6/filter/limit-3772 -j ACCEPT + inet6/filter/logdrop-2134 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2385 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3774 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2384 - inet/filter/limit-2384 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2384 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3773 + inet/filter/limit-3773 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 + inet/filter/limit-3773 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3773 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2135 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2135 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2384 - inet6/filter/limit-2384 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2384 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3773 + inet6/filter/limit-3773 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 + inet6/filter/limit-3773 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2135 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2386 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3775 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2385 + inet/filter/INPUT -i eth0 -j limit-3774 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2385 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2385 -m limit --limit 1/second -j LOG - inet/filter/limit-2385 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3774 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 + inet/filter/limit-3774 -j ACCEPT + inet/filter/logdrop-2136 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2136 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2385 + inet6/filter/INPUT -i eth0 -j limit-3774 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2385 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2385 -m limit --limit 1/second -j LOG - inet6/filter/limit-2385 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3774 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 + inet6/filter/limit-3774 -j ACCEPT + inet6/filter/logdrop-2136 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2387 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3776 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2386 - inet/filter/limit-2386 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2386 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 + inet/filter/logdrop-2137 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2137 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2386 - inet6/filter/limit-2386 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2386 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 + inet6/filter/logdrop-2137 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2388 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3777 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2387 + inet/filter/INPUT -i eth0 -j limit-3776 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2387 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2387 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3776 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 + inet/filter/limit-3776 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3776 -j ACCEPT + inet/filter/logdrop-2138 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2138 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2387 + inet6/filter/INPUT -i eth0 -j limit-3776 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2387 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2387 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3776 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 + inet6/filter/limit-3776 -j ACCEPT + inet6/filter/logdrop-2138 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2389 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3778 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2388 - inet/filter/limit-2388 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2388 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/INPUT -i eth0 -j limit-3777 + inet/filter/limit-3777 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 + inet/filter/limit-3777 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2139 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2139 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2388 - inet6/filter/limit-2388 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2388 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/INPUT -i eth0 -j limit-3777 + inet6/filter/limit-3777 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 + inet6/filter/logdrop-2139 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2390 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3779 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2389 + inet/filter/INPUT -i eth0 -j limit-3778 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2389 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2389 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2389 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2140 + inet/filter/limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2140 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2140 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2389 + inet6/filter/INPUT -i eth0 -j limit-3778 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2389 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2389 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2140 + inet6/filter/limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2140 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2391 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3780 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2390 - inet/filter/limit-2390 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2390 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3779 + inet/filter/limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2141 + inet/filter/limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-2141 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2141 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2390 - inet6/filter/limit-2390 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3779 + inet6/filter/limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2141 + inet6/filter/limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2141 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2392 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3781 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2391 + inet/filter/INPUT -i eth0 -j limit-3780 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2391 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2391 -j ACCEPT + inet/filter/limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2142 + inet/filter/limit-3780 -m limit --limit 1/second -j LOG + inet/filter/limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2142 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2142 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2391 + inet6/filter/INPUT -i eth0 -j limit-3780 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2391 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2391 -j ACCEPT + inet6/filter/limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2142 + inet6/filter/limit-3780 -m limit --limit 1/second -j LOG + inet6/filter/limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2142 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2393 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3782 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -j limit-3781 + inet/filter/limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2143 + inet/filter/limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-2143 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2143 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3781 + inet6/filter/limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2143 + inet6/filter/limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2143 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3783 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3782 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2144 + inet/filter/limit-3782 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3782 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2144 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2144 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3782 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2144 + inet6/filter/limit-3782 -j TEE --gateway fc00::2 + inet6/filter/limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2144 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3784 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3783 + inet/filter/limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2145 + inet/filter/limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2145 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2145 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3783 + inet6/filter/limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2145 + inet6/filter/limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-2145 -j DROP + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3785 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3784 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2146 + inet/filter/limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2146 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2146 -j DROP + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3784 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2146 + inet6/filter/limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2146 -j DROP + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 3786 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-3785 + inet/filter/limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2147 + inet/filter/limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet/filter/logdrop-2147 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2147 -j DROP + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3785 + inet6/filter/limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2147 + inet6/filter/limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet6/filter/logdrop-2147 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2394 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3787 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2393 + inet/filter/INPUT -i eth0 -j limit-3786 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2393 -m limit --limit 1/second -j LOG - inet/filter/limit-2393 -j ACCEPT + inet/filter/limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2148 + inet/filter/limit-3786 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet/filter/logdrop-2148 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2148 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2393 + inet6/filter/INPUT -i eth0 -j limit-3786 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2393 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2393 -m limit --limit 1/second -j LOG - inet6/filter/limit-2393 -j ACCEPT + inet6/filter/limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2148 + inet6/filter/limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet6/filter/logdrop-2148 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2395 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3788 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2394 - inet/filter/limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2394 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-3787 + inet/filter/limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2149 + inet/filter/limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2149 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2149 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2394 - inet6/filter/limit-2394 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2394 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -j limit-3787 + inet6/filter/limit-3787 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2149 + inet6/filter/logdrop-2149 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2396 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3789 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2395 + inet/filter/INPUT -i eth0 -j limit-3788 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2395 -j ACCEPT + inet/filter/limit-3788 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 + inet/filter/limit-3788 -j ACCEPT + inet/filter/logdrop-2150 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2150 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2395 + inet6/filter/INPUT -i eth0 -j limit-3788 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2395 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2395 -j ACCEPT + inet6/filter/limit-3788 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 + inet6/filter/limit-3788 -j ACCEPT + inet6/filter/logdrop-2150 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2397 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3790 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 + inet/filter/logdrop-2151 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2151 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 + inet6/filter/logdrop-2151 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2398 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3791 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2397 + inet/filter/INPUT -i eth0 -j limit-3790 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2397 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2397 -j ACCEPT + inet/filter/limit-3790 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 + inet/filter/limit-3790 -m limit --limit 1/second -j LOG + inet/filter/limit-3790 -j ACCEPT + inet/filter/logdrop-2152 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2152 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2397 + inet6/filter/INPUT -i eth0 -j limit-3790 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2397 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-2397 -j ACCEPT + inet6/filter/limit-3790 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 + inet6/filter/limit-3790 -m limit --limit 1/second -j LOG + inet6/filter/limit-3790 -j ACCEPT + inet6/filter/logdrop-2152 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2399 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3792 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2398 - inet/filter/limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-2398 -m limit --limit 12/minute -j ULOG + inet/filter/INPUT -i eth0 -j limit-3791 + inet/filter/limit-3791 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 + inet/filter/limit-3791 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2153 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2153 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2398 - inet6/filter/limit-2398 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3791 + inet6/filter/limit-3791 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 + inet6/filter/limit-3791 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2153 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2400 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} +Filter 3793 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2399 + inet/filter/INPUT -i eth0 -j limit-3792 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2399 -m recent --name limit-2399 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1112 - inet/filter/limit-2399 -m recent --name limit-2399 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1112 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1112 -j DROP + inet/filter/limit-3792 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 + inet/filter/limit-3792 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3792 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3792 -j ACCEPT + inet/filter/logdrop-2154 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2154 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2399 + inet6/filter/INPUT -i eth0 -j limit-3792 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2399 -m recent --name limit-2399 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1112 - inet6/filter/limit-2399 -m recent --name limit-2399 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1112 -j DROP + inet6/filter/limit-3792 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 + inet6/filter/limit-3792 -j TEE --gateway fc00::2 + inet6/filter/limit-3792 -j ACCEPT + inet6/filter/logdrop-2154 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2401 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} +Filter 3794 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2400 - inet/filter/limit-2400 -m recent --name limit-2400 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1113 - inet/filter/limit-2400 -m recent --name limit-2400 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1113 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1113 -j DROP + inet/filter/INPUT -i eth0 -j limit-3793 + inet/filter/limit-3793 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 + inet/filter/limit-3793 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3793 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2155 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2155 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2400 - inet6/filter/limit-2400 -m recent --name limit-2400 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1113 - inet6/filter/limit-2400 -m recent --name limit-2400 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1113 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3793 + inet6/filter/limit-3793 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 + inet6/filter/limit-3793 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2155 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2402 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3795 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2401 + inet/filter/INPUT -i eth0 -j limit-3794 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2401 -m recent --name limit-2401 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1114 - inet/filter/limit-2401 -m limit --limit 1/second -j LOG - inet/filter/limit-2401 -m recent --name limit-2401 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1114 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1114 -j DROP + inet/filter/limit-3794 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 + inet/filter/limit-3794 -j ACCEPT + inet/filter/logdrop-2156 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2156 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2401 + inet6/filter/INPUT -i eth0 -j limit-3794 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2401 -m recent --name limit-2401 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1114 - inet6/filter/limit-2401 -m limit --limit 1/second -j LOG - inet6/filter/limit-2401 -m recent --name limit-2401 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1114 -j DROP + inet6/filter/limit-3794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 + inet6/filter/limit-3794 -j ACCEPT + inet6/filter/logdrop-2156 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2403 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3796 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2402 - inet/filter/limit-2402 -m recent --name limit-2402 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1115 - inet/filter/limit-2402 -m recent --name limit-2402 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1115 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1115 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 + inet/filter/logdrop-2157 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2157 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2402 - inet6/filter/limit-2402 -m recent --name limit-2402 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1115 - inet6/filter/limit-2402 -m recent --name limit-2402 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1115 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 + inet6/filter/logdrop-2157 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2404 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3797 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2403 + inet/filter/INPUT -i eth0 -j limit-3796 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2403 -m recent --name limit-2403 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1116 - inet/filter/limit-2403 -m recent --name limit-2403 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1116 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1116 -j DROP + inet/filter/limit-3796 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 + inet/filter/limit-3796 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3796 -j ACCEPT + inet/filter/logdrop-2158 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2158 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2403 + inet6/filter/INPUT -i eth0 -j limit-3796 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2403 -m recent --name limit-2403 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1116 - inet6/filter/limit-2403 -m recent --name limit-2403 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1116 -j DROP + inet6/filter/limit-3796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 + inet6/filter/limit-3796 -j ACCEPT + inet6/filter/logdrop-2158 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2405 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3798 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2404 - inet/filter/limit-2404 -m recent --name limit-2404 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1117 - inet/filter/limit-2404 -m recent --name limit-2404 --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1117 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1117 -j DROP + inet/filter/INPUT -i eth0 -j limit-3797 + inet/filter/limit-3797 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 + inet/filter/limit-3797 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2159 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2159 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2404 - inet6/filter/limit-2404 -m recent --name limit-2404 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1117 - inet6/filter/limit-2404 -m recent --name limit-2404 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1117 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3797 + inet6/filter/limit-3797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 + inet6/filter/logdrop-2159 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2406 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3799 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2405 + inet/filter/INPUT -i eth0 -j limit-3798 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2405 -m recent --name limit-2405 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1118 - inet/filter/limit-2405 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2405 -m recent --name limit-2405 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1118 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1118 -j DROP + inet/filter/limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2160 + inet/filter/limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2160 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2160 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2405 + inet6/filter/INPUT -i eth0 -j limit-3798 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2405 -m recent --name limit-2405 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1118 - inet6/filter/limit-2405 -m recent --name limit-2405 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1118 -j DROP + inet6/filter/limit-3798 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2160 + inet6/filter/limit-3798 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2160 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2407 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3800 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2406 - inet/filter/limit-2406 -m recent --name limit-2406 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1119 - inet/filter/limit-2406 -m recent --name limit-2406 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1119 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1119 -j DROP + inet/filter/INPUT -i eth0 -j limit-3799 + inet/filter/limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2161 + inet/filter/limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-2161 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2161 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2406 - inet6/filter/limit-2406 -m recent --name limit-2406 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1119 - inet6/filter/logdrop-1119 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3799 + inet6/filter/limit-3799 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2161 + inet6/filter/limit-3799 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-2161 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2408 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3801 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2407 + inet/filter/INPUT -i eth0 -j limit-3800 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2407 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1120 - inet/filter/limit-2407 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1120 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1120 -j DROP + inet/filter/limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2162 + inet/filter/limit-3800 -m limit --limit 1/second -j LOG + inet/filter/limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2162 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2162 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2407 + inet6/filter/INPUT -i eth0 -j limit-3800 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1120 - inet6/filter/limit-2407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1120 -j DROP + inet6/filter/limit-3800 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2162 + inet6/filter/limit-3800 -m limit --limit 1/second -j LOG + inet6/filter/limit-3800 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2162 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2409 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3802 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2408 - inet/filter/limit-2408 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1121 - inet/filter/limit-2408 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1121 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1121 -j DROP + inet/filter/INPUT -i eth0 -j limit-3801 + inet/filter/limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2163 + inet/filter/limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-2163 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2163 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2408 - inet6/filter/limit-2408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1121 - inet6/filter/limit-2408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1121 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3801 + inet6/filter/limit-3801 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2163 + inet6/filter/limit-3801 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2163 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2410 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3803 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2409 + inet/filter/INPUT -i eth0 -j limit-3802 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2409 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1122 - inet/filter/limit-2409 -m limit --limit 1/second -j LOG - inet/filter/limit-2409 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1122 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1122 -j DROP + inet/filter/limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2164 + inet/filter/limit-3802 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3802 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2164 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2164 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2409 + inet6/filter/INPUT -i eth0 -j limit-3802 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2409 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1122 - inet6/filter/limit-2409 -m limit --limit 1/second -j LOG - inet6/filter/limit-2409 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1122 -j DROP + inet6/filter/limit-3802 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2164 + inet6/filter/limit-3802 -j TEE --gateway fc00::2 + inet6/filter/limit-3802 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2164 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2411 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3804 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2410 - inet/filter/limit-2410 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1123 - inet/filter/limit-2410 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1123 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1123 -j DROP + inet/filter/INPUT -i eth0 -j limit-3803 + inet/filter/limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2165 + inet/filter/limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2165 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2165 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2410 - inet6/filter/limit-2410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1123 - inet6/filter/limit-2410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1123 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3803 + inet6/filter/limit-3803 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2165 + inet6/filter/limit-3803 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-2165 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2412 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3805 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2411 + inet/filter/INPUT -i eth0 -j limit-3804 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2411 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1124 - inet/filter/limit-2411 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1124 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1124 -j DROP + inet/filter/limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2166 + inet/filter/limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2166 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2166 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2411 + inet6/filter/INPUT -i eth0 -j limit-3804 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1124 - inet6/filter/limit-2411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1124 -j DROP + inet6/filter/limit-3804 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2166 + inet6/filter/limit-3804 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2166 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2413 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3806 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2412 - inet/filter/limit-2412 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1125 - inet/filter/limit-2412 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet/filter/logdrop-1125 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1125 -j DROP + inet/filter/INPUT -i eth0 -j limit-3805 + inet/filter/limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2167 + inet/filter/limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet/filter/logdrop-2167 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2167 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2412 - inet6/filter/limit-2412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1125 - inet6/filter/limit-2412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1125 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3805 + inet6/filter/limit-3805 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2167 + inet6/filter/limit-3805 -m recent --name user:C --rsource --mask fe00:: --set + inet6/filter/logdrop-2167 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2414 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3807 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2413 + inet/filter/INPUT -i eth0 -j limit-3806 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2413 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1126 - inet/filter/limit-2413 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2413 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1126 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1126 -j DROP + inet/filter/limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2168 + inet/filter/limit-3806 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2168 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2168 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2413 + inet6/filter/INPUT -i eth0 -j limit-3806 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1126 - inet6/filter/limit-2413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1126 -j DROP + inet6/filter/limit-3806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2168 + inet6/filter/limit-3806 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2168 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2415 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3808 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2414 - inet/filter/limit-2414 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1127 - inet/filter/limit-2414 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1127 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1127 -j DROP + inet/filter/INPUT -i eth0 -j limit-3807 + inet/filter/limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2169 + inet/filter/limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2169 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2169 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2414 - inet6/filter/limit-2414 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1127 - inet6/filter/logdrop-1127 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3807 + inet6/filter/limit-3807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2169 + inet6/filter/logdrop-2169 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2416 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3809 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2415 + inet/filter/INPUT -i eth0 -j limit-3808 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2415 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1128 - inet/filter/limit-2415 -j ACCEPT - inet/filter/logdrop-1128 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1128 -j DROP + inet/filter/limit-3808 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 + inet/filter/limit-3808 -j ACCEPT + inet/filter/logdrop-2170 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2170 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2415 + inet6/filter/INPUT -i eth0 -j limit-3808 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2415 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1128 - inet6/filter/limit-2415 -j ACCEPT - inet6/filter/logdrop-1128 -j DROP + inet6/filter/limit-3808 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 + inet6/filter/limit-3808 -j ACCEPT + inet6/filter/logdrop-2170 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2417 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3810 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1129 - inet/filter/logdrop-1129 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1129 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 + inet/filter/logdrop-2171 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2171 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1129 - inet6/filter/logdrop-1129 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 + inet6/filter/logdrop-2171 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2418 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3811 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2417 + inet/filter/INPUT -i eth0 -j limit-3810 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2417 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1130 - inet/filter/limit-2417 -m limit --limit 1/second -j LOG - inet/filter/limit-2417 -j ACCEPT - inet/filter/logdrop-1130 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1130 -j DROP + inet/filter/limit-3810 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 + inet/filter/limit-3810 -m limit --limit 1/second -j LOG + inet/filter/limit-3810 -j ACCEPT + inet/filter/logdrop-2172 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2172 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2417 + inet6/filter/INPUT -i eth0 -j limit-3810 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2417 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1130 - inet6/filter/limit-2417 -m limit --limit 1/second -j LOG - inet6/filter/limit-2417 -j ACCEPT - inet6/filter/logdrop-1130 -j DROP + inet6/filter/limit-3810 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 + inet6/filter/limit-3810 -m limit --limit 1/second -j LOG + inet6/filter/limit-3810 -j ACCEPT + inet6/filter/logdrop-2172 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2419 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3812 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2418 - inet/filter/limit-2418 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1131 - inet/filter/limit-2418 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1131 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1131 -j DROP + inet/filter/INPUT -i eth0 -j limit-3811 + inet/filter/limit-3811 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 + inet/filter/limit-3811 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2173 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2173 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2418 - inet6/filter/limit-2418 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1131 - inet6/filter/limit-2418 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1131 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3811 + inet6/filter/limit-3811 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 + inet6/filter/limit-3811 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2173 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2420 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3813 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2419 + inet/filter/INPUT -i eth0 -j limit-3812 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2419 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1132 - inet/filter/limit-2419 -j ACCEPT - inet/filter/logdrop-1132 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1132 -j DROP + inet/filter/limit-3812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 + inet/filter/limit-3812 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3812 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3812 -j ACCEPT + inet/filter/logdrop-2174 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2174 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2419 + inet6/filter/INPUT -i eth0 -j limit-3812 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2419 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1132 - inet6/filter/limit-2419 -j ACCEPT - inet6/filter/logdrop-1132 -j DROP + inet6/filter/limit-3812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 + inet6/filter/limit-3812 -j TEE --gateway fc00::2 + inet6/filter/limit-3812 -j ACCEPT + inet6/filter/logdrop-2174 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2421 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3814 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1133 - inet/filter/logdrop-1133 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1133 -j DROP + inet/filter/INPUT -i eth0 -j limit-3813 + inet/filter/limit-3813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 + inet/filter/limit-3813 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3813 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2175 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2175 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1133 - inet6/filter/logdrop-1133 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3813 + inet6/filter/limit-3813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 + inet6/filter/limit-3813 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2175 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2422 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3815 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2421 + inet/filter/INPUT -i eth0 -j limit-3814 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2421 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1134 - inet/filter/limit-2421 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2421 -j ACCEPT - inet/filter/logdrop-1134 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1134 -j DROP + inet/filter/limit-3814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 + inet/filter/limit-3814 -j ACCEPT + inet/filter/logdrop-2176 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2176 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2421 + inet6/filter/INPUT -i eth0 -j limit-3814 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2421 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1134 - inet6/filter/limit-2421 -j ACCEPT - inet6/filter/logdrop-1134 -j DROP + inet6/filter/limit-3814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 + inet6/filter/limit-3814 -j ACCEPT + inet6/filter/logdrop-2176 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2423 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3816 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2422 - inet/filter/limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1135 - inet/filter/limit-2422 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1135 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1135 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 + inet/filter/logdrop-2177 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2177 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2422 - inet6/filter/limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1135 - inet6/filter/logdrop-1135 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 + inet6/filter/logdrop-2177 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2424 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3817 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2423 + inet/filter/INPUT -i eth0 -j limit-3816 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2423 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1136 - inet/filter/limit-2423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1136 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1136 -j DROP + inet/filter/limit-3816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 + inet/filter/limit-3816 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3816 -j ACCEPT + inet/filter/logdrop-2178 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2178 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2423 + inet6/filter/INPUT -i eth0 -j limit-3816 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1136 - inet6/filter/limit-2423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1136 -j DROP + inet6/filter/limit-3816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 + inet6/filter/limit-3816 -j ACCEPT + inet6/filter/logdrop-2178 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2425 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 3818 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2424 - inet/filter/limit-2424 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1137 - inet/filter/limit-2424 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1137 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1137 -j DROP + inet/filter/INPUT -i eth0 -j limit-3817 + inet/filter/limit-3817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 + inet/filter/limit-3817 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2179 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2179 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2424 - inet6/filter/limit-2424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1137 - inet6/filter/limit-2424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1137 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3817 + inet6/filter/limit-3817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 + inet6/filter/logdrop-2179 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2426 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3819 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2425 + inet/filter/INPUT -i eth0 -j limit-3818 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2425 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1138 - inet/filter/limit-2425 -m limit --limit 1/second -j LOG - inet/filter/limit-2425 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1138 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1138 -j DROP + inet/filter/limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2180 + inet/filter/limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2180 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2180 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2425 + inet6/filter/INPUT -i eth0 -j limit-3818 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1138 - inet6/filter/limit-2425 -m limit --limit 1/second -j LOG - inet6/filter/limit-2425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1138 -j DROP + inet6/filter/limit-3818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2180 + inet6/filter/limit-3818 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2180 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2427 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3820 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2426 - inet/filter/limit-2426 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1139 - inet/filter/limit-2426 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1139 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1139 -j DROP + inet/filter/INPUT -i eth0 -j limit-3819 + inet/filter/limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2181 + inet/filter/limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-2181 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2181 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2426 - inet6/filter/limit-2426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1139 - inet6/filter/limit-2426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1139 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3819 + inet6/filter/limit-3819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2181 + inet6/filter/limit-3819 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-2181 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2428 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3821 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2427 + inet/filter/INPUT -i eth0 -j limit-3820 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2427 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1140 - inet/filter/limit-2427 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1140 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1140 -j DROP + inet/filter/limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2182 + inet/filter/limit-3820 -m limit --limit 1/second -j LOG + inet/filter/limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2182 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2182 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2427 + inet6/filter/INPUT -i eth0 -j limit-3820 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1140 - inet6/filter/limit-2427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1140 -j DROP + inet6/filter/limit-3820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2182 + inet6/filter/limit-3820 -m limit --limit 1/second -j LOG + inet6/filter/limit-3820 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2182 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2429 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3822 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2428 - inet/filter/limit-2428 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1141 - inet/filter/limit-2428 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet/filter/logdrop-1141 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1141 -j DROP + inet/filter/INPUT -i eth0 -j limit-3821 + inet/filter/limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2183 + inet/filter/limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet/filter/logdrop-2183 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2183 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2428 - inet6/filter/limit-2428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1141 - inet6/filter/limit-2428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet6/filter/logdrop-1141 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3821 + inet6/filter/limit-3821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2183 + inet6/filter/limit-3821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2183 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2430 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3823 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2429 + inet/filter/INPUT -i eth0 -j limit-3822 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2429 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1142 - inet/filter/limit-2429 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2429 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet/filter/logdrop-1142 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1142 -j DROP + inet/filter/limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2184 + inet/filter/limit-3822 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3822 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2184 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2184 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2429 + inet6/filter/INPUT -i eth0 -j limit-3822 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2429 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1142 - inet6/filter/limit-2429 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT - inet6/filter/logdrop-1142 -j DROP + inet6/filter/limit-3822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2184 + inet6/filter/limit-3822 -j TEE --gateway fc00::2 + inet6/filter/limit-3822 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2184 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2431 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3824 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2430 - inet/filter/limit-2430 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1143 - inet/filter/limit-2430 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1143 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1143 -j DROP + inet/filter/INPUT -i eth0 -j limit-3823 + inet/filter/limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2185 + inet/filter/limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 + inet/filter/limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2185 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2185 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2430 - inet6/filter/limit-2430 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1143 - inet6/filter/logdrop-1143 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3823 + inet6/filter/limit-3823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2185 + inet6/filter/limit-3823 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 + inet6/filter/logdrop-2185 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2432 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3825 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2431 + inet/filter/INPUT -i eth0 -j limit-3824 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2431 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1144 - inet/filter/limit-2431 -j ACCEPT - inet/filter/logdrop-1144 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1144 -j DROP + inet/filter/limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2186 + inet/filter/limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2186 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2186 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2431 + inet6/filter/INPUT -i eth0 -j limit-3824 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2431 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1144 - inet6/filter/limit-2431 -j ACCEPT - inet6/filter/logdrop-1144 -j DROP + inet6/filter/limit-3824 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2186 + inet6/filter/limit-3824 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2186 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2433 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3826 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1145 - inet/filter/logdrop-1145 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1145 -j DROP + inet/filter/INPUT -i eth0 -j limit-3825 + inet/filter/limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2187 + inet/filter/limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet/filter/logdrop-2187 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2187 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1145 - inet6/filter/logdrop-1145 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3825 + inet6/filter/limit-3825 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2187 + inet6/filter/limit-3825 -m recent --name user:C --rdest --mask fe00:: --set + inet6/filter/logdrop-2187 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2434 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3827 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2433 + inet/filter/INPUT -i eth0 -j limit-3826 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2433 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1146 - inet/filter/limit-2433 -m limit --limit 1/second -j LOG - inet/filter/limit-2433 -j ACCEPT - inet/filter/logdrop-1146 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1146 -j DROP + inet/filter/limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2188 + inet/filter/limit-3826 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet/filter/logdrop-2188 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2188 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2433 + inet6/filter/INPUT -i eth0 -j limit-3826 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2433 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1146 - inet6/filter/limit-2433 -m limit --limit 1/second -j LOG - inet6/filter/limit-2433 -j ACCEPT - inet6/filter/logdrop-1146 -j DROP + inet6/filter/limit-3826 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2188 + inet6/filter/limit-3826 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet6/filter/logdrop-2188 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2435 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3828 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2434 - inet/filter/limit-2434 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1147 - inet/filter/limit-2434 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1147 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1147 -j DROP + inet/filter/INPUT -i eth0 -j limit-3827 + inet/filter/limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2189 + inet/filter/limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2189 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2189 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2434 - inet6/filter/limit-2434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1147 - inet6/filter/limit-2434 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1147 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3827 + inet6/filter/limit-3827 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2189 + inet6/filter/logdrop-2189 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2436 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3829 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2435 + inet/filter/INPUT -i eth0 -j limit-3828 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2435 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1148 - inet/filter/limit-2435 -j ACCEPT - inet/filter/logdrop-1148 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1148 -j DROP + inet/filter/limit-3828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 + inet/filter/limit-3828 -j ACCEPT + inet/filter/logdrop-2190 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2190 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2435 + inet6/filter/INPUT -i eth0 -j limit-3828 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2435 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1148 - inet6/filter/limit-2435 -j ACCEPT - inet6/filter/logdrop-1148 -j DROP + inet6/filter/limit-3828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 + inet6/filter/limit-3828 -j ACCEPT + inet6/filter/logdrop-2190 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2437 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3830 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1149 - inet/filter/logdrop-1149 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1149 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 + inet/filter/logdrop-2191 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2191 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1149 - inet6/filter/logdrop-1149 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 + inet6/filter/logdrop-2191 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2438 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3831 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2437 + inet/filter/INPUT -i eth0 -j limit-3830 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2437 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1150 - inet/filter/limit-2437 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2437 -j ACCEPT - inet/filter/logdrop-1150 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1150 -j DROP + inet/filter/limit-3830 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 + inet/filter/limit-3830 -m limit --limit 1/second -j LOG + inet/filter/limit-3830 -j ACCEPT + inet/filter/logdrop-2192 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2192 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2437 + inet6/filter/INPUT -i eth0 -j limit-3830 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1150 - inet6/filter/limit-2437 -j ACCEPT - inet6/filter/logdrop-1150 -j DROP + inet6/filter/limit-3830 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 + inet6/filter/limit-3830 -m limit --limit 1/second -j LOG + inet6/filter/limit-3830 -j ACCEPT + inet6/filter/logdrop-2192 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2439 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3832 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2438 - inet/filter/limit-2438 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1151 - inet/filter/limit-2438 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1151 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1151 -j DROP + inet/filter/INPUT -i eth0 -j limit-3831 + inet/filter/limit-3831 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 + inet/filter/limit-3831 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2193 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2193 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2438 - inet6/filter/limit-2438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1151 - inet6/filter/logdrop-1151 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3831 + inet6/filter/limit-3831 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 + inet6/filter/limit-3831 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2193 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2440 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3833 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2439 + inet/filter/INPUT -i eth0 -j limit-3832 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2439 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1152 - inet/filter/limit-2439 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1152 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1152 -j DROP + inet/filter/limit-3832 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 + inet/filter/limit-3832 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3832 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3832 -j ACCEPT + inet/filter/logdrop-2194 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2194 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2439 + inet6/filter/INPUT -i eth0 -j limit-3832 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2439 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1152 - inet6/filter/limit-2439 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1152 -j DROP + inet6/filter/limit-3832 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 + inet6/filter/limit-3832 -j TEE --gateway fc00::2 + inet6/filter/limit-3832 -j ACCEPT + inet6/filter/logdrop-2194 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2441 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3834 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2440 - inet/filter/limit-2440 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1153 - inet/filter/limit-2440 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1153 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1153 -j DROP + inet/filter/INPUT -i eth0 -j limit-3833 + inet/filter/limit-3833 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 + inet/filter/limit-3833 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3833 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2195 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2195 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2440 - inet6/filter/limit-2440 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1153 - inet6/filter/limit-2440 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1153 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3833 + inet6/filter/limit-3833 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 + inet6/filter/limit-3833 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2195 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2442 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3835 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2441 + inet/filter/INPUT -i eth0 -j limit-3834 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2441 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1154 - inet/filter/limit-2441 -m limit --limit 1/second -j LOG - inet/filter/limit-2441 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1154 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1154 -j DROP + inet/filter/limit-3834 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 + inet/filter/limit-3834 -j ACCEPT + inet/filter/logdrop-2196 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2196 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2441 + inet6/filter/INPUT -i eth0 -j limit-3834 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2441 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1154 - inet6/filter/limit-2441 -m limit --limit 1/second -j LOG - inet6/filter/limit-2441 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1154 -j DROP + inet6/filter/limit-3834 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 + inet6/filter/limit-3834 -j ACCEPT + inet6/filter/logdrop-2196 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2443 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3836 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2442 - inet/filter/limit-2442 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1155 - inet/filter/limit-2442 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1155 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1155 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 + inet/filter/logdrop-2197 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2197 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2442 - inet6/filter/limit-2442 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1155 - inet6/filter/limit-2442 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1155 -j DROP + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 + inet6/filter/logdrop-2197 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2444 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3837 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2443 + inet/filter/INPUT -i eth0 -j limit-3836 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2443 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1156 - inet/filter/limit-2443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1156 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1156 -j DROP + inet/filter/limit-3836 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 + inet/filter/limit-3836 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3836 -j ACCEPT + inet/filter/logdrop-2198 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2198 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2443 + inet6/filter/INPUT -i eth0 -j limit-3836 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2443 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1156 - inet6/filter/limit-2443 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1156 -j DROP + inet6/filter/limit-3836 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 + inet6/filter/limit-3836 -j ACCEPT + inet6/filter/logdrop-2198 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2445 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3838 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2444 - inet/filter/limit-2444 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1157 - inet/filter/limit-2444 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet/filter/logdrop-1157 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1157 -j DROP + inet/filter/INPUT -i eth0 -j limit-3837 + inet/filter/limit-3837 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 + inet/filter/limit-3837 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2199 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2199 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2444 - inet6/filter/limit-2444 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1157 - inet6/filter/limit-2444 -m recent --name user:C --rsource --mask fe00:: --set - inet6/filter/logdrop-1157 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3837 + inet6/filter/limit-3837 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 + inet6/filter/logdrop-2199 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2446 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3839 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2445 + inet/filter/INPUT -i eth0 -j limit-3838 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2445 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1158 - inet/filter/limit-2445 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2445 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1158 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1158 -j DROP + inet/filter/limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3838 -j ACCEPT + inet/filter/limit-3838 -m limit --limit 1/second -j LOG + inet/filter/limit-3838 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2445 + inet6/filter/INPUT -i eth0 -j limit-3838 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2445 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1158 - inet6/filter/limit-2445 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1158 -j DROP + inet6/filter/limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3838 -j ACCEPT + inet6/filter/limit-3838 -m limit --limit 1/second -j LOG + inet6/filter/limit-3838 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2447 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3840 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2446 - inet/filter/limit-2446 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1159 - inet/filter/limit-2446 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1159 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1159 -j DROP + inet/filter/INPUT -i eth0 -j limit-3839 + inet/filter/limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3839 -j RETURN + inet/filter/limit-3839 -m limit --limit 1/second -j LOG + inet/filter/limit-3839 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2446 - inet6/filter/limit-2446 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1159 - inet6/filter/logdrop-1159 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3839 + inet6/filter/limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3839 -j RETURN + inet6/filter/limit-3839 -m limit --limit 1/second -j LOG + inet6/filter/limit-3839 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2448 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3841 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2447 + inet/filter/INPUT -i eth0 -j limit-3840 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2447 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1160 - inet/filter/limit-2447 -j ACCEPT - inet/filter/logdrop-1160 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1160 -j DROP + inet/filter/limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3840 -j logaccept-66 + inet/filter/limit-3840 -m limit --limit 1/second -j LOG + inet/filter/limit-3840 -j DROP + inet/filter/logaccept-66 -m limit --limit 1/second -j LOG + inet/filter/logaccept-66 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2447 + inet6/filter/INPUT -i eth0 -j limit-3840 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2447 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1160 - inet6/filter/limit-2447 -j ACCEPT - inet6/filter/logdrop-1160 -j DROP + inet6/filter/limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3840 -j logaccept-66 + inet6/filter/limit-3840 -m limit --limit 1/second -j LOG + inet6/filter/limit-3840 -j DROP + inet6/filter/logaccept-66 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-66 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2449 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3842 {"flow-limit":150,"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1161 - inet/filter/logdrop-1161 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1161 -j DROP + inet/filter/INPUT -i eth0 -j limit-3841 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3841 -j logaccept-67 + inet/filter/limit-3841 -m limit --limit 1/second -j LOG + inet/filter/limit-3841 -j DROP + inet/filter/logaccept-67 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-67 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-67 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1161 - inet6/filter/logdrop-1161 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3841 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3841 -j logaccept-67 + inet6/filter/limit-3841 -m limit --limit 1/second -j LOG + inet6/filter/limit-3841 -j DROP + inet6/filter/logaccept-67 -j TEE --gateway fc00::2 + inet6/filter/logaccept-67 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2450 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3843 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2449 + inet/filter/INPUT -i eth0 -j limit-3842 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2449 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1162 - inet/filter/limit-2449 -m limit --limit 1/second -j LOG - inet/filter/limit-2449 -j ACCEPT - inet/filter/logdrop-1162 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1162 -j DROP + inet/filter/limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3842 -j ACCEPT + inet/filter/limit-3842 -m limit --limit 1/second -j LOG + inet/filter/limit-3842 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2449 + inet6/filter/INPUT -i eth0 -j limit-3842 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2449 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1162 - inet6/filter/limit-2449 -m limit --limit 1/second -j LOG - inet6/filter/limit-2449 -j ACCEPT - inet6/filter/logdrop-1162 -j DROP + inet6/filter/limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3842 -j ACCEPT + inet6/filter/limit-3842 -m limit --limit 1/second -j LOG + inet6/filter/limit-3842 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2451 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3844 {"flow-limit":150,"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2450 - inet/filter/limit-2450 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1163 - inet/filter/limit-2450 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1163 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1163 -j DROP + inet/filter/INPUT -i eth0 -j limit-3843 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3843 -j logaccept-68 + inet/filter/limit-3843 -m limit --limit 1/second -j LOG + inet/filter/limit-3843 -j DROP + inet/filter/logaccept-68 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-68 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2450 - inet6/filter/limit-2450 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1163 - inet6/filter/limit-2450 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1163 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3843 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3843 -j logaccept-68 + inet6/filter/limit-3843 -m limit --limit 1/second -j LOG + inet6/filter/limit-3843 -j DROP + inet6/filter/logaccept-68 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2452 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3845 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2451 + inet/filter/INPUT -i eth0 -j limit-3844 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2451 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1164 - inet/filter/limit-2451 -j ACCEPT - inet/filter/logdrop-1164 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1164 -j DROP + inet/filter/limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3844 -j ACCEPT + inet/filter/limit-3844 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2451 + inet6/filter/INPUT -i eth0 -j limit-3844 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2451 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1164 - inet6/filter/limit-2451 -j ACCEPT - inet6/filter/logdrop-1164 -j DROP + inet6/filter/limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3844 -j ACCEPT + inet6/filter/limit-3844 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2453 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3846 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1165 - inet/filter/logdrop-1165 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1165 -j DROP + inet/filter/INPUT -i eth0 -j limit-3845 + inet/filter/limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3845 -j RETURN + inet/filter/limit-3845 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1165 - inet6/filter/logdrop-1165 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3845 + inet6/filter/limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3845 -j RETURN + inet6/filter/limit-3845 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2454 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3847 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2453 + inet/filter/INPUT -i eth0 -j limit-3846 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2453 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1166 - inet/filter/limit-2453 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2453 -j ACCEPT - inet/filter/logdrop-1166 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1166 -j DROP + inet/filter/limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3846 -j logaccept-69 + inet/filter/limit-3846 -j DROP + inet/filter/logaccept-69 -m limit --limit 1/second -j LOG + inet/filter/logaccept-69 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2453 + inet6/filter/INPUT -i eth0 -j limit-3846 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2453 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1166 - inet6/filter/limit-2453 -j ACCEPT - inet6/filter/logdrop-1166 -j DROP + inet6/filter/limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3846 -j logaccept-69 + inet6/filter/limit-3846 -j DROP + inet6/filter/logaccept-69 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-69 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2455 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3848 {"flow-limit":{"count":150,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2454 - inet/filter/limit-2454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1167 - inet/filter/limit-2454 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1167 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1167 -j DROP + inet/filter/INPUT -i eth0 -j limit-3847 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3847 -j logaccept-70 + inet/filter/limit-3847 -j DROP + inet/filter/logaccept-70 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-70 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-70 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2454 - inet6/filter/limit-2454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1167 - inet6/filter/logdrop-1167 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3847 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3847 -j logaccept-70 + inet6/filter/limit-3847 -j DROP + inet6/filter/logaccept-70 -j TEE --gateway fc00::2 + inet6/filter/logaccept-70 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2456 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3849 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2455 + inet/filter/INPUT -i eth0 -j limit-3848 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2455 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1168 - inet/filter/limit-2455 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1168 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1168 -j DROP + inet/filter/limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3848 -j ACCEPT + inet/filter/limit-3848 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2455 + inet6/filter/INPUT -i eth0 -j limit-3848 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2455 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1168 - inet6/filter/limit-2455 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1168 -j DROP + inet6/filter/limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3848 -j ACCEPT + inet6/filter/limit-3848 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2457 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 3850 {"flow-limit":{"count":150,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2456 - inet/filter/limit-2456 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1169 - inet/filter/limit-2456 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1169 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1169 -j DROP + inet/filter/INPUT -i eth0 -j limit-3849 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3849 -j logaccept-71 + inet/filter/limit-3849 -j DROP + inet/filter/logaccept-71 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-71 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2456 - inet6/filter/limit-2456 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1169 - inet6/filter/limit-2456 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1169 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3849 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3849 -j logaccept-71 + inet6/filter/limit-3849 -j DROP + inet6/filter/logaccept-71 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2458 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3851 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2457 + inet/filter/INPUT -i eth0 -j limit-3850 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2457 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1170 - inet/filter/limit-2457 -m limit --limit 1/second -j LOG - inet/filter/limit-2457 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1170 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1170 -j DROP + inet/filter/limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3850 -j ACCEPT + inet/filter/limit-3850 -m limit --limit 1/second -j LOG + inet/filter/limit-3850 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2457 + inet6/filter/INPUT -i eth0 -j limit-3850 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2457 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1170 - inet6/filter/limit-2457 -m limit --limit 1/second -j LOG - inet6/filter/limit-2457 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1170 -j DROP + inet6/filter/limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3850 -j ACCEPT + inet6/filter/limit-3850 -m limit --limit 1/second -j LOG + inet6/filter/limit-3850 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2459 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3852 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2458 - inet/filter/limit-2458 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1171 - inet/filter/limit-2458 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet/filter/logdrop-1171 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1171 -j DROP + inet/filter/INPUT -i eth0 -j limit-3851 + inet/filter/limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3851 -j RETURN + inet/filter/limit-3851 -m limit --limit 1/second -j LOG + inet/filter/limit-3851 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2458 - inet6/filter/limit-2458 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1171 - inet6/filter/limit-2458 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1171 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3851 + inet6/filter/limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3851 -j RETURN + inet6/filter/limit-3851 -m limit --limit 1/second -j LOG + inet6/filter/limit-3851 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2460 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3853 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2459 + inet/filter/INPUT -i eth0 -j limit-3852 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2459 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1172 - inet/filter/limit-2459 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1172 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1172 -j DROP + inet/filter/limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3852 -j logaccept-72 + inet/filter/limit-3852 -m limit --limit 1/second -j LOG + inet/filter/limit-3852 -j DROP + inet/filter/logaccept-72 -m limit --limit 1/second -j LOG + inet/filter/logaccept-72 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2459 + inet6/filter/INPUT -i eth0 -j limit-3852 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2459 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1172 - inet6/filter/limit-2459 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1172 -j DROP + inet6/filter/limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3852 -j logaccept-72 + inet6/filter/limit-3852 -m limit --limit 1/second -j LOG + inet6/filter/limit-3852 -j DROP + inet6/filter/logaccept-72 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-72 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2461 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3854 {"flow-limit":{"count":150},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2460 - inet/filter/limit-2460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1173 - inet/filter/limit-2460 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet/filter/logdrop-1173 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1173 -j DROP + inet/filter/INPUT -i eth0 -j limit-3853 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3853 -j logaccept-73 + inet/filter/limit-3853 -m limit --limit 1/second -j LOG + inet/filter/limit-3853 -j DROP + inet/filter/logaccept-73 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-73 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-73 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2460 - inet6/filter/limit-2460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1173 - inet6/filter/limit-2460 -m recent --name user:C --rdest --mask fe00:: --set - inet6/filter/logdrop-1173 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3853 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3853 -j logaccept-73 + inet6/filter/limit-3853 -m limit --limit 1/second -j LOG + inet6/filter/limit-3853 -j DROP + inet6/filter/logaccept-73 -j TEE --gateway fc00::2 + inet6/filter/logaccept-73 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2462 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3855 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2461 + inet/filter/INPUT -i eth0 -j limit-3854 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1174 - inet/filter/limit-2461 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2461 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT - inet/filter/logdrop-1174 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1174 -j DROP + inet/filter/limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3854 -j ACCEPT + inet/filter/limit-3854 -m limit --limit 1/second -j LOG + inet/filter/limit-3854 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2461 + inet6/filter/INPUT -i eth0 -j limit-3854 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1174 - inet6/filter/limit-2461 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT - inet6/filter/logdrop-1174 -j DROP + inet6/filter/limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3854 -j ACCEPT + inet6/filter/limit-3854 -m limit --limit 1/second -j LOG + inet6/filter/limit-3854 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2463 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3856 {"flow-limit":{"count":150},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2462 - inet/filter/limit-2462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1175 - inet/filter/limit-2462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1175 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1175 -j DROP + inet/filter/INPUT -i eth0 -j limit-3855 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3855 -j logaccept-74 + inet/filter/limit-3855 -m limit --limit 1/second -j LOG + inet/filter/limit-3855 -j DROP + inet/filter/logaccept-74 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-74 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2462 - inet6/filter/limit-2462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1175 - inet6/filter/logdrop-1175 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3855 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3855 -j logaccept-74 + inet6/filter/limit-3855 -m limit --limit 1/second -j LOG + inet6/filter/limit-3855 -j DROP + inet6/filter/logaccept-74 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2464 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3857 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2463 + inet/filter/INPUT -i eth0 -j limit-3856 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2463 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1176 - inet/filter/limit-2463 -j ACCEPT - inet/filter/logdrop-1176 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1176 -j DROP + inet/filter/limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3856 -j ACCEPT + inet/filter/limit-3856 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3856 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3856 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2463 + inet6/filter/INPUT -i eth0 -j limit-3856 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2463 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1176 - inet6/filter/limit-2463 -j ACCEPT - inet6/filter/logdrop-1176 -j DROP + inet6/filter/limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3856 -j ACCEPT + inet6/filter/limit-3856 -j TEE --gateway fc00::2 + inet6/filter/limit-3856 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2465 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3858 {"action":"pass","flow-limit":{"count":150,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1177 - inet/filter/logdrop-1177 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1177 -j DROP + inet/filter/INPUT -i eth0 -j limit-3857 + inet/filter/limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3857 -j RETURN + inet/filter/limit-3857 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3857 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3857 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1177 - inet6/filter/logdrop-1177 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3857 + inet6/filter/limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3857 -j RETURN + inet6/filter/limit-3857 -j TEE --gateway fc00::2 + inet6/filter/limit-3857 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2466 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3859 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2465 + inet/filter/INPUT -i eth0 -j limit-3858 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2465 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1178 - inet/filter/limit-2465 -m limit --limit 1/second -j LOG - inet/filter/limit-2465 -j ACCEPT - inet/filter/logdrop-1178 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1178 -j DROP + inet/filter/limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3858 -j logaccept-75 + inet/filter/limit-3858 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3858 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3858 -j DROP + inet/filter/logaccept-75 -m limit --limit 1/second -j LOG + inet/filter/logaccept-75 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2465 + inet6/filter/INPUT -i eth0 -j limit-3858 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2465 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1178 - inet6/filter/limit-2465 -m limit --limit 1/second -j LOG - inet6/filter/limit-2465 -j ACCEPT - inet6/filter/logdrop-1178 -j DROP + inet6/filter/limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3858 -j logaccept-75 + inet6/filter/limit-3858 -j TEE --gateway fc00::2 + inet6/filter/limit-3858 -j DROP + inet6/filter/logaccept-75 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-75 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2467 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3860 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2466 - inet/filter/limit-2466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1179 - inet/filter/limit-2466 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1179 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1179 -j DROP + inet/filter/INPUT -i eth0 -j limit-3859 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3859 -j logaccept-76 + inet/filter/limit-3859 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3859 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3859 -j DROP + inet/filter/logaccept-76 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-76 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-76 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2466 - inet6/filter/limit-2466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1179 - inet6/filter/limit-2466 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1179 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3859 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3859 -j logaccept-76 + inet6/filter/limit-3859 -j TEE --gateway fc00::2 + inet6/filter/limit-3859 -j DROP + inet6/filter/logaccept-76 -j TEE --gateway fc00::2 + inet6/filter/logaccept-76 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2468 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3861 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2467 + inet/filter/INPUT -i eth0 -j limit-3860 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2467 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1180 - inet/filter/limit-2467 -j ACCEPT - inet/filter/logdrop-1180 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1180 -j DROP + inet/filter/limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3860 -j ACCEPT + inet/filter/limit-3860 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3860 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3860 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2467 + inet6/filter/INPUT -i eth0 -j limit-3860 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2467 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1180 - inet6/filter/limit-2467 -j ACCEPT - inet6/filter/logdrop-1180 -j DROP + inet6/filter/limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3860 -j ACCEPT + inet6/filter/limit-3860 -j TEE --gateway fc00::2 + inet6/filter/limit-3860 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2469 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3862 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1181 - inet/filter/logdrop-1181 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1181 -j DROP + inet/filter/INPUT -i eth0 -j limit-3861 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3861 -j logaccept-77 + inet/filter/limit-3861 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3861 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3861 -j DROP + inet/filter/logaccept-77 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-77 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1181 - inet6/filter/logdrop-1181 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3861 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3861 -j logaccept-77 + inet6/filter/limit-3861 -j TEE --gateway fc00::2 + inet6/filter/limit-3861 -j DROP + inet6/filter/logaccept-77 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2470 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3863 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2469 + inet/filter/INPUT -i eth0 -j limit-3862 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1182 - inet/filter/limit-2469 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2469 -j ACCEPT - inet/filter/logdrop-1182 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1182 -j DROP + inet/filter/limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3862 -j ACCEPT + inet/filter/limit-3862 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2469 + inet6/filter/INPUT -i eth0 -j limit-3862 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1182 - inet6/filter/limit-2469 -j ACCEPT - inet6/filter/logdrop-1182 -j DROP + inet6/filter/limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3862 -j ACCEPT + inet6/filter/limit-3862 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2471 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3864 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2470 - inet/filter/limit-2470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1183 - inet/filter/limit-2470 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1183 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1183 -j DROP + inet/filter/INPUT -i eth0 -j limit-3863 + inet/filter/limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3863 -j RETURN + inet/filter/limit-3863 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2470 - inet6/filter/limit-2470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1183 - inet6/filter/logdrop-1183 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3863 + inet6/filter/limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3863 -j RETURN + inet6/filter/limit-3863 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2472 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw"} +Filter 3865 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2471 + inet/filter/INPUT -i eth0 -j limit-3864 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2471 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2471 -j ACCEPT - inet/filter/limit-2471 -m limit --limit 1/second -j LOG - inet/filter/limit-2471 -j DROP + inet/filter/limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3864 -j logaccept-78 + inet/filter/limit-3864 -j DROP + inet/filter/logaccept-78 -m limit --limit 1/second -j LOG + inet/filter/logaccept-78 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2471 + inet6/filter/INPUT -i eth0 -j limit-3864 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2471 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2471 -j ACCEPT - inet6/filter/limit-2471 -m limit --limit 1/second -j LOG - inet6/filter/limit-2471 -j DROP + inet6/filter/limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3864 -j logaccept-78 + inet6/filter/limit-3864 -j DROP + inet6/filter/logaccept-78 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-78 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2473 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2472 - inet/filter/limit-2472 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2472 -j RETURN - inet/filter/limit-2472 -m limit --limit 1/second -j LOG - inet/filter/limit-2472 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2472 - inet6/filter/limit-2472 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2472 -j RETURN - inet6/filter/limit-2472 -m limit --limit 1/second -j LOG - inet6/filter/limit-2472 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2474 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3866 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2473 + inet/filter/INPUT -i eth0 -j limit-3865 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2473 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2473 -j logaccept-36 - inet/filter/limit-2473 -m limit --limit 1/second -j LOG - inet/filter/limit-2473 -j DROP - inet/filter/logaccept-36 -m limit --limit 1/second -j LOG - inet/filter/logaccept-36 -j ACCEPT + inet/filter/limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3865 -j logaccept-79 + inet/filter/limit-3865 -j DROP + inet/filter/logaccept-79 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-79 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-79 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2473 + inet6/filter/INPUT -i eth0 -j limit-3865 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2473 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2473 -j logaccept-36 - inet6/filter/limit-2473 -m limit --limit 1/second -j LOG - inet6/filter/limit-2473 -j DROP - inet6/filter/logaccept-36 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-36 -j ACCEPT + inet6/filter/limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3865 -j logaccept-79 + inet6/filter/limit-3865 -j DROP + inet6/filter/logaccept-79 -j TEE --gateway fc00::2 + inet6/filter/logaccept-79 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2475 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3867 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2474 + inet/filter/INPUT -i eth0 -j limit-3866 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2474 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2474 -j ACCEPT - inet/filter/limit-2474 -m limit --limit 1/second -j LOG - inet/filter/limit-2474 -j DROP + inet/filter/limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3866 -j ACCEPT + inet/filter/limit-3866 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2474 + inet6/filter/INPUT -i eth0 -j limit-3866 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2474 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2474 -j ACCEPT - inet6/filter/limit-2474 -m limit --limit 1/second -j LOG - inet6/filter/limit-2474 -j DROP + inet6/filter/limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3866 -j ACCEPT + inet6/filter/limit-3866 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2476 {"flow-limit":150,"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3868 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2475 + inet/filter/INPUT -i eth0 -j limit-3867 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2475 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2475 -j logaccept-37 - inet/filter/limit-2475 -m limit --limit 1/second -j LOG - inet/filter/limit-2475 -j DROP - inet/filter/logaccept-37 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-37 -j ACCEPT + inet/filter/limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3867 -j logaccept-80 + inet/filter/limit-3867 -j DROP + inet/filter/logaccept-80 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-80 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2475 + inet6/filter/INPUT -i eth0 -j limit-3867 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2475 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2475 -j logaccept-37 - inet6/filter/limit-2475 -m limit --limit 1/second -j LOG - inet6/filter/limit-2475 -j DROP - inet6/filter/logaccept-37 -j ACCEPT + inet6/filter/limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3867 -j logaccept-80 + inet6/filter/limit-3867 -j DROP + inet6/filter/logaccept-80 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2477 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3869 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2476 + inet/filter/INPUT -i eth0 -j limit-3868 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2476 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2476 -j ACCEPT - inet/filter/limit-2476 -j DROP + inet/filter/limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3868 -j ACCEPT + inet/filter/limit-3868 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3868 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2476 + inet6/filter/INPUT -i eth0 -j limit-3868 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2476 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2476 -j ACCEPT - inet6/filter/limit-2476 -j DROP + inet6/filter/limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3868 -j ACCEPT + inet6/filter/limit-3868 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2478 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3870 {"action":"pass","flow-limit":{"count":150,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2477 - inet/filter/limit-2477 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2477 -j RETURN - inet/filter/limit-2477 -j DROP + inet/filter/INPUT -i eth0 -j limit-3869 + inet/filter/limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3869 -j RETURN + inet/filter/limit-3869 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3869 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2477 - inet6/filter/limit-2477 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2477 -j RETURN - inet6/filter/limit-2477 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3869 + inet6/filter/limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3869 -j RETURN + inet6/filter/limit-3869 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2479 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3871 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2478 + inet/filter/INPUT -i eth0 -j limit-3870 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2478 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2478 -j logaccept-38 - inet/filter/limit-2478 -j DROP - inet/filter/logaccept-38 -m limit --limit 1/second -j LOG - inet/filter/logaccept-38 -j ACCEPT + inet/filter/limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3870 -j logaccept-81 + inet/filter/limit-3870 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3870 -j DROP + inet/filter/logaccept-81 -m limit --limit 1/second -j LOG + inet/filter/logaccept-81 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2478 + inet6/filter/INPUT -i eth0 -j limit-3870 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2478 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2478 -j logaccept-38 - inet6/filter/limit-2478 -j DROP - inet6/filter/logaccept-38 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-38 -j ACCEPT + inet6/filter/limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3870 -j logaccept-81 + inet6/filter/limit-3870 -j DROP + inet6/filter/logaccept-81 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-81 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2480 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3872 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2479 + inet/filter/INPUT -i eth0 -j limit-3871 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2479 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2479 -j ACCEPT - inet/filter/limit-2479 -j DROP + inet/filter/limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3871 -j logaccept-82 + inet/filter/limit-3871 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3871 -j DROP + inet/filter/logaccept-82 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-82 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-82 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2479 + inet6/filter/INPUT -i eth0 -j limit-3871 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2479 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2479 -j ACCEPT - inet6/filter/limit-2479 -j DROP + inet6/filter/limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3871 -j logaccept-82 + inet6/filter/limit-3871 -j DROP + inet6/filter/logaccept-82 -j TEE --gateway fc00::2 + inet6/filter/logaccept-82 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2481 {"flow-limit":{"count":150,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3873 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2480 + inet/filter/INPUT -i eth0 -j limit-3872 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2480 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2480 -j logaccept-39 - inet/filter/limit-2480 -j DROP - inet/filter/logaccept-39 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-39 -j ACCEPT + inet/filter/limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3872 -j ACCEPT + inet/filter/limit-3872 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3872 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2480 + inet6/filter/INPUT -i eth0 -j limit-3872 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2480 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2480 -j logaccept-39 - inet6/filter/limit-2480 -j DROP - inet6/filter/logaccept-39 -j ACCEPT + inet6/filter/limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3872 -j ACCEPT + inet6/filter/limit-3872 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2482 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} +Filter 3874 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2481 + inet/filter/INPUT -i eth0 -j limit-3873 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2481 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2481 -j ACCEPT - inet/filter/limit-2481 -m limit --limit 1/second -j LOG - inet/filter/limit-2481 -j DROP + inet/filter/limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3873 -j logaccept-83 + inet/filter/limit-3873 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3873 -j DROP + inet/filter/logaccept-83 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-83 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2481 + inet6/filter/INPUT -i eth0 -j limit-3873 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2481 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2481 -j ACCEPT - inet6/filter/limit-2481 -m limit --limit 1/second -j LOG - inet6/filter/limit-2481 -j DROP + inet6/filter/limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3873 -j logaccept-83 + inet6/filter/limit-3873 -j DROP + inet6/filter/logaccept-83 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2483 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2482 - inet/filter/limit-2482 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2482 -j RETURN - inet/filter/limit-2482 -m limit --limit 1/second -j LOG - inet/filter/limit-2482 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2482 - inet6/filter/limit-2482 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2482 -j RETURN - inet6/filter/limit-2482 -m limit --limit 1/second -j LOG - inet6/filter/limit-2482 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2484 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3875 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2483 + inet/filter/INPUT -i eth0 -j limit-3874 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2483 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2483 -j logaccept-40 - inet/filter/limit-2483 -m limit --limit 1/second -j LOG - inet/filter/limit-2483 -j DROP - inet/filter/logaccept-40 -m limit --limit 1/second -j LOG - inet/filter/logaccept-40 -j ACCEPT + inet/filter/limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3874 -j ACCEPT + inet/filter/limit-3874 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2483 + inet6/filter/INPUT -i eth0 -j limit-3874 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2483 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2483 -j logaccept-40 - inet6/filter/limit-2483 -m limit --limit 1/second -j LOG - inet6/filter/limit-2483 -j DROP - inet6/filter/logaccept-40 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-40 -j ACCEPT + inet6/filter/limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3874 -j ACCEPT + inet6/filter/limit-3874 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2485 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3876 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2484 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2484 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2484 -j ACCEPT - inet/filter/limit-2484 -m limit --limit 1/second -j LOG - inet/filter/limit-2484 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/INPUT -i eth0 -j limit-3875 + inet/filter/limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3875 -j RETURN + inet/filter/limit-3875 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2484 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2484 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2484 -j ACCEPT - inet6/filter/limit-2484 -m limit --limit 1/second -j LOG - inet6/filter/limit-2484 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3875 + inet6/filter/limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3875 -j RETURN + inet6/filter/limit-3875 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2486 {"flow-limit":{"count":150},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3877 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2485 + inet/filter/INPUT -i eth0 -j limit-3876 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2485 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2485 -j logaccept-41 - inet/filter/limit-2485 -m limit --limit 1/second -j LOG - inet/filter/limit-2485 -j DROP - inet/filter/logaccept-41 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-41 -j ACCEPT + inet/filter/limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3876 -j logaccept-84 + inet/filter/limit-3876 -j DROP + inet/filter/logaccept-84 -m limit --limit 1/second -j LOG + inet/filter/logaccept-84 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2485 + inet6/filter/INPUT -i eth0 -j limit-3876 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2485 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2485 -j logaccept-41 - inet6/filter/limit-2485 -m limit --limit 1/second -j LOG - inet6/filter/limit-2485 -j DROP - inet6/filter/logaccept-41 -j ACCEPT + inet6/filter/limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3876 -j logaccept-84 + inet6/filter/limit-3876 -j DROP + inet6/filter/logaccept-84 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-84 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2487 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 3878 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2486 + inet/filter/INPUT -i eth0 -j limit-3877 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2486 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2486 -j ACCEPT - inet/filter/limit-2486 -j DROP + inet/filter/limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3877 -j logaccept-85 + inet/filter/limit-3877 -j DROP + inet/filter/logaccept-85 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-85 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-85 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2486 + inet6/filter/INPUT -i eth0 -j limit-3877 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2486 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2486 -j ACCEPT - inet6/filter/limit-2486 -j DROP + inet6/filter/limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3877 -j logaccept-85 + inet6/filter/limit-3877 -j DROP + inet6/filter/logaccept-85 -j TEE --gateway fc00::2 + inet6/filter/logaccept-85 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2488 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 3879 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2487 - inet/filter/limit-2487 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2487 -j RETURN - inet/filter/limit-2487 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2487 - inet6/filter/limit-2487 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2487 -j RETURN - inet6/filter/limit-2487 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2489 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2488 + inet/filter/INPUT -i eth0 -j limit-3878 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2488 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2488 -j logaccept-42 - inet/filter/limit-2488 -j DROP - inet/filter/logaccept-42 -m limit --limit 1/second -j LOG - inet/filter/logaccept-42 -j ACCEPT + inet/filter/limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3878 -j ACCEPT + inet/filter/limit-3878 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2488 + inet6/filter/INPUT -i eth0 -j limit-3878 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2488 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2488 -j logaccept-42 - inet6/filter/limit-2488 -j DROP - inet6/filter/logaccept-42 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-42 -j ACCEPT + inet6/filter/limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3878 -j ACCEPT + inet6/filter/limit-3878 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2490 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3880 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2489 + inet/filter/INPUT -i eth0 -j limit-3879 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2489 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2489 -j ACCEPT - inet/filter/limit-2489 -j DROP + inet/filter/limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3879 -j logaccept-86 + inet/filter/limit-3879 -j DROP + inet/filter/logaccept-86 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-86 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2489 + inet6/filter/INPUT -i eth0 -j limit-3879 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2489 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2489 -j ACCEPT - inet6/filter/limit-2489 -j DROP + inet6/filter/limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3879 -j logaccept-86 + inet6/filter/limit-3879 -j DROP + inet6/filter/logaccept-86 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2491 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3881 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2490 + inet/filter/INPUT -i eth0 -j limit-3880 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2490 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2490 -j logaccept-43 - inet/filter/limit-2490 -j DROP - inet/filter/logaccept-43 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-43 -j ACCEPT + inet/filter/limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3880 -j ACCEPT + inet/filter/limit-3880 -m limit --limit 1/second -j LOG + inet/filter/limit-3880 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2490 + inet6/filter/INPUT -i eth0 -j limit-3880 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2490 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2490 -j logaccept-43 - inet6/filter/limit-2490 -j DROP - inet6/filter/logaccept-43 -j ACCEPT + inet6/filter/limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3880 -j ACCEPT + inet6/filter/limit-3880 -m limit --limit 1/second -j LOG + inet6/filter/limit-3880 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2492 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} +Filter 3882 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2491 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2491 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2491 -j ACCEPT - inet/filter/limit-2491 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2491 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/INPUT -i eth0 -j limit-3881 + inet/filter/limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3881 -j RETURN + inet/filter/limit-3881 -m limit --limit 1/second -j LOG + inet/filter/limit-3881 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2491 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2491 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2491 -j ACCEPT - inet6/filter/limit-2491 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3881 + inet6/filter/limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3881 -j RETURN + inet6/filter/limit-3881 -m limit --limit 1/second -j LOG + inet6/filter/limit-3881 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2493 {"action":"pass","flow-limit":{"count":150,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} +Filter 3883 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2492 - inet/filter/limit-2492 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2492 -j RETURN - inet/filter/limit-2492 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2492 -j DROP + inet/filter/INPUT -i eth0 -j limit-3882 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3882 -j logaccept-87 + inet/filter/limit-3882 -m limit --limit 1/second -j LOG + inet/filter/limit-3882 -j DROP + inet/filter/logaccept-87 -m limit --limit 1/second -j LOG + inet/filter/logaccept-87 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2492 - inet6/filter/limit-2492 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2492 -j RETURN - inet6/filter/limit-2492 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3882 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3882 -j logaccept-87 + inet6/filter/limit-3882 -m limit --limit 1/second -j LOG + inet6/filter/limit-3882 -j DROP + inet6/filter/logaccept-87 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-87 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2494 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3884 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2493 + inet/filter/INPUT -i eth0 -j limit-3883 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2493 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2493 -j logaccept-44 - inet/filter/limit-2493 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2493 -j DROP - inet/filter/logaccept-44 -m limit --limit 1/second -j LOG - inet/filter/logaccept-44 -j ACCEPT + inet/filter/limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3883 -j logaccept-88 + inet/filter/limit-3883 -m limit --limit 1/second -j LOG + inet/filter/limit-3883 -j DROP + inet/filter/logaccept-88 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-88 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-88 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2493 + inet6/filter/INPUT -i eth0 -j limit-3883 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2493 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2493 -j logaccept-44 - inet6/filter/limit-2493 -j DROP - inet6/filter/logaccept-44 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-44 -j ACCEPT + inet6/filter/limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3883 -j logaccept-88 + inet6/filter/limit-3883 -m limit --limit 1/second -j LOG + inet6/filter/limit-3883 -j DROP + inet6/filter/logaccept-88 -j TEE --gateway fc00::2 + inet6/filter/logaccept-88 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2495 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3885 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2494 + inet/filter/INPUT -i eth0 -j limit-3884 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2494 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2494 -j ACCEPT - inet/filter/limit-2494 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2494 -j DROP + inet/filter/limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3884 -j ACCEPT + inet/filter/limit-3884 -m limit --limit 1/second -j LOG + inet/filter/limit-3884 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2494 + inet6/filter/INPUT -i eth0 -j limit-3884 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2494 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2494 -j ACCEPT - inet6/filter/limit-2494 -j DROP + inet6/filter/limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3884 -j ACCEPT + inet6/filter/limit-3884 -m limit --limit 1/second -j LOG + inet6/filter/limit-3884 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2496 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3886 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2495 + inet/filter/INPUT -i eth0 -j limit-3885 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2495 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2495 -j logaccept-45 - inet/filter/limit-2495 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2495 -j DROP - inet/filter/logaccept-45 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-45 -j ACCEPT + inet/filter/limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3885 -j logaccept-89 + inet/filter/limit-3885 -m limit --limit 1/second -j LOG + inet/filter/limit-3885 -j DROP + inet/filter/logaccept-89 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-89 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2495 + inet6/filter/INPUT -i eth0 -j limit-3885 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2495 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2495 -j logaccept-45 - inet6/filter/limit-2495 -j DROP - inet6/filter/logaccept-45 -j ACCEPT + inet6/filter/limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3885 -j logaccept-89 + inet6/filter/limit-3885 -m limit --limit 1/second -j LOG + inet6/filter/limit-3885 -j DROP + inet6/filter/logaccept-89 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2497 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3887 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2496 + inet/filter/INPUT -i eth0 -j limit-3886 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2496 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2496 -j ACCEPT - inet/filter/limit-2496 -j DROP + inet/filter/limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3886 -j ACCEPT + inet/filter/limit-3886 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3886 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3886 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2496 + inet6/filter/INPUT -i eth0 -j limit-3886 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2496 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2496 -j ACCEPT - inet6/filter/limit-2496 -j DROP + inet6/filter/limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3886 -j ACCEPT + inet6/filter/limit-3886 -j TEE --gateway fc00::2 + inet6/filter/limit-3886 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2498 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 3888 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2497 - inet/filter/limit-2497 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2497 -j RETURN - inet/filter/limit-2497 -j DROP + inet/filter/INPUT -i eth0 -j limit-3887 + inet/filter/limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3887 -j RETURN + inet/filter/limit-3887 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3887 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3887 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2497 - inet6/filter/limit-2497 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2497 -j RETURN - inet6/filter/limit-2497 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3887 + inet6/filter/limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3887 -j RETURN + inet6/filter/limit-3887 -j TEE --gateway fc00::2 + inet6/filter/limit-3887 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2499 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3889 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2498 + inet/filter/INPUT -i eth0 -j limit-3888 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2498 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2498 -j logaccept-46 - inet/filter/limit-2498 -j DROP - inet/filter/logaccept-46 -m limit --limit 1/second -j LOG - inet/filter/logaccept-46 -j ACCEPT + inet/filter/limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3888 -j logaccept-90 + inet/filter/limit-3888 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3888 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3888 -j DROP + inet/filter/logaccept-90 -m limit --limit 1/second -j LOG + inet/filter/logaccept-90 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2498 + inet6/filter/INPUT -i eth0 -j limit-3888 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2498 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2498 -j logaccept-46 - inet6/filter/limit-2498 -j DROP - inet6/filter/logaccept-46 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-46 -j ACCEPT + inet6/filter/limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3888 -j logaccept-90 + inet6/filter/limit-3888 -j TEE --gateway fc00::2 + inet6/filter/limit-3888 -j DROP + inet6/filter/logaccept-90 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-90 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2500 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3890 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2499 + inet/filter/INPUT -i eth0 -j limit-3889 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2499 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2499 -j ACCEPT - inet/filter/limit-2499 -j DROP + inet/filter/limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3889 -j logaccept-91 + inet/filter/limit-3889 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3889 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3889 -j DROP + inet/filter/logaccept-91 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-91 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-91 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2499 + inet6/filter/INPUT -i eth0 -j limit-3889 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2499 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2499 -j ACCEPT - inet6/filter/limit-2499 -j DROP + inet6/filter/limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3889 -j logaccept-91 + inet6/filter/limit-3889 -j TEE --gateway fc00::2 + inet6/filter/limit-3889 -j DROP + inet6/filter/logaccept-91 -j TEE --gateway fc00::2 + inet6/filter/logaccept-91 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2501 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3891 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2500 + inet/filter/INPUT -i eth0 -j limit-3890 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2500 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2500 -j logaccept-47 - inet/filter/limit-2500 -j DROP - inet/filter/logaccept-47 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-47 -j ACCEPT + inet/filter/limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3890 -j ACCEPT + inet/filter/limit-3890 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3890 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3890 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2500 + inet6/filter/INPUT -i eth0 -j limit-3890 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2500 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2500 -j logaccept-47 - inet6/filter/limit-2500 -j DROP - inet6/filter/logaccept-47 -j ACCEPT + inet6/filter/limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3890 -j ACCEPT + inet6/filter/limit-3890 -j TEE --gateway fc00::2 + inet6/filter/limit-3890 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2502 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 3892 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2501 + inet/filter/INPUT -i eth0 -j limit-3891 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2501 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2501 -j ACCEPT - inet/filter/limit-2501 -m limit --limit 1/second -j LOG - inet/filter/limit-2501 -j DROP + inet/filter/limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3891 -j logaccept-92 + inet/filter/limit-3891 -j TEE --gateway 10.0.0.1 + inet/filter/limit-3891 -j TEE --gateway 10.0.0.2 + inet/filter/limit-3891 -j DROP + inet/filter/logaccept-92 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-92 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2501 + inet6/filter/INPUT -i eth0 -j limit-3891 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2501 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2501 -j ACCEPT - inet6/filter/limit-2501 -m limit --limit 1/second -j LOG - inet6/filter/limit-2501 -j DROP + inet6/filter/limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3891 -j logaccept-92 + inet6/filter/limit-3891 -j TEE --gateway fc00::2 + inet6/filter/limit-3891 -j DROP + inet6/filter/logaccept-92 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2503 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2502 - inet/filter/limit-2502 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2502 -j RETURN - inet/filter/limit-2502 -m limit --limit 1/second -j LOG - inet/filter/limit-2502 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2502 - inet6/filter/limit-2502 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2502 -j RETURN - inet6/filter/limit-2502 -m limit --limit 1/second -j LOG - inet6/filter/limit-2502 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2504 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3893 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2503 + inet/filter/INPUT -i eth0 -j limit-3892 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2503 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2503 -j logaccept-48 - inet/filter/limit-2503 -m limit --limit 1/second -j LOG - inet/filter/limit-2503 -j DROP - inet/filter/logaccept-48 -m limit --limit 1/second -j LOG - inet/filter/logaccept-48 -j ACCEPT + inet/filter/limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3892 -j ACCEPT + inet/filter/limit-3892 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2503 + inet6/filter/INPUT -i eth0 -j limit-3892 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2503 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2503 -j logaccept-48 - inet6/filter/limit-2503 -m limit --limit 1/second -j LOG - inet6/filter/limit-2503 -j DROP - inet6/filter/logaccept-48 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-48 -j ACCEPT + inet6/filter/limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3892 -j ACCEPT + inet6/filter/limit-3892 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2505 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3894 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2504 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2504 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2504 -j ACCEPT - inet/filter/limit-2504 -m limit --limit 1/second -j LOG - inet/filter/limit-2504 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/INPUT -i eth0 -j limit-3893 + inet/filter/limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3893 -j RETURN + inet/filter/limit-3893 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2504 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2504 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2504 -j ACCEPT - inet6/filter/limit-2504 -m limit --limit 1/second -j LOG - inet6/filter/limit-2504 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3893 + inet6/filter/limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3893 -j RETURN + inet6/filter/limit-3893 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2506 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3895 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2505 + inet/filter/INPUT -i eth0 -j limit-3894 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2505 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2505 -j logaccept-49 - inet/filter/limit-2505 -m limit --limit 1/second -j LOG - inet/filter/limit-2505 -j DROP - inet/filter/logaccept-49 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-49 -j ACCEPT + inet/filter/limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3894 -j logaccept-93 + inet/filter/limit-3894 -j DROP + inet/filter/logaccept-93 -m limit --limit 1/second -j LOG + inet/filter/logaccept-93 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2505 + inet6/filter/INPUT -i eth0 -j limit-3894 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2505 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2505 -j logaccept-49 - inet6/filter/limit-2505 -m limit --limit 1/second -j LOG - inet6/filter/limit-2505 -j DROP - inet6/filter/logaccept-49 -j ACCEPT + inet6/filter/limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3894 -j logaccept-93 + inet6/filter/limit-3894 -j DROP + inet6/filter/logaccept-93 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-93 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2507 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 3896 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2506 + inet/filter/INPUT -i eth0 -j limit-3895 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2506 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2506 -j ACCEPT - inet/filter/limit-2506 -j DROP + inet/filter/limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3895 -j logaccept-94 + inet/filter/limit-3895 -j DROP + inet/filter/logaccept-94 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-94 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-94 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2506 + inet6/filter/INPUT -i eth0 -j limit-3895 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2506 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2506 -j ACCEPT - inet6/filter/limit-2506 -j DROP + inet6/filter/limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3895 -j logaccept-94 + inet6/filter/limit-3895 -j DROP + inet6/filter/logaccept-94 -j TEE --gateway fc00::2 + inet6/filter/logaccept-94 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2508 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 3897 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2507 - inet/filter/limit-2507 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2507 -j RETURN - inet/filter/limit-2507 -j DROP - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2507 - inet6/filter/limit-2507 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2507 -j RETURN - inet6/filter/limit-2507 -j DROP - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - -Filter 2509 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -j limit-2508 + inet/filter/INPUT -i eth0 -j limit-3896 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2508 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2508 -j logaccept-50 - inet/filter/limit-2508 -j DROP - inet/filter/logaccept-50 -m limit --limit 1/second -j LOG - inet/filter/logaccept-50 -j ACCEPT + inet/filter/limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3896 -j ACCEPT + inet/filter/limit-3896 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2508 + inet6/filter/INPUT -i eth0 -j limit-3896 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2508 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2508 -j logaccept-50 - inet6/filter/limit-2508 -j DROP - inet6/filter/logaccept-50 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-50 -j ACCEPT + inet6/filter/limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3896 -j ACCEPT + inet6/filter/limit-3896 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2510 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3898 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2509 + inet/filter/INPUT -i eth0 -j limit-3897 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2509 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2509 -j ACCEPT - inet/filter/limit-2509 -j DROP + inet/filter/limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3897 -j logaccept-95 + inet/filter/limit-3897 -j DROP + inet/filter/logaccept-95 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-95 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2509 + inet6/filter/INPUT -i eth0 -j limit-3897 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2509 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2509 -j ACCEPT - inet6/filter/limit-2509 -j DROP + inet6/filter/limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3897 -j logaccept-95 + inet6/filter/limit-3897 -j DROP + inet6/filter/logaccept-95 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2511 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3899 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2510 + inet/filter/INPUT -i eth0 -j limit-3898 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2510 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2510 -j logaccept-51 - inet/filter/limit-2510 -j DROP - inet/filter/logaccept-51 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-51 -j ACCEPT + inet/filter/limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3898 -j ACCEPT + inet/filter/limit-3898 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3898 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2510 + inet6/filter/INPUT -i eth0 -j limit-3898 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2510 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2510 -j logaccept-51 - inet6/filter/limit-2510 -j DROP - inet6/filter/logaccept-51 -j ACCEPT + inet6/filter/limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3898 -j ACCEPT + inet6/filter/limit-3898 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2512 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} +Filter 3900 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2511 - inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2511 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2511 -j ACCEPT - inet/filter/limit-2511 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2511 -j DROP - inet/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/INPUT -i eth0 -j limit-3899 + inet/filter/limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3899 -j RETURN + inet/filter/limit-3899 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3899 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2511 - inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2511 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2511 -j ACCEPT - inet6/filter/limit-2511 -j DROP - inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet6/filter/INPUT -i eth0 -j limit-3899 + inet6/filter/limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3899 -j RETURN + inet6/filter/limit-3899 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2513 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw"} +Filter 3901 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2512 - inet/filter/limit-2512 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2512 -j RETURN - inet/filter/limit-2512 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2512 -j DROP + inet/filter/INPUT -i eth0 -j limit-3900 + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet/filter/limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3900 -j logaccept-96 + inet/filter/limit-3900 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3900 -j DROP + inet/filter/logaccept-96 -m limit --limit 1/second -j LOG + inet/filter/logaccept-96 -j ACCEPT + inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2512 - inet6/filter/limit-2512 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2512 -j RETURN - inet6/filter/limit-2512 -j DROP + inet6/filter/INPUT -i eth0 -j limit-3900 + inet6/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3900 -j logaccept-96 + inet6/filter/limit-3900 -j DROP + inet6/filter/logaccept-96 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-96 -j ACCEPT + inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2514 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 3902 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2513 + inet/filter/INPUT -i eth0 -j limit-3901 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2513 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2513 -j logaccept-52 - inet/filter/limit-2513 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2513 -j DROP - inet/filter/logaccept-52 -m limit --limit 1/second -j LOG - inet/filter/logaccept-52 -j ACCEPT + inet/filter/limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3901 -j logaccept-97 + inet/filter/limit-3901 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3901 -j DROP + inet/filter/logaccept-97 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-97 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-97 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2513 + inet6/filter/INPUT -i eth0 -j limit-3901 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2513 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2513 -j logaccept-52 - inet6/filter/limit-2513 -j DROP - inet6/filter/logaccept-52 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-52 -j ACCEPT + inet6/filter/limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3901 -j logaccept-97 + inet6/filter/limit-3901 -j DROP + inet6/filter/logaccept-97 -j TEE --gateway fc00::2 + inet6/filter/logaccept-97 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2515 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 3903 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2514 + inet/filter/INPUT -i eth0 -j limit-3902 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2514 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2514 -j ACCEPT - inet/filter/limit-2514 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2514 -j DROP + inet/filter/limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3902 -j ACCEPT + inet/filter/limit-3902 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3902 -j DROP inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2514 + inet6/filter/INPUT -i eth0 -j limit-3902 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2514 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2514 -j ACCEPT - inet6/filter/limit-2514 -j DROP + inet6/filter/limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3902 -j ACCEPT + inet6/filter/limit-3902 -j DROP inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2516 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} +Filter 3904 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-2515 + inet/filter/INPUT -i eth0 -j limit-3903 inet/filter/OUTPUT -o eth0 -j ACCEPT - inet/filter/limit-2515 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2515 -j logaccept-53 - inet/filter/limit-2515 -m limit --limit 12/minute -j ULOG - inet/filter/limit-2515 -j DROP - inet/filter/logaccept-53 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-53 -j ACCEPT + inet/filter/limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3903 -j logaccept-98 + inet/filter/limit-3903 -m limit --limit 12/minute -j ULOG + inet/filter/limit-3903 -j DROP + inet/filter/logaccept-98 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-98 -j ACCEPT inet/raw/OUTPUT -o eth0 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack - inet6/filter/INPUT -i eth0 -j limit-2515 + inet6/filter/INPUT -i eth0 -j limit-3903 inet6/filter/OUTPUT -o eth0 -j ACCEPT - inet6/filter/limit-2515 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2515 -j logaccept-53 - inet6/filter/limit-2515 -j DROP - inet6/filter/logaccept-53 -j ACCEPT + inet6/filter/limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3903 -j logaccept-98 + inet6/filter/limit-3903 -j DROP + inet6/filter/logaccept-98 -j ACCEPT inet6/raw/OUTPUT -o eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 2517 {"update-limit":"A"} +Filter 3905 {"update-limit":"A"} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set @@ -35397,7 +59095,7 @@ Filter 2517 {"update-limit":"A"} inet6/filter/INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 2518 {"update-limit":"B"} +Filter 3906 {"update-limit":"B"} (filter-limit) inet/filter/FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set @@ -35406,7 +59104,7 @@ Filter 2518 {"update-limit":"B"} inet6/filter/INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 2519 {"update-limit":"C"} +Filter 3907 {"update-limit":"C"} (filter-limit) inet/filter/FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set @@ -35415,7 +59113,7 @@ Filter 2519 {"update-limit":"C"} inet6/filter/INPUT -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/OUTPUT -m recent --name user:C --rsource --mask fe00:: --set -Filter 2520 {"update-limit":"D"} +Filter 3908 {"update-limit":"D"} (filter-limit) inet/filter/FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set inet/filter/INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set @@ -35424,7 +59122,7 @@ Filter 2520 {"update-limit":"D"} inet6/filter/INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set inet6/filter/OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -Filter 2521 {"update-limit":{"addr":"src","measure":"conn","name":"A"}} +Filter 3909 {"update-limit":{"addr":"src","measure":"conn","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set @@ -35433,7 +59131,7 @@ Filter 2521 {"update-limit":{"addr":"src","measure":"con inet6/filter/INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 2522 {"update-limit":{"addr":"dest","measure":"conn","name":"A"}} +Filter 3910 {"update-limit":{"addr":"dest","measure":"conn","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set @@ -35442,7 +59140,7 @@ Filter 2522 {"update-limit":{"addr":"dest","measure":"co inet6/filter/INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 2523 {"update-limit":{"addr":"src","measure":"flow","name":"B"}} +Filter 3911 {"update-limit":{"addr":"src","measure":"flow","name":"B"}} (filter-limit) inet/filter/FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set @@ -35451,7 +59149,7 @@ Filter 2523 {"update-limit":{"addr":"src","measure":"flo inet6/filter/INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 2524 {"update-limit":{"addr":"dest","measure":"flow","name":"B"}} +Filter 3912 {"update-limit":{"addr":"dest","measure":"flow","name":"B"}} (filter-limit) inet/filter/FORWARD -m recent --name user:B --rdest --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:B --rdest --mask 255.255.255.255 --set @@ -35460,7 +59158,7 @@ Filter 2524 {"update-limit":{"addr":"dest","measure":"fl inet6/filter/INPUT -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 2525 {} +Filter 3913 {} (log) inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -35469,20 +59167,20 @@ Filter 2525 {} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 2526 {"action":"drop"} +Filter 3914 {"action":"drop"} (log) - inet/filter/FORWARD -j logdrop-1184 - inet/filter/INPUT -j logdrop-1184 - inet/filter/OUTPUT -j logdrop-1184 - inet/filter/logdrop-1184 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1184 -j DROP - inet6/filter/FORWARD -j logdrop-1184 - inet6/filter/INPUT -j logdrop-1184 - inet6/filter/OUTPUT -j logdrop-1184 - inet6/filter/logdrop-1184 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1184 -j DROP - -Filter 2527 {"action":"pass"} + inet/filter/FORWARD -j logdrop-2200 + inet/filter/INPUT -j logdrop-2200 + inet/filter/OUTPUT -j logdrop-2200 + inet/filter/logdrop-2200 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2200 -j DROP + inet6/filter/FORWARD -j logdrop-2200 + inet6/filter/INPUT -j logdrop-2200 + inet6/filter/OUTPUT -j logdrop-2200 + inet6/filter/logdrop-2200 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2200 -j DROP + +Filter 3915 {"action":"pass"} (log) inet/filter/FORWARD inet/filter/INPUT @@ -35491,7 +59189,7 @@ Filter 2527 {"action":"pass"} inet6/filter/INPUT inet6/filter/OUTPUT -Filter 2528 {"log":false} +Filter 3916 {"log":false} (log) inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -35500,7 +59198,7 @@ Filter 2528 {"log":false} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 2529 {"action":"drop","log":false} +Filter 3917 {"action":"drop","log":false} (log) inet/filter/FORWARD -j DROP inet/filter/INPUT -j DROP @@ -35509,7 +59207,7 @@ Filter 2529 {"action":"drop","log":false} inet6/filter/INPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 2530 {"action":"pass","log":false} +Filter 3918 {"action":"pass","log":false} (log) inet/filter/FORWARD inet/filter/INPUT @@ -35518,33 +59216,33 @@ Filter 2530 {"action":"pass","log":false} inet6/filter/INPUT inet6/filter/OUTPUT -Filter 2531 {"log":true} +Filter 3919 {"log":true} (log) - inet/filter/FORWARD -j logaccept-54 - inet/filter/INPUT -j logaccept-54 - inet/filter/OUTPUT -j logaccept-54 - inet/filter/logaccept-54 -m limit --limit 1/second -j LOG - inet/filter/logaccept-54 -j ACCEPT - inet6/filter/FORWARD -j logaccept-54 - inet6/filter/INPUT -j logaccept-54 - inet6/filter/OUTPUT -j logaccept-54 - inet6/filter/logaccept-54 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-54 -j ACCEPT - -Filter 2532 {"action":"drop","log":true} + inet/filter/FORWARD -j logaccept-99 + inet/filter/INPUT -j logaccept-99 + inet/filter/OUTPUT -j logaccept-99 + inet/filter/logaccept-99 -m limit --limit 1/second -j LOG + inet/filter/logaccept-99 -j ACCEPT + inet6/filter/FORWARD -j logaccept-99 + inet6/filter/INPUT -j logaccept-99 + inet6/filter/OUTPUT -j logaccept-99 + inet6/filter/logaccept-99 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-99 -j ACCEPT + +Filter 3920 {"action":"drop","log":true} (log) - inet/filter/FORWARD -j logdrop-1185 - inet/filter/INPUT -j logdrop-1185 - inet/filter/OUTPUT -j logdrop-1185 - inet/filter/logdrop-1185 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1185 -j DROP - inet6/filter/FORWARD -j logdrop-1185 - inet6/filter/INPUT -j logdrop-1185 - inet6/filter/OUTPUT -j logdrop-1185 - inet6/filter/logdrop-1185 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1185 -j DROP - -Filter 2533 {"action":"pass","log":true} + inet/filter/FORWARD -j logdrop-2201 + inet/filter/INPUT -j logdrop-2201 + inet/filter/OUTPUT -j logdrop-2201 + inet/filter/logdrop-2201 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2201 -j DROP + inet6/filter/FORWARD -j logdrop-2201 + inet6/filter/INPUT -j logdrop-2201 + inet6/filter/OUTPUT -j logdrop-2201 + inet6/filter/logdrop-2201 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2201 -j DROP + +Filter 3921 {"action":"pass","log":true} (log) inet/filter/FORWARD -j logpass-0 inet/filter/INPUT -j logpass-0 @@ -35555,7 +59253,87 @@ Filter 2533 {"action":"pass","log":true} inet6/filter/OUTPUT -j logpass-0 inet6/filter/logpass-0 -m limit --limit 1/second -j LOG -Filter 2534 {"log":"none"} +Filter 3922 {"log":"dual"} +(log) + inet/filter/FORWARD -j logaccept-100 + inet/filter/INPUT -j logaccept-100 + inet/filter/OUTPUT -j logaccept-100 + inet/filter/logaccept-100 -j LOG + inet/filter/logaccept-100 -j ACCEPT + inet6/filter/FORWARD -j logaccept-100 + inet6/filter/INPUT -j logaccept-100 + inet6/filter/OUTPUT -j logaccept-100 + inet6/filter/logaccept-100 -j LOG + inet6/filter/logaccept-100 -j TEE --gateway fc00::1 + inet6/filter/logaccept-100 -j ACCEPT + +Filter 3923 {"action":"drop","log":"dual"} +(log) + inet/filter/FORWARD -j logdrop-2202 + inet/filter/INPUT -j logdrop-2202 + inet/filter/OUTPUT -j logdrop-2202 + inet/filter/logdrop-2202 -j LOG + inet/filter/logdrop-2202 -j DROP + inet6/filter/FORWARD -j logdrop-2202 + inet6/filter/INPUT -j logdrop-2202 + inet6/filter/OUTPUT -j logdrop-2202 + inet6/filter/logdrop-2202 -j LOG + inet6/filter/logdrop-2202 -j TEE --gateway fc00::1 + inet6/filter/logdrop-2202 -j DROP + +Filter 3924 {"action":"pass","log":"dual"} +(log) + inet/filter/FORWARD -j logpass-1 + inet/filter/INPUT -j logpass-1 + inet/filter/OUTPUT -j logpass-1 + inet/filter/logpass-1 -j LOG + inet6/filter/FORWARD -j logpass-1 + inet6/filter/INPUT -j logpass-1 + inet6/filter/OUTPUT -j logpass-1 + inet6/filter/logpass-1 -j LOG + inet6/filter/logpass-1 -j TEE --gateway fc00::1 + +Filter 3925 {"log":"mirror"} +(log) + inet/filter/FORWARD -j logaccept-101 + inet/filter/INPUT -j logaccept-101 + inet/filter/OUTPUT -j logaccept-101 + inet/filter/logaccept-101 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-101 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-101 -j ACCEPT + inet6/filter/FORWARD -j logaccept-101 + inet6/filter/INPUT -j logaccept-101 + inet6/filter/OUTPUT -j logaccept-101 + inet6/filter/logaccept-101 -j TEE --gateway fc00::2 + inet6/filter/logaccept-101 -j ACCEPT + +Filter 3926 {"action":"drop","log":"mirror"} +(log) + inet/filter/FORWARD -j logdrop-2203 + inet/filter/INPUT -j logdrop-2203 + inet/filter/OUTPUT -j logdrop-2203 + inet/filter/logdrop-2203 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-2203 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-2203 -j DROP + inet6/filter/FORWARD -j logdrop-2203 + inet6/filter/INPUT -j logdrop-2203 + inet6/filter/OUTPUT -j logdrop-2203 + inet6/filter/logdrop-2203 -j TEE --gateway fc00::2 + inet6/filter/logdrop-2203 -j DROP + +Filter 3927 {"action":"pass","log":"mirror"} +(log) + inet/filter/FORWARD -j logpass-2 + inet/filter/INPUT -j logpass-2 + inet/filter/OUTPUT -j logpass-2 + inet/filter/logpass-2 -j TEE --gateway 10.0.0.1 + inet/filter/logpass-2 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j logpass-2 + inet6/filter/INPUT -j logpass-2 + inet6/filter/OUTPUT -j logpass-2 + inet6/filter/logpass-2 -j TEE --gateway fc00::2 + +Filter 3928 {"log":"none"} (log) inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -35564,7 +59342,7 @@ Filter 2534 {"log":"none"} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 2535 {"action":"drop","log":"none"} +Filter 3929 {"action":"drop","log":"none"} (log) inet/filter/FORWARD -j DROP inet/filter/INPUT -j DROP @@ -35573,7 +59351,7 @@ Filter 2535 {"action":"drop","log":"none"} inet6/filter/INPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 2536 {"action":"pass","log":"none"} +Filter 3930 {"action":"pass","log":"none"} (log) inet/filter/FORWARD inet/filter/INPUT @@ -35582,42 +59360,42 @@ Filter 2536 {"action":"pass","log":"none"} inet6/filter/INPUT inet6/filter/OUTPUT -Filter 2537 {"log":"ulog"} +Filter 3931 {"log":"ulog"} (log) - inet/filter/FORWARD -j logaccept-55 - inet/filter/INPUT -j logaccept-55 - inet/filter/OUTPUT -j logaccept-55 - inet/filter/logaccept-55 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-55 -j ACCEPT - inet6/filter/FORWARD -j logaccept-55 - inet6/filter/INPUT -j logaccept-55 - inet6/filter/OUTPUT -j logaccept-55 - inet6/filter/logaccept-55 -j ACCEPT - -Filter 2538 {"action":"drop","log":"ulog"} + inet/filter/FORWARD -j logaccept-102 + inet/filter/INPUT -j logaccept-102 + inet/filter/OUTPUT -j logaccept-102 + inet/filter/logaccept-102 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-102 -j ACCEPT + inet6/filter/FORWARD -j logaccept-102 + inet6/filter/INPUT -j logaccept-102 + inet6/filter/OUTPUT -j logaccept-102 + inet6/filter/logaccept-102 -j ACCEPT + +Filter 3932 {"action":"drop","log":"ulog"} (log) - inet/filter/FORWARD -j logdrop-1186 - inet/filter/INPUT -j logdrop-1186 - inet/filter/OUTPUT -j logdrop-1186 - inet/filter/logdrop-1186 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-1186 -j DROP - inet6/filter/FORWARD -j logdrop-1186 - inet6/filter/INPUT -j logdrop-1186 - inet6/filter/OUTPUT -j logdrop-1186 - inet6/filter/logdrop-1186 -j DROP - -Filter 2539 {"action":"pass","log":"ulog"} + inet/filter/FORWARD -j logdrop-2204 + inet/filter/INPUT -j logdrop-2204 + inet/filter/OUTPUT -j logdrop-2204 + inet/filter/logdrop-2204 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-2204 -j DROP + inet6/filter/FORWARD -j logdrop-2204 + inet6/filter/INPUT -j logdrop-2204 + inet6/filter/OUTPUT -j logdrop-2204 + inet6/filter/logdrop-2204 -j DROP + +Filter 3933 {"action":"pass","log":"ulog"} (log) - inet/filter/FORWARD -j logpass-1 - inet/filter/INPUT -j logpass-1 - inet/filter/OUTPUT -j logpass-1 - inet/filter/logpass-1 -m limit --limit 12/minute -j ULOG + inet/filter/FORWARD -j logpass-3 + inet/filter/INPUT -j logpass-3 + inet/filter/OUTPUT -j logpass-3 + inet/filter/logpass-3 -m limit --limit 12/minute -j ULOG -Filter 2540 {"action":"pass","in":"_fw","log":"ulog"} +Filter 3934 {"action":"pass","in":"_fw","log":"ulog"} (log) inet/filter/OUTPUT -m limit --limit 12/minute -j ULOG -Filter 2541 {"in":["_fw","A"]} +Filter 3935 {"in":["_fw","A"]} (zone) inet/filter/FORWARD -i eth0 -j ACCEPT inet/filter/INPUT -i eth0 -j ACCEPT @@ -35626,12 +59404,12 @@ Filter 2541 {"in":["_fw","A"]} inet6/filter/INPUT -i eth0 -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 2542 {"in":"B","out":"C"} +Filter 3936 {"in":"B","out":"C"} (zone) inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -Filter 2543 {"out":["_fw","B"]} +Filter 3937 {"out":["_fw","B"]} (zone) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -35640,7 +59418,7 @@ Filter 2543 {"out":["_fw","B"]} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -Filter 2544 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +Filter 3938 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} (zone) inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT @@ -35729,6 +59507,12 @@ Limit D {"inet":22,"inet6":58} Log _default {"limit":1} (defaults) +Log dual {"mirror":"fc00::1","mode":"log"} +(log) + +Log mirror {"mirror":["10.0.0.1","10.0.0.2","fc00::2"]} +(log) + Log none {"mode":"none"} (log) @@ -35779,7 +59563,13 @@ Packet-log 1 {"out":"_fw"} inet/filter/INPUT -m limit --limit 1/second -j LOG inet6/filter/INPUT -m limit --limit 1/second -j LOG -Packet-log 2 {"log":"ulog","out":"_fw"} +Packet-log 2 {"log":"mirror","out":"_fw"} +(log) + inet/filter/INPUT -j TEE --gateway 10.0.0.1 + inet/filter/INPUT -j TEE --gateway 10.0.0.2 + inet6/filter/INPUT -j TEE --gateway fc00::2 + +Packet-log 3 {"log":"ulog","out":"_fw"} (log) inet/filter/INPUT -m limit --limit 12/minute -j ULOG @@ -36009,17 +59799,17 @@ hash:net family inet :limit-1004 - [0:0] :limit-1005 - [0:0] :limit-1006 - [0:0] -:limit-1007 - [0:0] :limit-1008 - [0:0] :limit-1009 - [0:0] :limit-101 - [0:0] :limit-1010 - [0:0] :limit-1011 - [0:0] :limit-1012 - [0:0] -:limit-1013 - [0:0] +:limit-1014 - [0:0] :limit-1015 - [0:0] :limit-1016 - [0:0] :limit-1017 - [0:0] +:limit-1018 - [0:0] :limit-1019 - [0:0] :limit-102 - [0:0] :limit-1020 - [0:0] @@ -36029,13 +59819,13 @@ hash:net family inet :limit-1024 - [0:0] :limit-1025 - [0:0] :limit-1026 - [0:0] -:limit-1027 - [0:0] :limit-1028 - [0:0] :limit-1029 - [0:0] :limit-103 - [0:0] +:limit-1030 - [0:0] :limit-1031 - [0:0] :limit-1032 - [0:0] -:limit-1033 - [0:0] +:limit-1034 - [0:0] :limit-1035 - [0:0] :limit-1036 - [0:0] :limit-1037 - [0:0] @@ -36048,13 +59838,13 @@ hash:net family inet :limit-1043 - [0:0] :limit-1044 - [0:0] :limit-1045 - [0:0] -:limit-1047 - [0:0] +:limit-1046 - [0:0] :limit-1048 - [0:0] :limit-1049 - [0:0] :limit-105 - [0:0] +:limit-1050 - [0:0] :limit-1051 - [0:0] :limit-1052 - [0:0] -:limit-1053 - [0:0] :limit-1054 - [0:0] :limit-1055 - [0:0] :limit-1056 - [0:0] @@ -36064,17 +59854,17 @@ hash:net family inet :limit-106 - [0:0] :limit-1060 - [0:0] :limit-1061 - [0:0] +:limit-1062 - [0:0] :limit-1063 - [0:0] :limit-1064 - [0:0] :limit-1065 - [0:0] -:limit-1067 - [0:0] +:limit-1066 - [0:0] :limit-1068 - [0:0] :limit-1069 - [0:0] :limit-107 - [0:0] :limit-1070 - [0:0] :limit-1071 - [0:0] :limit-1072 - [0:0] -:limit-1073 - [0:0] :limit-1074 - [0:0] :limit-1075 - [0:0] :limit-1076 - [0:0] @@ -36088,26 +59878,28 @@ hash:net family inet :limit-1083 - [0:0] :limit-1084 - [0:0] :limit-1085 - [0:0] +:limit-1086 - [0:0] :limit-1087 - [0:0] :limit-1088 - [0:0] :limit-1089 - [0:0] :limit-109 - [0:0] +:limit-1090 - [0:0] :limit-1091 - [0:0] :limit-1092 - [0:0] :limit-1093 - [0:0] :limit-1094 - [0:0] :limit-1095 - [0:0] :limit-1096 - [0:0] -:limit-1097 - [0:0] :limit-1098 - [0:0] :limit-1099 - [0:0] :limit-11 - [0:0] :limit-110 - [0:0] :limit-1100 - [0:0] :limit-1101 - [0:0] -:limit-1103 - [0:0] +:limit-1102 - [0:0] :limit-1104 - [0:0] :limit-1105 - [0:0] +:limit-1106 - [0:0] :limit-1107 - [0:0] :limit-1108 - [0:0] :limit-1109 - [0:0] @@ -36119,12 +59911,12 @@ hash:net family inet :limit-1114 - [0:0] :limit-1115 - [0:0] :limit-1116 - [0:0] -:limit-1117 - [0:0] +:limit-1118 - [0:0] :limit-1119 - [0:0] :limit-112 - [0:0] :limit-1120 - [0:0] :limit-1121 - [0:0] -:limit-1123 - [0:0] +:limit-1122 - [0:0] :limit-1124 - [0:0] :limit-1125 - [0:0] :limit-1126 - [0:0] @@ -36136,15 +59928,15 @@ hash:net family inet :limit-1131 - [0:0] :limit-1132 - [0:0] :limit-1133 - [0:0] +:limit-1134 - [0:0] :limit-1135 - [0:0] :limit-1136 - [0:0] -:limit-1137 - [0:0] +:limit-1138 - [0:0] :limit-1139 - [0:0] :limit-114 - [0:0] :limit-1140 - [0:0] :limit-1141 - [0:0] :limit-1142 - [0:0] -:limit-1143 - [0:0] :limit-1144 - [0:0] :limit-1145 - [0:0] :limit-1146 - [0:0] @@ -36159,12 +59951,12 @@ hash:net family inet :limit-1154 - [0:0] :limit-1155 - [0:0] :limit-1156 - [0:0] -:limit-1157 - [0:0] +:limit-1158 - [0:0] :limit-1159 - [0:0] :limit-116 - [0:0] :limit-1160 - [0:0] :limit-1161 - [0:0] -:limit-1163 - [0:0] +:limit-1162 - [0:0] :limit-1164 - [0:0] :limit-1165 - [0:0] :limit-1166 - [0:0] @@ -36176,9 +59968,11 @@ hash:net family inet :limit-1171 - [0:0] :limit-1172 - [0:0] :limit-1173 - [0:0] +:limit-1174 - [0:0] :limit-1175 - [0:0] :limit-1176 - [0:0] :limit-1177 - [0:0] +:limit-1178 - [0:0] :limit-1179 - [0:0] :limit-118 - [0:0] :limit-1180 - [0:0] @@ -36188,13 +59982,13 @@ hash:net family inet :limit-1184 - [0:0] :limit-1185 - [0:0] :limit-1186 - [0:0] -:limit-1187 - [0:0] :limit-1188 - [0:0] :limit-1189 - [0:0] :limit-119 - [0:0] +:limit-1190 - [0:0] :limit-1191 - [0:0] :limit-1192 - [0:0] -:limit-1193 - [0:0] +:limit-1194 - [0:0] :limit-1195 - [0:0] :limit-1196 - [0:0] :limit-1197 - [0:0] @@ -36208,13 +60002,13 @@ hash:net family inet :limit-1203 - [0:0] :limit-1204 - [0:0] :limit-1205 - [0:0] -:limit-1207 - [0:0] +:limit-1206 - [0:0] :limit-1208 - [0:0] :limit-1209 - [0:0] :limit-121 - [0:0] +:limit-1210 - [0:0] :limit-1211 - [0:0] :limit-1212 - [0:0] -:limit-1213 - [0:0] :limit-1214 - [0:0] :limit-1215 - [0:0] :limit-1216 - [0:0] @@ -36229,14 +60023,12 @@ hash:net family inet :limit-1224 - [0:0] :limit-1225 - [0:0] :limit-1226 - [0:0] -:limit-1227 - [0:0] :limit-1228 - [0:0] :limit-1229 - [0:0] :limit-123 - [0:0] :limit-1230 - [0:0] :limit-1231 - [0:0] :limit-1232 - [0:0] -:limit-1233 - [0:0] :limit-1234 - [0:0] :limit-1235 - [0:0] :limit-1236 - [0:0] @@ -36251,14 +60043,12 @@ hash:net family inet :limit-1244 - [0:0] :limit-1245 - [0:0] :limit-1246 - [0:0] -:limit-1247 - [0:0] :limit-1248 - [0:0] :limit-1249 - [0:0] :limit-125 - [0:0] :limit-1250 - [0:0] :limit-1251 - [0:0] :limit-1252 - [0:0] -:limit-1253 - [0:0] :limit-1254 - [0:0] :limit-1255 - [0:0] :limit-1256 - [0:0] @@ -36284,14 +60074,12 @@ hash:net family inet :limit-1274 - [0:0] :limit-1275 - [0:0] :limit-1276 - [0:0] -:limit-1277 - [0:0] :limit-1278 - [0:0] :limit-1279 - [0:0] :limit-128 - [0:0] :limit-1280 - [0:0] :limit-1281 - [0:0] :limit-1282 - [0:0] -:limit-1283 - [0:0] :limit-1284 - [0:0] :limit-1285 - [0:0] :limit-1286 - [0:0] @@ -36306,7 +60094,6 @@ hash:net family inet :limit-1294 - [0:0] :limit-1295 - [0:0] :limit-1296 - [0:0] -:limit-1297 - [0:0] :limit-1298 - [0:0] :limit-1299 - [0:0] :limit-13 - [0:0] @@ -36314,7 +60101,6 @@ hash:net family inet :limit-1300 - [0:0] :limit-1301 - [0:0] :limit-1302 - [0:0] -:limit-1303 - [0:0] :limit-1304 - [0:0] :limit-1305 - [0:0] :limit-1306 - [0:0] @@ -36329,14 +60115,12 @@ hash:net family inet :limit-1314 - [0:0] :limit-1315 - [0:0] :limit-1316 - [0:0] -:limit-1317 - [0:0] :limit-1318 - [0:0] :limit-1319 - [0:0] :limit-132 - [0:0] :limit-1320 - [0:0] :limit-1321 - [0:0] :limit-1322 - [0:0] -:limit-1323 - [0:0] :limit-1324 - [0:0] :limit-1325 - [0:0] :limit-1326 - [0:0] @@ -36351,14 +60135,12 @@ hash:net family inet :limit-1334 - [0:0] :limit-1335 - [0:0] :limit-1336 - [0:0] -:limit-1337 - [0:0] :limit-1338 - [0:0] :limit-1339 - [0:0] :limit-134 - [0:0] :limit-1340 - [0:0] :limit-1341 - [0:0] :limit-1342 - [0:0] -:limit-1343 - [0:0] :limit-1344 - [0:0] :limit-1345 - [0:0] :limit-1346 - [0:0] @@ -36384,14 +60166,12 @@ hash:net family inet :limit-1364 - [0:0] :limit-1365 - [0:0] :limit-1366 - [0:0] -:limit-1367 - [0:0] :limit-1368 - [0:0] :limit-1369 - [0:0] :limit-137 - [0:0] :limit-1370 - [0:0] :limit-1371 - [0:0] :limit-1372 - [0:0] -:limit-1373 - [0:0] :limit-1374 - [0:0] :limit-1375 - [0:0] :limit-1376 - [0:0] @@ -36406,14 +60186,12 @@ hash:net family inet :limit-1384 - [0:0] :limit-1385 - [0:0] :limit-1386 - [0:0] -:limit-1387 - [0:0] :limit-1388 - [0:0] :limit-1389 - [0:0] :limit-139 - [0:0] :limit-1390 - [0:0] :limit-1391 - [0:0] :limit-1392 - [0:0] -:limit-1393 - [0:0] :limit-1394 - [0:0] :limit-1395 - [0:0] :limit-1396 - [0:0] @@ -36429,14 +60207,12 @@ hash:net family inet :limit-1404 - [0:0] :limit-1405 - [0:0] :limit-1406 - [0:0] -:limit-1407 - [0:0] :limit-1408 - [0:0] :limit-1409 - [0:0] :limit-141 - [0:0] :limit-1410 - [0:0] :limit-1411 - [0:0] :limit-1412 - [0:0] -:limit-1413 - [0:0] :limit-1414 - [0:0] :limit-1415 - [0:0] :limit-1416 - [0:0] @@ -36451,14 +60227,12 @@ hash:net family inet :limit-1424 - [0:0] :limit-1425 - [0:0] :limit-1426 - [0:0] -:limit-1427 - [0:0] :limit-1428 - [0:0] :limit-1429 - [0:0] :limit-143 - [0:0] :limit-1430 - [0:0] :limit-1431 - [0:0] :limit-1432 - [0:0] -:limit-1433 - [0:0] :limit-1434 - [0:0] :limit-1435 - [0:0] :limit-1436 - [0:0] @@ -36484,14 +60258,12 @@ hash:net family inet :limit-1454 - [0:0] :limit-1455 - [0:0] :limit-1456 - [0:0] -:limit-1457 - [0:0] :limit-1458 - [0:0] :limit-1459 - [0:0] :limit-146 - [0:0] :limit-1460 - [0:0] :limit-1461 - [0:0] :limit-1462 - [0:0] -:limit-1463 - [0:0] :limit-1464 - [0:0] :limit-1465 - [0:0] :limit-1466 - [0:0] @@ -36506,14 +60278,12 @@ hash:net family inet :limit-1474 - [0:0] :limit-1475 - [0:0] :limit-1476 - [0:0] -:limit-1477 - [0:0] :limit-1478 - [0:0] :limit-1479 - [0:0] :limit-148 - [0:0] :limit-1480 - [0:0] :limit-1481 - [0:0] :limit-1482 - [0:0] -:limit-1483 - [0:0] :limit-1484 - [0:0] :limit-1485 - [0:0] :limit-1486 - [0:0] @@ -36528,7 +60298,6 @@ hash:net family inet :limit-1494 - [0:0] :limit-1495 - [0:0] :limit-1496 - [0:0] -:limit-1497 - [0:0] :limit-1498 - [0:0] :limit-1499 - [0:0] :limit-15 - [0:0] @@ -36536,7 +60305,6 @@ hash:net family inet :limit-1500 - [0:0] :limit-1501 - [0:0] :limit-1502 - [0:0] -:limit-1503 - [0:0] :limit-1504 - [0:0] :limit-1505 - [0:0] :limit-1506 - [0:0] @@ -36551,14 +60319,12 @@ hash:net family inet :limit-1514 - [0:0] :limit-1515 - [0:0] :limit-1516 - [0:0] -:limit-1517 - [0:0] :limit-1518 - [0:0] :limit-1519 - [0:0] :limit-152 - [0:0] :limit-1520 - [0:0] :limit-1521 - [0:0] :limit-1522 - [0:0] -:limit-1523 - [0:0] :limit-1524 - [0:0] :limit-1525 - [0:0] :limit-1526 - [0:0] @@ -36584,14 +60350,12 @@ hash:net family inet :limit-1544 - [0:0] :limit-1545 - [0:0] :limit-1546 - [0:0] -:limit-1547 - [0:0] :limit-1548 - [0:0] :limit-1549 - [0:0] :limit-155 - [0:0] :limit-1550 - [0:0] :limit-1551 - [0:0] :limit-1552 - [0:0] -:limit-1553 - [0:0] :limit-1554 - [0:0] :limit-1555 - [0:0] :limit-1556 - [0:0] @@ -36606,14 +60370,12 @@ hash:net family inet :limit-1564 - [0:0] :limit-1565 - [0:0] :limit-1566 - [0:0] -:limit-1567 - [0:0] :limit-1568 - [0:0] :limit-1569 - [0:0] :limit-157 - [0:0] :limit-1570 - [0:0] :limit-1571 - [0:0] :limit-1572 - [0:0] -:limit-1573 - [0:0] :limit-1574 - [0:0] :limit-1575 - [0:0] :limit-1576 - [0:0] @@ -36628,14 +60390,12 @@ hash:net family inet :limit-1584 - [0:0] :limit-1585 - [0:0] :limit-1586 - [0:0] -:limit-1587 - [0:0] :limit-1588 - [0:0] :limit-1589 - [0:0] :limit-159 - [0:0] :limit-1590 - [0:0] :limit-1591 - [0:0] :limit-1592 - [0:0] -:limit-1593 - [0:0] :limit-1594 - [0:0] :limit-1595 - [0:0] :limit-1596 - [0:0] @@ -36651,14 +60411,12 @@ hash:net family inet :limit-1604 - [0:0] :limit-1605 - [0:0] :limit-1606 - [0:0] -:limit-1607 - [0:0] :limit-1608 - [0:0] :limit-1609 - [0:0] :limit-161 - [0:0] :limit-1610 - [0:0] :limit-1611 - [0:0] :limit-1612 - [0:0] -:limit-1613 - [0:0] :limit-1614 - [0:0] :limit-1615 - [0:0] :limit-1616 - [0:0] @@ -36684,14 +60442,12 @@ hash:net family inet :limit-1634 - [0:0] :limit-1635 - [0:0] :limit-1636 - [0:0] -:limit-1637 - [0:0] :limit-1638 - [0:0] :limit-1639 - [0:0] :limit-164 - [0:0] :limit-1640 - [0:0] :limit-1641 - [0:0] :limit-1642 - [0:0] -:limit-1643 - [0:0] :limit-1644 - [0:0] :limit-1645 - [0:0] :limit-1646 - [0:0] @@ -36706,14 +60462,12 @@ hash:net family inet :limit-1654 - [0:0] :limit-1655 - [0:0] :limit-1656 - [0:0] -:limit-1657 - [0:0] :limit-1658 - [0:0] :limit-1659 - [0:0] :limit-166 - [0:0] :limit-1660 - [0:0] :limit-1661 - [0:0] :limit-1662 - [0:0] -:limit-1663 - [0:0] :limit-1664 - [0:0] :limit-1665 - [0:0] :limit-1666 - [0:0] @@ -36728,14 +60482,12 @@ hash:net family inet :limit-1674 - [0:0] :limit-1675 - [0:0] :limit-1676 - [0:0] -:limit-1677 - [0:0] :limit-1678 - [0:0] :limit-1679 - [0:0] :limit-168 - [0:0] :limit-1680 - [0:0] :limit-1681 - [0:0] :limit-1682 - [0:0] -:limit-1683 - [0:0] :limit-1684 - [0:0] :limit-1685 - [0:0] :limit-1686 - [0:0] @@ -36750,7 +60502,6 @@ hash:net family inet :limit-1694 - [0:0] :limit-1695 - [0:0] :limit-1696 - [0:0] -:limit-1697 - [0:0] :limit-1698 - [0:0] :limit-1699 - [0:0] :limit-17 - [0:0] @@ -36758,7 +60509,6 @@ hash:net family inet :limit-1700 - [0:0] :limit-1701 - [0:0] :limit-1702 - [0:0] -:limit-1703 - [0:0] :limit-1704 - [0:0] :limit-1705 - [0:0] :limit-1706 - [0:0] @@ -36784,14 +60534,12 @@ hash:net family inet :limit-1724 - [0:0] :limit-1725 - [0:0] :limit-1726 - [0:0] -:limit-1727 - [0:0] :limit-1728 - [0:0] :limit-1729 - [0:0] :limit-173 - [0:0] :limit-1730 - [0:0] :limit-1731 - [0:0] :limit-1732 - [0:0] -:limit-1733 - [0:0] :limit-1734 - [0:0] :limit-1735 - [0:0] :limit-1736 - [0:0] @@ -36806,14 +60554,12 @@ hash:net family inet :limit-1744 - [0:0] :limit-1745 - [0:0] :limit-1746 - [0:0] -:limit-1747 - [0:0] :limit-1748 - [0:0] :limit-1749 - [0:0] :limit-175 - [0:0] :limit-1750 - [0:0] :limit-1751 - [0:0] :limit-1752 - [0:0] -:limit-1753 - [0:0] :limit-1754 - [0:0] :limit-1755 - [0:0] :limit-1756 - [0:0] @@ -36828,14 +60574,12 @@ hash:net family inet :limit-1764 - [0:0] :limit-1765 - [0:0] :limit-1766 - [0:0] -:limit-1767 - [0:0] :limit-1768 - [0:0] :limit-1769 - [0:0] :limit-177 - [0:0] :limit-1770 - [0:0] :limit-1771 - [0:0] :limit-1772 - [0:0] -:limit-1773 - [0:0] :limit-1774 - [0:0] :limit-1775 - [0:0] :limit-1776 - [0:0] @@ -36850,14 +60594,12 @@ hash:net family inet :limit-1784 - [0:0] :limit-1785 - [0:0] :limit-1786 - [0:0] -:limit-1787 - [0:0] :limit-1788 - [0:0] :limit-1789 - [0:0] :limit-179 - [0:0] :limit-1790 - [0:0] :limit-1791 - [0:0] :limit-1792 - [0:0] -:limit-1793 - [0:0] :limit-1794 - [0:0] :limit-1795 - [0:0] :limit-1796 - [0:0] @@ -36884,14 +60626,12 @@ hash:net family inet :limit-1814 - [0:0] :limit-1815 - [0:0] :limit-1816 - [0:0] -:limit-1817 - [0:0] :limit-1818 - [0:0] :limit-1819 - [0:0] :limit-182 - [0:0] :limit-1820 - [0:0] :limit-1821 - [0:0] :limit-1822 - [0:0] -:limit-1823 - [0:0] :limit-1824 - [0:0] :limit-1825 - [0:0] :limit-1826 - [0:0] @@ -36906,14 +60646,12 @@ hash:net family inet :limit-1834 - [0:0] :limit-1835 - [0:0] :limit-1836 - [0:0] -:limit-1837 - [0:0] :limit-1838 - [0:0] :limit-1839 - [0:0] :limit-184 - [0:0] :limit-1840 - [0:0] :limit-1841 - [0:0] :limit-1842 - [0:0] -:limit-1843 - [0:0] :limit-1844 - [0:0] :limit-1845 - [0:0] :limit-1846 - [0:0] @@ -36928,14 +60666,12 @@ hash:net family inet :limit-1854 - [0:0] :limit-1855 - [0:0] :limit-1856 - [0:0] -:limit-1857 - [0:0] :limit-1858 - [0:0] :limit-1859 - [0:0] :limit-186 - [0:0] :limit-1860 - [0:0] :limit-1861 - [0:0] :limit-1862 - [0:0] -:limit-1863 - [0:0] :limit-1864 - [0:0] :limit-1865 - [0:0] :limit-1866 - [0:0] @@ -36950,14 +60686,12 @@ hash:net family inet :limit-1874 - [0:0] :limit-1875 - [0:0] :limit-1876 - [0:0] -:limit-1877 - [0:0] :limit-1878 - [0:0] :limit-1879 - [0:0] :limit-188 - [0:0] :limit-1880 - [0:0] :limit-1881 - [0:0] :limit-1882 - [0:0] -:limit-1883 - [0:0] :limit-1884 - [0:0] :limit-1885 - [0:0] :limit-1886 - [0:0] @@ -36990,9 +60724,11 @@ hash:net family inet :limit-191 - [0:0] :limit-1910 - [0:0] :limit-1911 - [0:0] +:limit-1912 - [0:0] :limit-1913 - [0:0] :limit-1914 - [0:0] :limit-1915 - [0:0] +:limit-1916 - [0:0] :limit-1917 - [0:0] :limit-1918 - [0:0] :limit-1919 - [0:0] @@ -37005,10 +60741,12 @@ hash:net family inet :limit-1925 - [0:0] :limit-1926 - [0:0] :limit-1927 - [0:0] +:limit-1928 - [0:0] :limit-1929 - [0:0] :limit-193 - [0:0] :limit-1930 - [0:0] :limit-1931 - [0:0] +:limit-1932 - [0:0] :limit-1933 - [0:0] :limit-1934 - [0:0] :limit-1935 - [0:0] @@ -37021,9 +60759,11 @@ hash:net family inet :limit-1941 - [0:0] :limit-1942 - [0:0] :limit-1943 - [0:0] +:limit-1944 - [0:0] :limit-1945 - [0:0] :limit-1946 - [0:0] :limit-1947 - [0:0] +:limit-1948 - [0:0] :limit-1949 - [0:0] :limit-195 - [0:0] :limit-1950 - [0:0] @@ -37037,9 +60777,11 @@ hash:net family inet :limit-1958 - [0:0] :limit-1959 - [0:0] :limit-196 - [0:0] +:limit-1960 - [0:0] :limit-1961 - [0:0] :limit-1962 - [0:0] :limit-1963 - [0:0] +:limit-1964 - [0:0] :limit-1965 - [0:0] :limit-1966 - [0:0] :limit-1967 - [0:0] @@ -37061,9 +60803,11 @@ hash:net family inet :limit-1981 - [0:0] :limit-1982 - [0:0] :limit-1983 - [0:0] +:limit-1984 - [0:0] :limit-1985 - [0:0] :limit-1986 - [0:0] :limit-1987 - [0:0] +:limit-1988 - [0:0] :limit-1989 - [0:0] :limit-199 - [0:0] :limit-1990 - [0:0] @@ -37079,9 +60823,11 @@ hash:net family inet :limit-2 - [0:0] :limit-20 - [0:0] :limit-200 - [0:0] +:limit-2000 - [0:0] :limit-2001 - [0:0] :limit-2002 - [0:0] :limit-2003 - [0:0] +:limit-2004 - [0:0] :limit-2005 - [0:0] :limit-2006 - [0:0] :limit-2007 - [0:0] @@ -37094,10 +60840,12 @@ hash:net family inet :limit-2013 - [0:0] :limit-2014 - [0:0] :limit-2015 - [0:0] +:limit-2016 - [0:0] :limit-2017 - [0:0] :limit-2018 - [0:0] :limit-2019 - [0:0] :limit-202 - [0:0] +:limit-2020 - [0:0] :limit-2021 - [0:0] :limit-2022 - [0:0] :limit-2023 - [0:0] @@ -37110,9 +60858,11 @@ hash:net family inet :limit-203 - [0:0] :limit-2030 - [0:0] :limit-2031 - [0:0] +:limit-2032 - [0:0] :limit-2033 - [0:0] :limit-2034 - [0:0] :limit-2035 - [0:0] +:limit-2036 - [0:0] :limit-2037 - [0:0] :limit-2038 - [0:0] :limit-2039 - [0:0] @@ -37134,10 +60884,12 @@ hash:net family inet :limit-2053 - [0:0] :limit-2054 - [0:0] :limit-2055 - [0:0] +:limit-2056 - [0:0] :limit-2057 - [0:0] :limit-2058 - [0:0] :limit-2059 - [0:0] :limit-206 - [0:0] +:limit-2060 - [0:0] :limit-2061 - [0:0] :limit-2062 - [0:0] :limit-2063 - [0:0] @@ -37150,9 +60902,11 @@ hash:net family inet :limit-207 - [0:0] :limit-2070 - [0:0] :limit-2071 - [0:0] +:limit-2072 - [0:0] :limit-2073 - [0:0] :limit-2074 - [0:0] :limit-2075 - [0:0] +:limit-2076 - [0:0] :limit-2077 - [0:0] :limit-2078 - [0:0] :limit-2079 - [0:0] @@ -37165,10 +60919,12 @@ hash:net family inet :limit-2085 - [0:0] :limit-2086 - [0:0] :limit-2087 - [0:0] +:limit-2088 - [0:0] :limit-2089 - [0:0] :limit-209 - [0:0] :limit-2090 - [0:0] :limit-2091 - [0:0] +:limit-2092 - [0:0] :limit-2093 - [0:0] :limit-2094 - [0:0] :limit-2095 - [0:0] @@ -37182,9 +60938,11 @@ hash:net family inet :limit-2101 - [0:0] :limit-2102 - [0:0] :limit-2103 - [0:0] +:limit-2104 - [0:0] :limit-2105 - [0:0] :limit-2106 - [0:0] :limit-2107 - [0:0] +:limit-2108 - [0:0] :limit-2109 - [0:0] :limit-211 - [0:0] :limit-2110 - [0:0] @@ -37206,10 +60964,12 @@ hash:net family inet :limit-2125 - [0:0] :limit-2126 - [0:0] :limit-2127 - [0:0] +:limit-2128 - [0:0] :limit-2129 - [0:0] :limit-213 - [0:0] :limit-2130 - [0:0] :limit-2131 - [0:0] +:limit-2132 - [0:0] :limit-2133 - [0:0] :limit-2134 - [0:0] :limit-2135 - [0:0] @@ -37222,9 +60982,11 @@ hash:net family inet :limit-2141 - [0:0] :limit-2142 - [0:0] :limit-2143 - [0:0] +:limit-2144 - [0:0] :limit-2145 - [0:0] :limit-2146 - [0:0] :limit-2147 - [0:0] +:limit-2148 - [0:0] :limit-2149 - [0:0] :limit-215 - [0:0] :limit-2150 - [0:0] @@ -37238,9 +61000,11 @@ hash:net family inet :limit-2158 - [0:0] :limit-2159 - [0:0] :limit-216 - [0:0] +:limit-2160 - [0:0] :limit-2161 - [0:0] :limit-2162 - [0:0] :limit-2163 - [0:0] +:limit-2164 - [0:0] :limit-2165 - [0:0] :limit-2166 - [0:0] :limit-2167 - [0:0] @@ -37253,10 +61017,12 @@ hash:net family inet :limit-2173 - [0:0] :limit-2174 - [0:0] :limit-2175 - [0:0] +:limit-2176 - [0:0] :limit-2177 - [0:0] :limit-2178 - [0:0] :limit-2179 - [0:0] :limit-218 - [0:0] +:limit-2180 - [0:0] :limit-2181 - [0:0] :limit-2182 - [0:0] :limit-2183 - [0:0] @@ -37279,9 +61045,11 @@ hash:net family inet :limit-2199 - [0:0] :limit-22 - [0:0] :limit-220 - [0:0] +:limit-2200 - [0:0] :limit-2201 - [0:0] :limit-2202 - [0:0] :limit-2203 - [0:0] +:limit-2204 - [0:0] :limit-2205 - [0:0] :limit-2206 - [0:0] :limit-2207 - [0:0] @@ -37294,10 +61062,12 @@ hash:net family inet :limit-2213 - [0:0] :limit-2214 - [0:0] :limit-2215 - [0:0] +:limit-2216 - [0:0] :limit-2217 - [0:0] :limit-2218 - [0:0] :limit-2219 - [0:0] :limit-222 - [0:0] +:limit-2220 - [0:0] :limit-2221 - [0:0] :limit-2222 - [0:0] :limit-2223 - [0:0] @@ -37310,9 +61080,11 @@ hash:net family inet :limit-223 - [0:0] :limit-2230 - [0:0] :limit-2231 - [0:0] +:limit-2232 - [0:0] :limit-2233 - [0:0] :limit-2234 - [0:0] :limit-2235 - [0:0] +:limit-2236 - [0:0] :limit-2237 - [0:0] :limit-2238 - [0:0] :limit-2239 - [0:0] @@ -37325,10 +61097,12 @@ hash:net family inet :limit-2245 - [0:0] :limit-2246 - [0:0] :limit-2247 - [0:0] +:limit-2248 - [0:0] :limit-2249 - [0:0] :limit-225 - [0:0] :limit-2250 - [0:0] :limit-2251 - [0:0] +:limit-2252 - [0:0] :limit-2253 - [0:0] :limit-2254 - [0:0] :limit-2255 - [0:0] @@ -37350,9 +61124,11 @@ hash:net family inet :limit-227 - [0:0] :limit-2270 - [0:0] :limit-2271 - [0:0] +:limit-2272 - [0:0] :limit-2273 - [0:0] :limit-2274 - [0:0] :limit-2275 - [0:0] +:limit-2276 - [0:0] :limit-2277 - [0:0] :limit-2278 - [0:0] :limit-2279 - [0:0] @@ -37365,10 +61141,12 @@ hash:net family inet :limit-2285 - [0:0] :limit-2286 - [0:0] :limit-2287 - [0:0] +:limit-2288 - [0:0] :limit-2289 - [0:0] :limit-229 - [0:0] :limit-2290 - [0:0] :limit-2291 - [0:0] +:limit-2292 - [0:0] :limit-2293 - [0:0] :limit-2294 - [0:0] :limit-2295 - [0:0] @@ -37382,9 +61160,11 @@ hash:net family inet :limit-2301 - [0:0] :limit-2302 - [0:0] :limit-2303 - [0:0] +:limit-2304 - [0:0] :limit-2305 - [0:0] :limit-2306 - [0:0] :limit-2307 - [0:0] +:limit-2308 - [0:0] :limit-2309 - [0:0] :limit-231 - [0:0] :limit-2310 - [0:0] @@ -37398,9 +61178,11 @@ hash:net family inet :limit-2318 - [0:0] :limit-2319 - [0:0] :limit-232 - [0:0] +:limit-2320 - [0:0] :limit-2321 - [0:0] :limit-2322 - [0:0] :limit-2323 - [0:0] +:limit-2324 - [0:0] :limit-2325 - [0:0] :limit-2326 - [0:0] :limit-2327 - [0:0] @@ -37422,9 +61204,11 @@ hash:net family inet :limit-2341 - [0:0] :limit-2342 - [0:0] :limit-2343 - [0:0] +:limit-2344 - [0:0] :limit-2345 - [0:0] :limit-2346 - [0:0] :limit-2347 - [0:0] +:limit-2348 - [0:0] :limit-2349 - [0:0] :limit-235 - [0:0] :limit-2350 - [0:0] @@ -37438,9 +61222,11 @@ hash:net family inet :limit-2358 - [0:0] :limit-2359 - [0:0] :limit-236 - [0:0] +:limit-2360 - [0:0] :limit-2361 - [0:0] :limit-2362 - [0:0] :limit-2363 - [0:0] +:limit-2364 - [0:0] :limit-2365 - [0:0] :limit-2366 - [0:0] :limit-2367 - [0:0] @@ -37453,10 +61239,12 @@ hash:net family inet :limit-2373 - [0:0] :limit-2374 - [0:0] :limit-2375 - [0:0] +:limit-2376 - [0:0] :limit-2377 - [0:0] :limit-2378 - [0:0] :limit-2379 - [0:0] :limit-238 - [0:0] +:limit-2380 - [0:0] :limit-2381 - [0:0] :limit-2382 - [0:0] :limit-2383 - [0:0] @@ -37469,9 +61257,11 @@ hash:net family inet :limit-239 - [0:0] :limit-2390 - [0:0] :limit-2391 - [0:0] +:limit-2392 - [0:0] :limit-2393 - [0:0] :limit-2394 - [0:0] :limit-2395 - [0:0] +:limit-2396 - [0:0] :limit-2397 - [0:0] :limit-2398 - [0:0] :limit-2399 - [0:0] @@ -37494,10 +61284,12 @@ hash:net family inet :limit-2413 - [0:0] :limit-2414 - [0:0] :limit-2415 - [0:0] +:limit-2416 - [0:0] :limit-2417 - [0:0] :limit-2418 - [0:0] :limit-2419 - [0:0] :limit-242 - [0:0] +:limit-2420 - [0:0] :limit-2421 - [0:0] :limit-2422 - [0:0] :limit-2423 - [0:0] @@ -37510,9 +61302,11 @@ hash:net family inet :limit-243 - [0:0] :limit-2430 - [0:0] :limit-2431 - [0:0] +:limit-2432 - [0:0] :limit-2433 - [0:0] :limit-2434 - [0:0] :limit-2435 - [0:0] +:limit-2436 - [0:0] :limit-2437 - [0:0] :limit-2438 - [0:0] :limit-2439 - [0:0] @@ -37525,10 +61319,12 @@ hash:net family inet :limit-2445 - [0:0] :limit-2446 - [0:0] :limit-2447 - [0:0] +:limit-2448 - [0:0] :limit-2449 - [0:0] :limit-245 - [0:0] :limit-2450 - [0:0] :limit-2451 - [0:0] +:limit-2452 - [0:0] :limit-2453 - [0:0] :limit-2454 - [0:0] :limit-2455 - [0:0] @@ -37541,9 +61337,11 @@ hash:net family inet :limit-2461 - [0:0] :limit-2462 - [0:0] :limit-2463 - [0:0] +:limit-2464 - [0:0] :limit-2465 - [0:0] :limit-2466 - [0:0] :limit-2467 - [0:0] +:limit-2468 - [0:0] :limit-2469 - [0:0] :limit-247 - [0:0] :limit-2470 - [0:0] @@ -37597,160 +61395,1468 @@ hash:net family inet :limit-2513 - [0:0] :limit-2514 - [0:0] :limit-2515 - [0:0] +:limit-2516 - [0:0] +:limit-2517 - [0:0] +:limit-2518 - [0:0] +:limit-2519 - [0:0] :limit-252 - [0:0] +:limit-2520 - [0:0] +:limit-2521 - [0:0] +:limit-2522 - [0:0] +:limit-2523 - [0:0] +:limit-2524 - [0:0] +:limit-2525 - [0:0] +:limit-2526 - [0:0] +:limit-2527 - [0:0] +:limit-2528 - [0:0] +:limit-2529 - [0:0] :limit-253 - [0:0] +:limit-2530 - [0:0] +:limit-2531 - [0:0] +:limit-2532 - [0:0] +:limit-2533 - [0:0] +:limit-2534 - [0:0] +:limit-2535 - [0:0] +:limit-2536 - [0:0] +:limit-2537 - [0:0] +:limit-2538 - [0:0] +:limit-2539 - [0:0] :limit-254 - [0:0] +:limit-2540 - [0:0] +:limit-2541 - [0:0] +:limit-2542 - [0:0] +:limit-2543 - [0:0] +:limit-2544 - [0:0] +:limit-2545 - [0:0] +:limit-2546 - [0:0] +:limit-2547 - [0:0] +:limit-2548 - [0:0] +:limit-2549 - [0:0] :limit-255 - [0:0] +:limit-2550 - [0:0] +:limit-2551 - [0:0] +:limit-2552 - [0:0] +:limit-2553 - [0:0] +:limit-2554 - [0:0] +:limit-2555 - [0:0] +:limit-2556 - [0:0] +:limit-2557 - [0:0] +:limit-2558 - [0:0] +:limit-2559 - [0:0] :limit-256 - [0:0] +:limit-2560 - [0:0] +:limit-2561 - [0:0] +:limit-2562 - [0:0] +:limit-2563 - [0:0] +:limit-2564 - [0:0] +:limit-2565 - [0:0] +:limit-2566 - [0:0] +:limit-2567 - [0:0] +:limit-2568 - [0:0] +:limit-2569 - [0:0] :limit-257 - [0:0] +:limit-2570 - [0:0] +:limit-2571 - [0:0] +:limit-2572 - [0:0] +:limit-2573 - [0:0] +:limit-2574 - [0:0] +:limit-2575 - [0:0] +:limit-2576 - [0:0] +:limit-2577 - [0:0] +:limit-2578 - [0:0] +:limit-2579 - [0:0] :limit-258 - [0:0] +:limit-2580 - [0:0] +:limit-2581 - [0:0] +:limit-2582 - [0:0] +:limit-2583 - [0:0] +:limit-2584 - [0:0] +:limit-2585 - [0:0] +:limit-2586 - [0:0] +:limit-2587 - [0:0] +:limit-2588 - [0:0] +:limit-2589 - [0:0] :limit-259 - [0:0] +:limit-2590 - [0:0] +:limit-2591 - [0:0] +:limit-2592 - [0:0] +:limit-2593 - [0:0] +:limit-2594 - [0:0] +:limit-2595 - [0:0] +:limit-2596 - [0:0] +:limit-2597 - [0:0] +:limit-2598 - [0:0] +:limit-2599 - [0:0] :limit-26 - [0:0] :limit-260 - [0:0] +:limit-2600 - [0:0] +:limit-2601 - [0:0] +:limit-2602 - [0:0] +:limit-2603 - [0:0] +:limit-2604 - [0:0] +:limit-2605 - [0:0] +:limit-2606 - [0:0] +:limit-2607 - [0:0] +:limit-2608 - [0:0] +:limit-2609 - [0:0] :limit-261 - [0:0] +:limit-2610 - [0:0] +:limit-2611 - [0:0] +:limit-2612 - [0:0] +:limit-2613 - [0:0] +:limit-2614 - [0:0] +:limit-2615 - [0:0] +:limit-2616 - [0:0] +:limit-2617 - [0:0] +:limit-2618 - [0:0] +:limit-2619 - [0:0] :limit-262 - [0:0] +:limit-2620 - [0:0] +:limit-2621 - [0:0] +:limit-2622 - [0:0] +:limit-2623 - [0:0] +:limit-2624 - [0:0] +:limit-2625 - [0:0] +:limit-2626 - [0:0] +:limit-2627 - [0:0] +:limit-2628 - [0:0] +:limit-2629 - [0:0] :limit-263 - [0:0] +:limit-2630 - [0:0] +:limit-2631 - [0:0] +:limit-2632 - [0:0] +:limit-2633 - [0:0] +:limit-2634 - [0:0] +:limit-2635 - [0:0] +:limit-2636 - [0:0] +:limit-2637 - [0:0] +:limit-2638 - [0:0] +:limit-2639 - [0:0] :limit-264 - [0:0] +:limit-2640 - [0:0] +:limit-2641 - [0:0] +:limit-2642 - [0:0] +:limit-2643 - [0:0] +:limit-2644 - [0:0] +:limit-2645 - [0:0] +:limit-2646 - [0:0] +:limit-2647 - [0:0] +:limit-2648 - [0:0] +:limit-2649 - [0:0] :limit-265 - [0:0] +:limit-2650 - [0:0] +:limit-2651 - [0:0] +:limit-2652 - [0:0] +:limit-2653 - [0:0] +:limit-2654 - [0:0] +:limit-2655 - [0:0] +:limit-2656 - [0:0] +:limit-2657 - [0:0] +:limit-2658 - [0:0] +:limit-2659 - [0:0] :limit-266 - [0:0] +:limit-2660 - [0:0] +:limit-2661 - [0:0] +:limit-2662 - [0:0] +:limit-2663 - [0:0] +:limit-2664 - [0:0] +:limit-2665 - [0:0] +:limit-2666 - [0:0] +:limit-2667 - [0:0] +:limit-2668 - [0:0] +:limit-2669 - [0:0] :limit-267 - [0:0] +:limit-2670 - [0:0] +:limit-2671 - [0:0] +:limit-2672 - [0:0] +:limit-2673 - [0:0] +:limit-2674 - [0:0] +:limit-2675 - [0:0] +:limit-2676 - [0:0] +:limit-2677 - [0:0] +:limit-2678 - [0:0] +:limit-2679 - [0:0] :limit-268 - [0:0] +:limit-2680 - [0:0] +:limit-2681 - [0:0] +:limit-2682 - [0:0] +:limit-2683 - [0:0] +:limit-2684 - [0:0] +:limit-2685 - [0:0] +:limit-2686 - [0:0] +:limit-2687 - [0:0] +:limit-2688 - [0:0] +:limit-2689 - [0:0] :limit-269 - [0:0] +:limit-2690 - [0:0] +:limit-2691 - [0:0] +:limit-2692 - [0:0] +:limit-2693 - [0:0] +:limit-2694 - [0:0] +:limit-2695 - [0:0] +:limit-2696 - [0:0] +:limit-2697 - [0:0] +:limit-2698 - [0:0] +:limit-2699 - [0:0] :limit-27 - [0:0] :limit-270 - [0:0] +:limit-2700 - [0:0] +:limit-2701 - [0:0] +:limit-2702 - [0:0] +:limit-2703 - [0:0] +:limit-2704 - [0:0] +:limit-2705 - [0:0] +:limit-2706 - [0:0] +:limit-2707 - [0:0] +:limit-2708 - [0:0] +:limit-2709 - [0:0] :limit-271 - [0:0] +:limit-2710 - [0:0] +:limit-2711 - [0:0] +:limit-2712 - [0:0] +:limit-2713 - [0:0] +:limit-2714 - [0:0] +:limit-2715 - [0:0] +:limit-2716 - [0:0] +:limit-2717 - [0:0] +:limit-2718 - [0:0] +:limit-2719 - [0:0] :limit-272 - [0:0] +:limit-2720 - [0:0] +:limit-2721 - [0:0] +:limit-2722 - [0:0] +:limit-2723 - [0:0] +:limit-2724 - [0:0] +:limit-2725 - [0:0] +:limit-2726 - [0:0] +:limit-2727 - [0:0] +:limit-2728 - [0:0] +:limit-2729 - [0:0] :limit-273 - [0:0] +:limit-2730 - [0:0] +:limit-2731 - [0:0] +:limit-2732 - [0:0] +:limit-2733 - [0:0] +:limit-2734 - [0:0] +:limit-2735 - [0:0] +:limit-2736 - [0:0] +:limit-2737 - [0:0] +:limit-2738 - [0:0] +:limit-2739 - [0:0] :limit-274 - [0:0] +:limit-2740 - [0:0] +:limit-2741 - [0:0] +:limit-2742 - [0:0] +:limit-2743 - [0:0] +:limit-2744 - [0:0] +:limit-2745 - [0:0] +:limit-2746 - [0:0] +:limit-2747 - [0:0] +:limit-2748 - [0:0] +:limit-2749 - [0:0] :limit-275 - [0:0] +:limit-2750 - [0:0] +:limit-2751 - [0:0] +:limit-2752 - [0:0] +:limit-2753 - [0:0] +:limit-2754 - [0:0] +:limit-2755 - [0:0] +:limit-2756 - [0:0] +:limit-2757 - [0:0] +:limit-2758 - [0:0] +:limit-2759 - [0:0] :limit-276 - [0:0] +:limit-2760 - [0:0] +:limit-2761 - [0:0] +:limit-2762 - [0:0] +:limit-2763 - [0:0] +:limit-2764 - [0:0] +:limit-2765 - [0:0] +:limit-2766 - [0:0] +:limit-2767 - [0:0] +:limit-2768 - [0:0] +:limit-2769 - [0:0] :limit-277 - [0:0] +:limit-2770 - [0:0] +:limit-2771 - [0:0] +:limit-2772 - [0:0] +:limit-2773 - [0:0] +:limit-2774 - [0:0] +:limit-2775 - [0:0] +:limit-2776 - [0:0] +:limit-2777 - [0:0] +:limit-2778 - [0:0] +:limit-2779 - [0:0] :limit-278 - [0:0] +:limit-2780 - [0:0] +:limit-2781 - [0:0] +:limit-2782 - [0:0] +:limit-2783 - [0:0] +:limit-2784 - [0:0] +:limit-2785 - [0:0] +:limit-2786 - [0:0] +:limit-2787 - [0:0] +:limit-2788 - [0:0] +:limit-2789 - [0:0] :limit-279 - [0:0] +:limit-2790 - [0:0] +:limit-2791 - [0:0] +:limit-2792 - [0:0] +:limit-2793 - [0:0] +:limit-2794 - [0:0] +:limit-2795 - [0:0] +:limit-2796 - [0:0] +:limit-2797 - [0:0] +:limit-2798 - [0:0] +:limit-2799 - [0:0] :limit-28 - [0:0] :limit-280 - [0:0] +:limit-2800 - [0:0] +:limit-2801 - [0:0] +:limit-2802 - [0:0] +:limit-2803 - [0:0] +:limit-2804 - [0:0] +:limit-2805 - [0:0] +:limit-2806 - [0:0] +:limit-2807 - [0:0] +:limit-2808 - [0:0] +:limit-2809 - [0:0] :limit-281 - [0:0] +:limit-2810 - [0:0] +:limit-2811 - [0:0] +:limit-2812 - [0:0] +:limit-2813 - [0:0] +:limit-2814 - [0:0] +:limit-2815 - [0:0] +:limit-2816 - [0:0] +:limit-2817 - [0:0] +:limit-2818 - [0:0] +:limit-2819 - [0:0] :limit-282 - [0:0] +:limit-2820 - [0:0] +:limit-2821 - [0:0] +:limit-2822 - [0:0] +:limit-2823 - [0:0] +:limit-2824 - [0:0] +:limit-2825 - [0:0] +:limit-2826 - [0:0] +:limit-2827 - [0:0] +:limit-2828 - [0:0] +:limit-2829 - [0:0] :limit-283 - [0:0] +:limit-2830 - [0:0] +:limit-2831 - [0:0] +:limit-2832 - [0:0] +:limit-2833 - [0:0] +:limit-2834 - [0:0] +:limit-2835 - [0:0] +:limit-2836 - [0:0] +:limit-2837 - [0:0] +:limit-2838 - [0:0] +:limit-2839 - [0:0] :limit-284 - [0:0] +:limit-2840 - [0:0] +:limit-2841 - [0:0] +:limit-2842 - [0:0] +:limit-2843 - [0:0] +:limit-2844 - [0:0] +:limit-2845 - [0:0] +:limit-2846 - [0:0] +:limit-2847 - [0:0] +:limit-2848 - [0:0] +:limit-2849 - [0:0] :limit-285 - [0:0] +:limit-2850 - [0:0] +:limit-2851 - [0:0] +:limit-2852 - [0:0] +:limit-2853 - [0:0] +:limit-2854 - [0:0] +:limit-2855 - [0:0] +:limit-2856 - [0:0] +:limit-2857 - [0:0] +:limit-2858 - [0:0] +:limit-2859 - [0:0] :limit-286 - [0:0] +:limit-2860 - [0:0] +:limit-2861 - [0:0] +:limit-2862 - [0:0] +:limit-2863 - [0:0] +:limit-2864 - [0:0] +:limit-2865 - [0:0] +:limit-2866 - [0:0] +:limit-2867 - [0:0] +:limit-2868 - [0:0] +:limit-2869 - [0:0] :limit-287 - [0:0] +:limit-2870 - [0:0] +:limit-2871 - [0:0] +:limit-2872 - [0:0] +:limit-2873 - [0:0] +:limit-2874 - [0:0] +:limit-2875 - [0:0] +:limit-2876 - [0:0] +:limit-2877 - [0:0] +:limit-2878 - [0:0] +:limit-2879 - [0:0] :limit-288 - [0:0] +:limit-2880 - [0:0] +:limit-2881 - [0:0] +:limit-2882 - [0:0] +:limit-2883 - [0:0] +:limit-2884 - [0:0] +:limit-2885 - [0:0] +:limit-2886 - [0:0] +:limit-2887 - [0:0] +:limit-2888 - [0:0] +:limit-2889 - [0:0] :limit-289 - [0:0] +:limit-2890 - [0:0] +:limit-2891 - [0:0] +:limit-2892 - [0:0] +:limit-2893 - [0:0] +:limit-2894 - [0:0] +:limit-2895 - [0:0] +:limit-2896 - [0:0] +:limit-2897 - [0:0] +:limit-2898 - [0:0] +:limit-2899 - [0:0] :limit-29 - [0:0] :limit-290 - [0:0] +:limit-2900 - [0:0] +:limit-2901 - [0:0] +:limit-2902 - [0:0] +:limit-2903 - [0:0] +:limit-2904 - [0:0] +:limit-2905 - [0:0] +:limit-2906 - [0:0] +:limit-2907 - [0:0] +:limit-2908 - [0:0] +:limit-2909 - [0:0] :limit-291 - [0:0] +:limit-2910 - [0:0] +:limit-2911 - [0:0] +:limit-2912 - [0:0] +:limit-2913 - [0:0] +:limit-2914 - [0:0] +:limit-2915 - [0:0] +:limit-2916 - [0:0] +:limit-2917 - [0:0] +:limit-2918 - [0:0] +:limit-2919 - [0:0] :limit-292 - [0:0] +:limit-2920 - [0:0] +:limit-2921 - [0:0] +:limit-2922 - [0:0] +:limit-2923 - [0:0] +:limit-2924 - [0:0] +:limit-2925 - [0:0] +:limit-2926 - [0:0] +:limit-2927 - [0:0] +:limit-2928 - [0:0] +:limit-2929 - [0:0] :limit-293 - [0:0] +:limit-2930 - [0:0] +:limit-2931 - [0:0] +:limit-2932 - [0:0] +:limit-2933 - [0:0] +:limit-2934 - [0:0] +:limit-2935 - [0:0] +:limit-2936 - [0:0] +:limit-2937 - [0:0] +:limit-2938 - [0:0] +:limit-2939 - [0:0] :limit-294 - [0:0] +:limit-2940 - [0:0] +:limit-2941 - [0:0] +:limit-2942 - [0:0] +:limit-2943 - [0:0] +:limit-2944 - [0:0] +:limit-2945 - [0:0] +:limit-2946 - [0:0] +:limit-2947 - [0:0] +:limit-2948 - [0:0] +:limit-2949 - [0:0] :limit-295 - [0:0] +:limit-2950 - [0:0] +:limit-2951 - [0:0] +:limit-2952 - [0:0] +:limit-2953 - [0:0] +:limit-2954 - [0:0] +:limit-2955 - [0:0] +:limit-2956 - [0:0] +:limit-2957 - [0:0] +:limit-2958 - [0:0] :limit-296 - [0:0] +:limit-2960 - [0:0] +:limit-2961 - [0:0] +:limit-2962 - [0:0] +:limit-2963 - [0:0] +:limit-2964 - [0:0] +:limit-2966 - [0:0] +:limit-2967 - [0:0] +:limit-2968 - [0:0] +:limit-2969 - [0:0] :limit-297 - [0:0] +:limit-2970 - [0:0] +:limit-2971 - [0:0] +:limit-2972 - [0:0] +:limit-2973 - [0:0] +:limit-2974 - [0:0] +:limit-2975 - [0:0] +:limit-2976 - [0:0] +:limit-2977 - [0:0] +:limit-2978 - [0:0] :limit-298 - [0:0] +:limit-2980 - [0:0] +:limit-2981 - [0:0] +:limit-2982 - [0:0] +:limit-2983 - [0:0] +:limit-2984 - [0:0] +:limit-2986 - [0:0] +:limit-2987 - [0:0] +:limit-2988 - [0:0] +:limit-2989 - [0:0] :limit-299 - [0:0] +:limit-2990 - [0:0] +:limit-2991 - [0:0] +:limit-2992 - [0:0] +:limit-2993 - [0:0] +:limit-2994 - [0:0] +:limit-2995 - [0:0] +:limit-2996 - [0:0] +:limit-2997 - [0:0] +:limit-2998 - [0:0] :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] +:limit-3000 - [0:0] +:limit-3001 - [0:0] +:limit-3002 - [0:0] +:limit-3003 - [0:0] +:limit-3004 - [0:0] +:limit-3006 - [0:0] +:limit-3007 - [0:0] +:limit-3008 - [0:0] +:limit-3009 - [0:0] :limit-301 - [0:0] +:limit-3010 - [0:0] +:limit-3011 - [0:0] +:limit-3012 - [0:0] +:limit-3013 - [0:0] +:limit-3014 - [0:0] +:limit-3015 - [0:0] +:limit-3016 - [0:0] +:limit-3017 - [0:0] +:limit-3018 - [0:0] :limit-302 - [0:0] +:limit-3020 - [0:0] +:limit-3021 - [0:0] +:limit-3022 - [0:0] +:limit-3023 - [0:0] +:limit-3024 - [0:0] +:limit-3026 - [0:0] +:limit-3027 - [0:0] +:limit-3028 - [0:0] +:limit-3029 - [0:0] :limit-303 - [0:0] +:limit-3030 - [0:0] +:limit-3031 - [0:0] +:limit-3032 - [0:0] +:limit-3033 - [0:0] +:limit-3034 - [0:0] +:limit-3035 - [0:0] +:limit-3036 - [0:0] +:limit-3037 - [0:0] +:limit-3038 - [0:0] +:limit-3039 - [0:0] :limit-304 - [0:0] +:limit-3040 - [0:0] +:limit-3041 - [0:0] +:limit-3042 - [0:0] +:limit-3043 - [0:0] +:limit-3044 - [0:0] +:limit-3045 - [0:0] +:limit-3046 - [0:0] +:limit-3047 - [0:0] +:limit-3048 - [0:0] :limit-305 - [0:0] +:limit-3050 - [0:0] +:limit-3051 - [0:0] +:limit-3052 - [0:0] +:limit-3053 - [0:0] +:limit-3054 - [0:0] +:limit-3056 - [0:0] +:limit-3057 - [0:0] +:limit-3058 - [0:0] +:limit-3059 - [0:0] :limit-306 - [0:0] +:limit-3060 - [0:0] +:limit-3061 - [0:0] +:limit-3062 - [0:0] +:limit-3063 - [0:0] +:limit-3064 - [0:0] +:limit-3065 - [0:0] +:limit-3066 - [0:0] +:limit-3067 - [0:0] +:limit-3068 - [0:0] :limit-307 - [0:0] +:limit-3070 - [0:0] +:limit-3071 - [0:0] +:limit-3072 - [0:0] +:limit-3073 - [0:0] +:limit-3074 - [0:0] +:limit-3076 - [0:0] +:limit-3077 - [0:0] +:limit-3078 - [0:0] +:limit-3079 - [0:0] :limit-308 - [0:0] +:limit-3080 - [0:0] +:limit-3081 - [0:0] +:limit-3082 - [0:0] +:limit-3083 - [0:0] +:limit-3084 - [0:0] +:limit-3085 - [0:0] +:limit-3086 - [0:0] +:limit-3087 - [0:0] +:limit-3088 - [0:0] :limit-309 - [0:0] +:limit-3090 - [0:0] +:limit-3091 - [0:0] +:limit-3092 - [0:0] +:limit-3093 - [0:0] +:limit-3094 - [0:0] +:limit-3096 - [0:0] +:limit-3097 - [0:0] +:limit-3098 - [0:0] +:limit-3099 - [0:0] :limit-31 - [0:0] :limit-310 - [0:0] +:limit-3100 - [0:0] +:limit-3101 - [0:0] +:limit-3102 - [0:0] +:limit-3103 - [0:0] +:limit-3104 - [0:0] +:limit-3105 - [0:0] +:limit-3106 - [0:0] +:limit-3107 - [0:0] +:limit-3108 - [0:0] :limit-311 - [0:0] +:limit-3110 - [0:0] +:limit-3111 - [0:0] +:limit-3112 - [0:0] +:limit-3113 - [0:0] +:limit-3114 - [0:0] +:limit-3116 - [0:0] +:limit-3117 - [0:0] +:limit-3118 - [0:0] +:limit-3119 - [0:0] :limit-312 - [0:0] +:limit-3120 - [0:0] +:limit-3121 - [0:0] +:limit-3122 - [0:0] +:limit-3123 - [0:0] +:limit-3124 - [0:0] +:limit-3125 - [0:0] +:limit-3126 - [0:0] +:limit-3127 - [0:0] +:limit-3128 - [0:0] +:limit-3129 - [0:0] :limit-313 - [0:0] +:limit-3130 - [0:0] +:limit-3131 - [0:0] +:limit-3132 - [0:0] +:limit-3133 - [0:0] +:limit-3134 - [0:0] +:limit-3135 - [0:0] +:limit-3136 - [0:0] +:limit-3137 - [0:0] +:limit-3138 - [0:0] :limit-314 - [0:0] +:limit-3140 - [0:0] +:limit-3141 - [0:0] +:limit-3142 - [0:0] +:limit-3143 - [0:0] +:limit-3144 - [0:0] +:limit-3146 - [0:0] +:limit-3147 - [0:0] +:limit-3148 - [0:0] +:limit-3149 - [0:0] :limit-315 - [0:0] +:limit-3150 - [0:0] +:limit-3151 - [0:0] +:limit-3152 - [0:0] +:limit-3153 - [0:0] +:limit-3154 - [0:0] +:limit-3155 - [0:0] +:limit-3156 - [0:0] +:limit-3157 - [0:0] +:limit-3158 - [0:0] :limit-316 - [0:0] +:limit-3160 - [0:0] +:limit-3161 - [0:0] +:limit-3162 - [0:0] +:limit-3163 - [0:0] +:limit-3164 - [0:0] +:limit-3166 - [0:0] +:limit-3167 - [0:0] +:limit-3168 - [0:0] +:limit-3169 - [0:0] :limit-317 - [0:0] +:limit-3170 - [0:0] +:limit-3171 - [0:0] +:limit-3172 - [0:0] +:limit-3173 - [0:0] +:limit-3174 - [0:0] +:limit-3175 - [0:0] +:limit-3176 - [0:0] +:limit-3177 - [0:0] +:limit-3178 - [0:0] :limit-318 - [0:0] +:limit-3180 - [0:0] +:limit-3181 - [0:0] +:limit-3182 - [0:0] +:limit-3183 - [0:0] +:limit-3184 - [0:0] +:limit-3186 - [0:0] +:limit-3187 - [0:0] +:limit-3188 - [0:0] +:limit-3189 - [0:0] :limit-319 - [0:0] +:limit-3190 - [0:0] +:limit-3191 - [0:0] +:limit-3192 - [0:0] +:limit-3193 - [0:0] +:limit-3194 - [0:0] +:limit-3195 - [0:0] +:limit-3196 - [0:0] +:limit-3197 - [0:0] +:limit-3198 - [0:0] :limit-32 - [0:0] :limit-320 - [0:0] +:limit-3200 - [0:0] +:limit-3201 - [0:0] +:limit-3202 - [0:0] +:limit-3203 - [0:0] +:limit-3204 - [0:0] +:limit-3206 - [0:0] +:limit-3207 - [0:0] +:limit-3208 - [0:0] +:limit-3209 - [0:0] :limit-321 - [0:0] +:limit-3210 - [0:0] +:limit-3211 - [0:0] +:limit-3212 - [0:0] +:limit-3213 - [0:0] +:limit-3214 - [0:0] +:limit-3215 - [0:0] +:limit-3216 - [0:0] +:limit-3217 - [0:0] +:limit-3218 - [0:0] +:limit-3219 - [0:0] :limit-322 - [0:0] +:limit-3220 - [0:0] +:limit-3221 - [0:0] +:limit-3222 - [0:0] +:limit-3223 - [0:0] +:limit-3224 - [0:0] +:limit-3225 - [0:0] +:limit-3226 - [0:0] +:limit-3227 - [0:0] +:limit-3228 - [0:0] :limit-323 - [0:0] +:limit-3230 - [0:0] +:limit-3231 - [0:0] +:limit-3232 - [0:0] +:limit-3233 - [0:0] +:limit-3234 - [0:0] +:limit-3236 - [0:0] +:limit-3237 - [0:0] +:limit-3238 - [0:0] +:limit-3239 - [0:0] :limit-324 - [0:0] +:limit-3240 - [0:0] +:limit-3241 - [0:0] +:limit-3242 - [0:0] +:limit-3243 - [0:0] +:limit-3244 - [0:0] +:limit-3245 - [0:0] +:limit-3246 - [0:0] +:limit-3247 - [0:0] +:limit-3248 - [0:0] :limit-325 - [0:0] +:limit-3250 - [0:0] +:limit-3251 - [0:0] +:limit-3252 - [0:0] +:limit-3253 - [0:0] +:limit-3254 - [0:0] +:limit-3256 - [0:0] +:limit-3257 - [0:0] +:limit-3258 - [0:0] +:limit-3259 - [0:0] :limit-326 - [0:0] +:limit-3260 - [0:0] +:limit-3261 - [0:0] +:limit-3262 - [0:0] +:limit-3263 - [0:0] +:limit-3264 - [0:0] +:limit-3265 - [0:0] +:limit-3266 - [0:0] +:limit-3267 - [0:0] +:limit-3268 - [0:0] :limit-327 - [0:0] +:limit-3270 - [0:0] +:limit-3271 - [0:0] +:limit-3272 - [0:0] +:limit-3273 - [0:0] +:limit-3274 - [0:0] +:limit-3276 - [0:0] +:limit-3277 - [0:0] +:limit-3278 - [0:0] +:limit-3279 - [0:0] :limit-328 - [0:0] +:limit-3280 - [0:0] +:limit-3281 - [0:0] +:limit-3282 - [0:0] +:limit-3283 - [0:0] +:limit-3284 - [0:0] +:limit-3285 - [0:0] +:limit-3286 - [0:0] +:limit-3287 - [0:0] +:limit-3288 - [0:0] :limit-329 - [0:0] +:limit-3290 - [0:0] +:limit-3291 - [0:0] +:limit-3292 - [0:0] +:limit-3293 - [0:0] +:limit-3294 - [0:0] +:limit-3296 - [0:0] +:limit-3297 - [0:0] +:limit-3298 - [0:0] +:limit-3299 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] +:limit-3300 - [0:0] +:limit-3301 - [0:0] +:limit-3302 - [0:0] +:limit-3303 - [0:0] +:limit-3304 - [0:0] +:limit-3305 - [0:0] +:limit-3306 - [0:0] +:limit-3307 - [0:0] +:limit-3308 - [0:0] +:limit-3309 - [0:0] :limit-331 - [0:0] +:limit-3310 - [0:0] +:limit-3311 - [0:0] +:limit-3312 - [0:0] +:limit-3313 - [0:0] +:limit-3314 - [0:0] +:limit-3315 - [0:0] +:limit-3316 - [0:0] +:limit-3317 - [0:0] +:limit-3318 - [0:0] :limit-332 - [0:0] +:limit-3320 - [0:0] +:limit-3321 - [0:0] +:limit-3322 - [0:0] +:limit-3323 - [0:0] +:limit-3324 - [0:0] +:limit-3326 - [0:0] +:limit-3327 - [0:0] +:limit-3328 - [0:0] +:limit-3329 - [0:0] :limit-333 - [0:0] +:limit-3330 - [0:0] +:limit-3331 - [0:0] +:limit-3332 - [0:0] +:limit-3333 - [0:0] +:limit-3334 - [0:0] +:limit-3335 - [0:0] +:limit-3336 - [0:0] +:limit-3337 - [0:0] +:limit-3338 - [0:0] :limit-334 - [0:0] +:limit-3340 - [0:0] +:limit-3341 - [0:0] +:limit-3342 - [0:0] +:limit-3343 - [0:0] +:limit-3344 - [0:0] +:limit-3346 - [0:0] +:limit-3347 - [0:0] +:limit-3348 - [0:0] +:limit-3349 - [0:0] :limit-335 - [0:0] +:limit-3350 - [0:0] +:limit-3351 - [0:0] +:limit-3352 - [0:0] +:limit-3353 - [0:0] +:limit-3354 - [0:0] +:limit-3355 - [0:0] +:limit-3356 - [0:0] +:limit-3357 - [0:0] +:limit-3358 - [0:0] :limit-336 - [0:0] +:limit-3360 - [0:0] +:limit-3361 - [0:0] +:limit-3362 - [0:0] +:limit-3363 - [0:0] +:limit-3364 - [0:0] +:limit-3366 - [0:0] +:limit-3367 - [0:0] +:limit-3368 - [0:0] +:limit-3369 - [0:0] :limit-337 - [0:0] +:limit-3370 - [0:0] +:limit-3371 - [0:0] +:limit-3372 - [0:0] +:limit-3373 - [0:0] +:limit-3374 - [0:0] +:limit-3375 - [0:0] +:limit-3376 - [0:0] +:limit-3377 - [0:0] +:limit-3378 - [0:0] :limit-338 - [0:0] +:limit-3380 - [0:0] +:limit-3381 - [0:0] +:limit-3382 - [0:0] +:limit-3383 - [0:0] +:limit-3384 - [0:0] +:limit-3386 - [0:0] +:limit-3387 - [0:0] +:limit-3388 - [0:0] +:limit-3389 - [0:0] :limit-339 - [0:0] +:limit-3390 - [0:0] +:limit-3391 - [0:0] +:limit-3392 - [0:0] +:limit-3393 - [0:0] +:limit-3394 - [0:0] +:limit-3395 - [0:0] +:limit-3396 - [0:0] +:limit-3397 - [0:0] +:limit-3398 - [0:0] +:limit-3399 - [0:0] :limit-34 - [0:0] :limit-340 - [0:0] +:limit-3400 - [0:0] +:limit-3401 - [0:0] +:limit-3402 - [0:0] +:limit-3403 - [0:0] +:limit-3404 - [0:0] +:limit-3405 - [0:0] +:limit-3406 - [0:0] +:limit-3407 - [0:0] +:limit-3408 - [0:0] :limit-341 - [0:0] +:limit-3410 - [0:0] +:limit-3411 - [0:0] +:limit-3412 - [0:0] +:limit-3413 - [0:0] +:limit-3414 - [0:0] +:limit-3416 - [0:0] +:limit-3417 - [0:0] +:limit-3418 - [0:0] +:limit-3419 - [0:0] :limit-342 - [0:0] +:limit-3420 - [0:0] +:limit-3421 - [0:0] +:limit-3422 - [0:0] +:limit-3423 - [0:0] +:limit-3424 - [0:0] +:limit-3425 - [0:0] +:limit-3426 - [0:0] +:limit-3427 - [0:0] +:limit-3428 - [0:0] :limit-343 - [0:0] +:limit-3430 - [0:0] +:limit-3431 - [0:0] +:limit-3432 - [0:0] +:limit-3433 - [0:0] +:limit-3434 - [0:0] +:limit-3436 - [0:0] +:limit-3437 - [0:0] +:limit-3438 - [0:0] +:limit-3439 - [0:0] :limit-344 - [0:0] +:limit-3440 - [0:0] +:limit-3441 - [0:0] +:limit-3442 - [0:0] +:limit-3443 - [0:0] +:limit-3444 - [0:0] +:limit-3445 - [0:0] +:limit-3446 - [0:0] +:limit-3447 - [0:0] +:limit-3448 - [0:0] :limit-345 - [0:0] +:limit-3450 - [0:0] +:limit-3451 - [0:0] +:limit-3452 - [0:0] +:limit-3453 - [0:0] +:limit-3454 - [0:0] +:limit-3456 - [0:0] +:limit-3457 - [0:0] +:limit-3458 - [0:0] +:limit-3459 - [0:0] :limit-346 - [0:0] +:limit-3460 - [0:0] +:limit-3461 - [0:0] +:limit-3462 - [0:0] +:limit-3463 - [0:0] +:limit-3464 - [0:0] +:limit-3465 - [0:0] +:limit-3466 - [0:0] +:limit-3467 - [0:0] +:limit-3468 - [0:0] :limit-347 - [0:0] +:limit-3470 - [0:0] +:limit-3471 - [0:0] +:limit-3472 - [0:0] +:limit-3473 - [0:0] +:limit-3474 - [0:0] +:limit-3476 - [0:0] +:limit-3477 - [0:0] +:limit-3478 - [0:0] +:limit-3479 - [0:0] :limit-348 - [0:0] +:limit-3480 - [0:0] +:limit-3481 - [0:0] +:limit-3482 - [0:0] +:limit-3483 - [0:0] +:limit-3484 - [0:0] +:limit-3485 - [0:0] +:limit-3486 - [0:0] +:limit-3487 - [0:0] +:limit-3488 - [0:0] +:limit-3489 - [0:0] :limit-349 - [0:0] +:limit-3490 - [0:0] +:limit-3491 - [0:0] +:limit-3492 - [0:0] +:limit-3493 - [0:0] +:limit-3494 - [0:0] +:limit-3495 - [0:0] +:limit-3496 - [0:0] +:limit-3497 - [0:0] +:limit-3498 - [0:0] :limit-35 - [0:0] :limit-350 - [0:0] +:limit-3500 - [0:0] +:limit-3501 - [0:0] +:limit-3502 - [0:0] +:limit-3503 - [0:0] +:limit-3504 - [0:0] +:limit-3506 - [0:0] +:limit-3507 - [0:0] +:limit-3508 - [0:0] +:limit-3509 - [0:0] :limit-351 - [0:0] +:limit-3510 - [0:0] +:limit-3511 - [0:0] +:limit-3512 - [0:0] +:limit-3513 - [0:0] +:limit-3514 - [0:0] +:limit-3515 - [0:0] +:limit-3516 - [0:0] +:limit-3517 - [0:0] +:limit-3518 - [0:0] :limit-352 - [0:0] +:limit-3520 - [0:0] +:limit-3521 - [0:0] +:limit-3522 - [0:0] +:limit-3523 - [0:0] +:limit-3524 - [0:0] +:limit-3526 - [0:0] +:limit-3527 - [0:0] +:limit-3528 - [0:0] +:limit-3529 - [0:0] :limit-353 - [0:0] +:limit-3530 - [0:0] +:limit-3531 - [0:0] +:limit-3532 - [0:0] +:limit-3533 - [0:0] +:limit-3534 - [0:0] +:limit-3535 - [0:0] +:limit-3536 - [0:0] +:limit-3537 - [0:0] +:limit-3538 - [0:0] :limit-354 - [0:0] +:limit-3540 - [0:0] +:limit-3541 - [0:0] +:limit-3542 - [0:0] +:limit-3543 - [0:0] +:limit-3544 - [0:0] +:limit-3546 - [0:0] +:limit-3547 - [0:0] +:limit-3548 - [0:0] +:limit-3549 - [0:0] :limit-355 - [0:0] +:limit-3550 - [0:0] +:limit-3551 - [0:0] +:limit-3552 - [0:0] +:limit-3553 - [0:0] +:limit-3554 - [0:0] +:limit-3555 - [0:0] +:limit-3556 - [0:0] +:limit-3557 - [0:0] +:limit-3558 - [0:0] :limit-356 - [0:0] +:limit-3560 - [0:0] +:limit-3561 - [0:0] +:limit-3562 - [0:0] +:limit-3563 - [0:0] +:limit-3564 - [0:0] +:limit-3566 - [0:0] +:limit-3567 - [0:0] +:limit-3568 - [0:0] +:limit-3569 - [0:0] :limit-357 - [0:0] +:limit-3570 - [0:0] +:limit-3571 - [0:0] +:limit-3572 - [0:0] +:limit-3573 - [0:0] +:limit-3574 - [0:0] +:limit-3575 - [0:0] +:limit-3576 - [0:0] +:limit-3577 - [0:0] +:limit-3578 - [0:0] +:limit-3579 - [0:0] :limit-358 - [0:0] +:limit-3580 - [0:0] +:limit-3581 - [0:0] +:limit-3582 - [0:0] +:limit-3583 - [0:0] +:limit-3584 - [0:0] +:limit-3585 - [0:0] +:limit-3586 - [0:0] +:limit-3587 - [0:0] +:limit-3588 - [0:0] :limit-359 - [0:0] +:limit-3590 - [0:0] +:limit-3591 - [0:0] +:limit-3592 - [0:0] +:limit-3593 - [0:0] +:limit-3594 - [0:0] +:limit-3596 - [0:0] +:limit-3597 - [0:0] +:limit-3598 - [0:0] +:limit-3599 - [0:0] :limit-36 - [0:0] :limit-360 - [0:0] +:limit-3600 - [0:0] +:limit-3601 - [0:0] +:limit-3602 - [0:0] +:limit-3603 - [0:0] +:limit-3604 - [0:0] +:limit-3605 - [0:0] +:limit-3606 - [0:0] +:limit-3607 - [0:0] +:limit-3608 - [0:0] :limit-361 - [0:0] +:limit-3610 - [0:0] +:limit-3611 - [0:0] +:limit-3612 - [0:0] +:limit-3613 - [0:0] +:limit-3614 - [0:0] +:limit-3616 - [0:0] +:limit-3617 - [0:0] +:limit-3618 - [0:0] +:limit-3619 - [0:0] :limit-362 - [0:0] +:limit-3620 - [0:0] +:limit-3621 - [0:0] +:limit-3622 - [0:0] +:limit-3623 - [0:0] +:limit-3624 - [0:0] +:limit-3625 - [0:0] +:limit-3626 - [0:0] +:limit-3627 - [0:0] +:limit-3628 - [0:0] :limit-363 - [0:0] +:limit-3630 - [0:0] +:limit-3631 - [0:0] +:limit-3632 - [0:0] +:limit-3633 - [0:0] +:limit-3634 - [0:0] +:limit-3636 - [0:0] +:limit-3637 - [0:0] +:limit-3638 - [0:0] +:limit-3639 - [0:0] :limit-364 - [0:0] +:limit-3640 - [0:0] +:limit-3641 - [0:0] +:limit-3642 - [0:0] +:limit-3643 - [0:0] +:limit-3644 - [0:0] +:limit-3645 - [0:0] +:limit-3646 - [0:0] +:limit-3647 - [0:0] +:limit-3648 - [0:0] :limit-365 - [0:0] +:limit-3650 - [0:0] +:limit-3651 - [0:0] +:limit-3652 - [0:0] +:limit-3653 - [0:0] +:limit-3654 - [0:0] +:limit-3656 - [0:0] +:limit-3657 - [0:0] +:limit-3658 - [0:0] +:limit-3659 - [0:0] :limit-366 - [0:0] +:limit-3660 - [0:0] +:limit-3661 - [0:0] +:limit-3662 - [0:0] +:limit-3663 - [0:0] +:limit-3664 - [0:0] +:limit-3665 - [0:0] +:limit-3666 - [0:0] +:limit-3667 - [0:0] +:limit-3668 - [0:0] +:limit-3669 - [0:0] :limit-367 - [0:0] +:limit-3670 - [0:0] +:limit-3671 - [0:0] +:limit-3672 - [0:0] +:limit-3673 - [0:0] +:limit-3674 - [0:0] +:limit-3675 - [0:0] +:limit-3676 - [0:0] +:limit-3677 - [0:0] +:limit-3678 - [0:0] :limit-368 - [0:0] +:limit-3680 - [0:0] +:limit-3681 - [0:0] +:limit-3682 - [0:0] +:limit-3683 - [0:0] +:limit-3684 - [0:0] +:limit-3686 - [0:0] +:limit-3687 - [0:0] +:limit-3688 - [0:0] +:limit-3689 - [0:0] :limit-369 - [0:0] +:limit-3690 - [0:0] +:limit-3691 - [0:0] +:limit-3692 - [0:0] +:limit-3693 - [0:0] +:limit-3694 - [0:0] +:limit-3695 - [0:0] +:limit-3696 - [0:0] +:limit-3697 - [0:0] +:limit-3698 - [0:0] :limit-37 - [0:0] :limit-370 - [0:0] +:limit-3700 - [0:0] +:limit-3701 - [0:0] +:limit-3702 - [0:0] +:limit-3703 - [0:0] +:limit-3704 - [0:0] +:limit-3706 - [0:0] +:limit-3707 - [0:0] +:limit-3708 - [0:0] +:limit-3709 - [0:0] :limit-371 - [0:0] +:limit-3710 - [0:0] +:limit-3711 - [0:0] +:limit-3712 - [0:0] +:limit-3713 - [0:0] +:limit-3714 - [0:0] +:limit-3715 - [0:0] +:limit-3716 - [0:0] +:limit-3717 - [0:0] +:limit-3718 - [0:0] :limit-372 - [0:0] +:limit-3720 - [0:0] +:limit-3721 - [0:0] +:limit-3722 - [0:0] +:limit-3723 - [0:0] +:limit-3724 - [0:0] +:limit-3726 - [0:0] +:limit-3727 - [0:0] +:limit-3728 - [0:0] +:limit-3729 - [0:0] :limit-373 - [0:0] +:limit-3730 - [0:0] +:limit-3731 - [0:0] +:limit-3732 - [0:0] +:limit-3733 - [0:0] +:limit-3734 - [0:0] +:limit-3735 - [0:0] +:limit-3736 - [0:0] +:limit-3737 - [0:0] +:limit-3738 - [0:0] :limit-374 - [0:0] +:limit-3740 - [0:0] +:limit-3741 - [0:0] +:limit-3742 - [0:0] +:limit-3743 - [0:0] +:limit-3744 - [0:0] +:limit-3746 - [0:0] +:limit-3747 - [0:0] +:limit-3748 - [0:0] +:limit-3749 - [0:0] :limit-375 - [0:0] +:limit-3750 - [0:0] +:limit-3751 - [0:0] +:limit-3752 - [0:0] +:limit-3753 - [0:0] +:limit-3754 - [0:0] +:limit-3755 - [0:0] +:limit-3756 - [0:0] +:limit-3757 - [0:0] +:limit-3758 - [0:0] +:limit-3759 - [0:0] :limit-376 - [0:0] +:limit-3760 - [0:0] +:limit-3761 - [0:0] +:limit-3762 - [0:0] +:limit-3763 - [0:0] +:limit-3764 - [0:0] +:limit-3765 - [0:0] +:limit-3766 - [0:0] +:limit-3767 - [0:0] +:limit-3768 - [0:0] :limit-377 - [0:0] +:limit-3770 - [0:0] +:limit-3771 - [0:0] +:limit-3772 - [0:0] +:limit-3773 - [0:0] +:limit-3774 - [0:0] +:limit-3776 - [0:0] +:limit-3777 - [0:0] +:limit-3778 - [0:0] +:limit-3779 - [0:0] :limit-378 - [0:0] +:limit-3780 - [0:0] +:limit-3781 - [0:0] +:limit-3782 - [0:0] +:limit-3783 - [0:0] +:limit-3784 - [0:0] +:limit-3785 - [0:0] +:limit-3786 - [0:0] +:limit-3787 - [0:0] +:limit-3788 - [0:0] :limit-379 - [0:0] +:limit-3790 - [0:0] +:limit-3791 - [0:0] +:limit-3792 - [0:0] +:limit-3793 - [0:0] +:limit-3794 - [0:0] +:limit-3796 - [0:0] +:limit-3797 - [0:0] +:limit-3798 - [0:0] +:limit-3799 - [0:0] :limit-38 - [0:0] :limit-380 - [0:0] +:limit-3800 - [0:0] +:limit-3801 - [0:0] +:limit-3802 - [0:0] +:limit-3803 - [0:0] +:limit-3804 - [0:0] +:limit-3805 - [0:0] +:limit-3806 - [0:0] +:limit-3807 - [0:0] +:limit-3808 - [0:0] :limit-381 - [0:0] +:limit-3810 - [0:0] +:limit-3811 - [0:0] +:limit-3812 - [0:0] +:limit-3813 - [0:0] +:limit-3814 - [0:0] +:limit-3816 - [0:0] +:limit-3817 - [0:0] +:limit-3818 - [0:0] +:limit-3819 - [0:0] :limit-382 - [0:0] +:limit-3820 - [0:0] +:limit-3821 - [0:0] +:limit-3822 - [0:0] +:limit-3823 - [0:0] +:limit-3824 - [0:0] +:limit-3825 - [0:0] +:limit-3826 - [0:0] +:limit-3827 - [0:0] +:limit-3828 - [0:0] :limit-383 - [0:0] +:limit-3830 - [0:0] +:limit-3831 - [0:0] +:limit-3832 - [0:0] +:limit-3833 - [0:0] +:limit-3834 - [0:0] +:limit-3836 - [0:0] +:limit-3837 - [0:0] +:limit-3838 - [0:0] +:limit-3839 - [0:0] :limit-384 - [0:0] +:limit-3840 - [0:0] +:limit-3841 - [0:0] +:limit-3842 - [0:0] +:limit-3843 - [0:0] +:limit-3844 - [0:0] +:limit-3845 - [0:0] +:limit-3846 - [0:0] +:limit-3847 - [0:0] +:limit-3848 - [0:0] +:limit-3849 - [0:0] :limit-385 - [0:0] +:limit-3850 - [0:0] +:limit-3851 - [0:0] +:limit-3852 - [0:0] +:limit-3853 - [0:0] +:limit-3854 - [0:0] +:limit-3855 - [0:0] +:limit-3856 - [0:0] +:limit-3857 - [0:0] +:limit-3858 - [0:0] +:limit-3859 - [0:0] :limit-386 - [0:0] +:limit-3860 - [0:0] +:limit-3861 - [0:0] +:limit-3862 - [0:0] +:limit-3863 - [0:0] +:limit-3864 - [0:0] +:limit-3865 - [0:0] +:limit-3866 - [0:0] +:limit-3867 - [0:0] +:limit-3868 - [0:0] +:limit-3869 - [0:0] :limit-387 - [0:0] +:limit-3870 - [0:0] +:limit-3871 - [0:0] +:limit-3872 - [0:0] +:limit-3873 - [0:0] +:limit-3874 - [0:0] +:limit-3875 - [0:0] +:limit-3876 - [0:0] +:limit-3877 - [0:0] +:limit-3878 - [0:0] +:limit-3879 - [0:0] :limit-388 - [0:0] +:limit-3880 - [0:0] +:limit-3881 - [0:0] +:limit-3882 - [0:0] +:limit-3883 - [0:0] +:limit-3884 - [0:0] +:limit-3885 - [0:0] +:limit-3886 - [0:0] +:limit-3887 - [0:0] +:limit-3888 - [0:0] +:limit-3889 - [0:0] :limit-389 - [0:0] +:limit-3890 - [0:0] +:limit-3891 - [0:0] +:limit-3892 - [0:0] +:limit-3893 - [0:0] +:limit-3894 - [0:0] +:limit-3895 - [0:0] +:limit-3896 - [0:0] +:limit-3897 - [0:0] +:limit-3898 - [0:0] +:limit-3899 - [0:0] :limit-39 - [0:0] :limit-390 - [0:0] +:limit-3900 - [0:0] +:limit-3901 - [0:0] +:limit-3902 - [0:0] +:limit-3903 - [0:0] :limit-391 - [0:0] :limit-392 - [0:0] :limit-393 - [0:0] @@ -38043,9 +63149,11 @@ hash:net family inet :limit-651 - [0:0] :limit-652 - [0:0] :limit-653 - [0:0] +:limit-654 - [0:0] :limit-655 - [0:0] :limit-656 - [0:0] :limit-657 - [0:0] +:limit-658 - [0:0] :limit-659 - [0:0] :limit-66 - [0:0] :limit-660 - [0:0] @@ -38059,9 +63167,11 @@ hash:net family inet :limit-668 - [0:0] :limit-669 - [0:0] :limit-67 - [0:0] +:limit-670 - [0:0] :limit-671 - [0:0] :limit-672 - [0:0] :limit-673 - [0:0] +:limit-674 - [0:0] :limit-675 - [0:0] :limit-676 - [0:0] :limit-677 - [0:0] @@ -38074,10 +63184,12 @@ hash:net family inet :limit-683 - [0:0] :limit-684 - [0:0] :limit-685 - [0:0] +:limit-686 - [0:0] :limit-687 - [0:0] :limit-688 - [0:0] :limit-689 - [0:0] :limit-69 - [0:0] +:limit-690 - [0:0] :limit-691 - [0:0] :limit-692 - [0:0] :limit-693 - [0:0] @@ -38091,9 +63203,11 @@ hash:net family inet :limit-70 - [0:0] :limit-700 - [0:0] :limit-701 - [0:0] +:limit-702 - [0:0] :limit-703 - [0:0] :limit-704 - [0:0] :limit-705 - [0:0] +:limit-706 - [0:0] :limit-707 - [0:0] :limit-708 - [0:0] :limit-709 - [0:0] @@ -38115,10 +63229,12 @@ hash:net family inet :limit-723 - [0:0] :limit-724 - [0:0] :limit-725 - [0:0] +:limit-726 - [0:0] :limit-727 - [0:0] :limit-728 - [0:0] :limit-729 - [0:0] :limit-73 - [0:0] +:limit-730 - [0:0] :limit-731 - [0:0] :limit-732 - [0:0] :limit-733 - [0:0] @@ -38131,9 +63247,11 @@ hash:net family inet :limit-74 - [0:0] :limit-740 - [0:0] :limit-741 - [0:0] +:limit-742 - [0:0] :limit-743 - [0:0] :limit-744 - [0:0] :limit-745 - [0:0] +:limit-746 - [0:0] :limit-747 - [0:0] :limit-748 - [0:0] :limit-749 - [0:0] @@ -38146,10 +63264,12 @@ hash:net family inet :limit-755 - [0:0] :limit-756 - [0:0] :limit-757 - [0:0] +:limit-758 - [0:0] :limit-759 - [0:0] :limit-76 - [0:0] :limit-760 - [0:0] :limit-761 - [0:0] +:limit-762 - [0:0] :limit-763 - [0:0] :limit-764 - [0:0] :limit-765 - [0:0] @@ -38162,9 +63282,11 @@ hash:net family inet :limit-771 - [0:0] :limit-772 - [0:0] :limit-773 - [0:0] +:limit-774 - [0:0] :limit-775 - [0:0] :limit-776 - [0:0] :limit-777 - [0:0] +:limit-778 - [0:0] :limit-779 - [0:0] :limit-78 - [0:0] :limit-780 - [0:0] @@ -38186,11 +63308,13 @@ hash:net family inet :limit-795 - [0:0] :limit-796 - [0:0] :limit-797 - [0:0] +:limit-798 - [0:0] :limit-799 - [0:0] :limit-8 - [0:0] :limit-80 - [0:0] :limit-800 - [0:0] :limit-801 - [0:0] +:limit-802 - [0:0] :limit-803 - [0:0] :limit-804 - [0:0] :limit-805 - [0:0] @@ -38203,9 +63327,11 @@ hash:net family inet :limit-811 - [0:0] :limit-812 - [0:0] :limit-813 - [0:0] +:limit-814 - [0:0] :limit-815 - [0:0] :limit-816 - [0:0] :limit-817 - [0:0] +:limit-818 - [0:0] :limit-819 - [0:0] :limit-82 - [0:0] :limit-820 - [0:0] @@ -38219,9 +63345,11 @@ hash:net family inet :limit-828 - [0:0] :limit-829 - [0:0] :limit-83 - [0:0] +:limit-830 - [0:0] :limit-831 - [0:0] :limit-832 - [0:0] :limit-833 - [0:0] +:limit-834 - [0:0] :limit-835 - [0:0] :limit-836 - [0:0] :limit-837 - [0:0] @@ -38234,10 +63362,12 @@ hash:net family inet :limit-843 - [0:0] :limit-844 - [0:0] :limit-845 - [0:0] +:limit-846 - [0:0] :limit-847 - [0:0] :limit-848 - [0:0] :limit-849 - [0:0] :limit-85 - [0:0] +:limit-850 - [0:0] :limit-851 - [0:0] :limit-852 - [0:0] :limit-853 - [0:0] @@ -38259,9 +63389,11 @@ hash:net family inet :limit-868 - [0:0] :limit-869 - [0:0] :limit-87 - [0:0] +:limit-870 - [0:0] :limit-871 - [0:0] :limit-872 - [0:0] :limit-873 - [0:0] +:limit-874 - [0:0] :limit-875 - [0:0] :limit-876 - [0:0] :limit-877 - [0:0] @@ -38274,10 +63406,12 @@ hash:net family inet :limit-883 - [0:0] :limit-884 - [0:0] :limit-885 - [0:0] +:limit-886 - [0:0] :limit-887 - [0:0] :limit-888 - [0:0] :limit-889 - [0:0] :limit-89 - [0:0] +:limit-890 - [0:0] :limit-891 - [0:0] :limit-892 - [0:0] :limit-893 - [0:0] @@ -38291,9 +63425,11 @@ hash:net family inet :limit-90 - [0:0] :limit-900 - [0:0] :limit-901 - [0:0] +:limit-902 - [0:0] :limit-903 - [0:0] :limit-904 - [0:0] :limit-905 - [0:0] +:limit-906 - [0:0] :limit-907 - [0:0] :limit-908 - [0:0] :limit-909 - [0:0] @@ -38306,10 +63442,12 @@ hash:net family inet :limit-915 - [0:0] :limit-916 - [0:0] :limit-917 - [0:0] +:limit-918 - [0:0] :limit-919 - [0:0] :limit-92 - [0:0] :limit-920 - [0:0] :limit-921 - [0:0] +:limit-922 - [0:0] :limit-923 - [0:0] :limit-924 - [0:0] :limit-925 - [0:0] @@ -38331,9 +63469,11 @@ hash:net family inet :limit-94 - [0:0] :limit-940 - [0:0] :limit-941 - [0:0] +:limit-942 - [0:0] :limit-943 - [0:0] :limit-944 - [0:0] :limit-945 - [0:0] +:limit-946 - [0:0] :limit-947 - [0:0] :limit-948 - [0:0] :limit-949 - [0:0] @@ -38346,10 +63486,12 @@ hash:net family inet :limit-955 - [0:0] :limit-956 - [0:0] :limit-957 - [0:0] +:limit-958 - [0:0] :limit-959 - [0:0] :limit-96 - [0:0] :limit-960 - [0:0] :limit-961 - [0:0] +:limit-962 - [0:0] :limit-963 - [0:0] :limit-964 - [0:0] :limit-965 - [0:0] @@ -38362,9 +63504,11 @@ hash:net family inet :limit-971 - [0:0] :limit-972 - [0:0] :limit-973 - [0:0] +:limit-974 - [0:0] :limit-975 - [0:0] :limit-976 - [0:0] :limit-977 - [0:0] +:limit-978 - [0:0] :limit-979 - [0:0] :limit-98 - [0:0] :limit-980 - [0:0] @@ -38378,9 +63522,11 @@ hash:net family inet :limit-988 - [0:0] :limit-989 - [0:0] :limit-99 - [0:0] +:limit-990 - [0:0] :limit-991 - [0:0] :limit-992 - [0:0] :limit-993 - [0:0] +:limit-994 - [0:0] :limit-995 - [0:0] :limit-996 - [0:0] :limit-997 - [0:0] @@ -38389,6 +63535,9 @@ hash:net family inet :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] +:logaccept-100 - [0:0] +:logaccept-101 - [0:0] +:logaccept-102 - [0:0] :logaccept-11 - [0:0] :logaccept-12 - [0:0] :logaccept-13 - [0:0] @@ -38438,10 +63587,54 @@ hash:net family inet :logaccept-53 - [0:0] :logaccept-54 - [0:0] :logaccept-55 - [0:0] +:logaccept-56 - [0:0] +:logaccept-57 - [0:0] +:logaccept-58 - [0:0] +:logaccept-59 - [0:0] :logaccept-6 - [0:0] +:logaccept-60 - [0:0] +:logaccept-61 - [0:0] +:logaccept-62 - [0:0] +:logaccept-63 - [0:0] +:logaccept-64 - [0:0] +:logaccept-65 - [0:0] +:logaccept-66 - [0:0] +:logaccept-67 - [0:0] +:logaccept-68 - [0:0] +:logaccept-69 - [0:0] :logaccept-7 - [0:0] +:logaccept-70 - [0:0] +:logaccept-71 - [0:0] +:logaccept-72 - [0:0] +:logaccept-73 - [0:0] +:logaccept-74 - [0:0] +:logaccept-75 - [0:0] +:logaccept-76 - [0:0] +:logaccept-77 - [0:0] +:logaccept-78 - [0:0] +:logaccept-79 - [0:0] :logaccept-8 - [0:0] +:logaccept-80 - [0:0] +:logaccept-81 - [0:0] +:logaccept-82 - [0:0] +:logaccept-83 - [0:0] +:logaccept-84 - [0:0] +:logaccept-85 - [0:0] +:logaccept-86 - [0:0] +:logaccept-87 - [0:0] +:logaccept-88 - [0:0] +:logaccept-89 - [0:0] :logaccept-9 - [0:0] +:logaccept-90 - [0:0] +:logaccept-91 - [0:0] +:logaccept-92 - [0:0] +:logaccept-93 - [0:0] +:logaccept-94 - [0:0] +:logaccept-95 - [0:0] +:logaccept-96 - [0:0] +:logaccept-97 - [0:0] +:logaccept-98 - [0:0] +:logaccept-99 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] :logaccept-final-10 - [0:0] @@ -38515,22 +63708,164 @@ hash:net family inet :logaccept-final-161 - [0:0] :logaccept-final-162 - [0:0] :logaccept-final-163 - [0:0] +:logaccept-final-164 - [0:0] +:logaccept-final-165 - [0:0] +:logaccept-final-166 - [0:0] +:logaccept-final-167 - [0:0] +:logaccept-final-168 - [0:0] +:logaccept-final-169 - [0:0] :logaccept-final-17 - [0:0] +:logaccept-final-170 - [0:0] +:logaccept-final-171 - [0:0] +:logaccept-final-172 - [0:0] +:logaccept-final-173 - [0:0] +:logaccept-final-174 - [0:0] +:logaccept-final-175 - [0:0] +:logaccept-final-176 - [0:0] +:logaccept-final-177 - [0:0] +:logaccept-final-178 - [0:0] +:logaccept-final-179 - [0:0] :logaccept-final-18 - [0:0] +:logaccept-final-180 - [0:0] +:logaccept-final-181 - [0:0] +:logaccept-final-182 - [0:0] +:logaccept-final-183 - [0:0] +:logaccept-final-184 - [0:0] +:logaccept-final-185 - [0:0] +:logaccept-final-186 - [0:0] +:logaccept-final-187 - [0:0] +:logaccept-final-188 - [0:0] +:logaccept-final-189 - [0:0] :logaccept-final-19 - [0:0] +:logaccept-final-190 - [0:0] +:logaccept-final-191 - [0:0] +:logaccept-final-192 - [0:0] +:logaccept-final-193 - [0:0] +:logaccept-final-194 - [0:0] +:logaccept-final-195 - [0:0] +:logaccept-final-196 - [0:0] +:logaccept-final-197 - [0:0] +:logaccept-final-198 - [0:0] +:logaccept-final-199 - [0:0] :logaccept-final-2 - [0:0] :logaccept-final-20 - [0:0] +:logaccept-final-200 - [0:0] +:logaccept-final-201 - [0:0] +:logaccept-final-202 - [0:0] +:logaccept-final-203 - [0:0] +:logaccept-final-204 - [0:0] +:logaccept-final-205 - [0:0] +:logaccept-final-206 - [0:0] +:logaccept-final-207 - [0:0] +:logaccept-final-208 - [0:0] +:logaccept-final-209 - [0:0] :logaccept-final-21 - [0:0] +:logaccept-final-210 - [0:0] +:logaccept-final-211 - [0:0] +:logaccept-final-212 - [0:0] +:logaccept-final-213 - [0:0] +:logaccept-final-214 - [0:0] +:logaccept-final-215 - [0:0] +:logaccept-final-216 - [0:0] +:logaccept-final-217 - [0:0] +:logaccept-final-218 - [0:0] +:logaccept-final-219 - [0:0] :logaccept-final-22 - [0:0] +:logaccept-final-220 - [0:0] +:logaccept-final-221 - [0:0] +:logaccept-final-222 - [0:0] +:logaccept-final-223 - [0:0] +:logaccept-final-224 - [0:0] +:logaccept-final-225 - [0:0] +:logaccept-final-226 - [0:0] +:logaccept-final-227 - [0:0] +:logaccept-final-228 - [0:0] +:logaccept-final-229 - [0:0] :logaccept-final-23 - [0:0] +:logaccept-final-230 - [0:0] +:logaccept-final-231 - [0:0] +:logaccept-final-232 - [0:0] +:logaccept-final-233 - [0:0] +:logaccept-final-234 - [0:0] +:logaccept-final-235 - [0:0] +:logaccept-final-236 - [0:0] +:logaccept-final-237 - [0:0] +:logaccept-final-238 - [0:0] +:logaccept-final-239 - [0:0] :logaccept-final-24 - [0:0] +:logaccept-final-240 - [0:0] +:logaccept-final-241 - [0:0] +:logaccept-final-242 - [0:0] +:logaccept-final-243 - [0:0] +:logaccept-final-244 - [0:0] +:logaccept-final-245 - [0:0] +:logaccept-final-246 - [0:0] +:logaccept-final-247 - [0:0] +:logaccept-final-248 - [0:0] +:logaccept-final-249 - [0:0] :logaccept-final-25 - [0:0] +:logaccept-final-250 - [0:0] +:logaccept-final-251 - [0:0] +:logaccept-final-252 - [0:0] +:logaccept-final-253 - [0:0] +:logaccept-final-254 - [0:0] +:logaccept-final-255 - [0:0] +:logaccept-final-256 - [0:0] +:logaccept-final-257 - [0:0] +:logaccept-final-258 - [0:0] +:logaccept-final-259 - [0:0] :logaccept-final-26 - [0:0] +:logaccept-final-260 - [0:0] +:logaccept-final-261 - [0:0] +:logaccept-final-262 - [0:0] +:logaccept-final-263 - [0:0] +:logaccept-final-264 - [0:0] +:logaccept-final-265 - [0:0] +:logaccept-final-266 - [0:0] +:logaccept-final-267 - [0:0] +:logaccept-final-268 - [0:0] +:logaccept-final-269 - [0:0] :logaccept-final-27 - [0:0] +:logaccept-final-270 - [0:0] +:logaccept-final-271 - [0:0] +:logaccept-final-272 - [0:0] +:logaccept-final-273 - [0:0] +:logaccept-final-274 - [0:0] +:logaccept-final-275 - [0:0] +:logaccept-final-276 - [0:0] +:logaccept-final-277 - [0:0] +:logaccept-final-278 - [0:0] +:logaccept-final-279 - [0:0] :logaccept-final-28 - [0:0] +:logaccept-final-280 - [0:0] +:logaccept-final-281 - [0:0] +:logaccept-final-282 - [0:0] +:logaccept-final-283 - [0:0] +:logaccept-final-284 - [0:0] +:logaccept-final-285 - [0:0] +:logaccept-final-286 - [0:0] +:logaccept-final-287 - [0:0] +:logaccept-final-288 - [0:0] +:logaccept-final-289 - [0:0] :logaccept-final-29 - [0:0] +:logaccept-final-290 - [0:0] +:logaccept-final-291 - [0:0] +:logaccept-final-292 - [0:0] +:logaccept-final-293 - [0:0] +:logaccept-final-294 - [0:0] +:logaccept-final-295 - [0:0] +:logaccept-final-296 - [0:0] +:logaccept-final-297 - [0:0] +:logaccept-final-298 - [0:0] +:logaccept-final-299 - [0:0] :logaccept-final-3 - [0:0] :logaccept-final-30 - [0:0] +:logaccept-final-300 - [0:0] +:logaccept-final-301 - [0:0] +:logaccept-final-302 - [0:0] +:logaccept-final-303 - [0:0] +:logaccept-final-304 - [0:0] +:logaccept-final-305 - [0:0] :logaccept-final-31 - [0:0] :logaccept-final-32 - [0:0] :logaccept-final-33 - [0:0] @@ -38816,120 +64151,1138 @@ hash:net family inet :logdrop-1184 - [0:0] :logdrop-1185 - [0:0] :logdrop-1186 - [0:0] +:logdrop-1187 - [0:0] +:logdrop-1188 - [0:0] +:logdrop-1189 - [0:0] :logdrop-119 - [0:0] +:logdrop-1190 - [0:0] +:logdrop-1191 - [0:0] +:logdrop-1192 - [0:0] +:logdrop-1193 - [0:0] +:logdrop-1194 - [0:0] +:logdrop-1195 - [0:0] +:logdrop-1196 - [0:0] +:logdrop-1197 - [0:0] +:logdrop-1198 - [0:0] +:logdrop-1199 - [0:0] :logdrop-12 - [0:0] :logdrop-120 - [0:0] +:logdrop-1200 - [0:0] +:logdrop-1201 - [0:0] +:logdrop-1202 - [0:0] +:logdrop-1203 - [0:0] +:logdrop-1204 - [0:0] +:logdrop-1205 - [0:0] +:logdrop-1206 - [0:0] +:logdrop-1207 - [0:0] +:logdrop-1208 - [0:0] +:logdrop-1209 - [0:0] :logdrop-121 - [0:0] +:logdrop-1210 - [0:0] +:logdrop-1211 - [0:0] +:logdrop-1212 - [0:0] +:logdrop-1213 - [0:0] +:logdrop-1214 - [0:0] +:logdrop-1215 - [0:0] +:logdrop-1216 - [0:0] +:logdrop-1217 - [0:0] +:logdrop-1218 - [0:0] +:logdrop-1219 - [0:0] :logdrop-122 - [0:0] +:logdrop-1220 - [0:0] +:logdrop-1221 - [0:0] +:logdrop-1222 - [0:0] +:logdrop-1223 - [0:0] +:logdrop-1224 - [0:0] +:logdrop-1225 - [0:0] +:logdrop-1226 - [0:0] +:logdrop-1227 - [0:0] +:logdrop-1228 - [0:0] +:logdrop-1229 - [0:0] :logdrop-123 - [0:0] +:logdrop-1230 - [0:0] +:logdrop-1231 - [0:0] +:logdrop-1232 - [0:0] +:logdrop-1233 - [0:0] +:logdrop-1234 - [0:0] +:logdrop-1235 - [0:0] +:logdrop-1236 - [0:0] +:logdrop-1237 - [0:0] +:logdrop-1238 - [0:0] +:logdrop-1239 - [0:0] :logdrop-124 - [0:0] +:logdrop-1240 - [0:0] +:logdrop-1241 - [0:0] +:logdrop-1242 - [0:0] +:logdrop-1243 - [0:0] +:logdrop-1244 - [0:0] +:logdrop-1245 - [0:0] +:logdrop-1246 - [0:0] +:logdrop-1247 - [0:0] +:logdrop-1248 - [0:0] +:logdrop-1249 - [0:0] :logdrop-125 - [0:0] +:logdrop-1250 - [0:0] +:logdrop-1251 - [0:0] +:logdrop-1252 - [0:0] +:logdrop-1253 - [0:0] +:logdrop-1254 - [0:0] +:logdrop-1255 - [0:0] +:logdrop-1256 - [0:0] +:logdrop-1257 - [0:0] +:logdrop-1258 - [0:0] +:logdrop-1259 - [0:0] :logdrop-126 - [0:0] +:logdrop-1260 - [0:0] +:logdrop-1261 - [0:0] +:logdrop-1262 - [0:0] +:logdrop-1263 - [0:0] +:logdrop-1264 - [0:0] +:logdrop-1265 - [0:0] +:logdrop-1266 - [0:0] +:logdrop-1267 - [0:0] +:logdrop-1268 - [0:0] +:logdrop-1269 - [0:0] :logdrop-127 - [0:0] +:logdrop-1270 - [0:0] +:logdrop-1271 - [0:0] +:logdrop-1272 - [0:0] +:logdrop-1273 - [0:0] +:logdrop-1274 - [0:0] +:logdrop-1275 - [0:0] +:logdrop-1276 - [0:0] +:logdrop-1277 - [0:0] +:logdrop-1278 - [0:0] +:logdrop-1279 - [0:0] :logdrop-128 - [0:0] +:logdrop-1280 - [0:0] +:logdrop-1281 - [0:0] +:logdrop-1282 - [0:0] +:logdrop-1283 - [0:0] +:logdrop-1284 - [0:0] +:logdrop-1285 - [0:0] +:logdrop-1286 - [0:0] +:logdrop-1287 - [0:0] +:logdrop-1288 - [0:0] +:logdrop-1289 - [0:0] :logdrop-129 - [0:0] +:logdrop-1290 - [0:0] +:logdrop-1291 - [0:0] +:logdrop-1292 - [0:0] +:logdrop-1293 - [0:0] +:logdrop-1294 - [0:0] +:logdrop-1295 - [0:0] +:logdrop-1296 - [0:0] +:logdrop-1297 - [0:0] +:logdrop-1298 - [0:0] +:logdrop-1299 - [0:0] :logdrop-13 - [0:0] :logdrop-130 - [0:0] +:logdrop-1300 - [0:0] +:logdrop-1301 - [0:0] +:logdrop-1302 - [0:0] +:logdrop-1303 - [0:0] +:logdrop-1304 - [0:0] +:logdrop-1305 - [0:0] +:logdrop-1306 - [0:0] +:logdrop-1307 - [0:0] +:logdrop-1308 - [0:0] +:logdrop-1309 - [0:0] :logdrop-131 - [0:0] +:logdrop-1310 - [0:0] +:logdrop-1311 - [0:0] +:logdrop-1312 - [0:0] +:logdrop-1313 - [0:0] +:logdrop-1314 - [0:0] +:logdrop-1315 - [0:0] +:logdrop-1316 - [0:0] +:logdrop-1317 - [0:0] +:logdrop-1318 - [0:0] +:logdrop-1319 - [0:0] :logdrop-132 - [0:0] +:logdrop-1320 - [0:0] +:logdrop-1321 - [0:0] +:logdrop-1322 - [0:0] +:logdrop-1323 - [0:0] +:logdrop-1324 - [0:0] +:logdrop-1325 - [0:0] +:logdrop-1326 - [0:0] +:logdrop-1327 - [0:0] +:logdrop-1328 - [0:0] +:logdrop-1329 - [0:0] :logdrop-133 - [0:0] +:logdrop-1330 - [0:0] +:logdrop-1331 - [0:0] +:logdrop-1332 - [0:0] +:logdrop-1333 - [0:0] +:logdrop-1334 - [0:0] +:logdrop-1335 - [0:0] +:logdrop-1336 - [0:0] +:logdrop-1337 - [0:0] +:logdrop-1338 - [0:0] +:logdrop-1339 - [0:0] :logdrop-134 - [0:0] +:logdrop-1340 - [0:0] +:logdrop-1341 - [0:0] +:logdrop-1342 - [0:0] +:logdrop-1343 - [0:0] +:logdrop-1344 - [0:0] +:logdrop-1345 - [0:0] +:logdrop-1346 - [0:0] +:logdrop-1347 - [0:0] +:logdrop-1348 - [0:0] +:logdrop-1349 - [0:0] :logdrop-135 - [0:0] +:logdrop-1350 - [0:0] +:logdrop-1351 - [0:0] +:logdrop-1352 - [0:0] +:logdrop-1353 - [0:0] +:logdrop-1354 - [0:0] +:logdrop-1355 - [0:0] +:logdrop-1356 - [0:0] +:logdrop-1357 - [0:0] +:logdrop-1358 - [0:0] +:logdrop-1359 - [0:0] :logdrop-136 - [0:0] +:logdrop-1360 - [0:0] +:logdrop-1361 - [0:0] +:logdrop-1362 - [0:0] +:logdrop-1363 - [0:0] +:logdrop-1364 - [0:0] +:logdrop-1365 - [0:0] +:logdrop-1366 - [0:0] +:logdrop-1367 - [0:0] +:logdrop-1368 - [0:0] +:logdrop-1369 - [0:0] :logdrop-137 - [0:0] +:logdrop-1370 - [0:0] +:logdrop-1371 - [0:0] +:logdrop-1372 - [0:0] +:logdrop-1373 - [0:0] +:logdrop-1374 - [0:0] +:logdrop-1375 - [0:0] +:logdrop-1376 - [0:0] +:logdrop-1377 - [0:0] +:logdrop-1378 - [0:0] +:logdrop-1379 - [0:0] :logdrop-138 - [0:0] +:logdrop-1380 - [0:0] +:logdrop-1381 - [0:0] +:logdrop-1382 - [0:0] +:logdrop-1383 - [0:0] +:logdrop-1384 - [0:0] +:logdrop-1385 - [0:0] +:logdrop-1386 - [0:0] +:logdrop-1387 - [0:0] +:logdrop-1388 - [0:0] +:logdrop-1389 - [0:0] :logdrop-139 - [0:0] +:logdrop-1390 - [0:0] +:logdrop-1391 - [0:0] +:logdrop-1392 - [0:0] +:logdrop-1393 - [0:0] +:logdrop-1394 - [0:0] +:logdrop-1395 - [0:0] +:logdrop-1396 - [0:0] +:logdrop-1397 - [0:0] +:logdrop-1398 - [0:0] +:logdrop-1399 - [0:0] :logdrop-14 - [0:0] :logdrop-140 - [0:0] +:logdrop-1400 - [0:0] +:logdrop-1401 - [0:0] +:logdrop-1402 - [0:0] +:logdrop-1403 - [0:0] +:logdrop-1404 - [0:0] +:logdrop-1405 - [0:0] +:logdrop-1406 - [0:0] +:logdrop-1407 - [0:0] +:logdrop-1408 - [0:0] +:logdrop-1409 - [0:0] :logdrop-141 - [0:0] +:logdrop-1410 - [0:0] +:logdrop-1411 - [0:0] +:logdrop-1412 - [0:0] +:logdrop-1413 - [0:0] +:logdrop-1414 - [0:0] +:logdrop-1415 - [0:0] +:logdrop-1416 - [0:0] +:logdrop-1417 - [0:0] +:logdrop-1418 - [0:0] +:logdrop-1419 - [0:0] :logdrop-142 - [0:0] +:logdrop-1420 - [0:0] +:logdrop-1421 - [0:0] +:logdrop-1422 - [0:0] +:logdrop-1423 - [0:0] +:logdrop-1424 - [0:0] +:logdrop-1425 - [0:0] +:logdrop-1426 - [0:0] +:logdrop-1427 - [0:0] +:logdrop-1428 - [0:0] +:logdrop-1429 - [0:0] :logdrop-143 - [0:0] +:logdrop-1430 - [0:0] +:logdrop-1431 - [0:0] +:logdrop-1432 - [0:0] +:logdrop-1433 - [0:0] +:logdrop-1434 - [0:0] +:logdrop-1435 - [0:0] +:logdrop-1436 - [0:0] +:logdrop-1437 - [0:0] +:logdrop-1438 - [0:0] +:logdrop-1439 - [0:0] :logdrop-144 - [0:0] +:logdrop-1440 - [0:0] +:logdrop-1441 - [0:0] +:logdrop-1442 - [0:0] +:logdrop-1443 - [0:0] +:logdrop-1444 - [0:0] +:logdrop-1445 - [0:0] +:logdrop-1446 - [0:0] +:logdrop-1447 - [0:0] +:logdrop-1448 - [0:0] +:logdrop-1449 - [0:0] :logdrop-145 - [0:0] +:logdrop-1450 - [0:0] +:logdrop-1451 - [0:0] +:logdrop-1452 - [0:0] +:logdrop-1453 - [0:0] +:logdrop-1454 - [0:0] +:logdrop-1455 - [0:0] +:logdrop-1456 - [0:0] +:logdrop-1457 - [0:0] +:logdrop-1458 - [0:0] +:logdrop-1459 - [0:0] :logdrop-146 - [0:0] +:logdrop-1460 - [0:0] +:logdrop-1461 - [0:0] +:logdrop-1462 - [0:0] +:logdrop-1463 - [0:0] +:logdrop-1464 - [0:0] +:logdrop-1465 - [0:0] +:logdrop-1466 - [0:0] +:logdrop-1467 - [0:0] +:logdrop-1468 - [0:0] +:logdrop-1469 - [0:0] :logdrop-147 - [0:0] +:logdrop-1470 - [0:0] +:logdrop-1471 - [0:0] +:logdrop-1472 - [0:0] +:logdrop-1473 - [0:0] +:logdrop-1474 - [0:0] +:logdrop-1475 - [0:0] +:logdrop-1476 - [0:0] +:logdrop-1477 - [0:0] +:logdrop-1478 - [0:0] +:logdrop-1479 - [0:0] :logdrop-148 - [0:0] +:logdrop-1480 - [0:0] +:logdrop-1481 - [0:0] +:logdrop-1482 - [0:0] +:logdrop-1483 - [0:0] +:logdrop-1484 - [0:0] +:logdrop-1485 - [0:0] +:logdrop-1486 - [0:0] +:logdrop-1487 - [0:0] +:logdrop-1488 - [0:0] +:logdrop-1489 - [0:0] :logdrop-149 - [0:0] +:logdrop-1490 - [0:0] +:logdrop-1491 - [0:0] +:logdrop-1492 - [0:0] +:logdrop-1493 - [0:0] +:logdrop-1494 - [0:0] +:logdrop-1495 - [0:0] +:logdrop-1496 - [0:0] +:logdrop-1497 - [0:0] +:logdrop-1498 - [0:0] +:logdrop-1499 - [0:0] :logdrop-15 - [0:0] :logdrop-150 - [0:0] +:logdrop-1500 - [0:0] +:logdrop-1501 - [0:0] +:logdrop-1502 - [0:0] +:logdrop-1503 - [0:0] +:logdrop-1504 - [0:0] +:logdrop-1505 - [0:0] +:logdrop-1506 - [0:0] +:logdrop-1507 - [0:0] +:logdrop-1508 - [0:0] +:logdrop-1509 - [0:0] :logdrop-151 - [0:0] +:logdrop-1510 - [0:0] +:logdrop-1511 - [0:0] +:logdrop-1512 - [0:0] +:logdrop-1513 - [0:0] +:logdrop-1514 - [0:0] +:logdrop-1515 - [0:0] +:logdrop-1516 - [0:0] +:logdrop-1517 - [0:0] +:logdrop-1518 - [0:0] +:logdrop-1519 - [0:0] :logdrop-152 - [0:0] +:logdrop-1520 - [0:0] +:logdrop-1521 - [0:0] +:logdrop-1522 - [0:0] +:logdrop-1523 - [0:0] +:logdrop-1524 - [0:0] +:logdrop-1525 - [0:0] +:logdrop-1526 - [0:0] +:logdrop-1527 - [0:0] +:logdrop-1528 - [0:0] +:logdrop-1529 - [0:0] :logdrop-153 - [0:0] +:logdrop-1530 - [0:0] +:logdrop-1531 - [0:0] +:logdrop-1532 - [0:0] +:logdrop-1533 - [0:0] +:logdrop-1534 - [0:0] +:logdrop-1535 - [0:0] +:logdrop-1536 - [0:0] +:logdrop-1537 - [0:0] +:logdrop-1538 - [0:0] +:logdrop-1539 - [0:0] :logdrop-154 - [0:0] +:logdrop-1540 - [0:0] +:logdrop-1541 - [0:0] +:logdrop-1542 - [0:0] +:logdrop-1543 - [0:0] +:logdrop-1544 - [0:0] +:logdrop-1545 - [0:0] +:logdrop-1546 - [0:0] +:logdrop-1547 - [0:0] +:logdrop-1548 - [0:0] +:logdrop-1549 - [0:0] :logdrop-155 - [0:0] +:logdrop-1550 - [0:0] +:logdrop-1551 - [0:0] +:logdrop-1552 - [0:0] +:logdrop-1553 - [0:0] +:logdrop-1554 - [0:0] +:logdrop-1555 - [0:0] +:logdrop-1556 - [0:0] +:logdrop-1557 - [0:0] +:logdrop-1558 - [0:0] +:logdrop-1559 - [0:0] :logdrop-156 - [0:0] +:logdrop-1560 - [0:0] +:logdrop-1561 - [0:0] +:logdrop-1562 - [0:0] +:logdrop-1563 - [0:0] +:logdrop-1564 - [0:0] +:logdrop-1565 - [0:0] +:logdrop-1566 - [0:0] +:logdrop-1567 - [0:0] +:logdrop-1568 - [0:0] +:logdrop-1569 - [0:0] :logdrop-157 - [0:0] +:logdrop-1570 - [0:0] +:logdrop-1571 - [0:0] +:logdrop-1572 - [0:0] +:logdrop-1573 - [0:0] +:logdrop-1574 - [0:0] +:logdrop-1575 - [0:0] +:logdrop-1576 - [0:0] +:logdrop-1577 - [0:0] +:logdrop-1578 - [0:0] +:logdrop-1579 - [0:0] :logdrop-158 - [0:0] +:logdrop-1580 - [0:0] +:logdrop-1581 - [0:0] +:logdrop-1582 - [0:0] +:logdrop-1583 - [0:0] +:logdrop-1584 - [0:0] +:logdrop-1585 - [0:0] +:logdrop-1586 - [0:0] +:logdrop-1587 - [0:0] +:logdrop-1588 - [0:0] +:logdrop-1589 - [0:0] :logdrop-159 - [0:0] +:logdrop-1590 - [0:0] +:logdrop-1591 - [0:0] +:logdrop-1592 - [0:0] +:logdrop-1593 - [0:0] +:logdrop-1594 - [0:0] +:logdrop-1595 - [0:0] +:logdrop-1596 - [0:0] +:logdrop-1597 - [0:0] +:logdrop-1598 - [0:0] +:logdrop-1599 - [0:0] :logdrop-16 - [0:0] :logdrop-160 - [0:0] +:logdrop-1600 - [0:0] +:logdrop-1601 - [0:0] +:logdrop-1602 - [0:0] +:logdrop-1603 - [0:0] +:logdrop-1604 - [0:0] +:logdrop-1605 - [0:0] +:logdrop-1606 - [0:0] +:logdrop-1607 - [0:0] +:logdrop-1608 - [0:0] +:logdrop-1609 - [0:0] :logdrop-161 - [0:0] +:logdrop-1610 - [0:0] +:logdrop-1611 - [0:0] +:logdrop-1612 - [0:0] +:logdrop-1613 - [0:0] +:logdrop-1614 - [0:0] +:logdrop-1615 - [0:0] +:logdrop-1616 - [0:0] +:logdrop-1617 - [0:0] +:logdrop-1618 - [0:0] +:logdrop-1619 - [0:0] :logdrop-162 - [0:0] +:logdrop-1620 - [0:0] +:logdrop-1621 - [0:0] +:logdrop-1622 - [0:0] +:logdrop-1623 - [0:0] +:logdrop-1624 - [0:0] +:logdrop-1625 - [0:0] +:logdrop-1626 - [0:0] +:logdrop-1627 - [0:0] +:logdrop-1628 - [0:0] +:logdrop-1629 - [0:0] :logdrop-163 - [0:0] +:logdrop-1630 - [0:0] +:logdrop-1631 - [0:0] +:logdrop-1632 - [0:0] +:logdrop-1633 - [0:0] +:logdrop-1634 - [0:0] +:logdrop-1635 - [0:0] +:logdrop-1636 - [0:0] +:logdrop-1637 - [0:0] +:logdrop-1638 - [0:0] +:logdrop-1639 - [0:0] :logdrop-164 - [0:0] +:logdrop-1640 - [0:0] +:logdrop-1641 - [0:0] +:logdrop-1642 - [0:0] +:logdrop-1643 - [0:0] +:logdrop-1644 - [0:0] +:logdrop-1645 - [0:0] +:logdrop-1646 - [0:0] +:logdrop-1647 - [0:0] +:logdrop-1648 - [0:0] +:logdrop-1649 - [0:0] :logdrop-165 - [0:0] +:logdrop-1650 - [0:0] +:logdrop-1651 - [0:0] +:logdrop-1652 - [0:0] +:logdrop-1653 - [0:0] +:logdrop-1654 - [0:0] +:logdrop-1655 - [0:0] +:logdrop-1656 - [0:0] +:logdrop-1657 - [0:0] +:logdrop-1658 - [0:0] +:logdrop-1659 - [0:0] :logdrop-166 - [0:0] +:logdrop-1660 - [0:0] +:logdrop-1661 - [0:0] +:logdrop-1662 - [0:0] +:logdrop-1663 - [0:0] +:logdrop-1664 - [0:0] +:logdrop-1665 - [0:0] +:logdrop-1666 - [0:0] +:logdrop-1667 - [0:0] +:logdrop-1668 - [0:0] +:logdrop-1669 - [0:0] :logdrop-167 - [0:0] +:logdrop-1670 - [0:0] +:logdrop-1671 - [0:0] +:logdrop-1672 - [0:0] +:logdrop-1673 - [0:0] +:logdrop-1674 - [0:0] +:logdrop-1675 - [0:0] +:logdrop-1676 - [0:0] +:logdrop-1677 - [0:0] +:logdrop-1678 - [0:0] +:logdrop-1679 - [0:0] :logdrop-168 - [0:0] +:logdrop-1680 - [0:0] +:logdrop-1681 - [0:0] +:logdrop-1682 - [0:0] +:logdrop-1683 - [0:0] +:logdrop-1684 - [0:0] +:logdrop-1685 - [0:0] +:logdrop-1686 - [0:0] +:logdrop-1687 - [0:0] +:logdrop-1688 - [0:0] +:logdrop-1689 - [0:0] :logdrop-169 - [0:0] +:logdrop-1690 - [0:0] +:logdrop-1691 - [0:0] +:logdrop-1692 - [0:0] +:logdrop-1693 - [0:0] +:logdrop-1694 - [0:0] +:logdrop-1695 - [0:0] +:logdrop-1696 - [0:0] +:logdrop-1697 - [0:0] +:logdrop-1698 - [0:0] +:logdrop-1699 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] +:logdrop-1700 - [0:0] +:logdrop-1701 - [0:0] +:logdrop-1702 - [0:0] +:logdrop-1703 - [0:0] +:logdrop-1704 - [0:0] +:logdrop-1705 - [0:0] +:logdrop-1706 - [0:0] +:logdrop-1707 - [0:0] +:logdrop-1708 - [0:0] +:logdrop-1709 - [0:0] :logdrop-171 - [0:0] +:logdrop-1710 - [0:0] +:logdrop-1711 - [0:0] +:logdrop-1712 - [0:0] +:logdrop-1713 - [0:0] +:logdrop-1714 - [0:0] +:logdrop-1715 - [0:0] +:logdrop-1716 - [0:0] +:logdrop-1717 - [0:0] +:logdrop-1718 - [0:0] +:logdrop-1719 - [0:0] :logdrop-172 - [0:0] +:logdrop-1720 - [0:0] +:logdrop-1721 - [0:0] +:logdrop-1722 - [0:0] +:logdrop-1723 - [0:0] +:logdrop-1724 - [0:0] +:logdrop-1725 - [0:0] +:logdrop-1726 - [0:0] +:logdrop-1727 - [0:0] +:logdrop-1728 - [0:0] +:logdrop-1729 - [0:0] :logdrop-173 - [0:0] +:logdrop-1730 - [0:0] +:logdrop-1731 - [0:0] +:logdrop-1732 - [0:0] +:logdrop-1733 - [0:0] +:logdrop-1734 - [0:0] +:logdrop-1735 - [0:0] +:logdrop-1736 - [0:0] +:logdrop-1737 - [0:0] +:logdrop-1738 - [0:0] +:logdrop-1739 - [0:0] :logdrop-174 - [0:0] +:logdrop-1740 - [0:0] +:logdrop-1741 - [0:0] +:logdrop-1742 - [0:0] +:logdrop-1743 - [0:0] +:logdrop-1744 - [0:0] +:logdrop-1745 - [0:0] +:logdrop-1746 - [0:0] +:logdrop-1747 - [0:0] +:logdrop-1748 - [0:0] +:logdrop-1749 - [0:0] :logdrop-175 - [0:0] +:logdrop-1750 - [0:0] +:logdrop-1751 - [0:0] +:logdrop-1752 - [0:0] +:logdrop-1753 - [0:0] +:logdrop-1754 - [0:0] +:logdrop-1755 - [0:0] +:logdrop-1756 - [0:0] +:logdrop-1757 - [0:0] +:logdrop-1758 - [0:0] +:logdrop-1759 - [0:0] :logdrop-176 - [0:0] +:logdrop-1760 - [0:0] +:logdrop-1761 - [0:0] +:logdrop-1762 - [0:0] +:logdrop-1763 - [0:0] +:logdrop-1764 - [0:0] +:logdrop-1765 - [0:0] +:logdrop-1766 - [0:0] +:logdrop-1767 - [0:0] +:logdrop-1768 - [0:0] +:logdrop-1769 - [0:0] :logdrop-177 - [0:0] +:logdrop-1770 - [0:0] +:logdrop-1771 - [0:0] +:logdrop-1772 - [0:0] +:logdrop-1773 - [0:0] +:logdrop-1774 - [0:0] +:logdrop-1775 - [0:0] +:logdrop-1776 - [0:0] +:logdrop-1777 - [0:0] +:logdrop-1778 - [0:0] +:logdrop-1779 - [0:0] :logdrop-178 - [0:0] +:logdrop-1780 - [0:0] +:logdrop-1781 - [0:0] +:logdrop-1782 - [0:0] +:logdrop-1783 - [0:0] +:logdrop-1784 - [0:0] +:logdrop-1785 - [0:0] +:logdrop-1786 - [0:0] +:logdrop-1787 - [0:0] +:logdrop-1788 - [0:0] +:logdrop-1789 - [0:0] :logdrop-179 - [0:0] +:logdrop-1790 - [0:0] +:logdrop-1791 - [0:0] +:logdrop-1792 - [0:0] +:logdrop-1793 - [0:0] +:logdrop-1794 - [0:0] +:logdrop-1795 - [0:0] +:logdrop-1796 - [0:0] +:logdrop-1797 - [0:0] +:logdrop-1798 - [0:0] +:logdrop-1799 - [0:0] :logdrop-18 - [0:0] :logdrop-180 - [0:0] +:logdrop-1800 - [0:0] +:logdrop-1801 - [0:0] +:logdrop-1802 - [0:0] +:logdrop-1803 - [0:0] +:logdrop-1804 - [0:0] +:logdrop-1805 - [0:0] +:logdrop-1806 - [0:0] +:logdrop-1807 - [0:0] +:logdrop-1808 - [0:0] +:logdrop-1809 - [0:0] :logdrop-181 - [0:0] +:logdrop-1810 - [0:0] +:logdrop-1811 - [0:0] +:logdrop-1812 - [0:0] +:logdrop-1813 - [0:0] +:logdrop-1814 - [0:0] +:logdrop-1815 - [0:0] +:logdrop-1816 - [0:0] +:logdrop-1817 - [0:0] +:logdrop-1818 - [0:0] +:logdrop-1819 - [0:0] :logdrop-182 - [0:0] +:logdrop-1820 - [0:0] +:logdrop-1821 - [0:0] +:logdrop-1822 - [0:0] +:logdrop-1823 - [0:0] +:logdrop-1824 - [0:0] +:logdrop-1825 - [0:0] +:logdrop-1826 - [0:0] +:logdrop-1827 - [0:0] +:logdrop-1828 - [0:0] +:logdrop-1829 - [0:0] :logdrop-183 - [0:0] +:logdrop-1830 - [0:0] +:logdrop-1831 - [0:0] +:logdrop-1832 - [0:0] +:logdrop-1833 - [0:0] +:logdrop-1834 - [0:0] +:logdrop-1835 - [0:0] +:logdrop-1836 - [0:0] +:logdrop-1837 - [0:0] +:logdrop-1838 - [0:0] +:logdrop-1839 - [0:0] :logdrop-184 - [0:0] +:logdrop-1840 - [0:0] +:logdrop-1841 - [0:0] +:logdrop-1842 - [0:0] +:logdrop-1843 - [0:0] +:logdrop-1844 - [0:0] +:logdrop-1845 - [0:0] +:logdrop-1846 - [0:0] +:logdrop-1847 - [0:0] +:logdrop-1848 - [0:0] +:logdrop-1849 - [0:0] :logdrop-185 - [0:0] +:logdrop-1850 - [0:0] +:logdrop-1851 - [0:0] +:logdrop-1852 - [0:0] +:logdrop-1853 - [0:0] +:logdrop-1854 - [0:0] +:logdrop-1855 - [0:0] +:logdrop-1856 - [0:0] +:logdrop-1857 - [0:0] +:logdrop-1858 - [0:0] +:logdrop-1859 - [0:0] :logdrop-186 - [0:0] +:logdrop-1860 - [0:0] +:logdrop-1861 - [0:0] +:logdrop-1862 - [0:0] +:logdrop-1863 - [0:0] +:logdrop-1864 - [0:0] +:logdrop-1865 - [0:0] +:logdrop-1866 - [0:0] +:logdrop-1867 - [0:0] +:logdrop-1868 - [0:0] +:logdrop-1869 - [0:0] :logdrop-187 - [0:0] +:logdrop-1870 - [0:0] +:logdrop-1871 - [0:0] +:logdrop-1872 - [0:0] +:logdrop-1873 - [0:0] +:logdrop-1874 - [0:0] +:logdrop-1875 - [0:0] +:logdrop-1876 - [0:0] +:logdrop-1877 - [0:0] +:logdrop-1878 - [0:0] +:logdrop-1879 - [0:0] :logdrop-188 - [0:0] +:logdrop-1880 - [0:0] +:logdrop-1881 - [0:0] +:logdrop-1882 - [0:0] +:logdrop-1883 - [0:0] +:logdrop-1884 - [0:0] +:logdrop-1885 - [0:0] +:logdrop-1886 - [0:0] +:logdrop-1887 - [0:0] +:logdrop-1888 - [0:0] +:logdrop-1889 - [0:0] :logdrop-189 - [0:0] +:logdrop-1890 - [0:0] +:logdrop-1891 - [0:0] +:logdrop-1892 - [0:0] +:logdrop-1893 - [0:0] +:logdrop-1894 - [0:0] +:logdrop-1895 - [0:0] +:logdrop-1896 - [0:0] +:logdrop-1897 - [0:0] +:logdrop-1898 - [0:0] +:logdrop-1899 - [0:0] :logdrop-19 - [0:0] :logdrop-190 - [0:0] +:logdrop-1900 - [0:0] +:logdrop-1901 - [0:0] +:logdrop-1902 - [0:0] +:logdrop-1903 - [0:0] +:logdrop-1904 - [0:0] +:logdrop-1905 - [0:0] +:logdrop-1906 - [0:0] +:logdrop-1907 - [0:0] +:logdrop-1908 - [0:0] +:logdrop-1909 - [0:0] :logdrop-191 - [0:0] +:logdrop-1910 - [0:0] +:logdrop-1911 - [0:0] +:logdrop-1912 - [0:0] +:logdrop-1913 - [0:0] +:logdrop-1914 - [0:0] +:logdrop-1915 - [0:0] +:logdrop-1916 - [0:0] +:logdrop-1917 - [0:0] +:logdrop-1918 - [0:0] +:logdrop-1919 - [0:0] :logdrop-192 - [0:0] +:logdrop-1920 - [0:0] +:logdrop-1921 - [0:0] +:logdrop-1922 - [0:0] +:logdrop-1923 - [0:0] +:logdrop-1924 - [0:0] +:logdrop-1925 - [0:0] +:logdrop-1926 - [0:0] +:logdrop-1927 - [0:0] +:logdrop-1928 - [0:0] +:logdrop-1929 - [0:0] :logdrop-193 - [0:0] +:logdrop-1930 - [0:0] +:logdrop-1931 - [0:0] +:logdrop-1932 - [0:0] +:logdrop-1933 - [0:0] +:logdrop-1934 - [0:0] +:logdrop-1935 - [0:0] +:logdrop-1936 - [0:0] +:logdrop-1937 - [0:0] +:logdrop-1938 - [0:0] +:logdrop-1939 - [0:0] :logdrop-194 - [0:0] +:logdrop-1940 - [0:0] +:logdrop-1941 - [0:0] +:logdrop-1942 - [0:0] +:logdrop-1943 - [0:0] +:logdrop-1944 - [0:0] +:logdrop-1945 - [0:0] +:logdrop-1946 - [0:0] +:logdrop-1947 - [0:0] +:logdrop-1948 - [0:0] +:logdrop-1949 - [0:0] :logdrop-195 - [0:0] +:logdrop-1950 - [0:0] +:logdrop-1951 - [0:0] +:logdrop-1952 - [0:0] +:logdrop-1953 - [0:0] +:logdrop-1954 - [0:0] +:logdrop-1955 - [0:0] +:logdrop-1956 - [0:0] +:logdrop-1957 - [0:0] +:logdrop-1958 - [0:0] +:logdrop-1959 - [0:0] :logdrop-196 - [0:0] +:logdrop-1960 - [0:0] +:logdrop-1961 - [0:0] +:logdrop-1962 - [0:0] +:logdrop-1963 - [0:0] +:logdrop-1964 - [0:0] +:logdrop-1965 - [0:0] +:logdrop-1966 - [0:0] +:logdrop-1967 - [0:0] +:logdrop-1968 - [0:0] +:logdrop-1969 - [0:0] :logdrop-197 - [0:0] +:logdrop-1970 - [0:0] +:logdrop-1971 - [0:0] +:logdrop-1972 - [0:0] +:logdrop-1973 - [0:0] +:logdrop-1974 - [0:0] +:logdrop-1975 - [0:0] +:logdrop-1976 - [0:0] +:logdrop-1977 - [0:0] +:logdrop-1978 - [0:0] +:logdrop-1979 - [0:0] :logdrop-198 - [0:0] +:logdrop-1980 - [0:0] +:logdrop-1981 - [0:0] +:logdrop-1982 - [0:0] +:logdrop-1983 - [0:0] +:logdrop-1984 - [0:0] +:logdrop-1985 - [0:0] +:logdrop-1986 - [0:0] +:logdrop-1987 - [0:0] +:logdrop-1988 - [0:0] +:logdrop-1989 - [0:0] :logdrop-199 - [0:0] +:logdrop-1990 - [0:0] +:logdrop-1991 - [0:0] +:logdrop-1992 - [0:0] +:logdrop-1993 - [0:0] +:logdrop-1994 - [0:0] +:logdrop-1995 - [0:0] +:logdrop-1996 - [0:0] +:logdrop-1997 - [0:0] +:logdrop-1998 - [0:0] +:logdrop-1999 - [0:0] :logdrop-2 - [0:0] :logdrop-20 - [0:0] :logdrop-200 - [0:0] +:logdrop-2000 - [0:0] +:logdrop-2001 - [0:0] +:logdrop-2002 - [0:0] +:logdrop-2003 - [0:0] +:logdrop-2004 - [0:0] +:logdrop-2005 - [0:0] +:logdrop-2006 - [0:0] +:logdrop-2007 - [0:0] +:logdrop-2008 - [0:0] +:logdrop-2009 - [0:0] :logdrop-201 - [0:0] +:logdrop-2010 - [0:0] +:logdrop-2011 - [0:0] +:logdrop-2012 - [0:0] +:logdrop-2013 - [0:0] +:logdrop-2014 - [0:0] +:logdrop-2015 - [0:0] +:logdrop-2016 - [0:0] +:logdrop-2017 - [0:0] +:logdrop-2018 - [0:0] +:logdrop-2019 - [0:0] :logdrop-202 - [0:0] +:logdrop-2020 - [0:0] +:logdrop-2021 - [0:0] +:logdrop-2022 - [0:0] +:logdrop-2023 - [0:0] +:logdrop-2024 - [0:0] +:logdrop-2025 - [0:0] +:logdrop-2026 - [0:0] +:logdrop-2027 - [0:0] +:logdrop-2028 - [0:0] +:logdrop-2029 - [0:0] :logdrop-203 - [0:0] +:logdrop-2030 - [0:0] +:logdrop-2031 - [0:0] +:logdrop-2032 - [0:0] +:logdrop-2033 - [0:0] +:logdrop-2034 - [0:0] +:logdrop-2035 - [0:0] +:logdrop-2036 - [0:0] +:logdrop-2037 - [0:0] +:logdrop-2038 - [0:0] +:logdrop-2039 - [0:0] :logdrop-204 - [0:0] +:logdrop-2040 - [0:0] +:logdrop-2041 - [0:0] +:logdrop-2042 - [0:0] +:logdrop-2043 - [0:0] +:logdrop-2044 - [0:0] +:logdrop-2045 - [0:0] +:logdrop-2046 - [0:0] +:logdrop-2047 - [0:0] +:logdrop-2048 - [0:0] +:logdrop-2049 - [0:0] :logdrop-205 - [0:0] +:logdrop-2050 - [0:0] +:logdrop-2051 - [0:0] +:logdrop-2052 - [0:0] +:logdrop-2053 - [0:0] +:logdrop-2054 - [0:0] +:logdrop-2055 - [0:0] +:logdrop-2056 - [0:0] +:logdrop-2057 - [0:0] +:logdrop-2058 - [0:0] +:logdrop-2059 - [0:0] :logdrop-206 - [0:0] +:logdrop-2060 - [0:0] +:logdrop-2061 - [0:0] +:logdrop-2062 - [0:0] +:logdrop-2063 - [0:0] +:logdrop-2064 - [0:0] +:logdrop-2065 - [0:0] +:logdrop-2066 - [0:0] +:logdrop-2067 - [0:0] +:logdrop-2068 - [0:0] +:logdrop-2069 - [0:0] :logdrop-207 - [0:0] +:logdrop-2070 - [0:0] +:logdrop-2071 - [0:0] +:logdrop-2072 - [0:0] +:logdrop-2073 - [0:0] +:logdrop-2074 - [0:0] +:logdrop-2075 - [0:0] +:logdrop-2076 - [0:0] +:logdrop-2077 - [0:0] +:logdrop-2078 - [0:0] +:logdrop-2079 - [0:0] :logdrop-208 - [0:0] +:logdrop-2080 - [0:0] +:logdrop-2081 - [0:0] +:logdrop-2082 - [0:0] +:logdrop-2083 - [0:0] +:logdrop-2084 - [0:0] +:logdrop-2085 - [0:0] +:logdrop-2086 - [0:0] +:logdrop-2087 - [0:0] +:logdrop-2088 - [0:0] +:logdrop-2089 - [0:0] :logdrop-209 - [0:0] +:logdrop-2090 - [0:0] +:logdrop-2091 - [0:0] +:logdrop-2092 - [0:0] +:logdrop-2093 - [0:0] +:logdrop-2094 - [0:0] +:logdrop-2095 - [0:0] +:logdrop-2096 - [0:0] +:logdrop-2097 - [0:0] +:logdrop-2098 - [0:0] +:logdrop-2099 - [0:0] :logdrop-21 - [0:0] :logdrop-210 - [0:0] +:logdrop-2100 - [0:0] +:logdrop-2101 - [0:0] +:logdrop-2102 - [0:0] +:logdrop-2103 - [0:0] +:logdrop-2104 - [0:0] +:logdrop-2105 - [0:0] +:logdrop-2106 - [0:0] +:logdrop-2107 - [0:0] +:logdrop-2108 - [0:0] +:logdrop-2109 - [0:0] :logdrop-211 - [0:0] +:logdrop-2110 - [0:0] +:logdrop-2111 - [0:0] +:logdrop-2112 - [0:0] +:logdrop-2113 - [0:0] +:logdrop-2114 - [0:0] +:logdrop-2115 - [0:0] +:logdrop-2116 - [0:0] +:logdrop-2117 - [0:0] +:logdrop-2118 - [0:0] +:logdrop-2119 - [0:0] :logdrop-212 - [0:0] +:logdrop-2120 - [0:0] +:logdrop-2121 - [0:0] +:logdrop-2122 - [0:0] +:logdrop-2123 - [0:0] +:logdrop-2124 - [0:0] +:logdrop-2125 - [0:0] +:logdrop-2126 - [0:0] +:logdrop-2127 - [0:0] +:logdrop-2128 - [0:0] +:logdrop-2129 - [0:0] :logdrop-213 - [0:0] +:logdrop-2130 - [0:0] +:logdrop-2131 - [0:0] +:logdrop-2132 - [0:0] +:logdrop-2133 - [0:0] +:logdrop-2134 - [0:0] +:logdrop-2135 - [0:0] +:logdrop-2136 - [0:0] +:logdrop-2137 - [0:0] +:logdrop-2138 - [0:0] +:logdrop-2139 - [0:0] :logdrop-214 - [0:0] +:logdrop-2140 - [0:0] +:logdrop-2141 - [0:0] +:logdrop-2142 - [0:0] +:logdrop-2143 - [0:0] +:logdrop-2144 - [0:0] +:logdrop-2145 - [0:0] +:logdrop-2146 - [0:0] +:logdrop-2147 - [0:0] +:logdrop-2148 - [0:0] +:logdrop-2149 - [0:0] :logdrop-215 - [0:0] +:logdrop-2150 - [0:0] +:logdrop-2151 - [0:0] +:logdrop-2152 - [0:0] +:logdrop-2153 - [0:0] +:logdrop-2154 - [0:0] +:logdrop-2155 - [0:0] +:logdrop-2156 - [0:0] +:logdrop-2157 - [0:0] +:logdrop-2158 - [0:0] +:logdrop-2159 - [0:0] :logdrop-216 - [0:0] +:logdrop-2160 - [0:0] +:logdrop-2161 - [0:0] +:logdrop-2162 - [0:0] +:logdrop-2163 - [0:0] +:logdrop-2164 - [0:0] +:logdrop-2165 - [0:0] +:logdrop-2166 - [0:0] +:logdrop-2167 - [0:0] +:logdrop-2168 - [0:0] +:logdrop-2169 - [0:0] :logdrop-217 - [0:0] +:logdrop-2170 - [0:0] +:logdrop-2171 - [0:0] +:logdrop-2172 - [0:0] +:logdrop-2173 - [0:0] +:logdrop-2174 - [0:0] +:logdrop-2175 - [0:0] +:logdrop-2176 - [0:0] +:logdrop-2177 - [0:0] +:logdrop-2178 - [0:0] +:logdrop-2179 - [0:0] :logdrop-218 - [0:0] +:logdrop-2180 - [0:0] +:logdrop-2181 - [0:0] +:logdrop-2182 - [0:0] +:logdrop-2183 - [0:0] +:logdrop-2184 - [0:0] +:logdrop-2185 - [0:0] +:logdrop-2186 - [0:0] +:logdrop-2187 - [0:0] +:logdrop-2188 - [0:0] +:logdrop-2189 - [0:0] :logdrop-219 - [0:0] +:logdrop-2190 - [0:0] +:logdrop-2191 - [0:0] +:logdrop-2192 - [0:0] +:logdrop-2193 - [0:0] +:logdrop-2194 - [0:0] +:logdrop-2195 - [0:0] +:logdrop-2196 - [0:0] +:logdrop-2197 - [0:0] +:logdrop-2198 - [0:0] +:logdrop-2199 - [0:0] :logdrop-22 - [0:0] :logdrop-220 - [0:0] +:logdrop-2200 - [0:0] +:logdrop-2201 - [0:0] +:logdrop-2202 - [0:0] +:logdrop-2203 - [0:0] +:logdrop-2204 - [0:0] :logdrop-221 - [0:0] :logdrop-222 - [0:0] :logdrop-223 - [0:0] @@ -39795,637 +66148,986 @@ hash:net family inet :logdrop-999 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] +:logpass-2 - [0:0] +:logpass-3 - [0:0] -A FORWARD -m recent --name user:B --rdest --mask 255.255.255.255 --set -A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set --A FORWARD -j limit-1886 --A FORWARD -j limit-1885 --A FORWARD -j limit-1884 --A FORWARD -j limit-1883 --A FORWARD -j limit-1882 --A FORWARD -j limit-1881 --A FORWARD -j limit-1880 --A FORWARD -j limit-1879 --A FORWARD -j limit-1878 --A FORWARD -j limit-1877 --A FORWARD -j limit-1876 --A FORWARD -j limit-1875 --A FORWARD -j limit-1874 --A FORWARD -j limit-1873 --A FORWARD -j limit-1872 --A FORWARD -j limit-1871 --A FORWARD -j limit-1870 --A FORWARD -j limit-1869 --A FORWARD -j limit-1868 --A FORWARD -j limit-1867 --A FORWARD -j limit-1866 --A FORWARD -j limit-1865 --A FORWARD -j limit-1864 --A FORWARD -j limit-1863 --A FORWARD -j limit-1862 --A FORWARD -j limit-1861 --A FORWARD -j limit-1860 --A FORWARD -j limit-1859 --A FORWARD -j limit-1858 --A FORWARD -j limit-1857 --A FORWARD -j limit-1856 --A FORWARD -j limit-1855 --A FORWARD -j limit-1854 --A FORWARD -j limit-1853 --A FORWARD -j limit-1852 --A FORWARD -j limit-1851 --A FORWARD -j limit-1850 --A FORWARD -j limit-1849 --A FORWARD -j limit-1848 --A FORWARD -j limit-1847 --A FORWARD -j limit-1846 --A FORWARD -j limit-1845 --A FORWARD -j limit-1844 --A FORWARD -j limit-1843 --A FORWARD -j limit-1842 --A FORWARD -j limit-1841 --A FORWARD -j limit-1840 --A FORWARD -j limit-1839 --A FORWARD -j limit-1838 --A FORWARD -j limit-1837 --A FORWARD -j limit-1836 --A FORWARD -j limit-1835 --A FORWARD -j limit-1834 --A FORWARD -j limit-1833 --A FORWARD -j limit-1832 --A FORWARD -j limit-1831 --A FORWARD -j limit-1830 --A FORWARD -j limit-1829 --A FORWARD -j limit-1828 --A FORWARD -j limit-1827 --A FORWARD -j limit-1826 --A FORWARD -j limit-1825 --A FORWARD -j limit-1824 --A FORWARD -j limit-1823 --A FORWARD -j limit-1822 --A FORWARD -j limit-1821 --A FORWARD -j limit-1820 --A FORWARD -j limit-1819 --A FORWARD -j limit-1818 --A FORWARD -j limit-1817 --A FORWARD -j limit-1816 --A FORWARD -j limit-1815 --A FORWARD -j limit-1814 --A FORWARD -j limit-1813 --A FORWARD -j limit-1812 --A FORWARD -j limit-1811 --A FORWARD -j limit-1810 --A FORWARD -j limit-1809 --A FORWARD -j limit-1808 --A FORWARD -j limit-1807 --A FORWARD -j limit-1806 --A FORWARD -j limit-1805 --A FORWARD -j limit-1804 --A FORWARD -j limit-1803 --A FORWARD -j limit-1802 --A FORWARD -j limit-1801 --A FORWARD -j limit-1800 --A FORWARD -j limit-1799 --A FORWARD -j limit-1798 --A FORWARD -j limit-1797 --A FORWARD -j limit-1796 --A FORWARD -j limit-1795 --A FORWARD -j limit-1794 --A FORWARD -j limit-1793 --A FORWARD -j limit-1792 --A FORWARD -j limit-1791 --A FORWARD -j limit-1790 --A FORWARD -j limit-1789 --A FORWARD -j limit-1788 --A FORWARD -j limit-1787 --A FORWARD -j limit-1786 --A FORWARD -j limit-1785 --A FORWARD -j limit-1784 --A FORWARD -j limit-1783 --A FORWARD -j limit-1782 --A FORWARD -j limit-1781 --A FORWARD -j limit-1780 --A FORWARD -j limit-1779 --A FORWARD -j limit-1778 --A FORWARD -j limit-1777 --A FORWARD -j limit-1776 --A FORWARD -j limit-1775 --A FORWARD -j limit-1774 --A FORWARD -j limit-1773 --A FORWARD -j limit-1772 --A FORWARD -j limit-1771 --A FORWARD -j limit-1770 --A FORWARD -j limit-1769 --A FORWARD -j limit-1768 --A FORWARD -j limit-1767 --A FORWARD -j limit-1766 --A FORWARD -j limit-1765 --A FORWARD -j limit-1764 --A FORWARD -j limit-1763 --A FORWARD -j limit-1762 --A FORWARD -j limit-1761 --A FORWARD -j limit-1760 --A FORWARD -j limit-1759 --A FORWARD -j limit-1758 --A FORWARD -j limit-1757 --A FORWARD -j limit-1756 --A FORWARD -j limit-1755 --A FORWARD -j limit-1754 --A FORWARD -j limit-1753 --A FORWARD -j limit-1752 --A FORWARD -j limit-1751 --A FORWARD -j limit-1750 --A FORWARD -j limit-1749 --A FORWARD -j limit-1748 --A FORWARD -j limit-1747 --A FORWARD -j limit-1746 --A FORWARD -j limit-1745 --A FORWARD -j limit-1744 --A FORWARD -j limit-1743 --A FORWARD -j limit-1742 --A FORWARD -j limit-1741 --A FORWARD -j limit-1740 --A FORWARD -j limit-1739 --A FORWARD -j limit-1738 --A FORWARD -j limit-1737 --A FORWARD -j limit-1736 --A FORWARD -j limit-1735 --A FORWARD -j limit-1734 --A FORWARD -j limit-1733 --A FORWARD -j limit-1732 --A FORWARD -j limit-1731 --A FORWARD -j limit-1730 --A FORWARD -j limit-1729 --A FORWARD -j limit-1728 --A FORWARD -j limit-1727 --A FORWARD -j limit-1726 --A FORWARD -j limit-1725 --A FORWARD -j limit-1724 --A FORWARD -j limit-1723 --A FORWARD -j limit-1722 --A FORWARD -j limit-1721 --A FORWARD -j limit-1720 --A FORWARD -j limit-1719 --A FORWARD -j limit-1718 --A FORWARD -j limit-1717 --A FORWARD -j limit-1716 --A FORWARD -j limit-1715 --A FORWARD -j limit-1714 --A FORWARD -j limit-1713 --A FORWARD -j limit-1712 --A FORWARD -j limit-1711 --A FORWARD -j limit-1710 --A FORWARD -j limit-1709 --A FORWARD -j limit-1708 --A FORWARD -j limit-1707 --A FORWARD -j limit-1706 --A FORWARD -j limit-1705 --A FORWARD -j limit-1704 --A FORWARD -j limit-1703 --A FORWARD -j limit-1702 --A FORWARD -j limit-1701 --A FORWARD -j limit-1700 --A FORWARD -j limit-1699 --A FORWARD -j limit-1698 --A FORWARD -j limit-1697 --A FORWARD -j limit-1696 --A FORWARD -j limit-1695 --A FORWARD -j limit-1694 --A FORWARD -j limit-1693 --A FORWARD -j limit-1692 --A FORWARD -j limit-1691 --A FORWARD -j limit-1690 --A FORWARD -j limit-1689 --A FORWARD -j limit-1688 --A FORWARD -j limit-1687 --A FORWARD -j limit-1686 --A FORWARD -j limit-1685 --A FORWARD -j limit-1684 --A FORWARD -j limit-1683 --A FORWARD -j limit-1682 --A FORWARD -j limit-1681 --A FORWARD -j limit-1680 --A FORWARD -j limit-1679 --A FORWARD -j limit-1678 --A FORWARD -j limit-1677 --A FORWARD -j limit-1676 --A FORWARD -j limit-1675 --A FORWARD -j limit-1674 --A FORWARD -j limit-1673 --A FORWARD -j limit-1672 --A FORWARD -j limit-1671 --A FORWARD -j limit-1670 --A FORWARD -j limit-1669 --A FORWARD -j limit-1668 --A FORWARD -j limit-1667 --A FORWARD -j limit-1666 --A FORWARD -j limit-1665 --A FORWARD -j limit-1664 --A FORWARD -j limit-1663 --A FORWARD -j limit-1662 --A FORWARD -j limit-1661 --A FORWARD -j limit-1660 --A FORWARD -j limit-1659 --A FORWARD -j limit-1658 --A FORWARD -j limit-1657 --A FORWARD -j limit-1656 --A FORWARD -j limit-1655 --A FORWARD -j limit-1654 --A FORWARD -j limit-1653 --A FORWARD -j limit-1652 --A FORWARD -j limit-1651 --A FORWARD -j limit-1650 --A FORWARD -j limit-1649 --A FORWARD -j limit-1648 --A FORWARD -j limit-1647 --A FORWARD -j limit-1646 --A FORWARD -j limit-1645 --A FORWARD -j limit-1644 --A FORWARD -j limit-1643 --A FORWARD -j limit-1642 --A FORWARD -j limit-1641 --A FORWARD -j limit-1640 --A FORWARD -j limit-1639 --A FORWARD -j limit-1638 --A FORWARD -j limit-1637 --A FORWARD -j limit-1636 --A FORWARD -j limit-1635 --A FORWARD -j limit-1634 --A FORWARD -j limit-1633 --A FORWARD -j limit-1632 --A FORWARD -j limit-1631 --A FORWARD -j limit-1630 --A FORWARD -j limit-1629 --A FORWARD -j limit-1628 --A FORWARD -j limit-1627 --A FORWARD -j limit-1626 --A FORWARD -j limit-1625 --A FORWARD -j limit-1624 --A FORWARD -j limit-1623 --A FORWARD -j limit-1622 --A FORWARD -j limit-1621 --A FORWARD -j limit-1620 --A FORWARD -j limit-1619 --A FORWARD -j limit-1618 --A FORWARD -j limit-1617 --A FORWARD -j limit-1616 --A FORWARD -j limit-1615 --A FORWARD -j limit-1614 --A FORWARD -j limit-1613 --A FORWARD -j limit-1612 --A FORWARD -j limit-1611 --A FORWARD -j limit-1610 --A FORWARD -j limit-1609 --A FORWARD -j limit-1608 --A FORWARD -j limit-1607 --A FORWARD -j limit-1606 --A FORWARD -j limit-1605 --A FORWARD -j limit-1604 --A FORWARD -j limit-1603 --A FORWARD -j limit-1602 --A FORWARD -j limit-1601 --A FORWARD -j limit-1600 --A FORWARD -j limit-1599 --A FORWARD -j limit-1598 --A FORWARD -j limit-1597 --A FORWARD -j limit-1596 --A FORWARD -j limit-1595 --A FORWARD -j limit-1594 --A FORWARD -j limit-1593 --A FORWARD -j limit-1592 --A FORWARD -j limit-1591 --A FORWARD -j limit-1590 --A FORWARD -j limit-1589 --A FORWARD -j limit-1588 --A FORWARD -j limit-1587 --A FORWARD -j limit-1586 --A FORWARD -j limit-1585 --A FORWARD -j limit-1584 --A FORWARD -j limit-1583 --A FORWARD -j limit-1582 --A FORWARD -j limit-1581 --A FORWARD -j limit-1580 --A FORWARD -j limit-1579 --A FORWARD -j limit-1578 --A FORWARD -j limit-1577 --A FORWARD -j limit-1576 --A FORWARD -j limit-1575 --A FORWARD -j limit-1574 --A FORWARD -j limit-1573 --A FORWARD -j limit-1572 --A FORWARD -j limit-1571 --A FORWARD -j limit-1570 --A FORWARD -j limit-1569 --A FORWARD -j limit-1568 --A FORWARD -j limit-1567 --A FORWARD -j limit-1566 --A FORWARD -j limit-1565 --A FORWARD -j limit-1564 --A FORWARD -j limit-1563 --A FORWARD -j limit-1562 --A FORWARD -j limit-1561 --A FORWARD -j limit-1560 --A FORWARD -j limit-1559 --A FORWARD -j limit-1558 --A FORWARD -j limit-1557 --A FORWARD -j limit-1556 --A FORWARD -j limit-1555 --A FORWARD -j limit-1554 --A FORWARD -j limit-1553 --A FORWARD -j limit-1552 --A FORWARD -j limit-1551 --A FORWARD -j limit-1550 --A FORWARD -j limit-1549 --A FORWARD -j limit-1548 --A FORWARD -j limit-1547 --A FORWARD -j limit-1546 --A FORWARD -j limit-1545 --A FORWARD -j limit-1544 --A FORWARD -j limit-1543 --A FORWARD -j limit-1542 --A FORWARD -j limit-1541 --A FORWARD -j limit-1540 --A FORWARD -j limit-1539 --A FORWARD -j limit-1538 --A FORWARD -j limit-1537 --A FORWARD -j limit-1536 --A FORWARD -j limit-1535 --A FORWARD -j limit-1534 --A FORWARD -j limit-1533 --A FORWARD -j limit-1532 --A FORWARD -j limit-1531 --A FORWARD -j limit-1530 --A FORWARD -j limit-1529 --A FORWARD -j limit-1528 --A FORWARD -j limit-1527 --A FORWARD -j limit-1526 --A FORWARD -j limit-1525 --A FORWARD -j limit-1524 --A FORWARD -j limit-1523 --A FORWARD -j limit-1522 --A FORWARD -j limit-1521 --A FORWARD -j limit-1520 --A FORWARD -j limit-1519 --A FORWARD -j limit-1518 --A FORWARD -j limit-1517 --A FORWARD -j limit-1516 --A FORWARD -j limit-1515 --A FORWARD -j limit-1514 --A FORWARD -j limit-1513 --A FORWARD -j limit-1512 --A FORWARD -j limit-1511 --A FORWARD -j limit-1510 --A FORWARD -j limit-1509 --A FORWARD -j limit-1508 --A FORWARD -j limit-1507 --A FORWARD -j limit-1506 --A FORWARD -j limit-1505 --A FORWARD -j limit-1504 --A FORWARD -j limit-1503 --A FORWARD -j limit-1502 --A FORWARD -j limit-1501 --A FORWARD -j limit-1500 --A FORWARD -j limit-1499 --A FORWARD -j limit-1498 --A FORWARD -j limit-1497 --A FORWARD -j limit-1496 --A FORWARD -j limit-1495 --A FORWARD -j limit-1494 --A FORWARD -j limit-1493 --A FORWARD -j limit-1492 --A FORWARD -j limit-1491 --A FORWARD -j limit-1490 --A FORWARD -j limit-1489 --A FORWARD -j limit-1488 --A FORWARD -j limit-1487 --A FORWARD -j limit-1486 --A FORWARD -j limit-1485 --A FORWARD -j limit-1484 --A FORWARD -j limit-1483 --A FORWARD -j limit-1482 --A FORWARD -j limit-1481 --A FORWARD -j limit-1480 --A FORWARD -j limit-1479 --A FORWARD -j limit-1478 --A FORWARD -j limit-1477 --A FORWARD -j limit-1476 --A FORWARD -j limit-1475 --A FORWARD -j limit-1474 --A FORWARD -j limit-1473 --A FORWARD -j limit-1472 --A FORWARD -j limit-1471 --A FORWARD -j limit-1470 --A FORWARD -j limit-1469 --A FORWARD -j limit-1468 --A FORWARD -j limit-1467 --A FORWARD -j limit-1466 --A FORWARD -j limit-1465 --A FORWARD -j limit-1464 --A FORWARD -j limit-1463 --A FORWARD -j limit-1462 --A FORWARD -j limit-1461 --A FORWARD -j limit-1460 --A FORWARD -j limit-1459 --A FORWARD -j limit-1458 --A FORWARD -j limit-1457 --A FORWARD -j limit-1456 --A FORWARD -j limit-1455 --A FORWARD -j limit-1454 --A FORWARD -j limit-1453 --A FORWARD -j limit-1452 --A FORWARD -j limit-1451 --A FORWARD -j limit-1450 --A FORWARD -j limit-1449 --A FORWARD -j limit-1448 --A FORWARD -j limit-1447 --A FORWARD -j limit-1446 --A FORWARD -j limit-1445 --A FORWARD -j limit-1444 --A FORWARD -j limit-1443 --A FORWARD -j limit-1442 --A FORWARD -j limit-1441 --A FORWARD -j limit-1440 --A FORWARD -j limit-1439 --A FORWARD -j limit-1438 --A FORWARD -j limit-1437 --A FORWARD -j limit-1436 --A FORWARD -j limit-1435 --A FORWARD -j limit-1434 --A FORWARD -j limit-1433 --A FORWARD -j limit-1432 --A FORWARD -j limit-1431 --A FORWARD -j limit-1430 --A FORWARD -j limit-1429 --A FORWARD -j limit-1428 --A FORWARD -j limit-1427 --A FORWARD -j limit-1426 --A FORWARD -j limit-1425 --A FORWARD -j limit-1424 --A FORWARD -j limit-1423 --A FORWARD -j limit-1422 --A FORWARD -j limit-1421 --A FORWARD -j limit-1420 --A FORWARD -j limit-1419 --A FORWARD -j limit-1418 --A FORWARD -j limit-1417 --A FORWARD -j limit-1416 --A FORWARD -j limit-1415 --A FORWARD -j limit-1414 --A FORWARD -j limit-1413 --A FORWARD -j limit-1412 --A FORWARD -j limit-1411 --A FORWARD -j limit-1410 --A FORWARD -j limit-1409 --A FORWARD -j limit-1408 --A FORWARD -j limit-1407 --A FORWARD -j limit-1406 --A FORWARD -j limit-1405 --A FORWARD -j limit-1404 --A FORWARD -j limit-1403 --A FORWARD -j limit-1402 --A FORWARD -j limit-1401 --A FORWARD -j limit-1400 --A FORWARD -j limit-1399 --A FORWARD -j limit-1398 --A FORWARD -j limit-1397 --A FORWARD -j limit-1396 --A FORWARD -j limit-1395 --A FORWARD -j limit-1394 --A FORWARD -j limit-1393 --A FORWARD -j limit-1392 --A FORWARD -j limit-1391 --A FORWARD -j limit-1390 --A FORWARD -j limit-1389 --A FORWARD -j limit-1388 --A FORWARD -j limit-1387 --A FORWARD -j limit-1386 --A FORWARD -j limit-1385 --A FORWARD -j limit-1384 --A FORWARD -j limit-1383 --A FORWARD -j limit-1382 --A FORWARD -j limit-1381 --A FORWARD -j limit-1380 --A FORWARD -j limit-1379 --A FORWARD -j limit-1378 --A FORWARD -j limit-1377 --A FORWARD -j limit-1376 --A FORWARD -j limit-1375 --A FORWARD -j limit-1374 --A FORWARD -j limit-1373 --A FORWARD -j limit-1372 --A FORWARD -j limit-1371 --A FORWARD -j limit-1370 --A FORWARD -j limit-1369 --A FORWARD -j limit-1368 --A FORWARD -j limit-1367 --A FORWARD -j limit-1366 --A FORWARD -j limit-1365 --A FORWARD -j limit-1364 --A FORWARD -j limit-1363 --A FORWARD -j limit-1362 --A FORWARD -j limit-1361 --A FORWARD -j limit-1360 --A FORWARD -j limit-1359 --A FORWARD -j limit-1358 --A FORWARD -j limit-1357 --A FORWARD -j limit-1356 --A FORWARD -j limit-1355 --A FORWARD -j limit-1354 --A FORWARD -j limit-1353 --A FORWARD -j limit-1352 --A FORWARD -j limit-1351 --A FORWARD -j limit-1350 --A FORWARD -j limit-1349 --A FORWARD -j limit-1348 --A FORWARD -j limit-1347 --A FORWARD -j limit-1346 --A FORWARD -j limit-1345 --A FORWARD -j limit-1344 --A FORWARD -j limit-1343 --A FORWARD -j limit-1342 --A FORWARD -j limit-1341 --A FORWARD -j limit-1340 --A FORWARD -j limit-1339 --A FORWARD -j limit-1338 --A FORWARD -j limit-1337 --A FORWARD -j limit-1336 --A FORWARD -j limit-1335 --A FORWARD -j limit-1334 --A FORWARD -j limit-1333 --A FORWARD -j limit-1332 --A FORWARD -j limit-1331 --A FORWARD -j limit-1330 --A FORWARD -j limit-1329 --A FORWARD -j limit-1328 --A FORWARD -j limit-1327 --A FORWARD -j limit-1326 --A FORWARD -j limit-1325 --A FORWARD -j limit-1324 --A FORWARD -j limit-1323 --A FORWARD -j limit-1322 --A FORWARD -j limit-1321 --A FORWARD -j limit-1320 --A FORWARD -j limit-1319 --A FORWARD -j limit-1318 --A FORWARD -j limit-1317 --A FORWARD -j limit-1316 --A FORWARD -j limit-1315 --A FORWARD -j limit-1314 --A FORWARD -j limit-1313 --A FORWARD -j limit-1312 --A FORWARD -j limit-1311 --A FORWARD -j limit-1310 --A FORWARD -j limit-1309 --A FORWARD -j limit-1308 --A FORWARD -j limit-1307 --A FORWARD -j limit-1306 --A FORWARD -j limit-1305 --A FORWARD -j limit-1304 --A FORWARD -j limit-1303 --A FORWARD -j limit-1302 --A FORWARD -j limit-1301 --A FORWARD -j limit-1300 --A FORWARD -j limit-1299 --A FORWARD -j limit-1298 --A FORWARD -j limit-1297 --A FORWARD -j limit-1296 --A FORWARD -j limit-1295 --A FORWARD -j limit-1294 --A FORWARD -j limit-1293 --A FORWARD -j limit-1292 --A FORWARD -j limit-1291 --A FORWARD -j limit-1290 --A FORWARD -j limit-1289 --A FORWARD -j limit-1288 --A FORWARD -j limit-1287 --A FORWARD -j limit-1286 --A FORWARD -j limit-1285 --A FORWARD -j limit-1284 --A FORWARD -j limit-1283 --A FORWARD -j limit-1282 --A FORWARD -j limit-1281 --A FORWARD -j limit-1280 --A FORWARD -j limit-1279 --A FORWARD -j limit-1278 --A FORWARD -j limit-1277 --A FORWARD -j limit-1276 --A FORWARD -j limit-1275 --A FORWARD -j limit-1274 --A FORWARD -j limit-1273 --A FORWARD -j limit-1272 --A FORWARD -j limit-1271 --A FORWARD -j limit-1270 --A FORWARD -j limit-1269 --A FORWARD -j limit-1268 --A FORWARD -j limit-1267 --A FORWARD -j limit-1266 --A FORWARD -j limit-1265 --A FORWARD -j limit-1264 --A FORWARD -j limit-1263 --A FORWARD -j limit-1262 --A FORWARD -j limit-1261 --A FORWARD -j limit-1260 --A FORWARD -j limit-1259 --A FORWARD -j limit-1258 +-A FORWARD -j limit-2927 +-A FORWARD -j limit-2926 +-A FORWARD -j limit-2925 +-A FORWARD -j limit-2924 +-A FORWARD -j limit-2923 +-A FORWARD -j limit-2922 +-A FORWARD -j limit-2921 +-A FORWARD -j limit-2920 +-A FORWARD -j limit-2919 +-A FORWARD -j limit-2918 +-A FORWARD -j limit-2917 +-A FORWARD -j limit-2916 +-A FORWARD -j limit-2915 +-A FORWARD -j limit-2914 +-A FORWARD -j limit-2913 +-A FORWARD -j limit-2912 +-A FORWARD -j limit-2911 +-A FORWARD -j limit-2910 +-A FORWARD -j limit-2909 +-A FORWARD -j limit-2908 +-A FORWARD -j limit-2907 +-A FORWARD -j limit-2906 +-A FORWARD -j limit-2905 +-A FORWARD -j limit-2904 +-A FORWARD -j limit-2903 +-A FORWARD -j limit-2902 +-A FORWARD -j limit-2901 +-A FORWARD -j limit-2900 +-A FORWARD -j limit-2899 +-A FORWARD -j limit-2898 +-A FORWARD -j limit-2897 +-A FORWARD -j limit-2896 +-A FORWARD -j limit-2895 +-A FORWARD -j limit-2894 +-A FORWARD -j limit-2893 +-A FORWARD -j limit-2892 +-A FORWARD -j limit-2891 +-A FORWARD -j limit-2890 +-A FORWARD -j limit-2889 +-A FORWARD -j limit-2888 +-A FORWARD -j limit-2887 +-A FORWARD -j limit-2886 +-A FORWARD -j limit-2885 +-A FORWARD -j limit-2884 +-A FORWARD -j limit-2883 +-A FORWARD -j limit-2882 +-A FORWARD -j limit-2881 +-A FORWARD -j limit-2880 +-A FORWARD -j limit-2879 +-A FORWARD -j limit-2878 +-A FORWARD -j limit-2877 +-A FORWARD -j limit-2876 +-A FORWARD -j limit-2875 +-A FORWARD -j limit-2874 +-A FORWARD -j limit-2873 +-A FORWARD -j limit-2872 +-A FORWARD -j limit-2871 +-A FORWARD -j limit-2870 +-A FORWARD -j limit-2869 +-A FORWARD -j limit-2868 +-A FORWARD -j limit-2867 +-A FORWARD -j limit-2866 +-A FORWARD -j limit-2865 +-A FORWARD -j limit-2864 +-A FORWARD -j limit-2863 +-A FORWARD -j limit-2862 +-A FORWARD -j limit-2861 +-A FORWARD -j limit-2860 +-A FORWARD -j limit-2859 +-A FORWARD -j limit-2858 +-A FORWARD -j limit-2857 +-A FORWARD -j limit-2856 +-A FORWARD -j limit-2855 +-A FORWARD -j limit-2854 +-A FORWARD -j limit-2853 +-A FORWARD -j limit-2852 +-A FORWARD -j limit-2851 +-A FORWARD -j limit-2850 +-A FORWARD -j limit-2849 +-A FORWARD -j limit-2848 +-A FORWARD -j limit-2847 +-A FORWARD -j limit-2846 +-A FORWARD -j limit-2845 +-A FORWARD -j limit-2844 +-A FORWARD -j limit-2843 +-A FORWARD -j limit-2842 +-A FORWARD -j limit-2841 +-A FORWARD -j limit-2840 +-A FORWARD -j limit-2839 +-A FORWARD -j limit-2838 +-A FORWARD -j limit-2837 +-A FORWARD -j limit-2836 +-A FORWARD -j limit-2835 +-A FORWARD -j limit-2834 +-A FORWARD -j limit-2833 +-A FORWARD -j limit-2832 +-A FORWARD -j limit-2831 +-A FORWARD -j limit-2830 +-A FORWARD -j limit-2829 +-A FORWARD -j limit-2828 +-A FORWARD -j limit-2827 +-A FORWARD -j limit-2826 +-A FORWARD -j limit-2825 +-A FORWARD -j limit-2824 +-A FORWARD -j limit-2823 +-A FORWARD -j limit-2822 +-A FORWARD -j limit-2821 +-A FORWARD -j limit-2820 +-A FORWARD -j limit-2819 +-A FORWARD -j limit-2818 +-A FORWARD -j limit-2817 +-A FORWARD -j limit-2816 +-A FORWARD -j limit-2815 +-A FORWARD -j limit-2814 +-A FORWARD -j limit-2813 +-A FORWARD -j limit-2812 +-A FORWARD -j limit-2811 +-A FORWARD -j limit-2810 +-A FORWARD -j limit-2809 +-A FORWARD -j limit-2808 +-A FORWARD -j limit-2807 +-A FORWARD -j limit-2806 +-A FORWARD -j limit-2805 +-A FORWARD -j limit-2804 +-A FORWARD -j limit-2803 +-A FORWARD -j limit-2802 +-A FORWARD -j limit-2801 +-A FORWARD -j limit-2800 +-A FORWARD -j limit-2799 +-A FORWARD -j limit-2798 +-A FORWARD -j limit-2797 +-A FORWARD -j limit-2796 +-A FORWARD -j limit-2795 +-A FORWARD -j limit-2794 +-A FORWARD -j limit-2793 +-A FORWARD -j limit-2792 +-A FORWARD -j limit-2791 +-A FORWARD -j limit-2790 +-A FORWARD -j limit-2789 +-A FORWARD -j limit-2788 +-A FORWARD -j limit-2787 +-A FORWARD -j limit-2786 +-A FORWARD -j limit-2785 +-A FORWARD -j limit-2784 +-A FORWARD -j limit-2783 +-A FORWARD -j limit-2782 +-A FORWARD -j limit-2781 +-A FORWARD -j limit-2780 +-A FORWARD -j limit-2779 +-A FORWARD -j limit-2778 +-A FORWARD -j limit-2777 +-A FORWARD -j limit-2776 +-A FORWARD -j limit-2775 +-A FORWARD -j limit-2774 +-A FORWARD -j limit-2773 +-A FORWARD -j limit-2772 +-A FORWARD -j limit-2771 +-A FORWARD -j limit-2770 +-A FORWARD -j limit-2769 +-A FORWARD -j limit-2768 +-A FORWARD -j limit-2767 +-A FORWARD -j limit-2766 +-A FORWARD -j limit-2765 +-A FORWARD -j limit-2764 +-A FORWARD -j limit-2763 +-A FORWARD -j limit-2762 +-A FORWARD -j limit-2761 +-A FORWARD -j limit-2760 +-A FORWARD -j limit-2759 +-A FORWARD -j limit-2758 +-A FORWARD -j limit-2757 +-A FORWARD -j limit-2756 +-A FORWARD -j limit-2755 +-A FORWARD -j limit-2754 +-A FORWARD -j limit-2753 +-A FORWARD -j limit-2752 +-A FORWARD -j limit-2751 +-A FORWARD -j limit-2750 +-A FORWARD -j limit-2749 +-A FORWARD -j limit-2748 +-A FORWARD -j limit-2747 +-A FORWARD -j limit-2746 +-A FORWARD -j limit-2745 +-A FORWARD -j limit-2744 +-A FORWARD -j limit-2743 +-A FORWARD -j limit-2742 +-A FORWARD -j limit-2741 +-A FORWARD -j limit-2740 +-A FORWARD -j limit-2739 +-A FORWARD -j limit-2738 +-A FORWARD -j limit-2737 +-A FORWARD -j limit-2736 +-A FORWARD -j limit-2735 +-A FORWARD -j limit-2734 +-A FORWARD -j limit-2733 +-A FORWARD -j limit-2732 +-A FORWARD -j limit-2731 +-A FORWARD -j limit-2730 +-A FORWARD -j limit-2729 +-A FORWARD -j limit-2728 +-A FORWARD -j limit-2727 +-A FORWARD -j limit-2726 +-A FORWARD -j limit-2725 +-A FORWARD -j limit-2724 +-A FORWARD -j limit-2723 +-A FORWARD -j limit-2722 +-A FORWARD -j limit-2721 +-A FORWARD -j limit-2720 +-A FORWARD -j limit-2719 +-A FORWARD -j limit-2718 +-A FORWARD -j limit-2717 +-A FORWARD -j limit-2716 +-A FORWARD -j limit-2715 +-A FORWARD -j limit-2714 +-A FORWARD -j limit-2713 +-A FORWARD -j limit-2712 +-A FORWARD -j limit-2711 +-A FORWARD -j limit-2710 +-A FORWARD -j limit-2709 +-A FORWARD -j limit-2708 +-A FORWARD -j limit-2707 +-A FORWARD -j limit-2706 +-A FORWARD -j limit-2705 +-A FORWARD -j limit-2704 +-A FORWARD -j limit-2703 +-A FORWARD -j limit-2702 +-A FORWARD -j limit-2701 +-A FORWARD -j limit-2700 +-A FORWARD -j limit-2699 +-A FORWARD -j limit-2698 +-A FORWARD -j limit-2697 +-A FORWARD -j limit-2696 +-A FORWARD -j limit-2695 +-A FORWARD -j limit-2694 +-A FORWARD -j limit-2693 +-A FORWARD -j limit-2692 +-A FORWARD -j limit-2691 +-A FORWARD -j limit-2690 +-A FORWARD -j limit-2689 +-A FORWARD -j limit-2688 +-A FORWARD -j limit-2687 +-A FORWARD -j limit-2686 +-A FORWARD -j limit-2685 +-A FORWARD -j limit-2684 +-A FORWARD -j limit-2683 +-A FORWARD -j limit-2682 +-A FORWARD -j limit-2681 +-A FORWARD -j limit-2680 +-A FORWARD -j limit-2679 +-A FORWARD -j limit-2678 +-A FORWARD -j limit-2677 +-A FORWARD -j limit-2676 +-A FORWARD -j limit-2675 +-A FORWARD -j limit-2674 +-A FORWARD -j limit-2673 +-A FORWARD -j limit-2672 +-A FORWARD -j limit-2671 +-A FORWARD -j limit-2670 +-A FORWARD -j limit-2669 +-A FORWARD -j limit-2668 +-A FORWARD -j limit-2667 +-A FORWARD -j limit-2666 +-A FORWARD -j limit-2665 +-A FORWARD -j limit-2664 +-A FORWARD -j limit-2663 +-A FORWARD -j limit-2662 +-A FORWARD -j limit-2661 +-A FORWARD -j limit-2660 +-A FORWARD -j limit-2659 +-A FORWARD -j limit-2658 +-A FORWARD -j limit-2657 +-A FORWARD -j limit-2656 +-A FORWARD -j limit-2655 +-A FORWARD -j limit-2654 +-A FORWARD -j limit-2653 +-A FORWARD -j limit-2652 +-A FORWARD -j limit-2651 +-A FORWARD -j limit-2650 +-A FORWARD -j limit-2649 +-A FORWARD -j limit-2648 +-A FORWARD -j limit-2647 +-A FORWARD -j limit-2646 +-A FORWARD -j limit-2645 +-A FORWARD -j limit-2644 +-A FORWARD -j limit-2643 +-A FORWARD -j limit-2642 +-A FORWARD -j limit-2641 +-A FORWARD -j limit-2640 +-A FORWARD -j limit-2639 +-A FORWARD -j limit-2638 +-A FORWARD -j limit-2637 +-A FORWARD -j limit-2636 +-A FORWARD -j limit-2635 +-A FORWARD -j limit-2634 +-A FORWARD -j limit-2633 +-A FORWARD -j limit-2632 +-A FORWARD -j limit-2631 +-A FORWARD -j limit-2630 +-A FORWARD -j limit-2629 +-A FORWARD -j limit-2628 +-A FORWARD -j limit-2627 +-A FORWARD -j limit-2626 +-A FORWARD -j limit-2625 +-A FORWARD -j limit-2624 +-A FORWARD -j limit-2623 +-A FORWARD -j limit-2622 +-A FORWARD -j limit-2621 +-A FORWARD -j limit-2620 +-A FORWARD -j limit-2619 +-A FORWARD -j limit-2618 +-A FORWARD -j limit-2617 +-A FORWARD -j limit-2616 +-A FORWARD -j limit-2615 +-A FORWARD -j limit-2614 +-A FORWARD -j limit-2613 +-A FORWARD -j limit-2612 +-A FORWARD -j limit-2611 +-A FORWARD -j limit-2610 +-A FORWARD -j limit-2609 +-A FORWARD -j limit-2608 +-A FORWARD -j limit-2607 +-A FORWARD -j limit-2606 +-A FORWARD -j limit-2605 +-A FORWARD -j limit-2604 +-A FORWARD -j limit-2603 +-A FORWARD -j limit-2602 +-A FORWARD -j limit-2601 +-A FORWARD -j limit-2600 +-A FORWARD -j limit-2599 +-A FORWARD -j limit-2598 +-A FORWARD -j limit-2597 +-A FORWARD -j limit-2596 +-A FORWARD -j limit-2595 +-A FORWARD -j limit-2594 +-A FORWARD -j limit-2593 +-A FORWARD -j limit-2592 +-A FORWARD -j limit-2591 +-A FORWARD -j limit-2590 +-A FORWARD -j limit-2589 +-A FORWARD -j limit-2588 +-A FORWARD -j limit-2587 +-A FORWARD -j limit-2586 +-A FORWARD -j limit-2585 +-A FORWARD -j limit-2584 +-A FORWARD -j limit-2583 +-A FORWARD -j limit-2582 +-A FORWARD -j limit-2581 +-A FORWARD -j limit-2580 +-A FORWARD -j limit-2579 +-A FORWARD -j limit-2578 +-A FORWARD -j limit-2577 +-A FORWARD -j limit-2576 +-A FORWARD -j limit-2575 +-A FORWARD -j limit-2574 +-A FORWARD -j limit-2573 +-A FORWARD -j limit-2572 +-A FORWARD -j limit-2571 +-A FORWARD -j limit-2570 +-A FORWARD -j limit-2569 +-A FORWARD -j limit-2568 +-A FORWARD -j limit-2567 +-A FORWARD -j limit-2566 +-A FORWARD -j limit-2565 +-A FORWARD -j limit-2564 +-A FORWARD -j limit-2563 +-A FORWARD -j limit-2562 +-A FORWARD -j limit-2561 +-A FORWARD -j limit-2560 +-A FORWARD -j limit-2559 +-A FORWARD -j limit-2558 +-A FORWARD -j limit-2557 +-A FORWARD -j limit-2556 +-A FORWARD -j limit-2555 +-A FORWARD -j limit-2554 +-A FORWARD -j limit-2553 +-A FORWARD -j limit-2552 +-A FORWARD -j limit-2551 +-A FORWARD -j limit-2550 +-A FORWARD -j limit-2549 +-A FORWARD -j limit-2548 +-A FORWARD -j limit-2547 +-A FORWARD -j limit-2546 +-A FORWARD -j limit-2545 +-A FORWARD -j limit-2544 +-A FORWARD -j limit-2543 +-A FORWARD -j limit-2542 +-A FORWARD -j limit-2541 +-A FORWARD -j limit-2540 +-A FORWARD -j limit-2539 +-A FORWARD -j limit-2538 +-A FORWARD -j limit-2537 +-A FORWARD -j limit-2536 +-A FORWARD -j limit-2535 +-A FORWARD -j limit-2534 +-A FORWARD -j limit-2533 +-A FORWARD -j limit-2532 +-A FORWARD -j limit-2531 +-A FORWARD -j limit-2530 +-A FORWARD -j limit-2529 +-A FORWARD -j limit-2528 +-A FORWARD -j limit-2527 +-A FORWARD -j limit-2526 +-A FORWARD -j limit-2525 +-A FORWARD -j limit-2524 +-A FORWARD -j limit-2523 +-A FORWARD -j limit-2522 +-A FORWARD -j limit-2521 +-A FORWARD -j limit-2520 +-A FORWARD -j limit-2519 +-A FORWARD -j limit-2518 +-A FORWARD -j limit-2517 +-A FORWARD -j limit-2516 +-A FORWARD -j limit-2515 +-A FORWARD -j limit-2514 +-A FORWARD -j limit-2513 +-A FORWARD -j limit-2512 +-A FORWARD -j limit-2511 +-A FORWARD -j limit-2510 +-A FORWARD -j limit-2509 +-A FORWARD -j limit-2508 +-A FORWARD -j limit-2507 +-A FORWARD -j limit-2506 +-A FORWARD -j limit-2505 +-A FORWARD -j limit-2504 +-A FORWARD -j limit-2503 +-A FORWARD -j limit-2502 +-A FORWARD -j limit-2501 +-A FORWARD -j limit-2500 +-A FORWARD -j limit-2499 +-A FORWARD -j limit-2498 +-A FORWARD -j limit-2497 +-A FORWARD -j limit-2496 +-A FORWARD -j limit-2495 +-A FORWARD -j limit-2494 +-A FORWARD -j limit-2493 +-A FORWARD -j limit-2492 +-A FORWARD -j limit-2491 +-A FORWARD -j limit-2490 +-A FORWARD -j limit-2489 +-A FORWARD -j limit-2488 +-A FORWARD -j limit-2487 +-A FORWARD -j limit-2486 +-A FORWARD -j limit-2485 +-A FORWARD -j limit-2484 +-A FORWARD -j limit-2483 +-A FORWARD -j limit-2482 +-A FORWARD -j limit-2481 +-A FORWARD -j limit-2480 +-A FORWARD -j limit-2479 +-A FORWARD -j limit-2478 +-A FORWARD -j limit-2477 +-A FORWARD -j limit-2476 +-A FORWARD -j limit-2475 +-A FORWARD -j limit-2474 +-A FORWARD -j limit-2473 +-A FORWARD -j limit-2472 +-A FORWARD -j limit-2471 +-A FORWARD -j limit-2470 +-A FORWARD -j limit-2469 +-A FORWARD -j limit-2468 +-A FORWARD -j limit-2467 +-A FORWARD -j limit-2466 +-A FORWARD -j limit-2465 +-A FORWARD -j limit-2464 +-A FORWARD -j limit-2463 +-A FORWARD -j limit-2462 +-A FORWARD -j limit-2461 +-A FORWARD -j limit-2460 +-A FORWARD -j limit-2459 +-A FORWARD -j limit-2458 +-A FORWARD -j limit-2457 +-A FORWARD -j limit-2456 +-A FORWARD -j limit-2455 +-A FORWARD -j limit-2454 +-A FORWARD -j limit-2453 +-A FORWARD -j limit-2452 +-A FORWARD -j limit-2451 +-A FORWARD -j limit-2450 +-A FORWARD -j limit-2449 +-A FORWARD -j limit-2448 +-A FORWARD -j limit-2447 +-A FORWARD -j limit-2446 +-A FORWARD -j limit-2445 +-A FORWARD -j limit-2444 +-A FORWARD -j limit-2443 +-A FORWARD -j limit-2442 +-A FORWARD -j limit-2441 +-A FORWARD -j limit-2440 +-A FORWARD -j limit-2439 +-A FORWARD -j limit-2438 +-A FORWARD -j limit-2437 +-A FORWARD -j limit-2436 +-A FORWARD -j limit-2435 +-A FORWARD -j limit-2434 +-A FORWARD -j limit-2433 +-A FORWARD -j limit-2432 +-A FORWARD -j limit-2431 +-A FORWARD -j limit-2430 +-A FORWARD -j limit-2429 +-A FORWARD -j limit-2428 +-A FORWARD -j limit-2427 +-A FORWARD -j limit-2426 +-A FORWARD -j limit-2425 +-A FORWARD -j limit-2424 +-A FORWARD -j limit-2423 +-A FORWARD -j limit-2422 +-A FORWARD -j limit-2421 +-A FORWARD -j limit-2420 +-A FORWARD -j limit-2419 +-A FORWARD -j limit-2418 +-A FORWARD -j limit-2417 +-A FORWARD -j limit-2416 +-A FORWARD -j limit-2415 +-A FORWARD -j limit-2414 +-A FORWARD -j limit-2413 +-A FORWARD -j limit-2412 +-A FORWARD -j limit-2411 +-A FORWARD -j limit-2410 +-A FORWARD -j limit-2409 +-A FORWARD -j limit-2408 +-A FORWARD -j limit-2407 +-A FORWARD -j limit-2406 +-A FORWARD -j limit-2405 +-A FORWARD -j limit-2404 +-A FORWARD -j limit-2403 +-A FORWARD -j limit-2402 +-A FORWARD -j limit-2401 +-A FORWARD -j limit-2400 +-A FORWARD -j limit-2399 +-A FORWARD -j limit-2398 +-A FORWARD -j limit-2397 +-A FORWARD -j limit-2396 +-A FORWARD -j limit-2395 +-A FORWARD -j limit-2394 +-A FORWARD -j limit-2393 +-A FORWARD -j limit-2392 +-A FORWARD -j limit-2391 +-A FORWARD -j limit-2390 +-A FORWARD -j limit-2389 +-A FORWARD -j limit-2388 +-A FORWARD -j limit-2387 +-A FORWARD -j limit-2386 +-A FORWARD -j limit-2385 +-A FORWARD -j limit-2384 +-A FORWARD -j limit-2383 +-A FORWARD -j limit-2382 +-A FORWARD -j limit-2381 +-A FORWARD -j limit-2380 +-A FORWARD -j limit-2379 +-A FORWARD -j limit-2378 +-A FORWARD -j limit-2377 +-A FORWARD -j limit-2376 +-A FORWARD -j limit-2375 +-A FORWARD -j limit-2374 +-A FORWARD -j limit-2373 +-A FORWARD -j limit-2372 +-A FORWARD -j limit-2371 +-A FORWARD -j limit-2370 +-A FORWARD -j limit-2369 +-A FORWARD -j limit-2368 +-A FORWARD -j limit-2367 +-A FORWARD -j limit-2366 +-A FORWARD -j limit-2365 +-A FORWARD -j limit-2364 +-A FORWARD -j limit-2363 +-A FORWARD -j limit-2362 +-A FORWARD -j limit-2361 +-A FORWARD -j limit-2360 +-A FORWARD -j limit-2359 +-A FORWARD -j limit-2358 +-A FORWARD -j limit-2357 +-A FORWARD -j limit-2356 +-A FORWARD -j limit-2355 +-A FORWARD -j limit-2354 +-A FORWARD -j limit-2353 +-A FORWARD -j limit-2352 +-A FORWARD -j limit-2351 +-A FORWARD -j limit-2350 +-A FORWARD -j limit-2349 +-A FORWARD -j limit-2348 +-A FORWARD -j limit-2347 +-A FORWARD -j limit-2346 +-A FORWARD -j limit-2345 +-A FORWARD -j limit-2344 +-A FORWARD -j limit-2343 +-A FORWARD -j limit-2342 +-A FORWARD -j limit-2341 +-A FORWARD -j limit-2340 +-A FORWARD -j limit-2339 +-A FORWARD -j limit-2338 +-A FORWARD -j limit-2337 +-A FORWARD -j limit-2336 +-A FORWARD -j limit-2335 +-A FORWARD -j limit-2334 +-A FORWARD -j limit-2333 +-A FORWARD -j limit-2332 +-A FORWARD -j limit-2331 +-A FORWARD -j limit-2330 +-A FORWARD -j limit-2329 +-A FORWARD -j limit-2328 +-A FORWARD -j limit-2327 +-A FORWARD -j limit-2326 +-A FORWARD -j limit-2325 +-A FORWARD -j limit-2324 +-A FORWARD -j limit-2323 +-A FORWARD -j limit-2322 +-A FORWARD -j limit-2321 +-A FORWARD -j limit-2320 +-A FORWARD -j limit-2319 +-A FORWARD -j limit-2318 +-A FORWARD -j limit-2317 +-A FORWARD -j limit-2316 +-A FORWARD -j limit-2315 +-A FORWARD -j limit-2314 +-A FORWARD -j limit-2313 +-A FORWARD -j limit-2312 +-A FORWARD -j limit-2311 +-A FORWARD -j limit-2310 +-A FORWARD -j limit-2309 +-A FORWARD -j limit-2308 +-A FORWARD -j limit-2307 +-A FORWARD -j limit-2306 +-A FORWARD -j limit-2305 +-A FORWARD -j limit-2304 +-A FORWARD -j limit-2303 +-A FORWARD -j limit-2302 +-A FORWARD -j limit-2301 +-A FORWARD -j limit-2300 +-A FORWARD -j limit-2299 +-A FORWARD -j limit-2298 +-A FORWARD -j limit-2297 +-A FORWARD -j limit-2296 +-A FORWARD -j limit-2295 +-A FORWARD -j limit-2294 +-A FORWARD -j limit-2293 +-A FORWARD -j limit-2292 +-A FORWARD -j limit-2291 +-A FORWARD -j limit-2290 +-A FORWARD -j limit-2289 +-A FORWARD -j limit-2288 +-A FORWARD -j limit-2287 +-A FORWARD -j limit-2286 +-A FORWARD -j limit-2285 +-A FORWARD -j limit-2284 +-A FORWARD -j limit-2283 +-A FORWARD -j limit-2282 +-A FORWARD -j limit-2281 +-A FORWARD -j limit-2280 +-A FORWARD -j limit-2279 +-A FORWARD -j limit-2278 +-A FORWARD -j limit-2277 +-A FORWARD -j limit-2276 +-A FORWARD -j limit-2275 +-A FORWARD -j limit-2274 +-A FORWARD -j limit-2273 +-A FORWARD -j limit-2272 +-A FORWARD -j limit-2271 +-A FORWARD -j limit-2270 +-A FORWARD -j limit-2269 +-A FORWARD -j limit-2268 +-A FORWARD -j limit-2267 +-A FORWARD -j limit-2266 +-A FORWARD -j limit-2265 +-A FORWARD -j limit-2264 +-A FORWARD -j limit-2263 +-A FORWARD -j limit-2262 +-A FORWARD -j limit-2261 +-A FORWARD -j limit-2260 +-A FORWARD -j limit-2259 +-A FORWARD -j limit-2258 +-A FORWARD -j limit-2257 +-A FORWARD -j limit-2256 +-A FORWARD -j limit-2255 +-A FORWARD -j limit-2254 +-A FORWARD -j limit-2253 +-A FORWARD -j limit-2252 +-A FORWARD -j limit-2251 +-A FORWARD -j limit-2250 +-A FORWARD -j limit-2249 +-A FORWARD -j limit-2248 +-A FORWARD -j limit-2247 +-A FORWARD -j limit-2246 +-A FORWARD -j limit-2245 +-A FORWARD -j limit-2244 +-A FORWARD -j limit-2243 +-A FORWARD -j limit-2242 +-A FORWARD -j limit-2241 +-A FORWARD -j limit-2240 +-A FORWARD -j limit-2239 +-A FORWARD -j limit-2238 +-A FORWARD -j limit-2237 +-A FORWARD -j limit-2236 +-A FORWARD -j limit-2235 +-A FORWARD -j limit-2234 +-A FORWARD -j limit-2233 +-A FORWARD -j limit-2232 +-A FORWARD -j limit-2231 +-A FORWARD -j limit-2230 +-A FORWARD -j limit-2229 +-A FORWARD -j limit-2228 +-A FORWARD -j limit-2227 +-A FORWARD -j limit-2226 +-A FORWARD -j limit-2225 +-A FORWARD -j limit-2224 +-A FORWARD -j limit-2223 +-A FORWARD -j limit-2222 +-A FORWARD -j limit-2221 +-A FORWARD -j limit-2220 +-A FORWARD -j limit-2219 +-A FORWARD -j limit-2218 +-A FORWARD -j limit-2217 +-A FORWARD -j limit-2216 +-A FORWARD -j limit-2215 +-A FORWARD -j limit-2214 +-A FORWARD -j limit-2213 +-A FORWARD -j limit-2212 +-A FORWARD -j limit-2211 +-A FORWARD -j limit-2210 +-A FORWARD -j limit-2209 +-A FORWARD -j limit-2208 +-A FORWARD -j limit-2207 +-A FORWARD -j limit-2206 +-A FORWARD -j limit-2205 +-A FORWARD -j limit-2204 +-A FORWARD -j limit-2203 +-A FORWARD -j limit-2202 +-A FORWARD -j limit-2201 +-A FORWARD -j limit-2200 +-A FORWARD -j limit-2199 +-A FORWARD -j limit-2198 +-A FORWARD -j limit-2197 +-A FORWARD -j limit-2196 +-A FORWARD -j limit-2195 +-A FORWARD -j limit-2194 +-A FORWARD -j limit-2193 +-A FORWARD -j limit-2192 +-A FORWARD -j limit-2191 +-A FORWARD -j limit-2190 +-A FORWARD -j limit-2189 +-A FORWARD -j limit-2188 +-A FORWARD -j limit-2187 +-A FORWARD -j limit-2186 +-A FORWARD -j limit-2185 +-A FORWARD -j limit-2184 +-A FORWARD -j limit-2183 +-A FORWARD -j limit-2182 +-A FORWARD -j limit-2181 +-A FORWARD -j limit-2180 +-A FORWARD -j limit-2179 +-A FORWARD -j limit-2178 +-A FORWARD -j limit-2177 +-A FORWARD -j limit-2176 +-A FORWARD -j limit-2175 +-A FORWARD -j limit-2174 +-A FORWARD -j limit-2173 +-A FORWARD -j limit-2172 +-A FORWARD -j limit-2171 +-A FORWARD -j limit-2170 +-A FORWARD -j limit-2169 +-A FORWARD -j limit-2168 +-A FORWARD -j limit-2167 +-A FORWARD -j limit-2166 +-A FORWARD -j limit-2165 +-A FORWARD -j limit-2164 +-A FORWARD -j limit-2163 +-A FORWARD -j limit-2162 +-A FORWARD -j limit-2161 +-A FORWARD -j limit-2160 +-A FORWARD -j limit-2159 +-A FORWARD -j limit-2158 +-A FORWARD -j limit-2157 +-A FORWARD -j limit-2156 +-A FORWARD -j limit-2155 +-A FORWARD -j limit-2154 +-A FORWARD -j limit-2153 +-A FORWARD -j limit-2152 +-A FORWARD -j limit-2151 +-A FORWARD -j limit-2150 +-A FORWARD -j limit-2149 +-A FORWARD -j limit-2148 +-A FORWARD -j limit-2147 +-A FORWARD -j limit-2146 +-A FORWARD -j limit-2145 +-A FORWARD -j limit-2144 +-A FORWARD -j limit-2143 +-A FORWARD -j limit-2142 +-A FORWARD -j limit-2141 +-A FORWARD -j limit-2140 +-A FORWARD -j limit-2139 +-A FORWARD -j limit-2138 +-A FORWARD -j limit-2137 +-A FORWARD -j limit-2136 +-A FORWARD -j limit-2135 +-A FORWARD -j limit-2134 +-A FORWARD -j limit-2133 +-A FORWARD -j limit-2132 +-A FORWARD -j limit-2131 +-A FORWARD -j limit-2130 +-A FORWARD -j limit-2129 +-A FORWARD -j limit-2128 +-A FORWARD -j limit-2127 +-A FORWARD -j limit-2126 +-A FORWARD -j limit-2125 +-A FORWARD -j limit-2124 +-A FORWARD -j limit-2123 +-A FORWARD -j limit-2122 +-A FORWARD -j limit-2121 +-A FORWARD -j limit-2120 +-A FORWARD -j limit-2119 +-A FORWARD -j limit-2118 +-A FORWARD -j limit-2117 +-A FORWARD -j limit-2116 +-A FORWARD -j limit-2115 +-A FORWARD -j limit-2114 +-A FORWARD -j limit-2113 +-A FORWARD -j limit-2112 +-A FORWARD -j limit-2111 +-A FORWARD -j limit-2110 +-A FORWARD -j limit-2109 +-A FORWARD -j limit-2108 +-A FORWARD -j limit-2107 +-A FORWARD -j limit-2106 +-A FORWARD -j limit-2105 +-A FORWARD -j limit-2104 +-A FORWARD -j limit-2103 +-A FORWARD -j limit-2102 +-A FORWARD -j limit-2101 +-A FORWARD -j limit-2100 +-A FORWARD -j limit-2099 +-A FORWARD -j limit-2098 +-A FORWARD -j limit-2097 +-A FORWARD -j limit-2096 +-A FORWARD -j limit-2095 +-A FORWARD -j limit-2094 +-A FORWARD -j limit-2093 +-A FORWARD -j limit-2092 +-A FORWARD -j limit-2091 +-A FORWARD -j limit-2090 +-A FORWARD -j limit-2089 +-A FORWARD -j limit-2088 +-A FORWARD -j limit-2087 +-A FORWARD -j limit-2086 +-A FORWARD -j limit-2085 +-A FORWARD -j limit-2084 +-A FORWARD -j limit-2083 +-A FORWARD -j limit-2082 +-A FORWARD -j limit-2081 +-A FORWARD -j limit-2080 +-A FORWARD -j limit-2079 +-A FORWARD -j limit-2078 +-A FORWARD -j limit-2077 +-A FORWARD -j limit-2076 +-A FORWARD -j limit-2075 +-A FORWARD -j limit-2074 +-A FORWARD -j limit-2073 +-A FORWARD -j limit-2072 +-A FORWARD -j limit-2071 +-A FORWARD -j limit-2070 +-A FORWARD -j limit-2069 +-A FORWARD -j limit-2068 +-A FORWARD -j limit-2067 +-A FORWARD -j limit-2066 +-A FORWARD -j limit-2065 +-A FORWARD -j limit-2064 +-A FORWARD -j limit-2063 +-A FORWARD -j limit-2062 +-A FORWARD -j limit-2061 +-A FORWARD -j limit-2060 +-A FORWARD -j limit-2059 +-A FORWARD -j limit-2058 +-A FORWARD -j limit-2057 +-A FORWARD -j limit-2056 +-A FORWARD -j limit-2055 +-A FORWARD -j limit-2054 +-A FORWARD -j limit-2053 +-A FORWARD -j limit-2052 +-A FORWARD -j limit-2051 +-A FORWARD -j limit-2050 +-A FORWARD -j limit-2049 +-A FORWARD -j limit-2048 +-A FORWARD -j limit-2047 +-A FORWARD -j limit-2046 +-A FORWARD -j limit-2045 +-A FORWARD -j limit-2044 +-A FORWARD -j limit-2043 +-A FORWARD -j limit-2042 +-A FORWARD -j limit-2041 +-A FORWARD -j limit-2040 +-A FORWARD -j limit-2039 +-A FORWARD -j limit-2038 +-A FORWARD -j limit-2037 +-A FORWARD -j limit-2036 +-A FORWARD -j limit-2035 +-A FORWARD -j limit-2034 +-A FORWARD -j limit-2033 +-A FORWARD -j limit-2032 +-A FORWARD -j limit-2031 +-A FORWARD -j limit-2030 +-A FORWARD -j limit-2029 +-A FORWARD -j limit-2028 +-A FORWARD -j limit-2027 +-A FORWARD -j limit-2026 +-A FORWARD -j limit-2025 +-A FORWARD -j limit-2024 +-A FORWARD -j limit-2023 +-A FORWARD -j limit-2022 +-A FORWARD -j limit-2021 +-A FORWARD -j limit-2020 +-A FORWARD -j limit-2019 +-A FORWARD -j limit-2018 +-A FORWARD -j limit-2017 +-A FORWARD -j limit-2016 +-A FORWARD -j limit-2015 +-A FORWARD -j limit-2014 +-A FORWARD -j limit-2013 +-A FORWARD -j limit-2012 +-A FORWARD -j limit-2011 +-A FORWARD -j limit-2010 +-A FORWARD -j limit-2009 +-A FORWARD -j limit-2008 +-A FORWARD -j limit-2007 +-A FORWARD -j limit-2006 +-A FORWARD -j limit-2005 +-A FORWARD -j limit-2004 +-A FORWARD -j limit-2003 +-A FORWARD -j limit-2002 +-A FORWARD -j limit-2001 +-A FORWARD -j limit-2000 +-A FORWARD -j limit-1999 +-A FORWARD -j limit-1998 +-A FORWARD -j limit-1997 +-A FORWARD -j limit-1996 +-A FORWARD -j limit-1995 +-A FORWARD -j limit-1994 +-A FORWARD -j limit-1993 +-A FORWARD -j limit-1992 +-A FORWARD -j limit-1991 +-A FORWARD -j limit-1990 +-A FORWARD -j limit-1989 +-A FORWARD -j limit-1988 +-A FORWARD -j limit-1987 +-A FORWARD -j limit-1986 +-A FORWARD -j limit-1985 +-A FORWARD -j limit-1984 +-A FORWARD -j limit-1983 +-A FORWARD -j limit-1982 +-A FORWARD -j limit-1981 +-A FORWARD -j limit-1980 +-A FORWARD -j limit-1979 +-A FORWARD -j limit-1978 +-A FORWARD -j limit-1977 +-A FORWARD -j limit-1976 +-A FORWARD -j limit-1975 +-A FORWARD -j limit-1974 +-A FORWARD -j limit-1973 +-A FORWARD -j limit-1972 +-A FORWARD -j limit-1971 +-A FORWARD -j limit-1970 +-A FORWARD -j limit-1969 +-A FORWARD -j limit-1968 +-A FORWARD -j limit-1967 +-A FORWARD -j limit-1966 +-A FORWARD -j limit-1965 +-A FORWARD -j limit-1964 +-A FORWARD -j limit-1963 +-A FORWARD -j limit-1962 +-A FORWARD -j limit-1961 +-A FORWARD -j limit-1960 +-A FORWARD -j limit-1959 +-A FORWARD -j limit-1958 +-A FORWARD -j limit-1957 +-A FORWARD -j limit-1956 +-A FORWARD -j limit-1955 +-A FORWARD -j limit-1954 +-A FORWARD -j limit-1953 +-A FORWARD -j limit-1952 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 @@ -41056,334 +67758,863 @@ hash:net family inet -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-626 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-627 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-628 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-629 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-630 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-631 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-632 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-633 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-634 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-635 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-636 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-637 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-638 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-639 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-640 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-641 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-642 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-643 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-644 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-645 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-646 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-647 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-648 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-649 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-650 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-651 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-652 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-653 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-654 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-655 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-656 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-657 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-658 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-659 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-660 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-661 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-662 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-663 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-664 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-665 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-666 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-667 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-668 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-669 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-670 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-671 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-672 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-673 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-674 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-675 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-676 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-677 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-678 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-679 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-680 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-681 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-682 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-683 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-684 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-685 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-686 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-687 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-688 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-689 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-690 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-691 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-692 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-693 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-694 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-695 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-696 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-697 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-698 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-699 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-700 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-701 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-702 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-703 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-704 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-705 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-706 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-707 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-708 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-709 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-710 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-711 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-712 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-713 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-714 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-715 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-716 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-717 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-718 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-719 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-720 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-721 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-722 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-723 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-724 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-725 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-726 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-727 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-728 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-729 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-730 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-731 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-732 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-733 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-734 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-735 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-736 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-737 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-738 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-739 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-740 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-741 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-742 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-743 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-744 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-745 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-746 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-747 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-748 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-749 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-750 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-751 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-752 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-753 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-754 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-755 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-756 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-757 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-758 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-759 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-760 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-761 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-762 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-763 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-764 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-765 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-766 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-767 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-768 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-769 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-770 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-771 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-772 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-773 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-774 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-775 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-776 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-777 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-778 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-779 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-780 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-781 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-782 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-783 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-784 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-785 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-786 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-787 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-788 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-789 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-790 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-791 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-792 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-793 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-794 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-795 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-796 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-797 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-798 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-799 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-800 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-801 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-802 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-803 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-804 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-805 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-806 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-807 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-808 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-809 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-810 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-811 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-812 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-813 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-814 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-815 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-816 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-817 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-818 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-819 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-820 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-821 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-822 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-823 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-824 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-825 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-826 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-827 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-828 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-829 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-830 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-831 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-832 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-833 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-834 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-835 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-836 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-837 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-838 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-839 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-840 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-841 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-842 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-843 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-844 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-845 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-846 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-847 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-848 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-849 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-850 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-851 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-852 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-853 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-854 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-855 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-856 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-857 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-858 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-859 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-860 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-861 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-862 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-863 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-864 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-865 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-866 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-867 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-868 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-869 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-870 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-871 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-872 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-873 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-874 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-875 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-876 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-877 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-878 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-879 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-880 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-881 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-882 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-883 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-884 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-885 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-886 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-887 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-888 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-889 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-890 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-891 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-892 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-893 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-894 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-895 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-896 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-897 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-898 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-899 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-900 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-901 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-902 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-903 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-904 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-905 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-906 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-907 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-908 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-909 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-910 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-911 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-912 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-913 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-914 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-915 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-916 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-917 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-918 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-919 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-920 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-921 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-922 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-923 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-924 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-925 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-926 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-927 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-928 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-929 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-930 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-931 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-932 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-933 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-934 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-935 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-936 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-937 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-938 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-939 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-940 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-941 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-942 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-943 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-944 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-945 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-946 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-947 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-948 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-949 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-950 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-951 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-952 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-953 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-954 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-955 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-956 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-957 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-958 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-959 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-960 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-961 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-962 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-963 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-964 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-965 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-966 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-967 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-968 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-969 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-970 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-971 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-972 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-973 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-974 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-975 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-0 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-1 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-2 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-3 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-4 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-5 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-6 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-7 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-8 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-9 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-10 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-11 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-12 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-13 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-14 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-15 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-16 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-17 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-18 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-19 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-20 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-21 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-22 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-23 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-24 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-25 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-26 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-27 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-28 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-29 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-30 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-31 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-32 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-33 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-34 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-35 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-36 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-37 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-38 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-39 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-40 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-41 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-42 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-43 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-44 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-45 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-46 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-47 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-48 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-49 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-50 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-51 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-52 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-53 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-54 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-55 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-56 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-57 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-58 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-59 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-60 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-61 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-62 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-63 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-64 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-65 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-66 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-67 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-68 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-69 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-70 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-71 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-72 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-73 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-74 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-75 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-76 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-77 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-78 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-79 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-80 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-81 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-82 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-83 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-84 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-85 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-86 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-87 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-88 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-89 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-90 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-91 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-92 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-93 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-94 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-95 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-96 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-97 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-98 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-99 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-100 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-101 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-102 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-103 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-104 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-105 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-106 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-107 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-108 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-109 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-110 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-111 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-112 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-113 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-114 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-115 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-116 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-117 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-118 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-119 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-120 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-121 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-122 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-123 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-124 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-125 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-126 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-127 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-128 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-129 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-130 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-131 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-132 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-133 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-134 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-135 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-136 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-137 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-138 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-139 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-140 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-141 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-142 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-143 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-144 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-145 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-146 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-147 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-148 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-149 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-150 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-151 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-152 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-153 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-154 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-155 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-156 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-157 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-158 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-159 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-160 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-161 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-162 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-163 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-164 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-165 +-A FORWARD -j logaccept-final-166 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-167 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-168 +-A FORWARD -j logaccept-final-169 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-170 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-171 +-A FORWARD -j logaccept-final-172 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-173 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-174 +-A FORWARD -j logaccept-final-175 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-176 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-177 +-A FORWARD -j logaccept-final-178 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-179 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-180 +-A FORWARD -j logaccept-final-181 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-182 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-183 +-A FORWARD -j logaccept-final-184 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-185 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-186 +-A FORWARD -j logaccept-final-187 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-188 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-189 +-A FORWARD -j logaccept-final-190 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-191 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-192 +-A FORWARD -j logaccept-final-193 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-194 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-195 +-A FORWARD -j logaccept-final-196 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-197 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-198 +-A FORWARD -j logaccept-final-199 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-200 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-201 +-A FORWARD -j logaccept-final-202 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-203 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-204 +-A FORWARD -j logaccept-final-205 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-206 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-207 +-A FORWARD -j logaccept-final-208 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-209 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-210 +-A FORWARD -j logaccept-final-211 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-212 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-213 +-A FORWARD -j logaccept-final-214 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-215 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-216 +-A FORWARD -j logaccept-final-217 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-218 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-219 +-A FORWARD -j logaccept-final-220 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-221 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-222 +-A FORWARD -j logaccept-final-223 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-224 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-225 +-A FORWARD -j logaccept-final-226 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-227 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-228 +-A FORWARD -j logaccept-final-229 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-230 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-231 +-A FORWARD -j logaccept-final-232 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-233 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-234 +-A FORWARD -j logaccept-final-235 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-236 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-237 +-A FORWARD -j logaccept-final-238 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-239 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-240 +-A FORWARD -j logaccept-final-241 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-242 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-243 +-A FORWARD -j logaccept-final-244 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-245 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-246 +-A FORWARD -j logaccept-final-247 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-248 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-249 +-A FORWARD -j logaccept-final-250 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-251 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-252 +-A FORWARD -j logaccept-final-253 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-254 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-255 +-A FORWARD -j logaccept-final-256 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-257 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-258 +-A FORWARD -j logaccept-final-259 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-260 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-261 +-A FORWARD -j logaccept-final-262 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-263 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-264 +-A FORWARD -j logaccept-final-265 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-266 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-267 +-A FORWARD -j logaccept-final-268 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-269 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-270 +-A FORWARD -j logaccept-final-271 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-272 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-273 +-A FORWARD -j logaccept-final-274 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-275 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-276 +-A FORWARD -j logaccept-final-277 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-278 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-279 +-A FORWARD -j logaccept-final-280 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-281 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-282 +-A FORWARD -j logaccept-final-283 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-284 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-285 +-A FORWARD -j logaccept-final-286 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-287 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-288 +-A FORWARD -j logaccept-final-289 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-290 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-291 +-A FORWARD -j logaccept-final-292 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-293 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-294 +-A FORWARD -j logaccept-final-295 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-296 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-297 +-A FORWARD -j logaccept-final-298 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-299 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-300 +-A FORWARD -j logaccept-final-301 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-302 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-303 +-A FORWARD -j logaccept-final-304 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-305 -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set @@ -41391,20 +68622,26 @@ hash:net family inet -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-1184 +-A FORWARD -j logdrop-2200 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-54 --A FORWARD -j logdrop-1185 +-A FORWARD -j logaccept-99 +-A FORWARD -j logdrop-2201 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-100 +-A FORWARD -j logdrop-2202 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-101 +-A FORWARD -j logdrop-2203 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-55 --A FORWARD -j logdrop-1186 --A FORWARD -j logpass-1 +-A FORWARD -j logaccept-102 +-A FORWARD -j logdrop-2204 +-A FORWARD -j logpass-3 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -41456,1597 +68693,2475 @@ hash:net family inet -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m recent --name user:B --rdest --mask 255.255.255.255 --set -A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set --A INPUT -j limit-1886 --A INPUT -j limit-1885 --A INPUT -j limit-1884 --A INPUT -j limit-1883 --A INPUT -j limit-1882 --A INPUT -j limit-1881 --A INPUT -j limit-1880 --A INPUT -j limit-1879 --A INPUT -j limit-1878 --A INPUT -j limit-1877 --A INPUT -j limit-1876 --A INPUT -j limit-1875 --A INPUT -j limit-1874 --A INPUT -j limit-1873 --A INPUT -j limit-1872 --A INPUT -j limit-1871 --A INPUT -j limit-1870 --A INPUT -j limit-1869 --A INPUT -j limit-1868 --A INPUT -j limit-1867 --A INPUT -j limit-1866 --A INPUT -j limit-1865 --A INPUT -j limit-1864 --A INPUT -j limit-1863 --A INPUT -j limit-1862 --A INPUT -j limit-1861 --A INPUT -j limit-1860 --A INPUT -j limit-1859 --A INPUT -j limit-1858 --A INPUT -j limit-1857 --A INPUT -j limit-1856 --A INPUT -j limit-1855 --A INPUT -j limit-1854 --A INPUT -j limit-1853 --A INPUT -j limit-1852 --A INPUT -j limit-1851 --A INPUT -j limit-1850 --A INPUT -j limit-1849 --A INPUT -j limit-1848 --A INPUT -j limit-1847 --A INPUT -j limit-1846 --A INPUT -j limit-1845 --A INPUT -j limit-1844 --A INPUT -j limit-1843 --A INPUT -j limit-1842 --A INPUT -j limit-1841 --A INPUT -j limit-1840 --A INPUT -j limit-1839 --A INPUT -j limit-1838 --A INPUT -j limit-1837 --A INPUT -j limit-1836 --A INPUT -j limit-1835 --A INPUT -j limit-1834 --A INPUT -j limit-1833 --A INPUT -j limit-1832 --A INPUT -j limit-1831 --A INPUT -j limit-1830 --A INPUT -j limit-1829 --A INPUT -j limit-1828 --A INPUT -j limit-1827 --A INPUT -j limit-1826 --A INPUT -j limit-1825 --A INPUT -j limit-1824 --A INPUT -j limit-1823 --A INPUT -j limit-1822 --A INPUT -j limit-1821 --A INPUT -j limit-1820 --A INPUT -j limit-1819 --A INPUT -j limit-1818 --A INPUT -j limit-1817 --A INPUT -j limit-1816 --A INPUT -j limit-1815 --A INPUT -j limit-1814 --A INPUT -j limit-1813 --A INPUT -j limit-1812 --A INPUT -j limit-1811 --A INPUT -j limit-1810 --A INPUT -j limit-1809 --A INPUT -j limit-1808 --A INPUT -j limit-1807 --A INPUT -j limit-1806 --A INPUT -j limit-1805 --A INPUT -j limit-1804 --A INPUT -j limit-1803 --A INPUT -j limit-1802 --A INPUT -j limit-1801 --A INPUT -j limit-1800 --A INPUT -j limit-1799 --A INPUT -j limit-1798 --A INPUT -j limit-1797 --A INPUT -j limit-1796 --A INPUT -j limit-1795 --A INPUT -j limit-1794 --A INPUT -j limit-1793 --A INPUT -j limit-1792 --A INPUT -j limit-1791 --A INPUT -j limit-1790 --A INPUT -j limit-1789 --A INPUT -j limit-1788 --A INPUT -j limit-1787 --A INPUT -j limit-1786 --A INPUT -j limit-1785 --A INPUT -j limit-1784 --A INPUT -j limit-1783 --A INPUT -j limit-1782 --A INPUT -j limit-1781 --A INPUT -j limit-1780 --A INPUT -j limit-1779 --A INPUT -j limit-1778 --A INPUT -j limit-1777 --A INPUT -j limit-1776 --A INPUT -j limit-1775 --A INPUT -j limit-1774 --A INPUT -j limit-1773 --A INPUT -j limit-1772 --A INPUT -j limit-1771 --A INPUT -j limit-1770 --A INPUT -j limit-1769 --A INPUT -j limit-1768 --A INPUT -j limit-1767 --A INPUT -j limit-1766 --A INPUT -j limit-1765 --A INPUT -j limit-1764 --A INPUT -j limit-1763 --A INPUT -j limit-1762 --A INPUT -j limit-1761 --A INPUT -j limit-1760 --A INPUT -j limit-1759 --A INPUT -j limit-1758 --A INPUT -j limit-1757 --A INPUT -j limit-1756 --A INPUT -j limit-1755 --A INPUT -j limit-1754 --A INPUT -j limit-1753 --A INPUT -j limit-1752 --A INPUT -j limit-1751 --A INPUT -j limit-1750 --A INPUT -j limit-1749 --A INPUT -j limit-1748 --A INPUT -j limit-1747 --A INPUT -j limit-1746 --A INPUT -j limit-1745 --A INPUT -j limit-1744 --A INPUT -j limit-1743 --A INPUT -j limit-1742 --A INPUT -j limit-1741 --A INPUT -j limit-1740 --A INPUT -j limit-1739 --A INPUT -j limit-1738 --A INPUT -j limit-1737 --A INPUT -j limit-1736 --A INPUT -j limit-1735 --A INPUT -j limit-1734 --A INPUT -j limit-1733 --A INPUT -j limit-1732 --A INPUT -j limit-1731 --A INPUT -j limit-1730 --A INPUT -j limit-1729 --A INPUT -j limit-1728 --A INPUT -j limit-1727 --A INPUT -j limit-1726 --A INPUT -j limit-1725 --A INPUT -j limit-1724 --A INPUT -j limit-1723 --A INPUT -j limit-1722 --A INPUT -j limit-1721 --A INPUT -j limit-1720 --A INPUT -j limit-1719 --A INPUT -j limit-1718 --A INPUT -j limit-1717 --A INPUT -j limit-1716 --A INPUT -j limit-1715 --A INPUT -j limit-1714 --A INPUT -j limit-1713 --A INPUT -j limit-1712 --A INPUT -j limit-1711 --A INPUT -j limit-1710 --A INPUT -j limit-1709 --A INPUT -j limit-1708 --A INPUT -j limit-1707 --A INPUT -j limit-1706 --A INPUT -j limit-1705 --A INPUT -j limit-1704 --A INPUT -j limit-1703 --A INPUT -j limit-1702 --A INPUT -j limit-1701 --A INPUT -j limit-1700 --A INPUT -j limit-1699 --A INPUT -j limit-1698 --A INPUT -j limit-1697 --A INPUT -j limit-1696 --A INPUT -j limit-1695 --A INPUT -j limit-1694 --A INPUT -j limit-1693 --A INPUT -j limit-1692 --A INPUT -j limit-1691 --A INPUT -j limit-1690 --A INPUT -j limit-1689 --A INPUT -j limit-1688 --A INPUT -j limit-1687 --A INPUT -j limit-1686 --A INPUT -j limit-1685 --A INPUT -j limit-1684 --A INPUT -j limit-1683 --A INPUT -j limit-1682 --A INPUT -j limit-1681 --A INPUT -j limit-1680 --A INPUT -j limit-1679 --A INPUT -j limit-1678 --A INPUT -j limit-1677 --A INPUT -j limit-1676 --A INPUT -j limit-1675 --A INPUT -j limit-1674 --A INPUT -j limit-1673 --A INPUT -j limit-1672 --A INPUT -j limit-1671 --A INPUT -j limit-1670 --A INPUT -j limit-1669 --A INPUT -j limit-1668 --A INPUT -j limit-1667 --A INPUT -j limit-1666 --A INPUT -j limit-1665 --A INPUT -j limit-1664 --A INPUT -j limit-1663 --A INPUT -j limit-1662 --A INPUT -j limit-1661 --A INPUT -j limit-1660 --A INPUT -j limit-1659 --A INPUT -j limit-1658 --A INPUT -j limit-1657 --A INPUT -j limit-1656 --A INPUT -j limit-1655 --A INPUT -j limit-1654 --A INPUT -j limit-1653 --A INPUT -j limit-1652 --A INPUT -j limit-1651 --A INPUT -j limit-1650 --A INPUT -j limit-1649 --A INPUT -j limit-1648 --A INPUT -j limit-1647 --A INPUT -j limit-1646 --A INPUT -j limit-1645 --A INPUT -j limit-1644 --A INPUT -j limit-1643 --A INPUT -j limit-1642 --A INPUT -j limit-1641 --A INPUT -j limit-1640 --A INPUT -j limit-1639 --A INPUT -j limit-1638 --A INPUT -j limit-1637 --A INPUT -j limit-1636 --A INPUT -j limit-1635 --A INPUT -j limit-1634 --A INPUT -j limit-1633 --A INPUT -j limit-1632 --A INPUT -j limit-1631 --A INPUT -j limit-1630 --A INPUT -j limit-1629 --A INPUT -j limit-1628 --A INPUT -j limit-1627 --A INPUT -j limit-1626 --A INPUT -j limit-1625 --A INPUT -j limit-1624 --A INPUT -j limit-1623 --A INPUT -j limit-1622 --A INPUT -j limit-1621 --A INPUT -j limit-1620 --A INPUT -j limit-1619 --A INPUT -j limit-1618 --A INPUT -j limit-1617 --A INPUT -j limit-1616 --A INPUT -j limit-1615 --A INPUT -j limit-1614 --A INPUT -j limit-1613 --A INPUT -j limit-1612 --A INPUT -j limit-1611 --A INPUT -j limit-1610 --A INPUT -j limit-1609 --A INPUT -j limit-1608 --A INPUT -j limit-1607 --A INPUT -j limit-1606 --A INPUT -j limit-1605 --A INPUT -j limit-1604 --A INPUT -j limit-1603 --A INPUT -j limit-1602 --A INPUT -j limit-1601 --A INPUT -j limit-1600 --A INPUT -j limit-1599 --A INPUT -j limit-1598 --A INPUT -j limit-1597 --A INPUT -j limit-1596 --A INPUT -j limit-1595 --A INPUT -j limit-1594 --A INPUT -j limit-1593 --A INPUT -j limit-1592 --A INPUT -j limit-1591 --A INPUT -j limit-1590 --A INPUT -j limit-1589 --A INPUT -j limit-1588 --A INPUT -j limit-1587 --A INPUT -j limit-1586 --A INPUT -j limit-1585 --A INPUT -j limit-1584 --A INPUT -j limit-1583 --A INPUT -j limit-1582 --A INPUT -j limit-1581 --A INPUT -j limit-1580 --A INPUT -j limit-1579 --A INPUT -j limit-1578 --A INPUT -j limit-1577 --A INPUT -j limit-1576 --A INPUT -j limit-1575 --A INPUT -j limit-1574 --A INPUT -j limit-1573 --A INPUT -j limit-1572 --A INPUT -j limit-1571 --A INPUT -j limit-1570 --A INPUT -j limit-1569 --A INPUT -j limit-1568 --A INPUT -j limit-1567 --A INPUT -j limit-1566 --A INPUT -j limit-1565 --A INPUT -j limit-1564 --A INPUT -j limit-1563 --A INPUT -j limit-1562 --A INPUT -j limit-1561 --A INPUT -j limit-1560 --A INPUT -j limit-1559 --A INPUT -j limit-1558 --A INPUT -j limit-1557 --A INPUT -j limit-1556 --A INPUT -j limit-1555 --A INPUT -j limit-1554 --A INPUT -j limit-1553 --A INPUT -j limit-1552 --A INPUT -j limit-1551 --A INPUT -j limit-1550 --A INPUT -j limit-1549 --A INPUT -j limit-1548 --A INPUT -j limit-1547 --A INPUT -j limit-1546 --A INPUT -j limit-1545 --A INPUT -j limit-1544 --A INPUT -j limit-1543 --A INPUT -j limit-1542 --A INPUT -j limit-1541 --A INPUT -j limit-1540 --A INPUT -j limit-1539 --A INPUT -j limit-1538 --A INPUT -j limit-1537 --A INPUT -j limit-1536 --A INPUT -j limit-1535 --A INPUT -j limit-1534 --A INPUT -j limit-1533 --A INPUT -j limit-1532 --A INPUT -j limit-1531 --A INPUT -j limit-1530 --A INPUT -j limit-1529 --A INPUT -j limit-1528 --A INPUT -j limit-1527 --A INPUT -j limit-1526 --A INPUT -j limit-1525 --A INPUT -j limit-1524 --A INPUT -j limit-1523 --A INPUT -j limit-1522 --A INPUT -j limit-1521 --A INPUT -j limit-1520 --A INPUT -j limit-1519 --A INPUT -j limit-1518 --A INPUT -j limit-1517 --A INPUT -j limit-1516 --A INPUT -j limit-1515 --A INPUT -j limit-1514 --A INPUT -j limit-1513 --A INPUT -j limit-1512 --A INPUT -j limit-1511 --A INPUT -j limit-1510 --A INPUT -j limit-1509 --A INPUT -j limit-1508 --A INPUT -j limit-1507 --A INPUT -j limit-1506 --A INPUT -j limit-1505 --A INPUT -j limit-1504 --A INPUT -j limit-1503 --A INPUT -j limit-1502 --A INPUT -j limit-1501 --A INPUT -j limit-1500 --A INPUT -j limit-1499 --A INPUT -j limit-1498 --A INPUT -j limit-1497 --A INPUT -j limit-1496 --A INPUT -j limit-1495 --A INPUT -j limit-1494 --A INPUT -j limit-1493 --A INPUT -j limit-1492 --A INPUT -j limit-1491 --A INPUT -j limit-1490 --A INPUT -j limit-1489 --A INPUT -j limit-1488 --A INPUT -j limit-1487 --A INPUT -j limit-1486 --A INPUT -j limit-1485 --A INPUT -j limit-1484 --A INPUT -j limit-1483 --A INPUT -j limit-1482 --A INPUT -j limit-1481 --A INPUT -j limit-1480 --A INPUT -j limit-1479 --A INPUT -j limit-1478 --A INPUT -j limit-1477 --A INPUT -j limit-1476 --A INPUT -j limit-1475 --A INPUT -j limit-1474 --A INPUT -j limit-1473 --A INPUT -j limit-1472 --A INPUT -j limit-1471 --A INPUT -j limit-1470 --A INPUT -j limit-1469 --A INPUT -j limit-1468 --A INPUT -j limit-1467 --A INPUT -j limit-1466 --A INPUT -j limit-1465 --A INPUT -j limit-1464 --A INPUT -j limit-1463 --A INPUT -j limit-1462 --A INPUT -j limit-1461 --A INPUT -j limit-1460 --A INPUT -j limit-1459 --A INPUT -j limit-1458 --A INPUT -j limit-1457 --A INPUT -j limit-1456 --A INPUT -j limit-1455 --A INPUT -j limit-1454 --A INPUT -j limit-1453 --A INPUT -j limit-1452 --A INPUT -j limit-1451 --A INPUT -j limit-1450 --A INPUT -j limit-1449 --A INPUT -j limit-1448 --A INPUT -j limit-1447 --A INPUT -j limit-1446 --A INPUT -j limit-1445 --A INPUT -j limit-1444 --A INPUT -j limit-1443 --A INPUT -j limit-1442 --A INPUT -j limit-1441 --A INPUT -j limit-1440 --A INPUT -j limit-1439 --A INPUT -j limit-1438 --A INPUT -j limit-1437 --A INPUT -j limit-1436 --A INPUT -j limit-1435 --A INPUT -j limit-1434 --A INPUT -j limit-1433 --A INPUT -j limit-1432 --A INPUT -j limit-1431 --A INPUT -j limit-1430 --A INPUT -j limit-1429 --A INPUT -j limit-1428 --A INPUT -j limit-1427 --A INPUT -j limit-1426 --A INPUT -j limit-1425 --A INPUT -j limit-1424 --A INPUT -j limit-1423 --A INPUT -j limit-1422 --A INPUT -j limit-1421 --A INPUT -j limit-1420 --A INPUT -j limit-1419 --A INPUT -j limit-1418 --A INPUT -j limit-1417 --A INPUT -j limit-1416 --A INPUT -j limit-1415 --A INPUT -j limit-1414 --A INPUT -j limit-1413 --A INPUT -j limit-1412 --A INPUT -j limit-1411 --A INPUT -j limit-1410 --A INPUT -j limit-1409 --A INPUT -j limit-1408 --A INPUT -j limit-1407 --A INPUT -j limit-1406 --A INPUT -j limit-1405 --A INPUT -j limit-1404 --A INPUT -j limit-1403 --A INPUT -j limit-1402 --A INPUT -j limit-1401 --A INPUT -j limit-1400 --A INPUT -j limit-1399 --A INPUT -j limit-1398 --A INPUT -j limit-1397 --A INPUT -j limit-1396 --A INPUT -j limit-1395 --A INPUT -j limit-1394 --A INPUT -j limit-1393 --A INPUT -j limit-1392 --A INPUT -j limit-1391 --A INPUT -j limit-1390 --A INPUT -j limit-1389 --A INPUT -j limit-1388 --A INPUT -j limit-1387 --A INPUT -j limit-1386 --A INPUT -j limit-1385 --A INPUT -j limit-1384 --A INPUT -j limit-1383 --A INPUT -j limit-1382 --A INPUT -j limit-1381 --A INPUT -j limit-1380 --A INPUT -j limit-1379 --A INPUT -j limit-1378 --A INPUT -j limit-1377 --A INPUT -j limit-1376 --A INPUT -j limit-1375 --A INPUT -j limit-1374 --A INPUT -j limit-1373 --A INPUT -j limit-1372 --A INPUT -j limit-1371 --A INPUT -j limit-1370 --A INPUT -j limit-1369 --A INPUT -j limit-1368 --A INPUT -j limit-1367 --A INPUT -j limit-1366 --A INPUT -j limit-1365 --A INPUT -j limit-1364 --A INPUT -j limit-1363 --A INPUT -j limit-1362 --A INPUT -j limit-1361 --A INPUT -j limit-1360 --A INPUT -j limit-1359 --A INPUT -j limit-1358 --A INPUT -j limit-1357 --A INPUT -j limit-1356 --A INPUT -j limit-1355 --A INPUT -j limit-1354 --A INPUT -j limit-1353 --A INPUT -j limit-1352 --A INPUT -j limit-1351 --A INPUT -j limit-1350 --A INPUT -j limit-1349 --A INPUT -j limit-1348 --A INPUT -j limit-1347 --A INPUT -j limit-1346 --A INPUT -j limit-1345 --A INPUT -j limit-1344 --A INPUT -j limit-1343 --A INPUT -j limit-1342 --A INPUT -j limit-1341 --A INPUT -j limit-1340 --A INPUT -j limit-1339 --A INPUT -j limit-1338 --A INPUT -j limit-1337 --A INPUT -j limit-1336 --A INPUT -j limit-1335 --A INPUT -j limit-1334 --A INPUT -j limit-1333 --A INPUT -j limit-1332 --A INPUT -j limit-1331 --A INPUT -j limit-1330 --A INPUT -j limit-1329 --A INPUT -j limit-1328 --A INPUT -j limit-1327 --A INPUT -j limit-1326 --A INPUT -j limit-1325 --A INPUT -j limit-1324 --A INPUT -j limit-1323 --A INPUT -j limit-1322 --A INPUT -j limit-1321 --A INPUT -j limit-1320 --A INPUT -j limit-1319 --A INPUT -j limit-1318 --A INPUT -j limit-1317 --A INPUT -j limit-1316 --A INPUT -j limit-1315 --A INPUT -j limit-1314 --A INPUT -j limit-1313 --A INPUT -j limit-1312 --A INPUT -j limit-1311 --A INPUT -j limit-1310 --A INPUT -j limit-1309 --A INPUT -j limit-1308 --A INPUT -j limit-1307 --A INPUT -j limit-1306 --A INPUT -j limit-1305 --A INPUT -j limit-1304 --A INPUT -j limit-1303 --A INPUT -j limit-1302 --A INPUT -j limit-1301 --A INPUT -j limit-1300 --A INPUT -j limit-1299 --A INPUT -j limit-1298 --A INPUT -j limit-1297 --A INPUT -j limit-1296 --A INPUT -j limit-1295 --A INPUT -j limit-1294 --A INPUT -j limit-1293 --A INPUT -j limit-1292 --A INPUT -j limit-1291 --A INPUT -j limit-1290 --A INPUT -j limit-1289 --A INPUT -j limit-1288 --A INPUT -j limit-1287 --A INPUT -j limit-1286 --A INPUT -j limit-1285 --A INPUT -j limit-1284 --A INPUT -j limit-1283 --A INPUT -j limit-1282 --A INPUT -j limit-1281 --A INPUT -j limit-1280 --A INPUT -j limit-1279 --A INPUT -j limit-1278 --A INPUT -j limit-1277 --A INPUT -j limit-1276 --A INPUT -j limit-1275 --A INPUT -j limit-1274 --A INPUT -j limit-1273 --A INPUT -j limit-1272 --A INPUT -j limit-1271 --A INPUT -j limit-1270 --A INPUT -j limit-1269 --A INPUT -j limit-1268 --A INPUT -j limit-1267 --A INPUT -j limit-1266 --A INPUT -j limit-1265 --A INPUT -j limit-1264 --A INPUT -j limit-1263 --A INPUT -j limit-1262 --A INPUT -j limit-1261 --A INPUT -j limit-1260 --A INPUT -j limit-1259 --A INPUT -j limit-1258 +-A INPUT -j limit-2927 +-A INPUT -j limit-2926 +-A INPUT -j limit-2925 +-A INPUT -j limit-2924 +-A INPUT -j limit-2923 +-A INPUT -j limit-2922 +-A INPUT -j limit-2921 +-A INPUT -j limit-2920 +-A INPUT -j limit-2919 +-A INPUT -j limit-2918 +-A INPUT -j limit-2917 +-A INPUT -j limit-2916 +-A INPUT -j limit-2915 +-A INPUT -j limit-2914 +-A INPUT -j limit-2913 +-A INPUT -j limit-2912 +-A INPUT -j limit-2911 +-A INPUT -j limit-2910 +-A INPUT -j limit-2909 +-A INPUT -j limit-2908 +-A INPUT -j limit-2907 +-A INPUT -j limit-2906 +-A INPUT -j limit-2905 +-A INPUT -j limit-2904 +-A INPUT -j limit-2903 +-A INPUT -j limit-2902 +-A INPUT -j limit-2901 +-A INPUT -j limit-2900 +-A INPUT -j limit-2899 +-A INPUT -j limit-2898 +-A INPUT -j limit-2897 +-A INPUT -j limit-2896 +-A INPUT -j limit-2895 +-A INPUT -j limit-2894 +-A INPUT -j limit-2893 +-A INPUT -j limit-2892 +-A INPUT -j limit-2891 +-A INPUT -j limit-2890 +-A INPUT -j limit-2889 +-A INPUT -j limit-2888 +-A INPUT -j limit-2887 +-A INPUT -j limit-2886 +-A INPUT -j limit-2885 +-A INPUT -j limit-2884 +-A INPUT -j limit-2883 +-A INPUT -j limit-2882 +-A INPUT -j limit-2881 +-A INPUT -j limit-2880 +-A INPUT -j limit-2879 +-A INPUT -j limit-2878 +-A INPUT -j limit-2877 +-A INPUT -j limit-2876 +-A INPUT -j limit-2875 +-A INPUT -j limit-2874 +-A INPUT -j limit-2873 +-A INPUT -j limit-2872 +-A INPUT -j limit-2871 +-A INPUT -j limit-2870 +-A INPUT -j limit-2869 +-A INPUT -j limit-2868 +-A INPUT -j limit-2867 +-A INPUT -j limit-2866 +-A INPUT -j limit-2865 +-A INPUT -j limit-2864 +-A INPUT -j limit-2863 +-A INPUT -j limit-2862 +-A INPUT -j limit-2861 +-A INPUT -j limit-2860 +-A INPUT -j limit-2859 +-A INPUT -j limit-2858 +-A INPUT -j limit-2857 +-A INPUT -j limit-2856 +-A INPUT -j limit-2855 +-A INPUT -j limit-2854 +-A INPUT -j limit-2853 +-A INPUT -j limit-2852 +-A INPUT -j limit-2851 +-A INPUT -j limit-2850 +-A INPUT -j limit-2849 +-A INPUT -j limit-2848 +-A INPUT -j limit-2847 +-A INPUT -j limit-2846 +-A INPUT -j limit-2845 +-A INPUT -j limit-2844 +-A INPUT -j limit-2843 +-A INPUT -j limit-2842 +-A INPUT -j limit-2841 +-A INPUT -j limit-2840 +-A INPUT -j limit-2839 +-A INPUT -j limit-2838 +-A INPUT -j limit-2837 +-A INPUT -j limit-2836 +-A INPUT -j limit-2835 +-A INPUT -j limit-2834 +-A INPUT -j limit-2833 +-A INPUT -j limit-2832 +-A INPUT -j limit-2831 +-A INPUT -j limit-2830 +-A INPUT -j limit-2829 +-A INPUT -j limit-2828 +-A INPUT -j limit-2827 +-A INPUT -j limit-2826 +-A INPUT -j limit-2825 +-A INPUT -j limit-2824 +-A INPUT -j limit-2823 +-A INPUT -j limit-2822 +-A INPUT -j limit-2821 +-A INPUT -j limit-2820 +-A INPUT -j limit-2819 +-A INPUT -j limit-2818 +-A INPUT -j limit-2817 +-A INPUT -j limit-2816 +-A INPUT -j limit-2815 +-A INPUT -j limit-2814 +-A INPUT -j limit-2813 +-A INPUT -j limit-2812 +-A INPUT -j limit-2811 +-A INPUT -j limit-2810 +-A INPUT -j limit-2809 +-A INPUT -j limit-2808 +-A INPUT -j limit-2807 +-A INPUT -j limit-2806 +-A INPUT -j limit-2805 +-A INPUT -j limit-2804 +-A INPUT -j limit-2803 +-A INPUT -j limit-2802 +-A INPUT -j limit-2801 +-A INPUT -j limit-2800 +-A INPUT -j limit-2799 +-A INPUT -j limit-2798 +-A INPUT -j limit-2797 +-A INPUT -j limit-2796 +-A INPUT -j limit-2795 +-A INPUT -j limit-2794 +-A INPUT -j limit-2793 +-A INPUT -j limit-2792 +-A INPUT -j limit-2791 +-A INPUT -j limit-2790 +-A INPUT -j limit-2789 +-A INPUT -j limit-2788 +-A INPUT -j limit-2787 +-A INPUT -j limit-2786 +-A INPUT -j limit-2785 +-A INPUT -j limit-2784 +-A INPUT -j limit-2783 +-A INPUT -j limit-2782 +-A INPUT -j limit-2781 +-A INPUT -j limit-2780 +-A INPUT -j limit-2779 +-A INPUT -j limit-2778 +-A INPUT -j limit-2777 +-A INPUT -j limit-2776 +-A INPUT -j limit-2775 +-A INPUT -j limit-2774 +-A INPUT -j limit-2773 +-A INPUT -j limit-2772 +-A INPUT -j limit-2771 +-A INPUT -j limit-2770 +-A INPUT -j limit-2769 +-A INPUT -j limit-2768 +-A INPUT -j limit-2767 +-A INPUT -j limit-2766 +-A INPUT -j limit-2765 +-A INPUT -j limit-2764 +-A INPUT -j limit-2763 +-A INPUT -j limit-2762 +-A INPUT -j limit-2761 +-A INPUT -j limit-2760 +-A INPUT -j limit-2759 +-A INPUT -j limit-2758 +-A INPUT -j limit-2757 +-A INPUT -j limit-2756 +-A INPUT -j limit-2755 +-A INPUT -j limit-2754 +-A INPUT -j limit-2753 +-A INPUT -j limit-2752 +-A INPUT -j limit-2751 +-A INPUT -j limit-2750 +-A INPUT -j limit-2749 +-A INPUT -j limit-2748 +-A INPUT -j limit-2747 +-A INPUT -j limit-2746 +-A INPUT -j limit-2745 +-A INPUT -j limit-2744 +-A INPUT -j limit-2743 +-A INPUT -j limit-2742 +-A INPUT -j limit-2741 +-A INPUT -j limit-2740 +-A INPUT -j limit-2739 +-A INPUT -j limit-2738 +-A INPUT -j limit-2737 +-A INPUT -j limit-2736 +-A INPUT -j limit-2735 +-A INPUT -j limit-2734 +-A INPUT -j limit-2733 +-A INPUT -j limit-2732 +-A INPUT -j limit-2731 +-A INPUT -j limit-2730 +-A INPUT -j limit-2729 +-A INPUT -j limit-2728 +-A INPUT -j limit-2727 +-A INPUT -j limit-2726 +-A INPUT -j limit-2725 +-A INPUT -j limit-2724 +-A INPUT -j limit-2723 +-A INPUT -j limit-2722 +-A INPUT -j limit-2721 +-A INPUT -j limit-2720 +-A INPUT -j limit-2719 +-A INPUT -j limit-2718 +-A INPUT -j limit-2717 +-A INPUT -j limit-2716 +-A INPUT -j limit-2715 +-A INPUT -j limit-2714 +-A INPUT -j limit-2713 +-A INPUT -j limit-2712 +-A INPUT -j limit-2711 +-A INPUT -j limit-2710 +-A INPUT -j limit-2709 +-A INPUT -j limit-2708 +-A INPUT -j limit-2707 +-A INPUT -j limit-2706 +-A INPUT -j limit-2705 +-A INPUT -j limit-2704 +-A INPUT -j limit-2703 +-A INPUT -j limit-2702 +-A INPUT -j limit-2701 +-A INPUT -j limit-2700 +-A INPUT -j limit-2699 +-A INPUT -j limit-2698 +-A INPUT -j limit-2697 +-A INPUT -j limit-2696 +-A INPUT -j limit-2695 +-A INPUT -j limit-2694 +-A INPUT -j limit-2693 +-A INPUT -j limit-2692 +-A INPUT -j limit-2691 +-A INPUT -j limit-2690 +-A INPUT -j limit-2689 +-A INPUT -j limit-2688 +-A INPUT -j limit-2687 +-A INPUT -j limit-2686 +-A INPUT -j limit-2685 +-A INPUT -j limit-2684 +-A INPUT -j limit-2683 +-A INPUT -j limit-2682 +-A INPUT -j limit-2681 +-A INPUT -j limit-2680 +-A INPUT -j limit-2679 +-A INPUT -j limit-2678 +-A INPUT -j limit-2677 +-A INPUT -j limit-2676 +-A INPUT -j limit-2675 +-A INPUT -j limit-2674 +-A INPUT -j limit-2673 +-A INPUT -j limit-2672 +-A INPUT -j limit-2671 +-A INPUT -j limit-2670 +-A INPUT -j limit-2669 +-A INPUT -j limit-2668 +-A INPUT -j limit-2667 +-A INPUT -j limit-2666 +-A INPUT -j limit-2665 +-A INPUT -j limit-2664 +-A INPUT -j limit-2663 +-A INPUT -j limit-2662 +-A INPUT -j limit-2661 +-A INPUT -j limit-2660 +-A INPUT -j limit-2659 +-A INPUT -j limit-2658 +-A INPUT -j limit-2657 +-A INPUT -j limit-2656 +-A INPUT -j limit-2655 +-A INPUT -j limit-2654 +-A INPUT -j limit-2653 +-A INPUT -j limit-2652 +-A INPUT -j limit-2651 +-A INPUT -j limit-2650 +-A INPUT -j limit-2649 +-A INPUT -j limit-2648 +-A INPUT -j limit-2647 +-A INPUT -j limit-2646 +-A INPUT -j limit-2645 +-A INPUT -j limit-2644 +-A INPUT -j limit-2643 +-A INPUT -j limit-2642 +-A INPUT -j limit-2641 +-A INPUT -j limit-2640 +-A INPUT -j limit-2639 +-A INPUT -j limit-2638 +-A INPUT -j limit-2637 +-A INPUT -j limit-2636 +-A INPUT -j limit-2635 +-A INPUT -j limit-2634 +-A INPUT -j limit-2633 +-A INPUT -j limit-2632 +-A INPUT -j limit-2631 +-A INPUT -j limit-2630 +-A INPUT -j limit-2629 +-A INPUT -j limit-2628 +-A INPUT -j limit-2627 +-A INPUT -j limit-2626 +-A INPUT -j limit-2625 +-A INPUT -j limit-2624 +-A INPUT -j limit-2623 +-A INPUT -j limit-2622 +-A INPUT -j limit-2621 +-A INPUT -j limit-2620 +-A INPUT -j limit-2619 +-A INPUT -j limit-2618 +-A INPUT -j limit-2617 +-A INPUT -j limit-2616 +-A INPUT -j limit-2615 +-A INPUT -j limit-2614 +-A INPUT -j limit-2613 +-A INPUT -j limit-2612 +-A INPUT -j limit-2611 +-A INPUT -j limit-2610 +-A INPUT -j limit-2609 +-A INPUT -j limit-2608 +-A INPUT -j limit-2607 +-A INPUT -j limit-2606 +-A INPUT -j limit-2605 +-A INPUT -j limit-2604 +-A INPUT -j limit-2603 +-A INPUT -j limit-2602 +-A INPUT -j limit-2601 +-A INPUT -j limit-2600 +-A INPUT -j limit-2599 +-A INPUT -j limit-2598 +-A INPUT -j limit-2597 +-A INPUT -j limit-2596 +-A INPUT -j limit-2595 +-A INPUT -j limit-2594 +-A INPUT -j limit-2593 +-A INPUT -j limit-2592 +-A INPUT -j limit-2591 +-A INPUT -j limit-2590 +-A INPUT -j limit-2589 +-A INPUT -j limit-2588 +-A INPUT -j limit-2587 +-A INPUT -j limit-2586 +-A INPUT -j limit-2585 +-A INPUT -j limit-2584 +-A INPUT -j limit-2583 +-A INPUT -j limit-2582 +-A INPUT -j limit-2581 +-A INPUT -j limit-2580 +-A INPUT -j limit-2579 +-A INPUT -j limit-2578 +-A INPUT -j limit-2577 +-A INPUT -j limit-2576 +-A INPUT -j limit-2575 +-A INPUT -j limit-2574 +-A INPUT -j limit-2573 +-A INPUT -j limit-2572 +-A INPUT -j limit-2571 +-A INPUT -j limit-2570 +-A INPUT -j limit-2569 +-A INPUT -j limit-2568 +-A INPUT -j limit-2567 +-A INPUT -j limit-2566 +-A INPUT -j limit-2565 +-A INPUT -j limit-2564 +-A INPUT -j limit-2563 +-A INPUT -j limit-2562 +-A INPUT -j limit-2561 +-A INPUT -j limit-2560 +-A INPUT -j limit-2559 +-A INPUT -j limit-2558 +-A INPUT -j limit-2557 +-A INPUT -j limit-2556 +-A INPUT -j limit-2555 +-A INPUT -j limit-2554 +-A INPUT -j limit-2553 +-A INPUT -j limit-2552 +-A INPUT -j limit-2551 +-A INPUT -j limit-2550 +-A INPUT -j limit-2549 +-A INPUT -j limit-2548 +-A INPUT -j limit-2547 +-A INPUT -j limit-2546 +-A INPUT -j limit-2545 +-A INPUT -j limit-2544 +-A INPUT -j limit-2543 +-A INPUT -j limit-2542 +-A INPUT -j limit-2541 +-A INPUT -j limit-2540 +-A INPUT -j limit-2539 +-A INPUT -j limit-2538 +-A INPUT -j limit-2537 +-A INPUT -j limit-2536 +-A INPUT -j limit-2535 +-A INPUT -j limit-2534 +-A INPUT -j limit-2533 +-A INPUT -j limit-2532 +-A INPUT -j limit-2531 +-A INPUT -j limit-2530 +-A INPUT -j limit-2529 +-A INPUT -j limit-2528 +-A INPUT -j limit-2527 +-A INPUT -j limit-2526 +-A INPUT -j limit-2525 +-A INPUT -j limit-2524 +-A INPUT -j limit-2523 +-A INPUT -j limit-2522 +-A INPUT -j limit-2521 +-A INPUT -j limit-2520 +-A INPUT -j limit-2519 +-A INPUT -j limit-2518 +-A INPUT -j limit-2517 +-A INPUT -j limit-2516 +-A INPUT -j limit-2515 +-A INPUT -j limit-2514 +-A INPUT -j limit-2513 +-A INPUT -j limit-2512 +-A INPUT -j limit-2511 +-A INPUT -j limit-2510 +-A INPUT -j limit-2509 +-A INPUT -j limit-2508 +-A INPUT -j limit-2507 +-A INPUT -j limit-2506 +-A INPUT -j limit-2505 +-A INPUT -j limit-2504 +-A INPUT -j limit-2503 +-A INPUT -j limit-2502 +-A INPUT -j limit-2501 +-A INPUT -j limit-2500 +-A INPUT -j limit-2499 +-A INPUT -j limit-2498 +-A INPUT -j limit-2497 +-A INPUT -j limit-2496 +-A INPUT -j limit-2495 +-A INPUT -j limit-2494 +-A INPUT -j limit-2493 +-A INPUT -j limit-2492 +-A INPUT -j limit-2491 +-A INPUT -j limit-2490 +-A INPUT -j limit-2489 +-A INPUT -j limit-2488 +-A INPUT -j limit-2487 +-A INPUT -j limit-2486 +-A INPUT -j limit-2485 +-A INPUT -j limit-2484 +-A INPUT -j limit-2483 +-A INPUT -j limit-2482 +-A INPUT -j limit-2481 +-A INPUT -j limit-2480 +-A INPUT -j limit-2479 +-A INPUT -j limit-2478 +-A INPUT -j limit-2477 +-A INPUT -j limit-2476 +-A INPUT -j limit-2475 +-A INPUT -j limit-2474 +-A INPUT -j limit-2473 +-A INPUT -j limit-2472 +-A INPUT -j limit-2471 +-A INPUT -j limit-2470 +-A INPUT -j limit-2469 +-A INPUT -j limit-2468 +-A INPUT -j limit-2467 +-A INPUT -j limit-2466 +-A INPUT -j limit-2465 +-A INPUT -j limit-2464 +-A INPUT -j limit-2463 +-A INPUT -j limit-2462 +-A INPUT -j limit-2461 +-A INPUT -j limit-2460 +-A INPUT -j limit-2459 +-A INPUT -j limit-2458 +-A INPUT -j limit-2457 +-A INPUT -j limit-2456 +-A INPUT -j limit-2455 +-A INPUT -j limit-2454 +-A INPUT -j limit-2453 +-A INPUT -j limit-2452 +-A INPUT -j limit-2451 +-A INPUT -j limit-2450 +-A INPUT -j limit-2449 +-A INPUT -j limit-2448 +-A INPUT -j limit-2447 +-A INPUT -j limit-2446 +-A INPUT -j limit-2445 +-A INPUT -j limit-2444 +-A INPUT -j limit-2443 +-A INPUT -j limit-2442 +-A INPUT -j limit-2441 +-A INPUT -j limit-2440 +-A INPUT -j limit-2439 +-A INPUT -j limit-2438 +-A INPUT -j limit-2437 +-A INPUT -j limit-2436 +-A INPUT -j limit-2435 +-A INPUT -j limit-2434 +-A INPUT -j limit-2433 +-A INPUT -j limit-2432 +-A INPUT -j limit-2431 +-A INPUT -j limit-2430 +-A INPUT -j limit-2429 +-A INPUT -j limit-2428 +-A INPUT -j limit-2427 +-A INPUT -j limit-2426 +-A INPUT -j limit-2425 +-A INPUT -j limit-2424 +-A INPUT -j limit-2423 +-A INPUT -j limit-2422 +-A INPUT -j limit-2421 +-A INPUT -j limit-2420 +-A INPUT -j limit-2419 +-A INPUT -j limit-2418 +-A INPUT -j limit-2417 +-A INPUT -j limit-2416 +-A INPUT -j limit-2415 +-A INPUT -j limit-2414 +-A INPUT -j limit-2413 +-A INPUT -j limit-2412 +-A INPUT -j limit-2411 +-A INPUT -j limit-2410 +-A INPUT -j limit-2409 +-A INPUT -j limit-2408 +-A INPUT -j limit-2407 +-A INPUT -j limit-2406 +-A INPUT -j limit-2405 +-A INPUT -j limit-2404 +-A INPUT -j limit-2403 +-A INPUT -j limit-2402 +-A INPUT -j limit-2401 +-A INPUT -j limit-2400 +-A INPUT -j limit-2399 +-A INPUT -j limit-2398 +-A INPUT -j limit-2397 +-A INPUT -j limit-2396 +-A INPUT -j limit-2395 +-A INPUT -j limit-2394 +-A INPUT -j limit-2393 +-A INPUT -j limit-2392 +-A INPUT -j limit-2391 +-A INPUT -j limit-2390 +-A INPUT -j limit-2389 +-A INPUT -j limit-2388 +-A INPUT -j limit-2387 +-A INPUT -j limit-2386 +-A INPUT -j limit-2385 +-A INPUT -j limit-2384 +-A INPUT -j limit-2383 +-A INPUT -j limit-2382 +-A INPUT -j limit-2381 +-A INPUT -j limit-2380 +-A INPUT -j limit-2379 +-A INPUT -j limit-2378 +-A INPUT -j limit-2377 +-A INPUT -j limit-2376 +-A INPUT -j limit-2375 +-A INPUT -j limit-2374 +-A INPUT -j limit-2373 +-A INPUT -j limit-2372 +-A INPUT -j limit-2371 +-A INPUT -j limit-2370 +-A INPUT -j limit-2369 +-A INPUT -j limit-2368 +-A INPUT -j limit-2367 +-A INPUT -j limit-2366 +-A INPUT -j limit-2365 +-A INPUT -j limit-2364 +-A INPUT -j limit-2363 +-A INPUT -j limit-2362 +-A INPUT -j limit-2361 +-A INPUT -j limit-2360 +-A INPUT -j limit-2359 +-A INPUT -j limit-2358 +-A INPUT -j limit-2357 +-A INPUT -j limit-2356 +-A INPUT -j limit-2355 +-A INPUT -j limit-2354 +-A INPUT -j limit-2353 +-A INPUT -j limit-2352 +-A INPUT -j limit-2351 +-A INPUT -j limit-2350 +-A INPUT -j limit-2349 +-A INPUT -j limit-2348 +-A INPUT -j limit-2347 +-A INPUT -j limit-2346 +-A INPUT -j limit-2345 +-A INPUT -j limit-2344 +-A INPUT -j limit-2343 +-A INPUT -j limit-2342 +-A INPUT -j limit-2341 +-A INPUT -j limit-2340 +-A INPUT -j limit-2339 +-A INPUT -j limit-2338 +-A INPUT -j limit-2337 +-A INPUT -j limit-2336 +-A INPUT -j limit-2335 +-A INPUT -j limit-2334 +-A INPUT -j limit-2333 +-A INPUT -j limit-2332 +-A INPUT -j limit-2331 +-A INPUT -j limit-2330 +-A INPUT -j limit-2329 +-A INPUT -j limit-2328 +-A INPUT -j limit-2327 +-A INPUT -j limit-2326 +-A INPUT -j limit-2325 +-A INPUT -j limit-2324 +-A INPUT -j limit-2323 +-A INPUT -j limit-2322 +-A INPUT -j limit-2321 +-A INPUT -j limit-2320 +-A INPUT -j limit-2319 +-A INPUT -j limit-2318 +-A INPUT -j limit-2317 +-A INPUT -j limit-2316 +-A INPUT -j limit-2315 +-A INPUT -j limit-2314 +-A INPUT -j limit-2313 +-A INPUT -j limit-2312 +-A INPUT -j limit-2311 +-A INPUT -j limit-2310 +-A INPUT -j limit-2309 +-A INPUT -j limit-2308 +-A INPUT -j limit-2307 +-A INPUT -j limit-2306 +-A INPUT -j limit-2305 +-A INPUT -j limit-2304 +-A INPUT -j limit-2303 +-A INPUT -j limit-2302 +-A INPUT -j limit-2301 +-A INPUT -j limit-2300 +-A INPUT -j limit-2299 +-A INPUT -j limit-2298 +-A INPUT -j limit-2297 +-A INPUT -j limit-2296 +-A INPUT -j limit-2295 +-A INPUT -j limit-2294 +-A INPUT -j limit-2293 +-A INPUT -j limit-2292 +-A INPUT -j limit-2291 +-A INPUT -j limit-2290 +-A INPUT -j limit-2289 +-A INPUT -j limit-2288 +-A INPUT -j limit-2287 +-A INPUT -j limit-2286 +-A INPUT -j limit-2285 +-A INPUT -j limit-2284 +-A INPUT -j limit-2283 +-A INPUT -j limit-2282 +-A INPUT -j limit-2281 +-A INPUT -j limit-2280 +-A INPUT -j limit-2279 +-A INPUT -j limit-2278 +-A INPUT -j limit-2277 +-A INPUT -j limit-2276 +-A INPUT -j limit-2275 +-A INPUT -j limit-2274 +-A INPUT -j limit-2273 +-A INPUT -j limit-2272 +-A INPUT -j limit-2271 +-A INPUT -j limit-2270 +-A INPUT -j limit-2269 +-A INPUT -j limit-2268 +-A INPUT -j limit-2267 +-A INPUT -j limit-2266 +-A INPUT -j limit-2265 +-A INPUT -j limit-2264 +-A INPUT -j limit-2263 +-A INPUT -j limit-2262 +-A INPUT -j limit-2261 +-A INPUT -j limit-2260 +-A INPUT -j limit-2259 +-A INPUT -j limit-2258 +-A INPUT -j limit-2257 +-A INPUT -j limit-2256 +-A INPUT -j limit-2255 +-A INPUT -j limit-2254 +-A INPUT -j limit-2253 +-A INPUT -j limit-2252 +-A INPUT -j limit-2251 +-A INPUT -j limit-2250 +-A INPUT -j limit-2249 +-A INPUT -j limit-2248 +-A INPUT -j limit-2247 +-A INPUT -j limit-2246 +-A INPUT -j limit-2245 +-A INPUT -j limit-2244 +-A INPUT -j limit-2243 +-A INPUT -j limit-2242 +-A INPUT -j limit-2241 +-A INPUT -j limit-2240 +-A INPUT -j limit-2239 +-A INPUT -j limit-2238 +-A INPUT -j limit-2237 +-A INPUT -j limit-2236 +-A INPUT -j limit-2235 +-A INPUT -j limit-2234 +-A INPUT -j limit-2233 +-A INPUT -j limit-2232 +-A INPUT -j limit-2231 +-A INPUT -j limit-2230 +-A INPUT -j limit-2229 +-A INPUT -j limit-2228 +-A INPUT -j limit-2227 +-A INPUT -j limit-2226 +-A INPUT -j limit-2225 +-A INPUT -j limit-2224 +-A INPUT -j limit-2223 +-A INPUT -j limit-2222 +-A INPUT -j limit-2221 +-A INPUT -j limit-2220 +-A INPUT -j limit-2219 +-A INPUT -j limit-2218 +-A INPUT -j limit-2217 +-A INPUT -j limit-2216 +-A INPUT -j limit-2215 +-A INPUT -j limit-2214 +-A INPUT -j limit-2213 +-A INPUT -j limit-2212 +-A INPUT -j limit-2211 +-A INPUT -j limit-2210 +-A INPUT -j limit-2209 +-A INPUT -j limit-2208 +-A INPUT -j limit-2207 +-A INPUT -j limit-2206 +-A INPUT -j limit-2205 +-A INPUT -j limit-2204 +-A INPUT -j limit-2203 +-A INPUT -j limit-2202 +-A INPUT -j limit-2201 +-A INPUT -j limit-2200 +-A INPUT -j limit-2199 +-A INPUT -j limit-2198 +-A INPUT -j limit-2197 +-A INPUT -j limit-2196 +-A INPUT -j limit-2195 +-A INPUT -j limit-2194 +-A INPUT -j limit-2193 +-A INPUT -j limit-2192 +-A INPUT -j limit-2191 +-A INPUT -j limit-2190 +-A INPUT -j limit-2189 +-A INPUT -j limit-2188 +-A INPUT -j limit-2187 +-A INPUT -j limit-2186 +-A INPUT -j limit-2185 +-A INPUT -j limit-2184 +-A INPUT -j limit-2183 +-A INPUT -j limit-2182 +-A INPUT -j limit-2181 +-A INPUT -j limit-2180 +-A INPUT -j limit-2179 +-A INPUT -j limit-2178 +-A INPUT -j limit-2177 +-A INPUT -j limit-2176 +-A INPUT -j limit-2175 +-A INPUT -j limit-2174 +-A INPUT -j limit-2173 +-A INPUT -j limit-2172 +-A INPUT -j limit-2171 +-A INPUT -j limit-2170 +-A INPUT -j limit-2169 +-A INPUT -j limit-2168 +-A INPUT -j limit-2167 +-A INPUT -j limit-2166 +-A INPUT -j limit-2165 +-A INPUT -j limit-2164 +-A INPUT -j limit-2163 +-A INPUT -j limit-2162 +-A INPUT -j limit-2161 +-A INPUT -j limit-2160 +-A INPUT -j limit-2159 +-A INPUT -j limit-2158 +-A INPUT -j limit-2157 +-A INPUT -j limit-2156 +-A INPUT -j limit-2155 +-A INPUT -j limit-2154 +-A INPUT -j limit-2153 +-A INPUT -j limit-2152 +-A INPUT -j limit-2151 +-A INPUT -j limit-2150 +-A INPUT -j limit-2149 +-A INPUT -j limit-2148 +-A INPUT -j limit-2147 +-A INPUT -j limit-2146 +-A INPUT -j limit-2145 +-A INPUT -j limit-2144 +-A INPUT -j limit-2143 +-A INPUT -j limit-2142 +-A INPUT -j limit-2141 +-A INPUT -j limit-2140 +-A INPUT -j limit-2139 +-A INPUT -j limit-2138 +-A INPUT -j limit-2137 +-A INPUT -j limit-2136 +-A INPUT -j limit-2135 +-A INPUT -j limit-2134 +-A INPUT -j limit-2133 +-A INPUT -j limit-2132 +-A INPUT -j limit-2131 +-A INPUT -j limit-2130 +-A INPUT -j limit-2129 +-A INPUT -j limit-2128 +-A INPUT -j limit-2127 +-A INPUT -j limit-2126 +-A INPUT -j limit-2125 +-A INPUT -j limit-2124 +-A INPUT -j limit-2123 +-A INPUT -j limit-2122 +-A INPUT -j limit-2121 +-A INPUT -j limit-2120 +-A INPUT -j limit-2119 +-A INPUT -j limit-2118 +-A INPUT -j limit-2117 +-A INPUT -j limit-2116 +-A INPUT -j limit-2115 +-A INPUT -j limit-2114 +-A INPUT -j limit-2113 +-A INPUT -j limit-2112 +-A INPUT -j limit-2111 +-A INPUT -j limit-2110 +-A INPUT -j limit-2109 +-A INPUT -j limit-2108 +-A INPUT -j limit-2107 +-A INPUT -j limit-2106 +-A INPUT -j limit-2105 +-A INPUT -j limit-2104 +-A INPUT -j limit-2103 +-A INPUT -j limit-2102 +-A INPUT -j limit-2101 +-A INPUT -j limit-2100 +-A INPUT -j limit-2099 +-A INPUT -j limit-2098 +-A INPUT -j limit-2097 +-A INPUT -j limit-2096 +-A INPUT -j limit-2095 +-A INPUT -j limit-2094 +-A INPUT -j limit-2093 +-A INPUT -j limit-2092 +-A INPUT -j limit-2091 +-A INPUT -j limit-2090 +-A INPUT -j limit-2089 +-A INPUT -j limit-2088 +-A INPUT -j limit-2087 +-A INPUT -j limit-2086 +-A INPUT -j limit-2085 +-A INPUT -j limit-2084 +-A INPUT -j limit-2083 +-A INPUT -j limit-2082 +-A INPUT -j limit-2081 +-A INPUT -j limit-2080 +-A INPUT -j limit-2079 +-A INPUT -j limit-2078 +-A INPUT -j limit-2077 +-A INPUT -j limit-2076 +-A INPUT -j limit-2075 +-A INPUT -j limit-2074 +-A INPUT -j limit-2073 +-A INPUT -j limit-2072 +-A INPUT -j limit-2071 +-A INPUT -j limit-2070 +-A INPUT -j limit-2069 +-A INPUT -j limit-2068 +-A INPUT -j limit-2067 +-A INPUT -j limit-2066 +-A INPUT -j limit-2065 +-A INPUT -j limit-2064 +-A INPUT -j limit-2063 +-A INPUT -j limit-2062 +-A INPUT -j limit-2061 +-A INPUT -j limit-2060 +-A INPUT -j limit-2059 +-A INPUT -j limit-2058 +-A INPUT -j limit-2057 +-A INPUT -j limit-2056 +-A INPUT -j limit-2055 +-A INPUT -j limit-2054 +-A INPUT -j limit-2053 +-A INPUT -j limit-2052 +-A INPUT -j limit-2051 +-A INPUT -j limit-2050 +-A INPUT -j limit-2049 +-A INPUT -j limit-2048 +-A INPUT -j limit-2047 +-A INPUT -j limit-2046 +-A INPUT -j limit-2045 +-A INPUT -j limit-2044 +-A INPUT -j limit-2043 +-A INPUT -j limit-2042 +-A INPUT -j limit-2041 +-A INPUT -j limit-2040 +-A INPUT -j limit-2039 +-A INPUT -j limit-2038 +-A INPUT -j limit-2037 +-A INPUT -j limit-2036 +-A INPUT -j limit-2035 +-A INPUT -j limit-2034 +-A INPUT -j limit-2033 +-A INPUT -j limit-2032 +-A INPUT -j limit-2031 +-A INPUT -j limit-2030 +-A INPUT -j limit-2029 +-A INPUT -j limit-2028 +-A INPUT -j limit-2027 +-A INPUT -j limit-2026 +-A INPUT -j limit-2025 +-A INPUT -j limit-2024 +-A INPUT -j limit-2023 +-A INPUT -j limit-2022 +-A INPUT -j limit-2021 +-A INPUT -j limit-2020 +-A INPUT -j limit-2019 +-A INPUT -j limit-2018 +-A INPUT -j limit-2017 +-A INPUT -j limit-2016 +-A INPUT -j limit-2015 +-A INPUT -j limit-2014 +-A INPUT -j limit-2013 +-A INPUT -j limit-2012 +-A INPUT -j limit-2011 +-A INPUT -j limit-2010 +-A INPUT -j limit-2009 +-A INPUT -j limit-2008 +-A INPUT -j limit-2007 +-A INPUT -j limit-2006 +-A INPUT -j limit-2005 +-A INPUT -j limit-2004 +-A INPUT -j limit-2003 +-A INPUT -j limit-2002 +-A INPUT -j limit-2001 +-A INPUT -j limit-2000 +-A INPUT -j limit-1999 +-A INPUT -j limit-1998 +-A INPUT -j limit-1997 +-A INPUT -j limit-1996 +-A INPUT -j limit-1995 +-A INPUT -j limit-1994 +-A INPUT -j limit-1993 +-A INPUT -j limit-1992 +-A INPUT -j limit-1991 +-A INPUT -j limit-1990 +-A INPUT -j limit-1989 +-A INPUT -j limit-1988 +-A INPUT -j limit-1987 +-A INPUT -j limit-1986 +-A INPUT -j limit-1985 +-A INPUT -j limit-1984 +-A INPUT -j limit-1983 +-A INPUT -j limit-1982 +-A INPUT -j limit-1981 +-A INPUT -j limit-1980 +-A INPUT -j limit-1979 +-A INPUT -j limit-1978 +-A INPUT -j limit-1977 +-A INPUT -j limit-1976 +-A INPUT -j limit-1975 +-A INPUT -j limit-1974 +-A INPUT -j limit-1973 +-A INPUT -j limit-1972 +-A INPUT -j limit-1971 +-A INPUT -j limit-1970 +-A INPUT -j limit-1969 +-A INPUT -j limit-1968 +-A INPUT -j limit-1967 +-A INPUT -j limit-1966 +-A INPUT -j limit-1965 +-A INPUT -j limit-1964 +-A INPUT -j limit-1963 +-A INPUT -j limit-1962 +-A INPUT -j limit-1961 +-A INPUT -j limit-1960 +-A INPUT -j limit-1959 +-A INPUT -j limit-1958 +-A INPUT -j limit-1957 +-A INPUT -j limit-1956 +-A INPUT -j limit-1955 +-A INPUT -j limit-1954 +-A INPUT -j limit-1953 +-A INPUT -j limit-1952 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT -A INPUT -j logaccept-final-0 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-1 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-2 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-3 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-4 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-5 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-6 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-7 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-8 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-9 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-10 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-11 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-12 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-13 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-14 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-15 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-16 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-17 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-18 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-19 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-20 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-21 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-22 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-23 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-24 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-25 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-26 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-27 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-28 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-29 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-30 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-31 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-32 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-33 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-34 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-35 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-36 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-37 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-38 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-39 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-40 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-41 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-42 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-43 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-44 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-45 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-46 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-47 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-48 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-49 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-50 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-51 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-52 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-53 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-54 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-55 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-56 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-57 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-58 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-59 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-60 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-61 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-62 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-63 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-64 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-65 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-66 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-67 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-68 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-69 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-70 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-71 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-72 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-73 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-74 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-75 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-76 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-77 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-78 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-79 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-80 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-81 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-82 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-83 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-84 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-85 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-86 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-87 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-88 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-89 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-90 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-91 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-92 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-93 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-94 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-95 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-96 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-97 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-98 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-99 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-100 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-101 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-102 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-103 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-104 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-105 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-106 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-107 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-108 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-109 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-110 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-111 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-112 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-113 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-114 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-115 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-116 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-117 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-118 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-119 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-120 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-121 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-122 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-123 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-124 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-125 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-126 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-127 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-128 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-129 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-130 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-131 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-132 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-133 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-134 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-135 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-136 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-137 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-138 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-139 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-140 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-141 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-142 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-143 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-144 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-145 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-146 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-147 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-148 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-149 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-150 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-151 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-152 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-153 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-154 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-155 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-156 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-157 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-158 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-159 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-160 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-161 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-162 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-163 --A INPUT -i eth0 -j limit-1887 --A INPUT -i eth0 -j limit-1888 --A INPUT -i eth0 -j limit-1889 --A INPUT -i eth0 -j limit-1890 --A INPUT -i eth0 -j limit-1891 --A INPUT -i eth0 -j limit-1892 --A INPUT -i eth0 -j limit-1893 --A INPUT -i eth0 -j limit-1894 --A INPUT -i eth0 -j limit-1895 --A INPUT -i eth0 -j limit-1896 --A INPUT -i eth0 -j limit-1897 --A INPUT -i eth0 -j limit-1898 --A INPUT -i eth0 -j limit-1899 --A INPUT -i eth0 -j limit-1900 --A INPUT -i eth0 -j limit-1901 --A INPUT -i eth0 -j limit-1902 --A INPUT -i eth0 -j limit-1903 --A INPUT -i eth0 -j limit-1904 --A INPUT -i eth0 -j limit-1905 --A INPUT -i eth0 -j limit-1906 --A INPUT -i eth0 -j limit-1907 --A INPUT -i eth0 -j limit-1908 --A INPUT -i eth0 -j limit-1909 --A INPUT -i eth0 -j limit-1910 --A INPUT -i eth0 -j limit-1911 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-164 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-165 +-A INPUT -j logaccept-final-166 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-167 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-168 +-A INPUT -j logaccept-final-169 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-170 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-171 +-A INPUT -j logaccept-final-172 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-173 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-174 +-A INPUT -j logaccept-final-175 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-176 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-177 +-A INPUT -j logaccept-final-178 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-179 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-180 +-A INPUT -j logaccept-final-181 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-182 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-183 +-A INPUT -j logaccept-final-184 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-185 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-186 +-A INPUT -j logaccept-final-187 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-188 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-189 +-A INPUT -j logaccept-final-190 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-191 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-192 +-A INPUT -j logaccept-final-193 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-194 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-195 +-A INPUT -j logaccept-final-196 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-197 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-198 +-A INPUT -j logaccept-final-199 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-200 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-201 +-A INPUT -j logaccept-final-202 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-203 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-204 +-A INPUT -j logaccept-final-205 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-206 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-207 +-A INPUT -j logaccept-final-208 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-209 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-210 +-A INPUT -j logaccept-final-211 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-212 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-213 +-A INPUT -j logaccept-final-214 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-215 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-216 +-A INPUT -j logaccept-final-217 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-218 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-219 +-A INPUT -j logaccept-final-220 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-221 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-222 +-A INPUT -j logaccept-final-223 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-224 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-225 +-A INPUT -j logaccept-final-226 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-227 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-228 +-A INPUT -j logaccept-final-229 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-230 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-231 +-A INPUT -j logaccept-final-232 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-233 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-234 +-A INPUT -j logaccept-final-235 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-236 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-237 +-A INPUT -j logaccept-final-238 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-239 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-240 +-A INPUT -j logaccept-final-241 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-242 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-243 +-A INPUT -j logaccept-final-244 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-245 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-246 +-A INPUT -j logaccept-final-247 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-248 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-249 +-A INPUT -j logaccept-final-250 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-251 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-252 +-A INPUT -j logaccept-final-253 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-254 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-255 +-A INPUT -j logaccept-final-256 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-257 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-258 +-A INPUT -j logaccept-final-259 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-260 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-261 +-A INPUT -j logaccept-final-262 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-263 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-264 +-A INPUT -j logaccept-final-265 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-266 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-267 +-A INPUT -j logaccept-final-268 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-269 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-270 +-A INPUT -j logaccept-final-271 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-272 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-273 +-A INPUT -j logaccept-final-274 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-275 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-276 +-A INPUT -j logaccept-final-277 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-278 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-279 +-A INPUT -j logaccept-final-280 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-281 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-282 +-A INPUT -j logaccept-final-283 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-284 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-285 +-A INPUT -j logaccept-final-286 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-287 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-288 +-A INPUT -j logaccept-final-289 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-290 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-291 +-A INPUT -j logaccept-final-292 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-293 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-294 +-A INPUT -j logaccept-final-295 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-296 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-297 +-A INPUT -j logaccept-final-298 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-299 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-300 +-A INPUT -j logaccept-final-301 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-302 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-303 +-A INPUT -j logaccept-final-304 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-305 +-A INPUT -i eth0 -j limit-2928 +-A INPUT -i eth0 -j limit-2929 +-A INPUT -i eth0 -j limit-2930 +-A INPUT -i eth0 -j limit-2931 +-A INPUT -i eth0 -j limit-2932 +-A INPUT -i eth0 -j limit-2933 +-A INPUT -i eth0 -j limit-2934 +-A INPUT -i eth0 -j limit-2935 +-A INPUT -i eth0 -j limit-2936 +-A INPUT -i eth0 -j limit-2937 +-A INPUT -i eth0 -j limit-2938 +-A INPUT -i eth0 -j limit-2939 +-A INPUT -i eth0 -j limit-2940 +-A INPUT -i eth0 -j limit-2941 +-A INPUT -i eth0 -j limit-2942 +-A INPUT -i eth0 -j limit-2943 +-A INPUT -i eth0 -j limit-2944 +-A INPUT -i eth0 -j limit-2945 +-A INPUT -i eth0 -j limit-2946 +-A INPUT -i eth0 -j limit-2947 +-A INPUT -i eth0 -j limit-2948 +-A INPUT -i eth0 -j limit-2949 +-A INPUT -i eth0 -j limit-2950 +-A INPUT -i eth0 -j limit-2951 +-A INPUT -i eth0 -j limit-2952 +-A INPUT -i eth0 -j limit-2953 +-A INPUT -i eth0 -j limit-2954 +-A INPUT -i eth0 -j limit-2955 +-A INPUT -i eth0 -j limit-2956 +-A INPUT -i eth0 -j limit-2957 +-A INPUT -i eth0 -j limit-2958 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1913 --A INPUT -i eth0 -j limit-1914 --A INPUT -i eth0 -j limit-1915 +-A INPUT -i eth0 -j limit-2960 +-A INPUT -i eth0 -j limit-2961 +-A INPUT -i eth0 -j limit-2962 +-A INPUT -i eth0 -j limit-2963 +-A INPUT -i eth0 -j limit-2964 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1917 --A INPUT -i eth0 -j limit-1918 --A INPUT -i eth0 -j limit-1919 --A INPUT -i eth0 -j limit-1920 --A INPUT -i eth0 -j limit-1921 --A INPUT -i eth0 -j limit-1922 --A INPUT -i eth0 -j limit-1923 --A INPUT -i eth0 -j limit-1924 --A INPUT -i eth0 -j limit-1925 --A INPUT -i eth0 -j limit-1926 --A INPUT -i eth0 -j limit-1927 +-A INPUT -i eth0 -j limit-2966 +-A INPUT -i eth0 -j limit-2967 +-A INPUT -i eth0 -j limit-2968 +-A INPUT -i eth0 -j limit-2969 +-A INPUT -i eth0 -j limit-2970 +-A INPUT -i eth0 -j limit-2971 +-A INPUT -i eth0 -j limit-2972 +-A INPUT -i eth0 -j limit-2973 +-A INPUT -i eth0 -j limit-2974 +-A INPUT -i eth0 -j limit-2975 +-A INPUT -i eth0 -j limit-2976 +-A INPUT -i eth0 -j limit-2977 +-A INPUT -i eth0 -j limit-2978 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1929 --A INPUT -i eth0 -j limit-1930 --A INPUT -i eth0 -j limit-1931 +-A INPUT -i eth0 -j limit-2980 +-A INPUT -i eth0 -j limit-2981 +-A INPUT -i eth0 -j limit-2982 +-A INPUT -i eth0 -j limit-2983 +-A INPUT -i eth0 -j limit-2984 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1933 --A INPUT -i eth0 -j limit-1934 --A INPUT -i eth0 -j limit-1935 --A INPUT -i eth0 -j limit-1936 --A INPUT -i eth0 -j limit-1937 --A INPUT -i eth0 -j limit-1938 --A INPUT -i eth0 -j limit-1939 --A INPUT -i eth0 -j limit-1940 --A INPUT -i eth0 -j limit-1941 --A INPUT -i eth0 -j limit-1942 --A INPUT -i eth0 -j limit-1943 +-A INPUT -i eth0 -j limit-2986 +-A INPUT -i eth0 -j limit-2987 +-A INPUT -i eth0 -j limit-2988 +-A INPUT -i eth0 -j limit-2989 +-A INPUT -i eth0 -j limit-2990 +-A INPUT -i eth0 -j limit-2991 +-A INPUT -i eth0 -j limit-2992 +-A INPUT -i eth0 -j limit-2993 +-A INPUT -i eth0 -j limit-2994 +-A INPUT -i eth0 -j limit-2995 +-A INPUT -i eth0 -j limit-2996 +-A INPUT -i eth0 -j limit-2997 +-A INPUT -i eth0 -j limit-2998 -A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1945 --A INPUT -i eth0 -j limit-1946 --A INPUT -i eth0 -j limit-1947 +-A INPUT -i eth0 -j limit-3000 +-A INPUT -i eth0 -j limit-3001 +-A INPUT -i eth0 -j limit-3002 +-A INPUT -i eth0 -j limit-3003 +-A INPUT -i eth0 -j limit-3004 -A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1949 --A INPUT -i eth0 -j limit-1950 --A INPUT -i eth0 -j limit-1951 --A INPUT -i eth0 -j limit-1952 --A INPUT -i eth0 -j limit-1953 --A INPUT -i eth0 -j limit-1954 --A INPUT -i eth0 -j limit-1955 --A INPUT -i eth0 -j limit-1956 --A INPUT -i eth0 -j limit-1957 --A INPUT -i eth0 -j limit-1958 --A INPUT -i eth0 -j limit-1959 +-A INPUT -i eth0 -j limit-3006 +-A INPUT -i eth0 -j limit-3007 +-A INPUT -i eth0 -j limit-3008 +-A INPUT -i eth0 -j limit-3009 +-A INPUT -i eth0 -j limit-3010 +-A INPUT -i eth0 -j limit-3011 +-A INPUT -i eth0 -j limit-3012 +-A INPUT -i eth0 -j limit-3013 +-A INPUT -i eth0 -j limit-3014 +-A INPUT -i eth0 -j limit-3015 +-A INPUT -i eth0 -j limit-3016 +-A INPUT -i eth0 -j limit-3017 +-A INPUT -i eth0 -j limit-3018 -A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1961 --A INPUT -i eth0 -j limit-1962 --A INPUT -i eth0 -j limit-1963 +-A INPUT -i eth0 -j limit-3020 +-A INPUT -i eth0 -j limit-3021 +-A INPUT -i eth0 -j limit-3022 +-A INPUT -i eth0 -j limit-3023 +-A INPUT -i eth0 -j limit-3024 -A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1965 --A INPUT -i eth0 -j limit-1966 --A INPUT -i eth0 -j limit-1967 --A INPUT -i eth0 -j limit-1968 --A INPUT -i eth0 -j limit-1969 --A INPUT -i eth0 -j limit-1970 --A INPUT -i eth0 -j limit-1971 --A INPUT -i eth0 -j limit-1972 --A INPUT -i eth0 -j limit-1973 --A INPUT -i eth0 -j limit-1974 --A INPUT -i eth0 -j limit-1975 --A INPUT -i eth0 -j limit-1976 --A INPUT -i eth0 -j limit-1977 --A INPUT -i eth0 -j limit-1978 --A INPUT -i eth0 -j limit-1979 --A INPUT -i eth0 -j limit-1980 --A INPUT -i eth0 -j limit-1981 --A INPUT -i eth0 -j limit-1982 --A INPUT -i eth0 -j limit-1983 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-913 --A INPUT -i eth0 -j limit-1985 --A INPUT -i eth0 -j limit-1986 --A INPUT -i eth0 -j limit-1987 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-917 --A INPUT -i eth0 -j limit-1989 --A INPUT -i eth0 -j limit-1990 --A INPUT -i eth0 -j limit-1991 --A INPUT -i eth0 -j limit-1992 --A INPUT -i eth0 -j limit-1993 --A INPUT -i eth0 -j limit-1994 --A INPUT -i eth0 -j limit-1995 --A INPUT -i eth0 -j limit-1996 --A INPUT -i eth0 -j limit-1997 --A INPUT -i eth0 -j limit-1998 --A INPUT -i eth0 -j limit-1999 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-929 --A INPUT -i eth0 -j limit-2001 --A INPUT -i eth0 -j limit-2002 --A INPUT -i eth0 -j limit-2003 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-933 --A INPUT -i eth0 -j limit-2005 --A INPUT -i eth0 -j limit-2006 --A INPUT -i eth0 -j limit-2007 --A INPUT -i eth0 -j limit-2008 --A INPUT -i eth0 -j limit-2009 --A INPUT -i eth0 -j limit-2010 --A INPUT -i eth0 -j limit-2011 --A INPUT -i eth0 -j limit-2012 --A INPUT -i eth0 -j limit-2013 --A INPUT -i eth0 -j limit-2014 --A INPUT -i eth0 -j limit-2015 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-945 --A INPUT -i eth0 -j limit-2017 --A INPUT -i eth0 -j limit-2018 --A INPUT -i eth0 -j limit-2019 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-949 --A INPUT -i eth0 -j limit-2021 --A INPUT -i eth0 -j limit-2022 --A INPUT -i eth0 -j limit-2023 --A INPUT -i eth0 -j limit-2024 --A INPUT -i eth0 -j limit-2025 --A INPUT -i eth0 -j limit-2026 --A INPUT -i eth0 -j limit-2027 --A INPUT -i eth0 -j limit-2028 --A INPUT -i eth0 -j limit-2029 --A INPUT -i eth0 -j limit-2030 --A INPUT -i eth0 -j limit-2031 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-961 --A INPUT -i eth0 -j limit-2033 --A INPUT -i eth0 -j limit-2034 --A INPUT -i eth0 -j limit-2035 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-965 --A INPUT -i eth0 -j limit-2037 --A INPUT -i eth0 -j limit-2038 --A INPUT -i eth0 -j limit-2039 --A INPUT -i eth0 -j limit-2040 --A INPUT -i eth0 -j limit-2041 --A INPUT -i eth0 -j limit-2042 --A INPUT -i eth0 -j limit-2043 --A INPUT -i eth0 -j limit-2044 --A INPUT -i eth0 -j limit-2045 --A INPUT -i eth0 -j limit-2046 --A INPUT -i eth0 -j limit-2047 --A INPUT -i eth0 -j limit-2048 --A INPUT -i eth0 -j limit-2049 --A INPUT -i eth0 -j limit-2050 --A INPUT -i eth0 -j limit-2051 --A INPUT -i eth0 -j limit-2052 --A INPUT -i eth0 -j limit-2053 --A INPUT -i eth0 -j limit-2054 --A INPUT -i eth0 -j limit-2055 +-A INPUT -i eth0 -j limit-3026 +-A INPUT -i eth0 -j limit-3027 +-A INPUT -i eth0 -j limit-3028 +-A INPUT -i eth0 -j limit-3029 +-A INPUT -i eth0 -j limit-3030 +-A INPUT -i eth0 -j limit-3031 +-A INPUT -i eth0 -j limit-3032 +-A INPUT -i eth0 -j limit-3033 +-A INPUT -i eth0 -j limit-3034 +-A INPUT -i eth0 -j limit-3035 +-A INPUT -i eth0 -j limit-3036 +-A INPUT -i eth0 -j limit-3037 +-A INPUT -i eth0 -j limit-3038 +-A INPUT -i eth0 -j limit-3039 +-A INPUT -i eth0 -j limit-3040 +-A INPUT -i eth0 -j limit-3041 +-A INPUT -i eth0 -j limit-3042 +-A INPUT -i eth0 -j limit-3043 +-A INPUT -i eth0 -j limit-3044 +-A INPUT -i eth0 -j limit-3045 +-A INPUT -i eth0 -j limit-3046 +-A INPUT -i eth0 -j limit-3047 +-A INPUT -i eth0 -j limit-3048 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 +-A INPUT -i eth0 -j limit-3050 +-A INPUT -i eth0 -j limit-3051 +-A INPUT -i eth0 -j limit-3052 +-A INPUT -i eth0 -j limit-3053 +-A INPUT -i eth0 -j limit-3054 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 +-A INPUT -i eth0 -j limit-3056 +-A INPUT -i eth0 -j limit-3057 +-A INPUT -i eth0 -j limit-3058 +-A INPUT -i eth0 -j limit-3059 +-A INPUT -i eth0 -j limit-3060 +-A INPUT -i eth0 -j limit-3061 +-A INPUT -i eth0 -j limit-3062 +-A INPUT -i eth0 -j limit-3063 +-A INPUT -i eth0 -j limit-3064 +-A INPUT -i eth0 -j limit-3065 +-A INPUT -i eth0 -j limit-3066 +-A INPUT -i eth0 -j limit-3067 +-A INPUT -i eth0 -j limit-3068 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 +-A INPUT -i eth0 -j limit-3070 +-A INPUT -i eth0 -j limit-3071 +-A INPUT -i eth0 -j limit-3072 +-A INPUT -i eth0 -j limit-3073 +-A INPUT -i eth0 -j limit-3074 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 +-A INPUT -i eth0 -j limit-3076 +-A INPUT -i eth0 -j limit-3077 +-A INPUT -i eth0 -j limit-3078 +-A INPUT -i eth0 -j limit-3079 +-A INPUT -i eth0 -j limit-3080 +-A INPUT -i eth0 -j limit-3081 +-A INPUT -i eth0 -j limit-3082 +-A INPUT -i eth0 -j limit-3083 +-A INPUT -i eth0 -j limit-3084 +-A INPUT -i eth0 -j limit-3085 +-A INPUT -i eth0 -j limit-3086 +-A INPUT -i eth0 -j limit-3087 +-A INPUT -i eth0 -j limit-3088 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 +-A INPUT -i eth0 -j limit-3090 +-A INPUT -i eth0 -j limit-3091 +-A INPUT -i eth0 -j limit-3092 +-A INPUT -i eth0 -j limit-3093 +-A INPUT -i eth0 -j limit-3094 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 +-A INPUT -i eth0 -j limit-3096 +-A INPUT -i eth0 -j limit-3097 +-A INPUT -i eth0 -j limit-3098 +-A INPUT -i eth0 -j limit-3099 +-A INPUT -i eth0 -j limit-3100 +-A INPUT -i eth0 -j limit-3101 +-A INPUT -i eth0 -j limit-3102 +-A INPUT -i eth0 -j limit-3103 +-A INPUT -i eth0 -j limit-3104 +-A INPUT -i eth0 -j limit-3105 +-A INPUT -i eth0 -j limit-3106 +-A INPUT -i eth0 -j limit-3107 +-A INPUT -i eth0 -j limit-3108 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 +-A INPUT -i eth0 -j limit-3110 +-A INPUT -i eth0 -j limit-3111 +-A INPUT -i eth0 -j limit-3112 +-A INPUT -i eth0 -j limit-3113 +-A INPUT -i eth0 -j limit-3114 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 +-A INPUT -i eth0 -j limit-3116 +-A INPUT -i eth0 -j limit-3117 +-A INPUT -i eth0 -j limit-3118 +-A INPUT -i eth0 -j limit-3119 +-A INPUT -i eth0 -j limit-3120 +-A INPUT -i eth0 -j limit-3121 +-A INPUT -i eth0 -j limit-3122 +-A INPUT -i eth0 -j limit-3123 +-A INPUT -i eth0 -j limit-3124 +-A INPUT -i eth0 -j limit-3125 +-A INPUT -i eth0 -j limit-3126 +-A INPUT -i eth0 -j limit-3127 +-A INPUT -i eth0 -j limit-3128 +-A INPUT -i eth0 -j limit-3129 +-A INPUT -i eth0 -j limit-3130 +-A INPUT -i eth0 -j limit-3131 +-A INPUT -i eth0 -j limit-3132 +-A INPUT -i eth0 -j limit-3133 +-A INPUT -i eth0 -j limit-3134 +-A INPUT -i eth0 -j limit-3135 +-A INPUT -i eth0 -j limit-3136 +-A INPUT -i eth0 -j limit-3137 +-A INPUT -i eth0 -j limit-3138 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 +-A INPUT -i eth0 -j limit-3140 +-A INPUT -i eth0 -j limit-3141 +-A INPUT -i eth0 -j limit-3142 +-A INPUT -i eth0 -j limit-3143 +-A INPUT -i eth0 -j limit-3144 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 +-A INPUT -i eth0 -j limit-3146 +-A INPUT -i eth0 -j limit-3147 +-A INPUT -i eth0 -j limit-3148 +-A INPUT -i eth0 -j limit-3149 +-A INPUT -i eth0 -j limit-3150 +-A INPUT -i eth0 -j limit-3151 +-A INPUT -i eth0 -j limit-3152 +-A INPUT -i eth0 -j limit-3153 +-A INPUT -i eth0 -j limit-3154 +-A INPUT -i eth0 -j limit-3155 +-A INPUT -i eth0 -j limit-3156 +-A INPUT -i eth0 -j limit-3157 +-A INPUT -i eth0 -j limit-3158 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 +-A INPUT -i eth0 -j limit-3160 +-A INPUT -i eth0 -j limit-3161 +-A INPUT -i eth0 -j limit-3162 +-A INPUT -i eth0 -j limit-3163 +-A INPUT -i eth0 -j limit-3164 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 +-A INPUT -i eth0 -j limit-3166 +-A INPUT -i eth0 -j limit-3167 +-A INPUT -i eth0 -j limit-3168 +-A INPUT -i eth0 -j limit-3169 +-A INPUT -i eth0 -j limit-3170 +-A INPUT -i eth0 -j limit-3171 +-A INPUT -i eth0 -j limit-3172 +-A INPUT -i eth0 -j limit-3173 +-A INPUT -i eth0 -j limit-3174 +-A INPUT -i eth0 -j limit-3175 +-A INPUT -i eth0 -j limit-3176 +-A INPUT -i eth0 -j limit-3177 +-A INPUT -i eth0 -j limit-3178 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 +-A INPUT -i eth0 -j limit-3180 +-A INPUT -i eth0 -j limit-3181 +-A INPUT -i eth0 -j limit-3182 +-A INPUT -i eth0 -j limit-3183 +-A INPUT -i eth0 -j limit-3184 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 +-A INPUT -i eth0 -j limit-3186 +-A INPUT -i eth0 -j limit-3187 +-A INPUT -i eth0 -j limit-3188 +-A INPUT -i eth0 -j limit-3189 +-A INPUT -i eth0 -j limit-3190 +-A INPUT -i eth0 -j limit-3191 +-A INPUT -i eth0 -j limit-3192 +-A INPUT -i eth0 -j limit-3193 +-A INPUT -i eth0 -j limit-3194 +-A INPUT -i eth0 -j limit-3195 +-A INPUT -i eth0 -j limit-3196 +-A INPUT -i eth0 -j limit-3197 +-A INPUT -i eth0 -j limit-3198 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 +-A INPUT -i eth0 -j limit-3200 +-A INPUT -i eth0 -j limit-3201 +-A INPUT -i eth0 -j limit-3202 +-A INPUT -i eth0 -j limit-3203 +-A INPUT -i eth0 -j limit-3204 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 +-A INPUT -i eth0 -j limit-3206 +-A INPUT -i eth0 -j limit-3207 +-A INPUT -i eth0 -j limit-3208 +-A INPUT -i eth0 -j limit-3209 +-A INPUT -i eth0 -j limit-3210 +-A INPUT -i eth0 -j limit-3211 +-A INPUT -i eth0 -j limit-3212 +-A INPUT -i eth0 -j limit-3213 +-A INPUT -i eth0 -j limit-3214 +-A INPUT -i eth0 -j limit-3215 +-A INPUT -i eth0 -j limit-3216 +-A INPUT -i eth0 -j limit-3217 +-A INPUT -i eth0 -j limit-3218 +-A INPUT -i eth0 -j limit-3219 +-A INPUT -i eth0 -j limit-3220 +-A INPUT -i eth0 -j limit-3221 +-A INPUT -i eth0 -j limit-3222 +-A INPUT -i eth0 -j limit-3223 +-A INPUT -i eth0 -j limit-3224 +-A INPUT -i eth0 -j limit-3225 +-A INPUT -i eth0 -j limit-3226 +-A INPUT -i eth0 -j limit-3227 +-A INPUT -i eth0 -j limit-3228 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2057 --A INPUT -i eth0 -j limit-2058 --A INPUT -i eth0 -j limit-2059 +-A INPUT -i eth0 -j limit-3230 +-A INPUT -i eth0 -j limit-3231 +-A INPUT -i eth0 -j limit-3232 +-A INPUT -i eth0 -j limit-3233 +-A INPUT -i eth0 -j limit-3234 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2061 --A INPUT -i eth0 -j limit-2062 --A INPUT -i eth0 -j limit-2063 --A INPUT -i eth0 -j limit-2064 --A INPUT -i eth0 -j limit-2065 --A INPUT -i eth0 -j limit-2066 --A INPUT -i eth0 -j limit-2067 --A INPUT -i eth0 -j limit-2068 --A INPUT -i eth0 -j limit-2069 --A INPUT -i eth0 -j limit-2070 --A INPUT -i eth0 -j limit-2071 +-A INPUT -i eth0 -j limit-3236 +-A INPUT -i eth0 -j limit-3237 +-A INPUT -i eth0 -j limit-3238 +-A INPUT -i eth0 -j limit-3239 +-A INPUT -i eth0 -j limit-3240 +-A INPUT -i eth0 -j limit-3241 +-A INPUT -i eth0 -j limit-3242 +-A INPUT -i eth0 -j limit-3243 +-A INPUT -i eth0 -j limit-3244 +-A INPUT -i eth0 -j limit-3245 +-A INPUT -i eth0 -j limit-3246 +-A INPUT -i eth0 -j limit-3247 +-A INPUT -i eth0 -j limit-3248 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2073 --A INPUT -i eth0 -j limit-2074 --A INPUT -i eth0 -j limit-2075 +-A INPUT -i eth0 -j limit-3250 +-A INPUT -i eth0 -j limit-3251 +-A INPUT -i eth0 -j limit-3252 +-A INPUT -i eth0 -j limit-3253 +-A INPUT -i eth0 -j limit-3254 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2077 --A INPUT -i eth0 -j limit-2078 --A INPUT -i eth0 -j limit-2079 --A INPUT -i eth0 -j limit-2080 --A INPUT -i eth0 -j limit-2081 --A INPUT -i eth0 -j limit-2082 --A INPUT -i eth0 -j limit-2083 --A INPUT -i eth0 -j limit-2084 --A INPUT -i eth0 -j limit-2085 --A INPUT -i eth0 -j limit-2086 --A INPUT -i eth0 -j limit-2087 +-A INPUT -i eth0 -j limit-3256 +-A INPUT -i eth0 -j limit-3257 +-A INPUT -i eth0 -j limit-3258 +-A INPUT -i eth0 -j limit-3259 +-A INPUT -i eth0 -j limit-3260 +-A INPUT -i eth0 -j limit-3261 +-A INPUT -i eth0 -j limit-3262 +-A INPUT -i eth0 -j limit-3263 +-A INPUT -i eth0 -j limit-3264 +-A INPUT -i eth0 -j limit-3265 +-A INPUT -i eth0 -j limit-3266 +-A INPUT -i eth0 -j limit-3267 +-A INPUT -i eth0 -j limit-3268 -A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2089 --A INPUT -i eth0 -j limit-2090 --A INPUT -i eth0 -j limit-2091 +-A INPUT -i eth0 -j limit-3270 +-A INPUT -i eth0 -j limit-3271 +-A INPUT -i eth0 -j limit-3272 +-A INPUT -i eth0 -j limit-3273 +-A INPUT -i eth0 -j limit-3274 -A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2093 --A INPUT -i eth0 -j limit-2094 --A INPUT -i eth0 -j limit-2095 --A INPUT -i eth0 -j limit-2096 --A INPUT -i eth0 -j limit-2097 --A INPUT -i eth0 -j limit-2098 --A INPUT -i eth0 -j limit-2099 --A INPUT -i eth0 -j limit-2100 --A INPUT -i eth0 -j limit-2101 --A INPUT -i eth0 -j limit-2102 --A INPUT -i eth0 -j limit-2103 +-A INPUT -i eth0 -j limit-3276 +-A INPUT -i eth0 -j limit-3277 +-A INPUT -i eth0 -j limit-3278 +-A INPUT -i eth0 -j limit-3279 +-A INPUT -i eth0 -j limit-3280 +-A INPUT -i eth0 -j limit-3281 +-A INPUT -i eth0 -j limit-3282 +-A INPUT -i eth0 -j limit-3283 +-A INPUT -i eth0 -j limit-3284 +-A INPUT -i eth0 -j limit-3285 +-A INPUT -i eth0 -j limit-3286 +-A INPUT -i eth0 -j limit-3287 +-A INPUT -i eth0 -j limit-3288 -A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2105 --A INPUT -i eth0 -j limit-2106 --A INPUT -i eth0 -j limit-2107 +-A INPUT -i eth0 -j limit-3290 +-A INPUT -i eth0 -j limit-3291 +-A INPUT -i eth0 -j limit-3292 +-A INPUT -i eth0 -j limit-3293 +-A INPUT -i eth0 -j limit-3294 -A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2109 --A INPUT -i eth0 -j limit-2110 --A INPUT -i eth0 -j limit-2111 --A INPUT -i eth0 -j limit-2112 --A INPUT -i eth0 -j limit-2113 --A INPUT -i eth0 -j limit-2114 --A INPUT -i eth0 -j limit-2115 --A INPUT -i eth0 -j limit-2116 --A INPUT -i eth0 -j limit-2117 --A INPUT -i eth0 -j limit-2118 --A INPUT -i eth0 -j limit-2119 --A INPUT -i eth0 -j limit-2120 --A INPUT -i eth0 -j limit-2121 --A INPUT -i eth0 -j limit-2122 --A INPUT -i eth0 -j limit-2123 --A INPUT -i eth0 -j limit-2124 --A INPUT -i eth0 -j limit-2125 --A INPUT -i eth0 -j limit-2126 --A INPUT -i eth0 -j limit-2127 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-985 --A INPUT -i eth0 -j limit-2129 --A INPUT -i eth0 -j limit-2130 --A INPUT -i eth0 -j limit-2131 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-989 --A INPUT -i eth0 -j limit-2133 --A INPUT -i eth0 -j limit-2134 --A INPUT -i eth0 -j limit-2135 --A INPUT -i eth0 -j limit-2136 --A INPUT -i eth0 -j limit-2137 --A INPUT -i eth0 -j limit-2138 --A INPUT -i eth0 -j limit-2139 --A INPUT -i eth0 -j limit-2140 --A INPUT -i eth0 -j limit-2141 --A INPUT -i eth0 -j limit-2142 --A INPUT -i eth0 -j limit-2143 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1001 --A INPUT -i eth0 -j limit-2145 --A INPUT -i eth0 -j limit-2146 --A INPUT -i eth0 -j limit-2147 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1005 --A INPUT -i eth0 -j limit-2149 --A INPUT -i eth0 -j limit-2150 --A INPUT -i eth0 -j limit-2151 --A INPUT -i eth0 -j limit-2152 --A INPUT -i eth0 -j limit-2153 --A INPUT -i eth0 -j limit-2154 --A INPUT -i eth0 -j limit-2155 --A INPUT -i eth0 -j limit-2156 --A INPUT -i eth0 -j limit-2157 --A INPUT -i eth0 -j limit-2158 --A INPUT -i eth0 -j limit-2159 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1017 --A INPUT -i eth0 -j limit-2161 --A INPUT -i eth0 -j limit-2162 --A INPUT -i eth0 -j limit-2163 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1021 --A INPUT -i eth0 -j limit-2165 --A INPUT -i eth0 -j limit-2166 --A INPUT -i eth0 -j limit-2167 --A INPUT -i eth0 -j limit-2168 --A INPUT -i eth0 -j limit-2169 --A INPUT -i eth0 -j limit-2170 --A INPUT -i eth0 -j limit-2171 --A INPUT -i eth0 -j limit-2172 --A INPUT -i eth0 -j limit-2173 --A INPUT -i eth0 -j limit-2174 --A INPUT -i eth0 -j limit-2175 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1033 --A INPUT -i eth0 -j limit-2177 --A INPUT -i eth0 -j limit-2178 --A INPUT -i eth0 -j limit-2179 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1037 --A INPUT -i eth0 -j limit-2181 --A INPUT -i eth0 -j limit-2182 --A INPUT -i eth0 -j limit-2183 --A INPUT -i eth0 -j limit-2184 --A INPUT -i eth0 -j limit-2185 --A INPUT -i eth0 -j limit-2186 --A INPUT -i eth0 -j limit-2187 --A INPUT -i eth0 -j limit-2188 --A INPUT -i eth0 -j limit-2189 --A INPUT -i eth0 -j limit-2190 --A INPUT -i eth0 -j limit-2191 --A INPUT -i eth0 -j limit-2192 --A INPUT -i eth0 -j limit-2193 --A INPUT -i eth0 -j limit-2194 --A INPUT -i eth0 -j limit-2195 --A INPUT -i eth0 -j limit-2196 --A INPUT -i eth0 -j limit-2197 --A INPUT -i eth0 -j limit-2198 --A INPUT -i eth0 -j limit-2199 +-A INPUT -i eth0 -j limit-3296 +-A INPUT -i eth0 -j limit-3297 +-A INPUT -i eth0 -j limit-3298 +-A INPUT -i eth0 -j limit-3299 +-A INPUT -i eth0 -j limit-3300 +-A INPUT -i eth0 -j limit-3301 +-A INPUT -i eth0 -j limit-3302 +-A INPUT -i eth0 -j limit-3303 +-A INPUT -i eth0 -j limit-3304 +-A INPUT -i eth0 -j limit-3305 +-A INPUT -i eth0 -j limit-3306 +-A INPUT -i eth0 -j limit-3307 +-A INPUT -i eth0 -j limit-3308 +-A INPUT -i eth0 -j limit-3309 +-A INPUT -i eth0 -j limit-3310 +-A INPUT -i eth0 -j limit-3311 +-A INPUT -i eth0 -j limit-3312 +-A INPUT -i eth0 -j limit-3313 +-A INPUT -i eth0 -j limit-3314 +-A INPUT -i eth0 -j limit-3315 +-A INPUT -i eth0 -j limit-3316 +-A INPUT -i eth0 -j limit-3317 +-A INPUT -i eth0 -j limit-3318 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 +-A INPUT -i eth0 -j limit-3320 +-A INPUT -i eth0 -j limit-3321 +-A INPUT -i eth0 -j limit-3322 +-A INPUT -i eth0 -j limit-3323 +-A INPUT -i eth0 -j limit-3324 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 +-A INPUT -i eth0 -j limit-3326 +-A INPUT -i eth0 -j limit-3327 +-A INPUT -i eth0 -j limit-3328 +-A INPUT -i eth0 -j limit-3329 +-A INPUT -i eth0 -j limit-3330 +-A INPUT -i eth0 -j limit-3331 +-A INPUT -i eth0 -j limit-3332 +-A INPUT -i eth0 -j limit-3333 +-A INPUT -i eth0 -j limit-3334 +-A INPUT -i eth0 -j limit-3335 +-A INPUT -i eth0 -j limit-3336 +-A INPUT -i eth0 -j limit-3337 +-A INPUT -i eth0 -j limit-3338 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 +-A INPUT -i eth0 -j limit-3340 +-A INPUT -i eth0 -j limit-3341 +-A INPUT -i eth0 -j limit-3342 +-A INPUT -i eth0 -j limit-3343 +-A INPUT -i eth0 -j limit-3344 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 +-A INPUT -i eth0 -j limit-3346 +-A INPUT -i eth0 -j limit-3347 +-A INPUT -i eth0 -j limit-3348 +-A INPUT -i eth0 -j limit-3349 +-A INPUT -i eth0 -j limit-3350 +-A INPUT -i eth0 -j limit-3351 +-A INPUT -i eth0 -j limit-3352 +-A INPUT -i eth0 -j limit-3353 +-A INPUT -i eth0 -j limit-3354 +-A INPUT -i eth0 -j limit-3355 +-A INPUT -i eth0 -j limit-3356 +-A INPUT -i eth0 -j limit-3357 +-A INPUT -i eth0 -j limit-3358 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 +-A INPUT -i eth0 -j limit-3360 +-A INPUT -i eth0 -j limit-3361 +-A INPUT -i eth0 -j limit-3362 +-A INPUT -i eth0 -j limit-3363 +-A INPUT -i eth0 -j limit-3364 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 +-A INPUT -i eth0 -j limit-3366 +-A INPUT -i eth0 -j limit-3367 +-A INPUT -i eth0 -j limit-3368 +-A INPUT -i eth0 -j limit-3369 +-A INPUT -i eth0 -j limit-3370 +-A INPUT -i eth0 -j limit-3371 +-A INPUT -i eth0 -j limit-3372 +-A INPUT -i eth0 -j limit-3373 +-A INPUT -i eth0 -j limit-3374 +-A INPUT -i eth0 -j limit-3375 +-A INPUT -i eth0 -j limit-3376 +-A INPUT -i eth0 -j limit-3377 +-A INPUT -i eth0 -j limit-3378 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 +-A INPUT -i eth0 -j limit-3380 +-A INPUT -i eth0 -j limit-3381 +-A INPUT -i eth0 -j limit-3382 +-A INPUT -i eth0 -j limit-3383 +-A INPUT -i eth0 -j limit-3384 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 +-A INPUT -i eth0 -j limit-3386 +-A INPUT -i eth0 -j limit-3387 +-A INPUT -i eth0 -j limit-3388 +-A INPUT -i eth0 -j limit-3389 +-A INPUT -i eth0 -j limit-3390 +-A INPUT -i eth0 -j limit-3391 +-A INPUT -i eth0 -j limit-3392 +-A INPUT -i eth0 -j limit-3393 +-A INPUT -i eth0 -j limit-3394 +-A INPUT -i eth0 -j limit-3395 +-A INPUT -i eth0 -j limit-3396 +-A INPUT -i eth0 -j limit-3397 +-A INPUT -i eth0 -j limit-3398 +-A INPUT -i eth0 -j limit-3399 +-A INPUT -i eth0 -j limit-3400 +-A INPUT -i eth0 -j limit-3401 +-A INPUT -i eth0 -j limit-3402 +-A INPUT -i eth0 -j limit-3403 +-A INPUT -i eth0 -j limit-3404 +-A INPUT -i eth0 -j limit-3405 +-A INPUT -i eth0 -j limit-3406 +-A INPUT -i eth0 -j limit-3407 +-A INPUT -i eth0 -j limit-3408 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2201 --A INPUT -i eth0 -j limit-2202 --A INPUT -i eth0 -j limit-2203 +-A INPUT -i eth0 -j limit-3410 +-A INPUT -i eth0 -j limit-3411 +-A INPUT -i eth0 -j limit-3412 +-A INPUT -i eth0 -j limit-3413 +-A INPUT -i eth0 -j limit-3414 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2205 --A INPUT -i eth0 -j limit-2206 --A INPUT -i eth0 -j limit-2207 --A INPUT -i eth0 -j limit-2208 --A INPUT -i eth0 -j limit-2209 --A INPUT -i eth0 -j limit-2210 --A INPUT -i eth0 -j limit-2211 --A INPUT -i eth0 -j limit-2212 --A INPUT -i eth0 -j limit-2213 --A INPUT -i eth0 -j limit-2214 --A INPUT -i eth0 -j limit-2215 +-A INPUT -i eth0 -j limit-3416 +-A INPUT -i eth0 -j limit-3417 +-A INPUT -i eth0 -j limit-3418 +-A INPUT -i eth0 -j limit-3419 +-A INPUT -i eth0 -j limit-3420 +-A INPUT -i eth0 -j limit-3421 +-A INPUT -i eth0 -j limit-3422 +-A INPUT -i eth0 -j limit-3423 +-A INPUT -i eth0 -j limit-3424 +-A INPUT -i eth0 -j limit-3425 +-A INPUT -i eth0 -j limit-3426 +-A INPUT -i eth0 -j limit-3427 +-A INPUT -i eth0 -j limit-3428 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2217 --A INPUT -i eth0 -j limit-2218 --A INPUT -i eth0 -j limit-2219 +-A INPUT -i eth0 -j limit-3430 +-A INPUT -i eth0 -j limit-3431 +-A INPUT -i eth0 -j limit-3432 +-A INPUT -i eth0 -j limit-3433 +-A INPUT -i eth0 -j limit-3434 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2221 --A INPUT -i eth0 -j limit-2222 --A INPUT -i eth0 -j limit-2223 --A INPUT -i eth0 -j limit-2224 --A INPUT -i eth0 -j limit-2225 --A INPUT -i eth0 -j limit-2226 --A INPUT -i eth0 -j limit-2227 --A INPUT -i eth0 -j limit-2228 --A INPUT -i eth0 -j limit-2229 --A INPUT -i eth0 -j limit-2230 --A INPUT -i eth0 -j limit-2231 +-A INPUT -i eth0 -j limit-3436 +-A INPUT -i eth0 -j limit-3437 +-A INPUT -i eth0 -j limit-3438 +-A INPUT -i eth0 -j limit-3439 +-A INPUT -i eth0 -j limit-3440 +-A INPUT -i eth0 -j limit-3441 +-A INPUT -i eth0 -j limit-3442 +-A INPUT -i eth0 -j limit-3443 +-A INPUT -i eth0 -j limit-3444 +-A INPUT -i eth0 -j limit-3445 +-A INPUT -i eth0 -j limit-3446 +-A INPUT -i eth0 -j limit-3447 +-A INPUT -i eth0 -j limit-3448 -A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2233 --A INPUT -i eth0 -j limit-2234 --A INPUT -i eth0 -j limit-2235 +-A INPUT -i eth0 -j limit-3450 +-A INPUT -i eth0 -j limit-3451 +-A INPUT -i eth0 -j limit-3452 +-A INPUT -i eth0 -j limit-3453 +-A INPUT -i eth0 -j limit-3454 -A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2237 --A INPUT -i eth0 -j limit-2238 --A INPUT -i eth0 -j limit-2239 --A INPUT -i eth0 -j limit-2240 --A INPUT -i eth0 -j limit-2241 --A INPUT -i eth0 -j limit-2242 --A INPUT -i eth0 -j limit-2243 --A INPUT -i eth0 -j limit-2244 --A INPUT -i eth0 -j limit-2245 --A INPUT -i eth0 -j limit-2246 --A INPUT -i eth0 -j limit-2247 +-A INPUT -i eth0 -j limit-3456 +-A INPUT -i eth0 -j limit-3457 +-A INPUT -i eth0 -j limit-3458 +-A INPUT -i eth0 -j limit-3459 +-A INPUT -i eth0 -j limit-3460 +-A INPUT -i eth0 -j limit-3461 +-A INPUT -i eth0 -j limit-3462 +-A INPUT -i eth0 -j limit-3463 +-A INPUT -i eth0 -j limit-3464 +-A INPUT -i eth0 -j limit-3465 +-A INPUT -i eth0 -j limit-3466 +-A INPUT -i eth0 -j limit-3467 +-A INPUT -i eth0 -j limit-3468 -A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2249 --A INPUT -i eth0 -j limit-2250 --A INPUT -i eth0 -j limit-2251 +-A INPUT -i eth0 -j limit-3470 +-A INPUT -i eth0 -j limit-3471 +-A INPUT -i eth0 -j limit-3472 +-A INPUT -i eth0 -j limit-3473 +-A INPUT -i eth0 -j limit-3474 -A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2253 --A INPUT -i eth0 -j limit-2254 --A INPUT -i eth0 -j limit-2255 --A INPUT -i eth0 -j limit-2256 --A INPUT -i eth0 -j limit-2257 --A INPUT -i eth0 -j limit-2258 --A INPUT -i eth0 -j limit-2259 --A INPUT -i eth0 -j limit-2260 --A INPUT -i eth0 -j limit-2261 --A INPUT -i eth0 -j limit-2262 --A INPUT -i eth0 -j limit-2263 --A INPUT -i eth0 -j limit-2264 --A INPUT -i eth0 -j limit-2265 --A INPUT -i eth0 -j limit-2266 --A INPUT -i eth0 -j limit-2267 --A INPUT -i eth0 -j limit-2268 --A INPUT -i eth0 -j limit-2269 --A INPUT -i eth0 -j limit-2270 --A INPUT -i eth0 -j limit-2271 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 --A INPUT -i eth0 -j limit-2273 --A INPUT -i eth0 -j limit-2274 --A INPUT -i eth0 -j limit-2275 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1061 --A INPUT -i eth0 -j limit-2277 --A INPUT -i eth0 -j limit-2278 --A INPUT -i eth0 -j limit-2279 --A INPUT -i eth0 -j limit-2280 --A INPUT -i eth0 -j limit-2281 --A INPUT -i eth0 -j limit-2282 --A INPUT -i eth0 -j limit-2283 --A INPUT -i eth0 -j limit-2284 --A INPUT -i eth0 -j limit-2285 --A INPUT -i eth0 -j limit-2286 --A INPUT -i eth0 -j limit-2287 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 --A INPUT -i eth0 -j limit-2289 --A INPUT -i eth0 -j limit-2290 --A INPUT -i eth0 -j limit-2291 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 --A INPUT -i eth0 -j limit-2293 --A INPUT -i eth0 -j limit-2294 --A INPUT -i eth0 -j limit-2295 --A INPUT -i eth0 -j limit-2296 --A INPUT -i eth0 -j limit-2297 --A INPUT -i eth0 -j limit-2298 --A INPUT -i eth0 -j limit-2299 --A INPUT -i eth0 -j limit-2300 --A INPUT -i eth0 -j limit-2301 --A INPUT -i eth0 -j limit-2302 --A INPUT -i eth0 -j limit-2303 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1089 --A INPUT -i eth0 -j limit-2305 --A INPUT -i eth0 -j limit-2306 --A INPUT -i eth0 -j limit-2307 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 --A INPUT -i eth0 -j limit-2309 --A INPUT -i eth0 -j limit-2310 --A INPUT -i eth0 -j limit-2311 --A INPUT -i eth0 -j limit-2312 --A INPUT -i eth0 -j limit-2313 --A INPUT -i eth0 -j limit-2314 --A INPUT -i eth0 -j limit-2315 --A INPUT -i eth0 -j limit-2316 --A INPUT -i eth0 -j limit-2317 --A INPUT -i eth0 -j limit-2318 --A INPUT -i eth0 -j limit-2319 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1105 --A INPUT -i eth0 -j limit-2321 --A INPUT -i eth0 -j limit-2322 --A INPUT -i eth0 -j limit-2323 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1109 --A INPUT -i eth0 -j limit-2325 --A INPUT -i eth0 -j limit-2326 --A INPUT -i eth0 -j limit-2327 --A INPUT -i eth0 -j limit-2328 --A INPUT -i eth0 -j limit-2329 --A INPUT -i eth0 -j limit-2330 --A INPUT -i eth0 -j limit-2331 --A INPUT -i eth0 -j limit-2332 --A INPUT -i eth0 -j limit-2333 --A INPUT -i eth0 -j limit-2334 --A INPUT -i eth0 -j limit-2335 --A INPUT -i eth0 -j limit-2336 --A INPUT -i eth0 -j limit-2337 --A INPUT -i eth0 -j limit-2338 --A INPUT -i eth0 -j limit-2339 --A INPUT -i eth0 -j limit-2340 --A INPUT -i eth0 -j limit-2341 --A INPUT -i eth0 -j limit-2342 --A INPUT -i eth0 -j limit-2343 +-A INPUT -i eth0 -j limit-3476 +-A INPUT -i eth0 -j limit-3477 +-A INPUT -i eth0 -j limit-3478 +-A INPUT -i eth0 -j limit-3479 +-A INPUT -i eth0 -j limit-3480 +-A INPUT -i eth0 -j limit-3481 +-A INPUT -i eth0 -j limit-3482 +-A INPUT -i eth0 -j limit-3483 +-A INPUT -i eth0 -j limit-3484 +-A INPUT -i eth0 -j limit-3485 +-A INPUT -i eth0 -j limit-3486 +-A INPUT -i eth0 -j limit-3487 +-A INPUT -i eth0 -j limit-3488 +-A INPUT -i eth0 -j limit-3489 +-A INPUT -i eth0 -j limit-3490 +-A INPUT -i eth0 -j limit-3491 +-A INPUT -i eth0 -j limit-3492 +-A INPUT -i eth0 -j limit-3493 +-A INPUT -i eth0 -j limit-3494 +-A INPUT -i eth0 -j limit-3495 +-A INPUT -i eth0 -j limit-3496 +-A INPUT -i eth0 -j limit-3497 +-A INPUT -i eth0 -j limit-3498 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 +-A INPUT -i eth0 -j limit-3500 +-A INPUT -i eth0 -j limit-3501 +-A INPUT -i eth0 -j limit-3502 +-A INPUT -i eth0 -j limit-3503 +-A INPUT -i eth0 -j limit-3504 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 +-A INPUT -i eth0 -j limit-3506 +-A INPUT -i eth0 -j limit-3507 +-A INPUT -i eth0 -j limit-3508 +-A INPUT -i eth0 -j limit-3509 +-A INPUT -i eth0 -j limit-3510 +-A INPUT -i eth0 -j limit-3511 +-A INPUT -i eth0 -j limit-3512 +-A INPUT -i eth0 -j limit-3513 +-A INPUT -i eth0 -j limit-3514 +-A INPUT -i eth0 -j limit-3515 +-A INPUT -i eth0 -j limit-3516 +-A INPUT -i eth0 -j limit-3517 +-A INPUT -i eth0 -j limit-3518 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 +-A INPUT -i eth0 -j limit-3520 +-A INPUT -i eth0 -j limit-3521 +-A INPUT -i eth0 -j limit-3522 +-A INPUT -i eth0 -j limit-3523 +-A INPUT -i eth0 -j limit-3524 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 +-A INPUT -i eth0 -j limit-3526 +-A INPUT -i eth0 -j limit-3527 +-A INPUT -i eth0 -j limit-3528 +-A INPUT -i eth0 -j limit-3529 +-A INPUT -i eth0 -j limit-3530 +-A INPUT -i eth0 -j limit-3531 +-A INPUT -i eth0 -j limit-3532 +-A INPUT -i eth0 -j limit-3533 +-A INPUT -i eth0 -j limit-3534 +-A INPUT -i eth0 -j limit-3535 +-A INPUT -i eth0 -j limit-3536 +-A INPUT -i eth0 -j limit-3537 +-A INPUT -i eth0 -j limit-3538 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 +-A INPUT -i eth0 -j limit-3540 +-A INPUT -i eth0 -j limit-3541 +-A INPUT -i eth0 -j limit-3542 +-A INPUT -i eth0 -j limit-3543 +-A INPUT -i eth0 -j limit-3544 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 +-A INPUT -i eth0 -j limit-3546 +-A INPUT -i eth0 -j limit-3547 +-A INPUT -i eth0 -j limit-3548 +-A INPUT -i eth0 -j limit-3549 +-A INPUT -i eth0 -j limit-3550 +-A INPUT -i eth0 -j limit-3551 +-A INPUT -i eth0 -j limit-3552 +-A INPUT -i eth0 -j limit-3553 +-A INPUT -i eth0 -j limit-3554 +-A INPUT -i eth0 -j limit-3555 +-A INPUT -i eth0 -j limit-3556 +-A INPUT -i eth0 -j limit-3557 +-A INPUT -i eth0 -j limit-3558 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 +-A INPUT -i eth0 -j limit-3560 +-A INPUT -i eth0 -j limit-3561 +-A INPUT -i eth0 -j limit-3562 +-A INPUT -i eth0 -j limit-3563 +-A INPUT -i eth0 -j limit-3564 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 +-A INPUT -i eth0 -j limit-3566 +-A INPUT -i eth0 -j limit-3567 +-A INPUT -i eth0 -j limit-3568 +-A INPUT -i eth0 -j limit-3569 +-A INPUT -i eth0 -j limit-3570 +-A INPUT -i eth0 -j limit-3571 +-A INPUT -i eth0 -j limit-3572 +-A INPUT -i eth0 -j limit-3573 +-A INPUT -i eth0 -j limit-3574 +-A INPUT -i eth0 -j limit-3575 +-A INPUT -i eth0 -j limit-3576 +-A INPUT -i eth0 -j limit-3577 +-A INPUT -i eth0 -j limit-3578 +-A INPUT -i eth0 -j limit-3579 +-A INPUT -i eth0 -j limit-3580 +-A INPUT -i eth0 -j limit-3581 +-A INPUT -i eth0 -j limit-3582 +-A INPUT -i eth0 -j limit-3583 +-A INPUT -i eth0 -j limit-3584 +-A INPUT -i eth0 -j limit-3585 +-A INPUT -i eth0 -j limit-3586 +-A INPUT -i eth0 -j limit-3587 +-A INPUT -i eth0 -j limit-3588 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 +-A INPUT -i eth0 -j limit-3590 +-A INPUT -i eth0 -j limit-3591 +-A INPUT -i eth0 -j limit-3592 +-A INPUT -i eth0 -j limit-3593 +-A INPUT -i eth0 -j limit-3594 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 +-A INPUT -i eth0 -j limit-3596 +-A INPUT -i eth0 -j limit-3597 +-A INPUT -i eth0 -j limit-3598 +-A INPUT -i eth0 -j limit-3599 +-A INPUT -i eth0 -j limit-3600 +-A INPUT -i eth0 -j limit-3601 +-A INPUT -i eth0 -j limit-3602 +-A INPUT -i eth0 -j limit-3603 +-A INPUT -i eth0 -j limit-3604 +-A INPUT -i eth0 -j limit-3605 +-A INPUT -i eth0 -j limit-3606 +-A INPUT -i eth0 -j limit-3607 +-A INPUT -i eth0 -j limit-3608 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 +-A INPUT -i eth0 -j limit-3610 +-A INPUT -i eth0 -j limit-3611 +-A INPUT -i eth0 -j limit-3612 +-A INPUT -i eth0 -j limit-3613 +-A INPUT -i eth0 -j limit-3614 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 +-A INPUT -i eth0 -j limit-3616 +-A INPUT -i eth0 -j limit-3617 +-A INPUT -i eth0 -j limit-3618 +-A INPUT -i eth0 -j limit-3619 +-A INPUT -i eth0 -j limit-3620 +-A INPUT -i eth0 -j limit-3621 +-A INPUT -i eth0 -j limit-3622 +-A INPUT -i eth0 -j limit-3623 +-A INPUT -i eth0 -j limit-3624 +-A INPUT -i eth0 -j limit-3625 +-A INPUT -i eth0 -j limit-3626 +-A INPUT -i eth0 -j limit-3627 +-A INPUT -i eth0 -j limit-3628 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 +-A INPUT -i eth0 -j limit-3630 +-A INPUT -i eth0 -j limit-3631 +-A INPUT -i eth0 -j limit-3632 +-A INPUT -i eth0 -j limit-3633 +-A INPUT -i eth0 -j limit-3634 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 +-A INPUT -i eth0 -j limit-3636 +-A INPUT -i eth0 -j limit-3637 +-A INPUT -i eth0 -j limit-3638 +-A INPUT -i eth0 -j limit-3639 +-A INPUT -i eth0 -j limit-3640 +-A INPUT -i eth0 -j limit-3641 +-A INPUT -i eth0 -j limit-3642 +-A INPUT -i eth0 -j limit-3643 +-A INPUT -i eth0 -j limit-3644 +-A INPUT -i eth0 -j limit-3645 +-A INPUT -i eth0 -j limit-3646 +-A INPUT -i eth0 -j limit-3647 +-A INPUT -i eth0 -j limit-3648 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 +-A INPUT -i eth0 -j limit-3650 +-A INPUT -i eth0 -j limit-3651 +-A INPUT -i eth0 -j limit-3652 +-A INPUT -i eth0 -j limit-3653 +-A INPUT -i eth0 -j limit-3654 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 +-A INPUT -i eth0 -j limit-3656 +-A INPUT -i eth0 -j limit-3657 +-A INPUT -i eth0 -j limit-3658 +-A INPUT -i eth0 -j limit-3659 +-A INPUT -i eth0 -j limit-3660 +-A INPUT -i eth0 -j limit-3661 +-A INPUT -i eth0 -j limit-3662 +-A INPUT -i eth0 -j limit-3663 +-A INPUT -i eth0 -j limit-3664 +-A INPUT -i eth0 -j limit-3665 +-A INPUT -i eth0 -j limit-3666 +-A INPUT -i eth0 -j limit-3667 +-A INPUT -i eth0 -j limit-3668 +-A INPUT -i eth0 -j limit-3669 +-A INPUT -i eth0 -j limit-3670 +-A INPUT -i eth0 -j limit-3671 +-A INPUT -i eth0 -j limit-3672 +-A INPUT -i eth0 -j limit-3673 +-A INPUT -i eth0 -j limit-3674 +-A INPUT -i eth0 -j limit-3675 +-A INPUT -i eth0 -j limit-3676 +-A INPUT -i eth0 -j limit-3677 +-A INPUT -i eth0 -j limit-3678 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2345 --A INPUT -i eth0 -j limit-2346 --A INPUT -i eth0 -j limit-2347 +-A INPUT -i eth0 -j limit-3680 +-A INPUT -i eth0 -j limit-3681 +-A INPUT -i eth0 -j limit-3682 +-A INPUT -i eth0 -j limit-3683 +-A INPUT -i eth0 -j limit-3684 -A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2349 --A INPUT -i eth0 -j limit-2350 --A INPUT -i eth0 -j limit-2351 --A INPUT -i eth0 -j limit-2352 --A INPUT -i eth0 -j limit-2353 --A INPUT -i eth0 -j limit-2354 --A INPUT -i eth0 -j limit-2355 --A INPUT -i eth0 -j limit-2356 --A INPUT -i eth0 -j limit-2357 --A INPUT -i eth0 -j limit-2358 --A INPUT -i eth0 -j limit-2359 +-A INPUT -i eth0 -j limit-3686 +-A INPUT -i eth0 -j limit-3687 +-A INPUT -i eth0 -j limit-3688 +-A INPUT -i eth0 -j limit-3689 +-A INPUT -i eth0 -j limit-3690 +-A INPUT -i eth0 -j limit-3691 +-A INPUT -i eth0 -j limit-3692 +-A INPUT -i eth0 -j limit-3693 +-A INPUT -i eth0 -j limit-3694 +-A INPUT -i eth0 -j limit-3695 +-A INPUT -i eth0 -j limit-3696 +-A INPUT -i eth0 -j limit-3697 +-A INPUT -i eth0 -j limit-3698 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2361 --A INPUT -i eth0 -j limit-2362 --A INPUT -i eth0 -j limit-2363 +-A INPUT -i eth0 -j limit-3700 +-A INPUT -i eth0 -j limit-3701 +-A INPUT -i eth0 -j limit-3702 +-A INPUT -i eth0 -j limit-3703 +-A INPUT -i eth0 -j limit-3704 -A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2365 --A INPUT -i eth0 -j limit-2366 --A INPUT -i eth0 -j limit-2367 --A INPUT -i eth0 -j limit-2368 --A INPUT -i eth0 -j limit-2369 --A INPUT -i eth0 -j limit-2370 --A INPUT -i eth0 -j limit-2371 --A INPUT -i eth0 -j limit-2372 --A INPUT -i eth0 -j limit-2373 --A INPUT -i eth0 -j limit-2374 --A INPUT -i eth0 -j limit-2375 +-A INPUT -i eth0 -j limit-3706 +-A INPUT -i eth0 -j limit-3707 +-A INPUT -i eth0 -j limit-3708 +-A INPUT -i eth0 -j limit-3709 +-A INPUT -i eth0 -j limit-3710 +-A INPUT -i eth0 -j limit-3711 +-A INPUT -i eth0 -j limit-3712 +-A INPUT -i eth0 -j limit-3713 +-A INPUT -i eth0 -j limit-3714 +-A INPUT -i eth0 -j limit-3715 +-A INPUT -i eth0 -j limit-3716 +-A INPUT -i eth0 -j limit-3717 +-A INPUT -i eth0 -j limit-3718 -A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2377 --A INPUT -i eth0 -j limit-2378 --A INPUT -i eth0 -j limit-2379 +-A INPUT -i eth0 -j limit-3720 +-A INPUT -i eth0 -j limit-3721 +-A INPUT -i eth0 -j limit-3722 +-A INPUT -i eth0 -j limit-3723 +-A INPUT -i eth0 -j limit-3724 -A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2381 --A INPUT -i eth0 -j limit-2382 --A INPUT -i eth0 -j limit-2383 --A INPUT -i eth0 -j limit-2384 --A INPUT -i eth0 -j limit-2385 --A INPUT -i eth0 -j limit-2386 --A INPUT -i eth0 -j limit-2387 --A INPUT -i eth0 -j limit-2388 --A INPUT -i eth0 -j limit-2389 --A INPUT -i eth0 -j limit-2390 --A INPUT -i eth0 -j limit-2391 +-A INPUT -i eth0 -j limit-3726 +-A INPUT -i eth0 -j limit-3727 +-A INPUT -i eth0 -j limit-3728 +-A INPUT -i eth0 -j limit-3729 +-A INPUT -i eth0 -j limit-3730 +-A INPUT -i eth0 -j limit-3731 +-A INPUT -i eth0 -j limit-3732 +-A INPUT -i eth0 -j limit-3733 +-A INPUT -i eth0 -j limit-3734 +-A INPUT -i eth0 -j limit-3735 +-A INPUT -i eth0 -j limit-3736 +-A INPUT -i eth0 -j limit-3737 +-A INPUT -i eth0 -j limit-3738 -A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2393 --A INPUT -i eth0 -j limit-2394 --A INPUT -i eth0 -j limit-2395 +-A INPUT -i eth0 -j limit-3740 +-A INPUT -i eth0 -j limit-3741 +-A INPUT -i eth0 -j limit-3742 +-A INPUT -i eth0 -j limit-3743 +-A INPUT -i eth0 -j limit-3744 -A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2397 --A INPUT -i eth0 -j limit-2398 --A INPUT -i eth0 -j limit-2399 --A INPUT -i eth0 -j limit-2400 --A INPUT -i eth0 -j limit-2401 --A INPUT -i eth0 -j limit-2402 --A INPUT -i eth0 -j limit-2403 --A INPUT -i eth0 -j limit-2404 --A INPUT -i eth0 -j limit-2405 --A INPUT -i eth0 -j limit-2406 --A INPUT -i eth0 -j limit-2407 --A INPUT -i eth0 -j limit-2408 --A INPUT -i eth0 -j limit-2409 --A INPUT -i eth0 -j limit-2410 --A INPUT -i eth0 -j limit-2411 --A INPUT -i eth0 -j limit-2412 --A INPUT -i eth0 -j limit-2413 --A INPUT -i eth0 -j limit-2414 --A INPUT -i eth0 -j limit-2415 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1129 --A INPUT -i eth0 -j limit-2417 --A INPUT -i eth0 -j limit-2418 --A INPUT -i eth0 -j limit-2419 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1133 --A INPUT -i eth0 -j limit-2421 --A INPUT -i eth0 -j limit-2422 --A INPUT -i eth0 -j limit-2423 --A INPUT -i eth0 -j limit-2424 --A INPUT -i eth0 -j limit-2425 --A INPUT -i eth0 -j limit-2426 --A INPUT -i eth0 -j limit-2427 --A INPUT -i eth0 -j limit-2428 --A INPUT -i eth0 -j limit-2429 --A INPUT -i eth0 -j limit-2430 --A INPUT -i eth0 -j limit-2431 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1145 --A INPUT -i eth0 -j limit-2433 --A INPUT -i eth0 -j limit-2434 --A INPUT -i eth0 -j limit-2435 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1149 --A INPUT -i eth0 -j limit-2437 --A INPUT -i eth0 -j limit-2438 --A INPUT -i eth0 -j limit-2439 --A INPUT -i eth0 -j limit-2440 --A INPUT -i eth0 -j limit-2441 --A INPUT -i eth0 -j limit-2442 --A INPUT -i eth0 -j limit-2443 --A INPUT -i eth0 -j limit-2444 --A INPUT -i eth0 -j limit-2445 --A INPUT -i eth0 -j limit-2446 --A INPUT -i eth0 -j limit-2447 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1161 --A INPUT -i eth0 -j limit-2449 --A INPUT -i eth0 -j limit-2450 --A INPUT -i eth0 -j limit-2451 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1165 --A INPUT -i eth0 -j limit-2453 --A INPUT -i eth0 -j limit-2454 --A INPUT -i eth0 -j limit-2455 --A INPUT -i eth0 -j limit-2456 --A INPUT -i eth0 -j limit-2457 --A INPUT -i eth0 -j limit-2458 --A INPUT -i eth0 -j limit-2459 --A INPUT -i eth0 -j limit-2460 --A INPUT -i eth0 -j limit-2461 --A INPUT -i eth0 -j limit-2462 --A INPUT -i eth0 -j limit-2463 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1177 --A INPUT -i eth0 -j limit-2465 --A INPUT -i eth0 -j limit-2466 --A INPUT -i eth0 -j limit-2467 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1181 --A INPUT -i eth0 -j limit-2469 --A INPUT -i eth0 -j limit-2470 --A INPUT -i eth0 -j limit-2471 --A INPUT -i eth0 -j limit-2472 --A INPUT -i eth0 -j limit-2473 --A INPUT -i eth0 -j limit-2474 --A INPUT -i eth0 -j limit-2475 --A INPUT -i eth0 -j limit-2476 --A INPUT -i eth0 -j limit-2477 --A INPUT -i eth0 -j limit-2478 --A INPUT -i eth0 -j limit-2479 --A INPUT -i eth0 -j limit-2480 --A INPUT -i eth0 -j limit-2481 --A INPUT -i eth0 -j limit-2482 --A INPUT -i eth0 -j limit-2483 --A INPUT -i eth0 -j limit-2484 --A INPUT -i eth0 -j limit-2485 --A INPUT -i eth0 -j limit-2486 --A INPUT -i eth0 -j limit-2487 --A INPUT -i eth0 -j limit-2488 --A INPUT -i eth0 -j limit-2489 --A INPUT -i eth0 -j limit-2490 --A INPUT -i eth0 -j limit-2491 --A INPUT -i eth0 -j limit-2492 --A INPUT -i eth0 -j limit-2493 --A INPUT -i eth0 -j limit-2494 --A INPUT -i eth0 -j limit-2495 --A INPUT -i eth0 -j limit-2496 --A INPUT -i eth0 -j limit-2497 --A INPUT -i eth0 -j limit-2498 --A INPUT -i eth0 -j limit-2499 --A INPUT -i eth0 -j limit-2500 --A INPUT -i eth0 -j limit-2501 --A INPUT -i eth0 -j limit-2502 --A INPUT -i eth0 -j limit-2503 --A INPUT -i eth0 -j limit-2504 --A INPUT -i eth0 -j limit-2505 --A INPUT -i eth0 -j limit-2506 --A INPUT -i eth0 -j limit-2507 --A INPUT -i eth0 -j limit-2508 --A INPUT -i eth0 -j limit-2509 --A INPUT -i eth0 -j limit-2510 --A INPUT -i eth0 -j limit-2511 --A INPUT -i eth0 -j limit-2512 --A INPUT -i eth0 -j limit-2513 --A INPUT -i eth0 -j limit-2514 --A INPUT -i eth0 -j limit-2515 +-A INPUT -i eth0 -j limit-3746 +-A INPUT -i eth0 -j limit-3747 +-A INPUT -i eth0 -j limit-3748 +-A INPUT -i eth0 -j limit-3749 +-A INPUT -i eth0 -j limit-3750 +-A INPUT -i eth0 -j limit-3751 +-A INPUT -i eth0 -j limit-3752 +-A INPUT -i eth0 -j limit-3753 +-A INPUT -i eth0 -j limit-3754 +-A INPUT -i eth0 -j limit-3755 +-A INPUT -i eth0 -j limit-3756 +-A INPUT -i eth0 -j limit-3757 +-A INPUT -i eth0 -j limit-3758 +-A INPUT -i eth0 -j limit-3759 +-A INPUT -i eth0 -j limit-3760 +-A INPUT -i eth0 -j limit-3761 +-A INPUT -i eth0 -j limit-3762 +-A INPUT -i eth0 -j limit-3763 +-A INPUT -i eth0 -j limit-3764 +-A INPUT -i eth0 -j limit-3765 +-A INPUT -i eth0 -j limit-3766 +-A INPUT -i eth0 -j limit-3767 +-A INPUT -i eth0 -j limit-3768 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 +-A INPUT -i eth0 -j limit-3770 +-A INPUT -i eth0 -j limit-3771 +-A INPUT -i eth0 -j limit-3772 +-A INPUT -i eth0 -j limit-3773 +-A INPUT -i eth0 -j limit-3774 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 +-A INPUT -i eth0 -j limit-3776 +-A INPUT -i eth0 -j limit-3777 +-A INPUT -i eth0 -j limit-3778 +-A INPUT -i eth0 -j limit-3779 +-A INPUT -i eth0 -j limit-3780 +-A INPUT -i eth0 -j limit-3781 +-A INPUT -i eth0 -j limit-3782 +-A INPUT -i eth0 -j limit-3783 +-A INPUT -i eth0 -j limit-3784 +-A INPUT -i eth0 -j limit-3785 +-A INPUT -i eth0 -j limit-3786 +-A INPUT -i eth0 -j limit-3787 +-A INPUT -i eth0 -j limit-3788 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 +-A INPUT -i eth0 -j limit-3790 +-A INPUT -i eth0 -j limit-3791 +-A INPUT -i eth0 -j limit-3792 +-A INPUT -i eth0 -j limit-3793 +-A INPUT -i eth0 -j limit-3794 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 +-A INPUT -i eth0 -j limit-3796 +-A INPUT -i eth0 -j limit-3797 +-A INPUT -i eth0 -j limit-3798 +-A INPUT -i eth0 -j limit-3799 +-A INPUT -i eth0 -j limit-3800 +-A INPUT -i eth0 -j limit-3801 +-A INPUT -i eth0 -j limit-3802 +-A INPUT -i eth0 -j limit-3803 +-A INPUT -i eth0 -j limit-3804 +-A INPUT -i eth0 -j limit-3805 +-A INPUT -i eth0 -j limit-3806 +-A INPUT -i eth0 -j limit-3807 +-A INPUT -i eth0 -j limit-3808 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 +-A INPUT -i eth0 -j limit-3810 +-A INPUT -i eth0 -j limit-3811 +-A INPUT -i eth0 -j limit-3812 +-A INPUT -i eth0 -j limit-3813 +-A INPUT -i eth0 -j limit-3814 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 +-A INPUT -i eth0 -j limit-3816 +-A INPUT -i eth0 -j limit-3817 +-A INPUT -i eth0 -j limit-3818 +-A INPUT -i eth0 -j limit-3819 +-A INPUT -i eth0 -j limit-3820 +-A INPUT -i eth0 -j limit-3821 +-A INPUT -i eth0 -j limit-3822 +-A INPUT -i eth0 -j limit-3823 +-A INPUT -i eth0 -j limit-3824 +-A INPUT -i eth0 -j limit-3825 +-A INPUT -i eth0 -j limit-3826 +-A INPUT -i eth0 -j limit-3827 +-A INPUT -i eth0 -j limit-3828 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 +-A INPUT -i eth0 -j limit-3830 +-A INPUT -i eth0 -j limit-3831 +-A INPUT -i eth0 -j limit-3832 +-A INPUT -i eth0 -j limit-3833 +-A INPUT -i eth0 -j limit-3834 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 +-A INPUT -i eth0 -j limit-3836 +-A INPUT -i eth0 -j limit-3837 +-A INPUT -i eth0 -j limit-3838 +-A INPUT -i eth0 -j limit-3839 +-A INPUT -i eth0 -j limit-3840 +-A INPUT -i eth0 -j limit-3841 +-A INPUT -i eth0 -j limit-3842 +-A INPUT -i eth0 -j limit-3843 +-A INPUT -i eth0 -j limit-3844 +-A INPUT -i eth0 -j limit-3845 +-A INPUT -i eth0 -j limit-3846 +-A INPUT -i eth0 -j limit-3847 +-A INPUT -i eth0 -j limit-3848 +-A INPUT -i eth0 -j limit-3849 +-A INPUT -i eth0 -j limit-3850 +-A INPUT -i eth0 -j limit-3851 +-A INPUT -i eth0 -j limit-3852 +-A INPUT -i eth0 -j limit-3853 +-A INPUT -i eth0 -j limit-3854 +-A INPUT -i eth0 -j limit-3855 +-A INPUT -i eth0 -j limit-3856 +-A INPUT -i eth0 -j limit-3857 +-A INPUT -i eth0 -j limit-3858 +-A INPUT -i eth0 -j limit-3859 +-A INPUT -i eth0 -j limit-3860 +-A INPUT -i eth0 -j limit-3861 +-A INPUT -i eth0 -j limit-3862 +-A INPUT -i eth0 -j limit-3863 +-A INPUT -i eth0 -j limit-3864 +-A INPUT -i eth0 -j limit-3865 +-A INPUT -i eth0 -j limit-3866 +-A INPUT -i eth0 -j limit-3867 +-A INPUT -i eth0 -j limit-3868 +-A INPUT -i eth0 -j limit-3869 +-A INPUT -i eth0 -j limit-3870 +-A INPUT -i eth0 -j limit-3871 +-A INPUT -i eth0 -j limit-3872 +-A INPUT -i eth0 -j limit-3873 +-A INPUT -i eth0 -j limit-3874 +-A INPUT -i eth0 -j limit-3875 +-A INPUT -i eth0 -j limit-3876 +-A INPUT -i eth0 -j limit-3877 +-A INPUT -i eth0 -j limit-3878 +-A INPUT -i eth0 -j limit-3879 +-A INPUT -i eth0 -j limit-3880 +-A INPUT -i eth0 -j limit-3881 +-A INPUT -i eth0 -j limit-3882 +-A INPUT -i eth0 -j limit-3883 +-A INPUT -i eth0 -j limit-3884 +-A INPUT -i eth0 -j limit-3885 +-A INPUT -i eth0 -j limit-3886 +-A INPUT -i eth0 -j limit-3887 +-A INPUT -i eth0 -j limit-3888 +-A INPUT -i eth0 -j limit-3889 +-A INPUT -i eth0 -j limit-3890 +-A INPUT -i eth0 -j limit-3891 +-A INPUT -i eth0 -j limit-3892 +-A INPUT -i eth0 -j limit-3893 +-A INPUT -i eth0 -j limit-3894 +-A INPUT -i eth0 -j limit-3895 +-A INPUT -i eth0 -j limit-3896 +-A INPUT -i eth0 -j limit-3897 +-A INPUT -i eth0 -j limit-3898 +-A INPUT -i eth0 -j limit-3899 +-A INPUT -i eth0 -j limit-3900 +-A INPUT -i eth0 -j limit-3901 +-A INPUT -i eth0 -j limit-3902 +-A INPUT -i eth0 -j limit-3903 -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set @@ -43054,654 +71169,1007 @@ hash:net family inet -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A INPUT -j ACCEPT --A INPUT -j logdrop-1184 +-A INPUT -j logdrop-2200 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-54 --A INPUT -j logdrop-1185 +-A INPUT -j logaccept-99 +-A INPUT -j logdrop-2201 -A INPUT -j logpass-0 +-A INPUT -j logaccept-100 +-A INPUT -j logdrop-2202 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-101 +-A INPUT -j logdrop-2203 +-A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-55 --A INPUT -j logdrop-1186 --A INPUT -j logpass-1 +-A INPUT -j logaccept-102 +-A INPUT -j logdrop-2204 +-A INPUT -j logpass-3 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing -A OUTPUT -m recent --name user:B --rdest --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set --A OUTPUT -j limit-1886 --A OUTPUT -j limit-1885 --A OUTPUT -j limit-1884 --A OUTPUT -j limit-1883 --A OUTPUT -j limit-1882 --A OUTPUT -j limit-1881 --A OUTPUT -j limit-1880 --A OUTPUT -j limit-1879 --A OUTPUT -j limit-1878 --A OUTPUT -j limit-1877 --A OUTPUT -j limit-1876 --A OUTPUT -j limit-1875 --A OUTPUT -j limit-1874 --A OUTPUT -j limit-1873 --A OUTPUT -j limit-1872 --A OUTPUT -j limit-1871 --A OUTPUT -j limit-1870 --A OUTPUT -j limit-1869 --A OUTPUT -j limit-1868 --A OUTPUT -j limit-1867 --A OUTPUT -j limit-1866 --A OUTPUT -j limit-1865 --A OUTPUT -j limit-1864 --A OUTPUT -j limit-1863 --A OUTPUT -j limit-1862 --A OUTPUT -j limit-1861 --A OUTPUT -j limit-1860 --A OUTPUT -j limit-1859 --A OUTPUT -j limit-1858 --A OUTPUT -j limit-1857 --A OUTPUT -j limit-1856 --A OUTPUT -j limit-1855 --A OUTPUT -j limit-1854 --A OUTPUT -j limit-1853 --A OUTPUT -j limit-1852 --A OUTPUT -j limit-1851 --A OUTPUT -j limit-1850 --A OUTPUT -j limit-1849 --A OUTPUT -j limit-1848 --A OUTPUT -j limit-1847 --A OUTPUT -j limit-1846 --A OUTPUT -j limit-1845 --A OUTPUT -j limit-1844 --A OUTPUT -j limit-1843 --A OUTPUT -j limit-1842 --A OUTPUT -j limit-1841 --A OUTPUT -j limit-1840 --A OUTPUT -j limit-1839 --A OUTPUT -j limit-1838 --A OUTPUT -j limit-1837 --A OUTPUT -j limit-1836 --A OUTPUT -j limit-1835 --A OUTPUT -j limit-1834 --A OUTPUT -j limit-1833 --A OUTPUT -j limit-1832 --A OUTPUT -j limit-1831 --A OUTPUT -j limit-1830 --A OUTPUT -j limit-1829 --A OUTPUT -j limit-1828 --A OUTPUT -j limit-1827 --A OUTPUT -j limit-1826 --A OUTPUT -j limit-1825 --A OUTPUT -j limit-1824 --A OUTPUT -j limit-1823 --A OUTPUT -j limit-1822 --A OUTPUT -j limit-1821 --A OUTPUT -j limit-1820 --A OUTPUT -j limit-1819 --A OUTPUT -j limit-1818 --A OUTPUT -j limit-1817 --A OUTPUT -j limit-1816 --A OUTPUT -j limit-1815 --A OUTPUT -j limit-1814 --A OUTPUT -j limit-1813 --A OUTPUT -j limit-1812 --A OUTPUT -j limit-1811 --A OUTPUT -j limit-1810 --A OUTPUT -j limit-1809 --A OUTPUT -j limit-1808 --A OUTPUT -j limit-1807 --A OUTPUT -j limit-1806 --A OUTPUT -j limit-1805 --A OUTPUT -j limit-1804 --A OUTPUT -j limit-1803 --A OUTPUT -j limit-1802 --A OUTPUT -j limit-1801 --A OUTPUT -j limit-1800 --A OUTPUT -j limit-1799 --A OUTPUT -j limit-1798 --A OUTPUT -j limit-1797 --A OUTPUT -j limit-1796 --A OUTPUT -j limit-1795 --A OUTPUT -j limit-1794 --A OUTPUT -j limit-1793 --A OUTPUT -j limit-1792 --A OUTPUT -j limit-1791 --A OUTPUT -j limit-1790 --A OUTPUT -j limit-1789 --A OUTPUT -j limit-1788 --A OUTPUT -j limit-1787 --A OUTPUT -j limit-1786 --A OUTPUT -j limit-1785 --A OUTPUT -j limit-1784 --A OUTPUT -j limit-1783 --A OUTPUT -j limit-1782 --A OUTPUT -j limit-1781 --A OUTPUT -j limit-1780 --A OUTPUT -j limit-1779 --A OUTPUT -j limit-1778 --A OUTPUT -j limit-1777 --A OUTPUT -j limit-1776 --A OUTPUT -j limit-1775 --A OUTPUT -j limit-1774 --A OUTPUT -j limit-1773 --A OUTPUT -j limit-1772 --A OUTPUT -j limit-1771 --A OUTPUT -j limit-1770 --A OUTPUT -j limit-1769 --A OUTPUT -j limit-1768 --A OUTPUT -j limit-1767 --A OUTPUT -j limit-1766 --A OUTPUT -j limit-1765 --A OUTPUT -j limit-1764 --A OUTPUT -j limit-1763 --A OUTPUT -j limit-1762 --A OUTPUT -j limit-1761 --A OUTPUT -j limit-1760 --A OUTPUT -j limit-1759 --A OUTPUT -j limit-1758 --A OUTPUT -j limit-1757 --A OUTPUT -j limit-1756 --A OUTPUT -j limit-1755 --A OUTPUT -j limit-1754 --A OUTPUT -j limit-1753 --A OUTPUT -j limit-1752 --A OUTPUT -j limit-1751 --A OUTPUT -j limit-1750 --A OUTPUT -j limit-1749 --A OUTPUT -j limit-1748 --A OUTPUT -j limit-1747 --A OUTPUT -j limit-1746 --A OUTPUT -j limit-1745 --A OUTPUT -j limit-1744 --A OUTPUT -j limit-1743 --A OUTPUT -j limit-1742 --A OUTPUT -j limit-1741 --A OUTPUT -j limit-1740 --A OUTPUT -j limit-1739 --A OUTPUT -j limit-1738 --A OUTPUT -j limit-1737 --A OUTPUT -j limit-1736 --A OUTPUT -j limit-1735 --A OUTPUT -j limit-1734 --A OUTPUT -j limit-1733 --A OUTPUT -j limit-1732 --A OUTPUT -j limit-1731 --A OUTPUT -j limit-1730 --A OUTPUT -j limit-1729 --A OUTPUT -j limit-1728 --A OUTPUT -j limit-1727 --A OUTPUT -j limit-1726 --A OUTPUT -j limit-1725 --A OUTPUT -j limit-1724 --A OUTPUT -j limit-1723 --A OUTPUT -j limit-1722 --A OUTPUT -j limit-1721 --A OUTPUT -j limit-1720 --A OUTPUT -j limit-1719 --A OUTPUT -j limit-1718 --A OUTPUT -j limit-1717 --A OUTPUT -j limit-1716 --A OUTPUT -j limit-1715 --A OUTPUT -j limit-1714 --A OUTPUT -j limit-1713 --A OUTPUT -j limit-1712 --A OUTPUT -j limit-1711 --A OUTPUT -j limit-1710 --A OUTPUT -j limit-1709 --A OUTPUT -j limit-1708 --A OUTPUT -j limit-1707 --A OUTPUT -j limit-1706 --A OUTPUT -j limit-1705 --A OUTPUT -j limit-1704 --A OUTPUT -j limit-1703 --A OUTPUT -j limit-1702 --A OUTPUT -j limit-1701 --A OUTPUT -j limit-1700 --A OUTPUT -j limit-1699 --A OUTPUT -j limit-1698 --A OUTPUT -j limit-1697 --A OUTPUT -j limit-1696 --A OUTPUT -j limit-1695 --A OUTPUT -j limit-1694 --A OUTPUT -j limit-1693 --A OUTPUT -j limit-1692 --A OUTPUT -j limit-1691 --A OUTPUT -j limit-1690 --A OUTPUT -j limit-1689 --A OUTPUT -j limit-1688 --A OUTPUT -j limit-1687 --A OUTPUT -j limit-1686 --A OUTPUT -j limit-1685 --A OUTPUT -j limit-1684 --A OUTPUT -j limit-1683 --A OUTPUT -j limit-1682 --A OUTPUT -j limit-1681 --A OUTPUT -j limit-1680 --A OUTPUT -j limit-1679 --A OUTPUT -j limit-1678 --A OUTPUT -j limit-1677 --A OUTPUT -j limit-1676 --A OUTPUT -j limit-1675 --A OUTPUT -j limit-1674 --A OUTPUT -j limit-1673 --A OUTPUT -j limit-1672 --A OUTPUT -j limit-1671 --A OUTPUT -j limit-1670 --A OUTPUT -j limit-1669 --A OUTPUT -j limit-1668 --A OUTPUT -j limit-1667 --A OUTPUT -j limit-1666 --A OUTPUT -j limit-1665 --A OUTPUT -j limit-1664 --A OUTPUT -j limit-1663 --A OUTPUT -j limit-1662 --A OUTPUT -j limit-1661 --A OUTPUT -j limit-1660 --A OUTPUT -j limit-1659 --A OUTPUT -j limit-1658 --A OUTPUT -j limit-1657 --A OUTPUT -j limit-1656 --A OUTPUT -j limit-1655 --A OUTPUT -j limit-1654 --A OUTPUT -j limit-1653 --A OUTPUT -j limit-1652 --A OUTPUT -j limit-1651 --A OUTPUT -j limit-1650 --A OUTPUT -j limit-1649 --A OUTPUT -j limit-1648 --A OUTPUT -j limit-1647 --A OUTPUT -j limit-1646 --A OUTPUT -j limit-1645 --A OUTPUT -j limit-1644 --A OUTPUT -j limit-1643 --A OUTPUT -j limit-1642 --A OUTPUT -j limit-1641 --A OUTPUT -j limit-1640 --A OUTPUT -j limit-1639 --A OUTPUT -j limit-1638 --A OUTPUT -j limit-1637 --A OUTPUT -j limit-1636 --A OUTPUT -j limit-1635 --A OUTPUT -j limit-1634 --A OUTPUT -j limit-1633 --A OUTPUT -j limit-1632 --A OUTPUT -j limit-1631 --A OUTPUT -j limit-1630 --A OUTPUT -j limit-1629 --A OUTPUT -j limit-1628 --A OUTPUT -j limit-1627 --A OUTPUT -j limit-1626 --A OUTPUT -j limit-1625 --A OUTPUT -j limit-1624 --A OUTPUT -j limit-1623 --A OUTPUT -j limit-1622 --A OUTPUT -j limit-1621 --A OUTPUT -j limit-1620 --A OUTPUT -j limit-1619 --A OUTPUT -j limit-1618 --A OUTPUT -j limit-1617 --A OUTPUT -j limit-1616 --A OUTPUT -j limit-1615 --A OUTPUT -j limit-1614 --A OUTPUT -j limit-1613 --A OUTPUT -j limit-1612 --A OUTPUT -j limit-1611 --A OUTPUT -j limit-1610 --A OUTPUT -j limit-1609 --A OUTPUT -j limit-1608 --A OUTPUT -j limit-1607 --A OUTPUT -j limit-1606 --A OUTPUT -j limit-1605 --A OUTPUT -j limit-1604 --A OUTPUT -j limit-1603 --A OUTPUT -j limit-1602 --A OUTPUT -j limit-1601 --A OUTPUT -j limit-1600 --A OUTPUT -j limit-1599 --A OUTPUT -j limit-1598 --A OUTPUT -j limit-1597 --A OUTPUT -j limit-1596 --A OUTPUT -j limit-1595 --A OUTPUT -j limit-1594 --A OUTPUT -j limit-1593 --A OUTPUT -j limit-1592 --A OUTPUT -j limit-1591 --A OUTPUT -j limit-1590 --A OUTPUT -j limit-1589 --A OUTPUT -j limit-1588 --A OUTPUT -j limit-1587 --A OUTPUT -j limit-1586 --A OUTPUT -j limit-1585 --A OUTPUT -j limit-1584 --A OUTPUT -j limit-1583 --A OUTPUT -j limit-1582 --A OUTPUT -j limit-1581 --A OUTPUT -j limit-1580 --A OUTPUT -j limit-1579 --A OUTPUT -j limit-1578 --A OUTPUT -j limit-1577 --A OUTPUT -j limit-1576 --A OUTPUT -j limit-1575 --A OUTPUT -j limit-1574 --A OUTPUT -j limit-1573 --A OUTPUT -j limit-1572 --A OUTPUT -j limit-1571 --A OUTPUT -j limit-1570 --A OUTPUT -j limit-1569 --A OUTPUT -j limit-1568 --A OUTPUT -j limit-1567 --A OUTPUT -j limit-1566 --A OUTPUT -j limit-1565 --A OUTPUT -j limit-1564 --A OUTPUT -j limit-1563 --A OUTPUT -j limit-1562 --A OUTPUT -j limit-1561 --A OUTPUT -j limit-1560 --A OUTPUT -j limit-1559 --A OUTPUT -j limit-1558 --A OUTPUT -j limit-1557 --A OUTPUT -j limit-1556 --A OUTPUT -j limit-1555 --A OUTPUT -j limit-1554 --A OUTPUT -j limit-1553 --A OUTPUT -j limit-1552 --A OUTPUT -j limit-1551 --A OUTPUT -j limit-1550 --A OUTPUT -j limit-1549 --A OUTPUT -j limit-1548 --A OUTPUT -j limit-1547 --A OUTPUT -j limit-1546 --A OUTPUT -j limit-1545 --A OUTPUT -j limit-1544 --A OUTPUT -j limit-1543 --A OUTPUT -j limit-1542 --A OUTPUT -j limit-1541 --A OUTPUT -j limit-1540 --A OUTPUT -j limit-1539 --A OUTPUT -j limit-1538 --A OUTPUT -j limit-1537 --A OUTPUT -j limit-1536 --A OUTPUT -j limit-1535 --A OUTPUT -j limit-1534 --A OUTPUT -j limit-1533 --A OUTPUT -j limit-1532 --A OUTPUT -j limit-1531 --A OUTPUT -j limit-1530 --A OUTPUT -j limit-1529 --A OUTPUT -j limit-1528 --A OUTPUT -j limit-1527 --A OUTPUT -j limit-1526 --A OUTPUT -j limit-1525 --A OUTPUT -j limit-1524 --A OUTPUT -j limit-1523 --A OUTPUT -j limit-1522 --A OUTPUT -j limit-1521 --A OUTPUT -j limit-1520 --A OUTPUT -j limit-1519 --A OUTPUT -j limit-1518 --A OUTPUT -j limit-1517 --A OUTPUT -j limit-1516 --A OUTPUT -j limit-1515 --A OUTPUT -j limit-1514 --A OUTPUT -j limit-1513 --A OUTPUT -j limit-1512 --A OUTPUT -j limit-1511 --A OUTPUT -j limit-1510 --A OUTPUT -j limit-1509 --A OUTPUT -j limit-1508 --A OUTPUT -j limit-1507 --A OUTPUT -j limit-1506 --A OUTPUT -j limit-1505 --A OUTPUT -j limit-1504 --A OUTPUT -j limit-1503 --A OUTPUT -j limit-1502 --A OUTPUT -j limit-1501 --A OUTPUT -j limit-1500 --A OUTPUT -j limit-1499 --A OUTPUT -j limit-1498 --A OUTPUT -j limit-1497 --A OUTPUT -j limit-1496 --A OUTPUT -j limit-1495 --A OUTPUT -j limit-1494 --A OUTPUT -j limit-1493 --A OUTPUT -j limit-1492 --A OUTPUT -j limit-1491 --A OUTPUT -j limit-1490 --A OUTPUT -j limit-1489 --A OUTPUT -j limit-1488 --A OUTPUT -j limit-1487 --A OUTPUT -j limit-1486 --A OUTPUT -j limit-1485 --A OUTPUT -j limit-1484 --A OUTPUT -j limit-1483 --A OUTPUT -j limit-1482 --A OUTPUT -j limit-1481 --A OUTPUT -j limit-1480 --A OUTPUT -j limit-1479 --A OUTPUT -j limit-1478 --A OUTPUT -j limit-1477 --A OUTPUT -j limit-1476 --A OUTPUT -j limit-1475 --A OUTPUT -j limit-1474 --A OUTPUT -j limit-1473 --A OUTPUT -j limit-1472 --A OUTPUT -j limit-1471 --A OUTPUT -j limit-1470 --A OUTPUT -j limit-1469 --A OUTPUT -j limit-1468 --A OUTPUT -j limit-1467 --A OUTPUT -j limit-1466 --A OUTPUT -j limit-1465 --A OUTPUT -j limit-1464 --A OUTPUT -j limit-1463 --A OUTPUT -j limit-1462 --A OUTPUT -j limit-1461 --A OUTPUT -j limit-1460 --A OUTPUT -j limit-1459 --A OUTPUT -j limit-1458 --A OUTPUT -j limit-1457 --A OUTPUT -j limit-1456 --A OUTPUT -j limit-1455 --A OUTPUT -j limit-1454 --A OUTPUT -j limit-1453 --A OUTPUT -j limit-1452 --A OUTPUT -j limit-1451 --A OUTPUT -j limit-1450 --A OUTPUT -j limit-1449 --A OUTPUT -j limit-1448 --A OUTPUT -j limit-1447 --A OUTPUT -j limit-1446 --A OUTPUT -j limit-1445 --A OUTPUT -j limit-1444 --A OUTPUT -j limit-1443 --A OUTPUT -j limit-1442 --A OUTPUT -j limit-1441 --A OUTPUT -j limit-1440 --A OUTPUT -j limit-1439 --A OUTPUT -j limit-1438 --A OUTPUT -j limit-1437 --A OUTPUT -j limit-1436 --A OUTPUT -j limit-1435 --A OUTPUT -j limit-1434 --A OUTPUT -j limit-1433 --A OUTPUT -j limit-1432 --A OUTPUT -j limit-1431 --A OUTPUT -j limit-1430 --A OUTPUT -j limit-1429 --A OUTPUT -j limit-1428 --A OUTPUT -j limit-1427 --A OUTPUT -j limit-1426 --A OUTPUT -j limit-1425 --A OUTPUT -j limit-1424 --A OUTPUT -j limit-1423 --A OUTPUT -j limit-1422 --A OUTPUT -j limit-1421 --A OUTPUT -j limit-1420 --A OUTPUT -j limit-1419 --A OUTPUT -j limit-1418 --A OUTPUT -j limit-1417 --A OUTPUT -j limit-1416 --A OUTPUT -j limit-1415 --A OUTPUT -j limit-1414 --A OUTPUT -j limit-1413 --A OUTPUT -j limit-1412 --A OUTPUT -j limit-1411 --A OUTPUT -j limit-1410 --A OUTPUT -j limit-1409 --A OUTPUT -j limit-1408 --A OUTPUT -j limit-1407 --A OUTPUT -j limit-1406 --A OUTPUT -j limit-1405 --A OUTPUT -j limit-1404 --A OUTPUT -j limit-1403 --A OUTPUT -j limit-1402 --A OUTPUT -j limit-1401 --A OUTPUT -j limit-1400 --A OUTPUT -j limit-1399 --A OUTPUT -j limit-1398 --A OUTPUT -j limit-1397 --A OUTPUT -j limit-1396 --A OUTPUT -j limit-1395 --A OUTPUT -j limit-1394 --A OUTPUT -j limit-1393 --A OUTPUT -j limit-1392 --A OUTPUT -j limit-1391 --A OUTPUT -j limit-1390 --A OUTPUT -j limit-1389 --A OUTPUT -j limit-1388 --A OUTPUT -j limit-1387 --A OUTPUT -j limit-1386 --A OUTPUT -j limit-1385 --A OUTPUT -j limit-1384 --A OUTPUT -j limit-1383 --A OUTPUT -j limit-1382 --A OUTPUT -j limit-1381 --A OUTPUT -j limit-1380 --A OUTPUT -j limit-1379 --A OUTPUT -j limit-1378 --A OUTPUT -j limit-1377 --A OUTPUT -j limit-1376 --A OUTPUT -j limit-1375 --A OUTPUT -j limit-1374 --A OUTPUT -j limit-1373 --A OUTPUT -j limit-1372 --A OUTPUT -j limit-1371 --A OUTPUT -j limit-1370 --A OUTPUT -j limit-1369 --A OUTPUT -j limit-1368 --A OUTPUT -j limit-1367 --A OUTPUT -j limit-1366 --A OUTPUT -j limit-1365 --A OUTPUT -j limit-1364 --A OUTPUT -j limit-1363 --A OUTPUT -j limit-1362 --A OUTPUT -j limit-1361 --A OUTPUT -j limit-1360 --A OUTPUT -j limit-1359 --A OUTPUT -j limit-1358 --A OUTPUT -j limit-1357 --A OUTPUT -j limit-1356 --A OUTPUT -j limit-1355 --A OUTPUT -j limit-1354 --A OUTPUT -j limit-1353 --A OUTPUT -j limit-1352 --A OUTPUT -j limit-1351 --A OUTPUT -j limit-1350 --A OUTPUT -j limit-1349 --A OUTPUT -j limit-1348 --A OUTPUT -j limit-1347 --A OUTPUT -j limit-1346 --A OUTPUT -j limit-1345 --A OUTPUT -j limit-1344 --A OUTPUT -j limit-1343 --A OUTPUT -j limit-1342 --A OUTPUT -j limit-1341 --A OUTPUT -j limit-1340 --A OUTPUT -j limit-1339 --A OUTPUT -j limit-1338 --A OUTPUT -j limit-1337 --A OUTPUT -j limit-1336 --A OUTPUT -j limit-1335 --A OUTPUT -j limit-1334 --A OUTPUT -j limit-1333 --A OUTPUT -j limit-1332 --A OUTPUT -j limit-1331 --A OUTPUT -j limit-1330 --A OUTPUT -j limit-1329 --A OUTPUT -j limit-1328 --A OUTPUT -j limit-1327 --A OUTPUT -j limit-1326 --A OUTPUT -j limit-1325 --A OUTPUT -j limit-1324 --A OUTPUT -j limit-1323 --A OUTPUT -j limit-1322 --A OUTPUT -j limit-1321 --A OUTPUT -j limit-1320 --A OUTPUT -j limit-1319 --A OUTPUT -j limit-1318 --A OUTPUT -j limit-1317 --A OUTPUT -j limit-1316 --A OUTPUT -j limit-1315 --A OUTPUT -j limit-1314 --A OUTPUT -j limit-1313 --A OUTPUT -j limit-1312 --A OUTPUT -j limit-1311 --A OUTPUT -j limit-1310 --A OUTPUT -j limit-1309 --A OUTPUT -j limit-1308 --A OUTPUT -j limit-1307 --A OUTPUT -j limit-1306 --A OUTPUT -j limit-1305 --A OUTPUT -j limit-1304 --A OUTPUT -j limit-1303 --A OUTPUT -j limit-1302 --A OUTPUT -j limit-1301 --A OUTPUT -j limit-1300 --A OUTPUT -j limit-1299 --A OUTPUT -j limit-1298 --A OUTPUT -j limit-1297 --A OUTPUT -j limit-1296 --A OUTPUT -j limit-1295 --A OUTPUT -j limit-1294 --A OUTPUT -j limit-1293 --A OUTPUT -j limit-1292 --A OUTPUT -j limit-1291 --A OUTPUT -j limit-1290 --A OUTPUT -j limit-1289 --A OUTPUT -j limit-1288 --A OUTPUT -j limit-1287 --A OUTPUT -j limit-1286 --A OUTPUT -j limit-1285 --A OUTPUT -j limit-1284 --A OUTPUT -j limit-1283 --A OUTPUT -j limit-1282 --A OUTPUT -j limit-1281 --A OUTPUT -j limit-1280 --A OUTPUT -j limit-1279 --A OUTPUT -j limit-1278 --A OUTPUT -j limit-1277 --A OUTPUT -j limit-1276 --A OUTPUT -j limit-1275 --A OUTPUT -j limit-1274 --A OUTPUT -j limit-1273 --A OUTPUT -j limit-1272 --A OUTPUT -j limit-1271 --A OUTPUT -j limit-1270 --A OUTPUT -j limit-1269 --A OUTPUT -j limit-1268 --A OUTPUT -j limit-1267 --A OUTPUT -j limit-1266 --A OUTPUT -j limit-1265 --A OUTPUT -j limit-1264 --A OUTPUT -j limit-1263 --A OUTPUT -j limit-1262 --A OUTPUT -j limit-1261 --A OUTPUT -j limit-1260 --A OUTPUT -j limit-1259 --A OUTPUT -j limit-1258 +-A OUTPUT -j limit-2927 +-A OUTPUT -j limit-2926 +-A OUTPUT -j limit-2925 +-A OUTPUT -j limit-2924 +-A OUTPUT -j limit-2923 +-A OUTPUT -j limit-2922 +-A OUTPUT -j limit-2921 +-A OUTPUT -j limit-2920 +-A OUTPUT -j limit-2919 +-A OUTPUT -j limit-2918 +-A OUTPUT -j limit-2917 +-A OUTPUT -j limit-2916 +-A OUTPUT -j limit-2915 +-A OUTPUT -j limit-2914 +-A OUTPUT -j limit-2913 +-A OUTPUT -j limit-2912 +-A OUTPUT -j limit-2911 +-A OUTPUT -j limit-2910 +-A OUTPUT -j limit-2909 +-A OUTPUT -j limit-2908 +-A OUTPUT -j limit-2907 +-A OUTPUT -j limit-2906 +-A OUTPUT -j limit-2905 +-A OUTPUT -j limit-2904 +-A OUTPUT -j limit-2903 +-A OUTPUT -j limit-2902 +-A OUTPUT -j limit-2901 +-A OUTPUT -j limit-2900 +-A OUTPUT -j limit-2899 +-A OUTPUT -j limit-2898 +-A OUTPUT -j limit-2897 +-A OUTPUT -j limit-2896 +-A OUTPUT -j limit-2895 +-A OUTPUT -j limit-2894 +-A OUTPUT -j limit-2893 +-A OUTPUT -j limit-2892 +-A OUTPUT -j limit-2891 +-A OUTPUT -j limit-2890 +-A OUTPUT -j limit-2889 +-A OUTPUT -j limit-2888 +-A OUTPUT -j limit-2887 +-A OUTPUT -j limit-2886 +-A OUTPUT -j limit-2885 +-A OUTPUT -j limit-2884 +-A OUTPUT -j limit-2883 +-A OUTPUT -j limit-2882 +-A OUTPUT -j limit-2881 +-A OUTPUT -j limit-2880 +-A OUTPUT -j limit-2879 +-A OUTPUT -j limit-2878 +-A OUTPUT -j limit-2877 +-A OUTPUT -j limit-2876 +-A OUTPUT -j limit-2875 +-A OUTPUT -j limit-2874 +-A OUTPUT -j limit-2873 +-A OUTPUT -j limit-2872 +-A OUTPUT -j limit-2871 +-A OUTPUT -j limit-2870 +-A OUTPUT -j limit-2869 +-A OUTPUT -j limit-2868 +-A OUTPUT -j limit-2867 +-A OUTPUT -j limit-2866 +-A OUTPUT -j limit-2865 +-A OUTPUT -j limit-2864 +-A OUTPUT -j limit-2863 +-A OUTPUT -j limit-2862 +-A OUTPUT -j limit-2861 +-A OUTPUT -j limit-2860 +-A OUTPUT -j limit-2859 +-A OUTPUT -j limit-2858 +-A OUTPUT -j limit-2857 +-A OUTPUT -j limit-2856 +-A OUTPUT -j limit-2855 +-A OUTPUT -j limit-2854 +-A OUTPUT -j limit-2853 +-A OUTPUT -j limit-2852 +-A OUTPUT -j limit-2851 +-A OUTPUT -j limit-2850 +-A OUTPUT -j limit-2849 +-A OUTPUT -j limit-2848 +-A OUTPUT -j limit-2847 +-A OUTPUT -j limit-2846 +-A OUTPUT -j limit-2845 +-A OUTPUT -j limit-2844 +-A OUTPUT -j limit-2843 +-A OUTPUT -j limit-2842 +-A OUTPUT -j limit-2841 +-A OUTPUT -j limit-2840 +-A OUTPUT -j limit-2839 +-A OUTPUT -j limit-2838 +-A OUTPUT -j limit-2837 +-A OUTPUT -j limit-2836 +-A OUTPUT -j limit-2835 +-A OUTPUT -j limit-2834 +-A OUTPUT -j limit-2833 +-A OUTPUT -j limit-2832 +-A OUTPUT -j limit-2831 +-A OUTPUT -j limit-2830 +-A OUTPUT -j limit-2829 +-A OUTPUT -j limit-2828 +-A OUTPUT -j limit-2827 +-A OUTPUT -j limit-2826 +-A OUTPUT -j limit-2825 +-A OUTPUT -j limit-2824 +-A OUTPUT -j limit-2823 +-A OUTPUT -j limit-2822 +-A OUTPUT -j limit-2821 +-A OUTPUT -j limit-2820 +-A OUTPUT -j limit-2819 +-A OUTPUT -j limit-2818 +-A OUTPUT -j limit-2817 +-A OUTPUT -j limit-2816 +-A OUTPUT -j limit-2815 +-A OUTPUT -j limit-2814 +-A OUTPUT -j limit-2813 +-A OUTPUT -j limit-2812 +-A OUTPUT -j limit-2811 +-A OUTPUT -j limit-2810 +-A OUTPUT -j limit-2809 +-A OUTPUT -j limit-2808 +-A OUTPUT -j limit-2807 +-A OUTPUT -j limit-2806 +-A OUTPUT -j limit-2805 +-A OUTPUT -j limit-2804 +-A OUTPUT -j limit-2803 +-A OUTPUT -j limit-2802 +-A OUTPUT -j limit-2801 +-A OUTPUT -j limit-2800 +-A OUTPUT -j limit-2799 +-A OUTPUT -j limit-2798 +-A OUTPUT -j limit-2797 +-A OUTPUT -j limit-2796 +-A OUTPUT -j limit-2795 +-A OUTPUT -j limit-2794 +-A OUTPUT -j limit-2793 +-A OUTPUT -j limit-2792 +-A OUTPUT -j limit-2791 +-A OUTPUT -j limit-2790 +-A OUTPUT -j limit-2789 +-A OUTPUT -j limit-2788 +-A OUTPUT -j limit-2787 +-A OUTPUT -j limit-2786 +-A OUTPUT -j limit-2785 +-A OUTPUT -j limit-2784 +-A OUTPUT -j limit-2783 +-A OUTPUT -j limit-2782 +-A OUTPUT -j limit-2781 +-A OUTPUT -j limit-2780 +-A OUTPUT -j limit-2779 +-A OUTPUT -j limit-2778 +-A OUTPUT -j limit-2777 +-A OUTPUT -j limit-2776 +-A OUTPUT -j limit-2775 +-A OUTPUT -j limit-2774 +-A OUTPUT -j limit-2773 +-A OUTPUT -j limit-2772 +-A OUTPUT -j limit-2771 +-A OUTPUT -j limit-2770 +-A OUTPUT -j limit-2769 +-A OUTPUT -j limit-2768 +-A OUTPUT -j limit-2767 +-A OUTPUT -j limit-2766 +-A OUTPUT -j limit-2765 +-A OUTPUT -j limit-2764 +-A OUTPUT -j limit-2763 +-A OUTPUT -j limit-2762 +-A OUTPUT -j limit-2761 +-A OUTPUT -j limit-2760 +-A OUTPUT -j limit-2759 +-A OUTPUT -j limit-2758 +-A OUTPUT -j limit-2757 +-A OUTPUT -j limit-2756 +-A OUTPUT -j limit-2755 +-A OUTPUT -j limit-2754 +-A OUTPUT -j limit-2753 +-A OUTPUT -j limit-2752 +-A OUTPUT -j limit-2751 +-A OUTPUT -j limit-2750 +-A OUTPUT -j limit-2749 +-A OUTPUT -j limit-2748 +-A OUTPUT -j limit-2747 +-A OUTPUT -j limit-2746 +-A OUTPUT -j limit-2745 +-A OUTPUT -j limit-2744 +-A OUTPUT -j limit-2743 +-A OUTPUT -j limit-2742 +-A OUTPUT -j limit-2741 +-A OUTPUT -j limit-2740 +-A OUTPUT -j limit-2739 +-A OUTPUT -j limit-2738 +-A OUTPUT -j limit-2737 +-A OUTPUT -j limit-2736 +-A OUTPUT -j limit-2735 +-A OUTPUT -j limit-2734 +-A OUTPUT -j limit-2733 +-A OUTPUT -j limit-2732 +-A OUTPUT -j limit-2731 +-A OUTPUT -j limit-2730 +-A OUTPUT -j limit-2729 +-A OUTPUT -j limit-2728 +-A OUTPUT -j limit-2727 +-A OUTPUT -j limit-2726 +-A OUTPUT -j limit-2725 +-A OUTPUT -j limit-2724 +-A OUTPUT -j limit-2723 +-A OUTPUT -j limit-2722 +-A OUTPUT -j limit-2721 +-A OUTPUT -j limit-2720 +-A OUTPUT -j limit-2719 +-A OUTPUT -j limit-2718 +-A OUTPUT -j limit-2717 +-A OUTPUT -j limit-2716 +-A OUTPUT -j limit-2715 +-A OUTPUT -j limit-2714 +-A OUTPUT -j limit-2713 +-A OUTPUT -j limit-2712 +-A OUTPUT -j limit-2711 +-A OUTPUT -j limit-2710 +-A OUTPUT -j limit-2709 +-A OUTPUT -j limit-2708 +-A OUTPUT -j limit-2707 +-A OUTPUT -j limit-2706 +-A OUTPUT -j limit-2705 +-A OUTPUT -j limit-2704 +-A OUTPUT -j limit-2703 +-A OUTPUT -j limit-2702 +-A OUTPUT -j limit-2701 +-A OUTPUT -j limit-2700 +-A OUTPUT -j limit-2699 +-A OUTPUT -j limit-2698 +-A OUTPUT -j limit-2697 +-A OUTPUT -j limit-2696 +-A OUTPUT -j limit-2695 +-A OUTPUT -j limit-2694 +-A OUTPUT -j limit-2693 +-A OUTPUT -j limit-2692 +-A OUTPUT -j limit-2691 +-A OUTPUT -j limit-2690 +-A OUTPUT -j limit-2689 +-A OUTPUT -j limit-2688 +-A OUTPUT -j limit-2687 +-A OUTPUT -j limit-2686 +-A OUTPUT -j limit-2685 +-A OUTPUT -j limit-2684 +-A OUTPUT -j limit-2683 +-A OUTPUT -j limit-2682 +-A OUTPUT -j limit-2681 +-A OUTPUT -j limit-2680 +-A OUTPUT -j limit-2679 +-A OUTPUT -j limit-2678 +-A OUTPUT -j limit-2677 +-A OUTPUT -j limit-2676 +-A OUTPUT -j limit-2675 +-A OUTPUT -j limit-2674 +-A OUTPUT -j limit-2673 +-A OUTPUT -j limit-2672 +-A OUTPUT -j limit-2671 +-A OUTPUT -j limit-2670 +-A OUTPUT -j limit-2669 +-A OUTPUT -j limit-2668 +-A OUTPUT -j limit-2667 +-A OUTPUT -j limit-2666 +-A OUTPUT -j limit-2665 +-A OUTPUT -j limit-2664 +-A OUTPUT -j limit-2663 +-A OUTPUT -j limit-2662 +-A OUTPUT -j limit-2661 +-A OUTPUT -j limit-2660 +-A OUTPUT -j limit-2659 +-A OUTPUT -j limit-2658 +-A OUTPUT -j limit-2657 +-A OUTPUT -j limit-2656 +-A OUTPUT -j limit-2655 +-A OUTPUT -j limit-2654 +-A OUTPUT -j limit-2653 +-A OUTPUT -j limit-2652 +-A OUTPUT -j limit-2651 +-A OUTPUT -j limit-2650 +-A OUTPUT -j limit-2649 +-A OUTPUT -j limit-2648 +-A OUTPUT -j limit-2647 +-A OUTPUT -j limit-2646 +-A OUTPUT -j limit-2645 +-A OUTPUT -j limit-2644 +-A OUTPUT -j limit-2643 +-A OUTPUT -j limit-2642 +-A OUTPUT -j limit-2641 +-A OUTPUT -j limit-2640 +-A OUTPUT -j limit-2639 +-A OUTPUT -j limit-2638 +-A OUTPUT -j limit-2637 +-A OUTPUT -j limit-2636 +-A OUTPUT -j limit-2635 +-A OUTPUT -j limit-2634 +-A OUTPUT -j limit-2633 +-A OUTPUT -j limit-2632 +-A OUTPUT -j limit-2631 +-A OUTPUT -j limit-2630 +-A OUTPUT -j limit-2629 +-A OUTPUT -j limit-2628 +-A OUTPUT -j limit-2627 +-A OUTPUT -j limit-2626 +-A OUTPUT -j limit-2625 +-A OUTPUT -j limit-2624 +-A OUTPUT -j limit-2623 +-A OUTPUT -j limit-2622 +-A OUTPUT -j limit-2621 +-A OUTPUT -j limit-2620 +-A OUTPUT -j limit-2619 +-A OUTPUT -j limit-2618 +-A OUTPUT -j limit-2617 +-A OUTPUT -j limit-2616 +-A OUTPUT -j limit-2615 +-A OUTPUT -j limit-2614 +-A OUTPUT -j limit-2613 +-A OUTPUT -j limit-2612 +-A OUTPUT -j limit-2611 +-A OUTPUT -j limit-2610 +-A OUTPUT -j limit-2609 +-A OUTPUT -j limit-2608 +-A OUTPUT -j limit-2607 +-A OUTPUT -j limit-2606 +-A OUTPUT -j limit-2605 +-A OUTPUT -j limit-2604 +-A OUTPUT -j limit-2603 +-A OUTPUT -j limit-2602 +-A OUTPUT -j limit-2601 +-A OUTPUT -j limit-2600 +-A OUTPUT -j limit-2599 +-A OUTPUT -j limit-2598 +-A OUTPUT -j limit-2597 +-A OUTPUT -j limit-2596 +-A OUTPUT -j limit-2595 +-A OUTPUT -j limit-2594 +-A OUTPUT -j limit-2593 +-A OUTPUT -j limit-2592 +-A OUTPUT -j limit-2591 +-A OUTPUT -j limit-2590 +-A OUTPUT -j limit-2589 +-A OUTPUT -j limit-2588 +-A OUTPUT -j limit-2587 +-A OUTPUT -j limit-2586 +-A OUTPUT -j limit-2585 +-A OUTPUT -j limit-2584 +-A OUTPUT -j limit-2583 +-A OUTPUT -j limit-2582 +-A OUTPUT -j limit-2581 +-A OUTPUT -j limit-2580 +-A OUTPUT -j limit-2579 +-A OUTPUT -j limit-2578 +-A OUTPUT -j limit-2577 +-A OUTPUT -j limit-2576 +-A OUTPUT -j limit-2575 +-A OUTPUT -j limit-2574 +-A OUTPUT -j limit-2573 +-A OUTPUT -j limit-2572 +-A OUTPUT -j limit-2571 +-A OUTPUT -j limit-2570 +-A OUTPUT -j limit-2569 +-A OUTPUT -j limit-2568 +-A OUTPUT -j limit-2567 +-A OUTPUT -j limit-2566 +-A OUTPUT -j limit-2565 +-A OUTPUT -j limit-2564 +-A OUTPUT -j limit-2563 +-A OUTPUT -j limit-2562 +-A OUTPUT -j limit-2561 +-A OUTPUT -j limit-2560 +-A OUTPUT -j limit-2559 +-A OUTPUT -j limit-2558 +-A OUTPUT -j limit-2557 +-A OUTPUT -j limit-2556 +-A OUTPUT -j limit-2555 +-A OUTPUT -j limit-2554 +-A OUTPUT -j limit-2553 +-A OUTPUT -j limit-2552 +-A OUTPUT -j limit-2551 +-A OUTPUT -j limit-2550 +-A OUTPUT -j limit-2549 +-A OUTPUT -j limit-2548 +-A OUTPUT -j limit-2547 +-A OUTPUT -j limit-2546 +-A OUTPUT -j limit-2545 +-A OUTPUT -j limit-2544 +-A OUTPUT -j limit-2543 +-A OUTPUT -j limit-2542 +-A OUTPUT -j limit-2541 +-A OUTPUT -j limit-2540 +-A OUTPUT -j limit-2539 +-A OUTPUT -j limit-2538 +-A OUTPUT -j limit-2537 +-A OUTPUT -j limit-2536 +-A OUTPUT -j limit-2535 +-A OUTPUT -j limit-2534 +-A OUTPUT -j limit-2533 +-A OUTPUT -j limit-2532 +-A OUTPUT -j limit-2531 +-A OUTPUT -j limit-2530 +-A OUTPUT -j limit-2529 +-A OUTPUT -j limit-2528 +-A OUTPUT -j limit-2527 +-A OUTPUT -j limit-2526 +-A OUTPUT -j limit-2525 +-A OUTPUT -j limit-2524 +-A OUTPUT -j limit-2523 +-A OUTPUT -j limit-2522 +-A OUTPUT -j limit-2521 +-A OUTPUT -j limit-2520 +-A OUTPUT -j limit-2519 +-A OUTPUT -j limit-2518 +-A OUTPUT -j limit-2517 +-A OUTPUT -j limit-2516 +-A OUTPUT -j limit-2515 +-A OUTPUT -j limit-2514 +-A OUTPUT -j limit-2513 +-A OUTPUT -j limit-2512 +-A OUTPUT -j limit-2511 +-A OUTPUT -j limit-2510 +-A OUTPUT -j limit-2509 +-A OUTPUT -j limit-2508 +-A OUTPUT -j limit-2507 +-A OUTPUT -j limit-2506 +-A OUTPUT -j limit-2505 +-A OUTPUT -j limit-2504 +-A OUTPUT -j limit-2503 +-A OUTPUT -j limit-2502 +-A OUTPUT -j limit-2501 +-A OUTPUT -j limit-2500 +-A OUTPUT -j limit-2499 +-A OUTPUT -j limit-2498 +-A OUTPUT -j limit-2497 +-A OUTPUT -j limit-2496 +-A OUTPUT -j limit-2495 +-A OUTPUT -j limit-2494 +-A OUTPUT -j limit-2493 +-A OUTPUT -j limit-2492 +-A OUTPUT -j limit-2491 +-A OUTPUT -j limit-2490 +-A OUTPUT -j limit-2489 +-A OUTPUT -j limit-2488 +-A OUTPUT -j limit-2487 +-A OUTPUT -j limit-2486 +-A OUTPUT -j limit-2485 +-A OUTPUT -j limit-2484 +-A OUTPUT -j limit-2483 +-A OUTPUT -j limit-2482 +-A OUTPUT -j limit-2481 +-A OUTPUT -j limit-2480 +-A OUTPUT -j limit-2479 +-A OUTPUT -j limit-2478 +-A OUTPUT -j limit-2477 +-A OUTPUT -j limit-2476 +-A OUTPUT -j limit-2475 +-A OUTPUT -j limit-2474 +-A OUTPUT -j limit-2473 +-A OUTPUT -j limit-2472 +-A OUTPUT -j limit-2471 +-A OUTPUT -j limit-2470 +-A OUTPUT -j limit-2469 +-A OUTPUT -j limit-2468 +-A OUTPUT -j limit-2467 +-A OUTPUT -j limit-2466 +-A OUTPUT -j limit-2465 +-A OUTPUT -j limit-2464 +-A OUTPUT -j limit-2463 +-A OUTPUT -j limit-2462 +-A OUTPUT -j limit-2461 +-A OUTPUT -j limit-2460 +-A OUTPUT -j limit-2459 +-A OUTPUT -j limit-2458 +-A OUTPUT -j limit-2457 +-A OUTPUT -j limit-2456 +-A OUTPUT -j limit-2455 +-A OUTPUT -j limit-2454 +-A OUTPUT -j limit-2453 +-A OUTPUT -j limit-2452 +-A OUTPUT -j limit-2451 +-A OUTPUT -j limit-2450 +-A OUTPUT -j limit-2449 +-A OUTPUT -j limit-2448 +-A OUTPUT -j limit-2447 +-A OUTPUT -j limit-2446 +-A OUTPUT -j limit-2445 +-A OUTPUT -j limit-2444 +-A OUTPUT -j limit-2443 +-A OUTPUT -j limit-2442 +-A OUTPUT -j limit-2441 +-A OUTPUT -j limit-2440 +-A OUTPUT -j limit-2439 +-A OUTPUT -j limit-2438 +-A OUTPUT -j limit-2437 +-A OUTPUT -j limit-2436 +-A OUTPUT -j limit-2435 +-A OUTPUT -j limit-2434 +-A OUTPUT -j limit-2433 +-A OUTPUT -j limit-2432 +-A OUTPUT -j limit-2431 +-A OUTPUT -j limit-2430 +-A OUTPUT -j limit-2429 +-A OUTPUT -j limit-2428 +-A OUTPUT -j limit-2427 +-A OUTPUT -j limit-2426 +-A OUTPUT -j limit-2425 +-A OUTPUT -j limit-2424 +-A OUTPUT -j limit-2423 +-A OUTPUT -j limit-2422 +-A OUTPUT -j limit-2421 +-A OUTPUT -j limit-2420 +-A OUTPUT -j limit-2419 +-A OUTPUT -j limit-2418 +-A OUTPUT -j limit-2417 +-A OUTPUT -j limit-2416 +-A OUTPUT -j limit-2415 +-A OUTPUT -j limit-2414 +-A OUTPUT -j limit-2413 +-A OUTPUT -j limit-2412 +-A OUTPUT -j limit-2411 +-A OUTPUT -j limit-2410 +-A OUTPUT -j limit-2409 +-A OUTPUT -j limit-2408 +-A OUTPUT -j limit-2407 +-A OUTPUT -j limit-2406 +-A OUTPUT -j limit-2405 +-A OUTPUT -j limit-2404 +-A OUTPUT -j limit-2403 +-A OUTPUT -j limit-2402 +-A OUTPUT -j limit-2401 +-A OUTPUT -j limit-2400 +-A OUTPUT -j limit-2399 +-A OUTPUT -j limit-2398 +-A OUTPUT -j limit-2397 +-A OUTPUT -j limit-2396 +-A OUTPUT -j limit-2395 +-A OUTPUT -j limit-2394 +-A OUTPUT -j limit-2393 +-A OUTPUT -j limit-2392 +-A OUTPUT -j limit-2391 +-A OUTPUT -j limit-2390 +-A OUTPUT -j limit-2389 +-A OUTPUT -j limit-2388 +-A OUTPUT -j limit-2387 +-A OUTPUT -j limit-2386 +-A OUTPUT -j limit-2385 +-A OUTPUT -j limit-2384 +-A OUTPUT -j limit-2383 +-A OUTPUT -j limit-2382 +-A OUTPUT -j limit-2381 +-A OUTPUT -j limit-2380 +-A OUTPUT -j limit-2379 +-A OUTPUT -j limit-2378 +-A OUTPUT -j limit-2377 +-A OUTPUT -j limit-2376 +-A OUTPUT -j limit-2375 +-A OUTPUT -j limit-2374 +-A OUTPUT -j limit-2373 +-A OUTPUT -j limit-2372 +-A OUTPUT -j limit-2371 +-A OUTPUT -j limit-2370 +-A OUTPUT -j limit-2369 +-A OUTPUT -j limit-2368 +-A OUTPUT -j limit-2367 +-A OUTPUT -j limit-2366 +-A OUTPUT -j limit-2365 +-A OUTPUT -j limit-2364 +-A OUTPUT -j limit-2363 +-A OUTPUT -j limit-2362 +-A OUTPUT -j limit-2361 +-A OUTPUT -j limit-2360 +-A OUTPUT -j limit-2359 +-A OUTPUT -j limit-2358 +-A OUTPUT -j limit-2357 +-A OUTPUT -j limit-2356 +-A OUTPUT -j limit-2355 +-A OUTPUT -j limit-2354 +-A OUTPUT -j limit-2353 +-A OUTPUT -j limit-2352 +-A OUTPUT -j limit-2351 +-A OUTPUT -j limit-2350 +-A OUTPUT -j limit-2349 +-A OUTPUT -j limit-2348 +-A OUTPUT -j limit-2347 +-A OUTPUT -j limit-2346 +-A OUTPUT -j limit-2345 +-A OUTPUT -j limit-2344 +-A OUTPUT -j limit-2343 +-A OUTPUT -j limit-2342 +-A OUTPUT -j limit-2341 +-A OUTPUT -j limit-2340 +-A OUTPUT -j limit-2339 +-A OUTPUT -j limit-2338 +-A OUTPUT -j limit-2337 +-A OUTPUT -j limit-2336 +-A OUTPUT -j limit-2335 +-A OUTPUT -j limit-2334 +-A OUTPUT -j limit-2333 +-A OUTPUT -j limit-2332 +-A OUTPUT -j limit-2331 +-A OUTPUT -j limit-2330 +-A OUTPUT -j limit-2329 +-A OUTPUT -j limit-2328 +-A OUTPUT -j limit-2327 +-A OUTPUT -j limit-2326 +-A OUTPUT -j limit-2325 +-A OUTPUT -j limit-2324 +-A OUTPUT -j limit-2323 +-A OUTPUT -j limit-2322 +-A OUTPUT -j limit-2321 +-A OUTPUT -j limit-2320 +-A OUTPUT -j limit-2319 +-A OUTPUT -j limit-2318 +-A OUTPUT -j limit-2317 +-A OUTPUT -j limit-2316 +-A OUTPUT -j limit-2315 +-A OUTPUT -j limit-2314 +-A OUTPUT -j limit-2313 +-A OUTPUT -j limit-2312 +-A OUTPUT -j limit-2311 +-A OUTPUT -j limit-2310 +-A OUTPUT -j limit-2309 +-A OUTPUT -j limit-2308 +-A OUTPUT -j limit-2307 +-A OUTPUT -j limit-2306 +-A OUTPUT -j limit-2305 +-A OUTPUT -j limit-2304 +-A OUTPUT -j limit-2303 +-A OUTPUT -j limit-2302 +-A OUTPUT -j limit-2301 +-A OUTPUT -j limit-2300 +-A OUTPUT -j limit-2299 +-A OUTPUT -j limit-2298 +-A OUTPUT -j limit-2297 +-A OUTPUT -j limit-2296 +-A OUTPUT -j limit-2295 +-A OUTPUT -j limit-2294 +-A OUTPUT -j limit-2293 +-A OUTPUT -j limit-2292 +-A OUTPUT -j limit-2291 +-A OUTPUT -j limit-2290 +-A OUTPUT -j limit-2289 +-A OUTPUT -j limit-2288 +-A OUTPUT -j limit-2287 +-A OUTPUT -j limit-2286 +-A OUTPUT -j limit-2285 +-A OUTPUT -j limit-2284 +-A OUTPUT -j limit-2283 +-A OUTPUT -j limit-2282 +-A OUTPUT -j limit-2281 +-A OUTPUT -j limit-2280 +-A OUTPUT -j limit-2279 +-A OUTPUT -j limit-2278 +-A OUTPUT -j limit-2277 +-A OUTPUT -j limit-2276 +-A OUTPUT -j limit-2275 +-A OUTPUT -j limit-2274 +-A OUTPUT -j limit-2273 +-A OUTPUT -j limit-2272 +-A OUTPUT -j limit-2271 +-A OUTPUT -j limit-2270 +-A OUTPUT -j limit-2269 +-A OUTPUT -j limit-2268 +-A OUTPUT -j limit-2267 +-A OUTPUT -j limit-2266 +-A OUTPUT -j limit-2265 +-A OUTPUT -j limit-2264 +-A OUTPUT -j limit-2263 +-A OUTPUT -j limit-2262 +-A OUTPUT -j limit-2261 +-A OUTPUT -j limit-2260 +-A OUTPUT -j limit-2259 +-A OUTPUT -j limit-2258 +-A OUTPUT -j limit-2257 +-A OUTPUT -j limit-2256 +-A OUTPUT -j limit-2255 +-A OUTPUT -j limit-2254 +-A OUTPUT -j limit-2253 +-A OUTPUT -j limit-2252 +-A OUTPUT -j limit-2251 +-A OUTPUT -j limit-2250 +-A OUTPUT -j limit-2249 +-A OUTPUT -j limit-2248 +-A OUTPUT -j limit-2247 +-A OUTPUT -j limit-2246 +-A OUTPUT -j limit-2245 +-A OUTPUT -j limit-2244 +-A OUTPUT -j limit-2243 +-A OUTPUT -j limit-2242 +-A OUTPUT -j limit-2241 +-A OUTPUT -j limit-2240 +-A OUTPUT -j limit-2239 +-A OUTPUT -j limit-2238 +-A OUTPUT -j limit-2237 +-A OUTPUT -j limit-2236 +-A OUTPUT -j limit-2235 +-A OUTPUT -j limit-2234 +-A OUTPUT -j limit-2233 +-A OUTPUT -j limit-2232 +-A OUTPUT -j limit-2231 +-A OUTPUT -j limit-2230 +-A OUTPUT -j limit-2229 +-A OUTPUT -j limit-2228 +-A OUTPUT -j limit-2227 +-A OUTPUT -j limit-2226 +-A OUTPUT -j limit-2225 +-A OUTPUT -j limit-2224 +-A OUTPUT -j limit-2223 +-A OUTPUT -j limit-2222 +-A OUTPUT -j limit-2221 +-A OUTPUT -j limit-2220 +-A OUTPUT -j limit-2219 +-A OUTPUT -j limit-2218 +-A OUTPUT -j limit-2217 +-A OUTPUT -j limit-2216 +-A OUTPUT -j limit-2215 +-A OUTPUT -j limit-2214 +-A OUTPUT -j limit-2213 +-A OUTPUT -j limit-2212 +-A OUTPUT -j limit-2211 +-A OUTPUT -j limit-2210 +-A OUTPUT -j limit-2209 +-A OUTPUT -j limit-2208 +-A OUTPUT -j limit-2207 +-A OUTPUT -j limit-2206 +-A OUTPUT -j limit-2205 +-A OUTPUT -j limit-2204 +-A OUTPUT -j limit-2203 +-A OUTPUT -j limit-2202 +-A OUTPUT -j limit-2201 +-A OUTPUT -j limit-2200 +-A OUTPUT -j limit-2199 +-A OUTPUT -j limit-2198 +-A OUTPUT -j limit-2197 +-A OUTPUT -j limit-2196 +-A OUTPUT -j limit-2195 +-A OUTPUT -j limit-2194 +-A OUTPUT -j limit-2193 +-A OUTPUT -j limit-2192 +-A OUTPUT -j limit-2191 +-A OUTPUT -j limit-2190 +-A OUTPUT -j limit-2189 +-A OUTPUT -j limit-2188 +-A OUTPUT -j limit-2187 +-A OUTPUT -j limit-2186 +-A OUTPUT -j limit-2185 +-A OUTPUT -j limit-2184 +-A OUTPUT -j limit-2183 +-A OUTPUT -j limit-2182 +-A OUTPUT -j limit-2181 +-A OUTPUT -j limit-2180 +-A OUTPUT -j limit-2179 +-A OUTPUT -j limit-2178 +-A OUTPUT -j limit-2177 +-A OUTPUT -j limit-2176 +-A OUTPUT -j limit-2175 +-A OUTPUT -j limit-2174 +-A OUTPUT -j limit-2173 +-A OUTPUT -j limit-2172 +-A OUTPUT -j limit-2171 +-A OUTPUT -j limit-2170 +-A OUTPUT -j limit-2169 +-A OUTPUT -j limit-2168 +-A OUTPUT -j limit-2167 +-A OUTPUT -j limit-2166 +-A OUTPUT -j limit-2165 +-A OUTPUT -j limit-2164 +-A OUTPUT -j limit-2163 +-A OUTPUT -j limit-2162 +-A OUTPUT -j limit-2161 +-A OUTPUT -j limit-2160 +-A OUTPUT -j limit-2159 +-A OUTPUT -j limit-2158 +-A OUTPUT -j limit-2157 +-A OUTPUT -j limit-2156 +-A OUTPUT -j limit-2155 +-A OUTPUT -j limit-2154 +-A OUTPUT -j limit-2153 +-A OUTPUT -j limit-2152 +-A OUTPUT -j limit-2151 +-A OUTPUT -j limit-2150 +-A OUTPUT -j limit-2149 +-A OUTPUT -j limit-2148 +-A OUTPUT -j limit-2147 +-A OUTPUT -j limit-2146 +-A OUTPUT -j limit-2145 +-A OUTPUT -j limit-2144 +-A OUTPUT -j limit-2143 +-A OUTPUT -j limit-2142 +-A OUTPUT -j limit-2141 +-A OUTPUT -j limit-2140 +-A OUTPUT -j limit-2139 +-A OUTPUT -j limit-2138 +-A OUTPUT -j limit-2137 +-A OUTPUT -j limit-2136 +-A OUTPUT -j limit-2135 +-A OUTPUT -j limit-2134 +-A OUTPUT -j limit-2133 +-A OUTPUT -j limit-2132 +-A OUTPUT -j limit-2131 +-A OUTPUT -j limit-2130 +-A OUTPUT -j limit-2129 +-A OUTPUT -j limit-2128 +-A OUTPUT -j limit-2127 +-A OUTPUT -j limit-2126 +-A OUTPUT -j limit-2125 +-A OUTPUT -j limit-2124 +-A OUTPUT -j limit-2123 +-A OUTPUT -j limit-2122 +-A OUTPUT -j limit-2121 +-A OUTPUT -j limit-2120 +-A OUTPUT -j limit-2119 +-A OUTPUT -j limit-2118 +-A OUTPUT -j limit-2117 +-A OUTPUT -j limit-2116 +-A OUTPUT -j limit-2115 +-A OUTPUT -j limit-2114 +-A OUTPUT -j limit-2113 +-A OUTPUT -j limit-2112 +-A OUTPUT -j limit-2111 +-A OUTPUT -j limit-2110 +-A OUTPUT -j limit-2109 +-A OUTPUT -j limit-2108 +-A OUTPUT -j limit-2107 +-A OUTPUT -j limit-2106 +-A OUTPUT -j limit-2105 +-A OUTPUT -j limit-2104 +-A OUTPUT -j limit-2103 +-A OUTPUT -j limit-2102 +-A OUTPUT -j limit-2101 +-A OUTPUT -j limit-2100 +-A OUTPUT -j limit-2099 +-A OUTPUT -j limit-2098 +-A OUTPUT -j limit-2097 +-A OUTPUT -j limit-2096 +-A OUTPUT -j limit-2095 +-A OUTPUT -j limit-2094 +-A OUTPUT -j limit-2093 +-A OUTPUT -j limit-2092 +-A OUTPUT -j limit-2091 +-A OUTPUT -j limit-2090 +-A OUTPUT -j limit-2089 +-A OUTPUT -j limit-2088 +-A OUTPUT -j limit-2087 +-A OUTPUT -j limit-2086 +-A OUTPUT -j limit-2085 +-A OUTPUT -j limit-2084 +-A OUTPUT -j limit-2083 +-A OUTPUT -j limit-2082 +-A OUTPUT -j limit-2081 +-A OUTPUT -j limit-2080 +-A OUTPUT -j limit-2079 +-A OUTPUT -j limit-2078 +-A OUTPUT -j limit-2077 +-A OUTPUT -j limit-2076 +-A OUTPUT -j limit-2075 +-A OUTPUT -j limit-2074 +-A OUTPUT -j limit-2073 +-A OUTPUT -j limit-2072 +-A OUTPUT -j limit-2071 +-A OUTPUT -j limit-2070 +-A OUTPUT -j limit-2069 +-A OUTPUT -j limit-2068 +-A OUTPUT -j limit-2067 +-A OUTPUT -j limit-2066 +-A OUTPUT -j limit-2065 +-A OUTPUT -j limit-2064 +-A OUTPUT -j limit-2063 +-A OUTPUT -j limit-2062 +-A OUTPUT -j limit-2061 +-A OUTPUT -j limit-2060 +-A OUTPUT -j limit-2059 +-A OUTPUT -j limit-2058 +-A OUTPUT -j limit-2057 +-A OUTPUT -j limit-2056 +-A OUTPUT -j limit-2055 +-A OUTPUT -j limit-2054 +-A OUTPUT -j limit-2053 +-A OUTPUT -j limit-2052 +-A OUTPUT -j limit-2051 +-A OUTPUT -j limit-2050 +-A OUTPUT -j limit-2049 +-A OUTPUT -j limit-2048 +-A OUTPUT -j limit-2047 +-A OUTPUT -j limit-2046 +-A OUTPUT -j limit-2045 +-A OUTPUT -j limit-2044 +-A OUTPUT -j limit-2043 +-A OUTPUT -j limit-2042 +-A OUTPUT -j limit-2041 +-A OUTPUT -j limit-2040 +-A OUTPUT -j limit-2039 +-A OUTPUT -j limit-2038 +-A OUTPUT -j limit-2037 +-A OUTPUT -j limit-2036 +-A OUTPUT -j limit-2035 +-A OUTPUT -j limit-2034 +-A OUTPUT -j limit-2033 +-A OUTPUT -j limit-2032 +-A OUTPUT -j limit-2031 +-A OUTPUT -j limit-2030 +-A OUTPUT -j limit-2029 +-A OUTPUT -j limit-2028 +-A OUTPUT -j limit-2027 +-A OUTPUT -j limit-2026 +-A OUTPUT -j limit-2025 +-A OUTPUT -j limit-2024 +-A OUTPUT -j limit-2023 +-A OUTPUT -j limit-2022 +-A OUTPUT -j limit-2021 +-A OUTPUT -j limit-2020 +-A OUTPUT -j limit-2019 +-A OUTPUT -j limit-2018 +-A OUTPUT -j limit-2017 +-A OUTPUT -j limit-2016 +-A OUTPUT -j limit-2015 +-A OUTPUT -j limit-2014 +-A OUTPUT -j limit-2013 +-A OUTPUT -j limit-2012 +-A OUTPUT -j limit-2011 +-A OUTPUT -j limit-2010 +-A OUTPUT -j limit-2009 +-A OUTPUT -j limit-2008 +-A OUTPUT -j limit-2007 +-A OUTPUT -j limit-2006 +-A OUTPUT -j limit-2005 +-A OUTPUT -j limit-2004 +-A OUTPUT -j limit-2003 +-A OUTPUT -j limit-2002 +-A OUTPUT -j limit-2001 +-A OUTPUT -j limit-2000 +-A OUTPUT -j limit-1999 +-A OUTPUT -j limit-1998 +-A OUTPUT -j limit-1997 +-A OUTPUT -j limit-1996 +-A OUTPUT -j limit-1995 +-A OUTPUT -j limit-1994 +-A OUTPUT -j limit-1993 +-A OUTPUT -j limit-1992 +-A OUTPUT -j limit-1991 +-A OUTPUT -j limit-1990 +-A OUTPUT -j limit-1989 +-A OUTPUT -j limit-1988 +-A OUTPUT -j limit-1987 +-A OUTPUT -j limit-1986 +-A OUTPUT -j limit-1985 +-A OUTPUT -j limit-1984 +-A OUTPUT -j limit-1983 +-A OUTPUT -j limit-1982 +-A OUTPUT -j limit-1981 +-A OUTPUT -j limit-1980 +-A OUTPUT -j limit-1979 +-A OUTPUT -j limit-1978 +-A OUTPUT -j limit-1977 +-A OUTPUT -j limit-1976 +-A OUTPUT -j limit-1975 +-A OUTPUT -j limit-1974 +-A OUTPUT -j limit-1973 +-A OUTPUT -j limit-1972 +-A OUTPUT -j limit-1971 +-A OUTPUT -j limit-1970 +-A OUTPUT -j limit-1969 +-A OUTPUT -j limit-1968 +-A OUTPUT -j limit-1967 +-A OUTPUT -j limit-1966 +-A OUTPUT -j limit-1965 +-A OUTPUT -j limit-1964 +-A OUTPUT -j limit-1963 +-A OUTPUT -j limit-1962 +-A OUTPUT -j limit-1961 +-A OUTPUT -j limit-1960 +-A OUTPUT -j limit-1959 +-A OUTPUT -j limit-1958 +-A OUTPUT -j limit-1957 +-A OUTPUT -j limit-1956 +-A OUTPUT -j limit-1955 +-A OUTPUT -j limit-1954 +-A OUTPUT -j limit-1953 +-A OUTPUT -j limit-1952 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 @@ -44358,11 +72826,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-651 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-659 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 @@ -44374,11 +72842,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-671 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-675 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 @@ -44390,11 +72858,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-683 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-687 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 @@ -44406,11 +72874,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 @@ -44430,11 +72898,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-723 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-724 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-725 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-321 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-726 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-727 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-728 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-729 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-325 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-730 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-731 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-732 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-733 @@ -44446,11 +72914,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-739 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-740 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-741 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-337 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-742 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-743 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-744 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-745 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-341 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-746 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-747 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-748 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-749 @@ -44462,11 +72930,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-755 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-756 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-757 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-353 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-758 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-759 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-760 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-761 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-357 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-762 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-763 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-764 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-765 @@ -44478,11 +72946,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-771 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-772 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-773 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-369 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-774 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-775 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-776 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-777 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-778 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-779 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-780 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-781 @@ -44502,11 +72970,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-795 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-796 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-797 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-798 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-799 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-800 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-801 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-802 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-803 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-804 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-805 @@ -44518,11 +72986,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-811 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-812 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-813 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-814 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-815 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-816 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-817 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-818 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-819 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-820 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-821 @@ -44534,11 +73002,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-827 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-828 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-829 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-830 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-831 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-832 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-833 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-834 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-835 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-836 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-837 @@ -44550,11 +73018,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-843 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-844 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-845 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-846 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-847 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-848 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-849 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-850 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-851 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-852 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-853 @@ -44574,11 +73042,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-867 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-868 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-869 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-393 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-870 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-871 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-872 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-873 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-874 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-875 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-876 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-877 @@ -44590,11 +73058,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-883 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-884 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-885 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-409 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-886 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-887 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-888 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-889 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-413 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-890 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-891 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-892 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-893 @@ -44606,11 +73074,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-899 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-900 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-901 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-425 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-902 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-903 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-904 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-905 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-429 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-906 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-907 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-908 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-909 @@ -44622,11 +73090,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-915 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-916 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-917 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-441 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-918 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-919 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-920 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-921 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-445 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-922 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-923 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-924 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-925 @@ -44646,11 +73114,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-939 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-940 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-941 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-942 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-943 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-944 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-945 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-946 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-947 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-948 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-949 @@ -44662,11 +73130,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-955 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-956 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-957 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-958 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-959 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-960 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-961 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-962 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-963 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-964 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-965 @@ -44678,11 +73146,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-971 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-972 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-973 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-974 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-975 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-976 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-977 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-978 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-979 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-980 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-981 @@ -44694,11 +73162,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-987 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-988 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-989 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-990 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-991 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-992 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-993 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-994 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-995 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-996 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-997 @@ -44711,18 +73179,18 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1004 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1005 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1006 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1007 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1008 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1009 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1010 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1011 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1012 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1013 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-465 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1014 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1015 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1016 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1017 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-469 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1018 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1019 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1020 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1021 @@ -44731,14 +73199,14 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1024 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1025 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1026 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1027 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1028 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1029 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-481 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1030 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1031 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1032 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1033 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-485 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1034 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1035 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1036 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1037 @@ -44750,14 +73218,14 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1043 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1044 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1045 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-497 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1047 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1046 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1048 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1049 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-501 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1050 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1051 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1052 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1053 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1054 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1055 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1056 @@ -44766,18 +73234,18 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1059 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1060 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1061 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-513 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1062 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1063 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1064 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1065 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-517 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1067 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1066 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1068 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1069 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1070 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1071 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1072 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1073 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1074 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1075 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1076 @@ -44790,27 +73258,27 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1083 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1084 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1085 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1086 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1087 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1088 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1089 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1090 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1091 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1092 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1093 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1094 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1095 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1096 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1097 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-581 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1098 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1099 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1100 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1101 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1103 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1102 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-587 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1104 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1105 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1106 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1107 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1108 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1109 @@ -44821,13 +73289,13 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1114 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1115 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1116 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1117 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-601 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1118 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1119 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1120 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1121 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1123 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1122 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-607 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1124 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1125 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1126 @@ -44838,16 +73306,16 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1131 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1132 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1133 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1134 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1135 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1136 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1137 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-621 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1138 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1139 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1140 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1141 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1142 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1143 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-627 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1144 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1145 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1146 @@ -44861,13 +73329,13 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1154 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1155 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1156 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1157 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-537 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-641 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1158 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1159 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1160 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1161 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-541 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1163 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1162 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-647 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1164 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1165 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1166 @@ -44878,11 +73346,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1171 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1172 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1173 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-553 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1174 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1175 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1176 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1177 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-557 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1178 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1179 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1180 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1181 @@ -44891,14 +73359,14 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1184 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1185 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1186 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1187 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-671 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1188 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1189 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-569 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1190 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1191 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1192 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1193 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-573 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-677 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1194 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1195 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1196 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1197 @@ -44910,14 +73378,14 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1203 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1204 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1205 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-585 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1207 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1206 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-691 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1208 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1209 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-589 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1210 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1211 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1212 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1213 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-697 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1214 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1215 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1216 @@ -44931,13 +73399,13 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1224 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1225 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1226 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1227 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-711 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1228 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1229 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1230 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1231 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1232 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1233 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-717 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1234 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1235 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1236 @@ -44951,345 +73419,1403 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1244 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1245 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1246 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1247 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-731 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1248 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1249 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1250 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1251 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1252 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1253 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-737 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1254 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1255 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1256 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1257 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1258 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1259 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1260 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1261 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1262 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1263 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1264 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1265 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1266 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1267 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1268 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1269 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1270 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1271 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1272 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1273 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1274 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1275 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1276 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1278 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1279 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1280 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1281 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1282 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1284 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1285 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1286 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1287 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1288 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1289 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1290 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1291 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1292 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1293 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1294 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1295 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1296 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1298 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1299 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1300 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1301 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1302 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1304 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1305 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1306 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1307 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1308 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1309 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1310 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1311 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1312 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1313 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1314 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1315 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1316 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1318 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1319 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1320 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1321 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1322 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1324 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1325 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1326 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1327 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1328 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1329 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1330 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1331 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1332 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1333 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1334 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1335 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1336 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1338 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1339 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1340 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1341 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1342 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1344 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1345 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1346 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1347 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1348 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1349 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1350 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1351 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1352 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1353 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1354 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1355 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1356 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1357 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1358 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1359 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1360 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1361 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1362 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1363 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1364 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1365 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1366 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-761 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1368 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1369 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1370 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1371 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1372 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-767 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1374 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1375 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1376 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1377 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1378 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1379 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1380 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1381 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1382 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1383 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1384 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1385 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1386 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-781 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1388 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1389 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1390 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1391 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1392 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-787 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1394 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1395 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1396 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1397 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1398 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1399 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1400 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1401 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1402 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1403 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1404 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1405 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1406 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-801 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1408 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1409 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1410 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1411 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1412 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-807 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1414 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1415 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1416 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1417 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1418 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1419 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1420 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1421 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1422 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1423 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1424 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1425 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1426 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-821 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1428 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1429 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1430 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1431 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1432 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-827 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1434 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1435 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1436 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1437 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1438 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1439 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1440 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1441 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1442 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1443 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1444 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1445 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1446 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1447 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1448 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1449 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1450 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1451 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1452 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1453 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1454 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1455 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1456 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1458 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1459 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1460 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1461 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1462 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1464 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1465 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1466 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1467 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1468 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1469 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1470 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1471 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1472 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1473 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1474 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1475 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1476 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1478 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1479 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1480 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1481 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1482 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1484 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1485 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1486 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1487 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1488 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1489 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1490 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1491 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1492 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1493 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1494 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1495 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1496 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1498 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1499 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1500 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1501 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1502 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1504 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1505 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1506 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1507 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1508 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1509 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1510 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1511 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1512 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1513 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1514 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1515 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1516 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1518 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1519 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1520 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1521 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1522 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1524 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1525 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1526 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1527 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1528 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1529 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1530 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1531 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1532 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1533 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1534 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1535 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1536 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1537 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1538 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1539 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1540 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1541 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1542 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1543 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1544 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1545 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1546 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-851 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1548 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1549 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1550 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1551 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1552 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-857 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1554 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1555 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1556 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1557 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1558 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1559 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1560 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1561 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1562 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1563 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1564 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1565 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1566 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-871 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1568 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1569 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1570 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1571 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1572 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-877 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1574 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1575 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1576 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1577 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1578 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1579 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1580 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1581 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1582 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1583 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1584 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1585 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1586 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-891 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1588 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1589 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1590 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1591 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1592 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-897 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1594 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1595 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1596 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1597 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1598 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1599 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1600 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1601 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1602 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1603 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1604 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1605 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1606 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-911 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1608 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1609 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1610 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1611 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1612 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-917 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1614 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1615 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1616 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1617 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1618 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1619 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1620 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1621 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1622 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1623 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1624 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1625 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1626 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1627 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1628 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1629 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1630 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1631 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1632 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1633 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1634 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1635 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1636 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-941 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1638 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1639 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1640 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1641 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1642 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-947 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1644 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1645 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1646 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1647 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1648 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1649 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1650 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1651 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1652 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1653 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1654 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1655 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1656 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-961 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1658 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1659 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1660 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1661 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1662 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-967 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1664 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1665 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1666 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1667 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1668 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1669 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1670 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1671 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1672 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1673 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1674 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1675 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1676 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-981 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1678 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1679 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1680 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1681 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1682 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-987 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1684 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1685 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1686 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1687 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1688 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1689 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1690 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1691 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1692 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1693 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1694 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1695 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1696 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1001 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1698 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1699 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1700 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1701 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1702 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1007 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1704 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1705 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1706 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1707 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1708 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1709 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1710 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1711 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1712 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1713 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1714 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1715 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1716 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1717 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1718 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1719 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1720 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1721 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1722 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1723 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1724 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1725 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1726 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1728 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1729 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1730 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1731 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1732 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1734 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1735 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1736 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1737 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1738 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1739 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1740 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1741 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1742 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1743 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1744 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1745 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1746 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1748 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1749 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1750 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1751 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1752 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1754 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1755 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1756 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1757 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1758 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1759 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1760 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1761 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1762 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1763 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1764 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1765 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1766 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1768 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1769 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1770 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1771 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1772 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1774 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1775 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1776 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1777 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1778 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1779 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1780 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1781 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1782 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1783 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1784 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1785 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1786 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1788 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1789 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1790 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1791 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1792 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1794 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1795 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1796 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1797 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1798 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1799 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1800 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1801 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1802 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1803 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1804 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1805 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1806 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1807 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1808 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1809 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1810 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1811 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1812 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1813 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1814 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1815 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1816 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1031 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1818 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1819 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1820 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1821 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1822 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1037 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1824 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1825 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1826 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1827 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1828 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1829 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1830 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1831 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1832 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1833 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1834 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1835 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1836 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1051 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1838 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1839 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1840 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1841 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1842 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1844 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1845 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1846 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1847 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1848 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1849 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1850 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1851 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1852 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1853 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1854 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1855 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1856 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1071 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1858 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1859 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1860 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1861 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1862 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1864 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1865 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1866 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1867 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1868 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1869 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1870 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1871 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1872 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1873 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1874 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1875 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1876 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1878 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1879 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1880 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1881 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1882 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1097 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1884 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1885 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1886 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1887 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1888 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1889 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1890 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1891 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1892 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1893 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1894 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1895 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1896 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1897 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1898 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1899 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1900 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1901 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1902 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1903 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1904 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1905 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1906 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1907 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1908 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1909 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1910 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1911 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1912 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1913 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1914 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1915 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1916 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1917 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1918 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1919 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1920 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1921 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1922 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1923 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1924 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1925 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1926 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1927 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1928 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1929 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1930 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1931 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1932 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1933 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1934 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1935 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1936 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1937 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1938 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1939 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1940 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1941 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1942 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1943 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1944 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1945 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1946 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1947 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1948 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1949 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1950 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1951 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-0 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-1 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-2 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-3 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-4 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-5 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-6 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-7 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-8 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-9 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-10 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-11 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-12 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-13 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-14 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-15 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-16 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-17 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-18 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-19 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-20 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-21 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-22 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-23 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-24 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-25 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-26 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-27 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-28 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-29 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-30 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-31 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-32 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-33 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-34 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-35 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-36 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-37 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-38 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-39 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-40 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-41 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-42 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-43 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-44 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-45 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-46 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-47 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-48 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-49 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-50 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-51 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-52 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-53 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-54 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-55 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-56 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-57 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-58 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-59 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-60 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-61 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-62 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-63 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-64 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-65 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-66 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-67 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-68 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-69 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-70 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-71 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-72 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-73 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-74 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-75 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-76 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-77 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-78 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-79 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-80 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-81 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-82 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-83 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-84 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-85 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-86 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-87 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-88 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-89 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-90 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-91 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-92 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-93 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-94 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-95 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-96 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-97 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-98 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-99 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-100 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-101 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-102 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-103 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-104 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-105 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-106 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-107 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-108 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-109 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-110 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-111 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-112 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-113 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-114 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-115 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-116 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-117 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-118 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-119 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-120 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-121 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-122 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-123 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-124 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-125 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-126 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-127 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-128 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-129 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-130 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-131 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-132 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-133 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-134 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-135 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-136 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-137 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-138 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-139 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-140 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-141 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-142 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-143 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-144 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-145 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-146 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-147 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-148 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-149 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-150 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-151 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-152 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-153 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-154 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-155 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-156 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-157 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-158 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-159 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-160 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-161 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-162 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-163 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-164 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-165 +-A OUTPUT -j logaccept-final-166 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-167 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-168 +-A OUTPUT -j logaccept-final-169 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-170 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-171 +-A OUTPUT -j logaccept-final-172 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-173 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-174 +-A OUTPUT -j logaccept-final-175 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-176 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-177 +-A OUTPUT -j logaccept-final-178 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-179 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-180 +-A OUTPUT -j logaccept-final-181 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-182 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-183 +-A OUTPUT -j logaccept-final-184 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-185 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-186 +-A OUTPUT -j logaccept-final-187 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-188 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-189 +-A OUTPUT -j logaccept-final-190 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-191 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-192 +-A OUTPUT -j logaccept-final-193 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-194 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-195 +-A OUTPUT -j logaccept-final-196 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-197 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-198 +-A OUTPUT -j logaccept-final-199 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-200 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-201 +-A OUTPUT -j logaccept-final-202 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-203 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-204 +-A OUTPUT -j logaccept-final-205 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-206 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-207 +-A OUTPUT -j logaccept-final-208 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-209 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-210 +-A OUTPUT -j logaccept-final-211 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-212 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-213 +-A OUTPUT -j logaccept-final-214 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-215 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-216 +-A OUTPUT -j logaccept-final-217 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-218 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-219 +-A OUTPUT -j logaccept-final-220 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-221 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-222 +-A OUTPUT -j logaccept-final-223 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-224 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-225 +-A OUTPUT -j logaccept-final-226 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-227 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-228 +-A OUTPUT -j logaccept-final-229 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-230 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-231 +-A OUTPUT -j logaccept-final-232 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-233 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-234 +-A OUTPUT -j logaccept-final-235 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-236 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-237 +-A OUTPUT -j logaccept-final-238 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-239 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-240 +-A OUTPUT -j logaccept-final-241 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-242 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-243 +-A OUTPUT -j logaccept-final-244 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-245 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-246 +-A OUTPUT -j logaccept-final-247 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-248 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-249 +-A OUTPUT -j logaccept-final-250 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-251 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-252 +-A OUTPUT -j logaccept-final-253 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-254 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-255 +-A OUTPUT -j logaccept-final-256 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-257 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-258 +-A OUTPUT -j logaccept-final-259 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-260 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-261 +-A OUTPUT -j logaccept-final-262 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-263 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-264 +-A OUTPUT -j logaccept-final-265 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-266 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-267 +-A OUTPUT -j logaccept-final-268 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-269 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-270 +-A OUTPUT -j logaccept-final-271 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-272 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-273 +-A OUTPUT -j logaccept-final-274 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-275 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-276 +-A OUTPUT -j logaccept-final-277 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-278 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-279 +-A OUTPUT -j logaccept-final-280 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-281 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-282 +-A OUTPUT -j logaccept-final-283 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-284 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-285 +-A OUTPUT -j logaccept-final-286 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-287 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-288 +-A OUTPUT -j logaccept-final-289 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-290 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-291 +-A OUTPUT -j logaccept-final-292 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-293 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-294 +-A OUTPUT -j logaccept-final-295 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-296 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-297 +-A OUTPUT -j logaccept-final-298 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-299 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-300 +-A OUTPUT -j logaccept-final-301 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-302 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-303 +-A OUTPUT -j logaccept-final-304 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-305 +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT @@ -45625,20 +75151,26 @@ hash:net family inet -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-1184 +-A OUTPUT -j logdrop-2200 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-54 --A OUTPUT -j logdrop-1185 +-A OUTPUT -j logaccept-99 +-A OUTPUT -j logdrop-2201 -A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-100 +-A OUTPUT -j logdrop-2202 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-101 +-A OUTPUT -j logdrop-2203 +-A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-55 --A OUTPUT -j logdrop-1186 --A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-102 +-A OUTPUT -j logdrop-2204 +-A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT @@ -45651,5216 +75183,9095 @@ hash:net family inet -A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 -A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set -A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-10 -m limit --limit 1/second -j LOG -A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-100 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-28 --A limit-100 -j ACCEPT --A limit-1000 -m recent --name limit-1000 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-451 --A limit-1000 -m recent --name limit-1000 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1001 -m recent --name limit-1001 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-452 --A limit-1001 -m recent --name limit-1001 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1002 -m recent --name limit-1002 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-453 --A limit-1002 -m recent --name limit-1002 --rsource --mask 255.255.255.255 --set --A limit-1003 -m recent --name limit-1003 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-454 --A limit-1003 -m limit --limit 12/minute -j ULOG --A limit-1003 -m recent --name limit-1003 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1004 -m recent --name limit-1004 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-455 --A limit-1004 -m recent --name limit-1004 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-456 --A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-457 --A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-458 --A limit-1007 -m limit --limit 1/second -j LOG --A limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-459 --A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-460 --A limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-101 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-29 --A limit-1010 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-461 --A limit-1010 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1011 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-462 --A limit-1011 -m limit --limit 12/minute -j ULOG --A limit-1011 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1012 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-463 --A limit-1012 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1013 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-464 --A limit-1013 -j ACCEPT --A limit-1015 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-466 --A limit-1015 -m limit --limit 1/second -j LOG --A limit-1015 -j ACCEPT --A limit-1016 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-467 --A limit-1016 -m limit --limit 1/second -j LOG --A limit-1017 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-468 --A limit-1017 -j ACCEPT --A limit-1019 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-470 --A limit-1019 -m limit --limit 12/minute -j ULOG --A limit-1019 -j ACCEPT --A limit-102 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 --A limit-102 -m limit --limit 12/minute -j ULOG --A limit-102 -j ACCEPT --A limit-1020 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-471 --A limit-1020 -m limit --limit 12/minute -j ULOG --A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-472 --A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-473 --A limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-474 --A limit-1023 -m limit --limit 1/second -j LOG --A limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-475 --A limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-476 --A limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1026 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-477 --A limit-1026 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1027 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-478 --A limit-1027 -m limit --limit 12/minute -j ULOG --A limit-1027 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1028 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-479 --A limit-1028 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1029 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-480 --A limit-1029 -j ACCEPT --A limit-103 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 --A limit-103 -m limit --limit 12/minute -j ULOG --A limit-1031 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-482 --A limit-1031 -m limit --limit 1/second -j LOG --A limit-1031 -j ACCEPT --A limit-1032 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-483 --A limit-1032 -m limit --limit 1/second -j LOG --A limit-1033 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-484 --A limit-1033 -j ACCEPT --A limit-1035 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-486 +-A limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1000 -j TEE --gateway 10.0.0.1 +-A limit-1000 -j TEE --gateway 10.0.0.2 +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1004 -m limit --limit 12/minute -j ULOG +-A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1006 -j ACCEPT +-A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1008 -m limit --limit 1/second -j LOG +-A limit-1008 -j ACCEPT +-A limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1009 -m limit --limit 1/second -j LOG +-A limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --set +-A limit-1010 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1010 -j TEE --gateway 10.0.0.1 +-A limit-1010 -j TEE --gateway 10.0.0.2 +-A limit-1010 -j ACCEPT +-A limit-1011 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1011 -j TEE --gateway 10.0.0.1 +-A limit-1011 -j TEE --gateway 10.0.0.2 +-A limit-1012 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1012 -j ACCEPT +-A limit-1014 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1014 -m limit --limit 12/minute -j ULOG +-A limit-1014 -j ACCEPT +-A limit-1015 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1015 -m limit --limit 12/minute -j ULOG +-A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1018 -m limit --limit 1/second -j LOG +-A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name limit-102 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-102 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name limit-102 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1020 -j TEE --gateway 10.0.0.1 +-A limit-1020 -j TEE --gateway 10.0.0.2 +-A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1024 -m limit --limit 12/minute -j ULOG +-A limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1026 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1026 -j ACCEPT +-A limit-1028 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1028 -m limit --limit 1/second -j LOG +-A limit-1028 -j ACCEPT +-A limit-1029 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1029 -m limit --limit 1/second -j LOG +-A limit-103 -m recent --name limit-103 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-103 -m recent --name limit-103 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1030 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1030 -j TEE --gateway 10.0.0.1 +-A limit-1030 -j TEE --gateway 10.0.0.2 +-A limit-1030 -j ACCEPT +-A limit-1031 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1031 -j TEE --gateway 10.0.0.1 +-A limit-1031 -j TEE --gateway 10.0.0.2 +-A limit-1032 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1032 -j ACCEPT +-A limit-1034 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1034 -m limit --limit 12/minute -j ULOG +-A limit-1034 -j ACCEPT +-A limit-1035 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1035 -m limit --limit 12/minute -j ULOG --A limit-1035 -j ACCEPT --A limit-1036 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-487 --A limit-1036 -m limit --limit 12/minute -j ULOG --A limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-488 --A limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-489 --A limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-490 --A limit-1039 -m limit --limit 1/second -j LOG --A limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-104 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-32 --A limit-104 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-491 --A limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-492 --A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-493 --A limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-494 --A limit-1043 -m limit --limit 12/minute -j ULOG --A limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-495 --A limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-496 --A limit-1045 -j ACCEPT --A limit-1047 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-498 --A limit-1047 -m limit --limit 1/second -j LOG --A limit-1047 -j ACCEPT --A limit-1048 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-499 +-A limit-1036 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1036 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1038 -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-104 -m recent --name limit-104 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-104 -j TEE --gateway 10.0.0.1 +-A limit-104 -j TEE --gateway 10.0.0.2 +-A limit-104 -m recent --name limit-104 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1040 -j TEE --gateway 10.0.0.1 +-A limit-1040 -j TEE --gateway 10.0.0.2 +-A limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1044 -m limit --limit 12/minute -j ULOG +-A limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1046 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1046 -j ACCEPT +-A limit-1048 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1048 -m limit --limit 1/second -j LOG --A limit-1049 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-500 --A limit-1049 -j ACCEPT --A limit-105 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-33 --A limit-105 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1051 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-502 --A limit-1051 -m limit --limit 12/minute -j ULOG --A limit-1051 -j ACCEPT --A limit-1052 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-503 --A limit-1052 -m limit --limit 12/minute -j ULOG --A limit-1053 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-504 --A limit-1053 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1054 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-505 --A limit-1054 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1055 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-506 --A limit-1055 -m limit --limit 1/second -j LOG --A limit-1055 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-507 --A limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-508 --A limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-509 --A limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-510 --A limit-1059 -m limit --limit 12/minute -j ULOG --A limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-106 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-34 --A limit-106 -m limit --limit 1/second -j LOG --A limit-106 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-511 --A limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-512 --A limit-1061 -j ACCEPT --A limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-514 --A limit-1063 -m limit --limit 1/second -j LOG --A limit-1063 -j ACCEPT --A limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-515 --A limit-1064 -m limit --limit 1/second -j LOG --A limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-516 --A limit-1065 -j ACCEPT --A limit-1067 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-518 --A limit-1067 -m limit --limit 12/minute -j ULOG --A limit-1067 -j ACCEPT --A limit-1068 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-519 --A limit-1068 -m limit --limit 12/minute -j ULOG --A limit-1069 -m recent --name limit-1069 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1069 -m recent --name limit-1069 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-107 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-35 --A limit-107 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1070 -m recent --name limit-1070 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1070 -m recent --name limit-1070 --rsource --mask 255.255.255.255 --set --A limit-1071 -m recent --name limit-1071 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1071 -m limit --limit 1/second -j LOG --A limit-1071 -m recent --name limit-1071 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1072 -m recent --name limit-1072 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1072 -m recent --name limit-1072 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1073 -m recent --name limit-1073 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1073 -m recent --name limit-1073 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set --A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1048 -j ACCEPT +-A limit-1049 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1050 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1050 -j TEE --gateway 10.0.0.1 +-A limit-1050 -j TEE --gateway 10.0.0.2 +-A limit-1050 -j ACCEPT +-A limit-1051 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1051 -j TEE --gateway 10.0.0.1 +-A limit-1051 -j TEE --gateway 10.0.0.2 +-A limit-1052 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1052 -j ACCEPT +-A limit-1054 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1054 -m limit --limit 12/minute -j ULOG +-A limit-1054 -j ACCEPT +-A limit-1055 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1055 -m limit --limit 12/minute -j ULOG +-A limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1058 -m limit --limit 1/second -j LOG +-A limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-106 -m recent --name limit-106 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-106 -m recent --name limit-106 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1060 -j TEE --gateway 10.0.0.1 +-A limit-1060 -j TEE --gateway 10.0.0.2 +-A limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1062 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1062 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1064 -m limit --limit 12/minute -j ULOG +-A limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1066 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1066 -j ACCEPT +-A limit-1068 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1068 -m limit --limit 1/second -j LOG +-A limit-1068 -j ACCEPT +-A limit-1069 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1069 -m limit --limit 1/second -j LOG +-A limit-107 -m recent --name limit-107 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-107 -m recent --name limit-107 --rsource --mask 255.255.255.255 --set +-A limit-1070 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1070 -j TEE --gateway 10.0.0.1 +-A limit-1070 -j TEE --gateway 10.0.0.2 +-A limit-1070 -j ACCEPT +-A limit-1071 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1071 -j TEE --gateway 10.0.0.1 +-A limit-1071 -j TEE --gateway 10.0.0.2 +-A limit-1072 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1072 -j ACCEPT +-A limit-1074 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1074 -m limit --limit 12/minute -j ULOG +-A limit-1074 -j ACCEPT +-A limit-1075 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1075 -m limit --limit 12/minute -j ULOG --A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1077 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1077 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1078 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1078 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1079 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1079 -m limit --limit 1/second -j LOG --A limit-1079 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-108 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-36 --A limit-108 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1080 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1080 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1081 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1081 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1082 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1082 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1083 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1083 -m limit --limit 12/minute -j ULOG --A limit-1083 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1084 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1084 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1085 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1085 -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1087 -m limit --limit 1/second -j LOG --A limit-1087 -j ACCEPT --A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-560 +-A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-561 +-A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set +-A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-562 +-A limit-1078 -m limit --limit 1/second -j LOG +-A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-563 +-A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-108 -m recent --name limit-108 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-108 -m limit --limit 12/minute -j ULOG +-A limit-108 -m recent --name limit-108 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-564 +-A limit-1080 -j TEE --gateway 10.0.0.1 +-A limit-1080 -j TEE --gateway 10.0.0.2 +-A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-565 +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-566 +-A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-567 +-A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set +-A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-568 +-A limit-1084 -m limit --limit 12/minute -j ULOG +-A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-569 +-A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-570 +-A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-571 +-A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-572 -A limit-1088 -m limit --limit 1/second -j LOG --A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1089 -j ACCEPT --A limit-109 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-37 --A limit-109 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1091 -m limit --limit 12/minute -j ULOG --A limit-1091 -j ACCEPT --A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1092 -m limit --limit 12/minute -j ULOG --A limit-1093 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1093 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1094 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1094 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1095 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1095 -m limit --limit 1/second -j LOG --A limit-1095 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1096 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1096 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1097 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1097 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1099 -m limit --limit 12/minute -j ULOG --A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-573 +-A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-109 -m recent --name limit-109 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-109 -m recent --name limit-109 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-574 +-A limit-1090 -j TEE --gateway 10.0.0.1 +-A limit-1090 -j TEE --gateway 10.0.0.2 +-A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-575 +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-576 +-A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1093 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-577 +-A limit-1093 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-578 +-A limit-1094 -m limit --limit 12/minute -j ULOG +-A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-579 +-A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-580 +-A limit-1096 -j ACCEPT +-A limit-1098 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-582 +-A limit-1098 -m limit --limit 1/second -j LOG +-A limit-1098 -j ACCEPT +-A limit-1099 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-583 +-A limit-1099 -m limit --limit 1/second -j LOG -A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-110 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-38 --A limit-110 -m limit --limit 12/minute -j ULOG --A limit-110 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1101 -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1103 -m limit --limit 1/second -j LOG --A limit-1103 -j ACCEPT --A limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1104 -m limit --limit 1/second -j LOG --A limit-1105 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1105 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1107 -m limit --limit 12/minute -j ULOG --A limit-1107 -j ACCEPT --A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1108 -m limit --limit 12/minute -j ULOG --A limit-1109 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1109 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-111 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-39 --A limit-111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1111 -m limit --limit 1/second -j LOG --A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1115 -m limit --limit 12/minute -j ULOG --A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1117 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1117 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set +-A limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-20 +-A limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1100 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-584 +-A limit-1100 -j TEE --gateway 10.0.0.1 +-A limit-1100 -j TEE --gateway 10.0.0.2 +-A limit-1100 -j ACCEPT +-A limit-1101 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-585 +-A limit-1101 -j TEE --gateway 10.0.0.1 +-A limit-1101 -j TEE --gateway 10.0.0.2 +-A limit-1102 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-586 +-A limit-1102 -j ACCEPT +-A limit-1104 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-588 +-A limit-1104 -m limit --limit 12/minute -j ULOG +-A limit-1104 -j ACCEPT +-A limit-1105 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-589 +-A limit-1105 -m limit --limit 12/minute -j ULOG +-A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-590 +-A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-591 +-A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-592 +-A limit-1108 -m limit --limit 1/second -j LOG +-A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1109 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-593 +-A limit-1109 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1110 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-594 +-A limit-1110 -j TEE --gateway 10.0.0.1 +-A limit-1110 -j TEE --gateway 10.0.0.2 +-A limit-1110 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-595 +-A limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1112 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-596 +-A limit-1112 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1113 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-597 +-A limit-1113 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1114 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-598 +-A limit-1114 -m limit --limit 12/minute -j ULOG +-A limit-1114 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1115 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-599 +-A limit-1115 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1116 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-600 +-A limit-1116 -j ACCEPT +-A limit-1118 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-602 +-A limit-1118 -m limit --limit 1/second -j LOG +-A limit-1118 -j ACCEPT +-A limit-1119 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-603 -A limit-1119 -m limit --limit 1/second -j LOG --A limit-1119 -j ACCEPT --A limit-112 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-40 --A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1120 -m limit --limit 1/second -j LOG --A limit-1121 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1121 -j ACCEPT --A limit-1123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1123 -m limit --limit 12/minute -j ULOG --A limit-1123 -j ACCEPT --A limit-1124 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-112 -m limit --limit 1/second -j LOG +-A limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1120 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-604 +-A limit-1120 -j TEE --gateway 10.0.0.1 +-A limit-1120 -j TEE --gateway 10.0.0.2 +-A limit-1120 -j ACCEPT +-A limit-1121 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-605 +-A limit-1121 -j TEE --gateway 10.0.0.1 +-A limit-1121 -j TEE --gateway 10.0.0.2 +-A limit-1122 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-606 +-A limit-1122 -j ACCEPT +-A limit-1124 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-608 -A limit-1124 -m limit --limit 12/minute -j ULOG --A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1127 -m limit --limit 1/second -j LOG --A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1129 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1129 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-113 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-41 --A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1131 -m limit --limit 12/minute -j ULOG --A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1133 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1133 -j ACCEPT --A limit-1135 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1135 -m limit --limit 1/second -j LOG --A limit-1135 -j ACCEPT --A limit-1136 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1136 -m limit --limit 1/second -j LOG --A limit-1137 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1137 -j ACCEPT --A limit-1139 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1139 -m limit --limit 12/minute -j ULOG --A limit-1139 -j ACCEPT --A limit-114 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-42 --A limit-114 -m limit --limit 1/second -j LOG --A limit-114 -j ACCEPT --A limit-1140 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1140 -m limit --limit 12/minute -j ULOG --A limit-1141 -m recent --name limit-1141 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-520 --A limit-1141 -m recent --name limit-1141 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1142 -m recent --name limit-1142 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-521 --A limit-1142 -m recent --name limit-1142 --rsource --mask 255.255.255.255 --set --A limit-1143 -m recent --name limit-1143 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-522 --A limit-1143 -m limit --limit 1/second -j LOG --A limit-1143 -m recent --name limit-1143 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1144 -m recent --name limit-1144 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-523 --A limit-1144 -m recent --name limit-1144 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1145 -m recent --name limit-1145 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-524 --A limit-1145 -m recent --name limit-1145 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1146 -m recent --name limit-1146 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-525 --A limit-1146 -m recent --name limit-1146 --rsource --mask 255.255.255.255 --set --A limit-1147 -m recent --name limit-1147 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-526 --A limit-1147 -m limit --limit 12/minute -j ULOG --A limit-1147 -m recent --name limit-1147 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1148 -m recent --name limit-1148 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-527 --A limit-1148 -m recent --name limit-1148 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-528 --A limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-115 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 --A limit-115 -m limit --limit 1/second -j LOG --A limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-529 --A limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1151 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-530 --A limit-1151 -m limit --limit 1/second -j LOG --A limit-1151 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1152 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-531 --A limit-1152 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1153 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-532 --A limit-1153 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1154 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-533 --A limit-1154 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1155 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-534 --A limit-1155 -m limit --limit 12/minute -j ULOG --A limit-1155 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1156 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-535 --A limit-1156 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1157 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-536 --A limit-1157 -j ACCEPT --A limit-1159 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-538 +-A limit-1124 -j ACCEPT +-A limit-1125 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-609 +-A limit-1125 -m limit --limit 12/minute -j ULOG +-A limit-1126 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-610 +-A limit-1126 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1127 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-611 +-A limit-1127 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1128 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-612 +-A limit-1128 -m limit --limit 1/second -j LOG +-A limit-1128 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1129 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-613 +-A limit-1129 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-113 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-113 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1130 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-614 +-A limit-1130 -j TEE --gateway 10.0.0.1 +-A limit-1130 -j TEE --gateway 10.0.0.2 +-A limit-1130 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-615 +-A limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1132 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-616 +-A limit-1132 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1133 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-617 +-A limit-1133 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1134 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-618 +-A limit-1134 -m limit --limit 12/minute -j ULOG +-A limit-1134 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1135 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-619 +-A limit-1135 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1136 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-620 +-A limit-1136 -j ACCEPT +-A limit-1138 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-622 +-A limit-1138 -m limit --limit 1/second -j LOG +-A limit-1138 -j ACCEPT +-A limit-1139 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-623 +-A limit-1139 -m limit --limit 1/second -j LOG +-A limit-114 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-114 -j TEE --gateway 10.0.0.1 +-A limit-114 -j TEE --gateway 10.0.0.2 +-A limit-114 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1140 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-624 +-A limit-1140 -j TEE --gateway 10.0.0.1 +-A limit-1140 -j TEE --gateway 10.0.0.2 +-A limit-1140 -j ACCEPT +-A limit-1141 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-625 +-A limit-1141 -j TEE --gateway 10.0.0.1 +-A limit-1141 -j TEE --gateway 10.0.0.2 +-A limit-1142 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-626 +-A limit-1142 -j ACCEPT +-A limit-1144 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-628 +-A limit-1144 -m limit --limit 12/minute -j ULOG +-A limit-1144 -j ACCEPT +-A limit-1145 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-629 +-A limit-1145 -m limit --limit 12/minute -j ULOG +-A limit-1146 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-630 +-A limit-1146 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1147 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-631 +-A limit-1147 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1148 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-632 +-A limit-1148 -m limit --limit 1/second -j LOG +-A limit-1148 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1149 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-633 +-A limit-1149 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1150 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-634 +-A limit-1150 -j TEE --gateway 10.0.0.1 +-A limit-1150 -j TEE --gateway 10.0.0.2 +-A limit-1150 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-635 +-A limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1152 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-636 +-A limit-1152 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1153 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-637 +-A limit-1153 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1154 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-638 +-A limit-1154 -m limit --limit 12/minute -j ULOG +-A limit-1154 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1155 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-639 +-A limit-1155 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1156 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-640 +-A limit-1156 -j ACCEPT +-A limit-1158 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-642 +-A limit-1158 -m limit --limit 1/second -j LOG +-A limit-1158 -j ACCEPT +-A limit-1159 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-643 -A limit-1159 -m limit --limit 1/second -j LOG --A limit-1159 -j ACCEPT --A limit-116 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 --A limit-116 -j ACCEPT --A limit-1160 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-539 --A limit-1160 -m limit --limit 1/second -j LOG --A limit-1161 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-540 --A limit-1161 -j ACCEPT --A limit-1163 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-542 --A limit-1163 -m limit --limit 12/minute -j ULOG --A limit-1163 -j ACCEPT --A limit-1164 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-543 +-A limit-116 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-116 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1160 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-644 +-A limit-1160 -j TEE --gateway 10.0.0.1 +-A limit-1160 -j TEE --gateway 10.0.0.2 +-A limit-1160 -j ACCEPT +-A limit-1161 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-645 +-A limit-1161 -j TEE --gateway 10.0.0.1 +-A limit-1161 -j TEE --gateway 10.0.0.2 +-A limit-1162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-646 +-A limit-1162 -j ACCEPT +-A limit-1164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-648 -A limit-1164 -m limit --limit 12/minute -j ULOG --A limit-1165 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-544 --A limit-1165 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1166 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-545 --A limit-1166 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1167 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-546 --A limit-1167 -m limit --limit 1/second -j LOG --A limit-1167 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1168 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-547 --A limit-1168 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1169 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-548 --A limit-1169 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-117 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 --A limit-1170 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-549 --A limit-1170 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1171 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-550 --A limit-1171 -m limit --limit 12/minute -j ULOG --A limit-1171 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1172 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-551 --A limit-1172 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1173 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-552 --A limit-1173 -j ACCEPT --A limit-1175 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-554 --A limit-1175 -m limit --limit 1/second -j LOG --A limit-1175 -j ACCEPT --A limit-1176 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-555 --A limit-1176 -m limit --limit 1/second -j LOG --A limit-1177 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-556 --A limit-1177 -j ACCEPT --A limit-1179 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-558 --A limit-1179 -m limit --limit 12/minute -j ULOG --A limit-1179 -j ACCEPT --A limit-118 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-1164 -j ACCEPT +-A limit-1165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-649 +-A limit-1165 -m limit --limit 12/minute -j ULOG +-A limit-1166 -m recent --name limit-1166 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-650 +-A limit-1166 -m recent --name limit-1166 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1167 -m recent --name limit-1167 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-651 +-A limit-1167 -m recent --name limit-1167 --rsource --mask 255.255.255.255 --set +-A limit-1168 -m recent --name limit-1168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-652 +-A limit-1168 -m limit --limit 1/second -j LOG +-A limit-1168 -m recent --name limit-1168 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1169 -m recent --name limit-1169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-653 +-A limit-1169 -m recent --name limit-1169 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-117 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-117 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1170 -m recent --name limit-1170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-654 +-A limit-1170 -j TEE --gateway 10.0.0.1 +-A limit-1170 -j TEE --gateway 10.0.0.2 +-A limit-1170 -m recent --name limit-1170 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-655 +-A limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1172 -m recent --name limit-1172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-656 +-A limit-1172 -m recent --name limit-1172 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1173 -m recent --name limit-1173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-657 +-A limit-1173 -m recent --name limit-1173 --rsource --mask 255.255.255.255 --set +-A limit-1174 -m recent --name limit-1174 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-658 +-A limit-1174 -m limit --limit 12/minute -j ULOG +-A limit-1174 -m recent --name limit-1174 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1175 -m recent --name limit-1175 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-659 +-A limit-1175 -m recent --name limit-1175 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-660 +-A limit-1176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-661 +-A limit-1177 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-662 +-A limit-1178 -m limit --limit 1/second -j LOG +-A limit-1178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-663 +-A limit-1179 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 -A limit-118 -m limit --limit 12/minute -j ULOG --A limit-118 -j ACCEPT --A limit-1180 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-559 --A limit-1180 -m limit --limit 12/minute -j ULOG --A limit-1181 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-560 --A limit-1181 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1182 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-561 --A limit-1182 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1183 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-562 --A limit-1183 -m limit --limit 1/second -j LOG --A limit-1183 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1184 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-563 --A limit-1184 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1185 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-564 --A limit-1185 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1186 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-565 --A limit-1186 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1187 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-566 --A limit-1187 -m limit --limit 12/minute -j ULOG --A limit-1187 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1188 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-567 --A limit-1188 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1189 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-568 --A limit-1189 -j ACCEPT --A limit-119 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 --A limit-119 -m limit --limit 12/minute -j ULOG --A limit-1191 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-570 --A limit-1191 -m limit --limit 1/second -j LOG --A limit-1191 -j ACCEPT --A limit-1192 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-571 --A limit-1192 -m limit --limit 1/second -j LOG --A limit-1193 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-572 --A limit-1193 -j ACCEPT --A limit-1195 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-574 +-A limit-118 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1180 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-664 +-A limit-1180 -j TEE --gateway 10.0.0.1 +-A limit-1180 -j TEE --gateway 10.0.0.2 +-A limit-1180 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-665 +-A limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1182 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-666 +-A limit-1182 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1183 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-667 +-A limit-1183 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1184 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-668 +-A limit-1184 -m limit --limit 12/minute -j ULOG +-A limit-1184 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1185 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-669 +-A limit-1185 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1186 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-670 +-A limit-1186 -j ACCEPT +-A limit-1188 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-672 +-A limit-1188 -m limit --limit 1/second -j LOG +-A limit-1188 -j ACCEPT +-A limit-1189 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-673 +-A limit-1189 -m limit --limit 1/second -j LOG +-A limit-119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1190 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-674 +-A limit-1190 -j TEE --gateway 10.0.0.1 +-A limit-1190 -j TEE --gateway 10.0.0.2 +-A limit-1190 -j ACCEPT +-A limit-1191 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-675 +-A limit-1191 -j TEE --gateway 10.0.0.1 +-A limit-1191 -j TEE --gateway 10.0.0.2 +-A limit-1192 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-676 +-A limit-1192 -j ACCEPT +-A limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-678 +-A limit-1194 -m limit --limit 12/minute -j ULOG +-A limit-1194 -j ACCEPT +-A limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-679 -A limit-1195 -m limit --limit 12/minute -j ULOG --A limit-1195 -j ACCEPT --A limit-1196 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-575 --A limit-1196 -m limit --limit 12/minute -j ULOG --A limit-1197 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-576 --A limit-1197 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1198 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-577 --A limit-1198 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1199 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-578 --A limit-1199 -m limit --limit 1/second -j LOG --A limit-1199 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1196 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-680 +-A limit-1196 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1197 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-681 +-A limit-1197 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1198 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-682 +-A limit-1198 -m limit --limit 1/second -j LOG +-A limit-1198 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1199 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-683 +-A limit-1199 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-12 -m limit --limit 1/second -j LOG -A limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-120 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-48 --A limit-120 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1200 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-579 --A limit-1200 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1201 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-580 --A limit-1201 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1202 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-581 --A limit-1202 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1203 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-582 --A limit-1203 -m limit --limit 12/minute -j ULOG --A limit-1203 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1204 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-583 --A limit-1204 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1205 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-584 --A limit-1205 -j ACCEPT --A limit-1207 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-586 --A limit-1207 -m limit --limit 1/second -j LOG --A limit-1207 -j ACCEPT --A limit-1208 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-587 +-A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-120 -j ACCEPT +-A limit-1200 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-684 +-A limit-1200 -j TEE --gateway 10.0.0.1 +-A limit-1200 -j TEE --gateway 10.0.0.2 +-A limit-1200 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-685 +-A limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1202 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-686 +-A limit-1202 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1203 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-687 +-A limit-1203 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1204 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-688 +-A limit-1204 -m limit --limit 12/minute -j ULOG +-A limit-1204 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1205 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-689 +-A limit-1205 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-690 +-A limit-1206 -j ACCEPT +-A limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-692 -A limit-1208 -m limit --limit 1/second -j LOG --A limit-1209 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-588 --A limit-1209 -j ACCEPT --A limit-121 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 --A limit-121 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1211 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-590 --A limit-1211 -m limit --limit 12/minute -j ULOG --A limit-1211 -j ACCEPT --A limit-1212 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-591 --A limit-1212 -m limit --limit 12/minute -j ULOG --A limit-1213 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1213 -j ACCEPT --A limit-1213 -m limit --limit 1/second -j LOG --A limit-1213 -j DROP --A limit-1214 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1214 -j RETURN --A limit-1214 -m limit --limit 1/second -j LOG --A limit-1214 -j DROP --A limit-1215 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1215 -j logaccept-18 --A limit-1215 -m limit --limit 1/second -j LOG --A limit-1215 -j DROP --A limit-1216 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1216 -j ACCEPT --A limit-1216 -m limit --limit 1/second -j LOG --A limit-1216 -j DROP --A limit-1217 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1217 -j logaccept-19 --A limit-1217 -m limit --limit 1/second -j LOG --A limit-1217 -j DROP --A limit-1218 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1218 -j ACCEPT --A limit-1218 -j DROP --A limit-1219 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1219 -j RETURN --A limit-1219 -j DROP --A limit-122 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-1208 -j ACCEPT +-A limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-693 +-A limit-1209 -m limit --limit 1/second -j LOG +-A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-694 +-A limit-1210 -j TEE --gateway 10.0.0.1 +-A limit-1210 -j TEE --gateway 10.0.0.2 +-A limit-1210 -j ACCEPT +-A limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-695 +-A limit-1211 -j TEE --gateway 10.0.0.1 +-A limit-1211 -j TEE --gateway 10.0.0.2 +-A limit-1212 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-696 +-A limit-1212 -j ACCEPT +-A limit-1214 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-698 +-A limit-1214 -m limit --limit 12/minute -j ULOG +-A limit-1214 -j ACCEPT +-A limit-1215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-699 +-A limit-1215 -m limit --limit 12/minute -j ULOG +-A limit-1216 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-700 +-A limit-1216 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1217 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-701 +-A limit-1217 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-702 +-A limit-1218 -m limit --limit 1/second -j LOG +-A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-703 +-A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 -A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1220 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1220 -j logaccept-20 --A limit-1220 -j DROP --A limit-1221 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1221 -j ACCEPT --A limit-1221 -j DROP --A limit-1222 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1222 -j logaccept-21 --A limit-1222 -j DROP --A limit-1223 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1223 -j ACCEPT --A limit-1223 -m limit --limit 1/second -j LOG --A limit-1223 -j DROP --A limit-1224 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1224 -j RETURN --A limit-1224 -m limit --limit 1/second -j LOG --A limit-1224 -j DROP --A limit-1225 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1225 -j logaccept-22 --A limit-1225 -m limit --limit 1/second -j LOG --A limit-1225 -j DROP --A limit-1226 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1226 -j ACCEPT --A limit-1226 -m limit --limit 1/second -j LOG --A limit-1226 -j DROP --A limit-1227 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1227 -j logaccept-23 --A limit-1227 -m limit --limit 1/second -j LOG --A limit-1227 -j DROP --A limit-1228 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1228 -j ACCEPT --A limit-1228 -j DROP --A limit-1229 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1229 -j RETURN --A limit-1229 -j DROP --A limit-123 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 --A limit-123 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1230 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1230 -j logaccept-24 --A limit-1230 -j DROP --A limit-1231 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1231 -j ACCEPT --A limit-1231 -j DROP --A limit-1232 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1232 -j logaccept-25 --A limit-1232 -j DROP --A limit-1233 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1233 -j ACCEPT --A limit-1233 -m limit --limit 12/minute -j ULOG --A limit-1233 -j DROP --A limit-1234 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1234 -j RETURN +-A limit-122 -j ACCEPT +-A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-704 +-A limit-1220 -j TEE --gateway 10.0.0.1 +-A limit-1220 -j TEE --gateway 10.0.0.2 +-A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-705 +-A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-706 +-A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-707 +-A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-708 +-A limit-1224 -m limit --limit 12/minute -j ULOG +-A limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1225 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-709 +-A limit-1225 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1226 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-710 +-A limit-1226 -j ACCEPT +-A limit-1228 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-712 +-A limit-1228 -m limit --limit 1/second -j LOG +-A limit-1228 -j ACCEPT +-A limit-1229 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-713 +-A limit-1229 -m limit --limit 1/second -j LOG +-A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-123 -m limit --limit 1/second -j LOG +-A limit-1230 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-714 +-A limit-1230 -j TEE --gateway 10.0.0.1 +-A limit-1230 -j TEE --gateway 10.0.0.2 +-A limit-1230 -j ACCEPT +-A limit-1231 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-715 +-A limit-1231 -j TEE --gateway 10.0.0.1 +-A limit-1231 -j TEE --gateway 10.0.0.2 +-A limit-1232 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-716 +-A limit-1232 -j ACCEPT +-A limit-1234 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-718 -A limit-1234 -m limit --limit 12/minute -j ULOG --A limit-1234 -j DROP --A limit-1235 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1235 -j logaccept-26 +-A limit-1234 -j ACCEPT +-A limit-1235 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-719 -A limit-1235 -m limit --limit 12/minute -j ULOG --A limit-1235 -j DROP --A limit-1236 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1236 -j ACCEPT --A limit-1236 -m limit --limit 12/minute -j ULOG --A limit-1236 -j DROP --A limit-1237 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1237 -j logaccept-27 --A limit-1237 -m limit --limit 12/minute -j ULOG --A limit-1237 -j DROP --A limit-1238 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1238 -j ACCEPT --A limit-1238 -j DROP --A limit-1239 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1239 -j RETURN --A limit-1239 -j DROP --A limit-124 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 --A limit-124 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1240 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1240 -j logaccept-28 --A limit-1240 -j DROP --A limit-1241 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1241 -j ACCEPT --A limit-1241 -j DROP --A limit-1242 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1242 -j logaccept-29 --A limit-1242 -j DROP --A limit-1243 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1243 -j ACCEPT --A limit-1243 -m limit --limit 1/second -j LOG --A limit-1243 -j DROP --A limit-1244 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1244 -j RETURN --A limit-1244 -m limit --limit 1/second -j LOG --A limit-1244 -j DROP --A limit-1245 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1245 -j logaccept-30 --A limit-1245 -m limit --limit 1/second -j LOG --A limit-1245 -j DROP --A limit-1246 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1246 -j ACCEPT --A limit-1246 -m limit --limit 1/second -j LOG --A limit-1246 -j DROP --A limit-1247 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1247 -j logaccept-31 --A limit-1247 -m limit --limit 1/second -j LOG --A limit-1247 -j DROP --A limit-1248 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1248 -j ACCEPT --A limit-1248 -j DROP --A limit-1249 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1249 -j RETURN --A limit-1249 -j DROP --A limit-125 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 --A limit-125 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1250 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1250 -j logaccept-32 --A limit-1250 -j DROP --A limit-1251 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1251 -j ACCEPT --A limit-1251 -j DROP --A limit-1252 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1252 -j logaccept-33 --A limit-1252 -j DROP --A limit-1253 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1253 -j ACCEPT --A limit-1253 -m limit --limit 12/minute -j ULOG --A limit-1253 -j DROP --A limit-1254 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1254 -j RETURN +-A limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-720 +-A limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1237 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-721 +-A limit-1237 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-722 +-A limit-1238 -m limit --limit 1/second -j LOG +-A limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-723 +-A limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-124 -j TEE --gateway 10.0.0.1 +-A limit-124 -j TEE --gateway 10.0.0.2 +-A limit-124 -j ACCEPT +-A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-724 +-A limit-1240 -j TEE --gateway 10.0.0.1 +-A limit-1240 -j TEE --gateway 10.0.0.2 +-A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-725 +-A limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1242 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-726 +-A limit-1242 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1243 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-727 +-A limit-1243 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1244 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-728 +-A limit-1244 -m limit --limit 12/minute -j ULOG +-A limit-1244 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1245 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-729 +-A limit-1245 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1246 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-730 +-A limit-1246 -j ACCEPT +-A limit-1248 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-732 +-A limit-1248 -m limit --limit 1/second -j LOG +-A limit-1248 -j ACCEPT +-A limit-1249 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-733 +-A limit-1249 -m limit --limit 1/second -j LOG +-A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-125 -j TEE --gateway 10.0.0.1 +-A limit-125 -j TEE --gateway 10.0.0.2 +-A limit-1250 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-734 +-A limit-1250 -j TEE --gateway 10.0.0.1 +-A limit-1250 -j TEE --gateway 10.0.0.2 +-A limit-1250 -j ACCEPT +-A limit-1251 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-735 +-A limit-1251 -j TEE --gateway 10.0.0.1 +-A limit-1251 -j TEE --gateway 10.0.0.2 +-A limit-1252 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-736 +-A limit-1252 -j ACCEPT +-A limit-1254 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-738 -A limit-1254 -m limit --limit 12/minute -j ULOG --A limit-1254 -j DROP --A limit-1255 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1255 -j logaccept-34 +-A limit-1254 -j ACCEPT +-A limit-1255 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-739 -A limit-1255 -m limit --limit 12/minute -j ULOG --A limit-1255 -j DROP --A limit-1256 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1256 -j ACCEPT --A limit-1256 -m limit --limit 12/minute -j ULOG --A limit-1256 -j DROP --A limit-1257 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1257 -j logaccept-35 --A limit-1257 -m limit --limit 12/minute -j ULOG --A limit-1257 -j DROP --A limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-592 --A limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --set --A limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-593 --A limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --set --A limit-126 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 --A limit-126 -m limit --limit 12/minute -j ULOG --A limit-126 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-594 --A limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --set --A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-595 --A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-596 --A limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --set --A limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-597 +-A limit-1256 -m recent --name limit-1256 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1256 -m recent --name limit-1256 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1257 -m recent --name limit-1257 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1257 -m recent --name limit-1257 --rsource --mask 255.255.255.255 --set +-A limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1258 -m limit --limit 1/second -j LOG +-A limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-126 -j ACCEPT +-A limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1260 -j TEE --gateway 10.0.0.1 +-A limit-1260 -j TEE --gateway 10.0.0.2 +-A limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --set --A limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-598 --A limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --set --A limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-599 +-A limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1264 -m limit --limit 12/minute -j ULOG +-A limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1266 -m recent --name limit-1266 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1266 -m recent --name limit-1266 --rsource --mask 255.255.255.255 --set --A limit-1267 -m recent --name limit-1267 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1267 -m recent --name limit-1267 --rsource --mask 255.255.255.255 --set --A limit-1268 -m recent --name limit-1268 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1268 -m recent --name limit-1268 --rsource --mask 255.255.255.255 --set --A limit-1269 -m recent --name limit-1269 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1269 -m recent --name limit-1269 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-127 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-55 --A limit-127 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1270 -m recent --name limit-1270 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name limit-1270 --rsource --mask 255.255.255.255 --set --A limit-1271 -m recent --name limit-1271 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1271 -m recent --name limit-1271 --rsource --mask 255.255.255.255 --set --A limit-1272 -m recent --name limit-1272 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1272 -m recent --name limit-1272 --rsource --mask 255.255.255.255 --set --A limit-1273 -m recent --name limit-1273 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1273 -m recent --name limit-1273 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1266 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1266 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1267 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1267 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1268 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1268 -m limit --limit 1/second -j LOG +-A limit-1268 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1269 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1269 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-1270 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1270 -j TEE --gateway 10.0.0.1 +-A limit-1270 -j TEE --gateway 10.0.0.2 +-A limit-1270 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1272 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1272 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1273 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1273 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1274 -m limit --limit 12/minute -j ULOG +-A limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1276 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1276 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1277 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1277 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1278 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1278 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1279 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1279 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-128 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 +-A limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1276 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1276 -j ACCEPT +-A limit-1278 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1278 -m limit --limit 1/second -j LOG +-A limit-1278 -j ACCEPT +-A limit-1279 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1279 -m limit --limit 1/second -j LOG +-A limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-128 -m limit --limit 12/minute -j ULOG -A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1280 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1281 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1281 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1280 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1280 -j TEE --gateway 10.0.0.1 +-A limit-1280 -j TEE --gateway 10.0.0.2 +-A limit-1280 -j ACCEPT +-A limit-1281 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1281 -j TEE --gateway 10.0.0.1 +-A limit-1281 -j TEE --gateway 10.0.0.2 -A limit-1282 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1283 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1282 -j ACCEPT -A limit-1284 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1284 -m limit --limit 12/minute -j ULOG +-A limit-1284 -j ACCEPT -A limit-1285 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1285 -m limit --limit 1/second -j LOG --A limit-1286 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1287 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1289 -m limit --limit 12/minute -j ULOG --A limit-129 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-1285 -m limit --limit 12/minute -j ULOG +-A limit-1286 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1286 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1287 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1287 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1288 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1288 -m limit --limit 1/second -j LOG +-A limit-1288 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1289 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1289 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-129 -m limit --limit 12/minute -j ULOG -A limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1290 -j TEE --gateway 10.0.0.1 +-A limit-1290 -j TEE --gateway 10.0.0.2 +-A limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1294 -m limit --limit 12/minute -j ULOG +-A limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1296 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1296 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1296 -j ACCEPT -A limit-1298 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1298 -m limit --limit 1/second -j LOG +-A limit-1298 -j ACCEPT -A limit-1299 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1299 -m limit --limit 1/second -j LOG -A limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --set --A limit-130 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 --A limit-130 -m limit --limit 1/second -j LOG --A limit-130 -j ACCEPT +-A limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-130 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-130 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1300 -j TEE --gateway 10.0.0.1 +-A limit-1300 -j TEE --gateway 10.0.0.2 +-A limit-1300 -j ACCEPT -A limit-1301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1301 -m limit --limit 1/second -j LOG +-A limit-1301 -j TEE --gateway 10.0.0.1 +-A limit-1301 -j TEE --gateway 10.0.0.2 -A limit-1302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1302 -j ACCEPT -A limit-1304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1304 -m limit --limit 12/minute -j ULOG +-A limit-1304 -j ACCEPT -A limit-1305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1305 -m limit --limit 12/minute -j ULOG -A limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1308 -m limit --limit 1/second -j LOG +-A limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-131 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 --A limit-131 -m limit --limit 1/second -j LOG +-A limit-131 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-131 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1310 -j TEE --gateway 10.0.0.1 +-A limit-1310 -j TEE --gateway 10.0.0.2 +-A limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1314 -m limit --limit 12/minute -j ULOG +-A limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1317 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1317 -m limit --limit 1/second -j LOG +-A limit-1316 -j ACCEPT -A limit-1318 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1318 -m limit --limit 1/second -j LOG +-A limit-1318 -j ACCEPT -A limit-1319 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-132 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 --A limit-132 -j ACCEPT +-A limit-1319 -m limit --limit 1/second -j LOG +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-132 -m limit --limit 1/second -j LOG +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1320 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1320 -j TEE --gateway 10.0.0.1 +-A limit-1320 -j TEE --gateway 10.0.0.2 +-A limit-1320 -j ACCEPT -A limit-1321 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1321 -m limit --limit 12/minute -j ULOG --A limit-1322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1322 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1323 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1324 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1324 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1325 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1325 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1321 -j TEE --gateway 10.0.0.1 +-A limit-1321 -j TEE --gateway 10.0.0.2 +-A limit-1322 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1322 -j ACCEPT +-A limit-1324 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1324 -m limit --limit 12/minute -j ULOG +-A limit-1324 -j ACCEPT +-A limit-1325 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1325 -m limit --limit 12/minute -j ULOG -A limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1328 -m limit --limit 1/second -j LOG +-A limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-133 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-61 --A limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1333 -m limit --limit 1/second -j LOG --A limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1330 -j TEE --gateway 10.0.0.1 +-A limit-1330 -j TEE --gateway 10.0.0.2 +-A limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1334 -m limit --limit 12/minute -j ULOG +-A limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1336 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1337 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1337 -m limit --limit 12/minute -j ULOG --A limit-1338 -m recent --name limit-1338 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-600 --A limit-1338 -m recent --name limit-1338 --rsource --mask 255.255.255.255 --set --A limit-1339 -m recent --name limit-1339 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-601 --A limit-1339 -m recent --name limit-1339 --rsource --mask 255.255.255.255 --set --A limit-134 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-62 --A limit-134 -m limit --limit 12/minute -j ULOG --A limit-134 -j ACCEPT --A limit-1340 -m recent --name limit-1340 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-602 --A limit-1340 -m recent --name limit-1340 --rsource --mask 255.255.255.255 --set --A limit-1341 -m recent --name limit-1341 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-603 --A limit-1341 -m recent --name limit-1341 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1342 -m recent --name limit-1342 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-604 --A limit-1342 -m recent --name limit-1342 --rsource --mask 255.255.255.255 --set --A limit-1343 -m recent --name limit-1343 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-605 --A limit-1343 -m recent --name limit-1343 --rsource --mask 255.255.255.255 --set --A limit-1344 -m recent --name limit-1344 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-606 --A limit-1344 -m recent --name limit-1344 --rsource --mask 255.255.255.255 --set --A limit-1345 -m recent --name limit-1345 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-607 --A limit-1345 -m recent --name limit-1345 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1346 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-608 --A limit-1346 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1347 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-609 --A limit-1347 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1348 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-610 --A limit-1348 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1349 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-611 --A limit-1349 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-135 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-63 --A limit-135 -m limit --limit 12/minute -j ULOG --A limit-1350 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-612 --A limit-1350 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1351 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-613 --A limit-1351 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1352 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-614 --A limit-1352 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1353 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-615 --A limit-1353 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1354 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-616 --A limit-1355 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-617 --A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-618 --A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-619 --A limit-1357 -m limit --limit 1/second -j LOG --A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-620 --A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-621 --A limit-136 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-64 --A limit-136 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-622 --A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-623 --A limit-1361 -m limit --limit 12/minute -j ULOG --A limit-1362 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-624 --A limit-1362 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1363 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-625 --A limit-1363 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1364 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-626 --A limit-1364 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1365 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-627 --A limit-1365 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1366 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-628 --A limit-1366 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1367 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-629 --A limit-1367 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-630 --A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-631 --A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-137 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-65 --A limit-137 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-632 --A limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-633 --A limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-634 --A limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-635 --A limit-1373 -m limit --limit 1/second -j LOG --A limit-1374 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-636 --A limit-1375 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-637 --A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-638 --A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-639 --A limit-1377 -m limit --limit 12/minute -j ULOG --A limit-1378 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-640 --A limit-1378 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1379 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-641 --A limit-1379 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-138 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-66 --A limit-138 -m limit --limit 1/second -j LOG --A limit-138 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-642 --A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-643 --A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-644 --A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-645 --A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-646 --A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-647 --A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-648 --A limit-1387 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-649 --A limit-1388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-650 --A limit-1389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-651 +-A limit-1336 -j ACCEPT +-A limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1338 -m limit --limit 1/second -j LOG +-A limit-1338 -j ACCEPT +-A limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1339 -m limit --limit 1/second -j LOG +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-134 -j TEE --gateway 10.0.0.1 +-A limit-134 -j TEE --gateway 10.0.0.2 +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1340 -j TEE --gateway 10.0.0.1 +-A limit-1340 -j TEE --gateway 10.0.0.2 +-A limit-1340 -j ACCEPT +-A limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1341 -j TEE --gateway 10.0.0.1 +-A limit-1341 -j TEE --gateway 10.0.0.2 +-A limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1342 -j ACCEPT +-A limit-1344 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1344 -m limit --limit 12/minute -j ULOG +-A limit-1344 -j ACCEPT +-A limit-1345 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1345 -m limit --limit 12/minute -j ULOG +-A limit-1346 -m recent --name limit-1346 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-740 +-A limit-1346 -m recent --name limit-1346 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1347 -m recent --name limit-1347 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-741 +-A limit-1347 -m recent --name limit-1347 --rsource --mask 255.255.255.255 --set +-A limit-1348 -m recent --name limit-1348 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-742 +-A limit-1348 -m limit --limit 1/second -j LOG +-A limit-1348 -m recent --name limit-1348 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1349 -m recent --name limit-1349 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-743 +-A limit-1349 -m recent --name limit-1349 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-744 +-A limit-1350 -j TEE --gateway 10.0.0.1 +-A limit-1350 -j TEE --gateway 10.0.0.2 +-A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-745 +-A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-746 +-A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-747 +-A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --set +-A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-748 +-A limit-1354 -m limit --limit 12/minute -j ULOG +-A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-749 +-A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-750 +-A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-751 +-A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-752 +-A limit-1358 -m limit --limit 1/second -j LOG +-A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-753 +-A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-754 +-A limit-1360 -j TEE --gateway 10.0.0.1 +-A limit-1360 -j TEE --gateway 10.0.0.2 +-A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-755 +-A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-756 +-A limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1363 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-757 +-A limit-1363 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-758 +-A limit-1364 -m limit --limit 12/minute -j ULOG +-A limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-759 +-A limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1366 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-760 +-A limit-1366 -j ACCEPT +-A limit-1368 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-762 +-A limit-1368 -m limit --limit 1/second -j LOG +-A limit-1368 -j ACCEPT +-A limit-1369 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-763 +-A limit-1369 -m limit --limit 1/second -j LOG +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1370 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-764 +-A limit-1370 -j TEE --gateway 10.0.0.1 +-A limit-1370 -j TEE --gateway 10.0.0.2 +-A limit-1370 -j ACCEPT +-A limit-1371 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-765 +-A limit-1371 -j TEE --gateway 10.0.0.1 +-A limit-1371 -j TEE --gateway 10.0.0.2 +-A limit-1372 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-766 +-A limit-1372 -j ACCEPT +-A limit-1374 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-768 +-A limit-1374 -m limit --limit 12/minute -j ULOG +-A limit-1374 -j ACCEPT +-A limit-1375 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-769 +-A limit-1375 -m limit --limit 12/minute -j ULOG +-A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-770 +-A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-771 +-A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-772 +-A limit-1378 -m limit --limit 1/second -j LOG +-A limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1379 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-773 +-A limit-1379 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-138 -m limit --limit 12/minute -j ULOG +-A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1380 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-774 +-A limit-1380 -j TEE --gateway 10.0.0.1 +-A limit-1380 -j TEE --gateway 10.0.0.2 +-A limit-1380 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-775 +-A limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-776 +-A limit-1382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-777 +-A limit-1383 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-778 +-A limit-1384 -m limit --limit 12/minute -j ULOG +-A limit-1384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-779 +-A limit-1385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1386 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-780 +-A limit-1386 -j ACCEPT +-A limit-1388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-782 +-A limit-1388 -m limit --limit 1/second -j LOG +-A limit-1388 -j ACCEPT +-A limit-1389 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-783 -A limit-1389 -m limit --limit 1/second -j LOG --A limit-139 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-67 --A limit-139 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-652 --A limit-1391 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-653 --A limit-1392 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-654 --A limit-1393 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-655 --A limit-1393 -m limit --limit 12/minute -j ULOG --A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-656 --A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-657 --A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-658 --A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-659 --A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-660 --A limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1399 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-661 --A limit-1399 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-784 +-A limit-1390 -j TEE --gateway 10.0.0.1 +-A limit-1390 -j TEE --gateway 10.0.0.2 +-A limit-1390 -j ACCEPT +-A limit-1391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-785 +-A limit-1391 -j TEE --gateway 10.0.0.1 +-A limit-1391 -j TEE --gateway 10.0.0.2 +-A limit-1392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-786 +-A limit-1392 -j ACCEPT +-A limit-1394 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-788 +-A limit-1394 -m limit --limit 12/minute -j ULOG +-A limit-1394 -j ACCEPT +-A limit-1395 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-789 +-A limit-1395 -m limit --limit 12/minute -j ULOG +-A limit-1396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-790 +-A limit-1396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-791 +-A limit-1397 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-792 +-A limit-1398 -m limit --limit 1/second -j LOG +-A limit-1398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-793 +-A limit-1399 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-14 -m limit --limit 12/minute -j ULOG +-A limit-14 -j TEE --gateway 10.0.0.1 +-A limit-14 -j TEE --gateway 10.0.0.2 -A limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-140 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-68 --A limit-140 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-662 --A limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-663 --A limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-664 --A limit-1403 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-665 --A limit-1404 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-666 --A limit-1405 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-667 --A limit-1405 -m limit --limit 1/second -j LOG --A limit-1406 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-668 --A limit-1407 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-669 --A limit-1408 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-670 --A limit-1409 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-671 --A limit-1409 -m limit --limit 12/minute -j ULOG --A limit-141 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-69 --A limit-141 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1410 -m recent --name limit-1410 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1410 -m recent --name limit-1410 --rsource --mask 255.255.255.255 --set --A limit-1411 -m recent --name limit-1411 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1411 -m recent --name limit-1411 --rsource --mask 255.255.255.255 --set --A limit-1412 -m recent --name limit-1412 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1412 -m recent --name limit-1412 --rsource --mask 255.255.255.255 --set --A limit-1413 -m recent --name limit-1413 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1413 -m recent --name limit-1413 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1414 -m recent --name limit-1414 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1414 -m recent --name limit-1414 --rsource --mask 255.255.255.255 --set --A limit-1415 -m recent --name limit-1415 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1415 -m recent --name limit-1415 --rsource --mask 255.255.255.255 --set --A limit-1416 -m recent --name limit-1416 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1416 -m recent --name limit-1416 --rsource --mask 255.255.255.255 --set --A limit-1417 -m recent --name limit-1417 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1417 -m recent --name limit-1417 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1418 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1418 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1419 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1419 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-142 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-70 --A limit-142 -m limit --limit 12/minute -j ULOG --A limit-142 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1420 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1420 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1421 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1421 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1422 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1422 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1423 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1423 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1424 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1425 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1426 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1427 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1428 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1429 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-140 -j ACCEPT +-A limit-1400 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-794 +-A limit-1400 -j TEE --gateway 10.0.0.1 +-A limit-1400 -j TEE --gateway 10.0.0.2 +-A limit-1400 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-795 +-A limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1402 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-796 +-A limit-1402 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1403 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-797 +-A limit-1403 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1404 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-798 +-A limit-1404 -m limit --limit 12/minute -j ULOG +-A limit-1404 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1405 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-799 +-A limit-1405 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1406 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-800 +-A limit-1406 -j ACCEPT +-A limit-1408 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-802 +-A limit-1408 -m limit --limit 1/second -j LOG +-A limit-1408 -j ACCEPT +-A limit-1409 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-803 +-A limit-1409 -m limit --limit 1/second -j LOG +-A limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-1410 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-804 +-A limit-1410 -j TEE --gateway 10.0.0.1 +-A limit-1410 -j TEE --gateway 10.0.0.2 +-A limit-1410 -j ACCEPT +-A limit-1411 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-805 +-A limit-1411 -j TEE --gateway 10.0.0.1 +-A limit-1411 -j TEE --gateway 10.0.0.2 +-A limit-1412 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-806 +-A limit-1412 -j ACCEPT +-A limit-1414 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-808 +-A limit-1414 -m limit --limit 12/minute -j ULOG +-A limit-1414 -j ACCEPT +-A limit-1415 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-809 +-A limit-1415 -m limit --limit 12/minute -j ULOG +-A limit-1416 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-810 +-A limit-1416 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1417 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-811 +-A limit-1417 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1418 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-812 +-A limit-1418 -m limit --limit 1/second -j LOG +-A limit-1418 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1419 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-813 +-A limit-1419 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-142 -m limit --limit 1/second -j LOG +-A limit-142 -j ACCEPT +-A limit-1420 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-814 +-A limit-1420 -j TEE --gateway 10.0.0.1 +-A limit-1420 -j TEE --gateway 10.0.0.2 +-A limit-1420 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-815 +-A limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1422 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-816 +-A limit-1422 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1423 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-817 +-A limit-1423 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1424 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-818 +-A limit-1424 -m limit --limit 12/minute -j ULOG +-A limit-1424 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1425 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-819 +-A limit-1425 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1426 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-820 +-A limit-1426 -j ACCEPT +-A limit-1428 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-822 +-A limit-1428 -m limit --limit 1/second -j LOG +-A limit-1428 -j ACCEPT +-A limit-1429 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-823 -A limit-1429 -m limit --limit 1/second -j LOG --A limit-143 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-71 --A limit-143 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1431 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1433 -m limit --limit 12/minute -j ULOG --A limit-1434 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1434 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1435 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1435 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1436 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1437 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1438 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1439 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-144 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-72 +-A limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-143 -m limit --limit 1/second -j LOG +-A limit-1430 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-824 +-A limit-1430 -j TEE --gateway 10.0.0.1 +-A limit-1430 -j TEE --gateway 10.0.0.2 +-A limit-1430 -j ACCEPT +-A limit-1431 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-825 +-A limit-1431 -j TEE --gateway 10.0.0.1 +-A limit-1431 -j TEE --gateway 10.0.0.2 +-A limit-1432 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-826 +-A limit-1432 -j ACCEPT +-A limit-1434 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-828 +-A limit-1434 -m limit --limit 12/minute -j ULOG +-A limit-1434 -j ACCEPT +-A limit-1435 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-829 +-A limit-1435 -m limit --limit 12/minute -j ULOG +-A limit-1436 -m recent --name limit-1436 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1436 -m recent --name limit-1436 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1437 -m recent --name limit-1437 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1437 -m recent --name limit-1437 --rsource --mask 255.255.255.255 --set +-A limit-1438 -m recent --name limit-1438 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1438 -m limit --limit 1/second -j LOG +-A limit-1438 -m recent --name limit-1438 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1439 -m recent --name limit-1439 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1439 -m recent --name limit-1439 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-144 -j TEE --gateway 10.0.0.1 +-A limit-144 -j TEE --gateway 10.0.0.2 -A limit-144 -j ACCEPT --A limit-1440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1440 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1441 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1443 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1445 -m limit --limit 1/second -j LOG --A limit-1446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1447 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1448 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1449 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1449 -m limit --limit 12/minute -j ULOG --A limit-145 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-73 --A limit-1450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1450 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1451 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1452 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1453 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1454 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1454 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1455 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1455 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1456 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1456 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1457 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1457 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1459 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-146 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-74 --A limit-146 -m limit --limit 1/second -j LOG +-A limit-1440 -m recent --name limit-1440 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1440 -j TEE --gateway 10.0.0.1 +-A limit-1440 -j TEE --gateway 10.0.0.2 +-A limit-1440 -m recent --name limit-1440 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1442 -m recent --name limit-1442 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1442 -m recent --name limit-1442 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1443 -m recent --name limit-1443 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1443 -m recent --name limit-1443 --rsource --mask 255.255.255.255 --set +-A limit-1444 -m recent --name limit-1444 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1444 -m limit --limit 12/minute -j ULOG +-A limit-1444 -m recent --name limit-1444 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1445 -m recent --name limit-1445 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1445 -m recent --name limit-1445 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1446 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1446 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1447 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1447 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1448 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1448 -m limit --limit 1/second -j LOG +-A limit-1448 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1449 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1449 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-145 -j TEE --gateway 10.0.0.1 +-A limit-145 -j TEE --gateway 10.0.0.2 +-A limit-1450 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1450 -j TEE --gateway 10.0.0.1 +-A limit-1450 -j TEE --gateway 10.0.0.2 +-A limit-1450 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1452 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1452 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1453 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1453 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1454 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1454 -m limit --limit 12/minute -j ULOG +-A limit-1454 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1455 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1455 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1456 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1456 -j ACCEPT +-A limit-1458 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1458 -m limit --limit 1/second -j LOG +-A limit-1458 -j ACCEPT +-A limit-1459 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1459 -m limit --limit 1/second -j LOG +-A limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A limit-146 -j ACCEPT --A limit-1460 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1461 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1461 -m limit --limit 1/second -j LOG --A limit-1462 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1463 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1464 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1465 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1460 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1460 -j TEE --gateway 10.0.0.1 +-A limit-1460 -j TEE --gateway 10.0.0.2 +-A limit-1460 -j ACCEPT +-A limit-1461 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1461 -j TEE --gateway 10.0.0.1 +-A limit-1461 -j TEE --gateway 10.0.0.2 +-A limit-1462 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1462 -j ACCEPT +-A limit-1464 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1464 -m limit --limit 12/minute -j ULOG +-A limit-1464 -j ACCEPT +-A limit-1465 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1465 -m limit --limit 12/minute -j ULOG --A limit-1466 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1466 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1467 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1467 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1468 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1468 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1469 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1469 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-147 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-75 --A limit-147 -m limit --limit 1/second -j LOG --A limit-1470 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1470 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1471 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1471 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1472 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1472 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1473 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1473 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1474 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1475 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1476 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1477 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1477 -m limit --limit 1/second -j LOG --A limit-1478 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1479 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-148 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-76 +-A limit-1466 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1466 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1467 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1467 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1468 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1468 -m limit --limit 1/second -j LOG +-A limit-1468 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1469 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1469 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-1470 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1470 -j TEE --gateway 10.0.0.1 +-A limit-1470 -j TEE --gateway 10.0.0.2 +-A limit-1470 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1472 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1472 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1473 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1473 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1474 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1474 -m limit --limit 12/minute -j ULOG +-A limit-1474 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1475 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1475 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1476 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1476 -j ACCEPT +-A limit-1478 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1478 -m limit --limit 1/second -j LOG +-A limit-1478 -j ACCEPT +-A limit-1479 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1479 -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-148 -m limit --limit 12/minute -j ULOG -A limit-148 -j ACCEPT --A limit-1480 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1481 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1481 -m limit --limit 12/minute -j ULOG --A limit-1482 -m recent --name limit-1482 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-672 --A limit-1482 -m recent --name limit-1482 --rsource --mask 255.255.255.255 --set --A limit-1483 -m recent --name limit-1483 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-673 --A limit-1483 -m recent --name limit-1483 --rsource --mask 255.255.255.255 --set --A limit-1484 -m recent --name limit-1484 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-674 --A limit-1484 -m recent --name limit-1484 --rsource --mask 255.255.255.255 --set --A limit-1485 -m recent --name limit-1485 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-675 --A limit-1485 -m recent --name limit-1485 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1486 -m recent --name limit-1486 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-676 --A limit-1486 -m recent --name limit-1486 --rsource --mask 255.255.255.255 --set --A limit-1487 -m recent --name limit-1487 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-677 --A limit-1487 -m recent --name limit-1487 --rsource --mask 255.255.255.255 --set --A limit-1488 -m recent --name limit-1488 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-678 --A limit-1488 -m recent --name limit-1488 --rsource --mask 255.255.255.255 --set --A limit-1489 -m recent --name limit-1489 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-679 --A limit-1489 -m recent --name limit-1489 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-149 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-77 --A limit-1490 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-680 --A limit-1490 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1491 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-681 --A limit-1491 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1492 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-682 --A limit-1492 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1493 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-683 --A limit-1493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1494 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-684 --A limit-1494 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1495 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-685 --A limit-1495 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1496 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-686 --A limit-1496 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1497 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-687 --A limit-1497 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1498 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-688 --A limit-1499 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-689 +-A limit-1480 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1480 -j TEE --gateway 10.0.0.1 +-A limit-1480 -j TEE --gateway 10.0.0.2 +-A limit-1480 -j ACCEPT +-A limit-1481 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1481 -j TEE --gateway 10.0.0.1 +-A limit-1481 -j TEE --gateway 10.0.0.2 +-A limit-1482 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1482 -j ACCEPT +-A limit-1484 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1484 -m limit --limit 12/minute -j ULOG +-A limit-1484 -j ACCEPT +-A limit-1485 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1485 -m limit --limit 12/minute -j ULOG +-A limit-1486 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1486 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1487 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1487 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1488 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1488 -m limit --limit 1/second -j LOG +-A limit-1488 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1489 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1489 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-149 -m limit --limit 12/minute -j ULOG +-A limit-1490 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1490 -j TEE --gateway 10.0.0.1 +-A limit-1490 -j TEE --gateway 10.0.0.2 +-A limit-1490 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1492 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1492 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1493 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1493 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1494 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1494 -m limit --limit 12/minute -j ULOG +-A limit-1494 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1495 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1495 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1496 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1496 -j ACCEPT +-A limit-1498 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1498 -m limit --limit 1/second -j LOG +-A limit-1498 -j ACCEPT +-A limit-1499 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1499 -m limit --limit 1/second -j LOG -A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-150 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-78 --A limit-150 -m limit --limit 12/minute -j ULOG --A limit-150 -j ACCEPT --A limit-1500 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-690 --A limit-1501 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-691 --A limit-1501 -m limit --limit 1/second -j LOG --A limit-1502 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-692 --A limit-1503 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-693 --A limit-1504 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-694 --A limit-1505 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-695 +-A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-60 +-A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1500 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1500 -j TEE --gateway 10.0.0.1 +-A limit-1500 -j TEE --gateway 10.0.0.2 +-A limit-1500 -j ACCEPT +-A limit-1501 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1501 -j TEE --gateway 10.0.0.1 +-A limit-1501 -j TEE --gateway 10.0.0.2 +-A limit-1502 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1502 -j ACCEPT +-A limit-1504 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1504 -m limit --limit 12/minute -j ULOG +-A limit-1504 -j ACCEPT +-A limit-1505 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1505 -m limit --limit 12/minute -j ULOG --A limit-1506 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-696 --A limit-1506 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1507 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-697 --A limit-1507 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1508 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-698 --A limit-1508 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1509 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-699 --A limit-1509 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-151 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-79 --A limit-151 -m limit --limit 12/minute -j ULOG --A limit-1510 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-700 --A limit-1510 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1511 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-701 --A limit-1511 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-702 --A limit-1512 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-703 --A limit-1513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1514 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-704 --A limit-1515 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-705 --A limit-1516 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-706 --A limit-1517 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-707 --A limit-1517 -m limit --limit 1/second -j LOG --A limit-1518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-708 --A limit-1519 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-709 --A limit-152 -m recent --name limit-152 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-152 -m recent --name limit-152 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-710 --A limit-1521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-711 --A limit-1521 -m limit --limit 12/minute -j ULOG --A limit-1522 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-712 --A limit-1522 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1523 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-713 --A limit-1523 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1524 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-714 --A limit-1524 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1525 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-715 --A limit-1525 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1526 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-716 --A limit-1526 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1527 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-717 --A limit-1527 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1528 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-718 --A limit-1528 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1529 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-719 --A limit-1529 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-153 -m recent --name limit-153 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-153 -m recent --name limit-153 --rsource --mask 255.255.255.255 --set --A limit-1530 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-720 --A limit-1531 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-721 --A limit-1532 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-722 --A limit-1533 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-723 --A limit-1533 -m limit --limit 1/second -j LOG --A limit-1534 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-724 --A limit-1535 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-725 --A limit-1536 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-726 --A limit-1537 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-727 --A limit-1537 -m limit --limit 12/minute -j ULOG --A limit-1538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-728 --A limit-1538 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-729 --A limit-1539 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-154 -m recent --name limit-154 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-154 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name limit-154 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1540 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-730 --A limit-1540 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1541 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-731 --A limit-1541 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1542 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-732 --A limit-1542 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1543 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-733 --A limit-1543 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1544 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-734 --A limit-1544 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1545 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-735 --A limit-1545 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-736 --A limit-1547 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-737 --A limit-1548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-738 --A limit-1549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-739 +-A limit-1506 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1506 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1507 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1507 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1508 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1508 -m limit --limit 1/second -j LOG +-A limit-1508 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1509 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1509 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-61 +-A limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1510 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1510 -j TEE --gateway 10.0.0.1 +-A limit-1510 -j TEE --gateway 10.0.0.2 +-A limit-1510 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1512 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1512 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1513 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1513 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1514 -m limit --limit 12/minute -j ULOG +-A limit-1514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1515 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1516 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1516 -j ACCEPT +-A limit-1518 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1518 -m limit --limit 1/second -j LOG +-A limit-1518 -j ACCEPT +-A limit-1519 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1519 -m limit --limit 1/second -j LOG +-A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-62 +-A limit-152 -m limit --limit 1/second -j LOG +-A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1520 -j TEE --gateway 10.0.0.1 +-A limit-1520 -j TEE --gateway 10.0.0.2 +-A limit-1520 -j ACCEPT +-A limit-1521 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1521 -j TEE --gateway 10.0.0.1 +-A limit-1521 -j TEE --gateway 10.0.0.2 +-A limit-1522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1522 -j ACCEPT +-A limit-1524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1524 -m limit --limit 12/minute -j ULOG +-A limit-1524 -j ACCEPT +-A limit-1525 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1525 -m limit --limit 12/minute -j ULOG +-A limit-1526 -m recent --name limit-1526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-830 +-A limit-1526 -m recent --name limit-1526 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1527 -m recent --name limit-1527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-831 +-A limit-1527 -m recent --name limit-1527 --rsource --mask 255.255.255.255 --set +-A limit-1528 -m recent --name limit-1528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-832 +-A limit-1528 -m limit --limit 1/second -j LOG +-A limit-1528 -m recent --name limit-1528 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1529 -m recent --name limit-1529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-833 +-A limit-1529 -m recent --name limit-1529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-63 +-A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1530 -m recent --name limit-1530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-834 +-A limit-1530 -j TEE --gateway 10.0.0.1 +-A limit-1530 -j TEE --gateway 10.0.0.2 +-A limit-1530 -m recent --name limit-1530 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-835 +-A limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1532 -m recent --name limit-1532 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-836 +-A limit-1532 -m recent --name limit-1532 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1533 -m recent --name limit-1533 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-837 +-A limit-1533 -m recent --name limit-1533 --rsource --mask 255.255.255.255 --set +-A limit-1534 -m recent --name limit-1534 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-838 +-A limit-1534 -m limit --limit 12/minute -j ULOG +-A limit-1534 -m recent --name limit-1534 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1535 -m recent --name limit-1535 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-839 +-A limit-1535 -m recent --name limit-1535 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-840 +-A limit-1536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-841 +-A limit-1537 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1538 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-842 +-A limit-1538 -m limit --limit 1/second -j LOG +-A limit-1538 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1539 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-843 +-A limit-1539 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-64 +-A limit-154 -j TEE --gateway 10.0.0.1 +-A limit-154 -j TEE --gateway 10.0.0.2 +-A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1540 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-844 +-A limit-1540 -j TEE --gateway 10.0.0.1 +-A limit-1540 -j TEE --gateway 10.0.0.2 +-A limit-1540 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-845 +-A limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1542 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-846 +-A limit-1542 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1543 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-847 +-A limit-1543 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1544 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-848 +-A limit-1544 -m limit --limit 12/minute -j ULOG +-A limit-1544 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1545 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-849 +-A limit-1545 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1546 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-850 +-A limit-1546 -j ACCEPT +-A limit-1548 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-852 +-A limit-1548 -m limit --limit 1/second -j LOG +-A limit-1548 -j ACCEPT +-A limit-1549 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-853 -A limit-1549 -m limit --limit 1/second -j LOG --A limit-155 -m recent --name limit-155 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-155 -m recent --name limit-155 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1550 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-740 --A limit-1551 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-741 --A limit-1552 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-742 --A limit-1553 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-743 --A limit-1553 -m limit --limit 12/minute -j ULOG --A limit-1554 -m recent --name limit-1554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1554 -m recent --name limit-1554 --rsource --mask 255.255.255.255 --set --A limit-1555 -m recent --name limit-1555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1555 -m recent --name limit-1555 --rsource --mask 255.255.255.255 --set --A limit-1556 -m recent --name limit-1556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1556 -m recent --name limit-1556 --rsource --mask 255.255.255.255 --set --A limit-1557 -m recent --name limit-1557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1557 -m recent --name limit-1557 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1558 -m recent --name limit-1558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1558 -m recent --name limit-1558 --rsource --mask 255.255.255.255 --set --A limit-1559 -m recent --name limit-1559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1559 -m recent --name limit-1559 --rsource --mask 255.255.255.255 --set --A limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1560 -m recent --name limit-1560 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1560 -m recent --name limit-1560 --rsource --mask 255.255.255.255 --set --A limit-1561 -m recent --name limit-1561 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1561 -m recent --name limit-1561 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1562 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1563 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1564 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1566 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1567 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1568 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --set --A limit-1570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1571 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1573 -m limit --limit 1/second -j LOG --A limit-1574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1577 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1577 -m limit --limit 12/minute -j ULOG --A limit-1578 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1578 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1579 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1579 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-65 +-A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1550 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-854 +-A limit-1550 -j TEE --gateway 10.0.0.1 +-A limit-1550 -j TEE --gateway 10.0.0.2 +-A limit-1550 -j ACCEPT +-A limit-1551 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-855 +-A limit-1551 -j TEE --gateway 10.0.0.1 +-A limit-1551 -j TEE --gateway 10.0.0.2 +-A limit-1552 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-856 +-A limit-1552 -j ACCEPT +-A limit-1554 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-858 +-A limit-1554 -m limit --limit 12/minute -j ULOG +-A limit-1554 -j ACCEPT +-A limit-1555 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-859 +-A limit-1555 -m limit --limit 12/minute -j ULOG +-A limit-1556 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-860 +-A limit-1556 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1557 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-861 +-A limit-1557 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1558 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-862 +-A limit-1558 -m limit --limit 1/second -j LOG +-A limit-1558 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1559 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-863 +-A limit-1559 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-66 +-A limit-156 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1560 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-864 +-A limit-1560 -j TEE --gateway 10.0.0.1 +-A limit-1560 -j TEE --gateway 10.0.0.2 +-A limit-1560 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-865 +-A limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1562 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-866 +-A limit-1562 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1563 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-867 +-A limit-1563 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1564 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-868 +-A limit-1564 -m limit --limit 12/minute -j ULOG +-A limit-1564 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1565 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-869 +-A limit-1565 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1566 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-870 +-A limit-1566 -j ACCEPT +-A limit-1568 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-872 +-A limit-1568 -m limit --limit 1/second -j LOG +-A limit-1568 -j ACCEPT +-A limit-1569 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-873 +-A limit-1569 -m limit --limit 1/second -j LOG +-A limit-157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-67 +-A limit-157 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1570 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-874 +-A limit-1570 -j TEE --gateway 10.0.0.1 +-A limit-1570 -j TEE --gateway 10.0.0.2 +-A limit-1570 -j ACCEPT +-A limit-1571 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-875 +-A limit-1571 -j TEE --gateway 10.0.0.1 +-A limit-1571 -j TEE --gateway 10.0.0.2 +-A limit-1572 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-876 +-A limit-1572 -j ACCEPT +-A limit-1574 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-878 +-A limit-1574 -m limit --limit 12/minute -j ULOG +-A limit-1574 -j ACCEPT +-A limit-1575 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-879 +-A limit-1575 -m limit --limit 12/minute -j ULOG +-A limit-1576 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-880 +-A limit-1576 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1577 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-881 +-A limit-1577 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1578 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-882 +-A limit-1578 -m limit --limit 1/second -j LOG +-A limit-1578 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1579 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-883 +-A limit-1579 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-68 -A limit-158 -m limit --limit 12/minute -j ULOG --A limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1580 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1581 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1582 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1583 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1584 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1586 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1587 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1588 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1589 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1580 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-884 +-A limit-1580 -j TEE --gateway 10.0.0.1 +-A limit-1580 -j TEE --gateway 10.0.0.2 +-A limit-1580 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-885 +-A limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1582 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-886 +-A limit-1582 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1583 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-887 +-A limit-1583 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1584 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-888 +-A limit-1584 -m limit --limit 12/minute -j ULOG +-A limit-1584 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1585 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-889 +-A limit-1585 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1586 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-890 +-A limit-1586 -j ACCEPT +-A limit-1588 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-892 +-A limit-1588 -m limit --limit 1/second -j LOG +-A limit-1588 -j ACCEPT +-A limit-1589 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-893 -A limit-1589 -m limit --limit 1/second -j LOG --A limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1591 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1593 -m limit --limit 12/minute -j ULOG --A limit-1594 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1594 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1595 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1595 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1596 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1596 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1597 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1597 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1598 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1598 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1599 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1599 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-160 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-160 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1600 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1601 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1602 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1603 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1604 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1605 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1605 -m limit --limit 1/second -j LOG --A limit-1606 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1607 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1608 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1609 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1609 -m limit --limit 12/minute -j ULOG --A limit-161 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-161 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1610 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1610 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1611 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1611 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1612 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1612 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1613 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1613 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1614 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1614 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1615 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1615 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1616 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1616 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1617 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1617 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1618 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1619 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-159 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-69 +-A limit-159 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1590 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-894 +-A limit-1590 -j TEE --gateway 10.0.0.1 +-A limit-1590 -j TEE --gateway 10.0.0.2 +-A limit-1590 -j ACCEPT +-A limit-1591 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-895 +-A limit-1591 -j TEE --gateway 10.0.0.1 +-A limit-1591 -j TEE --gateway 10.0.0.2 +-A limit-1592 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-896 +-A limit-1592 -j ACCEPT +-A limit-1594 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-898 +-A limit-1594 -m limit --limit 12/minute -j ULOG +-A limit-1594 -j ACCEPT +-A limit-1595 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-899 +-A limit-1595 -m limit --limit 12/minute -j ULOG +-A limit-1596 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-900 +-A limit-1596 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1597 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-901 +-A limit-1597 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1598 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-902 +-A limit-1598 -m limit --limit 1/second -j LOG +-A limit-1598 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1599 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-903 +-A limit-1599 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-16 -m recent --name limit-16 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-16 -m recent --name limit-16 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-160 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-70 +-A limit-160 -j ACCEPT +-A limit-1600 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-904 +-A limit-1600 -j TEE --gateway 10.0.0.1 +-A limit-1600 -j TEE --gateway 10.0.0.2 +-A limit-1600 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-905 +-A limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1602 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-906 +-A limit-1602 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1603 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-907 +-A limit-1603 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1604 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-908 +-A limit-1604 -m limit --limit 12/minute -j ULOG +-A limit-1604 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1605 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-909 +-A limit-1605 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1606 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-910 +-A limit-1606 -j ACCEPT +-A limit-1608 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-912 +-A limit-1608 -m limit --limit 1/second -j LOG +-A limit-1608 -j ACCEPT +-A limit-1609 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-913 +-A limit-1609 -m limit --limit 1/second -j LOG +-A limit-161 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-71 +-A limit-1610 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-914 +-A limit-1610 -j TEE --gateway 10.0.0.1 +-A limit-1610 -j TEE --gateway 10.0.0.2 +-A limit-1610 -j ACCEPT +-A limit-1611 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-915 +-A limit-1611 -j TEE --gateway 10.0.0.1 +-A limit-1611 -j TEE --gateway 10.0.0.2 +-A limit-1612 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-916 +-A limit-1612 -j ACCEPT +-A limit-1614 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-918 +-A limit-1614 -m limit --limit 12/minute -j ULOG +-A limit-1614 -j ACCEPT +-A limit-1615 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-919 +-A limit-1615 -m limit --limit 12/minute -j ULOG +-A limit-1616 -m recent --name limit-1616 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-920 +-A limit-1616 -m recent --name limit-1616 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1617 -m recent --name limit-1617 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-921 +-A limit-1617 -m recent --name limit-1617 --rsource --mask 255.255.255.255 --set +-A limit-1618 -m recent --name limit-1618 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-922 +-A limit-1618 -m limit --limit 1/second -j LOG +-A limit-1618 -m recent --name limit-1618 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1619 -m recent --name limit-1619 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-923 +-A limit-1619 -m recent --name limit-1619 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-72 -A limit-162 -m limit --limit 1/second -j LOG --A limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1620 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1621 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1621 -m limit --limit 1/second -j LOG --A limit-1622 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1623 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1624 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1625 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1625 -m limit --limit 12/minute -j ULOG --A limit-1626 -m recent --name limit-1626 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-744 --A limit-1626 -m recent --name limit-1626 --rsource --mask 255.255.255.255 --set --A limit-1627 -m recent --name limit-1627 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-745 --A limit-1627 -m recent --name limit-1627 --rsource --mask 255.255.255.255 --set --A limit-1628 -m recent --name limit-1628 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-746 --A limit-1628 -m recent --name limit-1628 --rsource --mask 255.255.255.255 --set --A limit-1629 -m recent --name limit-1629 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-747 --A limit-1629 -m recent --name limit-1629 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1630 -m recent --name limit-1630 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-748 --A limit-1630 -m recent --name limit-1630 --rsource --mask 255.255.255.255 --set --A limit-1631 -m recent --name limit-1631 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-749 --A limit-1631 -m recent --name limit-1631 --rsource --mask 255.255.255.255 --set --A limit-1632 -m recent --name limit-1632 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-750 --A limit-1632 -m recent --name limit-1632 --rsource --mask 255.255.255.255 --set --A limit-1633 -m recent --name limit-1633 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-751 --A limit-1633 -m recent --name limit-1633 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-752 --A limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-753 --A limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1636 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-754 --A limit-1636 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1637 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-755 --A limit-1637 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1638 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-756 --A limit-1638 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1639 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-757 --A limit-1639 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-758 --A limit-1640 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-759 --A limit-1641 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1642 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-760 --A limit-1643 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-761 --A limit-1644 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-762 --A limit-1645 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-763 --A limit-1645 -m limit --limit 1/second -j LOG --A limit-1646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-764 --A limit-1647 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-765 --A limit-1648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-766 --A limit-1649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-767 --A limit-1649 -m limit --limit 12/minute -j ULOG --A limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-768 --A limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-769 --A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-770 --A limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-771 --A limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-772 --A limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-773 --A limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-774 --A limit-1656 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-775 --A limit-1657 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-776 --A limit-1659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-777 --A limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-166 -m limit --limit 12/minute -j ULOG --A limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-778 --A limit-1661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-779 --A limit-1661 -m limit --limit 1/second -j LOG --A limit-1662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-780 --A limit-1663 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-781 --A limit-1664 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-782 --A limit-1665 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-783 +-A limit-162 -j ACCEPT +-A limit-1620 -m recent --name limit-1620 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-924 +-A limit-1620 -j TEE --gateway 10.0.0.1 +-A limit-1620 -j TEE --gateway 10.0.0.2 +-A limit-1620 -m recent --name limit-1620 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-925 +-A limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1622 -m recent --name limit-1622 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-926 +-A limit-1622 -m recent --name limit-1622 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1623 -m recent --name limit-1623 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-927 +-A limit-1623 -m recent --name limit-1623 --rsource --mask 255.255.255.255 --set +-A limit-1624 -m recent --name limit-1624 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-928 +-A limit-1624 -m limit --limit 12/minute -j ULOG +-A limit-1624 -m recent --name limit-1624 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1625 -m recent --name limit-1625 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-929 +-A limit-1625 -m recent --name limit-1625 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1626 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-930 +-A limit-1626 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1627 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-931 +-A limit-1627 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1628 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-932 +-A limit-1628 -m limit --limit 1/second -j LOG +-A limit-1628 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1629 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-933 +-A limit-1629 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-73 +-A limit-163 -m limit --limit 1/second -j LOG +-A limit-1630 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-934 +-A limit-1630 -j TEE --gateway 10.0.0.1 +-A limit-1630 -j TEE --gateway 10.0.0.2 +-A limit-1630 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-935 +-A limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1632 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-936 +-A limit-1632 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1633 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-937 +-A limit-1633 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-938 +-A limit-1634 -m limit --limit 12/minute -j ULOG +-A limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-939 +-A limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1636 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-940 +-A limit-1636 -j ACCEPT +-A limit-1638 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-942 +-A limit-1638 -m limit --limit 1/second -j LOG +-A limit-1638 -j ACCEPT +-A limit-1639 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-943 +-A limit-1639 -m limit --limit 1/second -j LOG +-A limit-164 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-74 +-A limit-164 -j TEE --gateway 10.0.0.1 +-A limit-164 -j TEE --gateway 10.0.0.2 +-A limit-164 -j ACCEPT +-A limit-1640 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-944 +-A limit-1640 -j TEE --gateway 10.0.0.1 +-A limit-1640 -j TEE --gateway 10.0.0.2 +-A limit-1640 -j ACCEPT +-A limit-1641 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-945 +-A limit-1641 -j TEE --gateway 10.0.0.1 +-A limit-1641 -j TEE --gateway 10.0.0.2 +-A limit-1642 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-946 +-A limit-1642 -j ACCEPT +-A limit-1644 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-948 +-A limit-1644 -m limit --limit 12/minute -j ULOG +-A limit-1644 -j ACCEPT +-A limit-1645 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-949 +-A limit-1645 -m limit --limit 12/minute -j ULOG +-A limit-1646 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-950 +-A limit-1646 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1647 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-951 +-A limit-1647 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1648 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-952 +-A limit-1648 -m limit --limit 1/second -j LOG +-A limit-1648 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1649 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-953 +-A limit-1649 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-75 +-A limit-165 -j TEE --gateway 10.0.0.1 +-A limit-165 -j TEE --gateway 10.0.0.2 +-A limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-954 +-A limit-1650 -j TEE --gateway 10.0.0.1 +-A limit-1650 -j TEE --gateway 10.0.0.2 +-A limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-955 +-A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-956 +-A limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-957 +-A limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-958 +-A limit-1654 -m limit --limit 12/minute -j ULOG +-A limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-959 +-A limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1656 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-960 +-A limit-1656 -j ACCEPT +-A limit-1658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-962 +-A limit-1658 -m limit --limit 1/second -j LOG +-A limit-1658 -j ACCEPT +-A limit-1659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-963 +-A limit-1659 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-76 +-A limit-166 -j ACCEPT +-A limit-1660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-964 +-A limit-1660 -j TEE --gateway 10.0.0.1 +-A limit-1660 -j TEE --gateway 10.0.0.2 +-A limit-1660 -j ACCEPT +-A limit-1661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-965 +-A limit-1661 -j TEE --gateway 10.0.0.1 +-A limit-1661 -j TEE --gateway 10.0.0.2 +-A limit-1662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-966 +-A limit-1662 -j ACCEPT +-A limit-1664 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-968 +-A limit-1664 -m limit --limit 12/minute -j ULOG +-A limit-1664 -j ACCEPT +-A limit-1665 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-969 -A limit-1665 -m limit --limit 12/minute -j ULOG --A limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-784 --A limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-785 +-A limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-970 +-A limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-971 -A limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-786 --A limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-787 +-A limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-972 +-A limit-1668 -m limit --limit 1/second -j LOG +-A limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-973 -A limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-788 --A limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-789 --A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-790 --A limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-791 --A limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-792 --A limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-793 --A limit-1676 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-794 --A limit-1677 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-795 --A limit-1677 -m limit --limit 1/second -j LOG --A limit-1678 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-796 --A limit-1679 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-797 --A limit-168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-167 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-77 +-A limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-974 +-A limit-1670 -j TEE --gateway 10.0.0.1 +-A limit-1670 -j TEE --gateway 10.0.0.2 +-A limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-975 +-A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-976 +-A limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-977 +-A limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-978 +-A limit-1674 -m limit --limit 12/minute -j ULOG +-A limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-979 +-A limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1676 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-980 +-A limit-1676 -j ACCEPT +-A limit-1678 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-982 +-A limit-1678 -m limit --limit 1/second -j LOG +-A limit-1678 -j ACCEPT +-A limit-1679 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-983 +-A limit-1679 -m limit --limit 1/second -j LOG +-A limit-168 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-78 +-A limit-168 -m limit --limit 12/minute -j ULOG -A limit-168 -j ACCEPT --A limit-1680 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-798 --A limit-1681 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-799 --A limit-1681 -m limit --limit 12/minute -j ULOG --A limit-1682 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-800 --A limit-1682 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1683 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-801 --A limit-1683 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1684 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-802 --A limit-1684 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1685 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-803 --A limit-1685 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-804 --A limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-805 +-A limit-1680 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-984 +-A limit-1680 -j TEE --gateway 10.0.0.1 +-A limit-1680 -j TEE --gateway 10.0.0.2 +-A limit-1680 -j ACCEPT +-A limit-1681 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-985 +-A limit-1681 -j TEE --gateway 10.0.0.1 +-A limit-1681 -j TEE --gateway 10.0.0.2 +-A limit-1682 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-986 +-A limit-1682 -j ACCEPT +-A limit-1684 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-988 +-A limit-1684 -m limit --limit 12/minute -j ULOG +-A limit-1684 -j ACCEPT +-A limit-1685 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-989 +-A limit-1685 -m limit --limit 12/minute -j ULOG +-A limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-990 +-A limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-991 -A limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-806 --A limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-807 --A limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-169 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-808 --A limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-809 --A limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-810 --A limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-811 --A limit-1693 -m limit --limit 1/second -j LOG --A limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-812 --A limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-813 --A limit-1696 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-814 --A limit-1697 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-815 --A limit-1697 -m limit --limit 12/minute -j ULOG --A limit-1698 -m recent --name limit-1698 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1698 -m recent --name limit-1698 --rsource --mask 255.255.255.255 --set --A limit-1699 -m recent --name limit-1699 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1699 -m recent --name limit-1699 --rsource --mask 255.255.255.255 --set --A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -j ACCEPT --A limit-1700 -m recent --name limit-1700 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1700 -m recent --name limit-1700 --rsource --mask 255.255.255.255 --set --A limit-1701 -m recent --name limit-1701 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1701 -m recent --name limit-1701 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1702 -m recent --name limit-1702 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1702 -m recent --name limit-1702 --rsource --mask 255.255.255.255 --set --A limit-1703 -m recent --name limit-1703 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1703 -m recent --name limit-1703 --rsource --mask 255.255.255.255 --set --A limit-1704 -m recent --name limit-1704 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1704 -m recent --name limit-1704 --rsource --mask 255.255.255.255 --set --A limit-1705 -m recent --name limit-1705 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1705 -m recent --name limit-1705 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1706 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1706 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1707 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1707 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1708 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1708 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1709 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1709 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-171 -m limit --limit 1/second -j LOG --A limit-1710 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1710 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1711 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1711 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1712 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1712 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1713 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1713 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1714 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1715 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1717 -m limit --limit 1/second -j LOG --A limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-172 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-172 -j ACCEPT --A limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1721 -m limit --limit 12/minute -j ULOG --A limit-1722 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1722 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1723 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1723 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1724 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1724 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1725 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1725 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1726 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1726 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1727 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1727 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1728 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1728 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1729 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1729 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-173 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1730 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1731 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1732 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1733 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1733 -m limit --limit 1/second -j LOG --A limit-1734 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1735 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1737 -m limit --limit 12/minute -j ULOG --A limit-1738 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1738 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1739 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1739 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-174 -m limit --limit 12/minute -j ULOG --A limit-174 -j ACCEPT --A limit-1740 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1740 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1741 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1741 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1742 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1742 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1743 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1743 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1744 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1744 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1745 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1745 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1746 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1747 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1748 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1749 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-992 +-A limit-1688 -m limit --limit 1/second -j LOG +-A limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-993 +-A limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-169 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-79 +-A limit-169 -m limit --limit 12/minute -j ULOG +-A limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-994 +-A limit-1690 -j TEE --gateway 10.0.0.1 +-A limit-1690 -j TEE --gateway 10.0.0.2 +-A limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-995 +-A limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-996 +-A limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-997 +-A limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-998 +-A limit-1694 -m limit --limit 12/minute -j ULOG +-A limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-999 +-A limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1696 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1000 +-A limit-1696 -j ACCEPT +-A limit-1698 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1002 +-A limit-1698 -m limit --limit 1/second -j LOG +-A limit-1698 -j ACCEPT +-A limit-1699 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1003 +-A limit-1699 -m limit --limit 1/second -j LOG +-A limit-17 -m recent --name limit-17 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-17 -m recent --name limit-17 --rsource --mask 255.255.255.255 --set +-A limit-170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-80 +-A limit-170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1700 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1004 +-A limit-1700 -j TEE --gateway 10.0.0.1 +-A limit-1700 -j TEE --gateway 10.0.0.2 +-A limit-1700 -j ACCEPT +-A limit-1701 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1005 +-A limit-1701 -j TEE --gateway 10.0.0.1 +-A limit-1701 -j TEE --gateway 10.0.0.2 +-A limit-1702 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1006 +-A limit-1702 -j ACCEPT +-A limit-1704 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1008 +-A limit-1704 -m limit --limit 12/minute -j ULOG +-A limit-1704 -j ACCEPT +-A limit-1705 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1009 +-A limit-1705 -m limit --limit 12/minute -j ULOG +-A limit-1706 -m recent --name limit-1706 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1706 -m recent --name limit-1706 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1707 -m recent --name limit-1707 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1707 -m recent --name limit-1707 --rsource --mask 255.255.255.255 --set +-A limit-1708 -m recent --name limit-1708 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1708 -m limit --limit 1/second -j LOG +-A limit-1708 -m recent --name limit-1708 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1709 -m recent --name limit-1709 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1709 -m recent --name limit-1709 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-81 +-A limit-171 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1710 -m recent --name limit-1710 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1710 -j TEE --gateway 10.0.0.1 +-A limit-1710 -j TEE --gateway 10.0.0.2 +-A limit-1710 -m recent --name limit-1710 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1712 -m recent --name limit-1712 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1712 -m recent --name limit-1712 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1713 -m recent --name limit-1713 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1713 -m recent --name limit-1713 --rsource --mask 255.255.255.255 --set +-A limit-1714 -m recent --name limit-1714 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1714 -m limit --limit 12/minute -j ULOG +-A limit-1714 -m recent --name limit-1714 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1715 -m recent --name limit-1715 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1715 -m recent --name limit-1715 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1718 -m limit --limit 1/second -j LOG +-A limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-82 +-A limit-172 -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1720 -j TEE --gateway 10.0.0.1 +-A limit-1720 -j TEE --gateway 10.0.0.2 +-A limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1722 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1722 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1723 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1723 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1724 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1724 -m limit --limit 12/minute -j ULOG +-A limit-1724 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1725 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1725 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1726 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1726 -j ACCEPT +-A limit-1728 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1728 -m limit --limit 1/second -j LOG +-A limit-1728 -j ACCEPT +-A limit-1729 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1729 -m limit --limit 1/second -j LOG +-A limit-173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-83 +-A limit-173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1730 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1730 -j TEE --gateway 10.0.0.1 +-A limit-1730 -j TEE --gateway 10.0.0.2 +-A limit-1730 -j ACCEPT +-A limit-1731 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1731 -j TEE --gateway 10.0.0.1 +-A limit-1731 -j TEE --gateway 10.0.0.2 +-A limit-1732 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1732 -j ACCEPT +-A limit-1734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1734 -m limit --limit 12/minute -j ULOG +-A limit-1734 -j ACCEPT +-A limit-1735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1735 -m limit --limit 12/minute -j ULOG +-A limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1738 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1738 -m limit --limit 1/second -j LOG +-A limit-1738 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1739 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1739 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-84 +-A limit-174 -j TEE --gateway 10.0.0.1 +-A limit-174 -j TEE --gateway 10.0.0.2 +-A limit-174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1740 -j TEE --gateway 10.0.0.1 +-A limit-1740 -j TEE --gateway 10.0.0.2 +-A limit-1740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1742 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1743 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1744 -m limit --limit 12/minute -j ULOG +-A limit-1744 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1745 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1746 -j ACCEPT +-A limit-1748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1748 -m limit --limit 1/second -j LOG +-A limit-1748 -j ACCEPT +-A limit-1749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1749 -m limit --limit 1/second -j LOG --A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-175 -m limit --limit 12/minute -j ULOG --A limit-1750 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1751 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1752 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1753 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1753 -m limit --limit 12/minute -j ULOG --A limit-1754 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1754 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1755 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1755 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1756 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1756 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1757 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1758 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1758 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1759 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1759 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1760 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1760 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1761 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1761 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1762 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1763 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1764 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1765 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1765 -m limit --limit 1/second -j LOG --A limit-1766 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1767 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1768 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1769 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1769 -m limit --limit 12/minute -j ULOG --A limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1770 -m recent --name limit-1770 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-816 --A limit-1770 -m recent --name limit-1770 --rsource --mask 255.255.255.255 --set --A limit-1771 -m recent --name limit-1771 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-817 --A limit-1771 -m recent --name limit-1771 --rsource --mask 255.255.255.255 --set --A limit-1772 -m recent --name limit-1772 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-818 --A limit-1772 -m recent --name limit-1772 --rsource --mask 255.255.255.255 --set --A limit-1773 -m recent --name limit-1773 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-819 --A limit-1773 -m recent --name limit-1773 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1774 -m recent --name limit-1774 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-820 --A limit-1774 -m recent --name limit-1774 --rsource --mask 255.255.255.255 --set --A limit-1775 -m recent --name limit-1775 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-821 --A limit-1775 -m recent --name limit-1775 --rsource --mask 255.255.255.255 --set --A limit-1776 -m recent --name limit-1776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-822 --A limit-1776 -m recent --name limit-1776 --rsource --mask 255.255.255.255 --set --A limit-1777 -m recent --name limit-1777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-823 --A limit-1777 -m recent --name limit-1777 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1778 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-824 --A limit-1778 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1779 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-825 --A limit-1779 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-178 -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1780 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-826 --A limit-1780 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1781 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-827 --A limit-1781 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-828 --A limit-1782 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-829 --A limit-1783 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-830 --A limit-1784 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-831 --A limit-1785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1786 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-832 --A limit-1787 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-833 --A limit-1788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-834 --A limit-1789 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-835 +-A limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-85 +-A limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1750 -j TEE --gateway 10.0.0.1 +-A limit-1750 -j TEE --gateway 10.0.0.2 +-A limit-1750 -j ACCEPT +-A limit-1751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1751 -j TEE --gateway 10.0.0.1 +-A limit-1751 -j TEE --gateway 10.0.0.2 +-A limit-1752 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1752 -j ACCEPT +-A limit-1754 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1754 -m limit --limit 12/minute -j ULOG +-A limit-1754 -j ACCEPT +-A limit-1755 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1755 -m limit --limit 12/minute -j ULOG +-A limit-1756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1757 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1758 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1758 -m limit --limit 1/second -j LOG +-A limit-1758 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1759 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1759 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-86 +-A limit-176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1760 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1760 -j TEE --gateway 10.0.0.1 +-A limit-1760 -j TEE --gateway 10.0.0.2 +-A limit-1760 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1762 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1762 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1763 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1763 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1764 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1764 -m limit --limit 12/minute -j ULOG +-A limit-1764 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1765 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1765 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1766 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1766 -j ACCEPT +-A limit-1768 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1768 -m limit --limit 1/second -j LOG +-A limit-1768 -j ACCEPT +-A limit-1769 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1769 -m limit --limit 1/second -j LOG +-A limit-177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-87 +-A limit-177 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1770 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1770 -j TEE --gateway 10.0.0.1 +-A limit-1770 -j TEE --gateway 10.0.0.2 +-A limit-1770 -j ACCEPT +-A limit-1771 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1771 -j TEE --gateway 10.0.0.1 +-A limit-1771 -j TEE --gateway 10.0.0.2 +-A limit-1772 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1772 -j ACCEPT +-A limit-1774 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1774 -m limit --limit 12/minute -j ULOG +-A limit-1774 -j ACCEPT +-A limit-1775 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1775 -m limit --limit 12/minute -j ULOG +-A limit-1776 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1776 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1777 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1777 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1778 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1778 -m limit --limit 1/second -j LOG +-A limit-1778 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1779 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1779 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-88 +-A limit-178 -m limit --limit 12/minute -j ULOG +-A limit-178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1780 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1780 -j TEE --gateway 10.0.0.1 +-A limit-1780 -j TEE --gateway 10.0.0.2 +-A limit-1780 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1782 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1782 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1783 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1783 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1784 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1784 -m limit --limit 12/minute -j ULOG +-A limit-1784 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1785 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1785 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1786 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1786 -j ACCEPT +-A limit-1788 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1788 -m limit --limit 1/second -j LOG +-A limit-1788 -j ACCEPT +-A limit-1789 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1789 -m limit --limit 1/second -j LOG --A limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-836 --A limit-1791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-837 --A limit-1792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-838 --A limit-1793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-839 --A limit-1793 -m limit --limit 12/minute -j ULOG --A limit-1794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-840 --A limit-1794 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-841 --A limit-1795 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-842 --A limit-1796 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-843 --A limit-1797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-844 --A limit-1798 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-845 --A limit-1799 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-18 -m limit --limit 1/second -j LOG --A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-180 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-180 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1800 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-846 --A limit-1800 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1801 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-847 --A limit-1801 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-848 --A limit-1803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-849 --A limit-1804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-850 --A limit-1805 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-851 --A limit-1805 -m limit --limit 1/second -j LOG --A limit-1806 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-852 --A limit-1807 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-853 --A limit-1808 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-854 --A limit-1809 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-855 --A limit-1809 -m limit --limit 12/minute -j ULOG --A limit-181 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-181 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-856 --A limit-1810 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-857 --A limit-1811 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1812 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-858 --A limit-1812 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1813 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-859 --A limit-1813 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1814 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-860 --A limit-1814 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1815 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-861 --A limit-1815 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1816 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-862 --A limit-1816 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1817 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-863 --A limit-1817 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1818 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-864 --A limit-1819 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-865 --A limit-182 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-182 -m limit --limit 12/minute -j ULOG --A limit-182 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1820 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-866 --A limit-1821 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-867 --A limit-1821 -m limit --limit 1/second -j LOG --A limit-1822 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-868 --A limit-1823 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-869 --A limit-1824 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-870 --A limit-1825 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-871 +-A limit-179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-89 +-A limit-179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1790 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1790 -j TEE --gateway 10.0.0.1 +-A limit-1790 -j TEE --gateway 10.0.0.2 +-A limit-1790 -j ACCEPT +-A limit-1791 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1791 -j TEE --gateway 10.0.0.1 +-A limit-1791 -j TEE --gateway 10.0.0.2 +-A limit-1792 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1792 -j ACCEPT +-A limit-1794 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1794 -m limit --limit 12/minute -j ULOG +-A limit-1794 -j ACCEPT +-A limit-1795 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1795 -m limit --limit 12/minute -j ULOG +-A limit-1796 -m recent --name limit-1796 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1010 +-A limit-1796 -m recent --name limit-1796 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1797 -m recent --name limit-1797 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1011 +-A limit-1797 -m recent --name limit-1797 --rsource --mask 255.255.255.255 --set +-A limit-1798 -m recent --name limit-1798 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1012 +-A limit-1798 -m limit --limit 1/second -j LOG +-A limit-1798 -m recent --name limit-1798 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1799 -m recent --name limit-1799 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1013 +-A limit-1799 -m recent --name limit-1799 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-18 -m recent --name limit-18 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-18 -m limit --limit 12/minute -j ULOG +-A limit-18 -m recent --name limit-18 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-180 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-90 +-A limit-180 -j ACCEPT +-A limit-1800 -m recent --name limit-1800 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1014 +-A limit-1800 -j TEE --gateway 10.0.0.1 +-A limit-1800 -j TEE --gateway 10.0.0.2 +-A limit-1800 -m recent --name limit-1800 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1015 +-A limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1802 -m recent --name limit-1802 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1016 +-A limit-1802 -m recent --name limit-1802 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1803 -m recent --name limit-1803 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1017 +-A limit-1803 -m recent --name limit-1803 --rsource --mask 255.255.255.255 --set +-A limit-1804 -m recent --name limit-1804 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1018 +-A limit-1804 -m limit --limit 12/minute -j ULOG +-A limit-1804 -m recent --name limit-1804 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1805 -m recent --name limit-1805 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1019 +-A limit-1805 -m recent --name limit-1805 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1806 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1020 +-A limit-1806 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1807 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1021 +-A limit-1807 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1808 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1022 +-A limit-1808 -m limit --limit 1/second -j LOG +-A limit-1808 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1809 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1023 +-A limit-1809 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-181 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-91 +-A limit-1810 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1024 +-A limit-1810 -j TEE --gateway 10.0.0.1 +-A limit-1810 -j TEE --gateway 10.0.0.2 +-A limit-1810 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1025 +-A limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1812 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1026 +-A limit-1812 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1813 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1027 +-A limit-1813 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1814 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1028 +-A limit-1814 -m limit --limit 12/minute -j ULOG +-A limit-1814 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1815 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1029 +-A limit-1815 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1816 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1030 +-A limit-1816 -j ACCEPT +-A limit-1818 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1032 +-A limit-1818 -m limit --limit 1/second -j LOG +-A limit-1818 -j ACCEPT +-A limit-1819 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1033 +-A limit-1819 -m limit --limit 1/second -j LOG +-A limit-182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-92 +-A limit-182 -m limit --limit 1/second -j LOG +-A limit-182 -j ACCEPT +-A limit-1820 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1034 +-A limit-1820 -j TEE --gateway 10.0.0.1 +-A limit-1820 -j TEE --gateway 10.0.0.2 +-A limit-1820 -j ACCEPT +-A limit-1821 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1035 +-A limit-1821 -j TEE --gateway 10.0.0.1 +-A limit-1821 -j TEE --gateway 10.0.0.2 +-A limit-1822 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1036 +-A limit-1822 -j ACCEPT +-A limit-1824 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1038 +-A limit-1824 -m limit --limit 12/minute -j ULOG +-A limit-1824 -j ACCEPT +-A limit-1825 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1039 -A limit-1825 -m limit --limit 12/minute -j ULOG --A limit-1826 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-872 --A limit-1826 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1827 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-873 --A limit-1827 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1828 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-874 --A limit-1828 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1829 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-875 --A limit-1829 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-183 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-183 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1830 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-876 --A limit-1830 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1831 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-877 --A limit-1831 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1832 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-878 --A limit-1832 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1833 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-879 --A limit-1833 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1834 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-880 --A limit-1835 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-881 --A limit-1836 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-882 --A limit-1837 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-883 --A limit-1837 -m limit --limit 1/second -j LOG --A limit-1838 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-884 --A limit-1839 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-885 --A limit-184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1826 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1040 +-A limit-1826 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1827 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1041 +-A limit-1827 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1828 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1042 +-A limit-1828 -m limit --limit 1/second -j LOG +-A limit-1828 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1829 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1043 +-A limit-1829 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-183 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-93 +-A limit-183 -m limit --limit 1/second -j LOG +-A limit-1830 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1044 +-A limit-1830 -j TEE --gateway 10.0.0.1 +-A limit-1830 -j TEE --gateway 10.0.0.2 +-A limit-1830 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1045 +-A limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1832 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1046 +-A limit-1832 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1833 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1047 +-A limit-1833 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1834 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1048 +-A limit-1834 -m limit --limit 12/minute -j ULOG +-A limit-1834 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1835 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1049 +-A limit-1835 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1836 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1050 +-A limit-1836 -j ACCEPT +-A limit-1838 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1052 +-A limit-1838 -m limit --limit 1/second -j LOG +-A limit-1838 -j ACCEPT +-A limit-1839 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1053 +-A limit-1839 -m limit --limit 1/second -j LOG +-A limit-184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-94 +-A limit-184 -j TEE --gateway 10.0.0.1 +-A limit-184 -j TEE --gateway 10.0.0.2 -A limit-184 -j ACCEPT --A limit-1840 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-886 --A limit-1841 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-887 --A limit-1841 -m limit --limit 12/minute -j ULOG --A limit-1842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1842 -j RETURN --A limit-1842 -m limit --limit 1/second -j LOG --A limit-1842 -j DROP --A limit-1843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1843 -j RETURN --A limit-1843 -m limit --limit 1/second -j LOG --A limit-1843 -j DROP --A limit-1844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1844 -j RETURN --A limit-1844 -m limit --limit 1/second -j LOG --A limit-1844 -j DROP --A limit-1845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1845 -j RETURN --A limit-1845 -m limit --limit 1/second -j LOG --A limit-1845 -j DROP --A limit-1846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1846 -j RETURN --A limit-1846 -m limit --limit 1/second -j LOG --A limit-1846 -j DROP --A limit-1847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1847 -j RETURN --A limit-1847 -j DROP --A limit-1848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1848 -j RETURN --A limit-1848 -j DROP --A limit-1849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1849 -j RETURN --A limit-1849 -j DROP --A limit-185 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1850 -j RETURN --A limit-1850 -j DROP --A limit-1851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1851 -j RETURN --A limit-1851 -j DROP --A limit-1852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1852 -j RETURN --A limit-1852 -m limit --limit 1/second -j LOG --A limit-1852 -j DROP --A limit-1853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1853 -j RETURN --A limit-1853 -m limit --limit 1/second -j LOG --A limit-1853 -j DROP --A limit-1854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1854 -j RETURN --A limit-1854 -m limit --limit 1/second -j LOG --A limit-1854 -j DROP --A limit-1855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1855 -j RETURN --A limit-1855 -m limit --limit 1/second -j LOG --A limit-1855 -j DROP --A limit-1856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1856 -j RETURN --A limit-1856 -m limit --limit 1/second -j LOG --A limit-1856 -j DROP --A limit-1857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1857 -j RETURN --A limit-1857 -j DROP --A limit-1858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1858 -j RETURN --A limit-1858 -j DROP --A limit-1859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1859 -j RETURN --A limit-1859 -j DROP --A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-186 -m limit --limit 1/second -j LOG +-A limit-1840 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1054 +-A limit-1840 -j TEE --gateway 10.0.0.1 +-A limit-1840 -j TEE --gateway 10.0.0.2 +-A limit-1840 -j ACCEPT +-A limit-1841 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1055 +-A limit-1841 -j TEE --gateway 10.0.0.1 +-A limit-1841 -j TEE --gateway 10.0.0.2 +-A limit-1842 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 +-A limit-1842 -j ACCEPT +-A limit-1844 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 +-A limit-1844 -m limit --limit 12/minute -j ULOG +-A limit-1844 -j ACCEPT +-A limit-1845 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 +-A limit-1845 -m limit --limit 12/minute -j ULOG +-A limit-1846 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1060 +-A limit-1846 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1847 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1061 +-A limit-1847 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1848 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1062 +-A limit-1848 -m limit --limit 1/second -j LOG +-A limit-1848 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1849 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1063 +-A limit-1849 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-95 +-A limit-185 -j TEE --gateway 10.0.0.1 +-A limit-185 -j TEE --gateway 10.0.0.2 +-A limit-1850 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1064 +-A limit-1850 -j TEE --gateway 10.0.0.1 +-A limit-1850 -j TEE --gateway 10.0.0.2 +-A limit-1850 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1065 +-A limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1852 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1066 +-A limit-1852 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1853 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1067 +-A limit-1853 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1854 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1068 +-A limit-1854 -m limit --limit 12/minute -j ULOG +-A limit-1854 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1855 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1069 +-A limit-1855 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1856 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1070 +-A limit-1856 -j ACCEPT +-A limit-1858 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 +-A limit-1858 -m limit --limit 1/second -j LOG +-A limit-1858 -j ACCEPT +-A limit-1859 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 +-A limit-1859 -m limit --limit 1/second -j LOG +-A limit-186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-96 -A limit-186 -j ACCEPT --A limit-1860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1860 -j RETURN --A limit-1860 -j DROP --A limit-1861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1861 -j RETURN --A limit-1861 -j DROP --A limit-1862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1862 -j RETURN --A limit-1862 -m limit --limit 12/minute -j ULOG --A limit-1862 -j DROP --A limit-1863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1863 -j RETURN --A limit-1863 -m limit --limit 12/minute -j ULOG --A limit-1863 -j DROP --A limit-1864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1864 -j RETURN +-A limit-1860 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 +-A limit-1860 -j TEE --gateway 10.0.0.1 +-A limit-1860 -j TEE --gateway 10.0.0.2 +-A limit-1860 -j ACCEPT +-A limit-1861 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 +-A limit-1861 -j TEE --gateway 10.0.0.1 +-A limit-1861 -j TEE --gateway 10.0.0.2 +-A limit-1862 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 +-A limit-1862 -j ACCEPT +-A limit-1864 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 -A limit-1864 -m limit --limit 12/minute -j ULOG --A limit-1864 -j DROP --A limit-1865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1865 -j RETURN +-A limit-1864 -j ACCEPT +-A limit-1865 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 -A limit-1865 -m limit --limit 12/minute -j ULOG --A limit-1865 -j DROP --A limit-1866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1866 -j RETURN --A limit-1866 -m limit --limit 12/minute -j ULOG --A limit-1866 -j DROP --A limit-1867 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1867 -j RETURN --A limit-1867 -j DROP --A limit-1868 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1868 -j RETURN --A limit-1868 -j DROP --A limit-1869 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1869 -j RETURN --A limit-1869 -j DROP --A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-187 -m limit --limit 1/second -j LOG --A limit-1870 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1870 -j RETURN --A limit-1870 -j DROP --A limit-1871 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1871 -j RETURN --A limit-1871 -j DROP --A limit-1872 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1872 -j RETURN --A limit-1872 -m limit --limit 1/second -j LOG --A limit-1872 -j DROP --A limit-1873 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1873 -j RETURN --A limit-1873 -m limit --limit 1/second -j LOG --A limit-1873 -j DROP --A limit-1874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1874 -j RETURN --A limit-1874 -m limit --limit 1/second -j LOG --A limit-1874 -j DROP --A limit-1875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1875 -j RETURN --A limit-1875 -m limit --limit 1/second -j LOG --A limit-1875 -j DROP --A limit-1876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1876 -j RETURN --A limit-1876 -m limit --limit 1/second -j LOG --A limit-1876 -j DROP --A limit-1877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1877 -j RETURN --A limit-1877 -j DROP --A limit-1878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1878 -j RETURN --A limit-1878 -j DROP --A limit-1879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1879 -j RETURN --A limit-1879 -j DROP --A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1866 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1080 +-A limit-1866 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1867 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1081 +-A limit-1867 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1868 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1082 +-A limit-1868 -m limit --limit 1/second -j LOG +-A limit-1868 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1869 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1083 +-A limit-1869 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-187 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 +-A limit-1870 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1084 +-A limit-1870 -j TEE --gateway 10.0.0.1 +-A limit-1870 -j TEE --gateway 10.0.0.2 +-A limit-1870 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1085 +-A limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1086 +-A limit-1872 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1087 +-A limit-1873 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1088 +-A limit-1874 -m limit --limit 12/minute -j ULOG +-A limit-1874 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1089 +-A limit-1875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1876 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 +-A limit-1876 -j ACCEPT +-A limit-1878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 +-A limit-1878 -m limit --limit 1/second -j LOG +-A limit-1878 -j ACCEPT +-A limit-1879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 +-A limit-1879 -m limit --limit 1/second -j LOG +-A limit-188 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 +-A limit-188 -m limit --limit 12/minute -j ULOG -A limit-188 -j ACCEPT --A limit-1880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1880 -j RETURN --A limit-1880 -j DROP --A limit-1881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1881 -j RETURN --A limit-1881 -j DROP --A limit-1882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1882 -j RETURN --A limit-1882 -m limit --limit 12/minute -j ULOG --A limit-1882 -j DROP --A limit-1883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1883 -j RETURN --A limit-1883 -m limit --limit 12/minute -j ULOG --A limit-1883 -j DROP --A limit-1884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1884 -j RETURN +-A limit-1880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 +-A limit-1880 -j TEE --gateway 10.0.0.1 +-A limit-1880 -j TEE --gateway 10.0.0.2 +-A limit-1880 -j ACCEPT +-A limit-1881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 +-A limit-1881 -j TEE --gateway 10.0.0.1 +-A limit-1881 -j TEE --gateway 10.0.0.2 +-A limit-1882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1096 +-A limit-1882 -j ACCEPT +-A limit-1884 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1098 -A limit-1884 -m limit --limit 12/minute -j ULOG --A limit-1884 -j DROP --A limit-1885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1885 -j RETURN +-A limit-1884 -j ACCEPT +-A limit-1885 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1099 -A limit-1885 -m limit --limit 12/minute -j ULOG --A limit-1885 -j DROP --A limit-1886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1886 -j RETURN --A limit-1886 -m limit --limit 12/minute -j ULOG +-A limit-1886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1886 -j ACCEPT +-A limit-1886 -m limit --limit 1/second -j LOG -A limit-1886 -j DROP --A limit-1887 -m recent --name limit-1887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-888 --A limit-1887 -m recent --name limit-1887 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1888 -m recent --name limit-1888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-889 --A limit-1888 -m recent --name limit-1888 --rsource --mask 255.255.255.255 --set --A limit-1889 -m recent --name limit-1889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-890 +-A limit-1887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1887 -j RETURN +-A limit-1887 -m limit --limit 1/second -j LOG +-A limit-1887 -j DROP +-A limit-1888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1888 -j logaccept-33 +-A limit-1888 -m limit --limit 1/second -j LOG +-A limit-1888 -j DROP +-A limit-1889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1889 -j logaccept-34 -A limit-1889 -m limit --limit 1/second -j LOG --A limit-1889 -m recent --name limit-1889 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1890 -m recent --name limit-1890 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-891 --A limit-1890 -m recent --name limit-1890 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1891 -m recent --name limit-1891 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-892 --A limit-1891 -m recent --name limit-1891 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1892 -m recent --name limit-1892 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-893 --A limit-1892 -m recent --name limit-1892 --rsource --mask 255.255.255.255 --set --A limit-1893 -m recent --name limit-1893 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-894 --A limit-1893 -m limit --limit 12/minute -j ULOG --A limit-1893 -m recent --name limit-1893 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1894 -m recent --name limit-1894 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-895 --A limit-1894 -m recent --name limit-1894 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1895 -m recent --name limit-1895 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1895 -m recent --name limit-1895 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1896 -m recent --name limit-1896 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1896 -m recent --name limit-1896 --rsource --mask 255.255.255.255 --set --A limit-1897 -m recent --name limit-1897 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1897 -m limit --limit 1/second -j LOG --A limit-1897 -m recent --name limit-1897 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1898 -m recent --name limit-1898 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1898 -m recent --name limit-1898 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1899 -m recent --name limit-1899 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1899 -m recent --name limit-1899 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-190 -m limit --limit 12/minute -j ULOG --A limit-190 -j ACCEPT --A limit-1900 -m recent --name limit-1900 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1900 -m recent --name limit-1900 --rsource --mask 255.255.255.255 --set --A limit-1901 -m recent --name limit-1901 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1901 -m limit --limit 12/minute -j ULOG --A limit-1901 -m recent --name limit-1901 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1902 -m recent --name limit-1902 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1902 -m recent --name limit-1902 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1903 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1903 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1904 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1904 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1905 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1905 -m limit --limit 1/second -j LOG --A limit-1905 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1906 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1906 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1907 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1907 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1908 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1908 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1909 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1909 -m limit --limit 12/minute -j ULOG --A limit-1909 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-191 -m limit --limit 12/minute -j ULOG --A limit-1910 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1910 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1911 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1911 -j ACCEPT --A limit-1913 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1913 -m limit --limit 1/second -j LOG --A limit-1913 -j ACCEPT --A limit-1914 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1914 -m limit --limit 1/second -j LOG --A limit-1915 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1915 -j ACCEPT --A limit-1917 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1889 -j DROP +-A limit-189 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 +-A limit-189 -m limit --limit 12/minute -j ULOG +-A limit-1890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1890 -j ACCEPT +-A limit-1890 -m limit --limit 1/second -j LOG +-A limit-1890 -j DROP +-A limit-1891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1891 -j logaccept-35 +-A limit-1891 -m limit --limit 1/second -j LOG +-A limit-1891 -j DROP +-A limit-1892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1892 -j ACCEPT +-A limit-1892 -j DROP +-A limit-1893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1893 -j RETURN +-A limit-1893 -j DROP +-A limit-1894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1894 -j logaccept-36 +-A limit-1894 -j DROP +-A limit-1895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1895 -j logaccept-37 +-A limit-1895 -j DROP +-A limit-1896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1896 -j ACCEPT +-A limit-1896 -j DROP +-A limit-1897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1897 -j logaccept-38 +-A limit-1897 -j DROP +-A limit-1898 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1898 -j ACCEPT +-A limit-1898 -m limit --limit 1/second -j LOG +-A limit-1898 -j DROP +-A limit-1899 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1899 -j RETURN +-A limit-1899 -m limit --limit 1/second -j LOG +-A limit-1899 -j DROP +-A limit-19 -m recent --name limit-19 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-19 -m recent --name limit-19 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-190 -m recent --name limit-190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-100 +-A limit-190 -m recent --name limit-190 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1900 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1900 -j logaccept-39 +-A limit-1900 -m limit --limit 1/second -j LOG +-A limit-1900 -j DROP +-A limit-1901 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1901 -j logaccept-40 +-A limit-1901 -m limit --limit 1/second -j LOG +-A limit-1901 -j DROP +-A limit-1902 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1902 -j ACCEPT +-A limit-1902 -m limit --limit 1/second -j LOG +-A limit-1902 -j DROP +-A limit-1903 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1903 -j logaccept-41 +-A limit-1903 -m limit --limit 1/second -j LOG +-A limit-1903 -j DROP +-A limit-1904 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1904 -j ACCEPT +-A limit-1904 -j TEE --gateway 10.0.0.1 +-A limit-1904 -j TEE --gateway 10.0.0.2 +-A limit-1904 -j DROP +-A limit-1905 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1905 -j RETURN +-A limit-1905 -j TEE --gateway 10.0.0.1 +-A limit-1905 -j TEE --gateway 10.0.0.2 +-A limit-1905 -j DROP +-A limit-1906 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1906 -j logaccept-42 +-A limit-1906 -j TEE --gateway 10.0.0.1 +-A limit-1906 -j TEE --gateway 10.0.0.2 +-A limit-1906 -j DROP +-A limit-1907 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1907 -j logaccept-43 +-A limit-1907 -j TEE --gateway 10.0.0.1 +-A limit-1907 -j TEE --gateway 10.0.0.2 +-A limit-1907 -j DROP +-A limit-1908 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1908 -j ACCEPT +-A limit-1908 -j TEE --gateway 10.0.0.1 +-A limit-1908 -j TEE --gateway 10.0.0.2 +-A limit-1908 -j DROP +-A limit-1909 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1909 -j logaccept-44 +-A limit-1909 -j TEE --gateway 10.0.0.1 +-A limit-1909 -j TEE --gateway 10.0.0.2 +-A limit-1909 -j DROP +-A limit-191 -m recent --name limit-191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-101 +-A limit-191 -m recent --name limit-191 --rsource --mask 255.255.255.255 --set +-A limit-1910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1910 -j ACCEPT +-A limit-1910 -j DROP +-A limit-1911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1911 -j RETURN +-A limit-1911 -j DROP +-A limit-1912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1912 -j logaccept-45 +-A limit-1912 -j DROP +-A limit-1913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1913 -j logaccept-46 +-A limit-1913 -j DROP +-A limit-1914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1914 -j ACCEPT +-A limit-1914 -j DROP +-A limit-1915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1915 -j logaccept-47 +-A limit-1915 -j DROP +-A limit-1916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1916 -j ACCEPT +-A limit-1916 -m limit --limit 12/minute -j ULOG +-A limit-1916 -j DROP +-A limit-1917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1917 -j RETURN -A limit-1917 -m limit --limit 12/minute -j ULOG --A limit-1917 -j ACCEPT --A limit-1918 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1917 -j DROP +-A limit-1918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1918 -j logaccept-48 -A limit-1918 -m limit --limit 12/minute -j ULOG --A limit-1919 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1919 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-192 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-192 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1920 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1920 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1921 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1921 -m limit --limit 1/second -j LOG --A limit-1921 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1922 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1922 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1923 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1923 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1924 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1924 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1925 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1925 -m limit --limit 12/minute -j ULOG --A limit-1925 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1926 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1926 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1927 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1927 -j ACCEPT --A limit-1929 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1918 -j DROP +-A limit-1919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1919 -j logaccept-49 +-A limit-1919 -m limit --limit 12/minute -j ULOG +-A limit-1919 -j DROP +-A limit-192 -m recent --name limit-192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-102 +-A limit-192 -m limit --limit 1/second -j LOG +-A limit-192 -m recent --name limit-192 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1920 -j ACCEPT +-A limit-1920 -m limit --limit 12/minute -j ULOG +-A limit-1920 -j DROP +-A limit-1921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1921 -j logaccept-50 +-A limit-1921 -m limit --limit 12/minute -j ULOG +-A limit-1921 -j DROP +-A limit-1922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1922 -j ACCEPT +-A limit-1922 -j DROP +-A limit-1923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1923 -j RETURN +-A limit-1923 -j DROP +-A limit-1924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1924 -j logaccept-51 +-A limit-1924 -j DROP +-A limit-1925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1925 -j logaccept-52 +-A limit-1925 -j DROP +-A limit-1926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1926 -j ACCEPT +-A limit-1926 -j DROP +-A limit-1927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1927 -j logaccept-53 +-A limit-1927 -j DROP +-A limit-1928 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1928 -j ACCEPT +-A limit-1928 -m limit --limit 1/second -j LOG +-A limit-1928 -j DROP +-A limit-1929 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1929 -j RETURN -A limit-1929 -m limit --limit 1/second -j LOG --A limit-1929 -j ACCEPT --A limit-193 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-193 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1930 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1929 -j DROP +-A limit-193 -m recent --name limit-193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-103 +-A limit-193 -m recent --name limit-193 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1930 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1930 -j logaccept-54 -A limit-1930 -m limit --limit 1/second -j LOG --A limit-1931 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1931 -j ACCEPT --A limit-1933 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1933 -m limit --limit 12/minute -j ULOG --A limit-1933 -j ACCEPT --A limit-1934 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1934 -m limit --limit 12/minute -j ULOG --A limit-1935 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1935 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1936 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1936 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1937 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1937 -m limit --limit 1/second -j LOG --A limit-1937 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1938 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1938 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1939 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1939 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-194 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-194 -m limit --limit 1/second -j LOG --A limit-194 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1940 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1940 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1941 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1941 -m limit --limit 12/minute -j ULOG --A limit-1941 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1942 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1942 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1943 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1943 -j ACCEPT --A limit-1945 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1945 -m limit --limit 1/second -j LOG --A limit-1945 -j ACCEPT --A limit-1946 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1946 -m limit --limit 1/second -j LOG --A limit-1947 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1947 -j ACCEPT --A limit-1949 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1930 -j DROP +-A limit-1931 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1931 -j logaccept-55 +-A limit-1931 -m limit --limit 1/second -j LOG +-A limit-1931 -j DROP +-A limit-1932 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1932 -j ACCEPT +-A limit-1932 -m limit --limit 1/second -j LOG +-A limit-1932 -j DROP +-A limit-1933 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1933 -j logaccept-56 +-A limit-1933 -m limit --limit 1/second -j LOG +-A limit-1933 -j DROP +-A limit-1934 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1934 -j ACCEPT +-A limit-1934 -j TEE --gateway 10.0.0.1 +-A limit-1934 -j TEE --gateway 10.0.0.2 +-A limit-1934 -j DROP +-A limit-1935 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1935 -j RETURN +-A limit-1935 -j TEE --gateway 10.0.0.1 +-A limit-1935 -j TEE --gateway 10.0.0.2 +-A limit-1935 -j DROP +-A limit-1936 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1936 -j logaccept-57 +-A limit-1936 -j TEE --gateway 10.0.0.1 +-A limit-1936 -j TEE --gateway 10.0.0.2 +-A limit-1936 -j DROP +-A limit-1937 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1937 -j logaccept-58 +-A limit-1937 -j TEE --gateway 10.0.0.1 +-A limit-1937 -j TEE --gateway 10.0.0.2 +-A limit-1937 -j DROP +-A limit-1938 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1938 -j ACCEPT +-A limit-1938 -j TEE --gateway 10.0.0.1 +-A limit-1938 -j TEE --gateway 10.0.0.2 +-A limit-1938 -j DROP +-A limit-1939 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1939 -j logaccept-59 +-A limit-1939 -j TEE --gateway 10.0.0.1 +-A limit-1939 -j TEE --gateway 10.0.0.2 +-A limit-1939 -j DROP +-A limit-194 -m recent --name limit-194 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-104 +-A limit-194 -j TEE --gateway 10.0.0.1 +-A limit-194 -j TEE --gateway 10.0.0.2 +-A limit-194 -m recent --name limit-194 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1940 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1940 -j ACCEPT +-A limit-1940 -j DROP +-A limit-1941 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1941 -j RETURN +-A limit-1941 -j DROP +-A limit-1942 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1942 -j logaccept-60 +-A limit-1942 -j DROP +-A limit-1943 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1943 -j logaccept-61 +-A limit-1943 -j DROP +-A limit-1944 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1944 -j ACCEPT +-A limit-1944 -j DROP +-A limit-1945 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1945 -j logaccept-62 +-A limit-1945 -j DROP +-A limit-1946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1946 -j ACCEPT +-A limit-1946 -m limit --limit 12/minute -j ULOG +-A limit-1946 -j DROP +-A limit-1947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1947 -j RETURN +-A limit-1947 -m limit --limit 12/minute -j ULOG +-A limit-1947 -j DROP +-A limit-1948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1948 -j logaccept-63 +-A limit-1948 -m limit --limit 12/minute -j ULOG +-A limit-1948 -j DROP +-A limit-1949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1949 -j logaccept-64 -A limit-1949 -m limit --limit 12/minute -j ULOG --A limit-1949 -j ACCEPT --A limit-195 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-195 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1950 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1949 -j DROP +-A limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-105 +-A limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1950 -j ACCEPT -A limit-1950 -m limit --limit 12/minute -j ULOG --A limit-1951 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1951 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1952 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1952 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1953 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1953 -m limit --limit 1/second -j LOG --A limit-1953 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1954 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1954 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1955 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1955 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1956 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1956 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1957 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1957 -m limit --limit 12/minute -j ULOG --A limit-1957 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1958 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1958 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1959 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1959 -j ACCEPT --A limit-196 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-196 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1961 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1961 -m limit --limit 1/second -j LOG --A limit-1961 -j ACCEPT --A limit-1962 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1962 -m limit --limit 1/second -j LOG --A limit-1963 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1963 -j ACCEPT --A limit-1965 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1965 -m limit --limit 12/minute -j ULOG --A limit-1965 -j ACCEPT --A limit-1966 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1966 -m limit --limit 12/minute -j ULOG --A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-896 --A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-897 +-A limit-1950 -j DROP +-A limit-1951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1951 -j logaccept-65 +-A limit-1951 -m limit --limit 12/minute -j ULOG +-A limit-1951 -j DROP +-A limit-1952 -m recent --name limit-1952 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1100 +-A limit-1952 -m recent --name limit-1952 --rsource --mask 255.255.255.255 --set +-A limit-1953 -m recent --name limit-1953 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1101 +-A limit-1953 -m recent --name limit-1953 --rsource --mask 255.255.255.255 --set +-A limit-1954 -m recent --name limit-1954 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1102 +-A limit-1954 -m recent --name limit-1954 --rsource --mask 255.255.255.255 --set +-A limit-1955 -m recent --name limit-1955 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1103 +-A limit-1955 -m recent --name limit-1955 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1956 -m recent --name limit-1956 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1104 +-A limit-1956 -m recent --name limit-1956 --rsource --mask 255.255.255.255 --set +-A limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1105 +-A limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1958 -m recent --name limit-1958 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1106 +-A limit-1958 -m recent --name limit-1958 --rsource --mask 255.255.255.255 --set +-A limit-1959 -m recent --name limit-1959 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1107 +-A limit-1959 -m recent --name limit-1959 --rsource --mask 255.255.255.255 --set +-A limit-196 -m recent --name limit-196 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-106 +-A limit-196 -m recent --name limit-196 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1960 -m recent --name limit-1960 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1108 +-A limit-1960 -m recent --name limit-1960 --rsource --mask 255.255.255.255 --set +-A limit-1961 -m recent --name limit-1961 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1109 +-A limit-1961 -m recent --name limit-1961 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1962 -m recent --name limit-1962 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1962 -m recent --name limit-1962 --rsource --mask 255.255.255.255 --set +-A limit-1963 -m recent --name limit-1963 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1963 -m recent --name limit-1963 --rsource --mask 255.255.255.255 --set +-A limit-1964 -m recent --name limit-1964 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1964 -m recent --name limit-1964 --rsource --mask 255.255.255.255 --set +-A limit-1965 -m recent --name limit-1965 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1965 -m recent --name limit-1965 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1966 -m recent --name limit-1966 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1966 -m recent --name limit-1966 --rsource --mask 255.255.255.255 --set +-A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --set --A limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-898 --A limit-1969 -m limit --limit 1/second -j LOG --A limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-197 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-197 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-899 --A limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-900 --A limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1972 -m recent --name limit-1972 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-901 --A limit-1972 -m recent --name limit-1972 --rsource --mask 255.255.255.255 --set --A limit-1973 -m recent --name limit-1973 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-902 --A limit-1973 -m limit --limit 12/minute -j ULOG --A limit-1973 -m recent --name limit-1973 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1974 -m recent --name limit-1974 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-903 --A limit-1974 -m recent --name limit-1974 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-904 --A limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-905 +-A limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --set +-A limit-197 -m recent --name limit-197 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-107 +-A limit-197 -m recent --name limit-197 --rsource --mask 255.255.255.255 --set +-A limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --set +-A limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1972 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1972 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1973 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1973 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1974 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1974 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-906 --A limit-1977 -m limit --limit 1/second -j LOG --A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-907 --A limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-908 --A limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-198 -m recent --name limit-198 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-108 -A limit-198 -m limit --limit 12/minute -j ULOG --A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-909 +-A limit-198 -m recent --name limit-198 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-910 --A limit-1981 -m limit --limit 12/minute -j ULOG --A limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1982 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-911 --A limit-1982 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1983 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-912 --A limit-1983 -j ACCEPT --A limit-1985 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-914 +-A limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1982 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1983 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1984 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1985 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1985 -m limit --limit 1/second -j LOG --A limit-1985 -j ACCEPT --A limit-1986 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-915 --A limit-1986 -m limit --limit 1/second -j LOG --A limit-1987 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-916 --A limit-1987 -j ACCEPT --A limit-1989 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-918 --A limit-1989 -m limit --limit 12/minute -j ULOG --A limit-1989 -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1990 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-919 --A limit-1990 -m limit --limit 12/minute -j ULOG --A limit-1991 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-920 --A limit-1991 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-921 +-A limit-1986 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1987 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1987 -j TEE --gateway 10.0.0.1 +-A limit-1987 -j TEE --gateway 10.0.0.2 +-A limit-1988 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1989 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-199 -m recent --name limit-199 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-109 +-A limit-199 -m recent --name limit-199 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1990 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1991 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1991 -m limit --limit 12/minute -j ULOG +-A limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-922 --A limit-1993 -m limit --limit 1/second -j LOG --A limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-923 --A limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-924 --A limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-925 +-A limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-926 --A limit-1997 -m limit --limit 12/minute -j ULOG --A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-927 --A limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-928 --A limit-1999 -j ACCEPT +-A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-200 -j ACCEPT --A limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-930 --A limit-2001 -m limit --limit 1/second -j LOG --A limit-2001 -j ACCEPT --A limit-2002 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-931 --A limit-2002 -m limit --limit 1/second -j LOG --A limit-2003 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-932 --A limit-2003 -j ACCEPT --A limit-2005 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-934 --A limit-2005 -m limit --limit 12/minute -j ULOG --A limit-2005 -j ACCEPT --A limit-2006 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-935 --A limit-2006 -m limit --limit 12/minute -j ULOG --A limit-2007 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-936 --A limit-2007 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2008 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-937 --A limit-2008 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2009 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-938 --A limit-2009 -m limit --limit 1/second -j LOG --A limit-2009 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2010 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-939 --A limit-2010 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2011 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-940 --A limit-2011 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-941 +-A limit-200 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-110 +-A limit-200 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2000 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2000 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2002 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2003 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2004 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2005 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2005 -m limit --limit 1/second -j LOG +-A limit-2006 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2007 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2007 -j TEE --gateway 10.0.0.1 +-A limit-2007 -j TEE --gateway 10.0.0.2 +-A limit-2008 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2009 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-201 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-111 +-A limit-201 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2010 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2011 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2011 -m limit --limit 12/minute -j ULOG +-A limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-942 --A limit-2013 -m limit --limit 12/minute -j ULOG --A limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-943 --A limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-944 --A limit-2015 -j ACCEPT --A limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-946 --A limit-2017 -m limit --limit 1/second -j LOG --A limit-2017 -j ACCEPT --A limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-947 --A limit-2018 -m limit --limit 1/second -j LOG --A limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-948 --A limit-2019 -j ACCEPT --A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2016 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2016 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-202 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-112 -A limit-202 -m limit --limit 1/second -j LOG --A limit-202 -j ACCEPT --A limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-950 --A limit-2021 -m limit --limit 12/minute -j ULOG --A limit-2021 -j ACCEPT --A limit-2022 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-951 --A limit-2022 -m limit --limit 12/minute -j ULOG --A limit-2023 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-952 --A limit-2023 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2024 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-953 --A limit-2024 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2025 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-954 +-A limit-202 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2020 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2020 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2022 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2023 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2024 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2025 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2025 -m limit --limit 1/second -j LOG --A limit-2025 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2026 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-955 --A limit-2026 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2027 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-956 --A limit-2027 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2028 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-957 --A limit-2028 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2029 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-958 --A limit-2029 -m limit --limit 12/minute -j ULOG --A limit-2029 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-203 -m limit --limit 1/second -j LOG --A limit-2030 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-959 --A limit-2030 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2031 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-960 --A limit-2031 -j ACCEPT --A limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-962 --A limit-2033 -m limit --limit 1/second -j LOG --A limit-2033 -j ACCEPT --A limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-963 --A limit-2034 -m limit --limit 1/second -j LOG --A limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-964 --A limit-2035 -j ACCEPT --A limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-966 --A limit-2037 -m limit --limit 12/minute -j ULOG --A limit-2037 -j ACCEPT --A limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-967 --A limit-2038 -m limit --limit 12/minute -j ULOG --A limit-2039 -m recent --name limit-2039 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2039 -m recent --name limit-2039 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-204 -j ACCEPT --A limit-2040 -m recent --name limit-2040 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2040 -m recent --name limit-2040 --rsource --mask 255.255.255.255 --set --A limit-2041 -m recent --name limit-2041 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2041 -m limit --limit 1/second -j LOG --A limit-2041 -m recent --name limit-2041 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2042 -m recent --name limit-2042 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2042 -m recent --name limit-2042 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2043 -m recent --name limit-2043 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2043 -m recent --name limit-2043 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2044 -m recent --name limit-2044 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2044 -m recent --name limit-2044 --rsource --mask 255.255.255.255 --set --A limit-2045 -m recent --name limit-2045 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2045 -m limit --limit 12/minute -j ULOG --A limit-2045 -m recent --name limit-2045 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2046 -m recent --name limit-2046 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2046 -m recent --name limit-2046 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2047 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2047 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2048 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2048 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2049 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2049 -m limit --limit 1/second -j LOG --A limit-2049 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2050 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2050 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2051 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2051 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2052 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2052 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2053 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2053 -m limit --limit 12/minute -j ULOG --A limit-2053 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2054 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2054 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2055 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2055 -j ACCEPT --A limit-2057 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2057 -m limit --limit 1/second -j LOG --A limit-2057 -j ACCEPT --A limit-2058 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2058 -m limit --limit 1/second -j LOG --A limit-2059 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2059 -j ACCEPT --A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-206 -m limit --limit 12/minute -j ULOG --A limit-206 -j ACCEPT --A limit-2061 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2061 -m limit --limit 12/minute -j ULOG --A limit-2061 -j ACCEPT --A limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2062 -m limit --limit 12/minute -j ULOG --A limit-2063 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2064 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2064 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2065 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2065 -m limit --limit 1/second -j LOG --A limit-2065 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2066 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2066 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2067 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2067 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2068 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2068 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2069 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2069 -m limit --limit 12/minute -j ULOG --A limit-2069 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-207 -m limit --limit 12/minute -j ULOG --A limit-2070 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2070 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2071 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2071 -j ACCEPT --A limit-2073 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2073 -m limit --limit 1/second -j LOG --A limit-2073 -j ACCEPT --A limit-2074 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2074 -m limit --limit 1/second -j LOG --A limit-2075 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2075 -j ACCEPT --A limit-2077 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2077 -m limit --limit 12/minute -j ULOG --A limit-2077 -j ACCEPT --A limit-2078 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2078 -m limit --limit 12/minute -j ULOG --A limit-2079 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2079 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-208 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-208 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2080 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2080 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2081 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2081 -m limit --limit 1/second -j LOG --A limit-2081 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2082 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2082 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2083 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2084 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2084 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2085 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2085 -m limit --limit 12/minute -j ULOG --A limit-2085 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2086 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2086 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2087 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2087 -j ACCEPT --A limit-2089 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2089 -m limit --limit 1/second -j LOG --A limit-2089 -j ACCEPT --A limit-209 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-209 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2090 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2090 -m limit --limit 1/second -j LOG --A limit-2091 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2091 -j ACCEPT --A limit-2093 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2093 -m limit --limit 12/minute -j ULOG --A limit-2093 -j ACCEPT --A limit-2094 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2094 -m limit --limit 12/minute -j ULOG --A limit-2095 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2095 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2096 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2096 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2097 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2097 -m limit --limit 1/second -j LOG --A limit-2097 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2098 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2098 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2099 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2099 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-2026 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2027 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2027 -j TEE --gateway 10.0.0.1 +-A limit-2027 -j TEE --gateway 10.0.0.2 +-A limit-2028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-203 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-113 +-A limit-203 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2031 -m limit --limit 12/minute -j ULOG +-A limit-2032 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2032 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2036 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2039 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-204 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-114 +-A limit-204 -j TEE --gateway 10.0.0.1 +-A limit-204 -j TEE --gateway 10.0.0.2 +-A limit-204 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2040 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2040 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2041 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2041 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2045 -m limit --limit 1/second -j LOG +-A limit-2046 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2047 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2047 -j TEE --gateway 10.0.0.1 +-A limit-2047 -j TEE --gateway 10.0.0.2 +-A limit-2048 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2049 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2050 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2051 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2051 -m limit --limit 12/minute -j ULOG +-A limit-2052 -m recent --name limit-2052 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1110 +-A limit-2052 -m recent --name limit-2052 --rsource --mask 255.255.255.255 --set +-A limit-2053 -m recent --name limit-2053 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1111 +-A limit-2053 -m recent --name limit-2053 --rsource --mask 255.255.255.255 --set +-A limit-2054 -m recent --name limit-2054 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1112 +-A limit-2054 -m recent --name limit-2054 --rsource --mask 255.255.255.255 --set +-A limit-2055 -m recent --name limit-2055 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1113 +-A limit-2055 -m recent --name limit-2055 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2056 -m recent --name limit-2056 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1114 +-A limit-2056 -m recent --name limit-2056 --rsource --mask 255.255.255.255 --set +-A limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1115 +-A limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2058 -m recent --name limit-2058 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1116 +-A limit-2058 -m recent --name limit-2058 --rsource --mask 255.255.255.255 --set +-A limit-2059 -m recent --name limit-2059 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1117 +-A limit-2059 -m recent --name limit-2059 --rsource --mask 255.255.255.255 --set +-A limit-206 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-206 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2060 -m recent --name limit-2060 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1118 +-A limit-2060 -m recent --name limit-2060 --rsource --mask 255.255.255.255 --set +-A limit-2061 -m recent --name limit-2061 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1119 +-A limit-2061 -m recent --name limit-2061 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1120 +-A limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2063 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1121 +-A limit-2063 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2064 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1122 +-A limit-2064 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2065 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1123 +-A limit-2065 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2066 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1124 +-A limit-2066 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1125 +-A limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2068 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1126 +-A limit-2068 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2069 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1127 +-A limit-2069 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-207 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-207 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2070 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1128 +-A limit-2070 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2071 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1129 +-A limit-2071 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2072 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1130 +-A limit-2073 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1131 +-A limit-2074 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1132 +-A limit-2075 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1133 +-A limit-2075 -m limit --limit 1/second -j LOG +-A limit-2076 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1134 +-A limit-2077 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1135 +-A limit-2077 -j TEE --gateway 10.0.0.1 +-A limit-2077 -j TEE --gateway 10.0.0.2 +-A limit-2078 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1136 +-A limit-2079 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1137 +-A limit-208 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-208 -m limit --limit 12/minute -j ULOG +-A limit-208 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2080 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1138 +-A limit-2081 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1139 +-A limit-2081 -m limit --limit 12/minute -j ULOG +-A limit-2082 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1140 +-A limit-2082 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2083 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1141 +-A limit-2083 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2084 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1142 +-A limit-2084 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2085 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1143 +-A limit-2085 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2086 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1144 +-A limit-2086 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1145 +-A limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2088 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1146 +-A limit-2088 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2089 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1147 +-A limit-2089 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-209 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-209 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2090 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1148 +-A limit-2090 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2091 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1149 +-A limit-2091 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2092 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1150 +-A limit-2093 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1151 +-A limit-2094 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1152 +-A limit-2095 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1153 +-A limit-2095 -m limit --limit 1/second -j LOG +-A limit-2096 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1154 +-A limit-2097 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1155 +-A limit-2097 -j TEE --gateway 10.0.0.1 +-A limit-2097 -j TEE --gateway 10.0.0.2 +-A limit-2098 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1156 +-A limit-2099 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1157 -A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-210 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2100 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2100 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2101 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-210 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-210 -j ACCEPT +-A limit-2100 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1158 +-A limit-2101 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1159 -A limit-2101 -m limit --limit 12/minute -j ULOG --A limit-2101 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2103 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2103 -j ACCEPT --A limit-2105 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2105 -m limit --limit 1/second -j LOG --A limit-2105 -j ACCEPT --A limit-2106 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2106 -m limit --limit 1/second -j LOG --A limit-2107 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2107 -j ACCEPT --A limit-2109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2109 -m limit --limit 12/minute -j ULOG --A limit-2109 -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2110 -m limit --limit 12/minute -j ULOG --A limit-2111 -m recent --name limit-2111 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-968 --A limit-2111 -m recent --name limit-2111 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2112 -m recent --name limit-2112 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-969 --A limit-2112 -m recent --name limit-2112 --rsource --mask 255.255.255.255 --set --A limit-2113 -m recent --name limit-2113 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-970 --A limit-2113 -m limit --limit 1/second -j LOG --A limit-2113 -m recent --name limit-2113 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2114 -m recent --name limit-2114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-971 --A limit-2114 -m recent --name limit-2114 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2115 -m recent --name limit-2115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-972 --A limit-2115 -m recent --name limit-2115 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2116 -m recent --name limit-2116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-973 --A limit-2116 -m recent --name limit-2116 --rsource --mask 255.255.255.255 --set --A limit-2117 -m recent --name limit-2117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-974 --A limit-2117 -m limit --limit 12/minute -j ULOG --A limit-2117 -m recent --name limit-2117 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2118 -m recent --name limit-2118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-975 --A limit-2118 -m recent --name limit-2118 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-976 --A limit-2119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-977 --A limit-2120 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-978 --A limit-2121 -m limit --limit 1/second -j LOG --A limit-2121 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-979 --A limit-2122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-980 --A limit-2123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-981 --A limit-2124 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-982 --A limit-2125 -m limit --limit 12/minute -j ULOG --A limit-2125 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2126 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-983 --A limit-2126 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-984 --A limit-2127 -j ACCEPT --A limit-2129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-986 --A limit-2129 -m limit --limit 1/second -j LOG --A limit-2129 -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-987 --A limit-2130 -m limit --limit 1/second -j LOG --A limit-2131 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-988 --A limit-2131 -j ACCEPT --A limit-2133 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-990 --A limit-2133 -m limit --limit 12/minute -j ULOG --A limit-2133 -j ACCEPT --A limit-2134 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-991 --A limit-2134 -m limit --limit 12/minute -j ULOG --A limit-2135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-992 --A limit-2135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-993 --A limit-2136 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-994 --A limit-2137 -m limit --limit 1/second -j LOG --A limit-2137 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-995 --A limit-2138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-996 --A limit-2139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-214 -m limit --limit 12/minute -j ULOG --A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2140 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-997 --A limit-2140 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2141 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-998 +-A limit-2102 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1160 +-A limit-2102 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2103 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1161 +-A limit-2103 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2104 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1162 +-A limit-2104 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2105 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1163 +-A limit-2105 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2106 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1164 +-A limit-2106 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1165 +-A limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2108 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1166 +-A limit-2108 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2109 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1167 +-A limit-2109 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-211 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-2110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1168 +-A limit-2110 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1169 +-A limit-2111 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2112 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1170 +-A limit-2113 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1171 +-A limit-2114 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1172 +-A limit-2115 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1173 +-A limit-2115 -m limit --limit 1/second -j LOG +-A limit-2116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1174 +-A limit-2117 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1175 +-A limit-2117 -j TEE --gateway 10.0.0.1 +-A limit-2117 -j TEE --gateway 10.0.0.2 +-A limit-2118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1176 +-A limit-2119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1177 +-A limit-212 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -j ACCEPT +-A limit-2120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1178 +-A limit-2121 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1179 +-A limit-2121 -m limit --limit 12/minute -j ULOG +-A limit-2122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1180 +-A limit-2122 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1181 +-A limit-2123 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1182 +-A limit-2124 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1183 +-A limit-2125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1184 +-A limit-2126 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1185 +-A limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2128 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1186 +-A limit-2128 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2129 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1187 +-A limit-2129 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-213 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-213 -m limit --limit 1/second -j LOG +-A limit-2130 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1188 +-A limit-2130 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2131 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1189 +-A limit-2131 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1190 +-A limit-2133 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1191 +-A limit-2134 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1192 +-A limit-2135 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1193 +-A limit-2135 -m limit --limit 1/second -j LOG +-A limit-2136 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1194 +-A limit-2137 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1195 +-A limit-2137 -j TEE --gateway 10.0.0.1 +-A limit-2137 -j TEE --gateway 10.0.0.2 +-A limit-2138 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1196 +-A limit-2139 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1197 +-A limit-214 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-214 -j TEE --gateway 10.0.0.1 +-A limit-214 -j TEE --gateway 10.0.0.2 +-A limit-214 -j ACCEPT +-A limit-2140 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1198 +-A limit-2141 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1199 -A limit-2141 -m limit --limit 12/minute -j ULOG --A limit-2141 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2142 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-999 --A limit-2142 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1000 --A limit-2143 -j ACCEPT --A limit-2145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1002 --A limit-2145 -m limit --limit 1/second -j LOG --A limit-2145 -j ACCEPT --A limit-2146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1003 --A limit-2146 -m limit --limit 1/second -j LOG --A limit-2147 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1004 --A limit-2147 -j ACCEPT --A limit-2149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1006 --A limit-2149 -m limit --limit 12/minute -j ULOG --A limit-2149 -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2150 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1007 --A limit-2150 -m limit --limit 12/minute -j ULOG --A limit-2151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1008 --A limit-2151 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1009 --A limit-2152 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1010 --A limit-2153 -m limit --limit 1/second -j LOG --A limit-2153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1011 --A limit-2154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1012 --A limit-2155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1013 --A limit-2156 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1014 --A limit-2157 -m limit --limit 12/minute -j ULOG --A limit-2157 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1015 --A limit-2158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2159 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1016 --A limit-2159 -j ACCEPT --A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2142 -m recent --name limit-2142 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1200 +-A limit-2142 -m recent --name limit-2142 --rsource --mask 255.255.255.255 --set +-A limit-2143 -m recent --name limit-2143 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1201 +-A limit-2143 -m recent --name limit-2143 --rsource --mask 255.255.255.255 --set +-A limit-2144 -m recent --name limit-2144 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1202 +-A limit-2144 -m recent --name limit-2144 --rsource --mask 255.255.255.255 --set +-A limit-2145 -m recent --name limit-2145 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1203 +-A limit-2145 -m recent --name limit-2145 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2146 -m recent --name limit-2146 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1204 +-A limit-2146 -m recent --name limit-2146 --rsource --mask 255.255.255.255 --set +-A limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1205 +-A limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2148 -m recent --name limit-2148 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1206 +-A limit-2148 -m recent --name limit-2148 --rsource --mask 255.255.255.255 --set +-A limit-2149 -m recent --name limit-2149 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1207 +-A limit-2149 -m recent --name limit-2149 --rsource --mask 255.255.255.255 --set +-A limit-215 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-215 -j TEE --gateway 10.0.0.1 +-A limit-215 -j TEE --gateway 10.0.0.2 +-A limit-2150 -m recent --name limit-2150 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1208 +-A limit-2150 -m recent --name limit-2150 --rsource --mask 255.255.255.255 --set +-A limit-2151 -m recent --name limit-2151 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1209 +-A limit-2151 -m recent --name limit-2151 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2152 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1210 +-A limit-2152 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2153 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1211 +-A limit-2153 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2154 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1212 +-A limit-2154 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2155 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1213 +-A limit-2155 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2156 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1214 +-A limit-2156 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1215 +-A limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2158 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1216 +-A limit-2158 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2159 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1217 +-A limit-2159 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-216 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-126 -A limit-216 -j ACCEPT --A limit-2161 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1018 --A limit-2161 -m limit --limit 1/second -j LOG --A limit-2161 -j ACCEPT --A limit-2162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1019 --A limit-2162 -m limit --limit 1/second -j LOG --A limit-2163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1020 --A limit-2163 -j ACCEPT --A limit-2165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1022 --A limit-2165 -m limit --limit 12/minute -j ULOG --A limit-2165 -j ACCEPT --A limit-2166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1023 --A limit-2166 -m limit --limit 12/minute -j ULOG --A limit-2167 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1024 --A limit-2167 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2168 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1025 --A limit-2168 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2169 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1026 --A limit-2169 -m limit --limit 1/second -j LOG --A limit-2169 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1027 --A limit-2170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1028 --A limit-2171 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1029 --A limit-2172 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1030 --A limit-2173 -m limit --limit 12/minute -j ULOG --A limit-2173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1031 --A limit-2174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2175 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1032 --A limit-2175 -j ACCEPT --A limit-2177 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1034 --A limit-2177 -m limit --limit 1/second -j LOG --A limit-2177 -j ACCEPT --A limit-2178 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1035 --A limit-2178 -m limit --limit 1/second -j LOG --A limit-2179 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1036 --A limit-2179 -j ACCEPT --A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-218 -m limit --limit 1/second -j LOG +-A limit-2160 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1218 +-A limit-2160 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2161 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1219 +-A limit-2161 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2162 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1220 +-A limit-2163 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1221 +-A limit-2164 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1222 +-A limit-2165 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1223 +-A limit-2165 -m limit --limit 1/second -j LOG +-A limit-2166 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1224 +-A limit-2167 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1225 +-A limit-2167 -j TEE --gateway 10.0.0.1 +-A limit-2167 -j TEE --gateway 10.0.0.2 +-A limit-2168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1226 +-A limit-2169 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1227 +-A limit-217 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-2170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1228 +-A limit-2171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1229 +-A limit-2171 -m limit --limit 12/minute -j ULOG +-A limit-2172 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1230 +-A limit-2172 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2173 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1231 +-A limit-2173 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2174 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1232 +-A limit-2174 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2175 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1233 +-A limit-2175 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1234 +-A limit-2176 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1235 +-A limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1236 +-A limit-2178 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1237 +-A limit-2179 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-218 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-218 -m limit --limit 12/minute -j ULOG -A limit-218 -j ACCEPT --A limit-2181 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1038 --A limit-2181 -m limit --limit 12/minute -j ULOG --A limit-2181 -j ACCEPT --A limit-2182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1039 --A limit-2182 -m limit --limit 12/minute -j ULOG --A limit-2183 -m recent --name limit-2183 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2183 -m recent --name limit-2183 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2184 -m recent --name limit-2184 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2184 -m recent --name limit-2184 --rsource --mask 255.255.255.255 --set --A limit-2185 -m recent --name limit-2185 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2180 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1238 +-A limit-2180 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2181 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1239 +-A limit-2181 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2182 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1240 +-A limit-2183 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1241 +-A limit-2184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1242 +-A limit-2185 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1243 -A limit-2185 -m limit --limit 1/second -j LOG --A limit-2185 -m recent --name limit-2185 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2186 -m recent --name limit-2186 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2186 -m recent --name limit-2186 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2187 -m recent --name limit-2187 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2187 -m recent --name limit-2187 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2188 -m recent --name limit-2188 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2188 -m recent --name limit-2188 --rsource --mask 255.255.255.255 --set --A limit-2189 -m recent --name limit-2189 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2189 -m limit --limit 12/minute -j ULOG --A limit-2189 -m recent --name limit-2189 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-219 -m limit --limit 1/second -j LOG --A limit-2190 -m recent --name limit-2190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2190 -m recent --name limit-2190 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2191 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2191 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2192 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2192 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2193 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2193 -m limit --limit 1/second -j LOG --A limit-2193 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2194 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2194 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2195 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2195 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2196 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2196 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2197 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2197 -m limit --limit 12/minute -j ULOG --A limit-2197 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2198 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2198 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2199 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2199 -j ACCEPT +-A limit-2186 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1244 +-A limit-2187 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1245 +-A limit-2187 -j TEE --gateway 10.0.0.1 +-A limit-2187 -j TEE --gateway 10.0.0.2 +-A limit-2188 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1246 +-A limit-2189 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1247 +-A limit-219 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-219 -m limit --limit 12/minute -j ULOG +-A limit-2190 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1248 +-A limit-2191 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1249 +-A limit-2191 -m limit --limit 12/minute -j ULOG +-A limit-2192 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1250 +-A limit-2192 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2193 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1251 +-A limit-2193 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2194 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1252 +-A limit-2194 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2195 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1253 +-A limit-2195 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2196 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1254 +-A limit-2196 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1255 +-A limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1256 +-A limit-2198 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1257 +-A limit-2199 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-22 -m limit --limit 12/minute -j ULOG +-A limit-22 -m limit --limit 1/second -j LOG -A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-220 -j ACCEPT --A limit-2201 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2201 -m limit --limit 1/second -j LOG --A limit-2201 -j ACCEPT --A limit-2202 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2202 -m limit --limit 1/second -j LOG --A limit-2203 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2203 -j ACCEPT --A limit-2205 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2205 -m limit --limit 12/minute -j ULOG --A limit-2205 -j ACCEPT --A limit-2206 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2206 -m limit --limit 12/minute -j ULOG --A limit-2207 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2207 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2208 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2208 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2209 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2209 -m limit --limit 1/second -j LOG --A limit-2209 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2210 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2210 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2211 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2211 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2212 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2212 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2213 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2213 -m limit --limit 12/minute -j ULOG --A limit-2213 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2214 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2214 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2215 -j ACCEPT --A limit-2217 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2217 -m limit --limit 1/second -j LOG --A limit-2217 -j ACCEPT --A limit-2218 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2218 -m limit --limit 1/second -j LOG --A limit-2219 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2219 -j ACCEPT --A limit-222 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-222 -m limit --limit 12/minute -j ULOG --A limit-222 -j ACCEPT --A limit-2221 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2221 -m limit --limit 12/minute -j ULOG --A limit-2221 -j ACCEPT --A limit-2222 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2222 -m limit --limit 12/minute -j ULOG --A limit-2223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2223 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2224 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2224 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2225 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-220 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-220 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1258 +-A limit-2200 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1259 +-A limit-2201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2202 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1260 +-A limit-2203 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1261 +-A limit-2204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1262 +-A limit-2205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1263 +-A limit-2205 -m limit --limit 1/second -j LOG +-A limit-2206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1264 +-A limit-2207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1265 +-A limit-2207 -j TEE --gateway 10.0.0.1 +-A limit-2207 -j TEE --gateway 10.0.0.2 +-A limit-2208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1266 +-A limit-2209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1267 +-A limit-221 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-221 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2210 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1268 +-A limit-2211 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1269 +-A limit-2211 -m limit --limit 12/minute -j ULOG +-A limit-2212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1270 +-A limit-2212 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1271 +-A limit-2213 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1272 +-A limit-2214 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1273 +-A limit-2215 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2216 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1274 +-A limit-2216 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1275 +-A limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2218 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1276 +-A limit-2218 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2219 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1277 +-A limit-2219 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-222 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-222 -m limit --limit 1/second -j LOG +-A limit-222 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2220 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1278 +-A limit-2220 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2221 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1279 +-A limit-2221 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2222 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1280 +-A limit-2223 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1281 +-A limit-2224 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1282 +-A limit-2225 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1283 -A limit-2225 -m limit --limit 1/second -j LOG --A limit-2225 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2226 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2226 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2227 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2227 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2228 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2228 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2229 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2229 -m limit --limit 12/minute -j ULOG --A limit-2229 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-223 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-223 -m limit --limit 12/minute -j ULOG --A limit-2230 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2230 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2231 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2231 -j ACCEPT --A limit-2233 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2233 -m limit --limit 1/second -j LOG --A limit-2233 -j ACCEPT --A limit-2234 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2234 -m limit --limit 1/second -j LOG --A limit-2235 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2235 -j ACCEPT --A limit-2237 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2237 -m limit --limit 12/minute -j ULOG --A limit-2237 -j ACCEPT --A limit-2238 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2238 -m limit --limit 12/minute -j ULOG --A limit-2239 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2239 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-80 --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2240 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2240 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2241 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2241 -m limit --limit 1/second -j LOG --A limit-2241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2242 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2242 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2243 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2243 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2244 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2244 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2245 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2245 -m limit --limit 12/minute -j ULOG --A limit-2245 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2246 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2246 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2247 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2247 -j ACCEPT --A limit-2249 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2249 -m limit --limit 1/second -j LOG --A limit-2249 -j ACCEPT --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-81 --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set --A limit-2250 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2250 -m limit --limit 1/second -j LOG --A limit-2251 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2251 -j ACCEPT --A limit-2253 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2253 -m limit --limit 12/minute -j ULOG --A limit-2253 -j ACCEPT --A limit-2254 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2254 -m limit --limit 12/minute -j ULOG --A limit-2255 -m recent --name limit-2255 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1040 --A limit-2255 -m recent --name limit-2255 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2256 -m recent --name limit-2256 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1041 --A limit-2256 -m recent --name limit-2256 --rsource --mask 255.255.255.255 --set --A limit-2257 -m recent --name limit-2257 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1042 --A limit-2257 -m limit --limit 1/second -j LOG --A limit-2257 -m recent --name limit-2257 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2258 -m recent --name limit-2258 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1043 --A limit-2258 -m recent --name limit-2258 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2259 -m recent --name limit-2259 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1044 --A limit-2259 -m recent --name limit-2259 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-82 --A limit-226 -m limit --limit 1/second -j LOG --A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2260 -m recent --name limit-2260 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1045 --A limit-2260 -m recent --name limit-2260 --rsource --mask 255.255.255.255 --set --A limit-2261 -m recent --name limit-2261 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1046 +-A limit-2226 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1284 +-A limit-2227 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1285 +-A limit-2227 -j TEE --gateway 10.0.0.1 +-A limit-2227 -j TEE --gateway 10.0.0.2 +-A limit-2228 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1286 +-A limit-2229 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1287 +-A limit-223 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-223 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2230 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1288 +-A limit-2231 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1289 +-A limit-2231 -m limit --limit 12/minute -j ULOG +-A limit-2232 -m recent --name limit-2232 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2232 -m recent --name limit-2232 --rsource --mask 255.255.255.255 --set +-A limit-2233 -m recent --name limit-2233 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2233 -m recent --name limit-2233 --rsource --mask 255.255.255.255 --set +-A limit-2234 -m recent --name limit-2234 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2234 -m recent --name limit-2234 --rsource --mask 255.255.255.255 --set +-A limit-2235 -m recent --name limit-2235 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2235 -m recent --name limit-2235 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2236 -m recent --name limit-2236 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2236 -m recent --name limit-2236 --rsource --mask 255.255.255.255 --set +-A limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2238 -m recent --name limit-2238 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2238 -m recent --name limit-2238 --rsource --mask 255.255.255.255 --set +-A limit-2239 -m recent --name limit-2239 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2239 -m recent --name limit-2239 --rsource --mask 255.255.255.255 --set +-A limit-224 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-224 -j TEE --gateway 10.0.0.1 +-A limit-224 -j TEE --gateway 10.0.0.2 +-A limit-224 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2240 -m recent --name limit-2240 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2240 -m recent --name limit-2240 --rsource --mask 255.255.255.255 --set +-A limit-2241 -m recent --name limit-2241 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2241 -m recent --name limit-2241 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2242 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2242 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2243 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2243 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2244 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2244 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2245 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2245 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2246 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2246 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2248 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2249 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2250 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2252 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2253 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2255 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2255 -m limit --limit 1/second -j LOG +-A limit-2256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2257 -j TEE --gateway 10.0.0.1 +-A limit-2257 -j TEE --gateway 10.0.0.2 +-A limit-2258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2259 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-226 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-226 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2260 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2261 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2261 -m limit --limit 12/minute -j ULOG --A limit-2261 -m recent --name limit-2261 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2262 -m recent --name limit-2262 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1047 --A limit-2262 -m recent --name limit-2262 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2263 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1048 --A limit-2263 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2264 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1049 --A limit-2264 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2265 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1050 --A limit-2265 -m limit --limit 1/second -j LOG --A limit-2265 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2266 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1051 --A limit-2266 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2267 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1052 --A limit-2267 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2268 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1053 --A limit-2268 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2269 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1054 --A limit-2269 -m limit --limit 12/minute -j ULOG --A limit-2269 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-83 --A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2270 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1055 --A limit-2270 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2271 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 --A limit-2271 -j ACCEPT --A limit-2273 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 --A limit-2273 -m limit --limit 1/second -j LOG --A limit-2273 -j ACCEPT --A limit-2274 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 --A limit-2274 -m limit --limit 1/second -j LOG --A limit-2275 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1060 --A limit-2275 -j ACCEPT --A limit-2277 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1062 --A limit-2277 -m limit --limit 12/minute -j ULOG --A limit-2277 -j ACCEPT --A limit-2278 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1063 --A limit-2278 -m limit --limit 12/minute -j ULOG --A limit-2279 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1064 --A limit-2279 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-228 -m recent --name limit-228 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-84 --A limit-228 -m recent --name limit-228 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2280 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1065 --A limit-2280 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2281 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1066 --A limit-2281 -m limit --limit 1/second -j LOG --A limit-2281 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2282 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1067 --A limit-2282 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2283 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1068 --A limit-2283 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2284 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1069 --A limit-2284 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2285 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1070 --A limit-2285 -m limit --limit 12/minute -j ULOG --A limit-2285 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2286 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1071 --A limit-2286 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2287 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 --A limit-2287 -j ACCEPT --A limit-2289 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 --A limit-2289 -m limit --limit 1/second -j LOG --A limit-2289 -j ACCEPT --A limit-229 -m recent --name limit-229 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-85 --A limit-229 -m recent --name limit-229 --rsource --mask 255.255.255.255 --set --A limit-2290 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 --A limit-2290 -m limit --limit 1/second -j LOG --A limit-2291 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 --A limit-2291 -j ACCEPT --A limit-2293 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 --A limit-2293 -m limit --limit 12/minute -j ULOG --A limit-2293 -j ACCEPT --A limit-2294 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 --A limit-2294 -m limit --limit 12/minute -j ULOG --A limit-2295 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1080 --A limit-2295 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2296 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1081 --A limit-2296 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2297 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1082 --A limit-2297 -m limit --limit 1/second -j LOG --A limit-2297 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2298 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1083 --A limit-2298 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2299 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1084 --A limit-2299 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2262 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2263 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2264 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2265 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2266 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2266 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2268 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2268 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2269 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2269 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-227 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-227 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2270 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2270 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2271 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2271 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2272 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2273 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2274 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2275 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2275 -m limit --limit 1/second -j LOG +-A limit-2276 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2277 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2277 -j TEE --gateway 10.0.0.1 +-A limit-2277 -j TEE --gateway 10.0.0.2 +-A limit-2278 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2279 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-228 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-228 -m limit --limit 12/minute -j ULOG +-A limit-228 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2280 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2281 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2281 -m limit --limit 12/minute -j ULOG +-A limit-2282 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2282 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2283 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2283 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2284 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2284 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2285 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2285 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2286 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2286 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2288 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2288 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2289 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2289 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-229 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-229 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2290 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2290 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2291 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2291 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2292 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2293 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2294 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2295 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2295 -m limit --limit 1/second -j LOG +-A limit-2296 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2297 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2297 -j TEE --gateway 10.0.0.1 +-A limit-2297 -j TEE --gateway 10.0.0.2 +-A limit-2298 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2299 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-230 -m recent --name limit-230 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-86 --A limit-230 -m limit --limit 12/minute -j ULOG --A limit-230 -m recent --name limit-230 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2300 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1085 --A limit-2300 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2301 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1086 +-A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-230 -j ACCEPT +-A limit-2300 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2301 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2301 -m limit --limit 12/minute -j ULOG --A limit-2301 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2302 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1087 --A limit-2302 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2303 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1088 --A limit-2303 -j ACCEPT --A limit-2305 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 --A limit-2305 -m limit --limit 1/second -j LOG --A limit-2305 -j ACCEPT --A limit-2306 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 --A limit-2306 -m limit --limit 1/second -j LOG --A limit-2307 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 --A limit-2307 -j ACCEPT --A limit-2309 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 --A limit-2309 -m limit --limit 12/minute -j ULOG --A limit-2309 -j ACCEPT --A limit-231 -m recent --name limit-231 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-87 --A limit-231 -m recent --name limit-231 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2310 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 --A limit-2310 -m limit --limit 12/minute -j ULOG --A limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1096 --A limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2312 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1097 --A limit-2312 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2313 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1098 --A limit-2313 -m limit --limit 1/second -j LOG --A limit-2313 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2314 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1099 --A limit-2314 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2315 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1100 --A limit-2315 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2316 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1101 --A limit-2316 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2317 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1102 --A limit-2317 -m limit --limit 12/minute -j ULOG --A limit-2317 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1103 --A limit-2318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2319 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1104 --A limit-2319 -j ACCEPT --A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-88 --A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2321 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1106 --A limit-2321 -m limit --limit 1/second -j LOG --A limit-2321 -j ACCEPT --A limit-2322 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1107 --A limit-2322 -m limit --limit 1/second -j LOG --A limit-2323 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1108 --A limit-2323 -j ACCEPT --A limit-2325 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1110 --A limit-2325 -m limit --limit 12/minute -j ULOG --A limit-2325 -j ACCEPT --A limit-2326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1111 --A limit-2326 -m limit --limit 12/minute -j ULOG --A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2302 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2302 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2303 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2303 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2304 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2304 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2305 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2305 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2306 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2306 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2308 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2308 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2309 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2309 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-231 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-2310 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2310 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2312 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2313 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2314 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2315 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2315 -m limit --limit 1/second -j LOG +-A limit-2316 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2317 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2317 -j TEE --gateway 10.0.0.1 +-A limit-2317 -j TEE --gateway 10.0.0.2 +-A limit-2318 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2319 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-232 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-232 -m limit --limit 1/second -j LOG +-A limit-232 -j ACCEPT +-A limit-2320 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2321 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2321 -m limit --limit 12/minute -j ULOG +-A limit-2322 -m recent --name limit-2322 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1290 +-A limit-2322 -m recent --name limit-2322 --rsource --mask 255.255.255.255 --set +-A limit-2323 -m recent --name limit-2323 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1291 +-A limit-2323 -m recent --name limit-2323 --rsource --mask 255.255.255.255 --set +-A limit-2324 -m recent --name limit-2324 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1292 +-A limit-2324 -m recent --name limit-2324 --rsource --mask 255.255.255.255 --set +-A limit-2325 -m recent --name limit-2325 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1293 +-A limit-2325 -m recent --name limit-2325 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2326 -m recent --name limit-2326 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1294 +-A limit-2326 -m recent --name limit-2326 --rsource --mask 255.255.255.255 --set +-A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1295 +-A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1296 -A limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --set --A limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2329 -m limit --limit 1/second -j LOG --A limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-89 --A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2332 -m recent --name limit-2332 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2332 -m recent --name limit-2332 --rsource --mask 255.255.255.255 --set --A limit-2333 -m recent --name limit-2333 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2333 -m limit --limit 12/minute -j ULOG --A limit-2333 -m recent --name limit-2333 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2334 -m recent --name limit-2334 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2334 -m recent --name limit-2334 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1297 +-A limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --set +-A limit-233 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-233 -m limit --limit 1/second -j LOG +-A limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1298 +-A limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --set +-A limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1299 +-A limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2332 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1300 +-A limit-2332 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2333 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1301 +-A limit-2333 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2334 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1302 +-A limit-2334 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1303 +-A limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1304 -A limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2337 -m limit --limit 1/second -j LOG --A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-90 --A limit-234 -m limit --limit 1/second -j LOG --A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1305 +-A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1306 +-A limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1307 +-A limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-234 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-234 -j TEE --gateway 10.0.0.1 +-A limit-234 -j TEE --gateway 10.0.0.2 +-A limit-234 -j ACCEPT +-A limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1308 -A limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2341 -m limit --limit 12/minute -j ULOG --A limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2342 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2342 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2343 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2343 -j ACCEPT --A limit-2345 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1309 +-A limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2342 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1310 +-A limit-2343 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1311 +-A limit-2344 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1312 +-A limit-2345 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1313 -A limit-2345 -m limit --limit 1/second -j LOG --A limit-2345 -j ACCEPT --A limit-2346 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2346 -m limit --limit 1/second -j LOG --A limit-2347 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2347 -j ACCEPT --A limit-2349 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2349 -m limit --limit 12/minute -j ULOG --A limit-2349 -j ACCEPT --A limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-91 --A limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2350 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2350 -m limit --limit 12/minute -j ULOG --A limit-2351 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2351 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2346 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1314 +-A limit-2347 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1315 +-A limit-2347 -j TEE --gateway 10.0.0.1 +-A limit-2347 -j TEE --gateway 10.0.0.2 +-A limit-2348 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1316 +-A limit-2349 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1317 +-A limit-235 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-235 -j TEE --gateway 10.0.0.1 +-A limit-235 -j TEE --gateway 10.0.0.2 +-A limit-2350 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1318 +-A limit-2351 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1319 +-A limit-2351 -m limit --limit 12/minute -j ULOG +-A limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1320 -A limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2353 -m limit --limit 1/second -j LOG --A limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1321 +-A limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1322 +-A limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1323 +-A limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1324 -A limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2357 -m limit --limit 12/minute -j ULOG --A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2359 -j ACCEPT --A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-92 --A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2361 -m limit --limit 1/second -j LOG --A limit-2361 -j ACCEPT --A limit-2362 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2362 -m limit --limit 1/second -j LOG --A limit-2363 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2363 -j ACCEPT --A limit-2365 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2365 -m limit --limit 12/minute -j ULOG --A limit-2365 -j ACCEPT --A limit-2366 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2366 -m limit --limit 12/minute -j ULOG --A limit-2367 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2367 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2368 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2368 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2369 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2369 -m limit --limit 1/second -j LOG --A limit-2369 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-93 --A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2370 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2370 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2371 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2371 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1325 +-A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1326 +-A limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1327 +-A limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-236 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-236 -j ACCEPT +-A limit-2360 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1328 +-A limit-2360 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1329 +-A limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2362 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1330 +-A limit-2363 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1331 +-A limit-2364 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1332 +-A limit-2365 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1333 +-A limit-2365 -m limit --limit 1/second -j LOG +-A limit-2366 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1334 +-A limit-2367 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1335 +-A limit-2367 -j TEE --gateway 10.0.0.1 +-A limit-2367 -j TEE --gateway 10.0.0.2 +-A limit-2368 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1336 +-A limit-2369 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1337 +-A limit-237 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-2370 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1338 +-A limit-2371 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1339 +-A limit-2371 -m limit --limit 12/minute -j ULOG +-A limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1340 -A limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2373 -m limit --limit 12/minute -j ULOG --A limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2375 -j ACCEPT --A limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2377 -m limit --limit 1/second -j LOG --A limit-2377 -j ACCEPT --A limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2378 -m limit --limit 1/second -j LOG --A limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2379 -j ACCEPT --A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-94 +-A limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1341 +-A limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1342 +-A limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1343 +-A limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2376 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1344 +-A limit-2376 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1345 +-A limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1346 +-A limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1347 +-A limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 -A limit-238 -m limit --limit 12/minute -j ULOG --A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2381 -m limit --limit 12/minute -j ULOG --A limit-2381 -j ACCEPT --A limit-2382 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2382 -m limit --limit 12/minute -j ULOG --A limit-2383 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2383 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2384 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2384 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2385 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-238 -j ACCEPT +-A limit-2380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1348 +-A limit-2380 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1349 +-A limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2382 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1350 +-A limit-2383 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1351 +-A limit-2384 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1352 +-A limit-2385 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1353 -A limit-2385 -m limit --limit 1/second -j LOG --A limit-2385 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2386 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2386 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2387 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2387 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2388 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2388 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2389 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2389 -m limit --limit 12/minute -j ULOG --A limit-2389 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-95 --A limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2390 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2390 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2391 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2391 -j ACCEPT --A limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2393 -m limit --limit 1/second -j LOG --A limit-2393 -j ACCEPT --A limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2394 -m limit --limit 1/second -j LOG --A limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2395 -j ACCEPT --A limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2397 -m limit --limit 12/minute -j ULOG --A limit-2397 -j ACCEPT --A limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2398 -m limit --limit 12/minute -j ULOG --A limit-2399 -m recent --name limit-2399 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1112 --A limit-2399 -m recent --name limit-2399 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-24 -j ACCEPT --A limit-240 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-96 --A limit-240 -j ACCEPT --A limit-2400 -m recent --name limit-2400 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1113 --A limit-2400 -m recent --name limit-2400 --rsource --mask 255.255.255.255 --set --A limit-2401 -m recent --name limit-2401 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1114 --A limit-2401 -m limit --limit 1/second -j LOG --A limit-2401 -m recent --name limit-2401 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2402 -m recent --name limit-2402 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1115 --A limit-2402 -m recent --name limit-2402 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2403 -m recent --name limit-2403 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1116 --A limit-2403 -m recent --name limit-2403 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2404 -m recent --name limit-2404 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1117 --A limit-2404 -m recent --name limit-2404 --rsource --mask 255.255.255.255 --set --A limit-2405 -m recent --name limit-2405 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1118 --A limit-2405 -m limit --limit 12/minute -j ULOG --A limit-2405 -m recent --name limit-2405 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2406 -m recent --name limit-2406 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1119 --A limit-2406 -m recent --name limit-2406 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2407 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1120 --A limit-2407 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2408 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1121 --A limit-2408 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2409 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1122 --A limit-2409 -m limit --limit 1/second -j LOG --A limit-2409 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-241 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 --A limit-2410 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1123 --A limit-2410 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2411 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1124 --A limit-2411 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2412 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1125 --A limit-2412 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2413 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1126 --A limit-2413 -m limit --limit 12/minute -j ULOG --A limit-2413 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2414 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1127 --A limit-2414 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2415 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1128 --A limit-2415 -j ACCEPT --A limit-2417 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1130 --A limit-2417 -m limit --limit 1/second -j LOG --A limit-2417 -j ACCEPT --A limit-2418 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1131 --A limit-2418 -m limit --limit 1/second -j LOG --A limit-2419 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1132 --A limit-2419 -j ACCEPT --A limit-242 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 +-A limit-2386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1354 +-A limit-2387 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1355 +-A limit-2387 -j TEE --gateway 10.0.0.1 +-A limit-2387 -j TEE --gateway 10.0.0.2 +-A limit-2388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1356 +-A limit-2389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1357 +-A limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-239 -m limit --limit 12/minute -j ULOG +-A limit-2390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1358 +-A limit-2391 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1359 +-A limit-2391 -m limit --limit 12/minute -j ULOG +-A limit-2392 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1360 +-A limit-2392 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1361 +-A limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1362 +-A limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1363 +-A limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1364 +-A limit-2396 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1365 +-A limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1366 +-A limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2399 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1367 +-A limit-2399 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-24 -j TEE --gateway 10.0.0.1 +-A limit-24 -j TEE --gateway 10.0.0.2 +-A limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-240 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-240 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2400 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1368 +-A limit-2400 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2401 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1369 +-A limit-2401 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1370 +-A limit-2403 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1371 +-A limit-2404 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1372 +-A limit-2405 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1373 +-A limit-2405 -m limit --limit 1/second -j LOG +-A limit-2406 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1374 +-A limit-2407 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1375 +-A limit-2407 -j TEE --gateway 10.0.0.1 +-A limit-2407 -j TEE --gateway 10.0.0.2 +-A limit-2408 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1376 +-A limit-2409 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1377 +-A limit-241 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-241 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2410 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1378 +-A limit-2411 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1379 +-A limit-2411 -m limit --limit 12/minute -j ULOG +-A limit-2412 -m recent --name limit-2412 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2412 -m recent --name limit-2412 --rsource --mask 255.255.255.255 --set +-A limit-2413 -m recent --name limit-2413 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2413 -m recent --name limit-2413 --rsource --mask 255.255.255.255 --set +-A limit-2414 -m recent --name limit-2414 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2414 -m recent --name limit-2414 --rsource --mask 255.255.255.255 --set +-A limit-2415 -m recent --name limit-2415 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2415 -m recent --name limit-2415 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2416 -m recent --name limit-2416 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2416 -m recent --name limit-2416 --rsource --mask 255.255.255.255 --set +-A limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2418 -m recent --name limit-2418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2418 -m recent --name limit-2418 --rsource --mask 255.255.255.255 --set +-A limit-2419 -m recent --name limit-2419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2419 -m recent --name limit-2419 --rsource --mask 255.255.255.255 --set +-A limit-242 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 -A limit-242 -m limit --limit 1/second -j LOG --A limit-242 -j ACCEPT --A limit-2421 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1134 --A limit-2421 -m limit --limit 12/minute -j ULOG --A limit-2421 -j ACCEPT --A limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1135 --A limit-2422 -m limit --limit 12/minute -j ULOG --A limit-2423 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1136 --A limit-2423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2424 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1137 --A limit-2424 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2425 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1138 --A limit-2425 -m limit --limit 1/second -j LOG --A limit-2425 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2426 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1139 --A limit-2426 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2427 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1140 --A limit-2427 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2428 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1141 --A limit-2428 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2429 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1142 --A limit-2429 -m limit --limit 12/minute -j ULOG --A limit-2429 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-243 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 --A limit-243 -m limit --limit 1/second -j LOG --A limit-2430 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1143 --A limit-2430 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2431 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1144 --A limit-2431 -j ACCEPT --A limit-2433 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1146 --A limit-2433 -m limit --limit 1/second -j LOG --A limit-2433 -j ACCEPT --A limit-2434 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1147 --A limit-2434 -m limit --limit 1/second -j LOG --A limit-2435 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1148 --A limit-2435 -j ACCEPT --A limit-2437 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1150 --A limit-2437 -m limit --limit 12/minute -j ULOG --A limit-2437 -j ACCEPT --A limit-2438 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1151 --A limit-2438 -m limit --limit 12/minute -j ULOG --A limit-2439 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1152 --A limit-2439 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-244 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-100 --A limit-244 -j ACCEPT --A limit-2440 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1153 --A limit-2440 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2441 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1154 --A limit-2441 -m limit --limit 1/second -j LOG --A limit-2441 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2442 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1155 --A limit-2442 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2443 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1156 --A limit-2443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2444 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1157 --A limit-2444 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2445 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1158 --A limit-2445 -m limit --limit 12/minute -j ULOG --A limit-2445 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2446 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1159 --A limit-2446 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2447 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1160 --A limit-2447 -j ACCEPT --A limit-2449 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1162 --A limit-2449 -m limit --limit 1/second -j LOG --A limit-2449 -j ACCEPT --A limit-245 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-101 --A limit-2450 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1163 --A limit-2450 -m limit --limit 1/second -j LOG --A limit-2451 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1164 --A limit-2451 -j ACCEPT --A limit-2453 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1166 --A limit-2453 -m limit --limit 12/minute -j ULOG --A limit-2453 -j ACCEPT --A limit-2454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1167 --A limit-2454 -m limit --limit 12/minute -j ULOG --A limit-2455 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1168 --A limit-2455 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2456 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1169 --A limit-2456 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2457 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1170 --A limit-2457 -m limit --limit 1/second -j LOG --A limit-2457 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2458 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1171 --A limit-2458 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2459 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1172 --A limit-2459 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-246 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-102 --A limit-246 -m limit --limit 12/minute -j ULOG --A limit-246 -j ACCEPT --A limit-2460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1173 --A limit-2460 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1174 +-A limit-242 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2420 -m recent --name limit-2420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2420 -m recent --name limit-2420 --rsource --mask 255.255.255.255 --set +-A limit-2421 -m recent --name limit-2421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2421 -m recent --name limit-2421 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2423 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2423 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2424 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2425 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2426 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2428 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2429 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-243 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-243 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2430 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2430 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2431 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2431 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2435 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2435 -m limit --limit 1/second -j LOG +-A limit-2436 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2437 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2437 -j TEE --gateway 10.0.0.1 +-A limit-2437 -j TEE --gateway 10.0.0.2 +-A limit-2438 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2439 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-244 -j TEE --gateway 10.0.0.1 +-A limit-244 -j TEE --gateway 10.0.0.2 +-A limit-244 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2440 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2441 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2441 -m limit --limit 12/minute -j ULOG +-A limit-2442 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2442 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2443 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2443 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2444 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2444 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2445 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2445 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2446 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2446 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2448 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2448 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2449 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2449 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2450 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2450 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2451 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2451 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2452 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2453 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2454 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2455 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2455 -m limit --limit 1/second -j LOG +-A limit-2456 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2457 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2457 -j TEE --gateway 10.0.0.1 +-A limit-2457 -j TEE --gateway 10.0.0.2 +-A limit-2458 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2459 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-246 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2460 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2461 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2461 -m limit --limit 12/minute -j ULOG --A limit-2461 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1175 --A limit-2462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2463 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1176 --A limit-2463 -j ACCEPT --A limit-2465 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1178 --A limit-2465 -m limit --limit 1/second -j LOG --A limit-2465 -j ACCEPT --A limit-2466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1179 --A limit-2466 -m limit --limit 1/second -j LOG --A limit-2467 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1180 --A limit-2467 -j ACCEPT --A limit-2469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1182 --A limit-2469 -m limit --limit 12/minute -j ULOG --A limit-2469 -j ACCEPT --A limit-247 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-103 --A limit-247 -m limit --limit 12/minute -j ULOG --A limit-2470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1183 --A limit-2470 -m limit --limit 12/minute -j ULOG --A limit-2471 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2471 -j ACCEPT --A limit-2471 -m limit --limit 1/second -j LOG --A limit-2471 -j DROP --A limit-2472 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2472 -j RETURN --A limit-2472 -m limit --limit 1/second -j LOG --A limit-2472 -j DROP --A limit-2473 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2473 -j logaccept-36 --A limit-2473 -m limit --limit 1/second -j LOG --A limit-2473 -j DROP --A limit-2474 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2474 -j ACCEPT --A limit-2474 -m limit --limit 1/second -j LOG --A limit-2474 -j DROP --A limit-2475 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2475 -j logaccept-37 +-A limit-2462 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2462 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2463 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2463 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2464 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2464 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2465 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2465 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2466 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2466 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2468 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2468 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2469 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2469 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-247 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-247 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2470 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2470 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2471 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2471 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2472 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2473 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2474 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2475 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2475 -m limit --limit 1/second -j LOG --A limit-2475 -j DROP --A limit-2476 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2476 -j ACCEPT --A limit-2476 -j DROP --A limit-2477 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2477 -j RETURN --A limit-2477 -j DROP --A limit-2478 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2478 -j logaccept-38 --A limit-2478 -j DROP --A limit-2479 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2479 -j ACCEPT --A limit-2479 -j DROP --A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-104 --A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2480 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2480 -j logaccept-39 --A limit-2480 -j DROP --A limit-2481 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2481 -j ACCEPT --A limit-2481 -m limit --limit 1/second -j LOG --A limit-2481 -j DROP --A limit-2482 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2482 -j RETURN --A limit-2482 -m limit --limit 1/second -j LOG --A limit-2482 -j DROP --A limit-2483 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2483 -j logaccept-40 --A limit-2483 -m limit --limit 1/second -j LOG --A limit-2483 -j DROP --A limit-2484 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2484 -j ACCEPT --A limit-2484 -m limit --limit 1/second -j LOG --A limit-2484 -j DROP --A limit-2485 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2485 -j logaccept-41 --A limit-2485 -m limit --limit 1/second -j LOG --A limit-2485 -j DROP --A limit-2486 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2486 -j ACCEPT --A limit-2486 -j DROP --A limit-2487 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2487 -j RETURN --A limit-2487 -j DROP --A limit-2488 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2488 -j logaccept-42 --A limit-2488 -j DROP --A limit-2489 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2489 -j ACCEPT --A limit-2489 -j DROP --A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-105 --A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2490 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2490 -j logaccept-43 --A limit-2490 -j DROP --A limit-2491 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2491 -j ACCEPT --A limit-2491 -m limit --limit 12/minute -j ULOG --A limit-2491 -j DROP --A limit-2492 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2492 -j RETURN --A limit-2492 -m limit --limit 12/minute -j ULOG --A limit-2492 -j DROP --A limit-2493 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2493 -j logaccept-44 --A limit-2493 -m limit --limit 12/minute -j ULOG --A limit-2493 -j DROP --A limit-2494 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2494 -j ACCEPT --A limit-2494 -m limit --limit 12/minute -j ULOG --A limit-2494 -j DROP --A limit-2495 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2495 -j logaccept-45 --A limit-2495 -m limit --limit 12/minute -j ULOG --A limit-2495 -j DROP --A limit-2496 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2496 -j ACCEPT --A limit-2496 -j DROP --A limit-2497 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2497 -j RETURN --A limit-2497 -j DROP --A limit-2498 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2498 -j logaccept-46 --A limit-2498 -j DROP --A limit-2499 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2499 -j ACCEPT --A limit-2499 -j DROP --A limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-106 --A limit-250 -m limit --limit 1/second -j LOG --A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2500 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2500 -j logaccept-47 --A limit-2500 -j DROP --A limit-2501 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2501 -j ACCEPT --A limit-2501 -m limit --limit 1/second -j LOG --A limit-2501 -j DROP --A limit-2502 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2502 -j RETURN --A limit-2502 -m limit --limit 1/second -j LOG --A limit-2502 -j DROP --A limit-2503 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2503 -j logaccept-48 --A limit-2503 -m limit --limit 1/second -j LOG --A limit-2503 -j DROP --A limit-2504 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2504 -j ACCEPT --A limit-2504 -m limit --limit 1/second -j LOG --A limit-2504 -j DROP --A limit-2505 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2505 -j logaccept-49 --A limit-2505 -m limit --limit 1/second -j LOG --A limit-2505 -j DROP --A limit-2506 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2506 -j ACCEPT --A limit-2506 -j DROP --A limit-2507 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2507 -j RETURN --A limit-2507 -j DROP --A limit-2508 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2508 -j logaccept-50 --A limit-2508 -j DROP --A limit-2509 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2509 -j ACCEPT --A limit-2509 -j DROP --A limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-107 --A limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2510 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2510 -j logaccept-51 --A limit-2510 -j DROP --A limit-2511 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2511 -j ACCEPT --A limit-2511 -m limit --limit 12/minute -j ULOG --A limit-2511 -j DROP --A limit-2512 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2512 -j RETURN --A limit-2512 -m limit --limit 12/minute -j ULOG --A limit-2512 -j DROP --A limit-2513 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2513 -j logaccept-52 --A limit-2513 -m limit --limit 12/minute -j ULOG --A limit-2513 -j DROP --A limit-2514 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2514 -j ACCEPT --A limit-2514 -m limit --limit 12/minute -j ULOG --A limit-2514 -j DROP --A limit-2515 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2515 -j logaccept-53 --A limit-2515 -m limit --limit 12/minute -j ULOG --A limit-2515 -j DROP --A limit-252 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-108 --A limit-252 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-253 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-109 --A limit-253 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-254 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-110 --A limit-254 -m limit --limit 12/minute -j ULOG --A limit-254 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-255 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-111 --A limit-255 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-256 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-112 +-A limit-2476 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2477 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2477 -j TEE --gateway 10.0.0.1 +-A limit-2477 -j TEE --gateway 10.0.0.2 +-A limit-2478 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2479 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-248 -m limit --limit 12/minute -j ULOG +-A limit-248 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2480 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2481 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2481 -m limit --limit 12/minute -j ULOG +-A limit-2482 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2482 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2483 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2483 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2484 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2484 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2485 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2485 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2486 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2486 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2488 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2488 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2489 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2489 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-249 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-249 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2490 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2490 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2491 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2491 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2492 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2493 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2494 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2495 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2495 -m limit --limit 1/second -j LOG +-A limit-2496 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2497 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2497 -j TEE --gateway 10.0.0.1 +-A limit-2497 -j TEE --gateway 10.0.0.2 +-A limit-2498 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2499 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-250 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-250 -j ACCEPT +-A limit-2500 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2501 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2501 -m limit --limit 12/minute -j ULOG +-A limit-2502 -m recent --name limit-2502 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1380 +-A limit-2502 -m recent --name limit-2502 --rsource --mask 255.255.255.255 --set +-A limit-2503 -m recent --name limit-2503 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1381 +-A limit-2503 -m recent --name limit-2503 --rsource --mask 255.255.255.255 --set +-A limit-2504 -m recent --name limit-2504 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1382 +-A limit-2504 -m recent --name limit-2504 --rsource --mask 255.255.255.255 --set +-A limit-2505 -m recent --name limit-2505 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1383 +-A limit-2505 -m recent --name limit-2505 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2506 -m recent --name limit-2506 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1384 +-A limit-2506 -m recent --name limit-2506 --rsource --mask 255.255.255.255 --set +-A limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1385 +-A limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2508 -m recent --name limit-2508 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1386 +-A limit-2508 -m recent --name limit-2508 --rsource --mask 255.255.255.255 --set +-A limit-2509 -m recent --name limit-2509 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1387 +-A limit-2509 -m recent --name limit-2509 --rsource --mask 255.255.255.255 --set +-A limit-251 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-2510 -m recent --name limit-2510 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1388 +-A limit-2510 -m recent --name limit-2510 --rsource --mask 255.255.255.255 --set +-A limit-2511 -m recent --name limit-2511 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1389 +-A limit-2511 -m recent --name limit-2511 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2512 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1390 +-A limit-2512 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2513 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1391 +-A limit-2513 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2514 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1392 +-A limit-2514 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2515 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1393 +-A limit-2515 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2516 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1394 +-A limit-2516 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1395 +-A limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2518 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1396 +-A limit-2518 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2519 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1397 +-A limit-2519 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-252 -m limit --limit 1/second -j LOG +-A limit-252 -j ACCEPT +-A limit-2520 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1398 +-A limit-2520 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2521 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1399 +-A limit-2521 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2522 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1400 +-A limit-2523 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1401 +-A limit-2524 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1402 +-A limit-2525 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1403 +-A limit-2525 -m limit --limit 1/second -j LOG +-A limit-2526 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1404 +-A limit-2527 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1405 +-A limit-2527 -j TEE --gateway 10.0.0.1 +-A limit-2527 -j TEE --gateway 10.0.0.2 +-A limit-2528 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1406 +-A limit-2529 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1407 +-A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-253 -m limit --limit 1/second -j LOG +-A limit-2530 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1408 +-A limit-2531 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1409 +-A limit-2531 -m limit --limit 12/minute -j ULOG +-A limit-2532 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1410 +-A limit-2532 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2533 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1411 +-A limit-2533 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2534 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1412 +-A limit-2534 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2535 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1413 +-A limit-2535 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2536 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1414 +-A limit-2536 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1415 +-A limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2538 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1416 +-A limit-2538 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2539 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1417 +-A limit-2539 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-254 -j TEE --gateway 10.0.0.1 +-A limit-254 -j TEE --gateway 10.0.0.2 +-A limit-254 -j ACCEPT +-A limit-2540 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1418 +-A limit-2540 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2541 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1419 +-A limit-2541 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2542 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1420 +-A limit-2543 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1421 +-A limit-2544 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1422 +-A limit-2545 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1423 +-A limit-2545 -m limit --limit 1/second -j LOG +-A limit-2546 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1424 +-A limit-2547 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1425 +-A limit-2547 -j TEE --gateway 10.0.0.1 +-A limit-2547 -j TEE --gateway 10.0.0.2 +-A limit-2548 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1426 +-A limit-2549 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1427 +-A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-255 -j TEE --gateway 10.0.0.1 +-A limit-255 -j TEE --gateway 10.0.0.2 +-A limit-2550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1428 +-A limit-2551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1429 +-A limit-2551 -m limit --limit 12/minute -j ULOG +-A limit-2552 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1430 +-A limit-2552 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2553 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1431 +-A limit-2553 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2554 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1432 +-A limit-2554 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2555 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1433 +-A limit-2555 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1434 +-A limit-2556 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1435 +-A limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1436 +-A limit-2558 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1437 +-A limit-2559 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-166 -A limit-256 -j ACCEPT --A limit-257 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-113 --A limit-258 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-114 --A limit-258 -m limit --limit 1/second -j LOG +-A limit-2560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1438 +-A limit-2560 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1439 +-A limit-2561 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1440 +-A limit-2563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1441 +-A limit-2564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1442 +-A limit-2565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1443 +-A limit-2565 -m limit --limit 1/second -j LOG +-A limit-2566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1444 +-A limit-2567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1445 +-A limit-2567 -j TEE --gateway 10.0.0.1 +-A limit-2567 -j TEE --gateway 10.0.0.2 +-A limit-2568 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1446 +-A limit-2569 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1447 +-A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-2570 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1448 +-A limit-2571 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1449 +-A limit-2571 -m limit --limit 12/minute -j ULOG +-A limit-2572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1450 +-A limit-2572 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1451 +-A limit-2573 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2574 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1452 +-A limit-2574 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2575 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1453 +-A limit-2575 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2576 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1454 +-A limit-2576 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1455 +-A limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2578 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1456 +-A limit-2578 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2579 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1457 +-A limit-2579 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-258 -m limit --limit 12/minute -j ULOG -A limit-258 -j ACCEPT --A limit-259 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-115 --A limit-259 -m limit --limit 1/second -j LOG --A limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-26 -m limit --limit 1/second -j LOG --A limit-26 -j ACCEPT --A limit-260 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-116 --A limit-260 -j ACCEPT --A limit-261 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-117 --A limit-262 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-118 --A limit-262 -m limit --limit 12/minute -j ULOG --A limit-262 -j ACCEPT --A limit-263 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-119 --A limit-263 -m limit --limit 12/minute -j ULOG --A limit-264 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-120 --A limit-264 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-265 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-121 --A limit-265 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-266 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-122 --A limit-266 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-267 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-123 --A limit-267 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-268 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-124 --A limit-268 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-269 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-125 --A limit-269 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-27 -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-126 --A limit-270 -m limit --limit 12/minute -j ULOG --A limit-270 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-271 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-127 --A limit-271 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-272 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-2580 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1458 +-A limit-2580 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2581 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1459 +-A limit-2581 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2582 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1460 +-A limit-2583 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1461 +-A limit-2584 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1462 +-A limit-2585 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1463 +-A limit-2585 -m limit --limit 1/second -j LOG +-A limit-2586 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1464 +-A limit-2587 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1465 +-A limit-2587 -j TEE --gateway 10.0.0.1 +-A limit-2587 -j TEE --gateway 10.0.0.2 +-A limit-2588 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1466 +-A limit-2589 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1467 +-A limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-259 -m limit --limit 12/minute -j ULOG +-A limit-2590 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1468 +-A limit-2591 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1469 +-A limit-2591 -m limit --limit 12/minute -j ULOG +-A limit-2592 -m recent --name limit-2592 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1470 +-A limit-2592 -m recent --name limit-2592 --rsource --mask 255.255.255.255 --set +-A limit-2593 -m recent --name limit-2593 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1471 +-A limit-2593 -m recent --name limit-2593 --rsource --mask 255.255.255.255 --set +-A limit-2594 -m recent --name limit-2594 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1472 +-A limit-2594 -m recent --name limit-2594 --rsource --mask 255.255.255.255 --set +-A limit-2595 -m recent --name limit-2595 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1473 +-A limit-2595 -m recent --name limit-2595 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2596 -m recent --name limit-2596 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1474 +-A limit-2596 -m recent --name limit-2596 --rsource --mask 255.255.255.255 --set +-A limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1475 +-A limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2598 -m recent --name limit-2598 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1476 +-A limit-2598 -m recent --name limit-2598 --rsource --mask 255.255.255.255 --set +-A limit-2599 -m recent --name limit-2599 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1477 +-A limit-2599 -m recent --name limit-2599 --rsource --mask 255.255.255.255 --set +-A limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-260 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-260 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-2600 -m recent --name limit-2600 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1478 +-A limit-2600 -m recent --name limit-2600 --rsource --mask 255.255.255.255 --set +-A limit-2601 -m recent --name limit-2601 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1479 +-A limit-2601 -m recent --name limit-2601 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2602 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1480 +-A limit-2602 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2603 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1481 +-A limit-2603 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2604 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1482 +-A limit-2604 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2605 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1483 +-A limit-2605 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2606 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1484 +-A limit-2606 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1485 +-A limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2608 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1486 +-A limit-2608 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2609 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1487 +-A limit-2609 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-261 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-261 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2610 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1488 +-A limit-2610 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2611 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1489 +-A limit-2611 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2612 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1490 +-A limit-2613 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1491 +-A limit-2614 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1492 +-A limit-2615 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1493 +-A limit-2615 -m limit --limit 1/second -j LOG +-A limit-2616 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1494 +-A limit-2617 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1495 +-A limit-2617 -j TEE --gateway 10.0.0.1 +-A limit-2617 -j TEE --gateway 10.0.0.2 +-A limit-2618 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1496 +-A limit-2619 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1497 +-A limit-262 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-262 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-2620 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1498 +-A limit-2621 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1499 +-A limit-2621 -m limit --limit 12/minute -j ULOG +-A limit-2622 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1500 +-A limit-2622 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2623 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1501 +-A limit-2623 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2624 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1502 +-A limit-2624 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2625 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1503 +-A limit-2625 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2626 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1504 +-A limit-2626 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1505 +-A limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2628 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1506 +-A limit-2628 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2629 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1507 +-A limit-2629 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-263 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-263 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2630 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1508 +-A limit-2630 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2631 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1509 +-A limit-2631 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2632 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1510 +-A limit-2633 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1511 +-A limit-2634 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1512 +-A limit-2635 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1513 +-A limit-2635 -m limit --limit 1/second -j LOG +-A limit-2636 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1514 +-A limit-2637 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1515 +-A limit-2637 -j TEE --gateway 10.0.0.1 +-A limit-2637 -j TEE --gateway 10.0.0.2 +-A limit-2638 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1516 +-A limit-2639 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1517 +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-174 +-A limit-264 -j TEE --gateway 10.0.0.1 +-A limit-264 -j TEE --gateway 10.0.0.2 +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-2640 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1518 +-A limit-2641 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1519 +-A limit-2641 -m limit --limit 12/minute -j ULOG +-A limit-2642 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1520 +-A limit-2642 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2643 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1521 +-A limit-2643 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2644 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1522 +-A limit-2644 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2645 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1523 +-A limit-2645 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2646 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1524 +-A limit-2646 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1525 +-A limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2648 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1526 +-A limit-2648 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2649 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1527 +-A limit-2649 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-175 +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2650 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1528 +-A limit-2650 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2651 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1529 +-A limit-2651 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2652 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1530 +-A limit-2653 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1531 +-A limit-2654 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1532 +-A limit-2655 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1533 +-A limit-2655 -m limit --limit 1/second -j LOG +-A limit-2656 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1534 +-A limit-2657 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1535 +-A limit-2657 -j TEE --gateway 10.0.0.1 +-A limit-2657 -j TEE --gateway 10.0.0.2 +-A limit-2658 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1536 +-A limit-2659 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1537 +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-176 +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-2660 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1538 +-A limit-2661 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1539 +-A limit-2661 -m limit --limit 12/minute -j ULOG +-A limit-2662 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1540 +-A limit-2662 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2663 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1541 +-A limit-2663 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2664 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1542 +-A limit-2664 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2665 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1543 +-A limit-2665 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2666 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1544 +-A limit-2666 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1545 +-A limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2668 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1546 +-A limit-2668 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2669 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1547 +-A limit-2669 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-177 +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2670 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1548 +-A limit-2670 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2671 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1549 +-A limit-2671 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2672 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1550 +-A limit-2673 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1551 +-A limit-2674 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1552 +-A limit-2675 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1553 +-A limit-2675 -m limit --limit 1/second -j LOG +-A limit-2676 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1554 +-A limit-2677 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1555 +-A limit-2677 -j TEE --gateway 10.0.0.1 +-A limit-2677 -j TEE --gateway 10.0.0.2 +-A limit-2678 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1556 +-A limit-2679 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1557 +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-178 +-A limit-268 -m limit --limit 12/minute -j ULOG +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-2680 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1558 +-A limit-2681 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1559 +-A limit-2681 -m limit --limit 12/minute -j ULOG +-A limit-2682 -m recent --name limit-2682 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2682 -m recent --name limit-2682 --rsource --mask 255.255.255.255 --set +-A limit-2683 -m recent --name limit-2683 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2683 -m recent --name limit-2683 --rsource --mask 255.255.255.255 --set +-A limit-2684 -m recent --name limit-2684 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2684 -m recent --name limit-2684 --rsource --mask 255.255.255.255 --set +-A limit-2685 -m recent --name limit-2685 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2685 -m recent --name limit-2685 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2686 -m recent --name limit-2686 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2686 -m recent --name limit-2686 --rsource --mask 255.255.255.255 --set +-A limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2688 -m recent --name limit-2688 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2688 -m recent --name limit-2688 --rsource --mask 255.255.255.255 --set +-A limit-2689 -m recent --name limit-2689 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2689 -m recent --name limit-2689 --rsource --mask 255.255.255.255 --set +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-179 +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2690 -m recent --name limit-2690 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2690 -m recent --name limit-2690 --rsource --mask 255.255.255.255 --set +-A limit-2691 -m recent --name limit-2691 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2691 -m recent --name limit-2691 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2692 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2692 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2693 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2693 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2694 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2694 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2695 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2695 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2696 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2696 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2698 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2698 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2699 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2699 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-180 +-A limit-270 -j ACCEPT +-A limit-2700 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2700 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2701 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2701 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2702 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2703 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2704 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2705 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2705 -m limit --limit 1/second -j LOG +-A limit-2706 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2707 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2707 -j TEE --gateway 10.0.0.1 +-A limit-2707 -j TEE --gateway 10.0.0.2 +-A limit-2708 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2709 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-181 +-A limit-2710 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2711 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2711 -m limit --limit 12/minute -j ULOG +-A limit-2712 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2712 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2713 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2713 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2714 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2714 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2715 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2715 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2716 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2716 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2718 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2718 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2719 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2719 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-182 +-A limit-272 -m limit --limit 1/second -j LOG -A limit-272 -j ACCEPT --A limit-273 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-129 --A limit-274 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-130 --A limit-274 -m limit --limit 1/second -j LOG +-A limit-2720 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2720 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2721 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2721 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2722 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2723 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2724 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2725 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2725 -m limit --limit 1/second -j LOG +-A limit-2726 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2727 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2727 -j TEE --gateway 10.0.0.1 +-A limit-2727 -j TEE --gateway 10.0.0.2 +-A limit-2728 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2729 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-183 +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-2730 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2731 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2731 -m limit --limit 12/minute -j ULOG +-A limit-2732 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2732 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2733 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2733 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2734 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2734 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2735 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2735 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2736 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2736 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2738 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2738 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2739 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2739 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-184 +-A limit-274 -j TEE --gateway 10.0.0.1 +-A limit-274 -j TEE --gateway 10.0.0.2 -A limit-274 -j ACCEPT --A limit-275 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-131 --A limit-275 -m limit --limit 1/second -j LOG --A limit-276 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-2740 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2740 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2741 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2741 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2742 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2743 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2744 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2745 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2745 -m limit --limit 1/second -j LOG +-A limit-2746 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2747 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2747 -j TEE --gateway 10.0.0.1 +-A limit-2747 -j TEE --gateway 10.0.0.2 +-A limit-2748 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2749 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-185 +-A limit-275 -j TEE --gateway 10.0.0.1 +-A limit-275 -j TEE --gateway 10.0.0.2 +-A limit-2750 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2751 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2751 -m limit --limit 12/minute -j ULOG +-A limit-2752 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2752 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2753 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2753 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2754 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2754 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2755 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2755 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2756 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2756 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2758 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2758 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2759 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2759 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-276 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-186 -A limit-276 -j ACCEPT --A limit-277 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 --A limit-278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-2760 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2760 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2761 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2761 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2762 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2763 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2764 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2765 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2765 -m limit --limit 1/second -j LOG +-A limit-2766 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2767 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2767 -j TEE --gateway 10.0.0.1 +-A limit-2767 -j TEE --gateway 10.0.0.2 +-A limit-2768 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2769 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-187 +-A limit-2770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2771 -m limit --limit 12/minute -j ULOG +-A limit-2772 -m recent --name limit-2772 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1560 +-A limit-2772 -m recent --name limit-2772 --rsource --mask 255.255.255.255 --set +-A limit-2773 -m recent --name limit-2773 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1561 +-A limit-2773 -m recent --name limit-2773 --rsource --mask 255.255.255.255 --set +-A limit-2774 -m recent --name limit-2774 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1562 +-A limit-2774 -m recent --name limit-2774 --rsource --mask 255.255.255.255 --set +-A limit-2775 -m recent --name limit-2775 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1563 +-A limit-2775 -m recent --name limit-2775 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2776 -m recent --name limit-2776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1564 +-A limit-2776 -m recent --name limit-2776 --rsource --mask 255.255.255.255 --set +-A limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1565 +-A limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2778 -m recent --name limit-2778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1566 +-A limit-2778 -m recent --name limit-2778 --rsource --mask 255.255.255.255 --set +-A limit-2779 -m recent --name limit-2779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1567 +-A limit-2779 -m recent --name limit-2779 --rsource --mask 255.255.255.255 --set +-A limit-278 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-188 -A limit-278 -m limit --limit 12/minute -j ULOG -A limit-278 -j ACCEPT --A limit-279 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-2780 -m recent --name limit-2780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1568 +-A limit-2780 -m recent --name limit-2780 --rsource --mask 255.255.255.255 --set +-A limit-2781 -m recent --name limit-2781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1569 +-A limit-2781 -m recent --name limit-2781 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1570 +-A limit-2782 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1571 +-A limit-2783 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1572 +-A limit-2784 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1573 +-A limit-2785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1574 +-A limit-2786 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1575 +-A limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2788 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1576 +-A limit-2788 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2789 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1577 +-A limit-2789 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-279 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-189 -A limit-279 -m limit --limit 12/minute -j ULOG --A limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-28 -j ACCEPT --A limit-280 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-136 --A limit-280 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-281 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-137 --A limit-281 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-282 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-2790 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1578 +-A limit-2790 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2791 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1579 +-A limit-2791 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1580 +-A limit-2793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1581 +-A limit-2794 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1582 +-A limit-2795 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1583 +-A limit-2795 -m limit --limit 1/second -j LOG +-A limit-2796 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1584 +-A limit-2797 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1585 +-A limit-2797 -j TEE --gateway 10.0.0.1 +-A limit-2797 -j TEE --gateway 10.0.0.2 +-A limit-2798 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1586 +-A limit-2799 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1587 +-A limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-28 -m limit --limit 12/minute -j ULOG +-A limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2800 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1588 +-A limit-2801 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1589 +-A limit-2801 -m limit --limit 12/minute -j ULOG +-A limit-2802 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1590 +-A limit-2802 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2803 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1591 +-A limit-2803 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2804 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1592 +-A limit-2804 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2805 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1593 +-A limit-2805 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2806 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1594 +-A limit-2806 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1595 +-A limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2808 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1596 +-A limit-2808 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2809 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1597 +-A limit-2809 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set +-A limit-2810 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1598 +-A limit-2810 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2811 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1599 +-A limit-2811 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2812 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1600 +-A limit-2813 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1601 +-A limit-2814 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1602 +-A limit-2815 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1603 +-A limit-2815 -m limit --limit 1/second -j LOG +-A limit-2816 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1604 +-A limit-2817 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1605 +-A limit-2817 -j TEE --gateway 10.0.0.1 +-A limit-2817 -j TEE --gateway 10.0.0.2 +-A limit-2818 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1606 +-A limit-2819 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1607 +-A limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-282 -m limit --limit 1/second -j LOG --A limit-282 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-283 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-285 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-286 -m limit --limit 12/minute -j ULOG --A limit-286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-288 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 --A limit-288 -j ACCEPT --A limit-289 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 --A limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 --A limit-290 -m limit --limit 1/second -j LOG --A limit-290 -j ACCEPT --A limit-291 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 --A limit-291 -m limit --limit 1/second -j LOG --A limit-292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 --A limit-292 -j ACCEPT --A limit-293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 --A limit-294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 --A limit-294 -m limit --limit 12/minute -j ULOG --A limit-294 -j ACCEPT --A limit-295 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-151 --A limit-295 -m limit --limit 12/minute -j ULOG --A limit-296 -m recent --name limit-296 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-296 -m recent --name limit-296 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-297 -m recent --name limit-297 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-297 -m recent --name limit-297 --rsource --mask 255.255.255.255 --set --A limit-298 -m recent --name limit-298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-298 -m limit --limit 1/second -j LOG --A limit-298 -m recent --name limit-298 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-299 -m recent --name limit-299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-299 -m recent --name limit-299 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2820 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1608 +-A limit-2821 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1609 +-A limit-2821 -m limit --limit 12/minute -j ULOG +-A limit-2822 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1610 +-A limit-2822 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2823 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1611 +-A limit-2823 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2824 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1612 +-A limit-2824 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2825 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1613 +-A limit-2825 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2826 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1614 +-A limit-2826 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1615 +-A limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2828 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1616 +-A limit-2828 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2829 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1617 +-A limit-2829 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2830 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1618 +-A limit-2830 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2831 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1619 +-A limit-2831 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2832 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1620 +-A limit-2833 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1621 +-A limit-2834 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1622 +-A limit-2835 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1623 +-A limit-2835 -m limit --limit 1/second -j LOG +-A limit-2836 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1624 +-A limit-2837 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1625 +-A limit-2837 -j TEE --gateway 10.0.0.1 +-A limit-2837 -j TEE --gateway 10.0.0.2 +-A limit-2838 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1626 +-A limit-2839 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1627 +-A limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-284 -j TEE --gateway 10.0.0.1 +-A limit-284 -j TEE --gateway 10.0.0.2 +-A limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2840 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1628 +-A limit-2841 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1629 +-A limit-2841 -m limit --limit 12/minute -j ULOG +-A limit-2842 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1630 +-A limit-2842 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2843 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1631 +-A limit-2843 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2844 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1632 +-A limit-2844 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2845 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1633 +-A limit-2845 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2846 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1634 +-A limit-2846 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1635 +-A limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2848 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1636 +-A limit-2848 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2849 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1637 +-A limit-2849 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2850 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1638 +-A limit-2850 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2851 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1639 +-A limit-2851 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2852 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1640 +-A limit-2853 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1641 +-A limit-2854 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1642 +-A limit-2855 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1643 +-A limit-2855 -m limit --limit 1/second -j LOG +-A limit-2856 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1644 +-A limit-2857 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1645 +-A limit-2857 -j TEE --gateway 10.0.0.1 +-A limit-2857 -j TEE --gateway 10.0.0.2 +-A limit-2858 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1646 +-A limit-2859 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1647 +-A limit-286 -m recent --name limit-286 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-286 -m recent --name limit-286 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2860 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1648 +-A limit-2861 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1649 +-A limit-2861 -m limit --limit 12/minute -j ULOG +-A limit-2862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2862 -j RETURN +-A limit-2862 -m limit --limit 1/second -j LOG +-A limit-2862 -j DROP +-A limit-2863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2863 -j RETURN +-A limit-2863 -m limit --limit 1/second -j LOG +-A limit-2863 -j DROP +-A limit-2864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2864 -j RETURN +-A limit-2864 -m limit --limit 1/second -j LOG +-A limit-2864 -j DROP +-A limit-2865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2865 -j RETURN +-A limit-2865 -m limit --limit 1/second -j LOG +-A limit-2865 -j DROP +-A limit-2866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2866 -j RETURN +-A limit-2866 -m limit --limit 1/second -j LOG +-A limit-2866 -j DROP +-A limit-2867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2867 -j RETURN +-A limit-2867 -m limit --limit 1/second -j LOG +-A limit-2867 -j DROP +-A limit-2868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2868 -j RETURN +-A limit-2868 -j DROP +-A limit-2869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2869 -j RETURN +-A limit-2869 -j DROP +-A limit-287 -m recent --name limit-287 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-287 -m recent --name limit-287 --rsource --mask 255.255.255.255 --set +-A limit-2870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2870 -j RETURN +-A limit-2870 -j DROP +-A limit-2871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2871 -j RETURN +-A limit-2871 -j DROP +-A limit-2872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2872 -j RETURN +-A limit-2872 -j DROP +-A limit-2873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2873 -j RETURN +-A limit-2873 -j DROP +-A limit-2874 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2874 -j RETURN +-A limit-2874 -m limit --limit 1/second -j LOG +-A limit-2874 -j DROP +-A limit-2875 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2875 -j RETURN +-A limit-2875 -m limit --limit 1/second -j LOG +-A limit-2875 -j DROP +-A limit-2876 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2876 -j RETURN +-A limit-2876 -m limit --limit 1/second -j LOG +-A limit-2876 -j DROP +-A limit-2877 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2877 -j RETURN +-A limit-2877 -m limit --limit 1/second -j LOG +-A limit-2877 -j DROP +-A limit-2878 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2878 -j RETURN +-A limit-2878 -m limit --limit 1/second -j LOG +-A limit-2878 -j DROP +-A limit-2879 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2879 -j RETURN +-A limit-2879 -m limit --limit 1/second -j LOG +-A limit-2879 -j DROP +-A limit-288 -m recent --name limit-288 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-288 -m limit --limit 12/minute -j ULOG +-A limit-288 -m recent --name limit-288 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2880 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2880 -j RETURN +-A limit-2880 -j TEE --gateway 10.0.0.1 +-A limit-2880 -j TEE --gateway 10.0.0.2 +-A limit-2880 -j DROP +-A limit-2881 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2881 -j RETURN +-A limit-2881 -j TEE --gateway 10.0.0.1 +-A limit-2881 -j TEE --gateway 10.0.0.2 +-A limit-2881 -j DROP +-A limit-2882 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2882 -j RETURN +-A limit-2882 -j TEE --gateway 10.0.0.1 +-A limit-2882 -j TEE --gateway 10.0.0.2 +-A limit-2882 -j DROP +-A limit-2883 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2883 -j RETURN +-A limit-2883 -j TEE --gateway 10.0.0.1 +-A limit-2883 -j TEE --gateway 10.0.0.2 +-A limit-2883 -j DROP +-A limit-2884 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2884 -j RETURN +-A limit-2884 -j TEE --gateway 10.0.0.1 +-A limit-2884 -j TEE --gateway 10.0.0.2 +-A limit-2884 -j DROP +-A limit-2885 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2885 -j RETURN +-A limit-2885 -j TEE --gateway 10.0.0.1 +-A limit-2885 -j TEE --gateway 10.0.0.2 +-A limit-2885 -j DROP +-A limit-2886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2886 -j RETURN +-A limit-2886 -j DROP +-A limit-2887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2887 -j RETURN +-A limit-2887 -j DROP +-A limit-2888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2888 -j RETURN +-A limit-2888 -j DROP +-A limit-2889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2889 -j RETURN +-A limit-2889 -j DROP +-A limit-289 -m recent --name limit-289 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-289 -m recent --name limit-289 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2890 -j RETURN +-A limit-2890 -j DROP +-A limit-2891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2891 -j RETURN +-A limit-2891 -j DROP +-A limit-2892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2892 -j RETURN +-A limit-2892 -m limit --limit 12/minute -j ULOG +-A limit-2892 -j DROP +-A limit-2893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2893 -j RETURN +-A limit-2893 -m limit --limit 12/minute -j ULOG +-A limit-2893 -j DROP +-A limit-2894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2894 -j RETURN +-A limit-2894 -m limit --limit 12/minute -j ULOG +-A limit-2894 -j DROP +-A limit-2895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2895 -j RETURN +-A limit-2895 -m limit --limit 12/minute -j ULOG +-A limit-2895 -j DROP +-A limit-2896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2896 -j RETURN +-A limit-2896 -m limit --limit 12/minute -j ULOG +-A limit-2896 -j DROP +-A limit-2897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2897 -j RETURN +-A limit-2897 -m limit --limit 12/minute -j ULOG +-A limit-2897 -j DROP +-A limit-2898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2898 -j RETURN +-A limit-2898 -j DROP +-A limit-2899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2899 -j RETURN +-A limit-2899 -j DROP +-A limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2900 -j RETURN +-A limit-2900 -j DROP +-A limit-2901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2901 -j RETURN +-A limit-2901 -j DROP +-A limit-2902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2902 -j RETURN +-A limit-2902 -j DROP +-A limit-2903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2903 -j RETURN +-A limit-2903 -j DROP +-A limit-2904 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2904 -j RETURN +-A limit-2904 -m limit --limit 1/second -j LOG +-A limit-2904 -j DROP +-A limit-2905 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2905 -j RETURN +-A limit-2905 -m limit --limit 1/second -j LOG +-A limit-2905 -j DROP +-A limit-2906 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2906 -j RETURN +-A limit-2906 -m limit --limit 1/second -j LOG +-A limit-2906 -j DROP +-A limit-2907 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2907 -j RETURN +-A limit-2907 -m limit --limit 1/second -j LOG +-A limit-2907 -j DROP +-A limit-2908 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2908 -j RETURN +-A limit-2908 -m limit --limit 1/second -j LOG +-A limit-2908 -j DROP +-A limit-2909 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2909 -j RETURN +-A limit-2909 -m limit --limit 1/second -j LOG +-A limit-2909 -j DROP +-A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2910 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2910 -j RETURN +-A limit-2910 -j TEE --gateway 10.0.0.1 +-A limit-2910 -j TEE --gateway 10.0.0.2 +-A limit-2910 -j DROP +-A limit-2911 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2911 -j RETURN +-A limit-2911 -j TEE --gateway 10.0.0.1 +-A limit-2911 -j TEE --gateway 10.0.0.2 +-A limit-2911 -j DROP +-A limit-2912 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2912 -j RETURN +-A limit-2912 -j TEE --gateway 10.0.0.1 +-A limit-2912 -j TEE --gateway 10.0.0.2 +-A limit-2912 -j DROP +-A limit-2913 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2913 -j RETURN +-A limit-2913 -j TEE --gateway 10.0.0.1 +-A limit-2913 -j TEE --gateway 10.0.0.2 +-A limit-2913 -j DROP +-A limit-2914 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2914 -j RETURN +-A limit-2914 -j TEE --gateway 10.0.0.1 +-A limit-2914 -j TEE --gateway 10.0.0.2 +-A limit-2914 -j DROP +-A limit-2915 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2915 -j RETURN +-A limit-2915 -j TEE --gateway 10.0.0.1 +-A limit-2915 -j TEE --gateway 10.0.0.2 +-A limit-2915 -j DROP +-A limit-2916 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2916 -j RETURN +-A limit-2916 -j DROP +-A limit-2917 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2917 -j RETURN +-A limit-2917 -j DROP +-A limit-2918 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2918 -j RETURN +-A limit-2918 -j DROP +-A limit-2919 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2919 -j RETURN +-A limit-2919 -j DROP +-A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-292 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2920 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2920 -j RETURN +-A limit-2920 -j DROP +-A limit-2921 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2921 -j RETURN +-A limit-2921 -j DROP +-A limit-2922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2922 -j RETURN +-A limit-2922 -m limit --limit 12/minute -j ULOG +-A limit-2922 -j DROP +-A limit-2923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2923 -j RETURN +-A limit-2923 -m limit --limit 12/minute -j ULOG +-A limit-2923 -j DROP +-A limit-2924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2924 -j RETURN +-A limit-2924 -m limit --limit 12/minute -j ULOG +-A limit-2924 -j DROP +-A limit-2925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2925 -j RETURN +-A limit-2925 -m limit --limit 12/minute -j ULOG +-A limit-2925 -j DROP +-A limit-2926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2926 -j RETURN +-A limit-2926 -m limit --limit 12/minute -j ULOG +-A limit-2926 -j DROP +-A limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2927 -j RETURN +-A limit-2927 -m limit --limit 12/minute -j ULOG +-A limit-2927 -j DROP +-A limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1650 +-A limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1651 +-A limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --set +-A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1652 +-A limit-2930 -m limit --limit 1/second -j LOG +-A limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1653 +-A limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1654 +-A limit-2932 -j TEE --gateway 10.0.0.1 +-A limit-2932 -j TEE --gateway 10.0.0.2 +-A limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1655 +-A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1656 +-A limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1657 +-A limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --set +-A limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1658 +-A limit-2936 -m limit --limit 12/minute -j ULOG +-A limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1659 +-A limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --set +-A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-294 -j TEE --gateway 10.0.0.1 +-A limit-294 -j TEE --gateway 10.0.0.2 +-A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2940 -m limit --limit 1/second -j LOG +-A limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2942 -j TEE --gateway 10.0.0.1 +-A limit-2942 -j TEE --gateway 10.0.0.2 +-A limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --set +-A limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2946 -m limit --limit 12/minute -j ULOG +-A limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2950 -m limit --limit 1/second -j LOG +-A limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2952 -j TEE --gateway 10.0.0.1 +-A limit-2952 -j TEE --gateway 10.0.0.2 +-A limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2956 -m limit --limit 12/minute -j ULOG +-A limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2958 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2958 -j ACCEPT +-A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2960 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2960 -m limit --limit 1/second -j LOG +-A limit-2960 -j ACCEPT +-A limit-2961 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2961 -m limit --limit 1/second -j LOG +-A limit-2962 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2962 -j TEE --gateway 10.0.0.1 +-A limit-2962 -j TEE --gateway 10.0.0.2 +-A limit-2962 -j ACCEPT +-A limit-2963 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2963 -j TEE --gateway 10.0.0.1 +-A limit-2963 -j TEE --gateway 10.0.0.2 +-A limit-2964 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2964 -j ACCEPT +-A limit-2966 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2966 -m limit --limit 12/minute -j ULOG +-A limit-2966 -j ACCEPT +-A limit-2967 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2967 -m limit --limit 12/minute -j ULOG +-A limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2970 -m limit --limit 1/second -j LOG +-A limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2972 -j TEE --gateway 10.0.0.1 +-A limit-2972 -j TEE --gateway 10.0.0.2 +-A limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2976 -m limit --limit 12/minute -j ULOG +-A limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2978 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2978 -j ACCEPT +-A limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-298 -m limit --limit 12/minute -j ULOG +-A limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2980 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2980 -m limit --limit 1/second -j LOG +-A limit-2980 -j ACCEPT +-A limit-2981 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2981 -m limit --limit 1/second -j LOG +-A limit-2982 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2982 -j TEE --gateway 10.0.0.1 +-A limit-2982 -j TEE --gateway 10.0.0.2 +-A limit-2982 -j ACCEPT +-A limit-2983 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2983 -j TEE --gateway 10.0.0.1 +-A limit-2983 -j TEE --gateway 10.0.0.2 +-A limit-2984 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2984 -j ACCEPT +-A limit-2986 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2986 -m limit --limit 12/minute -j ULOG +-A limit-2986 -j ACCEPT +-A limit-2987 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2987 -m limit --limit 12/minute -j ULOG +-A limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2990 -m limit --limit 1/second -j LOG +-A limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2992 -j TEE --gateway 10.0.0.1 +-A limit-2992 -j TEE --gateway 10.0.0.2 +-A limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2996 -m limit --limit 12/minute -j ULOG +-A limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2998 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2998 -j ACCEPT -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-30 -m limit --limit 12/minute -j ULOG -A limit-30 -j ACCEPT --A limit-300 -m recent --name limit-300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-300 -m recent --name limit-300 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-301 -m recent --name limit-301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-301 -m recent --name limit-301 --rsource --mask 255.255.255.255 --set --A limit-302 -m recent --name limit-302 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-302 -m limit --limit 12/minute -j ULOG --A limit-302 -m recent --name limit-302 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-303 -m recent --name limit-303 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-303 -m recent --name limit-303 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-306 -m limit --limit 1/second -j LOG --A limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-300 -j ACCEPT +-A limit-3000 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3000 -m limit --limit 1/second -j LOG +-A limit-3000 -j ACCEPT +-A limit-3001 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3001 -m limit --limit 1/second -j LOG +-A limit-3002 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3002 -j TEE --gateway 10.0.0.1 +-A limit-3002 -j TEE --gateway 10.0.0.2 +-A limit-3002 -j ACCEPT +-A limit-3003 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3003 -j TEE --gateway 10.0.0.1 +-A limit-3003 -j TEE --gateway 10.0.0.2 +-A limit-3004 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3004 -j ACCEPT +-A limit-3006 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3006 -m limit --limit 12/minute -j ULOG +-A limit-3006 -j ACCEPT +-A limit-3007 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3007 -m limit --limit 12/minute -j ULOG +-A limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-301 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3010 -m limit --limit 1/second -j LOG +-A limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3012 -j TEE --gateway 10.0.0.1 +-A limit-3012 -j TEE --gateway 10.0.0.2 +-A limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3016 -m limit --limit 12/minute -j ULOG +-A limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3018 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3018 -j ACCEPT +-A limit-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-3020 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3020 -m limit --limit 1/second -j LOG +-A limit-3020 -j ACCEPT +-A limit-3021 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3021 -m limit --limit 1/second -j LOG +-A limit-3022 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3022 -j TEE --gateway 10.0.0.1 +-A limit-3022 -j TEE --gateway 10.0.0.2 +-A limit-3022 -j ACCEPT +-A limit-3023 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3023 -j TEE --gateway 10.0.0.1 +-A limit-3023 -j TEE --gateway 10.0.0.2 +-A limit-3024 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3024 -j ACCEPT +-A limit-3026 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3026 -m limit --limit 12/minute -j ULOG +-A limit-3026 -j ACCEPT +-A limit-3027 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3027 -m limit --limit 12/minute -j ULOG +-A limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1660 +-A limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1661 +-A limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --set +-A limit-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1662 +-A limit-3030 -m limit --limit 1/second -j LOG +-A limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1663 +-A limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1664 +-A limit-3032 -j TEE --gateway 10.0.0.1 +-A limit-3032 -j TEE --gateway 10.0.0.2 +-A limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1665 +-A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1666 +-A limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1667 +-A limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --set +-A limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1668 +-A limit-3036 -m limit --limit 12/minute -j ULOG +-A limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1669 +-A limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1670 +-A limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1671 +-A limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-304 -j TEE --gateway 10.0.0.1 +-A limit-304 -j TEE --gateway 10.0.0.2 +-A limit-304 -j ACCEPT +-A limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1672 +-A limit-3040 -m limit --limit 1/second -j LOG +-A limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1673 +-A limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1674 +-A limit-3042 -j TEE --gateway 10.0.0.1 +-A limit-3042 -j TEE --gateway 10.0.0.2 +-A limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1675 +-A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1676 +-A limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1677 +-A limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1678 +-A limit-3046 -m limit --limit 12/minute -j ULOG +-A limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1679 +-A limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3048 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 +-A limit-3048 -j ACCEPT +-A limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-305 -j TEE --gateway 10.0.0.1 +-A limit-305 -j TEE --gateway 10.0.0.2 +-A limit-3050 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 +-A limit-3050 -m limit --limit 1/second -j LOG +-A limit-3050 -j ACCEPT +-A limit-3051 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 +-A limit-3051 -m limit --limit 1/second -j LOG +-A limit-3052 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 +-A limit-3052 -j TEE --gateway 10.0.0.1 +-A limit-3052 -j TEE --gateway 10.0.0.2 +-A limit-3052 -j ACCEPT +-A limit-3053 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 +-A limit-3053 -j TEE --gateway 10.0.0.1 +-A limit-3053 -j TEE --gateway 10.0.0.2 +-A limit-3054 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 +-A limit-3054 -j ACCEPT +-A limit-3056 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 +-A limit-3056 -m limit --limit 12/minute -j ULOG +-A limit-3056 -j ACCEPT +-A limit-3057 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 +-A limit-3057 -m limit --limit 12/minute -j ULOG +-A limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1690 +-A limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1691 +-A limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-306 -j ACCEPT +-A limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1692 +-A limit-3060 -m limit --limit 1/second -j LOG +-A limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1693 +-A limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1694 +-A limit-3062 -j TEE --gateway 10.0.0.1 +-A limit-3062 -j TEE --gateway 10.0.0.2 +-A limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1695 +-A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1696 +-A limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1697 +-A limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1698 +-A limit-3066 -m limit --limit 12/minute -j ULOG +-A limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1699 +-A limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3068 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 +-A limit-3068 -j ACCEPT +-A limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3070 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 +-A limit-3070 -m limit --limit 1/second -j LOG +-A limit-3070 -j ACCEPT +-A limit-3071 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 +-A limit-3071 -m limit --limit 1/second -j LOG +-A limit-3072 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 +-A limit-3072 -j TEE --gateway 10.0.0.1 +-A limit-3072 -j TEE --gateway 10.0.0.2 +-A limit-3072 -j ACCEPT +-A limit-3073 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 +-A limit-3073 -j TEE --gateway 10.0.0.1 +-A limit-3073 -j TEE --gateway 10.0.0.2 +-A limit-3074 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 +-A limit-3074 -j ACCEPT +-A limit-3076 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 +-A limit-3076 -m limit --limit 12/minute -j ULOG +-A limit-3076 -j ACCEPT +-A limit-3077 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 +-A limit-3077 -m limit --limit 12/minute -j ULOG +-A limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1710 +-A limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1711 +-A limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-308 -m limit --limit 12/minute -j ULOG +-A limit-308 -j ACCEPT +-A limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1712 +-A limit-3080 -m limit --limit 1/second -j LOG +-A limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1713 +-A limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1714 +-A limit-3082 -j TEE --gateway 10.0.0.1 +-A limit-3082 -j TEE --gateway 10.0.0.2 +-A limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1715 +-A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1716 +-A limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1717 +-A limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1718 +-A limit-3086 -m limit --limit 12/minute -j ULOG +-A limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1719 +-A limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3088 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 +-A limit-3088 -j ACCEPT +-A limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-309 -m limit --limit 12/minute -j ULOG +-A limit-3090 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 +-A limit-3090 -m limit --limit 1/second -j LOG +-A limit-3090 -j ACCEPT +-A limit-3091 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 +-A limit-3091 -m limit --limit 1/second -j LOG +-A limit-3092 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 +-A limit-3092 -j TEE --gateway 10.0.0.1 +-A limit-3092 -j TEE --gateway 10.0.0.2 +-A limit-3092 -j ACCEPT +-A limit-3093 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 +-A limit-3093 -j TEE --gateway 10.0.0.1 +-A limit-3093 -j TEE --gateway 10.0.0.2 +-A limit-3094 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 +-A limit-3094 -j ACCEPT +-A limit-3096 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 +-A limit-3096 -m limit --limit 12/minute -j ULOG +-A limit-3096 -j ACCEPT +-A limit-3097 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 +-A limit-3097 -m limit --limit 12/minute -j ULOG +-A limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1730 +-A limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1731 +-A limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-31 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-31 -m limit --limit 12/minute -j ULOG --A limit-310 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-310 -m limit --limit 12/minute -j ULOG --A limit-310 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-311 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-311 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-312 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-312 -j ACCEPT --A limit-313 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m limit --limit 1/second -j LOG --A limit-314 -j ACCEPT --A limit-315 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-315 -m limit --limit 1/second -j LOG --A limit-316 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-316 -j ACCEPT --A limit-317 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1732 +-A limit-3100 -m limit --limit 1/second -j LOG +-A limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1733 +-A limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1734 +-A limit-3102 -j TEE --gateway 10.0.0.1 +-A limit-3102 -j TEE --gateway 10.0.0.2 +-A limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1735 +-A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1736 +-A limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1737 +-A limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1738 +-A limit-3106 -m limit --limit 12/minute -j ULOG +-A limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1739 +-A limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 +-A limit-3108 -j ACCEPT +-A limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 +-A limit-3110 -m limit --limit 1/second -j LOG +-A limit-3110 -j ACCEPT +-A limit-3111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 +-A limit-3111 -m limit --limit 1/second -j LOG +-A limit-3112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 +-A limit-3112 -j TEE --gateway 10.0.0.1 +-A limit-3112 -j TEE --gateway 10.0.0.2 +-A limit-3112 -j ACCEPT +-A limit-3113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 +-A limit-3113 -j TEE --gateway 10.0.0.1 +-A limit-3113 -j TEE --gateway 10.0.0.2 +-A limit-3114 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 +-A limit-3114 -j ACCEPT +-A limit-3116 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 +-A limit-3116 -m limit --limit 12/minute -j ULOG +-A limit-3116 -j ACCEPT +-A limit-3117 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 +-A limit-3117 -m limit --limit 12/minute -j ULOG +-A limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1750 +-A limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1751 +-A limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --set +-A limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-312 -m limit --limit 1/second -j LOG +-A limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1752 +-A limit-3120 -m limit --limit 1/second -j LOG +-A limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1753 +-A limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1754 +-A limit-3122 -j TEE --gateway 10.0.0.1 +-A limit-3122 -j TEE --gateway 10.0.0.2 +-A limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1755 +-A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1756 +-A limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1757 +-A limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --set +-A limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1758 +-A limit-3126 -m limit --limit 12/minute -j ULOG +-A limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1759 +-A limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1760 +-A limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1761 +-A limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1762 +-A limit-3130 -m limit --limit 1/second -j LOG +-A limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1763 +-A limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1764 +-A limit-3132 -j TEE --gateway 10.0.0.1 +-A limit-3132 -j TEE --gateway 10.0.0.2 +-A limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1765 +-A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1766 +-A limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1767 +-A limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1768 +-A limit-3136 -m limit --limit 12/minute -j ULOG +-A limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1769 +-A limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3138 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 +-A limit-3138 -j ACCEPT +-A limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-314 -j TEE --gateway 10.0.0.1 +-A limit-314 -j TEE --gateway 10.0.0.2 +-A limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3140 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 +-A limit-3140 -m limit --limit 1/second -j LOG +-A limit-3140 -j ACCEPT +-A limit-3141 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 +-A limit-3141 -m limit --limit 1/second -j LOG +-A limit-3142 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 +-A limit-3142 -j TEE --gateway 10.0.0.1 +-A limit-3142 -j TEE --gateway 10.0.0.2 +-A limit-3142 -j ACCEPT +-A limit-3143 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 +-A limit-3143 -j TEE --gateway 10.0.0.1 +-A limit-3143 -j TEE --gateway 10.0.0.2 +-A limit-3144 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 +-A limit-3144 -j ACCEPT +-A limit-3146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 +-A limit-3146 -m limit --limit 12/minute -j ULOG +-A limit-3146 -j ACCEPT +-A limit-3147 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 +-A limit-3147 -m limit --limit 12/minute -j ULOG +-A limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1780 +-A limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1781 +-A limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1782 +-A limit-3150 -m limit --limit 1/second -j LOG +-A limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1783 +-A limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1784 +-A limit-3152 -j TEE --gateway 10.0.0.1 +-A limit-3152 -j TEE --gateway 10.0.0.2 +-A limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1785 +-A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1786 +-A limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1787 +-A limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1788 +-A limit-3156 -m limit --limit 12/minute -j ULOG +-A limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1789 +-A limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 +-A limit-3158 -j ACCEPT +-A limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 +-A limit-3160 -m limit --limit 1/second -j LOG +-A limit-3160 -j ACCEPT +-A limit-3161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 +-A limit-3161 -m limit --limit 1/second -j LOG +-A limit-3162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 +-A limit-3162 -j TEE --gateway 10.0.0.1 +-A limit-3162 -j TEE --gateway 10.0.0.2 +-A limit-3162 -j ACCEPT +-A limit-3163 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 +-A limit-3163 -j TEE --gateway 10.0.0.1 +-A limit-3163 -j TEE --gateway 10.0.0.2 +-A limit-3164 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 +-A limit-3164 -j ACCEPT +-A limit-3166 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 +-A limit-3166 -m limit --limit 12/minute -j ULOG +-A limit-3166 -j ACCEPT +-A limit-3167 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 +-A limit-3167 -m limit --limit 12/minute -j ULOG +-A limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1800 +-A limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1801 +-A limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1802 +-A limit-3170 -m limit --limit 1/second -j LOG +-A limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1803 +-A limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1804 +-A limit-3172 -j TEE --gateway 10.0.0.1 +-A limit-3172 -j TEE --gateway 10.0.0.2 +-A limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1805 +-A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1806 +-A limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1807 +-A limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1808 +-A limit-3176 -m limit --limit 12/minute -j ULOG +-A limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1809 +-A limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3178 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 +-A limit-3178 -j ACCEPT +-A limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-318 -m limit --limit 12/minute -j ULOG --A limit-318 -j ACCEPT --A limit-319 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-319 -m limit --limit 12/minute -j ULOG --A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3180 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 +-A limit-3180 -m limit --limit 1/second -j LOG +-A limit-3180 -j ACCEPT +-A limit-3181 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 +-A limit-3181 -m limit --limit 1/second -j LOG +-A limit-3182 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 +-A limit-3182 -j TEE --gateway 10.0.0.1 +-A limit-3182 -j TEE --gateway 10.0.0.2 +-A limit-3182 -j ACCEPT +-A limit-3183 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 +-A limit-3183 -j TEE --gateway 10.0.0.1 +-A limit-3183 -j TEE --gateway 10.0.0.2 +-A limit-3184 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 +-A limit-3184 -j ACCEPT +-A limit-3186 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 +-A limit-3186 -m limit --limit 12/minute -j ULOG +-A limit-3186 -j ACCEPT +-A limit-3187 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 +-A limit-3187 -m limit --limit 12/minute -j ULOG +-A limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1820 +-A limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1821 +-A limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1822 +-A limit-3190 -m limit --limit 1/second -j LOG +-A limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1823 +-A limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1824 +-A limit-3192 -j TEE --gateway 10.0.0.1 +-A limit-3192 -j TEE --gateway 10.0.0.2 +-A limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1825 +-A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1826 +-A limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1827 +-A limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1828 +-A limit-3196 -m limit --limit 12/minute -j ULOG +-A limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1829 +-A limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3198 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 +-A limit-3198 -j ACCEPT +-A limit-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-32 -m limit --limit 1/second -j LOG +-A limit-32 -j ACCEPT +-A limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-320 -j ACCEPT +-A limit-3200 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 +-A limit-3200 -m limit --limit 1/second -j LOG +-A limit-3200 -j ACCEPT +-A limit-3201 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 +-A limit-3201 -m limit --limit 1/second -j LOG +-A limit-3202 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 +-A limit-3202 -j TEE --gateway 10.0.0.1 +-A limit-3202 -j TEE --gateway 10.0.0.2 +-A limit-3202 -j ACCEPT +-A limit-3203 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 +-A limit-3203 -j TEE --gateway 10.0.0.1 +-A limit-3203 -j TEE --gateway 10.0.0.2 +-A limit-3204 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 +-A limit-3204 -j ACCEPT +-A limit-3206 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 +-A limit-3206 -m limit --limit 12/minute -j ULOG +-A limit-3206 -j ACCEPT +-A limit-3207 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 +-A limit-3207 -m limit --limit 12/minute -j ULOG +-A limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --set +-A limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3210 -m limit --limit 1/second -j LOG +-A limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3212 -j TEE --gateway 10.0.0.1 +-A limit-3212 -j TEE --gateway 10.0.0.2 +-A limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --set +-A limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3216 -m limit --limit 12/minute -j ULOG +-A limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-322 -m limit --limit 1/second -j LOG --A limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-326 -m limit --limit 12/minute -j ULOG --A limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-322 -j ACCEPT +-A limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3220 -m limit --limit 1/second -j LOG +-A limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3222 -j TEE --gateway 10.0.0.1 +-A limit-3222 -j TEE --gateway 10.0.0.2 +-A limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3226 -m limit --limit 12/minute -j ULOG +-A limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3228 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3228 -j ACCEPT +-A limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-323 -m limit --limit 1/second -j LOG +-A limit-3230 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3230 -m limit --limit 1/second -j LOG +-A limit-3230 -j ACCEPT +-A limit-3231 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3231 -m limit --limit 1/second -j LOG +-A limit-3232 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3232 -j TEE --gateway 10.0.0.1 +-A limit-3232 -j TEE --gateway 10.0.0.2 +-A limit-3232 -j ACCEPT +-A limit-3233 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3233 -j TEE --gateway 10.0.0.1 +-A limit-3233 -j TEE --gateway 10.0.0.2 +-A limit-3234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3234 -j ACCEPT +-A limit-3236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3236 -m limit --limit 12/minute -j ULOG +-A limit-3236 -j ACCEPT +-A limit-3237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3237 -m limit --limit 12/minute -j ULOG +-A limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-324 -j TEE --gateway 10.0.0.1 +-A limit-324 -j TEE --gateway 10.0.0.2 +-A limit-324 -j ACCEPT +-A limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3240 -m limit --limit 1/second -j LOG +-A limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3242 -j TEE --gateway 10.0.0.1 +-A limit-3242 -j TEE --gateway 10.0.0.2 +-A limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3246 -m limit --limit 12/minute -j ULOG +-A limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3248 -j ACCEPT +-A limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-325 -j TEE --gateway 10.0.0.1 +-A limit-325 -j TEE --gateway 10.0.0.2 +-A limit-3250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3250 -m limit --limit 1/second -j LOG +-A limit-3250 -j ACCEPT +-A limit-3251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3251 -m limit --limit 1/second -j LOG +-A limit-3252 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3252 -j TEE --gateway 10.0.0.1 +-A limit-3252 -j TEE --gateway 10.0.0.2 +-A limit-3252 -j ACCEPT +-A limit-3253 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3253 -j TEE --gateway 10.0.0.1 +-A limit-3253 -j TEE --gateway 10.0.0.2 +-A limit-3254 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3254 -j ACCEPT +-A limit-3256 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3256 -m limit --limit 12/minute -j ULOG +-A limit-3256 -j ACCEPT +-A limit-3257 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3257 -m limit --limit 12/minute -j ULOG +-A limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-326 -j ACCEPT +-A limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3260 -m limit --limit 1/second -j LOG +-A limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3262 -j TEE --gateway 10.0.0.1 +-A limit-3262 -j TEE --gateway 10.0.0.2 +-A limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3266 -m limit --limit 12/minute -j ULOG +-A limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3268 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3268 -j ACCEPT +-A limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3270 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3270 -m limit --limit 1/second -j LOG +-A limit-3270 -j ACCEPT +-A limit-3271 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3271 -m limit --limit 1/second -j LOG +-A limit-3272 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3272 -j TEE --gateway 10.0.0.1 +-A limit-3272 -j TEE --gateway 10.0.0.2 +-A limit-3272 -j ACCEPT +-A limit-3273 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3273 -j TEE --gateway 10.0.0.1 +-A limit-3273 -j TEE --gateway 10.0.0.2 +-A limit-3274 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3274 -j ACCEPT +-A limit-3276 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3276 -m limit --limit 12/minute -j ULOG +-A limit-3276 -j ACCEPT +-A limit-3277 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3277 -m limit --limit 12/minute -j ULOG +-A limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-328 -m limit --limit 12/minute -j ULOG -A limit-328 -j ACCEPT --A limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-330 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-330 -m limit --limit 1/second -j LOG --A limit-330 -j ACCEPT --A limit-331 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-331 -m limit --limit 1/second -j LOG --A limit-332 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-332 -j ACCEPT --A limit-333 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-334 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-334 -m limit --limit 12/minute -j ULOG --A limit-334 -j ACCEPT --A limit-335 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-335 -m limit --limit 12/minute -j ULOG --A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3280 -m limit --limit 1/second -j LOG +-A limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3282 -j TEE --gateway 10.0.0.1 +-A limit-3282 -j TEE --gateway 10.0.0.2 +-A limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3286 -m limit --limit 12/minute -j ULOG +-A limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3288 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3288 -j ACCEPT +-A limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-329 -m limit --limit 12/minute -j ULOG +-A limit-3290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3290 -m limit --limit 1/second -j LOG +-A limit-3290 -j ACCEPT +-A limit-3291 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3291 -m limit --limit 1/second -j LOG +-A limit-3292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3292 -j TEE --gateway 10.0.0.1 +-A limit-3292 -j TEE --gateway 10.0.0.2 +-A limit-3292 -j ACCEPT +-A limit-3293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3293 -j TEE --gateway 10.0.0.1 +-A limit-3293 -j TEE --gateway 10.0.0.2 +-A limit-3294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3294 -j ACCEPT +-A limit-3296 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3296 -m limit --limit 12/minute -j ULOG +-A limit-3296 -j ACCEPT +-A limit-3297 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3297 -m limit --limit 12/minute -j ULOG +-A limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1840 +-A limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1841 +-A limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --set +-A limit-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-33 -m limit --limit 1/second -j LOG +-A limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1842 +-A limit-3300 -m limit --limit 1/second -j LOG +-A limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1843 +-A limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1844 +-A limit-3302 -j TEE --gateway 10.0.0.1 +-A limit-3302 -j TEE --gateway 10.0.0.2 +-A limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1845 +-A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1846 +-A limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1847 +-A limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --set +-A limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1848 +-A limit-3306 -m limit --limit 12/minute -j ULOG +-A limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1849 +-A limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1850 +-A limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1851 +-A limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1852 +-A limit-3310 -m limit --limit 1/second -j LOG +-A limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1853 +-A limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1854 +-A limit-3312 -j TEE --gateway 10.0.0.1 +-A limit-3312 -j TEE --gateway 10.0.0.2 +-A limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1855 +-A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1856 +-A limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1857 +-A limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1858 +-A limit-3316 -m limit --limit 12/minute -j ULOG +-A limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1859 +-A limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3318 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 +-A limit-3318 -j ACCEPT +-A limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3320 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 +-A limit-3320 -m limit --limit 1/second -j LOG +-A limit-3320 -j ACCEPT +-A limit-3321 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 +-A limit-3321 -m limit --limit 1/second -j LOG +-A limit-3322 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 +-A limit-3322 -j TEE --gateway 10.0.0.1 +-A limit-3322 -j TEE --gateway 10.0.0.2 +-A limit-3322 -j ACCEPT +-A limit-3323 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 +-A limit-3323 -j TEE --gateway 10.0.0.1 +-A limit-3323 -j TEE --gateway 10.0.0.2 +-A limit-3324 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 +-A limit-3324 -j ACCEPT +-A limit-3326 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 +-A limit-3326 -m limit --limit 12/minute -j ULOG +-A limit-3326 -j ACCEPT +-A limit-3327 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 +-A limit-3327 -m limit --limit 12/minute -j ULOG +-A limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1870 +-A limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1871 +-A limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1872 +-A limit-3330 -m limit --limit 1/second -j LOG +-A limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1873 +-A limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1874 +-A limit-3332 -j TEE --gateway 10.0.0.1 +-A limit-3332 -j TEE --gateway 10.0.0.2 +-A limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1875 +-A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1876 +-A limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1877 +-A limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1878 +-A limit-3336 -m limit --limit 12/minute -j ULOG +-A limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1879 +-A limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3338 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 +-A limit-3338 -j ACCEPT +-A limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-334 -j TEE --gateway 10.0.0.1 +-A limit-334 -j TEE --gateway 10.0.0.2 +-A limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3340 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 +-A limit-3340 -m limit --limit 1/second -j LOG +-A limit-3340 -j ACCEPT +-A limit-3341 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 +-A limit-3341 -m limit --limit 1/second -j LOG +-A limit-3342 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 +-A limit-3342 -j TEE --gateway 10.0.0.1 +-A limit-3342 -j TEE --gateway 10.0.0.2 +-A limit-3342 -j ACCEPT +-A limit-3343 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 +-A limit-3343 -j TEE --gateway 10.0.0.1 +-A limit-3343 -j TEE --gateway 10.0.0.2 +-A limit-3344 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 +-A limit-3344 -j ACCEPT +-A limit-3346 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 +-A limit-3346 -m limit --limit 12/minute -j ULOG +-A limit-3346 -j ACCEPT +-A limit-3347 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 +-A limit-3347 -m limit --limit 12/minute -j ULOG +-A limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1890 +-A limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1891 +-A limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1892 +-A limit-3350 -m limit --limit 1/second -j LOG +-A limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1893 +-A limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1894 +-A limit-3352 -j TEE --gateway 10.0.0.1 +-A limit-3352 -j TEE --gateway 10.0.0.2 +-A limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1895 +-A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1896 +-A limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1897 +-A limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1898 +-A limit-3356 -m limit --limit 12/minute -j ULOG +-A limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1899 +-A limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3358 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 +-A limit-3358 -j ACCEPT +-A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3360 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 +-A limit-3360 -m limit --limit 1/second -j LOG +-A limit-3360 -j ACCEPT +-A limit-3361 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 +-A limit-3361 -m limit --limit 1/second -j LOG +-A limit-3362 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 +-A limit-3362 -j TEE --gateway 10.0.0.1 +-A limit-3362 -j TEE --gateway 10.0.0.2 +-A limit-3362 -j ACCEPT +-A limit-3363 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 +-A limit-3363 -j TEE --gateway 10.0.0.1 +-A limit-3363 -j TEE --gateway 10.0.0.2 +-A limit-3364 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 +-A limit-3364 -j ACCEPT +-A limit-3366 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 +-A limit-3366 -m limit --limit 12/minute -j ULOG +-A limit-3366 -j ACCEPT +-A limit-3367 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 +-A limit-3367 -m limit --limit 12/minute -j ULOG +-A limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1910 +-A limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1911 +-A limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-338 -m limit --limit 1/second -j LOG +-A limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1912 +-A limit-3370 -m limit --limit 1/second -j LOG +-A limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1913 +-A limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1914 +-A limit-3372 -j TEE --gateway 10.0.0.1 +-A limit-3372 -j TEE --gateway 10.0.0.2 +-A limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1915 +-A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1916 +-A limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1917 +-A limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1918 +-A limit-3376 -m limit --limit 12/minute -j ULOG +-A limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1919 +-A limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3378 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 +-A limit-3378 -j ACCEPT +-A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-338 -m limit --limit 12/minute -j ULOG -A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-34 -m limit --limit 1/second -j LOG --A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-342 -m limit --limit 12/minute -j ULOG --A limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3380 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 +-A limit-3380 -m limit --limit 1/second -j LOG +-A limit-3380 -j ACCEPT +-A limit-3381 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 +-A limit-3381 -m limit --limit 1/second -j LOG +-A limit-3382 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 +-A limit-3382 -j TEE --gateway 10.0.0.1 +-A limit-3382 -j TEE --gateway 10.0.0.2 +-A limit-3382 -j ACCEPT +-A limit-3383 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 +-A limit-3383 -j TEE --gateway 10.0.0.1 +-A limit-3383 -j TEE --gateway 10.0.0.2 +-A limit-3384 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 +-A limit-3384 -j ACCEPT +-A limit-3386 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 +-A limit-3386 -m limit --limit 12/minute -j ULOG +-A limit-3386 -j ACCEPT +-A limit-3387 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 +-A limit-3387 -m limit --limit 12/minute -j ULOG +-A limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --set +-A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3390 -m limit --limit 1/second -j LOG +-A limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3392 -j TEE --gateway 10.0.0.1 +-A limit-3392 -j TEE --gateway 10.0.0.2 +-A limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --set +-A limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3396 -m limit --limit 12/minute -j ULOG +-A limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-34 -j TEE --gateway 10.0.0.1 +-A limit-34 -j TEE --gateway 10.0.0.2 +-A limit-34 -j ACCEPT +-A limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-340 -j ACCEPT +-A limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3400 -m limit --limit 1/second -j LOG +-A limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3402 -j TEE --gateway 10.0.0.1 +-A limit-3402 -j TEE --gateway 10.0.0.2 +-A limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3406 -m limit --limit 12/minute -j ULOG +-A limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3408 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3408 -j ACCEPT +-A limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3410 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3410 -m limit --limit 1/second -j LOG +-A limit-3410 -j ACCEPT +-A limit-3411 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3411 -m limit --limit 1/second -j LOG +-A limit-3412 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3412 -j TEE --gateway 10.0.0.1 +-A limit-3412 -j TEE --gateway 10.0.0.2 +-A limit-3412 -j ACCEPT +-A limit-3413 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3413 -j TEE --gateway 10.0.0.1 +-A limit-3413 -j TEE --gateway 10.0.0.2 +-A limit-3414 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3414 -j ACCEPT +-A limit-3416 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3416 -m limit --limit 12/minute -j ULOG +-A limit-3416 -j ACCEPT +-A limit-3417 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3417 -m limit --limit 12/minute -j ULOG +-A limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-342 -m limit --limit 1/second -j LOG +-A limit-342 -j ACCEPT +-A limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3420 -m limit --limit 1/second -j LOG +-A limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3422 -j TEE --gateway 10.0.0.1 +-A limit-3422 -j TEE --gateway 10.0.0.2 +-A limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3426 -m limit --limit 12/minute -j ULOG +-A limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3428 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3428 -j ACCEPT +-A limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-343 -m limit --limit 1/second -j LOG +-A limit-3430 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3430 -m limit --limit 1/second -j LOG +-A limit-3430 -j ACCEPT +-A limit-3431 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3431 -m limit --limit 1/second -j LOG +-A limit-3432 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3432 -j TEE --gateway 10.0.0.1 +-A limit-3432 -j TEE --gateway 10.0.0.2 +-A limit-3432 -j ACCEPT +-A limit-3433 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3433 -j TEE --gateway 10.0.0.1 +-A limit-3433 -j TEE --gateway 10.0.0.2 +-A limit-3434 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3434 -j ACCEPT +-A limit-3436 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3436 -m limit --limit 12/minute -j ULOG +-A limit-3436 -j ACCEPT +-A limit-3437 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3437 -m limit --limit 12/minute -j ULOG +-A limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-344 -j TEE --gateway 10.0.0.1 +-A limit-344 -j TEE --gateway 10.0.0.2 -A limit-344 -j ACCEPT --A limit-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-346 -m limit --limit 1/second -j LOG +-A limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3440 -m limit --limit 1/second -j LOG +-A limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3442 -j TEE --gateway 10.0.0.1 +-A limit-3442 -j TEE --gateway 10.0.0.2 +-A limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3446 -m limit --limit 12/minute -j ULOG +-A limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3448 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3448 -j ACCEPT +-A limit-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-345 -j TEE --gateway 10.0.0.1 +-A limit-345 -j TEE --gateway 10.0.0.2 +-A limit-3450 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3450 -m limit --limit 1/second -j LOG +-A limit-3450 -j ACCEPT +-A limit-3451 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3451 -m limit --limit 1/second -j LOG +-A limit-3452 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3452 -j TEE --gateway 10.0.0.1 +-A limit-3452 -j TEE --gateway 10.0.0.2 +-A limit-3452 -j ACCEPT +-A limit-3453 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3453 -j TEE --gateway 10.0.0.1 +-A limit-3453 -j TEE --gateway 10.0.0.2 +-A limit-3454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3454 -j ACCEPT +-A limit-3456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3456 -m limit --limit 12/minute -j ULOG +-A limit-3456 -j ACCEPT +-A limit-3457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3457 -m limit --limit 12/minute -j ULOG +-A limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-346 -j ACCEPT --A limit-347 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-347 -m limit --limit 1/second -j LOG --A limit-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3460 -m limit --limit 1/second -j LOG +-A limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3462 -j TEE --gateway 10.0.0.1 +-A limit-3462 -j TEE --gateway 10.0.0.2 +-A limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3466 -m limit --limit 12/minute -j ULOG +-A limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3468 -j ACCEPT +-A limit-347 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3470 -m limit --limit 1/second -j LOG +-A limit-3470 -j ACCEPT +-A limit-3471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3471 -m limit --limit 1/second -j LOG +-A limit-3472 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3472 -j TEE --gateway 10.0.0.1 +-A limit-3472 -j TEE --gateway 10.0.0.2 +-A limit-3472 -j ACCEPT +-A limit-3473 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3473 -j TEE --gateway 10.0.0.1 +-A limit-3473 -j TEE --gateway 10.0.0.2 +-A limit-3474 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3474 -j ACCEPT +-A limit-3476 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3476 -m limit --limit 12/minute -j ULOG +-A limit-3476 -j ACCEPT +-A limit-3477 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3477 -m limit --limit 12/minute -j ULOG +-A limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1930 +-A limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1931 +-A limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --set +-A limit-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-348 -m limit --limit 12/minute -j ULOG -A limit-348 -j ACCEPT --A limit-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-350 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-350 -m limit --limit 12/minute -j ULOG --A limit-350 -j ACCEPT --A limit-351 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-351 -m limit --limit 12/minute -j ULOG --A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1932 +-A limit-3480 -m limit --limit 1/second -j LOG +-A limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1933 +-A limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1934 +-A limit-3482 -j TEE --gateway 10.0.0.1 +-A limit-3482 -j TEE --gateway 10.0.0.2 +-A limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1935 +-A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1936 +-A limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1937 +-A limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --set +-A limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1938 +-A limit-3486 -m limit --limit 12/minute -j ULOG +-A limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1939 +-A limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1940 +-A limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1941 +-A limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-349 -m limit --limit 12/minute -j ULOG +-A limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1942 +-A limit-3490 -m limit --limit 1/second -j LOG +-A limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1943 +-A limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1944 +-A limit-3492 -j TEE --gateway 10.0.0.1 +-A limit-3492 -j TEE --gateway 10.0.0.2 +-A limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1945 +-A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1946 +-A limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1947 +-A limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1948 +-A limit-3496 -m limit --limit 12/minute -j ULOG +-A limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1949 +-A limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3498 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 +-A limit-3498 -j ACCEPT +-A limit-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-35 -j TEE --gateway 10.0.0.1 +-A limit-35 -j TEE --gateway 10.0.0.2 +-A limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3500 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 +-A limit-3500 -m limit --limit 1/second -j LOG +-A limit-3500 -j ACCEPT +-A limit-3501 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 +-A limit-3501 -m limit --limit 1/second -j LOG +-A limit-3502 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 +-A limit-3502 -j TEE --gateway 10.0.0.1 +-A limit-3502 -j TEE --gateway 10.0.0.2 +-A limit-3502 -j ACCEPT +-A limit-3503 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 +-A limit-3503 -j TEE --gateway 10.0.0.1 +-A limit-3503 -j TEE --gateway 10.0.0.2 +-A limit-3504 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 +-A limit-3504 -j ACCEPT +-A limit-3506 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 +-A limit-3506 -m limit --limit 12/minute -j ULOG +-A limit-3506 -j ACCEPT +-A limit-3507 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 +-A limit-3507 -m limit --limit 12/minute -j ULOG +-A limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1960 +-A limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1961 +-A limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1962 +-A limit-3510 -m limit --limit 1/second -j LOG +-A limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1963 +-A limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1964 +-A limit-3512 -j TEE --gateway 10.0.0.1 +-A limit-3512 -j TEE --gateway 10.0.0.2 +-A limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1965 +-A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1966 +-A limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1967 +-A limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1968 +-A limit-3516 -m limit --limit 12/minute -j ULOG +-A limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1969 +-A limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 +-A limit-3518 -j ACCEPT +-A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-352 -m limit --limit 1/second -j LOG -A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-354 -m limit --limit 1/second -j LOG +-A limit-3520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 +-A limit-3520 -m limit --limit 1/second -j LOG +-A limit-3520 -j ACCEPT +-A limit-3521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 +-A limit-3521 -m limit --limit 1/second -j LOG +-A limit-3522 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 +-A limit-3522 -j TEE --gateway 10.0.0.1 +-A limit-3522 -j TEE --gateway 10.0.0.2 +-A limit-3522 -j ACCEPT +-A limit-3523 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 +-A limit-3523 -j TEE --gateway 10.0.0.1 +-A limit-3523 -j TEE --gateway 10.0.0.2 +-A limit-3524 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 +-A limit-3524 -j ACCEPT +-A limit-3526 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 +-A limit-3526 -m limit --limit 12/minute -j ULOG +-A limit-3526 -j ACCEPT +-A limit-3527 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 +-A limit-3527 -m limit --limit 12/minute -j ULOG +-A limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1980 +-A limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1981 +-A limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1982 +-A limit-3530 -m limit --limit 1/second -j LOG +-A limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1983 +-A limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1984 +-A limit-3532 -j TEE --gateway 10.0.0.1 +-A limit-3532 -j TEE --gateway 10.0.0.2 +-A limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1985 +-A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1986 +-A limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1987 +-A limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1988 +-A limit-3536 -m limit --limit 12/minute -j ULOG +-A limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1989 +-A limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3538 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 +-A limit-3538 -j ACCEPT +-A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-354 -j TEE --gateway 10.0.0.1 +-A limit-354 -j TEE --gateway 10.0.0.2 -A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3540 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 +-A limit-3540 -m limit --limit 1/second -j LOG +-A limit-3540 -j ACCEPT +-A limit-3541 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 +-A limit-3541 -m limit --limit 1/second -j LOG +-A limit-3542 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 +-A limit-3542 -j TEE --gateway 10.0.0.1 +-A limit-3542 -j TEE --gateway 10.0.0.2 +-A limit-3542 -j ACCEPT +-A limit-3543 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 +-A limit-3543 -j TEE --gateway 10.0.0.1 +-A limit-3543 -j TEE --gateway 10.0.0.2 +-A limit-3544 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 +-A limit-3544 -j ACCEPT +-A limit-3546 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 +-A limit-3546 -m limit --limit 12/minute -j ULOG +-A limit-3546 -j ACCEPT +-A limit-3547 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 +-A limit-3547 -m limit --limit 12/minute -j ULOG +-A limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2000 +-A limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2001 +-A limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2002 +-A limit-3550 -m limit --limit 1/second -j LOG +-A limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2003 +-A limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2004 +-A limit-3552 -j TEE --gateway 10.0.0.1 +-A limit-3552 -j TEE --gateway 10.0.0.2 +-A limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2005 +-A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2006 +-A limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2007 +-A limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2008 +-A limit-3556 -m limit --limit 12/minute -j ULOG +-A limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2009 +-A limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3558 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 +-A limit-3558 -j ACCEPT +-A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3560 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 +-A limit-3560 -m limit --limit 1/second -j LOG +-A limit-3560 -j ACCEPT +-A limit-3561 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 +-A limit-3561 -m limit --limit 1/second -j LOG +-A limit-3562 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 +-A limit-3562 -j TEE --gateway 10.0.0.1 +-A limit-3562 -j TEE --gateway 10.0.0.2 +-A limit-3562 -j ACCEPT +-A limit-3563 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 +-A limit-3563 -j TEE --gateway 10.0.0.1 +-A limit-3563 -j TEE --gateway 10.0.0.2 +-A limit-3564 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 +-A limit-3564 -j ACCEPT +-A limit-3566 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 +-A limit-3566 -m limit --limit 12/minute -j ULOG +-A limit-3566 -j ACCEPT +-A limit-3567 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 +-A limit-3567 -m limit --limit 12/minute -j ULOG +-A limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2020 +-A limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2021 +-A limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --set +-A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2022 +-A limit-3570 -m limit --limit 1/second -j LOG +-A limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2023 +-A limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2024 +-A limit-3572 -j TEE --gateway 10.0.0.1 +-A limit-3572 -j TEE --gateway 10.0.0.2 +-A limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2025 +-A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2026 +-A limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2027 +-A limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --set +-A limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2028 +-A limit-3576 -m limit --limit 12/minute -j ULOG +-A limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2029 +-A limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2030 +-A limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2031 +-A limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-358 -m limit --limit 12/minute -j ULOG -A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2032 +-A limit-3580 -m limit --limit 1/second -j LOG +-A limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2033 +-A limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2034 +-A limit-3582 -j TEE --gateway 10.0.0.1 +-A limit-3582 -j TEE --gateway 10.0.0.2 +-A limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2035 +-A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2036 +-A limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2037 +-A limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2038 +-A limit-3586 -m limit --limit 12/minute -j ULOG +-A limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2039 +-A limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3588 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 +-A limit-3588 -j ACCEPT +-A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-36 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-36 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3590 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 +-A limit-3590 -m limit --limit 1/second -j LOG +-A limit-3590 -j ACCEPT +-A limit-3591 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 +-A limit-3591 -m limit --limit 1/second -j LOG +-A limit-3592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 +-A limit-3592 -j TEE --gateway 10.0.0.1 +-A limit-3592 -j TEE --gateway 10.0.0.2 +-A limit-3592 -j ACCEPT +-A limit-3593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 +-A limit-3593 -j TEE --gateway 10.0.0.1 +-A limit-3593 -j TEE --gateway 10.0.0.2 +-A limit-3594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 +-A limit-3594 -j ACCEPT +-A limit-3596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 +-A limit-3596 -m limit --limit 12/minute -j ULOG +-A limit-3596 -j ACCEPT +-A limit-3597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 +-A limit-3597 -m limit --limit 12/minute -j ULOG +-A limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2050 +-A limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2051 +-A limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-36 -j ACCEPT +-A limit-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-360 -j ACCEPT --A limit-361 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2052 +-A limit-3600 -m limit --limit 1/second -j LOG +-A limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2053 +-A limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2054 +-A limit-3602 -j TEE --gateway 10.0.0.1 +-A limit-3602 -j TEE --gateway 10.0.0.2 +-A limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2055 +-A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2056 +-A limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2057 +-A limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2058 +-A limit-3606 -m limit --limit 12/minute -j ULOG +-A limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2059 +-A limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 +-A limit-3608 -j ACCEPT +-A limit-361 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3610 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 +-A limit-3610 -m limit --limit 1/second -j LOG +-A limit-3610 -j ACCEPT +-A limit-3611 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 +-A limit-3611 -m limit --limit 1/second -j LOG +-A limit-3612 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 +-A limit-3612 -j TEE --gateway 10.0.0.1 +-A limit-3612 -j TEE --gateway 10.0.0.2 +-A limit-3612 -j ACCEPT +-A limit-3613 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 +-A limit-3613 -j TEE --gateway 10.0.0.1 +-A limit-3613 -j TEE --gateway 10.0.0.2 +-A limit-3614 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 +-A limit-3614 -j ACCEPT +-A limit-3616 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 +-A limit-3616 -m limit --limit 12/minute -j ULOG +-A limit-3616 -j ACCEPT +-A limit-3617 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 +-A limit-3617 -m limit --limit 12/minute -j ULOG +-A limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2070 +-A limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2071 +-A limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m limit --limit 1/second -j LOG -A limit-362 -j ACCEPT --A limit-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2072 +-A limit-3620 -m limit --limit 1/second -j LOG +-A limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2073 +-A limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2074 +-A limit-3622 -j TEE --gateway 10.0.0.1 +-A limit-3622 -j TEE --gateway 10.0.0.2 +-A limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2075 +-A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2076 +-A limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2077 +-A limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2078 +-A limit-3626 -m limit --limit 12/minute -j ULOG +-A limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2079 +-A limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3628 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 +-A limit-3628 -j ACCEPT +-A limit-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-363 -m limit --limit 1/second -j LOG --A limit-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3630 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 +-A limit-3630 -m limit --limit 1/second -j LOG +-A limit-3630 -j ACCEPT +-A limit-3631 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 +-A limit-3631 -m limit --limit 1/second -j LOG +-A limit-3632 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 +-A limit-3632 -j TEE --gateway 10.0.0.1 +-A limit-3632 -j TEE --gateway 10.0.0.2 +-A limit-3632 -j ACCEPT +-A limit-3633 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 +-A limit-3633 -j TEE --gateway 10.0.0.1 +-A limit-3633 -j TEE --gateway 10.0.0.2 +-A limit-3634 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 +-A limit-3634 -j ACCEPT +-A limit-3636 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 +-A limit-3636 -m limit --limit 12/minute -j ULOG +-A limit-3636 -j ACCEPT +-A limit-3637 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 +-A limit-3637 -m limit --limit 12/minute -j ULOG +-A limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2090 +-A limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2091 +-A limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-364 -j TEE --gateway 10.0.0.1 +-A limit-364 -j TEE --gateway 10.0.0.2 -A limit-364 -j ACCEPT --A limit-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-366 -m limit --limit 12/minute -j ULOG +-A limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2092 +-A limit-3640 -m limit --limit 1/second -j LOG +-A limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2093 +-A limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2094 +-A limit-3642 -j TEE --gateway 10.0.0.1 +-A limit-3642 -j TEE --gateway 10.0.0.2 +-A limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2095 +-A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2096 +-A limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2097 +-A limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2098 +-A limit-3646 -m limit --limit 12/minute -j ULOG +-A limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2099 +-A limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3648 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 +-A limit-3648 -j ACCEPT +-A limit-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-365 -j TEE --gateway 10.0.0.1 +-A limit-365 -j TEE --gateway 10.0.0.2 +-A limit-3650 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 +-A limit-3650 -m limit --limit 1/second -j LOG +-A limit-3650 -j ACCEPT +-A limit-3651 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 +-A limit-3651 -m limit --limit 1/second -j LOG +-A limit-3652 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 +-A limit-3652 -j TEE --gateway 10.0.0.1 +-A limit-3652 -j TEE --gateway 10.0.0.2 +-A limit-3652 -j ACCEPT +-A limit-3653 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 +-A limit-3653 -j TEE --gateway 10.0.0.1 +-A limit-3653 -j TEE --gateway 10.0.0.2 +-A limit-3654 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 +-A limit-3654 -j ACCEPT +-A limit-3656 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 +-A limit-3656 -m limit --limit 12/minute -j ULOG +-A limit-3656 -j ACCEPT +-A limit-3657 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 +-A limit-3657 -m limit --limit 12/minute -j ULOG +-A limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --set +-A limit-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-366 -j ACCEPT --A limit-367 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-367 -m limit --limit 12/minute -j ULOG --A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-152 --A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-153 --A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set --A limit-37 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-37 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-154 --A limit-370 -m limit --limit 1/second -j LOG +-A limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3660 -m limit --limit 1/second -j LOG +-A limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3662 -j TEE --gateway 10.0.0.1 +-A limit-3662 -j TEE --gateway 10.0.0.2 +-A limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --set +-A limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3666 -m limit --limit 12/minute -j ULOG +-A limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-367 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3670 -m limit --limit 1/second -j LOG +-A limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3672 -j TEE --gateway 10.0.0.1 +-A limit-3672 -j TEE --gateway 10.0.0.2 +-A limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3676 -m limit --limit 12/minute -j ULOG +-A limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3678 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3678 -j ACCEPT +-A limit-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-368 -m limit --limit 12/minute -j ULOG +-A limit-368 -j ACCEPT +-A limit-3680 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3680 -m limit --limit 1/second -j LOG +-A limit-3680 -j ACCEPT +-A limit-3681 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3681 -m limit --limit 1/second -j LOG +-A limit-3682 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3682 -j TEE --gateway 10.0.0.1 +-A limit-3682 -j TEE --gateway 10.0.0.2 +-A limit-3682 -j ACCEPT +-A limit-3683 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3683 -j TEE --gateway 10.0.0.1 +-A limit-3683 -j TEE --gateway 10.0.0.2 +-A limit-3684 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3684 -j ACCEPT +-A limit-3686 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3686 -m limit --limit 12/minute -j ULOG +-A limit-3686 -j ACCEPT +-A limit-3687 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3687 -m limit --limit 12/minute -j ULOG +-A limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-369 -m limit --limit 12/minute -j ULOG +-A limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3690 -m limit --limit 1/second -j LOG +-A limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3692 -j TEE --gateway 10.0.0.1 +-A limit-3692 -j TEE --gateway 10.0.0.2 +-A limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3696 -m limit --limit 12/minute -j ULOG +-A limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3698 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3698 -j ACCEPT +-A limit-37 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-190 -A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-155 --A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-156 +-A limit-3700 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3700 -m limit --limit 1/second -j LOG +-A limit-3700 -j ACCEPT +-A limit-3701 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3701 -m limit --limit 1/second -j LOG +-A limit-3702 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3702 -j TEE --gateway 10.0.0.1 +-A limit-3702 -j TEE --gateway 10.0.0.2 +-A limit-3702 -j ACCEPT +-A limit-3703 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3703 -j TEE --gateway 10.0.0.1 +-A limit-3703 -j TEE --gateway 10.0.0.2 +-A limit-3704 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3704 -j ACCEPT +-A limit-3706 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3706 -m limit --limit 12/minute -j ULOG +-A limit-3706 -j ACCEPT +-A limit-3707 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3707 -m limit --limit 12/minute -j ULOG +-A limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-191 +-A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set +-A limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3710 -m limit --limit 1/second -j LOG +-A limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3712 -j TEE --gateway 10.0.0.1 +-A limit-3712 -j TEE --gateway 10.0.0.2 +-A limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3716 -m limit --limit 12/minute -j ULOG +-A limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3718 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3718 -j ACCEPT +-A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-192 +-A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-157 --A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set --A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-158 --A limit-374 -m limit --limit 12/minute -j ULOG +-A limit-3720 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3720 -m limit --limit 1/second -j LOG +-A limit-3720 -j ACCEPT +-A limit-3721 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3721 -m limit --limit 1/second -j LOG +-A limit-3722 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3722 -j TEE --gateway 10.0.0.1 +-A limit-3722 -j TEE --gateway 10.0.0.2 +-A limit-3722 -j ACCEPT +-A limit-3723 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3723 -j TEE --gateway 10.0.0.1 +-A limit-3723 -j TEE --gateway 10.0.0.2 +-A limit-3724 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3724 -j ACCEPT +-A limit-3726 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3726 -m limit --limit 12/minute -j ULOG +-A limit-3726 -j ACCEPT +-A limit-3727 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3727 -m limit --limit 12/minute -j ULOG +-A limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-193 +-A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3730 -m limit --limit 1/second -j LOG +-A limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3732 -j TEE --gateway 10.0.0.1 +-A limit-3732 -j TEE --gateway 10.0.0.2 +-A limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3736 -m limit --limit 12/minute -j ULOG +-A limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3738 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3738 -j ACCEPT +-A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-194 +-A limit-374 -j TEE --gateway 10.0.0.1 +-A limit-374 -j TEE --gateway 10.0.0.2 -A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-159 --A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-160 --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-161 --A limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-162 --A limit-378 -m limit --limit 1/second -j LOG --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-163 --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3740 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3740 -m limit --limit 1/second -j LOG +-A limit-3740 -j ACCEPT +-A limit-3741 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3741 -m limit --limit 1/second -j LOG +-A limit-3742 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3742 -j TEE --gateway 10.0.0.1 +-A limit-3742 -j TEE --gateway 10.0.0.2 +-A limit-3742 -j ACCEPT +-A limit-3743 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3743 -j TEE --gateway 10.0.0.1 +-A limit-3743 -j TEE --gateway 10.0.0.2 +-A limit-3744 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3744 -j ACCEPT +-A limit-3746 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3746 -m limit --limit 12/minute -j ULOG +-A limit-3746 -j ACCEPT +-A limit-3747 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3747 -m limit --limit 12/minute -j ULOG +-A limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2110 +-A limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2111 +-A limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --set +-A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-195 +-A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2112 +-A limit-3750 -m limit --limit 1/second -j LOG +-A limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2113 +-A limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2114 +-A limit-3752 -j TEE --gateway 10.0.0.1 +-A limit-3752 -j TEE --gateway 10.0.0.2 +-A limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2115 +-A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2116 +-A limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2117 +-A limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --set +-A limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2118 +-A limit-3756 -m limit --limit 12/minute -j ULOG +-A limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2119 +-A limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2120 +-A limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2121 +-A limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-196 +-A limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2122 +-A limit-3760 -m limit --limit 1/second -j LOG +-A limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2123 +-A limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2124 +-A limit-3762 -j TEE --gateway 10.0.0.1 +-A limit-3762 -j TEE --gateway 10.0.0.2 +-A limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2125 +-A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2126 +-A limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2127 +-A limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2128 +-A limit-3766 -m limit --limit 12/minute -j ULOG +-A limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2129 +-A limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3768 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 +-A limit-3768 -j ACCEPT +-A limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-197 +-A limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --set +-A limit-3770 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 +-A limit-3770 -m limit --limit 1/second -j LOG +-A limit-3770 -j ACCEPT +-A limit-3771 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 +-A limit-3771 -m limit --limit 1/second -j LOG +-A limit-3772 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 +-A limit-3772 -j TEE --gateway 10.0.0.1 +-A limit-3772 -j TEE --gateway 10.0.0.2 +-A limit-3772 -j ACCEPT +-A limit-3773 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 +-A limit-3773 -j TEE --gateway 10.0.0.1 +-A limit-3773 -j TEE --gateway 10.0.0.2 +-A limit-3774 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 +-A limit-3774 -j ACCEPT +-A limit-3776 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 +-A limit-3776 -m limit --limit 12/minute -j ULOG +-A limit-3776 -j ACCEPT +-A limit-3777 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 +-A limit-3777 -m limit --limit 12/minute -j ULOG +-A limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2140 +-A limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2141 +-A limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-198 +-A limit-378 -m limit --limit 12/minute -j ULOG +-A limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2142 +-A limit-3780 -m limit --limit 1/second -j LOG +-A limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2143 +-A limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2144 +-A limit-3782 -j TEE --gateway 10.0.0.1 +-A limit-3782 -j TEE --gateway 10.0.0.2 +-A limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2145 +-A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2146 +-A limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2147 +-A limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2148 +-A limit-3786 -m limit --limit 12/minute -j ULOG +-A limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2149 +-A limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3788 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 +-A limit-3788 -j ACCEPT +-A limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-199 +-A limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3790 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 +-A limit-3790 -m limit --limit 1/second -j LOG +-A limit-3790 -j ACCEPT +-A limit-3791 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 +-A limit-3791 -m limit --limit 1/second -j LOG +-A limit-3792 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 +-A limit-3792 -j TEE --gateway 10.0.0.1 +-A limit-3792 -j TEE --gateway 10.0.0.2 +-A limit-3792 -j ACCEPT +-A limit-3793 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 +-A limit-3793 -j TEE --gateway 10.0.0.1 +-A limit-3793 -j TEE --gateway 10.0.0.2 +-A limit-3794 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 +-A limit-3794 -j ACCEPT +-A limit-3796 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 +-A limit-3796 -m limit --limit 12/minute -j ULOG +-A limit-3796 -j ACCEPT +-A limit-3797 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 +-A limit-3797 -m limit --limit 12/minute -j ULOG +-A limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2160 +-A limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2161 +-A limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-38 -m limit --limit 12/minute -j ULOG --A limit-38 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-164 +-A limit-38 -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-200 -A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-165 +-A limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2162 +-A limit-3800 -m limit --limit 1/second -j LOG +-A limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2163 +-A limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2164 +-A limit-3802 -j TEE --gateway 10.0.0.1 +-A limit-3802 -j TEE --gateway 10.0.0.2 +-A limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2165 +-A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2166 +-A limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2167 +-A limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2168 +-A limit-3806 -m limit --limit 12/minute -j ULOG +-A limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2169 +-A limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3808 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 +-A limit-3808 -j ACCEPT +-A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-201 -A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-166 --A limit-382 -m limit --limit 12/minute -j ULOG +-A limit-3810 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 +-A limit-3810 -m limit --limit 1/second -j LOG +-A limit-3810 -j ACCEPT +-A limit-3811 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 +-A limit-3811 -m limit --limit 1/second -j LOG +-A limit-3812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 +-A limit-3812 -j TEE --gateway 10.0.0.1 +-A limit-3812 -j TEE --gateway 10.0.0.2 +-A limit-3812 -j ACCEPT +-A limit-3813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 +-A limit-3813 -j TEE --gateway 10.0.0.1 +-A limit-3813 -j TEE --gateway 10.0.0.2 +-A limit-3814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 +-A limit-3814 -j ACCEPT +-A limit-3816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 +-A limit-3816 -m limit --limit 12/minute -j ULOG +-A limit-3816 -j ACCEPT +-A limit-3817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 +-A limit-3817 -m limit --limit 12/minute -j ULOG +-A limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2180 +-A limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2181 +-A limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-202 +-A limit-382 -m limit --limit 1/second -j LOG -A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-167 --A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-168 --A limit-384 -j ACCEPT --A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-169 --A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-170 --A limit-386 -m limit --limit 1/second -j LOG --A limit-386 -j ACCEPT --A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-171 --A limit-387 -m limit --limit 1/second -j LOG --A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-172 --A limit-388 -j ACCEPT --A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-173 --A limit-39 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-39 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-174 --A limit-390 -m limit --limit 12/minute -j ULOG +-A limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2182 +-A limit-3820 -m limit --limit 1/second -j LOG +-A limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2183 +-A limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2184 +-A limit-3822 -j TEE --gateway 10.0.0.1 +-A limit-3822 -j TEE --gateway 10.0.0.2 +-A limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2185 +-A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2186 +-A limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2187 +-A limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2188 +-A limit-3826 -m limit --limit 12/minute -j ULOG +-A limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2189 +-A limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 +-A limit-3828 -j ACCEPT +-A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-203 +-A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3830 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 +-A limit-3830 -m limit --limit 1/second -j LOG +-A limit-3830 -j ACCEPT +-A limit-3831 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 +-A limit-3831 -m limit --limit 1/second -j LOG +-A limit-3832 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 +-A limit-3832 -j TEE --gateway 10.0.0.1 +-A limit-3832 -j TEE --gateway 10.0.0.2 +-A limit-3832 -j ACCEPT +-A limit-3833 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 +-A limit-3833 -j TEE --gateway 10.0.0.1 +-A limit-3833 -j TEE --gateway 10.0.0.2 +-A limit-3834 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 +-A limit-3834 -j ACCEPT +-A limit-3836 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 +-A limit-3836 -m limit --limit 12/minute -j ULOG +-A limit-3836 -j ACCEPT +-A limit-3837 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 +-A limit-3837 -m limit --limit 12/minute -j ULOG +-A limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3838 -j ACCEPT +-A limit-3838 -m limit --limit 1/second -j LOG +-A limit-3838 -j DROP +-A limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3839 -j RETURN +-A limit-3839 -m limit --limit 1/second -j LOG +-A limit-3839 -j DROP +-A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-204 +-A limit-384 -j TEE --gateway 10.0.0.1 +-A limit-384 -j TEE --gateway 10.0.0.2 +-A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3840 -j logaccept-66 +-A limit-3840 -m limit --limit 1/second -j LOG +-A limit-3840 -j DROP +-A limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3841 -j logaccept-67 +-A limit-3841 -m limit --limit 1/second -j LOG +-A limit-3841 -j DROP +-A limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3842 -j ACCEPT +-A limit-3842 -m limit --limit 1/second -j LOG +-A limit-3842 -j DROP +-A limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3843 -j logaccept-68 +-A limit-3843 -m limit --limit 1/second -j LOG +-A limit-3843 -j DROP +-A limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3844 -j ACCEPT +-A limit-3844 -j DROP +-A limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3845 -j RETURN +-A limit-3845 -j DROP +-A limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3846 -j logaccept-69 +-A limit-3846 -j DROP +-A limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3847 -j logaccept-70 +-A limit-3847 -j DROP +-A limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3848 -j ACCEPT +-A limit-3848 -j DROP +-A limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3849 -j logaccept-71 +-A limit-3849 -j DROP +-A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-205 +-A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3850 -j ACCEPT +-A limit-3850 -m limit --limit 1/second -j LOG +-A limit-3850 -j DROP +-A limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3851 -j RETURN +-A limit-3851 -m limit --limit 1/second -j LOG +-A limit-3851 -j DROP +-A limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3852 -j logaccept-72 +-A limit-3852 -m limit --limit 1/second -j LOG +-A limit-3852 -j DROP +-A limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3853 -j logaccept-73 +-A limit-3853 -m limit --limit 1/second -j LOG +-A limit-3853 -j DROP +-A limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3854 -j ACCEPT +-A limit-3854 -m limit --limit 1/second -j LOG +-A limit-3854 -j DROP +-A limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3855 -j logaccept-74 +-A limit-3855 -m limit --limit 1/second -j LOG +-A limit-3855 -j DROP +-A limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3856 -j ACCEPT +-A limit-3856 -j TEE --gateway 10.0.0.1 +-A limit-3856 -j TEE --gateway 10.0.0.2 +-A limit-3856 -j DROP +-A limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3857 -j RETURN +-A limit-3857 -j TEE --gateway 10.0.0.1 +-A limit-3857 -j TEE --gateway 10.0.0.2 +-A limit-3857 -j DROP +-A limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3858 -j logaccept-75 +-A limit-3858 -j TEE --gateway 10.0.0.1 +-A limit-3858 -j TEE --gateway 10.0.0.2 +-A limit-3858 -j DROP +-A limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3859 -j logaccept-76 +-A limit-3859 -j TEE --gateway 10.0.0.1 +-A limit-3859 -j TEE --gateway 10.0.0.2 +-A limit-3859 -j DROP +-A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-206 +-A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3860 -j ACCEPT +-A limit-3860 -j TEE --gateway 10.0.0.1 +-A limit-3860 -j TEE --gateway 10.0.0.2 +-A limit-3860 -j DROP +-A limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3861 -j logaccept-77 +-A limit-3861 -j TEE --gateway 10.0.0.1 +-A limit-3861 -j TEE --gateway 10.0.0.2 +-A limit-3861 -j DROP +-A limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3862 -j ACCEPT +-A limit-3862 -j DROP +-A limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3863 -j RETURN +-A limit-3863 -j DROP +-A limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3864 -j logaccept-78 +-A limit-3864 -j DROP +-A limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3865 -j logaccept-79 +-A limit-3865 -j DROP +-A limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3866 -j ACCEPT +-A limit-3866 -j DROP +-A limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3867 -j logaccept-80 +-A limit-3867 -j DROP +-A limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3868 -j ACCEPT +-A limit-3868 -m limit --limit 12/minute -j ULOG +-A limit-3868 -j DROP +-A limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3869 -j RETURN +-A limit-3869 -m limit --limit 12/minute -j ULOG +-A limit-3869 -j DROP +-A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-207 +-A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3870 -j logaccept-81 +-A limit-3870 -m limit --limit 12/minute -j ULOG +-A limit-3870 -j DROP +-A limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3871 -j logaccept-82 +-A limit-3871 -m limit --limit 12/minute -j ULOG +-A limit-3871 -j DROP +-A limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3872 -j ACCEPT +-A limit-3872 -m limit --limit 12/minute -j ULOG +-A limit-3872 -j DROP +-A limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3873 -j logaccept-83 +-A limit-3873 -m limit --limit 12/minute -j ULOG +-A limit-3873 -j DROP +-A limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3874 -j ACCEPT +-A limit-3874 -j DROP +-A limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3875 -j RETURN +-A limit-3875 -j DROP +-A limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3876 -j logaccept-84 +-A limit-3876 -j DROP +-A limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3877 -j logaccept-85 +-A limit-3877 -j DROP +-A limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3878 -j ACCEPT +-A limit-3878 -j DROP +-A limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3879 -j logaccept-86 +-A limit-3879 -j DROP +-A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-208 +-A limit-388 -m limit --limit 12/minute -j ULOG +-A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3880 -j ACCEPT +-A limit-3880 -m limit --limit 1/second -j LOG +-A limit-3880 -j DROP +-A limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3881 -j RETURN +-A limit-3881 -m limit --limit 1/second -j LOG +-A limit-3881 -j DROP +-A limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3882 -j logaccept-87 +-A limit-3882 -m limit --limit 1/second -j LOG +-A limit-3882 -j DROP +-A limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3883 -j logaccept-88 +-A limit-3883 -m limit --limit 1/second -j LOG +-A limit-3883 -j DROP +-A limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3884 -j ACCEPT +-A limit-3884 -m limit --limit 1/second -j LOG +-A limit-3884 -j DROP +-A limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3885 -j logaccept-89 +-A limit-3885 -m limit --limit 1/second -j LOG +-A limit-3885 -j DROP +-A limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3886 -j ACCEPT +-A limit-3886 -j TEE --gateway 10.0.0.1 +-A limit-3886 -j TEE --gateway 10.0.0.2 +-A limit-3886 -j DROP +-A limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3887 -j RETURN +-A limit-3887 -j TEE --gateway 10.0.0.1 +-A limit-3887 -j TEE --gateway 10.0.0.2 +-A limit-3887 -j DROP +-A limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3888 -j logaccept-90 +-A limit-3888 -j TEE --gateway 10.0.0.1 +-A limit-3888 -j TEE --gateway 10.0.0.2 +-A limit-3888 -j DROP +-A limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3889 -j logaccept-91 +-A limit-3889 -j TEE --gateway 10.0.0.1 +-A limit-3889 -j TEE --gateway 10.0.0.2 +-A limit-3889 -j DROP +-A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-209 +-A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3890 -j ACCEPT +-A limit-3890 -j TEE --gateway 10.0.0.1 +-A limit-3890 -j TEE --gateway 10.0.0.2 +-A limit-3890 -j DROP +-A limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3891 -j logaccept-92 +-A limit-3891 -j TEE --gateway 10.0.0.1 +-A limit-3891 -j TEE --gateway 10.0.0.2 +-A limit-3891 -j DROP +-A limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3892 -j ACCEPT +-A limit-3892 -j DROP +-A limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3893 -j RETURN +-A limit-3893 -j DROP +-A limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3894 -j logaccept-93 +-A limit-3894 -j DROP +-A limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3895 -j logaccept-94 +-A limit-3895 -j DROP +-A limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3896 -j ACCEPT +-A limit-3896 -j DROP +-A limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3897 -j logaccept-95 +-A limit-3897 -j DROP +-A limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3898 -j ACCEPT +-A limit-3898 -m limit --limit 12/minute -j ULOG +-A limit-3898 -j DROP +-A limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3899 -j RETURN +-A limit-3899 -m limit --limit 12/minute -j ULOG +-A limit-3899 -j DROP +-A limit-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-39 -m limit --limit 12/minute -j ULOG +-A limit-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-210 -A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-175 --A limit-391 -m limit --limit 12/minute -j ULOG --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-394 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-394 -m limit --limit 1/second -j LOG --A limit-394 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-395 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-395 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-396 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-396 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-397 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 --A limit-397 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-398 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3900 -j logaccept-96 +-A limit-3900 -m limit --limit 12/minute -j ULOG +-A limit-3900 -j DROP +-A limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3901 -j logaccept-97 +-A limit-3901 -m limit --limit 12/minute -j ULOG +-A limit-3901 -j DROP +-A limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3902 -j ACCEPT +-A limit-3902 -m limit --limit 12/minute -j ULOG +-A limit-3902 -j DROP +-A limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3903 -j logaccept-98 +-A limit-3903 -m limit --limit 12/minute -j ULOG +-A limit-3903 -j DROP +-A limit-391 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-211 +-A limit-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-212 +-A limit-392 -m limit --limit 1/second -j LOG +-A limit-392 -j ACCEPT +-A limit-393 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-213 +-A limit-393 -m limit --limit 1/second -j LOG +-A limit-394 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-214 +-A limit-394 -j TEE --gateway 10.0.0.1 +-A limit-394 -j TEE --gateway 10.0.0.2 +-A limit-394 -j ACCEPT +-A limit-395 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-215 +-A limit-395 -j TEE --gateway 10.0.0.1 +-A limit-395 -j TEE --gateway 10.0.0.2 +-A limit-396 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-216 +-A limit-396 -j ACCEPT +-A limit-397 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-217 +-A limit-398 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-218 -A limit-398 -m limit --limit 12/minute -j ULOG --A limit-398 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-399 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 --A limit-399 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-398 -j ACCEPT +-A limit-399 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-219 +-A limit-399 -m limit --limit 12/minute -j ULOG -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-4 -j TEE --gateway 10.0.0.1 +-A limit-4 -j TEE --gateway 10.0.0.2 -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-40 -j ACCEPT --A limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-184 --A limit-400 -j ACCEPT --A limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-185 --A limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-220 +-A limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-221 +-A limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-222 -A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j ACCEPT --A limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 --A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 --A limit-404 -j ACCEPT --A limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 --A limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 --A limit-406 -m limit --limit 12/minute -j ULOG --A limit-406 -j ACCEPT --A limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 --A limit-407 -m limit --limit 12/minute -j ULOG --A limit-408 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-192 --A limit-408 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-409 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-193 --A limit-409 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-410 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-194 --A limit-410 -m limit --limit 1/second -j LOG --A limit-410 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-411 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-195 --A limit-411 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-412 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-196 --A limit-412 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-413 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-197 --A limit-413 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-414 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-198 --A limit-414 -m limit --limit 12/minute -j ULOG --A limit-414 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-415 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-199 --A limit-415 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-416 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-223 +-A limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-224 +-A limit-404 -j TEE --gateway 10.0.0.1 +-A limit-404 -j TEE --gateway 10.0.0.2 +-A limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-225 +-A limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-226 +-A limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-227 +-A limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-408 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-228 +-A limit-408 -m limit --limit 12/minute -j ULOG +-A limit-408 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-409 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-409 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-410 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-410 -j ACCEPT +-A limit-411 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-412 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-412 -m limit --limit 1/second -j LOG +-A limit-412 -j ACCEPT +-A limit-413 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-413 -m limit --limit 1/second -j LOG +-A limit-414 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-414 -j TEE --gateway 10.0.0.1 +-A limit-414 -j TEE --gateway 10.0.0.2 +-A limit-414 -j ACCEPT +-A limit-415 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-415 -j TEE --gateway 10.0.0.1 +-A limit-415 -j TEE --gateway 10.0.0.2 +-A limit-416 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-236 -A limit-416 -j ACCEPT --A limit-417 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 --A limit-418 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 --A limit-418 -m limit --limit 1/second -j LOG +-A limit-417 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-418 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-418 -m limit --limit 12/minute -j ULOG -A limit-418 -j ACCEPT --A limit-419 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 --A limit-419 -m limit --limit 1/second -j LOG --A limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-419 -m limit --limit 12/minute -j ULOG +-A limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-42 -m limit --limit 1/second -j LOG --A limit-42 -j ACCEPT --A limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 --A limit-420 -j ACCEPT --A limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-205 --A limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-206 --A limit-422 -m limit --limit 12/minute -j ULOG --A limit-422 -j ACCEPT --A limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-207 --A limit-423 -m limit --limit 12/minute -j ULOG --A limit-424 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 --A limit-424 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-425 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 --A limit-425 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-426 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 --A limit-426 -m limit --limit 1/second -j LOG --A limit-426 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-427 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-211 --A limit-427 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-428 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-212 --A limit-428 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-429 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-213 --A limit-429 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-43 -m limit --limit 1/second -j LOG --A limit-430 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-214 --A limit-430 -m limit --limit 12/minute -j ULOG --A limit-430 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-431 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-215 --A limit-431 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-432 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-422 -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-424 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-424 -j TEE --gateway 10.0.0.1 +-A limit-424 -j TEE --gateway 10.0.0.2 +-A limit-424 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-426 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-426 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-427 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-427 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-428 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-428 -m limit --limit 12/minute -j ULOG +-A limit-428 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-429 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-429 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-430 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-430 -j ACCEPT +-A limit-431 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-432 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-432 -m limit --limit 1/second -j LOG -A limit-432 -j ACCEPT --A limit-433 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-217 --A limit-434 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-218 --A limit-434 -m limit --limit 1/second -j LOG +-A limit-433 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-434 -j TEE --gateway 10.0.0.1 +-A limit-434 -j TEE --gateway 10.0.0.2 -A limit-434 -j ACCEPT --A limit-435 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-219 --A limit-435 -m limit --limit 1/second -j LOG --A limit-436 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-435 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-435 -j TEE --gateway 10.0.0.1 +-A limit-435 -j TEE --gateway 10.0.0.2 +-A limit-436 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-256 -A limit-436 -j ACCEPT --A limit-437 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-221 --A limit-438 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-437 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-438 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-258 -A limit-438 -m limit --limit 12/minute -j ULOG -A limit-438 -j ACCEPT --A limit-439 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A limit-439 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 -A limit-439 -m limit --limit 12/minute -j ULOG --A limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-44 -j ACCEPT --A limit-440 -m recent --name limit-440 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-440 -m recent --name limit-440 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-441 -m recent --name limit-441 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-441 -m recent --name limit-441 --rsource --mask 255.255.255.255 --set --A limit-442 -m recent --name limit-442 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-44 -j TEE --gateway 10.0.0.1 +-A limit-44 -j TEE --gateway 10.0.0.2 +-A limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-440 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-440 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-441 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-441 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-442 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-262 -A limit-442 -m limit --limit 1/second -j LOG --A limit-442 -m recent --name limit-442 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-443 -m recent --name limit-443 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-443 -m recent --name limit-443 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-444 -m recent --name limit-444 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-444 -m recent --name limit-444 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-445 -m recent --name limit-445 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-445 -m recent --name limit-445 --rsource --mask 255.255.255.255 --set --A limit-446 -m recent --name limit-446 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-446 -m limit --limit 12/minute -j ULOG --A limit-446 -m recent --name limit-446 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-447 -m recent --name limit-447 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-447 -m recent --name limit-447 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-448 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-448 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-449 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-449 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-450 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-450 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-451 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-452 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-452 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-453 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-453 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-454 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-454 -m limit --limit 12/minute -j ULOG --A limit-454 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-455 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-455 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-456 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-442 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-443 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-443 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-444 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-264 +-A limit-444 -j TEE --gateway 10.0.0.1 +-A limit-444 -j TEE --gateway 10.0.0.2 +-A limit-444 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-446 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-446 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-447 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-447 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-448 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-448 -m limit --limit 12/minute -j ULOG +-A limit-448 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-449 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-449 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-450 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-450 -j ACCEPT +-A limit-451 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-452 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-452 -m limit --limit 1/second -j LOG +-A limit-452 -j ACCEPT +-A limit-453 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-453 -m limit --limit 1/second -j LOG +-A limit-454 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-454 -j TEE --gateway 10.0.0.1 +-A limit-454 -j TEE --gateway 10.0.0.2 +-A limit-454 -j ACCEPT +-A limit-455 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-455 -j TEE --gateway 10.0.0.1 +-A limit-455 -j TEE --gateway 10.0.0.2 +-A limit-456 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 -A limit-456 -j ACCEPT --A limit-457 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-458 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-458 -m limit --limit 1/second -j LOG +-A limit-457 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-458 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-458 -m limit --limit 12/minute -j ULOG -A limit-458 -j ACCEPT --A limit-459 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-459 -m limit --limit 1/second -j LOG --A limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-46 -m limit --limit 12/minute -j ULOG --A limit-46 -j ACCEPT --A limit-460 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-460 -j ACCEPT --A limit-461 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-462 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-462 -m limit --limit 12/minute -j ULOG --A limit-462 -j ACCEPT --A limit-463 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-463 -m limit --limit 12/minute -j ULOG --A limit-464 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-464 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-465 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-465 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-466 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-466 -m limit --limit 1/second -j LOG --A limit-466 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-467 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-467 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-468 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-468 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-469 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-469 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-47 -m limit --limit 12/minute -j ULOG --A limit-470 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-470 -m limit --limit 12/minute -j ULOG --A limit-470 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-471 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-472 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-472 -j ACCEPT --A limit-473 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-474 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-474 -m limit --limit 1/second -j LOG --A limit-474 -j ACCEPT --A limit-475 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-475 -m limit --limit 1/second -j LOG --A limit-476 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-476 -j ACCEPT --A limit-477 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-478 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-459 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-459 -m limit --limit 12/minute -j ULOG +-A limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-460 -m recent --name limit-460 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-460 -m recent --name limit-460 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-461 -m recent --name limit-461 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-461 -m recent --name limit-461 --rsource --mask 255.255.255.255 --set +-A limit-462 -m recent --name limit-462 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-462 -m limit --limit 1/second -j LOG +-A limit-462 -m recent --name limit-462 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-463 -m recent --name limit-463 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-463 -m recent --name limit-463 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-464 -j TEE --gateway 10.0.0.1 +-A limit-464 -j TEE --gateway 10.0.0.2 +-A limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --set +-A limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-468 -m limit --limit 12/minute -j ULOG +-A limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-472 -m limit --limit 1/second -j LOG +-A limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-474 -j TEE --gateway 10.0.0.1 +-A limit-474 -j TEE --gateway 10.0.0.2 +-A limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-477 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-477 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-478 -m limit --limit 12/minute -j ULOG --A limit-478 -j ACCEPT --A limit-479 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-479 -m limit --limit 12/minute -j ULOG --A limit-48 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-48 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-480 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-480 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-481 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-481 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-482 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-48 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-48 -m limit --limit 12/minute -j ULOG +-A limit-48 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-480 -j ACCEPT +-A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-482 -m limit --limit 1/second -j LOG --A limit-482 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-483 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-483 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-484 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-484 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-485 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-485 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-486 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-486 -m limit --limit 12/minute -j ULOG --A limit-486 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-487 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-487 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-488 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-482 -j ACCEPT +-A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-483 -m limit --limit 1/second -j LOG +-A limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-484 -j TEE --gateway 10.0.0.1 +-A limit-484 -j TEE --gateway 10.0.0.2 +-A limit-484 -j ACCEPT +-A limit-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-485 -j TEE --gateway 10.0.0.1 +-A limit-485 -j TEE --gateway 10.0.0.2 +-A limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-486 -j ACCEPT +-A limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-488 -m limit --limit 12/minute -j ULOG -A limit-488 -j ACCEPT --A limit-489 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-49 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-49 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-490 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-490 -m limit --limit 1/second -j LOG --A limit-490 -j ACCEPT --A limit-491 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-491 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-492 -j ACCEPT --A limit-493 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-494 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-494 -m limit --limit 12/minute -j ULOG --A limit-494 -j ACCEPT --A limit-495 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-495 -m limit --limit 12/minute -j ULOG --A limit-496 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-496 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-497 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-497 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-498 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-498 -m limit --limit 1/second -j LOG --A limit-498 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-499 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-499 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-489 -m limit --limit 12/minute -j ULOG +-A limit-49 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-49 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-492 -m limit --limit 1/second -j LOG +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-494 -j TEE --gateway 10.0.0.1 +-A limit-494 -j TEE --gateway 10.0.0.2 +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-498 -m limit --limit 12/minute -j ULOG +-A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 --A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set --A limit-50 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-500 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-500 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-501 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-501 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-502 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-502 -m limit --limit 12/minute -j ULOG --A limit-502 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-503 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-503 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-504 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-50 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-50 -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-500 -j ACCEPT +-A limit-501 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-502 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-502 -m limit --limit 1/second -j LOG +-A limit-502 -j ACCEPT +-A limit-503 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-503 -m limit --limit 1/second -j LOG +-A limit-504 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-504 -j TEE --gateway 10.0.0.1 +-A limit-504 -j TEE --gateway 10.0.0.2 -A limit-504 -j ACCEPT --A limit-505 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-506 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-506 -m limit --limit 1/second -j LOG +-A limit-505 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-505 -j TEE --gateway 10.0.0.1 +-A limit-505 -j TEE --gateway 10.0.0.2 +-A limit-506 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-506 -j ACCEPT --A limit-507 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-507 -m limit --limit 1/second -j LOG --A limit-508 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-507 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-508 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-508 -m limit --limit 12/minute -j ULOG -A limit-508 -j ACCEPT --A limit-509 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-51 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-51 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-510 -m limit --limit 12/minute -j ULOG --A limit-510 -j ACCEPT --A limit-511 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-511 -m limit --limit 12/minute -j ULOG --A limit-512 -m recent --name limit-512 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-224 --A limit-512 -m recent --name limit-512 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-513 -m recent --name limit-513 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-225 --A limit-513 -m recent --name limit-513 --rsource --mask 255.255.255.255 --set --A limit-514 -m recent --name limit-514 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-226 --A limit-514 -m limit --limit 1/second -j LOG --A limit-514 -m recent --name limit-514 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-515 -m recent --name limit-515 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-227 --A limit-515 -m recent --name limit-515 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-516 -m recent --name limit-516 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-228 --A limit-516 -m recent --name limit-516 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-517 -m recent --name limit-517 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-229 --A limit-517 -m recent --name limit-517 --rsource --mask 255.255.255.255 --set --A limit-518 -m recent --name limit-518 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-230 +-A limit-509 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-509 -m limit --limit 12/minute -j ULOG +-A limit-51 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-512 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-514 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-514 -j TEE --gateway 10.0.0.1 +-A limit-514 -j TEE --gateway 10.0.0.2 +-A limit-514 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-516 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-516 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-517 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-517 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-518 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-518 -m limit --limit 12/minute -j ULOG --A limit-518 -m recent --name limit-518 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-519 -m recent --name limit-519 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-231 --A limit-519 -m recent --name limit-519 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-52 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-52 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-520 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-232 --A limit-520 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-521 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-233 --A limit-521 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-522 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-234 +-A limit-518 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-519 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-519 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-52 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-52 -m limit --limit 1/second -j LOG +-A limit-52 -j ACCEPT +-A limit-520 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-520 -j ACCEPT +-A limit-521 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-522 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-522 -m limit --limit 1/second -j LOG --A limit-522 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-523 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-235 --A limit-523 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-524 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-236 --A limit-524 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-525 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-237 --A limit-525 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-526 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-238 --A limit-526 -m limit --limit 12/minute -j ULOG --A limit-526 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-527 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-239 --A limit-527 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-528 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-240 +-A limit-522 -j ACCEPT +-A limit-523 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-524 -j TEE --gateway 10.0.0.1 +-A limit-524 -j TEE --gateway 10.0.0.2 +-A limit-524 -j ACCEPT +-A limit-525 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-525 -j TEE --gateway 10.0.0.1 +-A limit-525 -j TEE --gateway 10.0.0.2 +-A limit-526 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-526 -j ACCEPT +-A limit-527 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-528 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-528 -m limit --limit 12/minute -j ULOG -A limit-528 -j ACCEPT --A limit-529 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-241 --A limit-53 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-53 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-530 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-242 --A limit-530 -m limit --limit 1/second -j LOG --A limit-530 -j ACCEPT --A limit-531 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-243 --A limit-531 -m limit --limit 1/second -j LOG --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-244 --A limit-532 -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-245 --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-246 --A limit-534 -m limit --limit 12/minute -j ULOG --A limit-534 -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-247 --A limit-535 -m limit --limit 12/minute -j ULOG --A limit-536 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-248 --A limit-536 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-537 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-249 --A limit-537 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-538 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-250 --A limit-538 -m limit --limit 1/second -j LOG --A limit-538 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-539 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-251 --A limit-539 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-54 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-54 -m limit --limit 12/minute -j ULOG --A limit-54 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-540 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-252 --A limit-540 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-541 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-253 --A limit-541 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-254 --A limit-542 -m limit --limit 12/minute -j ULOG --A limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-255 --A limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-256 +-A limit-529 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-529 -m limit --limit 12/minute -j ULOG +-A limit-53 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-53 -m limit --limit 1/second -j LOG +-A limit-530 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-530 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-531 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-531 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-532 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-532 -m limit --limit 1/second -j LOG +-A limit-532 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-533 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-533 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-534 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-534 -j TEE --gateway 10.0.0.1 +-A limit-534 -j TEE --gateway 10.0.0.2 +-A limit-534 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-536 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-536 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-537 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-537 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-538 -m limit --limit 12/minute -j ULOG +-A limit-538 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-539 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-54 -j TEE --gateway 10.0.0.1 +-A limit-54 -j TEE --gateway 10.0.0.2 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-540 -j ACCEPT +-A limit-541 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-542 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-542 -m limit --limit 1/second -j LOG +-A limit-542 -j ACCEPT +-A limit-543 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-543 -m limit --limit 1/second -j LOG +-A limit-544 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-544 -j TEE --gateway 10.0.0.1 +-A limit-544 -j TEE --gateway 10.0.0.2 -A limit-544 -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-257 --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-258 --A limit-546 -m limit --limit 1/second -j LOG +-A limit-545 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-545 -j TEE --gateway 10.0.0.1 +-A limit-545 -j TEE --gateway 10.0.0.2 +-A limit-546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-546 -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-259 --A limit-547 -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-260 +-A limit-547 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-548 -m limit --limit 12/minute -j ULOG -A limit-548 -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-261 --A limit-55 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-55 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-262 --A limit-550 -m limit --limit 12/minute -j ULOG --A limit-550 -j ACCEPT --A limit-551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-263 --A limit-551 -m limit --limit 12/minute -j ULOG --A limit-552 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-264 --A limit-552 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-553 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-265 --A limit-553 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-554 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-266 --A limit-554 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-555 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-267 --A limit-555 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-268 --A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-269 --A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-270 +-A limit-549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-549 -m limit --limit 12/minute -j ULOG +-A limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-55 -j TEE --gateway 10.0.0.1 +-A limit-55 -j TEE --gateway 10.0.0.2 +-A limit-550 -m recent --name limit-550 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-280 +-A limit-550 -m recent --name limit-550 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-551 -m recent --name limit-551 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-281 +-A limit-551 -m recent --name limit-551 --rsource --mask 255.255.255.255 --set +-A limit-552 -m recent --name limit-552 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-282 +-A limit-552 -m limit --limit 1/second -j LOG +-A limit-552 -m recent --name limit-552 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-553 -m recent --name limit-553 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-283 +-A limit-553 -m recent --name limit-553 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-284 +-A limit-554 -j TEE --gateway 10.0.0.1 +-A limit-554 -j TEE --gateway 10.0.0.2 +-A limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-285 +-A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-286 +-A limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-287 +-A limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --set +-A limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-288 -A limit-558 -m limit --limit 12/minute -j ULOG --A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-271 --A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-56 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-272 --A limit-560 -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-273 --A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-274 +-A limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 -A limit-562 -m limit --limit 1/second -j LOG --A limit-562 -j ACCEPT --A limit-563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-275 --A limit-563 -m limit --limit 1/second -j LOG --A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-276 --A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-277 --A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-278 --A limit-566 -m limit --limit 12/minute -j ULOG --A limit-566 -j ACCEPT --A limit-567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-279 --A limit-567 -m limit --limit 12/minute -j ULOG --A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-280 --A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-281 --A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-57 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-282 --A limit-570 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-283 --A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-284 --A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-285 --A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-286 --A limit-574 -m limit --limit 12/minute -j ULOG --A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-575 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-287 --A limit-575 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-288 +-A limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-564 -j TEE --gateway 10.0.0.1 +-A limit-564 -j TEE --gateway 10.0.0.2 +-A limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-567 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-568 -m limit --limit 12/minute -j ULOG +-A limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-570 -j ACCEPT +-A limit-571 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-572 -m limit --limit 1/second -j LOG +-A limit-572 -j ACCEPT +-A limit-573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-573 -m limit --limit 1/second -j LOG +-A limit-574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-574 -j TEE --gateway 10.0.0.1 +-A limit-574 -j TEE --gateway 10.0.0.2 +-A limit-574 -j ACCEPT +-A limit-575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-575 -j TEE --gateway 10.0.0.1 +-A limit-575 -j TEE --gateway 10.0.0.2 +-A limit-576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 -A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-289 --A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-290 --A limit-578 -m limit --limit 1/second -j LOG +-A limit-577 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-578 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-578 -m limit --limit 12/minute -j ULOG -A limit-578 -j ACCEPT --A limit-579 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-291 --A limit-579 -m limit --limit 1/second -j LOG --A limit-58 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-58 -m limit --limit 1/second -j LOG +-A limit-579 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-579 -m limit --limit 12/minute -j ULOG +-A limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-58 -m limit --limit 12/minute -j ULOG -A limit-58 -j ACCEPT --A limit-580 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-292 --A limit-580 -j ACCEPT --A limit-581 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-293 --A limit-582 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-294 --A limit-582 -m limit --limit 12/minute -j ULOG --A limit-582 -j ACCEPT --A limit-583 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-295 --A limit-583 -m limit --limit 12/minute -j ULOG --A limit-584 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-584 -j ACCEPT --A limit-584 -m limit --limit 1/second -j LOG --A limit-584 -j DROP --A limit-585 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-585 -j RETURN --A limit-585 -m limit --limit 1/second -j LOG --A limit-585 -j DROP --A limit-586 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-586 -j logaccept-0 --A limit-586 -m limit --limit 1/second -j LOG --A limit-586 -j DROP --A limit-587 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-587 -j ACCEPT --A limit-587 -m limit --limit 1/second -j LOG --A limit-587 -j DROP --A limit-588 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-588 -j logaccept-1 --A limit-588 -m limit --limit 1/second -j LOG --A limit-588 -j DROP --A limit-589 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-589 -j ACCEPT --A limit-589 -j DROP --A limit-59 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-59 -m limit --limit 1/second -j LOG --A limit-590 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-590 -j RETURN --A limit-590 -j DROP --A limit-591 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-591 -j logaccept-2 --A limit-591 -j DROP --A limit-592 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-592 -j ACCEPT --A limit-592 -j DROP --A limit-593 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-593 -j logaccept-3 --A limit-593 -j DROP --A limit-594 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-594 -j ACCEPT --A limit-594 -m limit --limit 1/second -j LOG --A limit-594 -j DROP --A limit-595 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-595 -j RETURN --A limit-595 -m limit --limit 1/second -j LOG --A limit-595 -j DROP --A limit-596 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-596 -j logaccept-4 --A limit-596 -m limit --limit 1/second -j LOG --A limit-596 -j DROP --A limit-597 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-597 -j ACCEPT --A limit-597 -m limit --limit 1/second -j LOG --A limit-597 -j DROP --A limit-598 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-598 -j logaccept-5 --A limit-598 -m limit --limit 1/second -j LOG --A limit-598 -j DROP --A limit-599 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-599 -j ACCEPT --A limit-599 -j DROP +-A limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-582 -m limit --limit 1/second -j LOG +-A limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-583 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-584 -j TEE --gateway 10.0.0.1 +-A limit-584 -j TEE --gateway 10.0.0.2 +-A limit-584 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-586 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-586 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-587 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-587 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-588 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-318 +-A limit-588 -m limit --limit 12/minute -j ULOG +-A limit-588 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-589 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-589 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-59 -m limit --limit 12/minute -j ULOG +-A limit-590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-590 -j ACCEPT +-A limit-591 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-592 -m limit --limit 1/second -j LOG +-A limit-592 -j ACCEPT +-A limit-593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-593 -m limit --limit 1/second -j LOG +-A limit-594 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-594 -j TEE --gateway 10.0.0.1 +-A limit-594 -j TEE --gateway 10.0.0.2 +-A limit-594 -j ACCEPT +-A limit-595 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-595 -j TEE --gateway 10.0.0.1 +-A limit-595 -j TEE --gateway 10.0.0.2 +-A limit-596 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-596 -j ACCEPT +-A limit-597 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-598 -m limit --limit 12/minute -j ULOG +-A limit-598 -j ACCEPT +-A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-599 -m limit --limit 12/minute -j ULOG -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 --A limit-6 -m limit --limit 12/minute -j ULOG -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-60 -j ACCEPT --A limit-600 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-600 -j RETURN --A limit-600 -j DROP --A limit-601 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-601 -j logaccept-6 --A limit-601 -j DROP --A limit-602 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-602 -j ACCEPT --A limit-602 -j DROP --A limit-603 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-603 -j logaccept-7 --A limit-603 -j DROP --A limit-604 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-604 -j ACCEPT --A limit-604 -m limit --limit 12/minute -j ULOG --A limit-604 -j DROP --A limit-605 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-605 -j RETURN --A limit-605 -m limit --limit 12/minute -j ULOG --A limit-605 -j DROP --A limit-606 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-606 -j logaccept-8 --A limit-606 -m limit --limit 12/minute -j ULOG --A limit-606 -j DROP --A limit-607 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-607 -j ACCEPT --A limit-607 -m limit --limit 12/minute -j ULOG --A limit-607 -j DROP --A limit-608 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-608 -j logaccept-9 +-A limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-330 +-A limit-600 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-601 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-602 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-602 -m limit --limit 1/second -j LOG +-A limit-602 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-603 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-603 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-604 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-604 -j TEE --gateway 10.0.0.1 +-A limit-604 -j TEE --gateway 10.0.0.2 +-A limit-604 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-606 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-606 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-607 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-607 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-608 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-338 -A limit-608 -m limit --limit 12/minute -j ULOG --A limit-608 -j DROP --A limit-609 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-609 -j ACCEPT --A limit-609 -j DROP --A limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-610 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-610 -j RETURN --A limit-610 -j DROP --A limit-611 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-611 -j logaccept-10 --A limit-611 -j DROP --A limit-612 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-612 -j ACCEPT --A limit-612 -j DROP --A limit-613 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-613 -j logaccept-11 --A limit-613 -j DROP --A limit-614 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-614 -j ACCEPT --A limit-614 -m limit --limit 1/second -j LOG --A limit-614 -j DROP --A limit-615 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-615 -j RETURN --A limit-615 -m limit --limit 1/second -j LOG --A limit-615 -j DROP --A limit-616 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-616 -j logaccept-12 --A limit-616 -m limit --limit 1/second -j LOG --A limit-616 -j DROP --A limit-617 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-617 -j ACCEPT --A limit-617 -m limit --limit 1/second -j LOG --A limit-617 -j DROP --A limit-618 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-618 -j logaccept-13 --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j DROP --A limit-619 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-619 -j ACCEPT --A limit-619 -j DROP --A limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-62 -m limit --limit 12/minute -j ULOG --A limit-62 -j ACCEPT --A limit-620 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-620 -j RETURN --A limit-620 -j DROP --A limit-621 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-621 -j logaccept-14 --A limit-621 -j DROP --A limit-622 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-622 -j ACCEPT --A limit-622 -j DROP --A limit-623 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-623 -j logaccept-15 --A limit-623 -j DROP --A limit-624 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-624 -j ACCEPT --A limit-624 -m limit --limit 12/minute -j ULOG --A limit-624 -j DROP --A limit-625 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-625 -j RETURN --A limit-625 -m limit --limit 12/minute -j ULOG --A limit-625 -j DROP --A limit-626 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-626 -j logaccept-16 --A limit-626 -m limit --limit 12/minute -j ULOG --A limit-626 -j DROP --A limit-627 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-627 -j ACCEPT --A limit-627 -m limit --limit 12/minute -j ULOG --A limit-627 -j DROP --A limit-628 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-628 -j logaccept-17 +-A limit-608 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-609 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-609 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-610 -j ACCEPT +-A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A limit-612 -m limit --limit 1/second -j LOG +-A limit-612 -j ACCEPT +-A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-343 +-A limit-613 -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-344 +-A limit-614 -j TEE --gateway 10.0.0.1 +-A limit-614 -j TEE --gateway 10.0.0.2 +-A limit-614 -j ACCEPT +-A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-345 +-A limit-615 -j TEE --gateway 10.0.0.1 +-A limit-615 -j TEE --gateway 10.0.0.2 +-A limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-346 +-A limit-616 -j ACCEPT +-A limit-617 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-347 +-A limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-348 +-A limit-618 -m limit --limit 12/minute -j ULOG +-A limit-618 -j ACCEPT +-A limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-349 +-A limit-619 -m limit --limit 12/minute -j ULOG +-A limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-620 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-350 +-A limit-620 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-621 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-351 +-A limit-621 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-352 +-A limit-622 -m limit --limit 1/second -j LOG +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-353 +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-354 +-A limit-624 -j TEE --gateway 10.0.0.1 +-A limit-624 -j TEE --gateway 10.0.0.2 +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-355 +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-356 +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-357 +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-358 -A limit-628 -m limit --limit 12/minute -j ULOG --A limit-628 -j DROP --A limit-629 -m recent --name limit-629 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-296 --A limit-629 -m recent --name limit-629 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-63 -m limit --limit 12/minute -j ULOG --A limit-630 -m recent --name limit-630 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-297 --A limit-630 -m recent --name limit-630 --rsource --mask 255.255.255.255 --set --A limit-631 -m recent --name limit-631 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-298 --A limit-631 -m limit --limit 1/second -j LOG --A limit-631 -m recent --name limit-631 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-632 -m recent --name limit-632 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-299 --A limit-632 -m recent --name limit-632 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-633 -m recent --name limit-633 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-300 --A limit-633 -m recent --name limit-633 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-301 --A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set --A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-302 --A limit-635 -m limit --limit 12/minute -j ULOG --A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-303 --A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set --A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-639 -m limit --limit 1/second -j LOG --A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-64 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-64 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --set --A limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-643 -m limit --limit 12/minute -j ULOG --A limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-647 -m limit --limit 1/second -j LOG --A limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-65 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-65 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-651 -m limit --limit 12/minute -j ULOG --A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-653 -j ACCEPT --A limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-655 -m limit --limit 1/second -j LOG --A limit-655 -j ACCEPT --A limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-656 -m limit --limit 1/second -j LOG --A limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-657 -j ACCEPT --A limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-659 -m limit --limit 12/minute -j ULOG --A limit-659 -j ACCEPT --A limit-66 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m limit --limit 1/second -j LOG --A limit-66 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-660 -m limit --limit 12/minute -j ULOG --A limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-359 +-A limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-360 +-A limit-630 -j ACCEPT +-A limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-361 +-A limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-362 +-A limit-632 -m limit --limit 1/second -j LOG +-A limit-632 -j ACCEPT +-A limit-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-363 +-A limit-633 -m limit --limit 1/second -j LOG +-A limit-634 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-364 +-A limit-634 -j TEE --gateway 10.0.0.1 +-A limit-634 -j TEE --gateway 10.0.0.2 +-A limit-634 -j ACCEPT +-A limit-635 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-365 +-A limit-635 -j TEE --gateway 10.0.0.1 +-A limit-635 -j TEE --gateway 10.0.0.2 +-A limit-636 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-366 +-A limit-636 -j ACCEPT +-A limit-637 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-367 +-A limit-638 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-368 +-A limit-638 -m limit --limit 12/minute -j ULOG +-A limit-638 -j ACCEPT +-A limit-639 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-369 +-A limit-639 -m limit --limit 12/minute -j ULOG +-A limit-64 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -j TEE --gateway 10.0.0.1 +-A limit-64 -j TEE --gateway 10.0.0.2 +-A limit-64 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-370 +-A limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-371 +-A limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --set +-A limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-372 +-A limit-642 -m limit --limit 1/second -j LOG +-A limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-373 +-A limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-374 +-A limit-644 -j TEE --gateway 10.0.0.1 +-A limit-644 -j TEE --gateway 10.0.0.2 +-A limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-375 +-A limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-646 -m recent --name limit-646 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-376 +-A limit-646 -m recent --name limit-646 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-647 -m recent --name limit-647 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-377 +-A limit-647 -m recent --name limit-647 --rsource --mask 255.255.255.255 --set +-A limit-648 -m recent --name limit-648 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-378 +-A limit-648 -m limit --limit 12/minute -j ULOG +-A limit-648 -m recent --name limit-648 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-649 -m recent --name limit-649 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-379 +-A limit-649 -m recent --name limit-649 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-380 +-A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-381 +-A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-382 +-A limit-652 -m limit --limit 1/second -j LOG +-A limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-383 +-A limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-654 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-384 +-A limit-654 -j TEE --gateway 10.0.0.1 +-A limit-654 -j TEE --gateway 10.0.0.2 +-A limit-654 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-385 +-A limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-386 +-A limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-387 +-A limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-658 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-388 +-A limit-658 -m limit --limit 12/minute -j ULOG +-A limit-658 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-389 +-A limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-66 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-390 +-A limit-660 -j ACCEPT +-A limit-661 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-391 +-A limit-662 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-392 +-A limit-662 -m limit --limit 1/second -j LOG +-A limit-662 -j ACCEPT +-A limit-663 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-393 -A limit-663 -m limit --limit 1/second -j LOG --A limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-664 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-664 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-665 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-665 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-666 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-666 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-667 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-667 -m limit --limit 12/minute -j ULOG --A limit-667 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-668 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-668 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-669 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-669 -j ACCEPT --A limit-67 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-671 -m limit --limit 1/second -j LOG --A limit-671 -j ACCEPT --A limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-664 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-394 +-A limit-664 -j TEE --gateway 10.0.0.1 +-A limit-664 -j TEE --gateway 10.0.0.2 +-A limit-664 -j ACCEPT +-A limit-665 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-395 +-A limit-665 -j TEE --gateway 10.0.0.1 +-A limit-665 -j TEE --gateway 10.0.0.2 +-A limit-666 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-396 +-A limit-666 -j ACCEPT +-A limit-667 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-397 +-A limit-668 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-398 +-A limit-668 -m limit --limit 12/minute -j ULOG +-A limit-668 -j ACCEPT +-A limit-669 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-399 +-A limit-669 -m limit --limit 12/minute -j ULOG +-A limit-67 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-670 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-400 +-A limit-670 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-401 +-A limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-402 -A limit-672 -m limit --limit 1/second -j LOG --A limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-673 -j ACCEPT --A limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-675 -m limit --limit 12/minute -j ULOG --A limit-675 -j ACCEPT --A limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-676 -m limit --limit 12/minute -j ULOG --A limit-677 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-677 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-678 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-678 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-679 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-679 -m limit --limit 1/second -j LOG --A limit-679 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-68 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-68 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-680 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-680 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-681 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-681 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-682 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-682 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-683 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-683 -m limit --limit 12/minute -j ULOG --A limit-683 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-684 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-684 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-685 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-685 -j ACCEPT --A limit-687 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-687 -m limit --limit 1/second -j LOG --A limit-687 -j ACCEPT --A limit-688 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-688 -m limit --limit 1/second -j LOG --A limit-689 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-689 -j ACCEPT --A limit-69 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-691 -m limit --limit 12/minute -j ULOG --A limit-691 -j ACCEPT --A limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-692 -m limit --limit 12/minute -j ULOG --A limit-693 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-693 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-694 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-694 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-695 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-695 -m limit --limit 1/second -j LOG --A limit-695 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-696 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-696 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-697 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-697 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-698 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-698 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-699 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-699 -m limit --limit 12/minute -j ULOG --A limit-699 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-674 -j TEE --gateway 10.0.0.1 +-A limit-674 -j TEE --gateway 10.0.0.2 +-A limit-674 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-677 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-677 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-678 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-678 -m limit --limit 12/minute -j ULOG +-A limit-678 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-679 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-679 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-68 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-68 -m limit --limit 12/minute -j ULOG +-A limit-68 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-680 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-680 -j ACCEPT +-A limit-681 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-682 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-682 -m limit --limit 1/second -j LOG +-A limit-682 -j ACCEPT +-A limit-683 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-683 -m limit --limit 1/second -j LOG +-A limit-684 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-684 -j TEE --gateway 10.0.0.1 +-A limit-684 -j TEE --gateway 10.0.0.2 +-A limit-684 -j ACCEPT +-A limit-685 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A limit-685 -j TEE --gateway 10.0.0.1 +-A limit-685 -j TEE --gateway 10.0.0.2 +-A limit-686 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A limit-686 -j ACCEPT +-A limit-687 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-688 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-688 -m limit --limit 12/minute -j ULOG +-A limit-688 -j ACCEPT +-A limit-689 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A limit-689 -m limit --limit 12/minute -j ULOG +-A limit-69 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-69 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-690 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-420 +-A limit-690 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-693 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-693 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-694 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-694 -j TEE --gateway 10.0.0.1 +-A limit-694 -j TEE --gateway 10.0.0.2 +-A limit-694 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-696 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-696 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-697 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-427 +-A limit-697 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-698 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-428 +-A limit-698 -m limit --limit 12/minute -j ULOG +-A limit-698 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-699 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-429 +-A limit-699 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 --A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-70 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m limit --limit 12/minute -j ULOG --A limit-70 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-700 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-700 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-701 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-701 -j ACCEPT --A limit-703 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set +-A limit-70 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-70 -j ACCEPT +-A limit-700 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-700 -j ACCEPT +-A limit-701 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A limit-702 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-432 +-A limit-702 -m limit --limit 1/second -j LOG +-A limit-702 -j ACCEPT +-A limit-703 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-433 -A limit-703 -m limit --limit 1/second -j LOG --A limit-703 -j ACCEPT --A limit-704 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-704 -m limit --limit 1/second -j LOG --A limit-705 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-705 -j ACCEPT --A limit-707 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-707 -m limit --limit 12/minute -j ULOG --A limit-707 -j ACCEPT --A limit-708 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-704 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-704 -j TEE --gateway 10.0.0.1 +-A limit-704 -j TEE --gateway 10.0.0.2 +-A limit-704 -j ACCEPT +-A limit-705 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-705 -j TEE --gateway 10.0.0.1 +-A limit-705 -j TEE --gateway 10.0.0.2 +-A limit-706 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-706 -j ACCEPT +-A limit-707 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-708 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-438 -A limit-708 -m limit --limit 12/minute -j ULOG --A limit-709 -m recent --name limit-709 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-304 --A limit-709 -m recent --name limit-709 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-71 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-71 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-710 -m recent --name limit-710 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-305 --A limit-710 -m recent --name limit-710 --rsource --mask 255.255.255.255 --set --A limit-711 -m recent --name limit-711 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-306 --A limit-711 -m limit --limit 1/second -j LOG --A limit-711 -m recent --name limit-711 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-712 -m recent --name limit-712 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-307 --A limit-712 -m recent --name limit-712 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-713 -m recent --name limit-713 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-308 --A limit-713 -m recent --name limit-713 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-714 -m recent --name limit-714 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-309 --A limit-714 -m recent --name limit-714 --rsource --mask 255.255.255.255 --set --A limit-715 -m recent --name limit-715 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-310 --A limit-715 -m limit --limit 12/minute -j ULOG --A limit-715 -m recent --name limit-715 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-311 --A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-717 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-312 --A limit-717 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-718 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-313 --A limit-718 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-719 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-314 --A limit-719 -m limit --limit 1/second -j LOG --A limit-719 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-72 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-708 -j ACCEPT +-A limit-709 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A limit-709 -m limit --limit 12/minute -j ULOG +-A limit-71 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-710 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-440 +-A limit-710 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-711 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-711 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-712 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-712 -m limit --limit 1/second -j LOG +-A limit-712 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-713 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-443 +-A limit-713 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-714 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-444 +-A limit-714 -j TEE --gateway 10.0.0.1 +-A limit-714 -j TEE --gateway 10.0.0.2 +-A limit-714 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-716 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-716 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-717 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-717 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-718 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-718 -m limit --limit 12/minute -j ULOG +-A limit-718 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-719 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-719 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-72 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -m limit --limit 1/second -j LOG -A limit-72 -j ACCEPT --A limit-720 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-315 --A limit-720 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-721 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-316 --A limit-721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-722 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-317 --A limit-722 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-723 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-318 --A limit-723 -m limit --limit 12/minute -j ULOG --A limit-723 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-724 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-319 --A limit-724 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-725 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-320 --A limit-725 -j ACCEPT --A limit-727 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-322 --A limit-727 -m limit --limit 1/second -j LOG --A limit-727 -j ACCEPT --A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-323 --A limit-728 -m limit --limit 1/second -j LOG --A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-324 --A limit-729 -j ACCEPT --A limit-73 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-326 --A limit-731 -m limit --limit 12/minute -j ULOG --A limit-731 -j ACCEPT --A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-327 --A limit-732 -m limit --limit 12/minute -j ULOG --A limit-733 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-328 --A limit-733 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-734 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-329 --A limit-734 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-735 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-330 --A limit-735 -m limit --limit 1/second -j LOG --A limit-735 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-736 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-331 --A limit-736 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-737 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-332 --A limit-737 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-738 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-333 --A limit-738 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-739 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-334 --A limit-739 -m limit --limit 12/minute -j ULOG --A limit-739 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-74 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-74 -m limit --limit 1/second -j LOG +-A limit-720 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-720 -j ACCEPT +-A limit-721 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A limit-722 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A limit-722 -m limit --limit 1/second -j LOG +-A limit-722 -j ACCEPT +-A limit-723 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-723 -m limit --limit 1/second -j LOG +-A limit-724 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-724 -j TEE --gateway 10.0.0.1 +-A limit-724 -j TEE --gateway 10.0.0.2 +-A limit-724 -j ACCEPT +-A limit-725 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A limit-725 -j TEE --gateway 10.0.0.1 +-A limit-725 -j TEE --gateway 10.0.0.2 +-A limit-726 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-456 +-A limit-726 -j ACCEPT +-A limit-727 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-457 +-A limit-728 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-458 +-A limit-728 -m limit --limit 12/minute -j ULOG +-A limit-728 -j ACCEPT +-A limit-729 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-459 +-A limit-729 -m limit --limit 12/minute -j ULOG +-A limit-73 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-73 -m limit --limit 1/second -j LOG +-A limit-730 -m recent --name limit-730 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-730 -m recent --name limit-730 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-731 -m recent --name limit-731 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-731 -m recent --name limit-731 --rsource --mask 255.255.255.255 --set +-A limit-732 -m recent --name limit-732 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-732 -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name limit-732 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-733 -m recent --name limit-733 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-733 -m recent --name limit-733 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-734 -m recent --name limit-734 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-734 -j TEE --gateway 10.0.0.1 +-A limit-734 -j TEE --gateway 10.0.0.2 +-A limit-734 -m recent --name limit-734 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-736 -m recent --name limit-736 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-736 -m recent --name limit-736 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-737 -m recent --name limit-737 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-737 -m recent --name limit-737 --rsource --mask 255.255.255.255 --set +-A limit-738 -m recent --name limit-738 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-738 -m limit --limit 12/minute -j ULOG +-A limit-738 -m recent --name limit-738 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-739 -m recent --name limit-739 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-739 -m recent --name limit-739 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-74 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-74 -j TEE --gateway 10.0.0.1 +-A limit-74 -j TEE --gateway 10.0.0.2 -A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-335 --A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-336 --A limit-741 -j ACCEPT --A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-338 --A limit-743 -m limit --limit 1/second -j LOG --A limit-743 -j ACCEPT --A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-339 --A limit-744 -m limit --limit 1/second -j LOG --A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-340 --A limit-745 -j ACCEPT --A limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-342 --A limit-747 -m limit --limit 12/minute -j ULOG --A limit-747 -j ACCEPT --A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-343 +-A limit-740 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-740 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-741 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-741 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-742 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-742 -m limit --limit 1/second -j LOG +-A limit-742 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-743 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-743 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-744 -j TEE --gateway 10.0.0.1 +-A limit-744 -j TEE --gateway 10.0.0.2 +-A limit-744 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-746 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-746 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-747 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-747 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-748 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-748 -m limit --limit 12/minute -j ULOG --A limit-749 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-344 --A limit-749 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-75 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-345 --A limit-750 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-751 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-346 --A limit-751 -m limit --limit 1/second -j LOG --A limit-751 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-347 --A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-348 --A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-349 --A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-350 --A limit-755 -m limit --limit 12/minute -j ULOG --A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-351 --A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-352 --A limit-757 -j ACCEPT --A limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-354 --A limit-759 -m limit --limit 1/second -j LOG --A limit-759 -j ACCEPT --A limit-76 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-748 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-749 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-749 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-75 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -j TEE --gateway 10.0.0.1 +-A limit-75 -j TEE --gateway 10.0.0.2 +-A limit-750 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-750 -j ACCEPT +-A limit-751 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-752 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-752 -m limit --limit 1/second -j LOG +-A limit-752 -j ACCEPT +-A limit-753 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-753 -m limit --limit 1/second -j LOG +-A limit-754 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-754 -j TEE --gateway 10.0.0.1 +-A limit-754 -j TEE --gateway 10.0.0.2 +-A limit-754 -j ACCEPT +-A limit-755 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-755 -j TEE --gateway 10.0.0.1 +-A limit-755 -j TEE --gateway 10.0.0.2 +-A limit-756 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-756 -j ACCEPT +-A limit-757 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-758 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-758 -m limit --limit 12/minute -j ULOG +-A limit-758 -j ACCEPT +-A limit-759 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-759 -m limit --limit 12/minute -j ULOG +-A limit-76 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-355 --A limit-760 -m limit --limit 1/second -j LOG --A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-356 --A limit-761 -j ACCEPT --A limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-358 --A limit-763 -m limit --limit 12/minute -j ULOG --A limit-763 -j ACCEPT --A limit-764 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-359 --A limit-764 -m limit --limit 12/minute -j ULOG --A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-360 --A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-361 --A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-362 --A limit-767 -m limit --limit 1/second -j LOG --A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-363 --A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-364 --A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-77 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-365 --A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-366 --A limit-771 -m limit --limit 12/minute -j ULOG --A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-367 --A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-368 --A limit-773 -j ACCEPT --A limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-370 --A limit-775 -m limit --limit 1/second -j LOG --A limit-775 -j ACCEPT --A limit-776 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-371 --A limit-776 -m limit --limit 1/second -j LOG --A limit-777 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-372 --A limit-777 -j ACCEPT --A limit-779 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 +-A limit-760 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-760 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-761 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-761 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-762 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-762 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-763 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-763 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-764 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-764 -j TEE --gateway 10.0.0.1 +-A limit-764 -j TEE --gateway 10.0.0.2 +-A limit-764 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-766 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-766 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-767 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-767 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-768 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-768 -m limit --limit 12/minute -j ULOG +-A limit-768 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-769 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-769 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-77 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-770 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-770 -j ACCEPT +-A limit-771 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-772 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-772 -m limit --limit 1/second -j LOG +-A limit-772 -j ACCEPT +-A limit-773 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-774 -j TEE --gateway 10.0.0.1 +-A limit-774 -j TEE --gateway 10.0.0.2 +-A limit-774 -j ACCEPT +-A limit-775 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-775 -j TEE --gateway 10.0.0.1 +-A limit-775 -j TEE --gateway 10.0.0.2 +-A limit-776 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-776 -j ACCEPT +-A limit-777 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-778 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-778 -m limit --limit 12/minute -j ULOG +-A limit-778 -j ACCEPT +-A limit-779 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-779 -m limit --limit 12/minute -j ULOG --A limit-779 -j ACCEPT --A limit-78 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-78 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-78 -m limit --limit 12/minute -j ULOG -A limit-78 -j ACCEPT --A limit-780 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 --A limit-780 -m limit --limit 12/minute -j ULOG --A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-782 -m recent --name limit-782 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-782 -m recent --name limit-782 --rsource --mask 255.255.255.255 --set --A limit-783 -m recent --name limit-783 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-783 -m limit --limit 1/second -j LOG --A limit-783 -m recent --name limit-783 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-784 -m recent --name limit-784 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-784 -m recent --name limit-784 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-785 -m recent --name limit-785 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-785 -m recent --name limit-785 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-786 -m recent --name limit-786 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-786 -m recent --name limit-786 --rsource --mask 255.255.255.255 --set --A limit-787 -m recent --name limit-787 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-787 -m limit --limit 12/minute -j ULOG --A limit-787 -m recent --name limit-787 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-788 -m recent --name limit-788 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-788 -m recent --name limit-788 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-79 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-780 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-781 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-781 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-782 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-782 -m limit --limit 1/second -j LOG +-A limit-782 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-783 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-783 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-784 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-784 -j TEE --gateway 10.0.0.1 +-A limit-784 -j TEE --gateway 10.0.0.2 +-A limit-784 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-786 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-786 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-787 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-787 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-788 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-788 -m limit --limit 12/minute -j ULOG +-A limit-788 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-789 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-789 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-79 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-79 -m limit --limit 12/minute -j ULOG --A limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-791 -m limit --limit 1/second -j LOG --A limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-794 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-795 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-795 -m limit --limit 12/minute -j ULOG --A limit-795 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-796 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-796 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-797 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-797 -j ACCEPT --A limit-799 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-799 -m limit --limit 1/second -j LOG --A limit-799 -j ACCEPT --A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-790 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-790 -j ACCEPT +-A limit-791 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-792 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-792 -m limit --limit 1/second -j LOG +-A limit-792 -j ACCEPT +-A limit-793 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-793 -m limit --limit 1/second -j LOG +-A limit-794 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-794 -j TEE --gateway 10.0.0.1 +-A limit-794 -j TEE --gateway 10.0.0.2 +-A limit-794 -j ACCEPT +-A limit-795 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-795 -j TEE --gateway 10.0.0.1 +-A limit-795 -j TEE --gateway 10.0.0.2 +-A limit-796 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-796 -j ACCEPT +-A limit-797 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-798 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-798 -m limit --limit 12/minute -j ULOG +-A limit-798 -j ACCEPT +-A limit-799 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-799 -m limit --limit 12/minute -j ULOG +-A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 +-A limit-8 -m limit --limit 12/minute -j ULOG -A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-80 -m recent --name limit-80 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 --A limit-80 -m recent --name limit-80 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-800 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-800 -m limit --limit 1/second -j LOG --A limit-801 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-801 -j ACCEPT --A limit-803 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -m limit --limit 12/minute -j ULOG --A limit-803 -j ACCEPT --A limit-804 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-804 -m limit --limit 12/minute -j ULOG --A limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-806 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-807 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-807 -m limit --limit 1/second -j LOG --A limit-807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-808 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-808 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-809 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-809 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-81 -m recent --name limit-81 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 --A limit-81 -m recent --name limit-81 --rsource --mask 255.255.255.255 --set --A limit-810 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-810 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-811 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-811 -m limit --limit 12/minute -j ULOG --A limit-811 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-812 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-812 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-813 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-813 -j ACCEPT --A limit-815 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m limit --limit 1/second -j LOG --A limit-815 -j ACCEPT --A limit-816 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-816 -m limit --limit 1/second -j LOG --A limit-817 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-817 -j ACCEPT --A limit-819 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-800 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-800 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-801 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-801 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-802 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-802 -m limit --limit 1/second -j LOG +-A limit-802 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-803 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-803 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-804 -j TEE --gateway 10.0.0.1 +-A limit-804 -j TEE --gateway 10.0.0.2 +-A limit-804 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-806 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-806 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-807 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-807 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-808 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-808 -m limit --limit 12/minute -j ULOG +-A limit-808 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-809 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-809 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-81 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-810 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-810 -j ACCEPT +-A limit-811 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-812 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-812 -m limit --limit 1/second -j LOG +-A limit-812 -j ACCEPT +-A limit-813 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-813 -m limit --limit 1/second -j LOG +-A limit-814 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-814 -j TEE --gateway 10.0.0.1 +-A limit-814 -j TEE --gateway 10.0.0.2 +-A limit-814 -j ACCEPT +-A limit-815 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-815 -j TEE --gateway 10.0.0.1 +-A limit-815 -j TEE --gateway 10.0.0.2 +-A limit-816 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-816 -j ACCEPT +-A limit-817 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-818 -m limit --limit 12/minute -j ULOG +-A limit-818 -j ACCEPT +-A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-819 -m limit --limit 12/minute -j ULOG --A limit-819 -j ACCEPT --A limit-82 -m recent --name limit-82 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-82 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-82 -m limit --limit 1/second -j LOG --A limit-82 -m recent --name limit-82 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-820 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-820 -m limit --limit 12/minute -j ULOG --A limit-821 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-821 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-822 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-822 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-823 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-823 -m limit --limit 1/second -j LOG --A limit-823 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-824 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-824 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-825 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-825 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-826 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-826 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-827 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-827 -m limit --limit 12/minute -j ULOG --A limit-827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-828 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-828 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-829 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-829 -j ACCEPT --A limit-83 -m recent --name limit-83 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 --A limit-83 -m recent --name limit-83 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-831 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-831 -m limit --limit 1/second -j LOG --A limit-831 -j ACCEPT --A limit-832 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-820 -m recent --name limit-820 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-460 +-A limit-820 -m recent --name limit-820 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-821 -m recent --name limit-821 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-461 +-A limit-821 -m recent --name limit-821 --rsource --mask 255.255.255.255 --set +-A limit-822 -m recent --name limit-822 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-462 +-A limit-822 -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name limit-822 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-823 -m recent --name limit-823 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-463 +-A limit-823 -m recent --name limit-823 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-824 -m recent --name limit-824 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-464 +-A limit-824 -j TEE --gateway 10.0.0.1 +-A limit-824 -j TEE --gateway 10.0.0.2 +-A limit-824 -m recent --name limit-824 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-465 +-A limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-826 -m recent --name limit-826 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-466 +-A limit-826 -m recent --name limit-826 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-827 -m recent --name limit-827 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-467 +-A limit-827 -m recent --name limit-827 --rsource --mask 255.255.255.255 --set +-A limit-828 -m recent --name limit-828 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-468 +-A limit-828 -m limit --limit 12/minute -j ULOG +-A limit-828 -m recent --name limit-828 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-829 -m recent --name limit-829 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-469 +-A limit-829 -m recent --name limit-829 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-83 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-830 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-470 +-A limit-830 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-831 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-471 +-A limit-831 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-832 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-472 -A limit-832 -m limit --limit 1/second -j LOG --A limit-833 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-833 -j ACCEPT --A limit-835 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-835 -m limit --limit 12/minute -j ULOG --A limit-835 -j ACCEPT --A limit-836 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-836 -m limit --limit 12/minute -j ULOG --A limit-837 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-837 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-838 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-838 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-839 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-839 -m limit --limit 1/second -j LOG --A limit-839 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-84 -m recent --name limit-84 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 --A limit-84 -m recent --name limit-84 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-840 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-840 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-841 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-841 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-842 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-842 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-843 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-843 -m limit --limit 12/minute -j ULOG --A limit-843 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-844 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-844 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-845 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -j ACCEPT --A limit-847 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-847 -m limit --limit 1/second -j LOG --A limit-847 -j ACCEPT --A limit-848 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-848 -m limit --limit 1/second -j LOG --A limit-849 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-849 -j ACCEPT --A limit-85 -m recent --name limit-85 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 --A limit-85 -m recent --name limit-85 --rsource --mask 255.255.255.255 --set --A limit-851 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-851 -m limit --limit 12/minute -j ULOG --A limit-851 -j ACCEPT --A limit-852 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-852 -m limit --limit 12/minute -j ULOG --A limit-853 -m recent --name limit-853 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-376 --A limit-853 -m recent --name limit-853 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-854 -m recent --name limit-854 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-377 --A limit-854 -m recent --name limit-854 --rsource --mask 255.255.255.255 --set --A limit-855 -m recent --name limit-855 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-378 --A limit-855 -m limit --limit 1/second -j LOG --A limit-855 -m recent --name limit-855 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-856 -m recent --name limit-856 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-379 --A limit-856 -m recent --name limit-856 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-857 -m recent --name limit-857 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-380 --A limit-857 -m recent --name limit-857 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-858 -m recent --name limit-858 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-381 --A limit-858 -m recent --name limit-858 --rsource --mask 255.255.255.255 --set --A limit-859 -m recent --name limit-859 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-382 --A limit-859 -m limit --limit 12/minute -j ULOG --A limit-859 -m recent --name limit-859 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-86 -m recent --name limit-86 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 --A limit-86 -m limit --limit 12/minute -j ULOG --A limit-86 -m recent --name limit-86 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-860 -m recent --name limit-860 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-383 --A limit-860 -m recent --name limit-860 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-861 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-384 --A limit-861 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-862 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-385 --A limit-862 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-863 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-386 +-A limit-832 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-833 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-473 +-A limit-833 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-474 +-A limit-834 -j TEE --gateway 10.0.0.1 +-A limit-834 -j TEE --gateway 10.0.0.2 +-A limit-834 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-475 +-A limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-476 +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-477 +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-478 +-A limit-838 -m limit --limit 12/minute -j ULOG +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-479 +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-84 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j TEE --gateway 10.0.0.1 +-A limit-84 -j TEE --gateway 10.0.0.2 +-A limit-84 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-480 +-A limit-840 -j ACCEPT +-A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-481 +-A limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-482 +-A limit-842 -m limit --limit 1/second -j LOG +-A limit-842 -j ACCEPT +-A limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-483 +-A limit-843 -m limit --limit 1/second -j LOG +-A limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-484 +-A limit-844 -j TEE --gateway 10.0.0.1 +-A limit-844 -j TEE --gateway 10.0.0.2 +-A limit-844 -j ACCEPT +-A limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-485 +-A limit-845 -j TEE --gateway 10.0.0.1 +-A limit-845 -j TEE --gateway 10.0.0.2 +-A limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-486 +-A limit-846 -j ACCEPT +-A limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-487 +-A limit-848 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-488 +-A limit-848 -m limit --limit 12/minute -j ULOG +-A limit-848 -j ACCEPT +-A limit-849 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-489 +-A limit-849 -m limit --limit 12/minute -j ULOG +-A limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-490 +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-491 +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-492 +-A limit-852 -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-493 +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-494 +-A limit-854 -j TEE --gateway 10.0.0.1 +-A limit-854 -j TEE --gateway 10.0.0.2 +-A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-495 +-A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-496 +-A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-497 +-A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-498 +-A limit-858 -m limit --limit 12/minute -j ULOG +-A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-499 +-A limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-86 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-860 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-500 +-A limit-860 -j ACCEPT +-A limit-861 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-501 +-A limit-862 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-502 +-A limit-862 -m limit --limit 1/second -j LOG +-A limit-862 -j ACCEPT +-A limit-863 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-503 -A limit-863 -m limit --limit 1/second -j LOG --A limit-863 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-864 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-387 --A limit-864 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-865 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-388 --A limit-865 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-866 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-389 --A limit-866 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-867 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-390 --A limit-867 -m limit --limit 12/minute -j ULOG --A limit-867 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-868 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-391 --A limit-868 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-869 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-392 --A limit-869 -j ACCEPT --A limit-87 -m recent --name limit-87 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 --A limit-87 -m recent --name limit-87 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-871 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-394 --A limit-871 -m limit --limit 1/second -j LOG --A limit-871 -j ACCEPT --A limit-872 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-864 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-504 +-A limit-864 -j TEE --gateway 10.0.0.1 +-A limit-864 -j TEE --gateway 10.0.0.2 +-A limit-864 -j ACCEPT +-A limit-865 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-505 +-A limit-865 -j TEE --gateway 10.0.0.1 +-A limit-865 -j TEE --gateway 10.0.0.2 +-A limit-866 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-506 +-A limit-866 -j ACCEPT +-A limit-867 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-507 +-A limit-868 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-508 +-A limit-868 -m limit --limit 12/minute -j ULOG +-A limit-868 -j ACCEPT +-A limit-869 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-509 +-A limit-869 -m limit --limit 12/minute -j ULOG +-A limit-87 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-510 +-A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-511 +-A limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-872 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-512 -A limit-872 -m limit --limit 1/second -j LOG --A limit-873 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-396 --A limit-873 -j ACCEPT --A limit-875 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 --A limit-875 -m limit --limit 12/minute -j ULOG --A limit-875 -j ACCEPT --A limit-876 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 --A limit-876 -m limit --limit 12/minute -j ULOG --A limit-877 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-400 --A limit-877 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-878 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-401 --A limit-878 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-879 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-402 --A limit-879 -m limit --limit 1/second -j LOG --A limit-879 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-88 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 --A limit-88 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-880 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-403 --A limit-880 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-881 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-404 --A limit-881 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-882 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-405 --A limit-882 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-883 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-406 --A limit-883 -m limit --limit 12/minute -j ULOG --A limit-883 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-884 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-407 --A limit-884 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-885 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-408 --A limit-885 -j ACCEPT --A limit-887 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-410 --A limit-887 -m limit --limit 1/second -j LOG --A limit-887 -j ACCEPT --A limit-888 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-411 --A limit-888 -m limit --limit 1/second -j LOG --A limit-889 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-412 --A limit-889 -j ACCEPT --A limit-89 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 --A limit-89 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-891 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-414 --A limit-891 -m limit --limit 12/minute -j ULOG --A limit-891 -j ACCEPT --A limit-892 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-415 --A limit-892 -m limit --limit 12/minute -j ULOG --A limit-893 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-416 --A limit-893 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-894 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-417 --A limit-894 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-895 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-418 --A limit-895 -m limit --limit 1/second -j LOG --A limit-895 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-896 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-419 --A limit-896 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-897 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-420 --A limit-897 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-898 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-421 --A limit-898 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-899 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-422 --A limit-899 -m limit --limit 12/minute -j ULOG --A limit-899 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set --A limit-90 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 --A limit-90 -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-900 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-423 --A limit-900 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-901 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-424 --A limit-901 -j ACCEPT --A limit-903 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-426 +-A limit-872 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-873 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-513 +-A limit-873 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-874 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-514 +-A limit-874 -j TEE --gateway 10.0.0.1 +-A limit-874 -j TEE --gateway 10.0.0.2 +-A limit-874 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-515 +-A limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-876 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-516 +-A limit-876 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-877 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-517 +-A limit-877 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-878 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-518 +-A limit-878 -m limit --limit 12/minute -j ULOG +-A limit-878 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-879 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-519 +-A limit-879 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-88 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-88 -m limit --limit 12/minute -j ULOG +-A limit-88 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-880 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-520 +-A limit-880 -j ACCEPT +-A limit-881 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-521 +-A limit-882 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-522 +-A limit-882 -m limit --limit 1/second -j LOG +-A limit-882 -j ACCEPT +-A limit-883 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-523 +-A limit-883 -m limit --limit 1/second -j LOG +-A limit-884 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-524 +-A limit-884 -j TEE --gateway 10.0.0.1 +-A limit-884 -j TEE --gateway 10.0.0.2 +-A limit-884 -j ACCEPT +-A limit-885 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-525 +-A limit-885 -j TEE --gateway 10.0.0.1 +-A limit-885 -j TEE --gateway 10.0.0.2 +-A limit-886 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-526 +-A limit-886 -j ACCEPT +-A limit-887 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-527 +-A limit-888 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-528 +-A limit-888 -m limit --limit 12/minute -j ULOG +-A limit-888 -j ACCEPT +-A limit-889 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-529 +-A limit-889 -m limit --limit 12/minute -j ULOG +-A limit-89 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-89 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-890 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-530 +-A limit-890 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-891 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-531 +-A limit-891 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-892 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-532 +-A limit-892 -m limit --limit 1/second -j LOG +-A limit-892 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-893 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-533 +-A limit-893 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-534 +-A limit-894 -j TEE --gateway 10.0.0.1 +-A limit-894 -j TEE --gateway 10.0.0.2 +-A limit-894 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-535 +-A limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-896 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-536 +-A limit-896 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-897 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-537 +-A limit-897 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-898 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-538 +-A limit-898 -m limit --limit 12/minute -j ULOG +-A limit-898 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-899 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-539 +-A limit-899 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-90 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-90 -j ACCEPT +-A limit-900 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-540 +-A limit-900 -j ACCEPT +-A limit-901 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-541 +-A limit-902 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-542 +-A limit-902 -m limit --limit 1/second -j LOG +-A limit-902 -j ACCEPT +-A limit-903 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-543 -A limit-903 -m limit --limit 1/second -j LOG --A limit-903 -j ACCEPT --A limit-904 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-427 --A limit-904 -m limit --limit 1/second -j LOG --A limit-905 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-428 --A limit-905 -j ACCEPT --A limit-907 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-430 --A limit-907 -m limit --limit 12/minute -j ULOG --A limit-907 -j ACCEPT --A limit-908 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-431 +-A limit-904 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-544 +-A limit-904 -j TEE --gateway 10.0.0.1 +-A limit-904 -j TEE --gateway 10.0.0.2 +-A limit-904 -j ACCEPT +-A limit-905 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-545 +-A limit-905 -j TEE --gateway 10.0.0.1 +-A limit-905 -j TEE --gateway 10.0.0.2 +-A limit-906 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-546 +-A limit-906 -j ACCEPT +-A limit-907 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-547 +-A limit-908 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-548 -A limit-908 -m limit --limit 12/minute -j ULOG --A limit-909 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-432 --A limit-909 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-91 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-19 --A limit-91 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-910 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-433 --A limit-910 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-911 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-434 +-A limit-908 -j ACCEPT +-A limit-909 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-549 +-A limit-909 -m limit --limit 12/minute -j ULOG +-A limit-91 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-910 -j ACCEPT +-A limit-910 -m limit --limit 1/second -j LOG +-A limit-910 -j DROP +-A limit-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-911 -j RETURN -A limit-911 -m limit --limit 1/second -j LOG --A limit-911 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-912 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-435 --A limit-912 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-913 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-436 --A limit-913 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-914 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-437 --A limit-914 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-915 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-438 --A limit-915 -m limit --limit 12/minute -j ULOG --A limit-915 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-916 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-439 --A limit-916 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-917 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-440 --A limit-917 -j ACCEPT --A limit-919 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-442 --A limit-919 -m limit --limit 1/second -j LOG --A limit-919 -j ACCEPT --A limit-92 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-20 --A limit-92 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-920 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-443 --A limit-920 -m limit --limit 1/second -j LOG --A limit-921 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-444 --A limit-921 -j ACCEPT --A limit-923 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-446 --A limit-923 -m limit --limit 12/minute -j ULOG --A limit-923 -j ACCEPT --A limit-924 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-447 --A limit-924 -m limit --limit 12/minute -j ULOG --A limit-925 -m recent --name limit-925 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-925 -m recent --name limit-925 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-926 -m recent --name limit-926 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-926 -m recent --name limit-926 --rsource --mask 255.255.255.255 --set --A limit-927 -m recent --name limit-927 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-911 -j DROP +-A limit-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-912 -j logaccept-0 +-A limit-912 -m limit --limit 1/second -j LOG +-A limit-912 -j DROP +-A limit-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-913 -j logaccept-1 +-A limit-913 -m limit --limit 1/second -j LOG +-A limit-913 -j DROP +-A limit-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-914 -j ACCEPT +-A limit-914 -m limit --limit 1/second -j LOG +-A limit-914 -j DROP +-A limit-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-915 -j logaccept-2 +-A limit-915 -m limit --limit 1/second -j LOG +-A limit-915 -j DROP +-A limit-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-916 -j ACCEPT +-A limit-916 -j DROP +-A limit-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-917 -j RETURN +-A limit-917 -j DROP +-A limit-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-918 -j logaccept-3 +-A limit-918 -j DROP +-A limit-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-919 -j logaccept-4 +-A limit-919 -j DROP +-A limit-92 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-92 -m limit --limit 1/second -j LOG +-A limit-92 -j ACCEPT +-A limit-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-920 -j ACCEPT +-A limit-920 -j DROP +-A limit-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-921 -j logaccept-5 +-A limit-921 -j DROP +-A limit-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-922 -j ACCEPT +-A limit-922 -m limit --limit 1/second -j LOG +-A limit-922 -j DROP +-A limit-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-923 -j RETURN +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-923 -j DROP +-A limit-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-924 -j logaccept-6 +-A limit-924 -m limit --limit 1/second -j LOG +-A limit-924 -j DROP +-A limit-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-925 -j logaccept-7 +-A limit-925 -m limit --limit 1/second -j LOG +-A limit-925 -j DROP +-A limit-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-926 -j ACCEPT +-A limit-926 -m limit --limit 1/second -j LOG +-A limit-926 -j DROP +-A limit-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-927 -j logaccept-8 -A limit-927 -m limit --limit 1/second -j LOG --A limit-927 -m recent --name limit-927 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-928 -m recent --name limit-928 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-928 -m recent --name limit-928 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-929 -m recent --name limit-929 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-929 -m recent --name limit-929 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-93 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-21 --A limit-93 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-930 -m recent --name limit-930 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-930 -m recent --name limit-930 --rsource --mask 255.255.255.255 --set --A limit-931 -m recent --name limit-931 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-931 -m limit --limit 12/minute -j ULOG --A limit-931 -m recent --name limit-931 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-932 -m recent --name limit-932 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-932 -m recent --name limit-932 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-933 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-933 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-934 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-934 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-935 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-935 -m limit --limit 1/second -j LOG --A limit-935 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-936 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-936 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-937 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-937 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-938 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-938 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-939 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-939 -m limit --limit 12/minute -j ULOG --A limit-939 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-94 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-22 --A limit-94 -m limit --limit 12/minute -j ULOG --A limit-94 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-940 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-940 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-941 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-941 -j ACCEPT --A limit-943 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-943 -m limit --limit 1/second -j LOG --A limit-943 -j ACCEPT --A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-944 -m limit --limit 1/second -j LOG --A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-945 -j ACCEPT --A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-947 -m limit --limit 12/minute -j ULOG --A limit-947 -j ACCEPT --A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-948 -m limit --limit 12/minute -j ULOG --A limit-949 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-949 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-95 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-23 --A limit-95 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-950 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-950 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-951 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-951 -m limit --limit 1/second -j LOG --A limit-951 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-952 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-952 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-953 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-953 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-954 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-954 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-955 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-955 -m limit --limit 12/minute -j ULOG --A limit-955 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-957 -j ACCEPT --A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-959 -m limit --limit 1/second -j LOG --A limit-959 -j ACCEPT --A limit-96 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-927 -j DROP +-A limit-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-928 -j ACCEPT +-A limit-928 -j TEE --gateway 10.0.0.1 +-A limit-928 -j TEE --gateway 10.0.0.2 +-A limit-928 -j DROP +-A limit-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-929 -j RETURN +-A limit-929 -j TEE --gateway 10.0.0.1 +-A limit-929 -j TEE --gateway 10.0.0.2 +-A limit-929 -j DROP +-A limit-93 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m limit --limit 1/second -j LOG +-A limit-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-930 -j logaccept-9 +-A limit-930 -j TEE --gateway 10.0.0.1 +-A limit-930 -j TEE --gateway 10.0.0.2 +-A limit-930 -j DROP +-A limit-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-931 -j logaccept-10 +-A limit-931 -j TEE --gateway 10.0.0.1 +-A limit-931 -j TEE --gateway 10.0.0.2 +-A limit-931 -j DROP +-A limit-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-932 -j ACCEPT +-A limit-932 -j TEE --gateway 10.0.0.1 +-A limit-932 -j TEE --gateway 10.0.0.2 +-A limit-932 -j DROP +-A limit-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-933 -j logaccept-11 +-A limit-933 -j TEE --gateway 10.0.0.1 +-A limit-933 -j TEE --gateway 10.0.0.2 +-A limit-933 -j DROP +-A limit-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-934 -j ACCEPT +-A limit-934 -j DROP +-A limit-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-935 -j RETURN +-A limit-935 -j DROP +-A limit-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-936 -j logaccept-12 +-A limit-936 -j DROP +-A limit-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-937 -j logaccept-13 +-A limit-937 -j DROP +-A limit-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-938 -j ACCEPT +-A limit-938 -j DROP +-A limit-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-939 -j logaccept-14 +-A limit-939 -j DROP +-A limit-94 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-94 -j TEE --gateway 10.0.0.1 +-A limit-94 -j TEE --gateway 10.0.0.2 +-A limit-94 -j ACCEPT +-A limit-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-940 -j ACCEPT +-A limit-940 -m limit --limit 12/minute -j ULOG +-A limit-940 -j DROP +-A limit-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-941 -j RETURN +-A limit-941 -m limit --limit 12/minute -j ULOG +-A limit-941 -j DROP +-A limit-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-942 -j logaccept-15 +-A limit-942 -m limit --limit 12/minute -j ULOG +-A limit-942 -j DROP +-A limit-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-943 -j logaccept-16 +-A limit-943 -m limit --limit 12/minute -j ULOG +-A limit-943 -j DROP +-A limit-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-944 -j ACCEPT +-A limit-944 -m limit --limit 12/minute -j ULOG +-A limit-944 -j DROP +-A limit-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-945 -j logaccept-17 +-A limit-945 -m limit --limit 12/minute -j ULOG +-A limit-945 -j DROP +-A limit-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-946 -j ACCEPT +-A limit-946 -j DROP +-A limit-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-947 -j RETURN +-A limit-947 -j DROP +-A limit-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-948 -j logaccept-18 +-A limit-948 -j DROP +-A limit-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-949 -j logaccept-19 +-A limit-949 -j DROP +-A limit-95 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-95 -j TEE --gateway 10.0.0.1 +-A limit-95 -j TEE --gateway 10.0.0.2 +-A limit-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-950 -j ACCEPT +-A limit-950 -j DROP +-A limit-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-951 -j logaccept-20 +-A limit-951 -j DROP +-A limit-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-952 -j ACCEPT +-A limit-952 -m limit --limit 1/second -j LOG +-A limit-952 -j DROP +-A limit-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-953 -j RETURN +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-953 -j DROP +-A limit-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-954 -j logaccept-21 +-A limit-954 -m limit --limit 1/second -j LOG +-A limit-954 -j DROP +-A limit-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-955 -j logaccept-22 +-A limit-955 -m limit --limit 1/second -j LOG +-A limit-955 -j DROP +-A limit-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-956 -j ACCEPT +-A limit-956 -m limit --limit 1/second -j LOG +-A limit-956 -j DROP +-A limit-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-957 -j logaccept-23 +-A limit-957 -m limit --limit 1/second -j LOG +-A limit-957 -j DROP +-A limit-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-958 -j ACCEPT +-A limit-958 -j TEE --gateway 10.0.0.1 +-A limit-958 -j TEE --gateway 10.0.0.2 +-A limit-958 -j DROP +-A limit-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-959 -j RETURN +-A limit-959 -j TEE --gateway 10.0.0.1 +-A limit-959 -j TEE --gateway 10.0.0.2 +-A limit-959 -j DROP +-A limit-96 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-96 -j ACCEPT --A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-960 -m limit --limit 1/second -j LOG --A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-961 -j ACCEPT --A limit-963 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-963 -m limit --limit 12/minute -j ULOG --A limit-963 -j ACCEPT --A limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-964 -m limit --limit 12/minute -j ULOG --A limit-965 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-965 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-966 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-966 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-967 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-967 -m limit --limit 1/second -j LOG --A limit-967 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-97 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-25 --A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-960 -j logaccept-24 +-A limit-960 -j TEE --gateway 10.0.0.1 +-A limit-960 -j TEE --gateway 10.0.0.2 +-A limit-960 -j DROP +-A limit-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-961 -j logaccept-25 +-A limit-961 -j TEE --gateway 10.0.0.1 +-A limit-961 -j TEE --gateway 10.0.0.2 +-A limit-961 -j DROP +-A limit-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-962 -j ACCEPT +-A limit-962 -j TEE --gateway 10.0.0.1 +-A limit-962 -j TEE --gateway 10.0.0.2 +-A limit-962 -j DROP +-A limit-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-963 -j logaccept-26 +-A limit-963 -j TEE --gateway 10.0.0.1 +-A limit-963 -j TEE --gateway 10.0.0.2 +-A limit-963 -j DROP +-A limit-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-964 -j ACCEPT +-A limit-964 -j DROP +-A limit-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-965 -j RETURN +-A limit-965 -j DROP +-A limit-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-966 -j logaccept-27 +-A limit-966 -j DROP +-A limit-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-967 -j logaccept-28 +-A limit-967 -j DROP +-A limit-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-968 -j ACCEPT +-A limit-968 -j DROP +-A limit-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-969 -j logaccept-29 +-A limit-969 -j DROP +-A limit-97 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-970 -j ACCEPT +-A limit-970 -m limit --limit 12/minute -j ULOG +-A limit-970 -j DROP +-A limit-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-971 -j RETURN -A limit-971 -m limit --limit 12/minute -j ULOG --A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-973 -j ACCEPT --A limit-975 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-975 -m limit --limit 1/second -j LOG --A limit-975 -j ACCEPT --A limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-976 -m limit --limit 1/second -j LOG --A limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -j ACCEPT --A limit-979 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-979 -m limit --limit 12/minute -j ULOG --A limit-979 -j ACCEPT --A limit-98 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-26 --A limit-98 -m limit --limit 1/second -j LOG +-A limit-971 -j DROP +-A limit-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-972 -j logaccept-30 +-A limit-972 -m limit --limit 12/minute -j ULOG +-A limit-972 -j DROP +-A limit-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-973 -j logaccept-31 +-A limit-973 -m limit --limit 12/minute -j ULOG +-A limit-973 -j DROP +-A limit-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-974 -j ACCEPT +-A limit-974 -m limit --limit 12/minute -j ULOG +-A limit-974 -j DROP +-A limit-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-975 -j logaccept-32 +-A limit-975 -m limit --limit 12/minute -j ULOG +-A limit-975 -j DROP +-A limit-976 -m recent --name limit-976 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-550 +-A limit-976 -m recent --name limit-976 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-977 -m recent --name limit-977 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-551 +-A limit-977 -m recent --name limit-977 --rsource --mask 255.255.255.255 --set +-A limit-978 -m recent --name limit-978 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-552 +-A limit-978 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name limit-978 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-979 -m recent --name limit-979 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-553 +-A limit-979 -m recent --name limit-979 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-98 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-98 -m limit --limit 12/minute -j ULOG -A limit-98 -j ACCEPT --A limit-980 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-980 -m limit --limit 12/minute -j ULOG --A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-983 -m limit --limit 1/second -j LOG --A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-987 -m limit --limit 12/minute -j ULOG --A limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -j ACCEPT --A limit-99 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-27 --A limit-99 -m limit --limit 1/second -j LOG --A limit-991 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-991 -m limit --limit 1/second -j LOG --A limit-991 -j ACCEPT --A limit-992 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-992 -m limit --limit 1/second -j LOG --A limit-993 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-993 -j ACCEPT --A limit-995 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-995 -m limit --limit 12/minute -j ULOG --A limit-995 -j ACCEPT --A limit-996 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-996 -m limit --limit 12/minute -j ULOG --A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-448 --A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-998 -m recent --name limit-998 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-449 --A limit-998 -m recent --name limit-998 --rsource --mask 255.255.255.255 --set --A limit-999 -m recent --name limit-999 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-450 --A limit-999 -m limit --limit 1/second -j LOG --A limit-999 -m recent --name limit-999 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-980 -m recent --name limit-980 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-554 +-A limit-980 -j TEE --gateway 10.0.0.1 +-A limit-980 -j TEE --gateway 10.0.0.2 +-A limit-980 -m recent --name limit-980 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-555 +-A limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-982 -m recent --name limit-982 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-556 +-A limit-982 -m recent --name limit-982 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-983 -m recent --name limit-983 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-557 +-A limit-983 -m recent --name limit-983 --rsource --mask 255.255.255.255 --set +-A limit-984 -m recent --name limit-984 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-558 +-A limit-984 -m limit --limit 12/minute -j ULOG +-A limit-984 -m recent --name limit-984 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-985 -m recent --name limit-985 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-559 +-A limit-985 -m recent --name limit-985 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-986 -m recent --name limit-986 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-986 -m recent --name limit-986 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-987 -m recent --name limit-987 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-987 -m recent --name limit-987 --rsource --mask 255.255.255.255 --set +-A limit-988 -m recent --name limit-988 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-988 -m limit --limit 1/second -j LOG +-A limit-988 -m recent --name limit-988 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-989 -m recent --name limit-989 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-989 -m recent --name limit-989 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-99 -m limit --limit 12/minute -j ULOG +-A limit-990 -m recent --name limit-990 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-990 -j TEE --gateway 10.0.0.1 +-A limit-990 -j TEE --gateway 10.0.0.2 +-A limit-990 -m recent --name limit-990 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-994 -m limit --limit 12/minute -j ULOG +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-996 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-996 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-997 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-997 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-998 -m limit --limit 1/second -j LOG +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 12/minute -j ULOG +-A logaccept-1 -j TEE --gateway 10.0.0.1 +-A logaccept-1 -j TEE --gateway 10.0.0.2 -A logaccept-1 -j ACCEPT --A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j TEE --gateway 10.0.0.1 +-A logaccept-10 -j TEE --gateway 10.0.0.2 -A logaccept-10 -j ACCEPT +-A logaccept-100 -j LOG +-A logaccept-100 -j ACCEPT +-A logaccept-101 -j TEE --gateway 10.0.0.1 +-A logaccept-101 -j TEE --gateway 10.0.0.2 +-A logaccept-101 -j ACCEPT +-A logaccept-102 -m limit --limit 12/minute -j ULOG +-A logaccept-102 -j ACCEPT -A logaccept-11 -m limit --limit 12/minute -j ULOG -A logaccept-11 -j ACCEPT -A logaccept-12 -m limit --limit 1/second -j LOG -A logaccept-12 -j ACCEPT --A logaccept-13 -m limit --limit 12/minute -j ULOG +-A logaccept-13 -j TEE --gateway 10.0.0.1 +-A logaccept-13 -j TEE --gateway 10.0.0.2 -A logaccept-13 -j ACCEPT --A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -m limit --limit 12/minute -j ULOG -A logaccept-14 -j ACCEPT --A logaccept-15 -m limit --limit 12/minute -j ULOG +-A logaccept-15 -m limit --limit 1/second -j LOG -A logaccept-15 -j ACCEPT --A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j TEE --gateway 10.0.0.1 +-A logaccept-16 -j TEE --gateway 10.0.0.2 -A logaccept-16 -j ACCEPT -A logaccept-17 -m limit --limit 12/minute -j ULOG -A logaccept-17 -j ACCEPT -A logaccept-18 -m limit --limit 1/second -j LOG -A logaccept-18 -j ACCEPT --A logaccept-19 -m limit --limit 12/minute -j ULOG +-A logaccept-19 -j TEE --gateway 10.0.0.1 +-A logaccept-19 -j TEE --gateway 10.0.0.2 -A logaccept-19 -j ACCEPT --A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -m limit --limit 12/minute -j ULOG -A logaccept-2 -j ACCEPT --A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -m limit --limit 12/minute -j ULOG -A logaccept-20 -j ACCEPT --A logaccept-21 -m limit --limit 12/minute -j ULOG +-A logaccept-21 -m limit --limit 1/second -j LOG -A logaccept-21 -j ACCEPT --A logaccept-22 -m limit --limit 1/second -j LOG +-A logaccept-22 -j TEE --gateway 10.0.0.1 +-A logaccept-22 -j TEE --gateway 10.0.0.2 -A logaccept-22 -j ACCEPT -A logaccept-23 -m limit --limit 12/minute -j ULOG -A logaccept-23 -j ACCEPT -A logaccept-24 -m limit --limit 1/second -j LOG -A logaccept-24 -j ACCEPT --A logaccept-25 -m limit --limit 12/minute -j ULOG +-A logaccept-25 -j TEE --gateway 10.0.0.1 +-A logaccept-25 -j TEE --gateway 10.0.0.2 -A logaccept-25 -j ACCEPT --A logaccept-26 -m limit --limit 1/second -j LOG +-A logaccept-26 -m limit --limit 12/minute -j ULOG -A logaccept-26 -j ACCEPT --A logaccept-27 -m limit --limit 12/minute -j ULOG +-A logaccept-27 -m limit --limit 1/second -j LOG -A logaccept-27 -j ACCEPT --A logaccept-28 -m limit --limit 1/second -j LOG +-A logaccept-28 -j TEE --gateway 10.0.0.1 +-A logaccept-28 -j TEE --gateway 10.0.0.2 -A logaccept-28 -j ACCEPT -A logaccept-29 -m limit --limit 12/minute -j ULOG -A logaccept-29 -j ACCEPT --A logaccept-3 -m limit --limit 12/minute -j ULOG +-A logaccept-3 -m limit --limit 1/second -j LOG -A logaccept-3 -j ACCEPT -A logaccept-30 -m limit --limit 1/second -j LOG -A logaccept-30 -j ACCEPT --A logaccept-31 -m limit --limit 12/minute -j ULOG +-A logaccept-31 -j TEE --gateway 10.0.0.1 +-A logaccept-31 -j TEE --gateway 10.0.0.2 -A logaccept-31 -j ACCEPT --A logaccept-32 -m limit --limit 1/second -j LOG +-A logaccept-32 -m limit --limit 12/minute -j ULOG -A logaccept-32 -j ACCEPT --A logaccept-33 -m limit --limit 12/minute -j ULOG +-A logaccept-33 -m limit --limit 1/second -j LOG -A logaccept-33 -j ACCEPT --A logaccept-34 -m limit --limit 1/second -j LOG +-A logaccept-34 -j TEE --gateway 10.0.0.1 +-A logaccept-34 -j TEE --gateway 10.0.0.2 -A logaccept-34 -j ACCEPT -A logaccept-35 -m limit --limit 12/minute -j ULOG -A logaccept-35 -j ACCEPT -A logaccept-36 -m limit --limit 1/second -j LOG -A logaccept-36 -j ACCEPT --A logaccept-37 -m limit --limit 12/minute -j ULOG +-A logaccept-37 -j TEE --gateway 10.0.0.1 +-A logaccept-37 -j TEE --gateway 10.0.0.2 -A logaccept-37 -j ACCEPT --A logaccept-38 -m limit --limit 1/second -j LOG +-A logaccept-38 -m limit --limit 12/minute -j ULOG -A logaccept-38 -j ACCEPT --A logaccept-39 -m limit --limit 12/minute -j ULOG +-A logaccept-39 -m limit --limit 1/second -j LOG -A logaccept-39 -j ACCEPT --A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j TEE --gateway 10.0.0.1 +-A logaccept-4 -j TEE --gateway 10.0.0.2 -A logaccept-4 -j ACCEPT --A logaccept-40 -m limit --limit 1/second -j LOG +-A logaccept-40 -j TEE --gateway 10.0.0.1 +-A logaccept-40 -j TEE --gateway 10.0.0.2 -A logaccept-40 -j ACCEPT -A logaccept-41 -m limit --limit 12/minute -j ULOG -A logaccept-41 -j ACCEPT -A logaccept-42 -m limit --limit 1/second -j LOG -A logaccept-42 -j ACCEPT --A logaccept-43 -m limit --limit 12/minute -j ULOG +-A logaccept-43 -j TEE --gateway 10.0.0.1 +-A logaccept-43 -j TEE --gateway 10.0.0.2 -A logaccept-43 -j ACCEPT --A logaccept-44 -m limit --limit 1/second -j LOG +-A logaccept-44 -m limit --limit 12/minute -j ULOG -A logaccept-44 -j ACCEPT --A logaccept-45 -m limit --limit 12/minute -j ULOG +-A logaccept-45 -m limit --limit 1/second -j LOG -A logaccept-45 -j ACCEPT --A logaccept-46 -m limit --limit 1/second -j LOG +-A logaccept-46 -j TEE --gateway 10.0.0.1 +-A logaccept-46 -j TEE --gateway 10.0.0.2 -A logaccept-46 -j ACCEPT -A logaccept-47 -m limit --limit 12/minute -j ULOG -A logaccept-47 -j ACCEPT -A logaccept-48 -m limit --limit 1/second -j LOG -A logaccept-48 -j ACCEPT --A logaccept-49 -m limit --limit 12/minute -j ULOG +-A logaccept-49 -j TEE --gateway 10.0.0.1 +-A logaccept-49 -j TEE --gateway 10.0.0.2 -A logaccept-49 -j ACCEPT -A logaccept-5 -m limit --limit 12/minute -j ULOG -A logaccept-5 -j ACCEPT --A logaccept-50 -m limit --limit 1/second -j LOG +-A logaccept-50 -m limit --limit 12/minute -j ULOG -A logaccept-50 -j ACCEPT --A logaccept-51 -m limit --limit 12/minute -j ULOG +-A logaccept-51 -m limit --limit 1/second -j LOG -A logaccept-51 -j ACCEPT --A logaccept-52 -m limit --limit 1/second -j LOG +-A logaccept-52 -j TEE --gateway 10.0.0.1 +-A logaccept-52 -j TEE --gateway 10.0.0.2 -A logaccept-52 -j ACCEPT -A logaccept-53 -m limit --limit 12/minute -j ULOG -A logaccept-53 -j ACCEPT -A logaccept-54 -m limit --limit 1/second -j LOG -A logaccept-54 -j ACCEPT --A logaccept-55 -m limit --limit 12/minute -j ULOG +-A logaccept-55 -j TEE --gateway 10.0.0.1 +-A logaccept-55 -j TEE --gateway 10.0.0.2 -A logaccept-55 -j ACCEPT +-A logaccept-56 -m limit --limit 12/minute -j ULOG +-A logaccept-56 -j ACCEPT +-A logaccept-57 -m limit --limit 1/second -j LOG +-A logaccept-57 -j ACCEPT +-A logaccept-58 -j TEE --gateway 10.0.0.1 +-A logaccept-58 -j TEE --gateway 10.0.0.2 +-A logaccept-58 -j ACCEPT +-A logaccept-59 -m limit --limit 12/minute -j ULOG +-A logaccept-59 -j ACCEPT -A logaccept-6 -m limit --limit 1/second -j LOG -A logaccept-6 -j ACCEPT --A logaccept-7 -m limit --limit 12/minute -j ULOG +-A logaccept-60 -m limit --limit 1/second -j LOG +-A logaccept-60 -j ACCEPT +-A logaccept-61 -j TEE --gateway 10.0.0.1 +-A logaccept-61 -j TEE --gateway 10.0.0.2 +-A logaccept-61 -j ACCEPT +-A logaccept-62 -m limit --limit 12/minute -j ULOG +-A logaccept-62 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-64 -j TEE --gateway 10.0.0.1 +-A logaccept-64 -j TEE --gateway 10.0.0.2 +-A logaccept-64 -j ACCEPT +-A logaccept-65 -m limit --limit 12/minute -j ULOG +-A logaccept-65 -j ACCEPT +-A logaccept-66 -m limit --limit 1/second -j LOG +-A logaccept-66 -j ACCEPT +-A logaccept-67 -j TEE --gateway 10.0.0.1 +-A logaccept-67 -j TEE --gateway 10.0.0.2 +-A logaccept-67 -j ACCEPT +-A logaccept-68 -m limit --limit 12/minute -j ULOG +-A logaccept-68 -j ACCEPT +-A logaccept-69 -m limit --limit 1/second -j LOG +-A logaccept-69 -j ACCEPT +-A logaccept-7 -j TEE --gateway 10.0.0.1 +-A logaccept-7 -j TEE --gateway 10.0.0.2 -A logaccept-7 -j ACCEPT --A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-70 -j TEE --gateway 10.0.0.1 +-A logaccept-70 -j TEE --gateway 10.0.0.2 +-A logaccept-70 -j ACCEPT +-A logaccept-71 -m limit --limit 12/minute -j ULOG +-A logaccept-71 -j ACCEPT +-A logaccept-72 -m limit --limit 1/second -j LOG +-A logaccept-72 -j ACCEPT +-A logaccept-73 -j TEE --gateway 10.0.0.1 +-A logaccept-73 -j TEE --gateway 10.0.0.2 +-A logaccept-73 -j ACCEPT +-A logaccept-74 -m limit --limit 12/minute -j ULOG +-A logaccept-74 -j ACCEPT +-A logaccept-75 -m limit --limit 1/second -j LOG +-A logaccept-75 -j ACCEPT +-A logaccept-76 -j TEE --gateway 10.0.0.1 +-A logaccept-76 -j TEE --gateway 10.0.0.2 +-A logaccept-76 -j ACCEPT +-A logaccept-77 -m limit --limit 12/minute -j ULOG +-A logaccept-77 -j ACCEPT +-A logaccept-78 -m limit --limit 1/second -j LOG +-A logaccept-78 -j ACCEPT +-A logaccept-79 -j TEE --gateway 10.0.0.1 +-A logaccept-79 -j TEE --gateway 10.0.0.2 +-A logaccept-79 -j ACCEPT +-A logaccept-8 -m limit --limit 12/minute -j ULOG -A logaccept-8 -j ACCEPT --A logaccept-9 -m limit --limit 12/minute -j ULOG +-A logaccept-80 -m limit --limit 12/minute -j ULOG +-A logaccept-80 -j ACCEPT +-A logaccept-81 -m limit --limit 1/second -j LOG +-A logaccept-81 -j ACCEPT +-A logaccept-82 -j TEE --gateway 10.0.0.1 +-A logaccept-82 -j TEE --gateway 10.0.0.2 +-A logaccept-82 -j ACCEPT +-A logaccept-83 -m limit --limit 12/minute -j ULOG +-A logaccept-83 -j ACCEPT +-A logaccept-84 -m limit --limit 1/second -j LOG +-A logaccept-84 -j ACCEPT +-A logaccept-85 -j TEE --gateway 10.0.0.1 +-A logaccept-85 -j TEE --gateway 10.0.0.2 +-A logaccept-85 -j ACCEPT +-A logaccept-86 -m limit --limit 12/minute -j ULOG +-A logaccept-86 -j ACCEPT +-A logaccept-87 -m limit --limit 1/second -j LOG +-A logaccept-87 -j ACCEPT +-A logaccept-88 -j TEE --gateway 10.0.0.1 +-A logaccept-88 -j TEE --gateway 10.0.0.2 +-A logaccept-88 -j ACCEPT +-A logaccept-89 -m limit --limit 12/minute -j ULOG +-A logaccept-89 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT +-A logaccept-90 -m limit --limit 1/second -j LOG +-A logaccept-90 -j ACCEPT +-A logaccept-91 -j TEE --gateway 10.0.0.1 +-A logaccept-91 -j TEE --gateway 10.0.0.2 +-A logaccept-91 -j ACCEPT +-A logaccept-92 -m limit --limit 12/minute -j ULOG +-A logaccept-92 -j ACCEPT +-A logaccept-93 -m limit --limit 1/second -j LOG +-A logaccept-93 -j ACCEPT +-A logaccept-94 -j TEE --gateway 10.0.0.1 +-A logaccept-94 -j TEE --gateway 10.0.0.2 +-A logaccept-94 -j ACCEPT +-A logaccept-95 -m limit --limit 12/minute -j ULOG +-A logaccept-95 -j ACCEPT +-A logaccept-96 -m limit --limit 1/second -j LOG +-A logaccept-96 -j ACCEPT +-A logaccept-97 -j TEE --gateway 10.0.0.1 +-A logaccept-97 -j TEE --gateway 10.0.0.2 +-A logaccept-97 -j ACCEPT +-A logaccept-98 -m limit --limit 12/minute -j ULOG +-A logaccept-98 -j ACCEPT +-A logaccept-99 -m limit --limit 1/second -j LOG +-A logaccept-99 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG -A logaccept-final-0 -j ACCEPT --A logaccept-final-1 -m limit --limit 12/minute -j ULOG +-A logaccept-final-1 -j TEE --gateway 10.0.0.1 +-A logaccept-final-1 -j TEE --gateway 10.0.0.2 -A logaccept-final-1 -j ACCEPT --A logaccept-final-10 -m limit --limit 1/second -j LOG +-A logaccept-final-10 -j TEE --gateway 10.0.0.1 +-A logaccept-final-10 -j TEE --gateway 10.0.0.2 -A logaccept-final-10 -j ACCEPT --A logaccept-final-100 -m limit --limit 1/second -j LOG +-A logaccept-final-100 -j TEE --gateway 10.0.0.1 +-A logaccept-final-100 -j TEE --gateway 10.0.0.2 -A logaccept-final-100 -j ACCEPT -A logaccept-final-101 -m limit --limit 12/minute -j ULOG -A logaccept-final-101 -j ACCEPT -A logaccept-final-102 -m limit --limit 1/second -j LOG -A logaccept-final-102 -j ACCEPT --A logaccept-final-103 -m limit --limit 12/minute -j ULOG +-A logaccept-final-103 -j TEE --gateway 10.0.0.1 +-A logaccept-final-103 -j TEE --gateway 10.0.0.2 -A logaccept-final-103 -j ACCEPT --A logaccept-final-104 -m limit --limit 1/second -j LOG +-A logaccept-final-104 -m limit --limit 12/minute -j ULOG -A logaccept-final-104 -j ACCEPT --A logaccept-final-105 -m limit --limit 12/minute -j ULOG +-A logaccept-final-105 -m limit --limit 1/second -j LOG -A logaccept-final-105 -j ACCEPT --A logaccept-final-106 -m limit --limit 1/second -j LOG +-A logaccept-final-106 -j TEE --gateway 10.0.0.1 +-A logaccept-final-106 -j TEE --gateway 10.0.0.2 -A logaccept-final-106 -j ACCEPT -A logaccept-final-107 -m limit --limit 12/minute -j ULOG -A logaccept-final-107 -j ACCEPT -A logaccept-final-108 -m limit --limit 1/second -j LOG -A logaccept-final-108 -j ACCEPT --A logaccept-final-109 -m limit --limit 12/minute -j ULOG +-A logaccept-final-109 -j TEE --gateway 10.0.0.1 +-A logaccept-final-109 -j TEE --gateway 10.0.0.2 -A logaccept-final-109 -j ACCEPT -A logaccept-final-11 -m limit --limit 12/minute -j ULOG -A logaccept-final-11 -j ACCEPT --A logaccept-final-110 -m limit --limit 1/second -j LOG +-A logaccept-final-110 -m limit --limit 12/minute -j ULOG -A logaccept-final-110 -j ACCEPT --A logaccept-final-111 -m limit --limit 12/minute -j ULOG +-A logaccept-final-111 -m limit --limit 1/second -j LOG -A logaccept-final-111 -j ACCEPT --A logaccept-final-112 -m limit --limit 1/second -j LOG +-A logaccept-final-112 -j TEE --gateway 10.0.0.1 +-A logaccept-final-112 -j TEE --gateway 10.0.0.2 -A logaccept-final-112 -j ACCEPT -A logaccept-final-113 -m limit --limit 12/minute -j ULOG -A logaccept-final-113 -j ACCEPT -A logaccept-final-114 -m limit --limit 1/second -j LOG -A logaccept-final-114 -j ACCEPT --A logaccept-final-115 -m limit --limit 12/minute -j ULOG +-A logaccept-final-115 -j TEE --gateway 10.0.0.1 +-A logaccept-final-115 -j TEE --gateway 10.0.0.2 -A logaccept-final-115 -j ACCEPT --A logaccept-final-116 -m limit --limit 1/second -j LOG +-A logaccept-final-116 -m limit --limit 12/minute -j ULOG -A logaccept-final-116 -j ACCEPT --A logaccept-final-117 -m limit --limit 12/minute -j ULOG +-A logaccept-final-117 -m limit --limit 1/second -j LOG -A logaccept-final-117 -j ACCEPT --A logaccept-final-118 -m limit --limit 1/second -j LOG +-A logaccept-final-118 -j TEE --gateway 10.0.0.1 +-A logaccept-final-118 -j TEE --gateway 10.0.0.2 -A logaccept-final-118 -j ACCEPT -A logaccept-final-119 -m limit --limit 12/minute -j ULOG -A logaccept-final-119 -j ACCEPT @@ -50868,191 +84279,554 @@ hash:net family inet -A logaccept-final-12 -j ACCEPT -A logaccept-final-120 -m limit --limit 1/second -j LOG -A logaccept-final-120 -j ACCEPT --A logaccept-final-121 -m limit --limit 12/minute -j ULOG +-A logaccept-final-121 -j TEE --gateway 10.0.0.1 +-A logaccept-final-121 -j TEE --gateway 10.0.0.2 -A logaccept-final-121 -j ACCEPT --A logaccept-final-122 -m limit --limit 1/second -j LOG +-A logaccept-final-122 -m limit --limit 12/minute -j ULOG -A logaccept-final-122 -j ACCEPT --A logaccept-final-123 -m limit --limit 12/minute -j ULOG +-A logaccept-final-123 -m limit --limit 1/second -j LOG -A logaccept-final-123 -j ACCEPT --A logaccept-final-124 -m limit --limit 1/second -j LOG +-A logaccept-final-124 -j TEE --gateway 10.0.0.1 +-A logaccept-final-124 -j TEE --gateway 10.0.0.2 -A logaccept-final-124 -j ACCEPT -A logaccept-final-125 -m limit --limit 12/minute -j ULOG -A logaccept-final-125 -j ACCEPT -A logaccept-final-126 -m limit --limit 1/second -j LOG -A logaccept-final-126 -j ACCEPT --A logaccept-final-127 -m limit --limit 12/minute -j ULOG +-A logaccept-final-127 -j TEE --gateway 10.0.0.1 +-A logaccept-final-127 -j TEE --gateway 10.0.0.2 -A logaccept-final-127 -j ACCEPT --A logaccept-final-128 -m limit --limit 1/second -j LOG +-A logaccept-final-128 -m limit --limit 12/minute -j ULOG -A logaccept-final-128 -j ACCEPT --A logaccept-final-129 -m limit --limit 12/minute -j ULOG +-A logaccept-final-129 -m limit --limit 1/second -j LOG -A logaccept-final-129 -j ACCEPT --A logaccept-final-13 -m limit --limit 12/minute -j ULOG +-A logaccept-final-13 -j TEE --gateway 10.0.0.1 +-A logaccept-final-13 -j TEE --gateway 10.0.0.2 -A logaccept-final-13 -j ACCEPT --A logaccept-final-130 -m limit --limit 1/second -j LOG +-A logaccept-final-130 -j TEE --gateway 10.0.0.1 +-A logaccept-final-130 -j TEE --gateway 10.0.0.2 -A logaccept-final-130 -j ACCEPT -A logaccept-final-131 -m limit --limit 12/minute -j ULOG -A logaccept-final-131 -j ACCEPT -A logaccept-final-132 -m limit --limit 1/second -j LOG -A logaccept-final-132 -j ACCEPT --A logaccept-final-133 -m limit --limit 12/minute -j ULOG +-A logaccept-final-133 -j TEE --gateway 10.0.0.1 +-A logaccept-final-133 -j TEE --gateway 10.0.0.2 -A logaccept-final-133 -j ACCEPT --A logaccept-final-134 -m limit --limit 1/second -j LOG +-A logaccept-final-134 -m limit --limit 12/minute -j ULOG -A logaccept-final-134 -j ACCEPT --A logaccept-final-135 -m limit --limit 12/minute -j ULOG +-A logaccept-final-135 -m limit --limit 1/second -j LOG -A logaccept-final-135 -j ACCEPT --A logaccept-final-136 -m limit --limit 1/second -j LOG +-A logaccept-final-136 -j TEE --gateway 10.0.0.1 +-A logaccept-final-136 -j TEE --gateway 10.0.0.2 -A logaccept-final-136 -j ACCEPT -A logaccept-final-137 -m limit --limit 12/minute -j ULOG -A logaccept-final-137 -j ACCEPT -A logaccept-final-138 -m limit --limit 1/second -j LOG -A logaccept-final-138 -j ACCEPT --A logaccept-final-139 -m limit --limit 12/minute -j ULOG +-A logaccept-final-139 -j TEE --gateway 10.0.0.1 +-A logaccept-final-139 -j TEE --gateway 10.0.0.2 -A logaccept-final-139 -j ACCEPT --A logaccept-final-14 -m limit --limit 1/second -j LOG +-A logaccept-final-14 -m limit --limit 12/minute -j ULOG -A logaccept-final-14 -j ACCEPT --A logaccept-final-140 -m limit --limit 1/second -j LOG +-A logaccept-final-140 -m limit --limit 12/minute -j ULOG -A logaccept-final-140 -j ACCEPT --A logaccept-final-141 -m limit --limit 12/minute -j ULOG +-A logaccept-final-141 -m limit --limit 1/second -j LOG -A logaccept-final-141 -j ACCEPT --A logaccept-final-142 -m limit --limit 1/second -j LOG +-A logaccept-final-142 -j TEE --gateway 10.0.0.1 +-A logaccept-final-142 -j TEE --gateway 10.0.0.2 -A logaccept-final-142 -j ACCEPT -A logaccept-final-143 -m limit --limit 12/minute -j ULOG -A logaccept-final-143 -j ACCEPT -A logaccept-final-144 -m limit --limit 1/second -j LOG -A logaccept-final-144 -j ACCEPT --A logaccept-final-145 -m limit --limit 12/minute -j ULOG +-A logaccept-final-145 -j TEE --gateway 10.0.0.1 +-A logaccept-final-145 -j TEE --gateway 10.0.0.2 -A logaccept-final-145 -j ACCEPT --A logaccept-final-146 -m limit --limit 1/second -j LOG +-A logaccept-final-146 -m limit --limit 12/minute -j ULOG -A logaccept-final-146 -j ACCEPT --A logaccept-final-147 -m limit --limit 12/minute -j ULOG +-A logaccept-final-147 -m limit --limit 1/second -j LOG -A logaccept-final-147 -j ACCEPT --A logaccept-final-148 -m limit --limit 1/second -j LOG +-A logaccept-final-148 -j TEE --gateway 10.0.0.1 +-A logaccept-final-148 -j TEE --gateway 10.0.0.2 -A logaccept-final-148 -j ACCEPT -A logaccept-final-149 -m limit --limit 12/minute -j ULOG -A logaccept-final-149 -j ACCEPT --A logaccept-final-15 -m limit --limit 12/minute -j ULOG +-A logaccept-final-15 -m limit --limit 1/second -j LOG -A logaccept-final-15 -j ACCEPT -A logaccept-final-150 -m limit --limit 1/second -j LOG -A logaccept-final-150 -j ACCEPT --A logaccept-final-151 -m limit --limit 12/minute -j ULOG +-A logaccept-final-151 -j TEE --gateway 10.0.0.1 +-A logaccept-final-151 -j TEE --gateway 10.0.0.2 -A logaccept-final-151 -j ACCEPT --A logaccept-final-152 -m limit --limit 1/second -j LOG +-A logaccept-final-152 -m limit --limit 12/minute -j ULOG -A logaccept-final-152 -j ACCEPT --A logaccept-final-153 -m limit --limit 12/minute -j ULOG +-A logaccept-final-153 -m limit --limit 1/second -j LOG -A logaccept-final-153 -j ACCEPT --A logaccept-final-154 -m limit --limit 1/second -j LOG +-A logaccept-final-154 -j TEE --gateway 10.0.0.1 +-A logaccept-final-154 -j TEE --gateway 10.0.0.2 -A logaccept-final-154 -j ACCEPT -A logaccept-final-155 -m limit --limit 12/minute -j ULOG -A logaccept-final-155 -j ACCEPT -A logaccept-final-156 -m limit --limit 1/second -j LOG -A logaccept-final-156 -j ACCEPT --A logaccept-final-157 -m limit --limit 12/minute -j ULOG +-A logaccept-final-157 -j TEE --gateway 10.0.0.1 +-A logaccept-final-157 -j TEE --gateway 10.0.0.2 -A logaccept-final-157 -j ACCEPT --A logaccept-final-158 -m limit --limit 1/second -j LOG +-A logaccept-final-158 -m limit --limit 12/minute -j ULOG -A logaccept-final-158 -j ACCEPT --A logaccept-final-159 -m limit --limit 12/minute -j ULOG +-A logaccept-final-159 -m limit --limit 1/second -j LOG -A logaccept-final-159 -j ACCEPT --A logaccept-final-16 -m limit --limit 1/second -j LOG +-A logaccept-final-16 -j TEE --gateway 10.0.0.1 +-A logaccept-final-16 -j TEE --gateway 10.0.0.2 -A logaccept-final-16 -j ACCEPT --A logaccept-final-160 -m limit --limit 1/second -j LOG +-A logaccept-final-160 -j TEE --gateway 10.0.0.1 +-A logaccept-final-160 -j TEE --gateway 10.0.0.2 -A logaccept-final-160 -j ACCEPT -A logaccept-final-161 -m limit --limit 12/minute -j ULOG -A logaccept-final-161 -j ACCEPT -A logaccept-final-162 -m limit --limit 1/second -j LOG -A logaccept-final-162 -j ACCEPT --A logaccept-final-163 -m limit --limit 12/minute -j ULOG +-A logaccept-final-163 -j TEE --gateway 10.0.0.1 +-A logaccept-final-163 -j TEE --gateway 10.0.0.2 -A logaccept-final-163 -j ACCEPT +-A logaccept-final-164 -m limit --limit 12/minute -j ULOG +-A logaccept-final-164 -j ACCEPT +-A logaccept-final-165 -m limit --limit 1/second -j LOG +-A logaccept-final-165 -j ACCEPT +-A logaccept-final-166 -j TEE --gateway 10.0.0.1 +-A logaccept-final-166 -j TEE --gateway 10.0.0.2 +-A logaccept-final-166 -j ACCEPT +-A logaccept-final-167 -m limit --limit 12/minute -j ULOG +-A logaccept-final-167 -j ACCEPT +-A logaccept-final-168 -m limit --limit 1/second -j LOG +-A logaccept-final-168 -j ACCEPT +-A logaccept-final-169 -j TEE --gateway 10.0.0.1 +-A logaccept-final-169 -j TEE --gateway 10.0.0.2 +-A logaccept-final-169 -j ACCEPT -A logaccept-final-17 -m limit --limit 12/minute -j ULOG -A logaccept-final-17 -j ACCEPT +-A logaccept-final-170 -m limit --limit 12/minute -j ULOG +-A logaccept-final-170 -j ACCEPT +-A logaccept-final-171 -m limit --limit 1/second -j LOG +-A logaccept-final-171 -j ACCEPT +-A logaccept-final-172 -j TEE --gateway 10.0.0.1 +-A logaccept-final-172 -j TEE --gateway 10.0.0.2 +-A logaccept-final-172 -j ACCEPT +-A logaccept-final-173 -m limit --limit 12/minute -j ULOG +-A logaccept-final-173 -j ACCEPT +-A logaccept-final-174 -m limit --limit 1/second -j LOG +-A logaccept-final-174 -j ACCEPT +-A logaccept-final-175 -j TEE --gateway 10.0.0.1 +-A logaccept-final-175 -j TEE --gateway 10.0.0.2 +-A logaccept-final-175 -j ACCEPT +-A logaccept-final-176 -m limit --limit 12/minute -j ULOG +-A logaccept-final-176 -j ACCEPT +-A logaccept-final-177 -m limit --limit 1/second -j LOG +-A logaccept-final-177 -j ACCEPT +-A logaccept-final-178 -j TEE --gateway 10.0.0.1 +-A logaccept-final-178 -j TEE --gateway 10.0.0.2 +-A logaccept-final-178 -j ACCEPT +-A logaccept-final-179 -m limit --limit 12/minute -j ULOG +-A logaccept-final-179 -j ACCEPT -A logaccept-final-18 -m limit --limit 1/second -j LOG -A logaccept-final-18 -j ACCEPT --A logaccept-final-19 -m limit --limit 12/minute -j ULOG +-A logaccept-final-180 -m limit --limit 1/second -j LOG +-A logaccept-final-180 -j ACCEPT +-A logaccept-final-181 -j TEE --gateway 10.0.0.1 +-A logaccept-final-181 -j TEE --gateway 10.0.0.2 +-A logaccept-final-181 -j ACCEPT +-A logaccept-final-182 -m limit --limit 12/minute -j ULOG +-A logaccept-final-182 -j ACCEPT +-A logaccept-final-183 -m limit --limit 1/second -j LOG +-A logaccept-final-183 -j ACCEPT +-A logaccept-final-184 -j TEE --gateway 10.0.0.1 +-A logaccept-final-184 -j TEE --gateway 10.0.0.2 +-A logaccept-final-184 -j ACCEPT +-A logaccept-final-185 -m limit --limit 12/minute -j ULOG +-A logaccept-final-185 -j ACCEPT +-A logaccept-final-186 -m limit --limit 1/second -j LOG +-A logaccept-final-186 -j ACCEPT +-A logaccept-final-187 -j TEE --gateway 10.0.0.1 +-A logaccept-final-187 -j TEE --gateway 10.0.0.2 +-A logaccept-final-187 -j ACCEPT +-A logaccept-final-188 -m limit --limit 12/minute -j ULOG +-A logaccept-final-188 -j ACCEPT +-A logaccept-final-189 -m limit --limit 1/second -j LOG +-A logaccept-final-189 -j ACCEPT +-A logaccept-final-19 -j TEE --gateway 10.0.0.1 +-A logaccept-final-19 -j TEE --gateway 10.0.0.2 -A logaccept-final-19 -j ACCEPT --A logaccept-final-2 -m limit --limit 1/second -j LOG +-A logaccept-final-190 -j TEE --gateway 10.0.0.1 +-A logaccept-final-190 -j TEE --gateway 10.0.0.2 +-A logaccept-final-190 -j ACCEPT +-A logaccept-final-191 -m limit --limit 12/minute -j ULOG +-A logaccept-final-191 -j ACCEPT +-A logaccept-final-192 -m limit --limit 1/second -j LOG +-A logaccept-final-192 -j ACCEPT +-A logaccept-final-193 -j TEE --gateway 10.0.0.1 +-A logaccept-final-193 -j TEE --gateway 10.0.0.2 +-A logaccept-final-193 -j ACCEPT +-A logaccept-final-194 -m limit --limit 12/minute -j ULOG +-A logaccept-final-194 -j ACCEPT +-A logaccept-final-195 -m limit --limit 1/second -j LOG +-A logaccept-final-195 -j ACCEPT +-A logaccept-final-196 -j TEE --gateway 10.0.0.1 +-A logaccept-final-196 -j TEE --gateway 10.0.0.2 +-A logaccept-final-196 -j ACCEPT +-A logaccept-final-197 -m limit --limit 12/minute -j ULOG +-A logaccept-final-197 -j ACCEPT +-A logaccept-final-198 -m limit --limit 1/second -j LOG +-A logaccept-final-198 -j ACCEPT +-A logaccept-final-199 -j TEE --gateway 10.0.0.1 +-A logaccept-final-199 -j TEE --gateway 10.0.0.2 +-A logaccept-final-199 -j ACCEPT +-A logaccept-final-2 -m limit --limit 12/minute -j ULOG -A logaccept-final-2 -j ACCEPT --A logaccept-final-20 -m limit --limit 1/second -j LOG +-A logaccept-final-20 -m limit --limit 12/minute -j ULOG -A logaccept-final-20 -j ACCEPT --A logaccept-final-21 -m limit --limit 12/minute -j ULOG +-A logaccept-final-200 -m limit --limit 12/minute -j ULOG +-A logaccept-final-200 -j ACCEPT +-A logaccept-final-201 -m limit --limit 1/second -j LOG +-A logaccept-final-201 -j ACCEPT +-A logaccept-final-202 -j TEE --gateway 10.0.0.1 +-A logaccept-final-202 -j TEE --gateway 10.0.0.2 +-A logaccept-final-202 -j ACCEPT +-A logaccept-final-203 -m limit --limit 12/minute -j ULOG +-A logaccept-final-203 -j ACCEPT +-A logaccept-final-204 -m limit --limit 1/second -j LOG +-A logaccept-final-204 -j ACCEPT +-A logaccept-final-205 -j TEE --gateway 10.0.0.1 +-A logaccept-final-205 -j TEE --gateway 10.0.0.2 +-A logaccept-final-205 -j ACCEPT +-A logaccept-final-206 -m limit --limit 12/minute -j ULOG +-A logaccept-final-206 -j ACCEPT +-A logaccept-final-207 -m limit --limit 1/second -j LOG +-A logaccept-final-207 -j ACCEPT +-A logaccept-final-208 -j TEE --gateway 10.0.0.1 +-A logaccept-final-208 -j TEE --gateway 10.0.0.2 +-A logaccept-final-208 -j ACCEPT +-A logaccept-final-209 -m limit --limit 12/minute -j ULOG +-A logaccept-final-209 -j ACCEPT +-A logaccept-final-21 -m limit --limit 1/second -j LOG -A logaccept-final-21 -j ACCEPT --A logaccept-final-22 -m limit --limit 1/second -j LOG +-A logaccept-final-210 -m limit --limit 1/second -j LOG +-A logaccept-final-210 -j ACCEPT +-A logaccept-final-211 -j TEE --gateway 10.0.0.1 +-A logaccept-final-211 -j TEE --gateway 10.0.0.2 +-A logaccept-final-211 -j ACCEPT +-A logaccept-final-212 -m limit --limit 12/minute -j ULOG +-A logaccept-final-212 -j ACCEPT +-A logaccept-final-213 -m limit --limit 1/second -j LOG +-A logaccept-final-213 -j ACCEPT +-A logaccept-final-214 -j TEE --gateway 10.0.0.1 +-A logaccept-final-214 -j TEE --gateway 10.0.0.2 +-A logaccept-final-214 -j ACCEPT +-A logaccept-final-215 -m limit --limit 12/minute -j ULOG +-A logaccept-final-215 -j ACCEPT +-A logaccept-final-216 -m limit --limit 1/second -j LOG +-A logaccept-final-216 -j ACCEPT +-A logaccept-final-217 -j TEE --gateway 10.0.0.1 +-A logaccept-final-217 -j TEE --gateway 10.0.0.2 +-A logaccept-final-217 -j ACCEPT +-A logaccept-final-218 -m limit --limit 12/minute -j ULOG +-A logaccept-final-218 -j ACCEPT +-A logaccept-final-219 -m limit --limit 1/second -j LOG +-A logaccept-final-219 -j ACCEPT +-A logaccept-final-22 -j TEE --gateway 10.0.0.1 +-A logaccept-final-22 -j TEE --gateway 10.0.0.2 -A logaccept-final-22 -j ACCEPT +-A logaccept-final-220 -j TEE --gateway 10.0.0.1 +-A logaccept-final-220 -j TEE --gateway 10.0.0.2 +-A logaccept-final-220 -j ACCEPT +-A logaccept-final-221 -m limit --limit 12/minute -j ULOG +-A logaccept-final-221 -j ACCEPT +-A logaccept-final-222 -m limit --limit 1/second -j LOG +-A logaccept-final-222 -j ACCEPT +-A logaccept-final-223 -j TEE --gateway 10.0.0.1 +-A logaccept-final-223 -j TEE --gateway 10.0.0.2 +-A logaccept-final-223 -j ACCEPT +-A logaccept-final-224 -m limit --limit 12/minute -j ULOG +-A logaccept-final-224 -j ACCEPT +-A logaccept-final-225 -m limit --limit 1/second -j LOG +-A logaccept-final-225 -j ACCEPT +-A logaccept-final-226 -j TEE --gateway 10.0.0.1 +-A logaccept-final-226 -j TEE --gateway 10.0.0.2 +-A logaccept-final-226 -j ACCEPT +-A logaccept-final-227 -m limit --limit 12/minute -j ULOG +-A logaccept-final-227 -j ACCEPT +-A logaccept-final-228 -m limit --limit 1/second -j LOG +-A logaccept-final-228 -j ACCEPT +-A logaccept-final-229 -j TEE --gateway 10.0.0.1 +-A logaccept-final-229 -j TEE --gateway 10.0.0.2 +-A logaccept-final-229 -j ACCEPT -A logaccept-final-23 -m limit --limit 12/minute -j ULOG -A logaccept-final-23 -j ACCEPT +-A logaccept-final-230 -m limit --limit 12/minute -j ULOG +-A logaccept-final-230 -j ACCEPT +-A logaccept-final-231 -m limit --limit 1/second -j LOG +-A logaccept-final-231 -j ACCEPT +-A logaccept-final-232 -j TEE --gateway 10.0.0.1 +-A logaccept-final-232 -j TEE --gateway 10.0.0.2 +-A logaccept-final-232 -j ACCEPT +-A logaccept-final-233 -m limit --limit 12/minute -j ULOG +-A logaccept-final-233 -j ACCEPT +-A logaccept-final-234 -m limit --limit 1/second -j LOG +-A logaccept-final-234 -j ACCEPT +-A logaccept-final-235 -j TEE --gateway 10.0.0.1 +-A logaccept-final-235 -j TEE --gateway 10.0.0.2 +-A logaccept-final-235 -j ACCEPT +-A logaccept-final-236 -m limit --limit 12/minute -j ULOG +-A logaccept-final-236 -j ACCEPT +-A logaccept-final-237 -m limit --limit 1/second -j LOG +-A logaccept-final-237 -j ACCEPT +-A logaccept-final-238 -j TEE --gateway 10.0.0.1 +-A logaccept-final-238 -j TEE --gateway 10.0.0.2 +-A logaccept-final-238 -j ACCEPT +-A logaccept-final-239 -m limit --limit 12/minute -j ULOG +-A logaccept-final-239 -j ACCEPT -A logaccept-final-24 -m limit --limit 1/second -j LOG -A logaccept-final-24 -j ACCEPT --A logaccept-final-25 -m limit --limit 12/minute -j ULOG +-A logaccept-final-240 -m limit --limit 1/second -j LOG +-A logaccept-final-240 -j ACCEPT +-A logaccept-final-241 -j TEE --gateway 10.0.0.1 +-A logaccept-final-241 -j TEE --gateway 10.0.0.2 +-A logaccept-final-241 -j ACCEPT +-A logaccept-final-242 -m limit --limit 12/minute -j ULOG +-A logaccept-final-242 -j ACCEPT +-A logaccept-final-243 -m limit --limit 1/second -j LOG +-A logaccept-final-243 -j ACCEPT +-A logaccept-final-244 -j TEE --gateway 10.0.0.1 +-A logaccept-final-244 -j TEE --gateway 10.0.0.2 +-A logaccept-final-244 -j ACCEPT +-A logaccept-final-245 -m limit --limit 12/minute -j ULOG +-A logaccept-final-245 -j ACCEPT +-A logaccept-final-246 -m limit --limit 1/second -j LOG +-A logaccept-final-246 -j ACCEPT +-A logaccept-final-247 -j TEE --gateway 10.0.0.1 +-A logaccept-final-247 -j TEE --gateway 10.0.0.2 +-A logaccept-final-247 -j ACCEPT +-A logaccept-final-248 -m limit --limit 12/minute -j ULOG +-A logaccept-final-248 -j ACCEPT +-A logaccept-final-249 -m limit --limit 1/second -j LOG +-A logaccept-final-249 -j ACCEPT +-A logaccept-final-25 -j TEE --gateway 10.0.0.1 +-A logaccept-final-25 -j TEE --gateway 10.0.0.2 -A logaccept-final-25 -j ACCEPT --A logaccept-final-26 -m limit --limit 1/second -j LOG +-A logaccept-final-250 -j TEE --gateway 10.0.0.1 +-A logaccept-final-250 -j TEE --gateway 10.0.0.2 +-A logaccept-final-250 -j ACCEPT +-A logaccept-final-251 -m limit --limit 12/minute -j ULOG +-A logaccept-final-251 -j ACCEPT +-A logaccept-final-252 -m limit --limit 1/second -j LOG +-A logaccept-final-252 -j ACCEPT +-A logaccept-final-253 -j TEE --gateway 10.0.0.1 +-A logaccept-final-253 -j TEE --gateway 10.0.0.2 +-A logaccept-final-253 -j ACCEPT +-A logaccept-final-254 -m limit --limit 12/minute -j ULOG +-A logaccept-final-254 -j ACCEPT +-A logaccept-final-255 -m limit --limit 1/second -j LOG +-A logaccept-final-255 -j ACCEPT +-A logaccept-final-256 -j TEE --gateway 10.0.0.1 +-A logaccept-final-256 -j TEE --gateway 10.0.0.2 +-A logaccept-final-256 -j ACCEPT +-A logaccept-final-257 -m limit --limit 12/minute -j ULOG +-A logaccept-final-257 -j ACCEPT +-A logaccept-final-258 -m limit --limit 1/second -j LOG +-A logaccept-final-258 -j ACCEPT +-A logaccept-final-259 -j TEE --gateway 10.0.0.1 +-A logaccept-final-259 -j TEE --gateway 10.0.0.2 +-A logaccept-final-259 -j ACCEPT +-A logaccept-final-26 -m limit --limit 12/minute -j ULOG -A logaccept-final-26 -j ACCEPT --A logaccept-final-27 -m limit --limit 12/minute -j ULOG +-A logaccept-final-260 -m limit --limit 12/minute -j ULOG +-A logaccept-final-260 -j ACCEPT +-A logaccept-final-261 -m limit --limit 1/second -j LOG +-A logaccept-final-261 -j ACCEPT +-A logaccept-final-262 -j TEE --gateway 10.0.0.1 +-A logaccept-final-262 -j TEE --gateway 10.0.0.2 +-A logaccept-final-262 -j ACCEPT +-A logaccept-final-263 -m limit --limit 12/minute -j ULOG +-A logaccept-final-263 -j ACCEPT +-A logaccept-final-264 -m limit --limit 1/second -j LOG +-A logaccept-final-264 -j ACCEPT +-A logaccept-final-265 -j TEE --gateway 10.0.0.1 +-A logaccept-final-265 -j TEE --gateway 10.0.0.2 +-A logaccept-final-265 -j ACCEPT +-A logaccept-final-266 -m limit --limit 12/minute -j ULOG +-A logaccept-final-266 -j ACCEPT +-A logaccept-final-267 -m limit --limit 1/second -j LOG +-A logaccept-final-267 -j ACCEPT +-A logaccept-final-268 -j TEE --gateway 10.0.0.1 +-A logaccept-final-268 -j TEE --gateway 10.0.0.2 +-A logaccept-final-268 -j ACCEPT +-A logaccept-final-269 -m limit --limit 12/minute -j ULOG +-A logaccept-final-269 -j ACCEPT +-A logaccept-final-27 -m limit --limit 1/second -j LOG -A logaccept-final-27 -j ACCEPT --A logaccept-final-28 -m limit --limit 1/second -j LOG +-A logaccept-final-270 -m limit --limit 1/second -j LOG +-A logaccept-final-270 -j ACCEPT +-A logaccept-final-271 -j TEE --gateway 10.0.0.1 +-A logaccept-final-271 -j TEE --gateway 10.0.0.2 +-A logaccept-final-271 -j ACCEPT +-A logaccept-final-272 -m limit --limit 12/minute -j ULOG +-A logaccept-final-272 -j ACCEPT +-A logaccept-final-273 -m limit --limit 1/second -j LOG +-A logaccept-final-273 -j ACCEPT +-A logaccept-final-274 -j TEE --gateway 10.0.0.1 +-A logaccept-final-274 -j TEE --gateway 10.0.0.2 +-A logaccept-final-274 -j ACCEPT +-A logaccept-final-275 -m limit --limit 12/minute -j ULOG +-A logaccept-final-275 -j ACCEPT +-A logaccept-final-276 -m limit --limit 1/second -j LOG +-A logaccept-final-276 -j ACCEPT +-A logaccept-final-277 -j TEE --gateway 10.0.0.1 +-A logaccept-final-277 -j TEE --gateway 10.0.0.2 +-A logaccept-final-277 -j ACCEPT +-A logaccept-final-278 -m limit --limit 12/minute -j ULOG +-A logaccept-final-278 -j ACCEPT +-A logaccept-final-279 -m limit --limit 1/second -j LOG +-A logaccept-final-279 -j ACCEPT +-A logaccept-final-28 -j TEE --gateway 10.0.0.1 +-A logaccept-final-28 -j TEE --gateway 10.0.0.2 -A logaccept-final-28 -j ACCEPT +-A logaccept-final-280 -j TEE --gateway 10.0.0.1 +-A logaccept-final-280 -j TEE --gateway 10.0.0.2 +-A logaccept-final-280 -j ACCEPT +-A logaccept-final-281 -m limit --limit 12/minute -j ULOG +-A logaccept-final-281 -j ACCEPT +-A logaccept-final-282 -m limit --limit 1/second -j LOG +-A logaccept-final-282 -j ACCEPT +-A logaccept-final-283 -j TEE --gateway 10.0.0.1 +-A logaccept-final-283 -j TEE --gateway 10.0.0.2 +-A logaccept-final-283 -j ACCEPT +-A logaccept-final-284 -m limit --limit 12/minute -j ULOG +-A logaccept-final-284 -j ACCEPT +-A logaccept-final-285 -m limit --limit 1/second -j LOG +-A logaccept-final-285 -j ACCEPT +-A logaccept-final-286 -j TEE --gateway 10.0.0.1 +-A logaccept-final-286 -j TEE --gateway 10.0.0.2 +-A logaccept-final-286 -j ACCEPT +-A logaccept-final-287 -m limit --limit 12/minute -j ULOG +-A logaccept-final-287 -j ACCEPT +-A logaccept-final-288 -m limit --limit 1/second -j LOG +-A logaccept-final-288 -j ACCEPT +-A logaccept-final-289 -j TEE --gateway 10.0.0.1 +-A logaccept-final-289 -j TEE --gateway 10.0.0.2 +-A logaccept-final-289 -j ACCEPT -A logaccept-final-29 -m limit --limit 12/minute -j ULOG -A logaccept-final-29 -j ACCEPT --A logaccept-final-3 -m limit --limit 12/minute -j ULOG +-A logaccept-final-290 -m limit --limit 12/minute -j ULOG +-A logaccept-final-290 -j ACCEPT +-A logaccept-final-291 -m limit --limit 1/second -j LOG +-A logaccept-final-291 -j ACCEPT +-A logaccept-final-292 -j TEE --gateway 10.0.0.1 +-A logaccept-final-292 -j TEE --gateway 10.0.0.2 +-A logaccept-final-292 -j ACCEPT +-A logaccept-final-293 -m limit --limit 12/minute -j ULOG +-A logaccept-final-293 -j ACCEPT +-A logaccept-final-294 -m limit --limit 1/second -j LOG +-A logaccept-final-294 -j ACCEPT +-A logaccept-final-295 -j TEE --gateway 10.0.0.1 +-A logaccept-final-295 -j TEE --gateway 10.0.0.2 +-A logaccept-final-295 -j ACCEPT +-A logaccept-final-296 -m limit --limit 12/minute -j ULOG +-A logaccept-final-296 -j ACCEPT +-A logaccept-final-297 -m limit --limit 1/second -j LOG +-A logaccept-final-297 -j ACCEPT +-A logaccept-final-298 -j TEE --gateway 10.0.0.1 +-A logaccept-final-298 -j TEE --gateway 10.0.0.2 +-A logaccept-final-298 -j ACCEPT +-A logaccept-final-299 -m limit --limit 12/minute -j ULOG +-A logaccept-final-299 -j ACCEPT +-A logaccept-final-3 -m limit --limit 1/second -j LOG -A logaccept-final-3 -j ACCEPT -A logaccept-final-30 -m limit --limit 1/second -j LOG -A logaccept-final-30 -j ACCEPT --A logaccept-final-31 -m limit --limit 12/minute -j ULOG +-A logaccept-final-300 -m limit --limit 1/second -j LOG +-A logaccept-final-300 -j ACCEPT +-A logaccept-final-301 -j TEE --gateway 10.0.0.1 +-A logaccept-final-301 -j TEE --gateway 10.0.0.2 +-A logaccept-final-301 -j ACCEPT +-A logaccept-final-302 -m limit --limit 12/minute -j ULOG +-A logaccept-final-302 -j ACCEPT +-A logaccept-final-303 -m limit --limit 1/second -j LOG +-A logaccept-final-303 -j ACCEPT +-A logaccept-final-304 -j TEE --gateway 10.0.0.1 +-A logaccept-final-304 -j TEE --gateway 10.0.0.2 +-A logaccept-final-304 -j ACCEPT +-A logaccept-final-305 -m limit --limit 12/minute -j ULOG +-A logaccept-final-305 -j ACCEPT +-A logaccept-final-31 -j TEE --gateway 10.0.0.1 +-A logaccept-final-31 -j TEE --gateway 10.0.0.2 -A logaccept-final-31 -j ACCEPT --A logaccept-final-32 -m limit --limit 1/second -j LOG +-A logaccept-final-32 -m limit --limit 12/minute -j ULOG -A logaccept-final-32 -j ACCEPT --A logaccept-final-33 -m limit --limit 12/minute -j ULOG +-A logaccept-final-33 -m limit --limit 1/second -j LOG -A logaccept-final-33 -j ACCEPT --A logaccept-final-34 -m limit --limit 1/second -j LOG +-A logaccept-final-34 -j TEE --gateway 10.0.0.1 +-A logaccept-final-34 -j TEE --gateway 10.0.0.2 -A logaccept-final-34 -j ACCEPT -A logaccept-final-35 -m limit --limit 12/minute -j ULOG -A logaccept-final-35 -j ACCEPT -A logaccept-final-36 -m limit --limit 1/second -j LOG -A logaccept-final-36 -j ACCEPT --A logaccept-final-37 -m limit --limit 12/minute -j ULOG +-A logaccept-final-37 -j TEE --gateway 10.0.0.1 +-A logaccept-final-37 -j TEE --gateway 10.0.0.2 -A logaccept-final-37 -j ACCEPT --A logaccept-final-38 -m limit --limit 1/second -j LOG +-A logaccept-final-38 -m limit --limit 12/minute -j ULOG -A logaccept-final-38 -j ACCEPT --A logaccept-final-39 -m limit --limit 12/minute -j ULOG +-A logaccept-final-39 -m limit --limit 1/second -j LOG -A logaccept-final-39 -j ACCEPT --A logaccept-final-4 -m limit --limit 1/second -j LOG +-A logaccept-final-4 -j TEE --gateway 10.0.0.1 +-A logaccept-final-4 -j TEE --gateway 10.0.0.2 -A logaccept-final-4 -j ACCEPT --A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j TEE --gateway 10.0.0.1 +-A logaccept-final-40 -j TEE --gateway 10.0.0.2 -A logaccept-final-40 -j ACCEPT -A logaccept-final-41 -m limit --limit 12/minute -j ULOG -A logaccept-final-41 -j ACCEPT -A logaccept-final-42 -m limit --limit 1/second -j LOG -A logaccept-final-42 -j ACCEPT --A logaccept-final-43 -m limit --limit 12/minute -j ULOG +-A logaccept-final-43 -j TEE --gateway 10.0.0.1 +-A logaccept-final-43 -j TEE --gateway 10.0.0.2 -A logaccept-final-43 -j ACCEPT --A logaccept-final-44 -m limit --limit 1/second -j LOG +-A logaccept-final-44 -m limit --limit 12/minute -j ULOG -A logaccept-final-44 -j ACCEPT --A logaccept-final-45 -m limit --limit 12/minute -j ULOG +-A logaccept-final-45 -m limit --limit 1/second -j LOG -A logaccept-final-45 -j ACCEPT --A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j TEE --gateway 10.0.0.1 +-A logaccept-final-46 -j TEE --gateway 10.0.0.2 -A logaccept-final-46 -j ACCEPT -A logaccept-final-47 -m limit --limit 12/minute -j ULOG -A logaccept-final-47 -j ACCEPT -A logaccept-final-48 -m limit --limit 1/second -j LOG -A logaccept-final-48 -j ACCEPT --A logaccept-final-49 -m limit --limit 12/minute -j ULOG +-A logaccept-final-49 -j TEE --gateway 10.0.0.1 +-A logaccept-final-49 -j TEE --gateway 10.0.0.2 -A logaccept-final-49 -j ACCEPT -A logaccept-final-5 -m limit --limit 12/minute -j ULOG -A logaccept-final-5 -j ACCEPT --A logaccept-final-50 -m limit --limit 1/second -j LOG +-A logaccept-final-50 -m limit --limit 12/minute -j ULOG -A logaccept-final-50 -j ACCEPT --A logaccept-final-51 -m limit --limit 12/minute -j ULOG +-A logaccept-final-51 -m limit --limit 1/second -j LOG -A logaccept-final-51 -j ACCEPT --A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j TEE --gateway 10.0.0.1 +-A logaccept-final-52 -j TEE --gateway 10.0.0.2 -A logaccept-final-52 -j ACCEPT -A logaccept-final-53 -m limit --limit 12/minute -j ULOG -A logaccept-final-53 -j ACCEPT -A logaccept-final-54 -m limit --limit 1/second -j LOG -A logaccept-final-54 -j ACCEPT --A logaccept-final-55 -m limit --limit 12/minute -j ULOG +-A logaccept-final-55 -j TEE --gateway 10.0.0.1 +-A logaccept-final-55 -j TEE --gateway 10.0.0.2 -A logaccept-final-55 -j ACCEPT --A logaccept-final-56 -m limit --limit 1/second -j LOG +-A logaccept-final-56 -m limit --limit 12/minute -j ULOG -A logaccept-final-56 -j ACCEPT --A logaccept-final-57 -m limit --limit 12/minute -j ULOG +-A logaccept-final-57 -m limit --limit 1/second -j LOG -A logaccept-final-57 -j ACCEPT --A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j TEE --gateway 10.0.0.1 +-A logaccept-final-58 -j TEE --gateway 10.0.0.2 -A logaccept-final-58 -j ACCEPT -A logaccept-final-59 -m limit --limit 12/minute -j ULOG -A logaccept-final-59 -j ACCEPT @@ -51060,89 +84834,103 @@ hash:net family inet -A logaccept-final-6 -j ACCEPT -A logaccept-final-60 -m limit --limit 1/second -j LOG -A logaccept-final-60 -j ACCEPT --A logaccept-final-61 -m limit --limit 12/minute -j ULOG +-A logaccept-final-61 -j TEE --gateway 10.0.0.1 +-A logaccept-final-61 -j TEE --gateway 10.0.0.2 -A logaccept-final-61 -j ACCEPT --A logaccept-final-62 -m limit --limit 1/second -j LOG +-A logaccept-final-62 -m limit --limit 12/minute -j ULOG -A logaccept-final-62 -j ACCEPT --A logaccept-final-63 -m limit --limit 12/minute -j ULOG +-A logaccept-final-63 -m limit --limit 1/second -j LOG -A logaccept-final-63 -j ACCEPT --A logaccept-final-64 -m limit --limit 1/second -j LOG +-A logaccept-final-64 -j TEE --gateway 10.0.0.1 +-A logaccept-final-64 -j TEE --gateway 10.0.0.2 -A logaccept-final-64 -j ACCEPT -A logaccept-final-65 -m limit --limit 12/minute -j ULOG -A logaccept-final-65 -j ACCEPT -A logaccept-final-66 -m limit --limit 1/second -j LOG -A logaccept-final-66 -j ACCEPT --A logaccept-final-67 -m limit --limit 12/minute -j ULOG +-A logaccept-final-67 -j TEE --gateway 10.0.0.1 +-A logaccept-final-67 -j TEE --gateway 10.0.0.2 -A logaccept-final-67 -j ACCEPT --A logaccept-final-68 -m limit --limit 1/second -j LOG +-A logaccept-final-68 -m limit --limit 12/minute -j ULOG -A logaccept-final-68 -j ACCEPT --A logaccept-final-69 -m limit --limit 12/minute -j ULOG +-A logaccept-final-69 -m limit --limit 1/second -j LOG -A logaccept-final-69 -j ACCEPT --A logaccept-final-7 -m limit --limit 12/minute -j ULOG +-A logaccept-final-7 -j TEE --gateway 10.0.0.1 +-A logaccept-final-7 -j TEE --gateway 10.0.0.2 -A logaccept-final-7 -j ACCEPT --A logaccept-final-70 -m limit --limit 1/second -j LOG +-A logaccept-final-70 -j TEE --gateway 10.0.0.1 +-A logaccept-final-70 -j TEE --gateway 10.0.0.2 -A logaccept-final-70 -j ACCEPT -A logaccept-final-71 -m limit --limit 12/minute -j ULOG -A logaccept-final-71 -j ACCEPT -A logaccept-final-72 -m limit --limit 1/second -j LOG -A logaccept-final-72 -j ACCEPT --A logaccept-final-73 -m limit --limit 12/minute -j ULOG +-A logaccept-final-73 -j TEE --gateway 10.0.0.1 +-A logaccept-final-73 -j TEE --gateway 10.0.0.2 -A logaccept-final-73 -j ACCEPT --A logaccept-final-74 -m limit --limit 1/second -j LOG +-A logaccept-final-74 -m limit --limit 12/minute -j ULOG -A logaccept-final-74 -j ACCEPT --A logaccept-final-75 -m limit --limit 12/minute -j ULOG +-A logaccept-final-75 -m limit --limit 1/second -j LOG -A logaccept-final-75 -j ACCEPT --A logaccept-final-76 -m limit --limit 1/second -j LOG +-A logaccept-final-76 -j TEE --gateway 10.0.0.1 +-A logaccept-final-76 -j TEE --gateway 10.0.0.2 -A logaccept-final-76 -j ACCEPT -A logaccept-final-77 -m limit --limit 12/minute -j ULOG -A logaccept-final-77 -j ACCEPT -A logaccept-final-78 -m limit --limit 1/second -j LOG -A logaccept-final-78 -j ACCEPT --A logaccept-final-79 -m limit --limit 12/minute -j ULOG +-A logaccept-final-79 -j TEE --gateway 10.0.0.1 +-A logaccept-final-79 -j TEE --gateway 10.0.0.2 -A logaccept-final-79 -j ACCEPT --A logaccept-final-8 -m limit --limit 1/second -j LOG +-A logaccept-final-8 -m limit --limit 12/minute -j ULOG -A logaccept-final-8 -j ACCEPT --A logaccept-final-80 -m limit --limit 1/second -j LOG +-A logaccept-final-80 -m limit --limit 12/minute -j ULOG -A logaccept-final-80 -j ACCEPT --A logaccept-final-81 -m limit --limit 12/minute -j ULOG +-A logaccept-final-81 -m limit --limit 1/second -j LOG -A logaccept-final-81 -j ACCEPT --A logaccept-final-82 -m limit --limit 1/second -j LOG +-A logaccept-final-82 -j TEE --gateway 10.0.0.1 +-A logaccept-final-82 -j TEE --gateway 10.0.0.2 -A logaccept-final-82 -j ACCEPT -A logaccept-final-83 -m limit --limit 12/minute -j ULOG -A logaccept-final-83 -j ACCEPT -A logaccept-final-84 -m limit --limit 1/second -j LOG -A logaccept-final-84 -j ACCEPT --A logaccept-final-85 -m limit --limit 12/minute -j ULOG +-A logaccept-final-85 -j TEE --gateway 10.0.0.1 +-A logaccept-final-85 -j TEE --gateway 10.0.0.2 -A logaccept-final-85 -j ACCEPT --A logaccept-final-86 -m limit --limit 1/second -j LOG +-A logaccept-final-86 -m limit --limit 12/minute -j ULOG -A logaccept-final-86 -j ACCEPT --A logaccept-final-87 -m limit --limit 12/minute -j ULOG +-A logaccept-final-87 -m limit --limit 1/second -j LOG -A logaccept-final-87 -j ACCEPT --A logaccept-final-88 -m limit --limit 1/second -j LOG +-A logaccept-final-88 -j TEE --gateway 10.0.0.1 +-A logaccept-final-88 -j TEE --gateway 10.0.0.2 -A logaccept-final-88 -j ACCEPT -A logaccept-final-89 -m limit --limit 12/minute -j ULOG -A logaccept-final-89 -j ACCEPT --A logaccept-final-9 -m limit --limit 12/minute -j ULOG +-A logaccept-final-9 -m limit --limit 1/second -j LOG -A logaccept-final-9 -j ACCEPT -A logaccept-final-90 -m limit --limit 1/second -j LOG -A logaccept-final-90 -j ACCEPT --A logaccept-final-91 -m limit --limit 12/minute -j ULOG +-A logaccept-final-91 -j TEE --gateway 10.0.0.1 +-A logaccept-final-91 -j TEE --gateway 10.0.0.2 -A logaccept-final-91 -j ACCEPT --A logaccept-final-92 -m limit --limit 1/second -j LOG +-A logaccept-final-92 -m limit --limit 12/minute -j ULOG -A logaccept-final-92 -j ACCEPT --A logaccept-final-93 -m limit --limit 12/minute -j ULOG +-A logaccept-final-93 -m limit --limit 1/second -j LOG -A logaccept-final-93 -j ACCEPT --A logaccept-final-94 -m limit --limit 1/second -j LOG +-A logaccept-final-94 -j TEE --gateway 10.0.0.1 +-A logaccept-final-94 -j TEE --gateway 10.0.0.2 -A logaccept-final-94 -j ACCEPT -A logaccept-final-95 -m limit --limit 12/minute -j ULOG -A logaccept-final-95 -j ACCEPT -A logaccept-final-96 -m limit --limit 1/second -j LOG -A logaccept-final-96 -j ACCEPT --A logaccept-final-97 -m limit --limit 12/minute -j ULOG +-A logaccept-final-97 -j TEE --gateway 10.0.0.1 +-A logaccept-final-97 -j TEE --gateway 10.0.0.2 -A logaccept-final-97 -j ACCEPT --A logaccept-final-98 -m limit --limit 1/second -j LOG +-A logaccept-final-98 -m limit --limit 12/minute -j ULOG -A logaccept-final-98 -j ACCEPT --A logaccept-final-99 -m limit --limit 12/minute -j ULOG +-A logaccept-final-99 -m limit --limit 1/second -j LOG -A logaccept-final-99 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP @@ -51150,29 +84938,41 @@ hash:net family inet -A logdrop-1 -j DROP -A logdrop-10 -m limit --limit 1/second -j LOG -A logdrop-10 -j DROP --A logdrop-100 -m limit --limit 12/minute -j ULOG +-A logdrop-100 -j TEE --gateway 10.0.0.1 +-A logdrop-100 -j TEE --gateway 10.0.0.2 -A logdrop-100 -j DROP --A logdrop-1000 -m limit --limit 12/minute -j ULOG +-A logdrop-1000 -j TEE --gateway 10.0.0.1 +-A logdrop-1000 -j TEE --gateway 10.0.0.2 -A logdrop-1000 -j DROP --A logdrop-1001 -m limit --limit 12/minute -j ULOG +-A logdrop-1001 -j TEE --gateway 10.0.0.1 +-A logdrop-1001 -j TEE --gateway 10.0.0.2 -A logdrop-1001 -j DROP --A logdrop-1002 -m limit --limit 12/minute -j ULOG +-A logdrop-1002 -j TEE --gateway 10.0.0.1 +-A logdrop-1002 -j TEE --gateway 10.0.0.2 -A logdrop-1002 -j DROP --A logdrop-1003 -m limit --limit 12/minute -j ULOG +-A logdrop-1003 -j TEE --gateway 10.0.0.1 +-A logdrop-1003 -j TEE --gateway 10.0.0.2 -A logdrop-1003 -j DROP --A logdrop-1004 -m limit --limit 12/minute -j ULOG +-A logdrop-1004 -j TEE --gateway 10.0.0.1 +-A logdrop-1004 -j TEE --gateway 10.0.0.2 -A logdrop-1004 -j DROP --A logdrop-1005 -m limit --limit 12/minute -j ULOG +-A logdrop-1005 -j TEE --gateway 10.0.0.1 +-A logdrop-1005 -j TEE --gateway 10.0.0.2 -A logdrop-1005 -j DROP --A logdrop-1006 -m limit --limit 12/minute -j ULOG +-A logdrop-1006 -j TEE --gateway 10.0.0.1 +-A logdrop-1006 -j TEE --gateway 10.0.0.2 -A logdrop-1006 -j DROP --A logdrop-1007 -m limit --limit 12/minute -j ULOG +-A logdrop-1007 -j TEE --gateway 10.0.0.1 +-A logdrop-1007 -j TEE --gateway 10.0.0.2 -A logdrop-1007 -j DROP --A logdrop-1008 -m limit --limit 12/minute -j ULOG +-A logdrop-1008 -j TEE --gateway 10.0.0.1 +-A logdrop-1008 -j TEE --gateway 10.0.0.2 -A logdrop-1008 -j DROP --A logdrop-1009 -m limit --limit 12/minute -j ULOG +-A logdrop-1009 -j TEE --gateway 10.0.0.1 +-A logdrop-1009 -j TEE --gateway 10.0.0.2 -A logdrop-1009 -j DROP --A logdrop-101 -m limit --limit 12/minute -j ULOG +-A logdrop-101 -j TEE --gateway 10.0.0.1 +-A logdrop-101 -j TEE --gateway 10.0.0.2 -A logdrop-101 -j DROP -A logdrop-1010 -m limit --limit 12/minute -j ULOG -A logdrop-1010 -j DROP @@ -51194,7 +84994,8 @@ hash:net family inet -A logdrop-1018 -j DROP -A logdrop-1019 -m limit --limit 12/minute -j ULOG -A logdrop-1019 -j DROP --A logdrop-102 -m limit --limit 12/minute -j ULOG +-A logdrop-102 -j TEE --gateway 10.0.0.1 +-A logdrop-102 -j TEE --gateway 10.0.0.2 -A logdrop-102 -j DROP -A logdrop-1020 -m limit --limit 12/minute -j ULOG -A logdrop-1020 -j DROP @@ -51216,7 +85017,8 @@ hash:net family inet -A logdrop-1028 -j DROP -A logdrop-1029 -m limit --limit 12/minute -j ULOG -A logdrop-1029 -j DROP --A logdrop-103 -m limit --limit 12/minute -j ULOG +-A logdrop-103 -j TEE --gateway 10.0.0.1 +-A logdrop-103 -j TEE --gateway 10.0.0.2 -A logdrop-103 -j DROP -A logdrop-1030 -m limit --limit 12/minute -j ULOG -A logdrop-1030 -j DROP @@ -51238,141 +85040,148 @@ hash:net family inet -A logdrop-1038 -j DROP -A logdrop-1039 -m limit --limit 12/minute -j ULOG -A logdrop-1039 -j DROP --A logdrop-104 -m limit --limit 12/minute -j ULOG +-A logdrop-104 -j TEE --gateway 10.0.0.1 +-A logdrop-104 -j TEE --gateway 10.0.0.2 -A logdrop-104 -j DROP --A logdrop-1040 -m limit --limit 1/second -j LOG +-A logdrop-1040 -m limit --limit 12/minute -j ULOG -A logdrop-1040 -j DROP --A logdrop-1041 -m limit --limit 1/second -j LOG +-A logdrop-1041 -m limit --limit 12/minute -j ULOG -A logdrop-1041 -j DROP --A logdrop-1042 -m limit --limit 1/second -j LOG +-A logdrop-1042 -m limit --limit 12/minute -j ULOG -A logdrop-1042 -j DROP --A logdrop-1043 -m limit --limit 1/second -j LOG +-A logdrop-1043 -m limit --limit 12/minute -j ULOG -A logdrop-1043 -j DROP --A logdrop-1044 -m limit --limit 1/second -j LOG +-A logdrop-1044 -m limit --limit 12/minute -j ULOG -A logdrop-1044 -j DROP --A logdrop-1045 -m limit --limit 1/second -j LOG +-A logdrop-1045 -m limit --limit 12/minute -j ULOG -A logdrop-1045 -j DROP --A logdrop-1046 -m limit --limit 1/second -j LOG +-A logdrop-1046 -m limit --limit 12/minute -j ULOG -A logdrop-1046 -j DROP --A logdrop-1047 -m limit --limit 1/second -j LOG +-A logdrop-1047 -m limit --limit 12/minute -j ULOG -A logdrop-1047 -j DROP --A logdrop-1048 -m limit --limit 1/second -j LOG +-A logdrop-1048 -m limit --limit 12/minute -j ULOG -A logdrop-1048 -j DROP --A logdrop-1049 -m limit --limit 1/second -j LOG +-A logdrop-1049 -m limit --limit 12/minute -j ULOG -A logdrop-1049 -j DROP --A logdrop-105 -m limit --limit 12/minute -j ULOG +-A logdrop-105 -j TEE --gateway 10.0.0.1 +-A logdrop-105 -j TEE --gateway 10.0.0.2 -A logdrop-105 -j DROP --A logdrop-1050 -m limit --limit 1/second -j LOG +-A logdrop-1050 -m limit --limit 12/minute -j ULOG -A logdrop-1050 -j DROP --A logdrop-1051 -m limit --limit 1/second -j LOG +-A logdrop-1051 -m limit --limit 12/minute -j ULOG -A logdrop-1051 -j DROP --A logdrop-1052 -m limit --limit 1/second -j LOG +-A logdrop-1052 -m limit --limit 12/minute -j ULOG -A logdrop-1052 -j DROP --A logdrop-1053 -m limit --limit 1/second -j LOG +-A logdrop-1053 -m limit --limit 12/minute -j ULOG -A logdrop-1053 -j DROP --A logdrop-1054 -m limit --limit 1/second -j LOG +-A logdrop-1054 -m limit --limit 12/minute -j ULOG -A logdrop-1054 -j DROP --A logdrop-1055 -m limit --limit 1/second -j LOG +-A logdrop-1055 -m limit --limit 12/minute -j ULOG -A logdrop-1055 -j DROP --A logdrop-1056 -m limit --limit 1/second -j LOG +-A logdrop-1056 -m limit --limit 12/minute -j ULOG -A logdrop-1056 -j DROP --A logdrop-1057 -m limit --limit 1/second -j LOG +-A logdrop-1057 -m limit --limit 12/minute -j ULOG -A logdrop-1057 -j DROP --A logdrop-1058 -m limit --limit 1/second -j LOG +-A logdrop-1058 -m limit --limit 12/minute -j ULOG -A logdrop-1058 -j DROP --A logdrop-1059 -m limit --limit 1/second -j LOG +-A logdrop-1059 -m limit --limit 12/minute -j ULOG -A logdrop-1059 -j DROP --A logdrop-106 -m limit --limit 12/minute -j ULOG +-A logdrop-106 -j TEE --gateway 10.0.0.1 +-A logdrop-106 -j TEE --gateway 10.0.0.2 -A logdrop-106 -j DROP --A logdrop-1060 -m limit --limit 1/second -j LOG +-A logdrop-1060 -m limit --limit 12/minute -j ULOG -A logdrop-1060 -j DROP --A logdrop-1061 -m limit --limit 1/second -j LOG +-A logdrop-1061 -m limit --limit 12/minute -j ULOG -A logdrop-1061 -j DROP --A logdrop-1062 -m limit --limit 1/second -j LOG +-A logdrop-1062 -m limit --limit 12/minute -j ULOG -A logdrop-1062 -j DROP --A logdrop-1063 -m limit --limit 1/second -j LOG +-A logdrop-1063 -m limit --limit 12/minute -j ULOG -A logdrop-1063 -j DROP --A logdrop-1064 -m limit --limit 1/second -j LOG +-A logdrop-1064 -m limit --limit 12/minute -j ULOG -A logdrop-1064 -j DROP --A logdrop-1065 -m limit --limit 1/second -j LOG +-A logdrop-1065 -m limit --limit 12/minute -j ULOG -A logdrop-1065 -j DROP --A logdrop-1066 -m limit --limit 1/second -j LOG +-A logdrop-1066 -m limit --limit 12/minute -j ULOG -A logdrop-1066 -j DROP --A logdrop-1067 -m limit --limit 1/second -j LOG +-A logdrop-1067 -m limit --limit 12/minute -j ULOG -A logdrop-1067 -j DROP --A logdrop-1068 -m limit --limit 1/second -j LOG +-A logdrop-1068 -m limit --limit 12/minute -j ULOG -A logdrop-1068 -j DROP --A logdrop-1069 -m limit --limit 1/second -j LOG +-A logdrop-1069 -m limit --limit 12/minute -j ULOG -A logdrop-1069 -j DROP --A logdrop-107 -m limit --limit 12/minute -j ULOG +-A logdrop-107 -j TEE --gateway 10.0.0.1 +-A logdrop-107 -j TEE --gateway 10.0.0.2 -A logdrop-107 -j DROP --A logdrop-1070 -m limit --limit 1/second -j LOG +-A logdrop-1070 -m limit --limit 12/minute -j ULOG -A logdrop-1070 -j DROP --A logdrop-1071 -m limit --limit 1/second -j LOG +-A logdrop-1071 -m limit --limit 12/minute -j ULOG -A logdrop-1071 -j DROP --A logdrop-1072 -m limit --limit 1/second -j LOG +-A logdrop-1072 -m limit --limit 12/minute -j ULOG -A logdrop-1072 -j DROP --A logdrop-1073 -m limit --limit 1/second -j LOG +-A logdrop-1073 -m limit --limit 12/minute -j ULOG -A logdrop-1073 -j DROP --A logdrop-1074 -m limit --limit 1/second -j LOG +-A logdrop-1074 -m limit --limit 12/minute -j ULOG -A logdrop-1074 -j DROP --A logdrop-1075 -m limit --limit 1/second -j LOG +-A logdrop-1075 -m limit --limit 12/minute -j ULOG -A logdrop-1075 -j DROP --A logdrop-1076 -m limit --limit 1/second -j LOG +-A logdrop-1076 -m limit --limit 12/minute -j ULOG -A logdrop-1076 -j DROP --A logdrop-1077 -m limit --limit 1/second -j LOG +-A logdrop-1077 -m limit --limit 12/minute -j ULOG -A logdrop-1077 -j DROP --A logdrop-1078 -m limit --limit 1/second -j LOG +-A logdrop-1078 -m limit --limit 12/minute -j ULOG -A logdrop-1078 -j DROP --A logdrop-1079 -m limit --limit 1/second -j LOG +-A logdrop-1079 -m limit --limit 12/minute -j ULOG -A logdrop-1079 -j DROP --A logdrop-108 -m limit --limit 12/minute -j ULOG +-A logdrop-108 -j TEE --gateway 10.0.0.1 +-A logdrop-108 -j TEE --gateway 10.0.0.2 -A logdrop-108 -j DROP --A logdrop-1080 -m limit --limit 1/second -j LOG +-A logdrop-1080 -m limit --limit 12/minute -j ULOG -A logdrop-1080 -j DROP --A logdrop-1081 -m limit --limit 1/second -j LOG +-A logdrop-1081 -m limit --limit 12/minute -j ULOG -A logdrop-1081 -j DROP --A logdrop-1082 -m limit --limit 1/second -j LOG +-A logdrop-1082 -m limit --limit 12/minute -j ULOG -A logdrop-1082 -j DROP --A logdrop-1083 -m limit --limit 1/second -j LOG +-A logdrop-1083 -m limit --limit 12/minute -j ULOG -A logdrop-1083 -j DROP --A logdrop-1084 -m limit --limit 1/second -j LOG +-A logdrop-1084 -m limit --limit 12/minute -j ULOG -A logdrop-1084 -j DROP --A logdrop-1085 -m limit --limit 1/second -j LOG +-A logdrop-1085 -m limit --limit 12/minute -j ULOG -A logdrop-1085 -j DROP --A logdrop-1086 -m limit --limit 1/second -j LOG +-A logdrop-1086 -m limit --limit 12/minute -j ULOG -A logdrop-1086 -j DROP --A logdrop-1087 -m limit --limit 1/second -j LOG +-A logdrop-1087 -m limit --limit 12/minute -j ULOG -A logdrop-1087 -j DROP --A logdrop-1088 -m limit --limit 1/second -j LOG +-A logdrop-1088 -m limit --limit 12/minute -j ULOG -A logdrop-1088 -j DROP --A logdrop-1089 -m limit --limit 1/second -j LOG +-A logdrop-1089 -m limit --limit 12/minute -j ULOG -A logdrop-1089 -j DROP --A logdrop-109 -m limit --limit 12/minute -j ULOG +-A logdrop-109 -j TEE --gateway 10.0.0.1 +-A logdrop-109 -j TEE --gateway 10.0.0.2 -A logdrop-109 -j DROP --A logdrop-1090 -m limit --limit 1/second -j LOG +-A logdrop-1090 -m limit --limit 12/minute -j ULOG -A logdrop-1090 -j DROP --A logdrop-1091 -m limit --limit 1/second -j LOG +-A logdrop-1091 -m limit --limit 12/minute -j ULOG -A logdrop-1091 -j DROP --A logdrop-1092 -m limit --limit 1/second -j LOG +-A logdrop-1092 -m limit --limit 12/minute -j ULOG -A logdrop-1092 -j DROP --A logdrop-1093 -m limit --limit 1/second -j LOG +-A logdrop-1093 -m limit --limit 12/minute -j ULOG -A logdrop-1093 -j DROP --A logdrop-1094 -m limit --limit 1/second -j LOG +-A logdrop-1094 -m limit --limit 12/minute -j ULOG -A logdrop-1094 -j DROP --A logdrop-1095 -m limit --limit 1/second -j LOG +-A logdrop-1095 -m limit --limit 12/minute -j ULOG -A logdrop-1095 -j DROP --A logdrop-1096 -m limit --limit 1/second -j LOG +-A logdrop-1096 -m limit --limit 12/minute -j ULOG -A logdrop-1096 -j DROP --A logdrop-1097 -m limit --limit 1/second -j LOG +-A logdrop-1097 -m limit --limit 12/minute -j ULOG -A logdrop-1097 -j DROP --A logdrop-1098 -m limit --limit 1/second -j LOG +-A logdrop-1098 -m limit --limit 12/minute -j ULOG -A logdrop-1098 -j DROP --A logdrop-1099 -m limit --limit 1/second -j LOG +-A logdrop-1099 -m limit --limit 12/minute -j ULOG -A logdrop-1099 -j DROP -A logdrop-11 -m limit --limit 1/second -j LOG -A logdrop-11 -j DROP --A logdrop-110 -m limit --limit 12/minute -j ULOG +-A logdrop-110 -j TEE --gateway 10.0.0.1 +-A logdrop-110 -j TEE --gateway 10.0.0.2 -A logdrop-110 -j DROP -A logdrop-1100 -m limit --limit 1/second -j LOG -A logdrop-1100 -j DROP @@ -51394,409 +85203,2885 @@ hash:net family inet -A logdrop-1108 -j DROP -A logdrop-1109 -m limit --limit 1/second -j LOG -A logdrop-1109 -j DROP --A logdrop-111 -m limit --limit 12/minute -j ULOG +-A logdrop-111 -j TEE --gateway 10.0.0.1 +-A logdrop-111 -j TEE --gateway 10.0.0.2 -A logdrop-111 -j DROP -A logdrop-1110 -m limit --limit 1/second -j LOG -A logdrop-1110 -j DROP -A logdrop-1111 -m limit --limit 1/second -j LOG -A logdrop-1111 -j DROP --A logdrop-1112 -m limit --limit 12/minute -j ULOG +-A logdrop-1112 -m limit --limit 1/second -j LOG -A logdrop-1112 -j DROP --A logdrop-1113 -m limit --limit 12/minute -j ULOG +-A logdrop-1113 -m limit --limit 1/second -j LOG -A logdrop-1113 -j DROP --A logdrop-1114 -m limit --limit 12/minute -j ULOG +-A logdrop-1114 -m limit --limit 1/second -j LOG -A logdrop-1114 -j DROP --A logdrop-1115 -m limit --limit 12/minute -j ULOG +-A logdrop-1115 -m limit --limit 1/second -j LOG -A logdrop-1115 -j DROP --A logdrop-1116 -m limit --limit 12/minute -j ULOG +-A logdrop-1116 -m limit --limit 1/second -j LOG -A logdrop-1116 -j DROP --A logdrop-1117 -m limit --limit 12/minute -j ULOG +-A logdrop-1117 -m limit --limit 1/second -j LOG -A logdrop-1117 -j DROP --A logdrop-1118 -m limit --limit 12/minute -j ULOG +-A logdrop-1118 -m limit --limit 1/second -j LOG -A logdrop-1118 -j DROP --A logdrop-1119 -m limit --limit 12/minute -j ULOG +-A logdrop-1119 -m limit --limit 1/second -j LOG -A logdrop-1119 -j DROP --A logdrop-112 -m limit --limit 12/minute -j ULOG +-A logdrop-112 -j TEE --gateway 10.0.0.1 +-A logdrop-112 -j TEE --gateway 10.0.0.2 -A logdrop-112 -j DROP --A logdrop-1120 -m limit --limit 12/minute -j ULOG +-A logdrop-1120 -m limit --limit 1/second -j LOG -A logdrop-1120 -j DROP --A logdrop-1121 -m limit --limit 12/minute -j ULOG +-A logdrop-1121 -m limit --limit 1/second -j LOG -A logdrop-1121 -j DROP --A logdrop-1122 -m limit --limit 12/minute -j ULOG +-A logdrop-1122 -m limit --limit 1/second -j LOG -A logdrop-1122 -j DROP --A logdrop-1123 -m limit --limit 12/minute -j ULOG +-A logdrop-1123 -m limit --limit 1/second -j LOG -A logdrop-1123 -j DROP --A logdrop-1124 -m limit --limit 12/minute -j ULOG +-A logdrop-1124 -m limit --limit 1/second -j LOG -A logdrop-1124 -j DROP --A logdrop-1125 -m limit --limit 12/minute -j ULOG +-A logdrop-1125 -m limit --limit 1/second -j LOG -A logdrop-1125 -j DROP --A logdrop-1126 -m limit --limit 12/minute -j ULOG +-A logdrop-1126 -m limit --limit 1/second -j LOG -A logdrop-1126 -j DROP --A logdrop-1127 -m limit --limit 12/minute -j ULOG +-A logdrop-1127 -m limit --limit 1/second -j LOG -A logdrop-1127 -j DROP --A logdrop-1128 -m limit --limit 12/minute -j ULOG +-A logdrop-1128 -m limit --limit 1/second -j LOG -A logdrop-1128 -j DROP --A logdrop-1129 -m limit --limit 12/minute -j ULOG +-A logdrop-1129 -m limit --limit 1/second -j LOG -A logdrop-1129 -j DROP --A logdrop-113 -m limit --limit 12/minute -j ULOG +-A logdrop-113 -j TEE --gateway 10.0.0.1 +-A logdrop-113 -j TEE --gateway 10.0.0.2 -A logdrop-113 -j DROP --A logdrop-1130 -m limit --limit 12/minute -j ULOG +-A logdrop-1130 -m limit --limit 1/second -j LOG -A logdrop-1130 -j DROP --A logdrop-1131 -m limit --limit 12/minute -j ULOG +-A logdrop-1131 -m limit --limit 1/second -j LOG -A logdrop-1131 -j DROP --A logdrop-1132 -m limit --limit 12/minute -j ULOG +-A logdrop-1132 -m limit --limit 1/second -j LOG -A logdrop-1132 -j DROP --A logdrop-1133 -m limit --limit 12/minute -j ULOG +-A logdrop-1133 -m limit --limit 1/second -j LOG -A logdrop-1133 -j DROP --A logdrop-1134 -m limit --limit 12/minute -j ULOG +-A logdrop-1134 -m limit --limit 1/second -j LOG -A logdrop-1134 -j DROP --A logdrop-1135 -m limit --limit 12/minute -j ULOG +-A logdrop-1135 -m limit --limit 1/second -j LOG -A logdrop-1135 -j DROP --A logdrop-1136 -m limit --limit 12/minute -j ULOG +-A logdrop-1136 -m limit --limit 1/second -j LOG -A logdrop-1136 -j DROP --A logdrop-1137 -m limit --limit 12/minute -j ULOG +-A logdrop-1137 -m limit --limit 1/second -j LOG -A logdrop-1137 -j DROP --A logdrop-1138 -m limit --limit 12/minute -j ULOG +-A logdrop-1138 -m limit --limit 1/second -j LOG -A logdrop-1138 -j DROP --A logdrop-1139 -m limit --limit 12/minute -j ULOG +-A logdrop-1139 -m limit --limit 1/second -j LOG -A logdrop-1139 -j DROP --A logdrop-114 -m limit --limit 12/minute -j ULOG +-A logdrop-114 -j TEE --gateway 10.0.0.1 +-A logdrop-114 -j TEE --gateway 10.0.0.2 -A logdrop-114 -j DROP --A logdrop-1140 -m limit --limit 12/minute -j ULOG +-A logdrop-1140 -m limit --limit 1/second -j LOG -A logdrop-1140 -j DROP --A logdrop-1141 -m limit --limit 12/minute -j ULOG +-A logdrop-1141 -m limit --limit 1/second -j LOG -A logdrop-1141 -j DROP --A logdrop-1142 -m limit --limit 12/minute -j ULOG +-A logdrop-1142 -m limit --limit 1/second -j LOG -A logdrop-1142 -j DROP --A logdrop-1143 -m limit --limit 12/minute -j ULOG +-A logdrop-1143 -m limit --limit 1/second -j LOG -A logdrop-1143 -j DROP --A logdrop-1144 -m limit --limit 12/minute -j ULOG +-A logdrop-1144 -m limit --limit 1/second -j LOG -A logdrop-1144 -j DROP --A logdrop-1145 -m limit --limit 12/minute -j ULOG +-A logdrop-1145 -m limit --limit 1/second -j LOG -A logdrop-1145 -j DROP --A logdrop-1146 -m limit --limit 12/minute -j ULOG +-A logdrop-1146 -m limit --limit 1/second -j LOG -A logdrop-1146 -j DROP --A logdrop-1147 -m limit --limit 12/minute -j ULOG +-A logdrop-1147 -m limit --limit 1/second -j LOG -A logdrop-1147 -j DROP --A logdrop-1148 -m limit --limit 12/minute -j ULOG +-A logdrop-1148 -m limit --limit 1/second -j LOG -A logdrop-1148 -j DROP --A logdrop-1149 -m limit --limit 12/minute -j ULOG +-A logdrop-1149 -m limit --limit 1/second -j LOG -A logdrop-1149 -j DROP --A logdrop-115 -m limit --limit 12/minute -j ULOG +-A logdrop-115 -j TEE --gateway 10.0.0.1 +-A logdrop-115 -j TEE --gateway 10.0.0.2 -A logdrop-115 -j DROP --A logdrop-1150 -m limit --limit 12/minute -j ULOG +-A logdrop-1150 -m limit --limit 1/second -j LOG -A logdrop-1150 -j DROP --A logdrop-1151 -m limit --limit 12/minute -j ULOG +-A logdrop-1151 -m limit --limit 1/second -j LOG -A logdrop-1151 -j DROP --A logdrop-1152 -m limit --limit 12/minute -j ULOG +-A logdrop-1152 -m limit --limit 1/second -j LOG -A logdrop-1152 -j DROP --A logdrop-1153 -m limit --limit 12/minute -j ULOG +-A logdrop-1153 -m limit --limit 1/second -j LOG -A logdrop-1153 -j DROP --A logdrop-1154 -m limit --limit 12/minute -j ULOG +-A logdrop-1154 -m limit --limit 1/second -j LOG -A logdrop-1154 -j DROP --A logdrop-1155 -m limit --limit 12/minute -j ULOG +-A logdrop-1155 -m limit --limit 1/second -j LOG -A logdrop-1155 -j DROP --A logdrop-1156 -m limit --limit 12/minute -j ULOG +-A logdrop-1156 -m limit --limit 1/second -j LOG -A logdrop-1156 -j DROP --A logdrop-1157 -m limit --limit 12/minute -j ULOG +-A logdrop-1157 -m limit --limit 1/second -j LOG -A logdrop-1157 -j DROP --A logdrop-1158 -m limit --limit 12/minute -j ULOG +-A logdrop-1158 -m limit --limit 1/second -j LOG -A logdrop-1158 -j DROP --A logdrop-1159 -m limit --limit 12/minute -j ULOG +-A logdrop-1159 -m limit --limit 1/second -j LOG -A logdrop-1159 -j DROP --A logdrop-116 -m limit --limit 12/minute -j ULOG +-A logdrop-116 -j TEE --gateway 10.0.0.1 +-A logdrop-116 -j TEE --gateway 10.0.0.2 -A logdrop-116 -j DROP --A logdrop-1160 -m limit --limit 12/minute -j ULOG +-A logdrop-1160 -m limit --limit 1/second -j LOG -A logdrop-1160 -j DROP --A logdrop-1161 -m limit --limit 12/minute -j ULOG +-A logdrop-1161 -m limit --limit 1/second -j LOG -A logdrop-1161 -j DROP --A logdrop-1162 -m limit --limit 12/minute -j ULOG +-A logdrop-1162 -m limit --limit 1/second -j LOG -A logdrop-1162 -j DROP --A logdrop-1163 -m limit --limit 12/minute -j ULOG +-A logdrop-1163 -m limit --limit 1/second -j LOG -A logdrop-1163 -j DROP --A logdrop-1164 -m limit --limit 12/minute -j ULOG +-A logdrop-1164 -m limit --limit 1/second -j LOG -A logdrop-1164 -j DROP --A logdrop-1165 -m limit --limit 12/minute -j ULOG +-A logdrop-1165 -m limit --limit 1/second -j LOG -A logdrop-1165 -j DROP --A logdrop-1166 -m limit --limit 12/minute -j ULOG +-A logdrop-1166 -m limit --limit 1/second -j LOG -A logdrop-1166 -j DROP --A logdrop-1167 -m limit --limit 12/minute -j ULOG +-A logdrop-1167 -m limit --limit 1/second -j LOG -A logdrop-1167 -j DROP --A logdrop-1168 -m limit --limit 12/minute -j ULOG +-A logdrop-1168 -m limit --limit 1/second -j LOG -A logdrop-1168 -j DROP --A logdrop-1169 -m limit --limit 12/minute -j ULOG +-A logdrop-1169 -m limit --limit 1/second -j LOG -A logdrop-1169 -j DROP --A logdrop-117 -m limit --limit 12/minute -j ULOG +-A logdrop-117 -j TEE --gateway 10.0.0.1 +-A logdrop-117 -j TEE --gateway 10.0.0.2 -A logdrop-117 -j DROP --A logdrop-1170 -m limit --limit 12/minute -j ULOG +-A logdrop-1170 -m limit --limit 1/second -j LOG -A logdrop-1170 -j DROP --A logdrop-1171 -m limit --limit 12/minute -j ULOG +-A logdrop-1171 -m limit --limit 1/second -j LOG -A logdrop-1171 -j DROP --A logdrop-1172 -m limit --limit 12/minute -j ULOG +-A logdrop-1172 -m limit --limit 1/second -j LOG -A logdrop-1172 -j DROP --A logdrop-1173 -m limit --limit 12/minute -j ULOG +-A logdrop-1173 -m limit --limit 1/second -j LOG -A logdrop-1173 -j DROP --A logdrop-1174 -m limit --limit 12/minute -j ULOG +-A logdrop-1174 -m limit --limit 1/second -j LOG -A logdrop-1174 -j DROP --A logdrop-1175 -m limit --limit 12/minute -j ULOG +-A logdrop-1175 -m limit --limit 1/second -j LOG -A logdrop-1175 -j DROP --A logdrop-1176 -m limit --limit 12/minute -j ULOG +-A logdrop-1176 -m limit --limit 1/second -j LOG -A logdrop-1176 -j DROP --A logdrop-1177 -m limit --limit 12/minute -j ULOG +-A logdrop-1177 -m limit --limit 1/second -j LOG -A logdrop-1177 -j DROP --A logdrop-1178 -m limit --limit 12/minute -j ULOG +-A logdrop-1178 -m limit --limit 1/second -j LOG -A logdrop-1178 -j DROP --A logdrop-1179 -m limit --limit 12/minute -j ULOG +-A logdrop-1179 -m limit --limit 1/second -j LOG -A logdrop-1179 -j DROP --A logdrop-118 -m limit --limit 12/minute -j ULOG +-A logdrop-118 -j TEE --gateway 10.0.0.1 +-A logdrop-118 -j TEE --gateway 10.0.0.2 -A logdrop-118 -j DROP --A logdrop-1180 -m limit --limit 12/minute -j ULOG +-A logdrop-1180 -m limit --limit 1/second -j LOG -A logdrop-1180 -j DROP --A logdrop-1181 -m limit --limit 12/minute -j ULOG +-A logdrop-1181 -m limit --limit 1/second -j LOG -A logdrop-1181 -j DROP --A logdrop-1182 -m limit --limit 12/minute -j ULOG +-A logdrop-1182 -m limit --limit 1/second -j LOG -A logdrop-1182 -j DROP --A logdrop-1183 -m limit --limit 12/minute -j ULOG +-A logdrop-1183 -m limit --limit 1/second -j LOG -A logdrop-1183 -j DROP -A logdrop-1184 -m limit --limit 1/second -j LOG -A logdrop-1184 -j DROP -A logdrop-1185 -m limit --limit 1/second -j LOG -A logdrop-1185 -j DROP --A logdrop-1186 -m limit --limit 12/minute -j ULOG +-A logdrop-1186 -m limit --limit 1/second -j LOG -A logdrop-1186 -j DROP --A logdrop-119 -m limit --limit 12/minute -j ULOG +-A logdrop-1187 -m limit --limit 1/second -j LOG +-A logdrop-1187 -j DROP +-A logdrop-1188 -m limit --limit 1/second -j LOG +-A logdrop-1188 -j DROP +-A logdrop-1189 -m limit --limit 1/second -j LOG +-A logdrop-1189 -j DROP +-A logdrop-119 -j TEE --gateway 10.0.0.1 +-A logdrop-119 -j TEE --gateway 10.0.0.2 -A logdrop-119 -j DROP +-A logdrop-1190 -m limit --limit 1/second -j LOG +-A logdrop-1190 -j DROP +-A logdrop-1191 -m limit --limit 1/second -j LOG +-A logdrop-1191 -j DROP +-A logdrop-1192 -m limit --limit 1/second -j LOG +-A logdrop-1192 -j DROP +-A logdrop-1193 -m limit --limit 1/second -j LOG +-A logdrop-1193 -j DROP +-A logdrop-1194 -m limit --limit 1/second -j LOG +-A logdrop-1194 -j DROP +-A logdrop-1195 -m limit --limit 1/second -j LOG +-A logdrop-1195 -j DROP +-A logdrop-1196 -m limit --limit 1/second -j LOG +-A logdrop-1196 -j DROP +-A logdrop-1197 -m limit --limit 1/second -j LOG +-A logdrop-1197 -j DROP +-A logdrop-1198 -m limit --limit 1/second -j LOG +-A logdrop-1198 -j DROP +-A logdrop-1199 -m limit --limit 1/second -j LOG +-A logdrop-1199 -j DROP -A logdrop-12 -m limit --limit 1/second -j LOG -A logdrop-12 -j DROP --A logdrop-120 -m limit --limit 12/minute -j ULOG +-A logdrop-120 -j TEE --gateway 10.0.0.1 +-A logdrop-120 -j TEE --gateway 10.0.0.2 -A logdrop-120 -j DROP --A logdrop-121 -m limit --limit 12/minute -j ULOG +-A logdrop-1200 -j TEE --gateway 10.0.0.1 +-A logdrop-1200 -j TEE --gateway 10.0.0.2 +-A logdrop-1200 -j DROP +-A logdrop-1201 -j TEE --gateway 10.0.0.1 +-A logdrop-1201 -j TEE --gateway 10.0.0.2 +-A logdrop-1201 -j DROP +-A logdrop-1202 -j TEE --gateway 10.0.0.1 +-A logdrop-1202 -j TEE --gateway 10.0.0.2 +-A logdrop-1202 -j DROP +-A logdrop-1203 -j TEE --gateway 10.0.0.1 +-A logdrop-1203 -j TEE --gateway 10.0.0.2 +-A logdrop-1203 -j DROP +-A logdrop-1204 -j TEE --gateway 10.0.0.1 +-A logdrop-1204 -j TEE --gateway 10.0.0.2 +-A logdrop-1204 -j DROP +-A logdrop-1205 -j TEE --gateway 10.0.0.1 +-A logdrop-1205 -j TEE --gateway 10.0.0.2 +-A logdrop-1205 -j DROP +-A logdrop-1206 -j TEE --gateway 10.0.0.1 +-A logdrop-1206 -j TEE --gateway 10.0.0.2 +-A logdrop-1206 -j DROP +-A logdrop-1207 -j TEE --gateway 10.0.0.1 +-A logdrop-1207 -j TEE --gateway 10.0.0.2 +-A logdrop-1207 -j DROP +-A logdrop-1208 -j TEE --gateway 10.0.0.1 +-A logdrop-1208 -j TEE --gateway 10.0.0.2 +-A logdrop-1208 -j DROP +-A logdrop-1209 -j TEE --gateway 10.0.0.1 +-A logdrop-1209 -j TEE --gateway 10.0.0.2 +-A logdrop-1209 -j DROP +-A logdrop-121 -j TEE --gateway 10.0.0.1 +-A logdrop-121 -j TEE --gateway 10.0.0.2 -A logdrop-121 -j DROP --A logdrop-122 -m limit --limit 12/minute -j ULOG +-A logdrop-1210 -j TEE --gateway 10.0.0.1 +-A logdrop-1210 -j TEE --gateway 10.0.0.2 +-A logdrop-1210 -j DROP +-A logdrop-1211 -j TEE --gateway 10.0.0.1 +-A logdrop-1211 -j TEE --gateway 10.0.0.2 +-A logdrop-1211 -j DROP +-A logdrop-1212 -j TEE --gateway 10.0.0.1 +-A logdrop-1212 -j TEE --gateway 10.0.0.2 +-A logdrop-1212 -j DROP +-A logdrop-1213 -j TEE --gateway 10.0.0.1 +-A logdrop-1213 -j TEE --gateway 10.0.0.2 +-A logdrop-1213 -j DROP +-A logdrop-1214 -j TEE --gateway 10.0.0.1 +-A logdrop-1214 -j TEE --gateway 10.0.0.2 +-A logdrop-1214 -j DROP +-A logdrop-1215 -j TEE --gateway 10.0.0.1 +-A logdrop-1215 -j TEE --gateway 10.0.0.2 +-A logdrop-1215 -j DROP +-A logdrop-1216 -j TEE --gateway 10.0.0.1 +-A logdrop-1216 -j TEE --gateway 10.0.0.2 +-A logdrop-1216 -j DROP +-A logdrop-1217 -j TEE --gateway 10.0.0.1 +-A logdrop-1217 -j TEE --gateway 10.0.0.2 +-A logdrop-1217 -j DROP +-A logdrop-1218 -j TEE --gateway 10.0.0.1 +-A logdrop-1218 -j TEE --gateway 10.0.0.2 +-A logdrop-1218 -j DROP +-A logdrop-1219 -j TEE --gateway 10.0.0.1 +-A logdrop-1219 -j TEE --gateway 10.0.0.2 +-A logdrop-1219 -j DROP +-A logdrop-122 -j TEE --gateway 10.0.0.1 +-A logdrop-122 -j TEE --gateway 10.0.0.2 -A logdrop-122 -j DROP --A logdrop-123 -m limit --limit 12/minute -j ULOG +-A logdrop-1220 -j TEE --gateway 10.0.0.1 +-A logdrop-1220 -j TEE --gateway 10.0.0.2 +-A logdrop-1220 -j DROP +-A logdrop-1221 -j TEE --gateway 10.0.0.1 +-A logdrop-1221 -j TEE --gateway 10.0.0.2 +-A logdrop-1221 -j DROP +-A logdrop-1222 -j TEE --gateway 10.0.0.1 +-A logdrop-1222 -j TEE --gateway 10.0.0.2 +-A logdrop-1222 -j DROP +-A logdrop-1223 -j TEE --gateway 10.0.0.1 +-A logdrop-1223 -j TEE --gateway 10.0.0.2 +-A logdrop-1223 -j DROP +-A logdrop-1224 -j TEE --gateway 10.0.0.1 +-A logdrop-1224 -j TEE --gateway 10.0.0.2 +-A logdrop-1224 -j DROP +-A logdrop-1225 -j TEE --gateway 10.0.0.1 +-A logdrop-1225 -j TEE --gateway 10.0.0.2 +-A logdrop-1225 -j DROP +-A logdrop-1226 -j TEE --gateway 10.0.0.1 +-A logdrop-1226 -j TEE --gateway 10.0.0.2 +-A logdrop-1226 -j DROP +-A logdrop-1227 -j TEE --gateway 10.0.0.1 +-A logdrop-1227 -j TEE --gateway 10.0.0.2 +-A logdrop-1227 -j DROP +-A logdrop-1228 -j TEE --gateway 10.0.0.1 +-A logdrop-1228 -j TEE --gateway 10.0.0.2 +-A logdrop-1228 -j DROP +-A logdrop-1229 -j TEE --gateway 10.0.0.1 +-A logdrop-1229 -j TEE --gateway 10.0.0.2 +-A logdrop-1229 -j DROP +-A logdrop-123 -j TEE --gateway 10.0.0.1 +-A logdrop-123 -j TEE --gateway 10.0.0.2 -A logdrop-123 -j DROP --A logdrop-124 -m limit --limit 12/minute -j ULOG +-A logdrop-1230 -j TEE --gateway 10.0.0.1 +-A logdrop-1230 -j TEE --gateway 10.0.0.2 +-A logdrop-1230 -j DROP +-A logdrop-1231 -j TEE --gateway 10.0.0.1 +-A logdrop-1231 -j TEE --gateway 10.0.0.2 +-A logdrop-1231 -j DROP +-A logdrop-1232 -j TEE --gateway 10.0.0.1 +-A logdrop-1232 -j TEE --gateway 10.0.0.2 +-A logdrop-1232 -j DROP +-A logdrop-1233 -j TEE --gateway 10.0.0.1 +-A logdrop-1233 -j TEE --gateway 10.0.0.2 +-A logdrop-1233 -j DROP +-A logdrop-1234 -j TEE --gateway 10.0.0.1 +-A logdrop-1234 -j TEE --gateway 10.0.0.2 +-A logdrop-1234 -j DROP +-A logdrop-1235 -j TEE --gateway 10.0.0.1 +-A logdrop-1235 -j TEE --gateway 10.0.0.2 +-A logdrop-1235 -j DROP +-A logdrop-1236 -j TEE --gateway 10.0.0.1 +-A logdrop-1236 -j TEE --gateway 10.0.0.2 +-A logdrop-1236 -j DROP +-A logdrop-1237 -j TEE --gateway 10.0.0.1 +-A logdrop-1237 -j TEE --gateway 10.0.0.2 +-A logdrop-1237 -j DROP +-A logdrop-1238 -j TEE --gateway 10.0.0.1 +-A logdrop-1238 -j TEE --gateway 10.0.0.2 +-A logdrop-1238 -j DROP +-A logdrop-1239 -j TEE --gateway 10.0.0.1 +-A logdrop-1239 -j TEE --gateway 10.0.0.2 +-A logdrop-1239 -j DROP +-A logdrop-124 -j TEE --gateway 10.0.0.1 +-A logdrop-124 -j TEE --gateway 10.0.0.2 -A logdrop-124 -j DROP --A logdrop-125 -m limit --limit 12/minute -j ULOG +-A logdrop-1240 -j TEE --gateway 10.0.0.1 +-A logdrop-1240 -j TEE --gateway 10.0.0.2 +-A logdrop-1240 -j DROP +-A logdrop-1241 -j TEE --gateway 10.0.0.1 +-A logdrop-1241 -j TEE --gateway 10.0.0.2 +-A logdrop-1241 -j DROP +-A logdrop-1242 -j TEE --gateway 10.0.0.1 +-A logdrop-1242 -j TEE --gateway 10.0.0.2 +-A logdrop-1242 -j DROP +-A logdrop-1243 -j TEE --gateway 10.0.0.1 +-A logdrop-1243 -j TEE --gateway 10.0.0.2 +-A logdrop-1243 -j DROP +-A logdrop-1244 -j TEE --gateway 10.0.0.1 +-A logdrop-1244 -j TEE --gateway 10.0.0.2 +-A logdrop-1244 -j DROP +-A logdrop-1245 -j TEE --gateway 10.0.0.1 +-A logdrop-1245 -j TEE --gateway 10.0.0.2 +-A logdrop-1245 -j DROP +-A logdrop-1246 -j TEE --gateway 10.0.0.1 +-A logdrop-1246 -j TEE --gateway 10.0.0.2 +-A logdrop-1246 -j DROP +-A logdrop-1247 -j TEE --gateway 10.0.0.1 +-A logdrop-1247 -j TEE --gateway 10.0.0.2 +-A logdrop-1247 -j DROP +-A logdrop-1248 -j TEE --gateway 10.0.0.1 +-A logdrop-1248 -j TEE --gateway 10.0.0.2 +-A logdrop-1248 -j DROP +-A logdrop-1249 -j TEE --gateway 10.0.0.1 +-A logdrop-1249 -j TEE --gateway 10.0.0.2 +-A logdrop-1249 -j DROP +-A logdrop-125 -j TEE --gateway 10.0.0.1 +-A logdrop-125 -j TEE --gateway 10.0.0.2 -A logdrop-125 -j DROP --A logdrop-126 -m limit --limit 12/minute -j ULOG +-A logdrop-1250 -j TEE --gateway 10.0.0.1 +-A logdrop-1250 -j TEE --gateway 10.0.0.2 +-A logdrop-1250 -j DROP +-A logdrop-1251 -j TEE --gateway 10.0.0.1 +-A logdrop-1251 -j TEE --gateway 10.0.0.2 +-A logdrop-1251 -j DROP +-A logdrop-1252 -j TEE --gateway 10.0.0.1 +-A logdrop-1252 -j TEE --gateway 10.0.0.2 +-A logdrop-1252 -j DROP +-A logdrop-1253 -j TEE --gateway 10.0.0.1 +-A logdrop-1253 -j TEE --gateway 10.0.0.2 +-A logdrop-1253 -j DROP +-A logdrop-1254 -j TEE --gateway 10.0.0.1 +-A logdrop-1254 -j TEE --gateway 10.0.0.2 +-A logdrop-1254 -j DROP +-A logdrop-1255 -j TEE --gateway 10.0.0.1 +-A logdrop-1255 -j TEE --gateway 10.0.0.2 +-A logdrop-1255 -j DROP +-A logdrop-1256 -j TEE --gateway 10.0.0.1 +-A logdrop-1256 -j TEE --gateway 10.0.0.2 +-A logdrop-1256 -j DROP +-A logdrop-1257 -j TEE --gateway 10.0.0.1 +-A logdrop-1257 -j TEE --gateway 10.0.0.2 +-A logdrop-1257 -j DROP +-A logdrop-1258 -j TEE --gateway 10.0.0.1 +-A logdrop-1258 -j TEE --gateway 10.0.0.2 +-A logdrop-1258 -j DROP +-A logdrop-1259 -j TEE --gateway 10.0.0.1 +-A logdrop-1259 -j TEE --gateway 10.0.0.2 +-A logdrop-1259 -j DROP +-A logdrop-126 -j TEE --gateway 10.0.0.1 +-A logdrop-126 -j TEE --gateway 10.0.0.2 -A logdrop-126 -j DROP --A logdrop-127 -m limit --limit 12/minute -j ULOG +-A logdrop-1260 -j TEE --gateway 10.0.0.1 +-A logdrop-1260 -j TEE --gateway 10.0.0.2 +-A logdrop-1260 -j DROP +-A logdrop-1261 -j TEE --gateway 10.0.0.1 +-A logdrop-1261 -j TEE --gateway 10.0.0.2 +-A logdrop-1261 -j DROP +-A logdrop-1262 -j TEE --gateway 10.0.0.1 +-A logdrop-1262 -j TEE --gateway 10.0.0.2 +-A logdrop-1262 -j DROP +-A logdrop-1263 -j TEE --gateway 10.0.0.1 +-A logdrop-1263 -j TEE --gateway 10.0.0.2 +-A logdrop-1263 -j DROP +-A logdrop-1264 -j TEE --gateway 10.0.0.1 +-A logdrop-1264 -j TEE --gateway 10.0.0.2 +-A logdrop-1264 -j DROP +-A logdrop-1265 -j TEE --gateway 10.0.0.1 +-A logdrop-1265 -j TEE --gateway 10.0.0.2 +-A logdrop-1265 -j DROP +-A logdrop-1266 -j TEE --gateway 10.0.0.1 +-A logdrop-1266 -j TEE --gateway 10.0.0.2 +-A logdrop-1266 -j DROP +-A logdrop-1267 -j TEE --gateway 10.0.0.1 +-A logdrop-1267 -j TEE --gateway 10.0.0.2 +-A logdrop-1267 -j DROP +-A logdrop-1268 -j TEE --gateway 10.0.0.1 +-A logdrop-1268 -j TEE --gateway 10.0.0.2 +-A logdrop-1268 -j DROP +-A logdrop-1269 -j TEE --gateway 10.0.0.1 +-A logdrop-1269 -j TEE --gateway 10.0.0.2 +-A logdrop-1269 -j DROP +-A logdrop-127 -j TEE --gateway 10.0.0.1 +-A logdrop-127 -j TEE --gateway 10.0.0.2 -A logdrop-127 -j DROP --A logdrop-128 -m limit --limit 12/minute -j ULOG +-A logdrop-1270 -j TEE --gateway 10.0.0.1 +-A logdrop-1270 -j TEE --gateway 10.0.0.2 +-A logdrop-1270 -j DROP +-A logdrop-1271 -j TEE --gateway 10.0.0.1 +-A logdrop-1271 -j TEE --gateway 10.0.0.2 +-A logdrop-1271 -j DROP +-A logdrop-1272 -j TEE --gateway 10.0.0.1 +-A logdrop-1272 -j TEE --gateway 10.0.0.2 +-A logdrop-1272 -j DROP +-A logdrop-1273 -j TEE --gateway 10.0.0.1 +-A logdrop-1273 -j TEE --gateway 10.0.0.2 +-A logdrop-1273 -j DROP +-A logdrop-1274 -j TEE --gateway 10.0.0.1 +-A logdrop-1274 -j TEE --gateway 10.0.0.2 +-A logdrop-1274 -j DROP +-A logdrop-1275 -j TEE --gateway 10.0.0.1 +-A logdrop-1275 -j TEE --gateway 10.0.0.2 +-A logdrop-1275 -j DROP +-A logdrop-1276 -j TEE --gateway 10.0.0.1 +-A logdrop-1276 -j TEE --gateway 10.0.0.2 +-A logdrop-1276 -j DROP +-A logdrop-1277 -j TEE --gateway 10.0.0.1 +-A logdrop-1277 -j TEE --gateway 10.0.0.2 +-A logdrop-1277 -j DROP +-A logdrop-1278 -j TEE --gateway 10.0.0.1 +-A logdrop-1278 -j TEE --gateway 10.0.0.2 +-A logdrop-1278 -j DROP +-A logdrop-1279 -j TEE --gateway 10.0.0.1 +-A logdrop-1279 -j TEE --gateway 10.0.0.2 +-A logdrop-1279 -j DROP +-A logdrop-128 -j TEE --gateway 10.0.0.1 +-A logdrop-128 -j TEE --gateway 10.0.0.2 -A logdrop-128 -j DROP --A logdrop-129 -m limit --limit 12/minute -j ULOG +-A logdrop-1280 -j TEE --gateway 10.0.0.1 +-A logdrop-1280 -j TEE --gateway 10.0.0.2 +-A logdrop-1280 -j DROP +-A logdrop-1281 -j TEE --gateway 10.0.0.1 +-A logdrop-1281 -j TEE --gateway 10.0.0.2 +-A logdrop-1281 -j DROP +-A logdrop-1282 -j TEE --gateway 10.0.0.1 +-A logdrop-1282 -j TEE --gateway 10.0.0.2 +-A logdrop-1282 -j DROP +-A logdrop-1283 -j TEE --gateway 10.0.0.1 +-A logdrop-1283 -j TEE --gateway 10.0.0.2 +-A logdrop-1283 -j DROP +-A logdrop-1284 -j TEE --gateway 10.0.0.1 +-A logdrop-1284 -j TEE --gateway 10.0.0.2 +-A logdrop-1284 -j DROP +-A logdrop-1285 -j TEE --gateway 10.0.0.1 +-A logdrop-1285 -j TEE --gateway 10.0.0.2 +-A logdrop-1285 -j DROP +-A logdrop-1286 -j TEE --gateway 10.0.0.1 +-A logdrop-1286 -j TEE --gateway 10.0.0.2 +-A logdrop-1286 -j DROP +-A logdrop-1287 -j TEE --gateway 10.0.0.1 +-A logdrop-1287 -j TEE --gateway 10.0.0.2 +-A logdrop-1287 -j DROP +-A logdrop-1288 -j TEE --gateway 10.0.0.1 +-A logdrop-1288 -j TEE --gateway 10.0.0.2 +-A logdrop-1288 -j DROP +-A logdrop-1289 -j TEE --gateway 10.0.0.1 +-A logdrop-1289 -j TEE --gateway 10.0.0.2 +-A logdrop-1289 -j DROP +-A logdrop-129 -j TEE --gateway 10.0.0.1 +-A logdrop-129 -j TEE --gateway 10.0.0.2 -A logdrop-129 -j DROP +-A logdrop-1290 -m limit --limit 12/minute -j ULOG +-A logdrop-1290 -j DROP +-A logdrop-1291 -m limit --limit 12/minute -j ULOG +-A logdrop-1291 -j DROP +-A logdrop-1292 -m limit --limit 12/minute -j ULOG +-A logdrop-1292 -j DROP +-A logdrop-1293 -m limit --limit 12/minute -j ULOG +-A logdrop-1293 -j DROP +-A logdrop-1294 -m limit --limit 12/minute -j ULOG +-A logdrop-1294 -j DROP +-A logdrop-1295 -m limit --limit 12/minute -j ULOG +-A logdrop-1295 -j DROP +-A logdrop-1296 -m limit --limit 12/minute -j ULOG +-A logdrop-1296 -j DROP +-A logdrop-1297 -m limit --limit 12/minute -j ULOG +-A logdrop-1297 -j DROP +-A logdrop-1298 -m limit --limit 12/minute -j ULOG +-A logdrop-1298 -j DROP +-A logdrop-1299 -m limit --limit 12/minute -j ULOG +-A logdrop-1299 -j DROP -A logdrop-13 -m limit --limit 1/second -j LOG -A logdrop-13 -j DROP --A logdrop-130 -m limit --limit 12/minute -j ULOG +-A logdrop-130 -j TEE --gateway 10.0.0.1 +-A logdrop-130 -j TEE --gateway 10.0.0.2 -A logdrop-130 -j DROP --A logdrop-131 -m limit --limit 12/minute -j ULOG +-A logdrop-1300 -m limit --limit 12/minute -j ULOG +-A logdrop-1300 -j DROP +-A logdrop-1301 -m limit --limit 12/minute -j ULOG +-A logdrop-1301 -j DROP +-A logdrop-1302 -m limit --limit 12/minute -j ULOG +-A logdrop-1302 -j DROP +-A logdrop-1303 -m limit --limit 12/minute -j ULOG +-A logdrop-1303 -j DROP +-A logdrop-1304 -m limit --limit 12/minute -j ULOG +-A logdrop-1304 -j DROP +-A logdrop-1305 -m limit --limit 12/minute -j ULOG +-A logdrop-1305 -j DROP +-A logdrop-1306 -m limit --limit 12/minute -j ULOG +-A logdrop-1306 -j DROP +-A logdrop-1307 -m limit --limit 12/minute -j ULOG +-A logdrop-1307 -j DROP +-A logdrop-1308 -m limit --limit 12/minute -j ULOG +-A logdrop-1308 -j DROP +-A logdrop-1309 -m limit --limit 12/minute -j ULOG +-A logdrop-1309 -j DROP +-A logdrop-131 -j TEE --gateway 10.0.0.1 +-A logdrop-131 -j TEE --gateway 10.0.0.2 -A logdrop-131 -j DROP --A logdrop-132 -m limit --limit 12/minute -j ULOG +-A logdrop-1310 -m limit --limit 12/minute -j ULOG +-A logdrop-1310 -j DROP +-A logdrop-1311 -m limit --limit 12/minute -j ULOG +-A logdrop-1311 -j DROP +-A logdrop-1312 -m limit --limit 12/minute -j ULOG +-A logdrop-1312 -j DROP +-A logdrop-1313 -m limit --limit 12/minute -j ULOG +-A logdrop-1313 -j DROP +-A logdrop-1314 -m limit --limit 12/minute -j ULOG +-A logdrop-1314 -j DROP +-A logdrop-1315 -m limit --limit 12/minute -j ULOG +-A logdrop-1315 -j DROP +-A logdrop-1316 -m limit --limit 12/minute -j ULOG +-A logdrop-1316 -j DROP +-A logdrop-1317 -m limit --limit 12/minute -j ULOG +-A logdrop-1317 -j DROP +-A logdrop-1318 -m limit --limit 12/minute -j ULOG +-A logdrop-1318 -j DROP +-A logdrop-1319 -m limit --limit 12/minute -j ULOG +-A logdrop-1319 -j DROP +-A logdrop-132 -j TEE --gateway 10.0.0.1 +-A logdrop-132 -j TEE --gateway 10.0.0.2 -A logdrop-132 -j DROP --A logdrop-133 -m limit --limit 12/minute -j ULOG +-A logdrop-1320 -m limit --limit 12/minute -j ULOG +-A logdrop-1320 -j DROP +-A logdrop-1321 -m limit --limit 12/minute -j ULOG +-A logdrop-1321 -j DROP +-A logdrop-1322 -m limit --limit 12/minute -j ULOG +-A logdrop-1322 -j DROP +-A logdrop-1323 -m limit --limit 12/minute -j ULOG +-A logdrop-1323 -j DROP +-A logdrop-1324 -m limit --limit 12/minute -j ULOG +-A logdrop-1324 -j DROP +-A logdrop-1325 -m limit --limit 12/minute -j ULOG +-A logdrop-1325 -j DROP +-A logdrop-1326 -m limit --limit 12/minute -j ULOG +-A logdrop-1326 -j DROP +-A logdrop-1327 -m limit --limit 12/minute -j ULOG +-A logdrop-1327 -j DROP +-A logdrop-1328 -m limit --limit 12/minute -j ULOG +-A logdrop-1328 -j DROP +-A logdrop-1329 -m limit --limit 12/minute -j ULOG +-A logdrop-1329 -j DROP +-A logdrop-133 -j TEE --gateway 10.0.0.1 +-A logdrop-133 -j TEE --gateway 10.0.0.2 -A logdrop-133 -j DROP --A logdrop-134 -m limit --limit 12/minute -j ULOG +-A logdrop-1330 -m limit --limit 12/minute -j ULOG +-A logdrop-1330 -j DROP +-A logdrop-1331 -m limit --limit 12/minute -j ULOG +-A logdrop-1331 -j DROP +-A logdrop-1332 -m limit --limit 12/minute -j ULOG +-A logdrop-1332 -j DROP +-A logdrop-1333 -m limit --limit 12/minute -j ULOG +-A logdrop-1333 -j DROP +-A logdrop-1334 -m limit --limit 12/minute -j ULOG +-A logdrop-1334 -j DROP +-A logdrop-1335 -m limit --limit 12/minute -j ULOG +-A logdrop-1335 -j DROP +-A logdrop-1336 -m limit --limit 12/minute -j ULOG +-A logdrop-1336 -j DROP +-A logdrop-1337 -m limit --limit 12/minute -j ULOG +-A logdrop-1337 -j DROP +-A logdrop-1338 -m limit --limit 12/minute -j ULOG +-A logdrop-1338 -j DROP +-A logdrop-1339 -m limit --limit 12/minute -j ULOG +-A logdrop-1339 -j DROP +-A logdrop-134 -j TEE --gateway 10.0.0.1 +-A logdrop-134 -j TEE --gateway 10.0.0.2 -A logdrop-134 -j DROP --A logdrop-135 -m limit --limit 12/minute -j ULOG +-A logdrop-1340 -m limit --limit 12/minute -j ULOG +-A logdrop-1340 -j DROP +-A logdrop-1341 -m limit --limit 12/minute -j ULOG +-A logdrop-1341 -j DROP +-A logdrop-1342 -m limit --limit 12/minute -j ULOG +-A logdrop-1342 -j DROP +-A logdrop-1343 -m limit --limit 12/minute -j ULOG +-A logdrop-1343 -j DROP +-A logdrop-1344 -m limit --limit 12/minute -j ULOG +-A logdrop-1344 -j DROP +-A logdrop-1345 -m limit --limit 12/minute -j ULOG +-A logdrop-1345 -j DROP +-A logdrop-1346 -m limit --limit 12/minute -j ULOG +-A logdrop-1346 -j DROP +-A logdrop-1347 -m limit --limit 12/minute -j ULOG +-A logdrop-1347 -j DROP +-A logdrop-1348 -m limit --limit 12/minute -j ULOG +-A logdrop-1348 -j DROP +-A logdrop-1349 -m limit --limit 12/minute -j ULOG +-A logdrop-1349 -j DROP +-A logdrop-135 -j TEE --gateway 10.0.0.1 +-A logdrop-135 -j TEE --gateway 10.0.0.2 -A logdrop-135 -j DROP --A logdrop-136 -m limit --limit 12/minute -j ULOG +-A logdrop-1350 -m limit --limit 12/minute -j ULOG +-A logdrop-1350 -j DROP +-A logdrop-1351 -m limit --limit 12/minute -j ULOG +-A logdrop-1351 -j DROP +-A logdrop-1352 -m limit --limit 12/minute -j ULOG +-A logdrop-1352 -j DROP +-A logdrop-1353 -m limit --limit 12/minute -j ULOG +-A logdrop-1353 -j DROP +-A logdrop-1354 -m limit --limit 12/minute -j ULOG +-A logdrop-1354 -j DROP +-A logdrop-1355 -m limit --limit 12/minute -j ULOG +-A logdrop-1355 -j DROP +-A logdrop-1356 -m limit --limit 12/minute -j ULOG +-A logdrop-1356 -j DROP +-A logdrop-1357 -m limit --limit 12/minute -j ULOG +-A logdrop-1357 -j DROP +-A logdrop-1358 -m limit --limit 12/minute -j ULOG +-A logdrop-1358 -j DROP +-A logdrop-1359 -m limit --limit 12/minute -j ULOG +-A logdrop-1359 -j DROP +-A logdrop-136 -j TEE --gateway 10.0.0.1 +-A logdrop-136 -j TEE --gateway 10.0.0.2 -A logdrop-136 -j DROP --A logdrop-137 -m limit --limit 12/minute -j ULOG +-A logdrop-1360 -m limit --limit 12/minute -j ULOG +-A logdrop-1360 -j DROP +-A logdrop-1361 -m limit --limit 12/minute -j ULOG +-A logdrop-1361 -j DROP +-A logdrop-1362 -m limit --limit 12/minute -j ULOG +-A logdrop-1362 -j DROP +-A logdrop-1363 -m limit --limit 12/minute -j ULOG +-A logdrop-1363 -j DROP +-A logdrop-1364 -m limit --limit 12/minute -j ULOG +-A logdrop-1364 -j DROP +-A logdrop-1365 -m limit --limit 12/minute -j ULOG +-A logdrop-1365 -j DROP +-A logdrop-1366 -m limit --limit 12/minute -j ULOG +-A logdrop-1366 -j DROP +-A logdrop-1367 -m limit --limit 12/minute -j ULOG +-A logdrop-1367 -j DROP +-A logdrop-1368 -m limit --limit 12/minute -j ULOG +-A logdrop-1368 -j DROP +-A logdrop-1369 -m limit --limit 12/minute -j ULOG +-A logdrop-1369 -j DROP +-A logdrop-137 -j TEE --gateway 10.0.0.1 +-A logdrop-137 -j TEE --gateway 10.0.0.2 -A logdrop-137 -j DROP --A logdrop-138 -m limit --limit 12/minute -j ULOG +-A logdrop-1370 -m limit --limit 12/minute -j ULOG +-A logdrop-1370 -j DROP +-A logdrop-1371 -m limit --limit 12/minute -j ULOG +-A logdrop-1371 -j DROP +-A logdrop-1372 -m limit --limit 12/minute -j ULOG +-A logdrop-1372 -j DROP +-A logdrop-1373 -m limit --limit 12/minute -j ULOG +-A logdrop-1373 -j DROP +-A logdrop-1374 -m limit --limit 12/minute -j ULOG +-A logdrop-1374 -j DROP +-A logdrop-1375 -m limit --limit 12/minute -j ULOG +-A logdrop-1375 -j DROP +-A logdrop-1376 -m limit --limit 12/minute -j ULOG +-A logdrop-1376 -j DROP +-A logdrop-1377 -m limit --limit 12/minute -j ULOG +-A logdrop-1377 -j DROP +-A logdrop-1378 -m limit --limit 12/minute -j ULOG +-A logdrop-1378 -j DROP +-A logdrop-1379 -m limit --limit 12/minute -j ULOG +-A logdrop-1379 -j DROP +-A logdrop-138 -j TEE --gateway 10.0.0.1 +-A logdrop-138 -j TEE --gateway 10.0.0.2 -A logdrop-138 -j DROP --A logdrop-139 -m limit --limit 12/minute -j ULOG +-A logdrop-1380 -m limit --limit 1/second -j LOG +-A logdrop-1380 -j DROP +-A logdrop-1381 -m limit --limit 1/second -j LOG +-A logdrop-1381 -j DROP +-A logdrop-1382 -m limit --limit 1/second -j LOG +-A logdrop-1382 -j DROP +-A logdrop-1383 -m limit --limit 1/second -j LOG +-A logdrop-1383 -j DROP +-A logdrop-1384 -m limit --limit 1/second -j LOG +-A logdrop-1384 -j DROP +-A logdrop-1385 -m limit --limit 1/second -j LOG +-A logdrop-1385 -j DROP +-A logdrop-1386 -m limit --limit 1/second -j LOG +-A logdrop-1386 -j DROP +-A logdrop-1387 -m limit --limit 1/second -j LOG +-A logdrop-1387 -j DROP +-A logdrop-1388 -m limit --limit 1/second -j LOG +-A logdrop-1388 -j DROP +-A logdrop-1389 -m limit --limit 1/second -j LOG +-A logdrop-1389 -j DROP +-A logdrop-139 -j TEE --gateway 10.0.0.1 +-A logdrop-139 -j TEE --gateway 10.0.0.2 -A logdrop-139 -j DROP +-A logdrop-1390 -m limit --limit 1/second -j LOG +-A logdrop-1390 -j DROP +-A logdrop-1391 -m limit --limit 1/second -j LOG +-A logdrop-1391 -j DROP +-A logdrop-1392 -m limit --limit 1/second -j LOG +-A logdrop-1392 -j DROP +-A logdrop-1393 -m limit --limit 1/second -j LOG +-A logdrop-1393 -j DROP +-A logdrop-1394 -m limit --limit 1/second -j LOG +-A logdrop-1394 -j DROP +-A logdrop-1395 -m limit --limit 1/second -j LOG +-A logdrop-1395 -j DROP +-A logdrop-1396 -m limit --limit 1/second -j LOG +-A logdrop-1396 -j DROP +-A logdrop-1397 -m limit --limit 1/second -j LOG +-A logdrop-1397 -j DROP +-A logdrop-1398 -m limit --limit 1/second -j LOG +-A logdrop-1398 -j DROP +-A logdrop-1399 -m limit --limit 1/second -j LOG +-A logdrop-1399 -j DROP -A logdrop-14 -m limit --limit 1/second -j LOG -A logdrop-14 -j DROP --A logdrop-140 -m limit --limit 12/minute -j ULOG +-A logdrop-140 -j TEE --gateway 10.0.0.1 +-A logdrop-140 -j TEE --gateway 10.0.0.2 -A logdrop-140 -j DROP --A logdrop-141 -m limit --limit 12/minute -j ULOG +-A logdrop-1400 -m limit --limit 1/second -j LOG +-A logdrop-1400 -j DROP +-A logdrop-1401 -m limit --limit 1/second -j LOG +-A logdrop-1401 -j DROP +-A logdrop-1402 -m limit --limit 1/second -j LOG +-A logdrop-1402 -j DROP +-A logdrop-1403 -m limit --limit 1/second -j LOG +-A logdrop-1403 -j DROP +-A logdrop-1404 -m limit --limit 1/second -j LOG +-A logdrop-1404 -j DROP +-A logdrop-1405 -m limit --limit 1/second -j LOG +-A logdrop-1405 -j DROP +-A logdrop-1406 -m limit --limit 1/second -j LOG +-A logdrop-1406 -j DROP +-A logdrop-1407 -m limit --limit 1/second -j LOG +-A logdrop-1407 -j DROP +-A logdrop-1408 -m limit --limit 1/second -j LOG +-A logdrop-1408 -j DROP +-A logdrop-1409 -m limit --limit 1/second -j LOG +-A logdrop-1409 -j DROP +-A logdrop-141 -j TEE --gateway 10.0.0.1 +-A logdrop-141 -j TEE --gateway 10.0.0.2 -A logdrop-141 -j DROP --A logdrop-142 -m limit --limit 12/minute -j ULOG +-A logdrop-1410 -m limit --limit 1/second -j LOG +-A logdrop-1410 -j DROP +-A logdrop-1411 -m limit --limit 1/second -j LOG +-A logdrop-1411 -j DROP +-A logdrop-1412 -m limit --limit 1/second -j LOG +-A logdrop-1412 -j DROP +-A logdrop-1413 -m limit --limit 1/second -j LOG +-A logdrop-1413 -j DROP +-A logdrop-1414 -m limit --limit 1/second -j LOG +-A logdrop-1414 -j DROP +-A logdrop-1415 -m limit --limit 1/second -j LOG +-A logdrop-1415 -j DROP +-A logdrop-1416 -m limit --limit 1/second -j LOG +-A logdrop-1416 -j DROP +-A logdrop-1417 -m limit --limit 1/second -j LOG +-A logdrop-1417 -j DROP +-A logdrop-1418 -m limit --limit 1/second -j LOG +-A logdrop-1418 -j DROP +-A logdrop-1419 -m limit --limit 1/second -j LOG +-A logdrop-1419 -j DROP +-A logdrop-142 -j TEE --gateway 10.0.0.1 +-A logdrop-142 -j TEE --gateway 10.0.0.2 -A logdrop-142 -j DROP --A logdrop-143 -m limit --limit 12/minute -j ULOG +-A logdrop-1420 -m limit --limit 1/second -j LOG +-A logdrop-1420 -j DROP +-A logdrop-1421 -m limit --limit 1/second -j LOG +-A logdrop-1421 -j DROP +-A logdrop-1422 -m limit --limit 1/second -j LOG +-A logdrop-1422 -j DROP +-A logdrop-1423 -m limit --limit 1/second -j LOG +-A logdrop-1423 -j DROP +-A logdrop-1424 -m limit --limit 1/second -j LOG +-A logdrop-1424 -j DROP +-A logdrop-1425 -m limit --limit 1/second -j LOG +-A logdrop-1425 -j DROP +-A logdrop-1426 -m limit --limit 1/second -j LOG +-A logdrop-1426 -j DROP +-A logdrop-1427 -m limit --limit 1/second -j LOG +-A logdrop-1427 -j DROP +-A logdrop-1428 -m limit --limit 1/second -j LOG +-A logdrop-1428 -j DROP +-A logdrop-1429 -m limit --limit 1/second -j LOG +-A logdrop-1429 -j DROP +-A logdrop-143 -j TEE --gateway 10.0.0.1 +-A logdrop-143 -j TEE --gateway 10.0.0.2 -A logdrop-143 -j DROP --A logdrop-144 -m limit --limit 12/minute -j ULOG +-A logdrop-1430 -m limit --limit 1/second -j LOG +-A logdrop-1430 -j DROP +-A logdrop-1431 -m limit --limit 1/second -j LOG +-A logdrop-1431 -j DROP +-A logdrop-1432 -m limit --limit 1/second -j LOG +-A logdrop-1432 -j DROP +-A logdrop-1433 -m limit --limit 1/second -j LOG +-A logdrop-1433 -j DROP +-A logdrop-1434 -m limit --limit 1/second -j LOG +-A logdrop-1434 -j DROP +-A logdrop-1435 -m limit --limit 1/second -j LOG +-A logdrop-1435 -j DROP +-A logdrop-1436 -m limit --limit 1/second -j LOG +-A logdrop-1436 -j DROP +-A logdrop-1437 -m limit --limit 1/second -j LOG +-A logdrop-1437 -j DROP +-A logdrop-1438 -m limit --limit 1/second -j LOG +-A logdrop-1438 -j DROP +-A logdrop-1439 -m limit --limit 1/second -j LOG +-A logdrop-1439 -j DROP +-A logdrop-144 -j TEE --gateway 10.0.0.1 +-A logdrop-144 -j TEE --gateway 10.0.0.2 -A logdrop-144 -j DROP --A logdrop-145 -m limit --limit 12/minute -j ULOG +-A logdrop-1440 -m limit --limit 1/second -j LOG +-A logdrop-1440 -j DROP +-A logdrop-1441 -m limit --limit 1/second -j LOG +-A logdrop-1441 -j DROP +-A logdrop-1442 -m limit --limit 1/second -j LOG +-A logdrop-1442 -j DROP +-A logdrop-1443 -m limit --limit 1/second -j LOG +-A logdrop-1443 -j DROP +-A logdrop-1444 -m limit --limit 1/second -j LOG +-A logdrop-1444 -j DROP +-A logdrop-1445 -m limit --limit 1/second -j LOG +-A logdrop-1445 -j DROP +-A logdrop-1446 -m limit --limit 1/second -j LOG +-A logdrop-1446 -j DROP +-A logdrop-1447 -m limit --limit 1/second -j LOG +-A logdrop-1447 -j DROP +-A logdrop-1448 -m limit --limit 1/second -j LOG +-A logdrop-1448 -j DROP +-A logdrop-1449 -m limit --limit 1/second -j LOG +-A logdrop-1449 -j DROP +-A logdrop-145 -j TEE --gateway 10.0.0.1 +-A logdrop-145 -j TEE --gateway 10.0.0.2 -A logdrop-145 -j DROP --A logdrop-146 -m limit --limit 12/minute -j ULOG +-A logdrop-1450 -m limit --limit 1/second -j LOG +-A logdrop-1450 -j DROP +-A logdrop-1451 -m limit --limit 1/second -j LOG +-A logdrop-1451 -j DROP +-A logdrop-1452 -m limit --limit 1/second -j LOG +-A logdrop-1452 -j DROP +-A logdrop-1453 -m limit --limit 1/second -j LOG +-A logdrop-1453 -j DROP +-A logdrop-1454 -m limit --limit 1/second -j LOG +-A logdrop-1454 -j DROP +-A logdrop-1455 -m limit --limit 1/second -j LOG +-A logdrop-1455 -j DROP +-A logdrop-1456 -m limit --limit 1/second -j LOG +-A logdrop-1456 -j DROP +-A logdrop-1457 -m limit --limit 1/second -j LOG +-A logdrop-1457 -j DROP +-A logdrop-1458 -m limit --limit 1/second -j LOG +-A logdrop-1458 -j DROP +-A logdrop-1459 -m limit --limit 1/second -j LOG +-A logdrop-1459 -j DROP +-A logdrop-146 -j TEE --gateway 10.0.0.1 +-A logdrop-146 -j TEE --gateway 10.0.0.2 -A logdrop-146 -j DROP --A logdrop-147 -m limit --limit 12/minute -j ULOG +-A logdrop-1460 -m limit --limit 1/second -j LOG +-A logdrop-1460 -j DROP +-A logdrop-1461 -m limit --limit 1/second -j LOG +-A logdrop-1461 -j DROP +-A logdrop-1462 -m limit --limit 1/second -j LOG +-A logdrop-1462 -j DROP +-A logdrop-1463 -m limit --limit 1/second -j LOG +-A logdrop-1463 -j DROP +-A logdrop-1464 -m limit --limit 1/second -j LOG +-A logdrop-1464 -j DROP +-A logdrop-1465 -m limit --limit 1/second -j LOG +-A logdrop-1465 -j DROP +-A logdrop-1466 -m limit --limit 1/second -j LOG +-A logdrop-1466 -j DROP +-A logdrop-1467 -m limit --limit 1/second -j LOG +-A logdrop-1467 -j DROP +-A logdrop-1468 -m limit --limit 1/second -j LOG +-A logdrop-1468 -j DROP +-A logdrop-1469 -m limit --limit 1/second -j LOG +-A logdrop-1469 -j DROP +-A logdrop-147 -j TEE --gateway 10.0.0.1 +-A logdrop-147 -j TEE --gateway 10.0.0.2 -A logdrop-147 -j DROP --A logdrop-148 -m limit --limit 12/minute -j ULOG +-A logdrop-1470 -j TEE --gateway 10.0.0.1 +-A logdrop-1470 -j TEE --gateway 10.0.0.2 +-A logdrop-1470 -j DROP +-A logdrop-1471 -j TEE --gateway 10.0.0.1 +-A logdrop-1471 -j TEE --gateway 10.0.0.2 +-A logdrop-1471 -j DROP +-A logdrop-1472 -j TEE --gateway 10.0.0.1 +-A logdrop-1472 -j TEE --gateway 10.0.0.2 +-A logdrop-1472 -j DROP +-A logdrop-1473 -j TEE --gateway 10.0.0.1 +-A logdrop-1473 -j TEE --gateway 10.0.0.2 +-A logdrop-1473 -j DROP +-A logdrop-1474 -j TEE --gateway 10.0.0.1 +-A logdrop-1474 -j TEE --gateway 10.0.0.2 +-A logdrop-1474 -j DROP +-A logdrop-1475 -j TEE --gateway 10.0.0.1 +-A logdrop-1475 -j TEE --gateway 10.0.0.2 +-A logdrop-1475 -j DROP +-A logdrop-1476 -j TEE --gateway 10.0.0.1 +-A logdrop-1476 -j TEE --gateway 10.0.0.2 +-A logdrop-1476 -j DROP +-A logdrop-1477 -j TEE --gateway 10.0.0.1 +-A logdrop-1477 -j TEE --gateway 10.0.0.2 +-A logdrop-1477 -j DROP +-A logdrop-1478 -j TEE --gateway 10.0.0.1 +-A logdrop-1478 -j TEE --gateway 10.0.0.2 +-A logdrop-1478 -j DROP +-A logdrop-1479 -j TEE --gateway 10.0.0.1 +-A logdrop-1479 -j TEE --gateway 10.0.0.2 +-A logdrop-1479 -j DROP +-A logdrop-148 -j TEE --gateway 10.0.0.1 +-A logdrop-148 -j TEE --gateway 10.0.0.2 -A logdrop-148 -j DROP --A logdrop-149 -m limit --limit 12/minute -j ULOG +-A logdrop-1480 -j TEE --gateway 10.0.0.1 +-A logdrop-1480 -j TEE --gateway 10.0.0.2 +-A logdrop-1480 -j DROP +-A logdrop-1481 -j TEE --gateway 10.0.0.1 +-A logdrop-1481 -j TEE --gateway 10.0.0.2 +-A logdrop-1481 -j DROP +-A logdrop-1482 -j TEE --gateway 10.0.0.1 +-A logdrop-1482 -j TEE --gateway 10.0.0.2 +-A logdrop-1482 -j DROP +-A logdrop-1483 -j TEE --gateway 10.0.0.1 +-A logdrop-1483 -j TEE --gateway 10.0.0.2 +-A logdrop-1483 -j DROP +-A logdrop-1484 -j TEE --gateway 10.0.0.1 +-A logdrop-1484 -j TEE --gateway 10.0.0.2 +-A logdrop-1484 -j DROP +-A logdrop-1485 -j TEE --gateway 10.0.0.1 +-A logdrop-1485 -j TEE --gateway 10.0.0.2 +-A logdrop-1485 -j DROP +-A logdrop-1486 -j TEE --gateway 10.0.0.1 +-A logdrop-1486 -j TEE --gateway 10.0.0.2 +-A logdrop-1486 -j DROP +-A logdrop-1487 -j TEE --gateway 10.0.0.1 +-A logdrop-1487 -j TEE --gateway 10.0.0.2 +-A logdrop-1487 -j DROP +-A logdrop-1488 -j TEE --gateway 10.0.0.1 +-A logdrop-1488 -j TEE --gateway 10.0.0.2 +-A logdrop-1488 -j DROP +-A logdrop-1489 -j TEE --gateway 10.0.0.1 +-A logdrop-1489 -j TEE --gateway 10.0.0.2 +-A logdrop-1489 -j DROP +-A logdrop-149 -j TEE --gateway 10.0.0.1 +-A logdrop-149 -j TEE --gateway 10.0.0.2 -A logdrop-149 -j DROP +-A logdrop-1490 -j TEE --gateway 10.0.0.1 +-A logdrop-1490 -j TEE --gateway 10.0.0.2 +-A logdrop-1490 -j DROP +-A logdrop-1491 -j TEE --gateway 10.0.0.1 +-A logdrop-1491 -j TEE --gateway 10.0.0.2 +-A logdrop-1491 -j DROP +-A logdrop-1492 -j TEE --gateway 10.0.0.1 +-A logdrop-1492 -j TEE --gateway 10.0.0.2 +-A logdrop-1492 -j DROP +-A logdrop-1493 -j TEE --gateway 10.0.0.1 +-A logdrop-1493 -j TEE --gateway 10.0.0.2 +-A logdrop-1493 -j DROP +-A logdrop-1494 -j TEE --gateway 10.0.0.1 +-A logdrop-1494 -j TEE --gateway 10.0.0.2 +-A logdrop-1494 -j DROP +-A logdrop-1495 -j TEE --gateway 10.0.0.1 +-A logdrop-1495 -j TEE --gateway 10.0.0.2 +-A logdrop-1495 -j DROP +-A logdrop-1496 -j TEE --gateway 10.0.0.1 +-A logdrop-1496 -j TEE --gateway 10.0.0.2 +-A logdrop-1496 -j DROP +-A logdrop-1497 -j TEE --gateway 10.0.0.1 +-A logdrop-1497 -j TEE --gateway 10.0.0.2 +-A logdrop-1497 -j DROP +-A logdrop-1498 -j TEE --gateway 10.0.0.1 +-A logdrop-1498 -j TEE --gateway 10.0.0.2 +-A logdrop-1498 -j DROP +-A logdrop-1499 -j TEE --gateway 10.0.0.1 +-A logdrop-1499 -j TEE --gateway 10.0.0.2 +-A logdrop-1499 -j DROP -A logdrop-15 -m limit --limit 1/second -j LOG -A logdrop-15 -j DROP --A logdrop-150 -m limit --limit 12/minute -j ULOG +-A logdrop-150 -j TEE --gateway 10.0.0.1 +-A logdrop-150 -j TEE --gateway 10.0.0.2 -A logdrop-150 -j DROP --A logdrop-151 -m limit --limit 12/minute -j ULOG +-A logdrop-1500 -j TEE --gateway 10.0.0.1 +-A logdrop-1500 -j TEE --gateway 10.0.0.2 +-A logdrop-1500 -j DROP +-A logdrop-1501 -j TEE --gateway 10.0.0.1 +-A logdrop-1501 -j TEE --gateway 10.0.0.2 +-A logdrop-1501 -j DROP +-A logdrop-1502 -j TEE --gateway 10.0.0.1 +-A logdrop-1502 -j TEE --gateway 10.0.0.2 +-A logdrop-1502 -j DROP +-A logdrop-1503 -j TEE --gateway 10.0.0.1 +-A logdrop-1503 -j TEE --gateway 10.0.0.2 +-A logdrop-1503 -j DROP +-A logdrop-1504 -j TEE --gateway 10.0.0.1 +-A logdrop-1504 -j TEE --gateway 10.0.0.2 +-A logdrop-1504 -j DROP +-A logdrop-1505 -j TEE --gateway 10.0.0.1 +-A logdrop-1505 -j TEE --gateway 10.0.0.2 +-A logdrop-1505 -j DROP +-A logdrop-1506 -j TEE --gateway 10.0.0.1 +-A logdrop-1506 -j TEE --gateway 10.0.0.2 +-A logdrop-1506 -j DROP +-A logdrop-1507 -j TEE --gateway 10.0.0.1 +-A logdrop-1507 -j TEE --gateway 10.0.0.2 +-A logdrop-1507 -j DROP +-A logdrop-1508 -j TEE --gateway 10.0.0.1 +-A logdrop-1508 -j TEE --gateway 10.0.0.2 +-A logdrop-1508 -j DROP +-A logdrop-1509 -j TEE --gateway 10.0.0.1 +-A logdrop-1509 -j TEE --gateway 10.0.0.2 +-A logdrop-1509 -j DROP +-A logdrop-151 -j TEE --gateway 10.0.0.1 +-A logdrop-151 -j TEE --gateway 10.0.0.2 -A logdrop-151 -j DROP --A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-1510 -j TEE --gateway 10.0.0.1 +-A logdrop-1510 -j TEE --gateway 10.0.0.2 +-A logdrop-1510 -j DROP +-A logdrop-1511 -j TEE --gateway 10.0.0.1 +-A logdrop-1511 -j TEE --gateway 10.0.0.2 +-A logdrop-1511 -j DROP +-A logdrop-1512 -j TEE --gateway 10.0.0.1 +-A logdrop-1512 -j TEE --gateway 10.0.0.2 +-A logdrop-1512 -j DROP +-A logdrop-1513 -j TEE --gateway 10.0.0.1 +-A logdrop-1513 -j TEE --gateway 10.0.0.2 +-A logdrop-1513 -j DROP +-A logdrop-1514 -j TEE --gateway 10.0.0.1 +-A logdrop-1514 -j TEE --gateway 10.0.0.2 +-A logdrop-1514 -j DROP +-A logdrop-1515 -j TEE --gateway 10.0.0.1 +-A logdrop-1515 -j TEE --gateway 10.0.0.2 +-A logdrop-1515 -j DROP +-A logdrop-1516 -j TEE --gateway 10.0.0.1 +-A logdrop-1516 -j TEE --gateway 10.0.0.2 +-A logdrop-1516 -j DROP +-A logdrop-1517 -j TEE --gateway 10.0.0.1 +-A logdrop-1517 -j TEE --gateway 10.0.0.2 +-A logdrop-1517 -j DROP +-A logdrop-1518 -j TEE --gateway 10.0.0.1 +-A logdrop-1518 -j TEE --gateway 10.0.0.2 +-A logdrop-1518 -j DROP +-A logdrop-1519 -j TEE --gateway 10.0.0.1 +-A logdrop-1519 -j TEE --gateway 10.0.0.2 +-A logdrop-1519 -j DROP +-A logdrop-152 -j TEE --gateway 10.0.0.1 +-A logdrop-152 -j TEE --gateway 10.0.0.2 -A logdrop-152 -j DROP --A logdrop-153 -m limit --limit 1/second -j LOG +-A logdrop-1520 -j TEE --gateway 10.0.0.1 +-A logdrop-1520 -j TEE --gateway 10.0.0.2 +-A logdrop-1520 -j DROP +-A logdrop-1521 -j TEE --gateway 10.0.0.1 +-A logdrop-1521 -j TEE --gateway 10.0.0.2 +-A logdrop-1521 -j DROP +-A logdrop-1522 -j TEE --gateway 10.0.0.1 +-A logdrop-1522 -j TEE --gateway 10.0.0.2 +-A logdrop-1522 -j DROP +-A logdrop-1523 -j TEE --gateway 10.0.0.1 +-A logdrop-1523 -j TEE --gateway 10.0.0.2 +-A logdrop-1523 -j DROP +-A logdrop-1524 -j TEE --gateway 10.0.0.1 +-A logdrop-1524 -j TEE --gateway 10.0.0.2 +-A logdrop-1524 -j DROP +-A logdrop-1525 -j TEE --gateway 10.0.0.1 +-A logdrop-1525 -j TEE --gateway 10.0.0.2 +-A logdrop-1525 -j DROP +-A logdrop-1526 -j TEE --gateway 10.0.0.1 +-A logdrop-1526 -j TEE --gateway 10.0.0.2 +-A logdrop-1526 -j DROP +-A logdrop-1527 -j TEE --gateway 10.0.0.1 +-A logdrop-1527 -j TEE --gateway 10.0.0.2 +-A logdrop-1527 -j DROP +-A logdrop-1528 -j TEE --gateway 10.0.0.1 +-A logdrop-1528 -j TEE --gateway 10.0.0.2 +-A logdrop-1528 -j DROP +-A logdrop-1529 -j TEE --gateway 10.0.0.1 +-A logdrop-1529 -j TEE --gateway 10.0.0.2 +-A logdrop-1529 -j DROP +-A logdrop-153 -j TEE --gateway 10.0.0.1 +-A logdrop-153 -j TEE --gateway 10.0.0.2 -A logdrop-153 -j DROP --A logdrop-154 -m limit --limit 1/second -j LOG +-A logdrop-1530 -j TEE --gateway 10.0.0.1 +-A logdrop-1530 -j TEE --gateway 10.0.0.2 +-A logdrop-1530 -j DROP +-A logdrop-1531 -j TEE --gateway 10.0.0.1 +-A logdrop-1531 -j TEE --gateway 10.0.0.2 +-A logdrop-1531 -j DROP +-A logdrop-1532 -j TEE --gateway 10.0.0.1 +-A logdrop-1532 -j TEE --gateway 10.0.0.2 +-A logdrop-1532 -j DROP +-A logdrop-1533 -j TEE --gateway 10.0.0.1 +-A logdrop-1533 -j TEE --gateway 10.0.0.2 +-A logdrop-1533 -j DROP +-A logdrop-1534 -j TEE --gateway 10.0.0.1 +-A logdrop-1534 -j TEE --gateway 10.0.0.2 +-A logdrop-1534 -j DROP +-A logdrop-1535 -j TEE --gateway 10.0.0.1 +-A logdrop-1535 -j TEE --gateway 10.0.0.2 +-A logdrop-1535 -j DROP +-A logdrop-1536 -j TEE --gateway 10.0.0.1 +-A logdrop-1536 -j TEE --gateway 10.0.0.2 +-A logdrop-1536 -j DROP +-A logdrop-1537 -j TEE --gateway 10.0.0.1 +-A logdrop-1537 -j TEE --gateway 10.0.0.2 +-A logdrop-1537 -j DROP +-A logdrop-1538 -j TEE --gateway 10.0.0.1 +-A logdrop-1538 -j TEE --gateway 10.0.0.2 +-A logdrop-1538 -j DROP +-A logdrop-1539 -j TEE --gateway 10.0.0.1 +-A logdrop-1539 -j TEE --gateway 10.0.0.2 +-A logdrop-1539 -j DROP +-A logdrop-154 -j TEE --gateway 10.0.0.1 +-A logdrop-154 -j TEE --gateway 10.0.0.2 -A logdrop-154 -j DROP --A logdrop-155 -m limit --limit 1/second -j LOG +-A logdrop-1540 -j TEE --gateway 10.0.0.1 +-A logdrop-1540 -j TEE --gateway 10.0.0.2 +-A logdrop-1540 -j DROP +-A logdrop-1541 -j TEE --gateway 10.0.0.1 +-A logdrop-1541 -j TEE --gateway 10.0.0.2 +-A logdrop-1541 -j DROP +-A logdrop-1542 -j TEE --gateway 10.0.0.1 +-A logdrop-1542 -j TEE --gateway 10.0.0.2 +-A logdrop-1542 -j DROP +-A logdrop-1543 -j TEE --gateway 10.0.0.1 +-A logdrop-1543 -j TEE --gateway 10.0.0.2 +-A logdrop-1543 -j DROP +-A logdrop-1544 -j TEE --gateway 10.0.0.1 +-A logdrop-1544 -j TEE --gateway 10.0.0.2 +-A logdrop-1544 -j DROP +-A logdrop-1545 -j TEE --gateway 10.0.0.1 +-A logdrop-1545 -j TEE --gateway 10.0.0.2 +-A logdrop-1545 -j DROP +-A logdrop-1546 -j TEE --gateway 10.0.0.1 +-A logdrop-1546 -j TEE --gateway 10.0.0.2 +-A logdrop-1546 -j DROP +-A logdrop-1547 -j TEE --gateway 10.0.0.1 +-A logdrop-1547 -j TEE --gateway 10.0.0.2 +-A logdrop-1547 -j DROP +-A logdrop-1548 -j TEE --gateway 10.0.0.1 +-A logdrop-1548 -j TEE --gateway 10.0.0.2 +-A logdrop-1548 -j DROP +-A logdrop-1549 -j TEE --gateway 10.0.0.1 +-A logdrop-1549 -j TEE --gateway 10.0.0.2 +-A logdrop-1549 -j DROP +-A logdrop-155 -j TEE --gateway 10.0.0.1 +-A logdrop-155 -j TEE --gateway 10.0.0.2 -A logdrop-155 -j DROP --A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-1550 -j TEE --gateway 10.0.0.1 +-A logdrop-1550 -j TEE --gateway 10.0.0.2 +-A logdrop-1550 -j DROP +-A logdrop-1551 -j TEE --gateway 10.0.0.1 +-A logdrop-1551 -j TEE --gateway 10.0.0.2 +-A logdrop-1551 -j DROP +-A logdrop-1552 -j TEE --gateway 10.0.0.1 +-A logdrop-1552 -j TEE --gateway 10.0.0.2 +-A logdrop-1552 -j DROP +-A logdrop-1553 -j TEE --gateway 10.0.0.1 +-A logdrop-1553 -j TEE --gateway 10.0.0.2 +-A logdrop-1553 -j DROP +-A logdrop-1554 -j TEE --gateway 10.0.0.1 +-A logdrop-1554 -j TEE --gateway 10.0.0.2 +-A logdrop-1554 -j DROP +-A logdrop-1555 -j TEE --gateway 10.0.0.1 +-A logdrop-1555 -j TEE --gateway 10.0.0.2 +-A logdrop-1555 -j DROP +-A logdrop-1556 -j TEE --gateway 10.0.0.1 +-A logdrop-1556 -j TEE --gateway 10.0.0.2 +-A logdrop-1556 -j DROP +-A logdrop-1557 -j TEE --gateway 10.0.0.1 +-A logdrop-1557 -j TEE --gateway 10.0.0.2 +-A logdrop-1557 -j DROP +-A logdrop-1558 -j TEE --gateway 10.0.0.1 +-A logdrop-1558 -j TEE --gateway 10.0.0.2 +-A logdrop-1558 -j DROP +-A logdrop-1559 -j TEE --gateway 10.0.0.1 +-A logdrop-1559 -j TEE --gateway 10.0.0.2 +-A logdrop-1559 -j DROP +-A logdrop-156 -j TEE --gateway 10.0.0.1 +-A logdrop-156 -j TEE --gateway 10.0.0.2 -A logdrop-156 -j DROP --A logdrop-157 -m limit --limit 1/second -j LOG +-A logdrop-1560 -m limit --limit 12/minute -j ULOG +-A logdrop-1560 -j DROP +-A logdrop-1561 -m limit --limit 12/minute -j ULOG +-A logdrop-1561 -j DROP +-A logdrop-1562 -m limit --limit 12/minute -j ULOG +-A logdrop-1562 -j DROP +-A logdrop-1563 -m limit --limit 12/minute -j ULOG +-A logdrop-1563 -j DROP +-A logdrop-1564 -m limit --limit 12/minute -j ULOG +-A logdrop-1564 -j DROP +-A logdrop-1565 -m limit --limit 12/minute -j ULOG +-A logdrop-1565 -j DROP +-A logdrop-1566 -m limit --limit 12/minute -j ULOG +-A logdrop-1566 -j DROP +-A logdrop-1567 -m limit --limit 12/minute -j ULOG +-A logdrop-1567 -j DROP +-A logdrop-1568 -m limit --limit 12/minute -j ULOG +-A logdrop-1568 -j DROP +-A logdrop-1569 -m limit --limit 12/minute -j ULOG +-A logdrop-1569 -j DROP +-A logdrop-157 -j TEE --gateway 10.0.0.1 +-A logdrop-157 -j TEE --gateway 10.0.0.2 -A logdrop-157 -j DROP --A logdrop-158 -m limit --limit 1/second -j LOG +-A logdrop-1570 -m limit --limit 12/minute -j ULOG +-A logdrop-1570 -j DROP +-A logdrop-1571 -m limit --limit 12/minute -j ULOG +-A logdrop-1571 -j DROP +-A logdrop-1572 -m limit --limit 12/minute -j ULOG +-A logdrop-1572 -j DROP +-A logdrop-1573 -m limit --limit 12/minute -j ULOG +-A logdrop-1573 -j DROP +-A logdrop-1574 -m limit --limit 12/minute -j ULOG +-A logdrop-1574 -j DROP +-A logdrop-1575 -m limit --limit 12/minute -j ULOG +-A logdrop-1575 -j DROP +-A logdrop-1576 -m limit --limit 12/minute -j ULOG +-A logdrop-1576 -j DROP +-A logdrop-1577 -m limit --limit 12/minute -j ULOG +-A logdrop-1577 -j DROP +-A logdrop-1578 -m limit --limit 12/minute -j ULOG +-A logdrop-1578 -j DROP +-A logdrop-1579 -m limit --limit 12/minute -j ULOG +-A logdrop-1579 -j DROP +-A logdrop-158 -j TEE --gateway 10.0.0.1 +-A logdrop-158 -j TEE --gateway 10.0.0.2 -A logdrop-158 -j DROP --A logdrop-159 -m limit --limit 1/second -j LOG +-A logdrop-1580 -m limit --limit 12/minute -j ULOG +-A logdrop-1580 -j DROP +-A logdrop-1581 -m limit --limit 12/minute -j ULOG +-A logdrop-1581 -j DROP +-A logdrop-1582 -m limit --limit 12/minute -j ULOG +-A logdrop-1582 -j DROP +-A logdrop-1583 -m limit --limit 12/minute -j ULOG +-A logdrop-1583 -j DROP +-A logdrop-1584 -m limit --limit 12/minute -j ULOG +-A logdrop-1584 -j DROP +-A logdrop-1585 -m limit --limit 12/minute -j ULOG +-A logdrop-1585 -j DROP +-A logdrop-1586 -m limit --limit 12/minute -j ULOG +-A logdrop-1586 -j DROP +-A logdrop-1587 -m limit --limit 12/minute -j ULOG +-A logdrop-1587 -j DROP +-A logdrop-1588 -m limit --limit 12/minute -j ULOG +-A logdrop-1588 -j DROP +-A logdrop-1589 -m limit --limit 12/minute -j ULOG +-A logdrop-1589 -j DROP +-A logdrop-159 -j TEE --gateway 10.0.0.1 +-A logdrop-159 -j TEE --gateway 10.0.0.2 -A logdrop-159 -j DROP +-A logdrop-1590 -m limit --limit 12/minute -j ULOG +-A logdrop-1590 -j DROP +-A logdrop-1591 -m limit --limit 12/minute -j ULOG +-A logdrop-1591 -j DROP +-A logdrop-1592 -m limit --limit 12/minute -j ULOG +-A logdrop-1592 -j DROP +-A logdrop-1593 -m limit --limit 12/minute -j ULOG +-A logdrop-1593 -j DROP +-A logdrop-1594 -m limit --limit 12/minute -j ULOG +-A logdrop-1594 -j DROP +-A logdrop-1595 -m limit --limit 12/minute -j ULOG +-A logdrop-1595 -j DROP +-A logdrop-1596 -m limit --limit 12/minute -j ULOG +-A logdrop-1596 -j DROP +-A logdrop-1597 -m limit --limit 12/minute -j ULOG +-A logdrop-1597 -j DROP +-A logdrop-1598 -m limit --limit 12/minute -j ULOG +-A logdrop-1598 -j DROP +-A logdrop-1599 -m limit --limit 12/minute -j ULOG +-A logdrop-1599 -j DROP -A logdrop-16 -m limit --limit 1/second -j LOG -A logdrop-16 -j DROP --A logdrop-160 -m limit --limit 1/second -j LOG +-A logdrop-160 -j TEE --gateway 10.0.0.1 +-A logdrop-160 -j TEE --gateway 10.0.0.2 -A logdrop-160 -j DROP --A logdrop-161 -m limit --limit 1/second -j LOG +-A logdrop-1600 -m limit --limit 12/minute -j ULOG +-A logdrop-1600 -j DROP +-A logdrop-1601 -m limit --limit 12/minute -j ULOG +-A logdrop-1601 -j DROP +-A logdrop-1602 -m limit --limit 12/minute -j ULOG +-A logdrop-1602 -j DROP +-A logdrop-1603 -m limit --limit 12/minute -j ULOG +-A logdrop-1603 -j DROP +-A logdrop-1604 -m limit --limit 12/minute -j ULOG +-A logdrop-1604 -j DROP +-A logdrop-1605 -m limit --limit 12/minute -j ULOG +-A logdrop-1605 -j DROP +-A logdrop-1606 -m limit --limit 12/minute -j ULOG +-A logdrop-1606 -j DROP +-A logdrop-1607 -m limit --limit 12/minute -j ULOG +-A logdrop-1607 -j DROP +-A logdrop-1608 -m limit --limit 12/minute -j ULOG +-A logdrop-1608 -j DROP +-A logdrop-1609 -m limit --limit 12/minute -j ULOG +-A logdrop-1609 -j DROP +-A logdrop-161 -j TEE --gateway 10.0.0.1 +-A logdrop-161 -j TEE --gateway 10.0.0.2 -A logdrop-161 -j DROP --A logdrop-162 -m limit --limit 1/second -j LOG +-A logdrop-1610 -m limit --limit 12/minute -j ULOG +-A logdrop-1610 -j DROP +-A logdrop-1611 -m limit --limit 12/minute -j ULOG +-A logdrop-1611 -j DROP +-A logdrop-1612 -m limit --limit 12/minute -j ULOG +-A logdrop-1612 -j DROP +-A logdrop-1613 -m limit --limit 12/minute -j ULOG +-A logdrop-1613 -j DROP +-A logdrop-1614 -m limit --limit 12/minute -j ULOG +-A logdrop-1614 -j DROP +-A logdrop-1615 -m limit --limit 12/minute -j ULOG +-A logdrop-1615 -j DROP +-A logdrop-1616 -m limit --limit 12/minute -j ULOG +-A logdrop-1616 -j DROP +-A logdrop-1617 -m limit --limit 12/minute -j ULOG +-A logdrop-1617 -j DROP +-A logdrop-1618 -m limit --limit 12/minute -j ULOG +-A logdrop-1618 -j DROP +-A logdrop-1619 -m limit --limit 12/minute -j ULOG +-A logdrop-1619 -j DROP +-A logdrop-162 -j TEE --gateway 10.0.0.1 +-A logdrop-162 -j TEE --gateway 10.0.0.2 -A logdrop-162 -j DROP --A logdrop-163 -m limit --limit 1/second -j LOG +-A logdrop-1620 -m limit --limit 12/minute -j ULOG +-A logdrop-1620 -j DROP +-A logdrop-1621 -m limit --limit 12/minute -j ULOG +-A logdrop-1621 -j DROP +-A logdrop-1622 -m limit --limit 12/minute -j ULOG +-A logdrop-1622 -j DROP +-A logdrop-1623 -m limit --limit 12/minute -j ULOG +-A logdrop-1623 -j DROP +-A logdrop-1624 -m limit --limit 12/minute -j ULOG +-A logdrop-1624 -j DROP +-A logdrop-1625 -m limit --limit 12/minute -j ULOG +-A logdrop-1625 -j DROP +-A logdrop-1626 -m limit --limit 12/minute -j ULOG +-A logdrop-1626 -j DROP +-A logdrop-1627 -m limit --limit 12/minute -j ULOG +-A logdrop-1627 -j DROP +-A logdrop-1628 -m limit --limit 12/minute -j ULOG +-A logdrop-1628 -j DROP +-A logdrop-1629 -m limit --limit 12/minute -j ULOG +-A logdrop-1629 -j DROP +-A logdrop-163 -j TEE --gateway 10.0.0.1 +-A logdrop-163 -j TEE --gateway 10.0.0.2 -A logdrop-163 -j DROP --A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-1630 -m limit --limit 12/minute -j ULOG +-A logdrop-1630 -j DROP +-A logdrop-1631 -m limit --limit 12/minute -j ULOG +-A logdrop-1631 -j DROP +-A logdrop-1632 -m limit --limit 12/minute -j ULOG +-A logdrop-1632 -j DROP +-A logdrop-1633 -m limit --limit 12/minute -j ULOG +-A logdrop-1633 -j DROP +-A logdrop-1634 -m limit --limit 12/minute -j ULOG +-A logdrop-1634 -j DROP +-A logdrop-1635 -m limit --limit 12/minute -j ULOG +-A logdrop-1635 -j DROP +-A logdrop-1636 -m limit --limit 12/minute -j ULOG +-A logdrop-1636 -j DROP +-A logdrop-1637 -m limit --limit 12/minute -j ULOG +-A logdrop-1637 -j DROP +-A logdrop-1638 -m limit --limit 12/minute -j ULOG +-A logdrop-1638 -j DROP +-A logdrop-1639 -m limit --limit 12/minute -j ULOG +-A logdrop-1639 -j DROP +-A logdrop-164 -j TEE --gateway 10.0.0.1 +-A logdrop-164 -j TEE --gateway 10.0.0.2 -A logdrop-164 -j DROP --A logdrop-165 -m limit --limit 1/second -j LOG +-A logdrop-1640 -m limit --limit 12/minute -j ULOG +-A logdrop-1640 -j DROP +-A logdrop-1641 -m limit --limit 12/minute -j ULOG +-A logdrop-1641 -j DROP +-A logdrop-1642 -m limit --limit 12/minute -j ULOG +-A logdrop-1642 -j DROP +-A logdrop-1643 -m limit --limit 12/minute -j ULOG +-A logdrop-1643 -j DROP +-A logdrop-1644 -m limit --limit 12/minute -j ULOG +-A logdrop-1644 -j DROP +-A logdrop-1645 -m limit --limit 12/minute -j ULOG +-A logdrop-1645 -j DROP +-A logdrop-1646 -m limit --limit 12/minute -j ULOG +-A logdrop-1646 -j DROP +-A logdrop-1647 -m limit --limit 12/minute -j ULOG +-A logdrop-1647 -j DROP +-A logdrop-1648 -m limit --limit 12/minute -j ULOG +-A logdrop-1648 -j DROP +-A logdrop-1649 -m limit --limit 12/minute -j ULOG +-A logdrop-1649 -j DROP +-A logdrop-165 -j TEE --gateway 10.0.0.1 +-A logdrop-165 -j TEE --gateway 10.0.0.2 -A logdrop-165 -j DROP --A logdrop-166 -m limit --limit 1/second -j LOG +-A logdrop-1650 -m limit --limit 1/second -j LOG +-A logdrop-1650 -j DROP +-A logdrop-1651 -m limit --limit 1/second -j LOG +-A logdrop-1651 -j DROP +-A logdrop-1652 -m limit --limit 1/second -j LOG +-A logdrop-1652 -j DROP +-A logdrop-1653 -m limit --limit 1/second -j LOG +-A logdrop-1653 -j DROP +-A logdrop-1654 -m limit --limit 1/second -j LOG +-A logdrop-1654 -j DROP +-A logdrop-1655 -m limit --limit 1/second -j LOG +-A logdrop-1655 -j DROP +-A logdrop-1656 -m limit --limit 1/second -j LOG +-A logdrop-1656 -j DROP +-A logdrop-1657 -m limit --limit 1/second -j LOG +-A logdrop-1657 -j DROP +-A logdrop-1658 -m limit --limit 1/second -j LOG +-A logdrop-1658 -j DROP +-A logdrop-1659 -m limit --limit 1/second -j LOG +-A logdrop-1659 -j DROP +-A logdrop-166 -j TEE --gateway 10.0.0.1 +-A logdrop-166 -j TEE --gateway 10.0.0.2 -A logdrop-166 -j DROP --A logdrop-167 -m limit --limit 1/second -j LOG +-A logdrop-1660 -m limit --limit 1/second -j LOG +-A logdrop-1660 -j DROP +-A logdrop-1661 -m limit --limit 1/second -j LOG +-A logdrop-1661 -j DROP +-A logdrop-1662 -m limit --limit 1/second -j LOG +-A logdrop-1662 -j DROP +-A logdrop-1663 -m limit --limit 1/second -j LOG +-A logdrop-1663 -j DROP +-A logdrop-1664 -m limit --limit 1/second -j LOG +-A logdrop-1664 -j DROP +-A logdrop-1665 -m limit --limit 1/second -j LOG +-A logdrop-1665 -j DROP +-A logdrop-1666 -m limit --limit 1/second -j LOG +-A logdrop-1666 -j DROP +-A logdrop-1667 -m limit --limit 1/second -j LOG +-A logdrop-1667 -j DROP +-A logdrop-1668 -m limit --limit 1/second -j LOG +-A logdrop-1668 -j DROP +-A logdrop-1669 -m limit --limit 1/second -j LOG +-A logdrop-1669 -j DROP +-A logdrop-167 -j TEE --gateway 10.0.0.1 +-A logdrop-167 -j TEE --gateway 10.0.0.2 -A logdrop-167 -j DROP --A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-1670 -m limit --limit 1/second -j LOG +-A logdrop-1670 -j DROP +-A logdrop-1671 -m limit --limit 1/second -j LOG +-A logdrop-1671 -j DROP +-A logdrop-1672 -m limit --limit 1/second -j LOG +-A logdrop-1672 -j DROP +-A logdrop-1673 -m limit --limit 1/second -j LOG +-A logdrop-1673 -j DROP +-A logdrop-1674 -m limit --limit 1/second -j LOG +-A logdrop-1674 -j DROP +-A logdrop-1675 -m limit --limit 1/second -j LOG +-A logdrop-1675 -j DROP +-A logdrop-1676 -m limit --limit 1/second -j LOG +-A logdrop-1676 -j DROP +-A logdrop-1677 -m limit --limit 1/second -j LOG +-A logdrop-1677 -j DROP +-A logdrop-1678 -m limit --limit 1/second -j LOG +-A logdrop-1678 -j DROP +-A logdrop-1679 -m limit --limit 1/second -j LOG +-A logdrop-1679 -j DROP +-A logdrop-168 -j TEE --gateway 10.0.0.1 +-A logdrop-168 -j TEE --gateway 10.0.0.2 -A logdrop-168 -j DROP --A logdrop-169 -m limit --limit 1/second -j LOG +-A logdrop-1680 -m limit --limit 1/second -j LOG +-A logdrop-1680 -j DROP +-A logdrop-1681 -m limit --limit 1/second -j LOG +-A logdrop-1681 -j DROP +-A logdrop-1682 -m limit --limit 1/second -j LOG +-A logdrop-1682 -j DROP +-A logdrop-1683 -m limit --limit 1/second -j LOG +-A logdrop-1683 -j DROP +-A logdrop-1684 -m limit --limit 1/second -j LOG +-A logdrop-1684 -j DROP +-A logdrop-1685 -m limit --limit 1/second -j LOG +-A logdrop-1685 -j DROP +-A logdrop-1686 -m limit --limit 1/second -j LOG +-A logdrop-1686 -j DROP +-A logdrop-1687 -m limit --limit 1/second -j LOG +-A logdrop-1687 -j DROP +-A logdrop-1688 -m limit --limit 1/second -j LOG +-A logdrop-1688 -j DROP +-A logdrop-1689 -m limit --limit 1/second -j LOG +-A logdrop-1689 -j DROP +-A logdrop-169 -j TEE --gateway 10.0.0.1 +-A logdrop-169 -j TEE --gateway 10.0.0.2 -A logdrop-169 -j DROP +-A logdrop-1690 -m limit --limit 1/second -j LOG +-A logdrop-1690 -j DROP +-A logdrop-1691 -m limit --limit 1/second -j LOG +-A logdrop-1691 -j DROP +-A logdrop-1692 -m limit --limit 1/second -j LOG +-A logdrop-1692 -j DROP +-A logdrop-1693 -m limit --limit 1/second -j LOG +-A logdrop-1693 -j DROP +-A logdrop-1694 -m limit --limit 1/second -j LOG +-A logdrop-1694 -j DROP +-A logdrop-1695 -m limit --limit 1/second -j LOG +-A logdrop-1695 -j DROP +-A logdrop-1696 -m limit --limit 1/second -j LOG +-A logdrop-1696 -j DROP +-A logdrop-1697 -m limit --limit 1/second -j LOG +-A logdrop-1697 -j DROP +-A logdrop-1698 -m limit --limit 1/second -j LOG +-A logdrop-1698 -j DROP +-A logdrop-1699 -m limit --limit 1/second -j LOG +-A logdrop-1699 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG -A logdrop-17 -j DROP --A logdrop-170 -m limit --limit 1/second -j LOG +-A logdrop-170 -j TEE --gateway 10.0.0.1 +-A logdrop-170 -j TEE --gateway 10.0.0.2 -A logdrop-170 -j DROP --A logdrop-171 -m limit --limit 1/second -j LOG +-A logdrop-1700 -m limit --limit 1/second -j LOG +-A logdrop-1700 -j DROP +-A logdrop-1701 -m limit --limit 1/second -j LOG +-A logdrop-1701 -j DROP +-A logdrop-1702 -m limit --limit 1/second -j LOG +-A logdrop-1702 -j DROP +-A logdrop-1703 -m limit --limit 1/second -j LOG +-A logdrop-1703 -j DROP +-A logdrop-1704 -m limit --limit 1/second -j LOG +-A logdrop-1704 -j DROP +-A logdrop-1705 -m limit --limit 1/second -j LOG +-A logdrop-1705 -j DROP +-A logdrop-1706 -m limit --limit 1/second -j LOG +-A logdrop-1706 -j DROP +-A logdrop-1707 -m limit --limit 1/second -j LOG +-A logdrop-1707 -j DROP +-A logdrop-1708 -m limit --limit 1/second -j LOG +-A logdrop-1708 -j DROP +-A logdrop-1709 -m limit --limit 1/second -j LOG +-A logdrop-1709 -j DROP +-A logdrop-171 -j TEE --gateway 10.0.0.1 +-A logdrop-171 -j TEE --gateway 10.0.0.2 -A logdrop-171 -j DROP --A logdrop-172 -m limit --limit 1/second -j LOG +-A logdrop-1710 -m limit --limit 1/second -j LOG +-A logdrop-1710 -j DROP +-A logdrop-1711 -m limit --limit 1/second -j LOG +-A logdrop-1711 -j DROP +-A logdrop-1712 -m limit --limit 1/second -j LOG +-A logdrop-1712 -j DROP +-A logdrop-1713 -m limit --limit 1/second -j LOG +-A logdrop-1713 -j DROP +-A logdrop-1714 -m limit --limit 1/second -j LOG +-A logdrop-1714 -j DROP +-A logdrop-1715 -m limit --limit 1/second -j LOG +-A logdrop-1715 -j DROP +-A logdrop-1716 -m limit --limit 1/second -j LOG +-A logdrop-1716 -j DROP +-A logdrop-1717 -m limit --limit 1/second -j LOG +-A logdrop-1717 -j DROP +-A logdrop-1718 -m limit --limit 1/second -j LOG +-A logdrop-1718 -j DROP +-A logdrop-1719 -m limit --limit 1/second -j LOG +-A logdrop-1719 -j DROP +-A logdrop-172 -j TEE --gateway 10.0.0.1 +-A logdrop-172 -j TEE --gateway 10.0.0.2 -A logdrop-172 -j DROP --A logdrop-173 -m limit --limit 1/second -j LOG +-A logdrop-1720 -m limit --limit 1/second -j LOG +-A logdrop-1720 -j DROP +-A logdrop-1721 -m limit --limit 1/second -j LOG +-A logdrop-1721 -j DROP +-A logdrop-1722 -m limit --limit 1/second -j LOG +-A logdrop-1722 -j DROP +-A logdrop-1723 -m limit --limit 1/second -j LOG +-A logdrop-1723 -j DROP +-A logdrop-1724 -m limit --limit 1/second -j LOG +-A logdrop-1724 -j DROP +-A logdrop-1725 -m limit --limit 1/second -j LOG +-A logdrop-1725 -j DROP +-A logdrop-1726 -m limit --limit 1/second -j LOG +-A logdrop-1726 -j DROP +-A logdrop-1727 -m limit --limit 1/second -j LOG +-A logdrop-1727 -j DROP +-A logdrop-1728 -m limit --limit 1/second -j LOG +-A logdrop-1728 -j DROP +-A logdrop-1729 -m limit --limit 1/second -j LOG +-A logdrop-1729 -j DROP +-A logdrop-173 -j TEE --gateway 10.0.0.1 +-A logdrop-173 -j TEE --gateway 10.0.0.2 -A logdrop-173 -j DROP --A logdrop-174 -m limit --limit 1/second -j LOG +-A logdrop-1730 -m limit --limit 1/second -j LOG +-A logdrop-1730 -j DROP +-A logdrop-1731 -m limit --limit 1/second -j LOG +-A logdrop-1731 -j DROP +-A logdrop-1732 -m limit --limit 1/second -j LOG +-A logdrop-1732 -j DROP +-A logdrop-1733 -m limit --limit 1/second -j LOG +-A logdrop-1733 -j DROP +-A logdrop-1734 -m limit --limit 1/second -j LOG +-A logdrop-1734 -j DROP +-A logdrop-1735 -m limit --limit 1/second -j LOG +-A logdrop-1735 -j DROP +-A logdrop-1736 -m limit --limit 1/second -j LOG +-A logdrop-1736 -j DROP +-A logdrop-1737 -m limit --limit 1/second -j LOG +-A logdrop-1737 -j DROP +-A logdrop-1738 -m limit --limit 1/second -j LOG +-A logdrop-1738 -j DROP +-A logdrop-1739 -m limit --limit 1/second -j LOG +-A logdrop-1739 -j DROP +-A logdrop-174 -j TEE --gateway 10.0.0.1 +-A logdrop-174 -j TEE --gateway 10.0.0.2 -A logdrop-174 -j DROP --A logdrop-175 -m limit --limit 1/second -j LOG +-A logdrop-1740 -m limit --limit 1/second -j LOG +-A logdrop-1740 -j DROP +-A logdrop-1741 -m limit --limit 1/second -j LOG +-A logdrop-1741 -j DROP +-A logdrop-1742 -m limit --limit 1/second -j LOG +-A logdrop-1742 -j DROP +-A logdrop-1743 -m limit --limit 1/second -j LOG +-A logdrop-1743 -j DROP +-A logdrop-1744 -m limit --limit 1/second -j LOG +-A logdrop-1744 -j DROP +-A logdrop-1745 -m limit --limit 1/second -j LOG +-A logdrop-1745 -j DROP +-A logdrop-1746 -m limit --limit 1/second -j LOG +-A logdrop-1746 -j DROP +-A logdrop-1747 -m limit --limit 1/second -j LOG +-A logdrop-1747 -j DROP +-A logdrop-1748 -m limit --limit 1/second -j LOG +-A logdrop-1748 -j DROP +-A logdrop-1749 -m limit --limit 1/second -j LOG +-A logdrop-1749 -j DROP +-A logdrop-175 -j TEE --gateway 10.0.0.1 +-A logdrop-175 -j TEE --gateway 10.0.0.2 -A logdrop-175 -j DROP --A logdrop-176 -m limit --limit 1/second -j LOG +-A logdrop-1750 -j TEE --gateway 10.0.0.1 +-A logdrop-1750 -j TEE --gateway 10.0.0.2 +-A logdrop-1750 -j DROP +-A logdrop-1751 -j TEE --gateway 10.0.0.1 +-A logdrop-1751 -j TEE --gateway 10.0.0.2 +-A logdrop-1751 -j DROP +-A logdrop-1752 -j TEE --gateway 10.0.0.1 +-A logdrop-1752 -j TEE --gateway 10.0.0.2 +-A logdrop-1752 -j DROP +-A logdrop-1753 -j TEE --gateway 10.0.0.1 +-A logdrop-1753 -j TEE --gateway 10.0.0.2 +-A logdrop-1753 -j DROP +-A logdrop-1754 -j TEE --gateway 10.0.0.1 +-A logdrop-1754 -j TEE --gateway 10.0.0.2 +-A logdrop-1754 -j DROP +-A logdrop-1755 -j TEE --gateway 10.0.0.1 +-A logdrop-1755 -j TEE --gateway 10.0.0.2 +-A logdrop-1755 -j DROP +-A logdrop-1756 -j TEE --gateway 10.0.0.1 +-A logdrop-1756 -j TEE --gateway 10.0.0.2 +-A logdrop-1756 -j DROP +-A logdrop-1757 -j TEE --gateway 10.0.0.1 +-A logdrop-1757 -j TEE --gateway 10.0.0.2 +-A logdrop-1757 -j DROP +-A logdrop-1758 -j TEE --gateway 10.0.0.1 +-A logdrop-1758 -j TEE --gateway 10.0.0.2 +-A logdrop-1758 -j DROP +-A logdrop-1759 -j TEE --gateway 10.0.0.1 +-A logdrop-1759 -j TEE --gateway 10.0.0.2 +-A logdrop-1759 -j DROP +-A logdrop-176 -j TEE --gateway 10.0.0.1 +-A logdrop-176 -j TEE --gateway 10.0.0.2 -A logdrop-176 -j DROP --A logdrop-177 -m limit --limit 1/second -j LOG +-A logdrop-1760 -j TEE --gateway 10.0.0.1 +-A logdrop-1760 -j TEE --gateway 10.0.0.2 +-A logdrop-1760 -j DROP +-A logdrop-1761 -j TEE --gateway 10.0.0.1 +-A logdrop-1761 -j TEE --gateway 10.0.0.2 +-A logdrop-1761 -j DROP +-A logdrop-1762 -j TEE --gateway 10.0.0.1 +-A logdrop-1762 -j TEE --gateway 10.0.0.2 +-A logdrop-1762 -j DROP +-A logdrop-1763 -j TEE --gateway 10.0.0.1 +-A logdrop-1763 -j TEE --gateway 10.0.0.2 +-A logdrop-1763 -j DROP +-A logdrop-1764 -j TEE --gateway 10.0.0.1 +-A logdrop-1764 -j TEE --gateway 10.0.0.2 +-A logdrop-1764 -j DROP +-A logdrop-1765 -j TEE --gateway 10.0.0.1 +-A logdrop-1765 -j TEE --gateway 10.0.0.2 +-A logdrop-1765 -j DROP +-A logdrop-1766 -j TEE --gateway 10.0.0.1 +-A logdrop-1766 -j TEE --gateway 10.0.0.2 +-A logdrop-1766 -j DROP +-A logdrop-1767 -j TEE --gateway 10.0.0.1 +-A logdrop-1767 -j TEE --gateway 10.0.0.2 +-A logdrop-1767 -j DROP +-A logdrop-1768 -j TEE --gateway 10.0.0.1 +-A logdrop-1768 -j TEE --gateway 10.0.0.2 +-A logdrop-1768 -j DROP +-A logdrop-1769 -j TEE --gateway 10.0.0.1 +-A logdrop-1769 -j TEE --gateway 10.0.0.2 +-A logdrop-1769 -j DROP +-A logdrop-177 -j TEE --gateway 10.0.0.1 +-A logdrop-177 -j TEE --gateway 10.0.0.2 -A logdrop-177 -j DROP --A logdrop-178 -m limit --limit 1/second -j LOG +-A logdrop-1770 -j TEE --gateway 10.0.0.1 +-A logdrop-1770 -j TEE --gateway 10.0.0.2 +-A logdrop-1770 -j DROP +-A logdrop-1771 -j TEE --gateway 10.0.0.1 +-A logdrop-1771 -j TEE --gateway 10.0.0.2 +-A logdrop-1771 -j DROP +-A logdrop-1772 -j TEE --gateway 10.0.0.1 +-A logdrop-1772 -j TEE --gateway 10.0.0.2 +-A logdrop-1772 -j DROP +-A logdrop-1773 -j TEE --gateway 10.0.0.1 +-A logdrop-1773 -j TEE --gateway 10.0.0.2 +-A logdrop-1773 -j DROP +-A logdrop-1774 -j TEE --gateway 10.0.0.1 +-A logdrop-1774 -j TEE --gateway 10.0.0.2 +-A logdrop-1774 -j DROP +-A logdrop-1775 -j TEE --gateway 10.0.0.1 +-A logdrop-1775 -j TEE --gateway 10.0.0.2 +-A logdrop-1775 -j DROP +-A logdrop-1776 -j TEE --gateway 10.0.0.1 +-A logdrop-1776 -j TEE --gateway 10.0.0.2 +-A logdrop-1776 -j DROP +-A logdrop-1777 -j TEE --gateway 10.0.0.1 +-A logdrop-1777 -j TEE --gateway 10.0.0.2 +-A logdrop-1777 -j DROP +-A logdrop-1778 -j TEE --gateway 10.0.0.1 +-A logdrop-1778 -j TEE --gateway 10.0.0.2 +-A logdrop-1778 -j DROP +-A logdrop-1779 -j TEE --gateway 10.0.0.1 +-A logdrop-1779 -j TEE --gateway 10.0.0.2 +-A logdrop-1779 -j DROP +-A logdrop-178 -j TEE --gateway 10.0.0.1 +-A logdrop-178 -j TEE --gateway 10.0.0.2 -A logdrop-178 -j DROP --A logdrop-179 -m limit --limit 1/second -j LOG +-A logdrop-1780 -j TEE --gateway 10.0.0.1 +-A logdrop-1780 -j TEE --gateway 10.0.0.2 +-A logdrop-1780 -j DROP +-A logdrop-1781 -j TEE --gateway 10.0.0.1 +-A logdrop-1781 -j TEE --gateway 10.0.0.2 +-A logdrop-1781 -j DROP +-A logdrop-1782 -j TEE --gateway 10.0.0.1 +-A logdrop-1782 -j TEE --gateway 10.0.0.2 +-A logdrop-1782 -j DROP +-A logdrop-1783 -j TEE --gateway 10.0.0.1 +-A logdrop-1783 -j TEE --gateway 10.0.0.2 +-A logdrop-1783 -j DROP +-A logdrop-1784 -j TEE --gateway 10.0.0.1 +-A logdrop-1784 -j TEE --gateway 10.0.0.2 +-A logdrop-1784 -j DROP +-A logdrop-1785 -j TEE --gateway 10.0.0.1 +-A logdrop-1785 -j TEE --gateway 10.0.0.2 +-A logdrop-1785 -j DROP +-A logdrop-1786 -j TEE --gateway 10.0.0.1 +-A logdrop-1786 -j TEE --gateway 10.0.0.2 +-A logdrop-1786 -j DROP +-A logdrop-1787 -j TEE --gateway 10.0.0.1 +-A logdrop-1787 -j TEE --gateway 10.0.0.2 +-A logdrop-1787 -j DROP +-A logdrop-1788 -j TEE --gateway 10.0.0.1 +-A logdrop-1788 -j TEE --gateway 10.0.0.2 +-A logdrop-1788 -j DROP +-A logdrop-1789 -j TEE --gateway 10.0.0.1 +-A logdrop-1789 -j TEE --gateway 10.0.0.2 +-A logdrop-1789 -j DROP +-A logdrop-179 -j TEE --gateway 10.0.0.1 +-A logdrop-179 -j TEE --gateway 10.0.0.2 -A logdrop-179 -j DROP +-A logdrop-1790 -j TEE --gateway 10.0.0.1 +-A logdrop-1790 -j TEE --gateway 10.0.0.2 +-A logdrop-1790 -j DROP +-A logdrop-1791 -j TEE --gateway 10.0.0.1 +-A logdrop-1791 -j TEE --gateway 10.0.0.2 +-A logdrop-1791 -j DROP +-A logdrop-1792 -j TEE --gateway 10.0.0.1 +-A logdrop-1792 -j TEE --gateway 10.0.0.2 +-A logdrop-1792 -j DROP +-A logdrop-1793 -j TEE --gateway 10.0.0.1 +-A logdrop-1793 -j TEE --gateway 10.0.0.2 +-A logdrop-1793 -j DROP +-A logdrop-1794 -j TEE --gateway 10.0.0.1 +-A logdrop-1794 -j TEE --gateway 10.0.0.2 +-A logdrop-1794 -j DROP +-A logdrop-1795 -j TEE --gateway 10.0.0.1 +-A logdrop-1795 -j TEE --gateway 10.0.0.2 +-A logdrop-1795 -j DROP +-A logdrop-1796 -j TEE --gateway 10.0.0.1 +-A logdrop-1796 -j TEE --gateway 10.0.0.2 +-A logdrop-1796 -j DROP +-A logdrop-1797 -j TEE --gateway 10.0.0.1 +-A logdrop-1797 -j TEE --gateway 10.0.0.2 +-A logdrop-1797 -j DROP +-A logdrop-1798 -j TEE --gateway 10.0.0.1 +-A logdrop-1798 -j TEE --gateway 10.0.0.2 +-A logdrop-1798 -j DROP +-A logdrop-1799 -j TEE --gateway 10.0.0.1 +-A logdrop-1799 -j TEE --gateway 10.0.0.2 +-A logdrop-1799 -j DROP -A logdrop-18 -m limit --limit 1/second -j LOG -A logdrop-18 -j DROP --A logdrop-180 -m limit --limit 1/second -j LOG +-A logdrop-180 -j TEE --gateway 10.0.0.1 +-A logdrop-180 -j TEE --gateway 10.0.0.2 -A logdrop-180 -j DROP --A logdrop-181 -m limit --limit 1/second -j LOG +-A logdrop-1800 -j TEE --gateway 10.0.0.1 +-A logdrop-1800 -j TEE --gateway 10.0.0.2 +-A logdrop-1800 -j DROP +-A logdrop-1801 -j TEE --gateway 10.0.0.1 +-A logdrop-1801 -j TEE --gateway 10.0.0.2 +-A logdrop-1801 -j DROP +-A logdrop-1802 -j TEE --gateway 10.0.0.1 +-A logdrop-1802 -j TEE --gateway 10.0.0.2 +-A logdrop-1802 -j DROP +-A logdrop-1803 -j TEE --gateway 10.0.0.1 +-A logdrop-1803 -j TEE --gateway 10.0.0.2 +-A logdrop-1803 -j DROP +-A logdrop-1804 -j TEE --gateway 10.0.0.1 +-A logdrop-1804 -j TEE --gateway 10.0.0.2 +-A logdrop-1804 -j DROP +-A logdrop-1805 -j TEE --gateway 10.0.0.1 +-A logdrop-1805 -j TEE --gateway 10.0.0.2 +-A logdrop-1805 -j DROP +-A logdrop-1806 -j TEE --gateway 10.0.0.1 +-A logdrop-1806 -j TEE --gateway 10.0.0.2 +-A logdrop-1806 -j DROP +-A logdrop-1807 -j TEE --gateway 10.0.0.1 +-A logdrop-1807 -j TEE --gateway 10.0.0.2 +-A logdrop-1807 -j DROP +-A logdrop-1808 -j TEE --gateway 10.0.0.1 +-A logdrop-1808 -j TEE --gateway 10.0.0.2 +-A logdrop-1808 -j DROP +-A logdrop-1809 -j TEE --gateway 10.0.0.1 +-A logdrop-1809 -j TEE --gateway 10.0.0.2 +-A logdrop-1809 -j DROP +-A logdrop-181 -j TEE --gateway 10.0.0.1 +-A logdrop-181 -j TEE --gateway 10.0.0.2 -A logdrop-181 -j DROP --A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-1810 -j TEE --gateway 10.0.0.1 +-A logdrop-1810 -j TEE --gateway 10.0.0.2 +-A logdrop-1810 -j DROP +-A logdrop-1811 -j TEE --gateway 10.0.0.1 +-A logdrop-1811 -j TEE --gateway 10.0.0.2 +-A logdrop-1811 -j DROP +-A logdrop-1812 -j TEE --gateway 10.0.0.1 +-A logdrop-1812 -j TEE --gateway 10.0.0.2 +-A logdrop-1812 -j DROP +-A logdrop-1813 -j TEE --gateway 10.0.0.1 +-A logdrop-1813 -j TEE --gateway 10.0.0.2 +-A logdrop-1813 -j DROP +-A logdrop-1814 -j TEE --gateway 10.0.0.1 +-A logdrop-1814 -j TEE --gateway 10.0.0.2 +-A logdrop-1814 -j DROP +-A logdrop-1815 -j TEE --gateway 10.0.0.1 +-A logdrop-1815 -j TEE --gateway 10.0.0.2 +-A logdrop-1815 -j DROP +-A logdrop-1816 -j TEE --gateway 10.0.0.1 +-A logdrop-1816 -j TEE --gateway 10.0.0.2 +-A logdrop-1816 -j DROP +-A logdrop-1817 -j TEE --gateway 10.0.0.1 +-A logdrop-1817 -j TEE --gateway 10.0.0.2 +-A logdrop-1817 -j DROP +-A logdrop-1818 -j TEE --gateway 10.0.0.1 +-A logdrop-1818 -j TEE --gateway 10.0.0.2 +-A logdrop-1818 -j DROP +-A logdrop-1819 -j TEE --gateway 10.0.0.1 +-A logdrop-1819 -j TEE --gateway 10.0.0.2 +-A logdrop-1819 -j DROP +-A logdrop-182 -j TEE --gateway 10.0.0.1 +-A logdrop-182 -j TEE --gateway 10.0.0.2 -A logdrop-182 -j DROP --A logdrop-183 -m limit --limit 1/second -j LOG +-A logdrop-1820 -j TEE --gateway 10.0.0.1 +-A logdrop-1820 -j TEE --gateway 10.0.0.2 +-A logdrop-1820 -j DROP +-A logdrop-1821 -j TEE --gateway 10.0.0.1 +-A logdrop-1821 -j TEE --gateway 10.0.0.2 +-A logdrop-1821 -j DROP +-A logdrop-1822 -j TEE --gateway 10.0.0.1 +-A logdrop-1822 -j TEE --gateway 10.0.0.2 +-A logdrop-1822 -j DROP +-A logdrop-1823 -j TEE --gateway 10.0.0.1 +-A logdrop-1823 -j TEE --gateway 10.0.0.2 +-A logdrop-1823 -j DROP +-A logdrop-1824 -j TEE --gateway 10.0.0.1 +-A logdrop-1824 -j TEE --gateway 10.0.0.2 +-A logdrop-1824 -j DROP +-A logdrop-1825 -j TEE --gateway 10.0.0.1 +-A logdrop-1825 -j TEE --gateway 10.0.0.2 +-A logdrop-1825 -j DROP +-A logdrop-1826 -j TEE --gateway 10.0.0.1 +-A logdrop-1826 -j TEE --gateway 10.0.0.2 +-A logdrop-1826 -j DROP +-A logdrop-1827 -j TEE --gateway 10.0.0.1 +-A logdrop-1827 -j TEE --gateway 10.0.0.2 +-A logdrop-1827 -j DROP +-A logdrop-1828 -j TEE --gateway 10.0.0.1 +-A logdrop-1828 -j TEE --gateway 10.0.0.2 +-A logdrop-1828 -j DROP +-A logdrop-1829 -j TEE --gateway 10.0.0.1 +-A logdrop-1829 -j TEE --gateway 10.0.0.2 +-A logdrop-1829 -j DROP +-A logdrop-183 -j TEE --gateway 10.0.0.1 +-A logdrop-183 -j TEE --gateway 10.0.0.2 -A logdrop-183 -j DROP --A logdrop-184 -m limit --limit 1/second -j LOG +-A logdrop-1830 -j TEE --gateway 10.0.0.1 +-A logdrop-1830 -j TEE --gateway 10.0.0.2 +-A logdrop-1830 -j DROP +-A logdrop-1831 -j TEE --gateway 10.0.0.1 +-A logdrop-1831 -j TEE --gateway 10.0.0.2 +-A logdrop-1831 -j DROP +-A logdrop-1832 -j TEE --gateway 10.0.0.1 +-A logdrop-1832 -j TEE --gateway 10.0.0.2 +-A logdrop-1832 -j DROP +-A logdrop-1833 -j TEE --gateway 10.0.0.1 +-A logdrop-1833 -j TEE --gateway 10.0.0.2 +-A logdrop-1833 -j DROP +-A logdrop-1834 -j TEE --gateway 10.0.0.1 +-A logdrop-1834 -j TEE --gateway 10.0.0.2 +-A logdrop-1834 -j DROP +-A logdrop-1835 -j TEE --gateway 10.0.0.1 +-A logdrop-1835 -j TEE --gateway 10.0.0.2 +-A logdrop-1835 -j DROP +-A logdrop-1836 -j TEE --gateway 10.0.0.1 +-A logdrop-1836 -j TEE --gateway 10.0.0.2 +-A logdrop-1836 -j DROP +-A logdrop-1837 -j TEE --gateway 10.0.0.1 +-A logdrop-1837 -j TEE --gateway 10.0.0.2 +-A logdrop-1837 -j DROP +-A logdrop-1838 -j TEE --gateway 10.0.0.1 +-A logdrop-1838 -j TEE --gateway 10.0.0.2 +-A logdrop-1838 -j DROP +-A logdrop-1839 -j TEE --gateway 10.0.0.1 +-A logdrop-1839 -j TEE --gateway 10.0.0.2 +-A logdrop-1839 -j DROP +-A logdrop-184 -j TEE --gateway 10.0.0.1 +-A logdrop-184 -j TEE --gateway 10.0.0.2 -A logdrop-184 -j DROP --A logdrop-185 -m limit --limit 1/second -j LOG +-A logdrop-1840 -m limit --limit 12/minute -j ULOG +-A logdrop-1840 -j DROP +-A logdrop-1841 -m limit --limit 12/minute -j ULOG +-A logdrop-1841 -j DROP +-A logdrop-1842 -m limit --limit 12/minute -j ULOG +-A logdrop-1842 -j DROP +-A logdrop-1843 -m limit --limit 12/minute -j ULOG +-A logdrop-1843 -j DROP +-A logdrop-1844 -m limit --limit 12/minute -j ULOG +-A logdrop-1844 -j DROP +-A logdrop-1845 -m limit --limit 12/minute -j ULOG +-A logdrop-1845 -j DROP +-A logdrop-1846 -m limit --limit 12/minute -j ULOG +-A logdrop-1846 -j DROP +-A logdrop-1847 -m limit --limit 12/minute -j ULOG +-A logdrop-1847 -j DROP +-A logdrop-1848 -m limit --limit 12/minute -j ULOG +-A logdrop-1848 -j DROP +-A logdrop-1849 -m limit --limit 12/minute -j ULOG +-A logdrop-1849 -j DROP +-A logdrop-185 -j TEE --gateway 10.0.0.1 +-A logdrop-185 -j TEE --gateway 10.0.0.2 -A logdrop-185 -j DROP --A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-1850 -m limit --limit 12/minute -j ULOG +-A logdrop-1850 -j DROP +-A logdrop-1851 -m limit --limit 12/minute -j ULOG +-A logdrop-1851 -j DROP +-A logdrop-1852 -m limit --limit 12/minute -j ULOG +-A logdrop-1852 -j DROP +-A logdrop-1853 -m limit --limit 12/minute -j ULOG +-A logdrop-1853 -j DROP +-A logdrop-1854 -m limit --limit 12/minute -j ULOG +-A logdrop-1854 -j DROP +-A logdrop-1855 -m limit --limit 12/minute -j ULOG +-A logdrop-1855 -j DROP +-A logdrop-1856 -m limit --limit 12/minute -j ULOG +-A logdrop-1856 -j DROP +-A logdrop-1857 -m limit --limit 12/minute -j ULOG +-A logdrop-1857 -j DROP +-A logdrop-1858 -m limit --limit 12/minute -j ULOG +-A logdrop-1858 -j DROP +-A logdrop-1859 -m limit --limit 12/minute -j ULOG +-A logdrop-1859 -j DROP +-A logdrop-186 -j TEE --gateway 10.0.0.1 +-A logdrop-186 -j TEE --gateway 10.0.0.2 -A logdrop-186 -j DROP --A logdrop-187 -m limit --limit 1/second -j LOG +-A logdrop-1860 -m limit --limit 12/minute -j ULOG +-A logdrop-1860 -j DROP +-A logdrop-1861 -m limit --limit 12/minute -j ULOG +-A logdrop-1861 -j DROP +-A logdrop-1862 -m limit --limit 12/minute -j ULOG +-A logdrop-1862 -j DROP +-A logdrop-1863 -m limit --limit 12/minute -j ULOG +-A logdrop-1863 -j DROP +-A logdrop-1864 -m limit --limit 12/minute -j ULOG +-A logdrop-1864 -j DROP +-A logdrop-1865 -m limit --limit 12/minute -j ULOG +-A logdrop-1865 -j DROP +-A logdrop-1866 -m limit --limit 12/minute -j ULOG +-A logdrop-1866 -j DROP +-A logdrop-1867 -m limit --limit 12/minute -j ULOG +-A logdrop-1867 -j DROP +-A logdrop-1868 -m limit --limit 12/minute -j ULOG +-A logdrop-1868 -j DROP +-A logdrop-1869 -m limit --limit 12/minute -j ULOG +-A logdrop-1869 -j DROP +-A logdrop-187 -j TEE --gateway 10.0.0.1 +-A logdrop-187 -j TEE --gateway 10.0.0.2 -A logdrop-187 -j DROP --A logdrop-188 -m limit --limit 1/second -j LOG +-A logdrop-1870 -m limit --limit 12/minute -j ULOG +-A logdrop-1870 -j DROP +-A logdrop-1871 -m limit --limit 12/minute -j ULOG +-A logdrop-1871 -j DROP +-A logdrop-1872 -m limit --limit 12/minute -j ULOG +-A logdrop-1872 -j DROP +-A logdrop-1873 -m limit --limit 12/minute -j ULOG +-A logdrop-1873 -j DROP +-A logdrop-1874 -m limit --limit 12/minute -j ULOG +-A logdrop-1874 -j DROP +-A logdrop-1875 -m limit --limit 12/minute -j ULOG +-A logdrop-1875 -j DROP +-A logdrop-1876 -m limit --limit 12/minute -j ULOG +-A logdrop-1876 -j DROP +-A logdrop-1877 -m limit --limit 12/minute -j ULOG +-A logdrop-1877 -j DROP +-A logdrop-1878 -m limit --limit 12/minute -j ULOG +-A logdrop-1878 -j DROP +-A logdrop-1879 -m limit --limit 12/minute -j ULOG +-A logdrop-1879 -j DROP +-A logdrop-188 -j TEE --gateway 10.0.0.1 +-A logdrop-188 -j TEE --gateway 10.0.0.2 -A logdrop-188 -j DROP --A logdrop-189 -m limit --limit 1/second -j LOG +-A logdrop-1880 -m limit --limit 12/minute -j ULOG +-A logdrop-1880 -j DROP +-A logdrop-1881 -m limit --limit 12/minute -j ULOG +-A logdrop-1881 -j DROP +-A logdrop-1882 -m limit --limit 12/minute -j ULOG +-A logdrop-1882 -j DROP +-A logdrop-1883 -m limit --limit 12/minute -j ULOG +-A logdrop-1883 -j DROP +-A logdrop-1884 -m limit --limit 12/minute -j ULOG +-A logdrop-1884 -j DROP +-A logdrop-1885 -m limit --limit 12/minute -j ULOG +-A logdrop-1885 -j DROP +-A logdrop-1886 -m limit --limit 12/minute -j ULOG +-A logdrop-1886 -j DROP +-A logdrop-1887 -m limit --limit 12/minute -j ULOG +-A logdrop-1887 -j DROP +-A logdrop-1888 -m limit --limit 12/minute -j ULOG +-A logdrop-1888 -j DROP +-A logdrop-1889 -m limit --limit 12/minute -j ULOG +-A logdrop-1889 -j DROP +-A logdrop-189 -j TEE --gateway 10.0.0.1 +-A logdrop-189 -j TEE --gateway 10.0.0.2 -A logdrop-189 -j DROP +-A logdrop-1890 -m limit --limit 12/minute -j ULOG +-A logdrop-1890 -j DROP +-A logdrop-1891 -m limit --limit 12/minute -j ULOG +-A logdrop-1891 -j DROP +-A logdrop-1892 -m limit --limit 12/minute -j ULOG +-A logdrop-1892 -j DROP +-A logdrop-1893 -m limit --limit 12/minute -j ULOG +-A logdrop-1893 -j DROP +-A logdrop-1894 -m limit --limit 12/minute -j ULOG +-A logdrop-1894 -j DROP +-A logdrop-1895 -m limit --limit 12/minute -j ULOG +-A logdrop-1895 -j DROP +-A logdrop-1896 -m limit --limit 12/minute -j ULOG +-A logdrop-1896 -j DROP +-A logdrop-1897 -m limit --limit 12/minute -j ULOG +-A logdrop-1897 -j DROP +-A logdrop-1898 -m limit --limit 12/minute -j ULOG +-A logdrop-1898 -j DROP +-A logdrop-1899 -m limit --limit 12/minute -j ULOG +-A logdrop-1899 -j DROP -A logdrop-19 -m limit --limit 1/second -j LOG -A logdrop-19 -j DROP --A logdrop-190 -m limit --limit 1/second -j LOG +-A logdrop-190 -m limit --limit 12/minute -j ULOG -A logdrop-190 -j DROP --A logdrop-191 -m limit --limit 1/second -j LOG +-A logdrop-1900 -m limit --limit 12/minute -j ULOG +-A logdrop-1900 -j DROP +-A logdrop-1901 -m limit --limit 12/minute -j ULOG +-A logdrop-1901 -j DROP +-A logdrop-1902 -m limit --limit 12/minute -j ULOG +-A logdrop-1902 -j DROP +-A logdrop-1903 -m limit --limit 12/minute -j ULOG +-A logdrop-1903 -j DROP +-A logdrop-1904 -m limit --limit 12/minute -j ULOG +-A logdrop-1904 -j DROP +-A logdrop-1905 -m limit --limit 12/minute -j ULOG +-A logdrop-1905 -j DROP +-A logdrop-1906 -m limit --limit 12/minute -j ULOG +-A logdrop-1906 -j DROP +-A logdrop-1907 -m limit --limit 12/minute -j ULOG +-A logdrop-1907 -j DROP +-A logdrop-1908 -m limit --limit 12/minute -j ULOG +-A logdrop-1908 -j DROP +-A logdrop-1909 -m limit --limit 12/minute -j ULOG +-A logdrop-1909 -j DROP +-A logdrop-191 -m limit --limit 12/minute -j ULOG -A logdrop-191 -j DROP --A logdrop-192 -m limit --limit 1/second -j LOG +-A logdrop-1910 -m limit --limit 12/minute -j ULOG +-A logdrop-1910 -j DROP +-A logdrop-1911 -m limit --limit 12/minute -j ULOG +-A logdrop-1911 -j DROP +-A logdrop-1912 -m limit --limit 12/minute -j ULOG +-A logdrop-1912 -j DROP +-A logdrop-1913 -m limit --limit 12/minute -j ULOG +-A logdrop-1913 -j DROP +-A logdrop-1914 -m limit --limit 12/minute -j ULOG +-A logdrop-1914 -j DROP +-A logdrop-1915 -m limit --limit 12/minute -j ULOG +-A logdrop-1915 -j DROP +-A logdrop-1916 -m limit --limit 12/minute -j ULOG +-A logdrop-1916 -j DROP +-A logdrop-1917 -m limit --limit 12/minute -j ULOG +-A logdrop-1917 -j DROP +-A logdrop-1918 -m limit --limit 12/minute -j ULOG +-A logdrop-1918 -j DROP +-A logdrop-1919 -m limit --limit 12/minute -j ULOG +-A logdrop-1919 -j DROP +-A logdrop-192 -m limit --limit 12/minute -j ULOG -A logdrop-192 -j DROP --A logdrop-193 -m limit --limit 1/second -j LOG +-A logdrop-1920 -m limit --limit 12/minute -j ULOG +-A logdrop-1920 -j DROP +-A logdrop-1921 -m limit --limit 12/minute -j ULOG +-A logdrop-1921 -j DROP +-A logdrop-1922 -m limit --limit 12/minute -j ULOG +-A logdrop-1922 -j DROP +-A logdrop-1923 -m limit --limit 12/minute -j ULOG +-A logdrop-1923 -j DROP +-A logdrop-1924 -m limit --limit 12/minute -j ULOG +-A logdrop-1924 -j DROP +-A logdrop-1925 -m limit --limit 12/minute -j ULOG +-A logdrop-1925 -j DROP +-A logdrop-1926 -m limit --limit 12/minute -j ULOG +-A logdrop-1926 -j DROP +-A logdrop-1927 -m limit --limit 12/minute -j ULOG +-A logdrop-1927 -j DROP +-A logdrop-1928 -m limit --limit 12/minute -j ULOG +-A logdrop-1928 -j DROP +-A logdrop-1929 -m limit --limit 12/minute -j ULOG +-A logdrop-1929 -j DROP +-A logdrop-193 -m limit --limit 12/minute -j ULOG -A logdrop-193 -j DROP --A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-1930 -m limit --limit 1/second -j LOG +-A logdrop-1930 -j DROP +-A logdrop-1931 -m limit --limit 1/second -j LOG +-A logdrop-1931 -j DROP +-A logdrop-1932 -m limit --limit 1/second -j LOG +-A logdrop-1932 -j DROP +-A logdrop-1933 -m limit --limit 1/second -j LOG +-A logdrop-1933 -j DROP +-A logdrop-1934 -m limit --limit 1/second -j LOG +-A logdrop-1934 -j DROP +-A logdrop-1935 -m limit --limit 1/second -j LOG +-A logdrop-1935 -j DROP +-A logdrop-1936 -m limit --limit 1/second -j LOG +-A logdrop-1936 -j DROP +-A logdrop-1937 -m limit --limit 1/second -j LOG +-A logdrop-1937 -j DROP +-A logdrop-1938 -m limit --limit 1/second -j LOG +-A logdrop-1938 -j DROP +-A logdrop-1939 -m limit --limit 1/second -j LOG +-A logdrop-1939 -j DROP +-A logdrop-194 -m limit --limit 12/minute -j ULOG -A logdrop-194 -j DROP --A logdrop-195 -m limit --limit 1/second -j LOG +-A logdrop-1940 -m limit --limit 1/second -j LOG +-A logdrop-1940 -j DROP +-A logdrop-1941 -m limit --limit 1/second -j LOG +-A logdrop-1941 -j DROP +-A logdrop-1942 -m limit --limit 1/second -j LOG +-A logdrop-1942 -j DROP +-A logdrop-1943 -m limit --limit 1/second -j LOG +-A logdrop-1943 -j DROP +-A logdrop-1944 -m limit --limit 1/second -j LOG +-A logdrop-1944 -j DROP +-A logdrop-1945 -m limit --limit 1/second -j LOG +-A logdrop-1945 -j DROP +-A logdrop-1946 -m limit --limit 1/second -j LOG +-A logdrop-1946 -j DROP +-A logdrop-1947 -m limit --limit 1/second -j LOG +-A logdrop-1947 -j DROP +-A logdrop-1948 -m limit --limit 1/second -j LOG +-A logdrop-1948 -j DROP +-A logdrop-1949 -m limit --limit 1/second -j LOG +-A logdrop-1949 -j DROP +-A logdrop-195 -m limit --limit 12/minute -j ULOG -A logdrop-195 -j DROP --A logdrop-196 -m limit --limit 1/second -j LOG +-A logdrop-1950 -m limit --limit 1/second -j LOG +-A logdrop-1950 -j DROP +-A logdrop-1951 -m limit --limit 1/second -j LOG +-A logdrop-1951 -j DROP +-A logdrop-1952 -m limit --limit 1/second -j LOG +-A logdrop-1952 -j DROP +-A logdrop-1953 -m limit --limit 1/second -j LOG +-A logdrop-1953 -j DROP +-A logdrop-1954 -m limit --limit 1/second -j LOG +-A logdrop-1954 -j DROP +-A logdrop-1955 -m limit --limit 1/second -j LOG +-A logdrop-1955 -j DROP +-A logdrop-1956 -m limit --limit 1/second -j LOG +-A logdrop-1956 -j DROP +-A logdrop-1957 -m limit --limit 1/second -j LOG +-A logdrop-1957 -j DROP +-A logdrop-1958 -m limit --limit 1/second -j LOG +-A logdrop-1958 -j DROP +-A logdrop-1959 -m limit --limit 1/second -j LOG +-A logdrop-1959 -j DROP +-A logdrop-196 -m limit --limit 12/minute -j ULOG -A logdrop-196 -j DROP --A logdrop-197 -m limit --limit 1/second -j LOG +-A logdrop-1960 -m limit --limit 1/second -j LOG +-A logdrop-1960 -j DROP +-A logdrop-1961 -m limit --limit 1/second -j LOG +-A logdrop-1961 -j DROP +-A logdrop-1962 -m limit --limit 1/second -j LOG +-A logdrop-1962 -j DROP +-A logdrop-1963 -m limit --limit 1/second -j LOG +-A logdrop-1963 -j DROP +-A logdrop-1964 -m limit --limit 1/second -j LOG +-A logdrop-1964 -j DROP +-A logdrop-1965 -m limit --limit 1/second -j LOG +-A logdrop-1965 -j DROP +-A logdrop-1966 -m limit --limit 1/second -j LOG +-A logdrop-1966 -j DROP +-A logdrop-1967 -m limit --limit 1/second -j LOG +-A logdrop-1967 -j DROP +-A logdrop-1968 -m limit --limit 1/second -j LOG +-A logdrop-1968 -j DROP +-A logdrop-1969 -m limit --limit 1/second -j LOG +-A logdrop-1969 -j DROP +-A logdrop-197 -m limit --limit 12/minute -j ULOG -A logdrop-197 -j DROP --A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-1970 -m limit --limit 1/second -j LOG +-A logdrop-1970 -j DROP +-A logdrop-1971 -m limit --limit 1/second -j LOG +-A logdrop-1971 -j DROP +-A logdrop-1972 -m limit --limit 1/second -j LOG +-A logdrop-1972 -j DROP +-A logdrop-1973 -m limit --limit 1/second -j LOG +-A logdrop-1973 -j DROP +-A logdrop-1974 -m limit --limit 1/second -j LOG +-A logdrop-1974 -j DROP +-A logdrop-1975 -m limit --limit 1/second -j LOG +-A logdrop-1975 -j DROP +-A logdrop-1976 -m limit --limit 1/second -j LOG +-A logdrop-1976 -j DROP +-A logdrop-1977 -m limit --limit 1/second -j LOG +-A logdrop-1977 -j DROP +-A logdrop-1978 -m limit --limit 1/second -j LOG +-A logdrop-1978 -j DROP +-A logdrop-1979 -m limit --limit 1/second -j LOG +-A logdrop-1979 -j DROP +-A logdrop-198 -m limit --limit 12/minute -j ULOG -A logdrop-198 -j DROP --A logdrop-199 -m limit --limit 1/second -j LOG +-A logdrop-1980 -m limit --limit 1/second -j LOG +-A logdrop-1980 -j DROP +-A logdrop-1981 -m limit --limit 1/second -j LOG +-A logdrop-1981 -j DROP +-A logdrop-1982 -m limit --limit 1/second -j LOG +-A logdrop-1982 -j DROP +-A logdrop-1983 -m limit --limit 1/second -j LOG +-A logdrop-1983 -j DROP +-A logdrop-1984 -m limit --limit 1/second -j LOG +-A logdrop-1984 -j DROP +-A logdrop-1985 -m limit --limit 1/second -j LOG +-A logdrop-1985 -j DROP +-A logdrop-1986 -m limit --limit 1/second -j LOG +-A logdrop-1986 -j DROP +-A logdrop-1987 -m limit --limit 1/second -j LOG +-A logdrop-1987 -j DROP +-A logdrop-1988 -m limit --limit 1/second -j LOG +-A logdrop-1988 -j DROP +-A logdrop-1989 -m limit --limit 1/second -j LOG +-A logdrop-1989 -j DROP +-A logdrop-199 -m limit --limit 12/minute -j ULOG -A logdrop-199 -j DROP +-A logdrop-1990 -m limit --limit 1/second -j LOG +-A logdrop-1990 -j DROP +-A logdrop-1991 -m limit --limit 1/second -j LOG +-A logdrop-1991 -j DROP +-A logdrop-1992 -m limit --limit 1/second -j LOG +-A logdrop-1992 -j DROP +-A logdrop-1993 -m limit --limit 1/second -j LOG +-A logdrop-1993 -j DROP +-A logdrop-1994 -m limit --limit 1/second -j LOG +-A logdrop-1994 -j DROP +-A logdrop-1995 -m limit --limit 1/second -j LOG +-A logdrop-1995 -j DROP +-A logdrop-1996 -m limit --limit 1/second -j LOG +-A logdrop-1996 -j DROP +-A logdrop-1997 -m limit --limit 1/second -j LOG +-A logdrop-1997 -j DROP +-A logdrop-1998 -m limit --limit 1/second -j LOG +-A logdrop-1998 -j DROP +-A logdrop-1999 -m limit --limit 1/second -j LOG +-A logdrop-1999 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-20 -m limit --limit 1/second -j LOG -A logdrop-20 -j DROP --A logdrop-200 -m limit --limit 1/second -j LOG +-A logdrop-200 -m limit --limit 12/minute -j ULOG -A logdrop-200 -j DROP --A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-2000 -m limit --limit 1/second -j LOG +-A logdrop-2000 -j DROP +-A logdrop-2001 -m limit --limit 1/second -j LOG +-A logdrop-2001 -j DROP +-A logdrop-2002 -m limit --limit 1/second -j LOG +-A logdrop-2002 -j DROP +-A logdrop-2003 -m limit --limit 1/second -j LOG +-A logdrop-2003 -j DROP +-A logdrop-2004 -m limit --limit 1/second -j LOG +-A logdrop-2004 -j DROP +-A logdrop-2005 -m limit --limit 1/second -j LOG +-A logdrop-2005 -j DROP +-A logdrop-2006 -m limit --limit 1/second -j LOG +-A logdrop-2006 -j DROP +-A logdrop-2007 -m limit --limit 1/second -j LOG +-A logdrop-2007 -j DROP +-A logdrop-2008 -m limit --limit 1/second -j LOG +-A logdrop-2008 -j DROP +-A logdrop-2009 -m limit --limit 1/second -j LOG +-A logdrop-2009 -j DROP +-A logdrop-201 -m limit --limit 12/minute -j ULOG -A logdrop-201 -j DROP --A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-2010 -m limit --limit 1/second -j LOG +-A logdrop-2010 -j DROP +-A logdrop-2011 -m limit --limit 1/second -j LOG +-A logdrop-2011 -j DROP +-A logdrop-2012 -m limit --limit 1/second -j LOG +-A logdrop-2012 -j DROP +-A logdrop-2013 -m limit --limit 1/second -j LOG +-A logdrop-2013 -j DROP +-A logdrop-2014 -m limit --limit 1/second -j LOG +-A logdrop-2014 -j DROP +-A logdrop-2015 -m limit --limit 1/second -j LOG +-A logdrop-2015 -j DROP +-A logdrop-2016 -m limit --limit 1/second -j LOG +-A logdrop-2016 -j DROP +-A logdrop-2017 -m limit --limit 1/second -j LOG +-A logdrop-2017 -j DROP +-A logdrop-2018 -m limit --limit 1/second -j LOG +-A logdrop-2018 -j DROP +-A logdrop-2019 -m limit --limit 1/second -j LOG +-A logdrop-2019 -j DROP +-A logdrop-202 -m limit --limit 12/minute -j ULOG -A logdrop-202 -j DROP --A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-2020 -j TEE --gateway 10.0.0.1 +-A logdrop-2020 -j TEE --gateway 10.0.0.2 +-A logdrop-2020 -j DROP +-A logdrop-2021 -j TEE --gateway 10.0.0.1 +-A logdrop-2021 -j TEE --gateway 10.0.0.2 +-A logdrop-2021 -j DROP +-A logdrop-2022 -j TEE --gateway 10.0.0.1 +-A logdrop-2022 -j TEE --gateway 10.0.0.2 +-A logdrop-2022 -j DROP +-A logdrop-2023 -j TEE --gateway 10.0.0.1 +-A logdrop-2023 -j TEE --gateway 10.0.0.2 +-A logdrop-2023 -j DROP +-A logdrop-2024 -j TEE --gateway 10.0.0.1 +-A logdrop-2024 -j TEE --gateway 10.0.0.2 +-A logdrop-2024 -j DROP +-A logdrop-2025 -j TEE --gateway 10.0.0.1 +-A logdrop-2025 -j TEE --gateway 10.0.0.2 +-A logdrop-2025 -j DROP +-A logdrop-2026 -j TEE --gateway 10.0.0.1 +-A logdrop-2026 -j TEE --gateway 10.0.0.2 +-A logdrop-2026 -j DROP +-A logdrop-2027 -j TEE --gateway 10.0.0.1 +-A logdrop-2027 -j TEE --gateway 10.0.0.2 +-A logdrop-2027 -j DROP +-A logdrop-2028 -j TEE --gateway 10.0.0.1 +-A logdrop-2028 -j TEE --gateway 10.0.0.2 +-A logdrop-2028 -j DROP +-A logdrop-2029 -j TEE --gateway 10.0.0.1 +-A logdrop-2029 -j TEE --gateway 10.0.0.2 +-A logdrop-2029 -j DROP +-A logdrop-203 -m limit --limit 12/minute -j ULOG -A logdrop-203 -j DROP --A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-2030 -j TEE --gateway 10.0.0.1 +-A logdrop-2030 -j TEE --gateway 10.0.0.2 +-A logdrop-2030 -j DROP +-A logdrop-2031 -j TEE --gateway 10.0.0.1 +-A logdrop-2031 -j TEE --gateway 10.0.0.2 +-A logdrop-2031 -j DROP +-A logdrop-2032 -j TEE --gateway 10.0.0.1 +-A logdrop-2032 -j TEE --gateway 10.0.0.2 +-A logdrop-2032 -j DROP +-A logdrop-2033 -j TEE --gateway 10.0.0.1 +-A logdrop-2033 -j TEE --gateway 10.0.0.2 +-A logdrop-2033 -j DROP +-A logdrop-2034 -j TEE --gateway 10.0.0.1 +-A logdrop-2034 -j TEE --gateway 10.0.0.2 +-A logdrop-2034 -j DROP +-A logdrop-2035 -j TEE --gateway 10.0.0.1 +-A logdrop-2035 -j TEE --gateway 10.0.0.2 +-A logdrop-2035 -j DROP +-A logdrop-2036 -j TEE --gateway 10.0.0.1 +-A logdrop-2036 -j TEE --gateway 10.0.0.2 +-A logdrop-2036 -j DROP +-A logdrop-2037 -j TEE --gateway 10.0.0.1 +-A logdrop-2037 -j TEE --gateway 10.0.0.2 +-A logdrop-2037 -j DROP +-A logdrop-2038 -j TEE --gateway 10.0.0.1 +-A logdrop-2038 -j TEE --gateway 10.0.0.2 +-A logdrop-2038 -j DROP +-A logdrop-2039 -j TEE --gateway 10.0.0.1 +-A logdrop-2039 -j TEE --gateway 10.0.0.2 +-A logdrop-2039 -j DROP +-A logdrop-204 -m limit --limit 12/minute -j ULOG -A logdrop-204 -j DROP --A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-2040 -j TEE --gateway 10.0.0.1 +-A logdrop-2040 -j TEE --gateway 10.0.0.2 +-A logdrop-2040 -j DROP +-A logdrop-2041 -j TEE --gateway 10.0.0.1 +-A logdrop-2041 -j TEE --gateway 10.0.0.2 +-A logdrop-2041 -j DROP +-A logdrop-2042 -j TEE --gateway 10.0.0.1 +-A logdrop-2042 -j TEE --gateway 10.0.0.2 +-A logdrop-2042 -j DROP +-A logdrop-2043 -j TEE --gateway 10.0.0.1 +-A logdrop-2043 -j TEE --gateway 10.0.0.2 +-A logdrop-2043 -j DROP +-A logdrop-2044 -j TEE --gateway 10.0.0.1 +-A logdrop-2044 -j TEE --gateway 10.0.0.2 +-A logdrop-2044 -j DROP +-A logdrop-2045 -j TEE --gateway 10.0.0.1 +-A logdrop-2045 -j TEE --gateway 10.0.0.2 +-A logdrop-2045 -j DROP +-A logdrop-2046 -j TEE --gateway 10.0.0.1 +-A logdrop-2046 -j TEE --gateway 10.0.0.2 +-A logdrop-2046 -j DROP +-A logdrop-2047 -j TEE --gateway 10.0.0.1 +-A logdrop-2047 -j TEE --gateway 10.0.0.2 +-A logdrop-2047 -j DROP +-A logdrop-2048 -j TEE --gateway 10.0.0.1 +-A logdrop-2048 -j TEE --gateway 10.0.0.2 +-A logdrop-2048 -j DROP +-A logdrop-2049 -j TEE --gateway 10.0.0.1 +-A logdrop-2049 -j TEE --gateway 10.0.0.2 +-A logdrop-2049 -j DROP +-A logdrop-205 -m limit --limit 12/minute -j ULOG -A logdrop-205 -j DROP --A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-2050 -j TEE --gateway 10.0.0.1 +-A logdrop-2050 -j TEE --gateway 10.0.0.2 +-A logdrop-2050 -j DROP +-A logdrop-2051 -j TEE --gateway 10.0.0.1 +-A logdrop-2051 -j TEE --gateway 10.0.0.2 +-A logdrop-2051 -j DROP +-A logdrop-2052 -j TEE --gateway 10.0.0.1 +-A logdrop-2052 -j TEE --gateway 10.0.0.2 +-A logdrop-2052 -j DROP +-A logdrop-2053 -j TEE --gateway 10.0.0.1 +-A logdrop-2053 -j TEE --gateway 10.0.0.2 +-A logdrop-2053 -j DROP +-A logdrop-2054 -j TEE --gateway 10.0.0.1 +-A logdrop-2054 -j TEE --gateway 10.0.0.2 +-A logdrop-2054 -j DROP +-A logdrop-2055 -j TEE --gateway 10.0.0.1 +-A logdrop-2055 -j TEE --gateway 10.0.0.2 +-A logdrop-2055 -j DROP +-A logdrop-2056 -j TEE --gateway 10.0.0.1 +-A logdrop-2056 -j TEE --gateway 10.0.0.2 +-A logdrop-2056 -j DROP +-A logdrop-2057 -j TEE --gateway 10.0.0.1 +-A logdrop-2057 -j TEE --gateway 10.0.0.2 +-A logdrop-2057 -j DROP +-A logdrop-2058 -j TEE --gateway 10.0.0.1 +-A logdrop-2058 -j TEE --gateway 10.0.0.2 +-A logdrop-2058 -j DROP +-A logdrop-2059 -j TEE --gateway 10.0.0.1 +-A logdrop-2059 -j TEE --gateway 10.0.0.2 +-A logdrop-2059 -j DROP +-A logdrop-206 -m limit --limit 12/minute -j ULOG -A logdrop-206 -j DROP --A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-2060 -j TEE --gateway 10.0.0.1 +-A logdrop-2060 -j TEE --gateway 10.0.0.2 +-A logdrop-2060 -j DROP +-A logdrop-2061 -j TEE --gateway 10.0.0.1 +-A logdrop-2061 -j TEE --gateway 10.0.0.2 +-A logdrop-2061 -j DROP +-A logdrop-2062 -j TEE --gateway 10.0.0.1 +-A logdrop-2062 -j TEE --gateway 10.0.0.2 +-A logdrop-2062 -j DROP +-A logdrop-2063 -j TEE --gateway 10.0.0.1 +-A logdrop-2063 -j TEE --gateway 10.0.0.2 +-A logdrop-2063 -j DROP +-A logdrop-2064 -j TEE --gateway 10.0.0.1 +-A logdrop-2064 -j TEE --gateway 10.0.0.2 +-A logdrop-2064 -j DROP +-A logdrop-2065 -j TEE --gateway 10.0.0.1 +-A logdrop-2065 -j TEE --gateway 10.0.0.2 +-A logdrop-2065 -j DROP +-A logdrop-2066 -j TEE --gateway 10.0.0.1 +-A logdrop-2066 -j TEE --gateway 10.0.0.2 +-A logdrop-2066 -j DROP +-A logdrop-2067 -j TEE --gateway 10.0.0.1 +-A logdrop-2067 -j TEE --gateway 10.0.0.2 +-A logdrop-2067 -j DROP +-A logdrop-2068 -j TEE --gateway 10.0.0.1 +-A logdrop-2068 -j TEE --gateway 10.0.0.2 +-A logdrop-2068 -j DROP +-A logdrop-2069 -j TEE --gateway 10.0.0.1 +-A logdrop-2069 -j TEE --gateway 10.0.0.2 +-A logdrop-2069 -j DROP +-A logdrop-207 -m limit --limit 12/minute -j ULOG -A logdrop-207 -j DROP --A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-2070 -j TEE --gateway 10.0.0.1 +-A logdrop-2070 -j TEE --gateway 10.0.0.2 +-A logdrop-2070 -j DROP +-A logdrop-2071 -j TEE --gateway 10.0.0.1 +-A logdrop-2071 -j TEE --gateway 10.0.0.2 +-A logdrop-2071 -j DROP +-A logdrop-2072 -j TEE --gateway 10.0.0.1 +-A logdrop-2072 -j TEE --gateway 10.0.0.2 +-A logdrop-2072 -j DROP +-A logdrop-2073 -j TEE --gateway 10.0.0.1 +-A logdrop-2073 -j TEE --gateway 10.0.0.2 +-A logdrop-2073 -j DROP +-A logdrop-2074 -j TEE --gateway 10.0.0.1 +-A logdrop-2074 -j TEE --gateway 10.0.0.2 +-A logdrop-2074 -j DROP +-A logdrop-2075 -j TEE --gateway 10.0.0.1 +-A logdrop-2075 -j TEE --gateway 10.0.0.2 +-A logdrop-2075 -j DROP +-A logdrop-2076 -j TEE --gateway 10.0.0.1 +-A logdrop-2076 -j TEE --gateway 10.0.0.2 +-A logdrop-2076 -j DROP +-A logdrop-2077 -j TEE --gateway 10.0.0.1 +-A logdrop-2077 -j TEE --gateway 10.0.0.2 +-A logdrop-2077 -j DROP +-A logdrop-2078 -j TEE --gateway 10.0.0.1 +-A logdrop-2078 -j TEE --gateway 10.0.0.2 +-A logdrop-2078 -j DROP +-A logdrop-2079 -j TEE --gateway 10.0.0.1 +-A logdrop-2079 -j TEE --gateway 10.0.0.2 +-A logdrop-2079 -j DROP +-A logdrop-208 -m limit --limit 12/minute -j ULOG -A logdrop-208 -j DROP --A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-2080 -j TEE --gateway 10.0.0.1 +-A logdrop-2080 -j TEE --gateway 10.0.0.2 +-A logdrop-2080 -j DROP +-A logdrop-2081 -j TEE --gateway 10.0.0.1 +-A logdrop-2081 -j TEE --gateway 10.0.0.2 +-A logdrop-2081 -j DROP +-A logdrop-2082 -j TEE --gateway 10.0.0.1 +-A logdrop-2082 -j TEE --gateway 10.0.0.2 +-A logdrop-2082 -j DROP +-A logdrop-2083 -j TEE --gateway 10.0.0.1 +-A logdrop-2083 -j TEE --gateway 10.0.0.2 +-A logdrop-2083 -j DROP +-A logdrop-2084 -j TEE --gateway 10.0.0.1 +-A logdrop-2084 -j TEE --gateway 10.0.0.2 +-A logdrop-2084 -j DROP +-A logdrop-2085 -j TEE --gateway 10.0.0.1 +-A logdrop-2085 -j TEE --gateway 10.0.0.2 +-A logdrop-2085 -j DROP +-A logdrop-2086 -j TEE --gateway 10.0.0.1 +-A logdrop-2086 -j TEE --gateway 10.0.0.2 +-A logdrop-2086 -j DROP +-A logdrop-2087 -j TEE --gateway 10.0.0.1 +-A logdrop-2087 -j TEE --gateway 10.0.0.2 +-A logdrop-2087 -j DROP +-A logdrop-2088 -j TEE --gateway 10.0.0.1 +-A logdrop-2088 -j TEE --gateway 10.0.0.2 +-A logdrop-2088 -j DROP +-A logdrop-2089 -j TEE --gateway 10.0.0.1 +-A logdrop-2089 -j TEE --gateway 10.0.0.2 +-A logdrop-2089 -j DROP +-A logdrop-209 -m limit --limit 12/minute -j ULOG -A logdrop-209 -j DROP +-A logdrop-2090 -j TEE --gateway 10.0.0.1 +-A logdrop-2090 -j TEE --gateway 10.0.0.2 +-A logdrop-2090 -j DROP +-A logdrop-2091 -j TEE --gateway 10.0.0.1 +-A logdrop-2091 -j TEE --gateway 10.0.0.2 +-A logdrop-2091 -j DROP +-A logdrop-2092 -j TEE --gateway 10.0.0.1 +-A logdrop-2092 -j TEE --gateway 10.0.0.2 +-A logdrop-2092 -j DROP +-A logdrop-2093 -j TEE --gateway 10.0.0.1 +-A logdrop-2093 -j TEE --gateway 10.0.0.2 +-A logdrop-2093 -j DROP +-A logdrop-2094 -j TEE --gateway 10.0.0.1 +-A logdrop-2094 -j TEE --gateway 10.0.0.2 +-A logdrop-2094 -j DROP +-A logdrop-2095 -j TEE --gateway 10.0.0.1 +-A logdrop-2095 -j TEE --gateway 10.0.0.2 +-A logdrop-2095 -j DROP +-A logdrop-2096 -j TEE --gateway 10.0.0.1 +-A logdrop-2096 -j TEE --gateway 10.0.0.2 +-A logdrop-2096 -j DROP +-A logdrop-2097 -j TEE --gateway 10.0.0.1 +-A logdrop-2097 -j TEE --gateway 10.0.0.2 +-A logdrop-2097 -j DROP +-A logdrop-2098 -j TEE --gateway 10.0.0.1 +-A logdrop-2098 -j TEE --gateway 10.0.0.2 +-A logdrop-2098 -j DROP +-A logdrop-2099 -j TEE --gateway 10.0.0.1 +-A logdrop-2099 -j TEE --gateway 10.0.0.2 +-A logdrop-2099 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP --A logdrop-210 -m limit --limit 1/second -j LOG +-A logdrop-210 -m limit --limit 12/minute -j ULOG -A logdrop-210 -j DROP --A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-2100 -j TEE --gateway 10.0.0.1 +-A logdrop-2100 -j TEE --gateway 10.0.0.2 +-A logdrop-2100 -j DROP +-A logdrop-2101 -j TEE --gateway 10.0.0.1 +-A logdrop-2101 -j TEE --gateway 10.0.0.2 +-A logdrop-2101 -j DROP +-A logdrop-2102 -j TEE --gateway 10.0.0.1 +-A logdrop-2102 -j TEE --gateway 10.0.0.2 +-A logdrop-2102 -j DROP +-A logdrop-2103 -j TEE --gateway 10.0.0.1 +-A logdrop-2103 -j TEE --gateway 10.0.0.2 +-A logdrop-2103 -j DROP +-A logdrop-2104 -j TEE --gateway 10.0.0.1 +-A logdrop-2104 -j TEE --gateway 10.0.0.2 +-A logdrop-2104 -j DROP +-A logdrop-2105 -j TEE --gateway 10.0.0.1 +-A logdrop-2105 -j TEE --gateway 10.0.0.2 +-A logdrop-2105 -j DROP +-A logdrop-2106 -j TEE --gateway 10.0.0.1 +-A logdrop-2106 -j TEE --gateway 10.0.0.2 +-A logdrop-2106 -j DROP +-A logdrop-2107 -j TEE --gateway 10.0.0.1 +-A logdrop-2107 -j TEE --gateway 10.0.0.2 +-A logdrop-2107 -j DROP +-A logdrop-2108 -j TEE --gateway 10.0.0.1 +-A logdrop-2108 -j TEE --gateway 10.0.0.2 +-A logdrop-2108 -j DROP +-A logdrop-2109 -j TEE --gateway 10.0.0.1 +-A logdrop-2109 -j TEE --gateway 10.0.0.2 +-A logdrop-2109 -j DROP +-A logdrop-211 -m limit --limit 12/minute -j ULOG -A logdrop-211 -j DROP --A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-2110 -m limit --limit 12/minute -j ULOG +-A logdrop-2110 -j DROP +-A logdrop-2111 -m limit --limit 12/minute -j ULOG +-A logdrop-2111 -j DROP +-A logdrop-2112 -m limit --limit 12/minute -j ULOG +-A logdrop-2112 -j DROP +-A logdrop-2113 -m limit --limit 12/minute -j ULOG +-A logdrop-2113 -j DROP +-A logdrop-2114 -m limit --limit 12/minute -j ULOG +-A logdrop-2114 -j DROP +-A logdrop-2115 -m limit --limit 12/minute -j ULOG +-A logdrop-2115 -j DROP +-A logdrop-2116 -m limit --limit 12/minute -j ULOG +-A logdrop-2116 -j DROP +-A logdrop-2117 -m limit --limit 12/minute -j ULOG +-A logdrop-2117 -j DROP +-A logdrop-2118 -m limit --limit 12/minute -j ULOG +-A logdrop-2118 -j DROP +-A logdrop-2119 -m limit --limit 12/minute -j ULOG +-A logdrop-2119 -j DROP +-A logdrop-212 -m limit --limit 12/minute -j ULOG -A logdrop-212 -j DROP --A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-2120 -m limit --limit 12/minute -j ULOG +-A logdrop-2120 -j DROP +-A logdrop-2121 -m limit --limit 12/minute -j ULOG +-A logdrop-2121 -j DROP +-A logdrop-2122 -m limit --limit 12/minute -j ULOG +-A logdrop-2122 -j DROP +-A logdrop-2123 -m limit --limit 12/minute -j ULOG +-A logdrop-2123 -j DROP +-A logdrop-2124 -m limit --limit 12/minute -j ULOG +-A logdrop-2124 -j DROP +-A logdrop-2125 -m limit --limit 12/minute -j ULOG +-A logdrop-2125 -j DROP +-A logdrop-2126 -m limit --limit 12/minute -j ULOG +-A logdrop-2126 -j DROP +-A logdrop-2127 -m limit --limit 12/minute -j ULOG +-A logdrop-2127 -j DROP +-A logdrop-2128 -m limit --limit 12/minute -j ULOG +-A logdrop-2128 -j DROP +-A logdrop-2129 -m limit --limit 12/minute -j ULOG +-A logdrop-2129 -j DROP +-A logdrop-213 -m limit --limit 12/minute -j ULOG -A logdrop-213 -j DROP --A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-2130 -m limit --limit 12/minute -j ULOG +-A logdrop-2130 -j DROP +-A logdrop-2131 -m limit --limit 12/minute -j ULOG +-A logdrop-2131 -j DROP +-A logdrop-2132 -m limit --limit 12/minute -j ULOG +-A logdrop-2132 -j DROP +-A logdrop-2133 -m limit --limit 12/minute -j ULOG +-A logdrop-2133 -j DROP +-A logdrop-2134 -m limit --limit 12/minute -j ULOG +-A logdrop-2134 -j DROP +-A logdrop-2135 -m limit --limit 12/minute -j ULOG +-A logdrop-2135 -j DROP +-A logdrop-2136 -m limit --limit 12/minute -j ULOG +-A logdrop-2136 -j DROP +-A logdrop-2137 -m limit --limit 12/minute -j ULOG +-A logdrop-2137 -j DROP +-A logdrop-2138 -m limit --limit 12/minute -j ULOG +-A logdrop-2138 -j DROP +-A logdrop-2139 -m limit --limit 12/minute -j ULOG +-A logdrop-2139 -j DROP +-A logdrop-214 -m limit --limit 12/minute -j ULOG -A logdrop-214 -j DROP --A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-2140 -m limit --limit 12/minute -j ULOG +-A logdrop-2140 -j DROP +-A logdrop-2141 -m limit --limit 12/minute -j ULOG +-A logdrop-2141 -j DROP +-A logdrop-2142 -m limit --limit 12/minute -j ULOG +-A logdrop-2142 -j DROP +-A logdrop-2143 -m limit --limit 12/minute -j ULOG +-A logdrop-2143 -j DROP +-A logdrop-2144 -m limit --limit 12/minute -j ULOG +-A logdrop-2144 -j DROP +-A logdrop-2145 -m limit --limit 12/minute -j ULOG +-A logdrop-2145 -j DROP +-A logdrop-2146 -m limit --limit 12/minute -j ULOG +-A logdrop-2146 -j DROP +-A logdrop-2147 -m limit --limit 12/minute -j ULOG +-A logdrop-2147 -j DROP +-A logdrop-2148 -m limit --limit 12/minute -j ULOG +-A logdrop-2148 -j DROP +-A logdrop-2149 -m limit --limit 12/minute -j ULOG +-A logdrop-2149 -j DROP +-A logdrop-215 -m limit --limit 12/minute -j ULOG -A logdrop-215 -j DROP --A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-2150 -m limit --limit 12/minute -j ULOG +-A logdrop-2150 -j DROP +-A logdrop-2151 -m limit --limit 12/minute -j ULOG +-A logdrop-2151 -j DROP +-A logdrop-2152 -m limit --limit 12/minute -j ULOG +-A logdrop-2152 -j DROP +-A logdrop-2153 -m limit --limit 12/minute -j ULOG +-A logdrop-2153 -j DROP +-A logdrop-2154 -m limit --limit 12/minute -j ULOG +-A logdrop-2154 -j DROP +-A logdrop-2155 -m limit --limit 12/minute -j ULOG +-A logdrop-2155 -j DROP +-A logdrop-2156 -m limit --limit 12/minute -j ULOG +-A logdrop-2156 -j DROP +-A logdrop-2157 -m limit --limit 12/minute -j ULOG +-A logdrop-2157 -j DROP +-A logdrop-2158 -m limit --limit 12/minute -j ULOG +-A logdrop-2158 -j DROP +-A logdrop-2159 -m limit --limit 12/minute -j ULOG +-A logdrop-2159 -j DROP +-A logdrop-216 -m limit --limit 12/minute -j ULOG -A logdrop-216 -j DROP --A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-2160 -m limit --limit 12/minute -j ULOG +-A logdrop-2160 -j DROP +-A logdrop-2161 -m limit --limit 12/minute -j ULOG +-A logdrop-2161 -j DROP +-A logdrop-2162 -m limit --limit 12/minute -j ULOG +-A logdrop-2162 -j DROP +-A logdrop-2163 -m limit --limit 12/minute -j ULOG +-A logdrop-2163 -j DROP +-A logdrop-2164 -m limit --limit 12/minute -j ULOG +-A logdrop-2164 -j DROP +-A logdrop-2165 -m limit --limit 12/minute -j ULOG +-A logdrop-2165 -j DROP +-A logdrop-2166 -m limit --limit 12/minute -j ULOG +-A logdrop-2166 -j DROP +-A logdrop-2167 -m limit --limit 12/minute -j ULOG +-A logdrop-2167 -j DROP +-A logdrop-2168 -m limit --limit 12/minute -j ULOG +-A logdrop-2168 -j DROP +-A logdrop-2169 -m limit --limit 12/minute -j ULOG +-A logdrop-2169 -j DROP +-A logdrop-217 -m limit --limit 12/minute -j ULOG -A logdrop-217 -j DROP --A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-2170 -m limit --limit 12/minute -j ULOG +-A logdrop-2170 -j DROP +-A logdrop-2171 -m limit --limit 12/minute -j ULOG +-A logdrop-2171 -j DROP +-A logdrop-2172 -m limit --limit 12/minute -j ULOG +-A logdrop-2172 -j DROP +-A logdrop-2173 -m limit --limit 12/minute -j ULOG +-A logdrop-2173 -j DROP +-A logdrop-2174 -m limit --limit 12/minute -j ULOG +-A logdrop-2174 -j DROP +-A logdrop-2175 -m limit --limit 12/minute -j ULOG +-A logdrop-2175 -j DROP +-A logdrop-2176 -m limit --limit 12/minute -j ULOG +-A logdrop-2176 -j DROP +-A logdrop-2177 -m limit --limit 12/minute -j ULOG +-A logdrop-2177 -j DROP +-A logdrop-2178 -m limit --limit 12/minute -j ULOG +-A logdrop-2178 -j DROP +-A logdrop-2179 -m limit --limit 12/minute -j ULOG +-A logdrop-2179 -j DROP +-A logdrop-218 -m limit --limit 12/minute -j ULOG -A logdrop-218 -j DROP --A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-2180 -m limit --limit 12/minute -j ULOG +-A logdrop-2180 -j DROP +-A logdrop-2181 -m limit --limit 12/minute -j ULOG +-A logdrop-2181 -j DROP +-A logdrop-2182 -m limit --limit 12/minute -j ULOG +-A logdrop-2182 -j DROP +-A logdrop-2183 -m limit --limit 12/minute -j ULOG +-A logdrop-2183 -j DROP +-A logdrop-2184 -m limit --limit 12/minute -j ULOG +-A logdrop-2184 -j DROP +-A logdrop-2185 -m limit --limit 12/minute -j ULOG +-A logdrop-2185 -j DROP +-A logdrop-2186 -m limit --limit 12/minute -j ULOG +-A logdrop-2186 -j DROP +-A logdrop-2187 -m limit --limit 12/minute -j ULOG +-A logdrop-2187 -j DROP +-A logdrop-2188 -m limit --limit 12/minute -j ULOG +-A logdrop-2188 -j DROP +-A logdrop-2189 -m limit --limit 12/minute -j ULOG +-A logdrop-2189 -j DROP +-A logdrop-219 -m limit --limit 12/minute -j ULOG -A logdrop-219 -j DROP +-A logdrop-2190 -m limit --limit 12/minute -j ULOG +-A logdrop-2190 -j DROP +-A logdrop-2191 -m limit --limit 12/minute -j ULOG +-A logdrop-2191 -j DROP +-A logdrop-2192 -m limit --limit 12/minute -j ULOG +-A logdrop-2192 -j DROP +-A logdrop-2193 -m limit --limit 12/minute -j ULOG +-A logdrop-2193 -j DROP +-A logdrop-2194 -m limit --limit 12/minute -j ULOG +-A logdrop-2194 -j DROP +-A logdrop-2195 -m limit --limit 12/minute -j ULOG +-A logdrop-2195 -j DROP +-A logdrop-2196 -m limit --limit 12/minute -j ULOG +-A logdrop-2196 -j DROP +-A logdrop-2197 -m limit --limit 12/minute -j ULOG +-A logdrop-2197 -j DROP +-A logdrop-2198 -m limit --limit 12/minute -j ULOG +-A logdrop-2198 -j DROP +-A logdrop-2199 -m limit --limit 12/minute -j ULOG +-A logdrop-2199 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP --A logdrop-220 -m limit --limit 1/second -j LOG +-A logdrop-220 -m limit --limit 12/minute -j ULOG -A logdrop-220 -j DROP --A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-2200 -m limit --limit 1/second -j LOG +-A logdrop-2200 -j DROP +-A logdrop-2201 -m limit --limit 1/second -j LOG +-A logdrop-2201 -j DROP +-A logdrop-2202 -j LOG +-A logdrop-2202 -j DROP +-A logdrop-2203 -j TEE --gateway 10.0.0.1 +-A logdrop-2203 -j TEE --gateway 10.0.0.2 +-A logdrop-2203 -j DROP +-A logdrop-2204 -m limit --limit 12/minute -j ULOG +-A logdrop-2204 -j DROP +-A logdrop-221 -m limit --limit 12/minute -j ULOG -A logdrop-221 -j DROP --A logdrop-222 -m limit --limit 1/second -j LOG +-A logdrop-222 -m limit --limit 12/minute -j ULOG -A logdrop-222 -j DROP --A logdrop-223 -m limit --limit 1/second -j LOG +-A logdrop-223 -m limit --limit 12/minute -j ULOG -A logdrop-223 -j DROP -A logdrop-224 -m limit --limit 12/minute -j ULOG -A logdrop-224 -j DROP @@ -51922,39 +88207,39 @@ hash:net family inet -A logdrop-279 -j DROP -A logdrop-28 -m limit --limit 1/second -j LOG -A logdrop-28 -j DROP --A logdrop-280 -m limit --limit 12/minute -j ULOG +-A logdrop-280 -m limit --limit 1/second -j LOG -A logdrop-280 -j DROP --A logdrop-281 -m limit --limit 12/minute -j ULOG +-A logdrop-281 -m limit --limit 1/second -j LOG -A logdrop-281 -j DROP --A logdrop-282 -m limit --limit 12/minute -j ULOG +-A logdrop-282 -m limit --limit 1/second -j LOG -A logdrop-282 -j DROP --A logdrop-283 -m limit --limit 12/minute -j ULOG +-A logdrop-283 -m limit --limit 1/second -j LOG -A logdrop-283 -j DROP --A logdrop-284 -m limit --limit 12/minute -j ULOG +-A logdrop-284 -m limit --limit 1/second -j LOG -A logdrop-284 -j DROP --A logdrop-285 -m limit --limit 12/minute -j ULOG +-A logdrop-285 -m limit --limit 1/second -j LOG -A logdrop-285 -j DROP --A logdrop-286 -m limit --limit 12/minute -j ULOG +-A logdrop-286 -m limit --limit 1/second -j LOG -A logdrop-286 -j DROP --A logdrop-287 -m limit --limit 12/minute -j ULOG +-A logdrop-287 -m limit --limit 1/second -j LOG -A logdrop-287 -j DROP --A logdrop-288 -m limit --limit 12/minute -j ULOG +-A logdrop-288 -m limit --limit 1/second -j LOG -A logdrop-288 -j DROP --A logdrop-289 -m limit --limit 12/minute -j ULOG +-A logdrop-289 -m limit --limit 1/second -j LOG -A logdrop-289 -j DROP -A logdrop-29 -m limit --limit 1/second -j LOG -A logdrop-29 -j DROP --A logdrop-290 -m limit --limit 12/minute -j ULOG +-A logdrop-290 -m limit --limit 1/second -j LOG -A logdrop-290 -j DROP --A logdrop-291 -m limit --limit 12/minute -j ULOG +-A logdrop-291 -m limit --limit 1/second -j LOG -A logdrop-291 -j DROP --A logdrop-292 -m limit --limit 12/minute -j ULOG +-A logdrop-292 -m limit --limit 1/second -j LOG -A logdrop-292 -j DROP --A logdrop-293 -m limit --limit 12/minute -j ULOG +-A logdrop-293 -m limit --limit 1/second -j LOG -A logdrop-293 -j DROP --A logdrop-294 -m limit --limit 12/minute -j ULOG +-A logdrop-294 -m limit --limit 1/second -j LOG -A logdrop-294 -j DROP --A logdrop-295 -m limit --limit 12/minute -j ULOG +-A logdrop-295 -m limit --limit 1/second -j LOG -A logdrop-295 -j DROP -A logdrop-296 -m limit --limit 1/second -j LOG -A logdrop-296 -j DROP @@ -52122,337 +88407,427 @@ hash:net family inet -A logdrop-369 -j DROP -A logdrop-37 -m limit --limit 1/second -j LOG -A logdrop-37 -j DROP --A logdrop-370 -m limit --limit 1/second -j LOG +-A logdrop-370 -j TEE --gateway 10.0.0.1 +-A logdrop-370 -j TEE --gateway 10.0.0.2 -A logdrop-370 -j DROP --A logdrop-371 -m limit --limit 1/second -j LOG +-A logdrop-371 -j TEE --gateway 10.0.0.1 +-A logdrop-371 -j TEE --gateway 10.0.0.2 -A logdrop-371 -j DROP --A logdrop-372 -m limit --limit 1/second -j LOG +-A logdrop-372 -j TEE --gateway 10.0.0.1 +-A logdrop-372 -j TEE --gateway 10.0.0.2 -A logdrop-372 -j DROP --A logdrop-373 -m limit --limit 1/second -j LOG +-A logdrop-373 -j TEE --gateway 10.0.0.1 +-A logdrop-373 -j TEE --gateway 10.0.0.2 -A logdrop-373 -j DROP --A logdrop-374 -m limit --limit 1/second -j LOG +-A logdrop-374 -j TEE --gateway 10.0.0.1 +-A logdrop-374 -j TEE --gateway 10.0.0.2 -A logdrop-374 -j DROP --A logdrop-375 -m limit --limit 1/second -j LOG +-A logdrop-375 -j TEE --gateway 10.0.0.1 +-A logdrop-375 -j TEE --gateway 10.0.0.2 -A logdrop-375 -j DROP --A logdrop-376 -m limit --limit 12/minute -j ULOG +-A logdrop-376 -j TEE --gateway 10.0.0.1 +-A logdrop-376 -j TEE --gateway 10.0.0.2 -A logdrop-376 -j DROP --A logdrop-377 -m limit --limit 12/minute -j ULOG +-A logdrop-377 -j TEE --gateway 10.0.0.1 +-A logdrop-377 -j TEE --gateway 10.0.0.2 -A logdrop-377 -j DROP --A logdrop-378 -m limit --limit 12/minute -j ULOG +-A logdrop-378 -j TEE --gateway 10.0.0.1 +-A logdrop-378 -j TEE --gateway 10.0.0.2 -A logdrop-378 -j DROP --A logdrop-379 -m limit --limit 12/minute -j ULOG +-A logdrop-379 -j TEE --gateway 10.0.0.1 +-A logdrop-379 -j TEE --gateway 10.0.0.2 -A logdrop-379 -j DROP -A logdrop-38 -m limit --limit 1/second -j LOG -A logdrop-38 -j DROP --A logdrop-380 -m limit --limit 12/minute -j ULOG +-A logdrop-380 -j TEE --gateway 10.0.0.1 +-A logdrop-380 -j TEE --gateway 10.0.0.2 -A logdrop-380 -j DROP --A logdrop-381 -m limit --limit 12/minute -j ULOG +-A logdrop-381 -j TEE --gateway 10.0.0.1 +-A logdrop-381 -j TEE --gateway 10.0.0.2 -A logdrop-381 -j DROP --A logdrop-382 -m limit --limit 12/minute -j ULOG +-A logdrop-382 -j TEE --gateway 10.0.0.1 +-A logdrop-382 -j TEE --gateway 10.0.0.2 -A logdrop-382 -j DROP --A logdrop-383 -m limit --limit 12/minute -j ULOG +-A logdrop-383 -j TEE --gateway 10.0.0.1 +-A logdrop-383 -j TEE --gateway 10.0.0.2 -A logdrop-383 -j DROP --A logdrop-384 -m limit --limit 12/minute -j ULOG +-A logdrop-384 -j TEE --gateway 10.0.0.1 +-A logdrop-384 -j TEE --gateway 10.0.0.2 -A logdrop-384 -j DROP --A logdrop-385 -m limit --limit 12/minute -j ULOG +-A logdrop-385 -j TEE --gateway 10.0.0.1 +-A logdrop-385 -j TEE --gateway 10.0.0.2 -A logdrop-385 -j DROP --A logdrop-386 -m limit --limit 12/minute -j ULOG +-A logdrop-386 -j TEE --gateway 10.0.0.1 +-A logdrop-386 -j TEE --gateway 10.0.0.2 -A logdrop-386 -j DROP --A logdrop-387 -m limit --limit 12/minute -j ULOG +-A logdrop-387 -j TEE --gateway 10.0.0.1 +-A logdrop-387 -j TEE --gateway 10.0.0.2 -A logdrop-387 -j DROP --A logdrop-388 -m limit --limit 12/minute -j ULOG +-A logdrop-388 -j TEE --gateway 10.0.0.1 +-A logdrop-388 -j TEE --gateway 10.0.0.2 -A logdrop-388 -j DROP --A logdrop-389 -m limit --limit 12/minute -j ULOG +-A logdrop-389 -j TEE --gateway 10.0.0.1 +-A logdrop-389 -j TEE --gateway 10.0.0.2 -A logdrop-389 -j DROP -A logdrop-39 -m limit --limit 1/second -j LOG -A logdrop-39 -j DROP --A logdrop-390 -m limit --limit 12/minute -j ULOG +-A logdrop-390 -j TEE --gateway 10.0.0.1 +-A logdrop-390 -j TEE --gateway 10.0.0.2 -A logdrop-390 -j DROP --A logdrop-391 -m limit --limit 12/minute -j ULOG +-A logdrop-391 -j TEE --gateway 10.0.0.1 +-A logdrop-391 -j TEE --gateway 10.0.0.2 -A logdrop-391 -j DROP --A logdrop-392 -m limit --limit 12/minute -j ULOG +-A logdrop-392 -j TEE --gateway 10.0.0.1 +-A logdrop-392 -j TEE --gateway 10.0.0.2 -A logdrop-392 -j DROP --A logdrop-393 -m limit --limit 12/minute -j ULOG +-A logdrop-393 -j TEE --gateway 10.0.0.1 +-A logdrop-393 -j TEE --gateway 10.0.0.2 -A logdrop-393 -j DROP --A logdrop-394 -m limit --limit 12/minute -j ULOG +-A logdrop-394 -j TEE --gateway 10.0.0.1 +-A logdrop-394 -j TEE --gateway 10.0.0.2 -A logdrop-394 -j DROP --A logdrop-395 -m limit --limit 12/minute -j ULOG +-A logdrop-395 -j TEE --gateway 10.0.0.1 +-A logdrop-395 -j TEE --gateway 10.0.0.2 -A logdrop-395 -j DROP --A logdrop-396 -m limit --limit 12/minute -j ULOG +-A logdrop-396 -j TEE --gateway 10.0.0.1 +-A logdrop-396 -j TEE --gateway 10.0.0.2 -A logdrop-396 -j DROP --A logdrop-397 -m limit --limit 12/minute -j ULOG +-A logdrop-397 -j TEE --gateway 10.0.0.1 +-A logdrop-397 -j TEE --gateway 10.0.0.2 -A logdrop-397 -j DROP --A logdrop-398 -m limit --limit 12/minute -j ULOG +-A logdrop-398 -j TEE --gateway 10.0.0.1 +-A logdrop-398 -j TEE --gateway 10.0.0.2 -A logdrop-398 -j DROP --A logdrop-399 -m limit --limit 12/minute -j ULOG +-A logdrop-399 -j TEE --gateway 10.0.0.1 +-A logdrop-399 -j TEE --gateway 10.0.0.2 -A logdrop-399 -j DROP -A logdrop-4 -m limit --limit 1/second -j LOG -A logdrop-4 -j DROP -A logdrop-40 -m limit --limit 1/second -j LOG -A logdrop-40 -j DROP --A logdrop-400 -m limit --limit 12/minute -j ULOG +-A logdrop-400 -j TEE --gateway 10.0.0.1 +-A logdrop-400 -j TEE --gateway 10.0.0.2 -A logdrop-400 -j DROP --A logdrop-401 -m limit --limit 12/minute -j ULOG +-A logdrop-401 -j TEE --gateway 10.0.0.1 +-A logdrop-401 -j TEE --gateway 10.0.0.2 -A logdrop-401 -j DROP --A logdrop-402 -m limit --limit 12/minute -j ULOG +-A logdrop-402 -j TEE --gateway 10.0.0.1 +-A logdrop-402 -j TEE --gateway 10.0.0.2 -A logdrop-402 -j DROP --A logdrop-403 -m limit --limit 12/minute -j ULOG +-A logdrop-403 -j TEE --gateway 10.0.0.1 +-A logdrop-403 -j TEE --gateway 10.0.0.2 -A logdrop-403 -j DROP --A logdrop-404 -m limit --limit 12/minute -j ULOG +-A logdrop-404 -j TEE --gateway 10.0.0.1 +-A logdrop-404 -j TEE --gateway 10.0.0.2 -A logdrop-404 -j DROP --A logdrop-405 -m limit --limit 12/minute -j ULOG +-A logdrop-405 -j TEE --gateway 10.0.0.1 +-A logdrop-405 -j TEE --gateway 10.0.0.2 -A logdrop-405 -j DROP --A logdrop-406 -m limit --limit 12/minute -j ULOG +-A logdrop-406 -j TEE --gateway 10.0.0.1 +-A logdrop-406 -j TEE --gateway 10.0.0.2 -A logdrop-406 -j DROP --A logdrop-407 -m limit --limit 12/minute -j ULOG +-A logdrop-407 -j TEE --gateway 10.0.0.1 +-A logdrop-407 -j TEE --gateway 10.0.0.2 -A logdrop-407 -j DROP --A logdrop-408 -m limit --limit 12/minute -j ULOG +-A logdrop-408 -j TEE --gateway 10.0.0.1 +-A logdrop-408 -j TEE --gateway 10.0.0.2 -A logdrop-408 -j DROP --A logdrop-409 -m limit --limit 12/minute -j ULOG +-A logdrop-409 -j TEE --gateway 10.0.0.1 +-A logdrop-409 -j TEE --gateway 10.0.0.2 -A logdrop-409 -j DROP -A logdrop-41 -m limit --limit 1/second -j LOG -A logdrop-41 -j DROP --A logdrop-410 -m limit --limit 12/minute -j ULOG +-A logdrop-410 -j TEE --gateway 10.0.0.1 +-A logdrop-410 -j TEE --gateway 10.0.0.2 -A logdrop-410 -j DROP --A logdrop-411 -m limit --limit 12/minute -j ULOG +-A logdrop-411 -j TEE --gateway 10.0.0.1 +-A logdrop-411 -j TEE --gateway 10.0.0.2 -A logdrop-411 -j DROP --A logdrop-412 -m limit --limit 12/minute -j ULOG +-A logdrop-412 -j TEE --gateway 10.0.0.1 +-A logdrop-412 -j TEE --gateway 10.0.0.2 -A logdrop-412 -j DROP --A logdrop-413 -m limit --limit 12/minute -j ULOG +-A logdrop-413 -j TEE --gateway 10.0.0.1 +-A logdrop-413 -j TEE --gateway 10.0.0.2 -A logdrop-413 -j DROP --A logdrop-414 -m limit --limit 12/minute -j ULOG +-A logdrop-414 -j TEE --gateway 10.0.0.1 +-A logdrop-414 -j TEE --gateway 10.0.0.2 -A logdrop-414 -j DROP --A logdrop-415 -m limit --limit 12/minute -j ULOG +-A logdrop-415 -j TEE --gateway 10.0.0.1 +-A logdrop-415 -j TEE --gateway 10.0.0.2 -A logdrop-415 -j DROP --A logdrop-416 -m limit --limit 12/minute -j ULOG +-A logdrop-416 -j TEE --gateway 10.0.0.1 +-A logdrop-416 -j TEE --gateway 10.0.0.2 -A logdrop-416 -j DROP --A logdrop-417 -m limit --limit 12/minute -j ULOG +-A logdrop-417 -j TEE --gateway 10.0.0.1 +-A logdrop-417 -j TEE --gateway 10.0.0.2 -A logdrop-417 -j DROP --A logdrop-418 -m limit --limit 12/minute -j ULOG +-A logdrop-418 -j TEE --gateway 10.0.0.1 +-A logdrop-418 -j TEE --gateway 10.0.0.2 -A logdrop-418 -j DROP --A logdrop-419 -m limit --limit 12/minute -j ULOG +-A logdrop-419 -j TEE --gateway 10.0.0.1 +-A logdrop-419 -j TEE --gateway 10.0.0.2 -A logdrop-419 -j DROP -A logdrop-42 -m limit --limit 1/second -j LOG -A logdrop-42 -j DROP --A logdrop-420 -m limit --limit 12/minute -j ULOG +-A logdrop-420 -j TEE --gateway 10.0.0.1 +-A logdrop-420 -j TEE --gateway 10.0.0.2 -A logdrop-420 -j DROP --A logdrop-421 -m limit --limit 12/minute -j ULOG +-A logdrop-421 -j TEE --gateway 10.0.0.1 +-A logdrop-421 -j TEE --gateway 10.0.0.2 -A logdrop-421 -j DROP --A logdrop-422 -m limit --limit 12/minute -j ULOG +-A logdrop-422 -j TEE --gateway 10.0.0.1 +-A logdrop-422 -j TEE --gateway 10.0.0.2 -A logdrop-422 -j DROP --A logdrop-423 -m limit --limit 12/minute -j ULOG +-A logdrop-423 -j TEE --gateway 10.0.0.1 +-A logdrop-423 -j TEE --gateway 10.0.0.2 -A logdrop-423 -j DROP --A logdrop-424 -m limit --limit 12/minute -j ULOG +-A logdrop-424 -j TEE --gateway 10.0.0.1 +-A logdrop-424 -j TEE --gateway 10.0.0.2 -A logdrop-424 -j DROP --A logdrop-425 -m limit --limit 12/minute -j ULOG +-A logdrop-425 -j TEE --gateway 10.0.0.1 +-A logdrop-425 -j TEE --gateway 10.0.0.2 -A logdrop-425 -j DROP --A logdrop-426 -m limit --limit 12/minute -j ULOG +-A logdrop-426 -j TEE --gateway 10.0.0.1 +-A logdrop-426 -j TEE --gateway 10.0.0.2 -A logdrop-426 -j DROP --A logdrop-427 -m limit --limit 12/minute -j ULOG +-A logdrop-427 -j TEE --gateway 10.0.0.1 +-A logdrop-427 -j TEE --gateway 10.0.0.2 -A logdrop-427 -j DROP --A logdrop-428 -m limit --limit 12/minute -j ULOG +-A logdrop-428 -j TEE --gateway 10.0.0.1 +-A logdrop-428 -j TEE --gateway 10.0.0.2 -A logdrop-428 -j DROP --A logdrop-429 -m limit --limit 12/minute -j ULOG +-A logdrop-429 -j TEE --gateway 10.0.0.1 +-A logdrop-429 -j TEE --gateway 10.0.0.2 -A logdrop-429 -j DROP -A logdrop-43 -m limit --limit 1/second -j LOG -A logdrop-43 -j DROP --A logdrop-430 -m limit --limit 12/minute -j ULOG +-A logdrop-430 -j TEE --gateway 10.0.0.1 +-A logdrop-430 -j TEE --gateway 10.0.0.2 -A logdrop-430 -j DROP --A logdrop-431 -m limit --limit 12/minute -j ULOG +-A logdrop-431 -j TEE --gateway 10.0.0.1 +-A logdrop-431 -j TEE --gateway 10.0.0.2 -A logdrop-431 -j DROP --A logdrop-432 -m limit --limit 12/minute -j ULOG +-A logdrop-432 -j TEE --gateway 10.0.0.1 +-A logdrop-432 -j TEE --gateway 10.0.0.2 -A logdrop-432 -j DROP --A logdrop-433 -m limit --limit 12/minute -j ULOG +-A logdrop-433 -j TEE --gateway 10.0.0.1 +-A logdrop-433 -j TEE --gateway 10.0.0.2 -A logdrop-433 -j DROP --A logdrop-434 -m limit --limit 12/minute -j ULOG +-A logdrop-434 -j TEE --gateway 10.0.0.1 +-A logdrop-434 -j TEE --gateway 10.0.0.2 -A logdrop-434 -j DROP --A logdrop-435 -m limit --limit 12/minute -j ULOG +-A logdrop-435 -j TEE --gateway 10.0.0.1 +-A logdrop-435 -j TEE --gateway 10.0.0.2 -A logdrop-435 -j DROP --A logdrop-436 -m limit --limit 12/minute -j ULOG +-A logdrop-436 -j TEE --gateway 10.0.0.1 +-A logdrop-436 -j TEE --gateway 10.0.0.2 -A logdrop-436 -j DROP --A logdrop-437 -m limit --limit 12/minute -j ULOG +-A logdrop-437 -j TEE --gateway 10.0.0.1 +-A logdrop-437 -j TEE --gateway 10.0.0.2 -A logdrop-437 -j DROP --A logdrop-438 -m limit --limit 12/minute -j ULOG +-A logdrop-438 -j TEE --gateway 10.0.0.1 +-A logdrop-438 -j TEE --gateway 10.0.0.2 -A logdrop-438 -j DROP --A logdrop-439 -m limit --limit 12/minute -j ULOG +-A logdrop-439 -j TEE --gateway 10.0.0.1 +-A logdrop-439 -j TEE --gateway 10.0.0.2 -A logdrop-439 -j DROP -A logdrop-44 -m limit --limit 1/second -j LOG -A logdrop-44 -j DROP --A logdrop-440 -m limit --limit 12/minute -j ULOG +-A logdrop-440 -j TEE --gateway 10.0.0.1 +-A logdrop-440 -j TEE --gateway 10.0.0.2 -A logdrop-440 -j DROP --A logdrop-441 -m limit --limit 12/minute -j ULOG +-A logdrop-441 -j TEE --gateway 10.0.0.1 +-A logdrop-441 -j TEE --gateway 10.0.0.2 -A logdrop-441 -j DROP --A logdrop-442 -m limit --limit 12/minute -j ULOG +-A logdrop-442 -j TEE --gateway 10.0.0.1 +-A logdrop-442 -j TEE --gateway 10.0.0.2 -A logdrop-442 -j DROP --A logdrop-443 -m limit --limit 12/minute -j ULOG +-A logdrop-443 -j TEE --gateway 10.0.0.1 +-A logdrop-443 -j TEE --gateway 10.0.0.2 -A logdrop-443 -j DROP --A logdrop-444 -m limit --limit 12/minute -j ULOG +-A logdrop-444 -j TEE --gateway 10.0.0.1 +-A logdrop-444 -j TEE --gateway 10.0.0.2 -A logdrop-444 -j DROP --A logdrop-445 -m limit --limit 12/minute -j ULOG +-A logdrop-445 -j TEE --gateway 10.0.0.1 +-A logdrop-445 -j TEE --gateway 10.0.0.2 -A logdrop-445 -j DROP --A logdrop-446 -m limit --limit 12/minute -j ULOG +-A logdrop-446 -j TEE --gateway 10.0.0.1 +-A logdrop-446 -j TEE --gateway 10.0.0.2 -A logdrop-446 -j DROP --A logdrop-447 -m limit --limit 12/minute -j ULOG +-A logdrop-447 -j TEE --gateway 10.0.0.1 +-A logdrop-447 -j TEE --gateway 10.0.0.2 -A logdrop-447 -j DROP --A logdrop-448 -m limit --limit 1/second -j LOG +-A logdrop-448 -j TEE --gateway 10.0.0.1 +-A logdrop-448 -j TEE --gateway 10.0.0.2 -A logdrop-448 -j DROP --A logdrop-449 -m limit --limit 1/second -j LOG +-A logdrop-449 -j TEE --gateway 10.0.0.1 +-A logdrop-449 -j TEE --gateway 10.0.0.2 -A logdrop-449 -j DROP -A logdrop-45 -m limit --limit 1/second -j LOG -A logdrop-45 -j DROP --A logdrop-450 -m limit --limit 1/second -j LOG +-A logdrop-450 -j TEE --gateway 10.0.0.1 +-A logdrop-450 -j TEE --gateway 10.0.0.2 -A logdrop-450 -j DROP --A logdrop-451 -m limit --limit 1/second -j LOG +-A logdrop-451 -j TEE --gateway 10.0.0.1 +-A logdrop-451 -j TEE --gateway 10.0.0.2 -A logdrop-451 -j DROP --A logdrop-452 -m limit --limit 1/second -j LOG +-A logdrop-452 -j TEE --gateway 10.0.0.1 +-A logdrop-452 -j TEE --gateway 10.0.0.2 -A logdrop-452 -j DROP --A logdrop-453 -m limit --limit 1/second -j LOG +-A logdrop-453 -j TEE --gateway 10.0.0.1 +-A logdrop-453 -j TEE --gateway 10.0.0.2 -A logdrop-453 -j DROP --A logdrop-454 -m limit --limit 1/second -j LOG +-A logdrop-454 -j TEE --gateway 10.0.0.1 +-A logdrop-454 -j TEE --gateway 10.0.0.2 -A logdrop-454 -j DROP --A logdrop-455 -m limit --limit 1/second -j LOG +-A logdrop-455 -j TEE --gateway 10.0.0.1 +-A logdrop-455 -j TEE --gateway 10.0.0.2 -A logdrop-455 -j DROP --A logdrop-456 -m limit --limit 1/second -j LOG +-A logdrop-456 -j TEE --gateway 10.0.0.1 +-A logdrop-456 -j TEE --gateway 10.0.0.2 -A logdrop-456 -j DROP --A logdrop-457 -m limit --limit 1/second -j LOG +-A logdrop-457 -j TEE --gateway 10.0.0.1 +-A logdrop-457 -j TEE --gateway 10.0.0.2 -A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG +-A logdrop-458 -j TEE --gateway 10.0.0.1 +-A logdrop-458 -j TEE --gateway 10.0.0.2 -A logdrop-458 -j DROP --A logdrop-459 -m limit --limit 1/second -j LOG +-A logdrop-459 -j TEE --gateway 10.0.0.1 +-A logdrop-459 -j TEE --gateway 10.0.0.2 -A logdrop-459 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP --A logdrop-460 -m limit --limit 1/second -j LOG +-A logdrop-460 -m limit --limit 12/minute -j ULOG -A logdrop-460 -j DROP --A logdrop-461 -m limit --limit 1/second -j LOG +-A logdrop-461 -m limit --limit 12/minute -j ULOG -A logdrop-461 -j DROP --A logdrop-462 -m limit --limit 1/second -j LOG +-A logdrop-462 -m limit --limit 12/minute -j ULOG -A logdrop-462 -j DROP --A logdrop-463 -m limit --limit 1/second -j LOG +-A logdrop-463 -m limit --limit 12/minute -j ULOG -A logdrop-463 -j DROP --A logdrop-464 -m limit --limit 1/second -j LOG +-A logdrop-464 -m limit --limit 12/minute -j ULOG -A logdrop-464 -j DROP --A logdrop-465 -m limit --limit 1/second -j LOG +-A logdrop-465 -m limit --limit 12/minute -j ULOG -A logdrop-465 -j DROP --A logdrop-466 -m limit --limit 1/second -j LOG +-A logdrop-466 -m limit --limit 12/minute -j ULOG -A logdrop-466 -j DROP --A logdrop-467 -m limit --limit 1/second -j LOG +-A logdrop-467 -m limit --limit 12/minute -j ULOG -A logdrop-467 -j DROP --A logdrop-468 -m limit --limit 1/second -j LOG +-A logdrop-468 -m limit --limit 12/minute -j ULOG -A logdrop-468 -j DROP --A logdrop-469 -m limit --limit 1/second -j LOG +-A logdrop-469 -m limit --limit 12/minute -j ULOG -A logdrop-469 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG -A logdrop-47 -j DROP --A logdrop-470 -m limit --limit 1/second -j LOG +-A logdrop-470 -m limit --limit 12/minute -j ULOG -A logdrop-470 -j DROP --A logdrop-471 -m limit --limit 1/second -j LOG +-A logdrop-471 -m limit --limit 12/minute -j ULOG -A logdrop-471 -j DROP --A logdrop-472 -m limit --limit 1/second -j LOG +-A logdrop-472 -m limit --limit 12/minute -j ULOG -A logdrop-472 -j DROP --A logdrop-473 -m limit --limit 1/second -j LOG +-A logdrop-473 -m limit --limit 12/minute -j ULOG -A logdrop-473 -j DROP --A logdrop-474 -m limit --limit 1/second -j LOG +-A logdrop-474 -m limit --limit 12/minute -j ULOG -A logdrop-474 -j DROP --A logdrop-475 -m limit --limit 1/second -j LOG +-A logdrop-475 -m limit --limit 12/minute -j ULOG -A logdrop-475 -j DROP --A logdrop-476 -m limit --limit 1/second -j LOG +-A logdrop-476 -m limit --limit 12/minute -j ULOG -A logdrop-476 -j DROP --A logdrop-477 -m limit --limit 1/second -j LOG +-A logdrop-477 -m limit --limit 12/minute -j ULOG -A logdrop-477 -j DROP --A logdrop-478 -m limit --limit 1/second -j LOG +-A logdrop-478 -m limit --limit 12/minute -j ULOG -A logdrop-478 -j DROP --A logdrop-479 -m limit --limit 1/second -j LOG +-A logdrop-479 -m limit --limit 12/minute -j ULOG -A logdrop-479 -j DROP -A logdrop-48 -m limit --limit 1/second -j LOG -A logdrop-48 -j DROP --A logdrop-480 -m limit --limit 1/second -j LOG +-A logdrop-480 -m limit --limit 12/minute -j ULOG -A logdrop-480 -j DROP --A logdrop-481 -m limit --limit 1/second -j LOG +-A logdrop-481 -m limit --limit 12/minute -j ULOG -A logdrop-481 -j DROP --A logdrop-482 -m limit --limit 1/second -j LOG +-A logdrop-482 -m limit --limit 12/minute -j ULOG -A logdrop-482 -j DROP --A logdrop-483 -m limit --limit 1/second -j LOG +-A logdrop-483 -m limit --limit 12/minute -j ULOG -A logdrop-483 -j DROP --A logdrop-484 -m limit --limit 1/second -j LOG +-A logdrop-484 -m limit --limit 12/minute -j ULOG -A logdrop-484 -j DROP --A logdrop-485 -m limit --limit 1/second -j LOG +-A logdrop-485 -m limit --limit 12/minute -j ULOG -A logdrop-485 -j DROP --A logdrop-486 -m limit --limit 1/second -j LOG +-A logdrop-486 -m limit --limit 12/minute -j ULOG -A logdrop-486 -j DROP --A logdrop-487 -m limit --limit 1/second -j LOG +-A logdrop-487 -m limit --limit 12/minute -j ULOG -A logdrop-487 -j DROP --A logdrop-488 -m limit --limit 1/second -j LOG +-A logdrop-488 -m limit --limit 12/minute -j ULOG -A logdrop-488 -j DROP --A logdrop-489 -m limit --limit 1/second -j LOG +-A logdrop-489 -m limit --limit 12/minute -j ULOG -A logdrop-489 -j DROP -A logdrop-49 -m limit --limit 1/second -j LOG -A logdrop-49 -j DROP --A logdrop-490 -m limit --limit 1/second -j LOG +-A logdrop-490 -m limit --limit 12/minute -j ULOG -A logdrop-490 -j DROP --A logdrop-491 -m limit --limit 1/second -j LOG +-A logdrop-491 -m limit --limit 12/minute -j ULOG -A logdrop-491 -j DROP --A logdrop-492 -m limit --limit 1/second -j LOG +-A logdrop-492 -m limit --limit 12/minute -j ULOG -A logdrop-492 -j DROP --A logdrop-493 -m limit --limit 1/second -j LOG +-A logdrop-493 -m limit --limit 12/minute -j ULOG -A logdrop-493 -j DROP --A logdrop-494 -m limit --limit 1/second -j LOG +-A logdrop-494 -m limit --limit 12/minute -j ULOG -A logdrop-494 -j DROP --A logdrop-495 -m limit --limit 1/second -j LOG +-A logdrop-495 -m limit --limit 12/minute -j ULOG -A logdrop-495 -j DROP --A logdrop-496 -m limit --limit 1/second -j LOG +-A logdrop-496 -m limit --limit 12/minute -j ULOG -A logdrop-496 -j DROP --A logdrop-497 -m limit --limit 1/second -j LOG +-A logdrop-497 -m limit --limit 12/minute -j ULOG -A logdrop-497 -j DROP --A logdrop-498 -m limit --limit 1/second -j LOG +-A logdrop-498 -m limit --limit 12/minute -j ULOG -A logdrop-498 -j DROP --A logdrop-499 -m limit --limit 1/second -j LOG +-A logdrop-499 -m limit --limit 12/minute -j ULOG -A logdrop-499 -j DROP -A logdrop-5 -m limit --limit 1/second -j LOG -A logdrop-5 -j DROP -A logdrop-50 -m limit --limit 1/second -j LOG -A logdrop-50 -j DROP --A logdrop-500 -m limit --limit 1/second -j LOG +-A logdrop-500 -m limit --limit 12/minute -j ULOG -A logdrop-500 -j DROP --A logdrop-501 -m limit --limit 1/second -j LOG +-A logdrop-501 -m limit --limit 12/minute -j ULOG -A logdrop-501 -j DROP --A logdrop-502 -m limit --limit 1/second -j LOG +-A logdrop-502 -m limit --limit 12/minute -j ULOG -A logdrop-502 -j DROP --A logdrop-503 -m limit --limit 1/second -j LOG +-A logdrop-503 -m limit --limit 12/minute -j ULOG -A logdrop-503 -j DROP --A logdrop-504 -m limit --limit 1/second -j LOG +-A logdrop-504 -m limit --limit 12/minute -j ULOG -A logdrop-504 -j DROP --A logdrop-505 -m limit --limit 1/second -j LOG +-A logdrop-505 -m limit --limit 12/minute -j ULOG -A logdrop-505 -j DROP --A logdrop-506 -m limit --limit 1/second -j LOG +-A logdrop-506 -m limit --limit 12/minute -j ULOG -A logdrop-506 -j DROP --A logdrop-507 -m limit --limit 1/second -j LOG +-A logdrop-507 -m limit --limit 12/minute -j ULOG -A logdrop-507 -j DROP --A logdrop-508 -m limit --limit 1/second -j LOG +-A logdrop-508 -m limit --limit 12/minute -j ULOG -A logdrop-508 -j DROP --A logdrop-509 -m limit --limit 1/second -j LOG +-A logdrop-509 -m limit --limit 12/minute -j ULOG -A logdrop-509 -j DROP -A logdrop-51 -m limit --limit 1/second -j LOG -A logdrop-51 -j DROP --A logdrop-510 -m limit --limit 1/second -j LOG +-A logdrop-510 -m limit --limit 12/minute -j ULOG -A logdrop-510 -j DROP --A logdrop-511 -m limit --limit 1/second -j LOG +-A logdrop-511 -m limit --limit 12/minute -j ULOG -A logdrop-511 -j DROP --A logdrop-512 -m limit --limit 1/second -j LOG +-A logdrop-512 -m limit --limit 12/minute -j ULOG -A logdrop-512 -j DROP --A logdrop-513 -m limit --limit 1/second -j LOG +-A logdrop-513 -m limit --limit 12/minute -j ULOG -A logdrop-513 -j DROP --A logdrop-514 -m limit --limit 1/second -j LOG +-A logdrop-514 -m limit --limit 12/minute -j ULOG -A logdrop-514 -j DROP --A logdrop-515 -m limit --limit 1/second -j LOG +-A logdrop-515 -m limit --limit 12/minute -j ULOG -A logdrop-515 -j DROP --A logdrop-516 -m limit --limit 1/second -j LOG +-A logdrop-516 -m limit --limit 12/minute -j ULOG -A logdrop-516 -j DROP --A logdrop-517 -m limit --limit 1/second -j LOG +-A logdrop-517 -m limit --limit 12/minute -j ULOG -A logdrop-517 -j DROP --A logdrop-518 -m limit --limit 1/second -j LOG +-A logdrop-518 -m limit --limit 12/minute -j ULOG -A logdrop-518 -j DROP --A logdrop-519 -m limit --limit 1/second -j LOG +-A logdrop-519 -m limit --limit 12/minute -j ULOG -A logdrop-519 -j DROP -A logdrop-52 -m limit --limit 1/second -j LOG -A logdrop-52 -j DROP @@ -52522,97 +88897,97 @@ hash:net family inet -A logdrop-549 -j DROP -A logdrop-55 -m limit --limit 1/second -j LOG -A logdrop-55 -j DROP --A logdrop-550 -m limit --limit 12/minute -j ULOG +-A logdrop-550 -m limit --limit 1/second -j LOG -A logdrop-550 -j DROP --A logdrop-551 -m limit --limit 12/minute -j ULOG +-A logdrop-551 -m limit --limit 1/second -j LOG -A logdrop-551 -j DROP --A logdrop-552 -m limit --limit 12/minute -j ULOG +-A logdrop-552 -m limit --limit 1/second -j LOG -A logdrop-552 -j DROP --A logdrop-553 -m limit --limit 12/minute -j ULOG +-A logdrop-553 -m limit --limit 1/second -j LOG -A logdrop-553 -j DROP --A logdrop-554 -m limit --limit 12/minute -j ULOG +-A logdrop-554 -m limit --limit 1/second -j LOG -A logdrop-554 -j DROP --A logdrop-555 -m limit --limit 12/minute -j ULOG +-A logdrop-555 -m limit --limit 1/second -j LOG -A logdrop-555 -j DROP --A logdrop-556 -m limit --limit 12/minute -j ULOG +-A logdrop-556 -m limit --limit 1/second -j LOG -A logdrop-556 -j DROP --A logdrop-557 -m limit --limit 12/minute -j ULOG +-A logdrop-557 -m limit --limit 1/second -j LOG -A logdrop-557 -j DROP --A logdrop-558 -m limit --limit 12/minute -j ULOG +-A logdrop-558 -m limit --limit 1/second -j LOG -A logdrop-558 -j DROP --A logdrop-559 -m limit --limit 12/minute -j ULOG +-A logdrop-559 -m limit --limit 1/second -j LOG -A logdrop-559 -j DROP -A logdrop-56 -m limit --limit 1/second -j LOG -A logdrop-56 -j DROP --A logdrop-560 -m limit --limit 12/minute -j ULOG +-A logdrop-560 -m limit --limit 1/second -j LOG -A logdrop-560 -j DROP --A logdrop-561 -m limit --limit 12/minute -j ULOG +-A logdrop-561 -m limit --limit 1/second -j LOG -A logdrop-561 -j DROP --A logdrop-562 -m limit --limit 12/minute -j ULOG +-A logdrop-562 -m limit --limit 1/second -j LOG -A logdrop-562 -j DROP --A logdrop-563 -m limit --limit 12/minute -j ULOG +-A logdrop-563 -m limit --limit 1/second -j LOG -A logdrop-563 -j DROP --A logdrop-564 -m limit --limit 12/minute -j ULOG +-A logdrop-564 -m limit --limit 1/second -j LOG -A logdrop-564 -j DROP --A logdrop-565 -m limit --limit 12/minute -j ULOG +-A logdrop-565 -m limit --limit 1/second -j LOG -A logdrop-565 -j DROP --A logdrop-566 -m limit --limit 12/minute -j ULOG +-A logdrop-566 -m limit --limit 1/second -j LOG -A logdrop-566 -j DROP --A logdrop-567 -m limit --limit 12/minute -j ULOG +-A logdrop-567 -m limit --limit 1/second -j LOG -A logdrop-567 -j DROP --A logdrop-568 -m limit --limit 12/minute -j ULOG +-A logdrop-568 -m limit --limit 1/second -j LOG -A logdrop-568 -j DROP --A logdrop-569 -m limit --limit 12/minute -j ULOG +-A logdrop-569 -m limit --limit 1/second -j LOG -A logdrop-569 -j DROP -A logdrop-57 -m limit --limit 1/second -j LOG -A logdrop-57 -j DROP --A logdrop-570 -m limit --limit 12/minute -j ULOG +-A logdrop-570 -m limit --limit 1/second -j LOG -A logdrop-570 -j DROP --A logdrop-571 -m limit --limit 12/minute -j ULOG +-A logdrop-571 -m limit --limit 1/second -j LOG -A logdrop-571 -j DROP --A logdrop-572 -m limit --limit 12/minute -j ULOG +-A logdrop-572 -m limit --limit 1/second -j LOG -A logdrop-572 -j DROP --A logdrop-573 -m limit --limit 12/minute -j ULOG +-A logdrop-573 -m limit --limit 1/second -j LOG -A logdrop-573 -j DROP --A logdrop-574 -m limit --limit 12/minute -j ULOG +-A logdrop-574 -m limit --limit 1/second -j LOG -A logdrop-574 -j DROP --A logdrop-575 -m limit --limit 12/minute -j ULOG +-A logdrop-575 -m limit --limit 1/second -j LOG -A logdrop-575 -j DROP --A logdrop-576 -m limit --limit 12/minute -j ULOG +-A logdrop-576 -m limit --limit 1/second -j LOG -A logdrop-576 -j DROP --A logdrop-577 -m limit --limit 12/minute -j ULOG +-A logdrop-577 -m limit --limit 1/second -j LOG -A logdrop-577 -j DROP --A logdrop-578 -m limit --limit 12/minute -j ULOG +-A logdrop-578 -m limit --limit 1/second -j LOG -A logdrop-578 -j DROP --A logdrop-579 -m limit --limit 12/minute -j ULOG +-A logdrop-579 -m limit --limit 1/second -j LOG -A logdrop-579 -j DROP -A logdrop-58 -m limit --limit 1/second -j LOG -A logdrop-58 -j DROP --A logdrop-580 -m limit --limit 12/minute -j ULOG +-A logdrop-580 -m limit --limit 1/second -j LOG -A logdrop-580 -j DROP --A logdrop-581 -m limit --limit 12/minute -j ULOG +-A logdrop-581 -m limit --limit 1/second -j LOG -A logdrop-581 -j DROP --A logdrop-582 -m limit --limit 12/minute -j ULOG +-A logdrop-582 -m limit --limit 1/second -j LOG -A logdrop-582 -j DROP --A logdrop-583 -m limit --limit 12/minute -j ULOG +-A logdrop-583 -m limit --limit 1/second -j LOG -A logdrop-583 -j DROP --A logdrop-584 -m limit --limit 12/minute -j ULOG +-A logdrop-584 -m limit --limit 1/second -j LOG -A logdrop-584 -j DROP --A logdrop-585 -m limit --limit 12/minute -j ULOG +-A logdrop-585 -m limit --limit 1/second -j LOG -A logdrop-585 -j DROP --A logdrop-586 -m limit --limit 12/minute -j ULOG +-A logdrop-586 -m limit --limit 1/second -j LOG -A logdrop-586 -j DROP --A logdrop-587 -m limit --limit 12/minute -j ULOG +-A logdrop-587 -m limit --limit 1/second -j LOG -A logdrop-587 -j DROP --A logdrop-588 -m limit --limit 12/minute -j ULOG +-A logdrop-588 -m limit --limit 1/second -j LOG -A logdrop-588 -j DROP --A logdrop-589 -m limit --limit 12/minute -j ULOG +-A logdrop-589 -m limit --limit 1/second -j LOG -A logdrop-589 -j DROP -A logdrop-59 -m limit --limit 1/second -j LOG -A logdrop-59 -j DROP --A logdrop-590 -m limit --limit 12/minute -j ULOG +-A logdrop-590 -m limit --limit 1/second -j LOG -A logdrop-590 -j DROP --A logdrop-591 -m limit --limit 12/minute -j ULOG +-A logdrop-591 -m limit --limit 1/second -j LOG -A logdrop-591 -j DROP -A logdrop-592 -m limit --limit 1/second -j LOG -A logdrop-592 -j DROP @@ -52744,203 +89119,293 @@ hash:net family inet -A logdrop-649 -j DROP -A logdrop-65 -m limit --limit 1/second -j LOG -A logdrop-65 -j DROP --A logdrop-650 -m limit --limit 1/second -j LOG +-A logdrop-650 -j TEE --gateway 10.0.0.1 +-A logdrop-650 -j TEE --gateway 10.0.0.2 -A logdrop-650 -j DROP --A logdrop-651 -m limit --limit 1/second -j LOG +-A logdrop-651 -j TEE --gateway 10.0.0.1 +-A logdrop-651 -j TEE --gateway 10.0.0.2 -A logdrop-651 -j DROP --A logdrop-652 -m limit --limit 1/second -j LOG +-A logdrop-652 -j TEE --gateway 10.0.0.1 +-A logdrop-652 -j TEE --gateway 10.0.0.2 -A logdrop-652 -j DROP --A logdrop-653 -m limit --limit 1/second -j LOG +-A logdrop-653 -j TEE --gateway 10.0.0.1 +-A logdrop-653 -j TEE --gateway 10.0.0.2 -A logdrop-653 -j DROP --A logdrop-654 -m limit --limit 1/second -j LOG +-A logdrop-654 -j TEE --gateway 10.0.0.1 +-A logdrop-654 -j TEE --gateway 10.0.0.2 -A logdrop-654 -j DROP --A logdrop-655 -m limit --limit 1/second -j LOG +-A logdrop-655 -j TEE --gateway 10.0.0.1 +-A logdrop-655 -j TEE --gateway 10.0.0.2 -A logdrop-655 -j DROP --A logdrop-656 -m limit --limit 1/second -j LOG +-A logdrop-656 -j TEE --gateway 10.0.0.1 +-A logdrop-656 -j TEE --gateway 10.0.0.2 -A logdrop-656 -j DROP --A logdrop-657 -m limit --limit 1/second -j LOG +-A logdrop-657 -j TEE --gateway 10.0.0.1 +-A logdrop-657 -j TEE --gateway 10.0.0.2 -A logdrop-657 -j DROP --A logdrop-658 -m limit --limit 1/second -j LOG +-A logdrop-658 -j TEE --gateway 10.0.0.1 +-A logdrop-658 -j TEE --gateway 10.0.0.2 -A logdrop-658 -j DROP --A logdrop-659 -m limit --limit 1/second -j LOG +-A logdrop-659 -j TEE --gateway 10.0.0.1 +-A logdrop-659 -j TEE --gateway 10.0.0.2 -A logdrop-659 -j DROP -A logdrop-66 -m limit --limit 1/second -j LOG -A logdrop-66 -j DROP --A logdrop-660 -m limit --limit 1/second -j LOG +-A logdrop-660 -j TEE --gateway 10.0.0.1 +-A logdrop-660 -j TEE --gateway 10.0.0.2 -A logdrop-660 -j DROP --A logdrop-661 -m limit --limit 1/second -j LOG +-A logdrop-661 -j TEE --gateway 10.0.0.1 +-A logdrop-661 -j TEE --gateway 10.0.0.2 -A logdrop-661 -j DROP --A logdrop-662 -m limit --limit 1/second -j LOG +-A logdrop-662 -j TEE --gateway 10.0.0.1 +-A logdrop-662 -j TEE --gateway 10.0.0.2 -A logdrop-662 -j DROP --A logdrop-663 -m limit --limit 1/second -j LOG +-A logdrop-663 -j TEE --gateway 10.0.0.1 +-A logdrop-663 -j TEE --gateway 10.0.0.2 -A logdrop-663 -j DROP --A logdrop-664 -m limit --limit 1/second -j LOG +-A logdrop-664 -j TEE --gateway 10.0.0.1 +-A logdrop-664 -j TEE --gateway 10.0.0.2 -A logdrop-664 -j DROP --A logdrop-665 -m limit --limit 1/second -j LOG +-A logdrop-665 -j TEE --gateway 10.0.0.1 +-A logdrop-665 -j TEE --gateway 10.0.0.2 -A logdrop-665 -j DROP --A logdrop-666 -m limit --limit 1/second -j LOG +-A logdrop-666 -j TEE --gateway 10.0.0.1 +-A logdrop-666 -j TEE --gateway 10.0.0.2 -A logdrop-666 -j DROP --A logdrop-667 -m limit --limit 1/second -j LOG +-A logdrop-667 -j TEE --gateway 10.0.0.1 +-A logdrop-667 -j TEE --gateway 10.0.0.2 -A logdrop-667 -j DROP --A logdrop-668 -m limit --limit 1/second -j LOG +-A logdrop-668 -j TEE --gateway 10.0.0.1 +-A logdrop-668 -j TEE --gateway 10.0.0.2 -A logdrop-668 -j DROP --A logdrop-669 -m limit --limit 1/second -j LOG +-A logdrop-669 -j TEE --gateway 10.0.0.1 +-A logdrop-669 -j TEE --gateway 10.0.0.2 -A logdrop-669 -j DROP -A logdrop-67 -m limit --limit 1/second -j LOG -A logdrop-67 -j DROP --A logdrop-670 -m limit --limit 1/second -j LOG +-A logdrop-670 -j TEE --gateway 10.0.0.1 +-A logdrop-670 -j TEE --gateway 10.0.0.2 -A logdrop-670 -j DROP --A logdrop-671 -m limit --limit 1/second -j LOG +-A logdrop-671 -j TEE --gateway 10.0.0.1 +-A logdrop-671 -j TEE --gateway 10.0.0.2 -A logdrop-671 -j DROP --A logdrop-672 -m limit --limit 12/minute -j ULOG +-A logdrop-672 -j TEE --gateway 10.0.0.1 +-A logdrop-672 -j TEE --gateway 10.0.0.2 -A logdrop-672 -j DROP --A logdrop-673 -m limit --limit 12/minute -j ULOG +-A logdrop-673 -j TEE --gateway 10.0.0.1 +-A logdrop-673 -j TEE --gateway 10.0.0.2 -A logdrop-673 -j DROP --A logdrop-674 -m limit --limit 12/minute -j ULOG +-A logdrop-674 -j TEE --gateway 10.0.0.1 +-A logdrop-674 -j TEE --gateway 10.0.0.2 -A logdrop-674 -j DROP --A logdrop-675 -m limit --limit 12/minute -j ULOG +-A logdrop-675 -j TEE --gateway 10.0.0.1 +-A logdrop-675 -j TEE --gateway 10.0.0.2 -A logdrop-675 -j DROP --A logdrop-676 -m limit --limit 12/minute -j ULOG +-A logdrop-676 -j TEE --gateway 10.0.0.1 +-A logdrop-676 -j TEE --gateway 10.0.0.2 -A logdrop-676 -j DROP --A logdrop-677 -m limit --limit 12/minute -j ULOG +-A logdrop-677 -j TEE --gateway 10.0.0.1 +-A logdrop-677 -j TEE --gateway 10.0.0.2 -A logdrop-677 -j DROP --A logdrop-678 -m limit --limit 12/minute -j ULOG +-A logdrop-678 -j TEE --gateway 10.0.0.1 +-A logdrop-678 -j TEE --gateway 10.0.0.2 -A logdrop-678 -j DROP --A logdrop-679 -m limit --limit 12/minute -j ULOG +-A logdrop-679 -j TEE --gateway 10.0.0.1 +-A logdrop-679 -j TEE --gateway 10.0.0.2 -A logdrop-679 -j DROP -A logdrop-68 -m limit --limit 1/second -j LOG -A logdrop-68 -j DROP --A logdrop-680 -m limit --limit 12/minute -j ULOG +-A logdrop-680 -j TEE --gateway 10.0.0.1 +-A logdrop-680 -j TEE --gateway 10.0.0.2 -A logdrop-680 -j DROP --A logdrop-681 -m limit --limit 12/minute -j ULOG +-A logdrop-681 -j TEE --gateway 10.0.0.1 +-A logdrop-681 -j TEE --gateway 10.0.0.2 -A logdrop-681 -j DROP --A logdrop-682 -m limit --limit 12/minute -j ULOG +-A logdrop-682 -j TEE --gateway 10.0.0.1 +-A logdrop-682 -j TEE --gateway 10.0.0.2 -A logdrop-682 -j DROP --A logdrop-683 -m limit --limit 12/minute -j ULOG +-A logdrop-683 -j TEE --gateway 10.0.0.1 +-A logdrop-683 -j TEE --gateway 10.0.0.2 -A logdrop-683 -j DROP --A logdrop-684 -m limit --limit 12/minute -j ULOG +-A logdrop-684 -j TEE --gateway 10.0.0.1 +-A logdrop-684 -j TEE --gateway 10.0.0.2 -A logdrop-684 -j DROP --A logdrop-685 -m limit --limit 12/minute -j ULOG +-A logdrop-685 -j TEE --gateway 10.0.0.1 +-A logdrop-685 -j TEE --gateway 10.0.0.2 -A logdrop-685 -j DROP --A logdrop-686 -m limit --limit 12/minute -j ULOG +-A logdrop-686 -j TEE --gateway 10.0.0.1 +-A logdrop-686 -j TEE --gateway 10.0.0.2 -A logdrop-686 -j DROP --A logdrop-687 -m limit --limit 12/minute -j ULOG +-A logdrop-687 -j TEE --gateway 10.0.0.1 +-A logdrop-687 -j TEE --gateway 10.0.0.2 -A logdrop-687 -j DROP --A logdrop-688 -m limit --limit 12/minute -j ULOG +-A logdrop-688 -j TEE --gateway 10.0.0.1 +-A logdrop-688 -j TEE --gateway 10.0.0.2 -A logdrop-688 -j DROP --A logdrop-689 -m limit --limit 12/minute -j ULOG +-A logdrop-689 -j TEE --gateway 10.0.0.1 +-A logdrop-689 -j TEE --gateway 10.0.0.2 -A logdrop-689 -j DROP -A logdrop-69 -m limit --limit 1/second -j LOG -A logdrop-69 -j DROP --A logdrop-690 -m limit --limit 12/minute -j ULOG +-A logdrop-690 -j TEE --gateway 10.0.0.1 +-A logdrop-690 -j TEE --gateway 10.0.0.2 -A logdrop-690 -j DROP --A logdrop-691 -m limit --limit 12/minute -j ULOG +-A logdrop-691 -j TEE --gateway 10.0.0.1 +-A logdrop-691 -j TEE --gateway 10.0.0.2 -A logdrop-691 -j DROP --A logdrop-692 -m limit --limit 12/minute -j ULOG +-A logdrop-692 -j TEE --gateway 10.0.0.1 +-A logdrop-692 -j TEE --gateway 10.0.0.2 -A logdrop-692 -j DROP --A logdrop-693 -m limit --limit 12/minute -j ULOG +-A logdrop-693 -j TEE --gateway 10.0.0.1 +-A logdrop-693 -j TEE --gateway 10.0.0.2 -A logdrop-693 -j DROP --A logdrop-694 -m limit --limit 12/minute -j ULOG +-A logdrop-694 -j TEE --gateway 10.0.0.1 +-A logdrop-694 -j TEE --gateway 10.0.0.2 -A logdrop-694 -j DROP --A logdrop-695 -m limit --limit 12/minute -j ULOG +-A logdrop-695 -j TEE --gateway 10.0.0.1 +-A logdrop-695 -j TEE --gateway 10.0.0.2 -A logdrop-695 -j DROP --A logdrop-696 -m limit --limit 12/minute -j ULOG +-A logdrop-696 -j TEE --gateway 10.0.0.1 +-A logdrop-696 -j TEE --gateway 10.0.0.2 -A logdrop-696 -j DROP --A logdrop-697 -m limit --limit 12/minute -j ULOG +-A logdrop-697 -j TEE --gateway 10.0.0.1 +-A logdrop-697 -j TEE --gateway 10.0.0.2 -A logdrop-697 -j DROP --A logdrop-698 -m limit --limit 12/minute -j ULOG +-A logdrop-698 -j TEE --gateway 10.0.0.1 +-A logdrop-698 -j TEE --gateway 10.0.0.2 -A logdrop-698 -j DROP --A logdrop-699 -m limit --limit 12/minute -j ULOG +-A logdrop-699 -j TEE --gateway 10.0.0.1 +-A logdrop-699 -j TEE --gateway 10.0.0.2 -A logdrop-699 -j DROP -A logdrop-7 -m limit --limit 1/second -j LOG -A logdrop-7 -j DROP -A logdrop-70 -m limit --limit 1/second -j LOG -A logdrop-70 -j DROP --A logdrop-700 -m limit --limit 12/minute -j ULOG +-A logdrop-700 -j TEE --gateway 10.0.0.1 +-A logdrop-700 -j TEE --gateway 10.0.0.2 -A logdrop-700 -j DROP --A logdrop-701 -m limit --limit 12/minute -j ULOG +-A logdrop-701 -j TEE --gateway 10.0.0.1 +-A logdrop-701 -j TEE --gateway 10.0.0.2 -A logdrop-701 -j DROP --A logdrop-702 -m limit --limit 12/minute -j ULOG +-A logdrop-702 -j TEE --gateway 10.0.0.1 +-A logdrop-702 -j TEE --gateway 10.0.0.2 -A logdrop-702 -j DROP --A logdrop-703 -m limit --limit 12/minute -j ULOG +-A logdrop-703 -j TEE --gateway 10.0.0.1 +-A logdrop-703 -j TEE --gateway 10.0.0.2 -A logdrop-703 -j DROP --A logdrop-704 -m limit --limit 12/minute -j ULOG +-A logdrop-704 -j TEE --gateway 10.0.0.1 +-A logdrop-704 -j TEE --gateway 10.0.0.2 -A logdrop-704 -j DROP --A logdrop-705 -m limit --limit 12/minute -j ULOG +-A logdrop-705 -j TEE --gateway 10.0.0.1 +-A logdrop-705 -j TEE --gateway 10.0.0.2 -A logdrop-705 -j DROP --A logdrop-706 -m limit --limit 12/minute -j ULOG +-A logdrop-706 -j TEE --gateway 10.0.0.1 +-A logdrop-706 -j TEE --gateway 10.0.0.2 -A logdrop-706 -j DROP --A logdrop-707 -m limit --limit 12/minute -j ULOG +-A logdrop-707 -j TEE --gateway 10.0.0.1 +-A logdrop-707 -j TEE --gateway 10.0.0.2 -A logdrop-707 -j DROP --A logdrop-708 -m limit --limit 12/minute -j ULOG +-A logdrop-708 -j TEE --gateway 10.0.0.1 +-A logdrop-708 -j TEE --gateway 10.0.0.2 -A logdrop-708 -j DROP --A logdrop-709 -m limit --limit 12/minute -j ULOG +-A logdrop-709 -j TEE --gateway 10.0.0.1 +-A logdrop-709 -j TEE --gateway 10.0.0.2 -A logdrop-709 -j DROP -A logdrop-71 -m limit --limit 1/second -j LOG -A logdrop-71 -j DROP --A logdrop-710 -m limit --limit 12/minute -j ULOG +-A logdrop-710 -j TEE --gateway 10.0.0.1 +-A logdrop-710 -j TEE --gateway 10.0.0.2 -A logdrop-710 -j DROP --A logdrop-711 -m limit --limit 12/minute -j ULOG +-A logdrop-711 -j TEE --gateway 10.0.0.1 +-A logdrop-711 -j TEE --gateway 10.0.0.2 -A logdrop-711 -j DROP --A logdrop-712 -m limit --limit 12/minute -j ULOG +-A logdrop-712 -j TEE --gateway 10.0.0.1 +-A logdrop-712 -j TEE --gateway 10.0.0.2 -A logdrop-712 -j DROP --A logdrop-713 -m limit --limit 12/minute -j ULOG +-A logdrop-713 -j TEE --gateway 10.0.0.1 +-A logdrop-713 -j TEE --gateway 10.0.0.2 -A logdrop-713 -j DROP --A logdrop-714 -m limit --limit 12/minute -j ULOG +-A logdrop-714 -j TEE --gateway 10.0.0.1 +-A logdrop-714 -j TEE --gateway 10.0.0.2 -A logdrop-714 -j DROP --A logdrop-715 -m limit --limit 12/minute -j ULOG +-A logdrop-715 -j TEE --gateway 10.0.0.1 +-A logdrop-715 -j TEE --gateway 10.0.0.2 -A logdrop-715 -j DROP --A logdrop-716 -m limit --limit 12/minute -j ULOG +-A logdrop-716 -j TEE --gateway 10.0.0.1 +-A logdrop-716 -j TEE --gateway 10.0.0.2 -A logdrop-716 -j DROP --A logdrop-717 -m limit --limit 12/minute -j ULOG +-A logdrop-717 -j TEE --gateway 10.0.0.1 +-A logdrop-717 -j TEE --gateway 10.0.0.2 -A logdrop-717 -j DROP --A logdrop-718 -m limit --limit 12/minute -j ULOG +-A logdrop-718 -j TEE --gateway 10.0.0.1 +-A logdrop-718 -j TEE --gateway 10.0.0.2 -A logdrop-718 -j DROP --A logdrop-719 -m limit --limit 12/minute -j ULOG +-A logdrop-719 -j TEE --gateway 10.0.0.1 +-A logdrop-719 -j TEE --gateway 10.0.0.2 -A logdrop-719 -j DROP -A logdrop-72 -m limit --limit 1/second -j LOG -A logdrop-72 -j DROP --A logdrop-720 -m limit --limit 12/minute -j ULOG +-A logdrop-720 -j TEE --gateway 10.0.0.1 +-A logdrop-720 -j TEE --gateway 10.0.0.2 -A logdrop-720 -j DROP --A logdrop-721 -m limit --limit 12/minute -j ULOG +-A logdrop-721 -j TEE --gateway 10.0.0.1 +-A logdrop-721 -j TEE --gateway 10.0.0.2 -A logdrop-721 -j DROP --A logdrop-722 -m limit --limit 12/minute -j ULOG +-A logdrop-722 -j TEE --gateway 10.0.0.1 +-A logdrop-722 -j TEE --gateway 10.0.0.2 -A logdrop-722 -j DROP --A logdrop-723 -m limit --limit 12/minute -j ULOG +-A logdrop-723 -j TEE --gateway 10.0.0.1 +-A logdrop-723 -j TEE --gateway 10.0.0.2 -A logdrop-723 -j DROP --A logdrop-724 -m limit --limit 12/minute -j ULOG +-A logdrop-724 -j TEE --gateway 10.0.0.1 +-A logdrop-724 -j TEE --gateway 10.0.0.2 -A logdrop-724 -j DROP --A logdrop-725 -m limit --limit 12/minute -j ULOG +-A logdrop-725 -j TEE --gateway 10.0.0.1 +-A logdrop-725 -j TEE --gateway 10.0.0.2 -A logdrop-725 -j DROP --A logdrop-726 -m limit --limit 12/minute -j ULOG +-A logdrop-726 -j TEE --gateway 10.0.0.1 +-A logdrop-726 -j TEE --gateway 10.0.0.2 -A logdrop-726 -j DROP --A logdrop-727 -m limit --limit 12/minute -j ULOG +-A logdrop-727 -j TEE --gateway 10.0.0.1 +-A logdrop-727 -j TEE --gateway 10.0.0.2 -A logdrop-727 -j DROP --A logdrop-728 -m limit --limit 12/minute -j ULOG +-A logdrop-728 -j TEE --gateway 10.0.0.1 +-A logdrop-728 -j TEE --gateway 10.0.0.2 -A logdrop-728 -j DROP --A logdrop-729 -m limit --limit 12/minute -j ULOG +-A logdrop-729 -j TEE --gateway 10.0.0.1 +-A logdrop-729 -j TEE --gateway 10.0.0.2 -A logdrop-729 -j DROP -A logdrop-73 -m limit --limit 1/second -j LOG -A logdrop-73 -j DROP --A logdrop-730 -m limit --limit 12/minute -j ULOG +-A logdrop-730 -j TEE --gateway 10.0.0.1 +-A logdrop-730 -j TEE --gateway 10.0.0.2 -A logdrop-730 -j DROP --A logdrop-731 -m limit --limit 12/minute -j ULOG +-A logdrop-731 -j TEE --gateway 10.0.0.1 +-A logdrop-731 -j TEE --gateway 10.0.0.2 -A logdrop-731 -j DROP --A logdrop-732 -m limit --limit 12/minute -j ULOG +-A logdrop-732 -j TEE --gateway 10.0.0.1 +-A logdrop-732 -j TEE --gateway 10.0.0.2 -A logdrop-732 -j DROP --A logdrop-733 -m limit --limit 12/minute -j ULOG +-A logdrop-733 -j TEE --gateway 10.0.0.1 +-A logdrop-733 -j TEE --gateway 10.0.0.2 -A logdrop-733 -j DROP --A logdrop-734 -m limit --limit 12/minute -j ULOG +-A logdrop-734 -j TEE --gateway 10.0.0.1 +-A logdrop-734 -j TEE --gateway 10.0.0.2 -A logdrop-734 -j DROP --A logdrop-735 -m limit --limit 12/minute -j ULOG +-A logdrop-735 -j TEE --gateway 10.0.0.1 +-A logdrop-735 -j TEE --gateway 10.0.0.2 -A logdrop-735 -j DROP --A logdrop-736 -m limit --limit 12/minute -j ULOG +-A logdrop-736 -j TEE --gateway 10.0.0.1 +-A logdrop-736 -j TEE --gateway 10.0.0.2 -A logdrop-736 -j DROP --A logdrop-737 -m limit --limit 12/minute -j ULOG +-A logdrop-737 -j TEE --gateway 10.0.0.1 +-A logdrop-737 -j TEE --gateway 10.0.0.2 -A logdrop-737 -j DROP --A logdrop-738 -m limit --limit 12/minute -j ULOG +-A logdrop-738 -j TEE --gateway 10.0.0.1 +-A logdrop-738 -j TEE --gateway 10.0.0.2 -A logdrop-738 -j DROP --A logdrop-739 -m limit --limit 12/minute -j ULOG +-A logdrop-739 -j TEE --gateway 10.0.0.1 +-A logdrop-739 -j TEE --gateway 10.0.0.2 -A logdrop-739 -j DROP -A logdrop-74 -m limit --limit 1/second -j LOG -A logdrop-74 -j DROP @@ -52952,165 +89417,165 @@ hash:net family inet -A logdrop-742 -j DROP -A logdrop-743 -m limit --limit 12/minute -j ULOG -A logdrop-743 -j DROP --A logdrop-744 -m limit --limit 1/second -j LOG +-A logdrop-744 -m limit --limit 12/minute -j ULOG -A logdrop-744 -j DROP --A logdrop-745 -m limit --limit 1/second -j LOG +-A logdrop-745 -m limit --limit 12/minute -j ULOG -A logdrop-745 -j DROP --A logdrop-746 -m limit --limit 1/second -j LOG +-A logdrop-746 -m limit --limit 12/minute -j ULOG -A logdrop-746 -j DROP --A logdrop-747 -m limit --limit 1/second -j LOG +-A logdrop-747 -m limit --limit 12/minute -j ULOG -A logdrop-747 -j DROP --A logdrop-748 -m limit --limit 1/second -j LOG +-A logdrop-748 -m limit --limit 12/minute -j ULOG -A logdrop-748 -j DROP --A logdrop-749 -m limit --limit 1/second -j LOG +-A logdrop-749 -m limit --limit 12/minute -j ULOG -A logdrop-749 -j DROP -A logdrop-75 -m limit --limit 1/second -j LOG -A logdrop-75 -j DROP --A logdrop-750 -m limit --limit 1/second -j LOG +-A logdrop-750 -m limit --limit 12/minute -j ULOG -A logdrop-750 -j DROP --A logdrop-751 -m limit --limit 1/second -j LOG +-A logdrop-751 -m limit --limit 12/minute -j ULOG -A logdrop-751 -j DROP --A logdrop-752 -m limit --limit 1/second -j LOG +-A logdrop-752 -m limit --limit 12/minute -j ULOG -A logdrop-752 -j DROP --A logdrop-753 -m limit --limit 1/second -j LOG +-A logdrop-753 -m limit --limit 12/minute -j ULOG -A logdrop-753 -j DROP --A logdrop-754 -m limit --limit 1/second -j LOG +-A logdrop-754 -m limit --limit 12/minute -j ULOG -A logdrop-754 -j DROP --A logdrop-755 -m limit --limit 1/second -j LOG +-A logdrop-755 -m limit --limit 12/minute -j ULOG -A logdrop-755 -j DROP --A logdrop-756 -m limit --limit 1/second -j LOG +-A logdrop-756 -m limit --limit 12/minute -j ULOG -A logdrop-756 -j DROP --A logdrop-757 -m limit --limit 1/second -j LOG +-A logdrop-757 -m limit --limit 12/minute -j ULOG -A logdrop-757 -j DROP --A logdrop-758 -m limit --limit 1/second -j LOG +-A logdrop-758 -m limit --limit 12/minute -j ULOG -A logdrop-758 -j DROP --A logdrop-759 -m limit --limit 1/second -j LOG +-A logdrop-759 -m limit --limit 12/minute -j ULOG -A logdrop-759 -j DROP -A logdrop-76 -m limit --limit 1/second -j LOG -A logdrop-76 -j DROP --A logdrop-760 -m limit --limit 1/second -j LOG +-A logdrop-760 -m limit --limit 12/minute -j ULOG -A logdrop-760 -j DROP --A logdrop-761 -m limit --limit 1/second -j LOG +-A logdrop-761 -m limit --limit 12/minute -j ULOG -A logdrop-761 -j DROP --A logdrop-762 -m limit --limit 1/second -j LOG +-A logdrop-762 -m limit --limit 12/minute -j ULOG -A logdrop-762 -j DROP --A logdrop-763 -m limit --limit 1/second -j LOG +-A logdrop-763 -m limit --limit 12/minute -j ULOG -A logdrop-763 -j DROP --A logdrop-764 -m limit --limit 1/second -j LOG +-A logdrop-764 -m limit --limit 12/minute -j ULOG -A logdrop-764 -j DROP --A logdrop-765 -m limit --limit 1/second -j LOG +-A logdrop-765 -m limit --limit 12/minute -j ULOG -A logdrop-765 -j DROP --A logdrop-766 -m limit --limit 1/second -j LOG +-A logdrop-766 -m limit --limit 12/minute -j ULOG -A logdrop-766 -j DROP --A logdrop-767 -m limit --limit 1/second -j LOG +-A logdrop-767 -m limit --limit 12/minute -j ULOG -A logdrop-767 -j DROP --A logdrop-768 -m limit --limit 1/second -j LOG +-A logdrop-768 -m limit --limit 12/minute -j ULOG -A logdrop-768 -j DROP --A logdrop-769 -m limit --limit 1/second -j LOG +-A logdrop-769 -m limit --limit 12/minute -j ULOG -A logdrop-769 -j DROP -A logdrop-77 -m limit --limit 1/second -j LOG -A logdrop-77 -j DROP --A logdrop-770 -m limit --limit 1/second -j LOG +-A logdrop-770 -m limit --limit 12/minute -j ULOG -A logdrop-770 -j DROP --A logdrop-771 -m limit --limit 1/second -j LOG +-A logdrop-771 -m limit --limit 12/minute -j ULOG -A logdrop-771 -j DROP --A logdrop-772 -m limit --limit 1/second -j LOG +-A logdrop-772 -m limit --limit 12/minute -j ULOG -A logdrop-772 -j DROP --A logdrop-773 -m limit --limit 1/second -j LOG +-A logdrop-773 -m limit --limit 12/minute -j ULOG -A logdrop-773 -j DROP --A logdrop-774 -m limit --limit 1/second -j LOG +-A logdrop-774 -m limit --limit 12/minute -j ULOG -A logdrop-774 -j DROP --A logdrop-775 -m limit --limit 1/second -j LOG +-A logdrop-775 -m limit --limit 12/minute -j ULOG -A logdrop-775 -j DROP --A logdrop-776 -m limit --limit 1/second -j LOG +-A logdrop-776 -m limit --limit 12/minute -j ULOG -A logdrop-776 -j DROP --A logdrop-777 -m limit --limit 1/second -j LOG +-A logdrop-777 -m limit --limit 12/minute -j ULOG -A logdrop-777 -j DROP --A logdrop-778 -m limit --limit 1/second -j LOG +-A logdrop-778 -m limit --limit 12/minute -j ULOG -A logdrop-778 -j DROP --A logdrop-779 -m limit --limit 1/second -j LOG +-A logdrop-779 -m limit --limit 12/minute -j ULOG -A logdrop-779 -j DROP -A logdrop-78 -m limit --limit 1/second -j LOG -A logdrop-78 -j DROP --A logdrop-780 -m limit --limit 1/second -j LOG +-A logdrop-780 -m limit --limit 12/minute -j ULOG -A logdrop-780 -j DROP --A logdrop-781 -m limit --limit 1/second -j LOG +-A logdrop-781 -m limit --limit 12/minute -j ULOG -A logdrop-781 -j DROP --A logdrop-782 -m limit --limit 1/second -j LOG +-A logdrop-782 -m limit --limit 12/minute -j ULOG -A logdrop-782 -j DROP --A logdrop-783 -m limit --limit 1/second -j LOG +-A logdrop-783 -m limit --limit 12/minute -j ULOG -A logdrop-783 -j DROP --A logdrop-784 -m limit --limit 1/second -j LOG +-A logdrop-784 -m limit --limit 12/minute -j ULOG -A logdrop-784 -j DROP --A logdrop-785 -m limit --limit 1/second -j LOG +-A logdrop-785 -m limit --limit 12/minute -j ULOG -A logdrop-785 -j DROP --A logdrop-786 -m limit --limit 1/second -j LOG +-A logdrop-786 -m limit --limit 12/minute -j ULOG -A logdrop-786 -j DROP --A logdrop-787 -m limit --limit 1/second -j LOG +-A logdrop-787 -m limit --limit 12/minute -j ULOG -A logdrop-787 -j DROP --A logdrop-788 -m limit --limit 1/second -j LOG +-A logdrop-788 -m limit --limit 12/minute -j ULOG -A logdrop-788 -j DROP --A logdrop-789 -m limit --limit 1/second -j LOG +-A logdrop-789 -m limit --limit 12/minute -j ULOG -A logdrop-789 -j DROP -A logdrop-79 -m limit --limit 1/second -j LOG -A logdrop-79 -j DROP --A logdrop-790 -m limit --limit 1/second -j LOG +-A logdrop-790 -m limit --limit 12/minute -j ULOG -A logdrop-790 -j DROP --A logdrop-791 -m limit --limit 1/second -j LOG +-A logdrop-791 -m limit --limit 12/minute -j ULOG -A logdrop-791 -j DROP --A logdrop-792 -m limit --limit 1/second -j LOG +-A logdrop-792 -m limit --limit 12/minute -j ULOG -A logdrop-792 -j DROP --A logdrop-793 -m limit --limit 1/second -j LOG +-A logdrop-793 -m limit --limit 12/minute -j ULOG -A logdrop-793 -j DROP --A logdrop-794 -m limit --limit 1/second -j LOG +-A logdrop-794 -m limit --limit 12/minute -j ULOG -A logdrop-794 -j DROP --A logdrop-795 -m limit --limit 1/second -j LOG +-A logdrop-795 -m limit --limit 12/minute -j ULOG -A logdrop-795 -j DROP --A logdrop-796 -m limit --limit 1/second -j LOG +-A logdrop-796 -m limit --limit 12/minute -j ULOG -A logdrop-796 -j DROP --A logdrop-797 -m limit --limit 1/second -j LOG +-A logdrop-797 -m limit --limit 12/minute -j ULOG -A logdrop-797 -j DROP --A logdrop-798 -m limit --limit 1/second -j LOG +-A logdrop-798 -m limit --limit 12/minute -j ULOG -A logdrop-798 -j DROP --A logdrop-799 -m limit --limit 1/second -j LOG +-A logdrop-799 -m limit --limit 12/minute -j ULOG -A logdrop-799 -j DROP -A logdrop-8 -m limit --limit 1/second -j LOG -A logdrop-8 -j DROP --A logdrop-80 -m limit --limit 12/minute -j ULOG +-A logdrop-80 -m limit --limit 1/second -j LOG -A logdrop-80 -j DROP --A logdrop-800 -m limit --limit 1/second -j LOG +-A logdrop-800 -m limit --limit 12/minute -j ULOG -A logdrop-800 -j DROP --A logdrop-801 -m limit --limit 1/second -j LOG +-A logdrop-801 -m limit --limit 12/minute -j ULOG -A logdrop-801 -j DROP --A logdrop-802 -m limit --limit 1/second -j LOG +-A logdrop-802 -m limit --limit 12/minute -j ULOG -A logdrop-802 -j DROP --A logdrop-803 -m limit --limit 1/second -j LOG +-A logdrop-803 -m limit --limit 12/minute -j ULOG -A logdrop-803 -j DROP --A logdrop-804 -m limit --limit 1/second -j LOG +-A logdrop-804 -m limit --limit 12/minute -j ULOG -A logdrop-804 -j DROP --A logdrop-805 -m limit --limit 1/second -j LOG +-A logdrop-805 -m limit --limit 12/minute -j ULOG -A logdrop-805 -j DROP --A logdrop-806 -m limit --limit 1/second -j LOG +-A logdrop-806 -m limit --limit 12/minute -j ULOG -A logdrop-806 -j DROP --A logdrop-807 -m limit --limit 1/second -j LOG +-A logdrop-807 -m limit --limit 12/minute -j ULOG -A logdrop-807 -j DROP --A logdrop-808 -m limit --limit 1/second -j LOG +-A logdrop-808 -m limit --limit 12/minute -j ULOG -A logdrop-808 -j DROP --A logdrop-809 -m limit --limit 1/second -j LOG +-A logdrop-809 -m limit --limit 12/minute -j ULOG -A logdrop-809 -j DROP --A logdrop-81 -m limit --limit 12/minute -j ULOG +-A logdrop-81 -m limit --limit 1/second -j LOG -A logdrop-81 -j DROP --A logdrop-810 -m limit --limit 1/second -j LOG +-A logdrop-810 -m limit --limit 12/minute -j ULOG -A logdrop-810 -j DROP --A logdrop-811 -m limit --limit 1/second -j LOG +-A logdrop-811 -m limit --limit 12/minute -j ULOG -A logdrop-811 -j DROP --A logdrop-812 -m limit --limit 1/second -j LOG +-A logdrop-812 -m limit --limit 12/minute -j ULOG -A logdrop-812 -j DROP --A logdrop-813 -m limit --limit 1/second -j LOG +-A logdrop-813 -m limit --limit 12/minute -j ULOG -A logdrop-813 -j DROP --A logdrop-814 -m limit --limit 1/second -j LOG +-A logdrop-814 -m limit --limit 12/minute -j ULOG -A logdrop-814 -j DROP --A logdrop-815 -m limit --limit 1/second -j LOG +-A logdrop-815 -m limit --limit 12/minute -j ULOG -A logdrop-815 -j DROP -A logdrop-816 -m limit --limit 12/minute -j ULOG -A logdrop-816 -j DROP @@ -53120,7 +89585,7 @@ hash:net family inet -A logdrop-818 -j DROP -A logdrop-819 -m limit --limit 12/minute -j ULOG -A logdrop-819 -j DROP --A logdrop-82 -m limit --limit 12/minute -j ULOG +-A logdrop-82 -m limit --limit 1/second -j LOG -A logdrop-82 -j DROP -A logdrop-820 -m limit --limit 12/minute -j ULOG -A logdrop-820 -j DROP @@ -53142,139 +89607,139 @@ hash:net family inet -A logdrop-828 -j DROP -A logdrop-829 -m limit --limit 12/minute -j ULOG -A logdrop-829 -j DROP --A logdrop-83 -m limit --limit 12/minute -j ULOG +-A logdrop-83 -m limit --limit 1/second -j LOG -A logdrop-83 -j DROP --A logdrop-830 -m limit --limit 12/minute -j ULOG +-A logdrop-830 -m limit --limit 1/second -j LOG -A logdrop-830 -j DROP --A logdrop-831 -m limit --limit 12/minute -j ULOG +-A logdrop-831 -m limit --limit 1/second -j LOG -A logdrop-831 -j DROP --A logdrop-832 -m limit --limit 12/minute -j ULOG +-A logdrop-832 -m limit --limit 1/second -j LOG -A logdrop-832 -j DROP --A logdrop-833 -m limit --limit 12/minute -j ULOG +-A logdrop-833 -m limit --limit 1/second -j LOG -A logdrop-833 -j DROP --A logdrop-834 -m limit --limit 12/minute -j ULOG +-A logdrop-834 -m limit --limit 1/second -j LOG -A logdrop-834 -j DROP --A logdrop-835 -m limit --limit 12/minute -j ULOG +-A logdrop-835 -m limit --limit 1/second -j LOG -A logdrop-835 -j DROP --A logdrop-836 -m limit --limit 12/minute -j ULOG +-A logdrop-836 -m limit --limit 1/second -j LOG -A logdrop-836 -j DROP --A logdrop-837 -m limit --limit 12/minute -j ULOG +-A logdrop-837 -m limit --limit 1/second -j LOG -A logdrop-837 -j DROP --A logdrop-838 -m limit --limit 12/minute -j ULOG +-A logdrop-838 -m limit --limit 1/second -j LOG -A logdrop-838 -j DROP --A logdrop-839 -m limit --limit 12/minute -j ULOG +-A logdrop-839 -m limit --limit 1/second -j LOG -A logdrop-839 -j DROP --A logdrop-84 -m limit --limit 12/minute -j ULOG +-A logdrop-84 -m limit --limit 1/second -j LOG -A logdrop-84 -j DROP --A logdrop-840 -m limit --limit 12/minute -j ULOG +-A logdrop-840 -m limit --limit 1/second -j LOG -A logdrop-840 -j DROP --A logdrop-841 -m limit --limit 12/minute -j ULOG +-A logdrop-841 -m limit --limit 1/second -j LOG -A logdrop-841 -j DROP --A logdrop-842 -m limit --limit 12/minute -j ULOG +-A logdrop-842 -m limit --limit 1/second -j LOG -A logdrop-842 -j DROP --A logdrop-843 -m limit --limit 12/minute -j ULOG +-A logdrop-843 -m limit --limit 1/second -j LOG -A logdrop-843 -j DROP --A logdrop-844 -m limit --limit 12/minute -j ULOG +-A logdrop-844 -m limit --limit 1/second -j LOG -A logdrop-844 -j DROP --A logdrop-845 -m limit --limit 12/minute -j ULOG +-A logdrop-845 -m limit --limit 1/second -j LOG -A logdrop-845 -j DROP --A logdrop-846 -m limit --limit 12/minute -j ULOG +-A logdrop-846 -m limit --limit 1/second -j LOG -A logdrop-846 -j DROP --A logdrop-847 -m limit --limit 12/minute -j ULOG +-A logdrop-847 -m limit --limit 1/second -j LOG -A logdrop-847 -j DROP --A logdrop-848 -m limit --limit 12/minute -j ULOG +-A logdrop-848 -m limit --limit 1/second -j LOG -A logdrop-848 -j DROP --A logdrop-849 -m limit --limit 12/minute -j ULOG +-A logdrop-849 -m limit --limit 1/second -j LOG -A logdrop-849 -j DROP --A logdrop-85 -m limit --limit 12/minute -j ULOG +-A logdrop-85 -m limit --limit 1/second -j LOG -A logdrop-85 -j DROP --A logdrop-850 -m limit --limit 12/minute -j ULOG +-A logdrop-850 -m limit --limit 1/second -j LOG -A logdrop-850 -j DROP --A logdrop-851 -m limit --limit 12/minute -j ULOG +-A logdrop-851 -m limit --limit 1/second -j LOG -A logdrop-851 -j DROP --A logdrop-852 -m limit --limit 12/minute -j ULOG +-A logdrop-852 -m limit --limit 1/second -j LOG -A logdrop-852 -j DROP --A logdrop-853 -m limit --limit 12/minute -j ULOG +-A logdrop-853 -m limit --limit 1/second -j LOG -A logdrop-853 -j DROP --A logdrop-854 -m limit --limit 12/minute -j ULOG +-A logdrop-854 -m limit --limit 1/second -j LOG -A logdrop-854 -j DROP --A logdrop-855 -m limit --limit 12/minute -j ULOG +-A logdrop-855 -m limit --limit 1/second -j LOG -A logdrop-855 -j DROP --A logdrop-856 -m limit --limit 12/minute -j ULOG +-A logdrop-856 -m limit --limit 1/second -j LOG -A logdrop-856 -j DROP --A logdrop-857 -m limit --limit 12/minute -j ULOG +-A logdrop-857 -m limit --limit 1/second -j LOG -A logdrop-857 -j DROP --A logdrop-858 -m limit --limit 12/minute -j ULOG +-A logdrop-858 -m limit --limit 1/second -j LOG -A logdrop-858 -j DROP --A logdrop-859 -m limit --limit 12/minute -j ULOG +-A logdrop-859 -m limit --limit 1/second -j LOG -A logdrop-859 -j DROP --A logdrop-86 -m limit --limit 12/minute -j ULOG +-A logdrop-86 -m limit --limit 1/second -j LOG -A logdrop-86 -j DROP --A logdrop-860 -m limit --limit 12/minute -j ULOG +-A logdrop-860 -m limit --limit 1/second -j LOG -A logdrop-860 -j DROP --A logdrop-861 -m limit --limit 12/minute -j ULOG +-A logdrop-861 -m limit --limit 1/second -j LOG -A logdrop-861 -j DROP --A logdrop-862 -m limit --limit 12/minute -j ULOG +-A logdrop-862 -m limit --limit 1/second -j LOG -A logdrop-862 -j DROP --A logdrop-863 -m limit --limit 12/minute -j ULOG +-A logdrop-863 -m limit --limit 1/second -j LOG -A logdrop-863 -j DROP --A logdrop-864 -m limit --limit 12/minute -j ULOG +-A logdrop-864 -m limit --limit 1/second -j LOG -A logdrop-864 -j DROP --A logdrop-865 -m limit --limit 12/minute -j ULOG +-A logdrop-865 -m limit --limit 1/second -j LOG -A logdrop-865 -j DROP --A logdrop-866 -m limit --limit 12/minute -j ULOG +-A logdrop-866 -m limit --limit 1/second -j LOG -A logdrop-866 -j DROP --A logdrop-867 -m limit --limit 12/minute -j ULOG +-A logdrop-867 -m limit --limit 1/second -j LOG -A logdrop-867 -j DROP --A logdrop-868 -m limit --limit 12/minute -j ULOG +-A logdrop-868 -m limit --limit 1/second -j LOG -A logdrop-868 -j DROP --A logdrop-869 -m limit --limit 12/minute -j ULOG +-A logdrop-869 -m limit --limit 1/second -j LOG -A logdrop-869 -j DROP --A logdrop-87 -m limit --limit 12/minute -j ULOG +-A logdrop-87 -m limit --limit 1/second -j LOG -A logdrop-87 -j DROP --A logdrop-870 -m limit --limit 12/minute -j ULOG +-A logdrop-870 -m limit --limit 1/second -j LOG -A logdrop-870 -j DROP --A logdrop-871 -m limit --limit 12/minute -j ULOG +-A logdrop-871 -m limit --limit 1/second -j LOG -A logdrop-871 -j DROP --A logdrop-872 -m limit --limit 12/minute -j ULOG +-A logdrop-872 -m limit --limit 1/second -j LOG -A logdrop-872 -j DROP --A logdrop-873 -m limit --limit 12/minute -j ULOG +-A logdrop-873 -m limit --limit 1/second -j LOG -A logdrop-873 -j DROP --A logdrop-874 -m limit --limit 12/minute -j ULOG +-A logdrop-874 -m limit --limit 1/second -j LOG -A logdrop-874 -j DROP --A logdrop-875 -m limit --limit 12/minute -j ULOG +-A logdrop-875 -m limit --limit 1/second -j LOG -A logdrop-875 -j DROP --A logdrop-876 -m limit --limit 12/minute -j ULOG +-A logdrop-876 -m limit --limit 1/second -j LOG -A logdrop-876 -j DROP --A logdrop-877 -m limit --limit 12/minute -j ULOG +-A logdrop-877 -m limit --limit 1/second -j LOG -A logdrop-877 -j DROP --A logdrop-878 -m limit --limit 12/minute -j ULOG +-A logdrop-878 -m limit --limit 1/second -j LOG -A logdrop-878 -j DROP --A logdrop-879 -m limit --limit 12/minute -j ULOG +-A logdrop-879 -m limit --limit 1/second -j LOG -A logdrop-879 -j DROP --A logdrop-88 -m limit --limit 12/minute -j ULOG +-A logdrop-88 -m limit --limit 1/second -j LOG -A logdrop-88 -j DROP --A logdrop-880 -m limit --limit 12/minute -j ULOG +-A logdrop-880 -m limit --limit 1/second -j LOG -A logdrop-880 -j DROP --A logdrop-881 -m limit --limit 12/minute -j ULOG +-A logdrop-881 -m limit --limit 1/second -j LOG -A logdrop-881 -j DROP --A logdrop-882 -m limit --limit 12/minute -j ULOG +-A logdrop-882 -m limit --limit 1/second -j LOG -A logdrop-882 -j DROP --A logdrop-883 -m limit --limit 12/minute -j ULOG +-A logdrop-883 -m limit --limit 1/second -j LOG -A logdrop-883 -j DROP --A logdrop-884 -m limit --limit 12/minute -j ULOG +-A logdrop-884 -m limit --limit 1/second -j LOG -A logdrop-884 -j DROP --A logdrop-885 -m limit --limit 12/minute -j ULOG +-A logdrop-885 -m limit --limit 1/second -j LOG -A logdrop-885 -j DROP --A logdrop-886 -m limit --limit 12/minute -j ULOG +-A logdrop-886 -m limit --limit 1/second -j LOG -A logdrop-886 -j DROP --A logdrop-887 -m limit --limit 12/minute -j ULOG +-A logdrop-887 -m limit --limit 1/second -j LOG -A logdrop-887 -j DROP -A logdrop-888 -m limit --limit 1/second -j LOG -A logdrop-888 -j DROP -A logdrop-889 -m limit --limit 1/second -j LOG -A logdrop-889 -j DROP --A logdrop-89 -m limit --limit 12/minute -j ULOG +-A logdrop-89 -m limit --limit 1/second -j LOG -A logdrop-89 -j DROP -A logdrop-890 -m limit --limit 1/second -j LOG -A logdrop-890 -j DROP @@ -53298,7 +89763,7 @@ hash:net family inet -A logdrop-899 -j DROP -A logdrop-9 -m limit --limit 1/second -j LOG -A logdrop-9 -j DROP --A logdrop-90 -m limit --limit 12/minute -j ULOG +-A logdrop-90 -m limit --limit 1/second -j LOG -A logdrop-90 -j DROP -A logdrop-900 -m limit --limit 1/second -j LOG -A logdrop-900 -j DROP @@ -53320,7 +89785,7 @@ hash:net family inet -A logdrop-908 -j DROP -A logdrop-909 -m limit --limit 1/second -j LOG -A logdrop-909 -j DROP --A logdrop-91 -m limit --limit 12/minute -j ULOG +-A logdrop-91 -m limit --limit 1/second -j LOG -A logdrop-91 -j DROP -A logdrop-910 -m limit --limit 1/second -j LOG -A logdrop-910 -j DROP @@ -53342,184 +89807,267 @@ hash:net family inet -A logdrop-918 -j DROP -A logdrop-919 -m limit --limit 1/second -j LOG -A logdrop-919 -j DROP --A logdrop-92 -m limit --limit 12/minute -j ULOG +-A logdrop-92 -m limit --limit 1/second -j LOG -A logdrop-92 -j DROP --A logdrop-920 -m limit --limit 1/second -j LOG +-A logdrop-920 -j TEE --gateway 10.0.0.1 +-A logdrop-920 -j TEE --gateway 10.0.0.2 -A logdrop-920 -j DROP --A logdrop-921 -m limit --limit 1/second -j LOG +-A logdrop-921 -j TEE --gateway 10.0.0.1 +-A logdrop-921 -j TEE --gateway 10.0.0.2 -A logdrop-921 -j DROP --A logdrop-922 -m limit --limit 1/second -j LOG +-A logdrop-922 -j TEE --gateway 10.0.0.1 +-A logdrop-922 -j TEE --gateway 10.0.0.2 -A logdrop-922 -j DROP --A logdrop-923 -m limit --limit 1/second -j LOG +-A logdrop-923 -j TEE --gateway 10.0.0.1 +-A logdrop-923 -j TEE --gateway 10.0.0.2 -A logdrop-923 -j DROP --A logdrop-924 -m limit --limit 1/second -j LOG +-A logdrop-924 -j TEE --gateway 10.0.0.1 +-A logdrop-924 -j TEE --gateway 10.0.0.2 -A logdrop-924 -j DROP --A logdrop-925 -m limit --limit 1/second -j LOG +-A logdrop-925 -j TEE --gateway 10.0.0.1 +-A logdrop-925 -j TEE --gateway 10.0.0.2 -A logdrop-925 -j DROP --A logdrop-926 -m limit --limit 1/second -j LOG +-A logdrop-926 -j TEE --gateway 10.0.0.1 +-A logdrop-926 -j TEE --gateway 10.0.0.2 -A logdrop-926 -j DROP --A logdrop-927 -m limit --limit 1/second -j LOG +-A logdrop-927 -j TEE --gateway 10.0.0.1 +-A logdrop-927 -j TEE --gateway 10.0.0.2 -A logdrop-927 -j DROP --A logdrop-928 -m limit --limit 1/second -j LOG +-A logdrop-928 -j TEE --gateway 10.0.0.1 +-A logdrop-928 -j TEE --gateway 10.0.0.2 -A logdrop-928 -j DROP --A logdrop-929 -m limit --limit 1/second -j LOG +-A logdrop-929 -j TEE --gateway 10.0.0.1 +-A logdrop-929 -j TEE --gateway 10.0.0.2 -A logdrop-929 -j DROP --A logdrop-93 -m limit --limit 12/minute -j ULOG +-A logdrop-93 -m limit --limit 1/second -j LOG -A logdrop-93 -j DROP --A logdrop-930 -m limit --limit 1/second -j LOG +-A logdrop-930 -j TEE --gateway 10.0.0.1 +-A logdrop-930 -j TEE --gateway 10.0.0.2 -A logdrop-930 -j DROP --A logdrop-931 -m limit --limit 1/second -j LOG +-A logdrop-931 -j TEE --gateway 10.0.0.1 +-A logdrop-931 -j TEE --gateway 10.0.0.2 -A logdrop-931 -j DROP --A logdrop-932 -m limit --limit 1/second -j LOG +-A logdrop-932 -j TEE --gateway 10.0.0.1 +-A logdrop-932 -j TEE --gateway 10.0.0.2 -A logdrop-932 -j DROP --A logdrop-933 -m limit --limit 1/second -j LOG +-A logdrop-933 -j TEE --gateway 10.0.0.1 +-A logdrop-933 -j TEE --gateway 10.0.0.2 -A logdrop-933 -j DROP --A logdrop-934 -m limit --limit 1/second -j LOG +-A logdrop-934 -j TEE --gateway 10.0.0.1 +-A logdrop-934 -j TEE --gateway 10.0.0.2 -A logdrop-934 -j DROP --A logdrop-935 -m limit --limit 1/second -j LOG +-A logdrop-935 -j TEE --gateway 10.0.0.1 +-A logdrop-935 -j TEE --gateway 10.0.0.2 -A logdrop-935 -j DROP --A logdrop-936 -m limit --limit 1/second -j LOG +-A logdrop-936 -j TEE --gateway 10.0.0.1 +-A logdrop-936 -j TEE --gateway 10.0.0.2 -A logdrop-936 -j DROP --A logdrop-937 -m limit --limit 1/second -j LOG +-A logdrop-937 -j TEE --gateway 10.0.0.1 +-A logdrop-937 -j TEE --gateway 10.0.0.2 -A logdrop-937 -j DROP --A logdrop-938 -m limit --limit 1/second -j LOG +-A logdrop-938 -j TEE --gateway 10.0.0.1 +-A logdrop-938 -j TEE --gateway 10.0.0.2 -A logdrop-938 -j DROP --A logdrop-939 -m limit --limit 1/second -j LOG +-A logdrop-939 -j TEE --gateway 10.0.0.1 +-A logdrop-939 -j TEE --gateway 10.0.0.2 -A logdrop-939 -j DROP --A logdrop-94 -m limit --limit 12/minute -j ULOG +-A logdrop-94 -m limit --limit 1/second -j LOG -A logdrop-94 -j DROP --A logdrop-940 -m limit --limit 1/second -j LOG +-A logdrop-940 -j TEE --gateway 10.0.0.1 +-A logdrop-940 -j TEE --gateway 10.0.0.2 -A logdrop-940 -j DROP --A logdrop-941 -m limit --limit 1/second -j LOG +-A logdrop-941 -j TEE --gateway 10.0.0.1 +-A logdrop-941 -j TEE --gateway 10.0.0.2 -A logdrop-941 -j DROP --A logdrop-942 -m limit --limit 1/second -j LOG +-A logdrop-942 -j TEE --gateway 10.0.0.1 +-A logdrop-942 -j TEE --gateway 10.0.0.2 -A logdrop-942 -j DROP --A logdrop-943 -m limit --limit 1/second -j LOG +-A logdrop-943 -j TEE --gateway 10.0.0.1 +-A logdrop-943 -j TEE --gateway 10.0.0.2 -A logdrop-943 -j DROP --A logdrop-944 -m limit --limit 1/second -j LOG +-A logdrop-944 -j TEE --gateway 10.0.0.1 +-A logdrop-944 -j TEE --gateway 10.0.0.2 -A logdrop-944 -j DROP --A logdrop-945 -m limit --limit 1/second -j LOG +-A logdrop-945 -j TEE --gateway 10.0.0.1 +-A logdrop-945 -j TEE --gateway 10.0.0.2 -A logdrop-945 -j DROP --A logdrop-946 -m limit --limit 1/second -j LOG +-A logdrop-946 -j TEE --gateway 10.0.0.1 +-A logdrop-946 -j TEE --gateway 10.0.0.2 -A logdrop-946 -j DROP --A logdrop-947 -m limit --limit 1/second -j LOG +-A logdrop-947 -j TEE --gateway 10.0.0.1 +-A logdrop-947 -j TEE --gateway 10.0.0.2 -A logdrop-947 -j DROP --A logdrop-948 -m limit --limit 1/second -j LOG +-A logdrop-948 -j TEE --gateway 10.0.0.1 +-A logdrop-948 -j TEE --gateway 10.0.0.2 -A logdrop-948 -j DROP --A logdrop-949 -m limit --limit 1/second -j LOG +-A logdrop-949 -j TEE --gateway 10.0.0.1 +-A logdrop-949 -j TEE --gateway 10.0.0.2 -A logdrop-949 -j DROP --A logdrop-95 -m limit --limit 12/minute -j ULOG +-A logdrop-95 -m limit --limit 1/second -j LOG -A logdrop-95 -j DROP --A logdrop-950 -m limit --limit 1/second -j LOG +-A logdrop-950 -j TEE --gateway 10.0.0.1 +-A logdrop-950 -j TEE --gateway 10.0.0.2 -A logdrop-950 -j DROP --A logdrop-951 -m limit --limit 1/second -j LOG +-A logdrop-951 -j TEE --gateway 10.0.0.1 +-A logdrop-951 -j TEE --gateway 10.0.0.2 -A logdrop-951 -j DROP --A logdrop-952 -m limit --limit 1/second -j LOG +-A logdrop-952 -j TEE --gateway 10.0.0.1 +-A logdrop-952 -j TEE --gateway 10.0.0.2 -A logdrop-952 -j DROP --A logdrop-953 -m limit --limit 1/second -j LOG +-A logdrop-953 -j TEE --gateway 10.0.0.1 +-A logdrop-953 -j TEE --gateway 10.0.0.2 -A logdrop-953 -j DROP --A logdrop-954 -m limit --limit 1/second -j LOG +-A logdrop-954 -j TEE --gateway 10.0.0.1 +-A logdrop-954 -j TEE --gateway 10.0.0.2 -A logdrop-954 -j DROP --A logdrop-955 -m limit --limit 1/second -j LOG +-A logdrop-955 -j TEE --gateway 10.0.0.1 +-A logdrop-955 -j TEE --gateway 10.0.0.2 -A logdrop-955 -j DROP --A logdrop-956 -m limit --limit 1/second -j LOG +-A logdrop-956 -j TEE --gateway 10.0.0.1 +-A logdrop-956 -j TEE --gateway 10.0.0.2 -A logdrop-956 -j DROP --A logdrop-957 -m limit --limit 1/second -j LOG +-A logdrop-957 -j TEE --gateway 10.0.0.1 +-A logdrop-957 -j TEE --gateway 10.0.0.2 -A logdrop-957 -j DROP --A logdrop-958 -m limit --limit 1/second -j LOG +-A logdrop-958 -j TEE --gateway 10.0.0.1 +-A logdrop-958 -j TEE --gateway 10.0.0.2 -A logdrop-958 -j DROP --A logdrop-959 -m limit --limit 1/second -j LOG +-A logdrop-959 -j TEE --gateway 10.0.0.1 +-A logdrop-959 -j TEE --gateway 10.0.0.2 -A logdrop-959 -j DROP --A logdrop-96 -m limit --limit 12/minute -j ULOG +-A logdrop-96 -m limit --limit 1/second -j LOG -A logdrop-96 -j DROP --A logdrop-960 -m limit --limit 1/second -j LOG +-A logdrop-960 -j TEE --gateway 10.0.0.1 +-A logdrop-960 -j TEE --gateway 10.0.0.2 -A logdrop-960 -j DROP --A logdrop-961 -m limit --limit 1/second -j LOG +-A logdrop-961 -j TEE --gateway 10.0.0.1 +-A logdrop-961 -j TEE --gateway 10.0.0.2 -A logdrop-961 -j DROP --A logdrop-962 -m limit --limit 1/second -j LOG +-A logdrop-962 -j TEE --gateway 10.0.0.1 +-A logdrop-962 -j TEE --gateway 10.0.0.2 -A logdrop-962 -j DROP --A logdrop-963 -m limit --limit 1/second -j LOG +-A logdrop-963 -j TEE --gateway 10.0.0.1 +-A logdrop-963 -j TEE --gateway 10.0.0.2 -A logdrop-963 -j DROP --A logdrop-964 -m limit --limit 1/second -j LOG +-A logdrop-964 -j TEE --gateway 10.0.0.1 +-A logdrop-964 -j TEE --gateway 10.0.0.2 -A logdrop-964 -j DROP --A logdrop-965 -m limit --limit 1/second -j LOG +-A logdrop-965 -j TEE --gateway 10.0.0.1 +-A logdrop-965 -j TEE --gateway 10.0.0.2 -A logdrop-965 -j DROP --A logdrop-966 -m limit --limit 1/second -j LOG +-A logdrop-966 -j TEE --gateway 10.0.0.1 +-A logdrop-966 -j TEE --gateway 10.0.0.2 -A logdrop-966 -j DROP --A logdrop-967 -m limit --limit 1/second -j LOG +-A logdrop-967 -j TEE --gateway 10.0.0.1 +-A logdrop-967 -j TEE --gateway 10.0.0.2 -A logdrop-967 -j DROP --A logdrop-968 -m limit --limit 12/minute -j ULOG +-A logdrop-968 -j TEE --gateway 10.0.0.1 +-A logdrop-968 -j TEE --gateway 10.0.0.2 -A logdrop-968 -j DROP --A logdrop-969 -m limit --limit 12/minute -j ULOG +-A logdrop-969 -j TEE --gateway 10.0.0.1 +-A logdrop-969 -j TEE --gateway 10.0.0.2 -A logdrop-969 -j DROP --A logdrop-97 -m limit --limit 12/minute -j ULOG +-A logdrop-97 -m limit --limit 1/second -j LOG -A logdrop-97 -j DROP --A logdrop-970 -m limit --limit 12/minute -j ULOG +-A logdrop-970 -j TEE --gateway 10.0.0.1 +-A logdrop-970 -j TEE --gateway 10.0.0.2 -A logdrop-970 -j DROP --A logdrop-971 -m limit --limit 12/minute -j ULOG +-A logdrop-971 -j TEE --gateway 10.0.0.1 +-A logdrop-971 -j TEE --gateway 10.0.0.2 -A logdrop-971 -j DROP --A logdrop-972 -m limit --limit 12/minute -j ULOG +-A logdrop-972 -j TEE --gateway 10.0.0.1 +-A logdrop-972 -j TEE --gateway 10.0.0.2 -A logdrop-972 -j DROP --A logdrop-973 -m limit --limit 12/minute -j ULOG +-A logdrop-973 -j TEE --gateway 10.0.0.1 +-A logdrop-973 -j TEE --gateway 10.0.0.2 -A logdrop-973 -j DROP --A logdrop-974 -m limit --limit 12/minute -j ULOG +-A logdrop-974 -j TEE --gateway 10.0.0.1 +-A logdrop-974 -j TEE --gateway 10.0.0.2 -A logdrop-974 -j DROP --A logdrop-975 -m limit --limit 12/minute -j ULOG +-A logdrop-975 -j TEE --gateway 10.0.0.1 +-A logdrop-975 -j TEE --gateway 10.0.0.2 -A logdrop-975 -j DROP --A logdrop-976 -m limit --limit 12/minute -j ULOG +-A logdrop-976 -j TEE --gateway 10.0.0.1 +-A logdrop-976 -j TEE --gateway 10.0.0.2 -A logdrop-976 -j DROP --A logdrop-977 -m limit --limit 12/minute -j ULOG +-A logdrop-977 -j TEE --gateway 10.0.0.1 +-A logdrop-977 -j TEE --gateway 10.0.0.2 -A logdrop-977 -j DROP --A logdrop-978 -m limit --limit 12/minute -j ULOG +-A logdrop-978 -j TEE --gateway 10.0.0.1 +-A logdrop-978 -j TEE --gateway 10.0.0.2 -A logdrop-978 -j DROP --A logdrop-979 -m limit --limit 12/minute -j ULOG +-A logdrop-979 -j TEE --gateway 10.0.0.1 +-A logdrop-979 -j TEE --gateway 10.0.0.2 -A logdrop-979 -j DROP --A logdrop-98 -m limit --limit 12/minute -j ULOG +-A logdrop-98 -m limit --limit 1/second -j LOG -A logdrop-98 -j DROP --A logdrop-980 -m limit --limit 12/minute -j ULOG +-A logdrop-980 -j TEE --gateway 10.0.0.1 +-A logdrop-980 -j TEE --gateway 10.0.0.2 -A logdrop-980 -j DROP --A logdrop-981 -m limit --limit 12/minute -j ULOG +-A logdrop-981 -j TEE --gateway 10.0.0.1 +-A logdrop-981 -j TEE --gateway 10.0.0.2 -A logdrop-981 -j DROP --A logdrop-982 -m limit --limit 12/minute -j ULOG +-A logdrop-982 -j TEE --gateway 10.0.0.1 +-A logdrop-982 -j TEE --gateway 10.0.0.2 -A logdrop-982 -j DROP --A logdrop-983 -m limit --limit 12/minute -j ULOG +-A logdrop-983 -j TEE --gateway 10.0.0.1 +-A logdrop-983 -j TEE --gateway 10.0.0.2 -A logdrop-983 -j DROP --A logdrop-984 -m limit --limit 12/minute -j ULOG +-A logdrop-984 -j TEE --gateway 10.0.0.1 +-A logdrop-984 -j TEE --gateway 10.0.0.2 -A logdrop-984 -j DROP --A logdrop-985 -m limit --limit 12/minute -j ULOG +-A logdrop-985 -j TEE --gateway 10.0.0.1 +-A logdrop-985 -j TEE --gateway 10.0.0.2 -A logdrop-985 -j DROP --A logdrop-986 -m limit --limit 12/minute -j ULOG +-A logdrop-986 -j TEE --gateway 10.0.0.1 +-A logdrop-986 -j TEE --gateway 10.0.0.2 -A logdrop-986 -j DROP --A logdrop-987 -m limit --limit 12/minute -j ULOG +-A logdrop-987 -j TEE --gateway 10.0.0.1 +-A logdrop-987 -j TEE --gateway 10.0.0.2 -A logdrop-987 -j DROP --A logdrop-988 -m limit --limit 12/minute -j ULOG +-A logdrop-988 -j TEE --gateway 10.0.0.1 +-A logdrop-988 -j TEE --gateway 10.0.0.2 -A logdrop-988 -j DROP --A logdrop-989 -m limit --limit 12/minute -j ULOG +-A logdrop-989 -j TEE --gateway 10.0.0.1 +-A logdrop-989 -j TEE --gateway 10.0.0.2 -A logdrop-989 -j DROP --A logdrop-99 -m limit --limit 12/minute -j ULOG +-A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP --A logdrop-990 -m limit --limit 12/minute -j ULOG +-A logdrop-990 -j TEE --gateway 10.0.0.1 +-A logdrop-990 -j TEE --gateway 10.0.0.2 -A logdrop-990 -j DROP --A logdrop-991 -m limit --limit 12/minute -j ULOG +-A logdrop-991 -j TEE --gateway 10.0.0.1 +-A logdrop-991 -j TEE --gateway 10.0.0.2 -A logdrop-991 -j DROP --A logdrop-992 -m limit --limit 12/minute -j ULOG +-A logdrop-992 -j TEE --gateway 10.0.0.1 +-A logdrop-992 -j TEE --gateway 10.0.0.2 -A logdrop-992 -j DROP --A logdrop-993 -m limit --limit 12/minute -j ULOG +-A logdrop-993 -j TEE --gateway 10.0.0.1 +-A logdrop-993 -j TEE --gateway 10.0.0.2 -A logdrop-993 -j DROP --A logdrop-994 -m limit --limit 12/minute -j ULOG +-A logdrop-994 -j TEE --gateway 10.0.0.1 +-A logdrop-994 -j TEE --gateway 10.0.0.2 -A logdrop-994 -j DROP --A logdrop-995 -m limit --limit 12/minute -j ULOG +-A logdrop-995 -j TEE --gateway 10.0.0.1 +-A logdrop-995 -j TEE --gateway 10.0.0.2 -A logdrop-995 -j DROP --A logdrop-996 -m limit --limit 12/minute -j ULOG +-A logdrop-996 -j TEE --gateway 10.0.0.1 +-A logdrop-996 -j TEE --gateway 10.0.0.2 -A logdrop-996 -j DROP --A logdrop-997 -m limit --limit 12/minute -j ULOG +-A logdrop-997 -j TEE --gateway 10.0.0.1 +-A logdrop-997 -j TEE --gateway 10.0.0.2 -A logdrop-997 -j DROP --A logdrop-998 -m limit --limit 12/minute -j ULOG +-A logdrop-998 -j TEE --gateway 10.0.0.1 +-A logdrop-998 -j TEE --gateway 10.0.0.2 -A logdrop-998 -j DROP --A logdrop-999 -m limit --limit 12/minute -j ULOG +-A logdrop-999 -j TEE --gateway 10.0.0.1 +-A logdrop-999 -j TEE --gateway 10.0.0.2 -A logdrop-999 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 12/minute -j ULOG +-A logpass-1 -j LOG +-A logpass-2 -j TEE --gateway 10.0.0.1 +-A logpass-2 -j TEE --gateway 10.0.0.2 +-A logpass-3 -m limit --limit 12/minute -j ULOG COMMIT *mangle :FORWARD ACCEPT [0:0] @@ -53879,6 +90427,188 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -54509,6 +91239,353 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack @@ -54531,17 +91608,17 @@ COMMIT :limit-1004 - [0:0] :limit-1005 - [0:0] :limit-1006 - [0:0] -:limit-1007 - [0:0] :limit-1008 - [0:0] :limit-1009 - [0:0] :limit-101 - [0:0] :limit-1010 - [0:0] :limit-1011 - [0:0] :limit-1012 - [0:0] -:limit-1013 - [0:0] +:limit-1014 - [0:0] :limit-1015 - [0:0] :limit-1016 - [0:0] :limit-1017 - [0:0] +:limit-1018 - [0:0] :limit-1019 - [0:0] :limit-102 - [0:0] :limit-1020 - [0:0] @@ -54551,13 +91628,13 @@ COMMIT :limit-1024 - [0:0] :limit-1025 - [0:0] :limit-1026 - [0:0] -:limit-1027 - [0:0] :limit-1028 - [0:0] :limit-1029 - [0:0] :limit-103 - [0:0] +:limit-1030 - [0:0] :limit-1031 - [0:0] :limit-1032 - [0:0] -:limit-1033 - [0:0] +:limit-1034 - [0:0] :limit-1035 - [0:0] :limit-1036 - [0:0] :limit-1037 - [0:0] @@ -54570,13 +91647,13 @@ COMMIT :limit-1043 - [0:0] :limit-1044 - [0:0] :limit-1045 - [0:0] -:limit-1047 - [0:0] +:limit-1046 - [0:0] :limit-1048 - [0:0] :limit-1049 - [0:0] :limit-105 - [0:0] +:limit-1050 - [0:0] :limit-1051 - [0:0] :limit-1052 - [0:0] -:limit-1053 - [0:0] :limit-1054 - [0:0] :limit-1055 - [0:0] :limit-1056 - [0:0] @@ -54586,17 +91663,17 @@ COMMIT :limit-106 - [0:0] :limit-1060 - [0:0] :limit-1061 - [0:0] +:limit-1062 - [0:0] :limit-1063 - [0:0] :limit-1064 - [0:0] :limit-1065 - [0:0] -:limit-1067 - [0:0] +:limit-1066 - [0:0] :limit-1068 - [0:0] :limit-1069 - [0:0] :limit-107 - [0:0] :limit-1070 - [0:0] :limit-1071 - [0:0] :limit-1072 - [0:0] -:limit-1073 - [0:0] :limit-1074 - [0:0] :limit-1075 - [0:0] :limit-1076 - [0:0] @@ -54610,26 +91687,28 @@ COMMIT :limit-1083 - [0:0] :limit-1084 - [0:0] :limit-1085 - [0:0] +:limit-1086 - [0:0] :limit-1087 - [0:0] :limit-1088 - [0:0] :limit-1089 - [0:0] :limit-109 - [0:0] +:limit-1090 - [0:0] :limit-1091 - [0:0] :limit-1092 - [0:0] :limit-1093 - [0:0] :limit-1094 - [0:0] :limit-1095 - [0:0] :limit-1096 - [0:0] -:limit-1097 - [0:0] :limit-1098 - [0:0] :limit-1099 - [0:0] :limit-11 - [0:0] :limit-110 - [0:0] :limit-1100 - [0:0] :limit-1101 - [0:0] -:limit-1103 - [0:0] +:limit-1102 - [0:0] :limit-1104 - [0:0] :limit-1105 - [0:0] +:limit-1106 - [0:0] :limit-1107 - [0:0] :limit-1108 - [0:0] :limit-1109 - [0:0] @@ -54641,12 +91720,12 @@ COMMIT :limit-1114 - [0:0] :limit-1115 - [0:0] :limit-1116 - [0:0] -:limit-1117 - [0:0] +:limit-1118 - [0:0] :limit-1119 - [0:0] :limit-112 - [0:0] :limit-1120 - [0:0] :limit-1121 - [0:0] -:limit-1123 - [0:0] +:limit-1122 - [0:0] :limit-1124 - [0:0] :limit-1125 - [0:0] :limit-1126 - [0:0] @@ -54658,15 +91737,15 @@ COMMIT :limit-1131 - [0:0] :limit-1132 - [0:0] :limit-1133 - [0:0] +:limit-1134 - [0:0] :limit-1135 - [0:0] :limit-1136 - [0:0] -:limit-1137 - [0:0] +:limit-1138 - [0:0] :limit-1139 - [0:0] :limit-114 - [0:0] :limit-1140 - [0:0] :limit-1141 - [0:0] :limit-1142 - [0:0] -:limit-1143 - [0:0] :limit-1144 - [0:0] :limit-1145 - [0:0] :limit-1146 - [0:0] @@ -54681,12 +91760,12 @@ COMMIT :limit-1154 - [0:0] :limit-1155 - [0:0] :limit-1156 - [0:0] -:limit-1157 - [0:0] +:limit-1158 - [0:0] :limit-1159 - [0:0] :limit-116 - [0:0] :limit-1160 - [0:0] :limit-1161 - [0:0] -:limit-1163 - [0:0] +:limit-1162 - [0:0] :limit-1164 - [0:0] :limit-1165 - [0:0] :limit-1166 - [0:0] @@ -54698,9 +91777,11 @@ COMMIT :limit-1171 - [0:0] :limit-1172 - [0:0] :limit-1173 - [0:0] +:limit-1174 - [0:0] :limit-1175 - [0:0] :limit-1176 - [0:0] :limit-1177 - [0:0] +:limit-1178 - [0:0] :limit-1179 - [0:0] :limit-118 - [0:0] :limit-1180 - [0:0] @@ -54710,13 +91791,13 @@ COMMIT :limit-1184 - [0:0] :limit-1185 - [0:0] :limit-1186 - [0:0] -:limit-1187 - [0:0] :limit-1188 - [0:0] :limit-1189 - [0:0] :limit-119 - [0:0] +:limit-1190 - [0:0] :limit-1191 - [0:0] :limit-1192 - [0:0] -:limit-1193 - [0:0] +:limit-1194 - [0:0] :limit-1195 - [0:0] :limit-1196 - [0:0] :limit-1197 - [0:0] @@ -54730,13 +91811,13 @@ COMMIT :limit-1203 - [0:0] :limit-1204 - [0:0] :limit-1205 - [0:0] -:limit-1207 - [0:0] +:limit-1206 - [0:0] :limit-1208 - [0:0] :limit-1209 - [0:0] :limit-121 - [0:0] +:limit-1210 - [0:0] :limit-1211 - [0:0] :limit-1212 - [0:0] -:limit-1213 - [0:0] :limit-1214 - [0:0] :limit-1215 - [0:0] :limit-1216 - [0:0] @@ -54751,14 +91832,12 @@ COMMIT :limit-1224 - [0:0] :limit-1225 - [0:0] :limit-1226 - [0:0] -:limit-1227 - [0:0] :limit-1228 - [0:0] :limit-1229 - [0:0] :limit-123 - [0:0] :limit-1230 - [0:0] :limit-1231 - [0:0] :limit-1232 - [0:0] -:limit-1233 - [0:0] :limit-1234 - [0:0] :limit-1235 - [0:0] :limit-1236 - [0:0] @@ -54773,14 +91852,12 @@ COMMIT :limit-1244 - [0:0] :limit-1245 - [0:0] :limit-1246 - [0:0] -:limit-1247 - [0:0] :limit-1248 - [0:0] :limit-1249 - [0:0] :limit-125 - [0:0] :limit-1250 - [0:0] :limit-1251 - [0:0] :limit-1252 - [0:0] -:limit-1253 - [0:0] :limit-1254 - [0:0] :limit-1255 - [0:0] :limit-1256 - [0:0] @@ -54806,14 +91883,12 @@ COMMIT :limit-1274 - [0:0] :limit-1275 - [0:0] :limit-1276 - [0:0] -:limit-1277 - [0:0] :limit-1278 - [0:0] :limit-1279 - [0:0] :limit-128 - [0:0] :limit-1280 - [0:0] :limit-1281 - [0:0] :limit-1282 - [0:0] -:limit-1283 - [0:0] :limit-1284 - [0:0] :limit-1285 - [0:0] :limit-1286 - [0:0] @@ -54828,7 +91903,6 @@ COMMIT :limit-1294 - [0:0] :limit-1295 - [0:0] :limit-1296 - [0:0] -:limit-1297 - [0:0] :limit-1298 - [0:0] :limit-1299 - [0:0] :limit-13 - [0:0] @@ -54836,7 +91910,6 @@ COMMIT :limit-1300 - [0:0] :limit-1301 - [0:0] :limit-1302 - [0:0] -:limit-1303 - [0:0] :limit-1304 - [0:0] :limit-1305 - [0:0] :limit-1306 - [0:0] @@ -54851,14 +91924,12 @@ COMMIT :limit-1314 - [0:0] :limit-1315 - [0:0] :limit-1316 - [0:0] -:limit-1317 - [0:0] :limit-1318 - [0:0] :limit-1319 - [0:0] :limit-132 - [0:0] :limit-1320 - [0:0] :limit-1321 - [0:0] :limit-1322 - [0:0] -:limit-1323 - [0:0] :limit-1324 - [0:0] :limit-1325 - [0:0] :limit-1326 - [0:0] @@ -54873,14 +91944,12 @@ COMMIT :limit-1334 - [0:0] :limit-1335 - [0:0] :limit-1336 - [0:0] -:limit-1337 - [0:0] :limit-1338 - [0:0] :limit-1339 - [0:0] :limit-134 - [0:0] :limit-1340 - [0:0] :limit-1341 - [0:0] :limit-1342 - [0:0] -:limit-1343 - [0:0] :limit-1344 - [0:0] :limit-1345 - [0:0] :limit-1346 - [0:0] @@ -54906,14 +91975,12 @@ COMMIT :limit-1364 - [0:0] :limit-1365 - [0:0] :limit-1366 - [0:0] -:limit-1367 - [0:0] :limit-1368 - [0:0] :limit-1369 - [0:0] :limit-137 - [0:0] :limit-1370 - [0:0] :limit-1371 - [0:0] :limit-1372 - [0:0] -:limit-1373 - [0:0] :limit-1374 - [0:0] :limit-1375 - [0:0] :limit-1376 - [0:0] @@ -54928,14 +91995,12 @@ COMMIT :limit-1384 - [0:0] :limit-1385 - [0:0] :limit-1386 - [0:0] -:limit-1387 - [0:0] :limit-1388 - [0:0] :limit-1389 - [0:0] :limit-139 - [0:0] :limit-1390 - [0:0] :limit-1391 - [0:0] :limit-1392 - [0:0] -:limit-1393 - [0:0] :limit-1394 - [0:0] :limit-1395 - [0:0] :limit-1396 - [0:0] @@ -54951,14 +92016,12 @@ COMMIT :limit-1404 - [0:0] :limit-1405 - [0:0] :limit-1406 - [0:0] -:limit-1407 - [0:0] :limit-1408 - [0:0] :limit-1409 - [0:0] :limit-141 - [0:0] :limit-1410 - [0:0] :limit-1411 - [0:0] :limit-1412 - [0:0] -:limit-1413 - [0:0] :limit-1414 - [0:0] :limit-1415 - [0:0] :limit-1416 - [0:0] @@ -54973,14 +92036,12 @@ COMMIT :limit-1424 - [0:0] :limit-1425 - [0:0] :limit-1426 - [0:0] -:limit-1427 - [0:0] :limit-1428 - [0:0] :limit-1429 - [0:0] :limit-143 - [0:0] :limit-1430 - [0:0] :limit-1431 - [0:0] :limit-1432 - [0:0] -:limit-1433 - [0:0] :limit-1434 - [0:0] :limit-1435 - [0:0] :limit-1436 - [0:0] @@ -55006,14 +92067,12 @@ COMMIT :limit-1454 - [0:0] :limit-1455 - [0:0] :limit-1456 - [0:0] -:limit-1457 - [0:0] :limit-1458 - [0:0] :limit-1459 - [0:0] :limit-146 - [0:0] :limit-1460 - [0:0] :limit-1461 - [0:0] :limit-1462 - [0:0] -:limit-1463 - [0:0] :limit-1464 - [0:0] :limit-1465 - [0:0] :limit-1466 - [0:0] @@ -55028,14 +92087,12 @@ COMMIT :limit-1474 - [0:0] :limit-1475 - [0:0] :limit-1476 - [0:0] -:limit-1477 - [0:0] :limit-1478 - [0:0] :limit-1479 - [0:0] :limit-148 - [0:0] :limit-1480 - [0:0] :limit-1481 - [0:0] :limit-1482 - [0:0] -:limit-1483 - [0:0] :limit-1484 - [0:0] :limit-1485 - [0:0] :limit-1486 - [0:0] @@ -55050,7 +92107,6 @@ COMMIT :limit-1494 - [0:0] :limit-1495 - [0:0] :limit-1496 - [0:0] -:limit-1497 - [0:0] :limit-1498 - [0:0] :limit-1499 - [0:0] :limit-15 - [0:0] @@ -55058,7 +92114,6 @@ COMMIT :limit-1500 - [0:0] :limit-1501 - [0:0] :limit-1502 - [0:0] -:limit-1503 - [0:0] :limit-1504 - [0:0] :limit-1505 - [0:0] :limit-1506 - [0:0] @@ -55073,14 +92128,12 @@ COMMIT :limit-1514 - [0:0] :limit-1515 - [0:0] :limit-1516 - [0:0] -:limit-1517 - [0:0] :limit-1518 - [0:0] :limit-1519 - [0:0] :limit-152 - [0:0] :limit-1520 - [0:0] :limit-1521 - [0:0] :limit-1522 - [0:0] -:limit-1523 - [0:0] :limit-1524 - [0:0] :limit-1525 - [0:0] :limit-1526 - [0:0] @@ -55106,14 +92159,12 @@ COMMIT :limit-1544 - [0:0] :limit-1545 - [0:0] :limit-1546 - [0:0] -:limit-1547 - [0:0] :limit-1548 - [0:0] :limit-1549 - [0:0] :limit-155 - [0:0] :limit-1550 - [0:0] :limit-1551 - [0:0] :limit-1552 - [0:0] -:limit-1553 - [0:0] :limit-1554 - [0:0] :limit-1555 - [0:0] :limit-1556 - [0:0] @@ -55128,14 +92179,12 @@ COMMIT :limit-1564 - [0:0] :limit-1565 - [0:0] :limit-1566 - [0:0] -:limit-1567 - [0:0] :limit-1568 - [0:0] :limit-1569 - [0:0] :limit-157 - [0:0] :limit-1570 - [0:0] :limit-1571 - [0:0] :limit-1572 - [0:0] -:limit-1573 - [0:0] :limit-1574 - [0:0] :limit-1575 - [0:0] :limit-1576 - [0:0] @@ -55150,14 +92199,12 @@ COMMIT :limit-1584 - [0:0] :limit-1585 - [0:0] :limit-1586 - [0:0] -:limit-1587 - [0:0] :limit-1588 - [0:0] :limit-1589 - [0:0] :limit-159 - [0:0] :limit-1590 - [0:0] :limit-1591 - [0:0] :limit-1592 - [0:0] -:limit-1593 - [0:0] :limit-1594 - [0:0] :limit-1595 - [0:0] :limit-1596 - [0:0] @@ -55173,14 +92220,12 @@ COMMIT :limit-1604 - [0:0] :limit-1605 - [0:0] :limit-1606 - [0:0] -:limit-1607 - [0:0] :limit-1608 - [0:0] :limit-1609 - [0:0] :limit-161 - [0:0] :limit-1610 - [0:0] :limit-1611 - [0:0] :limit-1612 - [0:0] -:limit-1613 - [0:0] :limit-1614 - [0:0] :limit-1615 - [0:0] :limit-1616 - [0:0] @@ -55206,14 +92251,12 @@ COMMIT :limit-1634 - [0:0] :limit-1635 - [0:0] :limit-1636 - [0:0] -:limit-1637 - [0:0] :limit-1638 - [0:0] :limit-1639 - [0:0] :limit-164 - [0:0] :limit-1640 - [0:0] :limit-1641 - [0:0] :limit-1642 - [0:0] -:limit-1643 - [0:0] :limit-1644 - [0:0] :limit-1645 - [0:0] :limit-1646 - [0:0] @@ -55228,14 +92271,12 @@ COMMIT :limit-1654 - [0:0] :limit-1655 - [0:0] :limit-1656 - [0:0] -:limit-1657 - [0:0] :limit-1658 - [0:0] :limit-1659 - [0:0] :limit-166 - [0:0] :limit-1660 - [0:0] :limit-1661 - [0:0] :limit-1662 - [0:0] -:limit-1663 - [0:0] :limit-1664 - [0:0] :limit-1665 - [0:0] :limit-1666 - [0:0] @@ -55250,14 +92291,12 @@ COMMIT :limit-1674 - [0:0] :limit-1675 - [0:0] :limit-1676 - [0:0] -:limit-1677 - [0:0] :limit-1678 - [0:0] :limit-1679 - [0:0] :limit-168 - [0:0] :limit-1680 - [0:0] :limit-1681 - [0:0] :limit-1682 - [0:0] -:limit-1683 - [0:0] :limit-1684 - [0:0] :limit-1685 - [0:0] :limit-1686 - [0:0] @@ -55272,7 +92311,6 @@ COMMIT :limit-1694 - [0:0] :limit-1695 - [0:0] :limit-1696 - [0:0] -:limit-1697 - [0:0] :limit-1698 - [0:0] :limit-1699 - [0:0] :limit-17 - [0:0] @@ -55280,7 +92318,6 @@ COMMIT :limit-1700 - [0:0] :limit-1701 - [0:0] :limit-1702 - [0:0] -:limit-1703 - [0:0] :limit-1704 - [0:0] :limit-1705 - [0:0] :limit-1706 - [0:0] @@ -55306,14 +92343,12 @@ COMMIT :limit-1724 - [0:0] :limit-1725 - [0:0] :limit-1726 - [0:0] -:limit-1727 - [0:0] :limit-1728 - [0:0] :limit-1729 - [0:0] :limit-173 - [0:0] :limit-1730 - [0:0] :limit-1731 - [0:0] :limit-1732 - [0:0] -:limit-1733 - [0:0] :limit-1734 - [0:0] :limit-1735 - [0:0] :limit-1736 - [0:0] @@ -55328,14 +92363,12 @@ COMMIT :limit-1744 - [0:0] :limit-1745 - [0:0] :limit-1746 - [0:0] -:limit-1747 - [0:0] :limit-1748 - [0:0] :limit-1749 - [0:0] :limit-175 - [0:0] :limit-1750 - [0:0] :limit-1751 - [0:0] :limit-1752 - [0:0] -:limit-1753 - [0:0] :limit-1754 - [0:0] :limit-1755 - [0:0] :limit-1756 - [0:0] @@ -55350,14 +92383,12 @@ COMMIT :limit-1764 - [0:0] :limit-1765 - [0:0] :limit-1766 - [0:0] -:limit-1767 - [0:0] :limit-1768 - [0:0] :limit-1769 - [0:0] :limit-177 - [0:0] :limit-1770 - [0:0] :limit-1771 - [0:0] :limit-1772 - [0:0] -:limit-1773 - [0:0] :limit-1774 - [0:0] :limit-1775 - [0:0] :limit-1776 - [0:0] @@ -55372,14 +92403,12 @@ COMMIT :limit-1784 - [0:0] :limit-1785 - [0:0] :limit-1786 - [0:0] -:limit-1787 - [0:0] :limit-1788 - [0:0] :limit-1789 - [0:0] :limit-179 - [0:0] :limit-1790 - [0:0] :limit-1791 - [0:0] :limit-1792 - [0:0] -:limit-1793 - [0:0] :limit-1794 - [0:0] :limit-1795 - [0:0] :limit-1796 - [0:0] @@ -55406,14 +92435,12 @@ COMMIT :limit-1814 - [0:0] :limit-1815 - [0:0] :limit-1816 - [0:0] -:limit-1817 - [0:0] :limit-1818 - [0:0] :limit-1819 - [0:0] :limit-182 - [0:0] :limit-1820 - [0:0] :limit-1821 - [0:0] :limit-1822 - [0:0] -:limit-1823 - [0:0] :limit-1824 - [0:0] :limit-1825 - [0:0] :limit-1826 - [0:0] @@ -55428,14 +92455,12 @@ COMMIT :limit-1834 - [0:0] :limit-1835 - [0:0] :limit-1836 - [0:0] -:limit-1837 - [0:0] :limit-1838 - [0:0] :limit-1839 - [0:0] :limit-184 - [0:0] :limit-1840 - [0:0] :limit-1841 - [0:0] :limit-1842 - [0:0] -:limit-1843 - [0:0] :limit-1844 - [0:0] :limit-1845 - [0:0] :limit-1846 - [0:0] @@ -55450,14 +92475,12 @@ COMMIT :limit-1854 - [0:0] :limit-1855 - [0:0] :limit-1856 - [0:0] -:limit-1857 - [0:0] :limit-1858 - [0:0] :limit-1859 - [0:0] :limit-186 - [0:0] :limit-1860 - [0:0] :limit-1861 - [0:0] :limit-1862 - [0:0] -:limit-1863 - [0:0] :limit-1864 - [0:0] :limit-1865 - [0:0] :limit-1866 - [0:0] @@ -55472,14 +92495,12 @@ COMMIT :limit-1874 - [0:0] :limit-1875 - [0:0] :limit-1876 - [0:0] -:limit-1877 - [0:0] :limit-1878 - [0:0] :limit-1879 - [0:0] :limit-188 - [0:0] :limit-1880 - [0:0] :limit-1881 - [0:0] :limit-1882 - [0:0] -:limit-1883 - [0:0] :limit-1884 - [0:0] :limit-1885 - [0:0] :limit-1886 - [0:0] @@ -55512,9 +92533,11 @@ COMMIT :limit-191 - [0:0] :limit-1910 - [0:0] :limit-1911 - [0:0] +:limit-1912 - [0:0] :limit-1913 - [0:0] :limit-1914 - [0:0] :limit-1915 - [0:0] +:limit-1916 - [0:0] :limit-1917 - [0:0] :limit-1918 - [0:0] :limit-1919 - [0:0] @@ -55527,10 +92550,12 @@ COMMIT :limit-1925 - [0:0] :limit-1926 - [0:0] :limit-1927 - [0:0] +:limit-1928 - [0:0] :limit-1929 - [0:0] :limit-193 - [0:0] :limit-1930 - [0:0] :limit-1931 - [0:0] +:limit-1932 - [0:0] :limit-1933 - [0:0] :limit-1934 - [0:0] :limit-1935 - [0:0] @@ -55543,9 +92568,11 @@ COMMIT :limit-1941 - [0:0] :limit-1942 - [0:0] :limit-1943 - [0:0] +:limit-1944 - [0:0] :limit-1945 - [0:0] :limit-1946 - [0:0] :limit-1947 - [0:0] +:limit-1948 - [0:0] :limit-1949 - [0:0] :limit-195 - [0:0] :limit-1950 - [0:0] @@ -55559,9 +92586,11 @@ COMMIT :limit-1958 - [0:0] :limit-1959 - [0:0] :limit-196 - [0:0] +:limit-1960 - [0:0] :limit-1961 - [0:0] :limit-1962 - [0:0] :limit-1963 - [0:0] +:limit-1964 - [0:0] :limit-1965 - [0:0] :limit-1966 - [0:0] :limit-1967 - [0:0] @@ -55583,9 +92612,11 @@ COMMIT :limit-1981 - [0:0] :limit-1982 - [0:0] :limit-1983 - [0:0] +:limit-1984 - [0:0] :limit-1985 - [0:0] :limit-1986 - [0:0] :limit-1987 - [0:0] +:limit-1988 - [0:0] :limit-1989 - [0:0] :limit-199 - [0:0] :limit-1990 - [0:0] @@ -55601,9 +92632,11 @@ COMMIT :limit-2 - [0:0] :limit-20 - [0:0] :limit-200 - [0:0] +:limit-2000 - [0:0] :limit-2001 - [0:0] :limit-2002 - [0:0] :limit-2003 - [0:0] +:limit-2004 - [0:0] :limit-2005 - [0:0] :limit-2006 - [0:0] :limit-2007 - [0:0] @@ -55616,10 +92649,12 @@ COMMIT :limit-2013 - [0:0] :limit-2014 - [0:0] :limit-2015 - [0:0] +:limit-2016 - [0:0] :limit-2017 - [0:0] :limit-2018 - [0:0] :limit-2019 - [0:0] :limit-202 - [0:0] +:limit-2020 - [0:0] :limit-2021 - [0:0] :limit-2022 - [0:0] :limit-2023 - [0:0] @@ -55632,9 +92667,11 @@ COMMIT :limit-203 - [0:0] :limit-2030 - [0:0] :limit-2031 - [0:0] +:limit-2032 - [0:0] :limit-2033 - [0:0] :limit-2034 - [0:0] :limit-2035 - [0:0] +:limit-2036 - [0:0] :limit-2037 - [0:0] :limit-2038 - [0:0] :limit-2039 - [0:0] @@ -55656,10 +92693,12 @@ COMMIT :limit-2053 - [0:0] :limit-2054 - [0:0] :limit-2055 - [0:0] +:limit-2056 - [0:0] :limit-2057 - [0:0] :limit-2058 - [0:0] :limit-2059 - [0:0] :limit-206 - [0:0] +:limit-2060 - [0:0] :limit-2061 - [0:0] :limit-2062 - [0:0] :limit-2063 - [0:0] @@ -55672,9 +92711,11 @@ COMMIT :limit-207 - [0:0] :limit-2070 - [0:0] :limit-2071 - [0:0] +:limit-2072 - [0:0] :limit-2073 - [0:0] :limit-2074 - [0:0] :limit-2075 - [0:0] +:limit-2076 - [0:0] :limit-2077 - [0:0] :limit-2078 - [0:0] :limit-2079 - [0:0] @@ -55687,10 +92728,12 @@ COMMIT :limit-2085 - [0:0] :limit-2086 - [0:0] :limit-2087 - [0:0] +:limit-2088 - [0:0] :limit-2089 - [0:0] :limit-209 - [0:0] :limit-2090 - [0:0] :limit-2091 - [0:0] +:limit-2092 - [0:0] :limit-2093 - [0:0] :limit-2094 - [0:0] :limit-2095 - [0:0] @@ -55704,9 +92747,11 @@ COMMIT :limit-2101 - [0:0] :limit-2102 - [0:0] :limit-2103 - [0:0] +:limit-2104 - [0:0] :limit-2105 - [0:0] :limit-2106 - [0:0] :limit-2107 - [0:0] +:limit-2108 - [0:0] :limit-2109 - [0:0] :limit-211 - [0:0] :limit-2110 - [0:0] @@ -55728,10 +92773,12 @@ COMMIT :limit-2125 - [0:0] :limit-2126 - [0:0] :limit-2127 - [0:0] +:limit-2128 - [0:0] :limit-2129 - [0:0] :limit-213 - [0:0] :limit-2130 - [0:0] :limit-2131 - [0:0] +:limit-2132 - [0:0] :limit-2133 - [0:0] :limit-2134 - [0:0] :limit-2135 - [0:0] @@ -55744,9 +92791,11 @@ COMMIT :limit-2141 - [0:0] :limit-2142 - [0:0] :limit-2143 - [0:0] +:limit-2144 - [0:0] :limit-2145 - [0:0] :limit-2146 - [0:0] :limit-2147 - [0:0] +:limit-2148 - [0:0] :limit-2149 - [0:0] :limit-215 - [0:0] :limit-2150 - [0:0] @@ -55760,9 +92809,11 @@ COMMIT :limit-2158 - [0:0] :limit-2159 - [0:0] :limit-216 - [0:0] +:limit-2160 - [0:0] :limit-2161 - [0:0] :limit-2162 - [0:0] :limit-2163 - [0:0] +:limit-2164 - [0:0] :limit-2165 - [0:0] :limit-2166 - [0:0] :limit-2167 - [0:0] @@ -55775,10 +92826,12 @@ COMMIT :limit-2173 - [0:0] :limit-2174 - [0:0] :limit-2175 - [0:0] +:limit-2176 - [0:0] :limit-2177 - [0:0] :limit-2178 - [0:0] :limit-2179 - [0:0] :limit-218 - [0:0] +:limit-2180 - [0:0] :limit-2181 - [0:0] :limit-2182 - [0:0] :limit-2183 - [0:0] @@ -55801,9 +92854,11 @@ COMMIT :limit-2199 - [0:0] :limit-22 - [0:0] :limit-220 - [0:0] +:limit-2200 - [0:0] :limit-2201 - [0:0] :limit-2202 - [0:0] :limit-2203 - [0:0] +:limit-2204 - [0:0] :limit-2205 - [0:0] :limit-2206 - [0:0] :limit-2207 - [0:0] @@ -55816,10 +92871,12 @@ COMMIT :limit-2213 - [0:0] :limit-2214 - [0:0] :limit-2215 - [0:0] +:limit-2216 - [0:0] :limit-2217 - [0:0] :limit-2218 - [0:0] :limit-2219 - [0:0] :limit-222 - [0:0] +:limit-2220 - [0:0] :limit-2221 - [0:0] :limit-2222 - [0:0] :limit-2223 - [0:0] @@ -55832,9 +92889,11 @@ COMMIT :limit-223 - [0:0] :limit-2230 - [0:0] :limit-2231 - [0:0] +:limit-2232 - [0:0] :limit-2233 - [0:0] :limit-2234 - [0:0] :limit-2235 - [0:0] +:limit-2236 - [0:0] :limit-2237 - [0:0] :limit-2238 - [0:0] :limit-2239 - [0:0] @@ -55847,10 +92906,12 @@ COMMIT :limit-2245 - [0:0] :limit-2246 - [0:0] :limit-2247 - [0:0] +:limit-2248 - [0:0] :limit-2249 - [0:0] :limit-225 - [0:0] :limit-2250 - [0:0] :limit-2251 - [0:0] +:limit-2252 - [0:0] :limit-2253 - [0:0] :limit-2254 - [0:0] :limit-2255 - [0:0] @@ -55872,9 +92933,11 @@ COMMIT :limit-227 - [0:0] :limit-2270 - [0:0] :limit-2271 - [0:0] +:limit-2272 - [0:0] :limit-2273 - [0:0] :limit-2274 - [0:0] :limit-2275 - [0:0] +:limit-2276 - [0:0] :limit-2277 - [0:0] :limit-2278 - [0:0] :limit-2279 - [0:0] @@ -55887,10 +92950,12 @@ COMMIT :limit-2285 - [0:0] :limit-2286 - [0:0] :limit-2287 - [0:0] +:limit-2288 - [0:0] :limit-2289 - [0:0] :limit-229 - [0:0] :limit-2290 - [0:0] :limit-2291 - [0:0] +:limit-2292 - [0:0] :limit-2293 - [0:0] :limit-2294 - [0:0] :limit-2295 - [0:0] @@ -55904,9 +92969,11 @@ COMMIT :limit-2301 - [0:0] :limit-2302 - [0:0] :limit-2303 - [0:0] +:limit-2304 - [0:0] :limit-2305 - [0:0] :limit-2306 - [0:0] :limit-2307 - [0:0] +:limit-2308 - [0:0] :limit-2309 - [0:0] :limit-231 - [0:0] :limit-2310 - [0:0] @@ -55920,9 +92987,11 @@ COMMIT :limit-2318 - [0:0] :limit-2319 - [0:0] :limit-232 - [0:0] +:limit-2320 - [0:0] :limit-2321 - [0:0] :limit-2322 - [0:0] :limit-2323 - [0:0] +:limit-2324 - [0:0] :limit-2325 - [0:0] :limit-2326 - [0:0] :limit-2327 - [0:0] @@ -55944,9 +93013,11 @@ COMMIT :limit-2341 - [0:0] :limit-2342 - [0:0] :limit-2343 - [0:0] +:limit-2344 - [0:0] :limit-2345 - [0:0] :limit-2346 - [0:0] :limit-2347 - [0:0] +:limit-2348 - [0:0] :limit-2349 - [0:0] :limit-235 - [0:0] :limit-2350 - [0:0] @@ -55960,9 +93031,11 @@ COMMIT :limit-2358 - [0:0] :limit-2359 - [0:0] :limit-236 - [0:0] +:limit-2360 - [0:0] :limit-2361 - [0:0] :limit-2362 - [0:0] :limit-2363 - [0:0] +:limit-2364 - [0:0] :limit-2365 - [0:0] :limit-2366 - [0:0] :limit-2367 - [0:0] @@ -55975,10 +93048,12 @@ COMMIT :limit-2373 - [0:0] :limit-2374 - [0:0] :limit-2375 - [0:0] +:limit-2376 - [0:0] :limit-2377 - [0:0] :limit-2378 - [0:0] :limit-2379 - [0:0] :limit-238 - [0:0] +:limit-2380 - [0:0] :limit-2381 - [0:0] :limit-2382 - [0:0] :limit-2383 - [0:0] @@ -55991,9 +93066,11 @@ COMMIT :limit-239 - [0:0] :limit-2390 - [0:0] :limit-2391 - [0:0] +:limit-2392 - [0:0] :limit-2393 - [0:0] :limit-2394 - [0:0] :limit-2395 - [0:0] +:limit-2396 - [0:0] :limit-2397 - [0:0] :limit-2398 - [0:0] :limit-2399 - [0:0] @@ -56016,10 +93093,12 @@ COMMIT :limit-2413 - [0:0] :limit-2414 - [0:0] :limit-2415 - [0:0] +:limit-2416 - [0:0] :limit-2417 - [0:0] :limit-2418 - [0:0] :limit-2419 - [0:0] :limit-242 - [0:0] +:limit-2420 - [0:0] :limit-2421 - [0:0] :limit-2422 - [0:0] :limit-2423 - [0:0] @@ -56032,9 +93111,11 @@ COMMIT :limit-243 - [0:0] :limit-2430 - [0:0] :limit-2431 - [0:0] +:limit-2432 - [0:0] :limit-2433 - [0:0] :limit-2434 - [0:0] :limit-2435 - [0:0] +:limit-2436 - [0:0] :limit-2437 - [0:0] :limit-2438 - [0:0] :limit-2439 - [0:0] @@ -56047,10 +93128,12 @@ COMMIT :limit-2445 - [0:0] :limit-2446 - [0:0] :limit-2447 - [0:0] +:limit-2448 - [0:0] :limit-2449 - [0:0] :limit-245 - [0:0] :limit-2450 - [0:0] :limit-2451 - [0:0] +:limit-2452 - [0:0] :limit-2453 - [0:0] :limit-2454 - [0:0] :limit-2455 - [0:0] @@ -56063,9 +93146,11 @@ COMMIT :limit-2461 - [0:0] :limit-2462 - [0:0] :limit-2463 - [0:0] +:limit-2464 - [0:0] :limit-2465 - [0:0] :limit-2466 - [0:0] :limit-2467 - [0:0] +:limit-2468 - [0:0] :limit-2469 - [0:0] :limit-247 - [0:0] :limit-2470 - [0:0] @@ -56119,160 +93204,1468 @@ COMMIT :limit-2513 - [0:0] :limit-2514 - [0:0] :limit-2515 - [0:0] +:limit-2516 - [0:0] +:limit-2517 - [0:0] +:limit-2518 - [0:0] +:limit-2519 - [0:0] :limit-252 - [0:0] +:limit-2520 - [0:0] +:limit-2521 - [0:0] +:limit-2522 - [0:0] +:limit-2523 - [0:0] +:limit-2524 - [0:0] +:limit-2525 - [0:0] +:limit-2526 - [0:0] +:limit-2527 - [0:0] +:limit-2528 - [0:0] +:limit-2529 - [0:0] :limit-253 - [0:0] +:limit-2530 - [0:0] +:limit-2531 - [0:0] +:limit-2532 - [0:0] +:limit-2533 - [0:0] +:limit-2534 - [0:0] +:limit-2535 - [0:0] +:limit-2536 - [0:0] +:limit-2537 - [0:0] +:limit-2538 - [0:0] +:limit-2539 - [0:0] :limit-254 - [0:0] +:limit-2540 - [0:0] +:limit-2541 - [0:0] +:limit-2542 - [0:0] +:limit-2543 - [0:0] +:limit-2544 - [0:0] +:limit-2545 - [0:0] +:limit-2546 - [0:0] +:limit-2547 - [0:0] +:limit-2548 - [0:0] +:limit-2549 - [0:0] :limit-255 - [0:0] +:limit-2550 - [0:0] +:limit-2551 - [0:0] +:limit-2552 - [0:0] +:limit-2553 - [0:0] +:limit-2554 - [0:0] +:limit-2555 - [0:0] +:limit-2556 - [0:0] +:limit-2557 - [0:0] +:limit-2558 - [0:0] +:limit-2559 - [0:0] :limit-256 - [0:0] +:limit-2560 - [0:0] +:limit-2561 - [0:0] +:limit-2562 - [0:0] +:limit-2563 - [0:0] +:limit-2564 - [0:0] +:limit-2565 - [0:0] +:limit-2566 - [0:0] +:limit-2567 - [0:0] +:limit-2568 - [0:0] +:limit-2569 - [0:0] :limit-257 - [0:0] +:limit-2570 - [0:0] +:limit-2571 - [0:0] +:limit-2572 - [0:0] +:limit-2573 - [0:0] +:limit-2574 - [0:0] +:limit-2575 - [0:0] +:limit-2576 - [0:0] +:limit-2577 - [0:0] +:limit-2578 - [0:0] +:limit-2579 - [0:0] :limit-258 - [0:0] +:limit-2580 - [0:0] +:limit-2581 - [0:0] +:limit-2582 - [0:0] +:limit-2583 - [0:0] +:limit-2584 - [0:0] +:limit-2585 - [0:0] +:limit-2586 - [0:0] +:limit-2587 - [0:0] +:limit-2588 - [0:0] +:limit-2589 - [0:0] :limit-259 - [0:0] +:limit-2590 - [0:0] +:limit-2591 - [0:0] +:limit-2592 - [0:0] +:limit-2593 - [0:0] +:limit-2594 - [0:0] +:limit-2595 - [0:0] +:limit-2596 - [0:0] +:limit-2597 - [0:0] +:limit-2598 - [0:0] +:limit-2599 - [0:0] :limit-26 - [0:0] :limit-260 - [0:0] +:limit-2600 - [0:0] +:limit-2601 - [0:0] +:limit-2602 - [0:0] +:limit-2603 - [0:0] +:limit-2604 - [0:0] +:limit-2605 - [0:0] +:limit-2606 - [0:0] +:limit-2607 - [0:0] +:limit-2608 - [0:0] +:limit-2609 - [0:0] :limit-261 - [0:0] +:limit-2610 - [0:0] +:limit-2611 - [0:0] +:limit-2612 - [0:0] +:limit-2613 - [0:0] +:limit-2614 - [0:0] +:limit-2615 - [0:0] +:limit-2616 - [0:0] +:limit-2617 - [0:0] +:limit-2618 - [0:0] +:limit-2619 - [0:0] :limit-262 - [0:0] +:limit-2620 - [0:0] +:limit-2621 - [0:0] +:limit-2622 - [0:0] +:limit-2623 - [0:0] +:limit-2624 - [0:0] +:limit-2625 - [0:0] +:limit-2626 - [0:0] +:limit-2627 - [0:0] +:limit-2628 - [0:0] +:limit-2629 - [0:0] :limit-263 - [0:0] +:limit-2630 - [0:0] +:limit-2631 - [0:0] +:limit-2632 - [0:0] +:limit-2633 - [0:0] +:limit-2634 - [0:0] +:limit-2635 - [0:0] +:limit-2636 - [0:0] +:limit-2637 - [0:0] +:limit-2638 - [0:0] +:limit-2639 - [0:0] :limit-264 - [0:0] +:limit-2640 - [0:0] +:limit-2641 - [0:0] +:limit-2642 - [0:0] +:limit-2643 - [0:0] +:limit-2644 - [0:0] +:limit-2645 - [0:0] +:limit-2646 - [0:0] +:limit-2647 - [0:0] +:limit-2648 - [0:0] +:limit-2649 - [0:0] :limit-265 - [0:0] +:limit-2650 - [0:0] +:limit-2651 - [0:0] +:limit-2652 - [0:0] +:limit-2653 - [0:0] +:limit-2654 - [0:0] +:limit-2655 - [0:0] +:limit-2656 - [0:0] +:limit-2657 - [0:0] +:limit-2658 - [0:0] +:limit-2659 - [0:0] :limit-266 - [0:0] +:limit-2660 - [0:0] +:limit-2661 - [0:0] +:limit-2662 - [0:0] +:limit-2663 - [0:0] +:limit-2664 - [0:0] +:limit-2665 - [0:0] +:limit-2666 - [0:0] +:limit-2667 - [0:0] +:limit-2668 - [0:0] +:limit-2669 - [0:0] :limit-267 - [0:0] +:limit-2670 - [0:0] +:limit-2671 - [0:0] +:limit-2672 - [0:0] +:limit-2673 - [0:0] +:limit-2674 - [0:0] +:limit-2675 - [0:0] +:limit-2676 - [0:0] +:limit-2677 - [0:0] +:limit-2678 - [0:0] +:limit-2679 - [0:0] :limit-268 - [0:0] +:limit-2680 - [0:0] +:limit-2681 - [0:0] +:limit-2682 - [0:0] +:limit-2683 - [0:0] +:limit-2684 - [0:0] +:limit-2685 - [0:0] +:limit-2686 - [0:0] +:limit-2687 - [0:0] +:limit-2688 - [0:0] +:limit-2689 - [0:0] :limit-269 - [0:0] +:limit-2690 - [0:0] +:limit-2691 - [0:0] +:limit-2692 - [0:0] +:limit-2693 - [0:0] +:limit-2694 - [0:0] +:limit-2695 - [0:0] +:limit-2696 - [0:0] +:limit-2697 - [0:0] +:limit-2698 - [0:0] +:limit-2699 - [0:0] :limit-27 - [0:0] :limit-270 - [0:0] +:limit-2700 - [0:0] +:limit-2701 - [0:0] +:limit-2702 - [0:0] +:limit-2703 - [0:0] +:limit-2704 - [0:0] +:limit-2705 - [0:0] +:limit-2706 - [0:0] +:limit-2707 - [0:0] +:limit-2708 - [0:0] +:limit-2709 - [0:0] :limit-271 - [0:0] +:limit-2710 - [0:0] +:limit-2711 - [0:0] +:limit-2712 - [0:0] +:limit-2713 - [0:0] +:limit-2714 - [0:0] +:limit-2715 - [0:0] +:limit-2716 - [0:0] +:limit-2717 - [0:0] +:limit-2718 - [0:0] +:limit-2719 - [0:0] :limit-272 - [0:0] +:limit-2720 - [0:0] +:limit-2721 - [0:0] +:limit-2722 - [0:0] +:limit-2723 - [0:0] +:limit-2724 - [0:0] +:limit-2725 - [0:0] +:limit-2726 - [0:0] +:limit-2727 - [0:0] +:limit-2728 - [0:0] +:limit-2729 - [0:0] :limit-273 - [0:0] +:limit-2730 - [0:0] +:limit-2731 - [0:0] +:limit-2732 - [0:0] +:limit-2733 - [0:0] +:limit-2734 - [0:0] +:limit-2735 - [0:0] +:limit-2736 - [0:0] +:limit-2737 - [0:0] +:limit-2738 - [0:0] +:limit-2739 - [0:0] :limit-274 - [0:0] +:limit-2740 - [0:0] +:limit-2741 - [0:0] +:limit-2742 - [0:0] +:limit-2743 - [0:0] +:limit-2744 - [0:0] +:limit-2745 - [0:0] +:limit-2746 - [0:0] +:limit-2747 - [0:0] +:limit-2748 - [0:0] +:limit-2749 - [0:0] :limit-275 - [0:0] +:limit-2750 - [0:0] +:limit-2751 - [0:0] +:limit-2752 - [0:0] +:limit-2753 - [0:0] +:limit-2754 - [0:0] +:limit-2755 - [0:0] +:limit-2756 - [0:0] +:limit-2757 - [0:0] +:limit-2758 - [0:0] +:limit-2759 - [0:0] :limit-276 - [0:0] +:limit-2760 - [0:0] +:limit-2761 - [0:0] +:limit-2762 - [0:0] +:limit-2763 - [0:0] +:limit-2764 - [0:0] +:limit-2765 - [0:0] +:limit-2766 - [0:0] +:limit-2767 - [0:0] +:limit-2768 - [0:0] +:limit-2769 - [0:0] :limit-277 - [0:0] +:limit-2770 - [0:0] +:limit-2771 - [0:0] +:limit-2772 - [0:0] +:limit-2773 - [0:0] +:limit-2774 - [0:0] +:limit-2775 - [0:0] +:limit-2776 - [0:0] +:limit-2777 - [0:0] +:limit-2778 - [0:0] +:limit-2779 - [0:0] :limit-278 - [0:0] +:limit-2780 - [0:0] +:limit-2781 - [0:0] +:limit-2782 - [0:0] +:limit-2783 - [0:0] +:limit-2784 - [0:0] +:limit-2785 - [0:0] +:limit-2786 - [0:0] +:limit-2787 - [0:0] +:limit-2788 - [0:0] +:limit-2789 - [0:0] :limit-279 - [0:0] +:limit-2790 - [0:0] +:limit-2791 - [0:0] +:limit-2792 - [0:0] +:limit-2793 - [0:0] +:limit-2794 - [0:0] +:limit-2795 - [0:0] +:limit-2796 - [0:0] +:limit-2797 - [0:0] +:limit-2798 - [0:0] +:limit-2799 - [0:0] :limit-28 - [0:0] :limit-280 - [0:0] +:limit-2800 - [0:0] +:limit-2801 - [0:0] +:limit-2802 - [0:0] +:limit-2803 - [0:0] +:limit-2804 - [0:0] +:limit-2805 - [0:0] +:limit-2806 - [0:0] +:limit-2807 - [0:0] +:limit-2808 - [0:0] +:limit-2809 - [0:0] :limit-281 - [0:0] +:limit-2810 - [0:0] +:limit-2811 - [0:0] +:limit-2812 - [0:0] +:limit-2813 - [0:0] +:limit-2814 - [0:0] +:limit-2815 - [0:0] +:limit-2816 - [0:0] +:limit-2817 - [0:0] +:limit-2818 - [0:0] +:limit-2819 - [0:0] :limit-282 - [0:0] +:limit-2820 - [0:0] +:limit-2821 - [0:0] +:limit-2822 - [0:0] +:limit-2823 - [0:0] +:limit-2824 - [0:0] +:limit-2825 - [0:0] +:limit-2826 - [0:0] +:limit-2827 - [0:0] +:limit-2828 - [0:0] +:limit-2829 - [0:0] :limit-283 - [0:0] +:limit-2830 - [0:0] +:limit-2831 - [0:0] +:limit-2832 - [0:0] +:limit-2833 - [0:0] +:limit-2834 - [0:0] +:limit-2835 - [0:0] +:limit-2836 - [0:0] +:limit-2837 - [0:0] +:limit-2838 - [0:0] +:limit-2839 - [0:0] :limit-284 - [0:0] +:limit-2840 - [0:0] +:limit-2841 - [0:0] +:limit-2842 - [0:0] +:limit-2843 - [0:0] +:limit-2844 - [0:0] +:limit-2845 - [0:0] +:limit-2846 - [0:0] +:limit-2847 - [0:0] +:limit-2848 - [0:0] +:limit-2849 - [0:0] :limit-285 - [0:0] +:limit-2850 - [0:0] +:limit-2851 - [0:0] +:limit-2852 - [0:0] +:limit-2853 - [0:0] +:limit-2854 - [0:0] +:limit-2855 - [0:0] +:limit-2856 - [0:0] +:limit-2857 - [0:0] +:limit-2858 - [0:0] +:limit-2859 - [0:0] :limit-286 - [0:0] +:limit-2860 - [0:0] +:limit-2861 - [0:0] +:limit-2862 - [0:0] +:limit-2863 - [0:0] +:limit-2864 - [0:0] +:limit-2865 - [0:0] +:limit-2866 - [0:0] +:limit-2867 - [0:0] +:limit-2868 - [0:0] +:limit-2869 - [0:0] :limit-287 - [0:0] +:limit-2870 - [0:0] +:limit-2871 - [0:0] +:limit-2872 - [0:0] +:limit-2873 - [0:0] +:limit-2874 - [0:0] +:limit-2875 - [0:0] +:limit-2876 - [0:0] +:limit-2877 - [0:0] +:limit-2878 - [0:0] +:limit-2879 - [0:0] :limit-288 - [0:0] +:limit-2880 - [0:0] +:limit-2881 - [0:0] +:limit-2882 - [0:0] +:limit-2883 - [0:0] +:limit-2884 - [0:0] +:limit-2885 - [0:0] +:limit-2886 - [0:0] +:limit-2887 - [0:0] +:limit-2888 - [0:0] +:limit-2889 - [0:0] :limit-289 - [0:0] +:limit-2890 - [0:0] +:limit-2891 - [0:0] +:limit-2892 - [0:0] +:limit-2893 - [0:0] +:limit-2894 - [0:0] +:limit-2895 - [0:0] +:limit-2896 - [0:0] +:limit-2897 - [0:0] +:limit-2898 - [0:0] +:limit-2899 - [0:0] :limit-29 - [0:0] :limit-290 - [0:0] +:limit-2900 - [0:0] +:limit-2901 - [0:0] +:limit-2902 - [0:0] +:limit-2903 - [0:0] +:limit-2904 - [0:0] +:limit-2905 - [0:0] +:limit-2906 - [0:0] +:limit-2907 - [0:0] +:limit-2908 - [0:0] +:limit-2909 - [0:0] :limit-291 - [0:0] +:limit-2910 - [0:0] +:limit-2911 - [0:0] +:limit-2912 - [0:0] +:limit-2913 - [0:0] +:limit-2914 - [0:0] +:limit-2915 - [0:0] +:limit-2916 - [0:0] +:limit-2917 - [0:0] +:limit-2918 - [0:0] +:limit-2919 - [0:0] :limit-292 - [0:0] +:limit-2920 - [0:0] +:limit-2921 - [0:0] +:limit-2922 - [0:0] +:limit-2923 - [0:0] +:limit-2924 - [0:0] +:limit-2925 - [0:0] +:limit-2926 - [0:0] +:limit-2927 - [0:0] +:limit-2928 - [0:0] +:limit-2929 - [0:0] :limit-293 - [0:0] +:limit-2930 - [0:0] +:limit-2931 - [0:0] +:limit-2932 - [0:0] +:limit-2933 - [0:0] +:limit-2934 - [0:0] +:limit-2935 - [0:0] +:limit-2936 - [0:0] +:limit-2937 - [0:0] +:limit-2938 - [0:0] +:limit-2939 - [0:0] :limit-294 - [0:0] +:limit-2940 - [0:0] +:limit-2941 - [0:0] +:limit-2942 - [0:0] +:limit-2943 - [0:0] +:limit-2944 - [0:0] +:limit-2945 - [0:0] +:limit-2946 - [0:0] +:limit-2947 - [0:0] +:limit-2948 - [0:0] +:limit-2949 - [0:0] :limit-295 - [0:0] +:limit-2950 - [0:0] +:limit-2951 - [0:0] +:limit-2952 - [0:0] +:limit-2953 - [0:0] +:limit-2954 - [0:0] +:limit-2955 - [0:0] +:limit-2956 - [0:0] +:limit-2957 - [0:0] +:limit-2958 - [0:0] :limit-296 - [0:0] +:limit-2960 - [0:0] +:limit-2961 - [0:0] +:limit-2962 - [0:0] +:limit-2963 - [0:0] +:limit-2964 - [0:0] +:limit-2966 - [0:0] +:limit-2967 - [0:0] +:limit-2968 - [0:0] +:limit-2969 - [0:0] :limit-297 - [0:0] +:limit-2970 - [0:0] +:limit-2971 - [0:0] +:limit-2972 - [0:0] +:limit-2973 - [0:0] +:limit-2974 - [0:0] +:limit-2975 - [0:0] +:limit-2976 - [0:0] +:limit-2977 - [0:0] +:limit-2978 - [0:0] :limit-298 - [0:0] +:limit-2980 - [0:0] +:limit-2981 - [0:0] +:limit-2982 - [0:0] +:limit-2983 - [0:0] +:limit-2984 - [0:0] +:limit-2986 - [0:0] +:limit-2987 - [0:0] +:limit-2988 - [0:0] +:limit-2989 - [0:0] :limit-299 - [0:0] +:limit-2990 - [0:0] +:limit-2991 - [0:0] +:limit-2992 - [0:0] +:limit-2993 - [0:0] +:limit-2994 - [0:0] +:limit-2995 - [0:0] +:limit-2996 - [0:0] +:limit-2997 - [0:0] +:limit-2998 - [0:0] :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] +:limit-3000 - [0:0] +:limit-3001 - [0:0] +:limit-3002 - [0:0] +:limit-3003 - [0:0] +:limit-3004 - [0:0] +:limit-3006 - [0:0] +:limit-3007 - [0:0] +:limit-3008 - [0:0] +:limit-3009 - [0:0] :limit-301 - [0:0] +:limit-3010 - [0:0] +:limit-3011 - [0:0] +:limit-3012 - [0:0] +:limit-3013 - [0:0] +:limit-3014 - [0:0] +:limit-3015 - [0:0] +:limit-3016 - [0:0] +:limit-3017 - [0:0] +:limit-3018 - [0:0] :limit-302 - [0:0] +:limit-3020 - [0:0] +:limit-3021 - [0:0] +:limit-3022 - [0:0] +:limit-3023 - [0:0] +:limit-3024 - [0:0] +:limit-3026 - [0:0] +:limit-3027 - [0:0] +:limit-3028 - [0:0] +:limit-3029 - [0:0] :limit-303 - [0:0] +:limit-3030 - [0:0] +:limit-3031 - [0:0] +:limit-3032 - [0:0] +:limit-3033 - [0:0] +:limit-3034 - [0:0] +:limit-3035 - [0:0] +:limit-3036 - [0:0] +:limit-3037 - [0:0] +:limit-3038 - [0:0] +:limit-3039 - [0:0] :limit-304 - [0:0] +:limit-3040 - [0:0] +:limit-3041 - [0:0] +:limit-3042 - [0:0] +:limit-3043 - [0:0] +:limit-3044 - [0:0] +:limit-3045 - [0:0] +:limit-3046 - [0:0] +:limit-3047 - [0:0] +:limit-3048 - [0:0] :limit-305 - [0:0] +:limit-3050 - [0:0] +:limit-3051 - [0:0] +:limit-3052 - [0:0] +:limit-3053 - [0:0] +:limit-3054 - [0:0] +:limit-3056 - [0:0] +:limit-3057 - [0:0] +:limit-3058 - [0:0] +:limit-3059 - [0:0] :limit-306 - [0:0] +:limit-3060 - [0:0] +:limit-3061 - [0:0] +:limit-3062 - [0:0] +:limit-3063 - [0:0] +:limit-3064 - [0:0] +:limit-3065 - [0:0] +:limit-3066 - [0:0] +:limit-3067 - [0:0] +:limit-3068 - [0:0] :limit-307 - [0:0] +:limit-3070 - [0:0] +:limit-3071 - [0:0] +:limit-3072 - [0:0] +:limit-3073 - [0:0] +:limit-3074 - [0:0] +:limit-3076 - [0:0] +:limit-3077 - [0:0] +:limit-3078 - [0:0] +:limit-3079 - [0:0] :limit-308 - [0:0] +:limit-3080 - [0:0] +:limit-3081 - [0:0] +:limit-3082 - [0:0] +:limit-3083 - [0:0] +:limit-3084 - [0:0] +:limit-3085 - [0:0] +:limit-3086 - [0:0] +:limit-3087 - [0:0] +:limit-3088 - [0:0] :limit-309 - [0:0] +:limit-3090 - [0:0] +:limit-3091 - [0:0] +:limit-3092 - [0:0] +:limit-3093 - [0:0] +:limit-3094 - [0:0] +:limit-3096 - [0:0] +:limit-3097 - [0:0] +:limit-3098 - [0:0] +:limit-3099 - [0:0] :limit-31 - [0:0] :limit-310 - [0:0] +:limit-3100 - [0:0] +:limit-3101 - [0:0] +:limit-3102 - [0:0] +:limit-3103 - [0:0] +:limit-3104 - [0:0] +:limit-3105 - [0:0] +:limit-3106 - [0:0] +:limit-3107 - [0:0] +:limit-3108 - [0:0] :limit-311 - [0:0] +:limit-3110 - [0:0] +:limit-3111 - [0:0] +:limit-3112 - [0:0] +:limit-3113 - [0:0] +:limit-3114 - [0:0] +:limit-3116 - [0:0] +:limit-3117 - [0:0] +:limit-3118 - [0:0] +:limit-3119 - [0:0] :limit-312 - [0:0] +:limit-3120 - [0:0] +:limit-3121 - [0:0] +:limit-3122 - [0:0] +:limit-3123 - [0:0] +:limit-3124 - [0:0] +:limit-3125 - [0:0] +:limit-3126 - [0:0] +:limit-3127 - [0:0] +:limit-3128 - [0:0] +:limit-3129 - [0:0] :limit-313 - [0:0] +:limit-3130 - [0:0] +:limit-3131 - [0:0] +:limit-3132 - [0:0] +:limit-3133 - [0:0] +:limit-3134 - [0:0] +:limit-3135 - [0:0] +:limit-3136 - [0:0] +:limit-3137 - [0:0] +:limit-3138 - [0:0] :limit-314 - [0:0] +:limit-3140 - [0:0] +:limit-3141 - [0:0] +:limit-3142 - [0:0] +:limit-3143 - [0:0] +:limit-3144 - [0:0] +:limit-3146 - [0:0] +:limit-3147 - [0:0] +:limit-3148 - [0:0] +:limit-3149 - [0:0] :limit-315 - [0:0] +:limit-3150 - [0:0] +:limit-3151 - [0:0] +:limit-3152 - [0:0] +:limit-3153 - [0:0] +:limit-3154 - [0:0] +:limit-3155 - [0:0] +:limit-3156 - [0:0] +:limit-3157 - [0:0] +:limit-3158 - [0:0] :limit-316 - [0:0] +:limit-3160 - [0:0] +:limit-3161 - [0:0] +:limit-3162 - [0:0] +:limit-3163 - [0:0] +:limit-3164 - [0:0] +:limit-3166 - [0:0] +:limit-3167 - [0:0] +:limit-3168 - [0:0] +:limit-3169 - [0:0] :limit-317 - [0:0] +:limit-3170 - [0:0] +:limit-3171 - [0:0] +:limit-3172 - [0:0] +:limit-3173 - [0:0] +:limit-3174 - [0:0] +:limit-3175 - [0:0] +:limit-3176 - [0:0] +:limit-3177 - [0:0] +:limit-3178 - [0:0] :limit-318 - [0:0] +:limit-3180 - [0:0] +:limit-3181 - [0:0] +:limit-3182 - [0:0] +:limit-3183 - [0:0] +:limit-3184 - [0:0] +:limit-3186 - [0:0] +:limit-3187 - [0:0] +:limit-3188 - [0:0] +:limit-3189 - [0:0] :limit-319 - [0:0] +:limit-3190 - [0:0] +:limit-3191 - [0:0] +:limit-3192 - [0:0] +:limit-3193 - [0:0] +:limit-3194 - [0:0] +:limit-3195 - [0:0] +:limit-3196 - [0:0] +:limit-3197 - [0:0] +:limit-3198 - [0:0] :limit-32 - [0:0] :limit-320 - [0:0] +:limit-3200 - [0:0] +:limit-3201 - [0:0] +:limit-3202 - [0:0] +:limit-3203 - [0:0] +:limit-3204 - [0:0] +:limit-3206 - [0:0] +:limit-3207 - [0:0] +:limit-3208 - [0:0] +:limit-3209 - [0:0] :limit-321 - [0:0] +:limit-3210 - [0:0] +:limit-3211 - [0:0] +:limit-3212 - [0:0] +:limit-3213 - [0:0] +:limit-3214 - [0:0] +:limit-3215 - [0:0] +:limit-3216 - [0:0] +:limit-3217 - [0:0] +:limit-3218 - [0:0] +:limit-3219 - [0:0] :limit-322 - [0:0] +:limit-3220 - [0:0] +:limit-3221 - [0:0] +:limit-3222 - [0:0] +:limit-3223 - [0:0] +:limit-3224 - [0:0] +:limit-3225 - [0:0] +:limit-3226 - [0:0] +:limit-3227 - [0:0] +:limit-3228 - [0:0] :limit-323 - [0:0] +:limit-3230 - [0:0] +:limit-3231 - [0:0] +:limit-3232 - [0:0] +:limit-3233 - [0:0] +:limit-3234 - [0:0] +:limit-3236 - [0:0] +:limit-3237 - [0:0] +:limit-3238 - [0:0] +:limit-3239 - [0:0] :limit-324 - [0:0] +:limit-3240 - [0:0] +:limit-3241 - [0:0] +:limit-3242 - [0:0] +:limit-3243 - [0:0] +:limit-3244 - [0:0] +:limit-3245 - [0:0] +:limit-3246 - [0:0] +:limit-3247 - [0:0] +:limit-3248 - [0:0] :limit-325 - [0:0] +:limit-3250 - [0:0] +:limit-3251 - [0:0] +:limit-3252 - [0:0] +:limit-3253 - [0:0] +:limit-3254 - [0:0] +:limit-3256 - [0:0] +:limit-3257 - [0:0] +:limit-3258 - [0:0] +:limit-3259 - [0:0] :limit-326 - [0:0] +:limit-3260 - [0:0] +:limit-3261 - [0:0] +:limit-3262 - [0:0] +:limit-3263 - [0:0] +:limit-3264 - [0:0] +:limit-3265 - [0:0] +:limit-3266 - [0:0] +:limit-3267 - [0:0] +:limit-3268 - [0:0] :limit-327 - [0:0] +:limit-3270 - [0:0] +:limit-3271 - [0:0] +:limit-3272 - [0:0] +:limit-3273 - [0:0] +:limit-3274 - [0:0] +:limit-3276 - [0:0] +:limit-3277 - [0:0] +:limit-3278 - [0:0] +:limit-3279 - [0:0] :limit-328 - [0:0] +:limit-3280 - [0:0] +:limit-3281 - [0:0] +:limit-3282 - [0:0] +:limit-3283 - [0:0] +:limit-3284 - [0:0] +:limit-3285 - [0:0] +:limit-3286 - [0:0] +:limit-3287 - [0:0] +:limit-3288 - [0:0] :limit-329 - [0:0] +:limit-3290 - [0:0] +:limit-3291 - [0:0] +:limit-3292 - [0:0] +:limit-3293 - [0:0] +:limit-3294 - [0:0] +:limit-3296 - [0:0] +:limit-3297 - [0:0] +:limit-3298 - [0:0] +:limit-3299 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] +:limit-3300 - [0:0] +:limit-3301 - [0:0] +:limit-3302 - [0:0] +:limit-3303 - [0:0] +:limit-3304 - [0:0] +:limit-3305 - [0:0] +:limit-3306 - [0:0] +:limit-3307 - [0:0] +:limit-3308 - [0:0] +:limit-3309 - [0:0] :limit-331 - [0:0] +:limit-3310 - [0:0] +:limit-3311 - [0:0] +:limit-3312 - [0:0] +:limit-3313 - [0:0] +:limit-3314 - [0:0] +:limit-3315 - [0:0] +:limit-3316 - [0:0] +:limit-3317 - [0:0] +:limit-3318 - [0:0] :limit-332 - [0:0] +:limit-3320 - [0:0] +:limit-3321 - [0:0] +:limit-3322 - [0:0] +:limit-3323 - [0:0] +:limit-3324 - [0:0] +:limit-3326 - [0:0] +:limit-3327 - [0:0] +:limit-3328 - [0:0] +:limit-3329 - [0:0] :limit-333 - [0:0] +:limit-3330 - [0:0] +:limit-3331 - [0:0] +:limit-3332 - [0:0] +:limit-3333 - [0:0] +:limit-3334 - [0:0] +:limit-3335 - [0:0] +:limit-3336 - [0:0] +:limit-3337 - [0:0] +:limit-3338 - [0:0] :limit-334 - [0:0] +:limit-3340 - [0:0] +:limit-3341 - [0:0] +:limit-3342 - [0:0] +:limit-3343 - [0:0] +:limit-3344 - [0:0] +:limit-3346 - [0:0] +:limit-3347 - [0:0] +:limit-3348 - [0:0] +:limit-3349 - [0:0] :limit-335 - [0:0] +:limit-3350 - [0:0] +:limit-3351 - [0:0] +:limit-3352 - [0:0] +:limit-3353 - [0:0] +:limit-3354 - [0:0] +:limit-3355 - [0:0] +:limit-3356 - [0:0] +:limit-3357 - [0:0] +:limit-3358 - [0:0] :limit-336 - [0:0] +:limit-3360 - [0:0] +:limit-3361 - [0:0] +:limit-3362 - [0:0] +:limit-3363 - [0:0] +:limit-3364 - [0:0] +:limit-3366 - [0:0] +:limit-3367 - [0:0] +:limit-3368 - [0:0] +:limit-3369 - [0:0] :limit-337 - [0:0] +:limit-3370 - [0:0] +:limit-3371 - [0:0] +:limit-3372 - [0:0] +:limit-3373 - [0:0] +:limit-3374 - [0:0] +:limit-3375 - [0:0] +:limit-3376 - [0:0] +:limit-3377 - [0:0] +:limit-3378 - [0:0] :limit-338 - [0:0] +:limit-3380 - [0:0] +:limit-3381 - [0:0] +:limit-3382 - [0:0] +:limit-3383 - [0:0] +:limit-3384 - [0:0] +:limit-3386 - [0:0] +:limit-3387 - [0:0] +:limit-3388 - [0:0] +:limit-3389 - [0:0] :limit-339 - [0:0] +:limit-3390 - [0:0] +:limit-3391 - [0:0] +:limit-3392 - [0:0] +:limit-3393 - [0:0] +:limit-3394 - [0:0] +:limit-3395 - [0:0] +:limit-3396 - [0:0] +:limit-3397 - [0:0] +:limit-3398 - [0:0] +:limit-3399 - [0:0] :limit-34 - [0:0] :limit-340 - [0:0] +:limit-3400 - [0:0] +:limit-3401 - [0:0] +:limit-3402 - [0:0] +:limit-3403 - [0:0] +:limit-3404 - [0:0] +:limit-3405 - [0:0] +:limit-3406 - [0:0] +:limit-3407 - [0:0] +:limit-3408 - [0:0] :limit-341 - [0:0] +:limit-3410 - [0:0] +:limit-3411 - [0:0] +:limit-3412 - [0:0] +:limit-3413 - [0:0] +:limit-3414 - [0:0] +:limit-3416 - [0:0] +:limit-3417 - [0:0] +:limit-3418 - [0:0] +:limit-3419 - [0:0] :limit-342 - [0:0] +:limit-3420 - [0:0] +:limit-3421 - [0:0] +:limit-3422 - [0:0] +:limit-3423 - [0:0] +:limit-3424 - [0:0] +:limit-3425 - [0:0] +:limit-3426 - [0:0] +:limit-3427 - [0:0] +:limit-3428 - [0:0] :limit-343 - [0:0] +:limit-3430 - [0:0] +:limit-3431 - [0:0] +:limit-3432 - [0:0] +:limit-3433 - [0:0] +:limit-3434 - [0:0] +:limit-3436 - [0:0] +:limit-3437 - [0:0] +:limit-3438 - [0:0] +:limit-3439 - [0:0] :limit-344 - [0:0] +:limit-3440 - [0:0] +:limit-3441 - [0:0] +:limit-3442 - [0:0] +:limit-3443 - [0:0] +:limit-3444 - [0:0] +:limit-3445 - [0:0] +:limit-3446 - [0:0] +:limit-3447 - [0:0] +:limit-3448 - [0:0] :limit-345 - [0:0] +:limit-3450 - [0:0] +:limit-3451 - [0:0] +:limit-3452 - [0:0] +:limit-3453 - [0:0] +:limit-3454 - [0:0] +:limit-3456 - [0:0] +:limit-3457 - [0:0] +:limit-3458 - [0:0] +:limit-3459 - [0:0] :limit-346 - [0:0] +:limit-3460 - [0:0] +:limit-3461 - [0:0] +:limit-3462 - [0:0] +:limit-3463 - [0:0] +:limit-3464 - [0:0] +:limit-3465 - [0:0] +:limit-3466 - [0:0] +:limit-3467 - [0:0] +:limit-3468 - [0:0] :limit-347 - [0:0] +:limit-3470 - [0:0] +:limit-3471 - [0:0] +:limit-3472 - [0:0] +:limit-3473 - [0:0] +:limit-3474 - [0:0] +:limit-3476 - [0:0] +:limit-3477 - [0:0] +:limit-3478 - [0:0] +:limit-3479 - [0:0] :limit-348 - [0:0] +:limit-3480 - [0:0] +:limit-3481 - [0:0] +:limit-3482 - [0:0] +:limit-3483 - [0:0] +:limit-3484 - [0:0] +:limit-3485 - [0:0] +:limit-3486 - [0:0] +:limit-3487 - [0:0] +:limit-3488 - [0:0] +:limit-3489 - [0:0] :limit-349 - [0:0] +:limit-3490 - [0:0] +:limit-3491 - [0:0] +:limit-3492 - [0:0] +:limit-3493 - [0:0] +:limit-3494 - [0:0] +:limit-3495 - [0:0] +:limit-3496 - [0:0] +:limit-3497 - [0:0] +:limit-3498 - [0:0] :limit-35 - [0:0] :limit-350 - [0:0] +:limit-3500 - [0:0] +:limit-3501 - [0:0] +:limit-3502 - [0:0] +:limit-3503 - [0:0] +:limit-3504 - [0:0] +:limit-3506 - [0:0] +:limit-3507 - [0:0] +:limit-3508 - [0:0] +:limit-3509 - [0:0] :limit-351 - [0:0] +:limit-3510 - [0:0] +:limit-3511 - [0:0] +:limit-3512 - [0:0] +:limit-3513 - [0:0] +:limit-3514 - [0:0] +:limit-3515 - [0:0] +:limit-3516 - [0:0] +:limit-3517 - [0:0] +:limit-3518 - [0:0] :limit-352 - [0:0] +:limit-3520 - [0:0] +:limit-3521 - [0:0] +:limit-3522 - [0:0] +:limit-3523 - [0:0] +:limit-3524 - [0:0] +:limit-3526 - [0:0] +:limit-3527 - [0:0] +:limit-3528 - [0:0] +:limit-3529 - [0:0] :limit-353 - [0:0] +:limit-3530 - [0:0] +:limit-3531 - [0:0] +:limit-3532 - [0:0] +:limit-3533 - [0:0] +:limit-3534 - [0:0] +:limit-3535 - [0:0] +:limit-3536 - [0:0] +:limit-3537 - [0:0] +:limit-3538 - [0:0] :limit-354 - [0:0] +:limit-3540 - [0:0] +:limit-3541 - [0:0] +:limit-3542 - [0:0] +:limit-3543 - [0:0] +:limit-3544 - [0:0] +:limit-3546 - [0:0] +:limit-3547 - [0:0] +:limit-3548 - [0:0] +:limit-3549 - [0:0] :limit-355 - [0:0] +:limit-3550 - [0:0] +:limit-3551 - [0:0] +:limit-3552 - [0:0] +:limit-3553 - [0:0] +:limit-3554 - [0:0] +:limit-3555 - [0:0] +:limit-3556 - [0:0] +:limit-3557 - [0:0] +:limit-3558 - [0:0] :limit-356 - [0:0] +:limit-3560 - [0:0] +:limit-3561 - [0:0] +:limit-3562 - [0:0] +:limit-3563 - [0:0] +:limit-3564 - [0:0] +:limit-3566 - [0:0] +:limit-3567 - [0:0] +:limit-3568 - [0:0] +:limit-3569 - [0:0] :limit-357 - [0:0] +:limit-3570 - [0:0] +:limit-3571 - [0:0] +:limit-3572 - [0:0] +:limit-3573 - [0:0] +:limit-3574 - [0:0] +:limit-3575 - [0:0] +:limit-3576 - [0:0] +:limit-3577 - [0:0] +:limit-3578 - [0:0] +:limit-3579 - [0:0] :limit-358 - [0:0] +:limit-3580 - [0:0] +:limit-3581 - [0:0] +:limit-3582 - [0:0] +:limit-3583 - [0:0] +:limit-3584 - [0:0] +:limit-3585 - [0:0] +:limit-3586 - [0:0] +:limit-3587 - [0:0] +:limit-3588 - [0:0] :limit-359 - [0:0] +:limit-3590 - [0:0] +:limit-3591 - [0:0] +:limit-3592 - [0:0] +:limit-3593 - [0:0] +:limit-3594 - [0:0] +:limit-3596 - [0:0] +:limit-3597 - [0:0] +:limit-3598 - [0:0] +:limit-3599 - [0:0] :limit-36 - [0:0] :limit-360 - [0:0] +:limit-3600 - [0:0] +:limit-3601 - [0:0] +:limit-3602 - [0:0] +:limit-3603 - [0:0] +:limit-3604 - [0:0] +:limit-3605 - [0:0] +:limit-3606 - [0:0] +:limit-3607 - [0:0] +:limit-3608 - [0:0] :limit-361 - [0:0] +:limit-3610 - [0:0] +:limit-3611 - [0:0] +:limit-3612 - [0:0] +:limit-3613 - [0:0] +:limit-3614 - [0:0] +:limit-3616 - [0:0] +:limit-3617 - [0:0] +:limit-3618 - [0:0] +:limit-3619 - [0:0] :limit-362 - [0:0] +:limit-3620 - [0:0] +:limit-3621 - [0:0] +:limit-3622 - [0:0] +:limit-3623 - [0:0] +:limit-3624 - [0:0] +:limit-3625 - [0:0] +:limit-3626 - [0:0] +:limit-3627 - [0:0] +:limit-3628 - [0:0] :limit-363 - [0:0] +:limit-3630 - [0:0] +:limit-3631 - [0:0] +:limit-3632 - [0:0] +:limit-3633 - [0:0] +:limit-3634 - [0:0] +:limit-3636 - [0:0] +:limit-3637 - [0:0] +:limit-3638 - [0:0] +:limit-3639 - [0:0] :limit-364 - [0:0] +:limit-3640 - [0:0] +:limit-3641 - [0:0] +:limit-3642 - [0:0] +:limit-3643 - [0:0] +:limit-3644 - [0:0] +:limit-3645 - [0:0] +:limit-3646 - [0:0] +:limit-3647 - [0:0] +:limit-3648 - [0:0] :limit-365 - [0:0] +:limit-3650 - [0:0] +:limit-3651 - [0:0] +:limit-3652 - [0:0] +:limit-3653 - [0:0] +:limit-3654 - [0:0] +:limit-3656 - [0:0] +:limit-3657 - [0:0] +:limit-3658 - [0:0] +:limit-3659 - [0:0] :limit-366 - [0:0] +:limit-3660 - [0:0] +:limit-3661 - [0:0] +:limit-3662 - [0:0] +:limit-3663 - [0:0] +:limit-3664 - [0:0] +:limit-3665 - [0:0] +:limit-3666 - [0:0] +:limit-3667 - [0:0] +:limit-3668 - [0:0] +:limit-3669 - [0:0] :limit-367 - [0:0] +:limit-3670 - [0:0] +:limit-3671 - [0:0] +:limit-3672 - [0:0] +:limit-3673 - [0:0] +:limit-3674 - [0:0] +:limit-3675 - [0:0] +:limit-3676 - [0:0] +:limit-3677 - [0:0] +:limit-3678 - [0:0] :limit-368 - [0:0] +:limit-3680 - [0:0] +:limit-3681 - [0:0] +:limit-3682 - [0:0] +:limit-3683 - [0:0] +:limit-3684 - [0:0] +:limit-3686 - [0:0] +:limit-3687 - [0:0] +:limit-3688 - [0:0] +:limit-3689 - [0:0] :limit-369 - [0:0] +:limit-3690 - [0:0] +:limit-3691 - [0:0] +:limit-3692 - [0:0] +:limit-3693 - [0:0] +:limit-3694 - [0:0] +:limit-3695 - [0:0] +:limit-3696 - [0:0] +:limit-3697 - [0:0] +:limit-3698 - [0:0] :limit-37 - [0:0] :limit-370 - [0:0] +:limit-3700 - [0:0] +:limit-3701 - [0:0] +:limit-3702 - [0:0] +:limit-3703 - [0:0] +:limit-3704 - [0:0] +:limit-3706 - [0:0] +:limit-3707 - [0:0] +:limit-3708 - [0:0] +:limit-3709 - [0:0] :limit-371 - [0:0] +:limit-3710 - [0:0] +:limit-3711 - [0:0] +:limit-3712 - [0:0] +:limit-3713 - [0:0] +:limit-3714 - [0:0] +:limit-3715 - [0:0] +:limit-3716 - [0:0] +:limit-3717 - [0:0] +:limit-3718 - [0:0] :limit-372 - [0:0] +:limit-3720 - [0:0] +:limit-3721 - [0:0] +:limit-3722 - [0:0] +:limit-3723 - [0:0] +:limit-3724 - [0:0] +:limit-3726 - [0:0] +:limit-3727 - [0:0] +:limit-3728 - [0:0] +:limit-3729 - [0:0] :limit-373 - [0:0] +:limit-3730 - [0:0] +:limit-3731 - [0:0] +:limit-3732 - [0:0] +:limit-3733 - [0:0] +:limit-3734 - [0:0] +:limit-3735 - [0:0] +:limit-3736 - [0:0] +:limit-3737 - [0:0] +:limit-3738 - [0:0] :limit-374 - [0:0] +:limit-3740 - [0:0] +:limit-3741 - [0:0] +:limit-3742 - [0:0] +:limit-3743 - [0:0] +:limit-3744 - [0:0] +:limit-3746 - [0:0] +:limit-3747 - [0:0] +:limit-3748 - [0:0] +:limit-3749 - [0:0] :limit-375 - [0:0] +:limit-3750 - [0:0] +:limit-3751 - [0:0] +:limit-3752 - [0:0] +:limit-3753 - [0:0] +:limit-3754 - [0:0] +:limit-3755 - [0:0] +:limit-3756 - [0:0] +:limit-3757 - [0:0] +:limit-3758 - [0:0] +:limit-3759 - [0:0] :limit-376 - [0:0] +:limit-3760 - [0:0] +:limit-3761 - [0:0] +:limit-3762 - [0:0] +:limit-3763 - [0:0] +:limit-3764 - [0:0] +:limit-3765 - [0:0] +:limit-3766 - [0:0] +:limit-3767 - [0:0] +:limit-3768 - [0:0] :limit-377 - [0:0] +:limit-3770 - [0:0] +:limit-3771 - [0:0] +:limit-3772 - [0:0] +:limit-3773 - [0:0] +:limit-3774 - [0:0] +:limit-3776 - [0:0] +:limit-3777 - [0:0] +:limit-3778 - [0:0] +:limit-3779 - [0:0] :limit-378 - [0:0] +:limit-3780 - [0:0] +:limit-3781 - [0:0] +:limit-3782 - [0:0] +:limit-3783 - [0:0] +:limit-3784 - [0:0] +:limit-3785 - [0:0] +:limit-3786 - [0:0] +:limit-3787 - [0:0] +:limit-3788 - [0:0] :limit-379 - [0:0] +:limit-3790 - [0:0] +:limit-3791 - [0:0] +:limit-3792 - [0:0] +:limit-3793 - [0:0] +:limit-3794 - [0:0] +:limit-3796 - [0:0] +:limit-3797 - [0:0] +:limit-3798 - [0:0] +:limit-3799 - [0:0] :limit-38 - [0:0] :limit-380 - [0:0] +:limit-3800 - [0:0] +:limit-3801 - [0:0] +:limit-3802 - [0:0] +:limit-3803 - [0:0] +:limit-3804 - [0:0] +:limit-3805 - [0:0] +:limit-3806 - [0:0] +:limit-3807 - [0:0] +:limit-3808 - [0:0] :limit-381 - [0:0] +:limit-3810 - [0:0] +:limit-3811 - [0:0] +:limit-3812 - [0:0] +:limit-3813 - [0:0] +:limit-3814 - [0:0] +:limit-3816 - [0:0] +:limit-3817 - [0:0] +:limit-3818 - [0:0] +:limit-3819 - [0:0] :limit-382 - [0:0] +:limit-3820 - [0:0] +:limit-3821 - [0:0] +:limit-3822 - [0:0] +:limit-3823 - [0:0] +:limit-3824 - [0:0] +:limit-3825 - [0:0] +:limit-3826 - [0:0] +:limit-3827 - [0:0] +:limit-3828 - [0:0] :limit-383 - [0:0] +:limit-3830 - [0:0] +:limit-3831 - [0:0] +:limit-3832 - [0:0] +:limit-3833 - [0:0] +:limit-3834 - [0:0] +:limit-3836 - [0:0] +:limit-3837 - [0:0] +:limit-3838 - [0:0] +:limit-3839 - [0:0] :limit-384 - [0:0] +:limit-3840 - [0:0] +:limit-3841 - [0:0] +:limit-3842 - [0:0] +:limit-3843 - [0:0] +:limit-3844 - [0:0] +:limit-3845 - [0:0] +:limit-3846 - [0:0] +:limit-3847 - [0:0] +:limit-3848 - [0:0] +:limit-3849 - [0:0] :limit-385 - [0:0] +:limit-3850 - [0:0] +:limit-3851 - [0:0] +:limit-3852 - [0:0] +:limit-3853 - [0:0] +:limit-3854 - [0:0] +:limit-3855 - [0:0] +:limit-3856 - [0:0] +:limit-3857 - [0:0] +:limit-3858 - [0:0] +:limit-3859 - [0:0] :limit-386 - [0:0] +:limit-3860 - [0:0] +:limit-3861 - [0:0] +:limit-3862 - [0:0] +:limit-3863 - [0:0] +:limit-3864 - [0:0] +:limit-3865 - [0:0] +:limit-3866 - [0:0] +:limit-3867 - [0:0] +:limit-3868 - [0:0] +:limit-3869 - [0:0] :limit-387 - [0:0] +:limit-3870 - [0:0] +:limit-3871 - [0:0] +:limit-3872 - [0:0] +:limit-3873 - [0:0] +:limit-3874 - [0:0] +:limit-3875 - [0:0] +:limit-3876 - [0:0] +:limit-3877 - [0:0] +:limit-3878 - [0:0] +:limit-3879 - [0:0] :limit-388 - [0:0] +:limit-3880 - [0:0] +:limit-3881 - [0:0] +:limit-3882 - [0:0] +:limit-3883 - [0:0] +:limit-3884 - [0:0] +:limit-3885 - [0:0] +:limit-3886 - [0:0] +:limit-3887 - [0:0] +:limit-3888 - [0:0] +:limit-3889 - [0:0] :limit-389 - [0:0] +:limit-3890 - [0:0] +:limit-3891 - [0:0] +:limit-3892 - [0:0] +:limit-3893 - [0:0] +:limit-3894 - [0:0] +:limit-3895 - [0:0] +:limit-3896 - [0:0] +:limit-3897 - [0:0] +:limit-3898 - [0:0] +:limit-3899 - [0:0] :limit-39 - [0:0] :limit-390 - [0:0] +:limit-3900 - [0:0] +:limit-3901 - [0:0] +:limit-3902 - [0:0] +:limit-3903 - [0:0] :limit-391 - [0:0] :limit-392 - [0:0] :limit-393 - [0:0] @@ -56565,9 +94958,11 @@ COMMIT :limit-651 - [0:0] :limit-652 - [0:0] :limit-653 - [0:0] +:limit-654 - [0:0] :limit-655 - [0:0] :limit-656 - [0:0] :limit-657 - [0:0] +:limit-658 - [0:0] :limit-659 - [0:0] :limit-66 - [0:0] :limit-660 - [0:0] @@ -56581,9 +94976,11 @@ COMMIT :limit-668 - [0:0] :limit-669 - [0:0] :limit-67 - [0:0] +:limit-670 - [0:0] :limit-671 - [0:0] :limit-672 - [0:0] :limit-673 - [0:0] +:limit-674 - [0:0] :limit-675 - [0:0] :limit-676 - [0:0] :limit-677 - [0:0] @@ -56596,10 +94993,12 @@ COMMIT :limit-683 - [0:0] :limit-684 - [0:0] :limit-685 - [0:0] +:limit-686 - [0:0] :limit-687 - [0:0] :limit-688 - [0:0] :limit-689 - [0:0] :limit-69 - [0:0] +:limit-690 - [0:0] :limit-691 - [0:0] :limit-692 - [0:0] :limit-693 - [0:0] @@ -56613,9 +95012,11 @@ COMMIT :limit-70 - [0:0] :limit-700 - [0:0] :limit-701 - [0:0] +:limit-702 - [0:0] :limit-703 - [0:0] :limit-704 - [0:0] :limit-705 - [0:0] +:limit-706 - [0:0] :limit-707 - [0:0] :limit-708 - [0:0] :limit-709 - [0:0] @@ -56637,10 +95038,12 @@ COMMIT :limit-723 - [0:0] :limit-724 - [0:0] :limit-725 - [0:0] +:limit-726 - [0:0] :limit-727 - [0:0] :limit-728 - [0:0] :limit-729 - [0:0] :limit-73 - [0:0] +:limit-730 - [0:0] :limit-731 - [0:0] :limit-732 - [0:0] :limit-733 - [0:0] @@ -56653,9 +95056,11 @@ COMMIT :limit-74 - [0:0] :limit-740 - [0:0] :limit-741 - [0:0] +:limit-742 - [0:0] :limit-743 - [0:0] :limit-744 - [0:0] :limit-745 - [0:0] +:limit-746 - [0:0] :limit-747 - [0:0] :limit-748 - [0:0] :limit-749 - [0:0] @@ -56668,10 +95073,12 @@ COMMIT :limit-755 - [0:0] :limit-756 - [0:0] :limit-757 - [0:0] +:limit-758 - [0:0] :limit-759 - [0:0] :limit-76 - [0:0] :limit-760 - [0:0] :limit-761 - [0:0] +:limit-762 - [0:0] :limit-763 - [0:0] :limit-764 - [0:0] :limit-765 - [0:0] @@ -56684,9 +95091,11 @@ COMMIT :limit-771 - [0:0] :limit-772 - [0:0] :limit-773 - [0:0] +:limit-774 - [0:0] :limit-775 - [0:0] :limit-776 - [0:0] :limit-777 - [0:0] +:limit-778 - [0:0] :limit-779 - [0:0] :limit-78 - [0:0] :limit-780 - [0:0] @@ -56708,11 +95117,13 @@ COMMIT :limit-795 - [0:0] :limit-796 - [0:0] :limit-797 - [0:0] +:limit-798 - [0:0] :limit-799 - [0:0] :limit-8 - [0:0] :limit-80 - [0:0] :limit-800 - [0:0] :limit-801 - [0:0] +:limit-802 - [0:0] :limit-803 - [0:0] :limit-804 - [0:0] :limit-805 - [0:0] @@ -56725,9 +95136,11 @@ COMMIT :limit-811 - [0:0] :limit-812 - [0:0] :limit-813 - [0:0] +:limit-814 - [0:0] :limit-815 - [0:0] :limit-816 - [0:0] :limit-817 - [0:0] +:limit-818 - [0:0] :limit-819 - [0:0] :limit-82 - [0:0] :limit-820 - [0:0] @@ -56741,9 +95154,11 @@ COMMIT :limit-828 - [0:0] :limit-829 - [0:0] :limit-83 - [0:0] +:limit-830 - [0:0] :limit-831 - [0:0] :limit-832 - [0:0] :limit-833 - [0:0] +:limit-834 - [0:0] :limit-835 - [0:0] :limit-836 - [0:0] :limit-837 - [0:0] @@ -56756,10 +95171,12 @@ COMMIT :limit-843 - [0:0] :limit-844 - [0:0] :limit-845 - [0:0] +:limit-846 - [0:0] :limit-847 - [0:0] :limit-848 - [0:0] :limit-849 - [0:0] :limit-85 - [0:0] +:limit-850 - [0:0] :limit-851 - [0:0] :limit-852 - [0:0] :limit-853 - [0:0] @@ -56781,9 +95198,11 @@ COMMIT :limit-868 - [0:0] :limit-869 - [0:0] :limit-87 - [0:0] +:limit-870 - [0:0] :limit-871 - [0:0] :limit-872 - [0:0] :limit-873 - [0:0] +:limit-874 - [0:0] :limit-875 - [0:0] :limit-876 - [0:0] :limit-877 - [0:0] @@ -56796,10 +95215,12 @@ COMMIT :limit-883 - [0:0] :limit-884 - [0:0] :limit-885 - [0:0] +:limit-886 - [0:0] :limit-887 - [0:0] :limit-888 - [0:0] :limit-889 - [0:0] :limit-89 - [0:0] +:limit-890 - [0:0] :limit-891 - [0:0] :limit-892 - [0:0] :limit-893 - [0:0] @@ -56813,9 +95234,11 @@ COMMIT :limit-90 - [0:0] :limit-900 - [0:0] :limit-901 - [0:0] +:limit-902 - [0:0] :limit-903 - [0:0] :limit-904 - [0:0] :limit-905 - [0:0] +:limit-906 - [0:0] :limit-907 - [0:0] :limit-908 - [0:0] :limit-909 - [0:0] @@ -56828,10 +95251,12 @@ COMMIT :limit-915 - [0:0] :limit-916 - [0:0] :limit-917 - [0:0] +:limit-918 - [0:0] :limit-919 - [0:0] :limit-92 - [0:0] :limit-920 - [0:0] :limit-921 - [0:0] +:limit-922 - [0:0] :limit-923 - [0:0] :limit-924 - [0:0] :limit-925 - [0:0] @@ -56853,9 +95278,11 @@ COMMIT :limit-94 - [0:0] :limit-940 - [0:0] :limit-941 - [0:0] +:limit-942 - [0:0] :limit-943 - [0:0] :limit-944 - [0:0] :limit-945 - [0:0] +:limit-946 - [0:0] :limit-947 - [0:0] :limit-948 - [0:0] :limit-949 - [0:0] @@ -56868,10 +95295,12 @@ COMMIT :limit-955 - [0:0] :limit-956 - [0:0] :limit-957 - [0:0] +:limit-958 - [0:0] :limit-959 - [0:0] :limit-96 - [0:0] :limit-960 - [0:0] :limit-961 - [0:0] +:limit-962 - [0:0] :limit-963 - [0:0] :limit-964 - [0:0] :limit-965 - [0:0] @@ -56884,9 +95313,11 @@ COMMIT :limit-971 - [0:0] :limit-972 - [0:0] :limit-973 - [0:0] +:limit-974 - [0:0] :limit-975 - [0:0] :limit-976 - [0:0] :limit-977 - [0:0] +:limit-978 - [0:0] :limit-979 - [0:0] :limit-98 - [0:0] :limit-980 - [0:0] @@ -56900,9 +95331,11 @@ COMMIT :limit-988 - [0:0] :limit-989 - [0:0] :limit-99 - [0:0] +:limit-990 - [0:0] :limit-991 - [0:0] :limit-992 - [0:0] :limit-993 - [0:0] +:limit-994 - [0:0] :limit-995 - [0:0] :limit-996 - [0:0] :limit-997 - [0:0] @@ -56911,6 +95344,9 @@ COMMIT :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] +:logaccept-100 - [0:0] +:logaccept-101 - [0:0] +:logaccept-102 - [0:0] :logaccept-11 - [0:0] :logaccept-12 - [0:0] :logaccept-13 - [0:0] @@ -56960,10 +95396,54 @@ COMMIT :logaccept-53 - [0:0] :logaccept-54 - [0:0] :logaccept-55 - [0:0] +:logaccept-56 - [0:0] +:logaccept-57 - [0:0] +:logaccept-58 - [0:0] +:logaccept-59 - [0:0] :logaccept-6 - [0:0] +:logaccept-60 - [0:0] +:logaccept-61 - [0:0] +:logaccept-62 - [0:0] +:logaccept-63 - [0:0] +:logaccept-64 - [0:0] +:logaccept-65 - [0:0] +:logaccept-66 - [0:0] +:logaccept-67 - [0:0] +:logaccept-68 - [0:0] +:logaccept-69 - [0:0] :logaccept-7 - [0:0] +:logaccept-70 - [0:0] +:logaccept-71 - [0:0] +:logaccept-72 - [0:0] +:logaccept-73 - [0:0] +:logaccept-74 - [0:0] +:logaccept-75 - [0:0] +:logaccept-76 - [0:0] +:logaccept-77 - [0:0] +:logaccept-78 - [0:0] +:logaccept-79 - [0:0] :logaccept-8 - [0:0] +:logaccept-80 - [0:0] +:logaccept-81 - [0:0] +:logaccept-82 - [0:0] +:logaccept-83 - [0:0] +:logaccept-84 - [0:0] +:logaccept-85 - [0:0] +:logaccept-86 - [0:0] +:logaccept-87 - [0:0] +:logaccept-88 - [0:0] +:logaccept-89 - [0:0] :logaccept-9 - [0:0] +:logaccept-90 - [0:0] +:logaccept-91 - [0:0] +:logaccept-92 - [0:0] +:logaccept-93 - [0:0] +:logaccept-94 - [0:0] +:logaccept-95 - [0:0] +:logaccept-96 - [0:0] +:logaccept-97 - [0:0] +:logaccept-98 - [0:0] +:logaccept-99 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] :logaccept-final-10 - [0:0] @@ -57037,22 +95517,164 @@ COMMIT :logaccept-final-161 - [0:0] :logaccept-final-162 - [0:0] :logaccept-final-163 - [0:0] +:logaccept-final-164 - [0:0] +:logaccept-final-165 - [0:0] +:logaccept-final-166 - [0:0] +:logaccept-final-167 - [0:0] +:logaccept-final-168 - [0:0] +:logaccept-final-169 - [0:0] :logaccept-final-17 - [0:0] +:logaccept-final-170 - [0:0] +:logaccept-final-171 - [0:0] +:logaccept-final-172 - [0:0] +:logaccept-final-173 - [0:0] +:logaccept-final-174 - [0:0] +:logaccept-final-175 - [0:0] +:logaccept-final-176 - [0:0] +:logaccept-final-177 - [0:0] +:logaccept-final-178 - [0:0] +:logaccept-final-179 - [0:0] :logaccept-final-18 - [0:0] +:logaccept-final-180 - [0:0] +:logaccept-final-181 - [0:0] +:logaccept-final-182 - [0:0] +:logaccept-final-183 - [0:0] +:logaccept-final-184 - [0:0] +:logaccept-final-185 - [0:0] +:logaccept-final-186 - [0:0] +:logaccept-final-187 - [0:0] +:logaccept-final-188 - [0:0] +:logaccept-final-189 - [0:0] :logaccept-final-19 - [0:0] +:logaccept-final-190 - [0:0] +:logaccept-final-191 - [0:0] +:logaccept-final-192 - [0:0] +:logaccept-final-193 - [0:0] +:logaccept-final-194 - [0:0] +:logaccept-final-195 - [0:0] +:logaccept-final-196 - [0:0] +:logaccept-final-197 - [0:0] +:logaccept-final-198 - [0:0] +:logaccept-final-199 - [0:0] :logaccept-final-2 - [0:0] :logaccept-final-20 - [0:0] +:logaccept-final-200 - [0:0] +:logaccept-final-201 - [0:0] +:logaccept-final-202 - [0:0] +:logaccept-final-203 - [0:0] +:logaccept-final-204 - [0:0] +:logaccept-final-205 - [0:0] +:logaccept-final-206 - [0:0] +:logaccept-final-207 - [0:0] +:logaccept-final-208 - [0:0] +:logaccept-final-209 - [0:0] :logaccept-final-21 - [0:0] +:logaccept-final-210 - [0:0] +:logaccept-final-211 - [0:0] +:logaccept-final-212 - [0:0] +:logaccept-final-213 - [0:0] +:logaccept-final-214 - [0:0] +:logaccept-final-215 - [0:0] +:logaccept-final-216 - [0:0] +:logaccept-final-217 - [0:0] +:logaccept-final-218 - [0:0] +:logaccept-final-219 - [0:0] :logaccept-final-22 - [0:0] +:logaccept-final-220 - [0:0] +:logaccept-final-221 - [0:0] +:logaccept-final-222 - [0:0] +:logaccept-final-223 - [0:0] +:logaccept-final-224 - [0:0] +:logaccept-final-225 - [0:0] +:logaccept-final-226 - [0:0] +:logaccept-final-227 - [0:0] +:logaccept-final-228 - [0:0] +:logaccept-final-229 - [0:0] :logaccept-final-23 - [0:0] +:logaccept-final-230 - [0:0] +:logaccept-final-231 - [0:0] +:logaccept-final-232 - [0:0] +:logaccept-final-233 - [0:0] +:logaccept-final-234 - [0:0] +:logaccept-final-235 - [0:0] +:logaccept-final-236 - [0:0] +:logaccept-final-237 - [0:0] +:logaccept-final-238 - [0:0] +:logaccept-final-239 - [0:0] :logaccept-final-24 - [0:0] +:logaccept-final-240 - [0:0] +:logaccept-final-241 - [0:0] +:logaccept-final-242 - [0:0] +:logaccept-final-243 - [0:0] +:logaccept-final-244 - [0:0] +:logaccept-final-245 - [0:0] +:logaccept-final-246 - [0:0] +:logaccept-final-247 - [0:0] +:logaccept-final-248 - [0:0] +:logaccept-final-249 - [0:0] :logaccept-final-25 - [0:0] +:logaccept-final-250 - [0:0] +:logaccept-final-251 - [0:0] +:logaccept-final-252 - [0:0] +:logaccept-final-253 - [0:0] +:logaccept-final-254 - [0:0] +:logaccept-final-255 - [0:0] +:logaccept-final-256 - [0:0] +:logaccept-final-257 - [0:0] +:logaccept-final-258 - [0:0] +:logaccept-final-259 - [0:0] :logaccept-final-26 - [0:0] +:logaccept-final-260 - [0:0] +:logaccept-final-261 - [0:0] +:logaccept-final-262 - [0:0] +:logaccept-final-263 - [0:0] +:logaccept-final-264 - [0:0] +:logaccept-final-265 - [0:0] +:logaccept-final-266 - [0:0] +:logaccept-final-267 - [0:0] +:logaccept-final-268 - [0:0] +:logaccept-final-269 - [0:0] :logaccept-final-27 - [0:0] +:logaccept-final-270 - [0:0] +:logaccept-final-271 - [0:0] +:logaccept-final-272 - [0:0] +:logaccept-final-273 - [0:0] +:logaccept-final-274 - [0:0] +:logaccept-final-275 - [0:0] +:logaccept-final-276 - [0:0] +:logaccept-final-277 - [0:0] +:logaccept-final-278 - [0:0] +:logaccept-final-279 - [0:0] :logaccept-final-28 - [0:0] +:logaccept-final-280 - [0:0] +:logaccept-final-281 - [0:0] +:logaccept-final-282 - [0:0] +:logaccept-final-283 - [0:0] +:logaccept-final-284 - [0:0] +:logaccept-final-285 - [0:0] +:logaccept-final-286 - [0:0] +:logaccept-final-287 - [0:0] +:logaccept-final-288 - [0:0] +:logaccept-final-289 - [0:0] :logaccept-final-29 - [0:0] +:logaccept-final-290 - [0:0] +:logaccept-final-291 - [0:0] +:logaccept-final-292 - [0:0] +:logaccept-final-293 - [0:0] +:logaccept-final-294 - [0:0] +:logaccept-final-295 - [0:0] +:logaccept-final-296 - [0:0] +:logaccept-final-297 - [0:0] +:logaccept-final-298 - [0:0] +:logaccept-final-299 - [0:0] :logaccept-final-3 - [0:0] :logaccept-final-30 - [0:0] +:logaccept-final-300 - [0:0] +:logaccept-final-301 - [0:0] +:logaccept-final-302 - [0:0] +:logaccept-final-303 - [0:0] +:logaccept-final-304 - [0:0] +:logaccept-final-305 - [0:0] :logaccept-final-31 - [0:0] :logaccept-final-32 - [0:0] :logaccept-final-33 - [0:0] @@ -57338,120 +95960,1138 @@ COMMIT :logdrop-1184 - [0:0] :logdrop-1185 - [0:0] :logdrop-1186 - [0:0] +:logdrop-1187 - [0:0] +:logdrop-1188 - [0:0] +:logdrop-1189 - [0:0] :logdrop-119 - [0:0] +:logdrop-1190 - [0:0] +:logdrop-1191 - [0:0] +:logdrop-1192 - [0:0] +:logdrop-1193 - [0:0] +:logdrop-1194 - [0:0] +:logdrop-1195 - [0:0] +:logdrop-1196 - [0:0] +:logdrop-1197 - [0:0] +:logdrop-1198 - [0:0] +:logdrop-1199 - [0:0] :logdrop-12 - [0:0] :logdrop-120 - [0:0] +:logdrop-1200 - [0:0] +:logdrop-1201 - [0:0] +:logdrop-1202 - [0:0] +:logdrop-1203 - [0:0] +:logdrop-1204 - [0:0] +:logdrop-1205 - [0:0] +:logdrop-1206 - [0:0] +:logdrop-1207 - [0:0] +:logdrop-1208 - [0:0] +:logdrop-1209 - [0:0] :logdrop-121 - [0:0] +:logdrop-1210 - [0:0] +:logdrop-1211 - [0:0] +:logdrop-1212 - [0:0] +:logdrop-1213 - [0:0] +:logdrop-1214 - [0:0] +:logdrop-1215 - [0:0] +:logdrop-1216 - [0:0] +:logdrop-1217 - [0:0] +:logdrop-1218 - [0:0] +:logdrop-1219 - [0:0] :logdrop-122 - [0:0] +:logdrop-1220 - [0:0] +:logdrop-1221 - [0:0] +:logdrop-1222 - [0:0] +:logdrop-1223 - [0:0] +:logdrop-1224 - [0:0] +:logdrop-1225 - [0:0] +:logdrop-1226 - [0:0] +:logdrop-1227 - [0:0] +:logdrop-1228 - [0:0] +:logdrop-1229 - [0:0] :logdrop-123 - [0:0] +:logdrop-1230 - [0:0] +:logdrop-1231 - [0:0] +:logdrop-1232 - [0:0] +:logdrop-1233 - [0:0] +:logdrop-1234 - [0:0] +:logdrop-1235 - [0:0] +:logdrop-1236 - [0:0] +:logdrop-1237 - [0:0] +:logdrop-1238 - [0:0] +:logdrop-1239 - [0:0] :logdrop-124 - [0:0] +:logdrop-1240 - [0:0] +:logdrop-1241 - [0:0] +:logdrop-1242 - [0:0] +:logdrop-1243 - [0:0] +:logdrop-1244 - [0:0] +:logdrop-1245 - [0:0] +:logdrop-1246 - [0:0] +:logdrop-1247 - [0:0] +:logdrop-1248 - [0:0] +:logdrop-1249 - [0:0] :logdrop-125 - [0:0] +:logdrop-1250 - [0:0] +:logdrop-1251 - [0:0] +:logdrop-1252 - [0:0] +:logdrop-1253 - [0:0] +:logdrop-1254 - [0:0] +:logdrop-1255 - [0:0] +:logdrop-1256 - [0:0] +:logdrop-1257 - [0:0] +:logdrop-1258 - [0:0] +:logdrop-1259 - [0:0] :logdrop-126 - [0:0] +:logdrop-1260 - [0:0] +:logdrop-1261 - [0:0] +:logdrop-1262 - [0:0] +:logdrop-1263 - [0:0] +:logdrop-1264 - [0:0] +:logdrop-1265 - [0:0] +:logdrop-1266 - [0:0] +:logdrop-1267 - [0:0] +:logdrop-1268 - [0:0] +:logdrop-1269 - [0:0] :logdrop-127 - [0:0] +:logdrop-1270 - [0:0] +:logdrop-1271 - [0:0] +:logdrop-1272 - [0:0] +:logdrop-1273 - [0:0] +:logdrop-1274 - [0:0] +:logdrop-1275 - [0:0] +:logdrop-1276 - [0:0] +:logdrop-1277 - [0:0] +:logdrop-1278 - [0:0] +:logdrop-1279 - [0:0] :logdrop-128 - [0:0] +:logdrop-1280 - [0:0] +:logdrop-1281 - [0:0] +:logdrop-1282 - [0:0] +:logdrop-1283 - [0:0] +:logdrop-1284 - [0:0] +:logdrop-1285 - [0:0] +:logdrop-1286 - [0:0] +:logdrop-1287 - [0:0] +:logdrop-1288 - [0:0] +:logdrop-1289 - [0:0] :logdrop-129 - [0:0] +:logdrop-1290 - [0:0] +:logdrop-1291 - [0:0] +:logdrop-1292 - [0:0] +:logdrop-1293 - [0:0] +:logdrop-1294 - [0:0] +:logdrop-1295 - [0:0] +:logdrop-1296 - [0:0] +:logdrop-1297 - [0:0] +:logdrop-1298 - [0:0] +:logdrop-1299 - [0:0] :logdrop-13 - [0:0] :logdrop-130 - [0:0] +:logdrop-1300 - [0:0] +:logdrop-1301 - [0:0] +:logdrop-1302 - [0:0] +:logdrop-1303 - [0:0] +:logdrop-1304 - [0:0] +:logdrop-1305 - [0:0] +:logdrop-1306 - [0:0] +:logdrop-1307 - [0:0] +:logdrop-1308 - [0:0] +:logdrop-1309 - [0:0] :logdrop-131 - [0:0] +:logdrop-1310 - [0:0] +:logdrop-1311 - [0:0] +:logdrop-1312 - [0:0] +:logdrop-1313 - [0:0] +:logdrop-1314 - [0:0] +:logdrop-1315 - [0:0] +:logdrop-1316 - [0:0] +:logdrop-1317 - [0:0] +:logdrop-1318 - [0:0] +:logdrop-1319 - [0:0] :logdrop-132 - [0:0] +:logdrop-1320 - [0:0] +:logdrop-1321 - [0:0] +:logdrop-1322 - [0:0] +:logdrop-1323 - [0:0] +:logdrop-1324 - [0:0] +:logdrop-1325 - [0:0] +:logdrop-1326 - [0:0] +:logdrop-1327 - [0:0] +:logdrop-1328 - [0:0] +:logdrop-1329 - [0:0] :logdrop-133 - [0:0] +:logdrop-1330 - [0:0] +:logdrop-1331 - [0:0] +:logdrop-1332 - [0:0] +:logdrop-1333 - [0:0] +:logdrop-1334 - [0:0] +:logdrop-1335 - [0:0] +:logdrop-1336 - [0:0] +:logdrop-1337 - [0:0] +:logdrop-1338 - [0:0] +:logdrop-1339 - [0:0] :logdrop-134 - [0:0] +:logdrop-1340 - [0:0] +:logdrop-1341 - [0:0] +:logdrop-1342 - [0:0] +:logdrop-1343 - [0:0] +:logdrop-1344 - [0:0] +:logdrop-1345 - [0:0] +:logdrop-1346 - [0:0] +:logdrop-1347 - [0:0] +:logdrop-1348 - [0:0] +:logdrop-1349 - [0:0] :logdrop-135 - [0:0] +:logdrop-1350 - [0:0] +:logdrop-1351 - [0:0] +:logdrop-1352 - [0:0] +:logdrop-1353 - [0:0] +:logdrop-1354 - [0:0] +:logdrop-1355 - [0:0] +:logdrop-1356 - [0:0] +:logdrop-1357 - [0:0] +:logdrop-1358 - [0:0] +:logdrop-1359 - [0:0] :logdrop-136 - [0:0] +:logdrop-1360 - [0:0] +:logdrop-1361 - [0:0] +:logdrop-1362 - [0:0] +:logdrop-1363 - [0:0] +:logdrop-1364 - [0:0] +:logdrop-1365 - [0:0] +:logdrop-1366 - [0:0] +:logdrop-1367 - [0:0] +:logdrop-1368 - [0:0] +:logdrop-1369 - [0:0] :logdrop-137 - [0:0] +:logdrop-1370 - [0:0] +:logdrop-1371 - [0:0] +:logdrop-1372 - [0:0] +:logdrop-1373 - [0:0] +:logdrop-1374 - [0:0] +:logdrop-1375 - [0:0] +:logdrop-1376 - [0:0] +:logdrop-1377 - [0:0] +:logdrop-1378 - [0:0] +:logdrop-1379 - [0:0] :logdrop-138 - [0:0] +:logdrop-1380 - [0:0] +:logdrop-1381 - [0:0] +:logdrop-1382 - [0:0] +:logdrop-1383 - [0:0] +:logdrop-1384 - [0:0] +:logdrop-1385 - [0:0] +:logdrop-1386 - [0:0] +:logdrop-1387 - [0:0] +:logdrop-1388 - [0:0] +:logdrop-1389 - [0:0] :logdrop-139 - [0:0] +:logdrop-1390 - [0:0] +:logdrop-1391 - [0:0] +:logdrop-1392 - [0:0] +:logdrop-1393 - [0:0] +:logdrop-1394 - [0:0] +:logdrop-1395 - [0:0] +:logdrop-1396 - [0:0] +:logdrop-1397 - [0:0] +:logdrop-1398 - [0:0] +:logdrop-1399 - [0:0] :logdrop-14 - [0:0] :logdrop-140 - [0:0] +:logdrop-1400 - [0:0] +:logdrop-1401 - [0:0] +:logdrop-1402 - [0:0] +:logdrop-1403 - [0:0] +:logdrop-1404 - [0:0] +:logdrop-1405 - [0:0] +:logdrop-1406 - [0:0] +:logdrop-1407 - [0:0] +:logdrop-1408 - [0:0] +:logdrop-1409 - [0:0] :logdrop-141 - [0:0] +:logdrop-1410 - [0:0] +:logdrop-1411 - [0:0] +:logdrop-1412 - [0:0] +:logdrop-1413 - [0:0] +:logdrop-1414 - [0:0] +:logdrop-1415 - [0:0] +:logdrop-1416 - [0:0] +:logdrop-1417 - [0:0] +:logdrop-1418 - [0:0] +:logdrop-1419 - [0:0] :logdrop-142 - [0:0] +:logdrop-1420 - [0:0] +:logdrop-1421 - [0:0] +:logdrop-1422 - [0:0] +:logdrop-1423 - [0:0] +:logdrop-1424 - [0:0] +:logdrop-1425 - [0:0] +:logdrop-1426 - [0:0] +:logdrop-1427 - [0:0] +:logdrop-1428 - [0:0] +:logdrop-1429 - [0:0] :logdrop-143 - [0:0] +:logdrop-1430 - [0:0] +:logdrop-1431 - [0:0] +:logdrop-1432 - [0:0] +:logdrop-1433 - [0:0] +:logdrop-1434 - [0:0] +:logdrop-1435 - [0:0] +:logdrop-1436 - [0:0] +:logdrop-1437 - [0:0] +:logdrop-1438 - [0:0] +:logdrop-1439 - [0:0] :logdrop-144 - [0:0] +:logdrop-1440 - [0:0] +:logdrop-1441 - [0:0] +:logdrop-1442 - [0:0] +:logdrop-1443 - [0:0] +:logdrop-1444 - [0:0] +:logdrop-1445 - [0:0] +:logdrop-1446 - [0:0] +:logdrop-1447 - [0:0] +:logdrop-1448 - [0:0] +:logdrop-1449 - [0:0] :logdrop-145 - [0:0] +:logdrop-1450 - [0:0] +:logdrop-1451 - [0:0] +:logdrop-1452 - [0:0] +:logdrop-1453 - [0:0] +:logdrop-1454 - [0:0] +:logdrop-1455 - [0:0] +:logdrop-1456 - [0:0] +:logdrop-1457 - [0:0] +:logdrop-1458 - [0:0] +:logdrop-1459 - [0:0] :logdrop-146 - [0:0] +:logdrop-1460 - [0:0] +:logdrop-1461 - [0:0] +:logdrop-1462 - [0:0] +:logdrop-1463 - [0:0] +:logdrop-1464 - [0:0] +:logdrop-1465 - [0:0] +:logdrop-1466 - [0:0] +:logdrop-1467 - [0:0] +:logdrop-1468 - [0:0] +:logdrop-1469 - [0:0] :logdrop-147 - [0:0] +:logdrop-1470 - [0:0] +:logdrop-1471 - [0:0] +:logdrop-1472 - [0:0] +:logdrop-1473 - [0:0] +:logdrop-1474 - [0:0] +:logdrop-1475 - [0:0] +:logdrop-1476 - [0:0] +:logdrop-1477 - [0:0] +:logdrop-1478 - [0:0] +:logdrop-1479 - [0:0] :logdrop-148 - [0:0] +:logdrop-1480 - [0:0] +:logdrop-1481 - [0:0] +:logdrop-1482 - [0:0] +:logdrop-1483 - [0:0] +:logdrop-1484 - [0:0] +:logdrop-1485 - [0:0] +:logdrop-1486 - [0:0] +:logdrop-1487 - [0:0] +:logdrop-1488 - [0:0] +:logdrop-1489 - [0:0] :logdrop-149 - [0:0] +:logdrop-1490 - [0:0] +:logdrop-1491 - [0:0] +:logdrop-1492 - [0:0] +:logdrop-1493 - [0:0] +:logdrop-1494 - [0:0] +:logdrop-1495 - [0:0] +:logdrop-1496 - [0:0] +:logdrop-1497 - [0:0] +:logdrop-1498 - [0:0] +:logdrop-1499 - [0:0] :logdrop-15 - [0:0] :logdrop-150 - [0:0] +:logdrop-1500 - [0:0] +:logdrop-1501 - [0:0] +:logdrop-1502 - [0:0] +:logdrop-1503 - [0:0] +:logdrop-1504 - [0:0] +:logdrop-1505 - [0:0] +:logdrop-1506 - [0:0] +:logdrop-1507 - [0:0] +:logdrop-1508 - [0:0] +:logdrop-1509 - [0:0] :logdrop-151 - [0:0] +:logdrop-1510 - [0:0] +:logdrop-1511 - [0:0] +:logdrop-1512 - [0:0] +:logdrop-1513 - [0:0] +:logdrop-1514 - [0:0] +:logdrop-1515 - [0:0] +:logdrop-1516 - [0:0] +:logdrop-1517 - [0:0] +:logdrop-1518 - [0:0] +:logdrop-1519 - [0:0] :logdrop-152 - [0:0] +:logdrop-1520 - [0:0] +:logdrop-1521 - [0:0] +:logdrop-1522 - [0:0] +:logdrop-1523 - [0:0] +:logdrop-1524 - [0:0] +:logdrop-1525 - [0:0] +:logdrop-1526 - [0:0] +:logdrop-1527 - [0:0] +:logdrop-1528 - [0:0] +:logdrop-1529 - [0:0] :logdrop-153 - [0:0] +:logdrop-1530 - [0:0] +:logdrop-1531 - [0:0] +:logdrop-1532 - [0:0] +:logdrop-1533 - [0:0] +:logdrop-1534 - [0:0] +:logdrop-1535 - [0:0] +:logdrop-1536 - [0:0] +:logdrop-1537 - [0:0] +:logdrop-1538 - [0:0] +:logdrop-1539 - [0:0] :logdrop-154 - [0:0] +:logdrop-1540 - [0:0] +:logdrop-1541 - [0:0] +:logdrop-1542 - [0:0] +:logdrop-1543 - [0:0] +:logdrop-1544 - [0:0] +:logdrop-1545 - [0:0] +:logdrop-1546 - [0:0] +:logdrop-1547 - [0:0] +:logdrop-1548 - [0:0] +:logdrop-1549 - [0:0] :logdrop-155 - [0:0] +:logdrop-1550 - [0:0] +:logdrop-1551 - [0:0] +:logdrop-1552 - [0:0] +:logdrop-1553 - [0:0] +:logdrop-1554 - [0:0] +:logdrop-1555 - [0:0] +:logdrop-1556 - [0:0] +:logdrop-1557 - [0:0] +:logdrop-1558 - [0:0] +:logdrop-1559 - [0:0] :logdrop-156 - [0:0] +:logdrop-1560 - [0:0] +:logdrop-1561 - [0:0] +:logdrop-1562 - [0:0] +:logdrop-1563 - [0:0] +:logdrop-1564 - [0:0] +:logdrop-1565 - [0:0] +:logdrop-1566 - [0:0] +:logdrop-1567 - [0:0] +:logdrop-1568 - [0:0] +:logdrop-1569 - [0:0] :logdrop-157 - [0:0] +:logdrop-1570 - [0:0] +:logdrop-1571 - [0:0] +:logdrop-1572 - [0:0] +:logdrop-1573 - [0:0] +:logdrop-1574 - [0:0] +:logdrop-1575 - [0:0] +:logdrop-1576 - [0:0] +:logdrop-1577 - [0:0] +:logdrop-1578 - [0:0] +:logdrop-1579 - [0:0] :logdrop-158 - [0:0] +:logdrop-1580 - [0:0] +:logdrop-1581 - [0:0] +:logdrop-1582 - [0:0] +:logdrop-1583 - [0:0] +:logdrop-1584 - [0:0] +:logdrop-1585 - [0:0] +:logdrop-1586 - [0:0] +:logdrop-1587 - [0:0] +:logdrop-1588 - [0:0] +:logdrop-1589 - [0:0] :logdrop-159 - [0:0] +:logdrop-1590 - [0:0] +:logdrop-1591 - [0:0] +:logdrop-1592 - [0:0] +:logdrop-1593 - [0:0] +:logdrop-1594 - [0:0] +:logdrop-1595 - [0:0] +:logdrop-1596 - [0:0] +:logdrop-1597 - [0:0] +:logdrop-1598 - [0:0] +:logdrop-1599 - [0:0] :logdrop-16 - [0:0] :logdrop-160 - [0:0] +:logdrop-1600 - [0:0] +:logdrop-1601 - [0:0] +:logdrop-1602 - [0:0] +:logdrop-1603 - [0:0] +:logdrop-1604 - [0:0] +:logdrop-1605 - [0:0] +:logdrop-1606 - [0:0] +:logdrop-1607 - [0:0] +:logdrop-1608 - [0:0] +:logdrop-1609 - [0:0] :logdrop-161 - [0:0] +:logdrop-1610 - [0:0] +:logdrop-1611 - [0:0] +:logdrop-1612 - [0:0] +:logdrop-1613 - [0:0] +:logdrop-1614 - [0:0] +:logdrop-1615 - [0:0] +:logdrop-1616 - [0:0] +:logdrop-1617 - [0:0] +:logdrop-1618 - [0:0] +:logdrop-1619 - [0:0] :logdrop-162 - [0:0] +:logdrop-1620 - [0:0] +:logdrop-1621 - [0:0] +:logdrop-1622 - [0:0] +:logdrop-1623 - [0:0] +:logdrop-1624 - [0:0] +:logdrop-1625 - [0:0] +:logdrop-1626 - [0:0] +:logdrop-1627 - [0:0] +:logdrop-1628 - [0:0] +:logdrop-1629 - [0:0] :logdrop-163 - [0:0] +:logdrop-1630 - [0:0] +:logdrop-1631 - [0:0] +:logdrop-1632 - [0:0] +:logdrop-1633 - [0:0] +:logdrop-1634 - [0:0] +:logdrop-1635 - [0:0] +:logdrop-1636 - [0:0] +:logdrop-1637 - [0:0] +:logdrop-1638 - [0:0] +:logdrop-1639 - [0:0] :logdrop-164 - [0:0] +:logdrop-1640 - [0:0] +:logdrop-1641 - [0:0] +:logdrop-1642 - [0:0] +:logdrop-1643 - [0:0] +:logdrop-1644 - [0:0] +:logdrop-1645 - [0:0] +:logdrop-1646 - [0:0] +:logdrop-1647 - [0:0] +:logdrop-1648 - [0:0] +:logdrop-1649 - [0:0] :logdrop-165 - [0:0] +:logdrop-1650 - [0:0] +:logdrop-1651 - [0:0] +:logdrop-1652 - [0:0] +:logdrop-1653 - [0:0] +:logdrop-1654 - [0:0] +:logdrop-1655 - [0:0] +:logdrop-1656 - [0:0] +:logdrop-1657 - [0:0] +:logdrop-1658 - [0:0] +:logdrop-1659 - [0:0] :logdrop-166 - [0:0] +:logdrop-1660 - [0:0] +:logdrop-1661 - [0:0] +:logdrop-1662 - [0:0] +:logdrop-1663 - [0:0] +:logdrop-1664 - [0:0] +:logdrop-1665 - [0:0] +:logdrop-1666 - [0:0] +:logdrop-1667 - [0:0] +:logdrop-1668 - [0:0] +:logdrop-1669 - [0:0] :logdrop-167 - [0:0] +:logdrop-1670 - [0:0] +:logdrop-1671 - [0:0] +:logdrop-1672 - [0:0] +:logdrop-1673 - [0:0] +:logdrop-1674 - [0:0] +:logdrop-1675 - [0:0] +:logdrop-1676 - [0:0] +:logdrop-1677 - [0:0] +:logdrop-1678 - [0:0] +:logdrop-1679 - [0:0] :logdrop-168 - [0:0] +:logdrop-1680 - [0:0] +:logdrop-1681 - [0:0] +:logdrop-1682 - [0:0] +:logdrop-1683 - [0:0] +:logdrop-1684 - [0:0] +:logdrop-1685 - [0:0] +:logdrop-1686 - [0:0] +:logdrop-1687 - [0:0] +:logdrop-1688 - [0:0] +:logdrop-1689 - [0:0] :logdrop-169 - [0:0] +:logdrop-1690 - [0:0] +:logdrop-1691 - [0:0] +:logdrop-1692 - [0:0] +:logdrop-1693 - [0:0] +:logdrop-1694 - [0:0] +:logdrop-1695 - [0:0] +:logdrop-1696 - [0:0] +:logdrop-1697 - [0:0] +:logdrop-1698 - [0:0] +:logdrop-1699 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] +:logdrop-1700 - [0:0] +:logdrop-1701 - [0:0] +:logdrop-1702 - [0:0] +:logdrop-1703 - [0:0] +:logdrop-1704 - [0:0] +:logdrop-1705 - [0:0] +:logdrop-1706 - [0:0] +:logdrop-1707 - [0:0] +:logdrop-1708 - [0:0] +:logdrop-1709 - [0:0] :logdrop-171 - [0:0] +:logdrop-1710 - [0:0] +:logdrop-1711 - [0:0] +:logdrop-1712 - [0:0] +:logdrop-1713 - [0:0] +:logdrop-1714 - [0:0] +:logdrop-1715 - [0:0] +:logdrop-1716 - [0:0] +:logdrop-1717 - [0:0] +:logdrop-1718 - [0:0] +:logdrop-1719 - [0:0] :logdrop-172 - [0:0] +:logdrop-1720 - [0:0] +:logdrop-1721 - [0:0] +:logdrop-1722 - [0:0] +:logdrop-1723 - [0:0] +:logdrop-1724 - [0:0] +:logdrop-1725 - [0:0] +:logdrop-1726 - [0:0] +:logdrop-1727 - [0:0] +:logdrop-1728 - [0:0] +:logdrop-1729 - [0:0] :logdrop-173 - [0:0] +:logdrop-1730 - [0:0] +:logdrop-1731 - [0:0] +:logdrop-1732 - [0:0] +:logdrop-1733 - [0:0] +:logdrop-1734 - [0:0] +:logdrop-1735 - [0:0] +:logdrop-1736 - [0:0] +:logdrop-1737 - [0:0] +:logdrop-1738 - [0:0] +:logdrop-1739 - [0:0] :logdrop-174 - [0:0] +:logdrop-1740 - [0:0] +:logdrop-1741 - [0:0] +:logdrop-1742 - [0:0] +:logdrop-1743 - [0:0] +:logdrop-1744 - [0:0] +:logdrop-1745 - [0:0] +:logdrop-1746 - [0:0] +:logdrop-1747 - [0:0] +:logdrop-1748 - [0:0] +:logdrop-1749 - [0:0] :logdrop-175 - [0:0] +:logdrop-1750 - [0:0] +:logdrop-1751 - [0:0] +:logdrop-1752 - [0:0] +:logdrop-1753 - [0:0] +:logdrop-1754 - [0:0] +:logdrop-1755 - [0:0] +:logdrop-1756 - [0:0] +:logdrop-1757 - [0:0] +:logdrop-1758 - [0:0] +:logdrop-1759 - [0:0] :logdrop-176 - [0:0] +:logdrop-1760 - [0:0] +:logdrop-1761 - [0:0] +:logdrop-1762 - [0:0] +:logdrop-1763 - [0:0] +:logdrop-1764 - [0:0] +:logdrop-1765 - [0:0] +:logdrop-1766 - [0:0] +:logdrop-1767 - [0:0] +:logdrop-1768 - [0:0] +:logdrop-1769 - [0:0] :logdrop-177 - [0:0] +:logdrop-1770 - [0:0] +:logdrop-1771 - [0:0] +:logdrop-1772 - [0:0] +:logdrop-1773 - [0:0] +:logdrop-1774 - [0:0] +:logdrop-1775 - [0:0] +:logdrop-1776 - [0:0] +:logdrop-1777 - [0:0] +:logdrop-1778 - [0:0] +:logdrop-1779 - [0:0] :logdrop-178 - [0:0] +:logdrop-1780 - [0:0] +:logdrop-1781 - [0:0] +:logdrop-1782 - [0:0] +:logdrop-1783 - [0:0] +:logdrop-1784 - [0:0] +:logdrop-1785 - [0:0] +:logdrop-1786 - [0:0] +:logdrop-1787 - [0:0] +:logdrop-1788 - [0:0] +:logdrop-1789 - [0:0] :logdrop-179 - [0:0] +:logdrop-1790 - [0:0] +:logdrop-1791 - [0:0] +:logdrop-1792 - [0:0] +:logdrop-1793 - [0:0] +:logdrop-1794 - [0:0] +:logdrop-1795 - [0:0] +:logdrop-1796 - [0:0] +:logdrop-1797 - [0:0] +:logdrop-1798 - [0:0] +:logdrop-1799 - [0:0] :logdrop-18 - [0:0] :logdrop-180 - [0:0] +:logdrop-1800 - [0:0] +:logdrop-1801 - [0:0] +:logdrop-1802 - [0:0] +:logdrop-1803 - [0:0] +:logdrop-1804 - [0:0] +:logdrop-1805 - [0:0] +:logdrop-1806 - [0:0] +:logdrop-1807 - [0:0] +:logdrop-1808 - [0:0] +:logdrop-1809 - [0:0] :logdrop-181 - [0:0] +:logdrop-1810 - [0:0] +:logdrop-1811 - [0:0] +:logdrop-1812 - [0:0] +:logdrop-1813 - [0:0] +:logdrop-1814 - [0:0] +:logdrop-1815 - [0:0] +:logdrop-1816 - [0:0] +:logdrop-1817 - [0:0] +:logdrop-1818 - [0:0] +:logdrop-1819 - [0:0] :logdrop-182 - [0:0] +:logdrop-1820 - [0:0] +:logdrop-1821 - [0:0] +:logdrop-1822 - [0:0] +:logdrop-1823 - [0:0] +:logdrop-1824 - [0:0] +:logdrop-1825 - [0:0] +:logdrop-1826 - [0:0] +:logdrop-1827 - [0:0] +:logdrop-1828 - [0:0] +:logdrop-1829 - [0:0] :logdrop-183 - [0:0] +:logdrop-1830 - [0:0] +:logdrop-1831 - [0:0] +:logdrop-1832 - [0:0] +:logdrop-1833 - [0:0] +:logdrop-1834 - [0:0] +:logdrop-1835 - [0:0] +:logdrop-1836 - [0:0] +:logdrop-1837 - [0:0] +:logdrop-1838 - [0:0] +:logdrop-1839 - [0:0] :logdrop-184 - [0:0] +:logdrop-1840 - [0:0] +:logdrop-1841 - [0:0] +:logdrop-1842 - [0:0] +:logdrop-1843 - [0:0] +:logdrop-1844 - [0:0] +:logdrop-1845 - [0:0] +:logdrop-1846 - [0:0] +:logdrop-1847 - [0:0] +:logdrop-1848 - [0:0] +:logdrop-1849 - [0:0] :logdrop-185 - [0:0] +:logdrop-1850 - [0:0] +:logdrop-1851 - [0:0] +:logdrop-1852 - [0:0] +:logdrop-1853 - [0:0] +:logdrop-1854 - [0:0] +:logdrop-1855 - [0:0] +:logdrop-1856 - [0:0] +:logdrop-1857 - [0:0] +:logdrop-1858 - [0:0] +:logdrop-1859 - [0:0] :logdrop-186 - [0:0] +:logdrop-1860 - [0:0] +:logdrop-1861 - [0:0] +:logdrop-1862 - [0:0] +:logdrop-1863 - [0:0] +:logdrop-1864 - [0:0] +:logdrop-1865 - [0:0] +:logdrop-1866 - [0:0] +:logdrop-1867 - [0:0] +:logdrop-1868 - [0:0] +:logdrop-1869 - [0:0] :logdrop-187 - [0:0] +:logdrop-1870 - [0:0] +:logdrop-1871 - [0:0] +:logdrop-1872 - [0:0] +:logdrop-1873 - [0:0] +:logdrop-1874 - [0:0] +:logdrop-1875 - [0:0] +:logdrop-1876 - [0:0] +:logdrop-1877 - [0:0] +:logdrop-1878 - [0:0] +:logdrop-1879 - [0:0] :logdrop-188 - [0:0] +:logdrop-1880 - [0:0] +:logdrop-1881 - [0:0] +:logdrop-1882 - [0:0] +:logdrop-1883 - [0:0] +:logdrop-1884 - [0:0] +:logdrop-1885 - [0:0] +:logdrop-1886 - [0:0] +:logdrop-1887 - [0:0] +:logdrop-1888 - [0:0] +:logdrop-1889 - [0:0] :logdrop-189 - [0:0] +:logdrop-1890 - [0:0] +:logdrop-1891 - [0:0] +:logdrop-1892 - [0:0] +:logdrop-1893 - [0:0] +:logdrop-1894 - [0:0] +:logdrop-1895 - [0:0] +:logdrop-1896 - [0:0] +:logdrop-1897 - [0:0] +:logdrop-1898 - [0:0] +:logdrop-1899 - [0:0] :logdrop-19 - [0:0] :logdrop-190 - [0:0] +:logdrop-1900 - [0:0] +:logdrop-1901 - [0:0] +:logdrop-1902 - [0:0] +:logdrop-1903 - [0:0] +:logdrop-1904 - [0:0] +:logdrop-1905 - [0:0] +:logdrop-1906 - [0:0] +:logdrop-1907 - [0:0] +:logdrop-1908 - [0:0] +:logdrop-1909 - [0:0] :logdrop-191 - [0:0] +:logdrop-1910 - [0:0] +:logdrop-1911 - [0:0] +:logdrop-1912 - [0:0] +:logdrop-1913 - [0:0] +:logdrop-1914 - [0:0] +:logdrop-1915 - [0:0] +:logdrop-1916 - [0:0] +:logdrop-1917 - [0:0] +:logdrop-1918 - [0:0] +:logdrop-1919 - [0:0] :logdrop-192 - [0:0] +:logdrop-1920 - [0:0] +:logdrop-1921 - [0:0] +:logdrop-1922 - [0:0] +:logdrop-1923 - [0:0] +:logdrop-1924 - [0:0] +:logdrop-1925 - [0:0] +:logdrop-1926 - [0:0] +:logdrop-1927 - [0:0] +:logdrop-1928 - [0:0] +:logdrop-1929 - [0:0] :logdrop-193 - [0:0] +:logdrop-1930 - [0:0] +:logdrop-1931 - [0:0] +:logdrop-1932 - [0:0] +:logdrop-1933 - [0:0] +:logdrop-1934 - [0:0] +:logdrop-1935 - [0:0] +:logdrop-1936 - [0:0] +:logdrop-1937 - [0:0] +:logdrop-1938 - [0:0] +:logdrop-1939 - [0:0] :logdrop-194 - [0:0] +:logdrop-1940 - [0:0] +:logdrop-1941 - [0:0] +:logdrop-1942 - [0:0] +:logdrop-1943 - [0:0] +:logdrop-1944 - [0:0] +:logdrop-1945 - [0:0] +:logdrop-1946 - [0:0] +:logdrop-1947 - [0:0] +:logdrop-1948 - [0:0] +:logdrop-1949 - [0:0] :logdrop-195 - [0:0] +:logdrop-1950 - [0:0] +:logdrop-1951 - [0:0] +:logdrop-1952 - [0:0] +:logdrop-1953 - [0:0] +:logdrop-1954 - [0:0] +:logdrop-1955 - [0:0] +:logdrop-1956 - [0:0] +:logdrop-1957 - [0:0] +:logdrop-1958 - [0:0] +:logdrop-1959 - [0:0] :logdrop-196 - [0:0] +:logdrop-1960 - [0:0] +:logdrop-1961 - [0:0] +:logdrop-1962 - [0:0] +:logdrop-1963 - [0:0] +:logdrop-1964 - [0:0] +:logdrop-1965 - [0:0] +:logdrop-1966 - [0:0] +:logdrop-1967 - [0:0] +:logdrop-1968 - [0:0] +:logdrop-1969 - [0:0] :logdrop-197 - [0:0] +:logdrop-1970 - [0:0] +:logdrop-1971 - [0:0] +:logdrop-1972 - [0:0] +:logdrop-1973 - [0:0] +:logdrop-1974 - [0:0] +:logdrop-1975 - [0:0] +:logdrop-1976 - [0:0] +:logdrop-1977 - [0:0] +:logdrop-1978 - [0:0] +:logdrop-1979 - [0:0] :logdrop-198 - [0:0] +:logdrop-1980 - [0:0] +:logdrop-1981 - [0:0] +:logdrop-1982 - [0:0] +:logdrop-1983 - [0:0] +:logdrop-1984 - [0:0] +:logdrop-1985 - [0:0] +:logdrop-1986 - [0:0] +:logdrop-1987 - [0:0] +:logdrop-1988 - [0:0] +:logdrop-1989 - [0:0] :logdrop-199 - [0:0] +:logdrop-1990 - [0:0] +:logdrop-1991 - [0:0] +:logdrop-1992 - [0:0] +:logdrop-1993 - [0:0] +:logdrop-1994 - [0:0] +:logdrop-1995 - [0:0] +:logdrop-1996 - [0:0] +:logdrop-1997 - [0:0] +:logdrop-1998 - [0:0] +:logdrop-1999 - [0:0] :logdrop-2 - [0:0] :logdrop-20 - [0:0] :logdrop-200 - [0:0] +:logdrop-2000 - [0:0] +:logdrop-2001 - [0:0] +:logdrop-2002 - [0:0] +:logdrop-2003 - [0:0] +:logdrop-2004 - [0:0] +:logdrop-2005 - [0:0] +:logdrop-2006 - [0:0] +:logdrop-2007 - [0:0] +:logdrop-2008 - [0:0] +:logdrop-2009 - [0:0] :logdrop-201 - [0:0] +:logdrop-2010 - [0:0] +:logdrop-2011 - [0:0] +:logdrop-2012 - [0:0] +:logdrop-2013 - [0:0] +:logdrop-2014 - [0:0] +:logdrop-2015 - [0:0] +:logdrop-2016 - [0:0] +:logdrop-2017 - [0:0] +:logdrop-2018 - [0:0] +:logdrop-2019 - [0:0] :logdrop-202 - [0:0] +:logdrop-2020 - [0:0] +:logdrop-2021 - [0:0] +:logdrop-2022 - [0:0] +:logdrop-2023 - [0:0] +:logdrop-2024 - [0:0] +:logdrop-2025 - [0:0] +:logdrop-2026 - [0:0] +:logdrop-2027 - [0:0] +:logdrop-2028 - [0:0] +:logdrop-2029 - [0:0] :logdrop-203 - [0:0] +:logdrop-2030 - [0:0] +:logdrop-2031 - [0:0] +:logdrop-2032 - [0:0] +:logdrop-2033 - [0:0] +:logdrop-2034 - [0:0] +:logdrop-2035 - [0:0] +:logdrop-2036 - [0:0] +:logdrop-2037 - [0:0] +:logdrop-2038 - [0:0] +:logdrop-2039 - [0:0] :logdrop-204 - [0:0] +:logdrop-2040 - [0:0] +:logdrop-2041 - [0:0] +:logdrop-2042 - [0:0] +:logdrop-2043 - [0:0] +:logdrop-2044 - [0:0] +:logdrop-2045 - [0:0] +:logdrop-2046 - [0:0] +:logdrop-2047 - [0:0] +:logdrop-2048 - [0:0] +:logdrop-2049 - [0:0] :logdrop-205 - [0:0] +:logdrop-2050 - [0:0] +:logdrop-2051 - [0:0] +:logdrop-2052 - [0:0] +:logdrop-2053 - [0:0] +:logdrop-2054 - [0:0] +:logdrop-2055 - [0:0] +:logdrop-2056 - [0:0] +:logdrop-2057 - [0:0] +:logdrop-2058 - [0:0] +:logdrop-2059 - [0:0] :logdrop-206 - [0:0] +:logdrop-2060 - [0:0] +:logdrop-2061 - [0:0] +:logdrop-2062 - [0:0] +:logdrop-2063 - [0:0] +:logdrop-2064 - [0:0] +:logdrop-2065 - [0:0] +:logdrop-2066 - [0:0] +:logdrop-2067 - [0:0] +:logdrop-2068 - [0:0] +:logdrop-2069 - [0:0] :logdrop-207 - [0:0] +:logdrop-2070 - [0:0] +:logdrop-2071 - [0:0] +:logdrop-2072 - [0:0] +:logdrop-2073 - [0:0] +:logdrop-2074 - [0:0] +:logdrop-2075 - [0:0] +:logdrop-2076 - [0:0] +:logdrop-2077 - [0:0] +:logdrop-2078 - [0:0] +:logdrop-2079 - [0:0] :logdrop-208 - [0:0] +:logdrop-2080 - [0:0] +:logdrop-2081 - [0:0] +:logdrop-2082 - [0:0] +:logdrop-2083 - [0:0] +:logdrop-2084 - [0:0] +:logdrop-2085 - [0:0] +:logdrop-2086 - [0:0] +:logdrop-2087 - [0:0] +:logdrop-2088 - [0:0] +:logdrop-2089 - [0:0] :logdrop-209 - [0:0] +:logdrop-2090 - [0:0] +:logdrop-2091 - [0:0] +:logdrop-2092 - [0:0] +:logdrop-2093 - [0:0] +:logdrop-2094 - [0:0] +:logdrop-2095 - [0:0] +:logdrop-2096 - [0:0] +:logdrop-2097 - [0:0] +:logdrop-2098 - [0:0] +:logdrop-2099 - [0:0] :logdrop-21 - [0:0] :logdrop-210 - [0:0] +:logdrop-2100 - [0:0] +:logdrop-2101 - [0:0] +:logdrop-2102 - [0:0] +:logdrop-2103 - [0:0] +:logdrop-2104 - [0:0] +:logdrop-2105 - [0:0] +:logdrop-2106 - [0:0] +:logdrop-2107 - [0:0] +:logdrop-2108 - [0:0] +:logdrop-2109 - [0:0] :logdrop-211 - [0:0] +:logdrop-2110 - [0:0] +:logdrop-2111 - [0:0] +:logdrop-2112 - [0:0] +:logdrop-2113 - [0:0] +:logdrop-2114 - [0:0] +:logdrop-2115 - [0:0] +:logdrop-2116 - [0:0] +:logdrop-2117 - [0:0] +:logdrop-2118 - [0:0] +:logdrop-2119 - [0:0] :logdrop-212 - [0:0] +:logdrop-2120 - [0:0] +:logdrop-2121 - [0:0] +:logdrop-2122 - [0:0] +:logdrop-2123 - [0:0] +:logdrop-2124 - [0:0] +:logdrop-2125 - [0:0] +:logdrop-2126 - [0:0] +:logdrop-2127 - [0:0] +:logdrop-2128 - [0:0] +:logdrop-2129 - [0:0] :logdrop-213 - [0:0] +:logdrop-2130 - [0:0] +:logdrop-2131 - [0:0] +:logdrop-2132 - [0:0] +:logdrop-2133 - [0:0] +:logdrop-2134 - [0:0] +:logdrop-2135 - [0:0] +:logdrop-2136 - [0:0] +:logdrop-2137 - [0:0] +:logdrop-2138 - [0:0] +:logdrop-2139 - [0:0] :logdrop-214 - [0:0] +:logdrop-2140 - [0:0] +:logdrop-2141 - [0:0] +:logdrop-2142 - [0:0] +:logdrop-2143 - [0:0] +:logdrop-2144 - [0:0] +:logdrop-2145 - [0:0] +:logdrop-2146 - [0:0] +:logdrop-2147 - [0:0] +:logdrop-2148 - [0:0] +:logdrop-2149 - [0:0] :logdrop-215 - [0:0] +:logdrop-2150 - [0:0] +:logdrop-2151 - [0:0] +:logdrop-2152 - [0:0] +:logdrop-2153 - [0:0] +:logdrop-2154 - [0:0] +:logdrop-2155 - [0:0] +:logdrop-2156 - [0:0] +:logdrop-2157 - [0:0] +:logdrop-2158 - [0:0] +:logdrop-2159 - [0:0] :logdrop-216 - [0:0] +:logdrop-2160 - [0:0] +:logdrop-2161 - [0:0] +:logdrop-2162 - [0:0] +:logdrop-2163 - [0:0] +:logdrop-2164 - [0:0] +:logdrop-2165 - [0:0] +:logdrop-2166 - [0:0] +:logdrop-2167 - [0:0] +:logdrop-2168 - [0:0] +:logdrop-2169 - [0:0] :logdrop-217 - [0:0] +:logdrop-2170 - [0:0] +:logdrop-2171 - [0:0] +:logdrop-2172 - [0:0] +:logdrop-2173 - [0:0] +:logdrop-2174 - [0:0] +:logdrop-2175 - [0:0] +:logdrop-2176 - [0:0] +:logdrop-2177 - [0:0] +:logdrop-2178 - [0:0] +:logdrop-2179 - [0:0] :logdrop-218 - [0:0] +:logdrop-2180 - [0:0] +:logdrop-2181 - [0:0] +:logdrop-2182 - [0:0] +:logdrop-2183 - [0:0] +:logdrop-2184 - [0:0] +:logdrop-2185 - [0:0] +:logdrop-2186 - [0:0] +:logdrop-2187 - [0:0] +:logdrop-2188 - [0:0] +:logdrop-2189 - [0:0] :logdrop-219 - [0:0] +:logdrop-2190 - [0:0] +:logdrop-2191 - [0:0] +:logdrop-2192 - [0:0] +:logdrop-2193 - [0:0] +:logdrop-2194 - [0:0] +:logdrop-2195 - [0:0] +:logdrop-2196 - [0:0] +:logdrop-2197 - [0:0] +:logdrop-2198 - [0:0] +:logdrop-2199 - [0:0] :logdrop-22 - [0:0] :logdrop-220 - [0:0] +:logdrop-2200 - [0:0] +:logdrop-2201 - [0:0] +:logdrop-2202 - [0:0] +:logdrop-2203 - [0:0] +:logdrop-2204 - [0:0] :logdrop-221 - [0:0] :logdrop-222 - [0:0] :logdrop-223 - [0:0] @@ -58316,637 +97956,986 @@ COMMIT :logdrop-998 - [0:0] :logdrop-999 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-2 - [0:0] -A FORWARD -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -j limit-1886 --A FORWARD -j limit-1885 --A FORWARD -j limit-1884 --A FORWARD -j limit-1883 --A FORWARD -j limit-1882 --A FORWARD -j limit-1881 --A FORWARD -j limit-1880 --A FORWARD -j limit-1879 --A FORWARD -j limit-1878 --A FORWARD -j limit-1877 --A FORWARD -j limit-1876 --A FORWARD -j limit-1875 --A FORWARD -j limit-1874 --A FORWARD -j limit-1873 --A FORWARD -j limit-1872 --A FORWARD -j limit-1871 --A FORWARD -j limit-1870 --A FORWARD -j limit-1869 --A FORWARD -j limit-1868 --A FORWARD -j limit-1867 --A FORWARD -j limit-1866 --A FORWARD -j limit-1865 --A FORWARD -j limit-1864 --A FORWARD -j limit-1863 --A FORWARD -j limit-1862 --A FORWARD -j limit-1861 --A FORWARD -j limit-1860 --A FORWARD -j limit-1859 --A FORWARD -j limit-1858 --A FORWARD -j limit-1857 --A FORWARD -j limit-1856 --A FORWARD -j limit-1855 --A FORWARD -j limit-1854 --A FORWARD -j limit-1853 --A FORWARD -j limit-1852 --A FORWARD -j limit-1851 --A FORWARD -j limit-1850 --A FORWARD -j limit-1849 --A FORWARD -j limit-1848 --A FORWARD -j limit-1847 --A FORWARD -j limit-1846 --A FORWARD -j limit-1845 --A FORWARD -j limit-1844 --A FORWARD -j limit-1843 --A FORWARD -j limit-1842 --A FORWARD -j limit-1841 --A FORWARD -j limit-1840 --A FORWARD -j limit-1839 --A FORWARD -j limit-1838 --A FORWARD -j limit-1837 --A FORWARD -j limit-1836 --A FORWARD -j limit-1835 --A FORWARD -j limit-1834 --A FORWARD -j limit-1833 --A FORWARD -j limit-1832 --A FORWARD -j limit-1831 --A FORWARD -j limit-1830 --A FORWARD -j limit-1829 --A FORWARD -j limit-1828 --A FORWARD -j limit-1827 --A FORWARD -j limit-1826 --A FORWARD -j limit-1825 --A FORWARD -j limit-1824 --A FORWARD -j limit-1823 --A FORWARD -j limit-1822 --A FORWARD -j limit-1821 --A FORWARD -j limit-1820 --A FORWARD -j limit-1819 --A FORWARD -j limit-1818 --A FORWARD -j limit-1817 --A FORWARD -j limit-1816 --A FORWARD -j limit-1815 --A FORWARD -j limit-1814 --A FORWARD -j limit-1813 --A FORWARD -j limit-1812 --A FORWARD -j limit-1811 --A FORWARD -j limit-1810 --A FORWARD -j limit-1809 --A FORWARD -j limit-1808 --A FORWARD -j limit-1807 --A FORWARD -j limit-1806 --A FORWARD -j limit-1805 --A FORWARD -j limit-1804 --A FORWARD -j limit-1803 --A FORWARD -j limit-1802 --A FORWARD -j limit-1801 --A FORWARD -j limit-1800 --A FORWARD -j limit-1799 --A FORWARD -j limit-1798 --A FORWARD -j limit-1797 --A FORWARD -j limit-1796 --A FORWARD -j limit-1795 --A FORWARD -j limit-1794 --A FORWARD -j limit-1793 --A FORWARD -j limit-1792 --A FORWARD -j limit-1791 --A FORWARD -j limit-1790 --A FORWARD -j limit-1789 --A FORWARD -j limit-1788 --A FORWARD -j limit-1787 --A FORWARD -j limit-1786 --A FORWARD -j limit-1785 --A FORWARD -j limit-1784 --A FORWARD -j limit-1783 --A FORWARD -j limit-1782 --A FORWARD -j limit-1781 --A FORWARD -j limit-1780 --A FORWARD -j limit-1779 --A FORWARD -j limit-1778 --A FORWARD -j limit-1777 --A FORWARD -j limit-1776 --A FORWARD -j limit-1775 --A FORWARD -j limit-1774 --A FORWARD -j limit-1773 --A FORWARD -j limit-1772 --A FORWARD -j limit-1771 --A FORWARD -j limit-1770 --A FORWARD -j limit-1769 --A FORWARD -j limit-1768 --A FORWARD -j limit-1767 --A FORWARD -j limit-1766 --A FORWARD -j limit-1765 --A FORWARD -j limit-1764 --A FORWARD -j limit-1763 --A FORWARD -j limit-1762 --A FORWARD -j limit-1761 --A FORWARD -j limit-1760 --A FORWARD -j limit-1759 --A FORWARD -j limit-1758 --A FORWARD -j limit-1757 --A FORWARD -j limit-1756 --A FORWARD -j limit-1755 --A FORWARD -j limit-1754 --A FORWARD -j limit-1753 --A FORWARD -j limit-1752 --A FORWARD -j limit-1751 --A FORWARD -j limit-1750 --A FORWARD -j limit-1749 --A FORWARD -j limit-1748 --A FORWARD -j limit-1747 --A FORWARD -j limit-1746 --A FORWARD -j limit-1745 --A FORWARD -j limit-1744 --A FORWARD -j limit-1743 --A FORWARD -j limit-1742 --A FORWARD -j limit-1741 --A FORWARD -j limit-1740 --A FORWARD -j limit-1739 --A FORWARD -j limit-1738 --A FORWARD -j limit-1737 --A FORWARD -j limit-1736 --A FORWARD -j limit-1735 --A FORWARD -j limit-1734 --A FORWARD -j limit-1733 --A FORWARD -j limit-1732 --A FORWARD -j limit-1731 --A FORWARD -j limit-1730 --A FORWARD -j limit-1729 --A FORWARD -j limit-1728 --A FORWARD -j limit-1727 --A FORWARD -j limit-1726 --A FORWARD -j limit-1725 --A FORWARD -j limit-1724 --A FORWARD -j limit-1723 --A FORWARD -j limit-1722 --A FORWARD -j limit-1721 --A FORWARD -j limit-1720 --A FORWARD -j limit-1719 --A FORWARD -j limit-1718 --A FORWARD -j limit-1717 --A FORWARD -j limit-1716 --A FORWARD -j limit-1715 --A FORWARD -j limit-1714 --A FORWARD -j limit-1713 --A FORWARD -j limit-1712 --A FORWARD -j limit-1711 --A FORWARD -j limit-1710 --A FORWARD -j limit-1709 --A FORWARD -j limit-1708 --A FORWARD -j limit-1707 --A FORWARD -j limit-1706 --A FORWARD -j limit-1705 --A FORWARD -j limit-1704 --A FORWARD -j limit-1703 --A FORWARD -j limit-1702 --A FORWARD -j limit-1701 --A FORWARD -j limit-1700 --A FORWARD -j limit-1699 --A FORWARD -j limit-1698 --A FORWARD -j limit-1697 --A FORWARD -j limit-1696 --A FORWARD -j limit-1695 --A FORWARD -j limit-1694 --A FORWARD -j limit-1693 --A FORWARD -j limit-1692 --A FORWARD -j limit-1691 --A FORWARD -j limit-1690 --A FORWARD -j limit-1689 --A FORWARD -j limit-1688 --A FORWARD -j limit-1687 --A FORWARD -j limit-1686 --A FORWARD -j limit-1685 --A FORWARD -j limit-1684 --A FORWARD -j limit-1683 --A FORWARD -j limit-1682 --A FORWARD -j limit-1681 --A FORWARD -j limit-1680 --A FORWARD -j limit-1679 --A FORWARD -j limit-1678 --A FORWARD -j limit-1677 --A FORWARD -j limit-1676 --A FORWARD -j limit-1675 --A FORWARD -j limit-1674 --A FORWARD -j limit-1673 --A FORWARD -j limit-1672 --A FORWARD -j limit-1671 --A FORWARD -j limit-1670 --A FORWARD -j limit-1669 --A FORWARD -j limit-1668 --A FORWARD -j limit-1667 --A FORWARD -j limit-1666 --A FORWARD -j limit-1665 --A FORWARD -j limit-1664 --A FORWARD -j limit-1663 --A FORWARD -j limit-1662 --A FORWARD -j limit-1661 --A FORWARD -j limit-1660 --A FORWARD -j limit-1659 --A FORWARD -j limit-1658 --A FORWARD -j limit-1657 --A FORWARD -j limit-1656 --A FORWARD -j limit-1655 --A FORWARD -j limit-1654 --A FORWARD -j limit-1653 --A FORWARD -j limit-1652 --A FORWARD -j limit-1651 --A FORWARD -j limit-1650 --A FORWARD -j limit-1649 --A FORWARD -j limit-1648 --A FORWARD -j limit-1647 --A FORWARD -j limit-1646 --A FORWARD -j limit-1645 --A FORWARD -j limit-1644 --A FORWARD -j limit-1643 --A FORWARD -j limit-1642 --A FORWARD -j limit-1641 --A FORWARD -j limit-1640 --A FORWARD -j limit-1639 --A FORWARD -j limit-1638 --A FORWARD -j limit-1637 --A FORWARD -j limit-1636 --A FORWARD -j limit-1635 --A FORWARD -j limit-1634 --A FORWARD -j limit-1633 --A FORWARD -j limit-1632 --A FORWARD -j limit-1631 --A FORWARD -j limit-1630 --A FORWARD -j limit-1629 --A FORWARD -j limit-1628 --A FORWARD -j limit-1627 --A FORWARD -j limit-1626 --A FORWARD -j limit-1625 --A FORWARD -j limit-1624 --A FORWARD -j limit-1623 --A FORWARD -j limit-1622 --A FORWARD -j limit-1621 --A FORWARD -j limit-1620 --A FORWARD -j limit-1619 --A FORWARD -j limit-1618 --A FORWARD -j limit-1617 --A FORWARD -j limit-1616 --A FORWARD -j limit-1615 --A FORWARD -j limit-1614 --A FORWARD -j limit-1613 --A FORWARD -j limit-1612 --A FORWARD -j limit-1611 --A FORWARD -j limit-1610 --A FORWARD -j limit-1609 --A FORWARD -j limit-1608 --A FORWARD -j limit-1607 --A FORWARD -j limit-1606 --A FORWARD -j limit-1605 --A FORWARD -j limit-1604 --A FORWARD -j limit-1603 --A FORWARD -j limit-1602 --A FORWARD -j limit-1601 --A FORWARD -j limit-1600 --A FORWARD -j limit-1599 --A FORWARD -j limit-1598 --A FORWARD -j limit-1597 --A FORWARD -j limit-1596 --A FORWARD -j limit-1595 --A FORWARD -j limit-1594 --A FORWARD -j limit-1593 --A FORWARD -j limit-1592 --A FORWARD -j limit-1591 --A FORWARD -j limit-1590 --A FORWARD -j limit-1589 --A FORWARD -j limit-1588 --A FORWARD -j limit-1587 --A FORWARD -j limit-1586 --A FORWARD -j limit-1585 --A FORWARD -j limit-1584 --A FORWARD -j limit-1583 --A FORWARD -j limit-1582 --A FORWARD -j limit-1581 --A FORWARD -j limit-1580 --A FORWARD -j limit-1579 --A FORWARD -j limit-1578 --A FORWARD -j limit-1577 --A FORWARD -j limit-1576 --A FORWARD -j limit-1575 --A FORWARD -j limit-1574 --A FORWARD -j limit-1573 --A FORWARD -j limit-1572 --A FORWARD -j limit-1571 --A FORWARD -j limit-1570 --A FORWARD -j limit-1569 --A FORWARD -j limit-1568 --A FORWARD -j limit-1567 --A FORWARD -j limit-1566 --A FORWARD -j limit-1565 --A FORWARD -j limit-1564 --A FORWARD -j limit-1563 --A FORWARD -j limit-1562 --A FORWARD -j limit-1561 --A FORWARD -j limit-1560 --A FORWARD -j limit-1559 --A FORWARD -j limit-1558 --A FORWARD -j limit-1557 --A FORWARD -j limit-1556 --A FORWARD -j limit-1555 --A FORWARD -j limit-1554 --A FORWARD -j limit-1553 --A FORWARD -j limit-1552 --A FORWARD -j limit-1551 --A FORWARD -j limit-1550 --A FORWARD -j limit-1549 --A FORWARD -j limit-1548 --A FORWARD -j limit-1547 --A FORWARD -j limit-1546 --A FORWARD -j limit-1545 --A FORWARD -j limit-1544 --A FORWARD -j limit-1543 --A FORWARD -j limit-1542 --A FORWARD -j limit-1541 --A FORWARD -j limit-1540 --A FORWARD -j limit-1539 --A FORWARD -j limit-1538 --A FORWARD -j limit-1537 --A FORWARD -j limit-1536 --A FORWARD -j limit-1535 --A FORWARD -j limit-1534 --A FORWARD -j limit-1533 --A FORWARD -j limit-1532 --A FORWARD -j limit-1531 --A FORWARD -j limit-1530 --A FORWARD -j limit-1529 --A FORWARD -j limit-1528 --A FORWARD -j limit-1527 --A FORWARD -j limit-1526 --A FORWARD -j limit-1525 --A FORWARD -j limit-1524 --A FORWARD -j limit-1523 --A FORWARD -j limit-1522 --A FORWARD -j limit-1521 --A FORWARD -j limit-1520 --A FORWARD -j limit-1519 --A FORWARD -j limit-1518 --A FORWARD -j limit-1517 --A FORWARD -j limit-1516 --A FORWARD -j limit-1515 --A FORWARD -j limit-1514 --A FORWARD -j limit-1513 --A FORWARD -j limit-1512 --A FORWARD -j limit-1511 --A FORWARD -j limit-1510 --A FORWARD -j limit-1509 --A FORWARD -j limit-1508 --A FORWARD -j limit-1507 --A FORWARD -j limit-1506 --A FORWARD -j limit-1505 --A FORWARD -j limit-1504 --A FORWARD -j limit-1503 --A FORWARD -j limit-1502 --A FORWARD -j limit-1501 --A FORWARD -j limit-1500 --A FORWARD -j limit-1499 --A FORWARD -j limit-1498 --A FORWARD -j limit-1497 --A FORWARD -j limit-1496 --A FORWARD -j limit-1495 --A FORWARD -j limit-1494 --A FORWARD -j limit-1493 --A FORWARD -j limit-1492 --A FORWARD -j limit-1491 --A FORWARD -j limit-1490 --A FORWARD -j limit-1489 --A FORWARD -j limit-1488 --A FORWARD -j limit-1487 --A FORWARD -j limit-1486 --A FORWARD -j limit-1485 --A FORWARD -j limit-1484 --A FORWARD -j limit-1483 --A FORWARD -j limit-1482 --A FORWARD -j limit-1481 --A FORWARD -j limit-1480 --A FORWARD -j limit-1479 --A FORWARD -j limit-1478 --A FORWARD -j limit-1477 --A FORWARD -j limit-1476 --A FORWARD -j limit-1475 --A FORWARD -j limit-1474 --A FORWARD -j limit-1473 --A FORWARD -j limit-1472 --A FORWARD -j limit-1471 --A FORWARD -j limit-1470 --A FORWARD -j limit-1469 --A FORWARD -j limit-1468 --A FORWARD -j limit-1467 --A FORWARD -j limit-1466 --A FORWARD -j limit-1465 --A FORWARD -j limit-1464 --A FORWARD -j limit-1463 --A FORWARD -j limit-1462 --A FORWARD -j limit-1461 --A FORWARD -j limit-1460 --A FORWARD -j limit-1459 --A FORWARD -j limit-1458 --A FORWARD -j limit-1457 --A FORWARD -j limit-1456 --A FORWARD -j limit-1455 --A FORWARD -j limit-1454 --A FORWARD -j limit-1453 --A FORWARD -j limit-1452 --A FORWARD -j limit-1451 --A FORWARD -j limit-1450 --A FORWARD -j limit-1449 --A FORWARD -j limit-1448 --A FORWARD -j limit-1447 --A FORWARD -j limit-1446 --A FORWARD -j limit-1445 --A FORWARD -j limit-1444 --A FORWARD -j limit-1443 --A FORWARD -j limit-1442 --A FORWARD -j limit-1441 --A FORWARD -j limit-1440 --A FORWARD -j limit-1439 --A FORWARD -j limit-1438 --A FORWARD -j limit-1437 --A FORWARD -j limit-1436 --A FORWARD -j limit-1435 --A FORWARD -j limit-1434 --A FORWARD -j limit-1433 --A FORWARD -j limit-1432 --A FORWARD -j limit-1431 --A FORWARD -j limit-1430 --A FORWARD -j limit-1429 --A FORWARD -j limit-1428 --A FORWARD -j limit-1427 --A FORWARD -j limit-1426 --A FORWARD -j limit-1425 --A FORWARD -j limit-1424 --A FORWARD -j limit-1423 --A FORWARD -j limit-1422 --A FORWARD -j limit-1421 --A FORWARD -j limit-1420 --A FORWARD -j limit-1419 --A FORWARD -j limit-1418 --A FORWARD -j limit-1417 --A FORWARD -j limit-1416 --A FORWARD -j limit-1415 --A FORWARD -j limit-1414 --A FORWARD -j limit-1413 --A FORWARD -j limit-1412 --A FORWARD -j limit-1411 --A FORWARD -j limit-1410 --A FORWARD -j limit-1409 --A FORWARD -j limit-1408 --A FORWARD -j limit-1407 --A FORWARD -j limit-1406 --A FORWARD -j limit-1405 --A FORWARD -j limit-1404 --A FORWARD -j limit-1403 --A FORWARD -j limit-1402 --A FORWARD -j limit-1401 --A FORWARD -j limit-1400 --A FORWARD -j limit-1399 --A FORWARD -j limit-1398 --A FORWARD -j limit-1397 --A FORWARD -j limit-1396 --A FORWARD -j limit-1395 --A FORWARD -j limit-1394 --A FORWARD -j limit-1393 --A FORWARD -j limit-1392 --A FORWARD -j limit-1391 --A FORWARD -j limit-1390 --A FORWARD -j limit-1389 --A FORWARD -j limit-1388 --A FORWARD -j limit-1387 --A FORWARD -j limit-1386 --A FORWARD -j limit-1385 --A FORWARD -j limit-1384 --A FORWARD -j limit-1383 --A FORWARD -j limit-1382 --A FORWARD -j limit-1381 --A FORWARD -j limit-1380 --A FORWARD -j limit-1379 --A FORWARD -j limit-1378 --A FORWARD -j limit-1377 --A FORWARD -j limit-1376 --A FORWARD -j limit-1375 --A FORWARD -j limit-1374 --A FORWARD -j limit-1373 --A FORWARD -j limit-1372 --A FORWARD -j limit-1371 --A FORWARD -j limit-1370 --A FORWARD -j limit-1369 --A FORWARD -j limit-1368 --A FORWARD -j limit-1367 --A FORWARD -j limit-1366 --A FORWARD -j limit-1365 --A FORWARD -j limit-1364 --A FORWARD -j limit-1363 --A FORWARD -j limit-1362 --A FORWARD -j limit-1361 --A FORWARD -j limit-1360 --A FORWARD -j limit-1359 --A FORWARD -j limit-1358 --A FORWARD -j limit-1357 --A FORWARD -j limit-1356 --A FORWARD -j limit-1355 --A FORWARD -j limit-1354 --A FORWARD -j limit-1353 --A FORWARD -j limit-1352 --A FORWARD -j limit-1351 --A FORWARD -j limit-1350 --A FORWARD -j limit-1349 --A FORWARD -j limit-1348 --A FORWARD -j limit-1347 --A FORWARD -j limit-1346 --A FORWARD -j limit-1345 --A FORWARD -j limit-1344 --A FORWARD -j limit-1343 --A FORWARD -j limit-1342 --A FORWARD -j limit-1341 --A FORWARD -j limit-1340 --A FORWARD -j limit-1339 --A FORWARD -j limit-1338 --A FORWARD -j limit-1337 --A FORWARD -j limit-1336 --A FORWARD -j limit-1335 --A FORWARD -j limit-1334 --A FORWARD -j limit-1333 --A FORWARD -j limit-1332 --A FORWARD -j limit-1331 --A FORWARD -j limit-1330 --A FORWARD -j limit-1329 --A FORWARD -j limit-1328 --A FORWARD -j limit-1327 --A FORWARD -j limit-1326 --A FORWARD -j limit-1325 --A FORWARD -j limit-1324 --A FORWARD -j limit-1323 --A FORWARD -j limit-1322 --A FORWARD -j limit-1321 --A FORWARD -j limit-1320 --A FORWARD -j limit-1319 --A FORWARD -j limit-1318 --A FORWARD -j limit-1317 --A FORWARD -j limit-1316 --A FORWARD -j limit-1315 --A FORWARD -j limit-1314 --A FORWARD -j limit-1313 --A FORWARD -j limit-1312 --A FORWARD -j limit-1311 --A FORWARD -j limit-1310 --A FORWARD -j limit-1309 --A FORWARD -j limit-1308 --A FORWARD -j limit-1307 --A FORWARD -j limit-1306 --A FORWARD -j limit-1305 --A FORWARD -j limit-1304 --A FORWARD -j limit-1303 --A FORWARD -j limit-1302 --A FORWARD -j limit-1301 --A FORWARD -j limit-1300 --A FORWARD -j limit-1299 --A FORWARD -j limit-1298 --A FORWARD -j limit-1297 --A FORWARD -j limit-1296 --A FORWARD -j limit-1295 --A FORWARD -j limit-1294 --A FORWARD -j limit-1293 --A FORWARD -j limit-1292 --A FORWARD -j limit-1291 --A FORWARD -j limit-1290 --A FORWARD -j limit-1289 --A FORWARD -j limit-1288 --A FORWARD -j limit-1287 --A FORWARD -j limit-1286 --A FORWARD -j limit-1285 --A FORWARD -j limit-1284 --A FORWARD -j limit-1283 --A FORWARD -j limit-1282 --A FORWARD -j limit-1281 --A FORWARD -j limit-1280 --A FORWARD -j limit-1279 --A FORWARD -j limit-1278 --A FORWARD -j limit-1277 --A FORWARD -j limit-1276 --A FORWARD -j limit-1275 --A FORWARD -j limit-1274 --A FORWARD -j limit-1273 --A FORWARD -j limit-1272 --A FORWARD -j limit-1271 --A FORWARD -j limit-1270 --A FORWARD -j limit-1269 --A FORWARD -j limit-1268 --A FORWARD -j limit-1267 --A FORWARD -j limit-1266 --A FORWARD -j limit-1265 --A FORWARD -j limit-1264 --A FORWARD -j limit-1263 --A FORWARD -j limit-1262 --A FORWARD -j limit-1261 --A FORWARD -j limit-1260 --A FORWARD -j limit-1259 --A FORWARD -j limit-1258 +-A FORWARD -j limit-2927 +-A FORWARD -j limit-2926 +-A FORWARD -j limit-2925 +-A FORWARD -j limit-2924 +-A FORWARD -j limit-2923 +-A FORWARD -j limit-2922 +-A FORWARD -j limit-2921 +-A FORWARD -j limit-2920 +-A FORWARD -j limit-2919 +-A FORWARD -j limit-2918 +-A FORWARD -j limit-2917 +-A FORWARD -j limit-2916 +-A FORWARD -j limit-2915 +-A FORWARD -j limit-2914 +-A FORWARD -j limit-2913 +-A FORWARD -j limit-2912 +-A FORWARD -j limit-2911 +-A FORWARD -j limit-2910 +-A FORWARD -j limit-2909 +-A FORWARD -j limit-2908 +-A FORWARD -j limit-2907 +-A FORWARD -j limit-2906 +-A FORWARD -j limit-2905 +-A FORWARD -j limit-2904 +-A FORWARD -j limit-2903 +-A FORWARD -j limit-2902 +-A FORWARD -j limit-2901 +-A FORWARD -j limit-2900 +-A FORWARD -j limit-2899 +-A FORWARD -j limit-2898 +-A FORWARD -j limit-2897 +-A FORWARD -j limit-2896 +-A FORWARD -j limit-2895 +-A FORWARD -j limit-2894 +-A FORWARD -j limit-2893 +-A FORWARD -j limit-2892 +-A FORWARD -j limit-2891 +-A FORWARD -j limit-2890 +-A FORWARD -j limit-2889 +-A FORWARD -j limit-2888 +-A FORWARD -j limit-2887 +-A FORWARD -j limit-2886 +-A FORWARD -j limit-2885 +-A FORWARD -j limit-2884 +-A FORWARD -j limit-2883 +-A FORWARD -j limit-2882 +-A FORWARD -j limit-2881 +-A FORWARD -j limit-2880 +-A FORWARD -j limit-2879 +-A FORWARD -j limit-2878 +-A FORWARD -j limit-2877 +-A FORWARD -j limit-2876 +-A FORWARD -j limit-2875 +-A FORWARD -j limit-2874 +-A FORWARD -j limit-2873 +-A FORWARD -j limit-2872 +-A FORWARD -j limit-2871 +-A FORWARD -j limit-2870 +-A FORWARD -j limit-2869 +-A FORWARD -j limit-2868 +-A FORWARD -j limit-2867 +-A FORWARD -j limit-2866 +-A FORWARD -j limit-2865 +-A FORWARD -j limit-2864 +-A FORWARD -j limit-2863 +-A FORWARD -j limit-2862 +-A FORWARD -j limit-2861 +-A FORWARD -j limit-2860 +-A FORWARD -j limit-2859 +-A FORWARD -j limit-2858 +-A FORWARD -j limit-2857 +-A FORWARD -j limit-2856 +-A FORWARD -j limit-2855 +-A FORWARD -j limit-2854 +-A FORWARD -j limit-2853 +-A FORWARD -j limit-2852 +-A FORWARD -j limit-2851 +-A FORWARD -j limit-2850 +-A FORWARD -j limit-2849 +-A FORWARD -j limit-2848 +-A FORWARD -j limit-2847 +-A FORWARD -j limit-2846 +-A FORWARD -j limit-2845 +-A FORWARD -j limit-2844 +-A FORWARD -j limit-2843 +-A FORWARD -j limit-2842 +-A FORWARD -j limit-2841 +-A FORWARD -j limit-2840 +-A FORWARD -j limit-2839 +-A FORWARD -j limit-2838 +-A FORWARD -j limit-2837 +-A FORWARD -j limit-2836 +-A FORWARD -j limit-2835 +-A FORWARD -j limit-2834 +-A FORWARD -j limit-2833 +-A FORWARD -j limit-2832 +-A FORWARD -j limit-2831 +-A FORWARD -j limit-2830 +-A FORWARD -j limit-2829 +-A FORWARD -j limit-2828 +-A FORWARD -j limit-2827 +-A FORWARD -j limit-2826 +-A FORWARD -j limit-2825 +-A FORWARD -j limit-2824 +-A FORWARD -j limit-2823 +-A FORWARD -j limit-2822 +-A FORWARD -j limit-2821 +-A FORWARD -j limit-2820 +-A FORWARD -j limit-2819 +-A FORWARD -j limit-2818 +-A FORWARD -j limit-2817 +-A FORWARD -j limit-2816 +-A FORWARD -j limit-2815 +-A FORWARD -j limit-2814 +-A FORWARD -j limit-2813 +-A FORWARD -j limit-2812 +-A FORWARD -j limit-2811 +-A FORWARD -j limit-2810 +-A FORWARD -j limit-2809 +-A FORWARD -j limit-2808 +-A FORWARD -j limit-2807 +-A FORWARD -j limit-2806 +-A FORWARD -j limit-2805 +-A FORWARD -j limit-2804 +-A FORWARD -j limit-2803 +-A FORWARD -j limit-2802 +-A FORWARD -j limit-2801 +-A FORWARD -j limit-2800 +-A FORWARD -j limit-2799 +-A FORWARD -j limit-2798 +-A FORWARD -j limit-2797 +-A FORWARD -j limit-2796 +-A FORWARD -j limit-2795 +-A FORWARD -j limit-2794 +-A FORWARD -j limit-2793 +-A FORWARD -j limit-2792 +-A FORWARD -j limit-2791 +-A FORWARD -j limit-2790 +-A FORWARD -j limit-2789 +-A FORWARD -j limit-2788 +-A FORWARD -j limit-2787 +-A FORWARD -j limit-2786 +-A FORWARD -j limit-2785 +-A FORWARD -j limit-2784 +-A FORWARD -j limit-2783 +-A FORWARD -j limit-2782 +-A FORWARD -j limit-2781 +-A FORWARD -j limit-2780 +-A FORWARD -j limit-2779 +-A FORWARD -j limit-2778 +-A FORWARD -j limit-2777 +-A FORWARD -j limit-2776 +-A FORWARD -j limit-2775 +-A FORWARD -j limit-2774 +-A FORWARD -j limit-2773 +-A FORWARD -j limit-2772 +-A FORWARD -j limit-2771 +-A FORWARD -j limit-2770 +-A FORWARD -j limit-2769 +-A FORWARD -j limit-2768 +-A FORWARD -j limit-2767 +-A FORWARD -j limit-2766 +-A FORWARD -j limit-2765 +-A FORWARD -j limit-2764 +-A FORWARD -j limit-2763 +-A FORWARD -j limit-2762 +-A FORWARD -j limit-2761 +-A FORWARD -j limit-2760 +-A FORWARD -j limit-2759 +-A FORWARD -j limit-2758 +-A FORWARD -j limit-2757 +-A FORWARD -j limit-2756 +-A FORWARD -j limit-2755 +-A FORWARD -j limit-2754 +-A FORWARD -j limit-2753 +-A FORWARD -j limit-2752 +-A FORWARD -j limit-2751 +-A FORWARD -j limit-2750 +-A FORWARD -j limit-2749 +-A FORWARD -j limit-2748 +-A FORWARD -j limit-2747 +-A FORWARD -j limit-2746 +-A FORWARD -j limit-2745 +-A FORWARD -j limit-2744 +-A FORWARD -j limit-2743 +-A FORWARD -j limit-2742 +-A FORWARD -j limit-2741 +-A FORWARD -j limit-2740 +-A FORWARD -j limit-2739 +-A FORWARD -j limit-2738 +-A FORWARD -j limit-2737 +-A FORWARD -j limit-2736 +-A FORWARD -j limit-2735 +-A FORWARD -j limit-2734 +-A FORWARD -j limit-2733 +-A FORWARD -j limit-2732 +-A FORWARD -j limit-2731 +-A FORWARD -j limit-2730 +-A FORWARD -j limit-2729 +-A FORWARD -j limit-2728 +-A FORWARD -j limit-2727 +-A FORWARD -j limit-2726 +-A FORWARD -j limit-2725 +-A FORWARD -j limit-2724 +-A FORWARD -j limit-2723 +-A FORWARD -j limit-2722 +-A FORWARD -j limit-2721 +-A FORWARD -j limit-2720 +-A FORWARD -j limit-2719 +-A FORWARD -j limit-2718 +-A FORWARD -j limit-2717 +-A FORWARD -j limit-2716 +-A FORWARD -j limit-2715 +-A FORWARD -j limit-2714 +-A FORWARD -j limit-2713 +-A FORWARD -j limit-2712 +-A FORWARD -j limit-2711 +-A FORWARD -j limit-2710 +-A FORWARD -j limit-2709 +-A FORWARD -j limit-2708 +-A FORWARD -j limit-2707 +-A FORWARD -j limit-2706 +-A FORWARD -j limit-2705 +-A FORWARD -j limit-2704 +-A FORWARD -j limit-2703 +-A FORWARD -j limit-2702 +-A FORWARD -j limit-2701 +-A FORWARD -j limit-2700 +-A FORWARD -j limit-2699 +-A FORWARD -j limit-2698 +-A FORWARD -j limit-2697 +-A FORWARD -j limit-2696 +-A FORWARD -j limit-2695 +-A FORWARD -j limit-2694 +-A FORWARD -j limit-2693 +-A FORWARD -j limit-2692 +-A FORWARD -j limit-2691 +-A FORWARD -j limit-2690 +-A FORWARD -j limit-2689 +-A FORWARD -j limit-2688 +-A FORWARD -j limit-2687 +-A FORWARD -j limit-2686 +-A FORWARD -j limit-2685 +-A FORWARD -j limit-2684 +-A FORWARD -j limit-2683 +-A FORWARD -j limit-2682 +-A FORWARD -j limit-2681 +-A FORWARD -j limit-2680 +-A FORWARD -j limit-2679 +-A FORWARD -j limit-2678 +-A FORWARD -j limit-2677 +-A FORWARD -j limit-2676 +-A FORWARD -j limit-2675 +-A FORWARD -j limit-2674 +-A FORWARD -j limit-2673 +-A FORWARD -j limit-2672 +-A FORWARD -j limit-2671 +-A FORWARD -j limit-2670 +-A FORWARD -j limit-2669 +-A FORWARD -j limit-2668 +-A FORWARD -j limit-2667 +-A FORWARD -j limit-2666 +-A FORWARD -j limit-2665 +-A FORWARD -j limit-2664 +-A FORWARD -j limit-2663 +-A FORWARD -j limit-2662 +-A FORWARD -j limit-2661 +-A FORWARD -j limit-2660 +-A FORWARD -j limit-2659 +-A FORWARD -j limit-2658 +-A FORWARD -j limit-2657 +-A FORWARD -j limit-2656 +-A FORWARD -j limit-2655 +-A FORWARD -j limit-2654 +-A FORWARD -j limit-2653 +-A FORWARD -j limit-2652 +-A FORWARD -j limit-2651 +-A FORWARD -j limit-2650 +-A FORWARD -j limit-2649 +-A FORWARD -j limit-2648 +-A FORWARD -j limit-2647 +-A FORWARD -j limit-2646 +-A FORWARD -j limit-2645 +-A FORWARD -j limit-2644 +-A FORWARD -j limit-2643 +-A FORWARD -j limit-2642 +-A FORWARD -j limit-2641 +-A FORWARD -j limit-2640 +-A FORWARD -j limit-2639 +-A FORWARD -j limit-2638 +-A FORWARD -j limit-2637 +-A FORWARD -j limit-2636 +-A FORWARD -j limit-2635 +-A FORWARD -j limit-2634 +-A FORWARD -j limit-2633 +-A FORWARD -j limit-2632 +-A FORWARD -j limit-2631 +-A FORWARD -j limit-2630 +-A FORWARD -j limit-2629 +-A FORWARD -j limit-2628 +-A FORWARD -j limit-2627 +-A FORWARD -j limit-2626 +-A FORWARD -j limit-2625 +-A FORWARD -j limit-2624 +-A FORWARD -j limit-2623 +-A FORWARD -j limit-2622 +-A FORWARD -j limit-2621 +-A FORWARD -j limit-2620 +-A FORWARD -j limit-2619 +-A FORWARD -j limit-2618 +-A FORWARD -j limit-2617 +-A FORWARD -j limit-2616 +-A FORWARD -j limit-2615 +-A FORWARD -j limit-2614 +-A FORWARD -j limit-2613 +-A FORWARD -j limit-2612 +-A FORWARD -j limit-2611 +-A FORWARD -j limit-2610 +-A FORWARD -j limit-2609 +-A FORWARD -j limit-2608 +-A FORWARD -j limit-2607 +-A FORWARD -j limit-2606 +-A FORWARD -j limit-2605 +-A FORWARD -j limit-2604 +-A FORWARD -j limit-2603 +-A FORWARD -j limit-2602 +-A FORWARD -j limit-2601 +-A FORWARD -j limit-2600 +-A FORWARD -j limit-2599 +-A FORWARD -j limit-2598 +-A FORWARD -j limit-2597 +-A FORWARD -j limit-2596 +-A FORWARD -j limit-2595 +-A FORWARD -j limit-2594 +-A FORWARD -j limit-2593 +-A FORWARD -j limit-2592 +-A FORWARD -j limit-2591 +-A FORWARD -j limit-2590 +-A FORWARD -j limit-2589 +-A FORWARD -j limit-2588 +-A FORWARD -j limit-2587 +-A FORWARD -j limit-2586 +-A FORWARD -j limit-2585 +-A FORWARD -j limit-2584 +-A FORWARD -j limit-2583 +-A FORWARD -j limit-2582 +-A FORWARD -j limit-2581 +-A FORWARD -j limit-2580 +-A FORWARD -j limit-2579 +-A FORWARD -j limit-2578 +-A FORWARD -j limit-2577 +-A FORWARD -j limit-2576 +-A FORWARD -j limit-2575 +-A FORWARD -j limit-2574 +-A FORWARD -j limit-2573 +-A FORWARD -j limit-2572 +-A FORWARD -j limit-2571 +-A FORWARD -j limit-2570 +-A FORWARD -j limit-2569 +-A FORWARD -j limit-2568 +-A FORWARD -j limit-2567 +-A FORWARD -j limit-2566 +-A FORWARD -j limit-2565 +-A FORWARD -j limit-2564 +-A FORWARD -j limit-2563 +-A FORWARD -j limit-2562 +-A FORWARD -j limit-2561 +-A FORWARD -j limit-2560 +-A FORWARD -j limit-2559 +-A FORWARD -j limit-2558 +-A FORWARD -j limit-2557 +-A FORWARD -j limit-2556 +-A FORWARD -j limit-2555 +-A FORWARD -j limit-2554 +-A FORWARD -j limit-2553 +-A FORWARD -j limit-2552 +-A FORWARD -j limit-2551 +-A FORWARD -j limit-2550 +-A FORWARD -j limit-2549 +-A FORWARD -j limit-2548 +-A FORWARD -j limit-2547 +-A FORWARD -j limit-2546 +-A FORWARD -j limit-2545 +-A FORWARD -j limit-2544 +-A FORWARD -j limit-2543 +-A FORWARD -j limit-2542 +-A FORWARD -j limit-2541 +-A FORWARD -j limit-2540 +-A FORWARD -j limit-2539 +-A FORWARD -j limit-2538 +-A FORWARD -j limit-2537 +-A FORWARD -j limit-2536 +-A FORWARD -j limit-2535 +-A FORWARD -j limit-2534 +-A FORWARD -j limit-2533 +-A FORWARD -j limit-2532 +-A FORWARD -j limit-2531 +-A FORWARD -j limit-2530 +-A FORWARD -j limit-2529 +-A FORWARD -j limit-2528 +-A FORWARD -j limit-2527 +-A FORWARD -j limit-2526 +-A FORWARD -j limit-2525 +-A FORWARD -j limit-2524 +-A FORWARD -j limit-2523 +-A FORWARD -j limit-2522 +-A FORWARD -j limit-2521 +-A FORWARD -j limit-2520 +-A FORWARD -j limit-2519 +-A FORWARD -j limit-2518 +-A FORWARD -j limit-2517 +-A FORWARD -j limit-2516 +-A FORWARD -j limit-2515 +-A FORWARD -j limit-2514 +-A FORWARD -j limit-2513 +-A FORWARD -j limit-2512 +-A FORWARD -j limit-2511 +-A FORWARD -j limit-2510 +-A FORWARD -j limit-2509 +-A FORWARD -j limit-2508 +-A FORWARD -j limit-2507 +-A FORWARD -j limit-2506 +-A FORWARD -j limit-2505 +-A FORWARD -j limit-2504 +-A FORWARD -j limit-2503 +-A FORWARD -j limit-2502 +-A FORWARD -j limit-2501 +-A FORWARD -j limit-2500 +-A FORWARD -j limit-2499 +-A FORWARD -j limit-2498 +-A FORWARD -j limit-2497 +-A FORWARD -j limit-2496 +-A FORWARD -j limit-2495 +-A FORWARD -j limit-2494 +-A FORWARD -j limit-2493 +-A FORWARD -j limit-2492 +-A FORWARD -j limit-2491 +-A FORWARD -j limit-2490 +-A FORWARD -j limit-2489 +-A FORWARD -j limit-2488 +-A FORWARD -j limit-2487 +-A FORWARD -j limit-2486 +-A FORWARD -j limit-2485 +-A FORWARD -j limit-2484 +-A FORWARD -j limit-2483 +-A FORWARD -j limit-2482 +-A FORWARD -j limit-2481 +-A FORWARD -j limit-2480 +-A FORWARD -j limit-2479 +-A FORWARD -j limit-2478 +-A FORWARD -j limit-2477 +-A FORWARD -j limit-2476 +-A FORWARD -j limit-2475 +-A FORWARD -j limit-2474 +-A FORWARD -j limit-2473 +-A FORWARD -j limit-2472 +-A FORWARD -j limit-2471 +-A FORWARD -j limit-2470 +-A FORWARD -j limit-2469 +-A FORWARD -j limit-2468 +-A FORWARD -j limit-2467 +-A FORWARD -j limit-2466 +-A FORWARD -j limit-2465 +-A FORWARD -j limit-2464 +-A FORWARD -j limit-2463 +-A FORWARD -j limit-2462 +-A FORWARD -j limit-2461 +-A FORWARD -j limit-2460 +-A FORWARD -j limit-2459 +-A FORWARD -j limit-2458 +-A FORWARD -j limit-2457 +-A FORWARD -j limit-2456 +-A FORWARD -j limit-2455 +-A FORWARD -j limit-2454 +-A FORWARD -j limit-2453 +-A FORWARD -j limit-2452 +-A FORWARD -j limit-2451 +-A FORWARD -j limit-2450 +-A FORWARD -j limit-2449 +-A FORWARD -j limit-2448 +-A FORWARD -j limit-2447 +-A FORWARD -j limit-2446 +-A FORWARD -j limit-2445 +-A FORWARD -j limit-2444 +-A FORWARD -j limit-2443 +-A FORWARD -j limit-2442 +-A FORWARD -j limit-2441 +-A FORWARD -j limit-2440 +-A FORWARD -j limit-2439 +-A FORWARD -j limit-2438 +-A FORWARD -j limit-2437 +-A FORWARD -j limit-2436 +-A FORWARD -j limit-2435 +-A FORWARD -j limit-2434 +-A FORWARD -j limit-2433 +-A FORWARD -j limit-2432 +-A FORWARD -j limit-2431 +-A FORWARD -j limit-2430 +-A FORWARD -j limit-2429 +-A FORWARD -j limit-2428 +-A FORWARD -j limit-2427 +-A FORWARD -j limit-2426 +-A FORWARD -j limit-2425 +-A FORWARD -j limit-2424 +-A FORWARD -j limit-2423 +-A FORWARD -j limit-2422 +-A FORWARD -j limit-2421 +-A FORWARD -j limit-2420 +-A FORWARD -j limit-2419 +-A FORWARD -j limit-2418 +-A FORWARD -j limit-2417 +-A FORWARD -j limit-2416 +-A FORWARD -j limit-2415 +-A FORWARD -j limit-2414 +-A FORWARD -j limit-2413 +-A FORWARD -j limit-2412 +-A FORWARD -j limit-2411 +-A FORWARD -j limit-2410 +-A FORWARD -j limit-2409 +-A FORWARD -j limit-2408 +-A FORWARD -j limit-2407 +-A FORWARD -j limit-2406 +-A FORWARD -j limit-2405 +-A FORWARD -j limit-2404 +-A FORWARD -j limit-2403 +-A FORWARD -j limit-2402 +-A FORWARD -j limit-2401 +-A FORWARD -j limit-2400 +-A FORWARD -j limit-2399 +-A FORWARD -j limit-2398 +-A FORWARD -j limit-2397 +-A FORWARD -j limit-2396 +-A FORWARD -j limit-2395 +-A FORWARD -j limit-2394 +-A FORWARD -j limit-2393 +-A FORWARD -j limit-2392 +-A FORWARD -j limit-2391 +-A FORWARD -j limit-2390 +-A FORWARD -j limit-2389 +-A FORWARD -j limit-2388 +-A FORWARD -j limit-2387 +-A FORWARD -j limit-2386 +-A FORWARD -j limit-2385 +-A FORWARD -j limit-2384 +-A FORWARD -j limit-2383 +-A FORWARD -j limit-2382 +-A FORWARD -j limit-2381 +-A FORWARD -j limit-2380 +-A FORWARD -j limit-2379 +-A FORWARD -j limit-2378 +-A FORWARD -j limit-2377 +-A FORWARD -j limit-2376 +-A FORWARD -j limit-2375 +-A FORWARD -j limit-2374 +-A FORWARD -j limit-2373 +-A FORWARD -j limit-2372 +-A FORWARD -j limit-2371 +-A FORWARD -j limit-2370 +-A FORWARD -j limit-2369 +-A FORWARD -j limit-2368 +-A FORWARD -j limit-2367 +-A FORWARD -j limit-2366 +-A FORWARD -j limit-2365 +-A FORWARD -j limit-2364 +-A FORWARD -j limit-2363 +-A FORWARD -j limit-2362 +-A FORWARD -j limit-2361 +-A FORWARD -j limit-2360 +-A FORWARD -j limit-2359 +-A FORWARD -j limit-2358 +-A FORWARD -j limit-2357 +-A FORWARD -j limit-2356 +-A FORWARD -j limit-2355 +-A FORWARD -j limit-2354 +-A FORWARD -j limit-2353 +-A FORWARD -j limit-2352 +-A FORWARD -j limit-2351 +-A FORWARD -j limit-2350 +-A FORWARD -j limit-2349 +-A FORWARD -j limit-2348 +-A FORWARD -j limit-2347 +-A FORWARD -j limit-2346 +-A FORWARD -j limit-2345 +-A FORWARD -j limit-2344 +-A FORWARD -j limit-2343 +-A FORWARD -j limit-2342 +-A FORWARD -j limit-2341 +-A FORWARD -j limit-2340 +-A FORWARD -j limit-2339 +-A FORWARD -j limit-2338 +-A FORWARD -j limit-2337 +-A FORWARD -j limit-2336 +-A FORWARD -j limit-2335 +-A FORWARD -j limit-2334 +-A FORWARD -j limit-2333 +-A FORWARD -j limit-2332 +-A FORWARD -j limit-2331 +-A FORWARD -j limit-2330 +-A FORWARD -j limit-2329 +-A FORWARD -j limit-2328 +-A FORWARD -j limit-2327 +-A FORWARD -j limit-2326 +-A FORWARD -j limit-2325 +-A FORWARD -j limit-2324 +-A FORWARD -j limit-2323 +-A FORWARD -j limit-2322 +-A FORWARD -j limit-2321 +-A FORWARD -j limit-2320 +-A FORWARD -j limit-2319 +-A FORWARD -j limit-2318 +-A FORWARD -j limit-2317 +-A FORWARD -j limit-2316 +-A FORWARD -j limit-2315 +-A FORWARD -j limit-2314 +-A FORWARD -j limit-2313 +-A FORWARD -j limit-2312 +-A FORWARD -j limit-2311 +-A FORWARD -j limit-2310 +-A FORWARD -j limit-2309 +-A FORWARD -j limit-2308 +-A FORWARD -j limit-2307 +-A FORWARD -j limit-2306 +-A FORWARD -j limit-2305 +-A FORWARD -j limit-2304 +-A FORWARD -j limit-2303 +-A FORWARD -j limit-2302 +-A FORWARD -j limit-2301 +-A FORWARD -j limit-2300 +-A FORWARD -j limit-2299 +-A FORWARD -j limit-2298 +-A FORWARD -j limit-2297 +-A FORWARD -j limit-2296 +-A FORWARD -j limit-2295 +-A FORWARD -j limit-2294 +-A FORWARD -j limit-2293 +-A FORWARD -j limit-2292 +-A FORWARD -j limit-2291 +-A FORWARD -j limit-2290 +-A FORWARD -j limit-2289 +-A FORWARD -j limit-2288 +-A FORWARD -j limit-2287 +-A FORWARD -j limit-2286 +-A FORWARD -j limit-2285 +-A FORWARD -j limit-2284 +-A FORWARD -j limit-2283 +-A FORWARD -j limit-2282 +-A FORWARD -j limit-2281 +-A FORWARD -j limit-2280 +-A FORWARD -j limit-2279 +-A FORWARD -j limit-2278 +-A FORWARD -j limit-2277 +-A FORWARD -j limit-2276 +-A FORWARD -j limit-2275 +-A FORWARD -j limit-2274 +-A FORWARD -j limit-2273 +-A FORWARD -j limit-2272 +-A FORWARD -j limit-2271 +-A FORWARD -j limit-2270 +-A FORWARD -j limit-2269 +-A FORWARD -j limit-2268 +-A FORWARD -j limit-2267 +-A FORWARD -j limit-2266 +-A FORWARD -j limit-2265 +-A FORWARD -j limit-2264 +-A FORWARD -j limit-2263 +-A FORWARD -j limit-2262 +-A FORWARD -j limit-2261 +-A FORWARD -j limit-2260 +-A FORWARD -j limit-2259 +-A FORWARD -j limit-2258 +-A FORWARD -j limit-2257 +-A FORWARD -j limit-2256 +-A FORWARD -j limit-2255 +-A FORWARD -j limit-2254 +-A FORWARD -j limit-2253 +-A FORWARD -j limit-2252 +-A FORWARD -j limit-2251 +-A FORWARD -j limit-2250 +-A FORWARD -j limit-2249 +-A FORWARD -j limit-2248 +-A FORWARD -j limit-2247 +-A FORWARD -j limit-2246 +-A FORWARD -j limit-2245 +-A FORWARD -j limit-2244 +-A FORWARD -j limit-2243 +-A FORWARD -j limit-2242 +-A FORWARD -j limit-2241 +-A FORWARD -j limit-2240 +-A FORWARD -j limit-2239 +-A FORWARD -j limit-2238 +-A FORWARD -j limit-2237 +-A FORWARD -j limit-2236 +-A FORWARD -j limit-2235 +-A FORWARD -j limit-2234 +-A FORWARD -j limit-2233 +-A FORWARD -j limit-2232 +-A FORWARD -j limit-2231 +-A FORWARD -j limit-2230 +-A FORWARD -j limit-2229 +-A FORWARD -j limit-2228 +-A FORWARD -j limit-2227 +-A FORWARD -j limit-2226 +-A FORWARD -j limit-2225 +-A FORWARD -j limit-2224 +-A FORWARD -j limit-2223 +-A FORWARD -j limit-2222 +-A FORWARD -j limit-2221 +-A FORWARD -j limit-2220 +-A FORWARD -j limit-2219 +-A FORWARD -j limit-2218 +-A FORWARD -j limit-2217 +-A FORWARD -j limit-2216 +-A FORWARD -j limit-2215 +-A FORWARD -j limit-2214 +-A FORWARD -j limit-2213 +-A FORWARD -j limit-2212 +-A FORWARD -j limit-2211 +-A FORWARD -j limit-2210 +-A FORWARD -j limit-2209 +-A FORWARD -j limit-2208 +-A FORWARD -j limit-2207 +-A FORWARD -j limit-2206 +-A FORWARD -j limit-2205 +-A FORWARD -j limit-2204 +-A FORWARD -j limit-2203 +-A FORWARD -j limit-2202 +-A FORWARD -j limit-2201 +-A FORWARD -j limit-2200 +-A FORWARD -j limit-2199 +-A FORWARD -j limit-2198 +-A FORWARD -j limit-2197 +-A FORWARD -j limit-2196 +-A FORWARD -j limit-2195 +-A FORWARD -j limit-2194 +-A FORWARD -j limit-2193 +-A FORWARD -j limit-2192 +-A FORWARD -j limit-2191 +-A FORWARD -j limit-2190 +-A FORWARD -j limit-2189 +-A FORWARD -j limit-2188 +-A FORWARD -j limit-2187 +-A FORWARD -j limit-2186 +-A FORWARD -j limit-2185 +-A FORWARD -j limit-2184 +-A FORWARD -j limit-2183 +-A FORWARD -j limit-2182 +-A FORWARD -j limit-2181 +-A FORWARD -j limit-2180 +-A FORWARD -j limit-2179 +-A FORWARD -j limit-2178 +-A FORWARD -j limit-2177 +-A FORWARD -j limit-2176 +-A FORWARD -j limit-2175 +-A FORWARD -j limit-2174 +-A FORWARD -j limit-2173 +-A FORWARD -j limit-2172 +-A FORWARD -j limit-2171 +-A FORWARD -j limit-2170 +-A FORWARD -j limit-2169 +-A FORWARD -j limit-2168 +-A FORWARD -j limit-2167 +-A FORWARD -j limit-2166 +-A FORWARD -j limit-2165 +-A FORWARD -j limit-2164 +-A FORWARD -j limit-2163 +-A FORWARD -j limit-2162 +-A FORWARD -j limit-2161 +-A FORWARD -j limit-2160 +-A FORWARD -j limit-2159 +-A FORWARD -j limit-2158 +-A FORWARD -j limit-2157 +-A FORWARD -j limit-2156 +-A FORWARD -j limit-2155 +-A FORWARD -j limit-2154 +-A FORWARD -j limit-2153 +-A FORWARD -j limit-2152 +-A FORWARD -j limit-2151 +-A FORWARD -j limit-2150 +-A FORWARD -j limit-2149 +-A FORWARD -j limit-2148 +-A FORWARD -j limit-2147 +-A FORWARD -j limit-2146 +-A FORWARD -j limit-2145 +-A FORWARD -j limit-2144 +-A FORWARD -j limit-2143 +-A FORWARD -j limit-2142 +-A FORWARD -j limit-2141 +-A FORWARD -j limit-2140 +-A FORWARD -j limit-2139 +-A FORWARD -j limit-2138 +-A FORWARD -j limit-2137 +-A FORWARD -j limit-2136 +-A FORWARD -j limit-2135 +-A FORWARD -j limit-2134 +-A FORWARD -j limit-2133 +-A FORWARD -j limit-2132 +-A FORWARD -j limit-2131 +-A FORWARD -j limit-2130 +-A FORWARD -j limit-2129 +-A FORWARD -j limit-2128 +-A FORWARD -j limit-2127 +-A FORWARD -j limit-2126 +-A FORWARD -j limit-2125 +-A FORWARD -j limit-2124 +-A FORWARD -j limit-2123 +-A FORWARD -j limit-2122 +-A FORWARD -j limit-2121 +-A FORWARD -j limit-2120 +-A FORWARD -j limit-2119 +-A FORWARD -j limit-2118 +-A FORWARD -j limit-2117 +-A FORWARD -j limit-2116 +-A FORWARD -j limit-2115 +-A FORWARD -j limit-2114 +-A FORWARD -j limit-2113 +-A FORWARD -j limit-2112 +-A FORWARD -j limit-2111 +-A FORWARD -j limit-2110 +-A FORWARD -j limit-2109 +-A FORWARD -j limit-2108 +-A FORWARD -j limit-2107 +-A FORWARD -j limit-2106 +-A FORWARD -j limit-2105 +-A FORWARD -j limit-2104 +-A FORWARD -j limit-2103 +-A FORWARD -j limit-2102 +-A FORWARD -j limit-2101 +-A FORWARD -j limit-2100 +-A FORWARD -j limit-2099 +-A FORWARD -j limit-2098 +-A FORWARD -j limit-2097 +-A FORWARD -j limit-2096 +-A FORWARD -j limit-2095 +-A FORWARD -j limit-2094 +-A FORWARD -j limit-2093 +-A FORWARD -j limit-2092 +-A FORWARD -j limit-2091 +-A FORWARD -j limit-2090 +-A FORWARD -j limit-2089 +-A FORWARD -j limit-2088 +-A FORWARD -j limit-2087 +-A FORWARD -j limit-2086 +-A FORWARD -j limit-2085 +-A FORWARD -j limit-2084 +-A FORWARD -j limit-2083 +-A FORWARD -j limit-2082 +-A FORWARD -j limit-2081 +-A FORWARD -j limit-2080 +-A FORWARD -j limit-2079 +-A FORWARD -j limit-2078 +-A FORWARD -j limit-2077 +-A FORWARD -j limit-2076 +-A FORWARD -j limit-2075 +-A FORWARD -j limit-2074 +-A FORWARD -j limit-2073 +-A FORWARD -j limit-2072 +-A FORWARD -j limit-2071 +-A FORWARD -j limit-2070 +-A FORWARD -j limit-2069 +-A FORWARD -j limit-2068 +-A FORWARD -j limit-2067 +-A FORWARD -j limit-2066 +-A FORWARD -j limit-2065 +-A FORWARD -j limit-2064 +-A FORWARD -j limit-2063 +-A FORWARD -j limit-2062 +-A FORWARD -j limit-2061 +-A FORWARD -j limit-2060 +-A FORWARD -j limit-2059 +-A FORWARD -j limit-2058 +-A FORWARD -j limit-2057 +-A FORWARD -j limit-2056 +-A FORWARD -j limit-2055 +-A FORWARD -j limit-2054 +-A FORWARD -j limit-2053 +-A FORWARD -j limit-2052 +-A FORWARD -j limit-2051 +-A FORWARD -j limit-2050 +-A FORWARD -j limit-2049 +-A FORWARD -j limit-2048 +-A FORWARD -j limit-2047 +-A FORWARD -j limit-2046 +-A FORWARD -j limit-2045 +-A FORWARD -j limit-2044 +-A FORWARD -j limit-2043 +-A FORWARD -j limit-2042 +-A FORWARD -j limit-2041 +-A FORWARD -j limit-2040 +-A FORWARD -j limit-2039 +-A FORWARD -j limit-2038 +-A FORWARD -j limit-2037 +-A FORWARD -j limit-2036 +-A FORWARD -j limit-2035 +-A FORWARD -j limit-2034 +-A FORWARD -j limit-2033 +-A FORWARD -j limit-2032 +-A FORWARD -j limit-2031 +-A FORWARD -j limit-2030 +-A FORWARD -j limit-2029 +-A FORWARD -j limit-2028 +-A FORWARD -j limit-2027 +-A FORWARD -j limit-2026 +-A FORWARD -j limit-2025 +-A FORWARD -j limit-2024 +-A FORWARD -j limit-2023 +-A FORWARD -j limit-2022 +-A FORWARD -j limit-2021 +-A FORWARD -j limit-2020 +-A FORWARD -j limit-2019 +-A FORWARD -j limit-2018 +-A FORWARD -j limit-2017 +-A FORWARD -j limit-2016 +-A FORWARD -j limit-2015 +-A FORWARD -j limit-2014 +-A FORWARD -j limit-2013 +-A FORWARD -j limit-2012 +-A FORWARD -j limit-2011 +-A FORWARD -j limit-2010 +-A FORWARD -j limit-2009 +-A FORWARD -j limit-2008 +-A FORWARD -j limit-2007 +-A FORWARD -j limit-2006 +-A FORWARD -j limit-2005 +-A FORWARD -j limit-2004 +-A FORWARD -j limit-2003 +-A FORWARD -j limit-2002 +-A FORWARD -j limit-2001 +-A FORWARD -j limit-2000 +-A FORWARD -j limit-1999 +-A FORWARD -j limit-1998 +-A FORWARD -j limit-1997 +-A FORWARD -j limit-1996 +-A FORWARD -j limit-1995 +-A FORWARD -j limit-1994 +-A FORWARD -j limit-1993 +-A FORWARD -j limit-1992 +-A FORWARD -j limit-1991 +-A FORWARD -j limit-1990 +-A FORWARD -j limit-1989 +-A FORWARD -j limit-1988 +-A FORWARD -j limit-1987 +-A FORWARD -j limit-1986 +-A FORWARD -j limit-1985 +-A FORWARD -j limit-1984 +-A FORWARD -j limit-1983 +-A FORWARD -j limit-1982 +-A FORWARD -j limit-1981 +-A FORWARD -j limit-1980 +-A FORWARD -j limit-1979 +-A FORWARD -j limit-1978 +-A FORWARD -j limit-1977 +-A FORWARD -j limit-1976 +-A FORWARD -j limit-1975 +-A FORWARD -j limit-1974 +-A FORWARD -j limit-1973 +-A FORWARD -j limit-1972 +-A FORWARD -j limit-1971 +-A FORWARD -j limit-1970 +-A FORWARD -j limit-1969 +-A FORWARD -j limit-1968 +-A FORWARD -j limit-1967 +-A FORWARD -j limit-1966 +-A FORWARD -j limit-1965 +-A FORWARD -j limit-1964 +-A FORWARD -j limit-1963 +-A FORWARD -j limit-1962 +-A FORWARD -j limit-1961 +-A FORWARD -j limit-1960 +-A FORWARD -j limit-1959 +-A FORWARD -j limit-1958 +-A FORWARD -j limit-1957 +-A FORWARD -j limit-1956 +-A FORWARD -j limit-1955 +-A FORWARD -j limit-1954 +-A FORWARD -j limit-1953 +-A FORWARD -j limit-1952 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j limit-0 -A FORWARD -o eth1 -d fc00::/7 -j limit-1 @@ -59577,334 +99566,863 @@ COMMIT -A FORWARD -o eth1 -d fc00::/7 -j limit-626 -A FORWARD -o eth1 -d fc00::/7 -j limit-627 -A FORWARD -o eth1 -d fc00::/7 -j limit-628 +-A FORWARD -o eth1 -d fc00::/7 -j limit-629 +-A FORWARD -o eth1 -d fc00::/7 -j limit-630 +-A FORWARD -o eth1 -d fc00::/7 -j limit-631 +-A FORWARD -o eth1 -d fc00::/7 -j limit-632 +-A FORWARD -o eth1 -d fc00::/7 -j limit-633 +-A FORWARD -o eth1 -d fc00::/7 -j limit-634 +-A FORWARD -o eth1 -d fc00::/7 -j limit-635 +-A FORWARD -o eth1 -d fc00::/7 -j limit-636 +-A FORWARD -o eth1 -d fc00::/7 -j limit-637 +-A FORWARD -o eth1 -d fc00::/7 -j limit-638 +-A FORWARD -o eth1 -d fc00::/7 -j limit-639 +-A FORWARD -o eth1 -d fc00::/7 -j limit-640 +-A FORWARD -o eth1 -d fc00::/7 -j limit-641 +-A FORWARD -o eth1 -d fc00::/7 -j limit-642 +-A FORWARD -o eth1 -d fc00::/7 -j limit-643 +-A FORWARD -o eth1 -d fc00::/7 -j limit-644 +-A FORWARD -o eth1 -d fc00::/7 -j limit-645 +-A FORWARD -o eth1 -d fc00::/7 -j limit-646 +-A FORWARD -o eth1 -d fc00::/7 -j limit-647 +-A FORWARD -o eth1 -d fc00::/7 -j limit-648 +-A FORWARD -o eth1 -d fc00::/7 -j limit-649 +-A FORWARD -o eth1 -d fc00::/7 -j limit-650 +-A FORWARD -o eth1 -d fc00::/7 -j limit-651 +-A FORWARD -o eth1 -d fc00::/7 -j limit-652 +-A FORWARD -o eth1 -d fc00::/7 -j limit-653 +-A FORWARD -o eth1 -d fc00::/7 -j limit-654 +-A FORWARD -o eth1 -d fc00::/7 -j limit-655 +-A FORWARD -o eth1 -d fc00::/7 -j limit-656 +-A FORWARD -o eth1 -d fc00::/7 -j limit-657 +-A FORWARD -o eth1 -d fc00::/7 -j limit-658 +-A FORWARD -o eth1 -d fc00::/7 -j limit-659 +-A FORWARD -o eth1 -d fc00::/7 -j limit-660 +-A FORWARD -o eth1 -d fc00::/7 -j limit-661 +-A FORWARD -o eth1 -d fc00::/7 -j limit-662 +-A FORWARD -o eth1 -d fc00::/7 -j limit-663 +-A FORWARD -o eth1 -d fc00::/7 -j limit-664 +-A FORWARD -o eth1 -d fc00::/7 -j limit-665 +-A FORWARD -o eth1 -d fc00::/7 -j limit-666 +-A FORWARD -o eth1 -d fc00::/7 -j limit-667 +-A FORWARD -o eth1 -d fc00::/7 -j limit-668 +-A FORWARD -o eth1 -d fc00::/7 -j limit-669 +-A FORWARD -o eth1 -d fc00::/7 -j limit-670 +-A FORWARD -o eth1 -d fc00::/7 -j limit-671 +-A FORWARD -o eth1 -d fc00::/7 -j limit-672 +-A FORWARD -o eth1 -d fc00::/7 -j limit-673 +-A FORWARD -o eth1 -d fc00::/7 -j limit-674 +-A FORWARD -o eth1 -d fc00::/7 -j limit-675 +-A FORWARD -o eth1 -d fc00::/7 -j limit-676 +-A FORWARD -o eth1 -d fc00::/7 -j limit-677 +-A FORWARD -o eth1 -d fc00::/7 -j limit-678 +-A FORWARD -o eth1 -d fc00::/7 -j limit-679 +-A FORWARD -o eth1 -d fc00::/7 -j limit-680 +-A FORWARD -o eth1 -d fc00::/7 -j limit-681 +-A FORWARD -o eth1 -d fc00::/7 -j limit-682 +-A FORWARD -o eth1 -d fc00::/7 -j limit-683 +-A FORWARD -o eth1 -d fc00::/7 -j limit-684 +-A FORWARD -o eth1 -d fc00::/7 -j limit-685 +-A FORWARD -o eth1 -d fc00::/7 -j limit-686 +-A FORWARD -o eth1 -d fc00::/7 -j limit-687 +-A FORWARD -o eth1 -d fc00::/7 -j limit-688 +-A FORWARD -o eth1 -d fc00::/7 -j limit-689 +-A FORWARD -o eth1 -d fc00::/7 -j limit-690 +-A FORWARD -o eth1 -d fc00::/7 -j limit-691 +-A FORWARD -o eth1 -d fc00::/7 -j limit-692 +-A FORWARD -o eth1 -d fc00::/7 -j limit-693 +-A FORWARD -o eth1 -d fc00::/7 -j limit-694 +-A FORWARD -o eth1 -d fc00::/7 -j limit-695 +-A FORWARD -o eth1 -d fc00::/7 -j limit-696 +-A FORWARD -o eth1 -d fc00::/7 -j limit-697 +-A FORWARD -o eth1 -d fc00::/7 -j limit-698 +-A FORWARD -o eth1 -d fc00::/7 -j limit-699 +-A FORWARD -o eth1 -d fc00::/7 -j limit-700 +-A FORWARD -o eth1 -d fc00::/7 -j limit-701 +-A FORWARD -o eth1 -d fc00::/7 -j limit-702 +-A FORWARD -o eth1 -d fc00::/7 -j limit-703 +-A FORWARD -o eth1 -d fc00::/7 -j limit-704 +-A FORWARD -o eth1 -d fc00::/7 -j limit-705 +-A FORWARD -o eth1 -d fc00::/7 -j limit-706 +-A FORWARD -o eth1 -d fc00::/7 -j limit-707 +-A FORWARD -o eth1 -d fc00::/7 -j limit-708 +-A FORWARD -o eth1 -d fc00::/7 -j limit-709 +-A FORWARD -o eth1 -d fc00::/7 -j limit-710 +-A FORWARD -o eth1 -d fc00::/7 -j limit-711 +-A FORWARD -o eth1 -d fc00::/7 -j limit-712 +-A FORWARD -o eth1 -d fc00::/7 -j limit-713 +-A FORWARD -o eth1 -d fc00::/7 -j limit-714 +-A FORWARD -o eth1 -d fc00::/7 -j limit-715 +-A FORWARD -o eth1 -d fc00::/7 -j limit-716 +-A FORWARD -o eth1 -d fc00::/7 -j limit-717 +-A FORWARD -o eth1 -d fc00::/7 -j limit-718 +-A FORWARD -o eth1 -d fc00::/7 -j limit-719 +-A FORWARD -o eth1 -d fc00::/7 -j limit-720 +-A FORWARD -o eth1 -d fc00::/7 -j limit-721 +-A FORWARD -o eth1 -d fc00::/7 -j limit-722 +-A FORWARD -o eth1 -d fc00::/7 -j limit-723 +-A FORWARD -o eth1 -d fc00::/7 -j limit-724 +-A FORWARD -o eth1 -d fc00::/7 -j limit-725 +-A FORWARD -o eth1 -d fc00::/7 -j limit-726 +-A FORWARD -o eth1 -d fc00::/7 -j limit-727 +-A FORWARD -o eth1 -d fc00::/7 -j limit-728 +-A FORWARD -o eth1 -d fc00::/7 -j limit-729 +-A FORWARD -o eth1 -d fc00::/7 -j limit-730 +-A FORWARD -o eth1 -d fc00::/7 -j limit-731 +-A FORWARD -o eth1 -d fc00::/7 -j limit-732 +-A FORWARD -o eth1 -d fc00::/7 -j limit-733 +-A FORWARD -o eth1 -d fc00::/7 -j limit-734 +-A FORWARD -o eth1 -d fc00::/7 -j limit-735 +-A FORWARD -o eth1 -d fc00::/7 -j limit-736 +-A FORWARD -o eth1 -d fc00::/7 -j limit-737 +-A FORWARD -o eth1 -d fc00::/7 -j limit-738 +-A FORWARD -o eth1 -d fc00::/7 -j limit-739 +-A FORWARD -o eth1 -d fc00::/7 -j limit-740 +-A FORWARD -o eth1 -d fc00::/7 -j limit-741 +-A FORWARD -o eth1 -d fc00::/7 -j limit-742 +-A FORWARD -o eth1 -d fc00::/7 -j limit-743 +-A FORWARD -o eth1 -d fc00::/7 -j limit-744 +-A FORWARD -o eth1 -d fc00::/7 -j limit-745 +-A FORWARD -o eth1 -d fc00::/7 -j limit-746 +-A FORWARD -o eth1 -d fc00::/7 -j limit-747 +-A FORWARD -o eth1 -d fc00::/7 -j limit-748 +-A FORWARD -o eth1 -d fc00::/7 -j limit-749 +-A FORWARD -o eth1 -d fc00::/7 -j limit-750 +-A FORWARD -o eth1 -d fc00::/7 -j limit-751 +-A FORWARD -o eth1 -d fc00::/7 -j limit-752 +-A FORWARD -o eth1 -d fc00::/7 -j limit-753 +-A FORWARD -o eth1 -d fc00::/7 -j limit-754 +-A FORWARD -o eth1 -d fc00::/7 -j limit-755 +-A FORWARD -o eth1 -d fc00::/7 -j limit-756 +-A FORWARD -o eth1 -d fc00::/7 -j limit-757 +-A FORWARD -o eth1 -d fc00::/7 -j limit-758 +-A FORWARD -o eth1 -d fc00::/7 -j limit-759 +-A FORWARD -o eth1 -d fc00::/7 -j limit-760 +-A FORWARD -o eth1 -d fc00::/7 -j limit-761 +-A FORWARD -o eth1 -d fc00::/7 -j limit-762 +-A FORWARD -o eth1 -d fc00::/7 -j limit-763 +-A FORWARD -o eth1 -d fc00::/7 -j limit-764 +-A FORWARD -o eth1 -d fc00::/7 -j limit-765 +-A FORWARD -o eth1 -d fc00::/7 -j limit-766 +-A FORWARD -o eth1 -d fc00::/7 -j limit-767 +-A FORWARD -o eth1 -d fc00::/7 -j limit-768 +-A FORWARD -o eth1 -d fc00::/7 -j limit-769 +-A FORWARD -o eth1 -d fc00::/7 -j limit-770 +-A FORWARD -o eth1 -d fc00::/7 -j limit-771 +-A FORWARD -o eth1 -d fc00::/7 -j limit-772 +-A FORWARD -o eth1 -d fc00::/7 -j limit-773 +-A FORWARD -o eth1 -d fc00::/7 -j limit-774 +-A FORWARD -o eth1 -d fc00::/7 -j limit-775 +-A FORWARD -o eth1 -d fc00::/7 -j limit-776 +-A FORWARD -o eth1 -d fc00::/7 -j limit-777 +-A FORWARD -o eth1 -d fc00::/7 -j limit-778 +-A FORWARD -o eth1 -d fc00::/7 -j limit-779 +-A FORWARD -o eth1 -d fc00::/7 -j limit-780 +-A FORWARD -o eth1 -d fc00::/7 -j limit-781 +-A FORWARD -o eth1 -d fc00::/7 -j limit-782 +-A FORWARD -o eth1 -d fc00::/7 -j limit-783 +-A FORWARD -o eth1 -d fc00::/7 -j limit-784 +-A FORWARD -o eth1 -d fc00::/7 -j limit-785 +-A FORWARD -o eth1 -d fc00::/7 -j limit-786 +-A FORWARD -o eth1 -d fc00::/7 -j limit-787 +-A FORWARD -o eth1 -d fc00::/7 -j limit-788 +-A FORWARD -o eth1 -d fc00::/7 -j limit-789 +-A FORWARD -o eth1 -d fc00::/7 -j limit-790 +-A FORWARD -o eth1 -d fc00::/7 -j limit-791 +-A FORWARD -o eth1 -d fc00::/7 -j limit-792 +-A FORWARD -o eth1 -d fc00::/7 -j limit-793 +-A FORWARD -o eth1 -d fc00::/7 -j limit-794 +-A FORWARD -o eth1 -d fc00::/7 -j limit-795 +-A FORWARD -o eth1 -d fc00::/7 -j limit-796 +-A FORWARD -o eth1 -d fc00::/7 -j limit-797 +-A FORWARD -o eth1 -d fc00::/7 -j limit-798 +-A FORWARD -o eth1 -d fc00::/7 -j limit-799 +-A FORWARD -o eth1 -d fc00::/7 -j limit-800 +-A FORWARD -o eth1 -d fc00::/7 -j limit-801 +-A FORWARD -o eth1 -d fc00::/7 -j limit-802 +-A FORWARD -o eth1 -d fc00::/7 -j limit-803 +-A FORWARD -o eth1 -d fc00::/7 -j limit-804 +-A FORWARD -o eth1 -d fc00::/7 -j limit-805 +-A FORWARD -o eth1 -d fc00::/7 -j limit-806 +-A FORWARD -o eth1 -d fc00::/7 -j limit-807 +-A FORWARD -o eth1 -d fc00::/7 -j limit-808 +-A FORWARD -o eth1 -d fc00::/7 -j limit-809 +-A FORWARD -o eth1 -d fc00::/7 -j limit-810 +-A FORWARD -o eth1 -d fc00::/7 -j limit-811 +-A FORWARD -o eth1 -d fc00::/7 -j limit-812 +-A FORWARD -o eth1 -d fc00::/7 -j limit-813 +-A FORWARD -o eth1 -d fc00::/7 -j limit-814 +-A FORWARD -o eth1 -d fc00::/7 -j limit-815 +-A FORWARD -o eth1 -d fc00::/7 -j limit-816 +-A FORWARD -o eth1 -d fc00::/7 -j limit-817 +-A FORWARD -o eth1 -d fc00::/7 -j limit-818 +-A FORWARD -o eth1 -d fc00::/7 -j limit-819 +-A FORWARD -o eth1 -d fc00::/7 -j limit-820 +-A FORWARD -o eth1 -d fc00::/7 -j limit-821 +-A FORWARD -o eth1 -d fc00::/7 -j limit-822 +-A FORWARD -o eth1 -d fc00::/7 -j limit-823 +-A FORWARD -o eth1 -d fc00::/7 -j limit-824 +-A FORWARD -o eth1 -d fc00::/7 -j limit-825 +-A FORWARD -o eth1 -d fc00::/7 -j limit-826 +-A FORWARD -o eth1 -d fc00::/7 -j limit-827 +-A FORWARD -o eth1 -d fc00::/7 -j limit-828 +-A FORWARD -o eth1 -d fc00::/7 -j limit-829 +-A FORWARD -o eth1 -d fc00::/7 -j limit-830 +-A FORWARD -o eth1 -d fc00::/7 -j limit-831 +-A FORWARD -o eth1 -d fc00::/7 -j limit-832 +-A FORWARD -o eth1 -d fc00::/7 -j limit-833 +-A FORWARD -o eth1 -d fc00::/7 -j limit-834 +-A FORWARD -o eth1 -d fc00::/7 -j limit-835 +-A FORWARD -o eth1 -d fc00::/7 -j limit-836 +-A FORWARD -o eth1 -d fc00::/7 -j limit-837 +-A FORWARD -o eth1 -d fc00::/7 -j limit-838 +-A FORWARD -o eth1 -d fc00::/7 -j limit-839 +-A FORWARD -o eth1 -d fc00::/7 -j limit-840 +-A FORWARD -o eth1 -d fc00::/7 -j limit-841 +-A FORWARD -o eth1 -d fc00::/7 -j limit-842 +-A FORWARD -o eth1 -d fc00::/7 -j limit-843 +-A FORWARD -o eth1 -d fc00::/7 -j limit-844 +-A FORWARD -o eth1 -d fc00::/7 -j limit-845 +-A FORWARD -o eth1 -d fc00::/7 -j limit-846 +-A FORWARD -o eth1 -d fc00::/7 -j limit-847 +-A FORWARD -o eth1 -d fc00::/7 -j limit-848 +-A FORWARD -o eth1 -d fc00::/7 -j limit-849 +-A FORWARD -o eth1 -d fc00::/7 -j limit-850 +-A FORWARD -o eth1 -d fc00::/7 -j limit-851 +-A FORWARD -o eth1 -d fc00::/7 -j limit-852 +-A FORWARD -o eth1 -d fc00::/7 -j limit-853 +-A FORWARD -o eth1 -d fc00::/7 -j limit-854 +-A FORWARD -o eth1 -d fc00::/7 -j limit-855 +-A FORWARD -o eth1 -d fc00::/7 -j limit-856 +-A FORWARD -o eth1 -d fc00::/7 -j limit-857 +-A FORWARD -o eth1 -d fc00::/7 -j limit-858 +-A FORWARD -o eth1 -d fc00::/7 -j limit-859 +-A FORWARD -o eth1 -d fc00::/7 -j limit-860 +-A FORWARD -o eth1 -d fc00::/7 -j limit-861 +-A FORWARD -o eth1 -d fc00::/7 -j limit-862 +-A FORWARD -o eth1 -d fc00::/7 -j limit-863 +-A FORWARD -o eth1 -d fc00::/7 -j limit-864 +-A FORWARD -o eth1 -d fc00::/7 -j limit-865 +-A FORWARD -o eth1 -d fc00::/7 -j limit-866 +-A FORWARD -o eth1 -d fc00::/7 -j limit-867 +-A FORWARD -o eth1 -d fc00::/7 -j limit-868 +-A FORWARD -o eth1 -d fc00::/7 -j limit-869 +-A FORWARD -o eth1 -d fc00::/7 -j limit-870 +-A FORWARD -o eth1 -d fc00::/7 -j limit-871 +-A FORWARD -o eth1 -d fc00::/7 -j limit-872 +-A FORWARD -o eth1 -d fc00::/7 -j limit-873 +-A FORWARD -o eth1 -d fc00::/7 -j limit-874 +-A FORWARD -o eth1 -d fc00::/7 -j limit-875 +-A FORWARD -o eth1 -d fc00::/7 -j limit-876 +-A FORWARD -o eth1 -d fc00::/7 -j limit-877 +-A FORWARD -o eth1 -d fc00::/7 -j limit-878 +-A FORWARD -o eth1 -d fc00::/7 -j limit-879 +-A FORWARD -o eth1 -d fc00::/7 -j limit-880 +-A FORWARD -o eth1 -d fc00::/7 -j limit-881 +-A FORWARD -o eth1 -d fc00::/7 -j limit-882 +-A FORWARD -o eth1 -d fc00::/7 -j limit-883 +-A FORWARD -o eth1 -d fc00::/7 -j limit-884 +-A FORWARD -o eth1 -d fc00::/7 -j limit-885 +-A FORWARD -o eth1 -d fc00::/7 -j limit-886 +-A FORWARD -o eth1 -d fc00::/7 -j limit-887 +-A FORWARD -o eth1 -d fc00::/7 -j limit-888 +-A FORWARD -o eth1 -d fc00::/7 -j limit-889 +-A FORWARD -o eth1 -d fc00::/7 -j limit-890 +-A FORWARD -o eth1 -d fc00::/7 -j limit-891 +-A FORWARD -o eth1 -d fc00::/7 -j limit-892 +-A FORWARD -o eth1 -d fc00::/7 -j limit-893 +-A FORWARD -o eth1 -d fc00::/7 -j limit-894 +-A FORWARD -o eth1 -d fc00::/7 -j limit-895 +-A FORWARD -o eth1 -d fc00::/7 -j limit-896 +-A FORWARD -o eth1 -d fc00::/7 -j limit-897 +-A FORWARD -o eth1 -d fc00::/7 -j limit-898 +-A FORWARD -o eth1 -d fc00::/7 -j limit-899 +-A FORWARD -o eth1 -d fc00::/7 -j limit-900 +-A FORWARD -o eth1 -d fc00::/7 -j limit-901 +-A FORWARD -o eth1 -d fc00::/7 -j limit-902 +-A FORWARD -o eth1 -d fc00::/7 -j limit-903 +-A FORWARD -o eth1 -d fc00::/7 -j limit-904 +-A FORWARD -o eth1 -d fc00::/7 -j limit-905 +-A FORWARD -o eth1 -d fc00::/7 -j limit-906 +-A FORWARD -o eth1 -d fc00::/7 -j limit-907 +-A FORWARD -o eth1 -d fc00::/7 -j limit-908 +-A FORWARD -o eth1 -d fc00::/7 -j limit-909 +-A FORWARD -o eth1 -d fc00::/7 -j limit-910 +-A FORWARD -o eth1 -d fc00::/7 -j limit-911 +-A FORWARD -o eth1 -d fc00::/7 -j limit-912 +-A FORWARD -o eth1 -d fc00::/7 -j limit-913 +-A FORWARD -o eth1 -d fc00::/7 -j limit-914 +-A FORWARD -o eth1 -d fc00::/7 -j limit-915 +-A FORWARD -o eth1 -d fc00::/7 -j limit-916 +-A FORWARD -o eth1 -d fc00::/7 -j limit-917 +-A FORWARD -o eth1 -d fc00::/7 -j limit-918 +-A FORWARD -o eth1 -d fc00::/7 -j limit-919 +-A FORWARD -o eth1 -d fc00::/7 -j limit-920 +-A FORWARD -o eth1 -d fc00::/7 -j limit-921 +-A FORWARD -o eth1 -d fc00::/7 -j limit-922 +-A FORWARD -o eth1 -d fc00::/7 -j limit-923 +-A FORWARD -o eth1 -d fc00::/7 -j limit-924 +-A FORWARD -o eth1 -d fc00::/7 -j limit-925 +-A FORWARD -o eth1 -d fc00::/7 -j limit-926 +-A FORWARD -o eth1 -d fc00::/7 -j limit-927 +-A FORWARD -o eth1 -d fc00::/7 -j limit-928 +-A FORWARD -o eth1 -d fc00::/7 -j limit-929 +-A FORWARD -o eth1 -d fc00::/7 -j limit-930 +-A FORWARD -o eth1 -d fc00::/7 -j limit-931 +-A FORWARD -o eth1 -d fc00::/7 -j limit-932 +-A FORWARD -o eth1 -d fc00::/7 -j limit-933 +-A FORWARD -o eth1 -d fc00::/7 -j limit-934 +-A FORWARD -o eth1 -d fc00::/7 -j limit-935 +-A FORWARD -o eth1 -d fc00::/7 -j limit-936 +-A FORWARD -o eth1 -d fc00::/7 -j limit-937 +-A FORWARD -o eth1 -d fc00::/7 -j limit-938 +-A FORWARD -o eth1 -d fc00::/7 -j limit-939 +-A FORWARD -o eth1 -d fc00::/7 -j limit-940 +-A FORWARD -o eth1 -d fc00::/7 -j limit-941 +-A FORWARD -o eth1 -d fc00::/7 -j limit-942 +-A FORWARD -o eth1 -d fc00::/7 -j limit-943 +-A FORWARD -o eth1 -d fc00::/7 -j limit-944 +-A FORWARD -o eth1 -d fc00::/7 -j limit-945 +-A FORWARD -o eth1 -d fc00::/7 -j limit-946 +-A FORWARD -o eth1 -d fc00::/7 -j limit-947 +-A FORWARD -o eth1 -d fc00::/7 -j limit-948 +-A FORWARD -o eth1 -d fc00::/7 -j limit-949 +-A FORWARD -o eth1 -d fc00::/7 -j limit-950 +-A FORWARD -o eth1 -d fc00::/7 -j limit-951 +-A FORWARD -o eth1 -d fc00::/7 -j limit-952 +-A FORWARD -o eth1 -d fc00::/7 -j limit-953 +-A FORWARD -o eth1 -d fc00::/7 -j limit-954 +-A FORWARD -o eth1 -d fc00::/7 -j limit-955 +-A FORWARD -o eth1 -d fc00::/7 -j limit-956 +-A FORWARD -o eth1 -d fc00::/7 -j limit-957 +-A FORWARD -o eth1 -d fc00::/7 -j limit-958 +-A FORWARD -o eth1 -d fc00::/7 -j limit-959 +-A FORWARD -o eth1 -d fc00::/7 -j limit-960 +-A FORWARD -o eth1 -d fc00::/7 -j limit-961 +-A FORWARD -o eth1 -d fc00::/7 -j limit-962 +-A FORWARD -o eth1 -d fc00::/7 -j limit-963 +-A FORWARD -o eth1 -d fc00::/7 -j limit-964 +-A FORWARD -o eth1 -d fc00::/7 -j limit-965 +-A FORWARD -o eth1 -d fc00::/7 -j limit-966 +-A FORWARD -o eth1 -d fc00::/7 -j limit-967 +-A FORWARD -o eth1 -d fc00::/7 -j limit-968 +-A FORWARD -o eth1 -d fc00::/7 -j limit-969 +-A FORWARD -o eth1 -d fc00::/7 -j limit-970 +-A FORWARD -o eth1 -d fc00::/7 -j limit-971 +-A FORWARD -o eth1 -d fc00::/7 -j limit-972 +-A FORWARD -o eth1 -d fc00::/7 -j limit-973 +-A FORWARD -o eth1 -d fc00::/7 -j limit-974 +-A FORWARD -o eth1 -d fc00::/7 -j limit-975 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-0 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-1 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-2 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-3 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-4 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-5 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-6 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-7 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-8 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-9 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-10 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-11 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-12 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-13 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-14 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-15 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-16 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-17 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-18 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-19 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-20 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-21 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-22 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-23 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-24 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-25 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-26 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-27 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-28 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-29 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-30 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-31 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-32 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-33 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-34 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-35 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-36 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-37 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-38 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-39 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-40 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-41 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-42 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-43 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-44 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-45 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-46 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-47 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-48 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-49 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-50 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-51 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-52 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-53 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-54 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-55 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-56 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-57 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-58 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-59 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-60 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-61 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-62 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-63 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-64 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-65 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-66 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-67 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-68 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-69 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-70 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-71 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-72 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-73 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-74 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-75 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-76 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-77 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-78 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-79 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-80 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-81 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-82 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-83 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-84 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-85 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-86 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-87 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-88 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-89 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-90 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-91 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-92 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-93 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-94 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-95 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-96 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-97 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-98 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-99 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-100 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-101 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-102 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-103 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-104 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-105 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-106 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-107 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-108 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-109 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-110 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-111 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-112 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-113 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-114 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-115 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-116 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-117 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-118 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-119 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-120 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-121 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-122 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-123 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-124 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-125 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-126 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-127 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-128 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-129 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-130 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-131 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-132 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-133 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-134 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-135 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-136 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-137 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-138 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-139 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-140 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-141 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-142 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-143 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-144 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-145 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-146 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-147 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-148 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-149 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-150 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-151 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-152 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-153 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-154 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-155 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-156 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-157 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-158 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-159 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-160 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-161 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-162 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-163 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-164 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-165 +-A FORWARD -j logaccept-final-166 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-167 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-168 +-A FORWARD -j logaccept-final-169 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-170 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-171 +-A FORWARD -j logaccept-final-172 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-173 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-174 +-A FORWARD -j logaccept-final-175 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-176 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-177 +-A FORWARD -j logaccept-final-178 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-179 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-180 +-A FORWARD -j logaccept-final-181 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-182 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-183 +-A FORWARD -j logaccept-final-184 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-185 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-186 +-A FORWARD -j logaccept-final-187 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-188 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-189 +-A FORWARD -j logaccept-final-190 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-191 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-192 +-A FORWARD -j logaccept-final-193 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-194 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-195 +-A FORWARD -j logaccept-final-196 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-197 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-198 +-A FORWARD -j logaccept-final-199 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-200 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-201 +-A FORWARD -j logaccept-final-202 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-203 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-204 +-A FORWARD -j logaccept-final-205 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-206 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-207 +-A FORWARD -j logaccept-final-208 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-209 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-210 +-A FORWARD -j logaccept-final-211 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-212 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-213 +-A FORWARD -j logaccept-final-214 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-215 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-216 +-A FORWARD -j logaccept-final-217 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-218 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-219 +-A FORWARD -j logaccept-final-220 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-221 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-222 +-A FORWARD -j logaccept-final-223 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-224 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-225 +-A FORWARD -j logaccept-final-226 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-227 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-228 +-A FORWARD -j logaccept-final-229 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-230 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-231 +-A FORWARD -j logaccept-final-232 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-233 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-234 +-A FORWARD -j logaccept-final-235 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-236 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-237 +-A FORWARD -j logaccept-final-238 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-239 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-240 +-A FORWARD -j logaccept-final-241 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-242 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-243 +-A FORWARD -j logaccept-final-244 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-245 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-246 +-A FORWARD -j logaccept-final-247 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-248 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-249 +-A FORWARD -j logaccept-final-250 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-251 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-252 +-A FORWARD -j logaccept-final-253 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-254 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-255 +-A FORWARD -j logaccept-final-256 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-257 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-258 +-A FORWARD -j logaccept-final-259 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-260 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-261 +-A FORWARD -j logaccept-final-262 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-263 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-264 +-A FORWARD -j logaccept-final-265 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-266 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-267 +-A FORWARD -j logaccept-final-268 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-269 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-270 +-A FORWARD -j logaccept-final-271 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-272 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-273 +-A FORWARD -j logaccept-final-274 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-275 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-276 +-A FORWARD -j logaccept-final-277 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-278 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-279 +-A FORWARD -j logaccept-final-280 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-281 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-282 +-A FORWARD -j logaccept-final-283 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-284 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-285 +-A FORWARD -j logaccept-final-286 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-287 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-288 +-A FORWARD -j logaccept-final-289 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-290 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-291 +-A FORWARD -j logaccept-final-292 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-293 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-294 +-A FORWARD -j logaccept-final-295 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-296 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-297 +-A FORWARD -j logaccept-final-298 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-299 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-300 +-A FORWARD -j logaccept-final-301 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-302 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-303 +-A FORWARD -j logaccept-final-304 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-305 -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:C --rsource --mask fe00:: --set @@ -59912,19 +100430,25 @@ COMMIT -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-1184 +-A FORWARD -j logdrop-2200 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-54 --A FORWARD -j logdrop-1185 +-A FORWARD -j logaccept-99 +-A FORWARD -j logdrop-2201 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-100 +-A FORWARD -j logdrop-2202 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-101 +-A FORWARD -j logdrop-2203 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-55 --A FORWARD -j logdrop-1186 +-A FORWARD -j logaccept-102 +-A FORWARD -j logdrop-2204 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -59951,1597 +100475,2474 @@ COMMIT -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -j limit-1886 --A INPUT -j limit-1885 --A INPUT -j limit-1884 --A INPUT -j limit-1883 --A INPUT -j limit-1882 --A INPUT -j limit-1881 --A INPUT -j limit-1880 --A INPUT -j limit-1879 --A INPUT -j limit-1878 --A INPUT -j limit-1877 --A INPUT -j limit-1876 --A INPUT -j limit-1875 --A INPUT -j limit-1874 --A INPUT -j limit-1873 --A INPUT -j limit-1872 --A INPUT -j limit-1871 --A INPUT -j limit-1870 --A INPUT -j limit-1869 --A INPUT -j limit-1868 --A INPUT -j limit-1867 --A INPUT -j limit-1866 --A INPUT -j limit-1865 --A INPUT -j limit-1864 --A INPUT -j limit-1863 --A INPUT -j limit-1862 --A INPUT -j limit-1861 --A INPUT -j limit-1860 --A INPUT -j limit-1859 --A INPUT -j limit-1858 --A INPUT -j limit-1857 --A INPUT -j limit-1856 --A INPUT -j limit-1855 --A INPUT -j limit-1854 --A INPUT -j limit-1853 --A INPUT -j limit-1852 --A INPUT -j limit-1851 --A INPUT -j limit-1850 --A INPUT -j limit-1849 --A INPUT -j limit-1848 --A INPUT -j limit-1847 --A INPUT -j limit-1846 --A INPUT -j limit-1845 --A INPUT -j limit-1844 --A INPUT -j limit-1843 --A INPUT -j limit-1842 --A INPUT -j limit-1841 --A INPUT -j limit-1840 --A INPUT -j limit-1839 --A INPUT -j limit-1838 --A INPUT -j limit-1837 --A INPUT -j limit-1836 --A INPUT -j limit-1835 --A INPUT -j limit-1834 --A INPUT -j limit-1833 --A INPUT -j limit-1832 --A INPUT -j limit-1831 --A INPUT -j limit-1830 --A INPUT -j limit-1829 --A INPUT -j limit-1828 --A INPUT -j limit-1827 --A INPUT -j limit-1826 --A INPUT -j limit-1825 --A INPUT -j limit-1824 --A INPUT -j limit-1823 --A INPUT -j limit-1822 --A INPUT -j limit-1821 --A INPUT -j limit-1820 --A INPUT -j limit-1819 --A INPUT -j limit-1818 --A INPUT -j limit-1817 --A INPUT -j limit-1816 --A INPUT -j limit-1815 --A INPUT -j limit-1814 --A INPUT -j limit-1813 --A INPUT -j limit-1812 --A INPUT -j limit-1811 --A INPUT -j limit-1810 --A INPUT -j limit-1809 --A INPUT -j limit-1808 --A INPUT -j limit-1807 --A INPUT -j limit-1806 --A INPUT -j limit-1805 --A INPUT -j limit-1804 --A INPUT -j limit-1803 --A INPUT -j limit-1802 --A INPUT -j limit-1801 --A INPUT -j limit-1800 --A INPUT -j limit-1799 --A INPUT -j limit-1798 --A INPUT -j limit-1797 --A INPUT -j limit-1796 --A INPUT -j limit-1795 --A INPUT -j limit-1794 --A INPUT -j limit-1793 --A INPUT -j limit-1792 --A INPUT -j limit-1791 --A INPUT -j limit-1790 --A INPUT -j limit-1789 --A INPUT -j limit-1788 --A INPUT -j limit-1787 --A INPUT -j limit-1786 --A INPUT -j limit-1785 --A INPUT -j limit-1784 --A INPUT -j limit-1783 --A INPUT -j limit-1782 --A INPUT -j limit-1781 --A INPUT -j limit-1780 --A INPUT -j limit-1779 --A INPUT -j limit-1778 --A INPUT -j limit-1777 --A INPUT -j limit-1776 --A INPUT -j limit-1775 --A INPUT -j limit-1774 --A INPUT -j limit-1773 --A INPUT -j limit-1772 --A INPUT -j limit-1771 --A INPUT -j limit-1770 --A INPUT -j limit-1769 --A INPUT -j limit-1768 --A INPUT -j limit-1767 --A INPUT -j limit-1766 --A INPUT -j limit-1765 --A INPUT -j limit-1764 --A INPUT -j limit-1763 --A INPUT -j limit-1762 --A INPUT -j limit-1761 --A INPUT -j limit-1760 --A INPUT -j limit-1759 --A INPUT -j limit-1758 --A INPUT -j limit-1757 --A INPUT -j limit-1756 --A INPUT -j limit-1755 --A INPUT -j limit-1754 --A INPUT -j limit-1753 --A INPUT -j limit-1752 --A INPUT -j limit-1751 --A INPUT -j limit-1750 --A INPUT -j limit-1749 --A INPUT -j limit-1748 --A INPUT -j limit-1747 --A INPUT -j limit-1746 --A INPUT -j limit-1745 --A INPUT -j limit-1744 --A INPUT -j limit-1743 --A INPUT -j limit-1742 --A INPUT -j limit-1741 --A INPUT -j limit-1740 --A INPUT -j limit-1739 --A INPUT -j limit-1738 --A INPUT -j limit-1737 --A INPUT -j limit-1736 --A INPUT -j limit-1735 --A INPUT -j limit-1734 --A INPUT -j limit-1733 --A INPUT -j limit-1732 --A INPUT -j limit-1731 --A INPUT -j limit-1730 --A INPUT -j limit-1729 --A INPUT -j limit-1728 --A INPUT -j limit-1727 --A INPUT -j limit-1726 --A INPUT -j limit-1725 --A INPUT -j limit-1724 --A INPUT -j limit-1723 --A INPUT -j limit-1722 --A INPUT -j limit-1721 --A INPUT -j limit-1720 --A INPUT -j limit-1719 --A INPUT -j limit-1718 --A INPUT -j limit-1717 --A INPUT -j limit-1716 --A INPUT -j limit-1715 --A INPUT -j limit-1714 --A INPUT -j limit-1713 --A INPUT -j limit-1712 --A INPUT -j limit-1711 --A INPUT -j limit-1710 --A INPUT -j limit-1709 --A INPUT -j limit-1708 --A INPUT -j limit-1707 --A INPUT -j limit-1706 --A INPUT -j limit-1705 --A INPUT -j limit-1704 --A INPUT -j limit-1703 --A INPUT -j limit-1702 --A INPUT -j limit-1701 --A INPUT -j limit-1700 --A INPUT -j limit-1699 --A INPUT -j limit-1698 --A INPUT -j limit-1697 --A INPUT -j limit-1696 --A INPUT -j limit-1695 --A INPUT -j limit-1694 --A INPUT -j limit-1693 --A INPUT -j limit-1692 --A INPUT -j limit-1691 --A INPUT -j limit-1690 --A INPUT -j limit-1689 --A INPUT -j limit-1688 --A INPUT -j limit-1687 --A INPUT -j limit-1686 --A INPUT -j limit-1685 --A INPUT -j limit-1684 --A INPUT -j limit-1683 --A INPUT -j limit-1682 --A INPUT -j limit-1681 --A INPUT -j limit-1680 --A INPUT -j limit-1679 --A INPUT -j limit-1678 --A INPUT -j limit-1677 --A INPUT -j limit-1676 --A INPUT -j limit-1675 --A INPUT -j limit-1674 --A INPUT -j limit-1673 --A INPUT -j limit-1672 --A INPUT -j limit-1671 --A INPUT -j limit-1670 --A INPUT -j limit-1669 --A INPUT -j limit-1668 --A INPUT -j limit-1667 --A INPUT -j limit-1666 --A INPUT -j limit-1665 --A INPUT -j limit-1664 --A INPUT -j limit-1663 --A INPUT -j limit-1662 --A INPUT -j limit-1661 --A INPUT -j limit-1660 --A INPUT -j limit-1659 --A INPUT -j limit-1658 --A INPUT -j limit-1657 --A INPUT -j limit-1656 --A INPUT -j limit-1655 --A INPUT -j limit-1654 --A INPUT -j limit-1653 --A INPUT -j limit-1652 --A INPUT -j limit-1651 --A INPUT -j limit-1650 --A INPUT -j limit-1649 --A INPUT -j limit-1648 --A INPUT -j limit-1647 --A INPUT -j limit-1646 --A INPUT -j limit-1645 --A INPUT -j limit-1644 --A INPUT -j limit-1643 --A INPUT -j limit-1642 --A INPUT -j limit-1641 --A INPUT -j limit-1640 --A INPUT -j limit-1639 --A INPUT -j limit-1638 --A INPUT -j limit-1637 --A INPUT -j limit-1636 --A INPUT -j limit-1635 --A INPUT -j limit-1634 --A INPUT -j limit-1633 --A INPUT -j limit-1632 --A INPUT -j limit-1631 --A INPUT -j limit-1630 --A INPUT -j limit-1629 --A INPUT -j limit-1628 --A INPUT -j limit-1627 --A INPUT -j limit-1626 --A INPUT -j limit-1625 --A INPUT -j limit-1624 --A INPUT -j limit-1623 --A INPUT -j limit-1622 --A INPUT -j limit-1621 --A INPUT -j limit-1620 --A INPUT -j limit-1619 --A INPUT -j limit-1618 --A INPUT -j limit-1617 --A INPUT -j limit-1616 --A INPUT -j limit-1615 --A INPUT -j limit-1614 --A INPUT -j limit-1613 --A INPUT -j limit-1612 --A INPUT -j limit-1611 --A INPUT -j limit-1610 --A INPUT -j limit-1609 --A INPUT -j limit-1608 --A INPUT -j limit-1607 --A INPUT -j limit-1606 --A INPUT -j limit-1605 --A INPUT -j limit-1604 --A INPUT -j limit-1603 --A INPUT -j limit-1602 --A INPUT -j limit-1601 --A INPUT -j limit-1600 --A INPUT -j limit-1599 --A INPUT -j limit-1598 --A INPUT -j limit-1597 --A INPUT -j limit-1596 --A INPUT -j limit-1595 --A INPUT -j limit-1594 --A INPUT -j limit-1593 --A INPUT -j limit-1592 --A INPUT -j limit-1591 --A INPUT -j limit-1590 --A INPUT -j limit-1589 --A INPUT -j limit-1588 --A INPUT -j limit-1587 --A INPUT -j limit-1586 --A INPUT -j limit-1585 --A INPUT -j limit-1584 --A INPUT -j limit-1583 --A INPUT -j limit-1582 --A INPUT -j limit-1581 --A INPUT -j limit-1580 --A INPUT -j limit-1579 --A INPUT -j limit-1578 --A INPUT -j limit-1577 --A INPUT -j limit-1576 --A INPUT -j limit-1575 --A INPUT -j limit-1574 --A INPUT -j limit-1573 --A INPUT -j limit-1572 --A INPUT -j limit-1571 --A INPUT -j limit-1570 --A INPUT -j limit-1569 --A INPUT -j limit-1568 --A INPUT -j limit-1567 --A INPUT -j limit-1566 --A INPUT -j limit-1565 --A INPUT -j limit-1564 --A INPUT -j limit-1563 --A INPUT -j limit-1562 --A INPUT -j limit-1561 --A INPUT -j limit-1560 --A INPUT -j limit-1559 --A INPUT -j limit-1558 --A INPUT -j limit-1557 --A INPUT -j limit-1556 --A INPUT -j limit-1555 --A INPUT -j limit-1554 --A INPUT -j limit-1553 --A INPUT -j limit-1552 --A INPUT -j limit-1551 --A INPUT -j limit-1550 --A INPUT -j limit-1549 --A INPUT -j limit-1548 --A INPUT -j limit-1547 --A INPUT -j limit-1546 --A INPUT -j limit-1545 --A INPUT -j limit-1544 --A INPUT -j limit-1543 --A INPUT -j limit-1542 --A INPUT -j limit-1541 --A INPUT -j limit-1540 --A INPUT -j limit-1539 --A INPUT -j limit-1538 --A INPUT -j limit-1537 --A INPUT -j limit-1536 --A INPUT -j limit-1535 --A INPUT -j limit-1534 --A INPUT -j limit-1533 --A INPUT -j limit-1532 --A INPUT -j limit-1531 --A INPUT -j limit-1530 --A INPUT -j limit-1529 --A INPUT -j limit-1528 --A INPUT -j limit-1527 --A INPUT -j limit-1526 --A INPUT -j limit-1525 --A INPUT -j limit-1524 --A INPUT -j limit-1523 --A INPUT -j limit-1522 --A INPUT -j limit-1521 --A INPUT -j limit-1520 --A INPUT -j limit-1519 --A INPUT -j limit-1518 --A INPUT -j limit-1517 --A INPUT -j limit-1516 --A INPUT -j limit-1515 --A INPUT -j limit-1514 --A INPUT -j limit-1513 --A INPUT -j limit-1512 --A INPUT -j limit-1511 --A INPUT -j limit-1510 --A INPUT -j limit-1509 --A INPUT -j limit-1508 --A INPUT -j limit-1507 --A INPUT -j limit-1506 --A INPUT -j limit-1505 --A INPUT -j limit-1504 --A INPUT -j limit-1503 --A INPUT -j limit-1502 --A INPUT -j limit-1501 --A INPUT -j limit-1500 --A INPUT -j limit-1499 --A INPUT -j limit-1498 --A INPUT -j limit-1497 --A INPUT -j limit-1496 --A INPUT -j limit-1495 --A INPUT -j limit-1494 --A INPUT -j limit-1493 --A INPUT -j limit-1492 --A INPUT -j limit-1491 --A INPUT -j limit-1490 --A INPUT -j limit-1489 --A INPUT -j limit-1488 --A INPUT -j limit-1487 --A INPUT -j limit-1486 --A INPUT -j limit-1485 --A INPUT -j limit-1484 --A INPUT -j limit-1483 --A INPUT -j limit-1482 --A INPUT -j limit-1481 --A INPUT -j limit-1480 --A INPUT -j limit-1479 --A INPUT -j limit-1478 --A INPUT -j limit-1477 --A INPUT -j limit-1476 --A INPUT -j limit-1475 --A INPUT -j limit-1474 --A INPUT -j limit-1473 --A INPUT -j limit-1472 --A INPUT -j limit-1471 --A INPUT -j limit-1470 --A INPUT -j limit-1469 --A INPUT -j limit-1468 --A INPUT -j limit-1467 --A INPUT -j limit-1466 --A INPUT -j limit-1465 --A INPUT -j limit-1464 --A INPUT -j limit-1463 --A INPUT -j limit-1462 --A INPUT -j limit-1461 --A INPUT -j limit-1460 --A INPUT -j limit-1459 --A INPUT -j limit-1458 --A INPUT -j limit-1457 --A INPUT -j limit-1456 --A INPUT -j limit-1455 --A INPUT -j limit-1454 --A INPUT -j limit-1453 --A INPUT -j limit-1452 --A INPUT -j limit-1451 --A INPUT -j limit-1450 --A INPUT -j limit-1449 --A INPUT -j limit-1448 --A INPUT -j limit-1447 --A INPUT -j limit-1446 --A INPUT -j limit-1445 --A INPUT -j limit-1444 --A INPUT -j limit-1443 --A INPUT -j limit-1442 --A INPUT -j limit-1441 --A INPUT -j limit-1440 --A INPUT -j limit-1439 --A INPUT -j limit-1438 --A INPUT -j limit-1437 --A INPUT -j limit-1436 --A INPUT -j limit-1435 --A INPUT -j limit-1434 --A INPUT -j limit-1433 --A INPUT -j limit-1432 --A INPUT -j limit-1431 --A INPUT -j limit-1430 --A INPUT -j limit-1429 --A INPUT -j limit-1428 --A INPUT -j limit-1427 --A INPUT -j limit-1426 --A INPUT -j limit-1425 --A INPUT -j limit-1424 --A INPUT -j limit-1423 --A INPUT -j limit-1422 --A INPUT -j limit-1421 --A INPUT -j limit-1420 --A INPUT -j limit-1419 --A INPUT -j limit-1418 --A INPUT -j limit-1417 --A INPUT -j limit-1416 --A INPUT -j limit-1415 --A INPUT -j limit-1414 --A INPUT -j limit-1413 --A INPUT -j limit-1412 --A INPUT -j limit-1411 --A INPUT -j limit-1410 --A INPUT -j limit-1409 --A INPUT -j limit-1408 --A INPUT -j limit-1407 --A INPUT -j limit-1406 --A INPUT -j limit-1405 --A INPUT -j limit-1404 --A INPUT -j limit-1403 --A INPUT -j limit-1402 --A INPUT -j limit-1401 --A INPUT -j limit-1400 --A INPUT -j limit-1399 --A INPUT -j limit-1398 --A INPUT -j limit-1397 --A INPUT -j limit-1396 --A INPUT -j limit-1395 --A INPUT -j limit-1394 --A INPUT -j limit-1393 --A INPUT -j limit-1392 --A INPUT -j limit-1391 --A INPUT -j limit-1390 --A INPUT -j limit-1389 --A INPUT -j limit-1388 --A INPUT -j limit-1387 --A INPUT -j limit-1386 --A INPUT -j limit-1385 --A INPUT -j limit-1384 --A INPUT -j limit-1383 --A INPUT -j limit-1382 --A INPUT -j limit-1381 --A INPUT -j limit-1380 --A INPUT -j limit-1379 --A INPUT -j limit-1378 --A INPUT -j limit-1377 --A INPUT -j limit-1376 --A INPUT -j limit-1375 --A INPUT -j limit-1374 --A INPUT -j limit-1373 --A INPUT -j limit-1372 --A INPUT -j limit-1371 --A INPUT -j limit-1370 --A INPUT -j limit-1369 --A INPUT -j limit-1368 --A INPUT -j limit-1367 --A INPUT -j limit-1366 --A INPUT -j limit-1365 --A INPUT -j limit-1364 --A INPUT -j limit-1363 --A INPUT -j limit-1362 --A INPUT -j limit-1361 --A INPUT -j limit-1360 --A INPUT -j limit-1359 --A INPUT -j limit-1358 --A INPUT -j limit-1357 --A INPUT -j limit-1356 --A INPUT -j limit-1355 --A INPUT -j limit-1354 --A INPUT -j limit-1353 --A INPUT -j limit-1352 --A INPUT -j limit-1351 --A INPUT -j limit-1350 --A INPUT -j limit-1349 --A INPUT -j limit-1348 --A INPUT -j limit-1347 --A INPUT -j limit-1346 --A INPUT -j limit-1345 --A INPUT -j limit-1344 --A INPUT -j limit-1343 --A INPUT -j limit-1342 --A INPUT -j limit-1341 --A INPUT -j limit-1340 --A INPUT -j limit-1339 --A INPUT -j limit-1338 --A INPUT -j limit-1337 --A INPUT -j limit-1336 --A INPUT -j limit-1335 --A INPUT -j limit-1334 --A INPUT -j limit-1333 --A INPUT -j limit-1332 --A INPUT -j limit-1331 --A INPUT -j limit-1330 --A INPUT -j limit-1329 --A INPUT -j limit-1328 --A INPUT -j limit-1327 --A INPUT -j limit-1326 --A INPUT -j limit-1325 --A INPUT -j limit-1324 --A INPUT -j limit-1323 --A INPUT -j limit-1322 --A INPUT -j limit-1321 --A INPUT -j limit-1320 --A INPUT -j limit-1319 --A INPUT -j limit-1318 --A INPUT -j limit-1317 --A INPUT -j limit-1316 --A INPUT -j limit-1315 --A INPUT -j limit-1314 --A INPUT -j limit-1313 --A INPUT -j limit-1312 --A INPUT -j limit-1311 --A INPUT -j limit-1310 --A INPUT -j limit-1309 --A INPUT -j limit-1308 --A INPUT -j limit-1307 --A INPUT -j limit-1306 --A INPUT -j limit-1305 --A INPUT -j limit-1304 --A INPUT -j limit-1303 --A INPUT -j limit-1302 --A INPUT -j limit-1301 --A INPUT -j limit-1300 --A INPUT -j limit-1299 --A INPUT -j limit-1298 --A INPUT -j limit-1297 --A INPUT -j limit-1296 --A INPUT -j limit-1295 --A INPUT -j limit-1294 --A INPUT -j limit-1293 --A INPUT -j limit-1292 --A INPUT -j limit-1291 --A INPUT -j limit-1290 --A INPUT -j limit-1289 --A INPUT -j limit-1288 --A INPUT -j limit-1287 --A INPUT -j limit-1286 --A INPUT -j limit-1285 --A INPUT -j limit-1284 --A INPUT -j limit-1283 --A INPUT -j limit-1282 --A INPUT -j limit-1281 --A INPUT -j limit-1280 --A INPUT -j limit-1279 --A INPUT -j limit-1278 --A INPUT -j limit-1277 --A INPUT -j limit-1276 --A INPUT -j limit-1275 --A INPUT -j limit-1274 --A INPUT -j limit-1273 --A INPUT -j limit-1272 --A INPUT -j limit-1271 --A INPUT -j limit-1270 --A INPUT -j limit-1269 --A INPUT -j limit-1268 --A INPUT -j limit-1267 --A INPUT -j limit-1266 --A INPUT -j limit-1265 --A INPUT -j limit-1264 --A INPUT -j limit-1263 --A INPUT -j limit-1262 --A INPUT -j limit-1261 --A INPUT -j limit-1260 --A INPUT -j limit-1259 --A INPUT -j limit-1258 +-A INPUT -j limit-2927 +-A INPUT -j limit-2926 +-A INPUT -j limit-2925 +-A INPUT -j limit-2924 +-A INPUT -j limit-2923 +-A INPUT -j limit-2922 +-A INPUT -j limit-2921 +-A INPUT -j limit-2920 +-A INPUT -j limit-2919 +-A INPUT -j limit-2918 +-A INPUT -j limit-2917 +-A INPUT -j limit-2916 +-A INPUT -j limit-2915 +-A INPUT -j limit-2914 +-A INPUT -j limit-2913 +-A INPUT -j limit-2912 +-A INPUT -j limit-2911 +-A INPUT -j limit-2910 +-A INPUT -j limit-2909 +-A INPUT -j limit-2908 +-A INPUT -j limit-2907 +-A INPUT -j limit-2906 +-A INPUT -j limit-2905 +-A INPUT -j limit-2904 +-A INPUT -j limit-2903 +-A INPUT -j limit-2902 +-A INPUT -j limit-2901 +-A INPUT -j limit-2900 +-A INPUT -j limit-2899 +-A INPUT -j limit-2898 +-A INPUT -j limit-2897 +-A INPUT -j limit-2896 +-A INPUT -j limit-2895 +-A INPUT -j limit-2894 +-A INPUT -j limit-2893 +-A INPUT -j limit-2892 +-A INPUT -j limit-2891 +-A INPUT -j limit-2890 +-A INPUT -j limit-2889 +-A INPUT -j limit-2888 +-A INPUT -j limit-2887 +-A INPUT -j limit-2886 +-A INPUT -j limit-2885 +-A INPUT -j limit-2884 +-A INPUT -j limit-2883 +-A INPUT -j limit-2882 +-A INPUT -j limit-2881 +-A INPUT -j limit-2880 +-A INPUT -j limit-2879 +-A INPUT -j limit-2878 +-A INPUT -j limit-2877 +-A INPUT -j limit-2876 +-A INPUT -j limit-2875 +-A INPUT -j limit-2874 +-A INPUT -j limit-2873 +-A INPUT -j limit-2872 +-A INPUT -j limit-2871 +-A INPUT -j limit-2870 +-A INPUT -j limit-2869 +-A INPUT -j limit-2868 +-A INPUT -j limit-2867 +-A INPUT -j limit-2866 +-A INPUT -j limit-2865 +-A INPUT -j limit-2864 +-A INPUT -j limit-2863 +-A INPUT -j limit-2862 +-A INPUT -j limit-2861 +-A INPUT -j limit-2860 +-A INPUT -j limit-2859 +-A INPUT -j limit-2858 +-A INPUT -j limit-2857 +-A INPUT -j limit-2856 +-A INPUT -j limit-2855 +-A INPUT -j limit-2854 +-A INPUT -j limit-2853 +-A INPUT -j limit-2852 +-A INPUT -j limit-2851 +-A INPUT -j limit-2850 +-A INPUT -j limit-2849 +-A INPUT -j limit-2848 +-A INPUT -j limit-2847 +-A INPUT -j limit-2846 +-A INPUT -j limit-2845 +-A INPUT -j limit-2844 +-A INPUT -j limit-2843 +-A INPUT -j limit-2842 +-A INPUT -j limit-2841 +-A INPUT -j limit-2840 +-A INPUT -j limit-2839 +-A INPUT -j limit-2838 +-A INPUT -j limit-2837 +-A INPUT -j limit-2836 +-A INPUT -j limit-2835 +-A INPUT -j limit-2834 +-A INPUT -j limit-2833 +-A INPUT -j limit-2832 +-A INPUT -j limit-2831 +-A INPUT -j limit-2830 +-A INPUT -j limit-2829 +-A INPUT -j limit-2828 +-A INPUT -j limit-2827 +-A INPUT -j limit-2826 +-A INPUT -j limit-2825 +-A INPUT -j limit-2824 +-A INPUT -j limit-2823 +-A INPUT -j limit-2822 +-A INPUT -j limit-2821 +-A INPUT -j limit-2820 +-A INPUT -j limit-2819 +-A INPUT -j limit-2818 +-A INPUT -j limit-2817 +-A INPUT -j limit-2816 +-A INPUT -j limit-2815 +-A INPUT -j limit-2814 +-A INPUT -j limit-2813 +-A INPUT -j limit-2812 +-A INPUT -j limit-2811 +-A INPUT -j limit-2810 +-A INPUT -j limit-2809 +-A INPUT -j limit-2808 +-A INPUT -j limit-2807 +-A INPUT -j limit-2806 +-A INPUT -j limit-2805 +-A INPUT -j limit-2804 +-A INPUT -j limit-2803 +-A INPUT -j limit-2802 +-A INPUT -j limit-2801 +-A INPUT -j limit-2800 +-A INPUT -j limit-2799 +-A INPUT -j limit-2798 +-A INPUT -j limit-2797 +-A INPUT -j limit-2796 +-A INPUT -j limit-2795 +-A INPUT -j limit-2794 +-A INPUT -j limit-2793 +-A INPUT -j limit-2792 +-A INPUT -j limit-2791 +-A INPUT -j limit-2790 +-A INPUT -j limit-2789 +-A INPUT -j limit-2788 +-A INPUT -j limit-2787 +-A INPUT -j limit-2786 +-A INPUT -j limit-2785 +-A INPUT -j limit-2784 +-A INPUT -j limit-2783 +-A INPUT -j limit-2782 +-A INPUT -j limit-2781 +-A INPUT -j limit-2780 +-A INPUT -j limit-2779 +-A INPUT -j limit-2778 +-A INPUT -j limit-2777 +-A INPUT -j limit-2776 +-A INPUT -j limit-2775 +-A INPUT -j limit-2774 +-A INPUT -j limit-2773 +-A INPUT -j limit-2772 +-A INPUT -j limit-2771 +-A INPUT -j limit-2770 +-A INPUT -j limit-2769 +-A INPUT -j limit-2768 +-A INPUT -j limit-2767 +-A INPUT -j limit-2766 +-A INPUT -j limit-2765 +-A INPUT -j limit-2764 +-A INPUT -j limit-2763 +-A INPUT -j limit-2762 +-A INPUT -j limit-2761 +-A INPUT -j limit-2760 +-A INPUT -j limit-2759 +-A INPUT -j limit-2758 +-A INPUT -j limit-2757 +-A INPUT -j limit-2756 +-A INPUT -j limit-2755 +-A INPUT -j limit-2754 +-A INPUT -j limit-2753 +-A INPUT -j limit-2752 +-A INPUT -j limit-2751 +-A INPUT -j limit-2750 +-A INPUT -j limit-2749 +-A INPUT -j limit-2748 +-A INPUT -j limit-2747 +-A INPUT -j limit-2746 +-A INPUT -j limit-2745 +-A INPUT -j limit-2744 +-A INPUT -j limit-2743 +-A INPUT -j limit-2742 +-A INPUT -j limit-2741 +-A INPUT -j limit-2740 +-A INPUT -j limit-2739 +-A INPUT -j limit-2738 +-A INPUT -j limit-2737 +-A INPUT -j limit-2736 +-A INPUT -j limit-2735 +-A INPUT -j limit-2734 +-A INPUT -j limit-2733 +-A INPUT -j limit-2732 +-A INPUT -j limit-2731 +-A INPUT -j limit-2730 +-A INPUT -j limit-2729 +-A INPUT -j limit-2728 +-A INPUT -j limit-2727 +-A INPUT -j limit-2726 +-A INPUT -j limit-2725 +-A INPUT -j limit-2724 +-A INPUT -j limit-2723 +-A INPUT -j limit-2722 +-A INPUT -j limit-2721 +-A INPUT -j limit-2720 +-A INPUT -j limit-2719 +-A INPUT -j limit-2718 +-A INPUT -j limit-2717 +-A INPUT -j limit-2716 +-A INPUT -j limit-2715 +-A INPUT -j limit-2714 +-A INPUT -j limit-2713 +-A INPUT -j limit-2712 +-A INPUT -j limit-2711 +-A INPUT -j limit-2710 +-A INPUT -j limit-2709 +-A INPUT -j limit-2708 +-A INPUT -j limit-2707 +-A INPUT -j limit-2706 +-A INPUT -j limit-2705 +-A INPUT -j limit-2704 +-A INPUT -j limit-2703 +-A INPUT -j limit-2702 +-A INPUT -j limit-2701 +-A INPUT -j limit-2700 +-A INPUT -j limit-2699 +-A INPUT -j limit-2698 +-A INPUT -j limit-2697 +-A INPUT -j limit-2696 +-A INPUT -j limit-2695 +-A INPUT -j limit-2694 +-A INPUT -j limit-2693 +-A INPUT -j limit-2692 +-A INPUT -j limit-2691 +-A INPUT -j limit-2690 +-A INPUT -j limit-2689 +-A INPUT -j limit-2688 +-A INPUT -j limit-2687 +-A INPUT -j limit-2686 +-A INPUT -j limit-2685 +-A INPUT -j limit-2684 +-A INPUT -j limit-2683 +-A INPUT -j limit-2682 +-A INPUT -j limit-2681 +-A INPUT -j limit-2680 +-A INPUT -j limit-2679 +-A INPUT -j limit-2678 +-A INPUT -j limit-2677 +-A INPUT -j limit-2676 +-A INPUT -j limit-2675 +-A INPUT -j limit-2674 +-A INPUT -j limit-2673 +-A INPUT -j limit-2672 +-A INPUT -j limit-2671 +-A INPUT -j limit-2670 +-A INPUT -j limit-2669 +-A INPUT -j limit-2668 +-A INPUT -j limit-2667 +-A INPUT -j limit-2666 +-A INPUT -j limit-2665 +-A INPUT -j limit-2664 +-A INPUT -j limit-2663 +-A INPUT -j limit-2662 +-A INPUT -j limit-2661 +-A INPUT -j limit-2660 +-A INPUT -j limit-2659 +-A INPUT -j limit-2658 +-A INPUT -j limit-2657 +-A INPUT -j limit-2656 +-A INPUT -j limit-2655 +-A INPUT -j limit-2654 +-A INPUT -j limit-2653 +-A INPUT -j limit-2652 +-A INPUT -j limit-2651 +-A INPUT -j limit-2650 +-A INPUT -j limit-2649 +-A INPUT -j limit-2648 +-A INPUT -j limit-2647 +-A INPUT -j limit-2646 +-A INPUT -j limit-2645 +-A INPUT -j limit-2644 +-A INPUT -j limit-2643 +-A INPUT -j limit-2642 +-A INPUT -j limit-2641 +-A INPUT -j limit-2640 +-A INPUT -j limit-2639 +-A INPUT -j limit-2638 +-A INPUT -j limit-2637 +-A INPUT -j limit-2636 +-A INPUT -j limit-2635 +-A INPUT -j limit-2634 +-A INPUT -j limit-2633 +-A INPUT -j limit-2632 +-A INPUT -j limit-2631 +-A INPUT -j limit-2630 +-A INPUT -j limit-2629 +-A INPUT -j limit-2628 +-A INPUT -j limit-2627 +-A INPUT -j limit-2626 +-A INPUT -j limit-2625 +-A INPUT -j limit-2624 +-A INPUT -j limit-2623 +-A INPUT -j limit-2622 +-A INPUT -j limit-2621 +-A INPUT -j limit-2620 +-A INPUT -j limit-2619 +-A INPUT -j limit-2618 +-A INPUT -j limit-2617 +-A INPUT -j limit-2616 +-A INPUT -j limit-2615 +-A INPUT -j limit-2614 +-A INPUT -j limit-2613 +-A INPUT -j limit-2612 +-A INPUT -j limit-2611 +-A INPUT -j limit-2610 +-A INPUT -j limit-2609 +-A INPUT -j limit-2608 +-A INPUT -j limit-2607 +-A INPUT -j limit-2606 +-A INPUT -j limit-2605 +-A INPUT -j limit-2604 +-A INPUT -j limit-2603 +-A INPUT -j limit-2602 +-A INPUT -j limit-2601 +-A INPUT -j limit-2600 +-A INPUT -j limit-2599 +-A INPUT -j limit-2598 +-A INPUT -j limit-2597 +-A INPUT -j limit-2596 +-A INPUT -j limit-2595 +-A INPUT -j limit-2594 +-A INPUT -j limit-2593 +-A INPUT -j limit-2592 +-A INPUT -j limit-2591 +-A INPUT -j limit-2590 +-A INPUT -j limit-2589 +-A INPUT -j limit-2588 +-A INPUT -j limit-2587 +-A INPUT -j limit-2586 +-A INPUT -j limit-2585 +-A INPUT -j limit-2584 +-A INPUT -j limit-2583 +-A INPUT -j limit-2582 +-A INPUT -j limit-2581 +-A INPUT -j limit-2580 +-A INPUT -j limit-2579 +-A INPUT -j limit-2578 +-A INPUT -j limit-2577 +-A INPUT -j limit-2576 +-A INPUT -j limit-2575 +-A INPUT -j limit-2574 +-A INPUT -j limit-2573 +-A INPUT -j limit-2572 +-A INPUT -j limit-2571 +-A INPUT -j limit-2570 +-A INPUT -j limit-2569 +-A INPUT -j limit-2568 +-A INPUT -j limit-2567 +-A INPUT -j limit-2566 +-A INPUT -j limit-2565 +-A INPUT -j limit-2564 +-A INPUT -j limit-2563 +-A INPUT -j limit-2562 +-A INPUT -j limit-2561 +-A INPUT -j limit-2560 +-A INPUT -j limit-2559 +-A INPUT -j limit-2558 +-A INPUT -j limit-2557 +-A INPUT -j limit-2556 +-A INPUT -j limit-2555 +-A INPUT -j limit-2554 +-A INPUT -j limit-2553 +-A INPUT -j limit-2552 +-A INPUT -j limit-2551 +-A INPUT -j limit-2550 +-A INPUT -j limit-2549 +-A INPUT -j limit-2548 +-A INPUT -j limit-2547 +-A INPUT -j limit-2546 +-A INPUT -j limit-2545 +-A INPUT -j limit-2544 +-A INPUT -j limit-2543 +-A INPUT -j limit-2542 +-A INPUT -j limit-2541 +-A INPUT -j limit-2540 +-A INPUT -j limit-2539 +-A INPUT -j limit-2538 +-A INPUT -j limit-2537 +-A INPUT -j limit-2536 +-A INPUT -j limit-2535 +-A INPUT -j limit-2534 +-A INPUT -j limit-2533 +-A INPUT -j limit-2532 +-A INPUT -j limit-2531 +-A INPUT -j limit-2530 +-A INPUT -j limit-2529 +-A INPUT -j limit-2528 +-A INPUT -j limit-2527 +-A INPUT -j limit-2526 +-A INPUT -j limit-2525 +-A INPUT -j limit-2524 +-A INPUT -j limit-2523 +-A INPUT -j limit-2522 +-A INPUT -j limit-2521 +-A INPUT -j limit-2520 +-A INPUT -j limit-2519 +-A INPUT -j limit-2518 +-A INPUT -j limit-2517 +-A INPUT -j limit-2516 +-A INPUT -j limit-2515 +-A INPUT -j limit-2514 +-A INPUT -j limit-2513 +-A INPUT -j limit-2512 +-A INPUT -j limit-2511 +-A INPUT -j limit-2510 +-A INPUT -j limit-2509 +-A INPUT -j limit-2508 +-A INPUT -j limit-2507 +-A INPUT -j limit-2506 +-A INPUT -j limit-2505 +-A INPUT -j limit-2504 +-A INPUT -j limit-2503 +-A INPUT -j limit-2502 +-A INPUT -j limit-2501 +-A INPUT -j limit-2500 +-A INPUT -j limit-2499 +-A INPUT -j limit-2498 +-A INPUT -j limit-2497 +-A INPUT -j limit-2496 +-A INPUT -j limit-2495 +-A INPUT -j limit-2494 +-A INPUT -j limit-2493 +-A INPUT -j limit-2492 +-A INPUT -j limit-2491 +-A INPUT -j limit-2490 +-A INPUT -j limit-2489 +-A INPUT -j limit-2488 +-A INPUT -j limit-2487 +-A INPUT -j limit-2486 +-A INPUT -j limit-2485 +-A INPUT -j limit-2484 +-A INPUT -j limit-2483 +-A INPUT -j limit-2482 +-A INPUT -j limit-2481 +-A INPUT -j limit-2480 +-A INPUT -j limit-2479 +-A INPUT -j limit-2478 +-A INPUT -j limit-2477 +-A INPUT -j limit-2476 +-A INPUT -j limit-2475 +-A INPUT -j limit-2474 +-A INPUT -j limit-2473 +-A INPUT -j limit-2472 +-A INPUT -j limit-2471 +-A INPUT -j limit-2470 +-A INPUT -j limit-2469 +-A INPUT -j limit-2468 +-A INPUT -j limit-2467 +-A INPUT -j limit-2466 +-A INPUT -j limit-2465 +-A INPUT -j limit-2464 +-A INPUT -j limit-2463 +-A INPUT -j limit-2462 +-A INPUT -j limit-2461 +-A INPUT -j limit-2460 +-A INPUT -j limit-2459 +-A INPUT -j limit-2458 +-A INPUT -j limit-2457 +-A INPUT -j limit-2456 +-A INPUT -j limit-2455 +-A INPUT -j limit-2454 +-A INPUT -j limit-2453 +-A INPUT -j limit-2452 +-A INPUT -j limit-2451 +-A INPUT -j limit-2450 +-A INPUT -j limit-2449 +-A INPUT -j limit-2448 +-A INPUT -j limit-2447 +-A INPUT -j limit-2446 +-A INPUT -j limit-2445 +-A INPUT -j limit-2444 +-A INPUT -j limit-2443 +-A INPUT -j limit-2442 +-A INPUT -j limit-2441 +-A INPUT -j limit-2440 +-A INPUT -j limit-2439 +-A INPUT -j limit-2438 +-A INPUT -j limit-2437 +-A INPUT -j limit-2436 +-A INPUT -j limit-2435 +-A INPUT -j limit-2434 +-A INPUT -j limit-2433 +-A INPUT -j limit-2432 +-A INPUT -j limit-2431 +-A INPUT -j limit-2430 +-A INPUT -j limit-2429 +-A INPUT -j limit-2428 +-A INPUT -j limit-2427 +-A INPUT -j limit-2426 +-A INPUT -j limit-2425 +-A INPUT -j limit-2424 +-A INPUT -j limit-2423 +-A INPUT -j limit-2422 +-A INPUT -j limit-2421 +-A INPUT -j limit-2420 +-A INPUT -j limit-2419 +-A INPUT -j limit-2418 +-A INPUT -j limit-2417 +-A INPUT -j limit-2416 +-A INPUT -j limit-2415 +-A INPUT -j limit-2414 +-A INPUT -j limit-2413 +-A INPUT -j limit-2412 +-A INPUT -j limit-2411 +-A INPUT -j limit-2410 +-A INPUT -j limit-2409 +-A INPUT -j limit-2408 +-A INPUT -j limit-2407 +-A INPUT -j limit-2406 +-A INPUT -j limit-2405 +-A INPUT -j limit-2404 +-A INPUT -j limit-2403 +-A INPUT -j limit-2402 +-A INPUT -j limit-2401 +-A INPUT -j limit-2400 +-A INPUT -j limit-2399 +-A INPUT -j limit-2398 +-A INPUT -j limit-2397 +-A INPUT -j limit-2396 +-A INPUT -j limit-2395 +-A INPUT -j limit-2394 +-A INPUT -j limit-2393 +-A INPUT -j limit-2392 +-A INPUT -j limit-2391 +-A INPUT -j limit-2390 +-A INPUT -j limit-2389 +-A INPUT -j limit-2388 +-A INPUT -j limit-2387 +-A INPUT -j limit-2386 +-A INPUT -j limit-2385 +-A INPUT -j limit-2384 +-A INPUT -j limit-2383 +-A INPUT -j limit-2382 +-A INPUT -j limit-2381 +-A INPUT -j limit-2380 +-A INPUT -j limit-2379 +-A INPUT -j limit-2378 +-A INPUT -j limit-2377 +-A INPUT -j limit-2376 +-A INPUT -j limit-2375 +-A INPUT -j limit-2374 +-A INPUT -j limit-2373 +-A INPUT -j limit-2372 +-A INPUT -j limit-2371 +-A INPUT -j limit-2370 +-A INPUT -j limit-2369 +-A INPUT -j limit-2368 +-A INPUT -j limit-2367 +-A INPUT -j limit-2366 +-A INPUT -j limit-2365 +-A INPUT -j limit-2364 +-A INPUT -j limit-2363 +-A INPUT -j limit-2362 +-A INPUT -j limit-2361 +-A INPUT -j limit-2360 +-A INPUT -j limit-2359 +-A INPUT -j limit-2358 +-A INPUT -j limit-2357 +-A INPUT -j limit-2356 +-A INPUT -j limit-2355 +-A INPUT -j limit-2354 +-A INPUT -j limit-2353 +-A INPUT -j limit-2352 +-A INPUT -j limit-2351 +-A INPUT -j limit-2350 +-A INPUT -j limit-2349 +-A INPUT -j limit-2348 +-A INPUT -j limit-2347 +-A INPUT -j limit-2346 +-A INPUT -j limit-2345 +-A INPUT -j limit-2344 +-A INPUT -j limit-2343 +-A INPUT -j limit-2342 +-A INPUT -j limit-2341 +-A INPUT -j limit-2340 +-A INPUT -j limit-2339 +-A INPUT -j limit-2338 +-A INPUT -j limit-2337 +-A INPUT -j limit-2336 +-A INPUT -j limit-2335 +-A INPUT -j limit-2334 +-A INPUT -j limit-2333 +-A INPUT -j limit-2332 +-A INPUT -j limit-2331 +-A INPUT -j limit-2330 +-A INPUT -j limit-2329 +-A INPUT -j limit-2328 +-A INPUT -j limit-2327 +-A INPUT -j limit-2326 +-A INPUT -j limit-2325 +-A INPUT -j limit-2324 +-A INPUT -j limit-2323 +-A INPUT -j limit-2322 +-A INPUT -j limit-2321 +-A INPUT -j limit-2320 +-A INPUT -j limit-2319 +-A INPUT -j limit-2318 +-A INPUT -j limit-2317 +-A INPUT -j limit-2316 +-A INPUT -j limit-2315 +-A INPUT -j limit-2314 +-A INPUT -j limit-2313 +-A INPUT -j limit-2312 +-A INPUT -j limit-2311 +-A INPUT -j limit-2310 +-A INPUT -j limit-2309 +-A INPUT -j limit-2308 +-A INPUT -j limit-2307 +-A INPUT -j limit-2306 +-A INPUT -j limit-2305 +-A INPUT -j limit-2304 +-A INPUT -j limit-2303 +-A INPUT -j limit-2302 +-A INPUT -j limit-2301 +-A INPUT -j limit-2300 +-A INPUT -j limit-2299 +-A INPUT -j limit-2298 +-A INPUT -j limit-2297 +-A INPUT -j limit-2296 +-A INPUT -j limit-2295 +-A INPUT -j limit-2294 +-A INPUT -j limit-2293 +-A INPUT -j limit-2292 +-A INPUT -j limit-2291 +-A INPUT -j limit-2290 +-A INPUT -j limit-2289 +-A INPUT -j limit-2288 +-A INPUT -j limit-2287 +-A INPUT -j limit-2286 +-A INPUT -j limit-2285 +-A INPUT -j limit-2284 +-A INPUT -j limit-2283 +-A INPUT -j limit-2282 +-A INPUT -j limit-2281 +-A INPUT -j limit-2280 +-A INPUT -j limit-2279 +-A INPUT -j limit-2278 +-A INPUT -j limit-2277 +-A INPUT -j limit-2276 +-A INPUT -j limit-2275 +-A INPUT -j limit-2274 +-A INPUT -j limit-2273 +-A INPUT -j limit-2272 +-A INPUT -j limit-2271 +-A INPUT -j limit-2270 +-A INPUT -j limit-2269 +-A INPUT -j limit-2268 +-A INPUT -j limit-2267 +-A INPUT -j limit-2266 +-A INPUT -j limit-2265 +-A INPUT -j limit-2264 +-A INPUT -j limit-2263 +-A INPUT -j limit-2262 +-A INPUT -j limit-2261 +-A INPUT -j limit-2260 +-A INPUT -j limit-2259 +-A INPUT -j limit-2258 +-A INPUT -j limit-2257 +-A INPUT -j limit-2256 +-A INPUT -j limit-2255 +-A INPUT -j limit-2254 +-A INPUT -j limit-2253 +-A INPUT -j limit-2252 +-A INPUT -j limit-2251 +-A INPUT -j limit-2250 +-A INPUT -j limit-2249 +-A INPUT -j limit-2248 +-A INPUT -j limit-2247 +-A INPUT -j limit-2246 +-A INPUT -j limit-2245 +-A INPUT -j limit-2244 +-A INPUT -j limit-2243 +-A INPUT -j limit-2242 +-A INPUT -j limit-2241 +-A INPUT -j limit-2240 +-A INPUT -j limit-2239 +-A INPUT -j limit-2238 +-A INPUT -j limit-2237 +-A INPUT -j limit-2236 +-A INPUT -j limit-2235 +-A INPUT -j limit-2234 +-A INPUT -j limit-2233 +-A INPUT -j limit-2232 +-A INPUT -j limit-2231 +-A INPUT -j limit-2230 +-A INPUT -j limit-2229 +-A INPUT -j limit-2228 +-A INPUT -j limit-2227 +-A INPUT -j limit-2226 +-A INPUT -j limit-2225 +-A INPUT -j limit-2224 +-A INPUT -j limit-2223 +-A INPUT -j limit-2222 +-A INPUT -j limit-2221 +-A INPUT -j limit-2220 +-A INPUT -j limit-2219 +-A INPUT -j limit-2218 +-A INPUT -j limit-2217 +-A INPUT -j limit-2216 +-A INPUT -j limit-2215 +-A INPUT -j limit-2214 +-A INPUT -j limit-2213 +-A INPUT -j limit-2212 +-A INPUT -j limit-2211 +-A INPUT -j limit-2210 +-A INPUT -j limit-2209 +-A INPUT -j limit-2208 +-A INPUT -j limit-2207 +-A INPUT -j limit-2206 +-A INPUT -j limit-2205 +-A INPUT -j limit-2204 +-A INPUT -j limit-2203 +-A INPUT -j limit-2202 +-A INPUT -j limit-2201 +-A INPUT -j limit-2200 +-A INPUT -j limit-2199 +-A INPUT -j limit-2198 +-A INPUT -j limit-2197 +-A INPUT -j limit-2196 +-A INPUT -j limit-2195 +-A INPUT -j limit-2194 +-A INPUT -j limit-2193 +-A INPUT -j limit-2192 +-A INPUT -j limit-2191 +-A INPUT -j limit-2190 +-A INPUT -j limit-2189 +-A INPUT -j limit-2188 +-A INPUT -j limit-2187 +-A INPUT -j limit-2186 +-A INPUT -j limit-2185 +-A INPUT -j limit-2184 +-A INPUT -j limit-2183 +-A INPUT -j limit-2182 +-A INPUT -j limit-2181 +-A INPUT -j limit-2180 +-A INPUT -j limit-2179 +-A INPUT -j limit-2178 +-A INPUT -j limit-2177 +-A INPUT -j limit-2176 +-A INPUT -j limit-2175 +-A INPUT -j limit-2174 +-A INPUT -j limit-2173 +-A INPUT -j limit-2172 +-A INPUT -j limit-2171 +-A INPUT -j limit-2170 +-A INPUT -j limit-2169 +-A INPUT -j limit-2168 +-A INPUT -j limit-2167 +-A INPUT -j limit-2166 +-A INPUT -j limit-2165 +-A INPUT -j limit-2164 +-A INPUT -j limit-2163 +-A INPUT -j limit-2162 +-A INPUT -j limit-2161 +-A INPUT -j limit-2160 +-A INPUT -j limit-2159 +-A INPUT -j limit-2158 +-A INPUT -j limit-2157 +-A INPUT -j limit-2156 +-A INPUT -j limit-2155 +-A INPUT -j limit-2154 +-A INPUT -j limit-2153 +-A INPUT -j limit-2152 +-A INPUT -j limit-2151 +-A INPUT -j limit-2150 +-A INPUT -j limit-2149 +-A INPUT -j limit-2148 +-A INPUT -j limit-2147 +-A INPUT -j limit-2146 +-A INPUT -j limit-2145 +-A INPUT -j limit-2144 +-A INPUT -j limit-2143 +-A INPUT -j limit-2142 +-A INPUT -j limit-2141 +-A INPUT -j limit-2140 +-A INPUT -j limit-2139 +-A INPUT -j limit-2138 +-A INPUT -j limit-2137 +-A INPUT -j limit-2136 +-A INPUT -j limit-2135 +-A INPUT -j limit-2134 +-A INPUT -j limit-2133 +-A INPUT -j limit-2132 +-A INPUT -j limit-2131 +-A INPUT -j limit-2130 +-A INPUT -j limit-2129 +-A INPUT -j limit-2128 +-A INPUT -j limit-2127 +-A INPUT -j limit-2126 +-A INPUT -j limit-2125 +-A INPUT -j limit-2124 +-A INPUT -j limit-2123 +-A INPUT -j limit-2122 +-A INPUT -j limit-2121 +-A INPUT -j limit-2120 +-A INPUT -j limit-2119 +-A INPUT -j limit-2118 +-A INPUT -j limit-2117 +-A INPUT -j limit-2116 +-A INPUT -j limit-2115 +-A INPUT -j limit-2114 +-A INPUT -j limit-2113 +-A INPUT -j limit-2112 +-A INPUT -j limit-2111 +-A INPUT -j limit-2110 +-A INPUT -j limit-2109 +-A INPUT -j limit-2108 +-A INPUT -j limit-2107 +-A INPUT -j limit-2106 +-A INPUT -j limit-2105 +-A INPUT -j limit-2104 +-A INPUT -j limit-2103 +-A INPUT -j limit-2102 +-A INPUT -j limit-2101 +-A INPUT -j limit-2100 +-A INPUT -j limit-2099 +-A INPUT -j limit-2098 +-A INPUT -j limit-2097 +-A INPUT -j limit-2096 +-A INPUT -j limit-2095 +-A INPUT -j limit-2094 +-A INPUT -j limit-2093 +-A INPUT -j limit-2092 +-A INPUT -j limit-2091 +-A INPUT -j limit-2090 +-A INPUT -j limit-2089 +-A INPUT -j limit-2088 +-A INPUT -j limit-2087 +-A INPUT -j limit-2086 +-A INPUT -j limit-2085 +-A INPUT -j limit-2084 +-A INPUT -j limit-2083 +-A INPUT -j limit-2082 +-A INPUT -j limit-2081 +-A INPUT -j limit-2080 +-A INPUT -j limit-2079 +-A INPUT -j limit-2078 +-A INPUT -j limit-2077 +-A INPUT -j limit-2076 +-A INPUT -j limit-2075 +-A INPUT -j limit-2074 +-A INPUT -j limit-2073 +-A INPUT -j limit-2072 +-A INPUT -j limit-2071 +-A INPUT -j limit-2070 +-A INPUT -j limit-2069 +-A INPUT -j limit-2068 +-A INPUT -j limit-2067 +-A INPUT -j limit-2066 +-A INPUT -j limit-2065 +-A INPUT -j limit-2064 +-A INPUT -j limit-2063 +-A INPUT -j limit-2062 +-A INPUT -j limit-2061 +-A INPUT -j limit-2060 +-A INPUT -j limit-2059 +-A INPUT -j limit-2058 +-A INPUT -j limit-2057 +-A INPUT -j limit-2056 +-A INPUT -j limit-2055 +-A INPUT -j limit-2054 +-A INPUT -j limit-2053 +-A INPUT -j limit-2052 +-A INPUT -j limit-2051 +-A INPUT -j limit-2050 +-A INPUT -j limit-2049 +-A INPUT -j limit-2048 +-A INPUT -j limit-2047 +-A INPUT -j limit-2046 +-A INPUT -j limit-2045 +-A INPUT -j limit-2044 +-A INPUT -j limit-2043 +-A INPUT -j limit-2042 +-A INPUT -j limit-2041 +-A INPUT -j limit-2040 +-A INPUT -j limit-2039 +-A INPUT -j limit-2038 +-A INPUT -j limit-2037 +-A INPUT -j limit-2036 +-A INPUT -j limit-2035 +-A INPUT -j limit-2034 +-A INPUT -j limit-2033 +-A INPUT -j limit-2032 +-A INPUT -j limit-2031 +-A INPUT -j limit-2030 +-A INPUT -j limit-2029 +-A INPUT -j limit-2028 +-A INPUT -j limit-2027 +-A INPUT -j limit-2026 +-A INPUT -j limit-2025 +-A INPUT -j limit-2024 +-A INPUT -j limit-2023 +-A INPUT -j limit-2022 +-A INPUT -j limit-2021 +-A INPUT -j limit-2020 +-A INPUT -j limit-2019 +-A INPUT -j limit-2018 +-A INPUT -j limit-2017 +-A INPUT -j limit-2016 +-A INPUT -j limit-2015 +-A INPUT -j limit-2014 +-A INPUT -j limit-2013 +-A INPUT -j limit-2012 +-A INPUT -j limit-2011 +-A INPUT -j limit-2010 +-A INPUT -j limit-2009 +-A INPUT -j limit-2008 +-A INPUT -j limit-2007 +-A INPUT -j limit-2006 +-A INPUT -j limit-2005 +-A INPUT -j limit-2004 +-A INPUT -j limit-2003 +-A INPUT -j limit-2002 +-A INPUT -j limit-2001 +-A INPUT -j limit-2000 +-A INPUT -j limit-1999 +-A INPUT -j limit-1998 +-A INPUT -j limit-1997 +-A INPUT -j limit-1996 +-A INPUT -j limit-1995 +-A INPUT -j limit-1994 +-A INPUT -j limit-1993 +-A INPUT -j limit-1992 +-A INPUT -j limit-1991 +-A INPUT -j limit-1990 +-A INPUT -j limit-1989 +-A INPUT -j limit-1988 +-A INPUT -j limit-1987 +-A INPUT -j limit-1986 +-A INPUT -j limit-1985 +-A INPUT -j limit-1984 +-A INPUT -j limit-1983 +-A INPUT -j limit-1982 +-A INPUT -j limit-1981 +-A INPUT -j limit-1980 +-A INPUT -j limit-1979 +-A INPUT -j limit-1978 +-A INPUT -j limit-1977 +-A INPUT -j limit-1976 +-A INPUT -j limit-1975 +-A INPUT -j limit-1974 +-A INPUT -j limit-1973 +-A INPUT -j limit-1972 +-A INPUT -j limit-1971 +-A INPUT -j limit-1970 +-A INPUT -j limit-1969 +-A INPUT -j limit-1968 +-A INPUT -j limit-1967 +-A INPUT -j limit-1966 +-A INPUT -j limit-1965 +-A INPUT -j limit-1964 +-A INPUT -j limit-1963 +-A INPUT -j limit-1962 +-A INPUT -j limit-1961 +-A INPUT -j limit-1960 +-A INPUT -j limit-1959 +-A INPUT -j limit-1958 +-A INPUT -j limit-1957 +-A INPUT -j limit-1956 +-A INPUT -j limit-1955 +-A INPUT -j limit-1954 +-A INPUT -j limit-1953 +-A INPUT -j limit-1952 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT -A INPUT -j logaccept-final-0 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-1 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-2 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-3 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-4 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-5 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-6 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-7 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-8 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-9 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-10 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-11 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-12 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-13 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-14 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-15 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-16 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-17 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-18 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-19 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-20 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-21 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-22 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-23 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-24 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-25 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-26 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-27 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-28 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-29 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-30 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-31 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-32 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-33 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-34 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-35 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-36 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-37 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-38 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-39 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-40 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-41 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-42 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-43 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-44 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-45 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-46 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-47 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-48 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-49 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-50 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-51 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-52 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-53 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-54 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-55 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-56 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-57 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-58 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-59 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-60 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-61 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-62 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-63 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-64 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-65 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-66 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-67 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-68 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-69 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-70 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-71 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-72 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-73 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-74 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-75 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-76 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-77 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-78 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-79 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-80 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-81 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-82 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-83 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-84 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-85 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-86 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-87 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-88 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-89 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-90 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-91 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-92 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-93 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-94 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-95 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-96 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-97 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-98 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-99 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-100 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-101 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-102 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-103 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-104 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-105 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-106 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-107 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-108 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-109 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-110 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-111 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-112 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-113 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-114 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-115 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-116 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-117 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-118 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-119 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-120 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-121 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-122 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-123 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-124 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-125 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-126 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-127 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-128 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-129 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-130 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-131 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-132 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-133 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-134 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-135 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-136 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-137 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-138 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-139 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-140 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-141 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-142 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-143 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-144 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-145 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-146 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-147 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-148 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-149 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-150 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-151 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-152 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-153 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-154 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-155 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-156 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-157 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-158 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-159 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-160 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-161 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-162 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-163 --A INPUT -i eth0 -j limit-1887 --A INPUT -i eth0 -j limit-1888 --A INPUT -i eth0 -j limit-1889 --A INPUT -i eth0 -j limit-1890 --A INPUT -i eth0 -j limit-1891 --A INPUT -i eth0 -j limit-1892 --A INPUT -i eth0 -j limit-1893 --A INPUT -i eth0 -j limit-1894 --A INPUT -i eth0 -j limit-1895 --A INPUT -i eth0 -j limit-1896 --A INPUT -i eth0 -j limit-1897 --A INPUT -i eth0 -j limit-1898 --A INPUT -i eth0 -j limit-1899 --A INPUT -i eth0 -j limit-1900 --A INPUT -i eth0 -j limit-1901 --A INPUT -i eth0 -j limit-1902 --A INPUT -i eth0 -j limit-1903 --A INPUT -i eth0 -j limit-1904 --A INPUT -i eth0 -j limit-1905 --A INPUT -i eth0 -j limit-1906 --A INPUT -i eth0 -j limit-1907 --A INPUT -i eth0 -j limit-1908 --A INPUT -i eth0 -j limit-1909 --A INPUT -i eth0 -j limit-1910 --A INPUT -i eth0 -j limit-1911 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-164 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-165 +-A INPUT -j logaccept-final-166 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-167 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-168 +-A INPUT -j logaccept-final-169 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-170 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-171 +-A INPUT -j logaccept-final-172 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-173 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-174 +-A INPUT -j logaccept-final-175 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-176 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-177 +-A INPUT -j logaccept-final-178 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-179 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-180 +-A INPUT -j logaccept-final-181 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-182 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-183 +-A INPUT -j logaccept-final-184 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-185 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-186 +-A INPUT -j logaccept-final-187 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-188 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-189 +-A INPUT -j logaccept-final-190 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-191 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-192 +-A INPUT -j logaccept-final-193 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-194 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-195 +-A INPUT -j logaccept-final-196 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-197 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-198 +-A INPUT -j logaccept-final-199 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-200 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-201 +-A INPUT -j logaccept-final-202 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-203 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-204 +-A INPUT -j logaccept-final-205 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-206 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-207 +-A INPUT -j logaccept-final-208 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-209 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-210 +-A INPUT -j logaccept-final-211 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-212 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-213 +-A INPUT -j logaccept-final-214 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-215 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-216 +-A INPUT -j logaccept-final-217 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-218 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-219 +-A INPUT -j logaccept-final-220 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-221 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-222 +-A INPUT -j logaccept-final-223 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-224 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-225 +-A INPUT -j logaccept-final-226 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-227 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-228 +-A INPUT -j logaccept-final-229 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-230 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-231 +-A INPUT -j logaccept-final-232 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-233 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-234 +-A INPUT -j logaccept-final-235 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-236 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-237 +-A INPUT -j logaccept-final-238 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-239 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-240 +-A INPUT -j logaccept-final-241 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-242 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-243 +-A INPUT -j logaccept-final-244 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-245 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-246 +-A INPUT -j logaccept-final-247 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-248 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-249 +-A INPUT -j logaccept-final-250 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-251 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-252 +-A INPUT -j logaccept-final-253 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-254 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-255 +-A INPUT -j logaccept-final-256 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-257 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-258 +-A INPUT -j logaccept-final-259 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-260 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-261 +-A INPUT -j logaccept-final-262 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-263 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-264 +-A INPUT -j logaccept-final-265 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-266 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-267 +-A INPUT -j logaccept-final-268 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-269 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-270 +-A INPUT -j logaccept-final-271 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-272 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-273 +-A INPUT -j logaccept-final-274 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-275 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-276 +-A INPUT -j logaccept-final-277 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-278 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-279 +-A INPUT -j logaccept-final-280 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-281 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-282 +-A INPUT -j logaccept-final-283 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-284 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-285 +-A INPUT -j logaccept-final-286 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-287 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-288 +-A INPUT -j logaccept-final-289 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-290 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-291 +-A INPUT -j logaccept-final-292 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-293 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-294 +-A INPUT -j logaccept-final-295 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-296 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-297 +-A INPUT -j logaccept-final-298 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-299 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-300 +-A INPUT -j logaccept-final-301 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-302 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-303 +-A INPUT -j logaccept-final-304 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-305 +-A INPUT -i eth0 -j limit-2928 +-A INPUT -i eth0 -j limit-2929 +-A INPUT -i eth0 -j limit-2930 +-A INPUT -i eth0 -j limit-2931 +-A INPUT -i eth0 -j limit-2932 +-A INPUT -i eth0 -j limit-2933 +-A INPUT -i eth0 -j limit-2934 +-A INPUT -i eth0 -j limit-2935 +-A INPUT -i eth0 -j limit-2936 +-A INPUT -i eth0 -j limit-2937 +-A INPUT -i eth0 -j limit-2938 +-A INPUT -i eth0 -j limit-2939 +-A INPUT -i eth0 -j limit-2940 +-A INPUT -i eth0 -j limit-2941 +-A INPUT -i eth0 -j limit-2942 +-A INPUT -i eth0 -j limit-2943 +-A INPUT -i eth0 -j limit-2944 +-A INPUT -i eth0 -j limit-2945 +-A INPUT -i eth0 -j limit-2946 +-A INPUT -i eth0 -j limit-2947 +-A INPUT -i eth0 -j limit-2948 +-A INPUT -i eth0 -j limit-2949 +-A INPUT -i eth0 -j limit-2950 +-A INPUT -i eth0 -j limit-2951 +-A INPUT -i eth0 -j limit-2952 +-A INPUT -i eth0 -j limit-2953 +-A INPUT -i eth0 -j limit-2954 +-A INPUT -i eth0 -j limit-2955 +-A INPUT -i eth0 -j limit-2956 +-A INPUT -i eth0 -j limit-2957 +-A INPUT -i eth0 -j limit-2958 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1913 --A INPUT -i eth0 -j limit-1914 --A INPUT -i eth0 -j limit-1915 +-A INPUT -i eth0 -j limit-2960 +-A INPUT -i eth0 -j limit-2961 +-A INPUT -i eth0 -j limit-2962 +-A INPUT -i eth0 -j limit-2963 +-A INPUT -i eth0 -j limit-2964 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1917 --A INPUT -i eth0 -j limit-1918 --A INPUT -i eth0 -j limit-1919 --A INPUT -i eth0 -j limit-1920 --A INPUT -i eth0 -j limit-1921 --A INPUT -i eth0 -j limit-1922 --A INPUT -i eth0 -j limit-1923 --A INPUT -i eth0 -j limit-1924 --A INPUT -i eth0 -j limit-1925 --A INPUT -i eth0 -j limit-1926 --A INPUT -i eth0 -j limit-1927 +-A INPUT -i eth0 -j limit-2966 +-A INPUT -i eth0 -j limit-2967 +-A INPUT -i eth0 -j limit-2968 +-A INPUT -i eth0 -j limit-2969 +-A INPUT -i eth0 -j limit-2970 +-A INPUT -i eth0 -j limit-2971 +-A INPUT -i eth0 -j limit-2972 +-A INPUT -i eth0 -j limit-2973 +-A INPUT -i eth0 -j limit-2974 +-A INPUT -i eth0 -j limit-2975 +-A INPUT -i eth0 -j limit-2976 +-A INPUT -i eth0 -j limit-2977 +-A INPUT -i eth0 -j limit-2978 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1929 --A INPUT -i eth0 -j limit-1930 --A INPUT -i eth0 -j limit-1931 +-A INPUT -i eth0 -j limit-2980 +-A INPUT -i eth0 -j limit-2981 +-A INPUT -i eth0 -j limit-2982 +-A INPUT -i eth0 -j limit-2983 +-A INPUT -i eth0 -j limit-2984 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1933 --A INPUT -i eth0 -j limit-1934 --A INPUT -i eth0 -j limit-1935 --A INPUT -i eth0 -j limit-1936 --A INPUT -i eth0 -j limit-1937 --A INPUT -i eth0 -j limit-1938 --A INPUT -i eth0 -j limit-1939 --A INPUT -i eth0 -j limit-1940 --A INPUT -i eth0 -j limit-1941 --A INPUT -i eth0 -j limit-1942 --A INPUT -i eth0 -j limit-1943 +-A INPUT -i eth0 -j limit-2986 +-A INPUT -i eth0 -j limit-2987 +-A INPUT -i eth0 -j limit-2988 +-A INPUT -i eth0 -j limit-2989 +-A INPUT -i eth0 -j limit-2990 +-A INPUT -i eth0 -j limit-2991 +-A INPUT -i eth0 -j limit-2992 +-A INPUT -i eth0 -j limit-2993 +-A INPUT -i eth0 -j limit-2994 +-A INPUT -i eth0 -j limit-2995 +-A INPUT -i eth0 -j limit-2996 +-A INPUT -i eth0 -j limit-2997 +-A INPUT -i eth0 -j limit-2998 -A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1945 --A INPUT -i eth0 -j limit-1946 --A INPUT -i eth0 -j limit-1947 +-A INPUT -i eth0 -j limit-3000 +-A INPUT -i eth0 -j limit-3001 +-A INPUT -i eth0 -j limit-3002 +-A INPUT -i eth0 -j limit-3003 +-A INPUT -i eth0 -j limit-3004 -A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1949 --A INPUT -i eth0 -j limit-1950 --A INPUT -i eth0 -j limit-1951 --A INPUT -i eth0 -j limit-1952 --A INPUT -i eth0 -j limit-1953 --A INPUT -i eth0 -j limit-1954 --A INPUT -i eth0 -j limit-1955 --A INPUT -i eth0 -j limit-1956 --A INPUT -i eth0 -j limit-1957 --A INPUT -i eth0 -j limit-1958 --A INPUT -i eth0 -j limit-1959 +-A INPUT -i eth0 -j limit-3006 +-A INPUT -i eth0 -j limit-3007 +-A INPUT -i eth0 -j limit-3008 +-A INPUT -i eth0 -j limit-3009 +-A INPUT -i eth0 -j limit-3010 +-A INPUT -i eth0 -j limit-3011 +-A INPUT -i eth0 -j limit-3012 +-A INPUT -i eth0 -j limit-3013 +-A INPUT -i eth0 -j limit-3014 +-A INPUT -i eth0 -j limit-3015 +-A INPUT -i eth0 -j limit-3016 +-A INPUT -i eth0 -j limit-3017 +-A INPUT -i eth0 -j limit-3018 -A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1961 --A INPUT -i eth0 -j limit-1962 --A INPUT -i eth0 -j limit-1963 +-A INPUT -i eth0 -j limit-3020 +-A INPUT -i eth0 -j limit-3021 +-A INPUT -i eth0 -j limit-3022 +-A INPUT -i eth0 -j limit-3023 +-A INPUT -i eth0 -j limit-3024 -A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1965 --A INPUT -i eth0 -j limit-1966 --A INPUT -i eth0 -j limit-1967 --A INPUT -i eth0 -j limit-1968 --A INPUT -i eth0 -j limit-1969 --A INPUT -i eth0 -j limit-1970 --A INPUT -i eth0 -j limit-1971 --A INPUT -i eth0 -j limit-1972 --A INPUT -i eth0 -j limit-1973 --A INPUT -i eth0 -j limit-1974 --A INPUT -i eth0 -j limit-1975 --A INPUT -i eth0 -j limit-1976 --A INPUT -i eth0 -j limit-1977 --A INPUT -i eth0 -j limit-1978 --A INPUT -i eth0 -j limit-1979 --A INPUT -i eth0 -j limit-1980 --A INPUT -i eth0 -j limit-1981 --A INPUT -i eth0 -j limit-1982 --A INPUT -i eth0 -j limit-1983 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-913 --A INPUT -i eth0 -j limit-1985 --A INPUT -i eth0 -j limit-1986 --A INPUT -i eth0 -j limit-1987 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-917 --A INPUT -i eth0 -j limit-1989 --A INPUT -i eth0 -j limit-1990 --A INPUT -i eth0 -j limit-1991 --A INPUT -i eth0 -j limit-1992 --A INPUT -i eth0 -j limit-1993 --A INPUT -i eth0 -j limit-1994 --A INPUT -i eth0 -j limit-1995 --A INPUT -i eth0 -j limit-1996 --A INPUT -i eth0 -j limit-1997 --A INPUT -i eth0 -j limit-1998 --A INPUT -i eth0 -j limit-1999 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-929 --A INPUT -i eth0 -j limit-2001 --A INPUT -i eth0 -j limit-2002 --A INPUT -i eth0 -j limit-2003 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-933 --A INPUT -i eth0 -j limit-2005 --A INPUT -i eth0 -j limit-2006 --A INPUT -i eth0 -j limit-2007 --A INPUT -i eth0 -j limit-2008 --A INPUT -i eth0 -j limit-2009 --A INPUT -i eth0 -j limit-2010 --A INPUT -i eth0 -j limit-2011 --A INPUT -i eth0 -j limit-2012 --A INPUT -i eth0 -j limit-2013 --A INPUT -i eth0 -j limit-2014 --A INPUT -i eth0 -j limit-2015 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-945 --A INPUT -i eth0 -j limit-2017 --A INPUT -i eth0 -j limit-2018 --A INPUT -i eth0 -j limit-2019 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-949 --A INPUT -i eth0 -j limit-2021 --A INPUT -i eth0 -j limit-2022 --A INPUT -i eth0 -j limit-2023 --A INPUT -i eth0 -j limit-2024 --A INPUT -i eth0 -j limit-2025 --A INPUT -i eth0 -j limit-2026 --A INPUT -i eth0 -j limit-2027 --A INPUT -i eth0 -j limit-2028 --A INPUT -i eth0 -j limit-2029 --A INPUT -i eth0 -j limit-2030 --A INPUT -i eth0 -j limit-2031 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-961 --A INPUT -i eth0 -j limit-2033 --A INPUT -i eth0 -j limit-2034 --A INPUT -i eth0 -j limit-2035 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-965 --A INPUT -i eth0 -j limit-2037 --A INPUT -i eth0 -j limit-2038 --A INPUT -i eth0 -j limit-2039 --A INPUT -i eth0 -j limit-2040 --A INPUT -i eth0 -j limit-2041 --A INPUT -i eth0 -j limit-2042 --A INPUT -i eth0 -j limit-2043 --A INPUT -i eth0 -j limit-2044 --A INPUT -i eth0 -j limit-2045 --A INPUT -i eth0 -j limit-2046 --A INPUT -i eth0 -j limit-2047 --A INPUT -i eth0 -j limit-2048 --A INPUT -i eth0 -j limit-2049 --A INPUT -i eth0 -j limit-2050 --A INPUT -i eth0 -j limit-2051 --A INPUT -i eth0 -j limit-2052 --A INPUT -i eth0 -j limit-2053 --A INPUT -i eth0 -j limit-2054 --A INPUT -i eth0 -j limit-2055 +-A INPUT -i eth0 -j limit-3026 +-A INPUT -i eth0 -j limit-3027 +-A INPUT -i eth0 -j limit-3028 +-A INPUT -i eth0 -j limit-3029 +-A INPUT -i eth0 -j limit-3030 +-A INPUT -i eth0 -j limit-3031 +-A INPUT -i eth0 -j limit-3032 +-A INPUT -i eth0 -j limit-3033 +-A INPUT -i eth0 -j limit-3034 +-A INPUT -i eth0 -j limit-3035 +-A INPUT -i eth0 -j limit-3036 +-A INPUT -i eth0 -j limit-3037 +-A INPUT -i eth0 -j limit-3038 +-A INPUT -i eth0 -j limit-3039 +-A INPUT -i eth0 -j limit-3040 +-A INPUT -i eth0 -j limit-3041 +-A INPUT -i eth0 -j limit-3042 +-A INPUT -i eth0 -j limit-3043 +-A INPUT -i eth0 -j limit-3044 +-A INPUT -i eth0 -j limit-3045 +-A INPUT -i eth0 -j limit-3046 +-A INPUT -i eth0 -j limit-3047 +-A INPUT -i eth0 -j limit-3048 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 +-A INPUT -i eth0 -j limit-3050 +-A INPUT -i eth0 -j limit-3051 +-A INPUT -i eth0 -j limit-3052 +-A INPUT -i eth0 -j limit-3053 +-A INPUT -i eth0 -j limit-3054 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 +-A INPUT -i eth0 -j limit-3056 +-A INPUT -i eth0 -j limit-3057 +-A INPUT -i eth0 -j limit-3058 +-A INPUT -i eth0 -j limit-3059 +-A INPUT -i eth0 -j limit-3060 +-A INPUT -i eth0 -j limit-3061 +-A INPUT -i eth0 -j limit-3062 +-A INPUT -i eth0 -j limit-3063 +-A INPUT -i eth0 -j limit-3064 +-A INPUT -i eth0 -j limit-3065 +-A INPUT -i eth0 -j limit-3066 +-A INPUT -i eth0 -j limit-3067 +-A INPUT -i eth0 -j limit-3068 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 +-A INPUT -i eth0 -j limit-3070 +-A INPUT -i eth0 -j limit-3071 +-A INPUT -i eth0 -j limit-3072 +-A INPUT -i eth0 -j limit-3073 +-A INPUT -i eth0 -j limit-3074 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 +-A INPUT -i eth0 -j limit-3076 +-A INPUT -i eth0 -j limit-3077 +-A INPUT -i eth0 -j limit-3078 +-A INPUT -i eth0 -j limit-3079 +-A INPUT -i eth0 -j limit-3080 +-A INPUT -i eth0 -j limit-3081 +-A INPUT -i eth0 -j limit-3082 +-A INPUT -i eth0 -j limit-3083 +-A INPUT -i eth0 -j limit-3084 +-A INPUT -i eth0 -j limit-3085 +-A INPUT -i eth0 -j limit-3086 +-A INPUT -i eth0 -j limit-3087 +-A INPUT -i eth0 -j limit-3088 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 +-A INPUT -i eth0 -j limit-3090 +-A INPUT -i eth0 -j limit-3091 +-A INPUT -i eth0 -j limit-3092 +-A INPUT -i eth0 -j limit-3093 +-A INPUT -i eth0 -j limit-3094 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 +-A INPUT -i eth0 -j limit-3096 +-A INPUT -i eth0 -j limit-3097 +-A INPUT -i eth0 -j limit-3098 +-A INPUT -i eth0 -j limit-3099 +-A INPUT -i eth0 -j limit-3100 +-A INPUT -i eth0 -j limit-3101 +-A INPUT -i eth0 -j limit-3102 +-A INPUT -i eth0 -j limit-3103 +-A INPUT -i eth0 -j limit-3104 +-A INPUT -i eth0 -j limit-3105 +-A INPUT -i eth0 -j limit-3106 +-A INPUT -i eth0 -j limit-3107 +-A INPUT -i eth0 -j limit-3108 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 +-A INPUT -i eth0 -j limit-3110 +-A INPUT -i eth0 -j limit-3111 +-A INPUT -i eth0 -j limit-3112 +-A INPUT -i eth0 -j limit-3113 +-A INPUT -i eth0 -j limit-3114 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 +-A INPUT -i eth0 -j limit-3116 +-A INPUT -i eth0 -j limit-3117 +-A INPUT -i eth0 -j limit-3118 +-A INPUT -i eth0 -j limit-3119 +-A INPUT -i eth0 -j limit-3120 +-A INPUT -i eth0 -j limit-3121 +-A INPUT -i eth0 -j limit-3122 +-A INPUT -i eth0 -j limit-3123 +-A INPUT -i eth0 -j limit-3124 +-A INPUT -i eth0 -j limit-3125 +-A INPUT -i eth0 -j limit-3126 +-A INPUT -i eth0 -j limit-3127 +-A INPUT -i eth0 -j limit-3128 +-A INPUT -i eth0 -j limit-3129 +-A INPUT -i eth0 -j limit-3130 +-A INPUT -i eth0 -j limit-3131 +-A INPUT -i eth0 -j limit-3132 +-A INPUT -i eth0 -j limit-3133 +-A INPUT -i eth0 -j limit-3134 +-A INPUT -i eth0 -j limit-3135 +-A INPUT -i eth0 -j limit-3136 +-A INPUT -i eth0 -j limit-3137 +-A INPUT -i eth0 -j limit-3138 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 +-A INPUT -i eth0 -j limit-3140 +-A INPUT -i eth0 -j limit-3141 +-A INPUT -i eth0 -j limit-3142 +-A INPUT -i eth0 -j limit-3143 +-A INPUT -i eth0 -j limit-3144 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 +-A INPUT -i eth0 -j limit-3146 +-A INPUT -i eth0 -j limit-3147 +-A INPUT -i eth0 -j limit-3148 +-A INPUT -i eth0 -j limit-3149 +-A INPUT -i eth0 -j limit-3150 +-A INPUT -i eth0 -j limit-3151 +-A INPUT -i eth0 -j limit-3152 +-A INPUT -i eth0 -j limit-3153 +-A INPUT -i eth0 -j limit-3154 +-A INPUT -i eth0 -j limit-3155 +-A INPUT -i eth0 -j limit-3156 +-A INPUT -i eth0 -j limit-3157 +-A INPUT -i eth0 -j limit-3158 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 +-A INPUT -i eth0 -j limit-3160 +-A INPUT -i eth0 -j limit-3161 +-A INPUT -i eth0 -j limit-3162 +-A INPUT -i eth0 -j limit-3163 +-A INPUT -i eth0 -j limit-3164 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 +-A INPUT -i eth0 -j limit-3166 +-A INPUT -i eth0 -j limit-3167 +-A INPUT -i eth0 -j limit-3168 +-A INPUT -i eth0 -j limit-3169 +-A INPUT -i eth0 -j limit-3170 +-A INPUT -i eth0 -j limit-3171 +-A INPUT -i eth0 -j limit-3172 +-A INPUT -i eth0 -j limit-3173 +-A INPUT -i eth0 -j limit-3174 +-A INPUT -i eth0 -j limit-3175 +-A INPUT -i eth0 -j limit-3176 +-A INPUT -i eth0 -j limit-3177 +-A INPUT -i eth0 -j limit-3178 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 +-A INPUT -i eth0 -j limit-3180 +-A INPUT -i eth0 -j limit-3181 +-A INPUT -i eth0 -j limit-3182 +-A INPUT -i eth0 -j limit-3183 +-A INPUT -i eth0 -j limit-3184 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 +-A INPUT -i eth0 -j limit-3186 +-A INPUT -i eth0 -j limit-3187 +-A INPUT -i eth0 -j limit-3188 +-A INPUT -i eth0 -j limit-3189 +-A INPUT -i eth0 -j limit-3190 +-A INPUT -i eth0 -j limit-3191 +-A INPUT -i eth0 -j limit-3192 +-A INPUT -i eth0 -j limit-3193 +-A INPUT -i eth0 -j limit-3194 +-A INPUT -i eth0 -j limit-3195 +-A INPUT -i eth0 -j limit-3196 +-A INPUT -i eth0 -j limit-3197 +-A INPUT -i eth0 -j limit-3198 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 +-A INPUT -i eth0 -j limit-3200 +-A INPUT -i eth0 -j limit-3201 +-A INPUT -i eth0 -j limit-3202 +-A INPUT -i eth0 -j limit-3203 +-A INPUT -i eth0 -j limit-3204 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 +-A INPUT -i eth0 -j limit-3206 +-A INPUT -i eth0 -j limit-3207 +-A INPUT -i eth0 -j limit-3208 +-A INPUT -i eth0 -j limit-3209 +-A INPUT -i eth0 -j limit-3210 +-A INPUT -i eth0 -j limit-3211 +-A INPUT -i eth0 -j limit-3212 +-A INPUT -i eth0 -j limit-3213 +-A INPUT -i eth0 -j limit-3214 +-A INPUT -i eth0 -j limit-3215 +-A INPUT -i eth0 -j limit-3216 +-A INPUT -i eth0 -j limit-3217 +-A INPUT -i eth0 -j limit-3218 +-A INPUT -i eth0 -j limit-3219 +-A INPUT -i eth0 -j limit-3220 +-A INPUT -i eth0 -j limit-3221 +-A INPUT -i eth0 -j limit-3222 +-A INPUT -i eth0 -j limit-3223 +-A INPUT -i eth0 -j limit-3224 +-A INPUT -i eth0 -j limit-3225 +-A INPUT -i eth0 -j limit-3226 +-A INPUT -i eth0 -j limit-3227 +-A INPUT -i eth0 -j limit-3228 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2057 --A INPUT -i eth0 -j limit-2058 --A INPUT -i eth0 -j limit-2059 +-A INPUT -i eth0 -j limit-3230 +-A INPUT -i eth0 -j limit-3231 +-A INPUT -i eth0 -j limit-3232 +-A INPUT -i eth0 -j limit-3233 +-A INPUT -i eth0 -j limit-3234 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2061 --A INPUT -i eth0 -j limit-2062 --A INPUT -i eth0 -j limit-2063 --A INPUT -i eth0 -j limit-2064 --A INPUT -i eth0 -j limit-2065 --A INPUT -i eth0 -j limit-2066 --A INPUT -i eth0 -j limit-2067 --A INPUT -i eth0 -j limit-2068 --A INPUT -i eth0 -j limit-2069 --A INPUT -i eth0 -j limit-2070 --A INPUT -i eth0 -j limit-2071 +-A INPUT -i eth0 -j limit-3236 +-A INPUT -i eth0 -j limit-3237 +-A INPUT -i eth0 -j limit-3238 +-A INPUT -i eth0 -j limit-3239 +-A INPUT -i eth0 -j limit-3240 +-A INPUT -i eth0 -j limit-3241 +-A INPUT -i eth0 -j limit-3242 +-A INPUT -i eth0 -j limit-3243 +-A INPUT -i eth0 -j limit-3244 +-A INPUT -i eth0 -j limit-3245 +-A INPUT -i eth0 -j limit-3246 +-A INPUT -i eth0 -j limit-3247 +-A INPUT -i eth0 -j limit-3248 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2073 --A INPUT -i eth0 -j limit-2074 --A INPUT -i eth0 -j limit-2075 +-A INPUT -i eth0 -j limit-3250 +-A INPUT -i eth0 -j limit-3251 +-A INPUT -i eth0 -j limit-3252 +-A INPUT -i eth0 -j limit-3253 +-A INPUT -i eth0 -j limit-3254 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2077 --A INPUT -i eth0 -j limit-2078 --A INPUT -i eth0 -j limit-2079 --A INPUT -i eth0 -j limit-2080 --A INPUT -i eth0 -j limit-2081 --A INPUT -i eth0 -j limit-2082 --A INPUT -i eth0 -j limit-2083 --A INPUT -i eth0 -j limit-2084 --A INPUT -i eth0 -j limit-2085 --A INPUT -i eth0 -j limit-2086 --A INPUT -i eth0 -j limit-2087 +-A INPUT -i eth0 -j limit-3256 +-A INPUT -i eth0 -j limit-3257 +-A INPUT -i eth0 -j limit-3258 +-A INPUT -i eth0 -j limit-3259 +-A INPUT -i eth0 -j limit-3260 +-A INPUT -i eth0 -j limit-3261 +-A INPUT -i eth0 -j limit-3262 +-A INPUT -i eth0 -j limit-3263 +-A INPUT -i eth0 -j limit-3264 +-A INPUT -i eth0 -j limit-3265 +-A INPUT -i eth0 -j limit-3266 +-A INPUT -i eth0 -j limit-3267 +-A INPUT -i eth0 -j limit-3268 -A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2089 --A INPUT -i eth0 -j limit-2090 --A INPUT -i eth0 -j limit-2091 +-A INPUT -i eth0 -j limit-3270 +-A INPUT -i eth0 -j limit-3271 +-A INPUT -i eth0 -j limit-3272 +-A INPUT -i eth0 -j limit-3273 +-A INPUT -i eth0 -j limit-3274 -A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2093 --A INPUT -i eth0 -j limit-2094 --A INPUT -i eth0 -j limit-2095 --A INPUT -i eth0 -j limit-2096 --A INPUT -i eth0 -j limit-2097 --A INPUT -i eth0 -j limit-2098 --A INPUT -i eth0 -j limit-2099 --A INPUT -i eth0 -j limit-2100 --A INPUT -i eth0 -j limit-2101 --A INPUT -i eth0 -j limit-2102 --A INPUT -i eth0 -j limit-2103 +-A INPUT -i eth0 -j limit-3276 +-A INPUT -i eth0 -j limit-3277 +-A INPUT -i eth0 -j limit-3278 +-A INPUT -i eth0 -j limit-3279 +-A INPUT -i eth0 -j limit-3280 +-A INPUT -i eth0 -j limit-3281 +-A INPUT -i eth0 -j limit-3282 +-A INPUT -i eth0 -j limit-3283 +-A INPUT -i eth0 -j limit-3284 +-A INPUT -i eth0 -j limit-3285 +-A INPUT -i eth0 -j limit-3286 +-A INPUT -i eth0 -j limit-3287 +-A INPUT -i eth0 -j limit-3288 -A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2105 --A INPUT -i eth0 -j limit-2106 --A INPUT -i eth0 -j limit-2107 +-A INPUT -i eth0 -j limit-3290 +-A INPUT -i eth0 -j limit-3291 +-A INPUT -i eth0 -j limit-3292 +-A INPUT -i eth0 -j limit-3293 +-A INPUT -i eth0 -j limit-3294 -A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2109 --A INPUT -i eth0 -j limit-2110 --A INPUT -i eth0 -j limit-2111 --A INPUT -i eth0 -j limit-2112 --A INPUT -i eth0 -j limit-2113 --A INPUT -i eth0 -j limit-2114 --A INPUT -i eth0 -j limit-2115 --A INPUT -i eth0 -j limit-2116 --A INPUT -i eth0 -j limit-2117 --A INPUT -i eth0 -j limit-2118 --A INPUT -i eth0 -j limit-2119 --A INPUT -i eth0 -j limit-2120 --A INPUT -i eth0 -j limit-2121 --A INPUT -i eth0 -j limit-2122 --A INPUT -i eth0 -j limit-2123 --A INPUT -i eth0 -j limit-2124 --A INPUT -i eth0 -j limit-2125 --A INPUT -i eth0 -j limit-2126 --A INPUT -i eth0 -j limit-2127 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-985 --A INPUT -i eth0 -j limit-2129 --A INPUT -i eth0 -j limit-2130 --A INPUT -i eth0 -j limit-2131 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-989 --A INPUT -i eth0 -j limit-2133 --A INPUT -i eth0 -j limit-2134 --A INPUT -i eth0 -j limit-2135 --A INPUT -i eth0 -j limit-2136 --A INPUT -i eth0 -j limit-2137 --A INPUT -i eth0 -j limit-2138 --A INPUT -i eth0 -j limit-2139 --A INPUT -i eth0 -j limit-2140 --A INPUT -i eth0 -j limit-2141 --A INPUT -i eth0 -j limit-2142 --A INPUT -i eth0 -j limit-2143 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1001 --A INPUT -i eth0 -j limit-2145 --A INPUT -i eth0 -j limit-2146 --A INPUT -i eth0 -j limit-2147 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1005 --A INPUT -i eth0 -j limit-2149 --A INPUT -i eth0 -j limit-2150 --A INPUT -i eth0 -j limit-2151 --A INPUT -i eth0 -j limit-2152 --A INPUT -i eth0 -j limit-2153 --A INPUT -i eth0 -j limit-2154 --A INPUT -i eth0 -j limit-2155 --A INPUT -i eth0 -j limit-2156 --A INPUT -i eth0 -j limit-2157 --A INPUT -i eth0 -j limit-2158 --A INPUT -i eth0 -j limit-2159 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1017 --A INPUT -i eth0 -j limit-2161 --A INPUT -i eth0 -j limit-2162 --A INPUT -i eth0 -j limit-2163 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1021 --A INPUT -i eth0 -j limit-2165 --A INPUT -i eth0 -j limit-2166 --A INPUT -i eth0 -j limit-2167 --A INPUT -i eth0 -j limit-2168 --A INPUT -i eth0 -j limit-2169 --A INPUT -i eth0 -j limit-2170 --A INPUT -i eth0 -j limit-2171 --A INPUT -i eth0 -j limit-2172 --A INPUT -i eth0 -j limit-2173 --A INPUT -i eth0 -j limit-2174 --A INPUT -i eth0 -j limit-2175 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1033 --A INPUT -i eth0 -j limit-2177 --A INPUT -i eth0 -j limit-2178 --A INPUT -i eth0 -j limit-2179 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1037 --A INPUT -i eth0 -j limit-2181 --A INPUT -i eth0 -j limit-2182 --A INPUT -i eth0 -j limit-2183 --A INPUT -i eth0 -j limit-2184 --A INPUT -i eth0 -j limit-2185 --A INPUT -i eth0 -j limit-2186 --A INPUT -i eth0 -j limit-2187 --A INPUT -i eth0 -j limit-2188 --A INPUT -i eth0 -j limit-2189 --A INPUT -i eth0 -j limit-2190 --A INPUT -i eth0 -j limit-2191 --A INPUT -i eth0 -j limit-2192 --A INPUT -i eth0 -j limit-2193 --A INPUT -i eth0 -j limit-2194 --A INPUT -i eth0 -j limit-2195 --A INPUT -i eth0 -j limit-2196 --A INPUT -i eth0 -j limit-2197 --A INPUT -i eth0 -j limit-2198 --A INPUT -i eth0 -j limit-2199 +-A INPUT -i eth0 -j limit-3296 +-A INPUT -i eth0 -j limit-3297 +-A INPUT -i eth0 -j limit-3298 +-A INPUT -i eth0 -j limit-3299 +-A INPUT -i eth0 -j limit-3300 +-A INPUT -i eth0 -j limit-3301 +-A INPUT -i eth0 -j limit-3302 +-A INPUT -i eth0 -j limit-3303 +-A INPUT -i eth0 -j limit-3304 +-A INPUT -i eth0 -j limit-3305 +-A INPUT -i eth0 -j limit-3306 +-A INPUT -i eth0 -j limit-3307 +-A INPUT -i eth0 -j limit-3308 +-A INPUT -i eth0 -j limit-3309 +-A INPUT -i eth0 -j limit-3310 +-A INPUT -i eth0 -j limit-3311 +-A INPUT -i eth0 -j limit-3312 +-A INPUT -i eth0 -j limit-3313 +-A INPUT -i eth0 -j limit-3314 +-A INPUT -i eth0 -j limit-3315 +-A INPUT -i eth0 -j limit-3316 +-A INPUT -i eth0 -j limit-3317 +-A INPUT -i eth0 -j limit-3318 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 +-A INPUT -i eth0 -j limit-3320 +-A INPUT -i eth0 -j limit-3321 +-A INPUT -i eth0 -j limit-3322 +-A INPUT -i eth0 -j limit-3323 +-A INPUT -i eth0 -j limit-3324 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 +-A INPUT -i eth0 -j limit-3326 +-A INPUT -i eth0 -j limit-3327 +-A INPUT -i eth0 -j limit-3328 +-A INPUT -i eth0 -j limit-3329 +-A INPUT -i eth0 -j limit-3330 +-A INPUT -i eth0 -j limit-3331 +-A INPUT -i eth0 -j limit-3332 +-A INPUT -i eth0 -j limit-3333 +-A INPUT -i eth0 -j limit-3334 +-A INPUT -i eth0 -j limit-3335 +-A INPUT -i eth0 -j limit-3336 +-A INPUT -i eth0 -j limit-3337 +-A INPUT -i eth0 -j limit-3338 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 +-A INPUT -i eth0 -j limit-3340 +-A INPUT -i eth0 -j limit-3341 +-A INPUT -i eth0 -j limit-3342 +-A INPUT -i eth0 -j limit-3343 +-A INPUT -i eth0 -j limit-3344 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 +-A INPUT -i eth0 -j limit-3346 +-A INPUT -i eth0 -j limit-3347 +-A INPUT -i eth0 -j limit-3348 +-A INPUT -i eth0 -j limit-3349 +-A INPUT -i eth0 -j limit-3350 +-A INPUT -i eth0 -j limit-3351 +-A INPUT -i eth0 -j limit-3352 +-A INPUT -i eth0 -j limit-3353 +-A INPUT -i eth0 -j limit-3354 +-A INPUT -i eth0 -j limit-3355 +-A INPUT -i eth0 -j limit-3356 +-A INPUT -i eth0 -j limit-3357 +-A INPUT -i eth0 -j limit-3358 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 +-A INPUT -i eth0 -j limit-3360 +-A INPUT -i eth0 -j limit-3361 +-A INPUT -i eth0 -j limit-3362 +-A INPUT -i eth0 -j limit-3363 +-A INPUT -i eth0 -j limit-3364 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 +-A INPUT -i eth0 -j limit-3366 +-A INPUT -i eth0 -j limit-3367 +-A INPUT -i eth0 -j limit-3368 +-A INPUT -i eth0 -j limit-3369 +-A INPUT -i eth0 -j limit-3370 +-A INPUT -i eth0 -j limit-3371 +-A INPUT -i eth0 -j limit-3372 +-A INPUT -i eth0 -j limit-3373 +-A INPUT -i eth0 -j limit-3374 +-A INPUT -i eth0 -j limit-3375 +-A INPUT -i eth0 -j limit-3376 +-A INPUT -i eth0 -j limit-3377 +-A INPUT -i eth0 -j limit-3378 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 +-A INPUT -i eth0 -j limit-3380 +-A INPUT -i eth0 -j limit-3381 +-A INPUT -i eth0 -j limit-3382 +-A INPUT -i eth0 -j limit-3383 +-A INPUT -i eth0 -j limit-3384 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 +-A INPUT -i eth0 -j limit-3386 +-A INPUT -i eth0 -j limit-3387 +-A INPUT -i eth0 -j limit-3388 +-A INPUT -i eth0 -j limit-3389 +-A INPUT -i eth0 -j limit-3390 +-A INPUT -i eth0 -j limit-3391 +-A INPUT -i eth0 -j limit-3392 +-A INPUT -i eth0 -j limit-3393 +-A INPUT -i eth0 -j limit-3394 +-A INPUT -i eth0 -j limit-3395 +-A INPUT -i eth0 -j limit-3396 +-A INPUT -i eth0 -j limit-3397 +-A INPUT -i eth0 -j limit-3398 +-A INPUT -i eth0 -j limit-3399 +-A INPUT -i eth0 -j limit-3400 +-A INPUT -i eth0 -j limit-3401 +-A INPUT -i eth0 -j limit-3402 +-A INPUT -i eth0 -j limit-3403 +-A INPUT -i eth0 -j limit-3404 +-A INPUT -i eth0 -j limit-3405 +-A INPUT -i eth0 -j limit-3406 +-A INPUT -i eth0 -j limit-3407 +-A INPUT -i eth0 -j limit-3408 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2201 --A INPUT -i eth0 -j limit-2202 --A INPUT -i eth0 -j limit-2203 +-A INPUT -i eth0 -j limit-3410 +-A INPUT -i eth0 -j limit-3411 +-A INPUT -i eth0 -j limit-3412 +-A INPUT -i eth0 -j limit-3413 +-A INPUT -i eth0 -j limit-3414 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2205 --A INPUT -i eth0 -j limit-2206 --A INPUT -i eth0 -j limit-2207 --A INPUT -i eth0 -j limit-2208 --A INPUT -i eth0 -j limit-2209 --A INPUT -i eth0 -j limit-2210 --A INPUT -i eth0 -j limit-2211 --A INPUT -i eth0 -j limit-2212 --A INPUT -i eth0 -j limit-2213 --A INPUT -i eth0 -j limit-2214 --A INPUT -i eth0 -j limit-2215 +-A INPUT -i eth0 -j limit-3416 +-A INPUT -i eth0 -j limit-3417 +-A INPUT -i eth0 -j limit-3418 +-A INPUT -i eth0 -j limit-3419 +-A INPUT -i eth0 -j limit-3420 +-A INPUT -i eth0 -j limit-3421 +-A INPUT -i eth0 -j limit-3422 +-A INPUT -i eth0 -j limit-3423 +-A INPUT -i eth0 -j limit-3424 +-A INPUT -i eth0 -j limit-3425 +-A INPUT -i eth0 -j limit-3426 +-A INPUT -i eth0 -j limit-3427 +-A INPUT -i eth0 -j limit-3428 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2217 --A INPUT -i eth0 -j limit-2218 --A INPUT -i eth0 -j limit-2219 +-A INPUT -i eth0 -j limit-3430 +-A INPUT -i eth0 -j limit-3431 +-A INPUT -i eth0 -j limit-3432 +-A INPUT -i eth0 -j limit-3433 +-A INPUT -i eth0 -j limit-3434 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2221 --A INPUT -i eth0 -j limit-2222 --A INPUT -i eth0 -j limit-2223 --A INPUT -i eth0 -j limit-2224 --A INPUT -i eth0 -j limit-2225 --A INPUT -i eth0 -j limit-2226 --A INPUT -i eth0 -j limit-2227 --A INPUT -i eth0 -j limit-2228 --A INPUT -i eth0 -j limit-2229 --A INPUT -i eth0 -j limit-2230 --A INPUT -i eth0 -j limit-2231 +-A INPUT -i eth0 -j limit-3436 +-A INPUT -i eth0 -j limit-3437 +-A INPUT -i eth0 -j limit-3438 +-A INPUT -i eth0 -j limit-3439 +-A INPUT -i eth0 -j limit-3440 +-A INPUT -i eth0 -j limit-3441 +-A INPUT -i eth0 -j limit-3442 +-A INPUT -i eth0 -j limit-3443 +-A INPUT -i eth0 -j limit-3444 +-A INPUT -i eth0 -j limit-3445 +-A INPUT -i eth0 -j limit-3446 +-A INPUT -i eth0 -j limit-3447 +-A INPUT -i eth0 -j limit-3448 -A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2233 --A INPUT -i eth0 -j limit-2234 --A INPUT -i eth0 -j limit-2235 +-A INPUT -i eth0 -j limit-3450 +-A INPUT -i eth0 -j limit-3451 +-A INPUT -i eth0 -j limit-3452 +-A INPUT -i eth0 -j limit-3453 +-A INPUT -i eth0 -j limit-3454 -A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2237 --A INPUT -i eth0 -j limit-2238 --A INPUT -i eth0 -j limit-2239 --A INPUT -i eth0 -j limit-2240 --A INPUT -i eth0 -j limit-2241 --A INPUT -i eth0 -j limit-2242 --A INPUT -i eth0 -j limit-2243 --A INPUT -i eth0 -j limit-2244 --A INPUT -i eth0 -j limit-2245 --A INPUT -i eth0 -j limit-2246 --A INPUT -i eth0 -j limit-2247 +-A INPUT -i eth0 -j limit-3456 +-A INPUT -i eth0 -j limit-3457 +-A INPUT -i eth0 -j limit-3458 +-A INPUT -i eth0 -j limit-3459 +-A INPUT -i eth0 -j limit-3460 +-A INPUT -i eth0 -j limit-3461 +-A INPUT -i eth0 -j limit-3462 +-A INPUT -i eth0 -j limit-3463 +-A INPUT -i eth0 -j limit-3464 +-A INPUT -i eth0 -j limit-3465 +-A INPUT -i eth0 -j limit-3466 +-A INPUT -i eth0 -j limit-3467 +-A INPUT -i eth0 -j limit-3468 -A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2249 --A INPUT -i eth0 -j limit-2250 --A INPUT -i eth0 -j limit-2251 +-A INPUT -i eth0 -j limit-3470 +-A INPUT -i eth0 -j limit-3471 +-A INPUT -i eth0 -j limit-3472 +-A INPUT -i eth0 -j limit-3473 +-A INPUT -i eth0 -j limit-3474 -A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2253 --A INPUT -i eth0 -j limit-2254 --A INPUT -i eth0 -j limit-2255 --A INPUT -i eth0 -j limit-2256 --A INPUT -i eth0 -j limit-2257 --A INPUT -i eth0 -j limit-2258 --A INPUT -i eth0 -j limit-2259 --A INPUT -i eth0 -j limit-2260 --A INPUT -i eth0 -j limit-2261 --A INPUT -i eth0 -j limit-2262 --A INPUT -i eth0 -j limit-2263 --A INPUT -i eth0 -j limit-2264 --A INPUT -i eth0 -j limit-2265 --A INPUT -i eth0 -j limit-2266 --A INPUT -i eth0 -j limit-2267 --A INPUT -i eth0 -j limit-2268 --A INPUT -i eth0 -j limit-2269 --A INPUT -i eth0 -j limit-2270 --A INPUT -i eth0 -j limit-2271 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 --A INPUT -i eth0 -j limit-2273 --A INPUT -i eth0 -j limit-2274 --A INPUT -i eth0 -j limit-2275 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1061 --A INPUT -i eth0 -j limit-2277 --A INPUT -i eth0 -j limit-2278 --A INPUT -i eth0 -j limit-2279 --A INPUT -i eth0 -j limit-2280 --A INPUT -i eth0 -j limit-2281 --A INPUT -i eth0 -j limit-2282 --A INPUT -i eth0 -j limit-2283 --A INPUT -i eth0 -j limit-2284 --A INPUT -i eth0 -j limit-2285 --A INPUT -i eth0 -j limit-2286 --A INPUT -i eth0 -j limit-2287 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 --A INPUT -i eth0 -j limit-2289 --A INPUT -i eth0 -j limit-2290 --A INPUT -i eth0 -j limit-2291 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 --A INPUT -i eth0 -j limit-2293 --A INPUT -i eth0 -j limit-2294 --A INPUT -i eth0 -j limit-2295 --A INPUT -i eth0 -j limit-2296 --A INPUT -i eth0 -j limit-2297 --A INPUT -i eth0 -j limit-2298 --A INPUT -i eth0 -j limit-2299 --A INPUT -i eth0 -j limit-2300 --A INPUT -i eth0 -j limit-2301 --A INPUT -i eth0 -j limit-2302 --A INPUT -i eth0 -j limit-2303 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1089 --A INPUT -i eth0 -j limit-2305 --A INPUT -i eth0 -j limit-2306 --A INPUT -i eth0 -j limit-2307 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 --A INPUT -i eth0 -j limit-2309 --A INPUT -i eth0 -j limit-2310 --A INPUT -i eth0 -j limit-2311 --A INPUT -i eth0 -j limit-2312 --A INPUT -i eth0 -j limit-2313 --A INPUT -i eth0 -j limit-2314 --A INPUT -i eth0 -j limit-2315 --A INPUT -i eth0 -j limit-2316 --A INPUT -i eth0 -j limit-2317 --A INPUT -i eth0 -j limit-2318 --A INPUT -i eth0 -j limit-2319 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1105 --A INPUT -i eth0 -j limit-2321 --A INPUT -i eth0 -j limit-2322 --A INPUT -i eth0 -j limit-2323 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1109 --A INPUT -i eth0 -j limit-2325 --A INPUT -i eth0 -j limit-2326 --A INPUT -i eth0 -j limit-2327 --A INPUT -i eth0 -j limit-2328 --A INPUT -i eth0 -j limit-2329 --A INPUT -i eth0 -j limit-2330 --A INPUT -i eth0 -j limit-2331 --A INPUT -i eth0 -j limit-2332 --A INPUT -i eth0 -j limit-2333 --A INPUT -i eth0 -j limit-2334 --A INPUT -i eth0 -j limit-2335 --A INPUT -i eth0 -j limit-2336 --A INPUT -i eth0 -j limit-2337 --A INPUT -i eth0 -j limit-2338 --A INPUT -i eth0 -j limit-2339 --A INPUT -i eth0 -j limit-2340 --A INPUT -i eth0 -j limit-2341 --A INPUT -i eth0 -j limit-2342 --A INPUT -i eth0 -j limit-2343 +-A INPUT -i eth0 -j limit-3476 +-A INPUT -i eth0 -j limit-3477 +-A INPUT -i eth0 -j limit-3478 +-A INPUT -i eth0 -j limit-3479 +-A INPUT -i eth0 -j limit-3480 +-A INPUT -i eth0 -j limit-3481 +-A INPUT -i eth0 -j limit-3482 +-A INPUT -i eth0 -j limit-3483 +-A INPUT -i eth0 -j limit-3484 +-A INPUT -i eth0 -j limit-3485 +-A INPUT -i eth0 -j limit-3486 +-A INPUT -i eth0 -j limit-3487 +-A INPUT -i eth0 -j limit-3488 +-A INPUT -i eth0 -j limit-3489 +-A INPUT -i eth0 -j limit-3490 +-A INPUT -i eth0 -j limit-3491 +-A INPUT -i eth0 -j limit-3492 +-A INPUT -i eth0 -j limit-3493 +-A INPUT -i eth0 -j limit-3494 +-A INPUT -i eth0 -j limit-3495 +-A INPUT -i eth0 -j limit-3496 +-A INPUT -i eth0 -j limit-3497 +-A INPUT -i eth0 -j limit-3498 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 +-A INPUT -i eth0 -j limit-3500 +-A INPUT -i eth0 -j limit-3501 +-A INPUT -i eth0 -j limit-3502 +-A INPUT -i eth0 -j limit-3503 +-A INPUT -i eth0 -j limit-3504 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 +-A INPUT -i eth0 -j limit-3506 +-A INPUT -i eth0 -j limit-3507 +-A INPUT -i eth0 -j limit-3508 +-A INPUT -i eth0 -j limit-3509 +-A INPUT -i eth0 -j limit-3510 +-A INPUT -i eth0 -j limit-3511 +-A INPUT -i eth0 -j limit-3512 +-A INPUT -i eth0 -j limit-3513 +-A INPUT -i eth0 -j limit-3514 +-A INPUT -i eth0 -j limit-3515 +-A INPUT -i eth0 -j limit-3516 +-A INPUT -i eth0 -j limit-3517 +-A INPUT -i eth0 -j limit-3518 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 +-A INPUT -i eth0 -j limit-3520 +-A INPUT -i eth0 -j limit-3521 +-A INPUT -i eth0 -j limit-3522 +-A INPUT -i eth0 -j limit-3523 +-A INPUT -i eth0 -j limit-3524 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 +-A INPUT -i eth0 -j limit-3526 +-A INPUT -i eth0 -j limit-3527 +-A INPUT -i eth0 -j limit-3528 +-A INPUT -i eth0 -j limit-3529 +-A INPUT -i eth0 -j limit-3530 +-A INPUT -i eth0 -j limit-3531 +-A INPUT -i eth0 -j limit-3532 +-A INPUT -i eth0 -j limit-3533 +-A INPUT -i eth0 -j limit-3534 +-A INPUT -i eth0 -j limit-3535 +-A INPUT -i eth0 -j limit-3536 +-A INPUT -i eth0 -j limit-3537 +-A INPUT -i eth0 -j limit-3538 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 +-A INPUT -i eth0 -j limit-3540 +-A INPUT -i eth0 -j limit-3541 +-A INPUT -i eth0 -j limit-3542 +-A INPUT -i eth0 -j limit-3543 +-A INPUT -i eth0 -j limit-3544 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 +-A INPUT -i eth0 -j limit-3546 +-A INPUT -i eth0 -j limit-3547 +-A INPUT -i eth0 -j limit-3548 +-A INPUT -i eth0 -j limit-3549 +-A INPUT -i eth0 -j limit-3550 +-A INPUT -i eth0 -j limit-3551 +-A INPUT -i eth0 -j limit-3552 +-A INPUT -i eth0 -j limit-3553 +-A INPUT -i eth0 -j limit-3554 +-A INPUT -i eth0 -j limit-3555 +-A INPUT -i eth0 -j limit-3556 +-A INPUT -i eth0 -j limit-3557 +-A INPUT -i eth0 -j limit-3558 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 +-A INPUT -i eth0 -j limit-3560 +-A INPUT -i eth0 -j limit-3561 +-A INPUT -i eth0 -j limit-3562 +-A INPUT -i eth0 -j limit-3563 +-A INPUT -i eth0 -j limit-3564 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 +-A INPUT -i eth0 -j limit-3566 +-A INPUT -i eth0 -j limit-3567 +-A INPUT -i eth0 -j limit-3568 +-A INPUT -i eth0 -j limit-3569 +-A INPUT -i eth0 -j limit-3570 +-A INPUT -i eth0 -j limit-3571 +-A INPUT -i eth0 -j limit-3572 +-A INPUT -i eth0 -j limit-3573 +-A INPUT -i eth0 -j limit-3574 +-A INPUT -i eth0 -j limit-3575 +-A INPUT -i eth0 -j limit-3576 +-A INPUT -i eth0 -j limit-3577 +-A INPUT -i eth0 -j limit-3578 +-A INPUT -i eth0 -j limit-3579 +-A INPUT -i eth0 -j limit-3580 +-A INPUT -i eth0 -j limit-3581 +-A INPUT -i eth0 -j limit-3582 +-A INPUT -i eth0 -j limit-3583 +-A INPUT -i eth0 -j limit-3584 +-A INPUT -i eth0 -j limit-3585 +-A INPUT -i eth0 -j limit-3586 +-A INPUT -i eth0 -j limit-3587 +-A INPUT -i eth0 -j limit-3588 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 +-A INPUT -i eth0 -j limit-3590 +-A INPUT -i eth0 -j limit-3591 +-A INPUT -i eth0 -j limit-3592 +-A INPUT -i eth0 -j limit-3593 +-A INPUT -i eth0 -j limit-3594 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 +-A INPUT -i eth0 -j limit-3596 +-A INPUT -i eth0 -j limit-3597 +-A INPUT -i eth0 -j limit-3598 +-A INPUT -i eth0 -j limit-3599 +-A INPUT -i eth0 -j limit-3600 +-A INPUT -i eth0 -j limit-3601 +-A INPUT -i eth0 -j limit-3602 +-A INPUT -i eth0 -j limit-3603 +-A INPUT -i eth0 -j limit-3604 +-A INPUT -i eth0 -j limit-3605 +-A INPUT -i eth0 -j limit-3606 +-A INPUT -i eth0 -j limit-3607 +-A INPUT -i eth0 -j limit-3608 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 +-A INPUT -i eth0 -j limit-3610 +-A INPUT -i eth0 -j limit-3611 +-A INPUT -i eth0 -j limit-3612 +-A INPUT -i eth0 -j limit-3613 +-A INPUT -i eth0 -j limit-3614 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 +-A INPUT -i eth0 -j limit-3616 +-A INPUT -i eth0 -j limit-3617 +-A INPUT -i eth0 -j limit-3618 +-A INPUT -i eth0 -j limit-3619 +-A INPUT -i eth0 -j limit-3620 +-A INPUT -i eth0 -j limit-3621 +-A INPUT -i eth0 -j limit-3622 +-A INPUT -i eth0 -j limit-3623 +-A INPUT -i eth0 -j limit-3624 +-A INPUT -i eth0 -j limit-3625 +-A INPUT -i eth0 -j limit-3626 +-A INPUT -i eth0 -j limit-3627 +-A INPUT -i eth0 -j limit-3628 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 +-A INPUT -i eth0 -j limit-3630 +-A INPUT -i eth0 -j limit-3631 +-A INPUT -i eth0 -j limit-3632 +-A INPUT -i eth0 -j limit-3633 +-A INPUT -i eth0 -j limit-3634 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 +-A INPUT -i eth0 -j limit-3636 +-A INPUT -i eth0 -j limit-3637 +-A INPUT -i eth0 -j limit-3638 +-A INPUT -i eth0 -j limit-3639 +-A INPUT -i eth0 -j limit-3640 +-A INPUT -i eth0 -j limit-3641 +-A INPUT -i eth0 -j limit-3642 +-A INPUT -i eth0 -j limit-3643 +-A INPUT -i eth0 -j limit-3644 +-A INPUT -i eth0 -j limit-3645 +-A INPUT -i eth0 -j limit-3646 +-A INPUT -i eth0 -j limit-3647 +-A INPUT -i eth0 -j limit-3648 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 +-A INPUT -i eth0 -j limit-3650 +-A INPUT -i eth0 -j limit-3651 +-A INPUT -i eth0 -j limit-3652 +-A INPUT -i eth0 -j limit-3653 +-A INPUT -i eth0 -j limit-3654 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 +-A INPUT -i eth0 -j limit-3656 +-A INPUT -i eth0 -j limit-3657 +-A INPUT -i eth0 -j limit-3658 +-A INPUT -i eth0 -j limit-3659 +-A INPUT -i eth0 -j limit-3660 +-A INPUT -i eth0 -j limit-3661 +-A INPUT -i eth0 -j limit-3662 +-A INPUT -i eth0 -j limit-3663 +-A INPUT -i eth0 -j limit-3664 +-A INPUT -i eth0 -j limit-3665 +-A INPUT -i eth0 -j limit-3666 +-A INPUT -i eth0 -j limit-3667 +-A INPUT -i eth0 -j limit-3668 +-A INPUT -i eth0 -j limit-3669 +-A INPUT -i eth0 -j limit-3670 +-A INPUT -i eth0 -j limit-3671 +-A INPUT -i eth0 -j limit-3672 +-A INPUT -i eth0 -j limit-3673 +-A INPUT -i eth0 -j limit-3674 +-A INPUT -i eth0 -j limit-3675 +-A INPUT -i eth0 -j limit-3676 +-A INPUT -i eth0 -j limit-3677 +-A INPUT -i eth0 -j limit-3678 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2345 --A INPUT -i eth0 -j limit-2346 --A INPUT -i eth0 -j limit-2347 +-A INPUT -i eth0 -j limit-3680 +-A INPUT -i eth0 -j limit-3681 +-A INPUT -i eth0 -j limit-3682 +-A INPUT -i eth0 -j limit-3683 +-A INPUT -i eth0 -j limit-3684 -A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2349 --A INPUT -i eth0 -j limit-2350 --A INPUT -i eth0 -j limit-2351 --A INPUT -i eth0 -j limit-2352 --A INPUT -i eth0 -j limit-2353 --A INPUT -i eth0 -j limit-2354 --A INPUT -i eth0 -j limit-2355 --A INPUT -i eth0 -j limit-2356 --A INPUT -i eth0 -j limit-2357 --A INPUT -i eth0 -j limit-2358 --A INPUT -i eth0 -j limit-2359 +-A INPUT -i eth0 -j limit-3686 +-A INPUT -i eth0 -j limit-3687 +-A INPUT -i eth0 -j limit-3688 +-A INPUT -i eth0 -j limit-3689 +-A INPUT -i eth0 -j limit-3690 +-A INPUT -i eth0 -j limit-3691 +-A INPUT -i eth0 -j limit-3692 +-A INPUT -i eth0 -j limit-3693 +-A INPUT -i eth0 -j limit-3694 +-A INPUT -i eth0 -j limit-3695 +-A INPUT -i eth0 -j limit-3696 +-A INPUT -i eth0 -j limit-3697 +-A INPUT -i eth0 -j limit-3698 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2361 --A INPUT -i eth0 -j limit-2362 --A INPUT -i eth0 -j limit-2363 +-A INPUT -i eth0 -j limit-3700 +-A INPUT -i eth0 -j limit-3701 +-A INPUT -i eth0 -j limit-3702 +-A INPUT -i eth0 -j limit-3703 +-A INPUT -i eth0 -j limit-3704 -A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2365 --A INPUT -i eth0 -j limit-2366 --A INPUT -i eth0 -j limit-2367 --A INPUT -i eth0 -j limit-2368 --A INPUT -i eth0 -j limit-2369 --A INPUT -i eth0 -j limit-2370 --A INPUT -i eth0 -j limit-2371 --A INPUT -i eth0 -j limit-2372 --A INPUT -i eth0 -j limit-2373 --A INPUT -i eth0 -j limit-2374 --A INPUT -i eth0 -j limit-2375 +-A INPUT -i eth0 -j limit-3706 +-A INPUT -i eth0 -j limit-3707 +-A INPUT -i eth0 -j limit-3708 +-A INPUT -i eth0 -j limit-3709 +-A INPUT -i eth0 -j limit-3710 +-A INPUT -i eth0 -j limit-3711 +-A INPUT -i eth0 -j limit-3712 +-A INPUT -i eth0 -j limit-3713 +-A INPUT -i eth0 -j limit-3714 +-A INPUT -i eth0 -j limit-3715 +-A INPUT -i eth0 -j limit-3716 +-A INPUT -i eth0 -j limit-3717 +-A INPUT -i eth0 -j limit-3718 -A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2377 --A INPUT -i eth0 -j limit-2378 --A INPUT -i eth0 -j limit-2379 +-A INPUT -i eth0 -j limit-3720 +-A INPUT -i eth0 -j limit-3721 +-A INPUT -i eth0 -j limit-3722 +-A INPUT -i eth0 -j limit-3723 +-A INPUT -i eth0 -j limit-3724 -A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2381 --A INPUT -i eth0 -j limit-2382 --A INPUT -i eth0 -j limit-2383 --A INPUT -i eth0 -j limit-2384 --A INPUT -i eth0 -j limit-2385 --A INPUT -i eth0 -j limit-2386 --A INPUT -i eth0 -j limit-2387 --A INPUT -i eth0 -j limit-2388 --A INPUT -i eth0 -j limit-2389 --A INPUT -i eth0 -j limit-2390 --A INPUT -i eth0 -j limit-2391 +-A INPUT -i eth0 -j limit-3726 +-A INPUT -i eth0 -j limit-3727 +-A INPUT -i eth0 -j limit-3728 +-A INPUT -i eth0 -j limit-3729 +-A INPUT -i eth0 -j limit-3730 +-A INPUT -i eth0 -j limit-3731 +-A INPUT -i eth0 -j limit-3732 +-A INPUT -i eth0 -j limit-3733 +-A INPUT -i eth0 -j limit-3734 +-A INPUT -i eth0 -j limit-3735 +-A INPUT -i eth0 -j limit-3736 +-A INPUT -i eth0 -j limit-3737 +-A INPUT -i eth0 -j limit-3738 -A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2393 --A INPUT -i eth0 -j limit-2394 --A INPUT -i eth0 -j limit-2395 +-A INPUT -i eth0 -j limit-3740 +-A INPUT -i eth0 -j limit-3741 +-A INPUT -i eth0 -j limit-3742 +-A INPUT -i eth0 -j limit-3743 +-A INPUT -i eth0 -j limit-3744 -A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2397 --A INPUT -i eth0 -j limit-2398 --A INPUT -i eth0 -j limit-2399 --A INPUT -i eth0 -j limit-2400 --A INPUT -i eth0 -j limit-2401 --A INPUT -i eth0 -j limit-2402 --A INPUT -i eth0 -j limit-2403 --A INPUT -i eth0 -j limit-2404 --A INPUT -i eth0 -j limit-2405 --A INPUT -i eth0 -j limit-2406 --A INPUT -i eth0 -j limit-2407 --A INPUT -i eth0 -j limit-2408 --A INPUT -i eth0 -j limit-2409 --A INPUT -i eth0 -j limit-2410 --A INPUT -i eth0 -j limit-2411 --A INPUT -i eth0 -j limit-2412 --A INPUT -i eth0 -j limit-2413 --A INPUT -i eth0 -j limit-2414 --A INPUT -i eth0 -j limit-2415 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1129 --A INPUT -i eth0 -j limit-2417 --A INPUT -i eth0 -j limit-2418 --A INPUT -i eth0 -j limit-2419 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1133 --A INPUT -i eth0 -j limit-2421 --A INPUT -i eth0 -j limit-2422 --A INPUT -i eth0 -j limit-2423 --A INPUT -i eth0 -j limit-2424 --A INPUT -i eth0 -j limit-2425 --A INPUT -i eth0 -j limit-2426 --A INPUT -i eth0 -j limit-2427 --A INPUT -i eth0 -j limit-2428 --A INPUT -i eth0 -j limit-2429 --A INPUT -i eth0 -j limit-2430 --A INPUT -i eth0 -j limit-2431 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1145 --A INPUT -i eth0 -j limit-2433 --A INPUT -i eth0 -j limit-2434 --A INPUT -i eth0 -j limit-2435 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1149 --A INPUT -i eth0 -j limit-2437 --A INPUT -i eth0 -j limit-2438 --A INPUT -i eth0 -j limit-2439 --A INPUT -i eth0 -j limit-2440 --A INPUT -i eth0 -j limit-2441 --A INPUT -i eth0 -j limit-2442 --A INPUT -i eth0 -j limit-2443 --A INPUT -i eth0 -j limit-2444 --A INPUT -i eth0 -j limit-2445 --A INPUT -i eth0 -j limit-2446 --A INPUT -i eth0 -j limit-2447 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1161 --A INPUT -i eth0 -j limit-2449 --A INPUT -i eth0 -j limit-2450 --A INPUT -i eth0 -j limit-2451 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1165 --A INPUT -i eth0 -j limit-2453 --A INPUT -i eth0 -j limit-2454 --A INPUT -i eth0 -j limit-2455 --A INPUT -i eth0 -j limit-2456 --A INPUT -i eth0 -j limit-2457 --A INPUT -i eth0 -j limit-2458 --A INPUT -i eth0 -j limit-2459 --A INPUT -i eth0 -j limit-2460 --A INPUT -i eth0 -j limit-2461 --A INPUT -i eth0 -j limit-2462 --A INPUT -i eth0 -j limit-2463 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1177 --A INPUT -i eth0 -j limit-2465 --A INPUT -i eth0 -j limit-2466 --A INPUT -i eth0 -j limit-2467 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1181 --A INPUT -i eth0 -j limit-2469 --A INPUT -i eth0 -j limit-2470 --A INPUT -i eth0 -j limit-2471 --A INPUT -i eth0 -j limit-2472 --A INPUT -i eth0 -j limit-2473 --A INPUT -i eth0 -j limit-2474 --A INPUT -i eth0 -j limit-2475 --A INPUT -i eth0 -j limit-2476 --A INPUT -i eth0 -j limit-2477 --A INPUT -i eth0 -j limit-2478 --A INPUT -i eth0 -j limit-2479 --A INPUT -i eth0 -j limit-2480 --A INPUT -i eth0 -j limit-2481 --A INPUT -i eth0 -j limit-2482 --A INPUT -i eth0 -j limit-2483 --A INPUT -i eth0 -j limit-2484 --A INPUT -i eth0 -j limit-2485 --A INPUT -i eth0 -j limit-2486 --A INPUT -i eth0 -j limit-2487 --A INPUT -i eth0 -j limit-2488 --A INPUT -i eth0 -j limit-2489 --A INPUT -i eth0 -j limit-2490 --A INPUT -i eth0 -j limit-2491 --A INPUT -i eth0 -j limit-2492 --A INPUT -i eth0 -j limit-2493 --A INPUT -i eth0 -j limit-2494 --A INPUT -i eth0 -j limit-2495 --A INPUT -i eth0 -j limit-2496 --A INPUT -i eth0 -j limit-2497 --A INPUT -i eth0 -j limit-2498 --A INPUT -i eth0 -j limit-2499 --A INPUT -i eth0 -j limit-2500 --A INPUT -i eth0 -j limit-2501 --A INPUT -i eth0 -j limit-2502 --A INPUT -i eth0 -j limit-2503 --A INPUT -i eth0 -j limit-2504 --A INPUT -i eth0 -j limit-2505 --A INPUT -i eth0 -j limit-2506 --A INPUT -i eth0 -j limit-2507 --A INPUT -i eth0 -j limit-2508 --A INPUT -i eth0 -j limit-2509 --A INPUT -i eth0 -j limit-2510 --A INPUT -i eth0 -j limit-2511 --A INPUT -i eth0 -j limit-2512 --A INPUT -i eth0 -j limit-2513 --A INPUT -i eth0 -j limit-2514 --A INPUT -i eth0 -j limit-2515 +-A INPUT -i eth0 -j limit-3746 +-A INPUT -i eth0 -j limit-3747 +-A INPUT -i eth0 -j limit-3748 +-A INPUT -i eth0 -j limit-3749 +-A INPUT -i eth0 -j limit-3750 +-A INPUT -i eth0 -j limit-3751 +-A INPUT -i eth0 -j limit-3752 +-A INPUT -i eth0 -j limit-3753 +-A INPUT -i eth0 -j limit-3754 +-A INPUT -i eth0 -j limit-3755 +-A INPUT -i eth0 -j limit-3756 +-A INPUT -i eth0 -j limit-3757 +-A INPUT -i eth0 -j limit-3758 +-A INPUT -i eth0 -j limit-3759 +-A INPUT -i eth0 -j limit-3760 +-A INPUT -i eth0 -j limit-3761 +-A INPUT -i eth0 -j limit-3762 +-A INPUT -i eth0 -j limit-3763 +-A INPUT -i eth0 -j limit-3764 +-A INPUT -i eth0 -j limit-3765 +-A INPUT -i eth0 -j limit-3766 +-A INPUT -i eth0 -j limit-3767 +-A INPUT -i eth0 -j limit-3768 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 +-A INPUT -i eth0 -j limit-3770 +-A INPUT -i eth0 -j limit-3771 +-A INPUT -i eth0 -j limit-3772 +-A INPUT -i eth0 -j limit-3773 +-A INPUT -i eth0 -j limit-3774 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 +-A INPUT -i eth0 -j limit-3776 +-A INPUT -i eth0 -j limit-3777 +-A INPUT -i eth0 -j limit-3778 +-A INPUT -i eth0 -j limit-3779 +-A INPUT -i eth0 -j limit-3780 +-A INPUT -i eth0 -j limit-3781 +-A INPUT -i eth0 -j limit-3782 +-A INPUT -i eth0 -j limit-3783 +-A INPUT -i eth0 -j limit-3784 +-A INPUT -i eth0 -j limit-3785 +-A INPUT -i eth0 -j limit-3786 +-A INPUT -i eth0 -j limit-3787 +-A INPUT -i eth0 -j limit-3788 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 +-A INPUT -i eth0 -j limit-3790 +-A INPUT -i eth0 -j limit-3791 +-A INPUT -i eth0 -j limit-3792 +-A INPUT -i eth0 -j limit-3793 +-A INPUT -i eth0 -j limit-3794 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 +-A INPUT -i eth0 -j limit-3796 +-A INPUT -i eth0 -j limit-3797 +-A INPUT -i eth0 -j limit-3798 +-A INPUT -i eth0 -j limit-3799 +-A INPUT -i eth0 -j limit-3800 +-A INPUT -i eth0 -j limit-3801 +-A INPUT -i eth0 -j limit-3802 +-A INPUT -i eth0 -j limit-3803 +-A INPUT -i eth0 -j limit-3804 +-A INPUT -i eth0 -j limit-3805 +-A INPUT -i eth0 -j limit-3806 +-A INPUT -i eth0 -j limit-3807 +-A INPUT -i eth0 -j limit-3808 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 +-A INPUT -i eth0 -j limit-3810 +-A INPUT -i eth0 -j limit-3811 +-A INPUT -i eth0 -j limit-3812 +-A INPUT -i eth0 -j limit-3813 +-A INPUT -i eth0 -j limit-3814 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 +-A INPUT -i eth0 -j limit-3816 +-A INPUT -i eth0 -j limit-3817 +-A INPUT -i eth0 -j limit-3818 +-A INPUT -i eth0 -j limit-3819 +-A INPUT -i eth0 -j limit-3820 +-A INPUT -i eth0 -j limit-3821 +-A INPUT -i eth0 -j limit-3822 +-A INPUT -i eth0 -j limit-3823 +-A INPUT -i eth0 -j limit-3824 +-A INPUT -i eth0 -j limit-3825 +-A INPUT -i eth0 -j limit-3826 +-A INPUT -i eth0 -j limit-3827 +-A INPUT -i eth0 -j limit-3828 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 +-A INPUT -i eth0 -j limit-3830 +-A INPUT -i eth0 -j limit-3831 +-A INPUT -i eth0 -j limit-3832 +-A INPUT -i eth0 -j limit-3833 +-A INPUT -i eth0 -j limit-3834 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 +-A INPUT -i eth0 -j limit-3836 +-A INPUT -i eth0 -j limit-3837 +-A INPUT -i eth0 -j limit-3838 +-A INPUT -i eth0 -j limit-3839 +-A INPUT -i eth0 -j limit-3840 +-A INPUT -i eth0 -j limit-3841 +-A INPUT -i eth0 -j limit-3842 +-A INPUT -i eth0 -j limit-3843 +-A INPUT -i eth0 -j limit-3844 +-A INPUT -i eth0 -j limit-3845 +-A INPUT -i eth0 -j limit-3846 +-A INPUT -i eth0 -j limit-3847 +-A INPUT -i eth0 -j limit-3848 +-A INPUT -i eth0 -j limit-3849 +-A INPUT -i eth0 -j limit-3850 +-A INPUT -i eth0 -j limit-3851 +-A INPUT -i eth0 -j limit-3852 +-A INPUT -i eth0 -j limit-3853 +-A INPUT -i eth0 -j limit-3854 +-A INPUT -i eth0 -j limit-3855 +-A INPUT -i eth0 -j limit-3856 +-A INPUT -i eth0 -j limit-3857 +-A INPUT -i eth0 -j limit-3858 +-A INPUT -i eth0 -j limit-3859 +-A INPUT -i eth0 -j limit-3860 +-A INPUT -i eth0 -j limit-3861 +-A INPUT -i eth0 -j limit-3862 +-A INPUT -i eth0 -j limit-3863 +-A INPUT -i eth0 -j limit-3864 +-A INPUT -i eth0 -j limit-3865 +-A INPUT -i eth0 -j limit-3866 +-A INPUT -i eth0 -j limit-3867 +-A INPUT -i eth0 -j limit-3868 +-A INPUT -i eth0 -j limit-3869 +-A INPUT -i eth0 -j limit-3870 +-A INPUT -i eth0 -j limit-3871 +-A INPUT -i eth0 -j limit-3872 +-A INPUT -i eth0 -j limit-3873 +-A INPUT -i eth0 -j limit-3874 +-A INPUT -i eth0 -j limit-3875 +-A INPUT -i eth0 -j limit-3876 +-A INPUT -i eth0 -j limit-3877 +-A INPUT -i eth0 -j limit-3878 +-A INPUT -i eth0 -j limit-3879 +-A INPUT -i eth0 -j limit-3880 +-A INPUT -i eth0 -j limit-3881 +-A INPUT -i eth0 -j limit-3882 +-A INPUT -i eth0 -j limit-3883 +-A INPUT -i eth0 -j limit-3884 +-A INPUT -i eth0 -j limit-3885 +-A INPUT -i eth0 -j limit-3886 +-A INPUT -i eth0 -j limit-3887 +-A INPUT -i eth0 -j limit-3888 +-A INPUT -i eth0 -j limit-3889 +-A INPUT -i eth0 -j limit-3890 +-A INPUT -i eth0 -j limit-3891 +-A INPUT -i eth0 -j limit-3892 +-A INPUT -i eth0 -j limit-3893 +-A INPUT -i eth0 -j limit-3894 +-A INPUT -i eth0 -j limit-3895 +-A INPUT -i eth0 -j limit-3896 +-A INPUT -i eth0 -j limit-3897 +-A INPUT -i eth0 -j limit-3898 +-A INPUT -i eth0 -j limit-3899 +-A INPUT -i eth0 -j limit-3900 +-A INPUT -i eth0 -j limit-3901 +-A INPUT -i eth0 -j limit-3902 +-A INPUT -i eth0 -j limit-3903 -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:C --rsource --mask fe00:: --set @@ -61549,653 +102950,1006 @@ COMMIT -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -j ACCEPT --A INPUT -j logdrop-1184 +-A INPUT -j logdrop-2200 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-54 --A INPUT -j logdrop-1185 +-A INPUT -j logaccept-99 +-A INPUT -j logdrop-2201 -A INPUT -j logpass-0 +-A INPUT -j logaccept-100 +-A INPUT -j logdrop-2202 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-101 +-A INPUT -j logdrop-2203 +-A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-55 --A INPUT -j logdrop-1186 +-A INPUT -j logaccept-102 +-A INPUT -j logdrop-2204 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT -A OUTPUT -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -j limit-1886 --A OUTPUT -j limit-1885 --A OUTPUT -j limit-1884 --A OUTPUT -j limit-1883 --A OUTPUT -j limit-1882 --A OUTPUT -j limit-1881 --A OUTPUT -j limit-1880 --A OUTPUT -j limit-1879 --A OUTPUT -j limit-1878 --A OUTPUT -j limit-1877 --A OUTPUT -j limit-1876 --A OUTPUT -j limit-1875 --A OUTPUT -j limit-1874 --A OUTPUT -j limit-1873 --A OUTPUT -j limit-1872 --A OUTPUT -j limit-1871 --A OUTPUT -j limit-1870 --A OUTPUT -j limit-1869 --A OUTPUT -j limit-1868 --A OUTPUT -j limit-1867 --A OUTPUT -j limit-1866 --A OUTPUT -j limit-1865 --A OUTPUT -j limit-1864 --A OUTPUT -j limit-1863 --A OUTPUT -j limit-1862 --A OUTPUT -j limit-1861 --A OUTPUT -j limit-1860 --A OUTPUT -j limit-1859 --A OUTPUT -j limit-1858 --A OUTPUT -j limit-1857 --A OUTPUT -j limit-1856 --A OUTPUT -j limit-1855 --A OUTPUT -j limit-1854 --A OUTPUT -j limit-1853 --A OUTPUT -j limit-1852 --A OUTPUT -j limit-1851 --A OUTPUT -j limit-1850 --A OUTPUT -j limit-1849 --A OUTPUT -j limit-1848 --A OUTPUT -j limit-1847 --A OUTPUT -j limit-1846 --A OUTPUT -j limit-1845 --A OUTPUT -j limit-1844 --A OUTPUT -j limit-1843 --A OUTPUT -j limit-1842 --A OUTPUT -j limit-1841 --A OUTPUT -j limit-1840 --A OUTPUT -j limit-1839 --A OUTPUT -j limit-1838 --A OUTPUT -j limit-1837 --A OUTPUT -j limit-1836 --A OUTPUT -j limit-1835 --A OUTPUT -j limit-1834 --A OUTPUT -j limit-1833 --A OUTPUT -j limit-1832 --A OUTPUT -j limit-1831 --A OUTPUT -j limit-1830 --A OUTPUT -j limit-1829 --A OUTPUT -j limit-1828 --A OUTPUT -j limit-1827 --A OUTPUT -j limit-1826 --A OUTPUT -j limit-1825 --A OUTPUT -j limit-1824 --A OUTPUT -j limit-1823 --A OUTPUT -j limit-1822 --A OUTPUT -j limit-1821 --A OUTPUT -j limit-1820 --A OUTPUT -j limit-1819 --A OUTPUT -j limit-1818 --A OUTPUT -j limit-1817 --A OUTPUT -j limit-1816 --A OUTPUT -j limit-1815 --A OUTPUT -j limit-1814 --A OUTPUT -j limit-1813 --A OUTPUT -j limit-1812 --A OUTPUT -j limit-1811 --A OUTPUT -j limit-1810 --A OUTPUT -j limit-1809 --A OUTPUT -j limit-1808 --A OUTPUT -j limit-1807 --A OUTPUT -j limit-1806 --A OUTPUT -j limit-1805 --A OUTPUT -j limit-1804 --A OUTPUT -j limit-1803 --A OUTPUT -j limit-1802 --A OUTPUT -j limit-1801 --A OUTPUT -j limit-1800 --A OUTPUT -j limit-1799 --A OUTPUT -j limit-1798 --A OUTPUT -j limit-1797 --A OUTPUT -j limit-1796 --A OUTPUT -j limit-1795 --A OUTPUT -j limit-1794 --A OUTPUT -j limit-1793 --A OUTPUT -j limit-1792 --A OUTPUT -j limit-1791 --A OUTPUT -j limit-1790 --A OUTPUT -j limit-1789 --A OUTPUT -j limit-1788 --A OUTPUT -j limit-1787 --A OUTPUT -j limit-1786 --A OUTPUT -j limit-1785 --A OUTPUT -j limit-1784 --A OUTPUT -j limit-1783 --A OUTPUT -j limit-1782 --A OUTPUT -j limit-1781 --A OUTPUT -j limit-1780 --A OUTPUT -j limit-1779 --A OUTPUT -j limit-1778 --A OUTPUT -j limit-1777 --A OUTPUT -j limit-1776 --A OUTPUT -j limit-1775 --A OUTPUT -j limit-1774 --A OUTPUT -j limit-1773 --A OUTPUT -j limit-1772 --A OUTPUT -j limit-1771 --A OUTPUT -j limit-1770 --A OUTPUT -j limit-1769 --A OUTPUT -j limit-1768 --A OUTPUT -j limit-1767 --A OUTPUT -j limit-1766 --A OUTPUT -j limit-1765 --A OUTPUT -j limit-1764 --A OUTPUT -j limit-1763 --A OUTPUT -j limit-1762 --A OUTPUT -j limit-1761 --A OUTPUT -j limit-1760 --A OUTPUT -j limit-1759 --A OUTPUT -j limit-1758 --A OUTPUT -j limit-1757 --A OUTPUT -j limit-1756 --A OUTPUT -j limit-1755 --A OUTPUT -j limit-1754 --A OUTPUT -j limit-1753 --A OUTPUT -j limit-1752 --A OUTPUT -j limit-1751 --A OUTPUT -j limit-1750 --A OUTPUT -j limit-1749 --A OUTPUT -j limit-1748 --A OUTPUT -j limit-1747 --A OUTPUT -j limit-1746 --A OUTPUT -j limit-1745 --A OUTPUT -j limit-1744 --A OUTPUT -j limit-1743 --A OUTPUT -j limit-1742 --A OUTPUT -j limit-1741 --A OUTPUT -j limit-1740 --A OUTPUT -j limit-1739 --A OUTPUT -j limit-1738 --A OUTPUT -j limit-1737 --A OUTPUT -j limit-1736 --A OUTPUT -j limit-1735 --A OUTPUT -j limit-1734 --A OUTPUT -j limit-1733 --A OUTPUT -j limit-1732 --A OUTPUT -j limit-1731 --A OUTPUT -j limit-1730 --A OUTPUT -j limit-1729 --A OUTPUT -j limit-1728 --A OUTPUT -j limit-1727 --A OUTPUT -j limit-1726 --A OUTPUT -j limit-1725 --A OUTPUT -j limit-1724 --A OUTPUT -j limit-1723 --A OUTPUT -j limit-1722 --A OUTPUT -j limit-1721 --A OUTPUT -j limit-1720 --A OUTPUT -j limit-1719 --A OUTPUT -j limit-1718 --A OUTPUT -j limit-1717 --A OUTPUT -j limit-1716 --A OUTPUT -j limit-1715 --A OUTPUT -j limit-1714 --A OUTPUT -j limit-1713 --A OUTPUT -j limit-1712 --A OUTPUT -j limit-1711 --A OUTPUT -j limit-1710 --A OUTPUT -j limit-1709 --A OUTPUT -j limit-1708 --A OUTPUT -j limit-1707 --A OUTPUT -j limit-1706 --A OUTPUT -j limit-1705 --A OUTPUT -j limit-1704 --A OUTPUT -j limit-1703 --A OUTPUT -j limit-1702 --A OUTPUT -j limit-1701 --A OUTPUT -j limit-1700 --A OUTPUT -j limit-1699 --A OUTPUT -j limit-1698 --A OUTPUT -j limit-1697 --A OUTPUT -j limit-1696 --A OUTPUT -j limit-1695 --A OUTPUT -j limit-1694 --A OUTPUT -j limit-1693 --A OUTPUT -j limit-1692 --A OUTPUT -j limit-1691 --A OUTPUT -j limit-1690 --A OUTPUT -j limit-1689 --A OUTPUT -j limit-1688 --A OUTPUT -j limit-1687 --A OUTPUT -j limit-1686 --A OUTPUT -j limit-1685 --A OUTPUT -j limit-1684 --A OUTPUT -j limit-1683 --A OUTPUT -j limit-1682 --A OUTPUT -j limit-1681 --A OUTPUT -j limit-1680 --A OUTPUT -j limit-1679 --A OUTPUT -j limit-1678 --A OUTPUT -j limit-1677 --A OUTPUT -j limit-1676 --A OUTPUT -j limit-1675 --A OUTPUT -j limit-1674 --A OUTPUT -j limit-1673 --A OUTPUT -j limit-1672 --A OUTPUT -j limit-1671 --A OUTPUT -j limit-1670 --A OUTPUT -j limit-1669 --A OUTPUT -j limit-1668 --A OUTPUT -j limit-1667 --A OUTPUT -j limit-1666 --A OUTPUT -j limit-1665 --A OUTPUT -j limit-1664 --A OUTPUT -j limit-1663 --A OUTPUT -j limit-1662 --A OUTPUT -j limit-1661 --A OUTPUT -j limit-1660 --A OUTPUT -j limit-1659 --A OUTPUT -j limit-1658 --A OUTPUT -j limit-1657 --A OUTPUT -j limit-1656 --A OUTPUT -j limit-1655 --A OUTPUT -j limit-1654 --A OUTPUT -j limit-1653 --A OUTPUT -j limit-1652 --A OUTPUT -j limit-1651 --A OUTPUT -j limit-1650 --A OUTPUT -j limit-1649 --A OUTPUT -j limit-1648 --A OUTPUT -j limit-1647 --A OUTPUT -j limit-1646 --A OUTPUT -j limit-1645 --A OUTPUT -j limit-1644 --A OUTPUT -j limit-1643 --A OUTPUT -j limit-1642 --A OUTPUT -j limit-1641 --A OUTPUT -j limit-1640 --A OUTPUT -j limit-1639 --A OUTPUT -j limit-1638 --A OUTPUT -j limit-1637 --A OUTPUT -j limit-1636 --A OUTPUT -j limit-1635 --A OUTPUT -j limit-1634 --A OUTPUT -j limit-1633 --A OUTPUT -j limit-1632 --A OUTPUT -j limit-1631 --A OUTPUT -j limit-1630 --A OUTPUT -j limit-1629 --A OUTPUT -j limit-1628 --A OUTPUT -j limit-1627 --A OUTPUT -j limit-1626 --A OUTPUT -j limit-1625 --A OUTPUT -j limit-1624 --A OUTPUT -j limit-1623 --A OUTPUT -j limit-1622 --A OUTPUT -j limit-1621 --A OUTPUT -j limit-1620 --A OUTPUT -j limit-1619 --A OUTPUT -j limit-1618 --A OUTPUT -j limit-1617 --A OUTPUT -j limit-1616 --A OUTPUT -j limit-1615 --A OUTPUT -j limit-1614 --A OUTPUT -j limit-1613 --A OUTPUT -j limit-1612 --A OUTPUT -j limit-1611 --A OUTPUT -j limit-1610 --A OUTPUT -j limit-1609 --A OUTPUT -j limit-1608 --A OUTPUT -j limit-1607 --A OUTPUT -j limit-1606 --A OUTPUT -j limit-1605 --A OUTPUT -j limit-1604 --A OUTPUT -j limit-1603 --A OUTPUT -j limit-1602 --A OUTPUT -j limit-1601 --A OUTPUT -j limit-1600 --A OUTPUT -j limit-1599 --A OUTPUT -j limit-1598 --A OUTPUT -j limit-1597 --A OUTPUT -j limit-1596 --A OUTPUT -j limit-1595 --A OUTPUT -j limit-1594 --A OUTPUT -j limit-1593 --A OUTPUT -j limit-1592 --A OUTPUT -j limit-1591 --A OUTPUT -j limit-1590 --A OUTPUT -j limit-1589 --A OUTPUT -j limit-1588 --A OUTPUT -j limit-1587 --A OUTPUT -j limit-1586 --A OUTPUT -j limit-1585 --A OUTPUT -j limit-1584 --A OUTPUT -j limit-1583 --A OUTPUT -j limit-1582 --A OUTPUT -j limit-1581 --A OUTPUT -j limit-1580 --A OUTPUT -j limit-1579 --A OUTPUT -j limit-1578 --A OUTPUT -j limit-1577 --A OUTPUT -j limit-1576 --A OUTPUT -j limit-1575 --A OUTPUT -j limit-1574 --A OUTPUT -j limit-1573 --A OUTPUT -j limit-1572 --A OUTPUT -j limit-1571 --A OUTPUT -j limit-1570 --A OUTPUT -j limit-1569 --A OUTPUT -j limit-1568 --A OUTPUT -j limit-1567 --A OUTPUT -j limit-1566 --A OUTPUT -j limit-1565 --A OUTPUT -j limit-1564 --A OUTPUT -j limit-1563 --A OUTPUT -j limit-1562 --A OUTPUT -j limit-1561 --A OUTPUT -j limit-1560 --A OUTPUT -j limit-1559 --A OUTPUT -j limit-1558 --A OUTPUT -j limit-1557 --A OUTPUT -j limit-1556 --A OUTPUT -j limit-1555 --A OUTPUT -j limit-1554 --A OUTPUT -j limit-1553 --A OUTPUT -j limit-1552 --A OUTPUT -j limit-1551 --A OUTPUT -j limit-1550 --A OUTPUT -j limit-1549 --A OUTPUT -j limit-1548 --A OUTPUT -j limit-1547 --A OUTPUT -j limit-1546 --A OUTPUT -j limit-1545 --A OUTPUT -j limit-1544 --A OUTPUT -j limit-1543 --A OUTPUT -j limit-1542 --A OUTPUT -j limit-1541 --A OUTPUT -j limit-1540 --A OUTPUT -j limit-1539 --A OUTPUT -j limit-1538 --A OUTPUT -j limit-1537 --A OUTPUT -j limit-1536 --A OUTPUT -j limit-1535 --A OUTPUT -j limit-1534 --A OUTPUT -j limit-1533 --A OUTPUT -j limit-1532 --A OUTPUT -j limit-1531 --A OUTPUT -j limit-1530 --A OUTPUT -j limit-1529 --A OUTPUT -j limit-1528 --A OUTPUT -j limit-1527 --A OUTPUT -j limit-1526 --A OUTPUT -j limit-1525 --A OUTPUT -j limit-1524 --A OUTPUT -j limit-1523 --A OUTPUT -j limit-1522 --A OUTPUT -j limit-1521 --A OUTPUT -j limit-1520 --A OUTPUT -j limit-1519 --A OUTPUT -j limit-1518 --A OUTPUT -j limit-1517 --A OUTPUT -j limit-1516 --A OUTPUT -j limit-1515 --A OUTPUT -j limit-1514 --A OUTPUT -j limit-1513 --A OUTPUT -j limit-1512 --A OUTPUT -j limit-1511 --A OUTPUT -j limit-1510 --A OUTPUT -j limit-1509 --A OUTPUT -j limit-1508 --A OUTPUT -j limit-1507 --A OUTPUT -j limit-1506 --A OUTPUT -j limit-1505 --A OUTPUT -j limit-1504 --A OUTPUT -j limit-1503 --A OUTPUT -j limit-1502 --A OUTPUT -j limit-1501 --A OUTPUT -j limit-1500 --A OUTPUT -j limit-1499 --A OUTPUT -j limit-1498 --A OUTPUT -j limit-1497 --A OUTPUT -j limit-1496 --A OUTPUT -j limit-1495 --A OUTPUT -j limit-1494 --A OUTPUT -j limit-1493 --A OUTPUT -j limit-1492 --A OUTPUT -j limit-1491 --A OUTPUT -j limit-1490 --A OUTPUT -j limit-1489 --A OUTPUT -j limit-1488 --A OUTPUT -j limit-1487 --A OUTPUT -j limit-1486 --A OUTPUT -j limit-1485 --A OUTPUT -j limit-1484 --A OUTPUT -j limit-1483 --A OUTPUT -j limit-1482 --A OUTPUT -j limit-1481 --A OUTPUT -j limit-1480 --A OUTPUT -j limit-1479 --A OUTPUT -j limit-1478 --A OUTPUT -j limit-1477 --A OUTPUT -j limit-1476 --A OUTPUT -j limit-1475 --A OUTPUT -j limit-1474 --A OUTPUT -j limit-1473 --A OUTPUT -j limit-1472 --A OUTPUT -j limit-1471 --A OUTPUT -j limit-1470 --A OUTPUT -j limit-1469 --A OUTPUT -j limit-1468 --A OUTPUT -j limit-1467 --A OUTPUT -j limit-1466 --A OUTPUT -j limit-1465 --A OUTPUT -j limit-1464 --A OUTPUT -j limit-1463 --A OUTPUT -j limit-1462 --A OUTPUT -j limit-1461 --A OUTPUT -j limit-1460 --A OUTPUT -j limit-1459 --A OUTPUT -j limit-1458 --A OUTPUT -j limit-1457 --A OUTPUT -j limit-1456 --A OUTPUT -j limit-1455 --A OUTPUT -j limit-1454 --A OUTPUT -j limit-1453 --A OUTPUT -j limit-1452 --A OUTPUT -j limit-1451 --A OUTPUT -j limit-1450 --A OUTPUT -j limit-1449 --A OUTPUT -j limit-1448 --A OUTPUT -j limit-1447 --A OUTPUT -j limit-1446 --A OUTPUT -j limit-1445 --A OUTPUT -j limit-1444 --A OUTPUT -j limit-1443 --A OUTPUT -j limit-1442 --A OUTPUT -j limit-1441 --A OUTPUT -j limit-1440 --A OUTPUT -j limit-1439 --A OUTPUT -j limit-1438 --A OUTPUT -j limit-1437 --A OUTPUT -j limit-1436 --A OUTPUT -j limit-1435 --A OUTPUT -j limit-1434 --A OUTPUT -j limit-1433 --A OUTPUT -j limit-1432 --A OUTPUT -j limit-1431 --A OUTPUT -j limit-1430 --A OUTPUT -j limit-1429 --A OUTPUT -j limit-1428 --A OUTPUT -j limit-1427 --A OUTPUT -j limit-1426 --A OUTPUT -j limit-1425 --A OUTPUT -j limit-1424 --A OUTPUT -j limit-1423 --A OUTPUT -j limit-1422 --A OUTPUT -j limit-1421 --A OUTPUT -j limit-1420 --A OUTPUT -j limit-1419 --A OUTPUT -j limit-1418 --A OUTPUT -j limit-1417 --A OUTPUT -j limit-1416 --A OUTPUT -j limit-1415 --A OUTPUT -j limit-1414 --A OUTPUT -j limit-1413 --A OUTPUT -j limit-1412 --A OUTPUT -j limit-1411 --A OUTPUT -j limit-1410 --A OUTPUT -j limit-1409 --A OUTPUT -j limit-1408 --A OUTPUT -j limit-1407 --A OUTPUT -j limit-1406 --A OUTPUT -j limit-1405 --A OUTPUT -j limit-1404 --A OUTPUT -j limit-1403 --A OUTPUT -j limit-1402 --A OUTPUT -j limit-1401 --A OUTPUT -j limit-1400 --A OUTPUT -j limit-1399 --A OUTPUT -j limit-1398 --A OUTPUT -j limit-1397 --A OUTPUT -j limit-1396 --A OUTPUT -j limit-1395 --A OUTPUT -j limit-1394 --A OUTPUT -j limit-1393 --A OUTPUT -j limit-1392 --A OUTPUT -j limit-1391 --A OUTPUT -j limit-1390 --A OUTPUT -j limit-1389 --A OUTPUT -j limit-1388 --A OUTPUT -j limit-1387 --A OUTPUT -j limit-1386 --A OUTPUT -j limit-1385 --A OUTPUT -j limit-1384 --A OUTPUT -j limit-1383 --A OUTPUT -j limit-1382 --A OUTPUT -j limit-1381 --A OUTPUT -j limit-1380 --A OUTPUT -j limit-1379 --A OUTPUT -j limit-1378 --A OUTPUT -j limit-1377 --A OUTPUT -j limit-1376 --A OUTPUT -j limit-1375 --A OUTPUT -j limit-1374 --A OUTPUT -j limit-1373 --A OUTPUT -j limit-1372 --A OUTPUT -j limit-1371 --A OUTPUT -j limit-1370 --A OUTPUT -j limit-1369 --A OUTPUT -j limit-1368 --A OUTPUT -j limit-1367 --A OUTPUT -j limit-1366 --A OUTPUT -j limit-1365 --A OUTPUT -j limit-1364 --A OUTPUT -j limit-1363 --A OUTPUT -j limit-1362 --A OUTPUT -j limit-1361 --A OUTPUT -j limit-1360 --A OUTPUT -j limit-1359 --A OUTPUT -j limit-1358 --A OUTPUT -j limit-1357 --A OUTPUT -j limit-1356 --A OUTPUT -j limit-1355 --A OUTPUT -j limit-1354 --A OUTPUT -j limit-1353 --A OUTPUT -j limit-1352 --A OUTPUT -j limit-1351 --A OUTPUT -j limit-1350 --A OUTPUT -j limit-1349 --A OUTPUT -j limit-1348 --A OUTPUT -j limit-1347 --A OUTPUT -j limit-1346 --A OUTPUT -j limit-1345 --A OUTPUT -j limit-1344 --A OUTPUT -j limit-1343 --A OUTPUT -j limit-1342 --A OUTPUT -j limit-1341 --A OUTPUT -j limit-1340 --A OUTPUT -j limit-1339 --A OUTPUT -j limit-1338 --A OUTPUT -j limit-1337 --A OUTPUT -j limit-1336 --A OUTPUT -j limit-1335 --A OUTPUT -j limit-1334 --A OUTPUT -j limit-1333 --A OUTPUT -j limit-1332 --A OUTPUT -j limit-1331 --A OUTPUT -j limit-1330 --A OUTPUT -j limit-1329 --A OUTPUT -j limit-1328 --A OUTPUT -j limit-1327 --A OUTPUT -j limit-1326 --A OUTPUT -j limit-1325 --A OUTPUT -j limit-1324 --A OUTPUT -j limit-1323 --A OUTPUT -j limit-1322 --A OUTPUT -j limit-1321 --A OUTPUT -j limit-1320 --A OUTPUT -j limit-1319 --A OUTPUT -j limit-1318 --A OUTPUT -j limit-1317 --A OUTPUT -j limit-1316 --A OUTPUT -j limit-1315 --A OUTPUT -j limit-1314 --A OUTPUT -j limit-1313 --A OUTPUT -j limit-1312 --A OUTPUT -j limit-1311 --A OUTPUT -j limit-1310 --A OUTPUT -j limit-1309 --A OUTPUT -j limit-1308 --A OUTPUT -j limit-1307 --A OUTPUT -j limit-1306 --A OUTPUT -j limit-1305 --A OUTPUT -j limit-1304 --A OUTPUT -j limit-1303 --A OUTPUT -j limit-1302 --A OUTPUT -j limit-1301 --A OUTPUT -j limit-1300 --A OUTPUT -j limit-1299 --A OUTPUT -j limit-1298 --A OUTPUT -j limit-1297 --A OUTPUT -j limit-1296 --A OUTPUT -j limit-1295 --A OUTPUT -j limit-1294 --A OUTPUT -j limit-1293 --A OUTPUT -j limit-1292 --A OUTPUT -j limit-1291 --A OUTPUT -j limit-1290 --A OUTPUT -j limit-1289 --A OUTPUT -j limit-1288 --A OUTPUT -j limit-1287 --A OUTPUT -j limit-1286 --A OUTPUT -j limit-1285 --A OUTPUT -j limit-1284 --A OUTPUT -j limit-1283 --A OUTPUT -j limit-1282 --A OUTPUT -j limit-1281 --A OUTPUT -j limit-1280 --A OUTPUT -j limit-1279 --A OUTPUT -j limit-1278 --A OUTPUT -j limit-1277 --A OUTPUT -j limit-1276 --A OUTPUT -j limit-1275 --A OUTPUT -j limit-1274 --A OUTPUT -j limit-1273 --A OUTPUT -j limit-1272 --A OUTPUT -j limit-1271 --A OUTPUT -j limit-1270 --A OUTPUT -j limit-1269 --A OUTPUT -j limit-1268 --A OUTPUT -j limit-1267 --A OUTPUT -j limit-1266 --A OUTPUT -j limit-1265 --A OUTPUT -j limit-1264 --A OUTPUT -j limit-1263 --A OUTPUT -j limit-1262 --A OUTPUT -j limit-1261 --A OUTPUT -j limit-1260 --A OUTPUT -j limit-1259 --A OUTPUT -j limit-1258 +-A OUTPUT -j limit-2927 +-A OUTPUT -j limit-2926 +-A OUTPUT -j limit-2925 +-A OUTPUT -j limit-2924 +-A OUTPUT -j limit-2923 +-A OUTPUT -j limit-2922 +-A OUTPUT -j limit-2921 +-A OUTPUT -j limit-2920 +-A OUTPUT -j limit-2919 +-A OUTPUT -j limit-2918 +-A OUTPUT -j limit-2917 +-A OUTPUT -j limit-2916 +-A OUTPUT -j limit-2915 +-A OUTPUT -j limit-2914 +-A OUTPUT -j limit-2913 +-A OUTPUT -j limit-2912 +-A OUTPUT -j limit-2911 +-A OUTPUT -j limit-2910 +-A OUTPUT -j limit-2909 +-A OUTPUT -j limit-2908 +-A OUTPUT -j limit-2907 +-A OUTPUT -j limit-2906 +-A OUTPUT -j limit-2905 +-A OUTPUT -j limit-2904 +-A OUTPUT -j limit-2903 +-A OUTPUT -j limit-2902 +-A OUTPUT -j limit-2901 +-A OUTPUT -j limit-2900 +-A OUTPUT -j limit-2899 +-A OUTPUT -j limit-2898 +-A OUTPUT -j limit-2897 +-A OUTPUT -j limit-2896 +-A OUTPUT -j limit-2895 +-A OUTPUT -j limit-2894 +-A OUTPUT -j limit-2893 +-A OUTPUT -j limit-2892 +-A OUTPUT -j limit-2891 +-A OUTPUT -j limit-2890 +-A OUTPUT -j limit-2889 +-A OUTPUT -j limit-2888 +-A OUTPUT -j limit-2887 +-A OUTPUT -j limit-2886 +-A OUTPUT -j limit-2885 +-A OUTPUT -j limit-2884 +-A OUTPUT -j limit-2883 +-A OUTPUT -j limit-2882 +-A OUTPUT -j limit-2881 +-A OUTPUT -j limit-2880 +-A OUTPUT -j limit-2879 +-A OUTPUT -j limit-2878 +-A OUTPUT -j limit-2877 +-A OUTPUT -j limit-2876 +-A OUTPUT -j limit-2875 +-A OUTPUT -j limit-2874 +-A OUTPUT -j limit-2873 +-A OUTPUT -j limit-2872 +-A OUTPUT -j limit-2871 +-A OUTPUT -j limit-2870 +-A OUTPUT -j limit-2869 +-A OUTPUT -j limit-2868 +-A OUTPUT -j limit-2867 +-A OUTPUT -j limit-2866 +-A OUTPUT -j limit-2865 +-A OUTPUT -j limit-2864 +-A OUTPUT -j limit-2863 +-A OUTPUT -j limit-2862 +-A OUTPUT -j limit-2861 +-A OUTPUT -j limit-2860 +-A OUTPUT -j limit-2859 +-A OUTPUT -j limit-2858 +-A OUTPUT -j limit-2857 +-A OUTPUT -j limit-2856 +-A OUTPUT -j limit-2855 +-A OUTPUT -j limit-2854 +-A OUTPUT -j limit-2853 +-A OUTPUT -j limit-2852 +-A OUTPUT -j limit-2851 +-A OUTPUT -j limit-2850 +-A OUTPUT -j limit-2849 +-A OUTPUT -j limit-2848 +-A OUTPUT -j limit-2847 +-A OUTPUT -j limit-2846 +-A OUTPUT -j limit-2845 +-A OUTPUT -j limit-2844 +-A OUTPUT -j limit-2843 +-A OUTPUT -j limit-2842 +-A OUTPUT -j limit-2841 +-A OUTPUT -j limit-2840 +-A OUTPUT -j limit-2839 +-A OUTPUT -j limit-2838 +-A OUTPUT -j limit-2837 +-A OUTPUT -j limit-2836 +-A OUTPUT -j limit-2835 +-A OUTPUT -j limit-2834 +-A OUTPUT -j limit-2833 +-A OUTPUT -j limit-2832 +-A OUTPUT -j limit-2831 +-A OUTPUT -j limit-2830 +-A OUTPUT -j limit-2829 +-A OUTPUT -j limit-2828 +-A OUTPUT -j limit-2827 +-A OUTPUT -j limit-2826 +-A OUTPUT -j limit-2825 +-A OUTPUT -j limit-2824 +-A OUTPUT -j limit-2823 +-A OUTPUT -j limit-2822 +-A OUTPUT -j limit-2821 +-A OUTPUT -j limit-2820 +-A OUTPUT -j limit-2819 +-A OUTPUT -j limit-2818 +-A OUTPUT -j limit-2817 +-A OUTPUT -j limit-2816 +-A OUTPUT -j limit-2815 +-A OUTPUT -j limit-2814 +-A OUTPUT -j limit-2813 +-A OUTPUT -j limit-2812 +-A OUTPUT -j limit-2811 +-A OUTPUT -j limit-2810 +-A OUTPUT -j limit-2809 +-A OUTPUT -j limit-2808 +-A OUTPUT -j limit-2807 +-A OUTPUT -j limit-2806 +-A OUTPUT -j limit-2805 +-A OUTPUT -j limit-2804 +-A OUTPUT -j limit-2803 +-A OUTPUT -j limit-2802 +-A OUTPUT -j limit-2801 +-A OUTPUT -j limit-2800 +-A OUTPUT -j limit-2799 +-A OUTPUT -j limit-2798 +-A OUTPUT -j limit-2797 +-A OUTPUT -j limit-2796 +-A OUTPUT -j limit-2795 +-A OUTPUT -j limit-2794 +-A OUTPUT -j limit-2793 +-A OUTPUT -j limit-2792 +-A OUTPUT -j limit-2791 +-A OUTPUT -j limit-2790 +-A OUTPUT -j limit-2789 +-A OUTPUT -j limit-2788 +-A OUTPUT -j limit-2787 +-A OUTPUT -j limit-2786 +-A OUTPUT -j limit-2785 +-A OUTPUT -j limit-2784 +-A OUTPUT -j limit-2783 +-A OUTPUT -j limit-2782 +-A OUTPUT -j limit-2781 +-A OUTPUT -j limit-2780 +-A OUTPUT -j limit-2779 +-A OUTPUT -j limit-2778 +-A OUTPUT -j limit-2777 +-A OUTPUT -j limit-2776 +-A OUTPUT -j limit-2775 +-A OUTPUT -j limit-2774 +-A OUTPUT -j limit-2773 +-A OUTPUT -j limit-2772 +-A OUTPUT -j limit-2771 +-A OUTPUT -j limit-2770 +-A OUTPUT -j limit-2769 +-A OUTPUT -j limit-2768 +-A OUTPUT -j limit-2767 +-A OUTPUT -j limit-2766 +-A OUTPUT -j limit-2765 +-A OUTPUT -j limit-2764 +-A OUTPUT -j limit-2763 +-A OUTPUT -j limit-2762 +-A OUTPUT -j limit-2761 +-A OUTPUT -j limit-2760 +-A OUTPUT -j limit-2759 +-A OUTPUT -j limit-2758 +-A OUTPUT -j limit-2757 +-A OUTPUT -j limit-2756 +-A OUTPUT -j limit-2755 +-A OUTPUT -j limit-2754 +-A OUTPUT -j limit-2753 +-A OUTPUT -j limit-2752 +-A OUTPUT -j limit-2751 +-A OUTPUT -j limit-2750 +-A OUTPUT -j limit-2749 +-A OUTPUT -j limit-2748 +-A OUTPUT -j limit-2747 +-A OUTPUT -j limit-2746 +-A OUTPUT -j limit-2745 +-A OUTPUT -j limit-2744 +-A OUTPUT -j limit-2743 +-A OUTPUT -j limit-2742 +-A OUTPUT -j limit-2741 +-A OUTPUT -j limit-2740 +-A OUTPUT -j limit-2739 +-A OUTPUT -j limit-2738 +-A OUTPUT -j limit-2737 +-A OUTPUT -j limit-2736 +-A OUTPUT -j limit-2735 +-A OUTPUT -j limit-2734 +-A OUTPUT -j limit-2733 +-A OUTPUT -j limit-2732 +-A OUTPUT -j limit-2731 +-A OUTPUT -j limit-2730 +-A OUTPUT -j limit-2729 +-A OUTPUT -j limit-2728 +-A OUTPUT -j limit-2727 +-A OUTPUT -j limit-2726 +-A OUTPUT -j limit-2725 +-A OUTPUT -j limit-2724 +-A OUTPUT -j limit-2723 +-A OUTPUT -j limit-2722 +-A OUTPUT -j limit-2721 +-A OUTPUT -j limit-2720 +-A OUTPUT -j limit-2719 +-A OUTPUT -j limit-2718 +-A OUTPUT -j limit-2717 +-A OUTPUT -j limit-2716 +-A OUTPUT -j limit-2715 +-A OUTPUT -j limit-2714 +-A OUTPUT -j limit-2713 +-A OUTPUT -j limit-2712 +-A OUTPUT -j limit-2711 +-A OUTPUT -j limit-2710 +-A OUTPUT -j limit-2709 +-A OUTPUT -j limit-2708 +-A OUTPUT -j limit-2707 +-A OUTPUT -j limit-2706 +-A OUTPUT -j limit-2705 +-A OUTPUT -j limit-2704 +-A OUTPUT -j limit-2703 +-A OUTPUT -j limit-2702 +-A OUTPUT -j limit-2701 +-A OUTPUT -j limit-2700 +-A OUTPUT -j limit-2699 +-A OUTPUT -j limit-2698 +-A OUTPUT -j limit-2697 +-A OUTPUT -j limit-2696 +-A OUTPUT -j limit-2695 +-A OUTPUT -j limit-2694 +-A OUTPUT -j limit-2693 +-A OUTPUT -j limit-2692 +-A OUTPUT -j limit-2691 +-A OUTPUT -j limit-2690 +-A OUTPUT -j limit-2689 +-A OUTPUT -j limit-2688 +-A OUTPUT -j limit-2687 +-A OUTPUT -j limit-2686 +-A OUTPUT -j limit-2685 +-A OUTPUT -j limit-2684 +-A OUTPUT -j limit-2683 +-A OUTPUT -j limit-2682 +-A OUTPUT -j limit-2681 +-A OUTPUT -j limit-2680 +-A OUTPUT -j limit-2679 +-A OUTPUT -j limit-2678 +-A OUTPUT -j limit-2677 +-A OUTPUT -j limit-2676 +-A OUTPUT -j limit-2675 +-A OUTPUT -j limit-2674 +-A OUTPUT -j limit-2673 +-A OUTPUT -j limit-2672 +-A OUTPUT -j limit-2671 +-A OUTPUT -j limit-2670 +-A OUTPUT -j limit-2669 +-A OUTPUT -j limit-2668 +-A OUTPUT -j limit-2667 +-A OUTPUT -j limit-2666 +-A OUTPUT -j limit-2665 +-A OUTPUT -j limit-2664 +-A OUTPUT -j limit-2663 +-A OUTPUT -j limit-2662 +-A OUTPUT -j limit-2661 +-A OUTPUT -j limit-2660 +-A OUTPUT -j limit-2659 +-A OUTPUT -j limit-2658 +-A OUTPUT -j limit-2657 +-A OUTPUT -j limit-2656 +-A OUTPUT -j limit-2655 +-A OUTPUT -j limit-2654 +-A OUTPUT -j limit-2653 +-A OUTPUT -j limit-2652 +-A OUTPUT -j limit-2651 +-A OUTPUT -j limit-2650 +-A OUTPUT -j limit-2649 +-A OUTPUT -j limit-2648 +-A OUTPUT -j limit-2647 +-A OUTPUT -j limit-2646 +-A OUTPUT -j limit-2645 +-A OUTPUT -j limit-2644 +-A OUTPUT -j limit-2643 +-A OUTPUT -j limit-2642 +-A OUTPUT -j limit-2641 +-A OUTPUT -j limit-2640 +-A OUTPUT -j limit-2639 +-A OUTPUT -j limit-2638 +-A OUTPUT -j limit-2637 +-A OUTPUT -j limit-2636 +-A OUTPUT -j limit-2635 +-A OUTPUT -j limit-2634 +-A OUTPUT -j limit-2633 +-A OUTPUT -j limit-2632 +-A OUTPUT -j limit-2631 +-A OUTPUT -j limit-2630 +-A OUTPUT -j limit-2629 +-A OUTPUT -j limit-2628 +-A OUTPUT -j limit-2627 +-A OUTPUT -j limit-2626 +-A OUTPUT -j limit-2625 +-A OUTPUT -j limit-2624 +-A OUTPUT -j limit-2623 +-A OUTPUT -j limit-2622 +-A OUTPUT -j limit-2621 +-A OUTPUT -j limit-2620 +-A OUTPUT -j limit-2619 +-A OUTPUT -j limit-2618 +-A OUTPUT -j limit-2617 +-A OUTPUT -j limit-2616 +-A OUTPUT -j limit-2615 +-A OUTPUT -j limit-2614 +-A OUTPUT -j limit-2613 +-A OUTPUT -j limit-2612 +-A OUTPUT -j limit-2611 +-A OUTPUT -j limit-2610 +-A OUTPUT -j limit-2609 +-A OUTPUT -j limit-2608 +-A OUTPUT -j limit-2607 +-A OUTPUT -j limit-2606 +-A OUTPUT -j limit-2605 +-A OUTPUT -j limit-2604 +-A OUTPUT -j limit-2603 +-A OUTPUT -j limit-2602 +-A OUTPUT -j limit-2601 +-A OUTPUT -j limit-2600 +-A OUTPUT -j limit-2599 +-A OUTPUT -j limit-2598 +-A OUTPUT -j limit-2597 +-A OUTPUT -j limit-2596 +-A OUTPUT -j limit-2595 +-A OUTPUT -j limit-2594 +-A OUTPUT -j limit-2593 +-A OUTPUT -j limit-2592 +-A OUTPUT -j limit-2591 +-A OUTPUT -j limit-2590 +-A OUTPUT -j limit-2589 +-A OUTPUT -j limit-2588 +-A OUTPUT -j limit-2587 +-A OUTPUT -j limit-2586 +-A OUTPUT -j limit-2585 +-A OUTPUT -j limit-2584 +-A OUTPUT -j limit-2583 +-A OUTPUT -j limit-2582 +-A OUTPUT -j limit-2581 +-A OUTPUT -j limit-2580 +-A OUTPUT -j limit-2579 +-A OUTPUT -j limit-2578 +-A OUTPUT -j limit-2577 +-A OUTPUT -j limit-2576 +-A OUTPUT -j limit-2575 +-A OUTPUT -j limit-2574 +-A OUTPUT -j limit-2573 +-A OUTPUT -j limit-2572 +-A OUTPUT -j limit-2571 +-A OUTPUT -j limit-2570 +-A OUTPUT -j limit-2569 +-A OUTPUT -j limit-2568 +-A OUTPUT -j limit-2567 +-A OUTPUT -j limit-2566 +-A OUTPUT -j limit-2565 +-A OUTPUT -j limit-2564 +-A OUTPUT -j limit-2563 +-A OUTPUT -j limit-2562 +-A OUTPUT -j limit-2561 +-A OUTPUT -j limit-2560 +-A OUTPUT -j limit-2559 +-A OUTPUT -j limit-2558 +-A OUTPUT -j limit-2557 +-A OUTPUT -j limit-2556 +-A OUTPUT -j limit-2555 +-A OUTPUT -j limit-2554 +-A OUTPUT -j limit-2553 +-A OUTPUT -j limit-2552 +-A OUTPUT -j limit-2551 +-A OUTPUT -j limit-2550 +-A OUTPUT -j limit-2549 +-A OUTPUT -j limit-2548 +-A OUTPUT -j limit-2547 +-A OUTPUT -j limit-2546 +-A OUTPUT -j limit-2545 +-A OUTPUT -j limit-2544 +-A OUTPUT -j limit-2543 +-A OUTPUT -j limit-2542 +-A OUTPUT -j limit-2541 +-A OUTPUT -j limit-2540 +-A OUTPUT -j limit-2539 +-A OUTPUT -j limit-2538 +-A OUTPUT -j limit-2537 +-A OUTPUT -j limit-2536 +-A OUTPUT -j limit-2535 +-A OUTPUT -j limit-2534 +-A OUTPUT -j limit-2533 +-A OUTPUT -j limit-2532 +-A OUTPUT -j limit-2531 +-A OUTPUT -j limit-2530 +-A OUTPUT -j limit-2529 +-A OUTPUT -j limit-2528 +-A OUTPUT -j limit-2527 +-A OUTPUT -j limit-2526 +-A OUTPUT -j limit-2525 +-A OUTPUT -j limit-2524 +-A OUTPUT -j limit-2523 +-A OUTPUT -j limit-2522 +-A OUTPUT -j limit-2521 +-A OUTPUT -j limit-2520 +-A OUTPUT -j limit-2519 +-A OUTPUT -j limit-2518 +-A OUTPUT -j limit-2517 +-A OUTPUT -j limit-2516 +-A OUTPUT -j limit-2515 +-A OUTPUT -j limit-2514 +-A OUTPUT -j limit-2513 +-A OUTPUT -j limit-2512 +-A OUTPUT -j limit-2511 +-A OUTPUT -j limit-2510 +-A OUTPUT -j limit-2509 +-A OUTPUT -j limit-2508 +-A OUTPUT -j limit-2507 +-A OUTPUT -j limit-2506 +-A OUTPUT -j limit-2505 +-A OUTPUT -j limit-2504 +-A OUTPUT -j limit-2503 +-A OUTPUT -j limit-2502 +-A OUTPUT -j limit-2501 +-A OUTPUT -j limit-2500 +-A OUTPUT -j limit-2499 +-A OUTPUT -j limit-2498 +-A OUTPUT -j limit-2497 +-A OUTPUT -j limit-2496 +-A OUTPUT -j limit-2495 +-A OUTPUT -j limit-2494 +-A OUTPUT -j limit-2493 +-A OUTPUT -j limit-2492 +-A OUTPUT -j limit-2491 +-A OUTPUT -j limit-2490 +-A OUTPUT -j limit-2489 +-A OUTPUT -j limit-2488 +-A OUTPUT -j limit-2487 +-A OUTPUT -j limit-2486 +-A OUTPUT -j limit-2485 +-A OUTPUT -j limit-2484 +-A OUTPUT -j limit-2483 +-A OUTPUT -j limit-2482 +-A OUTPUT -j limit-2481 +-A OUTPUT -j limit-2480 +-A OUTPUT -j limit-2479 +-A OUTPUT -j limit-2478 +-A OUTPUT -j limit-2477 +-A OUTPUT -j limit-2476 +-A OUTPUT -j limit-2475 +-A OUTPUT -j limit-2474 +-A OUTPUT -j limit-2473 +-A OUTPUT -j limit-2472 +-A OUTPUT -j limit-2471 +-A OUTPUT -j limit-2470 +-A OUTPUT -j limit-2469 +-A OUTPUT -j limit-2468 +-A OUTPUT -j limit-2467 +-A OUTPUT -j limit-2466 +-A OUTPUT -j limit-2465 +-A OUTPUT -j limit-2464 +-A OUTPUT -j limit-2463 +-A OUTPUT -j limit-2462 +-A OUTPUT -j limit-2461 +-A OUTPUT -j limit-2460 +-A OUTPUT -j limit-2459 +-A OUTPUT -j limit-2458 +-A OUTPUT -j limit-2457 +-A OUTPUT -j limit-2456 +-A OUTPUT -j limit-2455 +-A OUTPUT -j limit-2454 +-A OUTPUT -j limit-2453 +-A OUTPUT -j limit-2452 +-A OUTPUT -j limit-2451 +-A OUTPUT -j limit-2450 +-A OUTPUT -j limit-2449 +-A OUTPUT -j limit-2448 +-A OUTPUT -j limit-2447 +-A OUTPUT -j limit-2446 +-A OUTPUT -j limit-2445 +-A OUTPUT -j limit-2444 +-A OUTPUT -j limit-2443 +-A OUTPUT -j limit-2442 +-A OUTPUT -j limit-2441 +-A OUTPUT -j limit-2440 +-A OUTPUT -j limit-2439 +-A OUTPUT -j limit-2438 +-A OUTPUT -j limit-2437 +-A OUTPUT -j limit-2436 +-A OUTPUT -j limit-2435 +-A OUTPUT -j limit-2434 +-A OUTPUT -j limit-2433 +-A OUTPUT -j limit-2432 +-A OUTPUT -j limit-2431 +-A OUTPUT -j limit-2430 +-A OUTPUT -j limit-2429 +-A OUTPUT -j limit-2428 +-A OUTPUT -j limit-2427 +-A OUTPUT -j limit-2426 +-A OUTPUT -j limit-2425 +-A OUTPUT -j limit-2424 +-A OUTPUT -j limit-2423 +-A OUTPUT -j limit-2422 +-A OUTPUT -j limit-2421 +-A OUTPUT -j limit-2420 +-A OUTPUT -j limit-2419 +-A OUTPUT -j limit-2418 +-A OUTPUT -j limit-2417 +-A OUTPUT -j limit-2416 +-A OUTPUT -j limit-2415 +-A OUTPUT -j limit-2414 +-A OUTPUT -j limit-2413 +-A OUTPUT -j limit-2412 +-A OUTPUT -j limit-2411 +-A OUTPUT -j limit-2410 +-A OUTPUT -j limit-2409 +-A OUTPUT -j limit-2408 +-A OUTPUT -j limit-2407 +-A OUTPUT -j limit-2406 +-A OUTPUT -j limit-2405 +-A OUTPUT -j limit-2404 +-A OUTPUT -j limit-2403 +-A OUTPUT -j limit-2402 +-A OUTPUT -j limit-2401 +-A OUTPUT -j limit-2400 +-A OUTPUT -j limit-2399 +-A OUTPUT -j limit-2398 +-A OUTPUT -j limit-2397 +-A OUTPUT -j limit-2396 +-A OUTPUT -j limit-2395 +-A OUTPUT -j limit-2394 +-A OUTPUT -j limit-2393 +-A OUTPUT -j limit-2392 +-A OUTPUT -j limit-2391 +-A OUTPUT -j limit-2390 +-A OUTPUT -j limit-2389 +-A OUTPUT -j limit-2388 +-A OUTPUT -j limit-2387 +-A OUTPUT -j limit-2386 +-A OUTPUT -j limit-2385 +-A OUTPUT -j limit-2384 +-A OUTPUT -j limit-2383 +-A OUTPUT -j limit-2382 +-A OUTPUT -j limit-2381 +-A OUTPUT -j limit-2380 +-A OUTPUT -j limit-2379 +-A OUTPUT -j limit-2378 +-A OUTPUT -j limit-2377 +-A OUTPUT -j limit-2376 +-A OUTPUT -j limit-2375 +-A OUTPUT -j limit-2374 +-A OUTPUT -j limit-2373 +-A OUTPUT -j limit-2372 +-A OUTPUT -j limit-2371 +-A OUTPUT -j limit-2370 +-A OUTPUT -j limit-2369 +-A OUTPUT -j limit-2368 +-A OUTPUT -j limit-2367 +-A OUTPUT -j limit-2366 +-A OUTPUT -j limit-2365 +-A OUTPUT -j limit-2364 +-A OUTPUT -j limit-2363 +-A OUTPUT -j limit-2362 +-A OUTPUT -j limit-2361 +-A OUTPUT -j limit-2360 +-A OUTPUT -j limit-2359 +-A OUTPUT -j limit-2358 +-A OUTPUT -j limit-2357 +-A OUTPUT -j limit-2356 +-A OUTPUT -j limit-2355 +-A OUTPUT -j limit-2354 +-A OUTPUT -j limit-2353 +-A OUTPUT -j limit-2352 +-A OUTPUT -j limit-2351 +-A OUTPUT -j limit-2350 +-A OUTPUT -j limit-2349 +-A OUTPUT -j limit-2348 +-A OUTPUT -j limit-2347 +-A OUTPUT -j limit-2346 +-A OUTPUT -j limit-2345 +-A OUTPUT -j limit-2344 +-A OUTPUT -j limit-2343 +-A OUTPUT -j limit-2342 +-A OUTPUT -j limit-2341 +-A OUTPUT -j limit-2340 +-A OUTPUT -j limit-2339 +-A OUTPUT -j limit-2338 +-A OUTPUT -j limit-2337 +-A OUTPUT -j limit-2336 +-A OUTPUT -j limit-2335 +-A OUTPUT -j limit-2334 +-A OUTPUT -j limit-2333 +-A OUTPUT -j limit-2332 +-A OUTPUT -j limit-2331 +-A OUTPUT -j limit-2330 +-A OUTPUT -j limit-2329 +-A OUTPUT -j limit-2328 +-A OUTPUT -j limit-2327 +-A OUTPUT -j limit-2326 +-A OUTPUT -j limit-2325 +-A OUTPUT -j limit-2324 +-A OUTPUT -j limit-2323 +-A OUTPUT -j limit-2322 +-A OUTPUT -j limit-2321 +-A OUTPUT -j limit-2320 +-A OUTPUT -j limit-2319 +-A OUTPUT -j limit-2318 +-A OUTPUT -j limit-2317 +-A OUTPUT -j limit-2316 +-A OUTPUT -j limit-2315 +-A OUTPUT -j limit-2314 +-A OUTPUT -j limit-2313 +-A OUTPUT -j limit-2312 +-A OUTPUT -j limit-2311 +-A OUTPUT -j limit-2310 +-A OUTPUT -j limit-2309 +-A OUTPUT -j limit-2308 +-A OUTPUT -j limit-2307 +-A OUTPUT -j limit-2306 +-A OUTPUT -j limit-2305 +-A OUTPUT -j limit-2304 +-A OUTPUT -j limit-2303 +-A OUTPUT -j limit-2302 +-A OUTPUT -j limit-2301 +-A OUTPUT -j limit-2300 +-A OUTPUT -j limit-2299 +-A OUTPUT -j limit-2298 +-A OUTPUT -j limit-2297 +-A OUTPUT -j limit-2296 +-A OUTPUT -j limit-2295 +-A OUTPUT -j limit-2294 +-A OUTPUT -j limit-2293 +-A OUTPUT -j limit-2292 +-A OUTPUT -j limit-2291 +-A OUTPUT -j limit-2290 +-A OUTPUT -j limit-2289 +-A OUTPUT -j limit-2288 +-A OUTPUT -j limit-2287 +-A OUTPUT -j limit-2286 +-A OUTPUT -j limit-2285 +-A OUTPUT -j limit-2284 +-A OUTPUT -j limit-2283 +-A OUTPUT -j limit-2282 +-A OUTPUT -j limit-2281 +-A OUTPUT -j limit-2280 +-A OUTPUT -j limit-2279 +-A OUTPUT -j limit-2278 +-A OUTPUT -j limit-2277 +-A OUTPUT -j limit-2276 +-A OUTPUT -j limit-2275 +-A OUTPUT -j limit-2274 +-A OUTPUT -j limit-2273 +-A OUTPUT -j limit-2272 +-A OUTPUT -j limit-2271 +-A OUTPUT -j limit-2270 +-A OUTPUT -j limit-2269 +-A OUTPUT -j limit-2268 +-A OUTPUT -j limit-2267 +-A OUTPUT -j limit-2266 +-A OUTPUT -j limit-2265 +-A OUTPUT -j limit-2264 +-A OUTPUT -j limit-2263 +-A OUTPUT -j limit-2262 +-A OUTPUT -j limit-2261 +-A OUTPUT -j limit-2260 +-A OUTPUT -j limit-2259 +-A OUTPUT -j limit-2258 +-A OUTPUT -j limit-2257 +-A OUTPUT -j limit-2256 +-A OUTPUT -j limit-2255 +-A OUTPUT -j limit-2254 +-A OUTPUT -j limit-2253 +-A OUTPUT -j limit-2252 +-A OUTPUT -j limit-2251 +-A OUTPUT -j limit-2250 +-A OUTPUT -j limit-2249 +-A OUTPUT -j limit-2248 +-A OUTPUT -j limit-2247 +-A OUTPUT -j limit-2246 +-A OUTPUT -j limit-2245 +-A OUTPUT -j limit-2244 +-A OUTPUT -j limit-2243 +-A OUTPUT -j limit-2242 +-A OUTPUT -j limit-2241 +-A OUTPUT -j limit-2240 +-A OUTPUT -j limit-2239 +-A OUTPUT -j limit-2238 +-A OUTPUT -j limit-2237 +-A OUTPUT -j limit-2236 +-A OUTPUT -j limit-2235 +-A OUTPUT -j limit-2234 +-A OUTPUT -j limit-2233 +-A OUTPUT -j limit-2232 +-A OUTPUT -j limit-2231 +-A OUTPUT -j limit-2230 +-A OUTPUT -j limit-2229 +-A OUTPUT -j limit-2228 +-A OUTPUT -j limit-2227 +-A OUTPUT -j limit-2226 +-A OUTPUT -j limit-2225 +-A OUTPUT -j limit-2224 +-A OUTPUT -j limit-2223 +-A OUTPUT -j limit-2222 +-A OUTPUT -j limit-2221 +-A OUTPUT -j limit-2220 +-A OUTPUT -j limit-2219 +-A OUTPUT -j limit-2218 +-A OUTPUT -j limit-2217 +-A OUTPUT -j limit-2216 +-A OUTPUT -j limit-2215 +-A OUTPUT -j limit-2214 +-A OUTPUT -j limit-2213 +-A OUTPUT -j limit-2212 +-A OUTPUT -j limit-2211 +-A OUTPUT -j limit-2210 +-A OUTPUT -j limit-2209 +-A OUTPUT -j limit-2208 +-A OUTPUT -j limit-2207 +-A OUTPUT -j limit-2206 +-A OUTPUT -j limit-2205 +-A OUTPUT -j limit-2204 +-A OUTPUT -j limit-2203 +-A OUTPUT -j limit-2202 +-A OUTPUT -j limit-2201 +-A OUTPUT -j limit-2200 +-A OUTPUT -j limit-2199 +-A OUTPUT -j limit-2198 +-A OUTPUT -j limit-2197 +-A OUTPUT -j limit-2196 +-A OUTPUT -j limit-2195 +-A OUTPUT -j limit-2194 +-A OUTPUT -j limit-2193 +-A OUTPUT -j limit-2192 +-A OUTPUT -j limit-2191 +-A OUTPUT -j limit-2190 +-A OUTPUT -j limit-2189 +-A OUTPUT -j limit-2188 +-A OUTPUT -j limit-2187 +-A OUTPUT -j limit-2186 +-A OUTPUT -j limit-2185 +-A OUTPUT -j limit-2184 +-A OUTPUT -j limit-2183 +-A OUTPUT -j limit-2182 +-A OUTPUT -j limit-2181 +-A OUTPUT -j limit-2180 +-A OUTPUT -j limit-2179 +-A OUTPUT -j limit-2178 +-A OUTPUT -j limit-2177 +-A OUTPUT -j limit-2176 +-A OUTPUT -j limit-2175 +-A OUTPUT -j limit-2174 +-A OUTPUT -j limit-2173 +-A OUTPUT -j limit-2172 +-A OUTPUT -j limit-2171 +-A OUTPUT -j limit-2170 +-A OUTPUT -j limit-2169 +-A OUTPUT -j limit-2168 +-A OUTPUT -j limit-2167 +-A OUTPUT -j limit-2166 +-A OUTPUT -j limit-2165 +-A OUTPUT -j limit-2164 +-A OUTPUT -j limit-2163 +-A OUTPUT -j limit-2162 +-A OUTPUT -j limit-2161 +-A OUTPUT -j limit-2160 +-A OUTPUT -j limit-2159 +-A OUTPUT -j limit-2158 +-A OUTPUT -j limit-2157 +-A OUTPUT -j limit-2156 +-A OUTPUT -j limit-2155 +-A OUTPUT -j limit-2154 +-A OUTPUT -j limit-2153 +-A OUTPUT -j limit-2152 +-A OUTPUT -j limit-2151 +-A OUTPUT -j limit-2150 +-A OUTPUT -j limit-2149 +-A OUTPUT -j limit-2148 +-A OUTPUT -j limit-2147 +-A OUTPUT -j limit-2146 +-A OUTPUT -j limit-2145 +-A OUTPUT -j limit-2144 +-A OUTPUT -j limit-2143 +-A OUTPUT -j limit-2142 +-A OUTPUT -j limit-2141 +-A OUTPUT -j limit-2140 +-A OUTPUT -j limit-2139 +-A OUTPUT -j limit-2138 +-A OUTPUT -j limit-2137 +-A OUTPUT -j limit-2136 +-A OUTPUT -j limit-2135 +-A OUTPUT -j limit-2134 +-A OUTPUT -j limit-2133 +-A OUTPUT -j limit-2132 +-A OUTPUT -j limit-2131 +-A OUTPUT -j limit-2130 +-A OUTPUT -j limit-2129 +-A OUTPUT -j limit-2128 +-A OUTPUT -j limit-2127 +-A OUTPUT -j limit-2126 +-A OUTPUT -j limit-2125 +-A OUTPUT -j limit-2124 +-A OUTPUT -j limit-2123 +-A OUTPUT -j limit-2122 +-A OUTPUT -j limit-2121 +-A OUTPUT -j limit-2120 +-A OUTPUT -j limit-2119 +-A OUTPUT -j limit-2118 +-A OUTPUT -j limit-2117 +-A OUTPUT -j limit-2116 +-A OUTPUT -j limit-2115 +-A OUTPUT -j limit-2114 +-A OUTPUT -j limit-2113 +-A OUTPUT -j limit-2112 +-A OUTPUT -j limit-2111 +-A OUTPUT -j limit-2110 +-A OUTPUT -j limit-2109 +-A OUTPUT -j limit-2108 +-A OUTPUT -j limit-2107 +-A OUTPUT -j limit-2106 +-A OUTPUT -j limit-2105 +-A OUTPUT -j limit-2104 +-A OUTPUT -j limit-2103 +-A OUTPUT -j limit-2102 +-A OUTPUT -j limit-2101 +-A OUTPUT -j limit-2100 +-A OUTPUT -j limit-2099 +-A OUTPUT -j limit-2098 +-A OUTPUT -j limit-2097 +-A OUTPUT -j limit-2096 +-A OUTPUT -j limit-2095 +-A OUTPUT -j limit-2094 +-A OUTPUT -j limit-2093 +-A OUTPUT -j limit-2092 +-A OUTPUT -j limit-2091 +-A OUTPUT -j limit-2090 +-A OUTPUT -j limit-2089 +-A OUTPUT -j limit-2088 +-A OUTPUT -j limit-2087 +-A OUTPUT -j limit-2086 +-A OUTPUT -j limit-2085 +-A OUTPUT -j limit-2084 +-A OUTPUT -j limit-2083 +-A OUTPUT -j limit-2082 +-A OUTPUT -j limit-2081 +-A OUTPUT -j limit-2080 +-A OUTPUT -j limit-2079 +-A OUTPUT -j limit-2078 +-A OUTPUT -j limit-2077 +-A OUTPUT -j limit-2076 +-A OUTPUT -j limit-2075 +-A OUTPUT -j limit-2074 +-A OUTPUT -j limit-2073 +-A OUTPUT -j limit-2072 +-A OUTPUT -j limit-2071 +-A OUTPUT -j limit-2070 +-A OUTPUT -j limit-2069 +-A OUTPUT -j limit-2068 +-A OUTPUT -j limit-2067 +-A OUTPUT -j limit-2066 +-A OUTPUT -j limit-2065 +-A OUTPUT -j limit-2064 +-A OUTPUT -j limit-2063 +-A OUTPUT -j limit-2062 +-A OUTPUT -j limit-2061 +-A OUTPUT -j limit-2060 +-A OUTPUT -j limit-2059 +-A OUTPUT -j limit-2058 +-A OUTPUT -j limit-2057 +-A OUTPUT -j limit-2056 +-A OUTPUT -j limit-2055 +-A OUTPUT -j limit-2054 +-A OUTPUT -j limit-2053 +-A OUTPUT -j limit-2052 +-A OUTPUT -j limit-2051 +-A OUTPUT -j limit-2050 +-A OUTPUT -j limit-2049 +-A OUTPUT -j limit-2048 +-A OUTPUT -j limit-2047 +-A OUTPUT -j limit-2046 +-A OUTPUT -j limit-2045 +-A OUTPUT -j limit-2044 +-A OUTPUT -j limit-2043 +-A OUTPUT -j limit-2042 +-A OUTPUT -j limit-2041 +-A OUTPUT -j limit-2040 +-A OUTPUT -j limit-2039 +-A OUTPUT -j limit-2038 +-A OUTPUT -j limit-2037 +-A OUTPUT -j limit-2036 +-A OUTPUT -j limit-2035 +-A OUTPUT -j limit-2034 +-A OUTPUT -j limit-2033 +-A OUTPUT -j limit-2032 +-A OUTPUT -j limit-2031 +-A OUTPUT -j limit-2030 +-A OUTPUT -j limit-2029 +-A OUTPUT -j limit-2028 +-A OUTPUT -j limit-2027 +-A OUTPUT -j limit-2026 +-A OUTPUT -j limit-2025 +-A OUTPUT -j limit-2024 +-A OUTPUT -j limit-2023 +-A OUTPUT -j limit-2022 +-A OUTPUT -j limit-2021 +-A OUTPUT -j limit-2020 +-A OUTPUT -j limit-2019 +-A OUTPUT -j limit-2018 +-A OUTPUT -j limit-2017 +-A OUTPUT -j limit-2016 +-A OUTPUT -j limit-2015 +-A OUTPUT -j limit-2014 +-A OUTPUT -j limit-2013 +-A OUTPUT -j limit-2012 +-A OUTPUT -j limit-2011 +-A OUTPUT -j limit-2010 +-A OUTPUT -j limit-2009 +-A OUTPUT -j limit-2008 +-A OUTPUT -j limit-2007 +-A OUTPUT -j limit-2006 +-A OUTPUT -j limit-2005 +-A OUTPUT -j limit-2004 +-A OUTPUT -j limit-2003 +-A OUTPUT -j limit-2002 +-A OUTPUT -j limit-2001 +-A OUTPUT -j limit-2000 +-A OUTPUT -j limit-1999 +-A OUTPUT -j limit-1998 +-A OUTPUT -j limit-1997 +-A OUTPUT -j limit-1996 +-A OUTPUT -j limit-1995 +-A OUTPUT -j limit-1994 +-A OUTPUT -j limit-1993 +-A OUTPUT -j limit-1992 +-A OUTPUT -j limit-1991 +-A OUTPUT -j limit-1990 +-A OUTPUT -j limit-1989 +-A OUTPUT -j limit-1988 +-A OUTPUT -j limit-1987 +-A OUTPUT -j limit-1986 +-A OUTPUT -j limit-1985 +-A OUTPUT -j limit-1984 +-A OUTPUT -j limit-1983 +-A OUTPUT -j limit-1982 +-A OUTPUT -j limit-1981 +-A OUTPUT -j limit-1980 +-A OUTPUT -j limit-1979 +-A OUTPUT -j limit-1978 +-A OUTPUT -j limit-1977 +-A OUTPUT -j limit-1976 +-A OUTPUT -j limit-1975 +-A OUTPUT -j limit-1974 +-A OUTPUT -j limit-1973 +-A OUTPUT -j limit-1972 +-A OUTPUT -j limit-1971 +-A OUTPUT -j limit-1970 +-A OUTPUT -j limit-1969 +-A OUTPUT -j limit-1968 +-A OUTPUT -j limit-1967 +-A OUTPUT -j limit-1966 +-A OUTPUT -j limit-1965 +-A OUTPUT -j limit-1964 +-A OUTPUT -j limit-1963 +-A OUTPUT -j limit-1962 +-A OUTPUT -j limit-1961 +-A OUTPUT -j limit-1960 +-A OUTPUT -j limit-1959 +-A OUTPUT -j limit-1958 +-A OUTPUT -j limit-1957 +-A OUTPUT -j limit-1956 +-A OUTPUT -j limit-1955 +-A OUTPUT -j limit-1954 +-A OUTPUT -j limit-1953 +-A OUTPUT -j limit-1952 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j limit-0 @@ -62852,11 +104606,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-651 -A OUTPUT -o eth1 -d fc00::/7 -j limit-652 -A OUTPUT -o eth1 -d fc00::/7 -j limit-653 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-654 -A OUTPUT -o eth1 -d fc00::/7 -j limit-655 -A OUTPUT -o eth1 -d fc00::/7 -j limit-656 -A OUTPUT -o eth1 -d fc00::/7 -j limit-657 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-658 -A OUTPUT -o eth1 -d fc00::/7 -j limit-659 -A OUTPUT -o eth1 -d fc00::/7 -j limit-660 -A OUTPUT -o eth1 -d fc00::/7 -j limit-661 @@ -62868,11 +104622,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-667 -A OUTPUT -o eth1 -d fc00::/7 -j limit-668 -A OUTPUT -o eth1 -d fc00::/7 -j limit-669 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-670 -A OUTPUT -o eth1 -d fc00::/7 -j limit-671 -A OUTPUT -o eth1 -d fc00::/7 -j limit-672 -A OUTPUT -o eth1 -d fc00::/7 -j limit-673 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-674 -A OUTPUT -o eth1 -d fc00::/7 -j limit-675 -A OUTPUT -o eth1 -d fc00::/7 -j limit-676 -A OUTPUT -o eth1 -d fc00::/7 -j limit-677 @@ -62884,11 +104638,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-683 -A OUTPUT -o eth1 -d fc00::/7 -j limit-684 -A OUTPUT -o eth1 -d fc00::/7 -j limit-685 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-686 -A OUTPUT -o eth1 -d fc00::/7 -j limit-687 -A OUTPUT -o eth1 -d fc00::/7 -j limit-688 -A OUTPUT -o eth1 -d fc00::/7 -j limit-689 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-690 -A OUTPUT -o eth1 -d fc00::/7 -j limit-691 -A OUTPUT -o eth1 -d fc00::/7 -j limit-692 -A OUTPUT -o eth1 -d fc00::/7 -j limit-693 @@ -62900,11 +104654,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-699 -A OUTPUT -o eth1 -d fc00::/7 -j limit-700 -A OUTPUT -o eth1 -d fc00::/7 -j limit-701 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-702 -A OUTPUT -o eth1 -d fc00::/7 -j limit-703 -A OUTPUT -o eth1 -d fc00::/7 -j limit-704 -A OUTPUT -o eth1 -d fc00::/7 -j limit-705 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-706 -A OUTPUT -o eth1 -d fc00::/7 -j limit-707 -A OUTPUT -o eth1 -d fc00::/7 -j limit-708 -A OUTPUT -o eth1 -d fc00::/7 -j limit-709 @@ -62924,11 +104678,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-723 -A OUTPUT -o eth1 -d fc00::/7 -j limit-724 -A OUTPUT -o eth1 -d fc00::/7 -j limit-725 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-321 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-726 -A OUTPUT -o eth1 -d fc00::/7 -j limit-727 -A OUTPUT -o eth1 -d fc00::/7 -j limit-728 -A OUTPUT -o eth1 -d fc00::/7 -j limit-729 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-325 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-730 -A OUTPUT -o eth1 -d fc00::/7 -j limit-731 -A OUTPUT -o eth1 -d fc00::/7 -j limit-732 -A OUTPUT -o eth1 -d fc00::/7 -j limit-733 @@ -62940,11 +104694,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-739 -A OUTPUT -o eth1 -d fc00::/7 -j limit-740 -A OUTPUT -o eth1 -d fc00::/7 -j limit-741 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-337 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-742 -A OUTPUT -o eth1 -d fc00::/7 -j limit-743 -A OUTPUT -o eth1 -d fc00::/7 -j limit-744 -A OUTPUT -o eth1 -d fc00::/7 -j limit-745 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-341 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-746 -A OUTPUT -o eth1 -d fc00::/7 -j limit-747 -A OUTPUT -o eth1 -d fc00::/7 -j limit-748 -A OUTPUT -o eth1 -d fc00::/7 -j limit-749 @@ -62956,11 +104710,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-755 -A OUTPUT -o eth1 -d fc00::/7 -j limit-756 -A OUTPUT -o eth1 -d fc00::/7 -j limit-757 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-353 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-758 -A OUTPUT -o eth1 -d fc00::/7 -j limit-759 -A OUTPUT -o eth1 -d fc00::/7 -j limit-760 -A OUTPUT -o eth1 -d fc00::/7 -j limit-761 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-357 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-762 -A OUTPUT -o eth1 -d fc00::/7 -j limit-763 -A OUTPUT -o eth1 -d fc00::/7 -j limit-764 -A OUTPUT -o eth1 -d fc00::/7 -j limit-765 @@ -62972,11 +104726,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-771 -A OUTPUT -o eth1 -d fc00::/7 -j limit-772 -A OUTPUT -o eth1 -d fc00::/7 -j limit-773 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-369 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-774 -A OUTPUT -o eth1 -d fc00::/7 -j limit-775 -A OUTPUT -o eth1 -d fc00::/7 -j limit-776 -A OUTPUT -o eth1 -d fc00::/7 -j limit-777 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-778 -A OUTPUT -o eth1 -d fc00::/7 -j limit-779 -A OUTPUT -o eth1 -d fc00::/7 -j limit-780 -A OUTPUT -o eth1 -d fc00::/7 -j limit-781 @@ -62996,11 +104750,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-795 -A OUTPUT -o eth1 -d fc00::/7 -j limit-796 -A OUTPUT -o eth1 -d fc00::/7 -j limit-797 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-798 -A OUTPUT -o eth1 -d fc00::/7 -j limit-799 -A OUTPUT -o eth1 -d fc00::/7 -j limit-800 -A OUTPUT -o eth1 -d fc00::/7 -j limit-801 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-802 -A OUTPUT -o eth1 -d fc00::/7 -j limit-803 -A OUTPUT -o eth1 -d fc00::/7 -j limit-804 -A OUTPUT -o eth1 -d fc00::/7 -j limit-805 @@ -63012,11 +104766,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-811 -A OUTPUT -o eth1 -d fc00::/7 -j limit-812 -A OUTPUT -o eth1 -d fc00::/7 -j limit-813 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-814 -A OUTPUT -o eth1 -d fc00::/7 -j limit-815 -A OUTPUT -o eth1 -d fc00::/7 -j limit-816 -A OUTPUT -o eth1 -d fc00::/7 -j limit-817 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-818 -A OUTPUT -o eth1 -d fc00::/7 -j limit-819 -A OUTPUT -o eth1 -d fc00::/7 -j limit-820 -A OUTPUT -o eth1 -d fc00::/7 -j limit-821 @@ -63028,11 +104782,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-827 -A OUTPUT -o eth1 -d fc00::/7 -j limit-828 -A OUTPUT -o eth1 -d fc00::/7 -j limit-829 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-830 -A OUTPUT -o eth1 -d fc00::/7 -j limit-831 -A OUTPUT -o eth1 -d fc00::/7 -j limit-832 -A OUTPUT -o eth1 -d fc00::/7 -j limit-833 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-834 -A OUTPUT -o eth1 -d fc00::/7 -j limit-835 -A OUTPUT -o eth1 -d fc00::/7 -j limit-836 -A OUTPUT -o eth1 -d fc00::/7 -j limit-837 @@ -63044,11 +104798,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-843 -A OUTPUT -o eth1 -d fc00::/7 -j limit-844 -A OUTPUT -o eth1 -d fc00::/7 -j limit-845 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-846 -A OUTPUT -o eth1 -d fc00::/7 -j limit-847 -A OUTPUT -o eth1 -d fc00::/7 -j limit-848 -A OUTPUT -o eth1 -d fc00::/7 -j limit-849 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-850 -A OUTPUT -o eth1 -d fc00::/7 -j limit-851 -A OUTPUT -o eth1 -d fc00::/7 -j limit-852 -A OUTPUT -o eth1 -d fc00::/7 -j limit-853 @@ -63068,11 +104822,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-867 -A OUTPUT -o eth1 -d fc00::/7 -j limit-868 -A OUTPUT -o eth1 -d fc00::/7 -j limit-869 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-393 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-870 -A OUTPUT -o eth1 -d fc00::/7 -j limit-871 -A OUTPUT -o eth1 -d fc00::/7 -j limit-872 -A OUTPUT -o eth1 -d fc00::/7 -j limit-873 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-874 -A OUTPUT -o eth1 -d fc00::/7 -j limit-875 -A OUTPUT -o eth1 -d fc00::/7 -j limit-876 -A OUTPUT -o eth1 -d fc00::/7 -j limit-877 @@ -63084,11 +104838,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-883 -A OUTPUT -o eth1 -d fc00::/7 -j limit-884 -A OUTPUT -o eth1 -d fc00::/7 -j limit-885 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-409 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-886 -A OUTPUT -o eth1 -d fc00::/7 -j limit-887 -A OUTPUT -o eth1 -d fc00::/7 -j limit-888 -A OUTPUT -o eth1 -d fc00::/7 -j limit-889 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-413 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-890 -A OUTPUT -o eth1 -d fc00::/7 -j limit-891 -A OUTPUT -o eth1 -d fc00::/7 -j limit-892 -A OUTPUT -o eth1 -d fc00::/7 -j limit-893 @@ -63100,11 +104854,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-899 -A OUTPUT -o eth1 -d fc00::/7 -j limit-900 -A OUTPUT -o eth1 -d fc00::/7 -j limit-901 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-425 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-902 -A OUTPUT -o eth1 -d fc00::/7 -j limit-903 -A OUTPUT -o eth1 -d fc00::/7 -j limit-904 -A OUTPUT -o eth1 -d fc00::/7 -j limit-905 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-429 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-906 -A OUTPUT -o eth1 -d fc00::/7 -j limit-907 -A OUTPUT -o eth1 -d fc00::/7 -j limit-908 -A OUTPUT -o eth1 -d fc00::/7 -j limit-909 @@ -63116,11 +104870,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-915 -A OUTPUT -o eth1 -d fc00::/7 -j limit-916 -A OUTPUT -o eth1 -d fc00::/7 -j limit-917 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-441 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-918 -A OUTPUT -o eth1 -d fc00::/7 -j limit-919 -A OUTPUT -o eth1 -d fc00::/7 -j limit-920 -A OUTPUT -o eth1 -d fc00::/7 -j limit-921 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-445 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-922 -A OUTPUT -o eth1 -d fc00::/7 -j limit-923 -A OUTPUT -o eth1 -d fc00::/7 -j limit-924 -A OUTPUT -o eth1 -d fc00::/7 -j limit-925 @@ -63140,11 +104894,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-939 -A OUTPUT -o eth1 -d fc00::/7 -j limit-940 -A OUTPUT -o eth1 -d fc00::/7 -j limit-941 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-942 -A OUTPUT -o eth1 -d fc00::/7 -j limit-943 -A OUTPUT -o eth1 -d fc00::/7 -j limit-944 -A OUTPUT -o eth1 -d fc00::/7 -j limit-945 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-946 -A OUTPUT -o eth1 -d fc00::/7 -j limit-947 -A OUTPUT -o eth1 -d fc00::/7 -j limit-948 -A OUTPUT -o eth1 -d fc00::/7 -j limit-949 @@ -63156,11 +104910,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-955 -A OUTPUT -o eth1 -d fc00::/7 -j limit-956 -A OUTPUT -o eth1 -d fc00::/7 -j limit-957 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-958 -A OUTPUT -o eth1 -d fc00::/7 -j limit-959 -A OUTPUT -o eth1 -d fc00::/7 -j limit-960 -A OUTPUT -o eth1 -d fc00::/7 -j limit-961 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-962 -A OUTPUT -o eth1 -d fc00::/7 -j limit-963 -A OUTPUT -o eth1 -d fc00::/7 -j limit-964 -A OUTPUT -o eth1 -d fc00::/7 -j limit-965 @@ -63172,11 +104926,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-971 -A OUTPUT -o eth1 -d fc00::/7 -j limit-972 -A OUTPUT -o eth1 -d fc00::/7 -j limit-973 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-974 -A OUTPUT -o eth1 -d fc00::/7 -j limit-975 -A OUTPUT -o eth1 -d fc00::/7 -j limit-976 -A OUTPUT -o eth1 -d fc00::/7 -j limit-977 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-978 -A OUTPUT -o eth1 -d fc00::/7 -j limit-979 -A OUTPUT -o eth1 -d fc00::/7 -j limit-980 -A OUTPUT -o eth1 -d fc00::/7 -j limit-981 @@ -63188,11 +104942,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-987 -A OUTPUT -o eth1 -d fc00::/7 -j limit-988 -A OUTPUT -o eth1 -d fc00::/7 -j limit-989 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-990 -A OUTPUT -o eth1 -d fc00::/7 -j limit-991 -A OUTPUT -o eth1 -d fc00::/7 -j limit-992 -A OUTPUT -o eth1 -d fc00::/7 -j limit-993 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-994 -A OUTPUT -o eth1 -d fc00::/7 -j limit-995 -A OUTPUT -o eth1 -d fc00::/7 -j limit-996 -A OUTPUT -o eth1 -d fc00::/7 -j limit-997 @@ -63205,18 +104959,18 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1004 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1005 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1006 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1007 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1008 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1009 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1010 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1011 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1012 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1013 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-465 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1014 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1015 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1016 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1017 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-469 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1018 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1019 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1020 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1021 @@ -63225,14 +104979,14 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1024 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1025 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1026 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1027 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1028 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1029 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-481 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1030 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1031 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1032 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1033 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-485 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1034 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1035 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1036 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1037 @@ -63244,14 +104998,14 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1043 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1044 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1045 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-497 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1047 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1046 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1048 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1049 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-501 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1050 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1051 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1052 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1053 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1054 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1055 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1056 @@ -63260,18 +105014,18 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1059 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1060 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1061 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-513 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1062 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1063 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1064 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1065 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-517 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1067 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1066 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1068 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1069 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1070 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1071 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1072 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1073 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1074 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1075 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1076 @@ -63284,27 +105038,27 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1083 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1084 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1085 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1086 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1087 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1088 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1089 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1090 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1091 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1092 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1093 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1094 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1095 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1096 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1097 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-581 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1098 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1099 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1100 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1101 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-1103 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1102 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-587 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1104 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1105 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1106 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1107 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1108 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1109 @@ -63315,13 +105069,13 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1114 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1115 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1116 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1117 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-601 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1118 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1119 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1120 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1121 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-1123 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1122 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-607 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1124 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1125 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1126 @@ -63332,16 +105086,16 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1131 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1132 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1133 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1134 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1135 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1136 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1137 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-621 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1138 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1139 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1140 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1141 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1142 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1143 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-627 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1144 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1145 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1146 @@ -63355,13 +105109,13 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1154 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1155 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1156 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1157 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-537 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-641 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1158 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1159 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1160 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1161 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-541 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1163 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1162 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-647 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1164 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1165 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1166 @@ -63372,11 +105126,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1171 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1172 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1173 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-553 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1174 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1175 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1176 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1177 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-557 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1178 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1179 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1180 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1181 @@ -63385,14 +105139,14 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1184 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1185 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1186 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1187 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-671 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1188 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1189 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-569 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1190 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1191 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1192 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1193 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-573 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-677 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1194 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1195 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1196 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1197 @@ -63404,14 +105158,14 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1203 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1204 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1205 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-585 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1207 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1206 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-691 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1208 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1209 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-589 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1210 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1211 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1212 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1213 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-697 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1214 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1215 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1216 @@ -63425,13 +105179,13 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1224 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1225 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1226 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1227 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-711 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1228 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1229 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1230 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1231 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1232 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1233 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-717 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1234 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1235 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1236 @@ -63445,345 +105199,1403 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-1244 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1245 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1246 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1247 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-731 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1248 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1249 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1250 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1251 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1252 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1253 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-737 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1254 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1255 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1256 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1257 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1258 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1259 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1260 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1261 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1262 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1263 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1264 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1265 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1266 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1267 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1268 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1269 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1270 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1271 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1272 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1273 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1274 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1275 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1276 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1278 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1279 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1280 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1281 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1282 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1284 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1285 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1286 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1287 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1288 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1289 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1290 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1291 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1292 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1293 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1294 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1295 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1296 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1298 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1299 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1300 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1301 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1302 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1304 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1305 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1306 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1307 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1308 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1309 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1310 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1311 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1312 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1313 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1314 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1315 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1316 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1318 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1319 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1320 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1321 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1322 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1324 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1325 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1326 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1327 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1328 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1329 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1330 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1331 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1332 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1333 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1334 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1335 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1336 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1338 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1339 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1340 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1341 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1342 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1344 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1345 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1346 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1347 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1348 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1349 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1350 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1351 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1352 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1353 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1354 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1355 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1356 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1357 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1358 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1359 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1360 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1361 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1362 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1363 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1364 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1365 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1366 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-761 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1368 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1369 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1370 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1371 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1372 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-767 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1374 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1375 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1376 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1377 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1378 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1379 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1380 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1381 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1382 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1383 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1384 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1385 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1386 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-781 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1388 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1389 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1390 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1391 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1392 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-787 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1394 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1395 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1396 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1397 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1398 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1399 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1400 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1401 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1402 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1403 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1404 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1405 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1406 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-801 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1408 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1409 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1410 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1411 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1412 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-807 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1414 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1415 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1416 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1417 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1418 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1419 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1420 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1421 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1422 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1423 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1424 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1425 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1426 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-821 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1428 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1429 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1430 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1431 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1432 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-827 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1434 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1435 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1436 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1437 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1438 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1439 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1440 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1441 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1442 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1443 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1444 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1445 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1446 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1447 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1448 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1449 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1450 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1451 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1452 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1453 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1454 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1455 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1456 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1458 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1459 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1460 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1461 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1462 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1464 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1465 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1466 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1467 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1468 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1469 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1470 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1471 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1472 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1473 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1474 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1475 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1476 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1478 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1479 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1480 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1481 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1482 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1484 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1485 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1486 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1487 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1488 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1489 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1490 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1491 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1492 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1493 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1494 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1495 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1496 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1498 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1499 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1500 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1501 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1502 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1504 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1505 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1506 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1507 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1508 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1509 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1510 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1511 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1512 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1513 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1514 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1515 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1516 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1518 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1519 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1520 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1521 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1522 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1524 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1525 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1526 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1527 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1528 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1529 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1530 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1531 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1532 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1533 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1534 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1535 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1536 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1537 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1538 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1539 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1540 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1541 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1542 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1543 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1544 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1545 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1546 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-851 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1548 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1549 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1550 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1551 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1552 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-857 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1554 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1555 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1556 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1557 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1558 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1559 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1560 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1561 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1562 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1563 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1564 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1565 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1566 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-871 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1568 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1569 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1570 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1571 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1572 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-877 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1574 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1575 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1576 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1577 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1578 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1579 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1580 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1581 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1582 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1583 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1584 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1585 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1586 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-891 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1588 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1589 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1590 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1591 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1592 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-897 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1594 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1595 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1596 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1597 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1598 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1599 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1600 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1601 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1602 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1603 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1604 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1605 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1606 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-911 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1608 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1609 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1610 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1611 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1612 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-917 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1614 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1615 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1616 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1617 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1618 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1619 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1620 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1621 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1622 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1623 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1624 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1625 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1626 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1627 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1628 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1629 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1630 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1631 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1632 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1633 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1634 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1635 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1636 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-941 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1638 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1639 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1640 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1641 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1642 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-947 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1644 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1645 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1646 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1647 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1648 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1649 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1650 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1651 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1652 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1653 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1654 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1655 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1656 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-961 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1658 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1659 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1660 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1661 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1662 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-967 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1664 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1665 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1666 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1667 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1668 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1669 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1670 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1671 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1672 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1673 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1674 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1675 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1676 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-981 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1678 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1679 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1680 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1681 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1682 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-987 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1684 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1685 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1686 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1687 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1688 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1689 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1690 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1691 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1692 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1693 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1694 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1695 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1696 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1001 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1698 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1699 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1700 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1701 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1702 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1007 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1704 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1705 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1706 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1707 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1708 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1709 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1710 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1711 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1712 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1713 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1714 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1715 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1716 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1717 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1718 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1719 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1720 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1721 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1722 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1723 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1724 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1725 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1726 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1728 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1729 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1730 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1731 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1732 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1734 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1735 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1736 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1737 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1738 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1739 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1740 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1741 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1742 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1743 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1744 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1745 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1746 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1748 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1749 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1750 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1751 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1752 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1754 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1755 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1756 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1757 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1758 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1759 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1760 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1761 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1762 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1763 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1764 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1765 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1766 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1768 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1769 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1770 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1771 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1772 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1774 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1775 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1776 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1777 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1778 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1779 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1780 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1781 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1782 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1783 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1784 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1785 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1786 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1788 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1789 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1790 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1791 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1792 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1794 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1795 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1796 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1797 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1798 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1799 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1800 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1801 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1802 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1803 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1804 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1805 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1806 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1807 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1808 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1809 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1810 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1811 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1812 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1813 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1814 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1815 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1816 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1031 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1818 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1819 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1820 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1821 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1822 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1037 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1824 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1825 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1826 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1827 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1828 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1829 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1830 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1831 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1832 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1833 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1834 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1835 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1836 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1051 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1838 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1839 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1840 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1841 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1842 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1844 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1845 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1846 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1847 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1848 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1849 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1850 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1851 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1852 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1853 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1854 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1855 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1856 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1071 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1858 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1859 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1860 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1861 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1862 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1864 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1865 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1866 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1867 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1868 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1869 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1870 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1871 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1872 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1873 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1874 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1875 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1876 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1878 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1879 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1880 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1881 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1882 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1097 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1884 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1885 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1886 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1887 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1888 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1889 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1890 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1891 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1892 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1893 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1894 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1895 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1896 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1897 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1898 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1899 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1900 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1901 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1902 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1903 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1904 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1905 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1906 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1907 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1908 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1909 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1910 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1911 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1912 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1913 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1914 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1915 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1916 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1917 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1918 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1919 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1920 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1921 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1922 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1923 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1924 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1925 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1926 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1927 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1928 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1929 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1930 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1931 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1932 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1933 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1934 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1935 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1936 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1937 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1938 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1939 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1940 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1941 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1942 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1943 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1944 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1945 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1946 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1947 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1948 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1949 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1950 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1951 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-0 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-1 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-2 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-3 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-4 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-5 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-6 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-7 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-8 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-9 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-10 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-11 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-12 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-13 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-14 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-15 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-16 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-17 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-18 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-19 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-20 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-21 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-22 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-23 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-24 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-25 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-26 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-27 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-28 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-29 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-30 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-31 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-32 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-33 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-34 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-35 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-36 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-37 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-38 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-39 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-40 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-41 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-42 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-43 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-44 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-45 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-46 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-47 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-48 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-49 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-50 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-51 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-52 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-53 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-54 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-55 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-56 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-57 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-58 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-59 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-60 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-61 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-62 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-63 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-64 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-65 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-66 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-67 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-68 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-69 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-70 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-71 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-72 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-73 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-74 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-75 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-76 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-77 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-78 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-79 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-80 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-81 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-82 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-83 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-84 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-85 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-86 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-87 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-88 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-89 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-90 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-91 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-92 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-93 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-94 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-95 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-96 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-97 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-98 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-99 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-100 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-101 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-102 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-103 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-104 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-105 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-106 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-107 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-108 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-109 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-110 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-111 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-112 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-113 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-114 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-115 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-116 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-117 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-118 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-119 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-120 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-121 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-122 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-123 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-124 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-125 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-126 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-127 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-128 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-129 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-130 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-131 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-132 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-133 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-134 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-135 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-136 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-137 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-138 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-139 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-140 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-141 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-142 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-143 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-144 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-145 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-146 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-147 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-148 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-149 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-150 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-151 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-152 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-153 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-154 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-155 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-156 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-157 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-158 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-159 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-160 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-161 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-162 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-163 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-164 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-165 +-A OUTPUT -j logaccept-final-166 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-167 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-168 +-A OUTPUT -j logaccept-final-169 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-170 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-171 +-A OUTPUT -j logaccept-final-172 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-173 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-174 +-A OUTPUT -j logaccept-final-175 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-176 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-177 +-A OUTPUT -j logaccept-final-178 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-179 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-180 +-A OUTPUT -j logaccept-final-181 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-182 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-183 +-A OUTPUT -j logaccept-final-184 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-185 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-186 +-A OUTPUT -j logaccept-final-187 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-188 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-189 +-A OUTPUT -j logaccept-final-190 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-191 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-192 +-A OUTPUT -j logaccept-final-193 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-194 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-195 +-A OUTPUT -j logaccept-final-196 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-197 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-198 +-A OUTPUT -j logaccept-final-199 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-200 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-201 +-A OUTPUT -j logaccept-final-202 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-203 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-204 +-A OUTPUT -j logaccept-final-205 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-206 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-207 +-A OUTPUT -j logaccept-final-208 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-209 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-210 +-A OUTPUT -j logaccept-final-211 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-212 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-213 +-A OUTPUT -j logaccept-final-214 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-215 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-216 +-A OUTPUT -j logaccept-final-217 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-218 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-219 +-A OUTPUT -j logaccept-final-220 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-221 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-222 +-A OUTPUT -j logaccept-final-223 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-224 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-225 +-A OUTPUT -j logaccept-final-226 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-227 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-228 +-A OUTPUT -j logaccept-final-229 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-230 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-231 +-A OUTPUT -j logaccept-final-232 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-233 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-234 +-A OUTPUT -j logaccept-final-235 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-236 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-237 +-A OUTPUT -j logaccept-final-238 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-239 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-240 +-A OUTPUT -j logaccept-final-241 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-242 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-243 +-A OUTPUT -j logaccept-final-244 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-245 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-246 +-A OUTPUT -j logaccept-final-247 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-248 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-249 +-A OUTPUT -j logaccept-final-250 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-251 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-252 +-A OUTPUT -j logaccept-final-253 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-254 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-255 +-A OUTPUT -j logaccept-final-256 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-257 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-258 +-A OUTPUT -j logaccept-final-259 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-260 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-261 +-A OUTPUT -j logaccept-final-262 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-263 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-264 +-A OUTPUT -j logaccept-final-265 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-266 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-267 +-A OUTPUT -j logaccept-final-268 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-269 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-270 +-A OUTPUT -j logaccept-final-271 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-272 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-273 +-A OUTPUT -j logaccept-final-274 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-275 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-276 +-A OUTPUT -j logaccept-final-277 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-278 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-279 +-A OUTPUT -j logaccept-final-280 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-281 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-282 +-A OUTPUT -j logaccept-final-283 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-284 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-285 +-A OUTPUT -j logaccept-final-286 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-287 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-288 +-A OUTPUT -j logaccept-final-289 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-290 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-291 +-A OUTPUT -j logaccept-final-292 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-293 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-294 +-A OUTPUT -j logaccept-final-295 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-296 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-297 +-A OUTPUT -j logaccept-final-298 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-299 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-300 +-A OUTPUT -j logaccept-final-301 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-302 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-303 +-A OUTPUT -j logaccept-final-304 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-305 +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT @@ -64119,19 +106931,25 @@ COMMIT -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-1184 +-A OUTPUT -j logdrop-2200 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-54 --A OUTPUT -j logdrop-1185 +-A OUTPUT -j logaccept-99 +-A OUTPUT -j logdrop-2201 -A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-100 +-A OUTPUT -j logdrop-2202 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-101 +-A OUTPUT -j logdrop-2203 +-A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-55 --A OUTPUT -j logdrop-1186 +-A OUTPUT -j logaccept-102 +-A OUTPUT -j logdrop-2204 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -64144,4837 +106962,8113 @@ COMMIT -A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 -A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-10 -m limit --limit 1/second -j LOG -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-100 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-28 --A limit-100 -j ACCEPT --A limit-1000 -m recent --name limit-1000 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-451 --A limit-1000 -m recent --name limit-1000 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1001 -m recent --name limit-1001 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-452 --A limit-1001 -m recent --name limit-1001 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1002 -m recent --name limit-1002 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-453 --A limit-1002 -m recent --name limit-1002 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1003 -m recent --name limit-1003 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-454 --A limit-1003 -m recent --name limit-1003 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1004 -m recent --name limit-1004 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-455 --A limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-456 --A limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-457 --A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-458 --A limit-1007 -m limit --limit 1/second -j LOG --A limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-459 --A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-460 --A limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-101 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-29 --A limit-1010 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-461 --A limit-1010 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1011 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-462 --A limit-1011 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1012 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-463 --A limit-1013 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-464 --A limit-1013 -j ACCEPT --A limit-1015 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-466 --A limit-1015 -m limit --limit 1/second -j LOG --A limit-1015 -j ACCEPT --A limit-1016 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-467 --A limit-1016 -m limit --limit 1/second -j LOG --A limit-1017 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-468 --A limit-1017 -j ACCEPT --A limit-1019 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-470 --A limit-1019 -j ACCEPT --A limit-102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 --A limit-102 -j ACCEPT --A limit-1020 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-471 --A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-472 --A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-473 --A limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-474 --A limit-1023 -m limit --limit 1/second -j LOG --A limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-475 --A limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1025 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-476 --A limit-1025 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1026 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-477 --A limit-1026 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1027 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-478 --A limit-1027 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1028 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-479 --A limit-1029 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-480 --A limit-1029 -j ACCEPT --A limit-103 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 --A limit-1031 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-482 --A limit-1031 -m limit --limit 1/second -j LOG --A limit-1031 -j ACCEPT --A limit-1032 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-483 --A limit-1032 -m limit --limit 1/second -j LOG --A limit-1033 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-484 --A limit-1033 -j ACCEPT --A limit-1035 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-486 --A limit-1035 -j ACCEPT --A limit-1036 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-487 --A limit-1037 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-488 --A limit-1037 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1038 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-489 --A limit-1038 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1039 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-490 --A limit-1039 -m limit --limit 1/second -j LOG --A limit-1039 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-32 --A limit-104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1040 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-491 --A limit-1040 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1041 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-492 --A limit-1041 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1042 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-493 --A limit-1042 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1043 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-494 --A limit-1043 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1044 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-495 --A limit-1045 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-496 --A limit-1045 -j ACCEPT --A limit-1047 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-498 --A limit-1047 -m limit --limit 1/second -j LOG --A limit-1047 -j ACCEPT --A limit-1048 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-499 +-A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1000 -j TEE --gateway fc00::2 +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1006 -j ACCEPT +-A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1008 -m limit --limit 1/second -j LOG +-A limit-1008 -j ACCEPT +-A limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1009 -m limit --limit 1/second -j LOG +-A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1010 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1010 -j TEE --gateway fc00::2 +-A limit-1010 -j ACCEPT +-A limit-1011 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1011 -j TEE --gateway fc00::2 +-A limit-1012 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1012 -j ACCEPT +-A limit-1014 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1014 -j ACCEPT +-A limit-1015 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1018 -m limit --limit 1/second -j LOG +-A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-102 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1020 -j TEE --gateway fc00::2 +-A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1025 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1026 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1026 -j ACCEPT +-A limit-1028 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1028 -m limit --limit 1/second -j LOG +-A limit-1028 -j ACCEPT +-A limit-1029 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1029 -m limit --limit 1/second -j LOG +-A limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1030 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1030 -j TEE --gateway fc00::2 +-A limit-1030 -j ACCEPT +-A limit-1031 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1031 -j TEE --gateway fc00::2 +-A limit-1032 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1032 -j ACCEPT +-A limit-1034 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1034 -j ACCEPT +-A limit-1035 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1036 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1036 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1037 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1037 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1038 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1038 -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1039 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1039 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-104 -j TEE --gateway fc00::2 +-A limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1040 -j TEE --gateway fc00::2 +-A limit-1040 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1041 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1041 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1042 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1042 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1043 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1043 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1044 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1044 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1045 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1046 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1046 -j ACCEPT +-A limit-1048 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1048 -m limit --limit 1/second -j LOG --A limit-1049 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-500 --A limit-1049 -j ACCEPT --A limit-105 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-33 --A limit-105 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1051 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-502 --A limit-1051 -j ACCEPT --A limit-1052 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-503 --A limit-1053 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-504 --A limit-1053 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1054 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-505 --A limit-1054 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1055 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-506 --A limit-1055 -m limit --limit 1/second -j LOG --A limit-1055 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1056 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-507 --A limit-1056 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1057 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-508 --A limit-1057 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1058 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-509 --A limit-1058 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1059 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-510 --A limit-1059 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-34 --A limit-106 -m limit --limit 1/second -j LOG --A limit-106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1060 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-511 --A limit-1061 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-512 --A limit-1061 -j ACCEPT --A limit-1063 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-514 --A limit-1063 -m limit --limit 1/second -j LOG --A limit-1063 -j ACCEPT --A limit-1064 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-515 --A limit-1064 -m limit --limit 1/second -j LOG --A limit-1065 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-516 --A limit-1065 -j ACCEPT --A limit-1067 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-518 --A limit-1067 -j ACCEPT --A limit-1068 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-519 --A limit-1069 -m recent --name limit-1069 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1069 -m recent --name limit-1069 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-35 --A limit-107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1070 -m recent --name limit-1070 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1070 -m recent --name limit-1070 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1071 -m recent --name limit-1071 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1071 -m limit --limit 1/second -j LOG --A limit-1071 -m recent --name limit-1071 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1072 -m recent --name limit-1072 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1072 -m recent --name limit-1072 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1073 -m recent --name limit-1073 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1073 -m recent --name limit-1073 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1077 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1077 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1078 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1078 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1079 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1079 -m limit --limit 1/second -j LOG --A limit-1079 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-36 --A limit-108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1080 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1080 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1081 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1081 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1082 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1082 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1083 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1083 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1084 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1085 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1085 -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1087 -m limit --limit 1/second -j LOG --A limit-1087 -j ACCEPT --A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1048 -j ACCEPT +-A limit-1049 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1050 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1050 -j TEE --gateway fc00::2 +-A limit-1050 -j ACCEPT +-A limit-1051 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1051 -j TEE --gateway fc00::2 +-A limit-1052 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1052 -j ACCEPT +-A limit-1054 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1054 -j ACCEPT +-A limit-1055 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1056 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1056 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1057 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1057 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1058 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1058 -m limit --limit 1/second -j LOG +-A limit-1058 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1059 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1059 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-106 -m recent --name limit-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-106 -m recent --name limit-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1060 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1060 -j TEE --gateway fc00::2 +-A limit-1060 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1061 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1061 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1062 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1062 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1063 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1063 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1064 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1064 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1065 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1066 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1066 -j ACCEPT +-A limit-1068 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1068 -m limit --limit 1/second -j LOG +-A limit-1068 -j ACCEPT +-A limit-1069 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1069 -m limit --limit 1/second -j LOG +-A limit-107 -m recent --name limit-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-107 -m recent --name limit-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1070 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1070 -j TEE --gateway fc00::2 +-A limit-1070 -j ACCEPT +-A limit-1071 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1071 -j TEE --gateway fc00::2 +-A limit-1072 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1072 -j ACCEPT +-A limit-1074 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1074 -j ACCEPT +-A limit-1075 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-560 +-A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-561 +-A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-562 +-A limit-1078 -m limit --limit 1/second -j LOG +-A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-563 +-A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-108 -m recent --name limit-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-108 -m recent --name limit-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-564 +-A limit-1080 -j TEE --gateway fc00::2 +-A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-565 +-A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-566 +-A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-567 +-A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-568 +-A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-569 +-A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-570 +-A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-571 +-A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-572 -A limit-1088 -m limit --limit 1/second -j LOG --A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1089 -j ACCEPT --A limit-109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-37 --A limit-109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1091 -j ACCEPT --A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1093 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1093 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1094 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1094 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1095 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1095 -m limit --limit 1/second -j LOG --A limit-1095 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1096 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1096 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1097 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1097 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-573 +-A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-109 -m recent --name limit-109 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-574 +-A limit-1090 -j TEE --gateway fc00::2 +-A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-575 +-A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-576 +-A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1093 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-577 +-A limit-1093 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-578 +-A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-579 +-A limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-580 +-A limit-1096 -j ACCEPT +-A limit-1098 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-582 +-A limit-1098 -m limit --limit 1/second -j LOG +-A limit-1098 -j ACCEPT +-A limit-1099 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-583 +-A limit-1099 -m limit --limit 1/second -j LOG -A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-38 --A limit-110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1101 -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1103 -m limit --limit 1/second -j LOG --A limit-1103 -j ACCEPT --A limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1104 -m limit --limit 1/second -j LOG --A limit-1105 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1105 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1107 -j ACCEPT --A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1109 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1109 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-39 --A limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1110 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1111 -m limit --limit 1/second -j LOG --A limit-1111 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1114 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1115 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1116 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1117 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1117 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-20 +-A limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1100 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-584 +-A limit-1100 -j TEE --gateway fc00::2 +-A limit-1100 -j ACCEPT +-A limit-1101 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-585 +-A limit-1101 -j TEE --gateway fc00::2 +-A limit-1102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-586 +-A limit-1102 -j ACCEPT +-A limit-1104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-588 +-A limit-1104 -j ACCEPT +-A limit-1105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-589 +-A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-590 +-A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-591 +-A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-592 +-A limit-1108 -m limit --limit 1/second -j LOG +-A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-593 +-A limit-1109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-594 +-A limit-1110 -j TEE --gateway fc00::2 +-A limit-1110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-595 +-A limit-1111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-596 +-A limit-1112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-597 +-A limit-1113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-598 +-A limit-1114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-599 +-A limit-1116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-600 +-A limit-1116 -j ACCEPT +-A limit-1118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-602 +-A limit-1118 -m limit --limit 1/second -j LOG +-A limit-1118 -j ACCEPT +-A limit-1119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-603 -A limit-1119 -m limit --limit 1/second -j LOG --A limit-1119 -j ACCEPT --A limit-112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-40 --A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1120 -m limit --limit 1/second -j LOG --A limit-1121 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1121 -j ACCEPT --A limit-1123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1123 -j ACCEPT --A limit-1124 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1126 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1127 -m limit --limit 1/second -j LOG --A limit-1127 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1128 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1128 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1129 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1129 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-41 --A limit-1130 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1131 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1131 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1132 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1133 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1133 -j ACCEPT --A limit-1135 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1135 -m limit --limit 1/second -j LOG --A limit-1135 -j ACCEPT --A limit-1136 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1136 -m limit --limit 1/second -j LOG --A limit-1137 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1137 -j ACCEPT --A limit-1139 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1139 -j ACCEPT --A limit-114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-42 --A limit-114 -m limit --limit 1/second -j LOG --A limit-114 -j ACCEPT --A limit-1140 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1141 -m recent --name limit-1141 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-520 --A limit-1141 -m recent --name limit-1141 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1142 -m recent --name limit-1142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-521 --A limit-1142 -m recent --name limit-1142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1143 -m recent --name limit-1143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-522 --A limit-1143 -m limit --limit 1/second -j LOG --A limit-1143 -m recent --name limit-1143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1144 -m recent --name limit-1144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-523 --A limit-1144 -m recent --name limit-1144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1145 -m recent --name limit-1145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-524 --A limit-1145 -m recent --name limit-1145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1146 -m recent --name limit-1146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-525 --A limit-1146 -m recent --name limit-1146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1147 -m recent --name limit-1147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-526 --A limit-1147 -m recent --name limit-1147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1148 -m recent --name limit-1148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-527 --A limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-528 --A limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-43 --A limit-115 -m limit --limit 1/second -j LOG --A limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-529 --A limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1151 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-530 --A limit-1151 -m limit --limit 1/second -j LOG --A limit-1151 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-531 --A limit-1152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-532 --A limit-1153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-533 --A limit-1154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-534 --A limit-1155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-535 --A limit-1157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-536 --A limit-1157 -j ACCEPT --A limit-1159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-538 +-A limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-112 -m limit --limit 1/second -j LOG +-A limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1120 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-604 +-A limit-1120 -j TEE --gateway fc00::2 +-A limit-1120 -j ACCEPT +-A limit-1121 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-605 +-A limit-1121 -j TEE --gateway fc00::2 +-A limit-1122 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-606 +-A limit-1122 -j ACCEPT +-A limit-1124 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-608 +-A limit-1124 -j ACCEPT +-A limit-1125 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-609 +-A limit-1126 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-610 +-A limit-1126 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1127 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-611 +-A limit-1127 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1128 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-612 +-A limit-1128 -m limit --limit 1/second -j LOG +-A limit-1128 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1129 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-613 +-A limit-1129 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1130 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-614 +-A limit-1130 -j TEE --gateway fc00::2 +-A limit-1130 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1131 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-615 +-A limit-1131 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1132 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-616 +-A limit-1132 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1133 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-617 +-A limit-1133 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1134 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-618 +-A limit-1134 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1135 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-619 +-A limit-1136 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-620 +-A limit-1136 -j ACCEPT +-A limit-1138 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-622 +-A limit-1138 -m limit --limit 1/second -j LOG +-A limit-1138 -j ACCEPT +-A limit-1139 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-623 +-A limit-1139 -m limit --limit 1/second -j LOG +-A limit-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-114 -j TEE --gateway fc00::2 +-A limit-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1140 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-624 +-A limit-1140 -j TEE --gateway fc00::2 +-A limit-1140 -j ACCEPT +-A limit-1141 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-625 +-A limit-1141 -j TEE --gateway fc00::2 +-A limit-1142 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-626 +-A limit-1142 -j ACCEPT +-A limit-1144 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-628 +-A limit-1144 -j ACCEPT +-A limit-1145 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-629 +-A limit-1146 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-630 +-A limit-1146 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1147 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-631 +-A limit-1147 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1148 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-632 +-A limit-1148 -m limit --limit 1/second -j LOG +-A limit-1148 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1149 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-633 +-A limit-1149 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1150 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-634 +-A limit-1150 -j TEE --gateway fc00::2 +-A limit-1150 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1151 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-635 +-A limit-1151 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1152 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-636 +-A limit-1152 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1153 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-637 +-A limit-1153 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1154 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-638 +-A limit-1154 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1155 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-639 +-A limit-1156 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-640 +-A limit-1156 -j ACCEPT +-A limit-1158 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-642 +-A limit-1158 -m limit --limit 1/second -j LOG +-A limit-1158 -j ACCEPT +-A limit-1159 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-643 -A limit-1159 -m limit --limit 1/second -j LOG --A limit-1159 -j ACCEPT --A limit-116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-44 --A limit-116 -j ACCEPT --A limit-1160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-539 --A limit-1160 -m limit --limit 1/second -j LOG --A limit-1161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-540 --A limit-1161 -j ACCEPT --A limit-1163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-542 --A limit-1163 -j ACCEPT --A limit-1164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-543 --A limit-1165 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-544 --A limit-1165 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-545 --A limit-1166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-546 --A limit-1167 -m limit --limit 1/second -j LOG --A limit-1167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1168 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-547 --A limit-1168 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1169 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-548 --A limit-1169 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-117 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-45 --A limit-1170 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-549 --A limit-1170 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1171 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-550 --A limit-1171 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-551 --A limit-1173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-552 --A limit-1173 -j ACCEPT --A limit-1175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-554 --A limit-1175 -m limit --limit 1/second -j LOG --A limit-1175 -j ACCEPT --A limit-1176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-555 --A limit-1176 -m limit --limit 1/second -j LOG --A limit-1177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-556 --A limit-1177 -j ACCEPT --A limit-1179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-558 --A limit-1179 -j ACCEPT --A limit-118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-46 --A limit-118 -j ACCEPT --A limit-1180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-559 --A limit-1181 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-560 --A limit-1181 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1182 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-561 --A limit-1182 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1183 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-562 --A limit-1183 -m limit --limit 1/second -j LOG --A limit-1183 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1184 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-563 --A limit-1184 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1185 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-564 --A limit-1185 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1186 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-565 --A limit-1186 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1187 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-566 --A limit-1187 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1188 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-567 --A limit-1189 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-568 --A limit-1189 -j ACCEPT --A limit-119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-47 --A limit-1191 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-570 --A limit-1191 -m limit --limit 1/second -j LOG --A limit-1191 -j ACCEPT --A limit-1192 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-571 --A limit-1192 -m limit --limit 1/second -j LOG --A limit-1193 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-572 --A limit-1193 -j ACCEPT --A limit-1195 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-574 --A limit-1195 -j ACCEPT --A limit-1196 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-575 --A limit-1197 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-576 --A limit-1197 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1198 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-577 --A limit-1198 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1199 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-578 --A limit-1199 -m limit --limit 1/second -j LOG --A limit-1199 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1160 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-644 +-A limit-1160 -j TEE --gateway fc00::2 +-A limit-1160 -j ACCEPT +-A limit-1161 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-645 +-A limit-1161 -j TEE --gateway fc00::2 +-A limit-1162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-646 +-A limit-1162 -j ACCEPT +-A limit-1164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-648 +-A limit-1164 -j ACCEPT +-A limit-1165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-649 +-A limit-1166 -m recent --name limit-1166 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-650 +-A limit-1166 -m recent --name limit-1166 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1167 -m recent --name limit-1167 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-651 +-A limit-1167 -m recent --name limit-1167 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1168 -m recent --name limit-1168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-652 +-A limit-1168 -m limit --limit 1/second -j LOG +-A limit-1168 -m recent --name limit-1168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1169 -m recent --name limit-1169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-653 +-A limit-1169 -m recent --name limit-1169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1170 -m recent --name limit-1170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-654 +-A limit-1170 -j TEE --gateway fc00::2 +-A limit-1170 -m recent --name limit-1170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1171 -m recent --name limit-1171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-655 +-A limit-1171 -m recent --name limit-1171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1172 -m recent --name limit-1172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-656 +-A limit-1172 -m recent --name limit-1172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1173 -m recent --name limit-1173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-657 +-A limit-1173 -m recent --name limit-1173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1174 -m recent --name limit-1174 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-658 +-A limit-1174 -m recent --name limit-1174 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1175 -m recent --name limit-1175 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-659 +-A limit-1176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-660 +-A limit-1176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-661 +-A limit-1177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-662 +-A limit-1178 -m limit --limit 1/second -j LOG +-A limit-1178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-663 +-A limit-1179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-664 +-A limit-1180 -j TEE --gateway fc00::2 +-A limit-1180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-665 +-A limit-1181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-666 +-A limit-1182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-667 +-A limit-1183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-668 +-A limit-1184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-669 +-A limit-1186 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-670 +-A limit-1186 -j ACCEPT +-A limit-1188 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-672 +-A limit-1188 -m limit --limit 1/second -j LOG +-A limit-1188 -j ACCEPT +-A limit-1189 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-673 +-A limit-1189 -m limit --limit 1/second -j LOG +-A limit-119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-1190 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-674 +-A limit-1190 -j TEE --gateway fc00::2 +-A limit-1190 -j ACCEPT +-A limit-1191 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-675 +-A limit-1191 -j TEE --gateway fc00::2 +-A limit-1192 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-676 +-A limit-1192 -j ACCEPT +-A limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-678 +-A limit-1194 -j ACCEPT +-A limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-679 +-A limit-1196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-680 +-A limit-1196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-681 +-A limit-1197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1198 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-682 +-A limit-1198 -m limit --limit 1/second -j LOG +-A limit-1198 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1199 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-683 +-A limit-1199 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-12 -m limit --limit 1/second -j LOG -A limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-120 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-48 --A limit-120 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1200 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-579 --A limit-1200 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1201 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-580 --A limit-1201 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1202 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-581 --A limit-1202 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1203 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-582 --A limit-1203 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1204 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-583 --A limit-1205 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-584 --A limit-1205 -j ACCEPT --A limit-1207 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-586 --A limit-1207 -m limit --limit 1/second -j LOG --A limit-1207 -j ACCEPT --A limit-1208 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-587 +-A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-120 -j ACCEPT +-A limit-1200 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-684 +-A limit-1200 -j TEE --gateway fc00::2 +-A limit-1200 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1201 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-685 +-A limit-1201 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1202 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-686 +-A limit-1202 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1203 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-687 +-A limit-1203 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1204 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-688 +-A limit-1204 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1205 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-689 +-A limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-690 +-A limit-1206 -j ACCEPT +-A limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-692 -A limit-1208 -m limit --limit 1/second -j LOG --A limit-1209 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-588 --A limit-1209 -j ACCEPT --A limit-121 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 --A limit-121 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1211 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-590 --A limit-1211 -j ACCEPT --A limit-1212 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-591 --A limit-1213 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1213 -j ACCEPT --A limit-1213 -m limit --limit 1/second -j LOG --A limit-1213 -j DROP --A limit-1214 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1214 -j RETURN --A limit-1214 -m limit --limit 1/second -j LOG --A limit-1214 -j DROP --A limit-1215 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1215 -j logaccept-18 --A limit-1215 -m limit --limit 1/second -j LOG --A limit-1215 -j DROP --A limit-1216 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1216 -j ACCEPT --A limit-1216 -m limit --limit 1/second -j LOG --A limit-1216 -j DROP --A limit-1217 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1217 -j logaccept-19 --A limit-1217 -m limit --limit 1/second -j LOG --A limit-1217 -j DROP --A limit-1218 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1218 -j ACCEPT --A limit-1218 -j DROP --A limit-1219 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1219 -j RETURN --A limit-1219 -j DROP --A limit-122 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-1208 -j ACCEPT +-A limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-693 +-A limit-1209 -m limit --limit 1/second -j LOG +-A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-694 +-A limit-1210 -j TEE --gateway fc00::2 +-A limit-1210 -j ACCEPT +-A limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-695 +-A limit-1211 -j TEE --gateway fc00::2 +-A limit-1212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-696 +-A limit-1212 -j ACCEPT +-A limit-1214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-698 +-A limit-1214 -j ACCEPT +-A limit-1215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-699 +-A limit-1216 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-700 +-A limit-1216 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1217 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-701 +-A limit-1217 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1218 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-702 +-A limit-1218 -m limit --limit 1/second -j LOG +-A limit-1218 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1219 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-703 +-A limit-1219 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 -A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1220 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1220 -j logaccept-20 --A limit-1220 -j DROP --A limit-1221 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1221 -j ACCEPT --A limit-1221 -j DROP --A limit-1222 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1222 -j logaccept-21 --A limit-1222 -j DROP --A limit-1223 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1223 -j ACCEPT --A limit-1223 -m limit --limit 1/second -j LOG --A limit-1223 -j DROP --A limit-1224 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1224 -j RETURN --A limit-1224 -m limit --limit 1/second -j LOG --A limit-1224 -j DROP --A limit-1225 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1225 -j logaccept-22 --A limit-1225 -m limit --limit 1/second -j LOG --A limit-1225 -j DROP --A limit-1226 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1226 -j ACCEPT --A limit-1226 -m limit --limit 1/second -j LOG --A limit-1226 -j DROP --A limit-1227 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1227 -j logaccept-23 --A limit-1227 -m limit --limit 1/second -j LOG --A limit-1227 -j DROP --A limit-1228 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1228 -j ACCEPT --A limit-1228 -j DROP --A limit-1229 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1229 -j RETURN --A limit-1229 -j DROP --A limit-123 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 --A limit-123 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1230 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1230 -j logaccept-24 --A limit-1230 -j DROP --A limit-1231 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1231 -j ACCEPT --A limit-1231 -j DROP --A limit-1232 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1232 -j logaccept-25 --A limit-1232 -j DROP --A limit-1233 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1233 -j ACCEPT --A limit-1233 -j DROP --A limit-1234 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1234 -j RETURN --A limit-1234 -j DROP --A limit-1235 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1235 -j logaccept-26 --A limit-1235 -j DROP --A limit-1236 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1236 -j ACCEPT --A limit-1236 -j DROP --A limit-1237 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1237 -j logaccept-27 --A limit-1237 -j DROP --A limit-1238 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1238 -j ACCEPT --A limit-1238 -j DROP --A limit-1239 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1239 -j RETURN --A limit-1239 -j DROP --A limit-124 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 --A limit-124 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1240 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1240 -j logaccept-28 --A limit-1240 -j DROP --A limit-1241 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1241 -j ACCEPT --A limit-1241 -j DROP --A limit-1242 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1242 -j logaccept-29 --A limit-1242 -j DROP --A limit-1243 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1243 -j ACCEPT --A limit-1243 -m limit --limit 1/second -j LOG --A limit-1243 -j DROP --A limit-1244 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1244 -j RETURN --A limit-1244 -m limit --limit 1/second -j LOG --A limit-1244 -j DROP --A limit-1245 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1245 -j logaccept-30 --A limit-1245 -m limit --limit 1/second -j LOG --A limit-1245 -j DROP --A limit-1246 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1246 -j ACCEPT --A limit-1246 -m limit --limit 1/second -j LOG --A limit-1246 -j DROP --A limit-1247 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1247 -j logaccept-31 --A limit-1247 -m limit --limit 1/second -j LOG --A limit-1247 -j DROP --A limit-1248 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1248 -j ACCEPT --A limit-1248 -j DROP --A limit-1249 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1249 -j RETURN --A limit-1249 -j DROP --A limit-125 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 --A limit-125 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1250 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1250 -j logaccept-32 --A limit-1250 -j DROP --A limit-1251 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1251 -j ACCEPT --A limit-1251 -j DROP --A limit-1252 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1252 -j logaccept-33 --A limit-1252 -j DROP --A limit-1253 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1253 -j ACCEPT --A limit-1253 -j DROP --A limit-1254 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1254 -j RETURN --A limit-1254 -j DROP --A limit-1255 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1255 -j logaccept-34 --A limit-1255 -j DROP --A limit-1256 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1256 -j ACCEPT --A limit-1256 -j DROP --A limit-1257 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1257 -j logaccept-35 --A limit-1257 -j DROP --A limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-592 --A limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-593 --A limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-126 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 --A limit-126 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-594 --A limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-595 --A limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-596 --A limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-597 +-A limit-122 -j ACCEPT +-A limit-1220 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-704 +-A limit-1220 -j TEE --gateway fc00::2 +-A limit-1220 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1221 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-705 +-A limit-1221 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1222 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-706 +-A limit-1222 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-707 +-A limit-1223 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1224 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-708 +-A limit-1224 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1225 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-709 +-A limit-1226 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-710 +-A limit-1226 -j ACCEPT +-A limit-1228 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-712 +-A limit-1228 -m limit --limit 1/second -j LOG +-A limit-1228 -j ACCEPT +-A limit-1229 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-713 +-A limit-1229 -m limit --limit 1/second -j LOG +-A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-123 -m limit --limit 1/second -j LOG +-A limit-1230 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-714 +-A limit-1230 -j TEE --gateway fc00::2 +-A limit-1230 -j ACCEPT +-A limit-1231 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-715 +-A limit-1231 -j TEE --gateway fc00::2 +-A limit-1232 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-716 +-A limit-1232 -j ACCEPT +-A limit-1234 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-718 +-A limit-1234 -j ACCEPT +-A limit-1235 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-719 +-A limit-1236 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-720 +-A limit-1236 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1237 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-721 +-A limit-1237 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1238 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-722 +-A limit-1238 -m limit --limit 1/second -j LOG +-A limit-1238 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1239 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-723 +-A limit-1239 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-124 -j TEE --gateway fc00::2 +-A limit-124 -j ACCEPT +-A limit-1240 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-724 +-A limit-1240 -j TEE --gateway fc00::2 +-A limit-1240 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1241 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-725 +-A limit-1241 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1242 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-726 +-A limit-1242 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1243 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-727 +-A limit-1243 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1244 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-728 +-A limit-1244 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1245 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-729 +-A limit-1246 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-730 +-A limit-1246 -j ACCEPT +-A limit-1248 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-732 +-A limit-1248 -m limit --limit 1/second -j LOG +-A limit-1248 -j ACCEPT +-A limit-1249 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-733 +-A limit-1249 -m limit --limit 1/second -j LOG +-A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-125 -j TEE --gateway fc00::2 +-A limit-1250 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-734 +-A limit-1250 -j TEE --gateway fc00::2 +-A limit-1250 -j ACCEPT +-A limit-1251 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-735 +-A limit-1251 -j TEE --gateway fc00::2 +-A limit-1252 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-736 +-A limit-1252 -j ACCEPT +-A limit-1254 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-738 +-A limit-1254 -j ACCEPT +-A limit-1255 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-739 +-A limit-1256 -m recent --name limit-1256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1256 -m recent --name limit-1256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1257 -m recent --name limit-1257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1257 -m recent --name limit-1257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1258 -m limit --limit 1/second -j LOG +-A limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-126 -j ACCEPT +-A limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1260 -j TEE --gateway fc00::2 +-A limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-598 --A limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1265 -m recent --name limit-1265 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-599 --A limit-1266 -m recent --name limit-1266 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1266 -m recent --name limit-1266 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1267 -m recent --name limit-1267 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1267 -m recent --name limit-1267 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1268 -m recent --name limit-1268 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1268 -m recent --name limit-1268 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1269 -m recent --name limit-1269 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1269 -m recent --name limit-1269 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-127 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-55 --A limit-1270 -m recent --name limit-1270 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name limit-1270 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1271 -m recent --name limit-1271 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1271 -m recent --name limit-1271 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1272 -m recent --name limit-1272 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1272 -m recent --name limit-1272 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1273 -m recent --name limit-1273 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1265 -m recent --name limit-1265 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1268 -m limit --limit 1/second -j LOG +-A limit-1268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-1270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1270 -j TEE --gateway fc00::2 +-A limit-1270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1272 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1272 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1276 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1276 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1277 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1277 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1279 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1279 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-128 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 +-A limit-1276 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1276 -j ACCEPT +-A limit-1278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1278 -m limit --limit 1/second -j LOG +-A limit-1278 -j ACCEPT +-A limit-1279 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1279 -m limit --limit 1/second -j LOG +-A limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-38 -A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1280 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1281 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1280 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1280 -j TEE --gateway fc00::2 +-A limit-1280 -j ACCEPT +-A limit-1281 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1281 -j TEE --gateway fc00::2 -A limit-1282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1282 -j ACCEPT -A limit-1284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1284 -j ACCEPT -A limit-1285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1285 -m limit --limit 1/second -j LOG --A limit-1286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-129 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-1286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1288 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1288 -m limit --limit 1/second -j LOG +-A limit-1288 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-39 -A limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1290 -j TEE --gateway fc00::2 +-A limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1296 -j ACCEPT -A limit-1298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1298 -m limit --limit 1/second -j LOG +-A limit-1298 -j ACCEPT -A limit-1299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1299 -m limit --limit 1/second -j LOG -A limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-130 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 --A limit-130 -m limit --limit 1/second -j LOG --A limit-130 -j ACCEPT +-A limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1300 -j TEE --gateway fc00::2 +-A limit-1300 -j ACCEPT -A limit-1301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1301 -m limit --limit 1/second -j LOG +-A limit-1301 -j TEE --gateway fc00::2 -A limit-1302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1302 -j ACCEPT -A limit-1304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1304 -j ACCEPT -A limit-1305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1306 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1307 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1308 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1308 -m limit --limit 1/second -j LOG +-A limit-1308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-131 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 --A limit-131 -m limit --limit 1/second -j LOG +-A limit-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1310 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1310 -j TEE --gateway fc00::2 +-A limit-1310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1311 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1311 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1312 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1312 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1312 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1313 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1313 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1314 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1314 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1315 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1317 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1317 -m limit --limit 1/second -j LOG +-A limit-1316 -j ACCEPT -A limit-1318 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1318 -m limit --limit 1/second -j LOG +-A limit-1318 -j ACCEPT -A limit-1319 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-132 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 --A limit-132 -j ACCEPT +-A limit-1319 -m limit --limit 1/second -j LOG +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-132 -m limit --limit 1/second -j LOG +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1320 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1320 -j TEE --gateway fc00::2 +-A limit-1320 -j ACCEPT -A limit-1321 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1322 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1323 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1324 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1324 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1325 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1325 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1321 -j TEE --gateway fc00::2 +-A limit-1322 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1322 -j ACCEPT +-A limit-1324 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1324 -j ACCEPT +-A limit-1325 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1326 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1326 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1326 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1327 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1327 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1328 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1328 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1328 -m limit --limit 1/second -j LOG +-A limit-1328 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1329 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-133 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-61 --A limit-1330 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1331 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1332 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1333 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1333 -m limit --limit 1/second -j LOG --A limit-1334 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1335 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1329 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1330 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1330 -j TEE --gateway fc00::2 +-A limit-1330 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1331 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1331 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1332 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1332 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1333 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1333 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1334 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1334 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1335 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1336 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1337 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1338 -m recent --name limit-1338 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-600 --A limit-1338 -m recent --name limit-1338 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1339 -m recent --name limit-1339 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-601 --A limit-1339 -m recent --name limit-1339 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-134 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-62 --A limit-134 -j ACCEPT --A limit-1340 -m recent --name limit-1340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-602 --A limit-1340 -m recent --name limit-1340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1341 -m recent --name limit-1341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-603 --A limit-1341 -m recent --name limit-1341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1342 -m recent --name limit-1342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-604 --A limit-1342 -m recent --name limit-1342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1343 -m recent --name limit-1343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-605 --A limit-1343 -m recent --name limit-1343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1344 -m recent --name limit-1344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-606 --A limit-1344 -m recent --name limit-1344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1345 -m recent --name limit-1345 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-607 --A limit-1346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-608 --A limit-1346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-609 --A limit-1347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-610 --A limit-1348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-611 --A limit-1349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-135 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-63 --A limit-1350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-612 --A limit-1350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-613 --A limit-1351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1352 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-614 --A limit-1352 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1353 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-615 --A limit-1354 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-616 --A limit-1355 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-617 --A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-618 --A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-619 --A limit-1357 -m limit --limit 1/second -j LOG --A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-620 --A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-621 --A limit-136 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-64 --A limit-136 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-622 --A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-623 --A limit-1362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-624 --A limit-1362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-625 --A limit-1363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-626 --A limit-1364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-627 --A limit-1365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-628 --A limit-1366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-629 --A limit-1367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-630 --A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-631 --A limit-137 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-65 --A limit-137 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-632 --A limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-633 --A limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-634 --A limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-635 --A limit-1373 -m limit --limit 1/second -j LOG --A limit-1374 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-636 --A limit-1375 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-637 --A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-638 --A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-639 --A limit-1378 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-640 --A limit-1378 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1379 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-641 --A limit-1379 -m recent --name user:C --rsource --mask fe00:: --set --A limit-138 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-66 --A limit-138 -m limit --limit 1/second -j LOG --A limit-138 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-642 --A limit-1380 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-643 --A limit-1381 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1382 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-644 --A limit-1382 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1383 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-645 --A limit-1383 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1384 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-646 --A limit-1384 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1385 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-647 --A limit-1386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-648 --A limit-1387 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-649 --A limit-1388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-650 --A limit-1389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-651 +-A limit-1336 -j ACCEPT +-A limit-1338 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1338 -m limit --limit 1/second -j LOG +-A limit-1338 -j ACCEPT +-A limit-1339 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1339 -m limit --limit 1/second -j LOG +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-134 -j TEE --gateway fc00::2 +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1340 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1340 -j TEE --gateway fc00::2 +-A limit-1340 -j ACCEPT +-A limit-1341 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1341 -j TEE --gateway fc00::2 +-A limit-1342 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1342 -j ACCEPT +-A limit-1344 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1344 -j ACCEPT +-A limit-1345 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1346 -m recent --name limit-1346 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-740 +-A limit-1346 -m recent --name limit-1346 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1347 -m recent --name limit-1347 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-741 +-A limit-1347 -m recent --name limit-1347 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1348 -m recent --name limit-1348 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-742 +-A limit-1348 -m limit --limit 1/second -j LOG +-A limit-1348 -m recent --name limit-1348 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1349 -m recent --name limit-1349 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-743 +-A limit-1349 -m recent --name limit-1349 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-744 +-A limit-1350 -j TEE --gateway fc00::2 +-A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-745 +-A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-746 +-A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-747 +-A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-748 +-A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-749 +-A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-750 +-A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-751 +-A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-752 +-A limit-1358 -m limit --limit 1/second -j LOG +-A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-753 +-A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-754 +-A limit-1360 -j TEE --gateway fc00::2 +-A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-755 +-A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-756 +-A limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1363 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-757 +-A limit-1363 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-758 +-A limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1365 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-759 +-A limit-1366 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-760 +-A limit-1366 -j ACCEPT +-A limit-1368 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-762 +-A limit-1368 -m limit --limit 1/second -j LOG +-A limit-1368 -j ACCEPT +-A limit-1369 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-763 +-A limit-1369 -m limit --limit 1/second -j LOG +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-764 +-A limit-1370 -j TEE --gateway fc00::2 +-A limit-1370 -j ACCEPT +-A limit-1371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-765 +-A limit-1371 -j TEE --gateway fc00::2 +-A limit-1372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-766 +-A limit-1372 -j ACCEPT +-A limit-1374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-768 +-A limit-1374 -j ACCEPT +-A limit-1375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-769 +-A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-770 +-A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-771 +-A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-772 +-A limit-1378 -m limit --limit 1/second -j LOG +-A limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1379 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-773 +-A limit-1379 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1380 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-774 +-A limit-1380 -j TEE --gateway fc00::2 +-A limit-1380 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1381 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-775 +-A limit-1381 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-776 +-A limit-1382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-777 +-A limit-1383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-778 +-A limit-1384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-779 +-A limit-1386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-780 +-A limit-1386 -j ACCEPT +-A limit-1388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-782 +-A limit-1388 -m limit --limit 1/second -j LOG +-A limit-1388 -j ACCEPT +-A limit-1389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-783 -A limit-1389 -m limit --limit 1/second -j LOG --A limit-139 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-67 --A limit-139 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-652 --A limit-1391 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-653 --A limit-1392 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-654 --A limit-1393 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-655 --A limit-1394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-656 --A limit-1394 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-657 --A limit-1395 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-658 --A limit-1396 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-659 --A limit-1397 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1398 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-660 --A limit-1398 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1399 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-661 --A limit-1399 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-1390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-784 +-A limit-1390 -j TEE --gateway fc00::2 +-A limit-1390 -j ACCEPT +-A limit-1391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-785 +-A limit-1391 -j TEE --gateway fc00::2 +-A limit-1392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-786 +-A limit-1392 -j ACCEPT +-A limit-1394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-788 +-A limit-1394 -j ACCEPT +-A limit-1395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-789 +-A limit-1396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-790 +-A limit-1396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-791 +-A limit-1397 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-792 +-A limit-1398 -m limit --limit 1/second -j LOG +-A limit-1398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-793 +-A limit-1399 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-14 -j TEE --gateway fc00::2 -A limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-140 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-68 --A limit-140 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1400 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-662 --A limit-1400 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1401 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-663 --A limit-1402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-664 --A limit-1403 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-665 --A limit-1404 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-666 --A limit-1405 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-667 --A limit-1405 -m limit --limit 1/second -j LOG --A limit-1406 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-668 --A limit-1407 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-669 --A limit-1408 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-670 --A limit-1409 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-671 --A limit-141 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-69 --A limit-141 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1410 -m recent --name limit-1410 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1410 -m recent --name limit-1410 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1411 -m recent --name limit-1411 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1411 -m recent --name limit-1411 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1412 -m recent --name limit-1412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1412 -m recent --name limit-1412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1413 -m recent --name limit-1413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1413 -m recent --name limit-1413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1414 -m recent --name limit-1414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1414 -m recent --name limit-1414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1415 -m recent --name limit-1415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1415 -m recent --name limit-1415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1416 -m recent --name limit-1416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1416 -m recent --name limit-1416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1417 -m recent --name limit-1417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1418 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1418 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1419 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1419 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-142 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-70 --A limit-142 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1420 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1420 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1421 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1421 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-140 -j ACCEPT +-A limit-1400 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-794 +-A limit-1400 -j TEE --gateway fc00::2 +-A limit-1400 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1401 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-795 +-A limit-1401 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1402 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-796 +-A limit-1402 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1403 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-797 +-A limit-1403 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1404 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-798 +-A limit-1404 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1405 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-799 +-A limit-1406 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-800 +-A limit-1406 -j ACCEPT +-A limit-1408 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-802 +-A limit-1408 -m limit --limit 1/second -j LOG +-A limit-1408 -j ACCEPT +-A limit-1409 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-803 +-A limit-1409 -m limit --limit 1/second -j LOG +-A limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-1410 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-804 +-A limit-1410 -j TEE --gateway fc00::2 +-A limit-1410 -j ACCEPT +-A limit-1411 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-805 +-A limit-1411 -j TEE --gateway fc00::2 +-A limit-1412 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-806 +-A limit-1412 -j ACCEPT +-A limit-1414 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-808 +-A limit-1414 -j ACCEPT +-A limit-1415 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-809 +-A limit-1416 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-810 +-A limit-1416 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1417 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-811 +-A limit-1417 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1418 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-812 +-A limit-1418 -m limit --limit 1/second -j LOG +-A limit-1418 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1419 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-813 +-A limit-1419 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-142 -m limit --limit 1/second -j LOG +-A limit-142 -j ACCEPT +-A limit-1420 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-814 +-A limit-1420 -j TEE --gateway fc00::2 +-A limit-1420 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1421 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-815 +-A limit-1421 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1422 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-816 +-A limit-1422 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1423 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-817 +-A limit-1423 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1424 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-818 +-A limit-1424 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1425 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-819 +-A limit-1426 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-820 +-A limit-1426 -j ACCEPT +-A limit-1428 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-822 +-A limit-1428 -m limit --limit 1/second -j LOG +-A limit-1428 -j ACCEPT +-A limit-1429 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-823 -A limit-1429 -m limit --limit 1/second -j LOG --A limit-143 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-71 --A limit-1430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1435 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1435 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-144 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-72 +-A limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-143 -m limit --limit 1/second -j LOG +-A limit-1430 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-824 +-A limit-1430 -j TEE --gateway fc00::2 +-A limit-1430 -j ACCEPT +-A limit-1431 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-825 +-A limit-1431 -j TEE --gateway fc00::2 +-A limit-1432 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-826 +-A limit-1432 -j ACCEPT +-A limit-1434 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-828 +-A limit-1434 -j ACCEPT +-A limit-1435 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-829 +-A limit-1436 -m recent --name limit-1436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1436 -m recent --name limit-1436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1437 -m recent --name limit-1437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1437 -m recent --name limit-1437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1438 -m recent --name limit-1438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1438 -m limit --limit 1/second -j LOG +-A limit-1438 -m recent --name limit-1438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1439 -m recent --name limit-1439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1439 -m recent --name limit-1439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-144 -j TEE --gateway fc00::2 -A limit-144 -j ACCEPT --A limit-1440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1445 -m limit --limit 1/second -j LOG --A limit-1446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-145 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-73 --A limit-1450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1450 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1451 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1452 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1453 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1454 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1454 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1455 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1455 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1456 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1456 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1457 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1459 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-146 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-74 --A limit-146 -m limit --limit 1/second -j LOG +-A limit-1440 -m recent --name limit-1440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1440 -j TEE --gateway fc00::2 +-A limit-1440 -m recent --name limit-1440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1441 -m recent --name limit-1441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1441 -m recent --name limit-1441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1442 -m recent --name limit-1442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1442 -m recent --name limit-1442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1443 -m recent --name limit-1443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1443 -m recent --name limit-1443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1444 -m recent --name limit-1444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1444 -m recent --name limit-1444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1445 -m recent --name limit-1445 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1447 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1447 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1448 -m limit --limit 1/second -j LOG +-A limit-1448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-145 -j TEE --gateway fc00::2 +-A limit-1450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1450 -j TEE --gateway fc00::2 +-A limit-1450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1455 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1456 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1456 -j ACCEPT +-A limit-1458 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1458 -m limit --limit 1/second -j LOG +-A limit-1458 -j ACCEPT +-A limit-1459 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1459 -m limit --limit 1/second -j LOG +-A limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A limit-146 -j ACCEPT --A limit-1460 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1461 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1461 -m limit --limit 1/second -j LOG --A limit-1462 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1463 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1464 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1465 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1466 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1466 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1467 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1467 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1468 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1468 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1469 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1469 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-147 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-75 --A limit-147 -m limit --limit 1/second -j LOG --A limit-1470 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1470 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1471 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1471 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1472 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1472 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1473 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1474 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1475 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1476 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1477 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1477 -m limit --limit 1/second -j LOG --A limit-1478 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1479 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-148 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-76 +-A limit-1460 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1460 -j TEE --gateway fc00::2 +-A limit-1460 -j ACCEPT +-A limit-1461 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1461 -j TEE --gateway fc00::2 +-A limit-1462 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1462 -j ACCEPT +-A limit-1464 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1464 -j ACCEPT +-A limit-1465 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1468 -m limit --limit 1/second -j LOG +-A limit-1468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-1470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1470 -j TEE --gateway fc00::2 +-A limit-1470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1475 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1476 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1476 -j ACCEPT +-A limit-1478 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1478 -m limit --limit 1/second -j LOG +-A limit-1478 -j ACCEPT +-A limit-1479 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1479 -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-58 -A limit-148 -j ACCEPT --A limit-1480 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1481 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1482 -m recent --name limit-1482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-672 --A limit-1482 -m recent --name limit-1482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1483 -m recent --name limit-1483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-673 --A limit-1483 -m recent --name limit-1483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1484 -m recent --name limit-1484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-674 --A limit-1484 -m recent --name limit-1484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1485 -m recent --name limit-1485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-675 --A limit-1485 -m recent --name limit-1485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1486 -m recent --name limit-1486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-676 --A limit-1486 -m recent --name limit-1486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1487 -m recent --name limit-1487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-677 --A limit-1487 -m recent --name limit-1487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1488 -m recent --name limit-1488 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-678 --A limit-1488 -m recent --name limit-1488 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1489 -m recent --name limit-1489 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-679 --A limit-149 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-77 --A limit-1490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-680 --A limit-1490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-681 --A limit-1491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-682 --A limit-1492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-683 --A limit-1493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-684 --A limit-1494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-685 --A limit-1495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-686 --A limit-1496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1497 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-687 --A limit-1498 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-688 --A limit-1499 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-689 +-A limit-1480 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1480 -j TEE --gateway fc00::2 +-A limit-1480 -j ACCEPT +-A limit-1481 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1481 -j TEE --gateway fc00::2 +-A limit-1482 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1482 -j ACCEPT +-A limit-1484 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1484 -j ACCEPT +-A limit-1485 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1486 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1486 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1487 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1487 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1488 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1488 -m limit --limit 1/second -j LOG +-A limit-1488 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1489 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1489 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-1490 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1490 -j TEE --gateway fc00::2 +-A limit-1490 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1491 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1491 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1492 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1492 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1493 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1493 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1494 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1494 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1495 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1496 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1496 -j ACCEPT +-A limit-1498 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1498 -m limit --limit 1/second -j LOG +-A limit-1498 -j ACCEPT +-A limit-1499 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1499 -m limit --limit 1/second -j LOG -A limit-15 -m recent --name limit-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-150 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-78 --A limit-150 -j ACCEPT --A limit-1500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-690 --A limit-1501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-691 --A limit-1501 -m limit --limit 1/second -j LOG --A limit-1502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-692 --A limit-1503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-693 --A limit-1504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-694 --A limit-1505 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-695 --A limit-1506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-696 --A limit-1506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1507 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-697 --A limit-1507 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-698 --A limit-1508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-699 --A limit-1509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-151 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-79 --A limit-1510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-700 --A limit-1510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-701 --A limit-1511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-702 --A limit-1512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-703 --A limit-1514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-704 --A limit-1515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-705 --A limit-1516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-706 --A limit-1517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-707 --A limit-1517 -m limit --limit 1/second -j LOG --A limit-1518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-708 --A limit-1519 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-709 --A limit-152 -m recent --name limit-152 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-152 -m recent --name limit-152 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-710 --A limit-1521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-711 --A limit-1522 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-712 --A limit-1522 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1523 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-713 --A limit-1523 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1524 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-714 --A limit-1524 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1525 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-715 --A limit-1525 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1526 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-716 --A limit-1526 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1527 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-717 --A limit-1527 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1528 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-718 --A limit-1528 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1529 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-719 --A limit-153 -m recent --name limit-153 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-153 -m recent --name limit-153 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1530 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-720 --A limit-1531 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-721 --A limit-1532 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-722 --A limit-1533 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-723 --A limit-1533 -m limit --limit 1/second -j LOG --A limit-1534 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-724 --A limit-1535 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-725 --A limit-1536 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-726 --A limit-1537 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-727 --A limit-1538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-728 --A limit-1538 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-729 --A limit-1539 -m recent --name user:C --rdest --mask fe00:: --set --A limit-154 -m recent --name limit-154 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-154 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name limit-154 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1540 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-730 --A limit-1540 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1541 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-731 --A limit-1541 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1542 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-732 --A limit-1542 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1543 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-733 --A limit-1543 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1544 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-734 --A limit-1544 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1545 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-735 --A limit-1546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-736 --A limit-1547 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-737 --A limit-1548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-738 --A limit-1549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-739 +-A limit-15 -m recent --name limit-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-150 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-60 +-A limit-150 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1500 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1500 -j TEE --gateway fc00::2 +-A limit-1500 -j ACCEPT +-A limit-1501 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1501 -j TEE --gateway fc00::2 +-A limit-1502 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1502 -j ACCEPT +-A limit-1504 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1504 -j ACCEPT +-A limit-1505 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1506 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1506 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1507 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1507 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1508 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1508 -m limit --limit 1/second -j LOG +-A limit-1508 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1509 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1509 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-61 +-A limit-151 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1510 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1510 -j TEE --gateway fc00::2 +-A limit-1510 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1511 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1511 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1512 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1512 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1513 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1513 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1516 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1516 -j ACCEPT +-A limit-1518 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1518 -m limit --limit 1/second -j LOG +-A limit-1518 -j ACCEPT +-A limit-1519 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1519 -m limit --limit 1/second -j LOG +-A limit-152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-62 +-A limit-152 -m limit --limit 1/second -j LOG +-A limit-152 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1520 -j TEE --gateway fc00::2 +-A limit-1520 -j ACCEPT +-A limit-1521 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1521 -j TEE --gateway fc00::2 +-A limit-1522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1522 -j ACCEPT +-A limit-1524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1524 -j ACCEPT +-A limit-1525 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1526 -m recent --name limit-1526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-830 +-A limit-1526 -m recent --name limit-1526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1527 -m recent --name limit-1527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-831 +-A limit-1527 -m recent --name limit-1527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1528 -m recent --name limit-1528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-832 +-A limit-1528 -m limit --limit 1/second -j LOG +-A limit-1528 -m recent --name limit-1528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1529 -m recent --name limit-1529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-833 +-A limit-1529 -m recent --name limit-1529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-63 +-A limit-153 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1530 -m recent --name limit-1530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-834 +-A limit-1530 -j TEE --gateway fc00::2 +-A limit-1530 -m recent --name limit-1530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1531 -m recent --name limit-1531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-835 +-A limit-1531 -m recent --name limit-1531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1532 -m recent --name limit-1532 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-836 +-A limit-1532 -m recent --name limit-1532 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1533 -m recent --name limit-1533 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-837 +-A limit-1533 -m recent --name limit-1533 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1534 -m recent --name limit-1534 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-838 +-A limit-1534 -m recent --name limit-1534 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1535 -m recent --name limit-1535 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-839 +-A limit-1536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-840 +-A limit-1536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-841 +-A limit-1537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-842 +-A limit-1538 -m limit --limit 1/second -j LOG +-A limit-1538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-843 +-A limit-1539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-64 +-A limit-154 -j TEE --gateway fc00::2 +-A limit-154 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-844 +-A limit-1540 -j TEE --gateway fc00::2 +-A limit-1540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-845 +-A limit-1541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-846 +-A limit-1542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-847 +-A limit-1543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1544 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-848 +-A limit-1544 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1545 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-849 +-A limit-1546 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-850 +-A limit-1546 -j ACCEPT +-A limit-1548 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-852 +-A limit-1548 -m limit --limit 1/second -j LOG +-A limit-1548 -j ACCEPT +-A limit-1549 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-853 -A limit-1549 -m limit --limit 1/second -j LOG --A limit-155 -m recent --name limit-155 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-155 -m recent --name limit-155 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1550 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-740 --A limit-1551 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-741 --A limit-1552 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-742 --A limit-1553 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-743 --A limit-1554 -m recent --name limit-1554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1554 -m recent --name limit-1554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1555 -m recent --name limit-1555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1555 -m recent --name limit-1555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1556 -m recent --name limit-1556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1556 -m recent --name limit-1556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1557 -m recent --name limit-1557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1557 -m recent --name limit-1557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1558 -m recent --name limit-1558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1558 -m recent --name limit-1558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1559 -m recent --name limit-1559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1559 -m recent --name limit-1559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1560 -m recent --name limit-1560 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1560 -m recent --name limit-1560 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1561 -m recent --name limit-1561 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1571 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1573 -m limit --limit 1/second -j LOG --A limit-1574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1577 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1578 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1578 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1579 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1579 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-65 +-A limit-155 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1550 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-854 +-A limit-1550 -j TEE --gateway fc00::2 +-A limit-1550 -j ACCEPT +-A limit-1551 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-855 +-A limit-1551 -j TEE --gateway fc00::2 +-A limit-1552 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-856 +-A limit-1552 -j ACCEPT +-A limit-1554 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-858 +-A limit-1554 -j ACCEPT +-A limit-1555 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-859 +-A limit-1556 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-860 +-A limit-1556 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1557 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-861 +-A limit-1557 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1558 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-862 +-A limit-1558 -m limit --limit 1/second -j LOG +-A limit-1558 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1559 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-863 +-A limit-1559 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-66 +-A limit-156 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1560 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-864 +-A limit-1560 -j TEE --gateway fc00::2 +-A limit-1560 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1561 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-865 +-A limit-1561 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1562 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-866 +-A limit-1562 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1563 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-867 +-A limit-1563 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1564 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-868 +-A limit-1564 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1565 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-869 +-A limit-1566 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-870 +-A limit-1566 -j ACCEPT +-A limit-1568 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-872 +-A limit-1568 -m limit --limit 1/second -j LOG +-A limit-1568 -j ACCEPT +-A limit-1569 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-873 +-A limit-1569 -m limit --limit 1/second -j LOG +-A limit-157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-67 +-A limit-157 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1570 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-874 +-A limit-1570 -j TEE --gateway fc00::2 +-A limit-1570 -j ACCEPT +-A limit-1571 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-875 +-A limit-1571 -j TEE --gateway fc00::2 +-A limit-1572 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-876 +-A limit-1572 -j ACCEPT +-A limit-1574 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-878 +-A limit-1574 -j ACCEPT +-A limit-1575 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-879 +-A limit-1576 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-880 +-A limit-1576 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1577 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-881 +-A limit-1577 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1578 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-882 +-A limit-1578 -m limit --limit 1/second -j LOG +-A limit-1578 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1579 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-883 +-A limit-1579 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-68 +-A limit-158 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1580 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-884 +-A limit-1580 -j TEE --gateway fc00::2 +-A limit-1580 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1581 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-885 +-A limit-1581 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1582 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-886 +-A limit-1582 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1583 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-887 +-A limit-1583 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1584 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-888 +-A limit-1584 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1585 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-889 +-A limit-1586 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-890 +-A limit-1586 -j ACCEPT +-A limit-1588 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-892 +-A limit-1588 -m limit --limit 1/second -j LOG +-A limit-1588 -j ACCEPT +-A limit-1589 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-893 -A limit-1589 -m limit --limit 1/second -j LOG --A limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1591 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1594 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1594 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1595 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1595 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1596 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1596 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1597 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1597 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1598 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1598 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1599 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1599 -m recent --name user:C --rsource --mask fe00:: --set --A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1600 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1602 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1603 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1604 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1605 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1605 -m limit --limit 1/second -j LOG --A limit-1606 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1607 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1608 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1609 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1610 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1610 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1611 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1611 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1612 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1612 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1613 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1613 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1614 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1614 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1615 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1615 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1616 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1616 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1617 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1618 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1619 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-159 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-69 +-A limit-1590 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-894 +-A limit-1590 -j TEE --gateway fc00::2 +-A limit-1590 -j ACCEPT +-A limit-1591 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-895 +-A limit-1591 -j TEE --gateway fc00::2 +-A limit-1592 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-896 +-A limit-1592 -j ACCEPT +-A limit-1594 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-898 +-A limit-1594 -j ACCEPT +-A limit-1595 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-899 +-A limit-1596 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-900 +-A limit-1596 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1597 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-901 +-A limit-1597 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1598 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-902 +-A limit-1598 -m limit --limit 1/second -j LOG +-A limit-1598 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1599 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-903 +-A limit-1599 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-16 -m recent --name limit-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-16 -m recent --name limit-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-160 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-70 +-A limit-160 -j ACCEPT +-A limit-1600 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-904 +-A limit-1600 -j TEE --gateway fc00::2 +-A limit-1600 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1601 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-905 +-A limit-1601 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1602 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-906 +-A limit-1602 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1603 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-907 +-A limit-1603 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1604 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-908 +-A limit-1604 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1605 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-909 +-A limit-1606 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-910 +-A limit-1606 -j ACCEPT +-A limit-1608 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-912 +-A limit-1608 -m limit --limit 1/second -j LOG +-A limit-1608 -j ACCEPT +-A limit-1609 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-913 +-A limit-1609 -m limit --limit 1/second -j LOG +-A limit-161 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-71 +-A limit-1610 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-914 +-A limit-1610 -j TEE --gateway fc00::2 +-A limit-1610 -j ACCEPT +-A limit-1611 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-915 +-A limit-1611 -j TEE --gateway fc00::2 +-A limit-1612 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-916 +-A limit-1612 -j ACCEPT +-A limit-1614 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-918 +-A limit-1614 -j ACCEPT +-A limit-1615 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-919 +-A limit-1616 -m recent --name limit-1616 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-920 +-A limit-1616 -m recent --name limit-1616 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1617 -m recent --name limit-1617 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-921 +-A limit-1617 -m recent --name limit-1617 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1618 -m recent --name limit-1618 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-922 +-A limit-1618 -m limit --limit 1/second -j LOG +-A limit-1618 -m recent --name limit-1618 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1619 -m recent --name limit-1619 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-923 +-A limit-1619 -m recent --name limit-1619 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-72 -A limit-162 -m limit --limit 1/second -j LOG --A limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1620 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1621 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1621 -m limit --limit 1/second -j LOG --A limit-1622 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1623 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1624 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1625 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1626 -m recent --name limit-1626 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-744 --A limit-1626 -m recent --name limit-1626 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1627 -m recent --name limit-1627 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-745 --A limit-1627 -m recent --name limit-1627 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1628 -m recent --name limit-1628 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-746 --A limit-1628 -m recent --name limit-1628 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1629 -m recent --name limit-1629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-747 --A limit-1629 -m recent --name limit-1629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1630 -m recent --name limit-1630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-748 --A limit-1630 -m recent --name limit-1630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1631 -m recent --name limit-1631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-749 --A limit-1631 -m recent --name limit-1631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1632 -m recent --name limit-1632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-750 --A limit-1632 -m recent --name limit-1632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1633 -m recent --name limit-1633 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-751 --A limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-752 --A limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1635 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-753 --A limit-1635 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1636 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-754 --A limit-1636 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1637 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-755 --A limit-1637 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1638 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-756 --A limit-1638 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1639 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-757 --A limit-1639 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-758 --A limit-1640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-759 --A limit-1642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-760 --A limit-1643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-761 --A limit-1644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-762 --A limit-1645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-763 --A limit-1645 -m limit --limit 1/second -j LOG --A limit-1646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-764 --A limit-1647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-765 --A limit-1648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-766 --A limit-1649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-767 --A limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-768 --A limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-769 --A limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-770 --A limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-771 --A limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-772 --A limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-773 --A limit-1655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-774 --A limit-1656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-775 --A limit-1658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-776 --A limit-1659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-777 --A limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-778 --A limit-1661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-779 --A limit-1661 -m limit --limit 1/second -j LOG --A limit-1662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-780 --A limit-1663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-781 --A limit-1664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-782 --A limit-1665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-783 --A limit-1666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-784 --A limit-1666 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-785 +-A limit-162 -j ACCEPT +-A limit-1620 -m recent --name limit-1620 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-924 +-A limit-1620 -j TEE --gateway fc00::2 +-A limit-1620 -m recent --name limit-1620 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1621 -m recent --name limit-1621 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-925 +-A limit-1621 -m recent --name limit-1621 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1622 -m recent --name limit-1622 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-926 +-A limit-1622 -m recent --name limit-1622 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1623 -m recent --name limit-1623 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-927 +-A limit-1623 -m recent --name limit-1623 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1624 -m recent --name limit-1624 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-928 +-A limit-1624 -m recent --name limit-1624 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1625 -m recent --name limit-1625 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-929 +-A limit-1626 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-930 +-A limit-1626 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1627 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-931 +-A limit-1627 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1628 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-932 +-A limit-1628 -m limit --limit 1/second -j LOG +-A limit-1628 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1629 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-933 +-A limit-1629 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-73 +-A limit-163 -m limit --limit 1/second -j LOG +-A limit-1630 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-934 +-A limit-1630 -j TEE --gateway fc00::2 +-A limit-1630 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1631 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-935 +-A limit-1631 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1632 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-936 +-A limit-1632 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1633 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-937 +-A limit-1633 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-938 +-A limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1635 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-939 +-A limit-1636 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-940 +-A limit-1636 -j ACCEPT +-A limit-1638 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-942 +-A limit-1638 -m limit --limit 1/second -j LOG +-A limit-1638 -j ACCEPT +-A limit-1639 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-943 +-A limit-1639 -m limit --limit 1/second -j LOG +-A limit-164 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-74 +-A limit-164 -j TEE --gateway fc00::2 +-A limit-164 -j ACCEPT +-A limit-1640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-944 +-A limit-1640 -j TEE --gateway fc00::2 +-A limit-1640 -j ACCEPT +-A limit-1641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-945 +-A limit-1641 -j TEE --gateway fc00::2 +-A limit-1642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-946 +-A limit-1642 -j ACCEPT +-A limit-1644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-948 +-A limit-1644 -j ACCEPT +-A limit-1645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-949 +-A limit-1646 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-950 +-A limit-1646 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1647 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-951 +-A limit-1647 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1648 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-952 +-A limit-1648 -m limit --limit 1/second -j LOG +-A limit-1648 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1649 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-953 +-A limit-1649 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-75 +-A limit-165 -j TEE --gateway fc00::2 +-A limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-954 +-A limit-1650 -j TEE --gateway fc00::2 +-A limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-955 +-A limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-956 +-A limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-957 +-A limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-958 +-A limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-959 +-A limit-1656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-960 +-A limit-1656 -j ACCEPT +-A limit-1658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-962 +-A limit-1658 -m limit --limit 1/second -j LOG +-A limit-1658 -j ACCEPT +-A limit-1659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-963 +-A limit-1659 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-76 +-A limit-166 -j ACCEPT +-A limit-1660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-964 +-A limit-1660 -j TEE --gateway fc00::2 +-A limit-1660 -j ACCEPT +-A limit-1661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-965 +-A limit-1661 -j TEE --gateway fc00::2 +-A limit-1662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-966 +-A limit-1662 -j ACCEPT +-A limit-1664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-968 +-A limit-1664 -j ACCEPT +-A limit-1665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-969 +-A limit-1666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-970 +-A limit-1666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-971 -A limit-1667 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-786 --A limit-1668 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-787 +-A limit-1668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-972 +-A limit-1668 -m limit --limit 1/second -j LOG +-A limit-1668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-973 -A limit-1669 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1670 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-788 --A limit-1670 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1671 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-789 --A limit-1671 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1672 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-790 --A limit-1672 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1673 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-791 --A limit-1674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-792 --A limit-1675 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-793 --A limit-1676 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-794 --A limit-1677 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-795 --A limit-1677 -m limit --limit 1/second -j LOG --A limit-1678 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-796 --A limit-1679 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-797 --A limit-168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-167 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-77 +-A limit-1670 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-974 +-A limit-1670 -j TEE --gateway fc00::2 +-A limit-1670 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1671 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-975 +-A limit-1671 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1672 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-976 +-A limit-1672 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1673 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-977 +-A limit-1673 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1674 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-978 +-A limit-1674 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1675 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-979 +-A limit-1676 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-980 +-A limit-1676 -j ACCEPT +-A limit-1678 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-982 +-A limit-1678 -m limit --limit 1/second -j LOG +-A limit-1678 -j ACCEPT +-A limit-1679 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-983 +-A limit-1679 -m limit --limit 1/second -j LOG +-A limit-168 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-78 -A limit-168 -j ACCEPT --A limit-1680 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-798 --A limit-1681 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-799 --A limit-1682 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-800 --A limit-1682 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1683 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-801 --A limit-1683 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1684 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-802 --A limit-1684 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1685 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-803 --A limit-1685 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1686 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-804 --A limit-1686 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1687 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-805 +-A limit-1680 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-984 +-A limit-1680 -j TEE --gateway fc00::2 +-A limit-1680 -j ACCEPT +-A limit-1681 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-985 +-A limit-1681 -j TEE --gateway fc00::2 +-A limit-1682 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-986 +-A limit-1682 -j ACCEPT +-A limit-1684 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-988 +-A limit-1684 -j ACCEPT +-A limit-1685 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-989 +-A limit-1686 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-990 +-A limit-1686 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1687 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-991 -A limit-1687 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1688 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-806 --A limit-1688 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1689 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-807 --A limit-169 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1690 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-808 --A limit-1691 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-809 --A limit-1692 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-810 --A limit-1693 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-811 --A limit-1693 -m limit --limit 1/second -j LOG --A limit-1694 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-812 --A limit-1695 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-813 --A limit-1696 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-814 --A limit-1697 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-815 --A limit-1698 -m recent --name limit-1698 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1698 -m recent --name limit-1698 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1699 -m recent --name limit-1699 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1699 -m recent --name limit-1699 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -j ACCEPT --A limit-1700 -m recent --name limit-1700 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1700 -m recent --name limit-1700 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1701 -m recent --name limit-1701 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1701 -m recent --name limit-1701 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1702 -m recent --name limit-1702 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1702 -m recent --name limit-1702 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1703 -m recent --name limit-1703 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1703 -m recent --name limit-1703 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1704 -m recent --name limit-1704 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1704 -m recent --name limit-1704 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1705 -m recent --name limit-1705 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1706 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1706 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1707 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1707 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1708 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1708 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1709 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1709 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-171 -m limit --limit 1/second -j LOG --A limit-1710 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1710 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1711 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1711 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1712 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1712 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1713 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1714 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1715 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1717 -m limit --limit 1/second -j LOG --A limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-172 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-172 -j ACCEPT --A limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1722 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1722 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1723 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1723 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1724 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1724 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1725 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1725 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1726 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1726 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1727 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1727 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1728 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1728 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1729 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-173 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1730 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1731 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1732 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1733 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1733 -m limit --limit 1/second -j LOG --A limit-1734 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1735 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1738 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1738 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1739 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1739 -m recent --name user:C --rsource --mask fe00:: --set --A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-174 -j ACCEPT --A limit-1740 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1740 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1741 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1741 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1742 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1742 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1743 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1743 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1744 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1744 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1745 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1746 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1747 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1748 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1749 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1688 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-992 +-A limit-1688 -m limit --limit 1/second -j LOG +-A limit-1688 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1689 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-993 +-A limit-1689 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-169 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-79 +-A limit-1690 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-994 +-A limit-1690 -j TEE --gateway fc00::2 +-A limit-1690 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1691 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-995 +-A limit-1691 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1692 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-996 +-A limit-1692 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1693 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-997 +-A limit-1693 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1694 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-998 +-A limit-1694 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1695 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-999 +-A limit-1696 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1000 +-A limit-1696 -j ACCEPT +-A limit-1698 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1002 +-A limit-1698 -m limit --limit 1/second -j LOG +-A limit-1698 -j ACCEPT +-A limit-1699 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1003 +-A limit-1699 -m limit --limit 1/second -j LOG +-A limit-17 -m recent --name limit-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-17 -m recent --name limit-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-80 +-A limit-170 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1700 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1004 +-A limit-1700 -j TEE --gateway fc00::2 +-A limit-1700 -j ACCEPT +-A limit-1701 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1005 +-A limit-1701 -j TEE --gateway fc00::2 +-A limit-1702 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1006 +-A limit-1702 -j ACCEPT +-A limit-1704 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1008 +-A limit-1704 -j ACCEPT +-A limit-1705 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1009 +-A limit-1706 -m recent --name limit-1706 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1706 -m recent --name limit-1706 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1707 -m recent --name limit-1707 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1707 -m recent --name limit-1707 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1708 -m recent --name limit-1708 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1708 -m limit --limit 1/second -j LOG +-A limit-1708 -m recent --name limit-1708 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1709 -m recent --name limit-1709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1709 -m recent --name limit-1709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-81 +-A limit-171 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1710 -m recent --name limit-1710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1710 -j TEE --gateway fc00::2 +-A limit-1710 -m recent --name limit-1710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1711 -m recent --name limit-1711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1711 -m recent --name limit-1711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1712 -m recent --name limit-1712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1712 -m recent --name limit-1712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1713 -m recent --name limit-1713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1713 -m recent --name limit-1713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1714 -m recent --name limit-1714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1714 -m recent --name limit-1714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1715 -m recent --name limit-1715 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1718 -m limit --limit 1/second -j LOG +-A limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-82 +-A limit-172 -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1720 -j TEE --gateway fc00::2 +-A limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1725 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1726 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1726 -j ACCEPT +-A limit-1728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1728 -m limit --limit 1/second -j LOG +-A limit-1728 -j ACCEPT +-A limit-1729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1729 -m limit --limit 1/second -j LOG +-A limit-173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-83 +-A limit-173 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1730 -j TEE --gateway fc00::2 +-A limit-1730 -j ACCEPT +-A limit-1731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1731 -j TEE --gateway fc00::2 +-A limit-1732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1732 -j ACCEPT +-A limit-1734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1734 -j ACCEPT +-A limit-1735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1738 -m limit --limit 1/second -j LOG +-A limit-1738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-84 +-A limit-174 -j TEE --gateway fc00::2 +-A limit-174 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1740 -j TEE --gateway fc00::2 +-A limit-1740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1746 -j ACCEPT +-A limit-1748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1748 -m limit --limit 1/second -j LOG +-A limit-1748 -j ACCEPT +-A limit-1749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1749 -m limit --limit 1/second -j LOG --A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1750 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1751 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1752 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1753 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1754 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1754 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1755 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1755 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1756 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1756 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1757 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1757 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1758 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1758 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1759 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1759 -m recent --name user:C --rdest --mask fe00:: --set --A limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1760 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1760 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1761 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1762 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1763 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1764 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1765 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1765 -m limit --limit 1/second -j LOG --A limit-1766 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1767 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1768 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1769 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1770 -m recent --name limit-1770 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-816 --A limit-1770 -m recent --name limit-1770 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1771 -m recent --name limit-1771 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-817 --A limit-1771 -m recent --name limit-1771 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1772 -m recent --name limit-1772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-818 --A limit-1772 -m recent --name limit-1772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1773 -m recent --name limit-1773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-819 --A limit-1773 -m recent --name limit-1773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1774 -m recent --name limit-1774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-820 --A limit-1774 -m recent --name limit-1774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1775 -m recent --name limit-1775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-821 --A limit-1775 -m recent --name limit-1775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1776 -m recent --name limit-1776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-822 --A limit-1776 -m recent --name limit-1776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1777 -m recent --name limit-1777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-823 --A limit-1778 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-824 --A limit-1778 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1779 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-825 --A limit-1779 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-178 -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1780 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-826 --A limit-1780 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1781 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-827 --A limit-1781 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-828 --A limit-1782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-829 --A limit-1783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-830 --A limit-1784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-831 --A limit-1786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-832 --A limit-1787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-833 --A limit-1788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-834 --A limit-1789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-835 +-A limit-175 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-85 +-A limit-175 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1750 -j TEE --gateway fc00::2 +-A limit-1750 -j ACCEPT +-A limit-1751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1751 -j TEE --gateway fc00::2 +-A limit-1752 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1752 -j ACCEPT +-A limit-1754 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1754 -j ACCEPT +-A limit-1755 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1756 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1757 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1758 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1758 -m limit --limit 1/second -j LOG +-A limit-1758 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1759 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1759 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-86 +-A limit-176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1760 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1760 -j TEE --gateway fc00::2 +-A limit-1760 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1761 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1761 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1762 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1762 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1763 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1763 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1764 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1764 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1765 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1766 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1766 -j ACCEPT +-A limit-1768 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1768 -m limit --limit 1/second -j LOG +-A limit-1768 -j ACCEPT +-A limit-1769 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1769 -m limit --limit 1/second -j LOG +-A limit-177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-87 +-A limit-177 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1770 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1770 -j TEE --gateway fc00::2 +-A limit-1770 -j ACCEPT +-A limit-1771 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1771 -j TEE --gateway fc00::2 +-A limit-1772 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1772 -j ACCEPT +-A limit-1774 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1774 -j ACCEPT +-A limit-1775 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1776 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1776 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1777 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1777 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1778 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1778 -m limit --limit 1/second -j LOG +-A limit-1778 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1779 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1779 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-88 +-A limit-178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1780 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1780 -j TEE --gateway fc00::2 +-A limit-1780 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1781 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1781 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1782 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1782 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1783 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1783 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1784 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1784 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1785 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1786 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1786 -j ACCEPT +-A limit-1788 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1788 -m limit --limit 1/second -j LOG +-A limit-1788 -j ACCEPT +-A limit-1789 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1789 -m limit --limit 1/second -j LOG --A limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-836 --A limit-1791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-837 --A limit-1792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-838 --A limit-1793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-839 --A limit-1794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-840 --A limit-1794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-841 --A limit-1795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-842 --A limit-1796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-843 --A limit-1797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-844 --A limit-1798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-845 --A limit-1799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-18 -m limit --limit 1/second -j LOG --A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-846 --A limit-1800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1801 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-847 --A limit-1802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-848 --A limit-1803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-849 --A limit-1804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-850 --A limit-1805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-851 --A limit-1805 -m limit --limit 1/second -j LOG --A limit-1806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-852 --A limit-1807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-853 --A limit-1808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-854 --A limit-1809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-855 --A limit-181 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-181 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-856 --A limit-1810 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-857 --A limit-1811 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1812 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-858 --A limit-1812 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1813 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-859 --A limit-1813 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1814 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-860 --A limit-1814 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1815 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-861 --A limit-1815 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1816 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-862 --A limit-1816 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1817 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-863 --A limit-1818 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-864 --A limit-1819 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-865 --A limit-182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1820 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-866 --A limit-1821 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-867 --A limit-1821 -m limit --limit 1/second -j LOG --A limit-1822 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-868 --A limit-1823 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-869 --A limit-1824 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-870 --A limit-1825 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-871 --A limit-1826 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-872 --A limit-1826 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1827 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-873 --A limit-1827 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1828 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-874 --A limit-1828 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1829 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-875 --A limit-1829 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1830 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-876 --A limit-1830 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1831 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-877 --A limit-1831 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1832 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-878 --A limit-1832 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1833 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-879 --A limit-1834 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-880 --A limit-1835 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-881 --A limit-1836 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-882 --A limit-1837 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-883 --A limit-1837 -m limit --limit 1/second -j LOG --A limit-1838 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-884 --A limit-1839 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-885 --A limit-184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-89 +-A limit-1790 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1790 -j TEE --gateway fc00::2 +-A limit-1790 -j ACCEPT +-A limit-1791 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1791 -j TEE --gateway fc00::2 +-A limit-1792 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1792 -j ACCEPT +-A limit-1794 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1794 -j ACCEPT +-A limit-1795 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1796 -m recent --name limit-1796 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1010 +-A limit-1796 -m recent --name limit-1796 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1797 -m recent --name limit-1797 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1011 +-A limit-1797 -m recent --name limit-1797 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1798 -m recent --name limit-1798 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1012 +-A limit-1798 -m limit --limit 1/second -j LOG +-A limit-1798 -m recent --name limit-1798 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1799 -m recent --name limit-1799 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1013 +-A limit-1799 -m recent --name limit-1799 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-18 -m recent --name limit-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-18 -m recent --name limit-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-180 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-90 +-A limit-180 -j ACCEPT +-A limit-1800 -m recent --name limit-1800 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1014 +-A limit-1800 -j TEE --gateway fc00::2 +-A limit-1800 -m recent --name limit-1800 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1801 -m recent --name limit-1801 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1015 +-A limit-1801 -m recent --name limit-1801 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1802 -m recent --name limit-1802 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1016 +-A limit-1802 -m recent --name limit-1802 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1803 -m recent --name limit-1803 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1017 +-A limit-1803 -m recent --name limit-1803 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1804 -m recent --name limit-1804 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1018 +-A limit-1804 -m recent --name limit-1804 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1805 -m recent --name limit-1805 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1019 +-A limit-1806 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1020 +-A limit-1806 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1807 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1021 +-A limit-1807 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1808 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1022 +-A limit-1808 -m limit --limit 1/second -j LOG +-A limit-1808 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1809 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1023 +-A limit-1809 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-181 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-91 +-A limit-1810 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1024 +-A limit-1810 -j TEE --gateway fc00::2 +-A limit-1810 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1811 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1025 +-A limit-1811 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1812 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1026 +-A limit-1812 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1813 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1027 +-A limit-1813 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1814 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1028 +-A limit-1814 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1815 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1029 +-A limit-1816 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1030 +-A limit-1816 -j ACCEPT +-A limit-1818 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1032 +-A limit-1818 -m limit --limit 1/second -j LOG +-A limit-1818 -j ACCEPT +-A limit-1819 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1033 +-A limit-1819 -m limit --limit 1/second -j LOG +-A limit-182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-92 +-A limit-182 -m limit --limit 1/second -j LOG +-A limit-182 -j ACCEPT +-A limit-1820 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1034 +-A limit-1820 -j TEE --gateway fc00::2 +-A limit-1820 -j ACCEPT +-A limit-1821 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1035 +-A limit-1821 -j TEE --gateway fc00::2 +-A limit-1822 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1036 +-A limit-1822 -j ACCEPT +-A limit-1824 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1038 +-A limit-1824 -j ACCEPT +-A limit-1825 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1039 +-A limit-1826 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1040 +-A limit-1826 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1827 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1041 +-A limit-1827 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1828 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1042 +-A limit-1828 -m limit --limit 1/second -j LOG +-A limit-1828 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1829 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1043 +-A limit-1829 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-183 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-93 +-A limit-183 -m limit --limit 1/second -j LOG +-A limit-1830 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1044 +-A limit-1830 -j TEE --gateway fc00::2 +-A limit-1830 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1831 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1045 +-A limit-1831 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1832 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1046 +-A limit-1832 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1833 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1047 +-A limit-1833 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1834 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1048 +-A limit-1834 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1835 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1049 +-A limit-1836 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1050 +-A limit-1836 -j ACCEPT +-A limit-1838 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1052 +-A limit-1838 -m limit --limit 1/second -j LOG +-A limit-1838 -j ACCEPT +-A limit-1839 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1053 +-A limit-1839 -m limit --limit 1/second -j LOG +-A limit-184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-94 +-A limit-184 -j TEE --gateway fc00::2 -A limit-184 -j ACCEPT --A limit-1840 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-886 --A limit-1841 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-887 --A limit-1842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1842 -j RETURN --A limit-1842 -m limit --limit 1/second -j LOG --A limit-1842 -j DROP --A limit-1843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1843 -j RETURN --A limit-1843 -m limit --limit 1/second -j LOG --A limit-1843 -j DROP --A limit-1844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1844 -j RETURN --A limit-1844 -m limit --limit 1/second -j LOG --A limit-1844 -j DROP --A limit-1845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1845 -j RETURN --A limit-1845 -m limit --limit 1/second -j LOG --A limit-1845 -j DROP --A limit-1846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1846 -j RETURN --A limit-1846 -m limit --limit 1/second -j LOG --A limit-1846 -j DROP --A limit-1847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1847 -j RETURN --A limit-1847 -j DROP --A limit-1848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1848 -j RETURN --A limit-1848 -j DROP --A limit-1849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1849 -j RETURN --A limit-1849 -j DROP --A limit-185 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1850 -j RETURN --A limit-1850 -j DROP --A limit-1851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1851 -j RETURN --A limit-1851 -j DROP --A limit-1852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1852 -j RETURN --A limit-1852 -m limit --limit 1/second -j LOG --A limit-1852 -j DROP --A limit-1853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1853 -j RETURN --A limit-1853 -m limit --limit 1/second -j LOG --A limit-1853 -j DROP --A limit-1854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1854 -j RETURN --A limit-1854 -m limit --limit 1/second -j LOG --A limit-1854 -j DROP --A limit-1855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1855 -j RETURN --A limit-1855 -m limit --limit 1/second -j LOG --A limit-1855 -j DROP --A limit-1856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1856 -j RETURN --A limit-1856 -m limit --limit 1/second -j LOG --A limit-1856 -j DROP --A limit-1857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1857 -j RETURN --A limit-1857 -j DROP --A limit-1858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1858 -j RETURN --A limit-1858 -j DROP --A limit-1859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1859 -j RETURN --A limit-1859 -j DROP --A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-186 -m limit --limit 1/second -j LOG +-A limit-1840 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1054 +-A limit-1840 -j TEE --gateway fc00::2 +-A limit-1840 -j ACCEPT +-A limit-1841 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1055 +-A limit-1841 -j TEE --gateway fc00::2 +-A limit-1842 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 +-A limit-1842 -j ACCEPT +-A limit-1844 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 +-A limit-1844 -j ACCEPT +-A limit-1845 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 +-A limit-1846 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1060 +-A limit-1846 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1847 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1061 +-A limit-1847 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1848 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1062 +-A limit-1848 -m limit --limit 1/second -j LOG +-A limit-1848 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1849 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1063 +-A limit-1849 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-95 +-A limit-185 -j TEE --gateway fc00::2 +-A limit-1850 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1064 +-A limit-1850 -j TEE --gateway fc00::2 +-A limit-1850 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1851 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1065 +-A limit-1851 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1852 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1066 +-A limit-1852 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1853 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1067 +-A limit-1853 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1854 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1068 +-A limit-1854 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1855 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1069 +-A limit-1856 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1070 +-A limit-1856 -j ACCEPT +-A limit-1858 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 +-A limit-1858 -m limit --limit 1/second -j LOG +-A limit-1858 -j ACCEPT +-A limit-1859 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 +-A limit-1859 -m limit --limit 1/second -j LOG +-A limit-186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-96 -A limit-186 -j ACCEPT --A limit-1860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1860 -j RETURN --A limit-1860 -j DROP --A limit-1861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1861 -j RETURN --A limit-1861 -j DROP --A limit-1862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1862 -j RETURN --A limit-1862 -j DROP --A limit-1863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1863 -j RETURN --A limit-1863 -j DROP --A limit-1864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1864 -j RETURN --A limit-1864 -j DROP --A limit-1865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1865 -j RETURN --A limit-1865 -j DROP --A limit-1866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1866 -j RETURN --A limit-1866 -j DROP --A limit-1867 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1867 -j RETURN --A limit-1867 -j DROP --A limit-1868 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1868 -j RETURN --A limit-1868 -j DROP --A limit-1869 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1869 -j RETURN --A limit-1869 -j DROP --A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-187 -m limit --limit 1/second -j LOG --A limit-1870 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1870 -j RETURN --A limit-1870 -j DROP --A limit-1871 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1871 -j RETURN --A limit-1871 -j DROP --A limit-1872 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1872 -j RETURN --A limit-1872 -m limit --limit 1/second -j LOG --A limit-1872 -j DROP --A limit-1873 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1873 -j RETURN --A limit-1873 -m limit --limit 1/second -j LOG --A limit-1873 -j DROP --A limit-1874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1874 -j RETURN --A limit-1874 -m limit --limit 1/second -j LOG --A limit-1874 -j DROP --A limit-1875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1875 -j RETURN --A limit-1875 -m limit --limit 1/second -j LOG --A limit-1875 -j DROP --A limit-1876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1876 -j RETURN --A limit-1876 -m limit --limit 1/second -j LOG --A limit-1876 -j DROP --A limit-1877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1877 -j RETURN --A limit-1877 -j DROP --A limit-1878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1878 -j RETURN --A limit-1878 -j DROP --A limit-1879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1879 -j RETURN --A limit-1879 -j DROP --A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1860 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 +-A limit-1860 -j TEE --gateway fc00::2 +-A limit-1860 -j ACCEPT +-A limit-1861 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 +-A limit-1861 -j TEE --gateway fc00::2 +-A limit-1862 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 +-A limit-1862 -j ACCEPT +-A limit-1864 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 +-A limit-1864 -j ACCEPT +-A limit-1865 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 +-A limit-1866 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1080 +-A limit-1866 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1867 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1081 +-A limit-1867 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1868 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1082 +-A limit-1868 -m limit --limit 1/second -j LOG +-A limit-1868 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1869 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1083 +-A limit-1869 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-187 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-97 +-A limit-1870 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1084 +-A limit-1870 -j TEE --gateway fc00::2 +-A limit-1870 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1871 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1085 +-A limit-1871 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1086 +-A limit-1872 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1087 +-A limit-1873 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1088 +-A limit-1874 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1089 +-A limit-1876 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 +-A limit-1876 -j ACCEPT +-A limit-1878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 +-A limit-1878 -m limit --limit 1/second -j LOG +-A limit-1878 -j ACCEPT +-A limit-1879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 +-A limit-1879 -m limit --limit 1/second -j LOG +-A limit-188 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-98 -A limit-188 -j ACCEPT --A limit-1880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1880 -j RETURN --A limit-1880 -j DROP --A limit-1881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1881 -j RETURN --A limit-1881 -j DROP --A limit-1882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1882 -j RETURN --A limit-1882 -j DROP --A limit-1883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1883 -j RETURN --A limit-1883 -j DROP --A limit-1884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1884 -j RETURN --A limit-1884 -j DROP --A limit-1885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1885 -j RETURN --A limit-1885 -j DROP --A limit-1886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1886 -j RETURN +-A limit-1880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 +-A limit-1880 -j TEE --gateway fc00::2 +-A limit-1880 -j ACCEPT +-A limit-1881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 +-A limit-1881 -j TEE --gateway fc00::2 +-A limit-1882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1096 +-A limit-1882 -j ACCEPT +-A limit-1884 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1098 +-A limit-1884 -j ACCEPT +-A limit-1885 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1099 +-A limit-1886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1886 -j ACCEPT +-A limit-1886 -m limit --limit 1/second -j LOG -A limit-1886 -j DROP --A limit-1887 -m recent --name limit-1887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-888 --A limit-1887 -m recent --name limit-1887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1888 -m recent --name limit-1888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-889 --A limit-1888 -m recent --name limit-1888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1889 -m recent --name limit-1889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-890 +-A limit-1887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1887 -j RETURN +-A limit-1887 -m limit --limit 1/second -j LOG +-A limit-1887 -j DROP +-A limit-1888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1888 -j logaccept-33 +-A limit-1888 -m limit --limit 1/second -j LOG +-A limit-1888 -j DROP +-A limit-1889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1889 -j logaccept-34 -A limit-1889 -m limit --limit 1/second -j LOG --A limit-1889 -m recent --name limit-1889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1890 -m recent --name limit-1890 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-891 --A limit-1890 -m recent --name limit-1890 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1891 -m recent --name limit-1891 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-892 --A limit-1891 -m recent --name limit-1891 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1892 -m recent --name limit-1892 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-893 --A limit-1892 -m recent --name limit-1892 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1893 -m recent --name limit-1893 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-894 --A limit-1893 -m recent --name limit-1893 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1894 -m recent --name limit-1894 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-895 --A limit-1895 -m recent --name limit-1895 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1895 -m recent --name limit-1895 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1896 -m recent --name limit-1896 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1896 -m recent --name limit-1896 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1897 -m recent --name limit-1897 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1897 -m limit --limit 1/second -j LOG --A limit-1897 -m recent --name limit-1897 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1898 -m recent --name limit-1898 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1898 -m recent --name limit-1898 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1899 -m recent --name limit-1899 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1899 -m recent --name limit-1899 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-190 -j ACCEPT --A limit-1900 -m recent --name limit-1900 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1900 -m recent --name limit-1900 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1901 -m recent --name limit-1901 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1901 -m recent --name limit-1901 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1902 -m recent --name limit-1902 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1903 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1903 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1904 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1904 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1905 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1905 -m limit --limit 1/second -j LOG --A limit-1905 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1906 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1906 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1907 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1907 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1908 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1908 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1909 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1909 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1910 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1911 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1911 -j ACCEPT --A limit-1913 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1913 -m limit --limit 1/second -j LOG --A limit-1913 -j ACCEPT --A limit-1914 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1914 -m limit --limit 1/second -j LOG --A limit-1915 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1915 -j ACCEPT --A limit-1917 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1917 -j ACCEPT --A limit-1918 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1919 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1919 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-192 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-192 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1920 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1920 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1921 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1921 -m limit --limit 1/second -j LOG --A limit-1921 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1922 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1922 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1923 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1923 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1924 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1924 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1925 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1925 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1926 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1927 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1927 -j ACCEPT --A limit-1929 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1889 -j DROP +-A limit-189 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-99 +-A limit-1890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1890 -j ACCEPT +-A limit-1890 -m limit --limit 1/second -j LOG +-A limit-1890 -j DROP +-A limit-1891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1891 -j logaccept-35 +-A limit-1891 -m limit --limit 1/second -j LOG +-A limit-1891 -j DROP +-A limit-1892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1892 -j ACCEPT +-A limit-1892 -j DROP +-A limit-1893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1893 -j RETURN +-A limit-1893 -j DROP +-A limit-1894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1894 -j logaccept-36 +-A limit-1894 -j DROP +-A limit-1895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1895 -j logaccept-37 +-A limit-1895 -j DROP +-A limit-1896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1896 -j ACCEPT +-A limit-1896 -j DROP +-A limit-1897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1897 -j logaccept-38 +-A limit-1897 -j DROP +-A limit-1898 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1898 -j ACCEPT +-A limit-1898 -m limit --limit 1/second -j LOG +-A limit-1898 -j DROP +-A limit-1899 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1899 -j RETURN +-A limit-1899 -m limit --limit 1/second -j LOG +-A limit-1899 -j DROP +-A limit-19 -m recent --name limit-19 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-190 -m recent --name limit-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-100 +-A limit-190 -m recent --name limit-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1900 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1900 -j logaccept-39 +-A limit-1900 -m limit --limit 1/second -j LOG +-A limit-1900 -j DROP +-A limit-1901 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1901 -j logaccept-40 +-A limit-1901 -m limit --limit 1/second -j LOG +-A limit-1901 -j DROP +-A limit-1902 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1902 -j ACCEPT +-A limit-1902 -m limit --limit 1/second -j LOG +-A limit-1902 -j DROP +-A limit-1903 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1903 -j logaccept-41 +-A limit-1903 -m limit --limit 1/second -j LOG +-A limit-1903 -j DROP +-A limit-1904 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1904 -j ACCEPT +-A limit-1904 -j TEE --gateway fc00::2 +-A limit-1904 -j DROP +-A limit-1905 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1905 -j RETURN +-A limit-1905 -j TEE --gateway fc00::2 +-A limit-1905 -j DROP +-A limit-1906 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1906 -j logaccept-42 +-A limit-1906 -j TEE --gateway fc00::2 +-A limit-1906 -j DROP +-A limit-1907 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1907 -j logaccept-43 +-A limit-1907 -j TEE --gateway fc00::2 +-A limit-1907 -j DROP +-A limit-1908 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1908 -j ACCEPT +-A limit-1908 -j TEE --gateway fc00::2 +-A limit-1908 -j DROP +-A limit-1909 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1909 -j logaccept-44 +-A limit-1909 -j TEE --gateway fc00::2 +-A limit-1909 -j DROP +-A limit-191 -m recent --name limit-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-101 +-A limit-191 -m recent --name limit-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1910 -j ACCEPT +-A limit-1910 -j DROP +-A limit-1911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1911 -j RETURN +-A limit-1911 -j DROP +-A limit-1912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1912 -j logaccept-45 +-A limit-1912 -j DROP +-A limit-1913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1913 -j logaccept-46 +-A limit-1913 -j DROP +-A limit-1914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1914 -j ACCEPT +-A limit-1914 -j DROP +-A limit-1915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1915 -j logaccept-47 +-A limit-1915 -j DROP +-A limit-1916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1916 -j ACCEPT +-A limit-1916 -j DROP +-A limit-1917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1917 -j RETURN +-A limit-1917 -j DROP +-A limit-1918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1918 -j logaccept-48 +-A limit-1918 -j DROP +-A limit-1919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1919 -j logaccept-49 +-A limit-1919 -j DROP +-A limit-192 -m recent --name limit-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-102 +-A limit-192 -m limit --limit 1/second -j LOG +-A limit-192 -m recent --name limit-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1920 -j ACCEPT +-A limit-1920 -j DROP +-A limit-1921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1921 -j logaccept-50 +-A limit-1921 -j DROP +-A limit-1922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1922 -j ACCEPT +-A limit-1922 -j DROP +-A limit-1923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1923 -j RETURN +-A limit-1923 -j DROP +-A limit-1924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1924 -j logaccept-51 +-A limit-1924 -j DROP +-A limit-1925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1925 -j logaccept-52 +-A limit-1925 -j DROP +-A limit-1926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1926 -j ACCEPT +-A limit-1926 -j DROP +-A limit-1927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1927 -j logaccept-53 +-A limit-1927 -j DROP +-A limit-1928 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1928 -j ACCEPT +-A limit-1928 -m limit --limit 1/second -j LOG +-A limit-1928 -j DROP +-A limit-1929 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1929 -j RETURN -A limit-1929 -m limit --limit 1/second -j LOG --A limit-1929 -j ACCEPT --A limit-193 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-193 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1930 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1929 -j DROP +-A limit-193 -m recent --name limit-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-103 +-A limit-193 -m recent --name limit-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1930 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1930 -j logaccept-54 -A limit-1930 -m limit --limit 1/second -j LOG --A limit-1931 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1931 -j ACCEPT --A limit-1933 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1933 -j ACCEPT --A limit-1934 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1935 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1935 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1936 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1936 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1937 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1937 -m limit --limit 1/second -j LOG --A limit-1937 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1938 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1938 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1939 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1939 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-194 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-194 -m limit --limit 1/second -j LOG --A limit-194 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1940 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1940 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1941 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1941 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1942 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1943 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1943 -j ACCEPT --A limit-1945 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1945 -m limit --limit 1/second -j LOG --A limit-1945 -j ACCEPT --A limit-1946 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1946 -m limit --limit 1/second -j LOG --A limit-1947 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1947 -j ACCEPT --A limit-1949 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1949 -j ACCEPT --A limit-195 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-195 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1950 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1951 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1951 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1952 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1952 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1953 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1953 -m limit --limit 1/second -j LOG --A limit-1953 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1954 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1954 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1955 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1955 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1956 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1956 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1957 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1957 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1958 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1959 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1959 -j ACCEPT --A limit-196 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-196 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1961 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1961 -m limit --limit 1/second -j LOG --A limit-1961 -j ACCEPT --A limit-1962 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1962 -m limit --limit 1/second -j LOG --A limit-1963 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1963 -j ACCEPT --A limit-1965 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1965 -j ACCEPT --A limit-1966 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-896 --A limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-897 +-A limit-1930 -j DROP +-A limit-1931 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1931 -j logaccept-55 +-A limit-1931 -m limit --limit 1/second -j LOG +-A limit-1931 -j DROP +-A limit-1932 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1932 -j ACCEPT +-A limit-1932 -m limit --limit 1/second -j LOG +-A limit-1932 -j DROP +-A limit-1933 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1933 -j logaccept-56 +-A limit-1933 -m limit --limit 1/second -j LOG +-A limit-1933 -j DROP +-A limit-1934 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1934 -j ACCEPT +-A limit-1934 -j TEE --gateway fc00::2 +-A limit-1934 -j DROP +-A limit-1935 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1935 -j RETURN +-A limit-1935 -j TEE --gateway fc00::2 +-A limit-1935 -j DROP +-A limit-1936 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1936 -j logaccept-57 +-A limit-1936 -j TEE --gateway fc00::2 +-A limit-1936 -j DROP +-A limit-1937 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1937 -j logaccept-58 +-A limit-1937 -j TEE --gateway fc00::2 +-A limit-1937 -j DROP +-A limit-1938 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1938 -j ACCEPT +-A limit-1938 -j TEE --gateway fc00::2 +-A limit-1938 -j DROP +-A limit-1939 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1939 -j logaccept-59 +-A limit-1939 -j TEE --gateway fc00::2 +-A limit-1939 -j DROP +-A limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-104 +-A limit-194 -j TEE --gateway fc00::2 +-A limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1940 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1940 -j ACCEPT +-A limit-1940 -j DROP +-A limit-1941 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1941 -j RETURN +-A limit-1941 -j DROP +-A limit-1942 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1942 -j logaccept-60 +-A limit-1942 -j DROP +-A limit-1943 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1943 -j logaccept-61 +-A limit-1943 -j DROP +-A limit-1944 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1944 -j ACCEPT +-A limit-1944 -j DROP +-A limit-1945 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1945 -j logaccept-62 +-A limit-1945 -j DROP +-A limit-1946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1946 -j ACCEPT +-A limit-1946 -j DROP +-A limit-1947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1947 -j RETURN +-A limit-1947 -j DROP +-A limit-1948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1948 -j logaccept-63 +-A limit-1948 -j DROP +-A limit-1949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1949 -j logaccept-64 +-A limit-1949 -j DROP +-A limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-105 +-A limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1950 -j ACCEPT +-A limit-1950 -j DROP +-A limit-1951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1951 -j logaccept-65 +-A limit-1951 -j DROP +-A limit-1952 -m recent --name limit-1952 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1100 +-A limit-1952 -m recent --name limit-1952 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1953 -m recent --name limit-1953 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1101 +-A limit-1953 -m recent --name limit-1953 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1954 -m recent --name limit-1954 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1102 +-A limit-1954 -m recent --name limit-1954 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1955 -m recent --name limit-1955 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1103 +-A limit-1955 -m recent --name limit-1955 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1956 -m recent --name limit-1956 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1104 +-A limit-1956 -m recent --name limit-1956 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1957 -m recent --name limit-1957 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1105 +-A limit-1957 -m recent --name limit-1957 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1958 -m recent --name limit-1958 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1106 +-A limit-1958 -m recent --name limit-1958 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1959 -m recent --name limit-1959 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1107 +-A limit-1959 -m recent --name limit-1959 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-106 +-A limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1960 -m recent --name limit-1960 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1108 +-A limit-1960 -m recent --name limit-1960 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1961 -m recent --name limit-1961 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1109 +-A limit-1962 -m recent --name limit-1962 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1962 -m recent --name limit-1962 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1963 -m recent --name limit-1963 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1963 -m recent --name limit-1963 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1964 -m recent --name limit-1964 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1964 -m recent --name limit-1964 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1965 -m recent --name limit-1965 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1965 -m recent --name limit-1965 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1966 -m recent --name limit-1966 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1966 -m recent --name limit-1966 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-898 --A limit-1969 -m limit --limit 1/second -j LOG --A limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-197 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-197 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-899 --A limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1971 -m recent --name limit-1971 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-900 --A limit-1971 -m recent --name limit-1971 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1972 -m recent --name limit-1972 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-901 --A limit-1972 -m recent --name limit-1972 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1973 -m recent --name limit-1973 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-902 --A limit-1973 -m recent --name limit-1973 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1974 -m recent --name limit-1974 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-903 --A limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-904 --A limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-905 +-A limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-107 +-A limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1971 -m recent --name limit-1971 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1972 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1972 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1973 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1973 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1974 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1974 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-906 --A limit-1977 -m limit --limit 1/second -j LOG --A limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-907 --A limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-908 --A limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-909 +-A limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-108 +-A limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1981 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-910 --A limit-1981 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1982 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-911 --A limit-1983 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-912 --A limit-1983 -j ACCEPT --A limit-1985 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-914 +-A limit-1981 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1982 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1983 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1984 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1985 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1985 -m limit --limit 1/second -j LOG --A limit-1985 -j ACCEPT --A limit-1986 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-915 --A limit-1986 -m limit --limit 1/second -j LOG --A limit-1987 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-916 --A limit-1987 -j ACCEPT --A limit-1989 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-918 --A limit-1989 -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1990 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-919 --A limit-1991 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-920 --A limit-1991 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-921 +-A limit-1986 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1987 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1987 -j TEE --gateway fc00::2 +-A limit-1988 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1989 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-199 -m recent --name limit-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-109 +-A limit-1990 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1991 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-922 --A limit-1993 -m limit --limit 1/second -j LOG --A limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-923 --A limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-924 --A limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-925 +-A limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-926 --A limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-927 --A limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-928 --A limit-1999 -j ACCEPT +-A limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-200 -j ACCEPT --A limit-2001 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-930 --A limit-2001 -m limit --limit 1/second -j LOG --A limit-2001 -j ACCEPT --A limit-2002 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-931 --A limit-2002 -m limit --limit 1/second -j LOG --A limit-2003 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-932 --A limit-2003 -j ACCEPT --A limit-2005 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-934 --A limit-2005 -j ACCEPT --A limit-2006 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-935 --A limit-2007 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-936 --A limit-2007 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2008 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-937 --A limit-2008 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2009 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-938 --A limit-2009 -m limit --limit 1/second -j LOG --A limit-2009 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2010 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-939 --A limit-2010 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2011 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-940 --A limit-2011 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2012 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-941 +-A limit-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-110 +-A limit-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2000 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2000 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2001 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2002 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2003 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2004 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2005 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2005 -m limit --limit 1/second -j LOG +-A limit-2006 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2007 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2007 -j TEE --gateway fc00::2 +-A limit-2008 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2009 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-111 +-A limit-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2012 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2012 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2013 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-942 --A limit-2013 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2014 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-943 --A limit-2015 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-944 --A limit-2015 -j ACCEPT --A limit-2017 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-946 --A limit-2017 -m limit --limit 1/second -j LOG --A limit-2017 -j ACCEPT --A limit-2018 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-947 --A limit-2018 -m limit --limit 1/second -j LOG --A limit-2019 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-948 --A limit-2019 -j ACCEPT --A limit-202 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2013 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2013 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2014 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2014 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2015 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2015 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2016 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2016 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2017 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2017 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2018 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2018 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2019 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2019 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-112 -A limit-202 -m limit --limit 1/second -j LOG --A limit-202 -j ACCEPT --A limit-2021 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-950 --A limit-2021 -j ACCEPT --A limit-2022 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-951 --A limit-2023 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-952 --A limit-2023 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2024 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-953 --A limit-2024 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2025 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-954 +-A limit-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2020 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2020 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2021 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2022 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2023 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2024 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2025 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2025 -m limit --limit 1/second -j LOG --A limit-2025 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2026 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-955 --A limit-2026 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2027 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-956 --A limit-2027 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2028 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-957 --A limit-2028 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2029 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-958 --A limit-2029 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-203 -m limit --limit 1/second -j LOG --A limit-2030 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-959 --A limit-2031 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-960 --A limit-2031 -j ACCEPT --A limit-2033 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-962 --A limit-2033 -m limit --limit 1/second -j LOG --A limit-2033 -j ACCEPT --A limit-2034 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-963 --A limit-2034 -m limit --limit 1/second -j LOG --A limit-2035 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-964 --A limit-2035 -j ACCEPT --A limit-2037 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-966 --A limit-2037 -j ACCEPT --A limit-2038 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-967 --A limit-2039 -m recent --name limit-2039 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2039 -m recent --name limit-2039 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-204 -j ACCEPT --A limit-2040 -m recent --name limit-2040 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2040 -m recent --name limit-2040 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2041 -m recent --name limit-2041 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2041 -m limit --limit 1/second -j LOG --A limit-2041 -m recent --name limit-2041 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2042 -m recent --name limit-2042 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2042 -m recent --name limit-2042 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2043 -m recent --name limit-2043 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2043 -m recent --name limit-2043 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2044 -m recent --name limit-2044 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2044 -m recent --name limit-2044 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2045 -m recent --name limit-2045 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2045 -m recent --name limit-2045 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2046 -m recent --name limit-2046 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2049 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2049 -m limit --limit 1/second -j LOG --A limit-2049 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2054 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2055 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2055 -j ACCEPT --A limit-2057 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2057 -m limit --limit 1/second -j LOG --A limit-2057 -j ACCEPT --A limit-2058 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2058 -m limit --limit 1/second -j LOG --A limit-2059 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2059 -j ACCEPT --A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-206 -j ACCEPT --A limit-2061 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2061 -j ACCEPT --A limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2065 -m limit --limit 1/second -j LOG --A limit-2065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2069 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2069 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2070 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2071 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2071 -j ACCEPT --A limit-2073 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2073 -m limit --limit 1/second -j LOG --A limit-2073 -j ACCEPT --A limit-2074 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2074 -m limit --limit 1/second -j LOG --A limit-2075 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2075 -j ACCEPT --A limit-2077 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2077 -j ACCEPT --A limit-2078 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2079 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2079 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-208 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-208 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2080 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2080 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2081 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2081 -m limit --limit 1/second -j LOG --A limit-2081 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2082 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2082 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2083 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2083 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2084 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2084 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2085 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2085 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2086 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2087 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2087 -j ACCEPT --A limit-2089 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2089 -m limit --limit 1/second -j LOG --A limit-2089 -j ACCEPT --A limit-209 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-209 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2090 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2090 -m limit --limit 1/second -j LOG --A limit-2091 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2091 -j ACCEPT --A limit-2093 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2093 -j ACCEPT --A limit-2094 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2095 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2095 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2096 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2096 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2097 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2097 -m limit --limit 1/second -j LOG --A limit-2097 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2098 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2098 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2099 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2099 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-2026 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2027 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2027 -j TEE --gateway fc00::2 +-A limit-2028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-113 +-A limit-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2032 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2032 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2033 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2033 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2034 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2035 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2036 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2037 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2038 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2039 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-114 +-A limit-204 -j TEE --gateway fc00::2 +-A limit-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2040 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2040 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2041 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2045 -m limit --limit 1/second -j LOG +-A limit-2046 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2047 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2047 -j TEE --gateway fc00::2 +-A limit-2048 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2049 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2050 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2051 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2052 -m recent --name limit-2052 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1110 +-A limit-2052 -m recent --name limit-2052 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2053 -m recent --name limit-2053 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1111 +-A limit-2053 -m recent --name limit-2053 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2054 -m recent --name limit-2054 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1112 +-A limit-2054 -m recent --name limit-2054 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2055 -m recent --name limit-2055 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1113 +-A limit-2055 -m recent --name limit-2055 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2056 -m recent --name limit-2056 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1114 +-A limit-2056 -m recent --name limit-2056 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2057 -m recent --name limit-2057 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1115 +-A limit-2057 -m recent --name limit-2057 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2058 -m recent --name limit-2058 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1116 +-A limit-2058 -m recent --name limit-2058 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2059 -m recent --name limit-2059 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1117 +-A limit-2059 -m recent --name limit-2059 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2060 -m recent --name limit-2060 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1118 +-A limit-2060 -m recent --name limit-2060 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2061 -m recent --name limit-2061 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1119 +-A limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1120 +-A limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2063 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1121 +-A limit-2063 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2064 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1122 +-A limit-2064 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2065 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1123 +-A limit-2065 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2066 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1124 +-A limit-2066 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2067 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1125 +-A limit-2067 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2068 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1126 +-A limit-2068 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2069 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1127 +-A limit-2069 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2070 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1128 +-A limit-2070 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2071 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1129 +-A limit-2072 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1130 +-A limit-2073 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1131 +-A limit-2074 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1132 +-A limit-2075 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1133 +-A limit-2075 -m limit --limit 1/second -j LOG +-A limit-2076 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1134 +-A limit-2077 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1135 +-A limit-2077 -j TEE --gateway fc00::2 +-A limit-2078 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1136 +-A limit-2079 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1137 +-A limit-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2080 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1138 +-A limit-2081 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1139 +-A limit-2082 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1140 +-A limit-2082 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2083 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1141 +-A limit-2083 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2084 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1142 +-A limit-2084 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2085 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1143 +-A limit-2085 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2086 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1144 +-A limit-2086 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2087 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1145 +-A limit-2087 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2088 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1146 +-A limit-2088 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2089 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1147 +-A limit-2089 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-209 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-2090 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1148 +-A limit-2090 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2091 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1149 +-A limit-2092 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1150 +-A limit-2093 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1151 +-A limit-2094 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1152 +-A limit-2095 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1153 +-A limit-2095 -m limit --limit 1/second -j LOG +-A limit-2096 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1154 +-A limit-2097 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1155 +-A limit-2097 -j TEE --gateway fc00::2 +-A limit-2098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1156 +-A limit-2099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1157 -A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-210 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2100 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2100 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2101 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2101 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2103 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2103 -j ACCEPT --A limit-2105 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2105 -m limit --limit 1/second -j LOG --A limit-2105 -j ACCEPT --A limit-2106 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2106 -m limit --limit 1/second -j LOG --A limit-2107 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2107 -j ACCEPT --A limit-2109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2109 -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-211 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2111 -m recent --name limit-2111 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-968 --A limit-2111 -m recent --name limit-2111 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2112 -m recent --name limit-2112 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-969 --A limit-2112 -m recent --name limit-2112 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2113 -m recent --name limit-2113 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-970 --A limit-2113 -m limit --limit 1/second -j LOG --A limit-2113 -m recent --name limit-2113 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2114 -m recent --name limit-2114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-971 --A limit-2114 -m recent --name limit-2114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2115 -m recent --name limit-2115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-972 --A limit-2115 -m recent --name limit-2115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2116 -m recent --name limit-2116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-973 --A limit-2116 -m recent --name limit-2116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2117 -m recent --name limit-2117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-974 --A limit-2117 -m recent --name limit-2117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2118 -m recent --name limit-2118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-975 --A limit-2119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-976 --A limit-2119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-977 --A limit-2120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-978 --A limit-2121 -m limit --limit 1/second -j LOG --A limit-2121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-979 --A limit-2122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-980 --A limit-2123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-981 --A limit-2124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-982 --A limit-2125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-983 --A limit-2127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-984 --A limit-2127 -j ACCEPT --A limit-2129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-986 --A limit-2129 -m limit --limit 1/second -j LOG --A limit-2129 -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-213 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-987 --A limit-2130 -m limit --limit 1/second -j LOG --A limit-2131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-988 --A limit-2131 -j ACCEPT --A limit-2133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-990 --A limit-2133 -j ACCEPT --A limit-2134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-991 --A limit-2135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-992 --A limit-2135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-993 --A limit-2136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-994 --A limit-2137 -m limit --limit 1/second -j LOG --A limit-2137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-995 --A limit-2138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-996 --A limit-2139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-997 --A limit-2140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-998 --A limit-2141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-999 --A limit-2143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1000 --A limit-2143 -j ACCEPT --A limit-2145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1002 --A limit-2145 -m limit --limit 1/second -j LOG --A limit-2145 -j ACCEPT --A limit-2146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1003 --A limit-2146 -m limit --limit 1/second -j LOG --A limit-2147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1004 --A limit-2147 -j ACCEPT --A limit-2149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1006 --A limit-2149 -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1007 --A limit-2151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1008 --A limit-2151 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1009 --A limit-2152 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1010 --A limit-2153 -m limit --limit 1/second -j LOG --A limit-2153 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1011 --A limit-2154 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1012 --A limit-2155 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1013 --A limit-2156 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1014 --A limit-2157 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1015 --A limit-2159 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1016 --A limit-2159 -j ACCEPT --A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-210 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-210 -j ACCEPT +-A limit-2100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1158 +-A limit-2101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1159 +-A limit-2102 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1160 +-A limit-2102 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2103 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1161 +-A limit-2103 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2104 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1162 +-A limit-2104 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2105 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1163 +-A limit-2105 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2106 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1164 +-A limit-2106 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2107 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1165 +-A limit-2107 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2108 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1166 +-A limit-2108 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2109 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1167 +-A limit-2109 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-211 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-2110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1168 +-A limit-2110 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1169 +-A limit-2112 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1170 +-A limit-2113 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1171 +-A limit-2114 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1172 +-A limit-2115 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1173 +-A limit-2115 -m limit --limit 1/second -j LOG +-A limit-2116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1174 +-A limit-2117 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1175 +-A limit-2117 -j TEE --gateway fc00::2 +-A limit-2118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1176 +-A limit-2119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1177 +-A limit-212 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -j ACCEPT +-A limit-2120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1178 +-A limit-2121 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1179 +-A limit-2122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1180 +-A limit-2122 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1181 +-A limit-2123 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1182 +-A limit-2124 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1183 +-A limit-2125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1184 +-A limit-2126 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1185 +-A limit-2127 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2128 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1186 +-A limit-2128 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2129 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1187 +-A limit-2129 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-213 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-213 -m limit --limit 1/second -j LOG +-A limit-2130 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1188 +-A limit-2130 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2131 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1189 +-A limit-2132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1190 +-A limit-2133 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1191 +-A limit-2134 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1192 +-A limit-2135 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1193 +-A limit-2135 -m limit --limit 1/second -j LOG +-A limit-2136 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1194 +-A limit-2137 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1195 +-A limit-2137 -j TEE --gateway fc00::2 +-A limit-2138 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1196 +-A limit-2139 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1197 +-A limit-214 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-214 -j TEE --gateway fc00::2 +-A limit-214 -j ACCEPT +-A limit-2140 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1198 +-A limit-2141 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1199 +-A limit-2142 -m recent --name limit-2142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1200 +-A limit-2142 -m recent --name limit-2142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2143 -m recent --name limit-2143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1201 +-A limit-2143 -m recent --name limit-2143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2144 -m recent --name limit-2144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1202 +-A limit-2144 -m recent --name limit-2144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2145 -m recent --name limit-2145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1203 +-A limit-2145 -m recent --name limit-2145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2146 -m recent --name limit-2146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1204 +-A limit-2146 -m recent --name limit-2146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2147 -m recent --name limit-2147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1205 +-A limit-2147 -m recent --name limit-2147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2148 -m recent --name limit-2148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1206 +-A limit-2148 -m recent --name limit-2148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2149 -m recent --name limit-2149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1207 +-A limit-2149 -m recent --name limit-2149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-215 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-215 -j TEE --gateway fc00::2 +-A limit-2150 -m recent --name limit-2150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1208 +-A limit-2150 -m recent --name limit-2150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2151 -m recent --name limit-2151 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1209 +-A limit-2152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1210 +-A limit-2152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1211 +-A limit-2153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1212 +-A limit-2154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1213 +-A limit-2155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1214 +-A limit-2156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1215 +-A limit-2157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2158 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1216 +-A limit-2158 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1217 +-A limit-2159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-216 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-126 -A limit-216 -j ACCEPT --A limit-2161 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1018 --A limit-2161 -m limit --limit 1/second -j LOG --A limit-2161 -j ACCEPT --A limit-2162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1019 --A limit-2162 -m limit --limit 1/second -j LOG --A limit-2163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1020 --A limit-2163 -j ACCEPT --A limit-2165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1022 --A limit-2165 -j ACCEPT --A limit-2166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1023 --A limit-2167 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1024 --A limit-2167 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2168 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1025 --A limit-2168 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2169 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1026 --A limit-2169 -m limit --limit 1/second -j LOG --A limit-2169 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1027 --A limit-2170 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1028 --A limit-2171 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1029 --A limit-2172 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1030 --A limit-2173 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1031 --A limit-2175 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1032 --A limit-2175 -j ACCEPT --A limit-2177 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1034 --A limit-2177 -m limit --limit 1/second -j LOG --A limit-2177 -j ACCEPT --A limit-2178 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1035 --A limit-2178 -m limit --limit 1/second -j LOG --A limit-2179 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1036 --A limit-2179 -j ACCEPT --A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-218 -m limit --limit 1/second -j LOG +-A limit-2160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1218 +-A limit-2160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1219 +-A limit-2162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1220 +-A limit-2163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1221 +-A limit-2164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1222 +-A limit-2165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1223 +-A limit-2165 -m limit --limit 1/second -j LOG +-A limit-2166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1224 +-A limit-2167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1225 +-A limit-2167 -j TEE --gateway fc00::2 +-A limit-2168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1226 +-A limit-2169 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1227 +-A limit-217 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-2170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1228 +-A limit-2171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1229 +-A limit-2172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1230 +-A limit-2172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1231 +-A limit-2173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1232 +-A limit-2174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1233 +-A limit-2175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1234 +-A limit-2176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1235 +-A limit-2177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1236 +-A limit-2178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1237 +-A limit-2179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-128 -A limit-218 -j ACCEPT --A limit-2181 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1038 --A limit-2181 -j ACCEPT --A limit-2182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1039 --A limit-2183 -m recent --name limit-2183 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2183 -m recent --name limit-2183 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2184 -m recent --name limit-2184 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2184 -m recent --name limit-2184 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2185 -m recent --name limit-2185 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1238 +-A limit-2180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2181 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1239 +-A limit-2182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1240 +-A limit-2183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1241 +-A limit-2184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1242 +-A limit-2185 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1243 -A limit-2185 -m limit --limit 1/second -j LOG --A limit-2185 -m recent --name limit-2185 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2186 -m recent --name limit-2186 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2186 -m recent --name limit-2186 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2187 -m recent --name limit-2187 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2187 -m recent --name limit-2187 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2188 -m recent --name limit-2188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2188 -m recent --name limit-2188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2189 -m recent --name limit-2189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2189 -m recent --name limit-2189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-219 -m limit --limit 1/second -j LOG --A limit-2190 -m recent --name limit-2190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2191 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2191 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2192 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2192 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2193 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2193 -m limit --limit 1/second -j LOG --A limit-2193 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2199 -j ACCEPT +-A limit-2186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1244 +-A limit-2187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1245 +-A limit-2187 -j TEE --gateway fc00::2 +-A limit-2188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1246 +-A limit-2189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1247 +-A limit-219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-2190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1248 +-A limit-2191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1249 +-A limit-2192 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1250 +-A limit-2192 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2193 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1251 +-A limit-2193 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2194 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1252 +-A limit-2194 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2195 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1253 +-A limit-2195 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2196 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1254 +-A limit-2196 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2197 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1255 +-A limit-2197 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1256 +-A limit-2198 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1257 +-A limit-2199 -m recent --name user:C --rsource --mask fe00:: --set -A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-22 -m limit --limit 1/second -j LOG -A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-220 -j ACCEPT --A limit-2201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2201 -m limit --limit 1/second -j LOG --A limit-2201 -j ACCEPT --A limit-2202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2202 -m limit --limit 1/second -j LOG --A limit-2203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2203 -j ACCEPT --A limit-2205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2205 -j ACCEPT --A limit-2206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2209 -m limit --limit 1/second -j LOG --A limit-2209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2213 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2213 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2215 -j ACCEPT --A limit-2217 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2217 -m limit --limit 1/second -j LOG --A limit-2217 -j ACCEPT --A limit-2218 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2218 -m limit --limit 1/second -j LOG --A limit-2219 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2219 -j ACCEPT --A limit-222 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-222 -j ACCEPT --A limit-2221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2221 -j ACCEPT --A limit-2222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2223 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2224 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2224 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2225 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1258 +-A limit-2200 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1259 +-A limit-2202 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1260 +-A limit-2203 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1261 +-A limit-2204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1262 +-A limit-2205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1263 +-A limit-2205 -m limit --limit 1/second -j LOG +-A limit-2206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1264 +-A limit-2207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1265 +-A limit-2207 -j TEE --gateway fc00::2 +-A limit-2208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1266 +-A limit-2209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1267 +-A limit-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2210 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1268 +-A limit-2211 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1269 +-A limit-2212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1270 +-A limit-2212 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1271 +-A limit-2213 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1272 +-A limit-2214 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1273 +-A limit-2215 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2216 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1274 +-A limit-2216 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2217 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1275 +-A limit-2217 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2218 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1276 +-A limit-2218 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2219 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1277 +-A limit-2219 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-222 -m limit --limit 1/second -j LOG +-A limit-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2220 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1278 +-A limit-2220 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2221 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1279 +-A limit-2222 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1280 +-A limit-2223 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1281 +-A limit-2224 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1282 +-A limit-2225 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1283 -A limit-2225 -m limit --limit 1/second -j LOG --A limit-2225 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2226 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2226 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2227 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2227 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2228 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2228 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2229 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2229 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-223 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2230 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2231 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2231 -j ACCEPT --A limit-2233 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2233 -m limit --limit 1/second -j LOG --A limit-2233 -j ACCEPT --A limit-2234 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2234 -m limit --limit 1/second -j LOG --A limit-2235 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2235 -j ACCEPT --A limit-2237 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2237 -j ACCEPT --A limit-2238 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2239 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2239 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-80 --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2240 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2240 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2241 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2241 -m limit --limit 1/second -j LOG --A limit-2241 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2242 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2242 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2243 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2243 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2244 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2244 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2245 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2245 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2246 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2247 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2247 -j ACCEPT --A limit-2249 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2249 -m limit --limit 1/second -j LOG --A limit-2249 -j ACCEPT --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-81 --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2250 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2250 -m limit --limit 1/second -j LOG --A limit-2251 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2251 -j ACCEPT --A limit-2253 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2253 -j ACCEPT --A limit-2254 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2255 -m recent --name limit-2255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1040 --A limit-2255 -m recent --name limit-2255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2256 -m recent --name limit-2256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1041 --A limit-2256 -m recent --name limit-2256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2257 -m recent --name limit-2257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1042 --A limit-2257 -m limit --limit 1/second -j LOG --A limit-2257 -m recent --name limit-2257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2258 -m recent --name limit-2258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1043 --A limit-2258 -m recent --name limit-2258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2259 -m recent --name limit-2259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1044 --A limit-2259 -m recent --name limit-2259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-82 --A limit-226 -m limit --limit 1/second -j LOG --A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2260 -m recent --name limit-2260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1045 --A limit-2260 -m recent --name limit-2260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2261 -m recent --name limit-2261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1046 --A limit-2261 -m recent --name limit-2261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2262 -m recent --name limit-2262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1047 --A limit-2263 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1048 --A limit-2263 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2264 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1049 --A limit-2264 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2265 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1050 --A limit-2265 -m limit --limit 1/second -j LOG --A limit-2265 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1051 --A limit-2266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1052 --A limit-2267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1053 --A limit-2268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1054 --A limit-2269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-83 --A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1055 --A limit-2271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 --A limit-2271 -j ACCEPT --A limit-2273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 --A limit-2273 -m limit --limit 1/second -j LOG --A limit-2273 -j ACCEPT --A limit-2274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 --A limit-2274 -m limit --limit 1/second -j LOG --A limit-2275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1060 --A limit-2275 -j ACCEPT --A limit-2277 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1062 --A limit-2277 -j ACCEPT --A limit-2278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1063 --A limit-2279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1064 --A limit-2279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-228 -m recent --name limit-228 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-84 --A limit-228 -m recent --name limit-228 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2280 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1065 --A limit-2280 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2281 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1066 --A limit-2281 -m limit --limit 1/second -j LOG --A limit-2281 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2282 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1067 --A limit-2282 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2283 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1068 --A limit-2283 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2284 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1069 --A limit-2284 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2285 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1070 --A limit-2285 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1071 --A limit-2287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 --A limit-2287 -j ACCEPT --A limit-2289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 --A limit-2289 -m limit --limit 1/second -j LOG --A limit-2289 -j ACCEPT --A limit-229 -m recent --name limit-229 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-85 --A limit-229 -m recent --name limit-229 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 --A limit-2290 -m limit --limit 1/second -j LOG --A limit-2291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 --A limit-2291 -j ACCEPT --A limit-2293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 --A limit-2293 -j ACCEPT --A limit-2294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 --A limit-2295 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1080 --A limit-2295 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2296 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1081 --A limit-2296 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2297 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1082 --A limit-2297 -m limit --limit 1/second -j LOG --A limit-2297 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2298 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1083 --A limit-2298 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2299 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1084 --A limit-2299 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2226 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1284 +-A limit-2227 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1285 +-A limit-2227 -j TEE --gateway fc00::2 +-A limit-2228 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1286 +-A limit-2229 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1287 +-A limit-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2230 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1288 +-A limit-2231 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1289 +-A limit-2232 -m recent --name limit-2232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2232 -m recent --name limit-2232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2233 -m recent --name limit-2233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2233 -m recent --name limit-2233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2234 -m recent --name limit-2234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2234 -m recent --name limit-2234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2235 -m recent --name limit-2235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2235 -m recent --name limit-2235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2236 -m recent --name limit-2236 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2236 -m recent --name limit-2236 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2237 -m recent --name limit-2237 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2237 -m recent --name limit-2237 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2238 -m recent --name limit-2238 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2238 -m recent --name limit-2238 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2239 -m recent --name limit-2239 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2239 -m recent --name limit-2239 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-224 -j TEE --gateway fc00::2 +-A limit-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2240 -m recent --name limit-2240 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2240 -m recent --name limit-2240 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2241 -m recent --name limit-2241 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2255 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2255 -m limit --limit 1/second -j LOG +-A limit-2256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2257 -j TEE --gateway fc00::2 +-A limit-2258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2267 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2267 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2274 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2275 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2275 -m limit --limit 1/second -j LOG +-A limit-2276 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2277 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2277 -j TEE --gateway fc00::2 +-A limit-2278 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2280 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2281 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2282 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2282 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2283 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2283 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2284 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2284 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2285 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2285 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2286 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2286 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2287 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2287 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2288 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2288 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2289 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2289 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-229 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-2290 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2290 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2291 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2292 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2293 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2294 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2295 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2295 -m limit --limit 1/second -j LOG +-A limit-2296 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2297 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2297 -j TEE --gateway fc00::2 +-A limit-2298 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2299 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-230 -m recent --name limit-230 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-86 --A limit-230 -m recent --name limit-230 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2300 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1085 --A limit-2300 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2301 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1086 --A limit-2301 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2302 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1087 --A limit-2303 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1088 --A limit-2303 -j ACCEPT --A limit-2305 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 --A limit-2305 -m limit --limit 1/second -j LOG --A limit-2305 -j ACCEPT --A limit-2306 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 --A limit-2306 -m limit --limit 1/second -j LOG --A limit-2307 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 --A limit-2307 -j ACCEPT --A limit-2309 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 --A limit-2309 -j ACCEPT --A limit-231 -m recent --name limit-231 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-87 --A limit-2310 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 --A limit-2311 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1096 --A limit-2311 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2312 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1097 --A limit-2312 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2313 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1098 --A limit-2313 -m limit --limit 1/second -j LOG --A limit-2313 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2314 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1099 --A limit-2314 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2315 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1100 --A limit-2315 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2316 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1101 --A limit-2316 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2317 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1102 --A limit-2317 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1103 --A limit-2319 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1104 --A limit-2319 -j ACCEPT --A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-88 --A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2321 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1106 --A limit-2321 -m limit --limit 1/second -j LOG --A limit-2321 -j ACCEPT --A limit-2322 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1107 --A limit-2322 -m limit --limit 1/second -j LOG --A limit-2323 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1108 --A limit-2323 -j ACCEPT --A limit-2325 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1110 --A limit-2325 -j ACCEPT --A limit-2326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1111 --A limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-230 -j ACCEPT +-A limit-2300 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2301 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2302 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2302 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2303 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2303 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2304 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2304 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2305 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2305 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2306 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2306 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2307 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2307 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2308 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2308 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2309 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2309 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-231 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-2310 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2310 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2311 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2312 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2313 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2314 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2315 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2315 -m limit --limit 1/second -j LOG +-A limit-2316 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2317 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2317 -j TEE --gateway fc00::2 +-A limit-2318 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2319 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-232 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-232 -m limit --limit 1/second -j LOG +-A limit-232 -j ACCEPT +-A limit-2320 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2321 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2322 -m recent --name limit-2322 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1290 +-A limit-2322 -m recent --name limit-2322 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2323 -m recent --name limit-2323 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1291 +-A limit-2323 -m recent --name limit-2323 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2324 -m recent --name limit-2324 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1292 +-A limit-2324 -m recent --name limit-2324 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2325 -m recent --name limit-2325 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1293 +-A limit-2325 -m recent --name limit-2325 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2326 -m recent --name limit-2326 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1294 +-A limit-2326 -m recent --name limit-2326 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1295 +-A limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1296 -A limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2329 -m limit --limit 1/second -j LOG --A limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-89 --A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2331 -m recent --name limit-2331 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2331 -m recent --name limit-2331 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2332 -m recent --name limit-2332 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2332 -m recent --name limit-2332 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2333 -m recent --name limit-2333 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2333 -m recent --name limit-2333 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2334 -m recent --name limit-2334 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1297 +-A limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-233 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-233 -m limit --limit 1/second -j LOG +-A limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1298 +-A limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2331 -m recent --name limit-2331 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1299 +-A limit-2332 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1300 +-A limit-2332 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2333 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1301 +-A limit-2333 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2334 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1302 +-A limit-2334 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1303 +-A limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1304 -A limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2337 -m limit --limit 1/second -j LOG --A limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-90 --A limit-234 -m limit --limit 1/second -j LOG --A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1305 +-A limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1306 +-A limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1307 +-A limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-234 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-234 -j TEE --gateway fc00::2 +-A limit-234 -j ACCEPT +-A limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1308 -A limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2341 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2341 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2342 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2343 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2343 -j ACCEPT --A limit-2345 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2341 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1309 +-A limit-2342 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1310 +-A limit-2343 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1311 +-A limit-2344 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1312 +-A limit-2345 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1313 -A limit-2345 -m limit --limit 1/second -j LOG --A limit-2345 -j ACCEPT --A limit-2346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2346 -m limit --limit 1/second -j LOG --A limit-2347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2347 -j ACCEPT --A limit-2349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2349 -j ACCEPT --A limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-91 --A limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2351 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2351 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1314 +-A limit-2347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1315 +-A limit-2347 -j TEE --gateway fc00::2 +-A limit-2348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1316 +-A limit-2349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1317 +-A limit-235 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-235 -j TEE --gateway fc00::2 +-A limit-2350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1318 +-A limit-2351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1319 +-A limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1320 -A limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2353 -m limit --limit 1/second -j LOG --A limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1321 +-A limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1322 +-A limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1323 +-A limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1324 -A limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2359 -j ACCEPT --A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-92 --A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2361 -m limit --limit 1/second -j LOG --A limit-2361 -j ACCEPT --A limit-2362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2362 -m limit --limit 1/second -j LOG --A limit-2363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2363 -j ACCEPT --A limit-2365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2365 -j ACCEPT --A limit-2366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2367 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2367 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2368 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2368 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2369 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2369 -m limit --limit 1/second -j LOG --A limit-2369 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-93 --A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2370 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2370 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2371 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2371 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2372 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1325 +-A limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1326 +-A limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1327 +-A limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-236 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-236 -j ACCEPT +-A limit-2360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1328 +-A limit-2360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1329 +-A limit-2362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1330 +-A limit-2363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1331 +-A limit-2364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1332 +-A limit-2365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1333 +-A limit-2365 -m limit --limit 1/second -j LOG +-A limit-2366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1334 +-A limit-2367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1335 +-A limit-2367 -j TEE --gateway fc00::2 +-A limit-2368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1336 +-A limit-2369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1337 +-A limit-237 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-2370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1338 +-A limit-2371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1339 +-A limit-2372 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1340 -A limit-2372 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2373 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2373 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2374 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2375 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2375 -j ACCEPT --A limit-2377 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2377 -m limit --limit 1/second -j LOG --A limit-2377 -j ACCEPT --A limit-2378 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2378 -m limit --limit 1/second -j LOG --A limit-2379 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2379 -j ACCEPT --A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-94 --A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2381 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2381 -j ACCEPT --A limit-2382 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2383 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2383 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2384 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2384 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2385 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2373 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1341 +-A limit-2373 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2374 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1342 +-A limit-2374 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2375 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1343 +-A limit-2375 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2376 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1344 +-A limit-2376 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2377 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1345 +-A limit-2377 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2378 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1346 +-A limit-2378 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2379 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1347 +-A limit-2379 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-238 -j ACCEPT +-A limit-2380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1348 +-A limit-2380 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1349 +-A limit-2382 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1350 +-A limit-2383 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1351 +-A limit-2384 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1352 +-A limit-2385 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1353 -A limit-2385 -m limit --limit 1/second -j LOG --A limit-2385 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2386 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2386 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2387 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2387 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2388 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2388 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2389 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2389 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-95 --A limit-2390 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2391 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2391 -j ACCEPT --A limit-2393 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2393 -m limit --limit 1/second -j LOG --A limit-2393 -j ACCEPT --A limit-2394 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2394 -m limit --limit 1/second -j LOG --A limit-2395 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2395 -j ACCEPT --A limit-2397 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2397 -j ACCEPT --A limit-2398 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2399 -m recent --name limit-2399 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1112 --A limit-2399 -m recent --name limit-2399 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-24 -j ACCEPT --A limit-240 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-96 --A limit-240 -j ACCEPT --A limit-2400 -m recent --name limit-2400 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1113 --A limit-2400 -m recent --name limit-2400 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2401 -m recent --name limit-2401 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1114 --A limit-2401 -m limit --limit 1/second -j LOG --A limit-2401 -m recent --name limit-2401 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2402 -m recent --name limit-2402 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1115 --A limit-2402 -m recent --name limit-2402 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2403 -m recent --name limit-2403 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1116 --A limit-2403 -m recent --name limit-2403 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2404 -m recent --name limit-2404 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1117 --A limit-2404 -m recent --name limit-2404 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2405 -m recent --name limit-2405 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1118 --A limit-2405 -m recent --name limit-2405 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2406 -m recent --name limit-2406 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1119 --A limit-2407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1120 --A limit-2407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1121 --A limit-2408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2409 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1122 --A limit-2409 -m limit --limit 1/second -j LOG --A limit-2409 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-241 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-97 --A limit-2410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1123 --A limit-2410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1124 --A limit-2411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1125 --A limit-2412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1126 --A limit-2413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2414 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1127 --A limit-2415 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1128 --A limit-2415 -j ACCEPT --A limit-2417 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1130 --A limit-2417 -m limit --limit 1/second -j LOG --A limit-2417 -j ACCEPT --A limit-2418 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1131 --A limit-2418 -m limit --limit 1/second -j LOG --A limit-2419 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1132 --A limit-2419 -j ACCEPT --A limit-242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-98 +-A limit-2386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1354 +-A limit-2387 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1355 +-A limit-2387 -j TEE --gateway fc00::2 +-A limit-2388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1356 +-A limit-2389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1357 +-A limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-2390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1358 +-A limit-2391 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1359 +-A limit-2392 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1360 +-A limit-2392 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2393 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1361 +-A limit-2393 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1362 +-A limit-2394 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1363 +-A limit-2395 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1364 +-A limit-2396 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1365 +-A limit-2397 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2398 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1366 +-A limit-2398 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2399 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1367 +-A limit-2399 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-24 -j TEE --gateway fc00::2 +-A limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-240 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-240 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2400 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1368 +-A limit-2400 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2401 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1369 +-A limit-2402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1370 +-A limit-2403 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1371 +-A limit-2404 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1372 +-A limit-2405 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1373 +-A limit-2405 -m limit --limit 1/second -j LOG +-A limit-2406 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1374 +-A limit-2407 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1375 +-A limit-2407 -j TEE --gateway fc00::2 +-A limit-2408 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1376 +-A limit-2409 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1377 +-A limit-241 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-241 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2410 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1378 +-A limit-2411 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1379 +-A limit-2412 -m recent --name limit-2412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2412 -m recent --name limit-2412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2413 -m recent --name limit-2413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2413 -m recent --name limit-2413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2414 -m recent --name limit-2414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2414 -m recent --name limit-2414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2415 -m recent --name limit-2415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2415 -m recent --name limit-2415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2416 -m recent --name limit-2416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2416 -m recent --name limit-2416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2417 -m recent --name limit-2417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2417 -m recent --name limit-2417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2418 -m recent --name limit-2418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2418 -m recent --name limit-2418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2419 -m recent --name limit-2419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2419 -m recent --name limit-2419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-242 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 -A limit-242 -m limit --limit 1/second -j LOG --A limit-242 -j ACCEPT --A limit-2421 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1134 --A limit-2421 -j ACCEPT --A limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1135 --A limit-2423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1136 --A limit-2423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1137 --A limit-2424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1138 --A limit-2425 -m limit --limit 1/second -j LOG --A limit-2425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1139 --A limit-2426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1140 --A limit-2427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1141 --A limit-2428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2429 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1142 --A limit-2429 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-99 --A limit-243 -m limit --limit 1/second -j LOG --A limit-2430 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1143 --A limit-2431 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1144 --A limit-2431 -j ACCEPT --A limit-2433 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1146 --A limit-2433 -m limit --limit 1/second -j LOG --A limit-2433 -j ACCEPT --A limit-2434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1147 --A limit-2434 -m limit --limit 1/second -j LOG --A limit-2435 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1148 --A limit-2435 -j ACCEPT --A limit-2437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1150 --A limit-2437 -j ACCEPT --A limit-2438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1151 --A limit-2439 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1152 --A limit-2439 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-100 --A limit-244 -j ACCEPT --A limit-2440 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1153 --A limit-2440 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2441 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1154 --A limit-2441 -m limit --limit 1/second -j LOG --A limit-2441 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2442 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1155 --A limit-2442 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2443 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1156 --A limit-2443 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2444 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1157 --A limit-2444 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2445 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1158 --A limit-2445 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2446 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1159 --A limit-2447 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1160 --A limit-2447 -j ACCEPT --A limit-2449 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1162 --A limit-2449 -m limit --limit 1/second -j LOG --A limit-2449 -j ACCEPT --A limit-245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-101 --A limit-2450 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1163 --A limit-2450 -m limit --limit 1/second -j LOG --A limit-2451 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1164 --A limit-2451 -j ACCEPT --A limit-2453 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1166 --A limit-2453 -j ACCEPT --A limit-2454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1167 --A limit-2455 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1168 --A limit-2455 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2456 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1169 --A limit-2456 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2457 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1170 --A limit-2457 -m limit --limit 1/second -j LOG --A limit-2457 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2458 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1171 --A limit-2458 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2459 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1172 --A limit-2459 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-102 --A limit-246 -j ACCEPT --A limit-2460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1173 --A limit-2460 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1174 --A limit-2461 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1175 --A limit-2463 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1176 --A limit-2463 -j ACCEPT --A limit-2465 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1178 --A limit-2465 -m limit --limit 1/second -j LOG --A limit-2465 -j ACCEPT --A limit-2466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1179 --A limit-2466 -m limit --limit 1/second -j LOG --A limit-2467 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1180 --A limit-2467 -j ACCEPT --A limit-2469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1182 --A limit-2469 -j ACCEPT --A limit-247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-103 --A limit-2470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1183 --A limit-2471 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2471 -j ACCEPT --A limit-2471 -m limit --limit 1/second -j LOG --A limit-2471 -j DROP --A limit-2472 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2472 -j RETURN --A limit-2472 -m limit --limit 1/second -j LOG --A limit-2472 -j DROP --A limit-2473 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2473 -j logaccept-36 --A limit-2473 -m limit --limit 1/second -j LOG --A limit-2473 -j DROP --A limit-2474 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2474 -j ACCEPT --A limit-2474 -m limit --limit 1/second -j LOG --A limit-2474 -j DROP --A limit-2475 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2475 -j logaccept-37 +-A limit-242 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2420 -m recent --name limit-2420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2420 -m recent --name limit-2420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2421 -m recent --name limit-2421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-243 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-243 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2435 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2435 -m limit --limit 1/second -j LOG +-A limit-2436 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2437 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2437 -j TEE --gateway fc00::2 +-A limit-2438 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2439 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-244 -j TEE --gateway fc00::2 +-A limit-244 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2440 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2441 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-245 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-245 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2450 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2450 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2451 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2452 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2453 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2454 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2455 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2455 -m limit --limit 1/second -j LOG +-A limit-2456 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2457 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2457 -j TEE --gateway fc00::2 +-A limit-2458 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2459 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-246 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2460 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2461 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2462 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2462 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2463 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2463 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2464 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2464 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2465 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2465 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2466 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2466 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2467 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2467 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2468 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2468 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2469 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2469 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-247 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-247 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2470 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2470 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2471 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2472 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2473 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2474 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2475 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2475 -m limit --limit 1/second -j LOG --A limit-2475 -j DROP --A limit-2476 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2476 -j ACCEPT --A limit-2476 -j DROP --A limit-2477 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2477 -j RETURN --A limit-2477 -j DROP --A limit-2478 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2478 -j logaccept-38 --A limit-2478 -j DROP --A limit-2479 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2479 -j ACCEPT --A limit-2479 -j DROP --A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-104 --A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2480 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2480 -j logaccept-39 --A limit-2480 -j DROP --A limit-2481 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2481 -j ACCEPT --A limit-2481 -m limit --limit 1/second -j LOG --A limit-2481 -j DROP --A limit-2482 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2482 -j RETURN --A limit-2482 -m limit --limit 1/second -j LOG --A limit-2482 -j DROP --A limit-2483 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2483 -j logaccept-40 --A limit-2483 -m limit --limit 1/second -j LOG --A limit-2483 -j DROP --A limit-2484 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2484 -j ACCEPT --A limit-2484 -m limit --limit 1/second -j LOG --A limit-2484 -j DROP --A limit-2485 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2485 -j logaccept-41 --A limit-2485 -m limit --limit 1/second -j LOG --A limit-2485 -j DROP --A limit-2486 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2486 -j ACCEPT --A limit-2486 -j DROP --A limit-2487 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2487 -j RETURN --A limit-2487 -j DROP --A limit-2488 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2488 -j logaccept-42 --A limit-2488 -j DROP --A limit-2489 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2489 -j ACCEPT --A limit-2489 -j DROP --A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-105 --A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2490 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2490 -j logaccept-43 --A limit-2490 -j DROP --A limit-2491 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2491 -j ACCEPT --A limit-2491 -j DROP --A limit-2492 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2492 -j RETURN --A limit-2492 -j DROP --A limit-2493 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2493 -j logaccept-44 --A limit-2493 -j DROP --A limit-2494 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2494 -j ACCEPT --A limit-2494 -j DROP --A limit-2495 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2495 -j logaccept-45 --A limit-2495 -j DROP --A limit-2496 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2496 -j ACCEPT --A limit-2496 -j DROP --A limit-2497 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2497 -j RETURN --A limit-2497 -j DROP --A limit-2498 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2498 -j logaccept-46 --A limit-2498 -j DROP --A limit-2499 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2499 -j ACCEPT --A limit-2499 -j DROP --A limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-106 --A limit-250 -m limit --limit 1/second -j LOG --A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2500 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2500 -j logaccept-47 --A limit-2500 -j DROP --A limit-2501 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2501 -j ACCEPT --A limit-2501 -m limit --limit 1/second -j LOG --A limit-2501 -j DROP --A limit-2502 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2502 -j RETURN --A limit-2502 -m limit --limit 1/second -j LOG --A limit-2502 -j DROP --A limit-2503 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2503 -j logaccept-48 --A limit-2503 -m limit --limit 1/second -j LOG --A limit-2503 -j DROP --A limit-2504 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2504 -j ACCEPT --A limit-2504 -m limit --limit 1/second -j LOG --A limit-2504 -j DROP --A limit-2505 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2505 -j logaccept-49 --A limit-2505 -m limit --limit 1/second -j LOG --A limit-2505 -j DROP --A limit-2506 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2506 -j ACCEPT --A limit-2506 -j DROP --A limit-2507 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2507 -j RETURN --A limit-2507 -j DROP --A limit-2508 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2508 -j logaccept-50 --A limit-2508 -j DROP --A limit-2509 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2509 -j ACCEPT --A limit-2509 -j DROP --A limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-107 --A limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2510 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2510 -j logaccept-51 --A limit-2510 -j DROP --A limit-2511 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2511 -j ACCEPT --A limit-2511 -j DROP --A limit-2512 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2512 -j RETURN --A limit-2512 -j DROP --A limit-2513 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2513 -j logaccept-52 --A limit-2513 -j DROP --A limit-2514 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2514 -j ACCEPT --A limit-2514 -j DROP --A limit-2515 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2515 -j logaccept-53 --A limit-2515 -j DROP --A limit-252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-108 --A limit-252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-109 --A limit-253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-110 --A limit-254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-255 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-111 --A limit-256 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-112 +-A limit-2476 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2477 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2477 -j TEE --gateway fc00::2 +-A limit-2478 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2479 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-248 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2480 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2481 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2482 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2482 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2483 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2483 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2484 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2484 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2485 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2485 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2486 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2486 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2487 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2487 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2488 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2488 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2489 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2489 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-249 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-2490 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2490 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2491 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2492 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2493 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2494 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2495 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2495 -m limit --limit 1/second -j LOG +-A limit-2496 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2497 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2497 -j TEE --gateway fc00::2 +-A limit-2498 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2499 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-250 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-250 -j ACCEPT +-A limit-2500 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2501 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2502 -m recent --name limit-2502 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1380 +-A limit-2502 -m recent --name limit-2502 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2503 -m recent --name limit-2503 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1381 +-A limit-2503 -m recent --name limit-2503 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2504 -m recent --name limit-2504 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1382 +-A limit-2504 -m recent --name limit-2504 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2505 -m recent --name limit-2505 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1383 +-A limit-2505 -m recent --name limit-2505 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2506 -m recent --name limit-2506 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1384 +-A limit-2506 -m recent --name limit-2506 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2507 -m recent --name limit-2507 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1385 +-A limit-2507 -m recent --name limit-2507 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2508 -m recent --name limit-2508 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1386 +-A limit-2508 -m recent --name limit-2508 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2509 -m recent --name limit-2509 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1387 +-A limit-2509 -m recent --name limit-2509 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-251 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-2510 -m recent --name limit-2510 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1388 +-A limit-2510 -m recent --name limit-2510 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2511 -m recent --name limit-2511 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1389 +-A limit-2512 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1390 +-A limit-2512 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2513 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1391 +-A limit-2513 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2514 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1392 +-A limit-2514 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2515 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1393 +-A limit-2515 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2516 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1394 +-A limit-2516 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2517 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1395 +-A limit-2517 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2518 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1396 +-A limit-2518 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2519 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1397 +-A limit-2519 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-252 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-252 -m limit --limit 1/second -j LOG +-A limit-252 -j ACCEPT +-A limit-2520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1398 +-A limit-2520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2521 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1399 +-A limit-2522 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1400 +-A limit-2523 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1401 +-A limit-2524 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1402 +-A limit-2525 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1403 +-A limit-2525 -m limit --limit 1/second -j LOG +-A limit-2526 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1404 +-A limit-2527 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1405 +-A limit-2527 -j TEE --gateway fc00::2 +-A limit-2528 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1406 +-A limit-2529 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1407 +-A limit-253 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-253 -m limit --limit 1/second -j LOG +-A limit-2530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1408 +-A limit-2531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1409 +-A limit-2532 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1410 +-A limit-2532 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2533 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1411 +-A limit-2533 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2534 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1412 +-A limit-2534 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2535 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1413 +-A limit-2535 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1414 +-A limit-2536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1415 +-A limit-2537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1416 +-A limit-2538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1417 +-A limit-2539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-254 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-254 -j TEE --gateway fc00::2 +-A limit-254 -j ACCEPT +-A limit-2540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1418 +-A limit-2540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2541 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1419 +-A limit-2542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1420 +-A limit-2543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1421 +-A limit-2544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1422 +-A limit-2545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1423 +-A limit-2545 -m limit --limit 1/second -j LOG +-A limit-2546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1424 +-A limit-2547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1425 +-A limit-2547 -j TEE --gateway fc00::2 +-A limit-2548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1426 +-A limit-2549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1427 +-A limit-255 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-255 -j TEE --gateway fc00::2 +-A limit-2550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1428 +-A limit-2551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1429 +-A limit-2552 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1430 +-A limit-2552 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2553 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1431 +-A limit-2553 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2554 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1432 +-A limit-2554 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2555 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1433 +-A limit-2555 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1434 +-A limit-2556 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1435 +-A limit-2557 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1436 +-A limit-2558 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1437 +-A limit-2559 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-256 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-166 -A limit-256 -j ACCEPT --A limit-257 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-113 --A limit-258 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-114 --A limit-258 -m limit --limit 1/second -j LOG +-A limit-2560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1438 +-A limit-2560 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1439 +-A limit-2562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1440 +-A limit-2563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1441 +-A limit-2564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1442 +-A limit-2565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1443 +-A limit-2565 -m limit --limit 1/second -j LOG +-A limit-2566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1444 +-A limit-2567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1445 +-A limit-2567 -j TEE --gateway fc00::2 +-A limit-2568 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1446 +-A limit-2569 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1447 +-A limit-257 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-2570 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1448 +-A limit-2571 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1449 +-A limit-2572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1450 +-A limit-2572 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1451 +-A limit-2573 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2574 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1452 +-A limit-2574 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2575 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1453 +-A limit-2575 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2576 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1454 +-A limit-2576 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2577 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1455 +-A limit-2577 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2578 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1456 +-A limit-2578 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2579 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1457 +-A limit-2579 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-168 -A limit-258 -j ACCEPT --A limit-259 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-115 --A limit-259 -m limit --limit 1/second -j LOG --A limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-26 -m limit --limit 1/second -j LOG --A limit-26 -j ACCEPT --A limit-260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-116 --A limit-260 -j ACCEPT --A limit-261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-117 --A limit-262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-118 --A limit-262 -j ACCEPT --A limit-263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-119 --A limit-264 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-120 --A limit-264 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-265 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-121 --A limit-265 -m recent --name user:C --rsource --mask fe00:: --set --A limit-266 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-122 --A limit-266 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-267 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-123 --A limit-267 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-268 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-124 --A limit-268 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-269 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-125 --A limit-269 -m recent --name user:C --rsource --mask fe00:: --set --A limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-27 -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-126 --A limit-270 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-271 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-127 --A limit-272 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-2580 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1458 +-A limit-2580 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2581 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1459 +-A limit-2582 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1460 +-A limit-2583 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1461 +-A limit-2584 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1462 +-A limit-2585 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1463 +-A limit-2585 -m limit --limit 1/second -j LOG +-A limit-2586 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1464 +-A limit-2587 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1465 +-A limit-2587 -j TEE --gateway fc00::2 +-A limit-2588 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1466 +-A limit-2589 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1467 +-A limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-2590 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1468 +-A limit-2591 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1469 +-A limit-2592 -m recent --name limit-2592 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1470 +-A limit-2592 -m recent --name limit-2592 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2593 -m recent --name limit-2593 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1471 +-A limit-2593 -m recent --name limit-2593 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2594 -m recent --name limit-2594 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1472 +-A limit-2594 -m recent --name limit-2594 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2595 -m recent --name limit-2595 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1473 +-A limit-2595 -m recent --name limit-2595 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2596 -m recent --name limit-2596 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1474 +-A limit-2596 -m recent --name limit-2596 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2597 -m recent --name limit-2597 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1475 +-A limit-2597 -m recent --name limit-2597 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2598 -m recent --name limit-2598 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1476 +-A limit-2598 -m recent --name limit-2598 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2599 -m recent --name limit-2599 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1477 +-A limit-2599 -m recent --name limit-2599 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-260 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-260 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-2600 -m recent --name limit-2600 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1478 +-A limit-2600 -m recent --name limit-2600 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2601 -m recent --name limit-2601 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1479 +-A limit-2602 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1480 +-A limit-2602 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2603 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1481 +-A limit-2603 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2604 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1482 +-A limit-2604 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2605 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1483 +-A limit-2605 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2606 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1484 +-A limit-2606 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2607 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1485 +-A limit-2607 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2608 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1486 +-A limit-2608 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2609 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1487 +-A limit-2609 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-261 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-261 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2610 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1488 +-A limit-2610 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2611 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1489 +-A limit-2612 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1490 +-A limit-2613 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1491 +-A limit-2614 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1492 +-A limit-2615 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1493 +-A limit-2615 -m limit --limit 1/second -j LOG +-A limit-2616 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1494 +-A limit-2617 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1495 +-A limit-2617 -j TEE --gateway fc00::2 +-A limit-2618 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1496 +-A limit-2619 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1497 +-A limit-262 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-262 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-2620 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1498 +-A limit-2621 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1499 +-A limit-2622 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1500 +-A limit-2622 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2623 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1501 +-A limit-2623 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2624 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1502 +-A limit-2624 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2625 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1503 +-A limit-2625 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2626 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1504 +-A limit-2626 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2627 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1505 +-A limit-2627 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2628 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1506 +-A limit-2628 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2629 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1507 +-A limit-2629 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-263 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-263 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2630 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1508 +-A limit-2630 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2631 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1509 +-A limit-2632 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1510 +-A limit-2633 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1511 +-A limit-2634 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1512 +-A limit-2635 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1513 +-A limit-2635 -m limit --limit 1/second -j LOG +-A limit-2636 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1514 +-A limit-2637 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1515 +-A limit-2637 -j TEE --gateway fc00::2 +-A limit-2638 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1516 +-A limit-2639 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1517 +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-174 +-A limit-264 -j TEE --gateway fc00::2 +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-2640 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1518 +-A limit-2641 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1519 +-A limit-2642 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1520 +-A limit-2642 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2643 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1521 +-A limit-2643 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2644 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1522 +-A limit-2644 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2645 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1523 +-A limit-2645 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2646 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1524 +-A limit-2646 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2647 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1525 +-A limit-2647 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2648 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1526 +-A limit-2648 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2649 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1527 +-A limit-2649 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-175 +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2650 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1528 +-A limit-2650 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2651 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1529 +-A limit-2652 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1530 +-A limit-2653 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1531 +-A limit-2654 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1532 +-A limit-2655 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1533 +-A limit-2655 -m limit --limit 1/second -j LOG +-A limit-2656 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1534 +-A limit-2657 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1535 +-A limit-2657 -j TEE --gateway fc00::2 +-A limit-2658 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1536 +-A limit-2659 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1537 +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-176 +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-2660 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1538 +-A limit-2661 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1539 +-A limit-2662 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1540 +-A limit-2662 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2663 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1541 +-A limit-2663 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2664 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1542 +-A limit-2664 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2665 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1543 +-A limit-2665 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2666 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1544 +-A limit-2666 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2667 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1545 +-A limit-2667 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2668 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1546 +-A limit-2668 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2669 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1547 +-A limit-2669 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-177 +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2670 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1548 +-A limit-2670 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2671 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1549 +-A limit-2672 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1550 +-A limit-2673 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1551 +-A limit-2674 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1552 +-A limit-2675 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1553 +-A limit-2675 -m limit --limit 1/second -j LOG +-A limit-2676 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1554 +-A limit-2677 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1555 +-A limit-2677 -j TEE --gateway fc00::2 +-A limit-2678 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1556 +-A limit-2679 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1557 +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-178 +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-2680 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1558 +-A limit-2681 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1559 +-A limit-2682 -m recent --name limit-2682 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2682 -m recent --name limit-2682 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2683 -m recent --name limit-2683 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2683 -m recent --name limit-2683 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2684 -m recent --name limit-2684 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2684 -m recent --name limit-2684 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2685 -m recent --name limit-2685 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2685 -m recent --name limit-2685 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2686 -m recent --name limit-2686 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2686 -m recent --name limit-2686 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2687 -m recent --name limit-2687 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2687 -m recent --name limit-2687 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2688 -m recent --name limit-2688 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2688 -m recent --name limit-2688 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2689 -m recent --name limit-2689 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2689 -m recent --name limit-2689 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-179 +-A limit-2690 -m recent --name limit-2690 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2690 -m recent --name limit-2690 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2691 -m recent --name limit-2691 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2692 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2692 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2693 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2693 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2694 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2694 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2695 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2695 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2696 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2696 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2697 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2697 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2698 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2698 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2699 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2699 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-180 +-A limit-270 -j ACCEPT +-A limit-2700 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2700 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2701 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2702 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2703 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2704 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2705 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2705 -m limit --limit 1/second -j LOG +-A limit-2706 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2707 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2707 -j TEE --gateway fc00::2 +-A limit-2708 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2709 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-181 +-A limit-2710 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2711 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2712 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2712 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2713 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2713 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2714 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2714 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2715 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2715 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2716 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2716 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2717 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2717 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2718 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2718 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2719 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2719 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-182 +-A limit-272 -m limit --limit 1/second -j LOG -A limit-272 -j ACCEPT --A limit-273 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-129 --A limit-274 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-130 --A limit-274 -m limit --limit 1/second -j LOG +-A limit-2720 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2720 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2721 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2722 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2723 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2724 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2725 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2725 -m limit --limit 1/second -j LOG +-A limit-2726 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2727 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2727 -j TEE --gateway fc00::2 +-A limit-2728 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2729 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-183 +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-2730 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2731 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2732 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2732 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2733 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2733 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2734 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2734 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2735 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2735 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2736 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2736 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2737 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2737 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2738 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2738 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2739 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2739 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-184 +-A limit-274 -j TEE --gateway fc00::2 -A limit-274 -j ACCEPT --A limit-275 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-131 --A limit-275 -m limit --limit 1/second -j LOG --A limit-276 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-2740 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2740 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2741 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2742 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2743 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2744 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2745 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2745 -m limit --limit 1/second -j LOG +-A limit-2746 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2747 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2747 -j TEE --gateway fc00::2 +-A limit-2748 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2749 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-185 +-A limit-275 -j TEE --gateway fc00::2 +-A limit-2750 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2751 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2752 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2752 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2753 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2753 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2754 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2754 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2755 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2755 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2756 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2756 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2757 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2757 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2758 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2758 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2759 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2759 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-276 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-186 -A limit-276 -j ACCEPT --A limit-277 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-133 --A limit-278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-2760 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2760 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2761 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2762 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2763 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2764 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2765 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2765 -m limit --limit 1/second -j LOG +-A limit-2766 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2767 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2767 -j TEE --gateway fc00::2 +-A limit-2768 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2769 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-187 +-A limit-2770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2772 -m recent --name limit-2772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1560 +-A limit-2772 -m recent --name limit-2772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2773 -m recent --name limit-2773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1561 +-A limit-2773 -m recent --name limit-2773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2774 -m recent --name limit-2774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1562 +-A limit-2774 -m recent --name limit-2774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2775 -m recent --name limit-2775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1563 +-A limit-2775 -m recent --name limit-2775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2776 -m recent --name limit-2776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1564 +-A limit-2776 -m recent --name limit-2776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2777 -m recent --name limit-2777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1565 +-A limit-2777 -m recent --name limit-2777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2778 -m recent --name limit-2778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1566 +-A limit-2778 -m recent --name limit-2778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2779 -m recent --name limit-2779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1567 +-A limit-2779 -m recent --name limit-2779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-278 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-188 -A limit-278 -j ACCEPT --A limit-279 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-135 --A limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-28 -j ACCEPT --A limit-280 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-136 --A limit-280 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-281 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-137 --A limit-281 -m recent --name user:C --rdest --mask fe00:: --set --A limit-282 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-2780 -m recent --name limit-2780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1568 +-A limit-2780 -m recent --name limit-2780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2781 -m recent --name limit-2781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1569 +-A limit-2782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1570 +-A limit-2782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1571 +-A limit-2783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1572 +-A limit-2784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1573 +-A limit-2785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1574 +-A limit-2786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1575 +-A limit-2787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1576 +-A limit-2788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1577 +-A limit-2789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-279 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-189 +-A limit-2790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1578 +-A limit-2790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1579 +-A limit-2792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1580 +-A limit-2793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1581 +-A limit-2794 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1582 +-A limit-2795 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1583 +-A limit-2795 -m limit --limit 1/second -j LOG +-A limit-2796 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1584 +-A limit-2797 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1585 +-A limit-2797 -j TEE --gateway fc00::2 +-A limit-2798 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1586 +-A limit-2799 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1587 +-A limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2800 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1588 +-A limit-2801 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1589 +-A limit-2802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1590 +-A limit-2802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1591 +-A limit-2803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1592 +-A limit-2804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1593 +-A limit-2805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1594 +-A limit-2806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1595 +-A limit-2807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1596 +-A limit-2808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1597 +-A limit-2809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1598 +-A limit-2810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2811 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1599 +-A limit-2812 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1600 +-A limit-2813 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1601 +-A limit-2814 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1602 +-A limit-2815 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1603 +-A limit-2815 -m limit --limit 1/second -j LOG +-A limit-2816 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1604 +-A limit-2817 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1605 +-A limit-2817 -j TEE --gateway fc00::2 +-A limit-2818 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1606 +-A limit-2819 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1607 +-A limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-282 -m limit --limit 1/second -j LOG --A limit-282 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-283 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-283 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-285 -m recent --name user:C --rdest --mask fe00:: --set --A limit-286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-288 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-144 --A limit-288 -j ACCEPT --A limit-289 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-145 --A limit-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-146 --A limit-290 -m limit --limit 1/second -j LOG --A limit-290 -j ACCEPT --A limit-291 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-147 --A limit-291 -m limit --limit 1/second -j LOG --A limit-292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-148 --A limit-292 -j ACCEPT --A limit-293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-149 --A limit-294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-150 --A limit-294 -j ACCEPT --A limit-295 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-151 --A limit-296 -m recent --name limit-296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-296 -m recent --name limit-296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-297 -m recent --name limit-297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-297 -m recent --name limit-297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-298 -m recent --name limit-298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-298 -m limit --limit 1/second -j LOG --A limit-298 -m recent --name limit-298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-299 -m recent --name limit-299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-299 -m recent --name limit-299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2820 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1608 +-A limit-2821 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1609 +-A limit-2822 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1610 +-A limit-2822 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2823 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1611 +-A limit-2823 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2824 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1612 +-A limit-2824 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2825 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1613 +-A limit-2825 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2826 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1614 +-A limit-2826 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2827 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1615 +-A limit-2827 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2828 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1616 +-A limit-2828 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2829 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1617 +-A limit-2829 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2830 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1618 +-A limit-2830 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2831 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1619 +-A limit-2832 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1620 +-A limit-2833 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1621 +-A limit-2834 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1622 +-A limit-2835 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1623 +-A limit-2835 -m limit --limit 1/second -j LOG +-A limit-2836 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1624 +-A limit-2837 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1625 +-A limit-2837 -j TEE --gateway fc00::2 +-A limit-2838 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1626 +-A limit-2839 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1627 +-A limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-284 -j TEE --gateway fc00::2 +-A limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2840 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1628 +-A limit-2841 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1629 +-A limit-2842 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1630 +-A limit-2842 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2843 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1631 +-A limit-2843 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2844 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1632 +-A limit-2844 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2845 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1633 +-A limit-2845 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2846 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1634 +-A limit-2846 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2847 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1635 +-A limit-2847 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2848 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1636 +-A limit-2848 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2849 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1637 +-A limit-2849 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2850 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1638 +-A limit-2850 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2851 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1639 +-A limit-2852 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1640 +-A limit-2853 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1641 +-A limit-2854 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1642 +-A limit-2855 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1643 +-A limit-2855 -m limit --limit 1/second -j LOG +-A limit-2856 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1644 +-A limit-2857 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1645 +-A limit-2857 -j TEE --gateway fc00::2 +-A limit-2858 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1646 +-A limit-2859 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1647 +-A limit-286 -m recent --name limit-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-286 -m recent --name limit-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2860 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1648 +-A limit-2861 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1649 +-A limit-2862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2862 -j RETURN +-A limit-2862 -m limit --limit 1/second -j LOG +-A limit-2862 -j DROP +-A limit-2863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2863 -j RETURN +-A limit-2863 -m limit --limit 1/second -j LOG +-A limit-2863 -j DROP +-A limit-2864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2864 -j RETURN +-A limit-2864 -m limit --limit 1/second -j LOG +-A limit-2864 -j DROP +-A limit-2865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2865 -j RETURN +-A limit-2865 -m limit --limit 1/second -j LOG +-A limit-2865 -j DROP +-A limit-2866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2866 -j RETURN +-A limit-2866 -m limit --limit 1/second -j LOG +-A limit-2866 -j DROP +-A limit-2867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2867 -j RETURN +-A limit-2867 -m limit --limit 1/second -j LOG +-A limit-2867 -j DROP +-A limit-2868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2868 -j RETURN +-A limit-2868 -j DROP +-A limit-2869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2869 -j RETURN +-A limit-2869 -j DROP +-A limit-287 -m recent --name limit-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-287 -m recent --name limit-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2870 -j RETURN +-A limit-2870 -j DROP +-A limit-2871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2871 -j RETURN +-A limit-2871 -j DROP +-A limit-2872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2872 -j RETURN +-A limit-2872 -j DROP +-A limit-2873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2873 -j RETURN +-A limit-2873 -j DROP +-A limit-2874 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2874 -j RETURN +-A limit-2874 -m limit --limit 1/second -j LOG +-A limit-2874 -j DROP +-A limit-2875 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2875 -j RETURN +-A limit-2875 -m limit --limit 1/second -j LOG +-A limit-2875 -j DROP +-A limit-2876 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2876 -j RETURN +-A limit-2876 -m limit --limit 1/second -j LOG +-A limit-2876 -j DROP +-A limit-2877 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2877 -j RETURN +-A limit-2877 -m limit --limit 1/second -j LOG +-A limit-2877 -j DROP +-A limit-2878 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2878 -j RETURN +-A limit-2878 -m limit --limit 1/second -j LOG +-A limit-2878 -j DROP +-A limit-2879 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2879 -j RETURN +-A limit-2879 -m limit --limit 1/second -j LOG +-A limit-2879 -j DROP +-A limit-288 -m recent --name limit-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-288 -m recent --name limit-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2880 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2880 -j RETURN +-A limit-2880 -j TEE --gateway fc00::2 +-A limit-2880 -j DROP +-A limit-2881 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2881 -j RETURN +-A limit-2881 -j TEE --gateway fc00::2 +-A limit-2881 -j DROP +-A limit-2882 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2882 -j RETURN +-A limit-2882 -j TEE --gateway fc00::2 +-A limit-2882 -j DROP +-A limit-2883 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2883 -j RETURN +-A limit-2883 -j TEE --gateway fc00::2 +-A limit-2883 -j DROP +-A limit-2884 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2884 -j RETURN +-A limit-2884 -j TEE --gateway fc00::2 +-A limit-2884 -j DROP +-A limit-2885 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2885 -j RETURN +-A limit-2885 -j TEE --gateway fc00::2 +-A limit-2885 -j DROP +-A limit-2886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2886 -j RETURN +-A limit-2886 -j DROP +-A limit-2887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2887 -j RETURN +-A limit-2887 -j DROP +-A limit-2888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2888 -j RETURN +-A limit-2888 -j DROP +-A limit-2889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2889 -j RETURN +-A limit-2889 -j DROP +-A limit-289 -m recent --name limit-289 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2890 -j RETURN +-A limit-2890 -j DROP +-A limit-2891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2891 -j RETURN +-A limit-2891 -j DROP +-A limit-2892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2892 -j RETURN +-A limit-2892 -j DROP +-A limit-2893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2893 -j RETURN +-A limit-2893 -j DROP +-A limit-2894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2894 -j RETURN +-A limit-2894 -j DROP +-A limit-2895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2895 -j RETURN +-A limit-2895 -j DROP +-A limit-2896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2896 -j RETURN +-A limit-2896 -j DROP +-A limit-2897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2897 -j RETURN +-A limit-2897 -j DROP +-A limit-2898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2898 -j RETURN +-A limit-2898 -j DROP +-A limit-2899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2899 -j RETURN +-A limit-2899 -j DROP +-A limit-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2900 -j RETURN +-A limit-2900 -j DROP +-A limit-2901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2901 -j RETURN +-A limit-2901 -j DROP +-A limit-2902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2902 -j RETURN +-A limit-2902 -j DROP +-A limit-2903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2903 -j RETURN +-A limit-2903 -j DROP +-A limit-2904 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2904 -j RETURN +-A limit-2904 -m limit --limit 1/second -j LOG +-A limit-2904 -j DROP +-A limit-2905 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2905 -j RETURN +-A limit-2905 -m limit --limit 1/second -j LOG +-A limit-2905 -j DROP +-A limit-2906 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2906 -j RETURN +-A limit-2906 -m limit --limit 1/second -j LOG +-A limit-2906 -j DROP +-A limit-2907 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2907 -j RETURN +-A limit-2907 -m limit --limit 1/second -j LOG +-A limit-2907 -j DROP +-A limit-2908 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2908 -j RETURN +-A limit-2908 -m limit --limit 1/second -j LOG +-A limit-2908 -j DROP +-A limit-2909 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2909 -j RETURN +-A limit-2909 -m limit --limit 1/second -j LOG +-A limit-2909 -j DROP +-A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2910 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2910 -j RETURN +-A limit-2910 -j TEE --gateway fc00::2 +-A limit-2910 -j DROP +-A limit-2911 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2911 -j RETURN +-A limit-2911 -j TEE --gateway fc00::2 +-A limit-2911 -j DROP +-A limit-2912 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2912 -j RETURN +-A limit-2912 -j TEE --gateway fc00::2 +-A limit-2912 -j DROP +-A limit-2913 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2913 -j RETURN +-A limit-2913 -j TEE --gateway fc00::2 +-A limit-2913 -j DROP +-A limit-2914 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2914 -j RETURN +-A limit-2914 -j TEE --gateway fc00::2 +-A limit-2914 -j DROP +-A limit-2915 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2915 -j RETURN +-A limit-2915 -j TEE --gateway fc00::2 +-A limit-2915 -j DROP +-A limit-2916 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2916 -j RETURN +-A limit-2916 -j DROP +-A limit-2917 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2917 -j RETURN +-A limit-2917 -j DROP +-A limit-2918 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2918 -j RETURN +-A limit-2918 -j DROP +-A limit-2919 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2919 -j RETURN +-A limit-2919 -j DROP +-A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-292 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2920 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2920 -j RETURN +-A limit-2920 -j DROP +-A limit-2921 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2921 -j RETURN +-A limit-2921 -j DROP +-A limit-2922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2922 -j RETURN +-A limit-2922 -j DROP +-A limit-2923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2923 -j RETURN +-A limit-2923 -j DROP +-A limit-2924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2924 -j RETURN +-A limit-2924 -j DROP +-A limit-2925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2925 -j RETURN +-A limit-2925 -j DROP +-A limit-2926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2926 -j RETURN +-A limit-2926 -j DROP +-A limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2927 -j RETURN +-A limit-2927 -j DROP +-A limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1650 +-A limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1651 +-A limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1652 +-A limit-2930 -m limit --limit 1/second -j LOG +-A limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1653 +-A limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1654 +-A limit-2932 -j TEE --gateway fc00::2 +-A limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1655 +-A limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1656 +-A limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1657 +-A limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1658 +-A limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2937 -m recent --name limit-2937 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1659 +-A limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-294 -j TEE --gateway fc00::2 +-A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2940 -m limit --limit 1/second -j LOG +-A limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2942 -j TEE --gateway fc00::2 +-A limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2947 -m recent --name limit-2947 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2950 -m limit --limit 1/second -j LOG +-A limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2952 -j TEE --gateway fc00::2 +-A limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2957 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2958 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2958 -j ACCEPT +-A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2960 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2960 -m limit --limit 1/second -j LOG +-A limit-2960 -j ACCEPT +-A limit-2961 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2961 -m limit --limit 1/second -j LOG +-A limit-2962 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2962 -j TEE --gateway fc00::2 +-A limit-2962 -j ACCEPT +-A limit-2963 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2963 -j TEE --gateway fc00::2 +-A limit-2964 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2964 -j ACCEPT +-A limit-2966 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2966 -j ACCEPT +-A limit-2967 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2970 -m limit --limit 1/second -j LOG +-A limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2972 -j TEE --gateway fc00::2 +-A limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2977 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2978 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2978 -j ACCEPT +-A limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2980 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2980 -m limit --limit 1/second -j LOG +-A limit-2980 -j ACCEPT +-A limit-2981 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2981 -m limit --limit 1/second -j LOG +-A limit-2982 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2982 -j TEE --gateway fc00::2 +-A limit-2982 -j ACCEPT +-A limit-2983 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2983 -j TEE --gateway fc00::2 +-A limit-2984 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2984 -j ACCEPT +-A limit-2986 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2986 -j ACCEPT +-A limit-2987 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2988 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2988 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2989 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2989 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2990 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2990 -m limit --limit 1/second -j LOG +-A limit-2990 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2991 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2991 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2992 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2992 -j TEE --gateway fc00::2 +-A limit-2992 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2993 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2993 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2994 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2994 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2995 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2995 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2996 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2996 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2997 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2998 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2998 -j ACCEPT -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-30 -j ACCEPT --A limit-300 -m recent --name limit-300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-300 -m recent --name limit-300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-301 -m recent --name limit-301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-301 -m recent --name limit-301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-302 -m recent --name limit-302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-302 -m recent --name limit-302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-303 -m recent --name limit-303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-306 -m limit --limit 1/second -j LOG --A limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-300 -j ACCEPT +-A limit-3000 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3000 -m limit --limit 1/second -j LOG +-A limit-3000 -j ACCEPT +-A limit-3001 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3001 -m limit --limit 1/second -j LOG +-A limit-3002 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3002 -j TEE --gateway fc00::2 +-A limit-3002 -j ACCEPT +-A limit-3003 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3003 -j TEE --gateway fc00::2 +-A limit-3004 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3004 -j ACCEPT +-A limit-3006 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3006 -j ACCEPT +-A limit-3007 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3008 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3008 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3009 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3009 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-301 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3010 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3010 -m limit --limit 1/second -j LOG +-A limit-3010 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3011 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3011 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3012 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3012 -j TEE --gateway fc00::2 +-A limit-3012 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3013 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3013 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3014 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3014 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3015 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3015 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3016 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3016 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3017 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3018 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3018 -j ACCEPT +-A limit-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-3020 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3020 -m limit --limit 1/second -j LOG +-A limit-3020 -j ACCEPT +-A limit-3021 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3021 -m limit --limit 1/second -j LOG +-A limit-3022 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3022 -j TEE --gateway fc00::2 +-A limit-3022 -j ACCEPT +-A limit-3023 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3023 -j TEE --gateway fc00::2 +-A limit-3024 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3024 -j ACCEPT +-A limit-3026 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3026 -j ACCEPT +-A limit-3027 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1660 +-A limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1661 +-A limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1662 +-A limit-3030 -m limit --limit 1/second -j LOG +-A limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1663 +-A limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1664 +-A limit-3032 -j TEE --gateway fc00::2 +-A limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1665 +-A limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1666 +-A limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1667 +-A limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1668 +-A limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3037 -m recent --name limit-3037 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1669 +-A limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1670 +-A limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1671 +-A limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-304 -j TEE --gateway fc00::2 +-A limit-304 -j ACCEPT +-A limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1672 +-A limit-3040 -m limit --limit 1/second -j LOG +-A limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1673 +-A limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1674 +-A limit-3042 -j TEE --gateway fc00::2 +-A limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1675 +-A limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1676 +-A limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1677 +-A limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1678 +-A limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1679 +-A limit-3048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 +-A limit-3048 -j ACCEPT +-A limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-305 -j TEE --gateway fc00::2 +-A limit-3050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 +-A limit-3050 -m limit --limit 1/second -j LOG +-A limit-3050 -j ACCEPT +-A limit-3051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 +-A limit-3051 -m limit --limit 1/second -j LOG +-A limit-3052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 +-A limit-3052 -j TEE --gateway fc00::2 +-A limit-3052 -j ACCEPT +-A limit-3053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 +-A limit-3053 -j TEE --gateway fc00::2 +-A limit-3054 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 +-A limit-3054 -j ACCEPT +-A limit-3056 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 +-A limit-3056 -j ACCEPT +-A limit-3057 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 +-A limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1690 +-A limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1691 +-A limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-306 -j ACCEPT +-A limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1692 +-A limit-3060 -m limit --limit 1/second -j LOG +-A limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1693 +-A limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1694 +-A limit-3062 -j TEE --gateway fc00::2 +-A limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1695 +-A limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1696 +-A limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1697 +-A limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1698 +-A limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1699 +-A limit-3068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 +-A limit-3068 -j ACCEPT +-A limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3070 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 +-A limit-3070 -m limit --limit 1/second -j LOG +-A limit-3070 -j ACCEPT +-A limit-3071 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 +-A limit-3071 -m limit --limit 1/second -j LOG +-A limit-3072 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 +-A limit-3072 -j TEE --gateway fc00::2 +-A limit-3072 -j ACCEPT +-A limit-3073 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 +-A limit-3073 -j TEE --gateway fc00::2 +-A limit-3074 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 +-A limit-3074 -j ACCEPT +-A limit-3076 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 +-A limit-3076 -j ACCEPT +-A limit-3077 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 +-A limit-3078 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1710 +-A limit-3078 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3079 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1711 +-A limit-3079 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-308 -j ACCEPT +-A limit-3080 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1712 +-A limit-3080 -m limit --limit 1/second -j LOG +-A limit-3080 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3081 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1713 +-A limit-3081 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3082 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1714 +-A limit-3082 -j TEE --gateway fc00::2 +-A limit-3082 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3083 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1715 +-A limit-3083 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3084 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1716 +-A limit-3084 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3085 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1717 +-A limit-3085 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3086 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1718 +-A limit-3086 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3087 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1719 +-A limit-3088 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 +-A limit-3088 -j ACCEPT +-A limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3090 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 +-A limit-3090 -m limit --limit 1/second -j LOG +-A limit-3090 -j ACCEPT +-A limit-3091 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 +-A limit-3091 -m limit --limit 1/second -j LOG +-A limit-3092 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 +-A limit-3092 -j TEE --gateway fc00::2 +-A limit-3092 -j ACCEPT +-A limit-3093 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 +-A limit-3093 -j TEE --gateway fc00::2 +-A limit-3094 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 +-A limit-3094 -j ACCEPT +-A limit-3096 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 +-A limit-3096 -j ACCEPT +-A limit-3097 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 +-A limit-3098 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1730 +-A limit-3098 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3099 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1731 +-A limit-3099 -m recent --name user:C --rdest --mask fe00:: --set -A limit-31 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-312 -j ACCEPT --A limit-313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m limit --limit 1/second -j LOG --A limit-314 -j ACCEPT --A limit-315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-315 -m limit --limit 1/second -j LOG --A limit-316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-316 -j ACCEPT --A limit-317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-318 -j ACCEPT --A limit-319 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3100 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1732 +-A limit-3100 -m limit --limit 1/second -j LOG +-A limit-3100 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3101 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1733 +-A limit-3101 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1734 +-A limit-3102 -j TEE --gateway fc00::2 +-A limit-3102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1735 +-A limit-3103 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1736 +-A limit-3104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1737 +-A limit-3105 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1738 +-A limit-3106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1739 +-A limit-3108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 +-A limit-3108 -j ACCEPT +-A limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 +-A limit-3110 -m limit --limit 1/second -j LOG +-A limit-3110 -j ACCEPT +-A limit-3111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 +-A limit-3111 -m limit --limit 1/second -j LOG +-A limit-3112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 +-A limit-3112 -j TEE --gateway fc00::2 +-A limit-3112 -j ACCEPT +-A limit-3113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 +-A limit-3113 -j TEE --gateway fc00::2 +-A limit-3114 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 +-A limit-3114 -j ACCEPT +-A limit-3116 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 +-A limit-3116 -j ACCEPT +-A limit-3117 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 +-A limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1750 +-A limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1751 +-A limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-312 -m limit --limit 1/second -j LOG +-A limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1752 +-A limit-3120 -m limit --limit 1/second -j LOG +-A limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1753 +-A limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1754 +-A limit-3122 -j TEE --gateway fc00::2 +-A limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1755 +-A limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1756 +-A limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1757 +-A limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1758 +-A limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3127 -m recent --name limit-3127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1759 +-A limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1760 +-A limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1761 +-A limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1762 +-A limit-3130 -m limit --limit 1/second -j LOG +-A limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1763 +-A limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1764 +-A limit-3132 -j TEE --gateway fc00::2 +-A limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1765 +-A limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1766 +-A limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1767 +-A limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1768 +-A limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1769 +-A limit-3138 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 +-A limit-3138 -j ACCEPT +-A limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-314 -j TEE --gateway fc00::2 +-A limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 +-A limit-3140 -m limit --limit 1/second -j LOG +-A limit-3140 -j ACCEPT +-A limit-3141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 +-A limit-3141 -m limit --limit 1/second -j LOG +-A limit-3142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 +-A limit-3142 -j TEE --gateway fc00::2 +-A limit-3142 -j ACCEPT +-A limit-3143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 +-A limit-3143 -j TEE --gateway fc00::2 +-A limit-3144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 +-A limit-3144 -j ACCEPT +-A limit-3146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 +-A limit-3146 -j ACCEPT +-A limit-3147 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 +-A limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1780 +-A limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1781 +-A limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1782 +-A limit-3150 -m limit --limit 1/second -j LOG +-A limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1783 +-A limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1784 +-A limit-3152 -j TEE --gateway fc00::2 +-A limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1785 +-A limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1786 +-A limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1787 +-A limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1788 +-A limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1789 +-A limit-3158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 +-A limit-3158 -j ACCEPT +-A limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 +-A limit-3160 -m limit --limit 1/second -j LOG +-A limit-3160 -j ACCEPT +-A limit-3161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 +-A limit-3161 -m limit --limit 1/second -j LOG +-A limit-3162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 +-A limit-3162 -j TEE --gateway fc00::2 +-A limit-3162 -j ACCEPT +-A limit-3163 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 +-A limit-3163 -j TEE --gateway fc00::2 +-A limit-3164 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 +-A limit-3164 -j ACCEPT +-A limit-3166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 +-A limit-3166 -j ACCEPT +-A limit-3167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 +-A limit-3168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1800 +-A limit-3168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1801 +-A limit-3169 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3170 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1802 +-A limit-3170 -m limit --limit 1/second -j LOG +-A limit-3170 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3171 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1803 +-A limit-3171 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3172 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1804 +-A limit-3172 -j TEE --gateway fc00::2 +-A limit-3172 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3173 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1805 +-A limit-3173 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3174 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1806 +-A limit-3174 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3175 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1807 +-A limit-3175 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3176 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1808 +-A limit-3176 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3177 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1809 +-A limit-3178 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 +-A limit-3178 -j ACCEPT +-A limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3180 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 +-A limit-3180 -m limit --limit 1/second -j LOG +-A limit-3180 -j ACCEPT +-A limit-3181 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 +-A limit-3181 -m limit --limit 1/second -j LOG +-A limit-3182 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 +-A limit-3182 -j TEE --gateway fc00::2 +-A limit-3182 -j ACCEPT +-A limit-3183 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 +-A limit-3183 -j TEE --gateway fc00::2 +-A limit-3184 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 +-A limit-3184 -j ACCEPT +-A limit-3186 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 +-A limit-3186 -j ACCEPT +-A limit-3187 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 +-A limit-3188 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1820 +-A limit-3188 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3189 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1821 +-A limit-3189 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3190 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1822 +-A limit-3190 -m limit --limit 1/second -j LOG +-A limit-3190 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3191 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1823 +-A limit-3191 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3192 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1824 +-A limit-3192 -j TEE --gateway fc00::2 +-A limit-3192 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3193 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1825 +-A limit-3193 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3194 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1826 +-A limit-3194 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3195 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1827 +-A limit-3195 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3196 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1828 +-A limit-3196 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3197 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1829 +-A limit-3198 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 +-A limit-3198 -j ACCEPT +-A limit-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-32 -m limit --limit 1/second -j LOG +-A limit-32 -j ACCEPT +-A limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-320 -j ACCEPT +-A limit-3200 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 +-A limit-3200 -m limit --limit 1/second -j LOG +-A limit-3200 -j ACCEPT +-A limit-3201 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 +-A limit-3201 -m limit --limit 1/second -j LOG +-A limit-3202 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 +-A limit-3202 -j TEE --gateway fc00::2 +-A limit-3202 -j ACCEPT +-A limit-3203 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 +-A limit-3203 -j TEE --gateway fc00::2 +-A limit-3204 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 +-A limit-3204 -j ACCEPT +-A limit-3206 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 +-A limit-3206 -j ACCEPT +-A limit-3207 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 +-A limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3210 -m limit --limit 1/second -j LOG +-A limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3212 -j TEE --gateway fc00::2 +-A limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3217 -m recent --name limit-3217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-322 -m limit --limit 1/second -j LOG --A limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-327 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-322 -j ACCEPT +-A limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3220 -m limit --limit 1/second -j LOG +-A limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3222 -j TEE --gateway fc00::2 +-A limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3228 -j ACCEPT +-A limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-323 -m limit --limit 1/second -j LOG +-A limit-3230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3230 -m limit --limit 1/second -j LOG +-A limit-3230 -j ACCEPT +-A limit-3231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3231 -m limit --limit 1/second -j LOG +-A limit-3232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3232 -j TEE --gateway fc00::2 +-A limit-3232 -j ACCEPT +-A limit-3233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3233 -j TEE --gateway fc00::2 +-A limit-3234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3234 -j ACCEPT +-A limit-3236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3236 -j ACCEPT +-A limit-3237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-324 -j TEE --gateway fc00::2 +-A limit-324 -j ACCEPT +-A limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3240 -m limit --limit 1/second -j LOG +-A limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3242 -j TEE --gateway fc00::2 +-A limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3248 -j ACCEPT +-A limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-325 -j TEE --gateway fc00::2 +-A limit-3250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3250 -m limit --limit 1/second -j LOG +-A limit-3250 -j ACCEPT +-A limit-3251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3251 -m limit --limit 1/second -j LOG +-A limit-3252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3252 -j TEE --gateway fc00::2 +-A limit-3252 -j ACCEPT +-A limit-3253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3253 -j TEE --gateway fc00::2 +-A limit-3254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3254 -j ACCEPT +-A limit-3256 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3256 -j ACCEPT +-A limit-3257 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3258 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3258 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3259 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3259 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-326 -j ACCEPT +-A limit-3260 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3260 -m limit --limit 1/second -j LOG +-A limit-3260 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3261 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3261 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3262 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3262 -j TEE --gateway fc00::2 +-A limit-3262 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3263 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3263 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3264 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3264 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3265 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3265 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3266 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3266 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3267 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3268 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3268 -j ACCEPT +-A limit-327 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3270 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3270 -m limit --limit 1/second -j LOG +-A limit-3270 -j ACCEPT +-A limit-3271 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3271 -m limit --limit 1/second -j LOG +-A limit-3272 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3272 -j TEE --gateway fc00::2 +-A limit-3272 -j ACCEPT +-A limit-3273 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3273 -j TEE --gateway fc00::2 +-A limit-3274 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3274 -j ACCEPT +-A limit-3276 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3276 -j ACCEPT +-A limit-3277 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3278 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3278 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3279 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3279 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-328 -j ACCEPT --A limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-330 -m limit --limit 1/second -j LOG --A limit-330 -j ACCEPT --A limit-331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-331 -m limit --limit 1/second -j LOG --A limit-332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-332 -j ACCEPT --A limit-333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-334 -j ACCEPT --A limit-335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3280 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3280 -m limit --limit 1/second -j LOG +-A limit-3280 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3281 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3281 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3282 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3282 -j TEE --gateway fc00::2 +-A limit-3282 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3283 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3283 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3285 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3288 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3288 -j ACCEPT +-A limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3290 -m limit --limit 1/second -j LOG +-A limit-3290 -j ACCEPT +-A limit-3291 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3291 -m limit --limit 1/second -j LOG +-A limit-3292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3292 -j TEE --gateway fc00::2 +-A limit-3292 -j ACCEPT +-A limit-3293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3293 -j TEE --gateway fc00::2 +-A limit-3294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3294 -j ACCEPT +-A limit-3296 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3296 -j ACCEPT +-A limit-3297 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1840 +-A limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1841 +-A limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-33 -m limit --limit 1/second -j LOG +-A limit-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1842 +-A limit-3300 -m limit --limit 1/second -j LOG +-A limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1843 +-A limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1844 +-A limit-3302 -j TEE --gateway fc00::2 +-A limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1845 +-A limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1846 +-A limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1847 +-A limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1848 +-A limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3307 -m recent --name limit-3307 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1849 +-A limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1850 +-A limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1851 +-A limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-331 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1852 +-A limit-3310 -m limit --limit 1/second -j LOG +-A limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1853 +-A limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1854 +-A limit-3312 -j TEE --gateway fc00::2 +-A limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1855 +-A limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1856 +-A limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1857 +-A limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1858 +-A limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1859 +-A limit-3318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 +-A limit-3318 -j ACCEPT +-A limit-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 +-A limit-3320 -m limit --limit 1/second -j LOG +-A limit-3320 -j ACCEPT +-A limit-3321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 +-A limit-3321 -m limit --limit 1/second -j LOG +-A limit-3322 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 +-A limit-3322 -j TEE --gateway fc00::2 +-A limit-3322 -j ACCEPT +-A limit-3323 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 +-A limit-3323 -j TEE --gateway fc00::2 +-A limit-3324 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 +-A limit-3324 -j ACCEPT +-A limit-3326 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 +-A limit-3326 -j ACCEPT +-A limit-3327 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 +-A limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1870 +-A limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1871 +-A limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1872 +-A limit-3330 -m limit --limit 1/second -j LOG +-A limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1873 +-A limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1874 +-A limit-3332 -j TEE --gateway fc00::2 +-A limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1875 +-A limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1876 +-A limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1877 +-A limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1878 +-A limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3337 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1879 +-A limit-3338 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 +-A limit-3338 -j ACCEPT +-A limit-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-334 -j TEE --gateway fc00::2 +-A limit-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3340 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 +-A limit-3340 -m limit --limit 1/second -j LOG +-A limit-3340 -j ACCEPT +-A limit-3341 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 +-A limit-3341 -m limit --limit 1/second -j LOG +-A limit-3342 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 +-A limit-3342 -j TEE --gateway fc00::2 +-A limit-3342 -j ACCEPT +-A limit-3343 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 +-A limit-3343 -j TEE --gateway fc00::2 +-A limit-3344 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 +-A limit-3344 -j ACCEPT +-A limit-3346 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 +-A limit-3346 -j ACCEPT +-A limit-3347 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 +-A limit-3348 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1890 +-A limit-3348 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3349 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1891 +-A limit-3349 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3350 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1892 +-A limit-3350 -m limit --limit 1/second -j LOG +-A limit-3350 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3351 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1893 +-A limit-3351 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3352 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1894 +-A limit-3352 -j TEE --gateway fc00::2 +-A limit-3352 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3353 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1895 +-A limit-3353 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3354 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1896 +-A limit-3354 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3355 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1897 +-A limit-3355 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3356 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1898 +-A limit-3356 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3357 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1899 +-A limit-3358 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 +-A limit-3358 -j ACCEPT +-A limit-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3360 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 +-A limit-3360 -m limit --limit 1/second -j LOG +-A limit-3360 -j ACCEPT +-A limit-3361 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 +-A limit-3361 -m limit --limit 1/second -j LOG +-A limit-3362 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 +-A limit-3362 -j TEE --gateway fc00::2 +-A limit-3362 -j ACCEPT +-A limit-3363 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 +-A limit-3363 -j TEE --gateway fc00::2 +-A limit-3364 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 +-A limit-3364 -j ACCEPT +-A limit-3366 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 +-A limit-3366 -j ACCEPT +-A limit-3367 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 +-A limit-3368 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1910 +-A limit-3368 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3369 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1911 +-A limit-3369 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-337 -m recent --name user:C --rsource --mask fe00:: --set --A limit-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-338 -m limit --limit 1/second -j LOG +-A limit-3370 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1912 +-A limit-3370 -m limit --limit 1/second -j LOG +-A limit-3370 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3371 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1913 +-A limit-3371 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3372 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1914 +-A limit-3372 -j TEE --gateway fc00::2 +-A limit-3372 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3373 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1915 +-A limit-3373 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3374 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1916 +-A limit-3374 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3375 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1917 +-A limit-3375 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3376 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1918 +-A limit-3376 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3377 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1919 +-A limit-3378 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 +-A limit-3378 -j ACCEPT +-A limit-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-339 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-34 -m limit --limit 1/second -j LOG --A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-340 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-340 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-341 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-341 -m recent --name user:C --rsource --mask fe00:: --set --A limit-342 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-342 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-343 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3380 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 +-A limit-3380 -m limit --limit 1/second -j LOG +-A limit-3380 -j ACCEPT +-A limit-3381 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 +-A limit-3381 -m limit --limit 1/second -j LOG +-A limit-3382 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 +-A limit-3382 -j TEE --gateway fc00::2 +-A limit-3382 -j ACCEPT +-A limit-3383 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 +-A limit-3383 -j TEE --gateway fc00::2 +-A limit-3384 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 +-A limit-3384 -j ACCEPT +-A limit-3386 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 +-A limit-3386 -j ACCEPT +-A limit-3387 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 +-A limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3390 -m limit --limit 1/second -j LOG +-A limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3392 -j TEE --gateway fc00::2 +-A limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3397 -m recent --name limit-3397 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-34 -j TEE --gateway fc00::2 +-A limit-34 -j ACCEPT +-A limit-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-340 -j ACCEPT +-A limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3400 -m limit --limit 1/second -j LOG +-A limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3402 -j TEE --gateway fc00::2 +-A limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3408 -j ACCEPT +-A limit-341 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3410 -m limit --limit 1/second -j LOG +-A limit-3410 -j ACCEPT +-A limit-3411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3411 -m limit --limit 1/second -j LOG +-A limit-3412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3412 -j TEE --gateway fc00::2 +-A limit-3412 -j ACCEPT +-A limit-3413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3413 -j TEE --gateway fc00::2 +-A limit-3414 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3414 -j ACCEPT +-A limit-3416 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3416 -j ACCEPT +-A limit-3417 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-342 -m limit --limit 1/second -j LOG +-A limit-342 -j ACCEPT +-A limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3420 -m limit --limit 1/second -j LOG +-A limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3422 -j TEE --gateway fc00::2 +-A limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3428 -j ACCEPT +-A limit-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-343 -m limit --limit 1/second -j LOG +-A limit-3430 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3430 -m limit --limit 1/second -j LOG +-A limit-3430 -j ACCEPT +-A limit-3431 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3431 -m limit --limit 1/second -j LOG +-A limit-3432 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3432 -j TEE --gateway fc00::2 +-A limit-3432 -j ACCEPT +-A limit-3433 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3433 -j TEE --gateway fc00::2 +-A limit-3434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3434 -j ACCEPT +-A limit-3436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3436 -j ACCEPT +-A limit-3437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3438 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3438 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3439 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3439 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-344 -j TEE --gateway fc00::2 -A limit-344 -j ACCEPT --A limit-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-346 -m limit --limit 1/second -j LOG +-A limit-3440 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3440 -m limit --limit 1/second -j LOG +-A limit-3440 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3441 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3441 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3442 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3442 -j TEE --gateway fc00::2 +-A limit-3442 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3443 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3443 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3444 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3444 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3445 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3445 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3446 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3446 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3447 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3448 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3448 -j ACCEPT +-A limit-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-345 -j TEE --gateway fc00::2 +-A limit-3450 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3450 -m limit --limit 1/second -j LOG +-A limit-3450 -j ACCEPT +-A limit-3451 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3451 -m limit --limit 1/second -j LOG +-A limit-3452 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3452 -j TEE --gateway fc00::2 +-A limit-3452 -j ACCEPT +-A limit-3453 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3453 -j TEE --gateway fc00::2 +-A limit-3454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3454 -j ACCEPT +-A limit-3456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3456 -j ACCEPT +-A limit-3457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3458 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3458 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3459 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3459 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-346 -j ACCEPT --A limit-347 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-347 -m limit --limit 1/second -j LOG --A limit-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3460 -m limit --limit 1/second -j LOG +-A limit-3460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3461 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3462 -j TEE --gateway fc00::2 +-A limit-3462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3463 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3465 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3466 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3466 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3467 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3468 -j ACCEPT +-A limit-347 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3470 -m limit --limit 1/second -j LOG +-A limit-3470 -j ACCEPT +-A limit-3471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3471 -m limit --limit 1/second -j LOG +-A limit-3472 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3472 -j TEE --gateway fc00::2 +-A limit-3472 -j ACCEPT +-A limit-3473 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3473 -j TEE --gateway fc00::2 +-A limit-3474 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3474 -j ACCEPT +-A limit-3476 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3476 -j ACCEPT +-A limit-3477 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1930 +-A limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1931 +-A limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-348 -j ACCEPT --A limit-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-350 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-350 -j ACCEPT --A limit-351 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1932 +-A limit-3480 -m limit --limit 1/second -j LOG +-A limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1933 +-A limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1934 +-A limit-3482 -j TEE --gateway fc00::2 +-A limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1935 +-A limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1936 +-A limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1937 +-A limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1938 +-A limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3487 -m recent --name limit-3487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1939 +-A limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1940 +-A limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1941 +-A limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1942 +-A limit-3490 -m limit --limit 1/second -j LOG +-A limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1943 +-A limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1944 +-A limit-3492 -j TEE --gateway fc00::2 +-A limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1945 +-A limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1946 +-A limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1947 +-A limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1948 +-A limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3497 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1949 +-A limit-3498 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 +-A limit-3498 -j ACCEPT +-A limit-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-35 -j TEE --gateway fc00::2 +-A limit-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 +-A limit-3500 -m limit --limit 1/second -j LOG +-A limit-3500 -j ACCEPT +-A limit-3501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 +-A limit-3501 -m limit --limit 1/second -j LOG +-A limit-3502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 +-A limit-3502 -j TEE --gateway fc00::2 +-A limit-3502 -j ACCEPT +-A limit-3503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 +-A limit-3503 -j TEE --gateway fc00::2 +-A limit-3504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 +-A limit-3504 -j ACCEPT +-A limit-3506 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 +-A limit-3506 -j ACCEPT +-A limit-3507 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 +-A limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1960 +-A limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1961 +-A limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-351 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1962 +-A limit-3510 -m limit --limit 1/second -j LOG +-A limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1963 +-A limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1964 +-A limit-3512 -j TEE --gateway fc00::2 +-A limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1965 +-A limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1966 +-A limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1967 +-A limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1968 +-A limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1969 +-A limit-3518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 +-A limit-3518 -j ACCEPT +-A limit-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-352 -m limit --limit 1/second -j LOG -A limit-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-353 -m recent --name user:C --rdest --mask fe00:: --set --A limit-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-354 -m limit --limit 1/second -j LOG +-A limit-3520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 +-A limit-3520 -m limit --limit 1/second -j LOG +-A limit-3520 -j ACCEPT +-A limit-3521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 +-A limit-3521 -m limit --limit 1/second -j LOG +-A limit-3522 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 +-A limit-3522 -j TEE --gateway fc00::2 +-A limit-3522 -j ACCEPT +-A limit-3523 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 +-A limit-3523 -j TEE --gateway fc00::2 +-A limit-3524 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 +-A limit-3524 -j ACCEPT +-A limit-3526 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 +-A limit-3526 -j ACCEPT +-A limit-3527 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 +-A limit-3528 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1980 +-A limit-3528 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3529 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1981 +-A limit-3529 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3530 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1982 +-A limit-3530 -m limit --limit 1/second -j LOG +-A limit-3530 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3531 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1983 +-A limit-3531 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3532 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1984 +-A limit-3532 -j TEE --gateway fc00::2 +-A limit-3532 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3533 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1985 +-A limit-3533 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3534 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1986 +-A limit-3534 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3535 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1987 +-A limit-3535 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3536 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1988 +-A limit-3536 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3537 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1989 +-A limit-3538 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 +-A limit-3538 -j ACCEPT +-A limit-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-354 -j TEE --gateway fc00::2 -A limit-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-355 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3540 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 +-A limit-3540 -m limit --limit 1/second -j LOG +-A limit-3540 -j ACCEPT +-A limit-3541 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 +-A limit-3541 -m limit --limit 1/second -j LOG +-A limit-3542 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 +-A limit-3542 -j TEE --gateway fc00::2 +-A limit-3542 -j ACCEPT +-A limit-3543 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 +-A limit-3543 -j TEE --gateway fc00::2 +-A limit-3544 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 +-A limit-3544 -j ACCEPT +-A limit-3546 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 +-A limit-3546 -j ACCEPT +-A limit-3547 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 +-A limit-3548 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2000 +-A limit-3548 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3549 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2001 +-A limit-3549 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3550 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2002 +-A limit-3550 -m limit --limit 1/second -j LOG +-A limit-3550 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3551 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2003 +-A limit-3551 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3552 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2004 +-A limit-3552 -j TEE --gateway fc00::2 +-A limit-3552 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3553 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2005 +-A limit-3553 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3554 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2006 +-A limit-3554 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3555 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2007 +-A limit-3555 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3556 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2008 +-A limit-3556 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3557 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2009 +-A limit-3558 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 +-A limit-3558 -j ACCEPT +-A limit-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3560 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 +-A limit-3560 -m limit --limit 1/second -j LOG +-A limit-3560 -j ACCEPT +-A limit-3561 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 +-A limit-3561 -m limit --limit 1/second -j LOG +-A limit-3562 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 +-A limit-3562 -j TEE --gateway fc00::2 +-A limit-3562 -j ACCEPT +-A limit-3563 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 +-A limit-3563 -j TEE --gateway fc00::2 +-A limit-3564 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 +-A limit-3564 -j ACCEPT +-A limit-3566 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 +-A limit-3566 -j ACCEPT +-A limit-3567 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 +-A limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2020 +-A limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2021 +-A limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-357 -m recent --name user:C --rdest --mask fe00:: --set --A limit-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2022 +-A limit-3570 -m limit --limit 1/second -j LOG +-A limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2023 +-A limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2024 +-A limit-3572 -j TEE --gateway fc00::2 +-A limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2025 +-A limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2026 +-A limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2027 +-A limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2028 +-A limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3577 -m recent --name limit-3577 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2029 +-A limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2030 +-A limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2031 +-A limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-36 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-36 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2032 +-A limit-3580 -m limit --limit 1/second -j LOG +-A limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2033 +-A limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2034 +-A limit-3582 -j TEE --gateway fc00::2 +-A limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2035 +-A limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2036 +-A limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2037 +-A limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2038 +-A limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2039 +-A limit-3588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 +-A limit-3588 -j ACCEPT +-A limit-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 +-A limit-3590 -m limit --limit 1/second -j LOG +-A limit-3590 -j ACCEPT +-A limit-3591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 +-A limit-3591 -m limit --limit 1/second -j LOG +-A limit-3592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 +-A limit-3592 -j TEE --gateway fc00::2 +-A limit-3592 -j ACCEPT +-A limit-3593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 +-A limit-3593 -j TEE --gateway fc00::2 +-A limit-3594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 +-A limit-3594 -j ACCEPT +-A limit-3596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 +-A limit-3596 -j ACCEPT +-A limit-3597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 +-A limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2050 +-A limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2051 +-A limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-36 -j ACCEPT +-A limit-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-360 -j ACCEPT --A limit-361 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2052 +-A limit-3600 -m limit --limit 1/second -j LOG +-A limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2053 +-A limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2054 +-A limit-3602 -j TEE --gateway fc00::2 +-A limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2055 +-A limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2056 +-A limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2057 +-A limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2058 +-A limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2059 +-A limit-3608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 +-A limit-3608 -j ACCEPT +-A limit-361 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3610 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 +-A limit-3610 -m limit --limit 1/second -j LOG +-A limit-3610 -j ACCEPT +-A limit-3611 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 +-A limit-3611 -m limit --limit 1/second -j LOG +-A limit-3612 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 +-A limit-3612 -j TEE --gateway fc00::2 +-A limit-3612 -j ACCEPT +-A limit-3613 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 +-A limit-3613 -j TEE --gateway fc00::2 +-A limit-3614 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 +-A limit-3614 -j ACCEPT +-A limit-3616 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 +-A limit-3616 -j ACCEPT +-A limit-3617 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 +-A limit-3618 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2070 +-A limit-3618 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3619 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2071 +-A limit-3619 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m limit --limit 1/second -j LOG -A limit-362 -j ACCEPT --A limit-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3620 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2072 +-A limit-3620 -m limit --limit 1/second -j LOG +-A limit-3620 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3621 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2073 +-A limit-3621 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3622 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2074 +-A limit-3622 -j TEE --gateway fc00::2 +-A limit-3622 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3623 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2075 +-A limit-3623 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3624 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2076 +-A limit-3624 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3625 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2077 +-A limit-3625 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3626 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2078 +-A limit-3626 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3627 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2079 +-A limit-3628 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 +-A limit-3628 -j ACCEPT +-A limit-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-363 -m limit --limit 1/second -j LOG --A limit-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3630 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 +-A limit-3630 -m limit --limit 1/second -j LOG +-A limit-3630 -j ACCEPT +-A limit-3631 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 +-A limit-3631 -m limit --limit 1/second -j LOG +-A limit-3632 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 +-A limit-3632 -j TEE --gateway fc00::2 +-A limit-3632 -j ACCEPT +-A limit-3633 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 +-A limit-3633 -j TEE --gateway fc00::2 +-A limit-3634 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 +-A limit-3634 -j ACCEPT +-A limit-3636 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 +-A limit-3636 -j ACCEPT +-A limit-3637 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 +-A limit-3638 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2090 +-A limit-3638 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3639 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2091 +-A limit-3639 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-364 -j TEE --gateway fc00::2 -A limit-364 -j ACCEPT --A limit-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3640 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2092 +-A limit-3640 -m limit --limit 1/second -j LOG +-A limit-3640 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3641 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2093 +-A limit-3641 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3642 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2094 +-A limit-3642 -j TEE --gateway fc00::2 +-A limit-3642 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3643 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2095 +-A limit-3643 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3644 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2096 +-A limit-3644 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3645 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2097 +-A limit-3645 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3646 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2098 +-A limit-3646 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3647 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2099 +-A limit-3648 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 +-A limit-3648 -j ACCEPT +-A limit-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-365 -j TEE --gateway fc00::2 +-A limit-3650 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 +-A limit-3650 -m limit --limit 1/second -j LOG +-A limit-3650 -j ACCEPT +-A limit-3651 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 +-A limit-3651 -m limit --limit 1/second -j LOG +-A limit-3652 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 +-A limit-3652 -j TEE --gateway fc00::2 +-A limit-3652 -j ACCEPT +-A limit-3653 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 +-A limit-3653 -j TEE --gateway fc00::2 +-A limit-3654 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 +-A limit-3654 -j ACCEPT +-A limit-3656 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 +-A limit-3656 -j ACCEPT +-A limit-3657 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 +-A limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-366 -j ACCEPT --A limit-367 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-152 --A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-153 --A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-37 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-37 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-154 --A limit-370 -m limit --limit 1/second -j LOG +-A limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3660 -m limit --limit 1/second -j LOG +-A limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3662 -j TEE --gateway fc00::2 +-A limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3667 -m recent --name limit-3667 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-367 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3670 -m limit --limit 1/second -j LOG +-A limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3672 -j TEE --gateway fc00::2 +-A limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3677 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3678 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3678 -j ACCEPT +-A limit-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-368 -j ACCEPT +-A limit-3680 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3680 -m limit --limit 1/second -j LOG +-A limit-3680 -j ACCEPT +-A limit-3681 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3681 -m limit --limit 1/second -j LOG +-A limit-3682 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3682 -j TEE --gateway fc00::2 +-A limit-3682 -j ACCEPT +-A limit-3683 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3683 -j TEE --gateway fc00::2 +-A limit-3684 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3684 -j ACCEPT +-A limit-3686 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3686 -j ACCEPT +-A limit-3687 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3690 -m limit --limit 1/second -j LOG +-A limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3692 -j TEE --gateway fc00::2 +-A limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3697 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3698 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3698 -j ACCEPT +-A limit-37 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-190 -A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-155 --A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-156 +-A limit-3700 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3700 -m limit --limit 1/second -j LOG +-A limit-3700 -j ACCEPT +-A limit-3701 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3701 -m limit --limit 1/second -j LOG +-A limit-3702 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3702 -j TEE --gateway fc00::2 +-A limit-3702 -j ACCEPT +-A limit-3703 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3703 -j TEE --gateway fc00::2 +-A limit-3704 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3704 -j ACCEPT +-A limit-3706 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3706 -j ACCEPT +-A limit-3707 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3708 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3708 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3709 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3709 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-191 +-A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3710 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3710 -m limit --limit 1/second -j LOG +-A limit-3710 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3711 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3711 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3712 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3712 -j TEE --gateway fc00::2 +-A limit-3712 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3713 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3713 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3714 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3714 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3715 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3715 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3716 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3716 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3717 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3718 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3718 -j ACCEPT +-A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-192 +-A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-157 --A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-158 +-A limit-3720 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3720 -m limit --limit 1/second -j LOG +-A limit-3720 -j ACCEPT +-A limit-3721 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3721 -m limit --limit 1/second -j LOG +-A limit-3722 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3722 -j TEE --gateway fc00::2 +-A limit-3722 -j ACCEPT +-A limit-3723 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3723 -j TEE --gateway fc00::2 +-A limit-3724 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3724 -j ACCEPT +-A limit-3726 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3726 -j ACCEPT +-A limit-3727 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3728 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3728 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3729 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3729 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-193 +-A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3730 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3730 -m limit --limit 1/second -j LOG +-A limit-3730 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3731 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3731 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3732 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3732 -j TEE --gateway fc00::2 +-A limit-3732 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3733 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3733 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3734 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3734 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3735 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3735 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3736 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3736 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3737 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3738 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3738 -j ACCEPT +-A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-194 +-A limit-374 -j TEE --gateway fc00::2 -A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-159 --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-160 --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-161 --A limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-162 --A limit-378 -m limit --limit 1/second -j LOG --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-163 --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-38 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-164 +-A limit-3740 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3740 -m limit --limit 1/second -j LOG +-A limit-3740 -j ACCEPT +-A limit-3741 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3741 -m limit --limit 1/second -j LOG +-A limit-3742 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3742 -j TEE --gateway fc00::2 +-A limit-3742 -j ACCEPT +-A limit-3743 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3743 -j TEE --gateway fc00::2 +-A limit-3744 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3744 -j ACCEPT +-A limit-3746 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3746 -j ACCEPT +-A limit-3747 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2110 +-A limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2111 +-A limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-195 +-A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2112 +-A limit-3750 -m limit --limit 1/second -j LOG +-A limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2113 +-A limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2114 +-A limit-3752 -j TEE --gateway fc00::2 +-A limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2115 +-A limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2116 +-A limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2117 +-A limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2118 +-A limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3757 -m recent --name limit-3757 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2119 +-A limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2120 +-A limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2121 +-A limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-196 +-A limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2122 +-A limit-3760 -m limit --limit 1/second -j LOG +-A limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2123 +-A limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2124 +-A limit-3762 -j TEE --gateway fc00::2 +-A limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2125 +-A limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2126 +-A limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2127 +-A limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2128 +-A limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3767 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2129 +-A limit-3768 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 +-A limit-3768 -j ACCEPT +-A limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-197 +-A limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3770 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 +-A limit-3770 -m limit --limit 1/second -j LOG +-A limit-3770 -j ACCEPT +-A limit-3771 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 +-A limit-3771 -m limit --limit 1/second -j LOG +-A limit-3772 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 +-A limit-3772 -j TEE --gateway fc00::2 +-A limit-3772 -j ACCEPT +-A limit-3773 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 +-A limit-3773 -j TEE --gateway fc00::2 +-A limit-3774 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 +-A limit-3774 -j ACCEPT +-A limit-3776 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 +-A limit-3776 -j ACCEPT +-A limit-3777 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 +-A limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2140 +-A limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2141 +-A limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-198 +-A limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2142 +-A limit-3780 -m limit --limit 1/second -j LOG +-A limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2143 +-A limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2144 +-A limit-3782 -j TEE --gateway fc00::2 +-A limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2145 +-A limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2146 +-A limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2147 +-A limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2148 +-A limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3787 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2149 +-A limit-3788 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 +-A limit-3788 -j ACCEPT +-A limit-379 -m recent --name limit-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-199 +-A limit-3790 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 +-A limit-3790 -m limit --limit 1/second -j LOG +-A limit-3790 -j ACCEPT +-A limit-3791 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 +-A limit-3791 -m limit --limit 1/second -j LOG +-A limit-3792 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 +-A limit-3792 -j TEE --gateway fc00::2 +-A limit-3792 -j ACCEPT +-A limit-3793 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 +-A limit-3793 -j TEE --gateway fc00::2 +-A limit-3794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 +-A limit-3794 -j ACCEPT +-A limit-3796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 +-A limit-3796 -j ACCEPT +-A limit-3797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 +-A limit-3798 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2160 +-A limit-3798 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3799 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2161 +-A limit-3799 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-38 -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-200 -A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-165 +-A limit-3800 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2162 +-A limit-3800 -m limit --limit 1/second -j LOG +-A limit-3800 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3801 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2163 +-A limit-3801 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3802 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2164 +-A limit-3802 -j TEE --gateway fc00::2 +-A limit-3802 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3803 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2165 +-A limit-3803 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3804 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2166 +-A limit-3804 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3805 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2167 +-A limit-3805 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2168 +-A limit-3806 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2169 +-A limit-3808 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 +-A limit-3808 -j ACCEPT +-A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-201 -A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-166 +-A limit-3810 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 +-A limit-3810 -m limit --limit 1/second -j LOG +-A limit-3810 -j ACCEPT +-A limit-3811 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 +-A limit-3811 -m limit --limit 1/second -j LOG +-A limit-3812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 +-A limit-3812 -j TEE --gateway fc00::2 +-A limit-3812 -j ACCEPT +-A limit-3813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 +-A limit-3813 -j TEE --gateway fc00::2 +-A limit-3814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 +-A limit-3814 -j ACCEPT +-A limit-3816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 +-A limit-3816 -j ACCEPT +-A limit-3817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 +-A limit-3818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2180 +-A limit-3818 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2181 +-A limit-3819 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-202 +-A limit-382 -m limit --limit 1/second -j LOG -A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-167 --A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-168 --A limit-384 -j ACCEPT --A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-169 --A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-170 --A limit-386 -m limit --limit 1/second -j LOG --A limit-386 -j ACCEPT --A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-171 --A limit-387 -m limit --limit 1/second -j LOG --A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-172 --A limit-388 -j ACCEPT --A limit-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-173 --A limit-39 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-174 +-A limit-3820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2182 +-A limit-3820 -m limit --limit 1/second -j LOG +-A limit-3820 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2183 +-A limit-3821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2184 +-A limit-3822 -j TEE --gateway fc00::2 +-A limit-3822 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2185 +-A limit-3823 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3824 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2186 +-A limit-3824 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3825 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2187 +-A limit-3825 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3826 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2188 +-A limit-3826 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3827 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2189 +-A limit-3828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 +-A limit-3828 -j ACCEPT +-A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-203 +-A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3830 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 +-A limit-3830 -m limit --limit 1/second -j LOG +-A limit-3830 -j ACCEPT +-A limit-3831 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 +-A limit-3831 -m limit --limit 1/second -j LOG +-A limit-3832 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 +-A limit-3832 -j TEE --gateway fc00::2 +-A limit-3832 -j ACCEPT +-A limit-3833 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 +-A limit-3833 -j TEE --gateway fc00::2 +-A limit-3834 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 +-A limit-3834 -j ACCEPT +-A limit-3836 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 +-A limit-3836 -j ACCEPT +-A limit-3837 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 +-A limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3838 -j ACCEPT +-A limit-3838 -m limit --limit 1/second -j LOG +-A limit-3838 -j DROP +-A limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3839 -j RETURN +-A limit-3839 -m limit --limit 1/second -j LOG +-A limit-3839 -j DROP +-A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-204 +-A limit-384 -j TEE --gateway fc00::2 +-A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3840 -j logaccept-66 +-A limit-3840 -m limit --limit 1/second -j LOG +-A limit-3840 -j DROP +-A limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3841 -j logaccept-67 +-A limit-3841 -m limit --limit 1/second -j LOG +-A limit-3841 -j DROP +-A limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3842 -j ACCEPT +-A limit-3842 -m limit --limit 1/second -j LOG +-A limit-3842 -j DROP +-A limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3843 -j logaccept-68 +-A limit-3843 -m limit --limit 1/second -j LOG +-A limit-3843 -j DROP +-A limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3844 -j ACCEPT +-A limit-3844 -j DROP +-A limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3845 -j RETURN +-A limit-3845 -j DROP +-A limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3846 -j logaccept-69 +-A limit-3846 -j DROP +-A limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3847 -j logaccept-70 +-A limit-3847 -j DROP +-A limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3848 -j ACCEPT +-A limit-3848 -j DROP +-A limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3849 -j logaccept-71 +-A limit-3849 -j DROP +-A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-205 +-A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3850 -j ACCEPT +-A limit-3850 -m limit --limit 1/second -j LOG +-A limit-3850 -j DROP +-A limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3851 -j RETURN +-A limit-3851 -m limit --limit 1/second -j LOG +-A limit-3851 -j DROP +-A limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3852 -j logaccept-72 +-A limit-3852 -m limit --limit 1/second -j LOG +-A limit-3852 -j DROP +-A limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3853 -j logaccept-73 +-A limit-3853 -m limit --limit 1/second -j LOG +-A limit-3853 -j DROP +-A limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3854 -j ACCEPT +-A limit-3854 -m limit --limit 1/second -j LOG +-A limit-3854 -j DROP +-A limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3855 -j logaccept-74 +-A limit-3855 -m limit --limit 1/second -j LOG +-A limit-3855 -j DROP +-A limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3856 -j ACCEPT +-A limit-3856 -j TEE --gateway fc00::2 +-A limit-3856 -j DROP +-A limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3857 -j RETURN +-A limit-3857 -j TEE --gateway fc00::2 +-A limit-3857 -j DROP +-A limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3858 -j logaccept-75 +-A limit-3858 -j TEE --gateway fc00::2 +-A limit-3858 -j DROP +-A limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3859 -j logaccept-76 +-A limit-3859 -j TEE --gateway fc00::2 +-A limit-3859 -j DROP +-A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-206 +-A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3860 -j ACCEPT +-A limit-3860 -j TEE --gateway fc00::2 +-A limit-3860 -j DROP +-A limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3861 -j logaccept-77 +-A limit-3861 -j TEE --gateway fc00::2 +-A limit-3861 -j DROP +-A limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3862 -j ACCEPT +-A limit-3862 -j DROP +-A limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3863 -j RETURN +-A limit-3863 -j DROP +-A limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3864 -j logaccept-78 +-A limit-3864 -j DROP +-A limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3865 -j logaccept-79 +-A limit-3865 -j DROP +-A limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3866 -j ACCEPT +-A limit-3866 -j DROP +-A limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3867 -j logaccept-80 +-A limit-3867 -j DROP +-A limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3868 -j ACCEPT +-A limit-3868 -j DROP +-A limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3869 -j RETURN +-A limit-3869 -j DROP +-A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-207 +-A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3870 -j logaccept-81 +-A limit-3870 -j DROP +-A limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3871 -j logaccept-82 +-A limit-3871 -j DROP +-A limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3872 -j ACCEPT +-A limit-3872 -j DROP +-A limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3873 -j logaccept-83 +-A limit-3873 -j DROP +-A limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3874 -j ACCEPT +-A limit-3874 -j DROP +-A limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3875 -j RETURN +-A limit-3875 -j DROP +-A limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3876 -j logaccept-84 +-A limit-3876 -j DROP +-A limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3877 -j logaccept-85 +-A limit-3877 -j DROP +-A limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3878 -j ACCEPT +-A limit-3878 -j DROP +-A limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3879 -j logaccept-86 +-A limit-3879 -j DROP +-A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-208 +-A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3880 -j ACCEPT +-A limit-3880 -m limit --limit 1/second -j LOG +-A limit-3880 -j DROP +-A limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3881 -j RETURN +-A limit-3881 -m limit --limit 1/second -j LOG +-A limit-3881 -j DROP +-A limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3882 -j logaccept-87 +-A limit-3882 -m limit --limit 1/second -j LOG +-A limit-3882 -j DROP +-A limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3883 -j logaccept-88 +-A limit-3883 -m limit --limit 1/second -j LOG +-A limit-3883 -j DROP +-A limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3884 -j ACCEPT +-A limit-3884 -m limit --limit 1/second -j LOG +-A limit-3884 -j DROP +-A limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3885 -j logaccept-89 +-A limit-3885 -m limit --limit 1/second -j LOG +-A limit-3885 -j DROP +-A limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3886 -j ACCEPT +-A limit-3886 -j TEE --gateway fc00::2 +-A limit-3886 -j DROP +-A limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3887 -j RETURN +-A limit-3887 -j TEE --gateway fc00::2 +-A limit-3887 -j DROP +-A limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3888 -j logaccept-90 +-A limit-3888 -j TEE --gateway fc00::2 +-A limit-3888 -j DROP +-A limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3889 -j logaccept-91 +-A limit-3889 -j TEE --gateway fc00::2 +-A limit-3889 -j DROP +-A limit-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-209 +-A limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3890 -j ACCEPT +-A limit-3890 -j TEE --gateway fc00::2 +-A limit-3890 -j DROP +-A limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3891 -j logaccept-92 +-A limit-3891 -j TEE --gateway fc00::2 +-A limit-3891 -j DROP +-A limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3892 -j ACCEPT +-A limit-3892 -j DROP +-A limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3893 -j RETURN +-A limit-3893 -j DROP +-A limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3894 -j logaccept-93 +-A limit-3894 -j DROP +-A limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3895 -j logaccept-94 +-A limit-3895 -j DROP +-A limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3896 -j ACCEPT +-A limit-3896 -j DROP +-A limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3897 -j logaccept-95 +-A limit-3897 -j DROP +-A limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3898 -j ACCEPT +-A limit-3898 -j DROP +-A limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3899 -j RETURN +-A limit-3899 -j DROP +-A limit-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-210 -A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-175 --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-394 -m limit --limit 1/second -j LOG --A limit-394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-396 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-396 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-397 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 --A limit-397 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-398 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 --A limit-398 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-399 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3900 -j logaccept-96 +-A limit-3900 -j DROP +-A limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3901 -j logaccept-97 +-A limit-3901 -j DROP +-A limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3902 -j ACCEPT +-A limit-3902 -j DROP +-A limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3903 -j logaccept-98 +-A limit-3903 -j DROP +-A limit-391 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-211 +-A limit-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-212 +-A limit-392 -m limit --limit 1/second -j LOG +-A limit-392 -j ACCEPT +-A limit-393 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-213 +-A limit-393 -m limit --limit 1/second -j LOG +-A limit-394 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-214 +-A limit-394 -j TEE --gateway fc00::2 +-A limit-394 -j ACCEPT +-A limit-395 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-215 +-A limit-395 -j TEE --gateway fc00::2 +-A limit-396 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-216 +-A limit-396 -j ACCEPT +-A limit-397 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-217 +-A limit-398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-218 +-A limit-398 -j ACCEPT +-A limit-399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-219 -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-4 -j TEE --gateway fc00::2 -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-40 -j ACCEPT --A limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-184 --A limit-400 -j ACCEPT --A limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-185 --A limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-220 +-A limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-221 +-A limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-222 -A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j ACCEPT --A limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 --A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 --A limit-404 -j ACCEPT --A limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 --A limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 --A limit-406 -j ACCEPT --A limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 --A limit-408 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-192 --A limit-408 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-409 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-193 --A limit-409 -m recent --name user:C --rsource --mask fe00:: --set --A limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-410 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-194 --A limit-410 -m limit --limit 1/second -j LOG --A limit-410 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-411 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-195 --A limit-411 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-412 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-196 --A limit-412 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-413 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-197 --A limit-413 -m recent --name user:C --rsource --mask fe00:: --set --A limit-414 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-198 --A limit-414 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-415 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-199 --A limit-416 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-223 +-A limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-224 +-A limit-404 -j TEE --gateway fc00::2 +-A limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-225 +-A limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-226 +-A limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-227 +-A limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-228 +-A limit-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-409 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-410 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-410 -j ACCEPT +-A limit-411 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-412 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-412 -m limit --limit 1/second -j LOG +-A limit-412 -j ACCEPT +-A limit-413 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-413 -m limit --limit 1/second -j LOG +-A limit-414 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-414 -j TEE --gateway fc00::2 +-A limit-414 -j ACCEPT +-A limit-415 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-415 -j TEE --gateway fc00::2 +-A limit-416 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-236 -A limit-416 -j ACCEPT --A limit-417 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-201 --A limit-418 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-202 --A limit-418 -m limit --limit 1/second -j LOG +-A limit-417 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-238 -A limit-418 -j ACCEPT --A limit-419 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-203 --A limit-419 -m limit --limit 1/second -j LOG --A limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-42 -m limit --limit 1/second -j LOG --A limit-42 -j ACCEPT --A limit-420 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-204 --A limit-420 -j ACCEPT --A limit-421 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-205 --A limit-422 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-206 --A limit-422 -j ACCEPT --A limit-423 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-207 --A limit-424 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 --A limit-424 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-425 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 --A limit-425 -m recent --name user:C --rdest --mask fe00:: --set --A limit-426 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 --A limit-426 -m limit --limit 1/second -j LOG --A limit-426 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-427 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-211 --A limit-427 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-428 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-212 --A limit-428 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-429 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-213 --A limit-429 -m recent --name user:C --rdest --mask fe00:: --set --A limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-43 -m limit --limit 1/second -j LOG --A limit-430 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-214 --A limit-430 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-431 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-215 --A limit-432 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-420 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-420 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-421 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-421 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-422 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-422 -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-423 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-423 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-424 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-424 -j TEE --gateway fc00::2 +-A limit-424 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-425 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-425 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-426 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-426 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-427 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-427 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-428 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-428 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-429 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-430 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-430 -j ACCEPT +-A limit-431 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-432 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-432 -m limit --limit 1/second -j LOG -A limit-432 -j ACCEPT --A limit-433 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-217 --A limit-434 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-218 --A limit-434 -m limit --limit 1/second -j LOG +-A limit-433 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-434 -j TEE --gateway fc00::2 -A limit-434 -j ACCEPT --A limit-435 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-219 --A limit-435 -m limit --limit 1/second -j LOG --A limit-436 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-435 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-435 -j TEE --gateway fc00::2 +-A limit-436 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-256 -A limit-436 -j ACCEPT --A limit-437 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-221 --A limit-438 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-437 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-438 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-258 -A limit-438 -j ACCEPT --A limit-439 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 --A limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-44 -j ACCEPT --A limit-440 -m recent --name limit-440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-440 -m recent --name limit-440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-441 -m recent --name limit-441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-441 -m recent --name limit-441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-442 -m recent --name limit-442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-439 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-44 -j TEE --gateway fc00::2 +-A limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-440 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-440 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-441 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-441 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-442 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-262 -A limit-442 -m limit --limit 1/second -j LOG --A limit-442 -m recent --name limit-442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-443 -m recent --name limit-443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-443 -m recent --name limit-443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-444 -m recent --name limit-444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-444 -m recent --name limit-444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-445 -m recent --name limit-445 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-445 -m recent --name limit-445 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-446 -m recent --name limit-446 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-446 -m recent --name limit-446 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-447 -m recent --name limit-447 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-450 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-455 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-456 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-442 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-443 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-443 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-444 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-264 +-A limit-444 -j TEE --gateway fc00::2 +-A limit-444 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-445 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-445 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-446 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-446 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-447 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-447 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-448 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-448 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-449 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-450 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-450 -j ACCEPT +-A limit-451 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-452 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-452 -m limit --limit 1/second -j LOG +-A limit-452 -j ACCEPT +-A limit-453 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-453 -m limit --limit 1/second -j LOG +-A limit-454 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-454 -j TEE --gateway fc00::2 +-A limit-454 -j ACCEPT +-A limit-455 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-455 -j TEE --gateway fc00::2 +-A limit-456 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 -A limit-456 -j ACCEPT --A limit-457 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-458 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-458 -m limit --limit 1/second -j LOG +-A limit-457 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-458 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-278 -A limit-458 -j ACCEPT --A limit-459 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-459 -m limit --limit 1/second -j LOG --A limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-46 -j ACCEPT --A limit-460 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-460 -j ACCEPT --A limit-461 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-462 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-462 -j ACCEPT --A limit-463 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-464 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-464 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-465 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-465 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-466 -m limit --limit 1/second -j LOG --A limit-466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-472 -j ACCEPT --A limit-473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-474 -m limit --limit 1/second -j LOG --A limit-474 -j ACCEPT --A limit-475 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-475 -m limit --limit 1/second -j LOG --A limit-476 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-476 -j ACCEPT --A limit-477 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-478 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-478 -j ACCEPT --A limit-479 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-48 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-48 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-480 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-480 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-481 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-481 -m recent --name user:C --rsource --mask fe00:: --set --A limit-482 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-459 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-460 -m recent --name limit-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-460 -m recent --name limit-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-461 -m recent --name limit-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-461 -m recent --name limit-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-462 -m recent --name limit-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-462 -m limit --limit 1/second -j LOG +-A limit-462 -m recent --name limit-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-463 -m recent --name limit-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-463 -m recent --name limit-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-464 -j TEE --gateway fc00::2 +-A limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-469 -m recent --name limit-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-472 -m limit --limit 1/second -j LOG +-A limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-474 -j TEE --gateway fc00::2 +-A limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-480 -j ACCEPT +-A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-482 -m limit --limit 1/second -j LOG --A limit-482 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-483 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-483 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-484 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-484 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-485 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-485 -m recent --name user:C --rsource --mask fe00:: --set --A limit-486 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-486 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-487 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-488 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-482 -j ACCEPT +-A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-483 -m limit --limit 1/second -j LOG +-A limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-484 -j TEE --gateway fc00::2 +-A limit-484 -j ACCEPT +-A limit-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-485 -j TEE --gateway fc00::2 +-A limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-486 -j ACCEPT +-A limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-488 -j ACCEPT --A limit-489 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-49 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-49 -m recent --name user:C --rsource --mask fe00:: --set --A limit-490 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-490 -m limit --limit 1/second -j LOG --A limit-490 -j ACCEPT --A limit-491 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-491 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-492 -j ACCEPT --A limit-493 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-494 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-494 -j ACCEPT --A limit-495 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-496 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-496 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-497 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-497 -m recent --name user:C --rdest --mask fe00:: --set --A limit-498 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-498 -m limit --limit 1/second -j LOG --A limit-498 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-499 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-499 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-49 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-492 -m limit --limit 1/second -j LOG +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-494 -j TEE --gateway fc00::2 +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 --A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-50 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-500 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-500 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-501 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-501 -m recent --name user:C --rdest --mask fe00:: --set --A limit-502 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-502 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-503 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-504 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-50 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-50 -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-500 -j ACCEPT +-A limit-501 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-502 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-502 -m limit --limit 1/second -j LOG +-A limit-502 -j ACCEPT +-A limit-503 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-503 -m limit --limit 1/second -j LOG +-A limit-504 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-504 -j TEE --gateway fc00::2 -A limit-504 -j ACCEPT --A limit-505 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-506 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-506 -m limit --limit 1/second -j LOG +-A limit-505 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-505 -j TEE --gateway fc00::2 +-A limit-506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-506 -j ACCEPT --A limit-507 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-507 -m limit --limit 1/second -j LOG --A limit-508 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-507 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-508 -j ACCEPT --A limit-509 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-51 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-51 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-510 -j ACCEPT --A limit-511 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-512 -m recent --name limit-512 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-224 --A limit-512 -m recent --name limit-512 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-513 -m recent --name limit-513 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-225 --A limit-513 -m recent --name limit-513 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-514 -m recent --name limit-514 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-226 --A limit-514 -m limit --limit 1/second -j LOG --A limit-514 -m recent --name limit-514 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-515 -m recent --name limit-515 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-227 --A limit-515 -m recent --name limit-515 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-516 -m recent --name limit-516 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-228 --A limit-516 -m recent --name limit-516 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-517 -m recent --name limit-517 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-229 --A limit-517 -m recent --name limit-517 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-518 -m recent --name limit-518 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-230 --A limit-518 -m recent --name limit-518 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-519 -m recent --name limit-519 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-231 --A limit-52 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-52 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-232 --A limit-520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-521 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-233 --A limit-521 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-522 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-234 +-A limit-509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-51 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-510 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-510 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-511 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-511 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-512 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-512 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-513 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-513 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-514 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-514 -j TEE --gateway fc00::2 +-A limit-514 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-515 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-515 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-516 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-516 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-517 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-517 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-518 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-518 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-519 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-52 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-52 -m limit --limit 1/second -j LOG +-A limit-52 -j ACCEPT +-A limit-520 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-520 -j ACCEPT +-A limit-521 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-522 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-522 -m limit --limit 1/second -j LOG --A limit-522 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-523 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-235 --A limit-523 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-524 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-236 --A limit-524 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-525 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-237 --A limit-525 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-526 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-238 --A limit-526 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-527 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-239 --A limit-528 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-240 +-A limit-522 -j ACCEPT +-A limit-523 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-524 -j TEE --gateway fc00::2 +-A limit-524 -j ACCEPT +-A limit-525 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-525 -j TEE --gateway fc00::2 +-A limit-526 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-526 -j ACCEPT +-A limit-527 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-528 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-528 -j ACCEPT --A limit-529 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-241 --A limit-53 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-53 -m recent --name user:C --rsource --mask fe00:: --set --A limit-530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-242 --A limit-530 -m limit --limit 1/second -j LOG --A limit-530 -j ACCEPT --A limit-531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-243 --A limit-531 -m limit --limit 1/second -j LOG --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-244 --A limit-532 -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-245 --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-246 --A limit-534 -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-247 --A limit-536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-248 --A limit-536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-249 --A limit-537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-250 --A limit-538 -m limit --limit 1/second -j LOG --A limit-538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-251 --A limit-539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-54 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-54 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-252 --A limit-540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-541 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-253 --A limit-541 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-254 --A limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-255 --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-256 +-A limit-529 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-53 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-53 -m limit --limit 1/second -j LOG +-A limit-530 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-530 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-531 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-531 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-532 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-532 -m limit --limit 1/second -j LOG +-A limit-532 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-533 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-533 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-534 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-534 -j TEE --gateway fc00::2 +-A limit-534 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-535 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-535 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-536 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-536 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-537 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-537 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-538 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-54 -j TEE --gateway fc00::2 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-540 -j ACCEPT +-A limit-541 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-542 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-542 -m limit --limit 1/second -j LOG +-A limit-542 -j ACCEPT +-A limit-543 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-543 -m limit --limit 1/second -j LOG +-A limit-544 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-544 -j TEE --gateway fc00::2 -A limit-544 -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-257 --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-258 --A limit-546 -m limit --limit 1/second -j LOG +-A limit-545 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-545 -j TEE --gateway fc00::2 +-A limit-546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-546 -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-259 --A limit-547 -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-260 +-A limit-547 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-548 -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-261 --A limit-55 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-262 --A limit-550 -j ACCEPT --A limit-551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-263 --A limit-552 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-264 --A limit-552 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-553 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-265 --A limit-553 -m recent --name user:C --rsource --mask fe00:: --set --A limit-554 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-266 --A limit-554 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-555 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-267 --A limit-555 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-268 --A limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-269 --A limit-557 -m recent --name user:C --rsource --mask fe00:: --set --A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-270 --A limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-271 --A limit-56 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-55 -j TEE --gateway fc00::2 +-A limit-550 -m recent --name limit-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-280 +-A limit-550 -m recent --name limit-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-551 -m recent --name limit-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-281 +-A limit-551 -m recent --name limit-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-552 -m recent --name limit-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-282 +-A limit-552 -m limit --limit 1/second -j LOG +-A limit-552 -m recent --name limit-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-553 -m recent --name limit-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-283 +-A limit-553 -m recent --name limit-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-284 +-A limit-554 -j TEE --gateway fc00::2 +-A limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-285 +-A limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-286 +-A limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-287 +-A limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-288 +-A limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-559 -m recent --name limit-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-272 --A limit-560 -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-273 --A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-274 +-A limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 -A limit-562 -m limit --limit 1/second -j LOG --A limit-562 -j ACCEPT --A limit-563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-275 --A limit-563 -m limit --limit 1/second -j LOG --A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-276 --A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-277 --A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-278 --A limit-566 -j ACCEPT --A limit-567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-279 --A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-280 --A limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-281 --A limit-569 -m recent --name user:C --rdest --mask fe00:: --set --A limit-57 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-282 --A limit-570 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-283 --A limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-284 --A limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-285 --A limit-573 -m recent --name user:C --rdest --mask fe00:: --set --A limit-574 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-286 --A limit-574 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-575 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-287 --A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-288 +-A limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-564 -j TEE --gateway fc00::2 +-A limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-570 -j ACCEPT +-A limit-571 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-572 -m limit --limit 1/second -j LOG +-A limit-572 -j ACCEPT +-A limit-573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-573 -m limit --limit 1/second -j LOG +-A limit-574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-574 -j TEE --gateway fc00::2 +-A limit-574 -j ACCEPT +-A limit-575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-575 -j TEE --gateway fc00::2 +-A limit-576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 -A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-289 --A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-290 --A limit-578 -m limit --limit 1/second -j LOG +-A limit-577 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-308 -A limit-578 -j ACCEPT --A limit-579 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-291 --A limit-579 -m limit --limit 1/second -j LOG --A limit-58 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-58 -m limit --limit 1/second -j LOG +-A limit-579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-58 -j ACCEPT --A limit-580 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-292 --A limit-580 -j ACCEPT --A limit-581 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-293 --A limit-582 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-294 --A limit-582 -j ACCEPT --A limit-583 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-295 --A limit-584 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-584 -j ACCEPT --A limit-584 -m limit --limit 1/second -j LOG --A limit-584 -j DROP --A limit-585 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-585 -j RETURN --A limit-585 -m limit --limit 1/second -j LOG --A limit-585 -j DROP --A limit-586 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-586 -j logaccept-0 --A limit-586 -m limit --limit 1/second -j LOG --A limit-586 -j DROP --A limit-587 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-587 -j ACCEPT --A limit-587 -m limit --limit 1/second -j LOG --A limit-587 -j DROP --A limit-588 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-588 -j logaccept-1 --A limit-588 -m limit --limit 1/second -j LOG --A limit-588 -j DROP --A limit-589 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-589 -j ACCEPT --A limit-589 -j DROP --A limit-59 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-59 -m limit --limit 1/second -j LOG --A limit-590 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-590 -j RETURN --A limit-590 -j DROP --A limit-591 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-591 -j logaccept-2 --A limit-591 -j DROP --A limit-592 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-592 -j ACCEPT --A limit-592 -j DROP --A limit-593 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-593 -j logaccept-3 --A limit-593 -j DROP --A limit-594 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-594 -j ACCEPT --A limit-594 -m limit --limit 1/second -j LOG --A limit-594 -j DROP --A limit-595 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-595 -j RETURN --A limit-595 -m limit --limit 1/second -j LOG --A limit-595 -j DROP --A limit-596 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-596 -j logaccept-4 --A limit-596 -m limit --limit 1/second -j LOG --A limit-596 -j DROP --A limit-597 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-597 -j ACCEPT --A limit-597 -m limit --limit 1/second -j LOG --A limit-597 -j DROP --A limit-598 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-598 -j logaccept-5 --A limit-598 -m limit --limit 1/second -j LOG --A limit-598 -j DROP --A limit-599 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-599 -j ACCEPT --A limit-599 -j DROP +-A limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-582 -m limit --limit 1/second -j LOG +-A limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-584 -j TEE --gateway fc00::2 +-A limit-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-318 +-A limit-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-590 -j ACCEPT +-A limit-591 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-592 -m limit --limit 1/second -j LOG +-A limit-592 -j ACCEPT +-A limit-593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-593 -m limit --limit 1/second -j LOG +-A limit-594 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-594 -j TEE --gateway fc00::2 +-A limit-594 -j ACCEPT +-A limit-595 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-595 -j TEE --gateway fc00::2 +-A limit-596 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-596 -j ACCEPT +-A limit-597 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-598 -j ACCEPT +-A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-329 -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-60 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-60 -j ACCEPT --A limit-600 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-600 -j RETURN --A limit-600 -j DROP --A limit-601 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-601 -j logaccept-6 --A limit-601 -j DROP --A limit-602 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-602 -j ACCEPT --A limit-602 -j DROP --A limit-603 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-603 -j logaccept-7 --A limit-603 -j DROP --A limit-604 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-604 -j ACCEPT --A limit-604 -j DROP --A limit-605 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-605 -j RETURN --A limit-605 -j DROP --A limit-606 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-606 -j logaccept-8 --A limit-606 -j DROP --A limit-607 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-607 -j ACCEPT --A limit-607 -j DROP --A limit-608 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-608 -j logaccept-9 --A limit-608 -j DROP --A limit-609 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-609 -j ACCEPT --A limit-609 -j DROP --A limit-61 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-610 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-610 -j RETURN --A limit-610 -j DROP --A limit-611 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-611 -j logaccept-10 --A limit-611 -j DROP --A limit-612 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-612 -j ACCEPT --A limit-612 -j DROP --A limit-613 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-613 -j logaccept-11 --A limit-613 -j DROP --A limit-614 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-614 -j ACCEPT --A limit-614 -m limit --limit 1/second -j LOG --A limit-614 -j DROP --A limit-615 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-615 -j RETURN --A limit-615 -m limit --limit 1/second -j LOG --A limit-615 -j DROP --A limit-616 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-616 -j logaccept-12 --A limit-616 -m limit --limit 1/second -j LOG --A limit-616 -j DROP --A limit-617 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-617 -j ACCEPT --A limit-617 -m limit --limit 1/second -j LOG --A limit-617 -j DROP --A limit-618 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-618 -j logaccept-13 --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j DROP --A limit-619 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-619 -j ACCEPT --A limit-619 -j DROP --A limit-62 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-62 -j ACCEPT --A limit-620 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-620 -j RETURN --A limit-620 -j DROP --A limit-621 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-621 -j logaccept-14 --A limit-621 -j DROP --A limit-622 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-622 -j ACCEPT --A limit-622 -j DROP --A limit-623 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-623 -j logaccept-15 --A limit-623 -j DROP --A limit-624 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-624 -j ACCEPT --A limit-624 -j DROP --A limit-625 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-625 -j RETURN --A limit-625 -j DROP --A limit-626 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-626 -j logaccept-16 --A limit-626 -j DROP --A limit-627 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-627 -j ACCEPT --A limit-627 -j DROP --A limit-628 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-628 -j logaccept-17 --A limit-628 -j DROP --A limit-629 -m recent --name limit-629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-296 --A limit-629 -m recent --name limit-629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-63 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-630 -m recent --name limit-630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-297 --A limit-630 -m recent --name limit-630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-631 -m recent --name limit-631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-298 --A limit-631 -m limit --limit 1/second -j LOG --A limit-631 -m recent --name limit-631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-632 -m recent --name limit-632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-299 --A limit-632 -m recent --name limit-632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-633 -m recent --name limit-633 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-300 --A limit-633 -m recent --name limit-633 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-301 --A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-302 --A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-303 --A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-639 -m limit --limit 1/second -j LOG --A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-64 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-64 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-647 -m limit --limit 1/second -j LOG --A limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-65 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-65 -m recent --name user:C --rdest --mask fe00:: --set --A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-653 -j ACCEPT --A limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-655 -m limit --limit 1/second -j LOG --A limit-655 -j ACCEPT --A limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-656 -m limit --limit 1/second -j LOG --A limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-657 -j ACCEPT --A limit-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-659 -j ACCEPT --A limit-66 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m limit --limit 1/second -j LOG --A limit-66 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-330 +-A limit-600 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-601 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-602 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-602 -m limit --limit 1/second -j LOG +-A limit-602 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-603 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-603 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-604 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-604 -j TEE --gateway fc00::2 +-A limit-604 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-605 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-605 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-606 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-606 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-607 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-607 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-608 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-338 +-A limit-608 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-609 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-61 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-610 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-610 -j ACCEPT +-A limit-611 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-612 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A limit-612 -m limit --limit 1/second -j LOG +-A limit-612 -j ACCEPT +-A limit-613 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-343 +-A limit-613 -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-344 +-A limit-614 -j TEE --gateway fc00::2 +-A limit-614 -j ACCEPT +-A limit-615 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-345 +-A limit-615 -j TEE --gateway fc00::2 +-A limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-346 +-A limit-616 -j ACCEPT +-A limit-617 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-347 +-A limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-348 +-A limit-618 -j ACCEPT +-A limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-349 +-A limit-62 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-620 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-350 +-A limit-620 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-621 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-351 +-A limit-621 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-352 +-A limit-622 -m limit --limit 1/second -j LOG +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-353 +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-354 +-A limit-624 -j TEE --gateway fc00::2 +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-355 +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-356 +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-357 +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-628 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-358 +-A limit-628 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-629 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-359 +-A limit-63 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-360 +-A limit-630 -j ACCEPT +-A limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-361 +-A limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-362 +-A limit-632 -m limit --limit 1/second -j LOG +-A limit-632 -j ACCEPT +-A limit-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-363 +-A limit-633 -m limit --limit 1/second -j LOG +-A limit-634 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-364 +-A limit-634 -j TEE --gateway fc00::2 +-A limit-634 -j ACCEPT +-A limit-635 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-365 +-A limit-635 -j TEE --gateway fc00::2 +-A limit-636 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-366 +-A limit-636 -j ACCEPT +-A limit-637 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-367 +-A limit-638 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-368 +-A limit-638 -j ACCEPT +-A limit-639 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-369 +-A limit-64 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -j TEE --gateway fc00::2 +-A limit-64 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-370 +-A limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-371 +-A limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-372 +-A limit-642 -m limit --limit 1/second -j LOG +-A limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-373 +-A limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-374 +-A limit-644 -j TEE --gateway fc00::2 +-A limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-645 -m recent --name limit-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-375 +-A limit-645 -m recent --name limit-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-646 -m recent --name limit-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-376 +-A limit-646 -m recent --name limit-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-647 -m recent --name limit-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-377 +-A limit-647 -m recent --name limit-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-648 -m recent --name limit-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-378 +-A limit-648 -m recent --name limit-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-649 -m recent --name limit-649 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-379 +-A limit-65 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-380 +-A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-381 +-A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-382 +-A limit-652 -m limit --limit 1/second -j LOG +-A limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-383 +-A limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-384 +-A limit-654 -j TEE --gateway fc00::2 +-A limit-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-385 +-A limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-386 +-A limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-387 +-A limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-388 +-A limit-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-389 +-A limit-66 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-390 +-A limit-660 -j ACCEPT +-A limit-661 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-391 +-A limit-662 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-392 +-A limit-662 -m limit --limit 1/second -j LOG +-A limit-662 -j ACCEPT +-A limit-663 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-393 -A limit-663 -m limit --limit 1/second -j LOG --A limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-666 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-666 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-667 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-667 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-668 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-669 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-669 -j ACCEPT --A limit-67 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-671 -m limit --limit 1/second -j LOG --A limit-671 -j ACCEPT --A limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-664 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-394 +-A limit-664 -j TEE --gateway fc00::2 +-A limit-664 -j ACCEPT +-A limit-665 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-395 +-A limit-665 -j TEE --gateway fc00::2 +-A limit-666 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-396 +-A limit-666 -j ACCEPT +-A limit-667 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-397 +-A limit-668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-398 +-A limit-668 -j ACCEPT +-A limit-669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-399 +-A limit-67 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-400 +-A limit-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-401 +-A limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-402 -A limit-672 -m limit --limit 1/second -j LOG --A limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-673 -j ACCEPT --A limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-675 -j ACCEPT --A limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-677 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-677 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-678 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-678 -m recent --name user:C --rsource --mask fe00:: --set --A limit-679 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-679 -m limit --limit 1/second -j LOG --A limit-679 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-68 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-68 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-680 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-680 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-681 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-681 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-682 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-682 -m recent --name user:C --rsource --mask fe00:: --set --A limit-683 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-683 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-684 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-685 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-685 -j ACCEPT --A limit-687 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-687 -m limit --limit 1/second -j LOG --A limit-687 -j ACCEPT --A limit-688 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-688 -m limit --limit 1/second -j LOG --A limit-689 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-689 -j ACCEPT --A limit-69 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name user:C --rdest --mask fe00:: --set --A limit-691 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-691 -j ACCEPT --A limit-692 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-693 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-693 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-694 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-694 -m recent --name user:C --rdest --mask fe00:: --set --A limit-695 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-695 -m limit --limit 1/second -j LOG --A limit-695 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-696 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-696 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-697 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-697 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-698 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-698 -m recent --name user:C --rdest --mask fe00:: --set --A limit-699 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-699 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-674 -j TEE --gateway fc00::2 +-A limit-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-679 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-68 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-68 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-680 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-680 -j ACCEPT +-A limit-681 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-682 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-682 -m limit --limit 1/second -j LOG +-A limit-682 -j ACCEPT +-A limit-683 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-683 -m limit --limit 1/second -j LOG +-A limit-684 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-684 -j TEE --gateway fc00::2 +-A limit-684 -j ACCEPT +-A limit-685 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A limit-685 -j TEE --gateway fc00::2 +-A limit-686 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A limit-686 -j ACCEPT +-A limit-687 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-688 -j ACCEPT +-A limit-689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A limit-69 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-690 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-420 +-A limit-690 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-691 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-691 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-692 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-693 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-693 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-694 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-694 -j TEE --gateway fc00::2 +-A limit-694 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-695 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-695 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-696 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-696 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-697 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-427 +-A limit-697 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-698 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-428 +-A limit-698 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-699 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-429 -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 --A limit-70 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-700 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-701 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-701 -j ACCEPT --A limit-703 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-70 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-70 -j ACCEPT +-A limit-700 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-700 -j ACCEPT +-A limit-701 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A limit-702 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-432 +-A limit-702 -m limit --limit 1/second -j LOG +-A limit-702 -j ACCEPT +-A limit-703 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-433 -A limit-703 -m limit --limit 1/second -j LOG --A limit-703 -j ACCEPT --A limit-704 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-704 -m limit --limit 1/second -j LOG --A limit-705 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-705 -j ACCEPT --A limit-707 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-707 -j ACCEPT --A limit-708 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-709 -m recent --name limit-709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-304 --A limit-709 -m recent --name limit-709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-71 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-710 -m recent --name limit-710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-305 --A limit-710 -m recent --name limit-710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-711 -m recent --name limit-711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-306 --A limit-711 -m limit --limit 1/second -j LOG --A limit-711 -m recent --name limit-711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-712 -m recent --name limit-712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-307 --A limit-712 -m recent --name limit-712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-713 -m recent --name limit-713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-308 --A limit-713 -m recent --name limit-713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-714 -m recent --name limit-714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-309 --A limit-714 -m recent --name limit-714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-715 -m recent --name limit-715 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-310 --A limit-715 -m recent --name limit-715 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-311 --A limit-717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-312 --A limit-717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-313 --A limit-718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-314 --A limit-719 -m limit --limit 1/second -j LOG --A limit-719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-72 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-704 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-704 -j TEE --gateway fc00::2 +-A limit-704 -j ACCEPT +-A limit-705 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-705 -j TEE --gateway fc00::2 +-A limit-706 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-706 -j ACCEPT +-A limit-707 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-708 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-438 +-A limit-708 -j ACCEPT +-A limit-709 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A limit-71 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-710 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-440 +-A limit-710 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-711 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-711 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-712 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-712 -m limit --limit 1/second -j LOG +-A limit-712 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-713 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-443 +-A limit-713 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-714 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-444 +-A limit-714 -j TEE --gateway fc00::2 +-A limit-714 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-715 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-715 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-716 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-716 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-717 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-717 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-718 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-718 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-719 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-72 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -m limit --limit 1/second -j LOG -A limit-72 -j ACCEPT --A limit-720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-315 --A limit-720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-316 --A limit-721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-317 --A limit-722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-318 --A limit-723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-319 --A limit-725 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-320 --A limit-725 -j ACCEPT --A limit-727 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-322 --A limit-727 -m limit --limit 1/second -j LOG --A limit-727 -j ACCEPT --A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-323 --A limit-728 -m limit --limit 1/second -j LOG --A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-324 --A limit-729 -j ACCEPT --A limit-73 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-326 --A limit-731 -j ACCEPT --A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-327 --A limit-733 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-328 --A limit-733 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-734 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-329 --A limit-734 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-735 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-330 --A limit-735 -m limit --limit 1/second -j LOG --A limit-735 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-331 --A limit-736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-332 --A limit-737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-333 --A limit-738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-334 --A limit-739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-74 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-74 -m limit --limit 1/second -j LOG +-A limit-720 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-720 -j ACCEPT +-A limit-721 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A limit-722 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A limit-722 -m limit --limit 1/second -j LOG +-A limit-722 -j ACCEPT +-A limit-723 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-723 -m limit --limit 1/second -j LOG +-A limit-724 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-724 -j TEE --gateway fc00::2 +-A limit-724 -j ACCEPT +-A limit-725 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A limit-725 -j TEE --gateway fc00::2 +-A limit-726 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-456 +-A limit-726 -j ACCEPT +-A limit-727 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-457 +-A limit-728 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-458 +-A limit-728 -j ACCEPT +-A limit-729 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-459 +-A limit-73 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-73 -m limit --limit 1/second -j LOG +-A limit-730 -m recent --name limit-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-730 -m recent --name limit-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-731 -m recent --name limit-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-731 -m recent --name limit-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-732 -m recent --name limit-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-732 -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name limit-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-733 -m recent --name limit-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-733 -m recent --name limit-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-734 -m recent --name limit-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-734 -j TEE --gateway fc00::2 +-A limit-734 -m recent --name limit-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-735 -m recent --name limit-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-735 -m recent --name limit-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-736 -m recent --name limit-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-736 -m recent --name limit-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-737 -m recent --name limit-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-737 -m recent --name limit-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-738 -m recent --name limit-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-738 -m recent --name limit-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-739 -m recent --name limit-739 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-74 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-74 -j TEE --gateway fc00::2 -A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-335 --A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-336 --A limit-741 -j ACCEPT --A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-338 --A limit-743 -m limit --limit 1/second -j LOG --A limit-743 -j ACCEPT --A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-339 --A limit-744 -m limit --limit 1/second -j LOG --A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-340 --A limit-745 -j ACCEPT --A limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-342 --A limit-747 -j ACCEPT --A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-343 --A limit-749 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-344 --A limit-749 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-75 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-345 --A limit-750 -m recent --name user:C --rsource --mask fe00:: --set --A limit-751 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-346 --A limit-751 -m limit --limit 1/second -j LOG --A limit-751 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-347 --A limit-752 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-348 --A limit-753 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-349 --A limit-754 -m recent --name user:C --rsource --mask fe00:: --set --A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-350 --A limit-755 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-351 --A limit-757 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-352 --A limit-757 -j ACCEPT --A limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-354 --A limit-759 -m limit --limit 1/second -j LOG --A limit-759 -j ACCEPT --A limit-76 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-742 -m limit --limit 1/second -j LOG +-A limit-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-744 -j TEE --gateway fc00::2 +-A limit-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-749 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-75 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -j TEE --gateway fc00::2 +-A limit-750 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-750 -j ACCEPT +-A limit-751 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-752 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-752 -m limit --limit 1/second -j LOG +-A limit-752 -j ACCEPT +-A limit-753 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-753 -m limit --limit 1/second -j LOG +-A limit-754 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-754 -j TEE --gateway fc00::2 +-A limit-754 -j ACCEPT +-A limit-755 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-755 -j TEE --gateway fc00::2 +-A limit-756 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-756 -j ACCEPT +-A limit-757 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-758 -j ACCEPT +-A limit-759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-76 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-355 --A limit-760 -m limit --limit 1/second -j LOG --A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-356 --A limit-761 -j ACCEPT --A limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-358 --A limit-763 -j ACCEPT --A limit-764 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-359 --A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-360 --A limit-765 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-361 --A limit-766 -m recent --name user:C --rdest --mask fe00:: --set --A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-362 --A limit-767 -m limit --limit 1/second -j LOG --A limit-767 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-363 --A limit-768 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-364 --A limit-769 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-77 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-365 --A limit-770 -m recent --name user:C --rdest --mask fe00:: --set --A limit-771 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-366 --A limit-771 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-772 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-367 --A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-368 --A limit-773 -j ACCEPT --A limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-370 --A limit-775 -m limit --limit 1/second -j LOG --A limit-775 -j ACCEPT --A limit-776 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-371 --A limit-776 -m limit --limit 1/second -j LOG --A limit-777 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-372 --A limit-777 -j ACCEPT --A limit-779 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-374 --A limit-779 -j ACCEPT --A limit-78 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-762 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-764 -j TEE --gateway fc00::2 +-A limit-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-769 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-77 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-770 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-770 -j ACCEPT +-A limit-771 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-772 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-772 -m limit --limit 1/second -j LOG +-A limit-772 -j ACCEPT +-A limit-773 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-774 -j TEE --gateway fc00::2 +-A limit-774 -j ACCEPT +-A limit-775 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-775 -j TEE --gateway fc00::2 +-A limit-776 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-776 -j ACCEPT +-A limit-777 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-778 -j ACCEPT +-A limit-779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-78 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-78 -j ACCEPT --A limit-780 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-375 --A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-782 -m recent --name limit-782 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-782 -m recent --name limit-782 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-783 -m recent --name limit-783 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-783 -m limit --limit 1/second -j LOG --A limit-783 -m recent --name limit-783 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-784 -m recent --name limit-784 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-784 -m recent --name limit-784 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-785 -m recent --name limit-785 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-785 -m recent --name limit-785 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-786 -m recent --name limit-786 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-786 -m recent --name limit-786 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-787 -m recent --name limit-787 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-787 -m recent --name limit-787 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-788 -m recent --name limit-788 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-79 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-791 -m limit --limit 1/second -j LOG --A limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-794 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-795 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-795 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-796 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-797 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-797 -j ACCEPT --A limit-799 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-799 -m limit --limit 1/second -j LOG --A limit-799 -j ACCEPT --A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-780 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-781 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-781 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-782 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-782 -m limit --limit 1/second -j LOG +-A limit-782 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-783 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-783 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-784 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-784 -j TEE --gateway fc00::2 +-A limit-784 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-785 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-785 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-786 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-786 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-787 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-787 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-788 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-788 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-789 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-79 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-790 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-790 -j ACCEPT +-A limit-791 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-792 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-792 -m limit --limit 1/second -j LOG +-A limit-792 -j ACCEPT +-A limit-793 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-793 -m limit --limit 1/second -j LOG +-A limit-794 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-794 -j TEE --gateway fc00::2 +-A limit-794 -j ACCEPT +-A limit-795 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-795 -j TEE --gateway fc00::2 +-A limit-796 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-796 -j ACCEPT +-A limit-797 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-798 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-798 -j ACCEPT +-A limit-799 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-80 -m recent --name limit-80 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 --A limit-80 -m recent --name limit-80 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-800 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-800 -m limit --limit 1/second -j LOG --A limit-801 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-801 -j ACCEPT --A limit-803 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -j ACCEPT --A limit-804 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-807 -m limit --limit 1/second -j LOG --A limit-807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-81 -m recent --name limit-81 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 --A limit-81 -m recent --name limit-81 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-811 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-811 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-812 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-813 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-813 -j ACCEPT --A limit-815 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m limit --limit 1/second -j LOG --A limit-815 -j ACCEPT --A limit-816 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-816 -m limit --limit 1/second -j LOG --A limit-817 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-817 -j ACCEPT --A limit-819 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-819 -j ACCEPT --A limit-82 -m recent --name limit-82 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-80 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-800 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-800 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-801 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-801 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-802 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-802 -m limit --limit 1/second -j LOG +-A limit-802 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-803 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-803 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-804 -j TEE --gateway fc00::2 +-A limit-804 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-805 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-805 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-806 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-806 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-807 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-807 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-808 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-808 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-809 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-81 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-810 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-810 -j ACCEPT +-A limit-811 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-812 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-812 -m limit --limit 1/second -j LOG +-A limit-812 -j ACCEPT +-A limit-813 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-813 -m limit --limit 1/second -j LOG +-A limit-814 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-814 -j TEE --gateway fc00::2 +-A limit-814 -j ACCEPT +-A limit-815 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-815 -j TEE --gateway fc00::2 +-A limit-816 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-816 -j ACCEPT +-A limit-817 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-818 -j ACCEPT +-A limit-819 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-82 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-82 -m limit --limit 1/second -j LOG --A limit-82 -m recent --name limit-82 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-820 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-821 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-821 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-822 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-822 -m recent --name user:C --rsource --mask fe00:: --set --A limit-823 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-823 -m limit --limit 1/second -j LOG --A limit-823 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-824 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-824 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-825 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-825 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-826 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-826 -m recent --name user:C --rsource --mask fe00:: --set --A limit-827 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-827 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-828 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-829 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-829 -j ACCEPT --A limit-83 -m recent --name limit-83 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 --A limit-83 -m recent --name limit-83 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-831 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-831 -m limit --limit 1/second -j LOG --A limit-831 -j ACCEPT --A limit-832 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-820 -m recent --name limit-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-460 +-A limit-820 -m recent --name limit-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-821 -m recent --name limit-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-461 +-A limit-821 -m recent --name limit-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-822 -m recent --name limit-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-462 +-A limit-822 -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name limit-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-823 -m recent --name limit-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-463 +-A limit-823 -m recent --name limit-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-824 -m recent --name limit-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-464 +-A limit-824 -j TEE --gateway fc00::2 +-A limit-824 -m recent --name limit-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-825 -m recent --name limit-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-465 +-A limit-825 -m recent --name limit-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-826 -m recent --name limit-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-466 +-A limit-826 -m recent --name limit-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-827 -m recent --name limit-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-467 +-A limit-827 -m recent --name limit-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-828 -m recent --name limit-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-468 +-A limit-828 -m recent --name limit-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-829 -m recent --name limit-829 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-469 +-A limit-83 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-470 +-A limit-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-471 +-A limit-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-472 -A limit-832 -m limit --limit 1/second -j LOG --A limit-833 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-833 -j ACCEPT --A limit-835 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-835 -j ACCEPT --A limit-836 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-837 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-837 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-838 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-838 -m recent --name user:C --rdest --mask fe00:: --set --A limit-839 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-839 -m limit --limit 1/second -j LOG --A limit-839 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-84 -m recent --name limit-84 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 --A limit-84 -m recent --name limit-84 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-840 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-840 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-841 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-841 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-842 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-842 -m recent --name user:C --rdest --mask fe00:: --set --A limit-843 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-843 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-844 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-845 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -j ACCEPT --A limit-847 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-847 -m limit --limit 1/second -j LOG --A limit-847 -j ACCEPT --A limit-848 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-848 -m limit --limit 1/second -j LOG --A limit-849 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-849 -j ACCEPT --A limit-85 -m recent --name limit-85 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 --A limit-85 -m recent --name limit-85 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-851 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-851 -j ACCEPT --A limit-852 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-853 -m recent --name limit-853 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-376 --A limit-853 -m recent --name limit-853 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-854 -m recent --name limit-854 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-377 --A limit-854 -m recent --name limit-854 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-855 -m recent --name limit-855 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-378 --A limit-855 -m limit --limit 1/second -j LOG --A limit-855 -m recent --name limit-855 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-856 -m recent --name limit-856 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-379 --A limit-856 -m recent --name limit-856 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-857 -m recent --name limit-857 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-380 --A limit-857 -m recent --name limit-857 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-858 -m recent --name limit-858 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-381 --A limit-858 -m recent --name limit-858 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-859 -m recent --name limit-859 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-382 --A limit-859 -m recent --name limit-859 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-86 -m recent --name limit-86 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 --A limit-86 -m recent --name limit-86 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-860 -m recent --name limit-860 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-383 --A limit-861 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-384 --A limit-861 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-862 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-385 --A limit-862 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-863 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-386 +-A limit-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-473 +-A limit-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-474 +-A limit-834 -j TEE --gateway fc00::2 +-A limit-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-475 +-A limit-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-476 +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-477 +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-478 +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-479 +-A limit-84 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j TEE --gateway fc00::2 +-A limit-84 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-480 +-A limit-840 -j ACCEPT +-A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-481 +-A limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-482 +-A limit-842 -m limit --limit 1/second -j LOG +-A limit-842 -j ACCEPT +-A limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-483 +-A limit-843 -m limit --limit 1/second -j LOG +-A limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-484 +-A limit-844 -j TEE --gateway fc00::2 +-A limit-844 -j ACCEPT +-A limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-485 +-A limit-845 -j TEE --gateway fc00::2 +-A limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-486 +-A limit-846 -j ACCEPT +-A limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-487 +-A limit-848 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-488 +-A limit-848 -j ACCEPT +-A limit-849 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-489 +-A limit-85 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-85 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-490 +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-491 +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-492 +-A limit-852 -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-493 +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-494 +-A limit-854 -j TEE --gateway fc00::2 +-A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-495 +-A limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-496 +-A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-497 +-A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-498 +-A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-499 +-A limit-86 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-860 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-500 +-A limit-860 -j ACCEPT +-A limit-861 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-501 +-A limit-862 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-502 +-A limit-862 -m limit --limit 1/second -j LOG +-A limit-862 -j ACCEPT +-A limit-863 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-503 -A limit-863 -m limit --limit 1/second -j LOG --A limit-863 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-864 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-387 --A limit-864 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-865 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-388 --A limit-865 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-866 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-389 --A limit-866 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-867 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-390 --A limit-867 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-868 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-391 --A limit-869 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-392 --A limit-869 -j ACCEPT --A limit-87 -m recent --name limit-87 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 --A limit-871 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-394 --A limit-871 -m limit --limit 1/second -j LOG --A limit-871 -j ACCEPT --A limit-872 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-864 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-504 +-A limit-864 -j TEE --gateway fc00::2 +-A limit-864 -j ACCEPT +-A limit-865 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-505 +-A limit-865 -j TEE --gateway fc00::2 +-A limit-866 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-506 +-A limit-866 -j ACCEPT +-A limit-867 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-507 +-A limit-868 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-508 +-A limit-868 -j ACCEPT +-A limit-869 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-509 +-A limit-87 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-870 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-510 +-A limit-870 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-871 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-511 +-A limit-871 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-872 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-512 -A limit-872 -m limit --limit 1/second -j LOG --A limit-873 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-396 --A limit-873 -j ACCEPT --A limit-875 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-398 --A limit-875 -j ACCEPT --A limit-876 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-399 --A limit-877 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-400 --A limit-877 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-878 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-401 --A limit-878 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-879 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-402 --A limit-879 -m limit --limit 1/second -j LOG --A limit-879 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-88 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 --A limit-88 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-880 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-403 --A limit-880 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-881 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-404 --A limit-881 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-882 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-405 --A limit-882 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-883 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-406 --A limit-883 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-884 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-407 --A limit-885 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-408 --A limit-885 -j ACCEPT --A limit-887 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-410 --A limit-887 -m limit --limit 1/second -j LOG --A limit-887 -j ACCEPT --A limit-888 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-411 --A limit-888 -m limit --limit 1/second -j LOG --A limit-889 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-412 --A limit-889 -j ACCEPT --A limit-89 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 --A limit-89 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-891 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-414 --A limit-891 -j ACCEPT --A limit-892 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-415 --A limit-893 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-416 --A limit-893 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-894 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-417 --A limit-894 -m recent --name user:C --rsource --mask fe00:: --set --A limit-895 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-418 --A limit-895 -m limit --limit 1/second -j LOG --A limit-895 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-896 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-419 --A limit-896 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-897 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-420 --A limit-897 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-898 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-421 --A limit-898 -m recent --name user:C --rsource --mask fe00:: --set --A limit-899 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-422 --A limit-899 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-90 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 --A limit-90 -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-900 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-423 --A limit-901 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-424 --A limit-901 -j ACCEPT --A limit-903 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-426 +-A limit-872 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-873 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-513 +-A limit-873 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-874 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-514 +-A limit-874 -j TEE --gateway fc00::2 +-A limit-874 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-875 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-515 +-A limit-875 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-876 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-516 +-A limit-876 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-877 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-517 +-A limit-877 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-878 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-518 +-A limit-878 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-879 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-519 +-A limit-88 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-88 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-880 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-520 +-A limit-880 -j ACCEPT +-A limit-881 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-521 +-A limit-882 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-522 +-A limit-882 -m limit --limit 1/second -j LOG +-A limit-882 -j ACCEPT +-A limit-883 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-523 +-A limit-883 -m limit --limit 1/second -j LOG +-A limit-884 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-524 +-A limit-884 -j TEE --gateway fc00::2 +-A limit-884 -j ACCEPT +-A limit-885 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-525 +-A limit-885 -j TEE --gateway fc00::2 +-A limit-886 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-526 +-A limit-886 -j ACCEPT +-A limit-887 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-527 +-A limit-888 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-528 +-A limit-888 -j ACCEPT +-A limit-889 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-529 +-A limit-89 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-890 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-530 +-A limit-890 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-891 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-531 +-A limit-891 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-892 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-532 +-A limit-892 -m limit --limit 1/second -j LOG +-A limit-892 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-893 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-533 +-A limit-893 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-534 +-A limit-894 -j TEE --gateway fc00::2 +-A limit-894 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-895 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-535 +-A limit-895 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-896 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-536 +-A limit-896 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-897 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-537 +-A limit-897 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-898 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-538 +-A limit-898 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-899 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-539 +-A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-90 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-90 -j ACCEPT +-A limit-900 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-540 +-A limit-900 -j ACCEPT +-A limit-901 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-541 +-A limit-902 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-542 +-A limit-902 -m limit --limit 1/second -j LOG +-A limit-902 -j ACCEPT +-A limit-903 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-543 -A limit-903 -m limit --limit 1/second -j LOG --A limit-903 -j ACCEPT --A limit-904 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-427 --A limit-904 -m limit --limit 1/second -j LOG --A limit-905 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-428 --A limit-905 -j ACCEPT --A limit-907 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-430 --A limit-907 -j ACCEPT --A limit-908 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-431 --A limit-909 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-432 --A limit-909 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-91 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-19 --A limit-91 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-910 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-433 --A limit-910 -m recent --name user:C --rdest --mask fe00:: --set --A limit-911 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-434 +-A limit-904 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-544 +-A limit-904 -j TEE --gateway fc00::2 +-A limit-904 -j ACCEPT +-A limit-905 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-545 +-A limit-905 -j TEE --gateway fc00::2 +-A limit-906 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-546 +-A limit-906 -j ACCEPT +-A limit-907 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-547 +-A limit-908 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-548 +-A limit-908 -j ACCEPT +-A limit-909 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-549 +-A limit-91 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-910 -j ACCEPT +-A limit-910 -m limit --limit 1/second -j LOG +-A limit-910 -j DROP +-A limit-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-911 -j RETURN -A limit-911 -m limit --limit 1/second -j LOG --A limit-911 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-912 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-435 --A limit-912 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-913 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-436 --A limit-913 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-914 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-437 --A limit-914 -m recent --name user:C --rdest --mask fe00:: --set --A limit-915 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-438 --A limit-915 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-916 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-439 --A limit-917 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-440 --A limit-917 -j ACCEPT --A limit-919 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-442 --A limit-919 -m limit --limit 1/second -j LOG --A limit-919 -j ACCEPT --A limit-92 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-20 --A limit-92 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-920 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-443 --A limit-920 -m limit --limit 1/second -j LOG --A limit-921 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-444 --A limit-921 -j ACCEPT --A limit-923 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-446 --A limit-923 -j ACCEPT --A limit-924 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-447 --A limit-925 -m recent --name limit-925 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-925 -m recent --name limit-925 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-926 -m recent --name limit-926 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-926 -m recent --name limit-926 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-927 -m recent --name limit-927 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-911 -j DROP +-A limit-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-912 -j logaccept-0 +-A limit-912 -m limit --limit 1/second -j LOG +-A limit-912 -j DROP +-A limit-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-913 -j logaccept-1 +-A limit-913 -m limit --limit 1/second -j LOG +-A limit-913 -j DROP +-A limit-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-914 -j ACCEPT +-A limit-914 -m limit --limit 1/second -j LOG +-A limit-914 -j DROP +-A limit-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-915 -j logaccept-2 +-A limit-915 -m limit --limit 1/second -j LOG +-A limit-915 -j DROP +-A limit-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-916 -j ACCEPT +-A limit-916 -j DROP +-A limit-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-917 -j RETURN +-A limit-917 -j DROP +-A limit-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-918 -j logaccept-3 +-A limit-918 -j DROP +-A limit-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-919 -j logaccept-4 +-A limit-919 -j DROP +-A limit-92 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-92 -m limit --limit 1/second -j LOG +-A limit-92 -j ACCEPT +-A limit-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-920 -j ACCEPT +-A limit-920 -j DROP +-A limit-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-921 -j logaccept-5 +-A limit-921 -j DROP +-A limit-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-922 -j ACCEPT +-A limit-922 -m limit --limit 1/second -j LOG +-A limit-922 -j DROP +-A limit-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-923 -j RETURN +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-923 -j DROP +-A limit-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-924 -j logaccept-6 +-A limit-924 -m limit --limit 1/second -j LOG +-A limit-924 -j DROP +-A limit-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-925 -j logaccept-7 +-A limit-925 -m limit --limit 1/second -j LOG +-A limit-925 -j DROP +-A limit-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-926 -j ACCEPT +-A limit-926 -m limit --limit 1/second -j LOG +-A limit-926 -j DROP +-A limit-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-927 -j logaccept-8 -A limit-927 -m limit --limit 1/second -j LOG --A limit-927 -m recent --name limit-927 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-928 -m recent --name limit-928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-928 -m recent --name limit-928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-929 -m recent --name limit-929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-929 -m recent --name limit-929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-93 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-21 --A limit-93 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-930 -m recent --name limit-930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-930 -m recent --name limit-930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-931 -m recent --name limit-931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-931 -m recent --name limit-931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-932 -m recent --name limit-932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-933 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-933 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-934 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-934 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-935 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-935 -m limit --limit 1/second -j LOG --A limit-935 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-936 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-936 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-937 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-937 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-938 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-938 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-939 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-939 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-94 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-22 --A limit-94 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-940 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-941 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-941 -j ACCEPT --A limit-943 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-943 -m limit --limit 1/second -j LOG --A limit-943 -j ACCEPT --A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-944 -m limit --limit 1/second -j LOG --A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-945 -j ACCEPT --A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-947 -j ACCEPT --A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-949 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-949 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-95 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-23 --A limit-950 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-950 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-951 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-951 -m limit --limit 1/second -j LOG --A limit-951 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-952 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-952 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-953 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-953 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-954 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-954 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-955 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-955 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-957 -j ACCEPT --A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-959 -m limit --limit 1/second -j LOG --A limit-959 -j ACCEPT --A limit-96 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-927 -j DROP +-A limit-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-928 -j ACCEPT +-A limit-928 -j TEE --gateway fc00::2 +-A limit-928 -j DROP +-A limit-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-929 -j RETURN +-A limit-929 -j TEE --gateway fc00::2 +-A limit-929 -j DROP +-A limit-93 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m limit --limit 1/second -j LOG +-A limit-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-930 -j logaccept-9 +-A limit-930 -j TEE --gateway fc00::2 +-A limit-930 -j DROP +-A limit-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-931 -j logaccept-10 +-A limit-931 -j TEE --gateway fc00::2 +-A limit-931 -j DROP +-A limit-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-932 -j ACCEPT +-A limit-932 -j TEE --gateway fc00::2 +-A limit-932 -j DROP +-A limit-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-933 -j logaccept-11 +-A limit-933 -j TEE --gateway fc00::2 +-A limit-933 -j DROP +-A limit-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-934 -j ACCEPT +-A limit-934 -j DROP +-A limit-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-935 -j RETURN +-A limit-935 -j DROP +-A limit-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-936 -j logaccept-12 +-A limit-936 -j DROP +-A limit-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-937 -j logaccept-13 +-A limit-937 -j DROP +-A limit-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-938 -j ACCEPT +-A limit-938 -j DROP +-A limit-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-939 -j logaccept-14 +-A limit-939 -j DROP +-A limit-94 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-94 -j TEE --gateway fc00::2 +-A limit-94 -j ACCEPT +-A limit-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-940 -j ACCEPT +-A limit-940 -j DROP +-A limit-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-941 -j RETURN +-A limit-941 -j DROP +-A limit-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-942 -j logaccept-15 +-A limit-942 -j DROP +-A limit-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-943 -j logaccept-16 +-A limit-943 -j DROP +-A limit-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-944 -j ACCEPT +-A limit-944 -j DROP +-A limit-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-945 -j logaccept-17 +-A limit-945 -j DROP +-A limit-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-946 -j ACCEPT +-A limit-946 -j DROP +-A limit-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-947 -j RETURN +-A limit-947 -j DROP +-A limit-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-948 -j logaccept-18 +-A limit-948 -j DROP +-A limit-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-949 -j logaccept-19 +-A limit-949 -j DROP +-A limit-95 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-95 -j TEE --gateway fc00::2 +-A limit-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-950 -j ACCEPT +-A limit-950 -j DROP +-A limit-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-951 -j logaccept-20 +-A limit-951 -j DROP +-A limit-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-952 -j ACCEPT +-A limit-952 -m limit --limit 1/second -j LOG +-A limit-952 -j DROP +-A limit-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-953 -j RETURN +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-953 -j DROP +-A limit-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-954 -j logaccept-21 +-A limit-954 -m limit --limit 1/second -j LOG +-A limit-954 -j DROP +-A limit-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-955 -j logaccept-22 +-A limit-955 -m limit --limit 1/second -j LOG +-A limit-955 -j DROP +-A limit-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-956 -j ACCEPT +-A limit-956 -m limit --limit 1/second -j LOG +-A limit-956 -j DROP +-A limit-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-957 -j logaccept-23 +-A limit-957 -m limit --limit 1/second -j LOG +-A limit-957 -j DROP +-A limit-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-958 -j ACCEPT +-A limit-958 -j TEE --gateway fc00::2 +-A limit-958 -j DROP +-A limit-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-959 -j RETURN +-A limit-959 -j TEE --gateway fc00::2 +-A limit-959 -j DROP +-A limit-96 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-96 -j ACCEPT --A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-960 -m limit --limit 1/second -j LOG --A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-961 -j ACCEPT --A limit-963 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-963 -j ACCEPT --A limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-965 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-965 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-966 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-966 -m recent --name user:C --rsource --mask fe00:: --set --A limit-967 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-967 -m limit --limit 1/second -j LOG --A limit-967 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-969 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-97 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-25 --A limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-970 -m recent --name user:C --rsource --mask fe00:: --set --A limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-971 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-973 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-973 -j ACCEPT --A limit-975 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-975 -m limit --limit 1/second -j LOG --A limit-975 -j ACCEPT --A limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-976 -m limit --limit 1/second -j LOG --A limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -j ACCEPT --A limit-979 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-979 -j ACCEPT --A limit-98 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-26 --A limit-98 -m limit --limit 1/second -j LOG +-A limit-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-960 -j logaccept-24 +-A limit-960 -j TEE --gateway fc00::2 +-A limit-960 -j DROP +-A limit-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-961 -j logaccept-25 +-A limit-961 -j TEE --gateway fc00::2 +-A limit-961 -j DROP +-A limit-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-962 -j ACCEPT +-A limit-962 -j TEE --gateway fc00::2 +-A limit-962 -j DROP +-A limit-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-963 -j logaccept-26 +-A limit-963 -j TEE --gateway fc00::2 +-A limit-963 -j DROP +-A limit-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-964 -j ACCEPT +-A limit-964 -j DROP +-A limit-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-965 -j RETURN +-A limit-965 -j DROP +-A limit-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-966 -j logaccept-27 +-A limit-966 -j DROP +-A limit-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-967 -j logaccept-28 +-A limit-967 -j DROP +-A limit-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-968 -j ACCEPT +-A limit-968 -j DROP +-A limit-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-969 -j logaccept-29 +-A limit-969 -j DROP +-A limit-97 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-970 -j ACCEPT +-A limit-970 -j DROP +-A limit-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-971 -j RETURN +-A limit-971 -j DROP +-A limit-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-972 -j logaccept-30 +-A limit-972 -j DROP +-A limit-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-973 -j logaccept-31 +-A limit-973 -j DROP +-A limit-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-974 -j ACCEPT +-A limit-974 -j DROP +-A limit-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-975 -j logaccept-32 +-A limit-975 -j DROP +-A limit-976 -m recent --name limit-976 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-550 +-A limit-976 -m recent --name limit-976 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-977 -m recent --name limit-977 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-551 +-A limit-977 -m recent --name limit-977 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-978 -m recent --name limit-978 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-552 +-A limit-978 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name limit-978 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-979 -m recent --name limit-979 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-553 +-A limit-979 -m recent --name limit-979 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-98 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-98 -j ACCEPT --A limit-980 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-981 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-982 -m recent --name user:C --rdest --mask fe00:: --set --A limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-983 -m limit --limit 1/second -j LOG --A limit-983 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-984 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-985 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-986 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-986 -m recent --name user:C --rdest --mask fe00:: --set --A limit-987 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-987 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-988 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -j ACCEPT --A limit-99 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-27 --A limit-99 -m limit --limit 1/second -j LOG --A limit-991 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-991 -m limit --limit 1/second -j LOG --A limit-991 -j ACCEPT --A limit-992 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-992 -m limit --limit 1/second -j LOG --A limit-993 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-993 -j ACCEPT --A limit-995 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-995 -j ACCEPT --A limit-996 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-448 --A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-998 -m recent --name limit-998 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-449 --A limit-998 -m recent --name limit-998 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-999 -m recent --name limit-999 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-450 --A limit-999 -m limit --limit 1/second -j LOG --A limit-999 -m recent --name limit-999 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-980 -m recent --name limit-980 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-554 +-A limit-980 -j TEE --gateway fc00::2 +-A limit-980 -m recent --name limit-980 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-981 -m recent --name limit-981 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-555 +-A limit-981 -m recent --name limit-981 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-982 -m recent --name limit-982 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-556 +-A limit-982 -m recent --name limit-982 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-983 -m recent --name limit-983 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-557 +-A limit-983 -m recent --name limit-983 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-984 -m recent --name limit-984 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-558 +-A limit-984 -m recent --name limit-984 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-985 -m recent --name limit-985 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-559 +-A limit-986 -m recent --name limit-986 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-986 -m recent --name limit-986 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-987 -m recent --name limit-987 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-987 -m recent --name limit-987 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-988 -m recent --name limit-988 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-988 -m limit --limit 1/second -j LOG +-A limit-988 -m recent --name limit-988 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-989 -m recent --name limit-989 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-989 -m recent --name limit-989 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-990 -m recent --name limit-990 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-990 -j TEE --gateway fc00::2 +-A limit-990 -m recent --name limit-990 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-991 -m recent --name limit-991 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-991 -m recent --name limit-991 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-996 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-996 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-997 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-997 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-998 -m limit --limit 1/second -j LOG +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -j TEE --gateway fc00::2 -A logaccept-1 -j ACCEPT --A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j TEE --gateway fc00::2 -A logaccept-10 -j ACCEPT +-A logaccept-100 -j LOG +-A logaccept-100 -j TEE --gateway fc00::1 +-A logaccept-100 -j ACCEPT +-A logaccept-101 -j TEE --gateway fc00::2 +-A logaccept-101 -j ACCEPT +-A logaccept-102 -j ACCEPT -A logaccept-11 -j ACCEPT -A logaccept-12 -m limit --limit 1/second -j LOG -A logaccept-12 -j ACCEPT +-A logaccept-13 -j TEE --gateway fc00::2 -A logaccept-13 -j ACCEPT --A logaccept-14 -m limit --limit 1/second -j LOG -A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG -A logaccept-15 -j ACCEPT --A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j TEE --gateway fc00::2 -A logaccept-16 -j ACCEPT -A logaccept-17 -j ACCEPT -A logaccept-18 -m limit --limit 1/second -j LOG -A logaccept-18 -j ACCEPT +-A logaccept-19 -j TEE --gateway fc00::2 -A logaccept-19 -j ACCEPT --A logaccept-2 -m limit --limit 1/second -j LOG -A logaccept-2 -j ACCEPT --A logaccept-20 -m limit --limit 1/second -j LOG -A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG -A logaccept-21 -j ACCEPT --A logaccept-22 -m limit --limit 1/second -j LOG +-A logaccept-22 -j TEE --gateway fc00::2 -A logaccept-22 -j ACCEPT -A logaccept-23 -j ACCEPT -A logaccept-24 -m limit --limit 1/second -j LOG -A logaccept-24 -j ACCEPT +-A logaccept-25 -j TEE --gateway fc00::2 -A logaccept-25 -j ACCEPT --A logaccept-26 -m limit --limit 1/second -j LOG -A logaccept-26 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG -A logaccept-27 -j ACCEPT --A logaccept-28 -m limit --limit 1/second -j LOG +-A logaccept-28 -j TEE --gateway fc00::2 -A logaccept-28 -j ACCEPT -A logaccept-29 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG -A logaccept-3 -j ACCEPT -A logaccept-30 -m limit --limit 1/second -j LOG -A logaccept-30 -j ACCEPT +-A logaccept-31 -j TEE --gateway fc00::2 -A logaccept-31 -j ACCEPT --A logaccept-32 -m limit --limit 1/second -j LOG -A logaccept-32 -j ACCEPT +-A logaccept-33 -m limit --limit 1/second -j LOG -A logaccept-33 -j ACCEPT --A logaccept-34 -m limit --limit 1/second -j LOG +-A logaccept-34 -j TEE --gateway fc00::2 -A logaccept-34 -j ACCEPT -A logaccept-35 -j ACCEPT -A logaccept-36 -m limit --limit 1/second -j LOG -A logaccept-36 -j ACCEPT +-A logaccept-37 -j TEE --gateway fc00::2 -A logaccept-37 -j ACCEPT --A logaccept-38 -m limit --limit 1/second -j LOG -A logaccept-38 -j ACCEPT +-A logaccept-39 -m limit --limit 1/second -j LOG -A logaccept-39 -j ACCEPT --A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j TEE --gateway fc00::2 -A logaccept-4 -j ACCEPT --A logaccept-40 -m limit --limit 1/second -j LOG +-A logaccept-40 -j TEE --gateway fc00::2 -A logaccept-40 -j ACCEPT -A logaccept-41 -j ACCEPT -A logaccept-42 -m limit --limit 1/second -j LOG -A logaccept-42 -j ACCEPT +-A logaccept-43 -j TEE --gateway fc00::2 -A logaccept-43 -j ACCEPT --A logaccept-44 -m limit --limit 1/second -j LOG -A logaccept-44 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG -A logaccept-45 -j ACCEPT --A logaccept-46 -m limit --limit 1/second -j LOG +-A logaccept-46 -j TEE --gateway fc00::2 -A logaccept-46 -j ACCEPT -A logaccept-47 -j ACCEPT -A logaccept-48 -m limit --limit 1/second -j LOG -A logaccept-48 -j ACCEPT +-A logaccept-49 -j TEE --gateway fc00::2 -A logaccept-49 -j ACCEPT -A logaccept-5 -j ACCEPT --A logaccept-50 -m limit --limit 1/second -j LOG -A logaccept-50 -j ACCEPT +-A logaccept-51 -m limit --limit 1/second -j LOG -A logaccept-51 -j ACCEPT --A logaccept-52 -m limit --limit 1/second -j LOG +-A logaccept-52 -j TEE --gateway fc00::2 -A logaccept-52 -j ACCEPT -A logaccept-53 -j ACCEPT -A logaccept-54 -m limit --limit 1/second -j LOG -A logaccept-54 -j ACCEPT +-A logaccept-55 -j TEE --gateway fc00::2 -A logaccept-55 -j ACCEPT +-A logaccept-56 -j ACCEPT +-A logaccept-57 -m limit --limit 1/second -j LOG +-A logaccept-57 -j ACCEPT +-A logaccept-58 -j TEE --gateway fc00::2 +-A logaccept-58 -j ACCEPT +-A logaccept-59 -j ACCEPT -A logaccept-6 -m limit --limit 1/second -j LOG -A logaccept-6 -j ACCEPT +-A logaccept-60 -m limit --limit 1/second -j LOG +-A logaccept-60 -j ACCEPT +-A logaccept-61 -j TEE --gateway fc00::2 +-A logaccept-61 -j ACCEPT +-A logaccept-62 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-64 -j TEE --gateway fc00::2 +-A logaccept-64 -j ACCEPT +-A logaccept-65 -j ACCEPT +-A logaccept-66 -m limit --limit 1/second -j LOG +-A logaccept-66 -j ACCEPT +-A logaccept-67 -j TEE --gateway fc00::2 +-A logaccept-67 -j ACCEPT +-A logaccept-68 -j ACCEPT +-A logaccept-69 -m limit --limit 1/second -j LOG +-A logaccept-69 -j ACCEPT +-A logaccept-7 -j TEE --gateway fc00::2 -A logaccept-7 -j ACCEPT --A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-70 -j TEE --gateway fc00::2 +-A logaccept-70 -j ACCEPT +-A logaccept-71 -j ACCEPT +-A logaccept-72 -m limit --limit 1/second -j LOG +-A logaccept-72 -j ACCEPT +-A logaccept-73 -j TEE --gateway fc00::2 +-A logaccept-73 -j ACCEPT +-A logaccept-74 -j ACCEPT +-A logaccept-75 -m limit --limit 1/second -j LOG +-A logaccept-75 -j ACCEPT +-A logaccept-76 -j TEE --gateway fc00::2 +-A logaccept-76 -j ACCEPT +-A logaccept-77 -j ACCEPT +-A logaccept-78 -m limit --limit 1/second -j LOG +-A logaccept-78 -j ACCEPT +-A logaccept-79 -j TEE --gateway fc00::2 +-A logaccept-79 -j ACCEPT -A logaccept-8 -j ACCEPT +-A logaccept-80 -j ACCEPT +-A logaccept-81 -m limit --limit 1/second -j LOG +-A logaccept-81 -j ACCEPT +-A logaccept-82 -j TEE --gateway fc00::2 +-A logaccept-82 -j ACCEPT +-A logaccept-83 -j ACCEPT +-A logaccept-84 -m limit --limit 1/second -j LOG +-A logaccept-84 -j ACCEPT +-A logaccept-85 -j TEE --gateway fc00::2 +-A logaccept-85 -j ACCEPT +-A logaccept-86 -j ACCEPT +-A logaccept-87 -m limit --limit 1/second -j LOG +-A logaccept-87 -j ACCEPT +-A logaccept-88 -j TEE --gateway fc00::2 +-A logaccept-88 -j ACCEPT +-A logaccept-89 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT +-A logaccept-90 -m limit --limit 1/second -j LOG +-A logaccept-90 -j ACCEPT +-A logaccept-91 -j TEE --gateway fc00::2 +-A logaccept-91 -j ACCEPT +-A logaccept-92 -j ACCEPT +-A logaccept-93 -m limit --limit 1/second -j LOG +-A logaccept-93 -j ACCEPT +-A logaccept-94 -j TEE --gateway fc00::2 +-A logaccept-94 -j ACCEPT +-A logaccept-95 -j ACCEPT +-A logaccept-96 -m limit --limit 1/second -j LOG +-A logaccept-96 -j ACCEPT +-A logaccept-97 -j TEE --gateway fc00::2 +-A logaccept-97 -j ACCEPT +-A logaccept-98 -j ACCEPT +-A logaccept-99 -m limit --limit 1/second -j LOG +-A logaccept-99 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG -A logaccept-final-0 -j ACCEPT +-A logaccept-final-1 -j TEE --gateway fc00::2 -A logaccept-final-1 -j ACCEPT --A logaccept-final-10 -m limit --limit 1/second -j LOG +-A logaccept-final-10 -j TEE --gateway fc00::2 -A logaccept-final-10 -j ACCEPT --A logaccept-final-100 -m limit --limit 1/second -j LOG +-A logaccept-final-100 -j TEE --gateway fc00::2 -A logaccept-final-100 -j ACCEPT -A logaccept-final-101 -j ACCEPT -A logaccept-final-102 -m limit --limit 1/second -j LOG -A logaccept-final-102 -j ACCEPT +-A logaccept-final-103 -j TEE --gateway fc00::2 -A logaccept-final-103 -j ACCEPT --A logaccept-final-104 -m limit --limit 1/second -j LOG -A logaccept-final-104 -j ACCEPT +-A logaccept-final-105 -m limit --limit 1/second -j LOG -A logaccept-final-105 -j ACCEPT --A logaccept-final-106 -m limit --limit 1/second -j LOG +-A logaccept-final-106 -j TEE --gateway fc00::2 -A logaccept-final-106 -j ACCEPT -A logaccept-final-107 -j ACCEPT -A logaccept-final-108 -m limit --limit 1/second -j LOG -A logaccept-final-108 -j ACCEPT +-A logaccept-final-109 -j TEE --gateway fc00::2 -A logaccept-final-109 -j ACCEPT -A logaccept-final-11 -j ACCEPT --A logaccept-final-110 -m limit --limit 1/second -j LOG -A logaccept-final-110 -j ACCEPT +-A logaccept-final-111 -m limit --limit 1/second -j LOG -A logaccept-final-111 -j ACCEPT --A logaccept-final-112 -m limit --limit 1/second -j LOG +-A logaccept-final-112 -j TEE --gateway fc00::2 -A logaccept-final-112 -j ACCEPT -A logaccept-final-113 -j ACCEPT -A logaccept-final-114 -m limit --limit 1/second -j LOG -A logaccept-final-114 -j ACCEPT +-A logaccept-final-115 -j TEE --gateway fc00::2 -A logaccept-final-115 -j ACCEPT --A logaccept-final-116 -m limit --limit 1/second -j LOG -A logaccept-final-116 -j ACCEPT +-A logaccept-final-117 -m limit --limit 1/second -j LOG -A logaccept-final-117 -j ACCEPT --A logaccept-final-118 -m limit --limit 1/second -j LOG +-A logaccept-final-118 -j TEE --gateway fc00::2 -A logaccept-final-118 -j ACCEPT -A logaccept-final-119 -j ACCEPT -A logaccept-final-12 -m limit --limit 1/second -j LOG -A logaccept-final-12 -j ACCEPT -A logaccept-final-120 -m limit --limit 1/second -j LOG -A logaccept-final-120 -j ACCEPT +-A logaccept-final-121 -j TEE --gateway fc00::2 -A logaccept-final-121 -j ACCEPT --A logaccept-final-122 -m limit --limit 1/second -j LOG -A logaccept-final-122 -j ACCEPT +-A logaccept-final-123 -m limit --limit 1/second -j LOG -A logaccept-final-123 -j ACCEPT --A logaccept-final-124 -m limit --limit 1/second -j LOG +-A logaccept-final-124 -j TEE --gateway fc00::2 -A logaccept-final-124 -j ACCEPT -A logaccept-final-125 -j ACCEPT -A logaccept-final-126 -m limit --limit 1/second -j LOG -A logaccept-final-126 -j ACCEPT +-A logaccept-final-127 -j TEE --gateway fc00::2 -A logaccept-final-127 -j ACCEPT --A logaccept-final-128 -m limit --limit 1/second -j LOG -A logaccept-final-128 -j ACCEPT +-A logaccept-final-129 -m limit --limit 1/second -j LOG -A logaccept-final-129 -j ACCEPT +-A logaccept-final-13 -j TEE --gateway fc00::2 -A logaccept-final-13 -j ACCEPT --A logaccept-final-130 -m limit --limit 1/second -j LOG +-A logaccept-final-130 -j TEE --gateway fc00::2 -A logaccept-final-130 -j ACCEPT -A logaccept-final-131 -j ACCEPT -A logaccept-final-132 -m limit --limit 1/second -j LOG -A logaccept-final-132 -j ACCEPT +-A logaccept-final-133 -j TEE --gateway fc00::2 -A logaccept-final-133 -j ACCEPT --A logaccept-final-134 -m limit --limit 1/second -j LOG -A logaccept-final-134 -j ACCEPT +-A logaccept-final-135 -m limit --limit 1/second -j LOG -A logaccept-final-135 -j ACCEPT --A logaccept-final-136 -m limit --limit 1/second -j LOG +-A logaccept-final-136 -j TEE --gateway fc00::2 -A logaccept-final-136 -j ACCEPT -A logaccept-final-137 -j ACCEPT -A logaccept-final-138 -m limit --limit 1/second -j LOG -A logaccept-final-138 -j ACCEPT +-A logaccept-final-139 -j TEE --gateway fc00::2 -A logaccept-final-139 -j ACCEPT --A logaccept-final-14 -m limit --limit 1/second -j LOG -A logaccept-final-14 -j ACCEPT --A logaccept-final-140 -m limit --limit 1/second -j LOG -A logaccept-final-140 -j ACCEPT +-A logaccept-final-141 -m limit --limit 1/second -j LOG -A logaccept-final-141 -j ACCEPT --A logaccept-final-142 -m limit --limit 1/second -j LOG +-A logaccept-final-142 -j TEE --gateway fc00::2 -A logaccept-final-142 -j ACCEPT -A logaccept-final-143 -j ACCEPT -A logaccept-final-144 -m limit --limit 1/second -j LOG -A logaccept-final-144 -j ACCEPT +-A logaccept-final-145 -j TEE --gateway fc00::2 -A logaccept-final-145 -j ACCEPT --A logaccept-final-146 -m limit --limit 1/second -j LOG -A logaccept-final-146 -j ACCEPT +-A logaccept-final-147 -m limit --limit 1/second -j LOG -A logaccept-final-147 -j ACCEPT --A logaccept-final-148 -m limit --limit 1/second -j LOG +-A logaccept-final-148 -j TEE --gateway fc00::2 -A logaccept-final-148 -j ACCEPT -A logaccept-final-149 -j ACCEPT +-A logaccept-final-15 -m limit --limit 1/second -j LOG -A logaccept-final-15 -j ACCEPT -A logaccept-final-150 -m limit --limit 1/second -j LOG -A logaccept-final-150 -j ACCEPT +-A logaccept-final-151 -j TEE --gateway fc00::2 -A logaccept-final-151 -j ACCEPT --A logaccept-final-152 -m limit --limit 1/second -j LOG -A logaccept-final-152 -j ACCEPT +-A logaccept-final-153 -m limit --limit 1/second -j LOG -A logaccept-final-153 -j ACCEPT --A logaccept-final-154 -m limit --limit 1/second -j LOG +-A logaccept-final-154 -j TEE --gateway fc00::2 -A logaccept-final-154 -j ACCEPT -A logaccept-final-155 -j ACCEPT -A logaccept-final-156 -m limit --limit 1/second -j LOG -A logaccept-final-156 -j ACCEPT +-A logaccept-final-157 -j TEE --gateway fc00::2 -A logaccept-final-157 -j ACCEPT --A logaccept-final-158 -m limit --limit 1/second -j LOG -A logaccept-final-158 -j ACCEPT +-A logaccept-final-159 -m limit --limit 1/second -j LOG -A logaccept-final-159 -j ACCEPT --A logaccept-final-16 -m limit --limit 1/second -j LOG +-A logaccept-final-16 -j TEE --gateway fc00::2 -A logaccept-final-16 -j ACCEPT --A logaccept-final-160 -m limit --limit 1/second -j LOG +-A logaccept-final-160 -j TEE --gateway fc00::2 -A logaccept-final-160 -j ACCEPT -A logaccept-final-161 -j ACCEPT -A logaccept-final-162 -m limit --limit 1/second -j LOG -A logaccept-final-162 -j ACCEPT +-A logaccept-final-163 -j TEE --gateway fc00::2 -A logaccept-final-163 -j ACCEPT +-A logaccept-final-164 -j ACCEPT +-A logaccept-final-165 -m limit --limit 1/second -j LOG +-A logaccept-final-165 -j ACCEPT +-A logaccept-final-166 -j TEE --gateway fc00::2 +-A logaccept-final-166 -j ACCEPT +-A logaccept-final-167 -j ACCEPT +-A logaccept-final-168 -m limit --limit 1/second -j LOG +-A logaccept-final-168 -j ACCEPT +-A logaccept-final-169 -j TEE --gateway fc00::2 +-A logaccept-final-169 -j ACCEPT -A logaccept-final-17 -j ACCEPT +-A logaccept-final-170 -j ACCEPT +-A logaccept-final-171 -m limit --limit 1/second -j LOG +-A logaccept-final-171 -j ACCEPT +-A logaccept-final-172 -j TEE --gateway fc00::2 +-A logaccept-final-172 -j ACCEPT +-A logaccept-final-173 -j ACCEPT +-A logaccept-final-174 -m limit --limit 1/second -j LOG +-A logaccept-final-174 -j ACCEPT +-A logaccept-final-175 -j TEE --gateway fc00::2 +-A logaccept-final-175 -j ACCEPT +-A logaccept-final-176 -j ACCEPT +-A logaccept-final-177 -m limit --limit 1/second -j LOG +-A logaccept-final-177 -j ACCEPT +-A logaccept-final-178 -j TEE --gateway fc00::2 +-A logaccept-final-178 -j ACCEPT +-A logaccept-final-179 -j ACCEPT -A logaccept-final-18 -m limit --limit 1/second -j LOG -A logaccept-final-18 -j ACCEPT +-A logaccept-final-180 -m limit --limit 1/second -j LOG +-A logaccept-final-180 -j ACCEPT +-A logaccept-final-181 -j TEE --gateway fc00::2 +-A logaccept-final-181 -j ACCEPT +-A logaccept-final-182 -j ACCEPT +-A logaccept-final-183 -m limit --limit 1/second -j LOG +-A logaccept-final-183 -j ACCEPT +-A logaccept-final-184 -j TEE --gateway fc00::2 +-A logaccept-final-184 -j ACCEPT +-A logaccept-final-185 -j ACCEPT +-A logaccept-final-186 -m limit --limit 1/second -j LOG +-A logaccept-final-186 -j ACCEPT +-A logaccept-final-187 -j TEE --gateway fc00::2 +-A logaccept-final-187 -j ACCEPT +-A logaccept-final-188 -j ACCEPT +-A logaccept-final-189 -m limit --limit 1/second -j LOG +-A logaccept-final-189 -j ACCEPT +-A logaccept-final-19 -j TEE --gateway fc00::2 -A logaccept-final-19 -j ACCEPT --A logaccept-final-2 -m limit --limit 1/second -j LOG +-A logaccept-final-190 -j TEE --gateway fc00::2 +-A logaccept-final-190 -j ACCEPT +-A logaccept-final-191 -j ACCEPT +-A logaccept-final-192 -m limit --limit 1/second -j LOG +-A logaccept-final-192 -j ACCEPT +-A logaccept-final-193 -j TEE --gateway fc00::2 +-A logaccept-final-193 -j ACCEPT +-A logaccept-final-194 -j ACCEPT +-A logaccept-final-195 -m limit --limit 1/second -j LOG +-A logaccept-final-195 -j ACCEPT +-A logaccept-final-196 -j TEE --gateway fc00::2 +-A logaccept-final-196 -j ACCEPT +-A logaccept-final-197 -j ACCEPT +-A logaccept-final-198 -m limit --limit 1/second -j LOG +-A logaccept-final-198 -j ACCEPT +-A logaccept-final-199 -j TEE --gateway fc00::2 +-A logaccept-final-199 -j ACCEPT -A logaccept-final-2 -j ACCEPT --A logaccept-final-20 -m limit --limit 1/second -j LOG -A logaccept-final-20 -j ACCEPT +-A logaccept-final-200 -j ACCEPT +-A logaccept-final-201 -m limit --limit 1/second -j LOG +-A logaccept-final-201 -j ACCEPT +-A logaccept-final-202 -j TEE --gateway fc00::2 +-A logaccept-final-202 -j ACCEPT +-A logaccept-final-203 -j ACCEPT +-A logaccept-final-204 -m limit --limit 1/second -j LOG +-A logaccept-final-204 -j ACCEPT +-A logaccept-final-205 -j TEE --gateway fc00::2 +-A logaccept-final-205 -j ACCEPT +-A logaccept-final-206 -j ACCEPT +-A logaccept-final-207 -m limit --limit 1/second -j LOG +-A logaccept-final-207 -j ACCEPT +-A logaccept-final-208 -j TEE --gateway fc00::2 +-A logaccept-final-208 -j ACCEPT +-A logaccept-final-209 -j ACCEPT +-A logaccept-final-21 -m limit --limit 1/second -j LOG -A logaccept-final-21 -j ACCEPT --A logaccept-final-22 -m limit --limit 1/second -j LOG +-A logaccept-final-210 -m limit --limit 1/second -j LOG +-A logaccept-final-210 -j ACCEPT +-A logaccept-final-211 -j TEE --gateway fc00::2 +-A logaccept-final-211 -j ACCEPT +-A logaccept-final-212 -j ACCEPT +-A logaccept-final-213 -m limit --limit 1/second -j LOG +-A logaccept-final-213 -j ACCEPT +-A logaccept-final-214 -j TEE --gateway fc00::2 +-A logaccept-final-214 -j ACCEPT +-A logaccept-final-215 -j ACCEPT +-A logaccept-final-216 -m limit --limit 1/second -j LOG +-A logaccept-final-216 -j ACCEPT +-A logaccept-final-217 -j TEE --gateway fc00::2 +-A logaccept-final-217 -j ACCEPT +-A logaccept-final-218 -j ACCEPT +-A logaccept-final-219 -m limit --limit 1/second -j LOG +-A logaccept-final-219 -j ACCEPT +-A logaccept-final-22 -j TEE --gateway fc00::2 -A logaccept-final-22 -j ACCEPT +-A logaccept-final-220 -j TEE --gateway fc00::2 +-A logaccept-final-220 -j ACCEPT +-A logaccept-final-221 -j ACCEPT +-A logaccept-final-222 -m limit --limit 1/second -j LOG +-A logaccept-final-222 -j ACCEPT +-A logaccept-final-223 -j TEE --gateway fc00::2 +-A logaccept-final-223 -j ACCEPT +-A logaccept-final-224 -j ACCEPT +-A logaccept-final-225 -m limit --limit 1/second -j LOG +-A logaccept-final-225 -j ACCEPT +-A logaccept-final-226 -j TEE --gateway fc00::2 +-A logaccept-final-226 -j ACCEPT +-A logaccept-final-227 -j ACCEPT +-A logaccept-final-228 -m limit --limit 1/second -j LOG +-A logaccept-final-228 -j ACCEPT +-A logaccept-final-229 -j TEE --gateway fc00::2 +-A logaccept-final-229 -j ACCEPT -A logaccept-final-23 -j ACCEPT +-A logaccept-final-230 -j ACCEPT +-A logaccept-final-231 -m limit --limit 1/second -j LOG +-A logaccept-final-231 -j ACCEPT +-A logaccept-final-232 -j TEE --gateway fc00::2 +-A logaccept-final-232 -j ACCEPT +-A logaccept-final-233 -j ACCEPT +-A logaccept-final-234 -m limit --limit 1/second -j LOG +-A logaccept-final-234 -j ACCEPT +-A logaccept-final-235 -j TEE --gateway fc00::2 +-A logaccept-final-235 -j ACCEPT +-A logaccept-final-236 -j ACCEPT +-A logaccept-final-237 -m limit --limit 1/second -j LOG +-A logaccept-final-237 -j ACCEPT +-A logaccept-final-238 -j TEE --gateway fc00::2 +-A logaccept-final-238 -j ACCEPT +-A logaccept-final-239 -j ACCEPT -A logaccept-final-24 -m limit --limit 1/second -j LOG -A logaccept-final-24 -j ACCEPT +-A logaccept-final-240 -m limit --limit 1/second -j LOG +-A logaccept-final-240 -j ACCEPT +-A logaccept-final-241 -j TEE --gateway fc00::2 +-A logaccept-final-241 -j ACCEPT +-A logaccept-final-242 -j ACCEPT +-A logaccept-final-243 -m limit --limit 1/second -j LOG +-A logaccept-final-243 -j ACCEPT +-A logaccept-final-244 -j TEE --gateway fc00::2 +-A logaccept-final-244 -j ACCEPT +-A logaccept-final-245 -j ACCEPT +-A logaccept-final-246 -m limit --limit 1/second -j LOG +-A logaccept-final-246 -j ACCEPT +-A logaccept-final-247 -j TEE --gateway fc00::2 +-A logaccept-final-247 -j ACCEPT +-A logaccept-final-248 -j ACCEPT +-A logaccept-final-249 -m limit --limit 1/second -j LOG +-A logaccept-final-249 -j ACCEPT +-A logaccept-final-25 -j TEE --gateway fc00::2 -A logaccept-final-25 -j ACCEPT --A logaccept-final-26 -m limit --limit 1/second -j LOG +-A logaccept-final-250 -j TEE --gateway fc00::2 +-A logaccept-final-250 -j ACCEPT +-A logaccept-final-251 -j ACCEPT +-A logaccept-final-252 -m limit --limit 1/second -j LOG +-A logaccept-final-252 -j ACCEPT +-A logaccept-final-253 -j TEE --gateway fc00::2 +-A logaccept-final-253 -j ACCEPT +-A logaccept-final-254 -j ACCEPT +-A logaccept-final-255 -m limit --limit 1/second -j LOG +-A logaccept-final-255 -j ACCEPT +-A logaccept-final-256 -j TEE --gateway fc00::2 +-A logaccept-final-256 -j ACCEPT +-A logaccept-final-257 -j ACCEPT +-A logaccept-final-258 -m limit --limit 1/second -j LOG +-A logaccept-final-258 -j ACCEPT +-A logaccept-final-259 -j TEE --gateway fc00::2 +-A logaccept-final-259 -j ACCEPT -A logaccept-final-26 -j ACCEPT +-A logaccept-final-260 -j ACCEPT +-A logaccept-final-261 -m limit --limit 1/second -j LOG +-A logaccept-final-261 -j ACCEPT +-A logaccept-final-262 -j TEE --gateway fc00::2 +-A logaccept-final-262 -j ACCEPT +-A logaccept-final-263 -j ACCEPT +-A logaccept-final-264 -m limit --limit 1/second -j LOG +-A logaccept-final-264 -j ACCEPT +-A logaccept-final-265 -j TEE --gateway fc00::2 +-A logaccept-final-265 -j ACCEPT +-A logaccept-final-266 -j ACCEPT +-A logaccept-final-267 -m limit --limit 1/second -j LOG +-A logaccept-final-267 -j ACCEPT +-A logaccept-final-268 -j TEE --gateway fc00::2 +-A logaccept-final-268 -j ACCEPT +-A logaccept-final-269 -j ACCEPT +-A logaccept-final-27 -m limit --limit 1/second -j LOG -A logaccept-final-27 -j ACCEPT --A logaccept-final-28 -m limit --limit 1/second -j LOG +-A logaccept-final-270 -m limit --limit 1/second -j LOG +-A logaccept-final-270 -j ACCEPT +-A logaccept-final-271 -j TEE --gateway fc00::2 +-A logaccept-final-271 -j ACCEPT +-A logaccept-final-272 -j ACCEPT +-A logaccept-final-273 -m limit --limit 1/second -j LOG +-A logaccept-final-273 -j ACCEPT +-A logaccept-final-274 -j TEE --gateway fc00::2 +-A logaccept-final-274 -j ACCEPT +-A logaccept-final-275 -j ACCEPT +-A logaccept-final-276 -m limit --limit 1/second -j LOG +-A logaccept-final-276 -j ACCEPT +-A logaccept-final-277 -j TEE --gateway fc00::2 +-A logaccept-final-277 -j ACCEPT +-A logaccept-final-278 -j ACCEPT +-A logaccept-final-279 -m limit --limit 1/second -j LOG +-A logaccept-final-279 -j ACCEPT +-A logaccept-final-28 -j TEE --gateway fc00::2 -A logaccept-final-28 -j ACCEPT +-A logaccept-final-280 -j TEE --gateway fc00::2 +-A logaccept-final-280 -j ACCEPT +-A logaccept-final-281 -j ACCEPT +-A logaccept-final-282 -m limit --limit 1/second -j LOG +-A logaccept-final-282 -j ACCEPT +-A logaccept-final-283 -j TEE --gateway fc00::2 +-A logaccept-final-283 -j ACCEPT +-A logaccept-final-284 -j ACCEPT +-A logaccept-final-285 -m limit --limit 1/second -j LOG +-A logaccept-final-285 -j ACCEPT +-A logaccept-final-286 -j TEE --gateway fc00::2 +-A logaccept-final-286 -j ACCEPT +-A logaccept-final-287 -j ACCEPT +-A logaccept-final-288 -m limit --limit 1/second -j LOG +-A logaccept-final-288 -j ACCEPT +-A logaccept-final-289 -j TEE --gateway fc00::2 +-A logaccept-final-289 -j ACCEPT -A logaccept-final-29 -j ACCEPT +-A logaccept-final-290 -j ACCEPT +-A logaccept-final-291 -m limit --limit 1/second -j LOG +-A logaccept-final-291 -j ACCEPT +-A logaccept-final-292 -j TEE --gateway fc00::2 +-A logaccept-final-292 -j ACCEPT +-A logaccept-final-293 -j ACCEPT +-A logaccept-final-294 -m limit --limit 1/second -j LOG +-A logaccept-final-294 -j ACCEPT +-A logaccept-final-295 -j TEE --gateway fc00::2 +-A logaccept-final-295 -j ACCEPT +-A logaccept-final-296 -j ACCEPT +-A logaccept-final-297 -m limit --limit 1/second -j LOG +-A logaccept-final-297 -j ACCEPT +-A logaccept-final-298 -j TEE --gateway fc00::2 +-A logaccept-final-298 -j ACCEPT +-A logaccept-final-299 -j ACCEPT +-A logaccept-final-3 -m limit --limit 1/second -j LOG -A logaccept-final-3 -j ACCEPT -A logaccept-final-30 -m limit --limit 1/second -j LOG -A logaccept-final-30 -j ACCEPT +-A logaccept-final-300 -m limit --limit 1/second -j LOG +-A logaccept-final-300 -j ACCEPT +-A logaccept-final-301 -j TEE --gateway fc00::2 +-A logaccept-final-301 -j ACCEPT +-A logaccept-final-302 -j ACCEPT +-A logaccept-final-303 -m limit --limit 1/second -j LOG +-A logaccept-final-303 -j ACCEPT +-A logaccept-final-304 -j TEE --gateway fc00::2 +-A logaccept-final-304 -j ACCEPT +-A logaccept-final-305 -j ACCEPT +-A logaccept-final-31 -j TEE --gateway fc00::2 -A logaccept-final-31 -j ACCEPT --A logaccept-final-32 -m limit --limit 1/second -j LOG -A logaccept-final-32 -j ACCEPT +-A logaccept-final-33 -m limit --limit 1/second -j LOG -A logaccept-final-33 -j ACCEPT --A logaccept-final-34 -m limit --limit 1/second -j LOG +-A logaccept-final-34 -j TEE --gateway fc00::2 -A logaccept-final-34 -j ACCEPT -A logaccept-final-35 -j ACCEPT -A logaccept-final-36 -m limit --limit 1/second -j LOG -A logaccept-final-36 -j ACCEPT +-A logaccept-final-37 -j TEE --gateway fc00::2 -A logaccept-final-37 -j ACCEPT --A logaccept-final-38 -m limit --limit 1/second -j LOG -A logaccept-final-38 -j ACCEPT +-A logaccept-final-39 -m limit --limit 1/second -j LOG -A logaccept-final-39 -j ACCEPT --A logaccept-final-4 -m limit --limit 1/second -j LOG +-A logaccept-final-4 -j TEE --gateway fc00::2 -A logaccept-final-4 -j ACCEPT --A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j TEE --gateway fc00::2 -A logaccept-final-40 -j ACCEPT -A logaccept-final-41 -j ACCEPT -A logaccept-final-42 -m limit --limit 1/second -j LOG -A logaccept-final-42 -j ACCEPT +-A logaccept-final-43 -j TEE --gateway fc00::2 -A logaccept-final-43 -j ACCEPT --A logaccept-final-44 -m limit --limit 1/second -j LOG -A logaccept-final-44 -j ACCEPT +-A logaccept-final-45 -m limit --limit 1/second -j LOG -A logaccept-final-45 -j ACCEPT --A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j TEE --gateway fc00::2 -A logaccept-final-46 -j ACCEPT -A logaccept-final-47 -j ACCEPT -A logaccept-final-48 -m limit --limit 1/second -j LOG -A logaccept-final-48 -j ACCEPT +-A logaccept-final-49 -j TEE --gateway fc00::2 -A logaccept-final-49 -j ACCEPT -A logaccept-final-5 -j ACCEPT --A logaccept-final-50 -m limit --limit 1/second -j LOG -A logaccept-final-50 -j ACCEPT +-A logaccept-final-51 -m limit --limit 1/second -j LOG -A logaccept-final-51 -j ACCEPT --A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j TEE --gateway fc00::2 -A logaccept-final-52 -j ACCEPT -A logaccept-final-53 -j ACCEPT -A logaccept-final-54 -m limit --limit 1/second -j LOG -A logaccept-final-54 -j ACCEPT +-A logaccept-final-55 -j TEE --gateway fc00::2 -A logaccept-final-55 -j ACCEPT --A logaccept-final-56 -m limit --limit 1/second -j LOG -A logaccept-final-56 -j ACCEPT +-A logaccept-final-57 -m limit --limit 1/second -j LOG -A logaccept-final-57 -j ACCEPT --A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j TEE --gateway fc00::2 -A logaccept-final-58 -j ACCEPT -A logaccept-final-59 -j ACCEPT -A logaccept-final-6 -m limit --limit 1/second -j LOG -A logaccept-final-6 -j ACCEPT -A logaccept-final-60 -m limit --limit 1/second -j LOG -A logaccept-final-60 -j ACCEPT +-A logaccept-final-61 -j TEE --gateway fc00::2 -A logaccept-final-61 -j ACCEPT --A logaccept-final-62 -m limit --limit 1/second -j LOG -A logaccept-final-62 -j ACCEPT +-A logaccept-final-63 -m limit --limit 1/second -j LOG -A logaccept-final-63 -j ACCEPT --A logaccept-final-64 -m limit --limit 1/second -j LOG +-A logaccept-final-64 -j TEE --gateway fc00::2 -A logaccept-final-64 -j ACCEPT -A logaccept-final-65 -j ACCEPT -A logaccept-final-66 -m limit --limit 1/second -j LOG -A logaccept-final-66 -j ACCEPT +-A logaccept-final-67 -j TEE --gateway fc00::2 -A logaccept-final-67 -j ACCEPT --A logaccept-final-68 -m limit --limit 1/second -j LOG -A logaccept-final-68 -j ACCEPT +-A logaccept-final-69 -m limit --limit 1/second -j LOG -A logaccept-final-69 -j ACCEPT +-A logaccept-final-7 -j TEE --gateway fc00::2 -A logaccept-final-7 -j ACCEPT --A logaccept-final-70 -m limit --limit 1/second -j LOG +-A logaccept-final-70 -j TEE --gateway fc00::2 -A logaccept-final-70 -j ACCEPT -A logaccept-final-71 -j ACCEPT -A logaccept-final-72 -m limit --limit 1/second -j LOG -A logaccept-final-72 -j ACCEPT +-A logaccept-final-73 -j TEE --gateway fc00::2 -A logaccept-final-73 -j ACCEPT --A logaccept-final-74 -m limit --limit 1/second -j LOG -A logaccept-final-74 -j ACCEPT +-A logaccept-final-75 -m limit --limit 1/second -j LOG -A logaccept-final-75 -j ACCEPT --A logaccept-final-76 -m limit --limit 1/second -j LOG +-A logaccept-final-76 -j TEE --gateway fc00::2 -A logaccept-final-76 -j ACCEPT -A logaccept-final-77 -j ACCEPT -A logaccept-final-78 -m limit --limit 1/second -j LOG -A logaccept-final-78 -j ACCEPT +-A logaccept-final-79 -j TEE --gateway fc00::2 -A logaccept-final-79 -j ACCEPT --A logaccept-final-8 -m limit --limit 1/second -j LOG -A logaccept-final-8 -j ACCEPT --A logaccept-final-80 -m limit --limit 1/second -j LOG -A logaccept-final-80 -j ACCEPT +-A logaccept-final-81 -m limit --limit 1/second -j LOG -A logaccept-final-81 -j ACCEPT --A logaccept-final-82 -m limit --limit 1/second -j LOG +-A logaccept-final-82 -j TEE --gateway fc00::2 -A logaccept-final-82 -j ACCEPT -A logaccept-final-83 -j ACCEPT -A logaccept-final-84 -m limit --limit 1/second -j LOG -A logaccept-final-84 -j ACCEPT +-A logaccept-final-85 -j TEE --gateway fc00::2 -A logaccept-final-85 -j ACCEPT --A logaccept-final-86 -m limit --limit 1/second -j LOG -A logaccept-final-86 -j ACCEPT +-A logaccept-final-87 -m limit --limit 1/second -j LOG -A logaccept-final-87 -j ACCEPT --A logaccept-final-88 -m limit --limit 1/second -j LOG +-A logaccept-final-88 -j TEE --gateway fc00::2 -A logaccept-final-88 -j ACCEPT -A logaccept-final-89 -j ACCEPT +-A logaccept-final-9 -m limit --limit 1/second -j LOG -A logaccept-final-9 -j ACCEPT -A logaccept-final-90 -m limit --limit 1/second -j LOG -A logaccept-final-90 -j ACCEPT +-A logaccept-final-91 -j TEE --gateway fc00::2 -A logaccept-final-91 -j ACCEPT --A logaccept-final-92 -m limit --limit 1/second -j LOG -A logaccept-final-92 -j ACCEPT +-A logaccept-final-93 -m limit --limit 1/second -j LOG -A logaccept-final-93 -j ACCEPT --A logaccept-final-94 -m limit --limit 1/second -j LOG +-A logaccept-final-94 -j TEE --gateway fc00::2 -A logaccept-final-94 -j ACCEPT -A logaccept-final-95 -j ACCEPT -A logaccept-final-96 -m limit --limit 1/second -j LOG -A logaccept-final-96 -j ACCEPT +-A logaccept-final-97 -j TEE --gateway fc00::2 -A logaccept-final-97 -j ACCEPT --A logaccept-final-98 -m limit --limit 1/second -j LOG -A logaccept-final-98 -j ACCEPT +-A logaccept-final-99 -m limit --limit 1/second -j LOG -A logaccept-final-99 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP @@ -68982,17 +115076,29 @@ COMMIT -A logdrop-1 -j DROP -A logdrop-10 -m limit --limit 1/second -j LOG -A logdrop-10 -j DROP +-A logdrop-100 -j TEE --gateway fc00::2 -A logdrop-100 -j DROP +-A logdrop-1000 -j TEE --gateway fc00::2 -A logdrop-1000 -j DROP +-A logdrop-1001 -j TEE --gateway fc00::2 -A logdrop-1001 -j DROP +-A logdrop-1002 -j TEE --gateway fc00::2 -A logdrop-1002 -j DROP +-A logdrop-1003 -j TEE --gateway fc00::2 -A logdrop-1003 -j DROP +-A logdrop-1004 -j TEE --gateway fc00::2 -A logdrop-1004 -j DROP +-A logdrop-1005 -j TEE --gateway fc00::2 -A logdrop-1005 -j DROP +-A logdrop-1006 -j TEE --gateway fc00::2 -A logdrop-1006 -j DROP +-A logdrop-1007 -j TEE --gateway fc00::2 -A logdrop-1007 -j DROP +-A logdrop-1008 -j TEE --gateway fc00::2 -A logdrop-1008 -j DROP +-A logdrop-1009 -j TEE --gateway fc00::2 -A logdrop-1009 -j DROP +-A logdrop-101 -j TEE --gateway fc00::2 -A logdrop-101 -j DROP -A logdrop-1010 -j DROP -A logdrop-1011 -j DROP @@ -69004,6 +115110,7 @@ COMMIT -A logdrop-1017 -j DROP -A logdrop-1018 -j DROP -A logdrop-1019 -j DROP +-A logdrop-102 -j TEE --gateway fc00::2 -A logdrop-102 -j DROP -A logdrop-1020 -j DROP -A logdrop-1021 -j DROP @@ -69015,6 +115122,7 @@ COMMIT -A logdrop-1027 -j DROP -A logdrop-1028 -j DROP -A logdrop-1029 -j DROP +-A logdrop-103 -j TEE --gateway fc00::2 -A logdrop-103 -j DROP -A logdrop-1030 -j DROP -A logdrop-1031 -j DROP @@ -69026,134 +115134,81 @@ COMMIT -A logdrop-1037 -j DROP -A logdrop-1038 -j DROP -A logdrop-1039 -j DROP +-A logdrop-104 -j TEE --gateway fc00::2 -A logdrop-104 -j DROP --A logdrop-1040 -m limit --limit 1/second -j LOG -A logdrop-1040 -j DROP --A logdrop-1041 -m limit --limit 1/second -j LOG -A logdrop-1041 -j DROP --A logdrop-1042 -m limit --limit 1/second -j LOG -A logdrop-1042 -j DROP --A logdrop-1043 -m limit --limit 1/second -j LOG -A logdrop-1043 -j DROP --A logdrop-1044 -m limit --limit 1/second -j LOG -A logdrop-1044 -j DROP --A logdrop-1045 -m limit --limit 1/second -j LOG -A logdrop-1045 -j DROP --A logdrop-1046 -m limit --limit 1/second -j LOG -A logdrop-1046 -j DROP --A logdrop-1047 -m limit --limit 1/second -j LOG -A logdrop-1047 -j DROP --A logdrop-1048 -m limit --limit 1/second -j LOG -A logdrop-1048 -j DROP --A logdrop-1049 -m limit --limit 1/second -j LOG -A logdrop-1049 -j DROP +-A logdrop-105 -j TEE --gateway fc00::2 -A logdrop-105 -j DROP --A logdrop-1050 -m limit --limit 1/second -j LOG -A logdrop-1050 -j DROP --A logdrop-1051 -m limit --limit 1/second -j LOG -A logdrop-1051 -j DROP --A logdrop-1052 -m limit --limit 1/second -j LOG -A logdrop-1052 -j DROP --A logdrop-1053 -m limit --limit 1/second -j LOG -A logdrop-1053 -j DROP --A logdrop-1054 -m limit --limit 1/second -j LOG -A logdrop-1054 -j DROP --A logdrop-1055 -m limit --limit 1/second -j LOG -A logdrop-1055 -j DROP --A logdrop-1056 -m limit --limit 1/second -j LOG -A logdrop-1056 -j DROP --A logdrop-1057 -m limit --limit 1/second -j LOG -A logdrop-1057 -j DROP --A logdrop-1058 -m limit --limit 1/second -j LOG -A logdrop-1058 -j DROP --A logdrop-1059 -m limit --limit 1/second -j LOG -A logdrop-1059 -j DROP +-A logdrop-106 -j TEE --gateway fc00::2 -A logdrop-106 -j DROP --A logdrop-1060 -m limit --limit 1/second -j LOG -A logdrop-1060 -j DROP --A logdrop-1061 -m limit --limit 1/second -j LOG -A logdrop-1061 -j DROP --A logdrop-1062 -m limit --limit 1/second -j LOG -A logdrop-1062 -j DROP --A logdrop-1063 -m limit --limit 1/second -j LOG -A logdrop-1063 -j DROP --A logdrop-1064 -m limit --limit 1/second -j LOG -A logdrop-1064 -j DROP --A logdrop-1065 -m limit --limit 1/second -j LOG -A logdrop-1065 -j DROP --A logdrop-1066 -m limit --limit 1/second -j LOG -A logdrop-1066 -j DROP --A logdrop-1067 -m limit --limit 1/second -j LOG -A logdrop-1067 -j DROP --A logdrop-1068 -m limit --limit 1/second -j LOG -A logdrop-1068 -j DROP --A logdrop-1069 -m limit --limit 1/second -j LOG -A logdrop-1069 -j DROP +-A logdrop-107 -j TEE --gateway fc00::2 -A logdrop-107 -j DROP --A logdrop-1070 -m limit --limit 1/second -j LOG -A logdrop-1070 -j DROP --A logdrop-1071 -m limit --limit 1/second -j LOG -A logdrop-1071 -j DROP --A logdrop-1072 -m limit --limit 1/second -j LOG -A logdrop-1072 -j DROP --A logdrop-1073 -m limit --limit 1/second -j LOG -A logdrop-1073 -j DROP --A logdrop-1074 -m limit --limit 1/second -j LOG -A logdrop-1074 -j DROP --A logdrop-1075 -m limit --limit 1/second -j LOG -A logdrop-1075 -j DROP --A logdrop-1076 -m limit --limit 1/second -j LOG -A logdrop-1076 -j DROP --A logdrop-1077 -m limit --limit 1/second -j LOG -A logdrop-1077 -j DROP --A logdrop-1078 -m limit --limit 1/second -j LOG -A logdrop-1078 -j DROP --A logdrop-1079 -m limit --limit 1/second -j LOG -A logdrop-1079 -j DROP +-A logdrop-108 -j TEE --gateway fc00::2 -A logdrop-108 -j DROP --A logdrop-1080 -m limit --limit 1/second -j LOG -A logdrop-1080 -j DROP --A logdrop-1081 -m limit --limit 1/second -j LOG -A logdrop-1081 -j DROP --A logdrop-1082 -m limit --limit 1/second -j LOG -A logdrop-1082 -j DROP --A logdrop-1083 -m limit --limit 1/second -j LOG -A logdrop-1083 -j DROP --A logdrop-1084 -m limit --limit 1/second -j LOG -A logdrop-1084 -j DROP --A logdrop-1085 -m limit --limit 1/second -j LOG -A logdrop-1085 -j DROP --A logdrop-1086 -m limit --limit 1/second -j LOG -A logdrop-1086 -j DROP --A logdrop-1087 -m limit --limit 1/second -j LOG -A logdrop-1087 -j DROP --A logdrop-1088 -m limit --limit 1/second -j LOG -A logdrop-1088 -j DROP --A logdrop-1089 -m limit --limit 1/second -j LOG -A logdrop-1089 -j DROP +-A logdrop-109 -j TEE --gateway fc00::2 -A logdrop-109 -j DROP --A logdrop-1090 -m limit --limit 1/second -j LOG -A logdrop-1090 -j DROP --A logdrop-1091 -m limit --limit 1/second -j LOG -A logdrop-1091 -j DROP --A logdrop-1092 -m limit --limit 1/second -j LOG -A logdrop-1092 -j DROP --A logdrop-1093 -m limit --limit 1/second -j LOG -A logdrop-1093 -j DROP --A logdrop-1094 -m limit --limit 1/second -j LOG -A logdrop-1094 -j DROP --A logdrop-1095 -m limit --limit 1/second -j LOG -A logdrop-1095 -j DROP --A logdrop-1096 -m limit --limit 1/second -j LOG -A logdrop-1096 -j DROP --A logdrop-1097 -m limit --limit 1/second -j LOG -A logdrop-1097 -j DROP --A logdrop-1098 -m limit --limit 1/second -j LOG -A logdrop-1098 -j DROP --A logdrop-1099 -m limit --limit 1/second -j LOG -A logdrop-1099 -j DROP -A logdrop-11 -m limit --limit 1/second -j LOG -A logdrop-11 -j DROP +-A logdrop-110 -j TEE --gateway fc00::2 -A logdrop-110 -j DROP -A logdrop-1100 -m limit --limit 1/second -j LOG -A logdrop-1100 -j DROP @@ -69175,295 +115230,2051 @@ COMMIT -A logdrop-1108 -j DROP -A logdrop-1109 -m limit --limit 1/second -j LOG -A logdrop-1109 -j DROP +-A logdrop-111 -j TEE --gateway fc00::2 -A logdrop-111 -j DROP -A logdrop-1110 -m limit --limit 1/second -j LOG -A logdrop-1110 -j DROP -A logdrop-1111 -m limit --limit 1/second -j LOG -A logdrop-1111 -j DROP +-A logdrop-1112 -m limit --limit 1/second -j LOG -A logdrop-1112 -j DROP +-A logdrop-1113 -m limit --limit 1/second -j LOG -A logdrop-1113 -j DROP +-A logdrop-1114 -m limit --limit 1/second -j LOG -A logdrop-1114 -j DROP +-A logdrop-1115 -m limit --limit 1/second -j LOG -A logdrop-1115 -j DROP +-A logdrop-1116 -m limit --limit 1/second -j LOG -A logdrop-1116 -j DROP +-A logdrop-1117 -m limit --limit 1/second -j LOG -A logdrop-1117 -j DROP +-A logdrop-1118 -m limit --limit 1/second -j LOG -A logdrop-1118 -j DROP +-A logdrop-1119 -m limit --limit 1/second -j LOG -A logdrop-1119 -j DROP +-A logdrop-112 -j TEE --gateway fc00::2 -A logdrop-112 -j DROP +-A logdrop-1120 -m limit --limit 1/second -j LOG -A logdrop-1120 -j DROP +-A logdrop-1121 -m limit --limit 1/second -j LOG -A logdrop-1121 -j DROP +-A logdrop-1122 -m limit --limit 1/second -j LOG -A logdrop-1122 -j DROP +-A logdrop-1123 -m limit --limit 1/second -j LOG -A logdrop-1123 -j DROP +-A logdrop-1124 -m limit --limit 1/second -j LOG -A logdrop-1124 -j DROP +-A logdrop-1125 -m limit --limit 1/second -j LOG -A logdrop-1125 -j DROP +-A logdrop-1126 -m limit --limit 1/second -j LOG -A logdrop-1126 -j DROP +-A logdrop-1127 -m limit --limit 1/second -j LOG -A logdrop-1127 -j DROP +-A logdrop-1128 -m limit --limit 1/second -j LOG -A logdrop-1128 -j DROP +-A logdrop-1129 -m limit --limit 1/second -j LOG -A logdrop-1129 -j DROP +-A logdrop-113 -j TEE --gateway fc00::2 -A logdrop-113 -j DROP +-A logdrop-1130 -m limit --limit 1/second -j LOG -A logdrop-1130 -j DROP +-A logdrop-1131 -m limit --limit 1/second -j LOG -A logdrop-1131 -j DROP +-A logdrop-1132 -m limit --limit 1/second -j LOG -A logdrop-1132 -j DROP +-A logdrop-1133 -m limit --limit 1/second -j LOG -A logdrop-1133 -j DROP +-A logdrop-1134 -m limit --limit 1/second -j LOG -A logdrop-1134 -j DROP +-A logdrop-1135 -m limit --limit 1/second -j LOG -A logdrop-1135 -j DROP +-A logdrop-1136 -m limit --limit 1/second -j LOG -A logdrop-1136 -j DROP +-A logdrop-1137 -m limit --limit 1/second -j LOG -A logdrop-1137 -j DROP +-A logdrop-1138 -m limit --limit 1/second -j LOG -A logdrop-1138 -j DROP +-A logdrop-1139 -m limit --limit 1/second -j LOG -A logdrop-1139 -j DROP +-A logdrop-114 -j TEE --gateway fc00::2 -A logdrop-114 -j DROP +-A logdrop-1140 -m limit --limit 1/second -j LOG -A logdrop-1140 -j DROP +-A logdrop-1141 -m limit --limit 1/second -j LOG -A logdrop-1141 -j DROP +-A logdrop-1142 -m limit --limit 1/second -j LOG -A logdrop-1142 -j DROP +-A logdrop-1143 -m limit --limit 1/second -j LOG -A logdrop-1143 -j DROP +-A logdrop-1144 -m limit --limit 1/second -j LOG -A logdrop-1144 -j DROP +-A logdrop-1145 -m limit --limit 1/second -j LOG -A logdrop-1145 -j DROP +-A logdrop-1146 -m limit --limit 1/second -j LOG -A logdrop-1146 -j DROP +-A logdrop-1147 -m limit --limit 1/second -j LOG -A logdrop-1147 -j DROP +-A logdrop-1148 -m limit --limit 1/second -j LOG -A logdrop-1148 -j DROP +-A logdrop-1149 -m limit --limit 1/second -j LOG -A logdrop-1149 -j DROP +-A logdrop-115 -j TEE --gateway fc00::2 -A logdrop-115 -j DROP +-A logdrop-1150 -m limit --limit 1/second -j LOG -A logdrop-1150 -j DROP +-A logdrop-1151 -m limit --limit 1/second -j LOG -A logdrop-1151 -j DROP +-A logdrop-1152 -m limit --limit 1/second -j LOG -A logdrop-1152 -j DROP +-A logdrop-1153 -m limit --limit 1/second -j LOG -A logdrop-1153 -j DROP +-A logdrop-1154 -m limit --limit 1/second -j LOG -A logdrop-1154 -j DROP +-A logdrop-1155 -m limit --limit 1/second -j LOG -A logdrop-1155 -j DROP +-A logdrop-1156 -m limit --limit 1/second -j LOG -A logdrop-1156 -j DROP +-A logdrop-1157 -m limit --limit 1/second -j LOG -A logdrop-1157 -j DROP +-A logdrop-1158 -m limit --limit 1/second -j LOG -A logdrop-1158 -j DROP +-A logdrop-1159 -m limit --limit 1/second -j LOG -A logdrop-1159 -j DROP +-A logdrop-116 -j TEE --gateway fc00::2 -A logdrop-116 -j DROP +-A logdrop-1160 -m limit --limit 1/second -j LOG -A logdrop-1160 -j DROP +-A logdrop-1161 -m limit --limit 1/second -j LOG -A logdrop-1161 -j DROP +-A logdrop-1162 -m limit --limit 1/second -j LOG -A logdrop-1162 -j DROP +-A logdrop-1163 -m limit --limit 1/second -j LOG -A logdrop-1163 -j DROP +-A logdrop-1164 -m limit --limit 1/second -j LOG -A logdrop-1164 -j DROP +-A logdrop-1165 -m limit --limit 1/second -j LOG -A logdrop-1165 -j DROP +-A logdrop-1166 -m limit --limit 1/second -j LOG -A logdrop-1166 -j DROP +-A logdrop-1167 -m limit --limit 1/second -j LOG -A logdrop-1167 -j DROP +-A logdrop-1168 -m limit --limit 1/second -j LOG -A logdrop-1168 -j DROP +-A logdrop-1169 -m limit --limit 1/second -j LOG -A logdrop-1169 -j DROP +-A logdrop-117 -j TEE --gateway fc00::2 -A logdrop-117 -j DROP +-A logdrop-1170 -m limit --limit 1/second -j LOG -A logdrop-1170 -j DROP +-A logdrop-1171 -m limit --limit 1/second -j LOG -A logdrop-1171 -j DROP +-A logdrop-1172 -m limit --limit 1/second -j LOG -A logdrop-1172 -j DROP +-A logdrop-1173 -m limit --limit 1/second -j LOG -A logdrop-1173 -j DROP +-A logdrop-1174 -m limit --limit 1/second -j LOG -A logdrop-1174 -j DROP +-A logdrop-1175 -m limit --limit 1/second -j LOG -A logdrop-1175 -j DROP +-A logdrop-1176 -m limit --limit 1/second -j LOG -A logdrop-1176 -j DROP +-A logdrop-1177 -m limit --limit 1/second -j LOG -A logdrop-1177 -j DROP +-A logdrop-1178 -m limit --limit 1/second -j LOG -A logdrop-1178 -j DROP +-A logdrop-1179 -m limit --limit 1/second -j LOG -A logdrop-1179 -j DROP +-A logdrop-118 -j TEE --gateway fc00::2 -A logdrop-118 -j DROP +-A logdrop-1180 -m limit --limit 1/second -j LOG -A logdrop-1180 -j DROP +-A logdrop-1181 -m limit --limit 1/second -j LOG -A logdrop-1181 -j DROP +-A logdrop-1182 -m limit --limit 1/second -j LOG -A logdrop-1182 -j DROP +-A logdrop-1183 -m limit --limit 1/second -j LOG -A logdrop-1183 -j DROP -A logdrop-1184 -m limit --limit 1/second -j LOG -A logdrop-1184 -j DROP -A logdrop-1185 -m limit --limit 1/second -j LOG -A logdrop-1185 -j DROP +-A logdrop-1186 -m limit --limit 1/second -j LOG -A logdrop-1186 -j DROP +-A logdrop-1187 -m limit --limit 1/second -j LOG +-A logdrop-1187 -j DROP +-A logdrop-1188 -m limit --limit 1/second -j LOG +-A logdrop-1188 -j DROP +-A logdrop-1189 -m limit --limit 1/second -j LOG +-A logdrop-1189 -j DROP +-A logdrop-119 -j TEE --gateway fc00::2 -A logdrop-119 -j DROP +-A logdrop-1190 -m limit --limit 1/second -j LOG +-A logdrop-1190 -j DROP +-A logdrop-1191 -m limit --limit 1/second -j LOG +-A logdrop-1191 -j DROP +-A logdrop-1192 -m limit --limit 1/second -j LOG +-A logdrop-1192 -j DROP +-A logdrop-1193 -m limit --limit 1/second -j LOG +-A logdrop-1193 -j DROP +-A logdrop-1194 -m limit --limit 1/second -j LOG +-A logdrop-1194 -j DROP +-A logdrop-1195 -m limit --limit 1/second -j LOG +-A logdrop-1195 -j DROP +-A logdrop-1196 -m limit --limit 1/second -j LOG +-A logdrop-1196 -j DROP +-A logdrop-1197 -m limit --limit 1/second -j LOG +-A logdrop-1197 -j DROP +-A logdrop-1198 -m limit --limit 1/second -j LOG +-A logdrop-1198 -j DROP +-A logdrop-1199 -m limit --limit 1/second -j LOG +-A logdrop-1199 -j DROP -A logdrop-12 -m limit --limit 1/second -j LOG -A logdrop-12 -j DROP +-A logdrop-120 -j TEE --gateway fc00::2 -A logdrop-120 -j DROP +-A logdrop-1200 -j TEE --gateway fc00::2 +-A logdrop-1200 -j DROP +-A logdrop-1201 -j TEE --gateway fc00::2 +-A logdrop-1201 -j DROP +-A logdrop-1202 -j TEE --gateway fc00::2 +-A logdrop-1202 -j DROP +-A logdrop-1203 -j TEE --gateway fc00::2 +-A logdrop-1203 -j DROP +-A logdrop-1204 -j TEE --gateway fc00::2 +-A logdrop-1204 -j DROP +-A logdrop-1205 -j TEE --gateway fc00::2 +-A logdrop-1205 -j DROP +-A logdrop-1206 -j TEE --gateway fc00::2 +-A logdrop-1206 -j DROP +-A logdrop-1207 -j TEE --gateway fc00::2 +-A logdrop-1207 -j DROP +-A logdrop-1208 -j TEE --gateway fc00::2 +-A logdrop-1208 -j DROP +-A logdrop-1209 -j TEE --gateway fc00::2 +-A logdrop-1209 -j DROP +-A logdrop-121 -j TEE --gateway fc00::2 -A logdrop-121 -j DROP +-A logdrop-1210 -j TEE --gateway fc00::2 +-A logdrop-1210 -j DROP +-A logdrop-1211 -j TEE --gateway fc00::2 +-A logdrop-1211 -j DROP +-A logdrop-1212 -j TEE --gateway fc00::2 +-A logdrop-1212 -j DROP +-A logdrop-1213 -j TEE --gateway fc00::2 +-A logdrop-1213 -j DROP +-A logdrop-1214 -j TEE --gateway fc00::2 +-A logdrop-1214 -j DROP +-A logdrop-1215 -j TEE --gateway fc00::2 +-A logdrop-1215 -j DROP +-A logdrop-1216 -j TEE --gateway fc00::2 +-A logdrop-1216 -j DROP +-A logdrop-1217 -j TEE --gateway fc00::2 +-A logdrop-1217 -j DROP +-A logdrop-1218 -j TEE --gateway fc00::2 +-A logdrop-1218 -j DROP +-A logdrop-1219 -j TEE --gateway fc00::2 +-A logdrop-1219 -j DROP +-A logdrop-122 -j TEE --gateway fc00::2 -A logdrop-122 -j DROP +-A logdrop-1220 -j TEE --gateway fc00::2 +-A logdrop-1220 -j DROP +-A logdrop-1221 -j TEE --gateway fc00::2 +-A logdrop-1221 -j DROP +-A logdrop-1222 -j TEE --gateway fc00::2 +-A logdrop-1222 -j DROP +-A logdrop-1223 -j TEE --gateway fc00::2 +-A logdrop-1223 -j DROP +-A logdrop-1224 -j TEE --gateway fc00::2 +-A logdrop-1224 -j DROP +-A logdrop-1225 -j TEE --gateway fc00::2 +-A logdrop-1225 -j DROP +-A logdrop-1226 -j TEE --gateway fc00::2 +-A logdrop-1226 -j DROP +-A logdrop-1227 -j TEE --gateway fc00::2 +-A logdrop-1227 -j DROP +-A logdrop-1228 -j TEE --gateway fc00::2 +-A logdrop-1228 -j DROP +-A logdrop-1229 -j TEE --gateway fc00::2 +-A logdrop-1229 -j DROP +-A logdrop-123 -j TEE --gateway fc00::2 -A logdrop-123 -j DROP +-A logdrop-1230 -j TEE --gateway fc00::2 +-A logdrop-1230 -j DROP +-A logdrop-1231 -j TEE --gateway fc00::2 +-A logdrop-1231 -j DROP +-A logdrop-1232 -j TEE --gateway fc00::2 +-A logdrop-1232 -j DROP +-A logdrop-1233 -j TEE --gateway fc00::2 +-A logdrop-1233 -j DROP +-A logdrop-1234 -j TEE --gateway fc00::2 +-A logdrop-1234 -j DROP +-A logdrop-1235 -j TEE --gateway fc00::2 +-A logdrop-1235 -j DROP +-A logdrop-1236 -j TEE --gateway fc00::2 +-A logdrop-1236 -j DROP +-A logdrop-1237 -j TEE --gateway fc00::2 +-A logdrop-1237 -j DROP +-A logdrop-1238 -j TEE --gateway fc00::2 +-A logdrop-1238 -j DROP +-A logdrop-1239 -j TEE --gateway fc00::2 +-A logdrop-1239 -j DROP +-A logdrop-124 -j TEE --gateway fc00::2 -A logdrop-124 -j DROP +-A logdrop-1240 -j TEE --gateway fc00::2 +-A logdrop-1240 -j DROP +-A logdrop-1241 -j TEE --gateway fc00::2 +-A logdrop-1241 -j DROP +-A logdrop-1242 -j TEE --gateway fc00::2 +-A logdrop-1242 -j DROP +-A logdrop-1243 -j TEE --gateway fc00::2 +-A logdrop-1243 -j DROP +-A logdrop-1244 -j TEE --gateway fc00::2 +-A logdrop-1244 -j DROP +-A logdrop-1245 -j TEE --gateway fc00::2 +-A logdrop-1245 -j DROP +-A logdrop-1246 -j TEE --gateway fc00::2 +-A logdrop-1246 -j DROP +-A logdrop-1247 -j TEE --gateway fc00::2 +-A logdrop-1247 -j DROP +-A logdrop-1248 -j TEE --gateway fc00::2 +-A logdrop-1248 -j DROP +-A logdrop-1249 -j TEE --gateway fc00::2 +-A logdrop-1249 -j DROP +-A logdrop-125 -j TEE --gateway fc00::2 -A logdrop-125 -j DROP +-A logdrop-1250 -j TEE --gateway fc00::2 +-A logdrop-1250 -j DROP +-A logdrop-1251 -j TEE --gateway fc00::2 +-A logdrop-1251 -j DROP +-A logdrop-1252 -j TEE --gateway fc00::2 +-A logdrop-1252 -j DROP +-A logdrop-1253 -j TEE --gateway fc00::2 +-A logdrop-1253 -j DROP +-A logdrop-1254 -j TEE --gateway fc00::2 +-A logdrop-1254 -j DROP +-A logdrop-1255 -j TEE --gateway fc00::2 +-A logdrop-1255 -j DROP +-A logdrop-1256 -j TEE --gateway fc00::2 +-A logdrop-1256 -j DROP +-A logdrop-1257 -j TEE --gateway fc00::2 +-A logdrop-1257 -j DROP +-A logdrop-1258 -j TEE --gateway fc00::2 +-A logdrop-1258 -j DROP +-A logdrop-1259 -j TEE --gateway fc00::2 +-A logdrop-1259 -j DROP +-A logdrop-126 -j TEE --gateway fc00::2 -A logdrop-126 -j DROP +-A logdrop-1260 -j TEE --gateway fc00::2 +-A logdrop-1260 -j DROP +-A logdrop-1261 -j TEE --gateway fc00::2 +-A logdrop-1261 -j DROP +-A logdrop-1262 -j TEE --gateway fc00::2 +-A logdrop-1262 -j DROP +-A logdrop-1263 -j TEE --gateway fc00::2 +-A logdrop-1263 -j DROP +-A logdrop-1264 -j TEE --gateway fc00::2 +-A logdrop-1264 -j DROP +-A logdrop-1265 -j TEE --gateway fc00::2 +-A logdrop-1265 -j DROP +-A logdrop-1266 -j TEE --gateway fc00::2 +-A logdrop-1266 -j DROP +-A logdrop-1267 -j TEE --gateway fc00::2 +-A logdrop-1267 -j DROP +-A logdrop-1268 -j TEE --gateway fc00::2 +-A logdrop-1268 -j DROP +-A logdrop-1269 -j TEE --gateway fc00::2 +-A logdrop-1269 -j DROP +-A logdrop-127 -j TEE --gateway fc00::2 -A logdrop-127 -j DROP +-A logdrop-1270 -j TEE --gateway fc00::2 +-A logdrop-1270 -j DROP +-A logdrop-1271 -j TEE --gateway fc00::2 +-A logdrop-1271 -j DROP +-A logdrop-1272 -j TEE --gateway fc00::2 +-A logdrop-1272 -j DROP +-A logdrop-1273 -j TEE --gateway fc00::2 +-A logdrop-1273 -j DROP +-A logdrop-1274 -j TEE --gateway fc00::2 +-A logdrop-1274 -j DROP +-A logdrop-1275 -j TEE --gateway fc00::2 +-A logdrop-1275 -j DROP +-A logdrop-1276 -j TEE --gateway fc00::2 +-A logdrop-1276 -j DROP +-A logdrop-1277 -j TEE --gateway fc00::2 +-A logdrop-1277 -j DROP +-A logdrop-1278 -j TEE --gateway fc00::2 +-A logdrop-1278 -j DROP +-A logdrop-1279 -j TEE --gateway fc00::2 +-A logdrop-1279 -j DROP +-A logdrop-128 -j TEE --gateway fc00::2 -A logdrop-128 -j DROP +-A logdrop-1280 -j TEE --gateway fc00::2 +-A logdrop-1280 -j DROP +-A logdrop-1281 -j TEE --gateway fc00::2 +-A logdrop-1281 -j DROP +-A logdrop-1282 -j TEE --gateway fc00::2 +-A logdrop-1282 -j DROP +-A logdrop-1283 -j TEE --gateway fc00::2 +-A logdrop-1283 -j DROP +-A logdrop-1284 -j TEE --gateway fc00::2 +-A logdrop-1284 -j DROP +-A logdrop-1285 -j TEE --gateway fc00::2 +-A logdrop-1285 -j DROP +-A logdrop-1286 -j TEE --gateway fc00::2 +-A logdrop-1286 -j DROP +-A logdrop-1287 -j TEE --gateway fc00::2 +-A logdrop-1287 -j DROP +-A logdrop-1288 -j TEE --gateway fc00::2 +-A logdrop-1288 -j DROP +-A logdrop-1289 -j TEE --gateway fc00::2 +-A logdrop-1289 -j DROP +-A logdrop-129 -j TEE --gateway fc00::2 -A logdrop-129 -j DROP +-A logdrop-1290 -j DROP +-A logdrop-1291 -j DROP +-A logdrop-1292 -j DROP +-A logdrop-1293 -j DROP +-A logdrop-1294 -j DROP +-A logdrop-1295 -j DROP +-A logdrop-1296 -j DROP +-A logdrop-1297 -j DROP +-A logdrop-1298 -j DROP +-A logdrop-1299 -j DROP -A logdrop-13 -m limit --limit 1/second -j LOG -A logdrop-13 -j DROP +-A logdrop-130 -j TEE --gateway fc00::2 -A logdrop-130 -j DROP +-A logdrop-1300 -j DROP +-A logdrop-1301 -j DROP +-A logdrop-1302 -j DROP +-A logdrop-1303 -j DROP +-A logdrop-1304 -j DROP +-A logdrop-1305 -j DROP +-A logdrop-1306 -j DROP +-A logdrop-1307 -j DROP +-A logdrop-1308 -j DROP +-A logdrop-1309 -j DROP +-A logdrop-131 -j TEE --gateway fc00::2 -A logdrop-131 -j DROP +-A logdrop-1310 -j DROP +-A logdrop-1311 -j DROP +-A logdrop-1312 -j DROP +-A logdrop-1313 -j DROP +-A logdrop-1314 -j DROP +-A logdrop-1315 -j DROP +-A logdrop-1316 -j DROP +-A logdrop-1317 -j DROP +-A logdrop-1318 -j DROP +-A logdrop-1319 -j DROP +-A logdrop-132 -j TEE --gateway fc00::2 -A logdrop-132 -j DROP +-A logdrop-1320 -j DROP +-A logdrop-1321 -j DROP +-A logdrop-1322 -j DROP +-A logdrop-1323 -j DROP +-A logdrop-1324 -j DROP +-A logdrop-1325 -j DROP +-A logdrop-1326 -j DROP +-A logdrop-1327 -j DROP +-A logdrop-1328 -j DROP +-A logdrop-1329 -j DROP +-A logdrop-133 -j TEE --gateway fc00::2 -A logdrop-133 -j DROP +-A logdrop-1330 -j DROP +-A logdrop-1331 -j DROP +-A logdrop-1332 -j DROP +-A logdrop-1333 -j DROP +-A logdrop-1334 -j DROP +-A logdrop-1335 -j DROP +-A logdrop-1336 -j DROP +-A logdrop-1337 -j DROP +-A logdrop-1338 -j DROP +-A logdrop-1339 -j DROP +-A logdrop-134 -j TEE --gateway fc00::2 -A logdrop-134 -j DROP +-A logdrop-1340 -j DROP +-A logdrop-1341 -j DROP +-A logdrop-1342 -j DROP +-A logdrop-1343 -j DROP +-A logdrop-1344 -j DROP +-A logdrop-1345 -j DROP +-A logdrop-1346 -j DROP +-A logdrop-1347 -j DROP +-A logdrop-1348 -j DROP +-A logdrop-1349 -j DROP +-A logdrop-135 -j TEE --gateway fc00::2 -A logdrop-135 -j DROP +-A logdrop-1350 -j DROP +-A logdrop-1351 -j DROP +-A logdrop-1352 -j DROP +-A logdrop-1353 -j DROP +-A logdrop-1354 -j DROP +-A logdrop-1355 -j DROP +-A logdrop-1356 -j DROP +-A logdrop-1357 -j DROP +-A logdrop-1358 -j DROP +-A logdrop-1359 -j DROP +-A logdrop-136 -j TEE --gateway fc00::2 -A logdrop-136 -j DROP +-A logdrop-1360 -j DROP +-A logdrop-1361 -j DROP +-A logdrop-1362 -j DROP +-A logdrop-1363 -j DROP +-A logdrop-1364 -j DROP +-A logdrop-1365 -j DROP +-A logdrop-1366 -j DROP +-A logdrop-1367 -j DROP +-A logdrop-1368 -j DROP +-A logdrop-1369 -j DROP +-A logdrop-137 -j TEE --gateway fc00::2 -A logdrop-137 -j DROP +-A logdrop-1370 -j DROP +-A logdrop-1371 -j DROP +-A logdrop-1372 -j DROP +-A logdrop-1373 -j DROP +-A logdrop-1374 -j DROP +-A logdrop-1375 -j DROP +-A logdrop-1376 -j DROP +-A logdrop-1377 -j DROP +-A logdrop-1378 -j DROP +-A logdrop-1379 -j DROP +-A logdrop-138 -j TEE --gateway fc00::2 -A logdrop-138 -j DROP +-A logdrop-1380 -m limit --limit 1/second -j LOG +-A logdrop-1380 -j DROP +-A logdrop-1381 -m limit --limit 1/second -j LOG +-A logdrop-1381 -j DROP +-A logdrop-1382 -m limit --limit 1/second -j LOG +-A logdrop-1382 -j DROP +-A logdrop-1383 -m limit --limit 1/second -j LOG +-A logdrop-1383 -j DROP +-A logdrop-1384 -m limit --limit 1/second -j LOG +-A logdrop-1384 -j DROP +-A logdrop-1385 -m limit --limit 1/second -j LOG +-A logdrop-1385 -j DROP +-A logdrop-1386 -m limit --limit 1/second -j LOG +-A logdrop-1386 -j DROP +-A logdrop-1387 -m limit --limit 1/second -j LOG +-A logdrop-1387 -j DROP +-A logdrop-1388 -m limit --limit 1/second -j LOG +-A logdrop-1388 -j DROP +-A logdrop-1389 -m limit --limit 1/second -j LOG +-A logdrop-1389 -j DROP +-A logdrop-139 -j TEE --gateway fc00::2 -A logdrop-139 -j DROP +-A logdrop-1390 -m limit --limit 1/second -j LOG +-A logdrop-1390 -j DROP +-A logdrop-1391 -m limit --limit 1/second -j LOG +-A logdrop-1391 -j DROP +-A logdrop-1392 -m limit --limit 1/second -j LOG +-A logdrop-1392 -j DROP +-A logdrop-1393 -m limit --limit 1/second -j LOG +-A logdrop-1393 -j DROP +-A logdrop-1394 -m limit --limit 1/second -j LOG +-A logdrop-1394 -j DROP +-A logdrop-1395 -m limit --limit 1/second -j LOG +-A logdrop-1395 -j DROP +-A logdrop-1396 -m limit --limit 1/second -j LOG +-A logdrop-1396 -j DROP +-A logdrop-1397 -m limit --limit 1/second -j LOG +-A logdrop-1397 -j DROP +-A logdrop-1398 -m limit --limit 1/second -j LOG +-A logdrop-1398 -j DROP +-A logdrop-1399 -m limit --limit 1/second -j LOG +-A logdrop-1399 -j DROP -A logdrop-14 -m limit --limit 1/second -j LOG -A logdrop-14 -j DROP +-A logdrop-140 -j TEE --gateway fc00::2 -A logdrop-140 -j DROP +-A logdrop-1400 -m limit --limit 1/second -j LOG +-A logdrop-1400 -j DROP +-A logdrop-1401 -m limit --limit 1/second -j LOG +-A logdrop-1401 -j DROP +-A logdrop-1402 -m limit --limit 1/second -j LOG +-A logdrop-1402 -j DROP +-A logdrop-1403 -m limit --limit 1/second -j LOG +-A logdrop-1403 -j DROP +-A logdrop-1404 -m limit --limit 1/second -j LOG +-A logdrop-1404 -j DROP +-A logdrop-1405 -m limit --limit 1/second -j LOG +-A logdrop-1405 -j DROP +-A logdrop-1406 -m limit --limit 1/second -j LOG +-A logdrop-1406 -j DROP +-A logdrop-1407 -m limit --limit 1/second -j LOG +-A logdrop-1407 -j DROP +-A logdrop-1408 -m limit --limit 1/second -j LOG +-A logdrop-1408 -j DROP +-A logdrop-1409 -m limit --limit 1/second -j LOG +-A logdrop-1409 -j DROP +-A logdrop-141 -j TEE --gateway fc00::2 -A logdrop-141 -j DROP +-A logdrop-1410 -m limit --limit 1/second -j LOG +-A logdrop-1410 -j DROP +-A logdrop-1411 -m limit --limit 1/second -j LOG +-A logdrop-1411 -j DROP +-A logdrop-1412 -m limit --limit 1/second -j LOG +-A logdrop-1412 -j DROP +-A logdrop-1413 -m limit --limit 1/second -j LOG +-A logdrop-1413 -j DROP +-A logdrop-1414 -m limit --limit 1/second -j LOG +-A logdrop-1414 -j DROP +-A logdrop-1415 -m limit --limit 1/second -j LOG +-A logdrop-1415 -j DROP +-A logdrop-1416 -m limit --limit 1/second -j LOG +-A logdrop-1416 -j DROP +-A logdrop-1417 -m limit --limit 1/second -j LOG +-A logdrop-1417 -j DROP +-A logdrop-1418 -m limit --limit 1/second -j LOG +-A logdrop-1418 -j DROP +-A logdrop-1419 -m limit --limit 1/second -j LOG +-A logdrop-1419 -j DROP +-A logdrop-142 -j TEE --gateway fc00::2 -A logdrop-142 -j DROP +-A logdrop-1420 -m limit --limit 1/second -j LOG +-A logdrop-1420 -j DROP +-A logdrop-1421 -m limit --limit 1/second -j LOG +-A logdrop-1421 -j DROP +-A logdrop-1422 -m limit --limit 1/second -j LOG +-A logdrop-1422 -j DROP +-A logdrop-1423 -m limit --limit 1/second -j LOG +-A logdrop-1423 -j DROP +-A logdrop-1424 -m limit --limit 1/second -j LOG +-A logdrop-1424 -j DROP +-A logdrop-1425 -m limit --limit 1/second -j LOG +-A logdrop-1425 -j DROP +-A logdrop-1426 -m limit --limit 1/second -j LOG +-A logdrop-1426 -j DROP +-A logdrop-1427 -m limit --limit 1/second -j LOG +-A logdrop-1427 -j DROP +-A logdrop-1428 -m limit --limit 1/second -j LOG +-A logdrop-1428 -j DROP +-A logdrop-1429 -m limit --limit 1/second -j LOG +-A logdrop-1429 -j DROP +-A logdrop-143 -j TEE --gateway fc00::2 -A logdrop-143 -j DROP +-A logdrop-1430 -m limit --limit 1/second -j LOG +-A logdrop-1430 -j DROP +-A logdrop-1431 -m limit --limit 1/second -j LOG +-A logdrop-1431 -j DROP +-A logdrop-1432 -m limit --limit 1/second -j LOG +-A logdrop-1432 -j DROP +-A logdrop-1433 -m limit --limit 1/second -j LOG +-A logdrop-1433 -j DROP +-A logdrop-1434 -m limit --limit 1/second -j LOG +-A logdrop-1434 -j DROP +-A logdrop-1435 -m limit --limit 1/second -j LOG +-A logdrop-1435 -j DROP +-A logdrop-1436 -m limit --limit 1/second -j LOG +-A logdrop-1436 -j DROP +-A logdrop-1437 -m limit --limit 1/second -j LOG +-A logdrop-1437 -j DROP +-A logdrop-1438 -m limit --limit 1/second -j LOG +-A logdrop-1438 -j DROP +-A logdrop-1439 -m limit --limit 1/second -j LOG +-A logdrop-1439 -j DROP +-A logdrop-144 -j TEE --gateway fc00::2 -A logdrop-144 -j DROP +-A logdrop-1440 -m limit --limit 1/second -j LOG +-A logdrop-1440 -j DROP +-A logdrop-1441 -m limit --limit 1/second -j LOG +-A logdrop-1441 -j DROP +-A logdrop-1442 -m limit --limit 1/second -j LOG +-A logdrop-1442 -j DROP +-A logdrop-1443 -m limit --limit 1/second -j LOG +-A logdrop-1443 -j DROP +-A logdrop-1444 -m limit --limit 1/second -j LOG +-A logdrop-1444 -j DROP +-A logdrop-1445 -m limit --limit 1/second -j LOG +-A logdrop-1445 -j DROP +-A logdrop-1446 -m limit --limit 1/second -j LOG +-A logdrop-1446 -j DROP +-A logdrop-1447 -m limit --limit 1/second -j LOG +-A logdrop-1447 -j DROP +-A logdrop-1448 -m limit --limit 1/second -j LOG +-A logdrop-1448 -j DROP +-A logdrop-1449 -m limit --limit 1/second -j LOG +-A logdrop-1449 -j DROP +-A logdrop-145 -j TEE --gateway fc00::2 -A logdrop-145 -j DROP +-A logdrop-1450 -m limit --limit 1/second -j LOG +-A logdrop-1450 -j DROP +-A logdrop-1451 -m limit --limit 1/second -j LOG +-A logdrop-1451 -j DROP +-A logdrop-1452 -m limit --limit 1/second -j LOG +-A logdrop-1452 -j DROP +-A logdrop-1453 -m limit --limit 1/second -j LOG +-A logdrop-1453 -j DROP +-A logdrop-1454 -m limit --limit 1/second -j LOG +-A logdrop-1454 -j DROP +-A logdrop-1455 -m limit --limit 1/second -j LOG +-A logdrop-1455 -j DROP +-A logdrop-1456 -m limit --limit 1/second -j LOG +-A logdrop-1456 -j DROP +-A logdrop-1457 -m limit --limit 1/second -j LOG +-A logdrop-1457 -j DROP +-A logdrop-1458 -m limit --limit 1/second -j LOG +-A logdrop-1458 -j DROP +-A logdrop-1459 -m limit --limit 1/second -j LOG +-A logdrop-1459 -j DROP +-A logdrop-146 -j TEE --gateway fc00::2 -A logdrop-146 -j DROP +-A logdrop-1460 -m limit --limit 1/second -j LOG +-A logdrop-1460 -j DROP +-A logdrop-1461 -m limit --limit 1/second -j LOG +-A logdrop-1461 -j DROP +-A logdrop-1462 -m limit --limit 1/second -j LOG +-A logdrop-1462 -j DROP +-A logdrop-1463 -m limit --limit 1/second -j LOG +-A logdrop-1463 -j DROP +-A logdrop-1464 -m limit --limit 1/second -j LOG +-A logdrop-1464 -j DROP +-A logdrop-1465 -m limit --limit 1/second -j LOG +-A logdrop-1465 -j DROP +-A logdrop-1466 -m limit --limit 1/second -j LOG +-A logdrop-1466 -j DROP +-A logdrop-1467 -m limit --limit 1/second -j LOG +-A logdrop-1467 -j DROP +-A logdrop-1468 -m limit --limit 1/second -j LOG +-A logdrop-1468 -j DROP +-A logdrop-1469 -m limit --limit 1/second -j LOG +-A logdrop-1469 -j DROP +-A logdrop-147 -j TEE --gateway fc00::2 -A logdrop-147 -j DROP +-A logdrop-1470 -j TEE --gateway fc00::2 +-A logdrop-1470 -j DROP +-A logdrop-1471 -j TEE --gateway fc00::2 +-A logdrop-1471 -j DROP +-A logdrop-1472 -j TEE --gateway fc00::2 +-A logdrop-1472 -j DROP +-A logdrop-1473 -j TEE --gateway fc00::2 +-A logdrop-1473 -j DROP +-A logdrop-1474 -j TEE --gateway fc00::2 +-A logdrop-1474 -j DROP +-A logdrop-1475 -j TEE --gateway fc00::2 +-A logdrop-1475 -j DROP +-A logdrop-1476 -j TEE --gateway fc00::2 +-A logdrop-1476 -j DROP +-A logdrop-1477 -j TEE --gateway fc00::2 +-A logdrop-1477 -j DROP +-A logdrop-1478 -j TEE --gateway fc00::2 +-A logdrop-1478 -j DROP +-A logdrop-1479 -j TEE --gateway fc00::2 +-A logdrop-1479 -j DROP +-A logdrop-148 -j TEE --gateway fc00::2 -A logdrop-148 -j DROP +-A logdrop-1480 -j TEE --gateway fc00::2 +-A logdrop-1480 -j DROP +-A logdrop-1481 -j TEE --gateway fc00::2 +-A logdrop-1481 -j DROP +-A logdrop-1482 -j TEE --gateway fc00::2 +-A logdrop-1482 -j DROP +-A logdrop-1483 -j TEE --gateway fc00::2 +-A logdrop-1483 -j DROP +-A logdrop-1484 -j TEE --gateway fc00::2 +-A logdrop-1484 -j DROP +-A logdrop-1485 -j TEE --gateway fc00::2 +-A logdrop-1485 -j DROP +-A logdrop-1486 -j TEE --gateway fc00::2 +-A logdrop-1486 -j DROP +-A logdrop-1487 -j TEE --gateway fc00::2 +-A logdrop-1487 -j DROP +-A logdrop-1488 -j TEE --gateway fc00::2 +-A logdrop-1488 -j DROP +-A logdrop-1489 -j TEE --gateway fc00::2 +-A logdrop-1489 -j DROP +-A logdrop-149 -j TEE --gateway fc00::2 -A logdrop-149 -j DROP +-A logdrop-1490 -j TEE --gateway fc00::2 +-A logdrop-1490 -j DROP +-A logdrop-1491 -j TEE --gateway fc00::2 +-A logdrop-1491 -j DROP +-A logdrop-1492 -j TEE --gateway fc00::2 +-A logdrop-1492 -j DROP +-A logdrop-1493 -j TEE --gateway fc00::2 +-A logdrop-1493 -j DROP +-A logdrop-1494 -j TEE --gateway fc00::2 +-A logdrop-1494 -j DROP +-A logdrop-1495 -j TEE --gateway fc00::2 +-A logdrop-1495 -j DROP +-A logdrop-1496 -j TEE --gateway fc00::2 +-A logdrop-1496 -j DROP +-A logdrop-1497 -j TEE --gateway fc00::2 +-A logdrop-1497 -j DROP +-A logdrop-1498 -j TEE --gateway fc00::2 +-A logdrop-1498 -j DROP +-A logdrop-1499 -j TEE --gateway fc00::2 +-A logdrop-1499 -j DROP -A logdrop-15 -m limit --limit 1/second -j LOG -A logdrop-15 -j DROP +-A logdrop-150 -j TEE --gateway fc00::2 -A logdrop-150 -j DROP +-A logdrop-1500 -j TEE --gateway fc00::2 +-A logdrop-1500 -j DROP +-A logdrop-1501 -j TEE --gateway fc00::2 +-A logdrop-1501 -j DROP +-A logdrop-1502 -j TEE --gateway fc00::2 +-A logdrop-1502 -j DROP +-A logdrop-1503 -j TEE --gateway fc00::2 +-A logdrop-1503 -j DROP +-A logdrop-1504 -j TEE --gateway fc00::2 +-A logdrop-1504 -j DROP +-A logdrop-1505 -j TEE --gateway fc00::2 +-A logdrop-1505 -j DROP +-A logdrop-1506 -j TEE --gateway fc00::2 +-A logdrop-1506 -j DROP +-A logdrop-1507 -j TEE --gateway fc00::2 +-A logdrop-1507 -j DROP +-A logdrop-1508 -j TEE --gateway fc00::2 +-A logdrop-1508 -j DROP +-A logdrop-1509 -j TEE --gateway fc00::2 +-A logdrop-1509 -j DROP +-A logdrop-151 -j TEE --gateway fc00::2 -A logdrop-151 -j DROP --A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-1510 -j TEE --gateway fc00::2 +-A logdrop-1510 -j DROP +-A logdrop-1511 -j TEE --gateway fc00::2 +-A logdrop-1511 -j DROP +-A logdrop-1512 -j TEE --gateway fc00::2 +-A logdrop-1512 -j DROP +-A logdrop-1513 -j TEE --gateway fc00::2 +-A logdrop-1513 -j DROP +-A logdrop-1514 -j TEE --gateway fc00::2 +-A logdrop-1514 -j DROP +-A logdrop-1515 -j TEE --gateway fc00::2 +-A logdrop-1515 -j DROP +-A logdrop-1516 -j TEE --gateway fc00::2 +-A logdrop-1516 -j DROP +-A logdrop-1517 -j TEE --gateway fc00::2 +-A logdrop-1517 -j DROP +-A logdrop-1518 -j TEE --gateway fc00::2 +-A logdrop-1518 -j DROP +-A logdrop-1519 -j TEE --gateway fc00::2 +-A logdrop-1519 -j DROP +-A logdrop-152 -j TEE --gateway fc00::2 -A logdrop-152 -j DROP --A logdrop-153 -m limit --limit 1/second -j LOG +-A logdrop-1520 -j TEE --gateway fc00::2 +-A logdrop-1520 -j DROP +-A logdrop-1521 -j TEE --gateway fc00::2 +-A logdrop-1521 -j DROP +-A logdrop-1522 -j TEE --gateway fc00::2 +-A logdrop-1522 -j DROP +-A logdrop-1523 -j TEE --gateway fc00::2 +-A logdrop-1523 -j DROP +-A logdrop-1524 -j TEE --gateway fc00::2 +-A logdrop-1524 -j DROP +-A logdrop-1525 -j TEE --gateway fc00::2 +-A logdrop-1525 -j DROP +-A logdrop-1526 -j TEE --gateway fc00::2 +-A logdrop-1526 -j DROP +-A logdrop-1527 -j TEE --gateway fc00::2 +-A logdrop-1527 -j DROP +-A logdrop-1528 -j TEE --gateway fc00::2 +-A logdrop-1528 -j DROP +-A logdrop-1529 -j TEE --gateway fc00::2 +-A logdrop-1529 -j DROP +-A logdrop-153 -j TEE --gateway fc00::2 -A logdrop-153 -j DROP --A logdrop-154 -m limit --limit 1/second -j LOG +-A logdrop-1530 -j TEE --gateway fc00::2 +-A logdrop-1530 -j DROP +-A logdrop-1531 -j TEE --gateway fc00::2 +-A logdrop-1531 -j DROP +-A logdrop-1532 -j TEE --gateway fc00::2 +-A logdrop-1532 -j DROP +-A logdrop-1533 -j TEE --gateway fc00::2 +-A logdrop-1533 -j DROP +-A logdrop-1534 -j TEE --gateway fc00::2 +-A logdrop-1534 -j DROP +-A logdrop-1535 -j TEE --gateway fc00::2 +-A logdrop-1535 -j DROP +-A logdrop-1536 -j TEE --gateway fc00::2 +-A logdrop-1536 -j DROP +-A logdrop-1537 -j TEE --gateway fc00::2 +-A logdrop-1537 -j DROP +-A logdrop-1538 -j TEE --gateway fc00::2 +-A logdrop-1538 -j DROP +-A logdrop-1539 -j TEE --gateway fc00::2 +-A logdrop-1539 -j DROP +-A logdrop-154 -j TEE --gateway fc00::2 -A logdrop-154 -j DROP --A logdrop-155 -m limit --limit 1/second -j LOG +-A logdrop-1540 -j TEE --gateway fc00::2 +-A logdrop-1540 -j DROP +-A logdrop-1541 -j TEE --gateway fc00::2 +-A logdrop-1541 -j DROP +-A logdrop-1542 -j TEE --gateway fc00::2 +-A logdrop-1542 -j DROP +-A logdrop-1543 -j TEE --gateway fc00::2 +-A logdrop-1543 -j DROP +-A logdrop-1544 -j TEE --gateway fc00::2 +-A logdrop-1544 -j DROP +-A logdrop-1545 -j TEE --gateway fc00::2 +-A logdrop-1545 -j DROP +-A logdrop-1546 -j TEE --gateway fc00::2 +-A logdrop-1546 -j DROP +-A logdrop-1547 -j TEE --gateway fc00::2 +-A logdrop-1547 -j DROP +-A logdrop-1548 -j TEE --gateway fc00::2 +-A logdrop-1548 -j DROP +-A logdrop-1549 -j TEE --gateway fc00::2 +-A logdrop-1549 -j DROP +-A logdrop-155 -j TEE --gateway fc00::2 -A logdrop-155 -j DROP --A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-1550 -j TEE --gateway fc00::2 +-A logdrop-1550 -j DROP +-A logdrop-1551 -j TEE --gateway fc00::2 +-A logdrop-1551 -j DROP +-A logdrop-1552 -j TEE --gateway fc00::2 +-A logdrop-1552 -j DROP +-A logdrop-1553 -j TEE --gateway fc00::2 +-A logdrop-1553 -j DROP +-A logdrop-1554 -j TEE --gateway fc00::2 +-A logdrop-1554 -j DROP +-A logdrop-1555 -j TEE --gateway fc00::2 +-A logdrop-1555 -j DROP +-A logdrop-1556 -j TEE --gateway fc00::2 +-A logdrop-1556 -j DROP +-A logdrop-1557 -j TEE --gateway fc00::2 +-A logdrop-1557 -j DROP +-A logdrop-1558 -j TEE --gateway fc00::2 +-A logdrop-1558 -j DROP +-A logdrop-1559 -j TEE --gateway fc00::2 +-A logdrop-1559 -j DROP +-A logdrop-156 -j TEE --gateway fc00::2 -A logdrop-156 -j DROP --A logdrop-157 -m limit --limit 1/second -j LOG +-A logdrop-1560 -j DROP +-A logdrop-1561 -j DROP +-A logdrop-1562 -j DROP +-A logdrop-1563 -j DROP +-A logdrop-1564 -j DROP +-A logdrop-1565 -j DROP +-A logdrop-1566 -j DROP +-A logdrop-1567 -j DROP +-A logdrop-1568 -j DROP +-A logdrop-1569 -j DROP +-A logdrop-157 -j TEE --gateway fc00::2 -A logdrop-157 -j DROP --A logdrop-158 -m limit --limit 1/second -j LOG +-A logdrop-1570 -j DROP +-A logdrop-1571 -j DROP +-A logdrop-1572 -j DROP +-A logdrop-1573 -j DROP +-A logdrop-1574 -j DROP +-A logdrop-1575 -j DROP +-A logdrop-1576 -j DROP +-A logdrop-1577 -j DROP +-A logdrop-1578 -j DROP +-A logdrop-1579 -j DROP +-A logdrop-158 -j TEE --gateway fc00::2 -A logdrop-158 -j DROP --A logdrop-159 -m limit --limit 1/second -j LOG +-A logdrop-1580 -j DROP +-A logdrop-1581 -j DROP +-A logdrop-1582 -j DROP +-A logdrop-1583 -j DROP +-A logdrop-1584 -j DROP +-A logdrop-1585 -j DROP +-A logdrop-1586 -j DROP +-A logdrop-1587 -j DROP +-A logdrop-1588 -j DROP +-A logdrop-1589 -j DROP +-A logdrop-159 -j TEE --gateway fc00::2 -A logdrop-159 -j DROP +-A logdrop-1590 -j DROP +-A logdrop-1591 -j DROP +-A logdrop-1592 -j DROP +-A logdrop-1593 -j DROP +-A logdrop-1594 -j DROP +-A logdrop-1595 -j DROP +-A logdrop-1596 -j DROP +-A logdrop-1597 -j DROP +-A logdrop-1598 -j DROP +-A logdrop-1599 -j DROP -A logdrop-16 -m limit --limit 1/second -j LOG -A logdrop-16 -j DROP --A logdrop-160 -m limit --limit 1/second -j LOG +-A logdrop-160 -j TEE --gateway fc00::2 -A logdrop-160 -j DROP --A logdrop-161 -m limit --limit 1/second -j LOG +-A logdrop-1600 -j DROP +-A logdrop-1601 -j DROP +-A logdrop-1602 -j DROP +-A logdrop-1603 -j DROP +-A logdrop-1604 -j DROP +-A logdrop-1605 -j DROP +-A logdrop-1606 -j DROP +-A logdrop-1607 -j DROP +-A logdrop-1608 -j DROP +-A logdrop-1609 -j DROP +-A logdrop-161 -j TEE --gateway fc00::2 -A logdrop-161 -j DROP --A logdrop-162 -m limit --limit 1/second -j LOG +-A logdrop-1610 -j DROP +-A logdrop-1611 -j DROP +-A logdrop-1612 -j DROP +-A logdrop-1613 -j DROP +-A logdrop-1614 -j DROP +-A logdrop-1615 -j DROP +-A logdrop-1616 -j DROP +-A logdrop-1617 -j DROP +-A logdrop-1618 -j DROP +-A logdrop-1619 -j DROP +-A logdrop-162 -j TEE --gateway fc00::2 -A logdrop-162 -j DROP --A logdrop-163 -m limit --limit 1/second -j LOG +-A logdrop-1620 -j DROP +-A logdrop-1621 -j DROP +-A logdrop-1622 -j DROP +-A logdrop-1623 -j DROP +-A logdrop-1624 -j DROP +-A logdrop-1625 -j DROP +-A logdrop-1626 -j DROP +-A logdrop-1627 -j DROP +-A logdrop-1628 -j DROP +-A logdrop-1629 -j DROP +-A logdrop-163 -j TEE --gateway fc00::2 -A logdrop-163 -j DROP --A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-1630 -j DROP +-A logdrop-1631 -j DROP +-A logdrop-1632 -j DROP +-A logdrop-1633 -j DROP +-A logdrop-1634 -j DROP +-A logdrop-1635 -j DROP +-A logdrop-1636 -j DROP +-A logdrop-1637 -j DROP +-A logdrop-1638 -j DROP +-A logdrop-1639 -j DROP +-A logdrop-164 -j TEE --gateway fc00::2 -A logdrop-164 -j DROP --A logdrop-165 -m limit --limit 1/second -j LOG +-A logdrop-1640 -j DROP +-A logdrop-1641 -j DROP +-A logdrop-1642 -j DROP +-A logdrop-1643 -j DROP +-A logdrop-1644 -j DROP +-A logdrop-1645 -j DROP +-A logdrop-1646 -j DROP +-A logdrop-1647 -j DROP +-A logdrop-1648 -j DROP +-A logdrop-1649 -j DROP +-A logdrop-165 -j TEE --gateway fc00::2 -A logdrop-165 -j DROP --A logdrop-166 -m limit --limit 1/second -j LOG +-A logdrop-1650 -m limit --limit 1/second -j LOG +-A logdrop-1650 -j DROP +-A logdrop-1651 -m limit --limit 1/second -j LOG +-A logdrop-1651 -j DROP +-A logdrop-1652 -m limit --limit 1/second -j LOG +-A logdrop-1652 -j DROP +-A logdrop-1653 -m limit --limit 1/second -j LOG +-A logdrop-1653 -j DROP +-A logdrop-1654 -m limit --limit 1/second -j LOG +-A logdrop-1654 -j DROP +-A logdrop-1655 -m limit --limit 1/second -j LOG +-A logdrop-1655 -j DROP +-A logdrop-1656 -m limit --limit 1/second -j LOG +-A logdrop-1656 -j DROP +-A logdrop-1657 -m limit --limit 1/second -j LOG +-A logdrop-1657 -j DROP +-A logdrop-1658 -m limit --limit 1/second -j LOG +-A logdrop-1658 -j DROP +-A logdrop-1659 -m limit --limit 1/second -j LOG +-A logdrop-1659 -j DROP +-A logdrop-166 -j TEE --gateway fc00::2 -A logdrop-166 -j DROP --A logdrop-167 -m limit --limit 1/second -j LOG +-A logdrop-1660 -m limit --limit 1/second -j LOG +-A logdrop-1660 -j DROP +-A logdrop-1661 -m limit --limit 1/second -j LOG +-A logdrop-1661 -j DROP +-A logdrop-1662 -m limit --limit 1/second -j LOG +-A logdrop-1662 -j DROP +-A logdrop-1663 -m limit --limit 1/second -j LOG +-A logdrop-1663 -j DROP +-A logdrop-1664 -m limit --limit 1/second -j LOG +-A logdrop-1664 -j DROP +-A logdrop-1665 -m limit --limit 1/second -j LOG +-A logdrop-1665 -j DROP +-A logdrop-1666 -m limit --limit 1/second -j LOG +-A logdrop-1666 -j DROP +-A logdrop-1667 -m limit --limit 1/second -j LOG +-A logdrop-1667 -j DROP +-A logdrop-1668 -m limit --limit 1/second -j LOG +-A logdrop-1668 -j DROP +-A logdrop-1669 -m limit --limit 1/second -j LOG +-A logdrop-1669 -j DROP +-A logdrop-167 -j TEE --gateway fc00::2 -A logdrop-167 -j DROP --A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-1670 -m limit --limit 1/second -j LOG +-A logdrop-1670 -j DROP +-A logdrop-1671 -m limit --limit 1/second -j LOG +-A logdrop-1671 -j DROP +-A logdrop-1672 -m limit --limit 1/second -j LOG +-A logdrop-1672 -j DROP +-A logdrop-1673 -m limit --limit 1/second -j LOG +-A logdrop-1673 -j DROP +-A logdrop-1674 -m limit --limit 1/second -j LOG +-A logdrop-1674 -j DROP +-A logdrop-1675 -m limit --limit 1/second -j LOG +-A logdrop-1675 -j DROP +-A logdrop-1676 -m limit --limit 1/second -j LOG +-A logdrop-1676 -j DROP +-A logdrop-1677 -m limit --limit 1/second -j LOG +-A logdrop-1677 -j DROP +-A logdrop-1678 -m limit --limit 1/second -j LOG +-A logdrop-1678 -j DROP +-A logdrop-1679 -m limit --limit 1/second -j LOG +-A logdrop-1679 -j DROP +-A logdrop-168 -j TEE --gateway fc00::2 -A logdrop-168 -j DROP --A logdrop-169 -m limit --limit 1/second -j LOG +-A logdrop-1680 -m limit --limit 1/second -j LOG +-A logdrop-1680 -j DROP +-A logdrop-1681 -m limit --limit 1/second -j LOG +-A logdrop-1681 -j DROP +-A logdrop-1682 -m limit --limit 1/second -j LOG +-A logdrop-1682 -j DROP +-A logdrop-1683 -m limit --limit 1/second -j LOG +-A logdrop-1683 -j DROP +-A logdrop-1684 -m limit --limit 1/second -j LOG +-A logdrop-1684 -j DROP +-A logdrop-1685 -m limit --limit 1/second -j LOG +-A logdrop-1685 -j DROP +-A logdrop-1686 -m limit --limit 1/second -j LOG +-A logdrop-1686 -j DROP +-A logdrop-1687 -m limit --limit 1/second -j LOG +-A logdrop-1687 -j DROP +-A logdrop-1688 -m limit --limit 1/second -j LOG +-A logdrop-1688 -j DROP +-A logdrop-1689 -m limit --limit 1/second -j LOG +-A logdrop-1689 -j DROP +-A logdrop-169 -j TEE --gateway fc00::2 -A logdrop-169 -j DROP +-A logdrop-1690 -m limit --limit 1/second -j LOG +-A logdrop-1690 -j DROP +-A logdrop-1691 -m limit --limit 1/second -j LOG +-A logdrop-1691 -j DROP +-A logdrop-1692 -m limit --limit 1/second -j LOG +-A logdrop-1692 -j DROP +-A logdrop-1693 -m limit --limit 1/second -j LOG +-A logdrop-1693 -j DROP +-A logdrop-1694 -m limit --limit 1/second -j LOG +-A logdrop-1694 -j DROP +-A logdrop-1695 -m limit --limit 1/second -j LOG +-A logdrop-1695 -j DROP +-A logdrop-1696 -m limit --limit 1/second -j LOG +-A logdrop-1696 -j DROP +-A logdrop-1697 -m limit --limit 1/second -j LOG +-A logdrop-1697 -j DROP +-A logdrop-1698 -m limit --limit 1/second -j LOG +-A logdrop-1698 -j DROP +-A logdrop-1699 -m limit --limit 1/second -j LOG +-A logdrop-1699 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG -A logdrop-17 -j DROP --A logdrop-170 -m limit --limit 1/second -j LOG +-A logdrop-170 -j TEE --gateway fc00::2 -A logdrop-170 -j DROP --A logdrop-171 -m limit --limit 1/second -j LOG +-A logdrop-1700 -m limit --limit 1/second -j LOG +-A logdrop-1700 -j DROP +-A logdrop-1701 -m limit --limit 1/second -j LOG +-A logdrop-1701 -j DROP +-A logdrop-1702 -m limit --limit 1/second -j LOG +-A logdrop-1702 -j DROP +-A logdrop-1703 -m limit --limit 1/second -j LOG +-A logdrop-1703 -j DROP +-A logdrop-1704 -m limit --limit 1/second -j LOG +-A logdrop-1704 -j DROP +-A logdrop-1705 -m limit --limit 1/second -j LOG +-A logdrop-1705 -j DROP +-A logdrop-1706 -m limit --limit 1/second -j LOG +-A logdrop-1706 -j DROP +-A logdrop-1707 -m limit --limit 1/second -j LOG +-A logdrop-1707 -j DROP +-A logdrop-1708 -m limit --limit 1/second -j LOG +-A logdrop-1708 -j DROP +-A logdrop-1709 -m limit --limit 1/second -j LOG +-A logdrop-1709 -j DROP +-A logdrop-171 -j TEE --gateway fc00::2 -A logdrop-171 -j DROP --A logdrop-172 -m limit --limit 1/second -j LOG +-A logdrop-1710 -m limit --limit 1/second -j LOG +-A logdrop-1710 -j DROP +-A logdrop-1711 -m limit --limit 1/second -j LOG +-A logdrop-1711 -j DROP +-A logdrop-1712 -m limit --limit 1/second -j LOG +-A logdrop-1712 -j DROP +-A logdrop-1713 -m limit --limit 1/second -j LOG +-A logdrop-1713 -j DROP +-A logdrop-1714 -m limit --limit 1/second -j LOG +-A logdrop-1714 -j DROP +-A logdrop-1715 -m limit --limit 1/second -j LOG +-A logdrop-1715 -j DROP +-A logdrop-1716 -m limit --limit 1/second -j LOG +-A logdrop-1716 -j DROP +-A logdrop-1717 -m limit --limit 1/second -j LOG +-A logdrop-1717 -j DROP +-A logdrop-1718 -m limit --limit 1/second -j LOG +-A logdrop-1718 -j DROP +-A logdrop-1719 -m limit --limit 1/second -j LOG +-A logdrop-1719 -j DROP +-A logdrop-172 -j TEE --gateway fc00::2 -A logdrop-172 -j DROP --A logdrop-173 -m limit --limit 1/second -j LOG +-A logdrop-1720 -m limit --limit 1/second -j LOG +-A logdrop-1720 -j DROP +-A logdrop-1721 -m limit --limit 1/second -j LOG +-A logdrop-1721 -j DROP +-A logdrop-1722 -m limit --limit 1/second -j LOG +-A logdrop-1722 -j DROP +-A logdrop-1723 -m limit --limit 1/second -j LOG +-A logdrop-1723 -j DROP +-A logdrop-1724 -m limit --limit 1/second -j LOG +-A logdrop-1724 -j DROP +-A logdrop-1725 -m limit --limit 1/second -j LOG +-A logdrop-1725 -j DROP +-A logdrop-1726 -m limit --limit 1/second -j LOG +-A logdrop-1726 -j DROP +-A logdrop-1727 -m limit --limit 1/second -j LOG +-A logdrop-1727 -j DROP +-A logdrop-1728 -m limit --limit 1/second -j LOG +-A logdrop-1728 -j DROP +-A logdrop-1729 -m limit --limit 1/second -j LOG +-A logdrop-1729 -j DROP +-A logdrop-173 -j TEE --gateway fc00::2 -A logdrop-173 -j DROP --A logdrop-174 -m limit --limit 1/second -j LOG +-A logdrop-1730 -m limit --limit 1/second -j LOG +-A logdrop-1730 -j DROP +-A logdrop-1731 -m limit --limit 1/second -j LOG +-A logdrop-1731 -j DROP +-A logdrop-1732 -m limit --limit 1/second -j LOG +-A logdrop-1732 -j DROP +-A logdrop-1733 -m limit --limit 1/second -j LOG +-A logdrop-1733 -j DROP +-A logdrop-1734 -m limit --limit 1/second -j LOG +-A logdrop-1734 -j DROP +-A logdrop-1735 -m limit --limit 1/second -j LOG +-A logdrop-1735 -j DROP +-A logdrop-1736 -m limit --limit 1/second -j LOG +-A logdrop-1736 -j DROP +-A logdrop-1737 -m limit --limit 1/second -j LOG +-A logdrop-1737 -j DROP +-A logdrop-1738 -m limit --limit 1/second -j LOG +-A logdrop-1738 -j DROP +-A logdrop-1739 -m limit --limit 1/second -j LOG +-A logdrop-1739 -j DROP +-A logdrop-174 -j TEE --gateway fc00::2 -A logdrop-174 -j DROP --A logdrop-175 -m limit --limit 1/second -j LOG +-A logdrop-1740 -m limit --limit 1/second -j LOG +-A logdrop-1740 -j DROP +-A logdrop-1741 -m limit --limit 1/second -j LOG +-A logdrop-1741 -j DROP +-A logdrop-1742 -m limit --limit 1/second -j LOG +-A logdrop-1742 -j DROP +-A logdrop-1743 -m limit --limit 1/second -j LOG +-A logdrop-1743 -j DROP +-A logdrop-1744 -m limit --limit 1/second -j LOG +-A logdrop-1744 -j DROP +-A logdrop-1745 -m limit --limit 1/second -j LOG +-A logdrop-1745 -j DROP +-A logdrop-1746 -m limit --limit 1/second -j LOG +-A logdrop-1746 -j DROP +-A logdrop-1747 -m limit --limit 1/second -j LOG +-A logdrop-1747 -j DROP +-A logdrop-1748 -m limit --limit 1/second -j LOG +-A logdrop-1748 -j DROP +-A logdrop-1749 -m limit --limit 1/second -j LOG +-A logdrop-1749 -j DROP +-A logdrop-175 -j TEE --gateway fc00::2 -A logdrop-175 -j DROP --A logdrop-176 -m limit --limit 1/second -j LOG +-A logdrop-1750 -j TEE --gateway fc00::2 +-A logdrop-1750 -j DROP +-A logdrop-1751 -j TEE --gateway fc00::2 +-A logdrop-1751 -j DROP +-A logdrop-1752 -j TEE --gateway fc00::2 +-A logdrop-1752 -j DROP +-A logdrop-1753 -j TEE --gateway fc00::2 +-A logdrop-1753 -j DROP +-A logdrop-1754 -j TEE --gateway fc00::2 +-A logdrop-1754 -j DROP +-A logdrop-1755 -j TEE --gateway fc00::2 +-A logdrop-1755 -j DROP +-A logdrop-1756 -j TEE --gateway fc00::2 +-A logdrop-1756 -j DROP +-A logdrop-1757 -j TEE --gateway fc00::2 +-A logdrop-1757 -j DROP +-A logdrop-1758 -j TEE --gateway fc00::2 +-A logdrop-1758 -j DROP +-A logdrop-1759 -j TEE --gateway fc00::2 +-A logdrop-1759 -j DROP +-A logdrop-176 -j TEE --gateway fc00::2 -A logdrop-176 -j DROP --A logdrop-177 -m limit --limit 1/second -j LOG +-A logdrop-1760 -j TEE --gateway fc00::2 +-A logdrop-1760 -j DROP +-A logdrop-1761 -j TEE --gateway fc00::2 +-A logdrop-1761 -j DROP +-A logdrop-1762 -j TEE --gateway fc00::2 +-A logdrop-1762 -j DROP +-A logdrop-1763 -j TEE --gateway fc00::2 +-A logdrop-1763 -j DROP +-A logdrop-1764 -j TEE --gateway fc00::2 +-A logdrop-1764 -j DROP +-A logdrop-1765 -j TEE --gateway fc00::2 +-A logdrop-1765 -j DROP +-A logdrop-1766 -j TEE --gateway fc00::2 +-A logdrop-1766 -j DROP +-A logdrop-1767 -j TEE --gateway fc00::2 +-A logdrop-1767 -j DROP +-A logdrop-1768 -j TEE --gateway fc00::2 +-A logdrop-1768 -j DROP +-A logdrop-1769 -j TEE --gateway fc00::2 +-A logdrop-1769 -j DROP +-A logdrop-177 -j TEE --gateway fc00::2 -A logdrop-177 -j DROP --A logdrop-178 -m limit --limit 1/second -j LOG +-A logdrop-1770 -j TEE --gateway fc00::2 +-A logdrop-1770 -j DROP +-A logdrop-1771 -j TEE --gateway fc00::2 +-A logdrop-1771 -j DROP +-A logdrop-1772 -j TEE --gateway fc00::2 +-A logdrop-1772 -j DROP +-A logdrop-1773 -j TEE --gateway fc00::2 +-A logdrop-1773 -j DROP +-A logdrop-1774 -j TEE --gateway fc00::2 +-A logdrop-1774 -j DROP +-A logdrop-1775 -j TEE --gateway fc00::2 +-A logdrop-1775 -j DROP +-A logdrop-1776 -j TEE --gateway fc00::2 +-A logdrop-1776 -j DROP +-A logdrop-1777 -j TEE --gateway fc00::2 +-A logdrop-1777 -j DROP +-A logdrop-1778 -j TEE --gateway fc00::2 +-A logdrop-1778 -j DROP +-A logdrop-1779 -j TEE --gateway fc00::2 +-A logdrop-1779 -j DROP +-A logdrop-178 -j TEE --gateway fc00::2 -A logdrop-178 -j DROP --A logdrop-179 -m limit --limit 1/second -j LOG +-A logdrop-1780 -j TEE --gateway fc00::2 +-A logdrop-1780 -j DROP +-A logdrop-1781 -j TEE --gateway fc00::2 +-A logdrop-1781 -j DROP +-A logdrop-1782 -j TEE --gateway fc00::2 +-A logdrop-1782 -j DROP +-A logdrop-1783 -j TEE --gateway fc00::2 +-A logdrop-1783 -j DROP +-A logdrop-1784 -j TEE --gateway fc00::2 +-A logdrop-1784 -j DROP +-A logdrop-1785 -j TEE --gateway fc00::2 +-A logdrop-1785 -j DROP +-A logdrop-1786 -j TEE --gateway fc00::2 +-A logdrop-1786 -j DROP +-A logdrop-1787 -j TEE --gateway fc00::2 +-A logdrop-1787 -j DROP +-A logdrop-1788 -j TEE --gateway fc00::2 +-A logdrop-1788 -j DROP +-A logdrop-1789 -j TEE --gateway fc00::2 +-A logdrop-1789 -j DROP +-A logdrop-179 -j TEE --gateway fc00::2 -A logdrop-179 -j DROP +-A logdrop-1790 -j TEE --gateway fc00::2 +-A logdrop-1790 -j DROP +-A logdrop-1791 -j TEE --gateway fc00::2 +-A logdrop-1791 -j DROP +-A logdrop-1792 -j TEE --gateway fc00::2 +-A logdrop-1792 -j DROP +-A logdrop-1793 -j TEE --gateway fc00::2 +-A logdrop-1793 -j DROP +-A logdrop-1794 -j TEE --gateway fc00::2 +-A logdrop-1794 -j DROP +-A logdrop-1795 -j TEE --gateway fc00::2 +-A logdrop-1795 -j DROP +-A logdrop-1796 -j TEE --gateway fc00::2 +-A logdrop-1796 -j DROP +-A logdrop-1797 -j TEE --gateway fc00::2 +-A logdrop-1797 -j DROP +-A logdrop-1798 -j TEE --gateway fc00::2 +-A logdrop-1798 -j DROP +-A logdrop-1799 -j TEE --gateway fc00::2 +-A logdrop-1799 -j DROP -A logdrop-18 -m limit --limit 1/second -j LOG -A logdrop-18 -j DROP --A logdrop-180 -m limit --limit 1/second -j LOG +-A logdrop-180 -j TEE --gateway fc00::2 -A logdrop-180 -j DROP --A logdrop-181 -m limit --limit 1/second -j LOG +-A logdrop-1800 -j TEE --gateway fc00::2 +-A logdrop-1800 -j DROP +-A logdrop-1801 -j TEE --gateway fc00::2 +-A logdrop-1801 -j DROP +-A logdrop-1802 -j TEE --gateway fc00::2 +-A logdrop-1802 -j DROP +-A logdrop-1803 -j TEE --gateway fc00::2 +-A logdrop-1803 -j DROP +-A logdrop-1804 -j TEE --gateway fc00::2 +-A logdrop-1804 -j DROP +-A logdrop-1805 -j TEE --gateway fc00::2 +-A logdrop-1805 -j DROP +-A logdrop-1806 -j TEE --gateway fc00::2 +-A logdrop-1806 -j DROP +-A logdrop-1807 -j TEE --gateway fc00::2 +-A logdrop-1807 -j DROP +-A logdrop-1808 -j TEE --gateway fc00::2 +-A logdrop-1808 -j DROP +-A logdrop-1809 -j TEE --gateway fc00::2 +-A logdrop-1809 -j DROP +-A logdrop-181 -j TEE --gateway fc00::2 -A logdrop-181 -j DROP --A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-1810 -j TEE --gateway fc00::2 +-A logdrop-1810 -j DROP +-A logdrop-1811 -j TEE --gateway fc00::2 +-A logdrop-1811 -j DROP +-A logdrop-1812 -j TEE --gateway fc00::2 +-A logdrop-1812 -j DROP +-A logdrop-1813 -j TEE --gateway fc00::2 +-A logdrop-1813 -j DROP +-A logdrop-1814 -j TEE --gateway fc00::2 +-A logdrop-1814 -j DROP +-A logdrop-1815 -j TEE --gateway fc00::2 +-A logdrop-1815 -j DROP +-A logdrop-1816 -j TEE --gateway fc00::2 +-A logdrop-1816 -j DROP +-A logdrop-1817 -j TEE --gateway fc00::2 +-A logdrop-1817 -j DROP +-A logdrop-1818 -j TEE --gateway fc00::2 +-A logdrop-1818 -j DROP +-A logdrop-1819 -j TEE --gateway fc00::2 +-A logdrop-1819 -j DROP +-A logdrop-182 -j TEE --gateway fc00::2 -A logdrop-182 -j DROP --A logdrop-183 -m limit --limit 1/second -j LOG +-A logdrop-1820 -j TEE --gateway fc00::2 +-A logdrop-1820 -j DROP +-A logdrop-1821 -j TEE --gateway fc00::2 +-A logdrop-1821 -j DROP +-A logdrop-1822 -j TEE --gateway fc00::2 +-A logdrop-1822 -j DROP +-A logdrop-1823 -j TEE --gateway fc00::2 +-A logdrop-1823 -j DROP +-A logdrop-1824 -j TEE --gateway fc00::2 +-A logdrop-1824 -j DROP +-A logdrop-1825 -j TEE --gateway fc00::2 +-A logdrop-1825 -j DROP +-A logdrop-1826 -j TEE --gateway fc00::2 +-A logdrop-1826 -j DROP +-A logdrop-1827 -j TEE --gateway fc00::2 +-A logdrop-1827 -j DROP +-A logdrop-1828 -j TEE --gateway fc00::2 +-A logdrop-1828 -j DROP +-A logdrop-1829 -j TEE --gateway fc00::2 +-A logdrop-1829 -j DROP +-A logdrop-183 -j TEE --gateway fc00::2 -A logdrop-183 -j DROP --A logdrop-184 -m limit --limit 1/second -j LOG +-A logdrop-1830 -j TEE --gateway fc00::2 +-A logdrop-1830 -j DROP +-A logdrop-1831 -j TEE --gateway fc00::2 +-A logdrop-1831 -j DROP +-A logdrop-1832 -j TEE --gateway fc00::2 +-A logdrop-1832 -j DROP +-A logdrop-1833 -j TEE --gateway fc00::2 +-A logdrop-1833 -j DROP +-A logdrop-1834 -j TEE --gateway fc00::2 +-A logdrop-1834 -j DROP +-A logdrop-1835 -j TEE --gateway fc00::2 +-A logdrop-1835 -j DROP +-A logdrop-1836 -j TEE --gateway fc00::2 +-A logdrop-1836 -j DROP +-A logdrop-1837 -j TEE --gateway fc00::2 +-A logdrop-1837 -j DROP +-A logdrop-1838 -j TEE --gateway fc00::2 +-A logdrop-1838 -j DROP +-A logdrop-1839 -j TEE --gateway fc00::2 +-A logdrop-1839 -j DROP +-A logdrop-184 -j TEE --gateway fc00::2 -A logdrop-184 -j DROP --A logdrop-185 -m limit --limit 1/second -j LOG +-A logdrop-1840 -j DROP +-A logdrop-1841 -j DROP +-A logdrop-1842 -j DROP +-A logdrop-1843 -j DROP +-A logdrop-1844 -j DROP +-A logdrop-1845 -j DROP +-A logdrop-1846 -j DROP +-A logdrop-1847 -j DROP +-A logdrop-1848 -j DROP +-A logdrop-1849 -j DROP +-A logdrop-185 -j TEE --gateway fc00::2 -A logdrop-185 -j DROP --A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-1850 -j DROP +-A logdrop-1851 -j DROP +-A logdrop-1852 -j DROP +-A logdrop-1853 -j DROP +-A logdrop-1854 -j DROP +-A logdrop-1855 -j DROP +-A logdrop-1856 -j DROP +-A logdrop-1857 -j DROP +-A logdrop-1858 -j DROP +-A logdrop-1859 -j DROP +-A logdrop-186 -j TEE --gateway fc00::2 -A logdrop-186 -j DROP --A logdrop-187 -m limit --limit 1/second -j LOG +-A logdrop-1860 -j DROP +-A logdrop-1861 -j DROP +-A logdrop-1862 -j DROP +-A logdrop-1863 -j DROP +-A logdrop-1864 -j DROP +-A logdrop-1865 -j DROP +-A logdrop-1866 -j DROP +-A logdrop-1867 -j DROP +-A logdrop-1868 -j DROP +-A logdrop-1869 -j DROP +-A logdrop-187 -j TEE --gateway fc00::2 -A logdrop-187 -j DROP --A logdrop-188 -m limit --limit 1/second -j LOG +-A logdrop-1870 -j DROP +-A logdrop-1871 -j DROP +-A logdrop-1872 -j DROP +-A logdrop-1873 -j DROP +-A logdrop-1874 -j DROP +-A logdrop-1875 -j DROP +-A logdrop-1876 -j DROP +-A logdrop-1877 -j DROP +-A logdrop-1878 -j DROP +-A logdrop-1879 -j DROP +-A logdrop-188 -j TEE --gateway fc00::2 -A logdrop-188 -j DROP --A logdrop-189 -m limit --limit 1/second -j LOG +-A logdrop-1880 -j DROP +-A logdrop-1881 -j DROP +-A logdrop-1882 -j DROP +-A logdrop-1883 -j DROP +-A logdrop-1884 -j DROP +-A logdrop-1885 -j DROP +-A logdrop-1886 -j DROP +-A logdrop-1887 -j DROP +-A logdrop-1888 -j DROP +-A logdrop-1889 -j DROP +-A logdrop-189 -j TEE --gateway fc00::2 -A logdrop-189 -j DROP +-A logdrop-1890 -j DROP +-A logdrop-1891 -j DROP +-A logdrop-1892 -j DROP +-A logdrop-1893 -j DROP +-A logdrop-1894 -j DROP +-A logdrop-1895 -j DROP +-A logdrop-1896 -j DROP +-A logdrop-1897 -j DROP +-A logdrop-1898 -j DROP +-A logdrop-1899 -j DROP -A logdrop-19 -m limit --limit 1/second -j LOG -A logdrop-19 -j DROP --A logdrop-190 -m limit --limit 1/second -j LOG -A logdrop-190 -j DROP --A logdrop-191 -m limit --limit 1/second -j LOG +-A logdrop-1900 -j DROP +-A logdrop-1901 -j DROP +-A logdrop-1902 -j DROP +-A logdrop-1903 -j DROP +-A logdrop-1904 -j DROP +-A logdrop-1905 -j DROP +-A logdrop-1906 -j DROP +-A logdrop-1907 -j DROP +-A logdrop-1908 -j DROP +-A logdrop-1909 -j DROP -A logdrop-191 -j DROP --A logdrop-192 -m limit --limit 1/second -j LOG +-A logdrop-1910 -j DROP +-A logdrop-1911 -j DROP +-A logdrop-1912 -j DROP +-A logdrop-1913 -j DROP +-A logdrop-1914 -j DROP +-A logdrop-1915 -j DROP +-A logdrop-1916 -j DROP +-A logdrop-1917 -j DROP +-A logdrop-1918 -j DROP +-A logdrop-1919 -j DROP -A logdrop-192 -j DROP --A logdrop-193 -m limit --limit 1/second -j LOG +-A logdrop-1920 -j DROP +-A logdrop-1921 -j DROP +-A logdrop-1922 -j DROP +-A logdrop-1923 -j DROP +-A logdrop-1924 -j DROP +-A logdrop-1925 -j DROP +-A logdrop-1926 -j DROP +-A logdrop-1927 -j DROP +-A logdrop-1928 -j DROP +-A logdrop-1929 -j DROP -A logdrop-193 -j DROP --A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-1930 -m limit --limit 1/second -j LOG +-A logdrop-1930 -j DROP +-A logdrop-1931 -m limit --limit 1/second -j LOG +-A logdrop-1931 -j DROP +-A logdrop-1932 -m limit --limit 1/second -j LOG +-A logdrop-1932 -j DROP +-A logdrop-1933 -m limit --limit 1/second -j LOG +-A logdrop-1933 -j DROP +-A logdrop-1934 -m limit --limit 1/second -j LOG +-A logdrop-1934 -j DROP +-A logdrop-1935 -m limit --limit 1/second -j LOG +-A logdrop-1935 -j DROP +-A logdrop-1936 -m limit --limit 1/second -j LOG +-A logdrop-1936 -j DROP +-A logdrop-1937 -m limit --limit 1/second -j LOG +-A logdrop-1937 -j DROP +-A logdrop-1938 -m limit --limit 1/second -j LOG +-A logdrop-1938 -j DROP +-A logdrop-1939 -m limit --limit 1/second -j LOG +-A logdrop-1939 -j DROP -A logdrop-194 -j DROP --A logdrop-195 -m limit --limit 1/second -j LOG +-A logdrop-1940 -m limit --limit 1/second -j LOG +-A logdrop-1940 -j DROP +-A logdrop-1941 -m limit --limit 1/second -j LOG +-A logdrop-1941 -j DROP +-A logdrop-1942 -m limit --limit 1/second -j LOG +-A logdrop-1942 -j DROP +-A logdrop-1943 -m limit --limit 1/second -j LOG +-A logdrop-1943 -j DROP +-A logdrop-1944 -m limit --limit 1/second -j LOG +-A logdrop-1944 -j DROP +-A logdrop-1945 -m limit --limit 1/second -j LOG +-A logdrop-1945 -j DROP +-A logdrop-1946 -m limit --limit 1/second -j LOG +-A logdrop-1946 -j DROP +-A logdrop-1947 -m limit --limit 1/second -j LOG +-A logdrop-1947 -j DROP +-A logdrop-1948 -m limit --limit 1/second -j LOG +-A logdrop-1948 -j DROP +-A logdrop-1949 -m limit --limit 1/second -j LOG +-A logdrop-1949 -j DROP -A logdrop-195 -j DROP --A logdrop-196 -m limit --limit 1/second -j LOG +-A logdrop-1950 -m limit --limit 1/second -j LOG +-A logdrop-1950 -j DROP +-A logdrop-1951 -m limit --limit 1/second -j LOG +-A logdrop-1951 -j DROP +-A logdrop-1952 -m limit --limit 1/second -j LOG +-A logdrop-1952 -j DROP +-A logdrop-1953 -m limit --limit 1/second -j LOG +-A logdrop-1953 -j DROP +-A logdrop-1954 -m limit --limit 1/second -j LOG +-A logdrop-1954 -j DROP +-A logdrop-1955 -m limit --limit 1/second -j LOG +-A logdrop-1955 -j DROP +-A logdrop-1956 -m limit --limit 1/second -j LOG +-A logdrop-1956 -j DROP +-A logdrop-1957 -m limit --limit 1/second -j LOG +-A logdrop-1957 -j DROP +-A logdrop-1958 -m limit --limit 1/second -j LOG +-A logdrop-1958 -j DROP +-A logdrop-1959 -m limit --limit 1/second -j LOG +-A logdrop-1959 -j DROP -A logdrop-196 -j DROP --A logdrop-197 -m limit --limit 1/second -j LOG +-A logdrop-1960 -m limit --limit 1/second -j LOG +-A logdrop-1960 -j DROP +-A logdrop-1961 -m limit --limit 1/second -j LOG +-A logdrop-1961 -j DROP +-A logdrop-1962 -m limit --limit 1/second -j LOG +-A logdrop-1962 -j DROP +-A logdrop-1963 -m limit --limit 1/second -j LOG +-A logdrop-1963 -j DROP +-A logdrop-1964 -m limit --limit 1/second -j LOG +-A logdrop-1964 -j DROP +-A logdrop-1965 -m limit --limit 1/second -j LOG +-A logdrop-1965 -j DROP +-A logdrop-1966 -m limit --limit 1/second -j LOG +-A logdrop-1966 -j DROP +-A logdrop-1967 -m limit --limit 1/second -j LOG +-A logdrop-1967 -j DROP +-A logdrop-1968 -m limit --limit 1/second -j LOG +-A logdrop-1968 -j DROP +-A logdrop-1969 -m limit --limit 1/second -j LOG +-A logdrop-1969 -j DROP -A logdrop-197 -j DROP --A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-1970 -m limit --limit 1/second -j LOG +-A logdrop-1970 -j DROP +-A logdrop-1971 -m limit --limit 1/second -j LOG +-A logdrop-1971 -j DROP +-A logdrop-1972 -m limit --limit 1/second -j LOG +-A logdrop-1972 -j DROP +-A logdrop-1973 -m limit --limit 1/second -j LOG +-A logdrop-1973 -j DROP +-A logdrop-1974 -m limit --limit 1/second -j LOG +-A logdrop-1974 -j DROP +-A logdrop-1975 -m limit --limit 1/second -j LOG +-A logdrop-1975 -j DROP +-A logdrop-1976 -m limit --limit 1/second -j LOG +-A logdrop-1976 -j DROP +-A logdrop-1977 -m limit --limit 1/second -j LOG +-A logdrop-1977 -j DROP +-A logdrop-1978 -m limit --limit 1/second -j LOG +-A logdrop-1978 -j DROP +-A logdrop-1979 -m limit --limit 1/second -j LOG +-A logdrop-1979 -j DROP -A logdrop-198 -j DROP --A logdrop-199 -m limit --limit 1/second -j LOG +-A logdrop-1980 -m limit --limit 1/second -j LOG +-A logdrop-1980 -j DROP +-A logdrop-1981 -m limit --limit 1/second -j LOG +-A logdrop-1981 -j DROP +-A logdrop-1982 -m limit --limit 1/second -j LOG +-A logdrop-1982 -j DROP +-A logdrop-1983 -m limit --limit 1/second -j LOG +-A logdrop-1983 -j DROP +-A logdrop-1984 -m limit --limit 1/second -j LOG +-A logdrop-1984 -j DROP +-A logdrop-1985 -m limit --limit 1/second -j LOG +-A logdrop-1985 -j DROP +-A logdrop-1986 -m limit --limit 1/second -j LOG +-A logdrop-1986 -j DROP +-A logdrop-1987 -m limit --limit 1/second -j LOG +-A logdrop-1987 -j DROP +-A logdrop-1988 -m limit --limit 1/second -j LOG +-A logdrop-1988 -j DROP +-A logdrop-1989 -m limit --limit 1/second -j LOG +-A logdrop-1989 -j DROP -A logdrop-199 -j DROP +-A logdrop-1990 -m limit --limit 1/second -j LOG +-A logdrop-1990 -j DROP +-A logdrop-1991 -m limit --limit 1/second -j LOG +-A logdrop-1991 -j DROP +-A logdrop-1992 -m limit --limit 1/second -j LOG +-A logdrop-1992 -j DROP +-A logdrop-1993 -m limit --limit 1/second -j LOG +-A logdrop-1993 -j DROP +-A logdrop-1994 -m limit --limit 1/second -j LOG +-A logdrop-1994 -j DROP +-A logdrop-1995 -m limit --limit 1/second -j LOG +-A logdrop-1995 -j DROP +-A logdrop-1996 -m limit --limit 1/second -j LOG +-A logdrop-1996 -j DROP +-A logdrop-1997 -m limit --limit 1/second -j LOG +-A logdrop-1997 -j DROP +-A logdrop-1998 -m limit --limit 1/second -j LOG +-A logdrop-1998 -j DROP +-A logdrop-1999 -m limit --limit 1/second -j LOG +-A logdrop-1999 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-20 -m limit --limit 1/second -j LOG -A logdrop-20 -j DROP --A logdrop-200 -m limit --limit 1/second -j LOG -A logdrop-200 -j DROP --A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-2000 -m limit --limit 1/second -j LOG +-A logdrop-2000 -j DROP +-A logdrop-2001 -m limit --limit 1/second -j LOG +-A logdrop-2001 -j DROP +-A logdrop-2002 -m limit --limit 1/second -j LOG +-A logdrop-2002 -j DROP +-A logdrop-2003 -m limit --limit 1/second -j LOG +-A logdrop-2003 -j DROP +-A logdrop-2004 -m limit --limit 1/second -j LOG +-A logdrop-2004 -j DROP +-A logdrop-2005 -m limit --limit 1/second -j LOG +-A logdrop-2005 -j DROP +-A logdrop-2006 -m limit --limit 1/second -j LOG +-A logdrop-2006 -j DROP +-A logdrop-2007 -m limit --limit 1/second -j LOG +-A logdrop-2007 -j DROP +-A logdrop-2008 -m limit --limit 1/second -j LOG +-A logdrop-2008 -j DROP +-A logdrop-2009 -m limit --limit 1/second -j LOG +-A logdrop-2009 -j DROP -A logdrop-201 -j DROP --A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-2010 -m limit --limit 1/second -j LOG +-A logdrop-2010 -j DROP +-A logdrop-2011 -m limit --limit 1/second -j LOG +-A logdrop-2011 -j DROP +-A logdrop-2012 -m limit --limit 1/second -j LOG +-A logdrop-2012 -j DROP +-A logdrop-2013 -m limit --limit 1/second -j LOG +-A logdrop-2013 -j DROP +-A logdrop-2014 -m limit --limit 1/second -j LOG +-A logdrop-2014 -j DROP +-A logdrop-2015 -m limit --limit 1/second -j LOG +-A logdrop-2015 -j DROP +-A logdrop-2016 -m limit --limit 1/second -j LOG +-A logdrop-2016 -j DROP +-A logdrop-2017 -m limit --limit 1/second -j LOG +-A logdrop-2017 -j DROP +-A logdrop-2018 -m limit --limit 1/second -j LOG +-A logdrop-2018 -j DROP +-A logdrop-2019 -m limit --limit 1/second -j LOG +-A logdrop-2019 -j DROP -A logdrop-202 -j DROP --A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-2020 -j TEE --gateway fc00::2 +-A logdrop-2020 -j DROP +-A logdrop-2021 -j TEE --gateway fc00::2 +-A logdrop-2021 -j DROP +-A logdrop-2022 -j TEE --gateway fc00::2 +-A logdrop-2022 -j DROP +-A logdrop-2023 -j TEE --gateway fc00::2 +-A logdrop-2023 -j DROP +-A logdrop-2024 -j TEE --gateway fc00::2 +-A logdrop-2024 -j DROP +-A logdrop-2025 -j TEE --gateway fc00::2 +-A logdrop-2025 -j DROP +-A logdrop-2026 -j TEE --gateway fc00::2 +-A logdrop-2026 -j DROP +-A logdrop-2027 -j TEE --gateway fc00::2 +-A logdrop-2027 -j DROP +-A logdrop-2028 -j TEE --gateway fc00::2 +-A logdrop-2028 -j DROP +-A logdrop-2029 -j TEE --gateway fc00::2 +-A logdrop-2029 -j DROP -A logdrop-203 -j DROP --A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-2030 -j TEE --gateway fc00::2 +-A logdrop-2030 -j DROP +-A logdrop-2031 -j TEE --gateway fc00::2 +-A logdrop-2031 -j DROP +-A logdrop-2032 -j TEE --gateway fc00::2 +-A logdrop-2032 -j DROP +-A logdrop-2033 -j TEE --gateway fc00::2 +-A logdrop-2033 -j DROP +-A logdrop-2034 -j TEE --gateway fc00::2 +-A logdrop-2034 -j DROP +-A logdrop-2035 -j TEE --gateway fc00::2 +-A logdrop-2035 -j DROP +-A logdrop-2036 -j TEE --gateway fc00::2 +-A logdrop-2036 -j DROP +-A logdrop-2037 -j TEE --gateway fc00::2 +-A logdrop-2037 -j DROP +-A logdrop-2038 -j TEE --gateway fc00::2 +-A logdrop-2038 -j DROP +-A logdrop-2039 -j TEE --gateway fc00::2 +-A logdrop-2039 -j DROP -A logdrop-204 -j DROP --A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-2040 -j TEE --gateway fc00::2 +-A logdrop-2040 -j DROP +-A logdrop-2041 -j TEE --gateway fc00::2 +-A logdrop-2041 -j DROP +-A logdrop-2042 -j TEE --gateway fc00::2 +-A logdrop-2042 -j DROP +-A logdrop-2043 -j TEE --gateway fc00::2 +-A logdrop-2043 -j DROP +-A logdrop-2044 -j TEE --gateway fc00::2 +-A logdrop-2044 -j DROP +-A logdrop-2045 -j TEE --gateway fc00::2 +-A logdrop-2045 -j DROP +-A logdrop-2046 -j TEE --gateway fc00::2 +-A logdrop-2046 -j DROP +-A logdrop-2047 -j TEE --gateway fc00::2 +-A logdrop-2047 -j DROP +-A logdrop-2048 -j TEE --gateway fc00::2 +-A logdrop-2048 -j DROP +-A logdrop-2049 -j TEE --gateway fc00::2 +-A logdrop-2049 -j DROP -A logdrop-205 -j DROP --A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-2050 -j TEE --gateway fc00::2 +-A logdrop-2050 -j DROP +-A logdrop-2051 -j TEE --gateway fc00::2 +-A logdrop-2051 -j DROP +-A logdrop-2052 -j TEE --gateway fc00::2 +-A logdrop-2052 -j DROP +-A logdrop-2053 -j TEE --gateway fc00::2 +-A logdrop-2053 -j DROP +-A logdrop-2054 -j TEE --gateway fc00::2 +-A logdrop-2054 -j DROP +-A logdrop-2055 -j TEE --gateway fc00::2 +-A logdrop-2055 -j DROP +-A logdrop-2056 -j TEE --gateway fc00::2 +-A logdrop-2056 -j DROP +-A logdrop-2057 -j TEE --gateway fc00::2 +-A logdrop-2057 -j DROP +-A logdrop-2058 -j TEE --gateway fc00::2 +-A logdrop-2058 -j DROP +-A logdrop-2059 -j TEE --gateway fc00::2 +-A logdrop-2059 -j DROP -A logdrop-206 -j DROP --A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-2060 -j TEE --gateway fc00::2 +-A logdrop-2060 -j DROP +-A logdrop-2061 -j TEE --gateway fc00::2 +-A logdrop-2061 -j DROP +-A logdrop-2062 -j TEE --gateway fc00::2 +-A logdrop-2062 -j DROP +-A logdrop-2063 -j TEE --gateway fc00::2 +-A logdrop-2063 -j DROP +-A logdrop-2064 -j TEE --gateway fc00::2 +-A logdrop-2064 -j DROP +-A logdrop-2065 -j TEE --gateway fc00::2 +-A logdrop-2065 -j DROP +-A logdrop-2066 -j TEE --gateway fc00::2 +-A logdrop-2066 -j DROP +-A logdrop-2067 -j TEE --gateway fc00::2 +-A logdrop-2067 -j DROP +-A logdrop-2068 -j TEE --gateway fc00::2 +-A logdrop-2068 -j DROP +-A logdrop-2069 -j TEE --gateway fc00::2 +-A logdrop-2069 -j DROP -A logdrop-207 -j DROP --A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-2070 -j TEE --gateway fc00::2 +-A logdrop-2070 -j DROP +-A logdrop-2071 -j TEE --gateway fc00::2 +-A logdrop-2071 -j DROP +-A logdrop-2072 -j TEE --gateway fc00::2 +-A logdrop-2072 -j DROP +-A logdrop-2073 -j TEE --gateway fc00::2 +-A logdrop-2073 -j DROP +-A logdrop-2074 -j TEE --gateway fc00::2 +-A logdrop-2074 -j DROP +-A logdrop-2075 -j TEE --gateway fc00::2 +-A logdrop-2075 -j DROP +-A logdrop-2076 -j TEE --gateway fc00::2 +-A logdrop-2076 -j DROP +-A logdrop-2077 -j TEE --gateway fc00::2 +-A logdrop-2077 -j DROP +-A logdrop-2078 -j TEE --gateway fc00::2 +-A logdrop-2078 -j DROP +-A logdrop-2079 -j TEE --gateway fc00::2 +-A logdrop-2079 -j DROP -A logdrop-208 -j DROP --A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-2080 -j TEE --gateway fc00::2 +-A logdrop-2080 -j DROP +-A logdrop-2081 -j TEE --gateway fc00::2 +-A logdrop-2081 -j DROP +-A logdrop-2082 -j TEE --gateway fc00::2 +-A logdrop-2082 -j DROP +-A logdrop-2083 -j TEE --gateway fc00::2 +-A logdrop-2083 -j DROP +-A logdrop-2084 -j TEE --gateway fc00::2 +-A logdrop-2084 -j DROP +-A logdrop-2085 -j TEE --gateway fc00::2 +-A logdrop-2085 -j DROP +-A logdrop-2086 -j TEE --gateway fc00::2 +-A logdrop-2086 -j DROP +-A logdrop-2087 -j TEE --gateway fc00::2 +-A logdrop-2087 -j DROP +-A logdrop-2088 -j TEE --gateway fc00::2 +-A logdrop-2088 -j DROP +-A logdrop-2089 -j TEE --gateway fc00::2 +-A logdrop-2089 -j DROP -A logdrop-209 -j DROP +-A logdrop-2090 -j TEE --gateway fc00::2 +-A logdrop-2090 -j DROP +-A logdrop-2091 -j TEE --gateway fc00::2 +-A logdrop-2091 -j DROP +-A logdrop-2092 -j TEE --gateway fc00::2 +-A logdrop-2092 -j DROP +-A logdrop-2093 -j TEE --gateway fc00::2 +-A logdrop-2093 -j DROP +-A logdrop-2094 -j TEE --gateway fc00::2 +-A logdrop-2094 -j DROP +-A logdrop-2095 -j TEE --gateway fc00::2 +-A logdrop-2095 -j DROP +-A logdrop-2096 -j TEE --gateway fc00::2 +-A logdrop-2096 -j DROP +-A logdrop-2097 -j TEE --gateway fc00::2 +-A logdrop-2097 -j DROP +-A logdrop-2098 -j TEE --gateway fc00::2 +-A logdrop-2098 -j DROP +-A logdrop-2099 -j TEE --gateway fc00::2 +-A logdrop-2099 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP --A logdrop-210 -m limit --limit 1/second -j LOG -A logdrop-210 -j DROP --A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-2100 -j TEE --gateway fc00::2 +-A logdrop-2100 -j DROP +-A logdrop-2101 -j TEE --gateway fc00::2 +-A logdrop-2101 -j DROP +-A logdrop-2102 -j TEE --gateway fc00::2 +-A logdrop-2102 -j DROP +-A logdrop-2103 -j TEE --gateway fc00::2 +-A logdrop-2103 -j DROP +-A logdrop-2104 -j TEE --gateway fc00::2 +-A logdrop-2104 -j DROP +-A logdrop-2105 -j TEE --gateway fc00::2 +-A logdrop-2105 -j DROP +-A logdrop-2106 -j TEE --gateway fc00::2 +-A logdrop-2106 -j DROP +-A logdrop-2107 -j TEE --gateway fc00::2 +-A logdrop-2107 -j DROP +-A logdrop-2108 -j TEE --gateway fc00::2 +-A logdrop-2108 -j DROP +-A logdrop-2109 -j TEE --gateway fc00::2 +-A logdrop-2109 -j DROP -A logdrop-211 -j DROP --A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-2110 -j DROP +-A logdrop-2111 -j DROP +-A logdrop-2112 -j DROP +-A logdrop-2113 -j DROP +-A logdrop-2114 -j DROP +-A logdrop-2115 -j DROP +-A logdrop-2116 -j DROP +-A logdrop-2117 -j DROP +-A logdrop-2118 -j DROP +-A logdrop-2119 -j DROP -A logdrop-212 -j DROP --A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-2120 -j DROP +-A logdrop-2121 -j DROP +-A logdrop-2122 -j DROP +-A logdrop-2123 -j DROP +-A logdrop-2124 -j DROP +-A logdrop-2125 -j DROP +-A logdrop-2126 -j DROP +-A logdrop-2127 -j DROP +-A logdrop-2128 -j DROP +-A logdrop-2129 -j DROP -A logdrop-213 -j DROP --A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-2130 -j DROP +-A logdrop-2131 -j DROP +-A logdrop-2132 -j DROP +-A logdrop-2133 -j DROP +-A logdrop-2134 -j DROP +-A logdrop-2135 -j DROP +-A logdrop-2136 -j DROP +-A logdrop-2137 -j DROP +-A logdrop-2138 -j DROP +-A logdrop-2139 -j DROP -A logdrop-214 -j DROP --A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-2140 -j DROP +-A logdrop-2141 -j DROP +-A logdrop-2142 -j DROP +-A logdrop-2143 -j DROP +-A logdrop-2144 -j DROP +-A logdrop-2145 -j DROP +-A logdrop-2146 -j DROP +-A logdrop-2147 -j DROP +-A logdrop-2148 -j DROP +-A logdrop-2149 -j DROP -A logdrop-215 -j DROP --A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-2150 -j DROP +-A logdrop-2151 -j DROP +-A logdrop-2152 -j DROP +-A logdrop-2153 -j DROP +-A logdrop-2154 -j DROP +-A logdrop-2155 -j DROP +-A logdrop-2156 -j DROP +-A logdrop-2157 -j DROP +-A logdrop-2158 -j DROP +-A logdrop-2159 -j DROP -A logdrop-216 -j DROP --A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-2160 -j DROP +-A logdrop-2161 -j DROP +-A logdrop-2162 -j DROP +-A logdrop-2163 -j DROP +-A logdrop-2164 -j DROP +-A logdrop-2165 -j DROP +-A logdrop-2166 -j DROP +-A logdrop-2167 -j DROP +-A logdrop-2168 -j DROP +-A logdrop-2169 -j DROP -A logdrop-217 -j DROP --A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-2170 -j DROP +-A logdrop-2171 -j DROP +-A logdrop-2172 -j DROP +-A logdrop-2173 -j DROP +-A logdrop-2174 -j DROP +-A logdrop-2175 -j DROP +-A logdrop-2176 -j DROP +-A logdrop-2177 -j DROP +-A logdrop-2178 -j DROP +-A logdrop-2179 -j DROP -A logdrop-218 -j DROP --A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-2180 -j DROP +-A logdrop-2181 -j DROP +-A logdrop-2182 -j DROP +-A logdrop-2183 -j DROP +-A logdrop-2184 -j DROP +-A logdrop-2185 -j DROP +-A logdrop-2186 -j DROP +-A logdrop-2187 -j DROP +-A logdrop-2188 -j DROP +-A logdrop-2189 -j DROP -A logdrop-219 -j DROP +-A logdrop-2190 -j DROP +-A logdrop-2191 -j DROP +-A logdrop-2192 -j DROP +-A logdrop-2193 -j DROP +-A logdrop-2194 -j DROP +-A logdrop-2195 -j DROP +-A logdrop-2196 -j DROP +-A logdrop-2197 -j DROP +-A logdrop-2198 -j DROP +-A logdrop-2199 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP --A logdrop-220 -m limit --limit 1/second -j LOG -A logdrop-220 -j DROP --A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-2200 -m limit --limit 1/second -j LOG +-A logdrop-2200 -j DROP +-A logdrop-2201 -m limit --limit 1/second -j LOG +-A logdrop-2201 -j DROP +-A logdrop-2202 -j LOG +-A logdrop-2202 -j TEE --gateway fc00::1 +-A logdrop-2202 -j DROP +-A logdrop-2203 -j TEE --gateway fc00::2 +-A logdrop-2203 -j DROP +-A logdrop-2204 -j DROP -A logdrop-221 -j DROP --A logdrop-222 -m limit --limit 1/second -j LOG -A logdrop-222 -j DROP --A logdrop-223 -m limit --limit 1/second -j LOG -A logdrop-223 -j DROP -A logdrop-224 -j DROP -A logdrop-225 -j DROP @@ -69533,23 +117344,39 @@ COMMIT -A logdrop-279 -j DROP -A logdrop-28 -m limit --limit 1/second -j LOG -A logdrop-28 -j DROP +-A logdrop-280 -m limit --limit 1/second -j LOG -A logdrop-280 -j DROP +-A logdrop-281 -m limit --limit 1/second -j LOG -A logdrop-281 -j DROP +-A logdrop-282 -m limit --limit 1/second -j LOG -A logdrop-282 -j DROP +-A logdrop-283 -m limit --limit 1/second -j LOG -A logdrop-283 -j DROP +-A logdrop-284 -m limit --limit 1/second -j LOG -A logdrop-284 -j DROP +-A logdrop-285 -m limit --limit 1/second -j LOG -A logdrop-285 -j DROP +-A logdrop-286 -m limit --limit 1/second -j LOG -A logdrop-286 -j DROP +-A logdrop-287 -m limit --limit 1/second -j LOG -A logdrop-287 -j DROP +-A logdrop-288 -m limit --limit 1/second -j LOG -A logdrop-288 -j DROP +-A logdrop-289 -m limit --limit 1/second -j LOG -A logdrop-289 -j DROP -A logdrop-29 -m limit --limit 1/second -j LOG -A logdrop-29 -j DROP +-A logdrop-290 -m limit --limit 1/second -j LOG -A logdrop-290 -j DROP +-A logdrop-291 -m limit --limit 1/second -j LOG -A logdrop-291 -j DROP +-A logdrop-292 -m limit --limit 1/second -j LOG -A logdrop-292 -j DROP +-A logdrop-293 -m limit --limit 1/second -j LOG -A logdrop-293 -j DROP +-A logdrop-294 -m limit --limit 1/second -j LOG -A logdrop-294 -j DROP +-A logdrop-295 -m limit --limit 1/second -j LOG -A logdrop-295 -j DROP -A logdrop-296 -m limit --limit 1/second -j LOG -A logdrop-296 -j DROP @@ -69717,265 +117544,277 @@ COMMIT -A logdrop-369 -j DROP -A logdrop-37 -m limit --limit 1/second -j LOG -A logdrop-37 -j DROP --A logdrop-370 -m limit --limit 1/second -j LOG +-A logdrop-370 -j TEE --gateway fc00::2 -A logdrop-370 -j DROP --A logdrop-371 -m limit --limit 1/second -j LOG +-A logdrop-371 -j TEE --gateway fc00::2 -A logdrop-371 -j DROP --A logdrop-372 -m limit --limit 1/second -j LOG +-A logdrop-372 -j TEE --gateway fc00::2 -A logdrop-372 -j DROP --A logdrop-373 -m limit --limit 1/second -j LOG +-A logdrop-373 -j TEE --gateway fc00::2 -A logdrop-373 -j DROP --A logdrop-374 -m limit --limit 1/second -j LOG +-A logdrop-374 -j TEE --gateway fc00::2 -A logdrop-374 -j DROP --A logdrop-375 -m limit --limit 1/second -j LOG +-A logdrop-375 -j TEE --gateway fc00::2 -A logdrop-375 -j DROP +-A logdrop-376 -j TEE --gateway fc00::2 -A logdrop-376 -j DROP +-A logdrop-377 -j TEE --gateway fc00::2 -A logdrop-377 -j DROP +-A logdrop-378 -j TEE --gateway fc00::2 -A logdrop-378 -j DROP +-A logdrop-379 -j TEE --gateway fc00::2 -A logdrop-379 -j DROP -A logdrop-38 -m limit --limit 1/second -j LOG -A logdrop-38 -j DROP +-A logdrop-380 -j TEE --gateway fc00::2 -A logdrop-380 -j DROP +-A logdrop-381 -j TEE --gateway fc00::2 -A logdrop-381 -j DROP +-A logdrop-382 -j TEE --gateway fc00::2 -A logdrop-382 -j DROP +-A logdrop-383 -j TEE --gateway fc00::2 -A logdrop-383 -j DROP +-A logdrop-384 -j TEE --gateway fc00::2 -A logdrop-384 -j DROP +-A logdrop-385 -j TEE --gateway fc00::2 -A logdrop-385 -j DROP +-A logdrop-386 -j TEE --gateway fc00::2 -A logdrop-386 -j DROP +-A logdrop-387 -j TEE --gateway fc00::2 -A logdrop-387 -j DROP +-A logdrop-388 -j TEE --gateway fc00::2 -A logdrop-388 -j DROP +-A logdrop-389 -j TEE --gateway fc00::2 -A logdrop-389 -j DROP -A logdrop-39 -m limit --limit 1/second -j LOG -A logdrop-39 -j DROP +-A logdrop-390 -j TEE --gateway fc00::2 -A logdrop-390 -j DROP +-A logdrop-391 -j TEE --gateway fc00::2 -A logdrop-391 -j DROP +-A logdrop-392 -j TEE --gateway fc00::2 -A logdrop-392 -j DROP +-A logdrop-393 -j TEE --gateway fc00::2 -A logdrop-393 -j DROP +-A logdrop-394 -j TEE --gateway fc00::2 -A logdrop-394 -j DROP +-A logdrop-395 -j TEE --gateway fc00::2 -A logdrop-395 -j DROP +-A logdrop-396 -j TEE --gateway fc00::2 -A logdrop-396 -j DROP +-A logdrop-397 -j TEE --gateway fc00::2 -A logdrop-397 -j DROP +-A logdrop-398 -j TEE --gateway fc00::2 -A logdrop-398 -j DROP +-A logdrop-399 -j TEE --gateway fc00::2 -A logdrop-399 -j DROP -A logdrop-4 -m limit --limit 1/second -j LOG -A logdrop-4 -j DROP -A logdrop-40 -m limit --limit 1/second -j LOG -A logdrop-40 -j DROP +-A logdrop-400 -j TEE --gateway fc00::2 -A logdrop-400 -j DROP +-A logdrop-401 -j TEE --gateway fc00::2 -A logdrop-401 -j DROP +-A logdrop-402 -j TEE --gateway fc00::2 -A logdrop-402 -j DROP +-A logdrop-403 -j TEE --gateway fc00::2 -A logdrop-403 -j DROP +-A logdrop-404 -j TEE --gateway fc00::2 -A logdrop-404 -j DROP +-A logdrop-405 -j TEE --gateway fc00::2 -A logdrop-405 -j DROP +-A logdrop-406 -j TEE --gateway fc00::2 -A logdrop-406 -j DROP +-A logdrop-407 -j TEE --gateway fc00::2 -A logdrop-407 -j DROP +-A logdrop-408 -j TEE --gateway fc00::2 -A logdrop-408 -j DROP +-A logdrop-409 -j TEE --gateway fc00::2 -A logdrop-409 -j DROP -A logdrop-41 -m limit --limit 1/second -j LOG -A logdrop-41 -j DROP +-A logdrop-410 -j TEE --gateway fc00::2 -A logdrop-410 -j DROP +-A logdrop-411 -j TEE --gateway fc00::2 -A logdrop-411 -j DROP +-A logdrop-412 -j TEE --gateway fc00::2 -A logdrop-412 -j DROP +-A logdrop-413 -j TEE --gateway fc00::2 -A logdrop-413 -j DROP +-A logdrop-414 -j TEE --gateway fc00::2 -A logdrop-414 -j DROP +-A logdrop-415 -j TEE --gateway fc00::2 -A logdrop-415 -j DROP +-A logdrop-416 -j TEE --gateway fc00::2 -A logdrop-416 -j DROP +-A logdrop-417 -j TEE --gateway fc00::2 -A logdrop-417 -j DROP +-A logdrop-418 -j TEE --gateway fc00::2 -A logdrop-418 -j DROP +-A logdrop-419 -j TEE --gateway fc00::2 -A logdrop-419 -j DROP -A logdrop-42 -m limit --limit 1/second -j LOG -A logdrop-42 -j DROP +-A logdrop-420 -j TEE --gateway fc00::2 -A logdrop-420 -j DROP +-A logdrop-421 -j TEE --gateway fc00::2 -A logdrop-421 -j DROP +-A logdrop-422 -j TEE --gateway fc00::2 -A logdrop-422 -j DROP +-A logdrop-423 -j TEE --gateway fc00::2 -A logdrop-423 -j DROP +-A logdrop-424 -j TEE --gateway fc00::2 -A logdrop-424 -j DROP +-A logdrop-425 -j TEE --gateway fc00::2 -A logdrop-425 -j DROP +-A logdrop-426 -j TEE --gateway fc00::2 -A logdrop-426 -j DROP +-A logdrop-427 -j TEE --gateway fc00::2 -A logdrop-427 -j DROP +-A logdrop-428 -j TEE --gateway fc00::2 -A logdrop-428 -j DROP +-A logdrop-429 -j TEE --gateway fc00::2 -A logdrop-429 -j DROP -A logdrop-43 -m limit --limit 1/second -j LOG -A logdrop-43 -j DROP +-A logdrop-430 -j TEE --gateway fc00::2 -A logdrop-430 -j DROP +-A logdrop-431 -j TEE --gateway fc00::2 -A logdrop-431 -j DROP +-A logdrop-432 -j TEE --gateway fc00::2 -A logdrop-432 -j DROP +-A logdrop-433 -j TEE --gateway fc00::2 -A logdrop-433 -j DROP +-A logdrop-434 -j TEE --gateway fc00::2 -A logdrop-434 -j DROP +-A logdrop-435 -j TEE --gateway fc00::2 -A logdrop-435 -j DROP +-A logdrop-436 -j TEE --gateway fc00::2 -A logdrop-436 -j DROP +-A logdrop-437 -j TEE --gateway fc00::2 -A logdrop-437 -j DROP +-A logdrop-438 -j TEE --gateway fc00::2 -A logdrop-438 -j DROP +-A logdrop-439 -j TEE --gateway fc00::2 -A logdrop-439 -j DROP -A logdrop-44 -m limit --limit 1/second -j LOG -A logdrop-44 -j DROP +-A logdrop-440 -j TEE --gateway fc00::2 -A logdrop-440 -j DROP +-A logdrop-441 -j TEE --gateway fc00::2 -A logdrop-441 -j DROP +-A logdrop-442 -j TEE --gateway fc00::2 -A logdrop-442 -j DROP +-A logdrop-443 -j TEE --gateway fc00::2 -A logdrop-443 -j DROP +-A logdrop-444 -j TEE --gateway fc00::2 -A logdrop-444 -j DROP +-A logdrop-445 -j TEE --gateway fc00::2 -A logdrop-445 -j DROP +-A logdrop-446 -j TEE --gateway fc00::2 -A logdrop-446 -j DROP +-A logdrop-447 -j TEE --gateway fc00::2 -A logdrop-447 -j DROP --A logdrop-448 -m limit --limit 1/second -j LOG +-A logdrop-448 -j TEE --gateway fc00::2 -A logdrop-448 -j DROP --A logdrop-449 -m limit --limit 1/second -j LOG +-A logdrop-449 -j TEE --gateway fc00::2 -A logdrop-449 -j DROP -A logdrop-45 -m limit --limit 1/second -j LOG -A logdrop-45 -j DROP --A logdrop-450 -m limit --limit 1/second -j LOG +-A logdrop-450 -j TEE --gateway fc00::2 -A logdrop-450 -j DROP --A logdrop-451 -m limit --limit 1/second -j LOG +-A logdrop-451 -j TEE --gateway fc00::2 -A logdrop-451 -j DROP --A logdrop-452 -m limit --limit 1/second -j LOG +-A logdrop-452 -j TEE --gateway fc00::2 -A logdrop-452 -j DROP --A logdrop-453 -m limit --limit 1/second -j LOG +-A logdrop-453 -j TEE --gateway fc00::2 -A logdrop-453 -j DROP --A logdrop-454 -m limit --limit 1/second -j LOG +-A logdrop-454 -j TEE --gateway fc00::2 -A logdrop-454 -j DROP --A logdrop-455 -m limit --limit 1/second -j LOG +-A logdrop-455 -j TEE --gateway fc00::2 -A logdrop-455 -j DROP --A logdrop-456 -m limit --limit 1/second -j LOG +-A logdrop-456 -j TEE --gateway fc00::2 -A logdrop-456 -j DROP --A logdrop-457 -m limit --limit 1/second -j LOG +-A logdrop-457 -j TEE --gateway fc00::2 -A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG +-A logdrop-458 -j TEE --gateway fc00::2 -A logdrop-458 -j DROP --A logdrop-459 -m limit --limit 1/second -j LOG +-A logdrop-459 -j TEE --gateway fc00::2 -A logdrop-459 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP --A logdrop-460 -m limit --limit 1/second -j LOG -A logdrop-460 -j DROP --A logdrop-461 -m limit --limit 1/second -j LOG -A logdrop-461 -j DROP --A logdrop-462 -m limit --limit 1/second -j LOG -A logdrop-462 -j DROP --A logdrop-463 -m limit --limit 1/second -j LOG -A logdrop-463 -j DROP --A logdrop-464 -m limit --limit 1/second -j LOG -A logdrop-464 -j DROP --A logdrop-465 -m limit --limit 1/second -j LOG -A logdrop-465 -j DROP --A logdrop-466 -m limit --limit 1/second -j LOG -A logdrop-466 -j DROP --A logdrop-467 -m limit --limit 1/second -j LOG -A logdrop-467 -j DROP --A logdrop-468 -m limit --limit 1/second -j LOG -A logdrop-468 -j DROP --A logdrop-469 -m limit --limit 1/second -j LOG -A logdrop-469 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG -A logdrop-47 -j DROP --A logdrop-470 -m limit --limit 1/second -j LOG -A logdrop-470 -j DROP --A logdrop-471 -m limit --limit 1/second -j LOG -A logdrop-471 -j DROP --A logdrop-472 -m limit --limit 1/second -j LOG -A logdrop-472 -j DROP --A logdrop-473 -m limit --limit 1/second -j LOG -A logdrop-473 -j DROP --A logdrop-474 -m limit --limit 1/second -j LOG -A logdrop-474 -j DROP --A logdrop-475 -m limit --limit 1/second -j LOG -A logdrop-475 -j DROP --A logdrop-476 -m limit --limit 1/second -j LOG -A logdrop-476 -j DROP --A logdrop-477 -m limit --limit 1/second -j LOG -A logdrop-477 -j DROP --A logdrop-478 -m limit --limit 1/second -j LOG -A logdrop-478 -j DROP --A logdrop-479 -m limit --limit 1/second -j LOG -A logdrop-479 -j DROP -A logdrop-48 -m limit --limit 1/second -j LOG -A logdrop-48 -j DROP --A logdrop-480 -m limit --limit 1/second -j LOG -A logdrop-480 -j DROP --A logdrop-481 -m limit --limit 1/second -j LOG -A logdrop-481 -j DROP --A logdrop-482 -m limit --limit 1/second -j LOG -A logdrop-482 -j DROP --A logdrop-483 -m limit --limit 1/second -j LOG -A logdrop-483 -j DROP --A logdrop-484 -m limit --limit 1/second -j LOG -A logdrop-484 -j DROP --A logdrop-485 -m limit --limit 1/second -j LOG -A logdrop-485 -j DROP --A logdrop-486 -m limit --limit 1/second -j LOG -A logdrop-486 -j DROP --A logdrop-487 -m limit --limit 1/second -j LOG -A logdrop-487 -j DROP --A logdrop-488 -m limit --limit 1/second -j LOG -A logdrop-488 -j DROP --A logdrop-489 -m limit --limit 1/second -j LOG -A logdrop-489 -j DROP -A logdrop-49 -m limit --limit 1/second -j LOG -A logdrop-49 -j DROP --A logdrop-490 -m limit --limit 1/second -j LOG -A logdrop-490 -j DROP --A logdrop-491 -m limit --limit 1/second -j LOG -A logdrop-491 -j DROP --A logdrop-492 -m limit --limit 1/second -j LOG -A logdrop-492 -j DROP --A logdrop-493 -m limit --limit 1/second -j LOG -A logdrop-493 -j DROP --A logdrop-494 -m limit --limit 1/second -j LOG -A logdrop-494 -j DROP --A logdrop-495 -m limit --limit 1/second -j LOG -A logdrop-495 -j DROP --A logdrop-496 -m limit --limit 1/second -j LOG -A logdrop-496 -j DROP --A logdrop-497 -m limit --limit 1/second -j LOG -A logdrop-497 -j DROP --A logdrop-498 -m limit --limit 1/second -j LOG -A logdrop-498 -j DROP --A logdrop-499 -m limit --limit 1/second -j LOG -A logdrop-499 -j DROP -A logdrop-5 -m limit --limit 1/second -j LOG -A logdrop-5 -j DROP -A logdrop-50 -m limit --limit 1/second -j LOG -A logdrop-50 -j DROP --A logdrop-500 -m limit --limit 1/second -j LOG -A logdrop-500 -j DROP --A logdrop-501 -m limit --limit 1/second -j LOG -A logdrop-501 -j DROP --A logdrop-502 -m limit --limit 1/second -j LOG -A logdrop-502 -j DROP --A logdrop-503 -m limit --limit 1/second -j LOG -A logdrop-503 -j DROP --A logdrop-504 -m limit --limit 1/second -j LOG -A logdrop-504 -j DROP --A logdrop-505 -m limit --limit 1/second -j LOG -A logdrop-505 -j DROP --A logdrop-506 -m limit --limit 1/second -j LOG -A logdrop-506 -j DROP --A logdrop-507 -m limit --limit 1/second -j LOG -A logdrop-507 -j DROP --A logdrop-508 -m limit --limit 1/second -j LOG -A logdrop-508 -j DROP --A logdrop-509 -m limit --limit 1/second -j LOG -A logdrop-509 -j DROP -A logdrop-51 -m limit --limit 1/second -j LOG -A logdrop-51 -j DROP --A logdrop-510 -m limit --limit 1/second -j LOG -A logdrop-510 -j DROP --A logdrop-511 -m limit --limit 1/second -j LOG -A logdrop-511 -j DROP --A logdrop-512 -m limit --limit 1/second -j LOG -A logdrop-512 -j DROP --A logdrop-513 -m limit --limit 1/second -j LOG -A logdrop-513 -j DROP --A logdrop-514 -m limit --limit 1/second -j LOG -A logdrop-514 -j DROP --A logdrop-515 -m limit --limit 1/second -j LOG -A logdrop-515 -j DROP --A logdrop-516 -m limit --limit 1/second -j LOG -A logdrop-516 -j DROP --A logdrop-517 -m limit --limit 1/second -j LOG -A logdrop-517 -j DROP --A logdrop-518 -m limit --limit 1/second -j LOG -A logdrop-518 -j DROP --A logdrop-519 -m limit --limit 1/second -j LOG -A logdrop-519 -j DROP -A logdrop-52 -m limit --limit 1/second -j LOG -A logdrop-52 -j DROP @@ -70015,55 +117854,97 @@ COMMIT -A logdrop-549 -j DROP -A logdrop-55 -m limit --limit 1/second -j LOG -A logdrop-55 -j DROP +-A logdrop-550 -m limit --limit 1/second -j LOG -A logdrop-550 -j DROP +-A logdrop-551 -m limit --limit 1/second -j LOG -A logdrop-551 -j DROP +-A logdrop-552 -m limit --limit 1/second -j LOG -A logdrop-552 -j DROP +-A logdrop-553 -m limit --limit 1/second -j LOG -A logdrop-553 -j DROP +-A logdrop-554 -m limit --limit 1/second -j LOG -A logdrop-554 -j DROP +-A logdrop-555 -m limit --limit 1/second -j LOG -A logdrop-555 -j DROP +-A logdrop-556 -m limit --limit 1/second -j LOG -A logdrop-556 -j DROP +-A logdrop-557 -m limit --limit 1/second -j LOG -A logdrop-557 -j DROP +-A logdrop-558 -m limit --limit 1/second -j LOG -A logdrop-558 -j DROP +-A logdrop-559 -m limit --limit 1/second -j LOG -A logdrop-559 -j DROP -A logdrop-56 -m limit --limit 1/second -j LOG -A logdrop-56 -j DROP +-A logdrop-560 -m limit --limit 1/second -j LOG -A logdrop-560 -j DROP +-A logdrop-561 -m limit --limit 1/second -j LOG -A logdrop-561 -j DROP +-A logdrop-562 -m limit --limit 1/second -j LOG -A logdrop-562 -j DROP +-A logdrop-563 -m limit --limit 1/second -j LOG -A logdrop-563 -j DROP +-A logdrop-564 -m limit --limit 1/second -j LOG -A logdrop-564 -j DROP +-A logdrop-565 -m limit --limit 1/second -j LOG -A logdrop-565 -j DROP +-A logdrop-566 -m limit --limit 1/second -j LOG -A logdrop-566 -j DROP +-A logdrop-567 -m limit --limit 1/second -j LOG -A logdrop-567 -j DROP +-A logdrop-568 -m limit --limit 1/second -j LOG -A logdrop-568 -j DROP +-A logdrop-569 -m limit --limit 1/second -j LOG -A logdrop-569 -j DROP -A logdrop-57 -m limit --limit 1/second -j LOG -A logdrop-57 -j DROP +-A logdrop-570 -m limit --limit 1/second -j LOG -A logdrop-570 -j DROP +-A logdrop-571 -m limit --limit 1/second -j LOG -A logdrop-571 -j DROP +-A logdrop-572 -m limit --limit 1/second -j LOG -A logdrop-572 -j DROP +-A logdrop-573 -m limit --limit 1/second -j LOG -A logdrop-573 -j DROP +-A logdrop-574 -m limit --limit 1/second -j LOG -A logdrop-574 -j DROP +-A logdrop-575 -m limit --limit 1/second -j LOG -A logdrop-575 -j DROP +-A logdrop-576 -m limit --limit 1/second -j LOG -A logdrop-576 -j DROP +-A logdrop-577 -m limit --limit 1/second -j LOG -A logdrop-577 -j DROP +-A logdrop-578 -m limit --limit 1/second -j LOG -A logdrop-578 -j DROP +-A logdrop-579 -m limit --limit 1/second -j LOG -A logdrop-579 -j DROP -A logdrop-58 -m limit --limit 1/second -j LOG -A logdrop-58 -j DROP +-A logdrop-580 -m limit --limit 1/second -j LOG -A logdrop-580 -j DROP +-A logdrop-581 -m limit --limit 1/second -j LOG -A logdrop-581 -j DROP +-A logdrop-582 -m limit --limit 1/second -j LOG -A logdrop-582 -j DROP +-A logdrop-583 -m limit --limit 1/second -j LOG -A logdrop-583 -j DROP +-A logdrop-584 -m limit --limit 1/second -j LOG -A logdrop-584 -j DROP +-A logdrop-585 -m limit --limit 1/second -j LOG -A logdrop-585 -j DROP +-A logdrop-586 -m limit --limit 1/second -j LOG -A logdrop-586 -j DROP +-A logdrop-587 -m limit --limit 1/second -j LOG -A logdrop-587 -j DROP +-A logdrop-588 -m limit --limit 1/second -j LOG -A logdrop-588 -j DROP +-A logdrop-589 -m limit --limit 1/second -j LOG -A logdrop-589 -j DROP -A logdrop-59 -m limit --limit 1/second -j LOG -A logdrop-59 -j DROP +-A logdrop-590 -m limit --limit 1/second -j LOG -A logdrop-590 -j DROP +-A logdrop-591 -m limit --limit 1/second -j LOG -A logdrop-591 -j DROP -A logdrop-592 -m limit --limit 1/second -j LOG -A logdrop-592 -j DROP @@ -70195,135 +118076,203 @@ COMMIT -A logdrop-649 -j DROP -A logdrop-65 -m limit --limit 1/second -j LOG -A logdrop-65 -j DROP --A logdrop-650 -m limit --limit 1/second -j LOG +-A logdrop-650 -j TEE --gateway fc00::2 -A logdrop-650 -j DROP --A logdrop-651 -m limit --limit 1/second -j LOG +-A logdrop-651 -j TEE --gateway fc00::2 -A logdrop-651 -j DROP --A logdrop-652 -m limit --limit 1/second -j LOG +-A logdrop-652 -j TEE --gateway fc00::2 -A logdrop-652 -j DROP --A logdrop-653 -m limit --limit 1/second -j LOG +-A logdrop-653 -j TEE --gateway fc00::2 -A logdrop-653 -j DROP --A logdrop-654 -m limit --limit 1/second -j LOG +-A logdrop-654 -j TEE --gateway fc00::2 -A logdrop-654 -j DROP --A logdrop-655 -m limit --limit 1/second -j LOG +-A logdrop-655 -j TEE --gateway fc00::2 -A logdrop-655 -j DROP --A logdrop-656 -m limit --limit 1/second -j LOG +-A logdrop-656 -j TEE --gateway fc00::2 -A logdrop-656 -j DROP --A logdrop-657 -m limit --limit 1/second -j LOG +-A logdrop-657 -j TEE --gateway fc00::2 -A logdrop-657 -j DROP --A logdrop-658 -m limit --limit 1/second -j LOG +-A logdrop-658 -j TEE --gateway fc00::2 -A logdrop-658 -j DROP --A logdrop-659 -m limit --limit 1/second -j LOG +-A logdrop-659 -j TEE --gateway fc00::2 -A logdrop-659 -j DROP -A logdrop-66 -m limit --limit 1/second -j LOG -A logdrop-66 -j DROP --A logdrop-660 -m limit --limit 1/second -j LOG +-A logdrop-660 -j TEE --gateway fc00::2 -A logdrop-660 -j DROP --A logdrop-661 -m limit --limit 1/second -j LOG +-A logdrop-661 -j TEE --gateway fc00::2 -A logdrop-661 -j DROP --A logdrop-662 -m limit --limit 1/second -j LOG +-A logdrop-662 -j TEE --gateway fc00::2 -A logdrop-662 -j DROP --A logdrop-663 -m limit --limit 1/second -j LOG +-A logdrop-663 -j TEE --gateway fc00::2 -A logdrop-663 -j DROP --A logdrop-664 -m limit --limit 1/second -j LOG +-A logdrop-664 -j TEE --gateway fc00::2 -A logdrop-664 -j DROP --A logdrop-665 -m limit --limit 1/second -j LOG +-A logdrop-665 -j TEE --gateway fc00::2 -A logdrop-665 -j DROP --A logdrop-666 -m limit --limit 1/second -j LOG +-A logdrop-666 -j TEE --gateway fc00::2 -A logdrop-666 -j DROP --A logdrop-667 -m limit --limit 1/second -j LOG +-A logdrop-667 -j TEE --gateway fc00::2 -A logdrop-667 -j DROP --A logdrop-668 -m limit --limit 1/second -j LOG +-A logdrop-668 -j TEE --gateway fc00::2 -A logdrop-668 -j DROP --A logdrop-669 -m limit --limit 1/second -j LOG +-A logdrop-669 -j TEE --gateway fc00::2 -A logdrop-669 -j DROP -A logdrop-67 -m limit --limit 1/second -j LOG -A logdrop-67 -j DROP --A logdrop-670 -m limit --limit 1/second -j LOG +-A logdrop-670 -j TEE --gateway fc00::2 -A logdrop-670 -j DROP --A logdrop-671 -m limit --limit 1/second -j LOG +-A logdrop-671 -j TEE --gateway fc00::2 -A logdrop-671 -j DROP +-A logdrop-672 -j TEE --gateway fc00::2 -A logdrop-672 -j DROP +-A logdrop-673 -j TEE --gateway fc00::2 -A logdrop-673 -j DROP +-A logdrop-674 -j TEE --gateway fc00::2 -A logdrop-674 -j DROP +-A logdrop-675 -j TEE --gateway fc00::2 -A logdrop-675 -j DROP +-A logdrop-676 -j TEE --gateway fc00::2 -A logdrop-676 -j DROP +-A logdrop-677 -j TEE --gateway fc00::2 -A logdrop-677 -j DROP +-A logdrop-678 -j TEE --gateway fc00::2 -A logdrop-678 -j DROP +-A logdrop-679 -j TEE --gateway fc00::2 -A logdrop-679 -j DROP -A logdrop-68 -m limit --limit 1/second -j LOG -A logdrop-68 -j DROP +-A logdrop-680 -j TEE --gateway fc00::2 -A logdrop-680 -j DROP +-A logdrop-681 -j TEE --gateway fc00::2 -A logdrop-681 -j DROP +-A logdrop-682 -j TEE --gateway fc00::2 -A logdrop-682 -j DROP +-A logdrop-683 -j TEE --gateway fc00::2 -A logdrop-683 -j DROP +-A logdrop-684 -j TEE --gateway fc00::2 -A logdrop-684 -j DROP +-A logdrop-685 -j TEE --gateway fc00::2 -A logdrop-685 -j DROP +-A logdrop-686 -j TEE --gateway fc00::2 -A logdrop-686 -j DROP +-A logdrop-687 -j TEE --gateway fc00::2 -A logdrop-687 -j DROP +-A logdrop-688 -j TEE --gateway fc00::2 -A logdrop-688 -j DROP +-A logdrop-689 -j TEE --gateway fc00::2 -A logdrop-689 -j DROP -A logdrop-69 -m limit --limit 1/second -j LOG -A logdrop-69 -j DROP +-A logdrop-690 -j TEE --gateway fc00::2 -A logdrop-690 -j DROP +-A logdrop-691 -j TEE --gateway fc00::2 -A logdrop-691 -j DROP +-A logdrop-692 -j TEE --gateway fc00::2 -A logdrop-692 -j DROP +-A logdrop-693 -j TEE --gateway fc00::2 -A logdrop-693 -j DROP +-A logdrop-694 -j TEE --gateway fc00::2 -A logdrop-694 -j DROP +-A logdrop-695 -j TEE --gateway fc00::2 -A logdrop-695 -j DROP +-A logdrop-696 -j TEE --gateway fc00::2 -A logdrop-696 -j DROP +-A logdrop-697 -j TEE --gateway fc00::2 -A logdrop-697 -j DROP +-A logdrop-698 -j TEE --gateway fc00::2 -A logdrop-698 -j DROP +-A logdrop-699 -j TEE --gateway fc00::2 -A logdrop-699 -j DROP -A logdrop-7 -m limit --limit 1/second -j LOG -A logdrop-7 -j DROP -A logdrop-70 -m limit --limit 1/second -j LOG -A logdrop-70 -j DROP +-A logdrop-700 -j TEE --gateway fc00::2 -A logdrop-700 -j DROP +-A logdrop-701 -j TEE --gateway fc00::2 -A logdrop-701 -j DROP +-A logdrop-702 -j TEE --gateway fc00::2 -A logdrop-702 -j DROP +-A logdrop-703 -j TEE --gateway fc00::2 -A logdrop-703 -j DROP +-A logdrop-704 -j TEE --gateway fc00::2 -A logdrop-704 -j DROP +-A logdrop-705 -j TEE --gateway fc00::2 -A logdrop-705 -j DROP +-A logdrop-706 -j TEE --gateway fc00::2 -A logdrop-706 -j DROP +-A logdrop-707 -j TEE --gateway fc00::2 -A logdrop-707 -j DROP +-A logdrop-708 -j TEE --gateway fc00::2 -A logdrop-708 -j DROP +-A logdrop-709 -j TEE --gateway fc00::2 -A logdrop-709 -j DROP -A logdrop-71 -m limit --limit 1/second -j LOG -A logdrop-71 -j DROP +-A logdrop-710 -j TEE --gateway fc00::2 -A logdrop-710 -j DROP +-A logdrop-711 -j TEE --gateway fc00::2 -A logdrop-711 -j DROP +-A logdrop-712 -j TEE --gateway fc00::2 -A logdrop-712 -j DROP +-A logdrop-713 -j TEE --gateway fc00::2 -A logdrop-713 -j DROP +-A logdrop-714 -j TEE --gateway fc00::2 -A logdrop-714 -j DROP +-A logdrop-715 -j TEE --gateway fc00::2 -A logdrop-715 -j DROP +-A logdrop-716 -j TEE --gateway fc00::2 -A logdrop-716 -j DROP +-A logdrop-717 -j TEE --gateway fc00::2 -A logdrop-717 -j DROP +-A logdrop-718 -j TEE --gateway fc00::2 -A logdrop-718 -j DROP +-A logdrop-719 -j TEE --gateway fc00::2 -A logdrop-719 -j DROP -A logdrop-72 -m limit --limit 1/second -j LOG -A logdrop-72 -j DROP +-A logdrop-720 -j TEE --gateway fc00::2 -A logdrop-720 -j DROP +-A logdrop-721 -j TEE --gateway fc00::2 -A logdrop-721 -j DROP +-A logdrop-722 -j TEE --gateway fc00::2 -A logdrop-722 -j DROP +-A logdrop-723 -j TEE --gateway fc00::2 -A logdrop-723 -j DROP +-A logdrop-724 -j TEE --gateway fc00::2 -A logdrop-724 -j DROP +-A logdrop-725 -j TEE --gateway fc00::2 -A logdrop-725 -j DROP +-A logdrop-726 -j TEE --gateway fc00::2 -A logdrop-726 -j DROP +-A logdrop-727 -j TEE --gateway fc00::2 -A logdrop-727 -j DROP +-A logdrop-728 -j TEE --gateway fc00::2 -A logdrop-728 -j DROP +-A logdrop-729 -j TEE --gateway fc00::2 -A logdrop-729 -j DROP -A logdrop-73 -m limit --limit 1/second -j LOG -A logdrop-73 -j DROP +-A logdrop-730 -j TEE --gateway fc00::2 -A logdrop-730 -j DROP +-A logdrop-731 -j TEE --gateway fc00::2 -A logdrop-731 -j DROP +-A logdrop-732 -j TEE --gateway fc00::2 -A logdrop-732 -j DROP +-A logdrop-733 -j TEE --gateway fc00::2 -A logdrop-733 -j DROP +-A logdrop-734 -j TEE --gateway fc00::2 -A logdrop-734 -j DROP +-A logdrop-735 -j TEE --gateway fc00::2 -A logdrop-735 -j DROP +-A logdrop-736 -j TEE --gateway fc00::2 -A logdrop-736 -j DROP +-A logdrop-737 -j TEE --gateway fc00::2 -A logdrop-737 -j DROP +-A logdrop-738 -j TEE --gateway fc00::2 -A logdrop-738 -j DROP +-A logdrop-739 -j TEE --gateway fc00::2 -A logdrop-739 -j DROP -A logdrop-74 -m limit --limit 1/second -j LOG -A logdrop-74 -j DROP @@ -70331,168 +118280,99 @@ COMMIT -A logdrop-741 -j DROP -A logdrop-742 -j DROP -A logdrop-743 -j DROP --A logdrop-744 -m limit --limit 1/second -j LOG -A logdrop-744 -j DROP --A logdrop-745 -m limit --limit 1/second -j LOG -A logdrop-745 -j DROP --A logdrop-746 -m limit --limit 1/second -j LOG -A logdrop-746 -j DROP --A logdrop-747 -m limit --limit 1/second -j LOG -A logdrop-747 -j DROP --A logdrop-748 -m limit --limit 1/second -j LOG -A logdrop-748 -j DROP --A logdrop-749 -m limit --limit 1/second -j LOG -A logdrop-749 -j DROP -A logdrop-75 -m limit --limit 1/second -j LOG -A logdrop-75 -j DROP --A logdrop-750 -m limit --limit 1/second -j LOG -A logdrop-750 -j DROP --A logdrop-751 -m limit --limit 1/second -j LOG -A logdrop-751 -j DROP --A logdrop-752 -m limit --limit 1/second -j LOG -A logdrop-752 -j DROP --A logdrop-753 -m limit --limit 1/second -j LOG -A logdrop-753 -j DROP --A logdrop-754 -m limit --limit 1/second -j LOG -A logdrop-754 -j DROP --A logdrop-755 -m limit --limit 1/second -j LOG -A logdrop-755 -j DROP --A logdrop-756 -m limit --limit 1/second -j LOG -A logdrop-756 -j DROP --A logdrop-757 -m limit --limit 1/second -j LOG -A logdrop-757 -j DROP --A logdrop-758 -m limit --limit 1/second -j LOG -A logdrop-758 -j DROP --A logdrop-759 -m limit --limit 1/second -j LOG -A logdrop-759 -j DROP -A logdrop-76 -m limit --limit 1/second -j LOG -A logdrop-76 -j DROP --A logdrop-760 -m limit --limit 1/second -j LOG -A logdrop-760 -j DROP --A logdrop-761 -m limit --limit 1/second -j LOG -A logdrop-761 -j DROP --A logdrop-762 -m limit --limit 1/second -j LOG -A logdrop-762 -j DROP --A logdrop-763 -m limit --limit 1/second -j LOG -A logdrop-763 -j DROP --A logdrop-764 -m limit --limit 1/second -j LOG -A logdrop-764 -j DROP --A logdrop-765 -m limit --limit 1/second -j LOG -A logdrop-765 -j DROP --A logdrop-766 -m limit --limit 1/second -j LOG -A logdrop-766 -j DROP --A logdrop-767 -m limit --limit 1/second -j LOG -A logdrop-767 -j DROP --A logdrop-768 -m limit --limit 1/second -j LOG -A logdrop-768 -j DROP --A logdrop-769 -m limit --limit 1/second -j LOG -A logdrop-769 -j DROP -A logdrop-77 -m limit --limit 1/second -j LOG -A logdrop-77 -j DROP --A logdrop-770 -m limit --limit 1/second -j LOG -A logdrop-770 -j DROP --A logdrop-771 -m limit --limit 1/second -j LOG -A logdrop-771 -j DROP --A logdrop-772 -m limit --limit 1/second -j LOG -A logdrop-772 -j DROP --A logdrop-773 -m limit --limit 1/second -j LOG -A logdrop-773 -j DROP --A logdrop-774 -m limit --limit 1/second -j LOG -A logdrop-774 -j DROP --A logdrop-775 -m limit --limit 1/second -j LOG -A logdrop-775 -j DROP --A logdrop-776 -m limit --limit 1/second -j LOG -A logdrop-776 -j DROP --A logdrop-777 -m limit --limit 1/second -j LOG -A logdrop-777 -j DROP --A logdrop-778 -m limit --limit 1/second -j LOG -A logdrop-778 -j DROP --A logdrop-779 -m limit --limit 1/second -j LOG -A logdrop-779 -j DROP -A logdrop-78 -m limit --limit 1/second -j LOG -A logdrop-78 -j DROP --A logdrop-780 -m limit --limit 1/second -j LOG -A logdrop-780 -j DROP --A logdrop-781 -m limit --limit 1/second -j LOG -A logdrop-781 -j DROP --A logdrop-782 -m limit --limit 1/second -j LOG -A logdrop-782 -j DROP --A logdrop-783 -m limit --limit 1/second -j LOG -A logdrop-783 -j DROP --A logdrop-784 -m limit --limit 1/second -j LOG -A logdrop-784 -j DROP --A logdrop-785 -m limit --limit 1/second -j LOG -A logdrop-785 -j DROP --A logdrop-786 -m limit --limit 1/second -j LOG -A logdrop-786 -j DROP --A logdrop-787 -m limit --limit 1/second -j LOG -A logdrop-787 -j DROP --A logdrop-788 -m limit --limit 1/second -j LOG -A logdrop-788 -j DROP --A logdrop-789 -m limit --limit 1/second -j LOG -A logdrop-789 -j DROP -A logdrop-79 -m limit --limit 1/second -j LOG -A logdrop-79 -j DROP --A logdrop-790 -m limit --limit 1/second -j LOG -A logdrop-790 -j DROP --A logdrop-791 -m limit --limit 1/second -j LOG -A logdrop-791 -j DROP --A logdrop-792 -m limit --limit 1/second -j LOG -A logdrop-792 -j DROP --A logdrop-793 -m limit --limit 1/second -j LOG -A logdrop-793 -j DROP --A logdrop-794 -m limit --limit 1/second -j LOG -A logdrop-794 -j DROP --A logdrop-795 -m limit --limit 1/second -j LOG -A logdrop-795 -j DROP --A logdrop-796 -m limit --limit 1/second -j LOG -A logdrop-796 -j DROP --A logdrop-797 -m limit --limit 1/second -j LOG -A logdrop-797 -j DROP --A logdrop-798 -m limit --limit 1/second -j LOG -A logdrop-798 -j DROP --A logdrop-799 -m limit --limit 1/second -j LOG -A logdrop-799 -j DROP -A logdrop-8 -m limit --limit 1/second -j LOG -A logdrop-8 -j DROP +-A logdrop-80 -m limit --limit 1/second -j LOG -A logdrop-80 -j DROP --A logdrop-800 -m limit --limit 1/second -j LOG -A logdrop-800 -j DROP --A logdrop-801 -m limit --limit 1/second -j LOG -A logdrop-801 -j DROP --A logdrop-802 -m limit --limit 1/second -j LOG -A logdrop-802 -j DROP --A logdrop-803 -m limit --limit 1/second -j LOG -A logdrop-803 -j DROP --A logdrop-804 -m limit --limit 1/second -j LOG -A logdrop-804 -j DROP --A logdrop-805 -m limit --limit 1/second -j LOG -A logdrop-805 -j DROP --A logdrop-806 -m limit --limit 1/second -j LOG -A logdrop-806 -j DROP --A logdrop-807 -m limit --limit 1/second -j LOG -A logdrop-807 -j DROP --A logdrop-808 -m limit --limit 1/second -j LOG -A logdrop-808 -j DROP --A logdrop-809 -m limit --limit 1/second -j LOG -A logdrop-809 -j DROP +-A logdrop-81 -m limit --limit 1/second -j LOG -A logdrop-81 -j DROP --A logdrop-810 -m limit --limit 1/second -j LOG -A logdrop-810 -j DROP --A logdrop-811 -m limit --limit 1/second -j LOG -A logdrop-811 -j DROP --A logdrop-812 -m limit --limit 1/second -j LOG -A logdrop-812 -j DROP --A logdrop-813 -m limit --limit 1/second -j LOG -A logdrop-813 -j DROP --A logdrop-814 -m limit --limit 1/second -j LOG -A logdrop-814 -j DROP --A logdrop-815 -m limit --limit 1/second -j LOG -A logdrop-815 -j DROP -A logdrop-816 -j DROP -A logdrop-817 -j DROP -A logdrop-818 -j DROP -A logdrop-819 -j DROP +-A logdrop-82 -m limit --limit 1/second -j LOG -A logdrop-82 -j DROP -A logdrop-820 -j DROP -A logdrop-821 -j DROP @@ -70504,74 +118384,139 @@ COMMIT -A logdrop-827 -j DROP -A logdrop-828 -j DROP -A logdrop-829 -j DROP +-A logdrop-83 -m limit --limit 1/second -j LOG -A logdrop-83 -j DROP +-A logdrop-830 -m limit --limit 1/second -j LOG -A logdrop-830 -j DROP +-A logdrop-831 -m limit --limit 1/second -j LOG -A logdrop-831 -j DROP +-A logdrop-832 -m limit --limit 1/second -j LOG -A logdrop-832 -j DROP +-A logdrop-833 -m limit --limit 1/second -j LOG -A logdrop-833 -j DROP +-A logdrop-834 -m limit --limit 1/second -j LOG -A logdrop-834 -j DROP +-A logdrop-835 -m limit --limit 1/second -j LOG -A logdrop-835 -j DROP +-A logdrop-836 -m limit --limit 1/second -j LOG -A logdrop-836 -j DROP +-A logdrop-837 -m limit --limit 1/second -j LOG -A logdrop-837 -j DROP +-A logdrop-838 -m limit --limit 1/second -j LOG -A logdrop-838 -j DROP +-A logdrop-839 -m limit --limit 1/second -j LOG -A logdrop-839 -j DROP +-A logdrop-84 -m limit --limit 1/second -j LOG -A logdrop-84 -j DROP +-A logdrop-840 -m limit --limit 1/second -j LOG -A logdrop-840 -j DROP +-A logdrop-841 -m limit --limit 1/second -j LOG -A logdrop-841 -j DROP +-A logdrop-842 -m limit --limit 1/second -j LOG -A logdrop-842 -j DROP +-A logdrop-843 -m limit --limit 1/second -j LOG -A logdrop-843 -j DROP +-A logdrop-844 -m limit --limit 1/second -j LOG -A logdrop-844 -j DROP +-A logdrop-845 -m limit --limit 1/second -j LOG -A logdrop-845 -j DROP +-A logdrop-846 -m limit --limit 1/second -j LOG -A logdrop-846 -j DROP +-A logdrop-847 -m limit --limit 1/second -j LOG -A logdrop-847 -j DROP +-A logdrop-848 -m limit --limit 1/second -j LOG -A logdrop-848 -j DROP +-A logdrop-849 -m limit --limit 1/second -j LOG -A logdrop-849 -j DROP +-A logdrop-85 -m limit --limit 1/second -j LOG -A logdrop-85 -j DROP +-A logdrop-850 -m limit --limit 1/second -j LOG -A logdrop-850 -j DROP +-A logdrop-851 -m limit --limit 1/second -j LOG -A logdrop-851 -j DROP +-A logdrop-852 -m limit --limit 1/second -j LOG -A logdrop-852 -j DROP +-A logdrop-853 -m limit --limit 1/second -j LOG -A logdrop-853 -j DROP +-A logdrop-854 -m limit --limit 1/second -j LOG -A logdrop-854 -j DROP +-A logdrop-855 -m limit --limit 1/second -j LOG -A logdrop-855 -j DROP +-A logdrop-856 -m limit --limit 1/second -j LOG -A logdrop-856 -j DROP +-A logdrop-857 -m limit --limit 1/second -j LOG -A logdrop-857 -j DROP +-A logdrop-858 -m limit --limit 1/second -j LOG -A logdrop-858 -j DROP +-A logdrop-859 -m limit --limit 1/second -j LOG -A logdrop-859 -j DROP +-A logdrop-86 -m limit --limit 1/second -j LOG -A logdrop-86 -j DROP +-A logdrop-860 -m limit --limit 1/second -j LOG -A logdrop-860 -j DROP +-A logdrop-861 -m limit --limit 1/second -j LOG -A logdrop-861 -j DROP +-A logdrop-862 -m limit --limit 1/second -j LOG -A logdrop-862 -j DROP +-A logdrop-863 -m limit --limit 1/second -j LOG -A logdrop-863 -j DROP +-A logdrop-864 -m limit --limit 1/second -j LOG -A logdrop-864 -j DROP +-A logdrop-865 -m limit --limit 1/second -j LOG -A logdrop-865 -j DROP +-A logdrop-866 -m limit --limit 1/second -j LOG -A logdrop-866 -j DROP +-A logdrop-867 -m limit --limit 1/second -j LOG -A logdrop-867 -j DROP +-A logdrop-868 -m limit --limit 1/second -j LOG -A logdrop-868 -j DROP +-A logdrop-869 -m limit --limit 1/second -j LOG -A logdrop-869 -j DROP +-A logdrop-87 -m limit --limit 1/second -j LOG -A logdrop-87 -j DROP +-A logdrop-870 -m limit --limit 1/second -j LOG -A logdrop-870 -j DROP +-A logdrop-871 -m limit --limit 1/second -j LOG -A logdrop-871 -j DROP +-A logdrop-872 -m limit --limit 1/second -j LOG -A logdrop-872 -j DROP +-A logdrop-873 -m limit --limit 1/second -j LOG -A logdrop-873 -j DROP +-A logdrop-874 -m limit --limit 1/second -j LOG -A logdrop-874 -j DROP +-A logdrop-875 -m limit --limit 1/second -j LOG -A logdrop-875 -j DROP +-A logdrop-876 -m limit --limit 1/second -j LOG -A logdrop-876 -j DROP +-A logdrop-877 -m limit --limit 1/second -j LOG -A logdrop-877 -j DROP +-A logdrop-878 -m limit --limit 1/second -j LOG -A logdrop-878 -j DROP +-A logdrop-879 -m limit --limit 1/second -j LOG -A logdrop-879 -j DROP +-A logdrop-88 -m limit --limit 1/second -j LOG -A logdrop-88 -j DROP +-A logdrop-880 -m limit --limit 1/second -j LOG -A logdrop-880 -j DROP +-A logdrop-881 -m limit --limit 1/second -j LOG -A logdrop-881 -j DROP +-A logdrop-882 -m limit --limit 1/second -j LOG -A logdrop-882 -j DROP +-A logdrop-883 -m limit --limit 1/second -j LOG -A logdrop-883 -j DROP +-A logdrop-884 -m limit --limit 1/second -j LOG -A logdrop-884 -j DROP +-A logdrop-885 -m limit --limit 1/second -j LOG -A logdrop-885 -j DROP +-A logdrop-886 -m limit --limit 1/second -j LOG -A logdrop-886 -j DROP +-A logdrop-887 -m limit --limit 1/second -j LOG -A logdrop-887 -j DROP -A logdrop-888 -m limit --limit 1/second -j LOG -A logdrop-888 -j DROP -A logdrop-889 -m limit --limit 1/second -j LOG -A logdrop-889 -j DROP +-A logdrop-89 -m limit --limit 1/second -j LOG -A logdrop-89 -j DROP -A logdrop-890 -m limit --limit 1/second -j LOG -A logdrop-890 -j DROP @@ -70595,6 +118540,7 @@ COMMIT -A logdrop-899 -j DROP -A logdrop-9 -m limit --limit 1/second -j LOG -A logdrop-9 -j DROP +-A logdrop-90 -m limit --limit 1/second -j LOG -A logdrop-90 -j DROP -A logdrop-900 -m limit --limit 1/second -j LOG -A logdrop-900 -j DROP @@ -70616,6 +118562,7 @@ COMMIT -A logdrop-908 -j DROP -A logdrop-909 -m limit --limit 1/second -j LOG -A logdrop-909 -j DROP +-A logdrop-91 -m limit --limit 1/second -j LOG -A logdrop-91 -j DROP -A logdrop-910 -m limit --limit 1/second -j LOG -A logdrop-910 -j DROP @@ -70637,143 +118584,186 @@ COMMIT -A logdrop-918 -j DROP -A logdrop-919 -m limit --limit 1/second -j LOG -A logdrop-919 -j DROP +-A logdrop-92 -m limit --limit 1/second -j LOG -A logdrop-92 -j DROP --A logdrop-920 -m limit --limit 1/second -j LOG +-A logdrop-920 -j TEE --gateway fc00::2 -A logdrop-920 -j DROP --A logdrop-921 -m limit --limit 1/second -j LOG +-A logdrop-921 -j TEE --gateway fc00::2 -A logdrop-921 -j DROP --A logdrop-922 -m limit --limit 1/second -j LOG +-A logdrop-922 -j TEE --gateway fc00::2 -A logdrop-922 -j DROP --A logdrop-923 -m limit --limit 1/second -j LOG +-A logdrop-923 -j TEE --gateway fc00::2 -A logdrop-923 -j DROP --A logdrop-924 -m limit --limit 1/second -j LOG +-A logdrop-924 -j TEE --gateway fc00::2 -A logdrop-924 -j DROP --A logdrop-925 -m limit --limit 1/second -j LOG +-A logdrop-925 -j TEE --gateway fc00::2 -A logdrop-925 -j DROP --A logdrop-926 -m limit --limit 1/second -j LOG +-A logdrop-926 -j TEE --gateway fc00::2 -A logdrop-926 -j DROP --A logdrop-927 -m limit --limit 1/second -j LOG +-A logdrop-927 -j TEE --gateway fc00::2 -A logdrop-927 -j DROP --A logdrop-928 -m limit --limit 1/second -j LOG +-A logdrop-928 -j TEE --gateway fc00::2 -A logdrop-928 -j DROP --A logdrop-929 -m limit --limit 1/second -j LOG +-A logdrop-929 -j TEE --gateway fc00::2 -A logdrop-929 -j DROP +-A logdrop-93 -m limit --limit 1/second -j LOG -A logdrop-93 -j DROP --A logdrop-930 -m limit --limit 1/second -j LOG +-A logdrop-930 -j TEE --gateway fc00::2 -A logdrop-930 -j DROP --A logdrop-931 -m limit --limit 1/second -j LOG +-A logdrop-931 -j TEE --gateway fc00::2 -A logdrop-931 -j DROP --A logdrop-932 -m limit --limit 1/second -j LOG +-A logdrop-932 -j TEE --gateway fc00::2 -A logdrop-932 -j DROP --A logdrop-933 -m limit --limit 1/second -j LOG +-A logdrop-933 -j TEE --gateway fc00::2 -A logdrop-933 -j DROP --A logdrop-934 -m limit --limit 1/second -j LOG +-A logdrop-934 -j TEE --gateway fc00::2 -A logdrop-934 -j DROP --A logdrop-935 -m limit --limit 1/second -j LOG +-A logdrop-935 -j TEE --gateway fc00::2 -A logdrop-935 -j DROP --A logdrop-936 -m limit --limit 1/second -j LOG +-A logdrop-936 -j TEE --gateway fc00::2 -A logdrop-936 -j DROP --A logdrop-937 -m limit --limit 1/second -j LOG +-A logdrop-937 -j TEE --gateway fc00::2 -A logdrop-937 -j DROP --A logdrop-938 -m limit --limit 1/second -j LOG +-A logdrop-938 -j TEE --gateway fc00::2 -A logdrop-938 -j DROP --A logdrop-939 -m limit --limit 1/second -j LOG +-A logdrop-939 -j TEE --gateway fc00::2 -A logdrop-939 -j DROP +-A logdrop-94 -m limit --limit 1/second -j LOG -A logdrop-94 -j DROP --A logdrop-940 -m limit --limit 1/second -j LOG +-A logdrop-940 -j TEE --gateway fc00::2 -A logdrop-940 -j DROP --A logdrop-941 -m limit --limit 1/second -j LOG +-A logdrop-941 -j TEE --gateway fc00::2 -A logdrop-941 -j DROP --A logdrop-942 -m limit --limit 1/second -j LOG +-A logdrop-942 -j TEE --gateway fc00::2 -A logdrop-942 -j DROP --A logdrop-943 -m limit --limit 1/second -j LOG +-A logdrop-943 -j TEE --gateway fc00::2 -A logdrop-943 -j DROP --A logdrop-944 -m limit --limit 1/second -j LOG +-A logdrop-944 -j TEE --gateway fc00::2 -A logdrop-944 -j DROP --A logdrop-945 -m limit --limit 1/second -j LOG +-A logdrop-945 -j TEE --gateway fc00::2 -A logdrop-945 -j DROP --A logdrop-946 -m limit --limit 1/second -j LOG +-A logdrop-946 -j TEE --gateway fc00::2 -A logdrop-946 -j DROP --A logdrop-947 -m limit --limit 1/second -j LOG +-A logdrop-947 -j TEE --gateway fc00::2 -A logdrop-947 -j DROP --A logdrop-948 -m limit --limit 1/second -j LOG +-A logdrop-948 -j TEE --gateway fc00::2 -A logdrop-948 -j DROP --A logdrop-949 -m limit --limit 1/second -j LOG +-A logdrop-949 -j TEE --gateway fc00::2 -A logdrop-949 -j DROP +-A logdrop-95 -m limit --limit 1/second -j LOG -A logdrop-95 -j DROP --A logdrop-950 -m limit --limit 1/second -j LOG +-A logdrop-950 -j TEE --gateway fc00::2 -A logdrop-950 -j DROP --A logdrop-951 -m limit --limit 1/second -j LOG +-A logdrop-951 -j TEE --gateway fc00::2 -A logdrop-951 -j DROP --A logdrop-952 -m limit --limit 1/second -j LOG +-A logdrop-952 -j TEE --gateway fc00::2 -A logdrop-952 -j DROP --A logdrop-953 -m limit --limit 1/second -j LOG +-A logdrop-953 -j TEE --gateway fc00::2 -A logdrop-953 -j DROP --A logdrop-954 -m limit --limit 1/second -j LOG +-A logdrop-954 -j TEE --gateway fc00::2 -A logdrop-954 -j DROP --A logdrop-955 -m limit --limit 1/second -j LOG +-A logdrop-955 -j TEE --gateway fc00::2 -A logdrop-955 -j DROP --A logdrop-956 -m limit --limit 1/second -j LOG +-A logdrop-956 -j TEE --gateway fc00::2 -A logdrop-956 -j DROP --A logdrop-957 -m limit --limit 1/second -j LOG +-A logdrop-957 -j TEE --gateway fc00::2 -A logdrop-957 -j DROP --A logdrop-958 -m limit --limit 1/second -j LOG +-A logdrop-958 -j TEE --gateway fc00::2 -A logdrop-958 -j DROP --A logdrop-959 -m limit --limit 1/second -j LOG +-A logdrop-959 -j TEE --gateway fc00::2 -A logdrop-959 -j DROP +-A logdrop-96 -m limit --limit 1/second -j LOG -A logdrop-96 -j DROP --A logdrop-960 -m limit --limit 1/second -j LOG +-A logdrop-960 -j TEE --gateway fc00::2 -A logdrop-960 -j DROP --A logdrop-961 -m limit --limit 1/second -j LOG +-A logdrop-961 -j TEE --gateway fc00::2 -A logdrop-961 -j DROP --A logdrop-962 -m limit --limit 1/second -j LOG +-A logdrop-962 -j TEE --gateway fc00::2 -A logdrop-962 -j DROP --A logdrop-963 -m limit --limit 1/second -j LOG +-A logdrop-963 -j TEE --gateway fc00::2 -A logdrop-963 -j DROP --A logdrop-964 -m limit --limit 1/second -j LOG +-A logdrop-964 -j TEE --gateway fc00::2 -A logdrop-964 -j DROP --A logdrop-965 -m limit --limit 1/second -j LOG +-A logdrop-965 -j TEE --gateway fc00::2 -A logdrop-965 -j DROP --A logdrop-966 -m limit --limit 1/second -j LOG +-A logdrop-966 -j TEE --gateway fc00::2 -A logdrop-966 -j DROP --A logdrop-967 -m limit --limit 1/second -j LOG +-A logdrop-967 -j TEE --gateway fc00::2 -A logdrop-967 -j DROP +-A logdrop-968 -j TEE --gateway fc00::2 -A logdrop-968 -j DROP +-A logdrop-969 -j TEE --gateway fc00::2 -A logdrop-969 -j DROP +-A logdrop-97 -m limit --limit 1/second -j LOG -A logdrop-97 -j DROP +-A logdrop-970 -j TEE --gateway fc00::2 -A logdrop-970 -j DROP +-A logdrop-971 -j TEE --gateway fc00::2 -A logdrop-971 -j DROP +-A logdrop-972 -j TEE --gateway fc00::2 -A logdrop-972 -j DROP +-A logdrop-973 -j TEE --gateway fc00::2 -A logdrop-973 -j DROP +-A logdrop-974 -j TEE --gateway fc00::2 -A logdrop-974 -j DROP +-A logdrop-975 -j TEE --gateway fc00::2 -A logdrop-975 -j DROP +-A logdrop-976 -j TEE --gateway fc00::2 -A logdrop-976 -j DROP +-A logdrop-977 -j TEE --gateway fc00::2 -A logdrop-977 -j DROP +-A logdrop-978 -j TEE --gateway fc00::2 -A logdrop-978 -j DROP +-A logdrop-979 -j TEE --gateway fc00::2 -A logdrop-979 -j DROP +-A logdrop-98 -m limit --limit 1/second -j LOG -A logdrop-98 -j DROP +-A logdrop-980 -j TEE --gateway fc00::2 -A logdrop-980 -j DROP +-A logdrop-981 -j TEE --gateway fc00::2 -A logdrop-981 -j DROP +-A logdrop-982 -j TEE --gateway fc00::2 -A logdrop-982 -j DROP +-A logdrop-983 -j TEE --gateway fc00::2 -A logdrop-983 -j DROP +-A logdrop-984 -j TEE --gateway fc00::2 -A logdrop-984 -j DROP +-A logdrop-985 -j TEE --gateway fc00::2 -A logdrop-985 -j DROP +-A logdrop-986 -j TEE --gateway fc00::2 -A logdrop-986 -j DROP +-A logdrop-987 -j TEE --gateway fc00::2 -A logdrop-987 -j DROP +-A logdrop-988 -j TEE --gateway fc00::2 -A logdrop-988 -j DROP +-A logdrop-989 -j TEE --gateway fc00::2 -A logdrop-989 -j DROP +-A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP +-A logdrop-990 -j TEE --gateway fc00::2 -A logdrop-990 -j DROP +-A logdrop-991 -j TEE --gateway fc00::2 -A logdrop-991 -j DROP +-A logdrop-992 -j TEE --gateway fc00::2 -A logdrop-992 -j DROP +-A logdrop-993 -j TEE --gateway fc00::2 -A logdrop-993 -j DROP +-A logdrop-994 -j TEE --gateway fc00::2 -A logdrop-994 -j DROP +-A logdrop-995 -j TEE --gateway fc00::2 -A logdrop-995 -j DROP +-A logdrop-996 -j TEE --gateway fc00::2 -A logdrop-996 -j DROP +-A logdrop-997 -j TEE --gateway fc00::2 -A logdrop-997 -j DROP +-A logdrop-998 -j TEE --gateway fc00::2 -A logdrop-998 -j DROP +-A logdrop-999 -j TEE --gateway fc00::2 -A logdrop-999 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -j LOG +-A logpass-1 -j TEE --gateway fc00::1 +-A logpass-2 -j TEE --gateway fc00::2 COMMIT *mangle :INPUT ACCEPT [0:0] @@ -71116,6 +119106,188 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -71746,6 +119918,353 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack diff --git a/test/output/filter-limit/rules-save b/test/output/filter-limit/rules-save index 3f97755..0aea3eb 100644 --- a/test/output/filter-limit/rules-save +++ b/test/output/filter-limit/rules-save @@ -15,17 +15,17 @@ :limit-1004 - [0:0] :limit-1005 - [0:0] :limit-1006 - [0:0] -:limit-1007 - [0:0] :limit-1008 - [0:0] :limit-1009 - [0:0] :limit-101 - [0:0] :limit-1010 - [0:0] :limit-1011 - [0:0] :limit-1012 - [0:0] -:limit-1013 - [0:0] +:limit-1014 - [0:0] :limit-1015 - [0:0] :limit-1016 - [0:0] :limit-1017 - [0:0] +:limit-1018 - [0:0] :limit-1019 - [0:0] :limit-102 - [0:0] :limit-1020 - [0:0] @@ -35,13 +35,13 @@ :limit-1024 - [0:0] :limit-1025 - [0:0] :limit-1026 - [0:0] -:limit-1027 - [0:0] :limit-1028 - [0:0] :limit-1029 - [0:0] :limit-103 - [0:0] +:limit-1030 - [0:0] :limit-1031 - [0:0] :limit-1032 - [0:0] -:limit-1033 - [0:0] +:limit-1034 - [0:0] :limit-1035 - [0:0] :limit-1036 - [0:0] :limit-1037 - [0:0] @@ -54,13 +54,13 @@ :limit-1043 - [0:0] :limit-1044 - [0:0] :limit-1045 - [0:0] -:limit-1047 - [0:0] +:limit-1046 - [0:0] :limit-1048 - [0:0] :limit-1049 - [0:0] :limit-105 - [0:0] +:limit-1050 - [0:0] :limit-1051 - [0:0] :limit-1052 - [0:0] -:limit-1053 - [0:0] :limit-1054 - [0:0] :limit-1055 - [0:0] :limit-1056 - [0:0] @@ -70,17 +70,17 @@ :limit-106 - [0:0] :limit-1060 - [0:0] :limit-1061 - [0:0] +:limit-1062 - [0:0] :limit-1063 - [0:0] :limit-1064 - [0:0] :limit-1065 - [0:0] -:limit-1067 - [0:0] +:limit-1066 - [0:0] :limit-1068 - [0:0] :limit-1069 - [0:0] :limit-107 - [0:0] :limit-1070 - [0:0] :limit-1071 - [0:0] :limit-1072 - [0:0] -:limit-1073 - [0:0] :limit-1074 - [0:0] :limit-1075 - [0:0] :limit-1076 - [0:0] @@ -94,26 +94,28 @@ :limit-1083 - [0:0] :limit-1084 - [0:0] :limit-1085 - [0:0] +:limit-1086 - [0:0] :limit-1087 - [0:0] :limit-1088 - [0:0] :limit-1089 - [0:0] :limit-109 - [0:0] +:limit-1090 - [0:0] :limit-1091 - [0:0] :limit-1092 - [0:0] :limit-1093 - [0:0] :limit-1094 - [0:0] :limit-1095 - [0:0] :limit-1096 - [0:0] -:limit-1097 - [0:0] :limit-1098 - [0:0] :limit-1099 - [0:0] :limit-11 - [0:0] :limit-110 - [0:0] :limit-1100 - [0:0] :limit-1101 - [0:0] -:limit-1103 - [0:0] +:limit-1102 - [0:0] :limit-1104 - [0:0] :limit-1105 - [0:0] +:limit-1106 - [0:0] :limit-1107 - [0:0] :limit-1108 - [0:0] :limit-1109 - [0:0] @@ -125,12 +127,12 @@ :limit-1114 - [0:0] :limit-1115 - [0:0] :limit-1116 - [0:0] -:limit-1117 - [0:0] +:limit-1118 - [0:0] :limit-1119 - [0:0] :limit-112 - [0:0] :limit-1120 - [0:0] :limit-1121 - [0:0] -:limit-1123 - [0:0] +:limit-1122 - [0:0] :limit-1124 - [0:0] :limit-1125 - [0:0] :limit-1126 - [0:0] @@ -142,15 +144,15 @@ :limit-1131 - [0:0] :limit-1132 - [0:0] :limit-1133 - [0:0] +:limit-1134 - [0:0] :limit-1135 - [0:0] :limit-1136 - [0:0] -:limit-1137 - [0:0] +:limit-1138 - [0:0] :limit-1139 - [0:0] :limit-114 - [0:0] :limit-1140 - [0:0] :limit-1141 - [0:0] :limit-1142 - [0:0] -:limit-1143 - [0:0] :limit-1144 - [0:0] :limit-1145 - [0:0] :limit-1146 - [0:0] @@ -165,12 +167,12 @@ :limit-1154 - [0:0] :limit-1155 - [0:0] :limit-1156 - [0:0] -:limit-1157 - [0:0] +:limit-1158 - [0:0] :limit-1159 - [0:0] :limit-116 - [0:0] :limit-1160 - [0:0] :limit-1161 - [0:0] -:limit-1163 - [0:0] +:limit-1162 - [0:0] :limit-1164 - [0:0] :limit-1165 - [0:0] :limit-1166 - [0:0] @@ -182,9 +184,11 @@ :limit-1171 - [0:0] :limit-1172 - [0:0] :limit-1173 - [0:0] +:limit-1174 - [0:0] :limit-1175 - [0:0] :limit-1176 - [0:0] :limit-1177 - [0:0] +:limit-1178 - [0:0] :limit-1179 - [0:0] :limit-118 - [0:0] :limit-1180 - [0:0] @@ -194,13 +198,13 @@ :limit-1184 - [0:0] :limit-1185 - [0:0] :limit-1186 - [0:0] -:limit-1187 - [0:0] :limit-1188 - [0:0] :limit-1189 - [0:0] :limit-119 - [0:0] +:limit-1190 - [0:0] :limit-1191 - [0:0] :limit-1192 - [0:0] -:limit-1193 - [0:0] +:limit-1194 - [0:0] :limit-1195 - [0:0] :limit-1196 - [0:0] :limit-1197 - [0:0] @@ -214,13 +218,13 @@ :limit-1203 - [0:0] :limit-1204 - [0:0] :limit-1205 - [0:0] -:limit-1207 - [0:0] +:limit-1206 - [0:0] :limit-1208 - [0:0] :limit-1209 - [0:0] :limit-121 - [0:0] +:limit-1210 - [0:0] :limit-1211 - [0:0] :limit-1212 - [0:0] -:limit-1213 - [0:0] :limit-1214 - [0:0] :limit-1215 - [0:0] :limit-1216 - [0:0] @@ -235,14 +239,12 @@ :limit-1224 - [0:0] :limit-1225 - [0:0] :limit-1226 - [0:0] -:limit-1227 - [0:0] :limit-1228 - [0:0] :limit-1229 - [0:0] :limit-123 - [0:0] :limit-1230 - [0:0] :limit-1231 - [0:0] :limit-1232 - [0:0] -:limit-1233 - [0:0] :limit-1234 - [0:0] :limit-1235 - [0:0] :limit-1236 - [0:0] @@ -257,14 +259,12 @@ :limit-1244 - [0:0] :limit-1245 - [0:0] :limit-1246 - [0:0] -:limit-1247 - [0:0] :limit-1248 - [0:0] :limit-1249 - [0:0] :limit-125 - [0:0] :limit-1250 - [0:0] :limit-1251 - [0:0] :limit-1252 - [0:0] -:limit-1253 - [0:0] :limit-1254 - [0:0] :limit-1255 - [0:0] :limit-1256 - [0:0] @@ -290,14 +290,12 @@ :limit-1274 - [0:0] :limit-1275 - [0:0] :limit-1276 - [0:0] -:limit-1277 - [0:0] :limit-1278 - [0:0] :limit-1279 - [0:0] :limit-128 - [0:0] :limit-1280 - [0:0] :limit-1281 - [0:0] :limit-1282 - [0:0] -:limit-1283 - [0:0] :limit-1284 - [0:0] :limit-1285 - [0:0] :limit-1286 - [0:0] @@ -312,7 +310,6 @@ :limit-1294 - [0:0] :limit-1295 - [0:0] :limit-1296 - [0:0] -:limit-1297 - [0:0] :limit-1298 - [0:0] :limit-1299 - [0:0] :limit-13 - [0:0] @@ -320,7 +317,6 @@ :limit-1300 - [0:0] :limit-1301 - [0:0] :limit-1302 - [0:0] -:limit-1303 - [0:0] :limit-1304 - [0:0] :limit-1305 - [0:0] :limit-1306 - [0:0] @@ -335,14 +331,12 @@ :limit-1314 - [0:0] :limit-1315 - [0:0] :limit-1316 - [0:0] -:limit-1317 - [0:0] :limit-1318 - [0:0] :limit-1319 - [0:0] :limit-132 - [0:0] :limit-1320 - [0:0] :limit-1321 - [0:0] :limit-1322 - [0:0] -:limit-1323 - [0:0] :limit-1324 - [0:0] :limit-1325 - [0:0] :limit-1326 - [0:0] @@ -357,14 +351,12 @@ :limit-1334 - [0:0] :limit-1335 - [0:0] :limit-1336 - [0:0] -:limit-1337 - [0:0] :limit-1338 - [0:0] :limit-1339 - [0:0] :limit-134 - [0:0] :limit-1340 - [0:0] :limit-1341 - [0:0] :limit-1342 - [0:0] -:limit-1343 - [0:0] :limit-1344 - [0:0] :limit-1345 - [0:0] :limit-1346 - [0:0] @@ -390,14 +382,12 @@ :limit-1364 - [0:0] :limit-1365 - [0:0] :limit-1366 - [0:0] -:limit-1367 - [0:0] :limit-1368 - [0:0] :limit-1369 - [0:0] :limit-137 - [0:0] :limit-1370 - [0:0] :limit-1371 - [0:0] :limit-1372 - [0:0] -:limit-1373 - [0:0] :limit-1374 - [0:0] :limit-1375 - [0:0] :limit-1376 - [0:0] @@ -412,14 +402,12 @@ :limit-1384 - [0:0] :limit-1385 - [0:0] :limit-1386 - [0:0] -:limit-1387 - [0:0] :limit-1388 - [0:0] :limit-1389 - [0:0] :limit-139 - [0:0] :limit-1390 - [0:0] :limit-1391 - [0:0] :limit-1392 - [0:0] -:limit-1393 - [0:0] :limit-1394 - [0:0] :limit-1395 - [0:0] :limit-1396 - [0:0] @@ -435,14 +423,12 @@ :limit-1404 - [0:0] :limit-1405 - [0:0] :limit-1406 - [0:0] -:limit-1407 - [0:0] :limit-1408 - [0:0] :limit-1409 - [0:0] :limit-141 - [0:0] :limit-1410 - [0:0] :limit-1411 - [0:0] :limit-1412 - [0:0] -:limit-1413 - [0:0] :limit-1414 - [0:0] :limit-1415 - [0:0] :limit-1416 - [0:0] @@ -457,14 +443,12 @@ :limit-1424 - [0:0] :limit-1425 - [0:0] :limit-1426 - [0:0] -:limit-1427 - [0:0] :limit-1428 - [0:0] :limit-1429 - [0:0] :limit-143 - [0:0] :limit-1430 - [0:0] :limit-1431 - [0:0] :limit-1432 - [0:0] -:limit-1433 - [0:0] :limit-1434 - [0:0] :limit-1435 - [0:0] :limit-1436 - [0:0] @@ -490,14 +474,12 @@ :limit-1454 - [0:0] :limit-1455 - [0:0] :limit-1456 - [0:0] -:limit-1457 - [0:0] :limit-1458 - [0:0] :limit-1459 - [0:0] :limit-146 - [0:0] :limit-1460 - [0:0] :limit-1461 - [0:0] :limit-1462 - [0:0] -:limit-1463 - [0:0] :limit-1464 - [0:0] :limit-1465 - [0:0] :limit-1466 - [0:0] @@ -512,14 +494,12 @@ :limit-1474 - [0:0] :limit-1475 - [0:0] :limit-1476 - [0:0] -:limit-1477 - [0:0] :limit-1478 - [0:0] :limit-1479 - [0:0] :limit-148 - [0:0] :limit-1480 - [0:0] :limit-1481 - [0:0] :limit-1482 - [0:0] -:limit-1483 - [0:0] :limit-1484 - [0:0] :limit-1485 - [0:0] :limit-1486 - [0:0] @@ -534,7 +514,6 @@ :limit-1494 - [0:0] :limit-1495 - [0:0] :limit-1496 - [0:0] -:limit-1497 - [0:0] :limit-1498 - [0:0] :limit-1499 - [0:0] :limit-15 - [0:0] @@ -542,7 +521,6 @@ :limit-1500 - [0:0] :limit-1501 - [0:0] :limit-1502 - [0:0] -:limit-1503 - [0:0] :limit-1504 - [0:0] :limit-1505 - [0:0] :limit-1506 - [0:0] @@ -557,14 +535,12 @@ :limit-1514 - [0:0] :limit-1515 - [0:0] :limit-1516 - [0:0] -:limit-1517 - [0:0] :limit-1518 - [0:0] :limit-1519 - [0:0] :limit-152 - [0:0] :limit-1520 - [0:0] :limit-1521 - [0:0] :limit-1522 - [0:0] -:limit-1523 - [0:0] :limit-1524 - [0:0] :limit-1525 - [0:0] :limit-1526 - [0:0] @@ -590,14 +566,12 @@ :limit-1544 - [0:0] :limit-1545 - [0:0] :limit-1546 - [0:0] -:limit-1547 - [0:0] :limit-1548 - [0:0] :limit-1549 - [0:0] :limit-155 - [0:0] :limit-1550 - [0:0] :limit-1551 - [0:0] :limit-1552 - [0:0] -:limit-1553 - [0:0] :limit-1554 - [0:0] :limit-1555 - [0:0] :limit-1556 - [0:0] @@ -612,14 +586,12 @@ :limit-1564 - [0:0] :limit-1565 - [0:0] :limit-1566 - [0:0] -:limit-1567 - [0:0] :limit-1568 - [0:0] :limit-1569 - [0:0] :limit-157 - [0:0] :limit-1570 - [0:0] :limit-1571 - [0:0] :limit-1572 - [0:0] -:limit-1573 - [0:0] :limit-1574 - [0:0] :limit-1575 - [0:0] :limit-1576 - [0:0] @@ -634,14 +606,12 @@ :limit-1584 - [0:0] :limit-1585 - [0:0] :limit-1586 - [0:0] -:limit-1587 - [0:0] :limit-1588 - [0:0] :limit-1589 - [0:0] :limit-159 - [0:0] :limit-1590 - [0:0] :limit-1591 - [0:0] :limit-1592 - [0:0] -:limit-1593 - [0:0] :limit-1594 - [0:0] :limit-1595 - [0:0] :limit-1596 - [0:0] @@ -657,14 +627,12 @@ :limit-1604 - [0:0] :limit-1605 - [0:0] :limit-1606 - [0:0] -:limit-1607 - [0:0] :limit-1608 - [0:0] :limit-1609 - [0:0] :limit-161 - [0:0] :limit-1610 - [0:0] :limit-1611 - [0:0] :limit-1612 - [0:0] -:limit-1613 - [0:0] :limit-1614 - [0:0] :limit-1615 - [0:0] :limit-1616 - [0:0] @@ -690,14 +658,12 @@ :limit-1634 - [0:0] :limit-1635 - [0:0] :limit-1636 - [0:0] -:limit-1637 - [0:0] :limit-1638 - [0:0] :limit-1639 - [0:0] :limit-164 - [0:0] :limit-1640 - [0:0] :limit-1641 - [0:0] :limit-1642 - [0:0] -:limit-1643 - [0:0] :limit-1644 - [0:0] :limit-1645 - [0:0] :limit-1646 - [0:0] @@ -712,14 +678,12 @@ :limit-1654 - [0:0] :limit-1655 - [0:0] :limit-1656 - [0:0] -:limit-1657 - [0:0] :limit-1658 - [0:0] :limit-1659 - [0:0] :limit-166 - [0:0] :limit-1660 - [0:0] :limit-1661 - [0:0] :limit-1662 - [0:0] -:limit-1663 - [0:0] :limit-1664 - [0:0] :limit-1665 - [0:0] :limit-1666 - [0:0] @@ -734,14 +698,12 @@ :limit-1674 - [0:0] :limit-1675 - [0:0] :limit-1676 - [0:0] -:limit-1677 - [0:0] :limit-1678 - [0:0] :limit-1679 - [0:0] :limit-168 - [0:0] :limit-1680 - [0:0] :limit-1681 - [0:0] :limit-1682 - [0:0] -:limit-1683 - [0:0] :limit-1684 - [0:0] :limit-1685 - [0:0] :limit-1686 - [0:0] @@ -756,7 +718,6 @@ :limit-1694 - [0:0] :limit-1695 - [0:0] :limit-1696 - [0:0] -:limit-1697 - [0:0] :limit-1698 - [0:0] :limit-1699 - [0:0] :limit-17 - [0:0] @@ -764,7 +725,6 @@ :limit-1700 - [0:0] :limit-1701 - [0:0] :limit-1702 - [0:0] -:limit-1703 - [0:0] :limit-1704 - [0:0] :limit-1705 - [0:0] :limit-1706 - [0:0] @@ -790,14 +750,12 @@ :limit-1724 - [0:0] :limit-1725 - [0:0] :limit-1726 - [0:0] -:limit-1727 - [0:0] :limit-1728 - [0:0] :limit-1729 - [0:0] :limit-173 - [0:0] :limit-1730 - [0:0] :limit-1731 - [0:0] :limit-1732 - [0:0] -:limit-1733 - [0:0] :limit-1734 - [0:0] :limit-1735 - [0:0] :limit-1736 - [0:0] @@ -812,14 +770,12 @@ :limit-1744 - [0:0] :limit-1745 - [0:0] :limit-1746 - [0:0] -:limit-1747 - [0:0] :limit-1748 - [0:0] :limit-1749 - [0:0] :limit-175 - [0:0] :limit-1750 - [0:0] :limit-1751 - [0:0] :limit-1752 - [0:0] -:limit-1753 - [0:0] :limit-1754 - [0:0] :limit-1755 - [0:0] :limit-1756 - [0:0] @@ -834,14 +790,12 @@ :limit-1764 - [0:0] :limit-1765 - [0:0] :limit-1766 - [0:0] -:limit-1767 - [0:0] :limit-1768 - [0:0] :limit-1769 - [0:0] :limit-177 - [0:0] :limit-1770 - [0:0] :limit-1771 - [0:0] :limit-1772 - [0:0] -:limit-1773 - [0:0] :limit-1774 - [0:0] :limit-1775 - [0:0] :limit-1776 - [0:0] @@ -856,14 +810,12 @@ :limit-1784 - [0:0] :limit-1785 - [0:0] :limit-1786 - [0:0] -:limit-1787 - [0:0] :limit-1788 - [0:0] :limit-1789 - [0:0] :limit-179 - [0:0] :limit-1790 - [0:0] :limit-1791 - [0:0] :limit-1792 - [0:0] -:limit-1793 - [0:0] :limit-1794 - [0:0] :limit-1795 - [0:0] :limit-1796 - [0:0] @@ -890,14 +842,12 @@ :limit-1814 - [0:0] :limit-1815 - [0:0] :limit-1816 - [0:0] -:limit-1817 - [0:0] :limit-1818 - [0:0] :limit-1819 - [0:0] :limit-182 - [0:0] :limit-1820 - [0:0] :limit-1821 - [0:0] :limit-1822 - [0:0] -:limit-1823 - [0:0] :limit-1824 - [0:0] :limit-1825 - [0:0] :limit-1826 - [0:0] @@ -912,14 +862,12 @@ :limit-1834 - [0:0] :limit-1835 - [0:0] :limit-1836 - [0:0] -:limit-1837 - [0:0] :limit-1838 - [0:0] :limit-1839 - [0:0] :limit-184 - [0:0] :limit-1840 - [0:0] :limit-1841 - [0:0] :limit-1842 - [0:0] -:limit-1843 - [0:0] :limit-1844 - [0:0] :limit-1845 - [0:0] :limit-1846 - [0:0] @@ -934,14 +882,12 @@ :limit-1854 - [0:0] :limit-1855 - [0:0] :limit-1856 - [0:0] -:limit-1857 - [0:0] :limit-1858 - [0:0] :limit-1859 - [0:0] :limit-186 - [0:0] :limit-1860 - [0:0] :limit-1861 - [0:0] :limit-1862 - [0:0] -:limit-1863 - [0:0] :limit-1864 - [0:0] :limit-1865 - [0:0] :limit-1866 - [0:0] @@ -956,14 +902,12 @@ :limit-1874 - [0:0] :limit-1875 - [0:0] :limit-1876 - [0:0] -:limit-1877 - [0:0] :limit-1878 - [0:0] :limit-1879 - [0:0] :limit-188 - [0:0] :limit-1880 - [0:0] :limit-1881 - [0:0] :limit-1882 - [0:0] -:limit-1883 - [0:0] :limit-1884 - [0:0] :limit-1885 - [0:0] :limit-1886 - [0:0] @@ -996,9 +940,11 @@ :limit-191 - [0:0] :limit-1910 - [0:0] :limit-1911 - [0:0] +:limit-1912 - [0:0] :limit-1913 - [0:0] :limit-1914 - [0:0] :limit-1915 - [0:0] +:limit-1916 - [0:0] :limit-1917 - [0:0] :limit-1918 - [0:0] :limit-1919 - [0:0] @@ -1011,10 +957,12 @@ :limit-1925 - [0:0] :limit-1926 - [0:0] :limit-1927 - [0:0] +:limit-1928 - [0:0] :limit-1929 - [0:0] :limit-193 - [0:0] :limit-1930 - [0:0] :limit-1931 - [0:0] +:limit-1932 - [0:0] :limit-1933 - [0:0] :limit-1934 - [0:0] :limit-1935 - [0:0] @@ -1027,9 +975,11 @@ :limit-1941 - [0:0] :limit-1942 - [0:0] :limit-1943 - [0:0] +:limit-1944 - [0:0] :limit-1945 - [0:0] :limit-1946 - [0:0] :limit-1947 - [0:0] +:limit-1948 - [0:0] :limit-1949 - [0:0] :limit-195 - [0:0] :limit-1950 - [0:0] @@ -1043,9 +993,11 @@ :limit-1958 - [0:0] :limit-1959 - [0:0] :limit-196 - [0:0] +:limit-1960 - [0:0] :limit-1961 - [0:0] :limit-1962 - [0:0] :limit-1963 - [0:0] +:limit-1964 - [0:0] :limit-1965 - [0:0] :limit-1966 - [0:0] :limit-1967 - [0:0] @@ -1067,9 +1019,11 @@ :limit-1981 - [0:0] :limit-1982 - [0:0] :limit-1983 - [0:0] +:limit-1984 - [0:0] :limit-1985 - [0:0] :limit-1986 - [0:0] :limit-1987 - [0:0] +:limit-1988 - [0:0] :limit-1989 - [0:0] :limit-199 - [0:0] :limit-1990 - [0:0] @@ -1085,9 +1039,11 @@ :limit-2 - [0:0] :limit-20 - [0:0] :limit-200 - [0:0] +:limit-2000 - [0:0] :limit-2001 - [0:0] :limit-2002 - [0:0] :limit-2003 - [0:0] +:limit-2004 - [0:0] :limit-2005 - [0:0] :limit-2006 - [0:0] :limit-2007 - [0:0] @@ -1100,10 +1056,12 @@ :limit-2013 - [0:0] :limit-2014 - [0:0] :limit-2015 - [0:0] +:limit-2016 - [0:0] :limit-2017 - [0:0] :limit-2018 - [0:0] :limit-2019 - [0:0] :limit-202 - [0:0] +:limit-2020 - [0:0] :limit-2021 - [0:0] :limit-2022 - [0:0] :limit-2023 - [0:0] @@ -1116,9 +1074,11 @@ :limit-203 - [0:0] :limit-2030 - [0:0] :limit-2031 - [0:0] +:limit-2032 - [0:0] :limit-2033 - [0:0] :limit-2034 - [0:0] :limit-2035 - [0:0] +:limit-2036 - [0:0] :limit-2037 - [0:0] :limit-2038 - [0:0] :limit-2039 - [0:0] @@ -1140,10 +1100,12 @@ :limit-2053 - [0:0] :limit-2054 - [0:0] :limit-2055 - [0:0] +:limit-2056 - [0:0] :limit-2057 - [0:0] :limit-2058 - [0:0] :limit-2059 - [0:0] :limit-206 - [0:0] +:limit-2060 - [0:0] :limit-2061 - [0:0] :limit-2062 - [0:0] :limit-2063 - [0:0] @@ -1156,9 +1118,11 @@ :limit-207 - [0:0] :limit-2070 - [0:0] :limit-2071 - [0:0] +:limit-2072 - [0:0] :limit-2073 - [0:0] :limit-2074 - [0:0] :limit-2075 - [0:0] +:limit-2076 - [0:0] :limit-2077 - [0:0] :limit-2078 - [0:0] :limit-2079 - [0:0] @@ -1171,10 +1135,12 @@ :limit-2085 - [0:0] :limit-2086 - [0:0] :limit-2087 - [0:0] +:limit-2088 - [0:0] :limit-2089 - [0:0] :limit-209 - [0:0] :limit-2090 - [0:0] :limit-2091 - [0:0] +:limit-2092 - [0:0] :limit-2093 - [0:0] :limit-2094 - [0:0] :limit-2095 - [0:0] @@ -1188,9 +1154,11 @@ :limit-2101 - [0:0] :limit-2102 - [0:0] :limit-2103 - [0:0] +:limit-2104 - [0:0] :limit-2105 - [0:0] :limit-2106 - [0:0] :limit-2107 - [0:0] +:limit-2108 - [0:0] :limit-2109 - [0:0] :limit-211 - [0:0] :limit-2110 - [0:0] @@ -1212,10 +1180,12 @@ :limit-2125 - [0:0] :limit-2126 - [0:0] :limit-2127 - [0:0] +:limit-2128 - [0:0] :limit-2129 - [0:0] :limit-213 - [0:0] :limit-2130 - [0:0] :limit-2131 - [0:0] +:limit-2132 - [0:0] :limit-2133 - [0:0] :limit-2134 - [0:0] :limit-2135 - [0:0] @@ -1228,9 +1198,11 @@ :limit-2141 - [0:0] :limit-2142 - [0:0] :limit-2143 - [0:0] +:limit-2144 - [0:0] :limit-2145 - [0:0] :limit-2146 - [0:0] :limit-2147 - [0:0] +:limit-2148 - [0:0] :limit-2149 - [0:0] :limit-215 - [0:0] :limit-2150 - [0:0] @@ -1244,9 +1216,11 @@ :limit-2158 - [0:0] :limit-2159 - [0:0] :limit-216 - [0:0] +:limit-2160 - [0:0] :limit-2161 - [0:0] :limit-2162 - [0:0] :limit-2163 - [0:0] +:limit-2164 - [0:0] :limit-2165 - [0:0] :limit-2166 - [0:0] :limit-2167 - [0:0] @@ -1259,10 +1233,12 @@ :limit-2173 - [0:0] :limit-2174 - [0:0] :limit-2175 - [0:0] +:limit-2176 - [0:0] :limit-2177 - [0:0] :limit-2178 - [0:0] :limit-2179 - [0:0] :limit-218 - [0:0] +:limit-2180 - [0:0] :limit-2181 - [0:0] :limit-2182 - [0:0] :limit-2183 - [0:0] @@ -1285,9 +1261,11 @@ :limit-2199 - [0:0] :limit-22 - [0:0] :limit-220 - [0:0] +:limit-2200 - [0:0] :limit-2201 - [0:0] :limit-2202 - [0:0] :limit-2203 - [0:0] +:limit-2204 - [0:0] :limit-2205 - [0:0] :limit-2206 - [0:0] :limit-2207 - [0:0] @@ -1300,10 +1278,12 @@ :limit-2213 - [0:0] :limit-2214 - [0:0] :limit-2215 - [0:0] +:limit-2216 - [0:0] :limit-2217 - [0:0] :limit-2218 - [0:0] :limit-2219 - [0:0] :limit-222 - [0:0] +:limit-2220 - [0:0] :limit-2221 - [0:0] :limit-2222 - [0:0] :limit-2223 - [0:0] @@ -1316,9 +1296,11 @@ :limit-223 - [0:0] :limit-2230 - [0:0] :limit-2231 - [0:0] +:limit-2232 - [0:0] :limit-2233 - [0:0] :limit-2234 - [0:0] :limit-2235 - [0:0] +:limit-2236 - [0:0] :limit-2237 - [0:0] :limit-2238 - [0:0] :limit-2239 - [0:0] @@ -1331,10 +1313,12 @@ :limit-2245 - [0:0] :limit-2246 - [0:0] :limit-2247 - [0:0] +:limit-2248 - [0:0] :limit-2249 - [0:0] :limit-225 - [0:0] :limit-2250 - [0:0] :limit-2251 - [0:0] +:limit-2252 - [0:0] :limit-2253 - [0:0] :limit-2254 - [0:0] :limit-2255 - [0:0] @@ -1356,9 +1340,11 @@ :limit-227 - [0:0] :limit-2270 - [0:0] :limit-2271 - [0:0] +:limit-2272 - [0:0] :limit-2273 - [0:0] :limit-2274 - [0:0] :limit-2275 - [0:0] +:limit-2276 - [0:0] :limit-2277 - [0:0] :limit-2278 - [0:0] :limit-2279 - [0:0] @@ -1371,10 +1357,12 @@ :limit-2285 - [0:0] :limit-2286 - [0:0] :limit-2287 - [0:0] +:limit-2288 - [0:0] :limit-2289 - [0:0] :limit-229 - [0:0] :limit-2290 - [0:0] :limit-2291 - [0:0] +:limit-2292 - [0:0] :limit-2293 - [0:0] :limit-2294 - [0:0] :limit-2295 - [0:0] @@ -1388,9 +1376,11 @@ :limit-2301 - [0:0] :limit-2302 - [0:0] :limit-2303 - [0:0] +:limit-2304 - [0:0] :limit-2305 - [0:0] :limit-2306 - [0:0] :limit-2307 - [0:0] +:limit-2308 - [0:0] :limit-2309 - [0:0] :limit-231 - [0:0] :limit-2310 - [0:0] @@ -1404,9 +1394,11 @@ :limit-2318 - [0:0] :limit-2319 - [0:0] :limit-232 - [0:0] +:limit-2320 - [0:0] :limit-2321 - [0:0] :limit-2322 - [0:0] :limit-2323 - [0:0] +:limit-2324 - [0:0] :limit-2325 - [0:0] :limit-2326 - [0:0] :limit-2327 - [0:0] @@ -1428,9 +1420,11 @@ :limit-2341 - [0:0] :limit-2342 - [0:0] :limit-2343 - [0:0] +:limit-2344 - [0:0] :limit-2345 - [0:0] :limit-2346 - [0:0] :limit-2347 - [0:0] +:limit-2348 - [0:0] :limit-2349 - [0:0] :limit-235 - [0:0] :limit-2350 - [0:0] @@ -1444,9 +1438,11 @@ :limit-2358 - [0:0] :limit-2359 - [0:0] :limit-236 - [0:0] +:limit-2360 - [0:0] :limit-2361 - [0:0] :limit-2362 - [0:0] :limit-2363 - [0:0] +:limit-2364 - [0:0] :limit-2365 - [0:0] :limit-2366 - [0:0] :limit-2367 - [0:0] @@ -1459,10 +1455,12 @@ :limit-2373 - [0:0] :limit-2374 - [0:0] :limit-2375 - [0:0] +:limit-2376 - [0:0] :limit-2377 - [0:0] :limit-2378 - [0:0] :limit-2379 - [0:0] :limit-238 - [0:0] +:limit-2380 - [0:0] :limit-2381 - [0:0] :limit-2382 - [0:0] :limit-2383 - [0:0] @@ -1475,9 +1473,11 @@ :limit-239 - [0:0] :limit-2390 - [0:0] :limit-2391 - [0:0] +:limit-2392 - [0:0] :limit-2393 - [0:0] :limit-2394 - [0:0] :limit-2395 - [0:0] +:limit-2396 - [0:0] :limit-2397 - [0:0] :limit-2398 - [0:0] :limit-2399 - [0:0] @@ -1500,10 +1500,12 @@ :limit-2413 - [0:0] :limit-2414 - [0:0] :limit-2415 - [0:0] +:limit-2416 - [0:0] :limit-2417 - [0:0] :limit-2418 - [0:0] :limit-2419 - [0:0] :limit-242 - [0:0] +:limit-2420 - [0:0] :limit-2421 - [0:0] :limit-2422 - [0:0] :limit-2423 - [0:0] @@ -1516,9 +1518,11 @@ :limit-243 - [0:0] :limit-2430 - [0:0] :limit-2431 - [0:0] +:limit-2432 - [0:0] :limit-2433 - [0:0] :limit-2434 - [0:0] :limit-2435 - [0:0] +:limit-2436 - [0:0] :limit-2437 - [0:0] :limit-2438 - [0:0] :limit-2439 - [0:0] @@ -1531,10 +1535,12 @@ :limit-2445 - [0:0] :limit-2446 - [0:0] :limit-2447 - [0:0] +:limit-2448 - [0:0] :limit-2449 - [0:0] :limit-245 - [0:0] :limit-2450 - [0:0] :limit-2451 - [0:0] +:limit-2452 - [0:0] :limit-2453 - [0:0] :limit-2454 - [0:0] :limit-2455 - [0:0] @@ -1547,9 +1553,11 @@ :limit-2461 - [0:0] :limit-2462 - [0:0] :limit-2463 - [0:0] +:limit-2464 - [0:0] :limit-2465 - [0:0] :limit-2466 - [0:0] :limit-2467 - [0:0] +:limit-2468 - [0:0] :limit-2469 - [0:0] :limit-247 - [0:0] :limit-2470 - [0:0] @@ -1603,160 +1611,1468 @@ :limit-2513 - [0:0] :limit-2514 - [0:0] :limit-2515 - [0:0] +:limit-2516 - [0:0] +:limit-2517 - [0:0] +:limit-2518 - [0:0] +:limit-2519 - [0:0] :limit-252 - [0:0] +:limit-2520 - [0:0] +:limit-2521 - [0:0] +:limit-2522 - [0:0] +:limit-2523 - [0:0] +:limit-2524 - [0:0] +:limit-2525 - [0:0] +:limit-2526 - [0:0] +:limit-2527 - [0:0] +:limit-2528 - [0:0] +:limit-2529 - [0:0] :limit-253 - [0:0] +:limit-2530 - [0:0] +:limit-2531 - [0:0] +:limit-2532 - [0:0] +:limit-2533 - [0:0] +:limit-2534 - [0:0] +:limit-2535 - [0:0] +:limit-2536 - [0:0] +:limit-2537 - [0:0] +:limit-2538 - [0:0] +:limit-2539 - [0:0] :limit-254 - [0:0] +:limit-2540 - [0:0] +:limit-2541 - [0:0] +:limit-2542 - [0:0] +:limit-2543 - [0:0] +:limit-2544 - [0:0] +:limit-2545 - [0:0] +:limit-2546 - [0:0] +:limit-2547 - [0:0] +:limit-2548 - [0:0] +:limit-2549 - [0:0] :limit-255 - [0:0] +:limit-2550 - [0:0] +:limit-2551 - [0:0] +:limit-2552 - [0:0] +:limit-2553 - [0:0] +:limit-2554 - [0:0] +:limit-2555 - [0:0] +:limit-2556 - [0:0] +:limit-2557 - [0:0] +:limit-2558 - [0:0] +:limit-2559 - [0:0] :limit-256 - [0:0] +:limit-2560 - [0:0] +:limit-2561 - [0:0] +:limit-2562 - [0:0] +:limit-2563 - [0:0] +:limit-2564 - [0:0] +:limit-2565 - [0:0] +:limit-2566 - [0:0] +:limit-2567 - [0:0] +:limit-2568 - [0:0] +:limit-2569 - [0:0] :limit-257 - [0:0] +:limit-2570 - [0:0] +:limit-2571 - [0:0] +:limit-2572 - [0:0] +:limit-2573 - [0:0] +:limit-2574 - [0:0] +:limit-2575 - [0:0] +:limit-2576 - [0:0] +:limit-2577 - [0:0] +:limit-2578 - [0:0] +:limit-2579 - [0:0] :limit-258 - [0:0] +:limit-2580 - [0:0] +:limit-2581 - [0:0] +:limit-2582 - [0:0] +:limit-2583 - [0:0] +:limit-2584 - [0:0] +:limit-2585 - [0:0] +:limit-2586 - [0:0] +:limit-2587 - [0:0] +:limit-2588 - [0:0] +:limit-2589 - [0:0] :limit-259 - [0:0] +:limit-2590 - [0:0] +:limit-2591 - [0:0] +:limit-2592 - [0:0] +:limit-2593 - [0:0] +:limit-2594 - [0:0] +:limit-2595 - [0:0] +:limit-2596 - [0:0] +:limit-2597 - [0:0] +:limit-2598 - [0:0] +:limit-2599 - [0:0] :limit-26 - [0:0] :limit-260 - [0:0] +:limit-2600 - [0:0] +:limit-2601 - [0:0] +:limit-2602 - [0:0] +:limit-2603 - [0:0] +:limit-2604 - [0:0] +:limit-2605 - [0:0] +:limit-2606 - [0:0] +:limit-2607 - [0:0] +:limit-2608 - [0:0] +:limit-2609 - [0:0] :limit-261 - [0:0] +:limit-2610 - [0:0] +:limit-2611 - [0:0] +:limit-2612 - [0:0] +:limit-2613 - [0:0] +:limit-2614 - [0:0] +:limit-2615 - [0:0] +:limit-2616 - [0:0] +:limit-2617 - [0:0] +:limit-2618 - [0:0] +:limit-2619 - [0:0] :limit-262 - [0:0] +:limit-2620 - [0:0] +:limit-2621 - [0:0] +:limit-2622 - [0:0] +:limit-2623 - [0:0] +:limit-2624 - [0:0] +:limit-2625 - [0:0] +:limit-2626 - [0:0] +:limit-2627 - [0:0] +:limit-2628 - [0:0] +:limit-2629 - [0:0] :limit-263 - [0:0] +:limit-2630 - [0:0] +:limit-2631 - [0:0] +:limit-2632 - [0:0] +:limit-2633 - [0:0] +:limit-2634 - [0:0] +:limit-2635 - [0:0] +:limit-2636 - [0:0] +:limit-2637 - [0:0] +:limit-2638 - [0:0] +:limit-2639 - [0:0] :limit-264 - [0:0] +:limit-2640 - [0:0] +:limit-2641 - [0:0] +:limit-2642 - [0:0] +:limit-2643 - [0:0] +:limit-2644 - [0:0] +:limit-2645 - [0:0] +:limit-2646 - [0:0] +:limit-2647 - [0:0] +:limit-2648 - [0:0] +:limit-2649 - [0:0] :limit-265 - [0:0] +:limit-2650 - [0:0] +:limit-2651 - [0:0] +:limit-2652 - [0:0] +:limit-2653 - [0:0] +:limit-2654 - [0:0] +:limit-2655 - [0:0] +:limit-2656 - [0:0] +:limit-2657 - [0:0] +:limit-2658 - [0:0] +:limit-2659 - [0:0] :limit-266 - [0:0] +:limit-2660 - [0:0] +:limit-2661 - [0:0] +:limit-2662 - [0:0] +:limit-2663 - [0:0] +:limit-2664 - [0:0] +:limit-2665 - [0:0] +:limit-2666 - [0:0] +:limit-2667 - [0:0] +:limit-2668 - [0:0] +:limit-2669 - [0:0] :limit-267 - [0:0] +:limit-2670 - [0:0] +:limit-2671 - [0:0] +:limit-2672 - [0:0] +:limit-2673 - [0:0] +:limit-2674 - [0:0] +:limit-2675 - [0:0] +:limit-2676 - [0:0] +:limit-2677 - [0:0] +:limit-2678 - [0:0] +:limit-2679 - [0:0] :limit-268 - [0:0] +:limit-2680 - [0:0] +:limit-2681 - [0:0] +:limit-2682 - [0:0] +:limit-2683 - [0:0] +:limit-2684 - [0:0] +:limit-2685 - [0:0] +:limit-2686 - [0:0] +:limit-2687 - [0:0] +:limit-2688 - [0:0] +:limit-2689 - [0:0] :limit-269 - [0:0] +:limit-2690 - [0:0] +:limit-2691 - [0:0] +:limit-2692 - [0:0] +:limit-2693 - [0:0] +:limit-2694 - [0:0] +:limit-2695 - [0:0] +:limit-2696 - [0:0] +:limit-2697 - [0:0] +:limit-2698 - [0:0] +:limit-2699 - [0:0] :limit-27 - [0:0] :limit-270 - [0:0] +:limit-2700 - [0:0] +:limit-2701 - [0:0] +:limit-2702 - [0:0] +:limit-2703 - [0:0] +:limit-2704 - [0:0] +:limit-2705 - [0:0] +:limit-2706 - [0:0] +:limit-2707 - [0:0] +:limit-2708 - [0:0] +:limit-2709 - [0:0] :limit-271 - [0:0] +:limit-2710 - [0:0] +:limit-2711 - [0:0] +:limit-2712 - [0:0] +:limit-2713 - [0:0] +:limit-2714 - [0:0] +:limit-2715 - [0:0] +:limit-2716 - [0:0] +:limit-2717 - [0:0] +:limit-2718 - [0:0] +:limit-2719 - [0:0] :limit-272 - [0:0] +:limit-2720 - [0:0] +:limit-2721 - [0:0] +:limit-2722 - [0:0] +:limit-2723 - [0:0] +:limit-2724 - [0:0] +:limit-2725 - [0:0] +:limit-2726 - [0:0] +:limit-2727 - [0:0] +:limit-2728 - [0:0] +:limit-2729 - [0:0] :limit-273 - [0:0] +:limit-2730 - [0:0] +:limit-2731 - [0:0] +:limit-2732 - [0:0] +:limit-2733 - [0:0] +:limit-2734 - [0:0] +:limit-2735 - [0:0] +:limit-2736 - [0:0] +:limit-2737 - [0:0] +:limit-2738 - [0:0] +:limit-2739 - [0:0] :limit-274 - [0:0] +:limit-2740 - [0:0] +:limit-2741 - [0:0] +:limit-2742 - [0:0] +:limit-2743 - [0:0] +:limit-2744 - [0:0] +:limit-2745 - [0:0] +:limit-2746 - [0:0] +:limit-2747 - [0:0] +:limit-2748 - [0:0] +:limit-2749 - [0:0] :limit-275 - [0:0] +:limit-2750 - [0:0] +:limit-2751 - [0:0] +:limit-2752 - [0:0] +:limit-2753 - [0:0] +:limit-2754 - [0:0] +:limit-2755 - [0:0] +:limit-2756 - [0:0] +:limit-2757 - [0:0] +:limit-2758 - [0:0] +:limit-2759 - [0:0] :limit-276 - [0:0] +:limit-2760 - [0:0] +:limit-2761 - [0:0] +:limit-2762 - [0:0] +:limit-2763 - [0:0] +:limit-2764 - [0:0] +:limit-2765 - [0:0] +:limit-2766 - [0:0] +:limit-2767 - [0:0] +:limit-2768 - [0:0] +:limit-2769 - [0:0] :limit-277 - [0:0] +:limit-2770 - [0:0] +:limit-2771 - [0:0] +:limit-2772 - [0:0] +:limit-2773 - [0:0] +:limit-2774 - [0:0] +:limit-2775 - [0:0] +:limit-2776 - [0:0] +:limit-2777 - [0:0] +:limit-2778 - [0:0] +:limit-2779 - [0:0] :limit-278 - [0:0] +:limit-2780 - [0:0] +:limit-2781 - [0:0] +:limit-2782 - [0:0] +:limit-2783 - [0:0] +:limit-2784 - [0:0] +:limit-2785 - [0:0] +:limit-2786 - [0:0] +:limit-2787 - [0:0] +:limit-2788 - [0:0] +:limit-2789 - [0:0] :limit-279 - [0:0] +:limit-2790 - [0:0] +:limit-2791 - [0:0] +:limit-2792 - [0:0] +:limit-2793 - [0:0] +:limit-2794 - [0:0] +:limit-2795 - [0:0] +:limit-2796 - [0:0] +:limit-2797 - [0:0] +:limit-2798 - [0:0] +:limit-2799 - [0:0] :limit-28 - [0:0] :limit-280 - [0:0] +:limit-2800 - [0:0] +:limit-2801 - [0:0] +:limit-2802 - [0:0] +:limit-2803 - [0:0] +:limit-2804 - [0:0] +:limit-2805 - [0:0] +:limit-2806 - [0:0] +:limit-2807 - [0:0] +:limit-2808 - [0:0] +:limit-2809 - [0:0] :limit-281 - [0:0] +:limit-2810 - [0:0] +:limit-2811 - [0:0] +:limit-2812 - [0:0] +:limit-2813 - [0:0] +:limit-2814 - [0:0] +:limit-2815 - [0:0] +:limit-2816 - [0:0] +:limit-2817 - [0:0] +:limit-2818 - [0:0] +:limit-2819 - [0:0] :limit-282 - [0:0] +:limit-2820 - [0:0] +:limit-2821 - [0:0] +:limit-2822 - [0:0] +:limit-2823 - [0:0] +:limit-2824 - [0:0] +:limit-2825 - [0:0] +:limit-2826 - [0:0] +:limit-2827 - [0:0] +:limit-2828 - [0:0] +:limit-2829 - [0:0] :limit-283 - [0:0] +:limit-2830 - [0:0] +:limit-2831 - [0:0] +:limit-2832 - [0:0] +:limit-2833 - [0:0] +:limit-2834 - [0:0] +:limit-2835 - [0:0] +:limit-2836 - [0:0] +:limit-2837 - [0:0] +:limit-2838 - [0:0] +:limit-2839 - [0:0] :limit-284 - [0:0] +:limit-2840 - [0:0] +:limit-2841 - [0:0] +:limit-2842 - [0:0] +:limit-2843 - [0:0] +:limit-2844 - [0:0] +:limit-2845 - [0:0] +:limit-2846 - [0:0] +:limit-2847 - [0:0] +:limit-2848 - [0:0] +:limit-2849 - [0:0] :limit-285 - [0:0] +:limit-2850 - [0:0] +:limit-2851 - [0:0] +:limit-2852 - [0:0] +:limit-2853 - [0:0] +:limit-2854 - [0:0] +:limit-2855 - [0:0] +:limit-2856 - [0:0] +:limit-2857 - [0:0] +:limit-2858 - [0:0] +:limit-2859 - [0:0] :limit-286 - [0:0] +:limit-2860 - [0:0] +:limit-2861 - [0:0] +:limit-2862 - [0:0] +:limit-2863 - [0:0] +:limit-2864 - [0:0] +:limit-2865 - [0:0] +:limit-2866 - [0:0] +:limit-2867 - [0:0] +:limit-2868 - [0:0] +:limit-2869 - [0:0] :limit-287 - [0:0] +:limit-2870 - [0:0] +:limit-2871 - [0:0] +:limit-2872 - [0:0] +:limit-2873 - [0:0] +:limit-2874 - [0:0] +:limit-2875 - [0:0] +:limit-2876 - [0:0] +:limit-2877 - [0:0] +:limit-2878 - [0:0] +:limit-2879 - [0:0] :limit-288 - [0:0] +:limit-2880 - [0:0] +:limit-2881 - [0:0] +:limit-2882 - [0:0] +:limit-2883 - [0:0] +:limit-2884 - [0:0] +:limit-2885 - [0:0] +:limit-2886 - [0:0] +:limit-2887 - [0:0] +:limit-2888 - [0:0] +:limit-2889 - [0:0] :limit-289 - [0:0] +:limit-2890 - [0:0] +:limit-2891 - [0:0] +:limit-2892 - [0:0] +:limit-2893 - [0:0] +:limit-2894 - [0:0] +:limit-2895 - [0:0] +:limit-2896 - [0:0] +:limit-2897 - [0:0] +:limit-2898 - [0:0] +:limit-2899 - [0:0] :limit-29 - [0:0] :limit-290 - [0:0] +:limit-2900 - [0:0] +:limit-2901 - [0:0] +:limit-2902 - [0:0] +:limit-2903 - [0:0] +:limit-2904 - [0:0] +:limit-2905 - [0:0] +:limit-2906 - [0:0] +:limit-2907 - [0:0] +:limit-2908 - [0:0] +:limit-2909 - [0:0] :limit-291 - [0:0] +:limit-2910 - [0:0] +:limit-2911 - [0:0] +:limit-2912 - [0:0] +:limit-2913 - [0:0] +:limit-2914 - [0:0] +:limit-2915 - [0:0] +:limit-2916 - [0:0] +:limit-2917 - [0:0] +:limit-2918 - [0:0] +:limit-2919 - [0:0] :limit-292 - [0:0] +:limit-2920 - [0:0] +:limit-2921 - [0:0] +:limit-2922 - [0:0] +:limit-2923 - [0:0] +:limit-2924 - [0:0] +:limit-2925 - [0:0] +:limit-2926 - [0:0] +:limit-2927 - [0:0] +:limit-2928 - [0:0] +:limit-2929 - [0:0] :limit-293 - [0:0] +:limit-2930 - [0:0] +:limit-2931 - [0:0] +:limit-2932 - [0:0] +:limit-2933 - [0:0] +:limit-2934 - [0:0] +:limit-2935 - [0:0] +:limit-2936 - [0:0] +:limit-2937 - [0:0] +:limit-2938 - [0:0] +:limit-2939 - [0:0] :limit-294 - [0:0] +:limit-2940 - [0:0] +:limit-2941 - [0:0] +:limit-2942 - [0:0] +:limit-2943 - [0:0] +:limit-2944 - [0:0] +:limit-2945 - [0:0] +:limit-2946 - [0:0] +:limit-2947 - [0:0] +:limit-2948 - [0:0] +:limit-2949 - [0:0] :limit-295 - [0:0] +:limit-2950 - [0:0] +:limit-2951 - [0:0] +:limit-2952 - [0:0] +:limit-2953 - [0:0] +:limit-2954 - [0:0] +:limit-2955 - [0:0] +:limit-2956 - [0:0] +:limit-2957 - [0:0] +:limit-2958 - [0:0] :limit-296 - [0:0] +:limit-2960 - [0:0] +:limit-2961 - [0:0] +:limit-2962 - [0:0] +:limit-2963 - [0:0] +:limit-2964 - [0:0] +:limit-2966 - [0:0] +:limit-2967 - [0:0] +:limit-2968 - [0:0] +:limit-2969 - [0:0] :limit-297 - [0:0] +:limit-2970 - [0:0] +:limit-2971 - [0:0] +:limit-2972 - [0:0] +:limit-2973 - [0:0] +:limit-2974 - [0:0] +:limit-2975 - [0:0] +:limit-2976 - [0:0] +:limit-2977 - [0:0] +:limit-2978 - [0:0] :limit-298 - [0:0] +:limit-2980 - [0:0] +:limit-2981 - [0:0] +:limit-2982 - [0:0] +:limit-2983 - [0:0] +:limit-2984 - [0:0] +:limit-2986 - [0:0] +:limit-2987 - [0:0] +:limit-2988 - [0:0] +:limit-2989 - [0:0] :limit-299 - [0:0] +:limit-2990 - [0:0] +:limit-2991 - [0:0] +:limit-2992 - [0:0] +:limit-2993 - [0:0] +:limit-2994 - [0:0] +:limit-2995 - [0:0] +:limit-2996 - [0:0] +:limit-2997 - [0:0] +:limit-2998 - [0:0] :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] +:limit-3000 - [0:0] +:limit-3001 - [0:0] +:limit-3002 - [0:0] +:limit-3003 - [0:0] +:limit-3004 - [0:0] +:limit-3006 - [0:0] +:limit-3007 - [0:0] +:limit-3008 - [0:0] +:limit-3009 - [0:0] :limit-301 - [0:0] +:limit-3010 - [0:0] +:limit-3011 - [0:0] +:limit-3012 - [0:0] +:limit-3013 - [0:0] +:limit-3014 - [0:0] +:limit-3015 - [0:0] +:limit-3016 - [0:0] +:limit-3017 - [0:0] +:limit-3018 - [0:0] :limit-302 - [0:0] +:limit-3020 - [0:0] +:limit-3021 - [0:0] +:limit-3022 - [0:0] +:limit-3023 - [0:0] +:limit-3024 - [0:0] +:limit-3026 - [0:0] +:limit-3027 - [0:0] +:limit-3028 - [0:0] +:limit-3029 - [0:0] :limit-303 - [0:0] +:limit-3030 - [0:0] +:limit-3031 - [0:0] +:limit-3032 - [0:0] +:limit-3033 - [0:0] +:limit-3034 - [0:0] +:limit-3035 - [0:0] +:limit-3036 - [0:0] +:limit-3037 - [0:0] +:limit-3038 - [0:0] +:limit-3039 - [0:0] :limit-304 - [0:0] +:limit-3040 - [0:0] +:limit-3041 - [0:0] +:limit-3042 - [0:0] +:limit-3043 - [0:0] +:limit-3044 - [0:0] +:limit-3045 - [0:0] +:limit-3046 - [0:0] +:limit-3047 - [0:0] +:limit-3048 - [0:0] :limit-305 - [0:0] +:limit-3050 - [0:0] +:limit-3051 - [0:0] +:limit-3052 - [0:0] +:limit-3053 - [0:0] +:limit-3054 - [0:0] +:limit-3056 - [0:0] +:limit-3057 - [0:0] +:limit-3058 - [0:0] +:limit-3059 - [0:0] :limit-306 - [0:0] +:limit-3060 - [0:0] +:limit-3061 - [0:0] +:limit-3062 - [0:0] +:limit-3063 - [0:0] +:limit-3064 - [0:0] +:limit-3065 - [0:0] +:limit-3066 - [0:0] +:limit-3067 - [0:0] +:limit-3068 - [0:0] :limit-307 - [0:0] +:limit-3070 - [0:0] +:limit-3071 - [0:0] +:limit-3072 - [0:0] +:limit-3073 - [0:0] +:limit-3074 - [0:0] +:limit-3076 - [0:0] +:limit-3077 - [0:0] +:limit-3078 - [0:0] +:limit-3079 - [0:0] :limit-308 - [0:0] +:limit-3080 - [0:0] +:limit-3081 - [0:0] +:limit-3082 - [0:0] +:limit-3083 - [0:0] +:limit-3084 - [0:0] +:limit-3085 - [0:0] +:limit-3086 - [0:0] +:limit-3087 - [0:0] +:limit-3088 - [0:0] :limit-309 - [0:0] +:limit-3090 - [0:0] +:limit-3091 - [0:0] +:limit-3092 - [0:0] +:limit-3093 - [0:0] +:limit-3094 - [0:0] +:limit-3096 - [0:0] +:limit-3097 - [0:0] +:limit-3098 - [0:0] +:limit-3099 - [0:0] :limit-31 - [0:0] :limit-310 - [0:0] +:limit-3100 - [0:0] +:limit-3101 - [0:0] +:limit-3102 - [0:0] +:limit-3103 - [0:0] +:limit-3104 - [0:0] +:limit-3105 - [0:0] +:limit-3106 - [0:0] +:limit-3107 - [0:0] +:limit-3108 - [0:0] :limit-311 - [0:0] +:limit-3110 - [0:0] +:limit-3111 - [0:0] +:limit-3112 - [0:0] +:limit-3113 - [0:0] +:limit-3114 - [0:0] +:limit-3116 - [0:0] +:limit-3117 - [0:0] +:limit-3118 - [0:0] +:limit-3119 - [0:0] :limit-312 - [0:0] +:limit-3120 - [0:0] +:limit-3121 - [0:0] +:limit-3122 - [0:0] +:limit-3123 - [0:0] +:limit-3124 - [0:0] +:limit-3125 - [0:0] +:limit-3126 - [0:0] +:limit-3127 - [0:0] +:limit-3128 - [0:0] +:limit-3129 - [0:0] :limit-313 - [0:0] +:limit-3130 - [0:0] +:limit-3131 - [0:0] +:limit-3132 - [0:0] +:limit-3133 - [0:0] +:limit-3134 - [0:0] +:limit-3135 - [0:0] +:limit-3136 - [0:0] +:limit-3137 - [0:0] +:limit-3138 - [0:0] :limit-314 - [0:0] +:limit-3140 - [0:0] +:limit-3141 - [0:0] +:limit-3142 - [0:0] +:limit-3143 - [0:0] +:limit-3144 - [0:0] +:limit-3146 - [0:0] +:limit-3147 - [0:0] +:limit-3148 - [0:0] +:limit-3149 - [0:0] :limit-315 - [0:0] +:limit-3150 - [0:0] +:limit-3151 - [0:0] +:limit-3152 - [0:0] +:limit-3153 - [0:0] +:limit-3154 - [0:0] +:limit-3155 - [0:0] +:limit-3156 - [0:0] +:limit-3157 - [0:0] +:limit-3158 - [0:0] :limit-316 - [0:0] +:limit-3160 - [0:0] +:limit-3161 - [0:0] +:limit-3162 - [0:0] +:limit-3163 - [0:0] +:limit-3164 - [0:0] +:limit-3166 - [0:0] +:limit-3167 - [0:0] +:limit-3168 - [0:0] +:limit-3169 - [0:0] :limit-317 - [0:0] +:limit-3170 - [0:0] +:limit-3171 - [0:0] +:limit-3172 - [0:0] +:limit-3173 - [0:0] +:limit-3174 - [0:0] +:limit-3175 - [0:0] +:limit-3176 - [0:0] +:limit-3177 - [0:0] +:limit-3178 - [0:0] :limit-318 - [0:0] +:limit-3180 - [0:0] +:limit-3181 - [0:0] +:limit-3182 - [0:0] +:limit-3183 - [0:0] +:limit-3184 - [0:0] +:limit-3186 - [0:0] +:limit-3187 - [0:0] +:limit-3188 - [0:0] +:limit-3189 - [0:0] :limit-319 - [0:0] +:limit-3190 - [0:0] +:limit-3191 - [0:0] +:limit-3192 - [0:0] +:limit-3193 - [0:0] +:limit-3194 - [0:0] +:limit-3195 - [0:0] +:limit-3196 - [0:0] +:limit-3197 - [0:0] +:limit-3198 - [0:0] :limit-32 - [0:0] :limit-320 - [0:0] +:limit-3200 - [0:0] +:limit-3201 - [0:0] +:limit-3202 - [0:0] +:limit-3203 - [0:0] +:limit-3204 - [0:0] +:limit-3206 - [0:0] +:limit-3207 - [0:0] +:limit-3208 - [0:0] +:limit-3209 - [0:0] :limit-321 - [0:0] +:limit-3210 - [0:0] +:limit-3211 - [0:0] +:limit-3212 - [0:0] +:limit-3213 - [0:0] +:limit-3214 - [0:0] +:limit-3215 - [0:0] +:limit-3216 - [0:0] +:limit-3217 - [0:0] +:limit-3218 - [0:0] +:limit-3219 - [0:0] :limit-322 - [0:0] +:limit-3220 - [0:0] +:limit-3221 - [0:0] +:limit-3222 - [0:0] +:limit-3223 - [0:0] +:limit-3224 - [0:0] +:limit-3225 - [0:0] +:limit-3226 - [0:0] +:limit-3227 - [0:0] +:limit-3228 - [0:0] :limit-323 - [0:0] +:limit-3230 - [0:0] +:limit-3231 - [0:0] +:limit-3232 - [0:0] +:limit-3233 - [0:0] +:limit-3234 - [0:0] +:limit-3236 - [0:0] +:limit-3237 - [0:0] +:limit-3238 - [0:0] +:limit-3239 - [0:0] :limit-324 - [0:0] +:limit-3240 - [0:0] +:limit-3241 - [0:0] +:limit-3242 - [0:0] +:limit-3243 - [0:0] +:limit-3244 - [0:0] +:limit-3245 - [0:0] +:limit-3246 - [0:0] +:limit-3247 - [0:0] +:limit-3248 - [0:0] :limit-325 - [0:0] +:limit-3250 - [0:0] +:limit-3251 - [0:0] +:limit-3252 - [0:0] +:limit-3253 - [0:0] +:limit-3254 - [0:0] +:limit-3256 - [0:0] +:limit-3257 - [0:0] +:limit-3258 - [0:0] +:limit-3259 - [0:0] :limit-326 - [0:0] +:limit-3260 - [0:0] +:limit-3261 - [0:0] +:limit-3262 - [0:0] +:limit-3263 - [0:0] +:limit-3264 - [0:0] +:limit-3265 - [0:0] +:limit-3266 - [0:0] +:limit-3267 - [0:0] +:limit-3268 - [0:0] :limit-327 - [0:0] +:limit-3270 - [0:0] +:limit-3271 - [0:0] +:limit-3272 - [0:0] +:limit-3273 - [0:0] +:limit-3274 - [0:0] +:limit-3276 - [0:0] +:limit-3277 - [0:0] +:limit-3278 - [0:0] +:limit-3279 - [0:0] :limit-328 - [0:0] +:limit-3280 - [0:0] +:limit-3281 - [0:0] +:limit-3282 - [0:0] +:limit-3283 - [0:0] +:limit-3284 - [0:0] +:limit-3285 - [0:0] +:limit-3286 - [0:0] +:limit-3287 - [0:0] +:limit-3288 - [0:0] :limit-329 - [0:0] +:limit-3290 - [0:0] +:limit-3291 - [0:0] +:limit-3292 - [0:0] +:limit-3293 - [0:0] +:limit-3294 - [0:0] +:limit-3296 - [0:0] +:limit-3297 - [0:0] +:limit-3298 - [0:0] +:limit-3299 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] +:limit-3300 - [0:0] +:limit-3301 - [0:0] +:limit-3302 - [0:0] +:limit-3303 - [0:0] +:limit-3304 - [0:0] +:limit-3305 - [0:0] +:limit-3306 - [0:0] +:limit-3307 - [0:0] +:limit-3308 - [0:0] +:limit-3309 - [0:0] :limit-331 - [0:0] +:limit-3310 - [0:0] +:limit-3311 - [0:0] +:limit-3312 - [0:0] +:limit-3313 - [0:0] +:limit-3314 - [0:0] +:limit-3315 - [0:0] +:limit-3316 - [0:0] +:limit-3317 - [0:0] +:limit-3318 - [0:0] :limit-332 - [0:0] +:limit-3320 - [0:0] +:limit-3321 - [0:0] +:limit-3322 - [0:0] +:limit-3323 - [0:0] +:limit-3324 - [0:0] +:limit-3326 - [0:0] +:limit-3327 - [0:0] +:limit-3328 - [0:0] +:limit-3329 - [0:0] :limit-333 - [0:0] +:limit-3330 - [0:0] +:limit-3331 - [0:0] +:limit-3332 - [0:0] +:limit-3333 - [0:0] +:limit-3334 - [0:0] +:limit-3335 - [0:0] +:limit-3336 - [0:0] +:limit-3337 - [0:0] +:limit-3338 - [0:0] :limit-334 - [0:0] +:limit-3340 - [0:0] +:limit-3341 - [0:0] +:limit-3342 - [0:0] +:limit-3343 - [0:0] +:limit-3344 - [0:0] +:limit-3346 - [0:0] +:limit-3347 - [0:0] +:limit-3348 - [0:0] +:limit-3349 - [0:0] :limit-335 - [0:0] +:limit-3350 - [0:0] +:limit-3351 - [0:0] +:limit-3352 - [0:0] +:limit-3353 - [0:0] +:limit-3354 - [0:0] +:limit-3355 - [0:0] +:limit-3356 - [0:0] +:limit-3357 - [0:0] +:limit-3358 - [0:0] :limit-336 - [0:0] +:limit-3360 - [0:0] +:limit-3361 - [0:0] +:limit-3362 - [0:0] +:limit-3363 - [0:0] +:limit-3364 - [0:0] +:limit-3366 - [0:0] +:limit-3367 - [0:0] +:limit-3368 - [0:0] +:limit-3369 - [0:0] :limit-337 - [0:0] +:limit-3370 - [0:0] +:limit-3371 - [0:0] +:limit-3372 - [0:0] +:limit-3373 - [0:0] +:limit-3374 - [0:0] +:limit-3375 - [0:0] +:limit-3376 - [0:0] +:limit-3377 - [0:0] +:limit-3378 - [0:0] :limit-338 - [0:0] +:limit-3380 - [0:0] +:limit-3381 - [0:0] +:limit-3382 - [0:0] +:limit-3383 - [0:0] +:limit-3384 - [0:0] +:limit-3386 - [0:0] +:limit-3387 - [0:0] +:limit-3388 - [0:0] +:limit-3389 - [0:0] :limit-339 - [0:0] +:limit-3390 - [0:0] +:limit-3391 - [0:0] +:limit-3392 - [0:0] +:limit-3393 - [0:0] +:limit-3394 - [0:0] +:limit-3395 - [0:0] +:limit-3396 - [0:0] +:limit-3397 - [0:0] +:limit-3398 - [0:0] +:limit-3399 - [0:0] :limit-34 - [0:0] :limit-340 - [0:0] +:limit-3400 - [0:0] +:limit-3401 - [0:0] +:limit-3402 - [0:0] +:limit-3403 - [0:0] +:limit-3404 - [0:0] +:limit-3405 - [0:0] +:limit-3406 - [0:0] +:limit-3407 - [0:0] +:limit-3408 - [0:0] :limit-341 - [0:0] +:limit-3410 - [0:0] +:limit-3411 - [0:0] +:limit-3412 - [0:0] +:limit-3413 - [0:0] +:limit-3414 - [0:0] +:limit-3416 - [0:0] +:limit-3417 - [0:0] +:limit-3418 - [0:0] +:limit-3419 - [0:0] :limit-342 - [0:0] +:limit-3420 - [0:0] +:limit-3421 - [0:0] +:limit-3422 - [0:0] +:limit-3423 - [0:0] +:limit-3424 - [0:0] +:limit-3425 - [0:0] +:limit-3426 - [0:0] +:limit-3427 - [0:0] +:limit-3428 - [0:0] :limit-343 - [0:0] +:limit-3430 - [0:0] +:limit-3431 - [0:0] +:limit-3432 - [0:0] +:limit-3433 - [0:0] +:limit-3434 - [0:0] +:limit-3436 - [0:0] +:limit-3437 - [0:0] +:limit-3438 - [0:0] +:limit-3439 - [0:0] :limit-344 - [0:0] +:limit-3440 - [0:0] +:limit-3441 - [0:0] +:limit-3442 - [0:0] +:limit-3443 - [0:0] +:limit-3444 - [0:0] +:limit-3445 - [0:0] +:limit-3446 - [0:0] +:limit-3447 - [0:0] +:limit-3448 - [0:0] :limit-345 - [0:0] +:limit-3450 - [0:0] +:limit-3451 - [0:0] +:limit-3452 - [0:0] +:limit-3453 - [0:0] +:limit-3454 - [0:0] +:limit-3456 - [0:0] +:limit-3457 - [0:0] +:limit-3458 - [0:0] +:limit-3459 - [0:0] :limit-346 - [0:0] +:limit-3460 - [0:0] +:limit-3461 - [0:0] +:limit-3462 - [0:0] +:limit-3463 - [0:0] +:limit-3464 - [0:0] +:limit-3465 - [0:0] +:limit-3466 - [0:0] +:limit-3467 - [0:0] +:limit-3468 - [0:0] :limit-347 - [0:0] +:limit-3470 - [0:0] +:limit-3471 - [0:0] +:limit-3472 - [0:0] +:limit-3473 - [0:0] +:limit-3474 - [0:0] +:limit-3476 - [0:0] +:limit-3477 - [0:0] +:limit-3478 - [0:0] +:limit-3479 - [0:0] :limit-348 - [0:0] +:limit-3480 - [0:0] +:limit-3481 - [0:0] +:limit-3482 - [0:0] +:limit-3483 - [0:0] +:limit-3484 - [0:0] +:limit-3485 - [0:0] +:limit-3486 - [0:0] +:limit-3487 - [0:0] +:limit-3488 - [0:0] +:limit-3489 - [0:0] :limit-349 - [0:0] +:limit-3490 - [0:0] +:limit-3491 - [0:0] +:limit-3492 - [0:0] +:limit-3493 - [0:0] +:limit-3494 - [0:0] +:limit-3495 - [0:0] +:limit-3496 - [0:0] +:limit-3497 - [0:0] +:limit-3498 - [0:0] :limit-35 - [0:0] :limit-350 - [0:0] +:limit-3500 - [0:0] +:limit-3501 - [0:0] +:limit-3502 - [0:0] +:limit-3503 - [0:0] +:limit-3504 - [0:0] +:limit-3506 - [0:0] +:limit-3507 - [0:0] +:limit-3508 - [0:0] +:limit-3509 - [0:0] :limit-351 - [0:0] +:limit-3510 - [0:0] +:limit-3511 - [0:0] +:limit-3512 - [0:0] +:limit-3513 - [0:0] +:limit-3514 - [0:0] +:limit-3515 - [0:0] +:limit-3516 - [0:0] +:limit-3517 - [0:0] +:limit-3518 - [0:0] :limit-352 - [0:0] +:limit-3520 - [0:0] +:limit-3521 - [0:0] +:limit-3522 - [0:0] +:limit-3523 - [0:0] +:limit-3524 - [0:0] +:limit-3526 - [0:0] +:limit-3527 - [0:0] +:limit-3528 - [0:0] +:limit-3529 - [0:0] :limit-353 - [0:0] +:limit-3530 - [0:0] +:limit-3531 - [0:0] +:limit-3532 - [0:0] +:limit-3533 - [0:0] +:limit-3534 - [0:0] +:limit-3535 - [0:0] +:limit-3536 - [0:0] +:limit-3537 - [0:0] +:limit-3538 - [0:0] :limit-354 - [0:0] +:limit-3540 - [0:0] +:limit-3541 - [0:0] +:limit-3542 - [0:0] +:limit-3543 - [0:0] +:limit-3544 - [0:0] +:limit-3546 - [0:0] +:limit-3547 - [0:0] +:limit-3548 - [0:0] +:limit-3549 - [0:0] :limit-355 - [0:0] +:limit-3550 - [0:0] +:limit-3551 - [0:0] +:limit-3552 - [0:0] +:limit-3553 - [0:0] +:limit-3554 - [0:0] +:limit-3555 - [0:0] +:limit-3556 - [0:0] +:limit-3557 - [0:0] +:limit-3558 - [0:0] :limit-356 - [0:0] +:limit-3560 - [0:0] +:limit-3561 - [0:0] +:limit-3562 - [0:0] +:limit-3563 - [0:0] +:limit-3564 - [0:0] +:limit-3566 - [0:0] +:limit-3567 - [0:0] +:limit-3568 - [0:0] +:limit-3569 - [0:0] :limit-357 - [0:0] +:limit-3570 - [0:0] +:limit-3571 - [0:0] +:limit-3572 - [0:0] +:limit-3573 - [0:0] +:limit-3574 - [0:0] +:limit-3575 - [0:0] +:limit-3576 - [0:0] +:limit-3577 - [0:0] +:limit-3578 - [0:0] +:limit-3579 - [0:0] :limit-358 - [0:0] +:limit-3580 - [0:0] +:limit-3581 - [0:0] +:limit-3582 - [0:0] +:limit-3583 - [0:0] +:limit-3584 - [0:0] +:limit-3585 - [0:0] +:limit-3586 - [0:0] +:limit-3587 - [0:0] +:limit-3588 - [0:0] :limit-359 - [0:0] +:limit-3590 - [0:0] +:limit-3591 - [0:0] +:limit-3592 - [0:0] +:limit-3593 - [0:0] +:limit-3594 - [0:0] +:limit-3596 - [0:0] +:limit-3597 - [0:0] +:limit-3598 - [0:0] +:limit-3599 - [0:0] :limit-36 - [0:0] :limit-360 - [0:0] +:limit-3600 - [0:0] +:limit-3601 - [0:0] +:limit-3602 - [0:0] +:limit-3603 - [0:0] +:limit-3604 - [0:0] +:limit-3605 - [0:0] +:limit-3606 - [0:0] +:limit-3607 - [0:0] +:limit-3608 - [0:0] :limit-361 - [0:0] +:limit-3610 - [0:0] +:limit-3611 - [0:0] +:limit-3612 - [0:0] +:limit-3613 - [0:0] +:limit-3614 - [0:0] +:limit-3616 - [0:0] +:limit-3617 - [0:0] +:limit-3618 - [0:0] +:limit-3619 - [0:0] :limit-362 - [0:0] +:limit-3620 - [0:0] +:limit-3621 - [0:0] +:limit-3622 - [0:0] +:limit-3623 - [0:0] +:limit-3624 - [0:0] +:limit-3625 - [0:0] +:limit-3626 - [0:0] +:limit-3627 - [0:0] +:limit-3628 - [0:0] :limit-363 - [0:0] +:limit-3630 - [0:0] +:limit-3631 - [0:0] +:limit-3632 - [0:0] +:limit-3633 - [0:0] +:limit-3634 - [0:0] +:limit-3636 - [0:0] +:limit-3637 - [0:0] +:limit-3638 - [0:0] +:limit-3639 - [0:0] :limit-364 - [0:0] +:limit-3640 - [0:0] +:limit-3641 - [0:0] +:limit-3642 - [0:0] +:limit-3643 - [0:0] +:limit-3644 - [0:0] +:limit-3645 - [0:0] +:limit-3646 - [0:0] +:limit-3647 - [0:0] +:limit-3648 - [0:0] :limit-365 - [0:0] +:limit-3650 - [0:0] +:limit-3651 - [0:0] +:limit-3652 - [0:0] +:limit-3653 - [0:0] +:limit-3654 - [0:0] +:limit-3656 - [0:0] +:limit-3657 - [0:0] +:limit-3658 - [0:0] +:limit-3659 - [0:0] :limit-366 - [0:0] +:limit-3660 - [0:0] +:limit-3661 - [0:0] +:limit-3662 - [0:0] +:limit-3663 - [0:0] +:limit-3664 - [0:0] +:limit-3665 - [0:0] +:limit-3666 - [0:0] +:limit-3667 - [0:0] +:limit-3668 - [0:0] +:limit-3669 - [0:0] :limit-367 - [0:0] +:limit-3670 - [0:0] +:limit-3671 - [0:0] +:limit-3672 - [0:0] +:limit-3673 - [0:0] +:limit-3674 - [0:0] +:limit-3675 - [0:0] +:limit-3676 - [0:0] +:limit-3677 - [0:0] +:limit-3678 - [0:0] :limit-368 - [0:0] +:limit-3680 - [0:0] +:limit-3681 - [0:0] +:limit-3682 - [0:0] +:limit-3683 - [0:0] +:limit-3684 - [0:0] +:limit-3686 - [0:0] +:limit-3687 - [0:0] +:limit-3688 - [0:0] +:limit-3689 - [0:0] :limit-369 - [0:0] +:limit-3690 - [0:0] +:limit-3691 - [0:0] +:limit-3692 - [0:0] +:limit-3693 - [0:0] +:limit-3694 - [0:0] +:limit-3695 - [0:0] +:limit-3696 - [0:0] +:limit-3697 - [0:0] +:limit-3698 - [0:0] :limit-37 - [0:0] :limit-370 - [0:0] +:limit-3700 - [0:0] +:limit-3701 - [0:0] +:limit-3702 - [0:0] +:limit-3703 - [0:0] +:limit-3704 - [0:0] +:limit-3706 - [0:0] +:limit-3707 - [0:0] +:limit-3708 - [0:0] +:limit-3709 - [0:0] :limit-371 - [0:0] +:limit-3710 - [0:0] +:limit-3711 - [0:0] +:limit-3712 - [0:0] +:limit-3713 - [0:0] +:limit-3714 - [0:0] +:limit-3715 - [0:0] +:limit-3716 - [0:0] +:limit-3717 - [0:0] +:limit-3718 - [0:0] :limit-372 - [0:0] +:limit-3720 - [0:0] +:limit-3721 - [0:0] +:limit-3722 - [0:0] +:limit-3723 - [0:0] +:limit-3724 - [0:0] +:limit-3726 - [0:0] +:limit-3727 - [0:0] +:limit-3728 - [0:0] +:limit-3729 - [0:0] :limit-373 - [0:0] +:limit-3730 - [0:0] +:limit-3731 - [0:0] +:limit-3732 - [0:0] +:limit-3733 - [0:0] +:limit-3734 - [0:0] +:limit-3735 - [0:0] +:limit-3736 - [0:0] +:limit-3737 - [0:0] +:limit-3738 - [0:0] :limit-374 - [0:0] +:limit-3740 - [0:0] +:limit-3741 - [0:0] +:limit-3742 - [0:0] +:limit-3743 - [0:0] +:limit-3744 - [0:0] +:limit-3746 - [0:0] +:limit-3747 - [0:0] +:limit-3748 - [0:0] +:limit-3749 - [0:0] :limit-375 - [0:0] +:limit-3750 - [0:0] +:limit-3751 - [0:0] +:limit-3752 - [0:0] +:limit-3753 - [0:0] +:limit-3754 - [0:0] +:limit-3755 - [0:0] +:limit-3756 - [0:0] +:limit-3757 - [0:0] +:limit-3758 - [0:0] +:limit-3759 - [0:0] :limit-376 - [0:0] +:limit-3760 - [0:0] +:limit-3761 - [0:0] +:limit-3762 - [0:0] +:limit-3763 - [0:0] +:limit-3764 - [0:0] +:limit-3765 - [0:0] +:limit-3766 - [0:0] +:limit-3767 - [0:0] +:limit-3768 - [0:0] :limit-377 - [0:0] +:limit-3770 - [0:0] +:limit-3771 - [0:0] +:limit-3772 - [0:0] +:limit-3773 - [0:0] +:limit-3774 - [0:0] +:limit-3776 - [0:0] +:limit-3777 - [0:0] +:limit-3778 - [0:0] +:limit-3779 - [0:0] :limit-378 - [0:0] +:limit-3780 - [0:0] +:limit-3781 - [0:0] +:limit-3782 - [0:0] +:limit-3783 - [0:0] +:limit-3784 - [0:0] +:limit-3785 - [0:0] +:limit-3786 - [0:0] +:limit-3787 - [0:0] +:limit-3788 - [0:0] :limit-379 - [0:0] +:limit-3790 - [0:0] +:limit-3791 - [0:0] +:limit-3792 - [0:0] +:limit-3793 - [0:0] +:limit-3794 - [0:0] +:limit-3796 - [0:0] +:limit-3797 - [0:0] +:limit-3798 - [0:0] +:limit-3799 - [0:0] :limit-38 - [0:0] :limit-380 - [0:0] +:limit-3800 - [0:0] +:limit-3801 - [0:0] +:limit-3802 - [0:0] +:limit-3803 - [0:0] +:limit-3804 - [0:0] +:limit-3805 - [0:0] +:limit-3806 - [0:0] +:limit-3807 - [0:0] +:limit-3808 - [0:0] :limit-381 - [0:0] +:limit-3810 - [0:0] +:limit-3811 - [0:0] +:limit-3812 - [0:0] +:limit-3813 - [0:0] +:limit-3814 - [0:0] +:limit-3816 - [0:0] +:limit-3817 - [0:0] +:limit-3818 - [0:0] +:limit-3819 - [0:0] :limit-382 - [0:0] +:limit-3820 - [0:0] +:limit-3821 - [0:0] +:limit-3822 - [0:0] +:limit-3823 - [0:0] +:limit-3824 - [0:0] +:limit-3825 - [0:0] +:limit-3826 - [0:0] +:limit-3827 - [0:0] +:limit-3828 - [0:0] :limit-383 - [0:0] +:limit-3830 - [0:0] +:limit-3831 - [0:0] +:limit-3832 - [0:0] +:limit-3833 - [0:0] +:limit-3834 - [0:0] +:limit-3836 - [0:0] +:limit-3837 - [0:0] +:limit-3838 - [0:0] +:limit-3839 - [0:0] :limit-384 - [0:0] +:limit-3840 - [0:0] +:limit-3841 - [0:0] +:limit-3842 - [0:0] +:limit-3843 - [0:0] +:limit-3844 - [0:0] +:limit-3845 - [0:0] +:limit-3846 - [0:0] +:limit-3847 - [0:0] +:limit-3848 - [0:0] +:limit-3849 - [0:0] :limit-385 - [0:0] +:limit-3850 - [0:0] +:limit-3851 - [0:0] +:limit-3852 - [0:0] +:limit-3853 - [0:0] +:limit-3854 - [0:0] +:limit-3855 - [0:0] +:limit-3856 - [0:0] +:limit-3857 - [0:0] +:limit-3858 - [0:0] +:limit-3859 - [0:0] :limit-386 - [0:0] +:limit-3860 - [0:0] +:limit-3861 - [0:0] +:limit-3862 - [0:0] +:limit-3863 - [0:0] +:limit-3864 - [0:0] +:limit-3865 - [0:0] +:limit-3866 - [0:0] +:limit-3867 - [0:0] +:limit-3868 - [0:0] +:limit-3869 - [0:0] :limit-387 - [0:0] +:limit-3870 - [0:0] +:limit-3871 - [0:0] +:limit-3872 - [0:0] +:limit-3873 - [0:0] +:limit-3874 - [0:0] +:limit-3875 - [0:0] +:limit-3876 - [0:0] +:limit-3877 - [0:0] +:limit-3878 - [0:0] +:limit-3879 - [0:0] :limit-388 - [0:0] +:limit-3880 - [0:0] +:limit-3881 - [0:0] +:limit-3882 - [0:0] +:limit-3883 - [0:0] +:limit-3884 - [0:0] +:limit-3885 - [0:0] +:limit-3886 - [0:0] +:limit-3887 - [0:0] +:limit-3888 - [0:0] +:limit-3889 - [0:0] :limit-389 - [0:0] +:limit-3890 - [0:0] +:limit-3891 - [0:0] +:limit-3892 - [0:0] +:limit-3893 - [0:0] +:limit-3894 - [0:0] +:limit-3895 - [0:0] +:limit-3896 - [0:0] +:limit-3897 - [0:0] +:limit-3898 - [0:0] +:limit-3899 - [0:0] :limit-39 - [0:0] :limit-390 - [0:0] +:limit-3900 - [0:0] +:limit-3901 - [0:0] +:limit-3902 - [0:0] +:limit-3903 - [0:0] :limit-391 - [0:0] :limit-392 - [0:0] :limit-393 - [0:0] @@ -2049,9 +3365,11 @@ :limit-651 - [0:0] :limit-652 - [0:0] :limit-653 - [0:0] +:limit-654 - [0:0] :limit-655 - [0:0] :limit-656 - [0:0] :limit-657 - [0:0] +:limit-658 - [0:0] :limit-659 - [0:0] :limit-66 - [0:0] :limit-660 - [0:0] @@ -2065,9 +3383,11 @@ :limit-668 - [0:0] :limit-669 - [0:0] :limit-67 - [0:0] +:limit-670 - [0:0] :limit-671 - [0:0] :limit-672 - [0:0] :limit-673 - [0:0] +:limit-674 - [0:0] :limit-675 - [0:0] :limit-676 - [0:0] :limit-677 - [0:0] @@ -2080,10 +3400,12 @@ :limit-683 - [0:0] :limit-684 - [0:0] :limit-685 - [0:0] +:limit-686 - [0:0] :limit-687 - [0:0] :limit-688 - [0:0] :limit-689 - [0:0] :limit-69 - [0:0] +:limit-690 - [0:0] :limit-691 - [0:0] :limit-692 - [0:0] :limit-693 - [0:0] @@ -2097,9 +3419,11 @@ :limit-70 - [0:0] :limit-700 - [0:0] :limit-701 - [0:0] +:limit-702 - [0:0] :limit-703 - [0:0] :limit-704 - [0:0] :limit-705 - [0:0] +:limit-706 - [0:0] :limit-707 - [0:0] :limit-708 - [0:0] :limit-709 - [0:0] @@ -2121,10 +3445,12 @@ :limit-723 - [0:0] :limit-724 - [0:0] :limit-725 - [0:0] +:limit-726 - [0:0] :limit-727 - [0:0] :limit-728 - [0:0] :limit-729 - [0:0] :limit-73 - [0:0] +:limit-730 - [0:0] :limit-731 - [0:0] :limit-732 - [0:0] :limit-733 - [0:0] @@ -2137,9 +3463,11 @@ :limit-74 - [0:0] :limit-740 - [0:0] :limit-741 - [0:0] +:limit-742 - [0:0] :limit-743 - [0:0] :limit-744 - [0:0] :limit-745 - [0:0] +:limit-746 - [0:0] :limit-747 - [0:0] :limit-748 - [0:0] :limit-749 - [0:0] @@ -2152,10 +3480,12 @@ :limit-755 - [0:0] :limit-756 - [0:0] :limit-757 - [0:0] +:limit-758 - [0:0] :limit-759 - [0:0] :limit-76 - [0:0] :limit-760 - [0:0] :limit-761 - [0:0] +:limit-762 - [0:0] :limit-763 - [0:0] :limit-764 - [0:0] :limit-765 - [0:0] @@ -2168,9 +3498,11 @@ :limit-771 - [0:0] :limit-772 - [0:0] :limit-773 - [0:0] +:limit-774 - [0:0] :limit-775 - [0:0] :limit-776 - [0:0] :limit-777 - [0:0] +:limit-778 - [0:0] :limit-779 - [0:0] :limit-78 - [0:0] :limit-780 - [0:0] @@ -2192,11 +3524,13 @@ :limit-795 - [0:0] :limit-796 - [0:0] :limit-797 - [0:0] +:limit-798 - [0:0] :limit-799 - [0:0] :limit-8 - [0:0] :limit-80 - [0:0] :limit-800 - [0:0] :limit-801 - [0:0] +:limit-802 - [0:0] :limit-803 - [0:0] :limit-804 - [0:0] :limit-805 - [0:0] @@ -2209,9 +3543,11 @@ :limit-811 - [0:0] :limit-812 - [0:0] :limit-813 - [0:0] +:limit-814 - [0:0] :limit-815 - [0:0] :limit-816 - [0:0] :limit-817 - [0:0] +:limit-818 - [0:0] :limit-819 - [0:0] :limit-82 - [0:0] :limit-820 - [0:0] @@ -2225,9 +3561,11 @@ :limit-828 - [0:0] :limit-829 - [0:0] :limit-83 - [0:0] +:limit-830 - [0:0] :limit-831 - [0:0] :limit-832 - [0:0] :limit-833 - [0:0] +:limit-834 - [0:0] :limit-835 - [0:0] :limit-836 - [0:0] :limit-837 - [0:0] @@ -2240,10 +3578,12 @@ :limit-843 - [0:0] :limit-844 - [0:0] :limit-845 - [0:0] +:limit-846 - [0:0] :limit-847 - [0:0] :limit-848 - [0:0] :limit-849 - [0:0] :limit-85 - [0:0] +:limit-850 - [0:0] :limit-851 - [0:0] :limit-852 - [0:0] :limit-853 - [0:0] @@ -2265,9 +3605,11 @@ :limit-868 - [0:0] :limit-869 - [0:0] :limit-87 - [0:0] +:limit-870 - [0:0] :limit-871 - [0:0] :limit-872 - [0:0] :limit-873 - [0:0] +:limit-874 - [0:0] :limit-875 - [0:0] :limit-876 - [0:0] :limit-877 - [0:0] @@ -2280,10 +3622,12 @@ :limit-883 - [0:0] :limit-884 - [0:0] :limit-885 - [0:0] +:limit-886 - [0:0] :limit-887 - [0:0] :limit-888 - [0:0] :limit-889 - [0:0] :limit-89 - [0:0] +:limit-890 - [0:0] :limit-891 - [0:0] :limit-892 - [0:0] :limit-893 - [0:0] @@ -2297,9 +3641,11 @@ :limit-90 - [0:0] :limit-900 - [0:0] :limit-901 - [0:0] +:limit-902 - [0:0] :limit-903 - [0:0] :limit-904 - [0:0] :limit-905 - [0:0] +:limit-906 - [0:0] :limit-907 - [0:0] :limit-908 - [0:0] :limit-909 - [0:0] @@ -2312,10 +3658,12 @@ :limit-915 - [0:0] :limit-916 - [0:0] :limit-917 - [0:0] +:limit-918 - [0:0] :limit-919 - [0:0] :limit-92 - [0:0] :limit-920 - [0:0] :limit-921 - [0:0] +:limit-922 - [0:0] :limit-923 - [0:0] :limit-924 - [0:0] :limit-925 - [0:0] @@ -2337,9 +3685,11 @@ :limit-94 - [0:0] :limit-940 - [0:0] :limit-941 - [0:0] +:limit-942 - [0:0] :limit-943 - [0:0] :limit-944 - [0:0] :limit-945 - [0:0] +:limit-946 - [0:0] :limit-947 - [0:0] :limit-948 - [0:0] :limit-949 - [0:0] @@ -2352,10 +3702,12 @@ :limit-955 - [0:0] :limit-956 - [0:0] :limit-957 - [0:0] +:limit-958 - [0:0] :limit-959 - [0:0] :limit-96 - [0:0] :limit-960 - [0:0] :limit-961 - [0:0] +:limit-962 - [0:0] :limit-963 - [0:0] :limit-964 - [0:0] :limit-965 - [0:0] @@ -2368,9 +3720,11 @@ :limit-971 - [0:0] :limit-972 - [0:0] :limit-973 - [0:0] +:limit-974 - [0:0] :limit-975 - [0:0] :limit-976 - [0:0] :limit-977 - [0:0] +:limit-978 - [0:0] :limit-979 - [0:0] :limit-98 - [0:0] :limit-980 - [0:0] @@ -2384,9 +3738,11 @@ :limit-988 - [0:0] :limit-989 - [0:0] :limit-99 - [0:0] +:limit-990 - [0:0] :limit-991 - [0:0] :limit-992 - [0:0] :limit-993 - [0:0] +:limit-994 - [0:0] :limit-995 - [0:0] :limit-996 - [0:0] :limit-997 - [0:0] @@ -2395,6 +3751,9 @@ :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] +:logaccept-100 - [0:0] +:logaccept-101 - [0:0] +:logaccept-102 - [0:0] :logaccept-11 - [0:0] :logaccept-12 - [0:0] :logaccept-13 - [0:0] @@ -2444,10 +3803,54 @@ :logaccept-53 - [0:0] :logaccept-54 - [0:0] :logaccept-55 - [0:0] +:logaccept-56 - [0:0] +:logaccept-57 - [0:0] +:logaccept-58 - [0:0] +:logaccept-59 - [0:0] :logaccept-6 - [0:0] +:logaccept-60 - [0:0] +:logaccept-61 - [0:0] +:logaccept-62 - [0:0] +:logaccept-63 - [0:0] +:logaccept-64 - [0:0] +:logaccept-65 - [0:0] +:logaccept-66 - [0:0] +:logaccept-67 - [0:0] +:logaccept-68 - [0:0] +:logaccept-69 - [0:0] :logaccept-7 - [0:0] +:logaccept-70 - [0:0] +:logaccept-71 - [0:0] +:logaccept-72 - [0:0] +:logaccept-73 - [0:0] +:logaccept-74 - [0:0] +:logaccept-75 - [0:0] +:logaccept-76 - [0:0] +:logaccept-77 - [0:0] +:logaccept-78 - [0:0] +:logaccept-79 - [0:0] :logaccept-8 - [0:0] +:logaccept-80 - [0:0] +:logaccept-81 - [0:0] +:logaccept-82 - [0:0] +:logaccept-83 - [0:0] +:logaccept-84 - [0:0] +:logaccept-85 - [0:0] +:logaccept-86 - [0:0] +:logaccept-87 - [0:0] +:logaccept-88 - [0:0] +:logaccept-89 - [0:0] :logaccept-9 - [0:0] +:logaccept-90 - [0:0] +:logaccept-91 - [0:0] +:logaccept-92 - [0:0] +:logaccept-93 - [0:0] +:logaccept-94 - [0:0] +:logaccept-95 - [0:0] +:logaccept-96 - [0:0] +:logaccept-97 - [0:0] +:logaccept-98 - [0:0] +:logaccept-99 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] :logaccept-final-10 - [0:0] @@ -2521,22 +3924,164 @@ :logaccept-final-161 - [0:0] :logaccept-final-162 - [0:0] :logaccept-final-163 - [0:0] +:logaccept-final-164 - [0:0] +:logaccept-final-165 - [0:0] +:logaccept-final-166 - [0:0] +:logaccept-final-167 - [0:0] +:logaccept-final-168 - [0:0] +:logaccept-final-169 - [0:0] :logaccept-final-17 - [0:0] +:logaccept-final-170 - [0:0] +:logaccept-final-171 - [0:0] +:logaccept-final-172 - [0:0] +:logaccept-final-173 - [0:0] +:logaccept-final-174 - [0:0] +:logaccept-final-175 - [0:0] +:logaccept-final-176 - [0:0] +:logaccept-final-177 - [0:0] +:logaccept-final-178 - [0:0] +:logaccept-final-179 - [0:0] :logaccept-final-18 - [0:0] +:logaccept-final-180 - [0:0] +:logaccept-final-181 - [0:0] +:logaccept-final-182 - [0:0] +:logaccept-final-183 - [0:0] +:logaccept-final-184 - [0:0] +:logaccept-final-185 - [0:0] +:logaccept-final-186 - [0:0] +:logaccept-final-187 - [0:0] +:logaccept-final-188 - [0:0] +:logaccept-final-189 - [0:0] :logaccept-final-19 - [0:0] +:logaccept-final-190 - [0:0] +:logaccept-final-191 - [0:0] +:logaccept-final-192 - [0:0] +:logaccept-final-193 - [0:0] +:logaccept-final-194 - [0:0] +:logaccept-final-195 - [0:0] +:logaccept-final-196 - [0:0] +:logaccept-final-197 - [0:0] +:logaccept-final-198 - [0:0] +:logaccept-final-199 - [0:0] :logaccept-final-2 - [0:0] :logaccept-final-20 - [0:0] +:logaccept-final-200 - [0:0] +:logaccept-final-201 - [0:0] +:logaccept-final-202 - [0:0] +:logaccept-final-203 - [0:0] +:logaccept-final-204 - [0:0] +:logaccept-final-205 - [0:0] +:logaccept-final-206 - [0:0] +:logaccept-final-207 - [0:0] +:logaccept-final-208 - [0:0] +:logaccept-final-209 - [0:0] :logaccept-final-21 - [0:0] +:logaccept-final-210 - [0:0] +:logaccept-final-211 - [0:0] +:logaccept-final-212 - [0:0] +:logaccept-final-213 - [0:0] +:logaccept-final-214 - [0:0] +:logaccept-final-215 - [0:0] +:logaccept-final-216 - [0:0] +:logaccept-final-217 - [0:0] +:logaccept-final-218 - [0:0] +:logaccept-final-219 - [0:0] :logaccept-final-22 - [0:0] +:logaccept-final-220 - [0:0] +:logaccept-final-221 - [0:0] +:logaccept-final-222 - [0:0] +:logaccept-final-223 - [0:0] +:logaccept-final-224 - [0:0] +:logaccept-final-225 - [0:0] +:logaccept-final-226 - [0:0] +:logaccept-final-227 - [0:0] +:logaccept-final-228 - [0:0] +:logaccept-final-229 - [0:0] :logaccept-final-23 - [0:0] +:logaccept-final-230 - [0:0] +:logaccept-final-231 - [0:0] +:logaccept-final-232 - [0:0] +:logaccept-final-233 - [0:0] +:logaccept-final-234 - [0:0] +:logaccept-final-235 - [0:0] +:logaccept-final-236 - [0:0] +:logaccept-final-237 - [0:0] +:logaccept-final-238 - [0:0] +:logaccept-final-239 - [0:0] :logaccept-final-24 - [0:0] +:logaccept-final-240 - [0:0] +:logaccept-final-241 - [0:0] +:logaccept-final-242 - [0:0] +:logaccept-final-243 - [0:0] +:logaccept-final-244 - [0:0] +:logaccept-final-245 - [0:0] +:logaccept-final-246 - [0:0] +:logaccept-final-247 - [0:0] +:logaccept-final-248 - [0:0] +:logaccept-final-249 - [0:0] :logaccept-final-25 - [0:0] +:logaccept-final-250 - [0:0] +:logaccept-final-251 - [0:0] +:logaccept-final-252 - [0:0] +:logaccept-final-253 - [0:0] +:logaccept-final-254 - [0:0] +:logaccept-final-255 - [0:0] +:logaccept-final-256 - [0:0] +:logaccept-final-257 - [0:0] +:logaccept-final-258 - [0:0] +:logaccept-final-259 - [0:0] :logaccept-final-26 - [0:0] +:logaccept-final-260 - [0:0] +:logaccept-final-261 - [0:0] +:logaccept-final-262 - [0:0] +:logaccept-final-263 - [0:0] +:logaccept-final-264 - [0:0] +:logaccept-final-265 - [0:0] +:logaccept-final-266 - [0:0] +:logaccept-final-267 - [0:0] +:logaccept-final-268 - [0:0] +:logaccept-final-269 - [0:0] :logaccept-final-27 - [0:0] +:logaccept-final-270 - [0:0] +:logaccept-final-271 - [0:0] +:logaccept-final-272 - [0:0] +:logaccept-final-273 - [0:0] +:logaccept-final-274 - [0:0] +:logaccept-final-275 - [0:0] +:logaccept-final-276 - [0:0] +:logaccept-final-277 - [0:0] +:logaccept-final-278 - [0:0] +:logaccept-final-279 - [0:0] :logaccept-final-28 - [0:0] +:logaccept-final-280 - [0:0] +:logaccept-final-281 - [0:0] +:logaccept-final-282 - [0:0] +:logaccept-final-283 - [0:0] +:logaccept-final-284 - [0:0] +:logaccept-final-285 - [0:0] +:logaccept-final-286 - [0:0] +:logaccept-final-287 - [0:0] +:logaccept-final-288 - [0:0] +:logaccept-final-289 - [0:0] :logaccept-final-29 - [0:0] +:logaccept-final-290 - [0:0] +:logaccept-final-291 - [0:0] +:logaccept-final-292 - [0:0] +:logaccept-final-293 - [0:0] +:logaccept-final-294 - [0:0] +:logaccept-final-295 - [0:0] +:logaccept-final-296 - [0:0] +:logaccept-final-297 - [0:0] +:logaccept-final-298 - [0:0] +:logaccept-final-299 - [0:0] :logaccept-final-3 - [0:0] :logaccept-final-30 - [0:0] +:logaccept-final-300 - [0:0] +:logaccept-final-301 - [0:0] +:logaccept-final-302 - [0:0] +:logaccept-final-303 - [0:0] +:logaccept-final-304 - [0:0] +:logaccept-final-305 - [0:0] :logaccept-final-31 - [0:0] :logaccept-final-32 - [0:0] :logaccept-final-33 - [0:0] @@ -2822,120 +4367,1138 @@ :logdrop-1184 - [0:0] :logdrop-1185 - [0:0] :logdrop-1186 - [0:0] +:logdrop-1187 - [0:0] +:logdrop-1188 - [0:0] +:logdrop-1189 - [0:0] :logdrop-119 - [0:0] +:logdrop-1190 - [0:0] +:logdrop-1191 - [0:0] +:logdrop-1192 - [0:0] +:logdrop-1193 - [0:0] +:logdrop-1194 - [0:0] +:logdrop-1195 - [0:0] +:logdrop-1196 - [0:0] +:logdrop-1197 - [0:0] +:logdrop-1198 - [0:0] +:logdrop-1199 - [0:0] :logdrop-12 - [0:0] :logdrop-120 - [0:0] +:logdrop-1200 - [0:0] +:logdrop-1201 - [0:0] +:logdrop-1202 - [0:0] +:logdrop-1203 - [0:0] +:logdrop-1204 - [0:0] +:logdrop-1205 - [0:0] +:logdrop-1206 - [0:0] +:logdrop-1207 - [0:0] +:logdrop-1208 - [0:0] +:logdrop-1209 - [0:0] :logdrop-121 - [0:0] +:logdrop-1210 - [0:0] +:logdrop-1211 - [0:0] +:logdrop-1212 - [0:0] +:logdrop-1213 - [0:0] +:logdrop-1214 - [0:0] +:logdrop-1215 - [0:0] +:logdrop-1216 - [0:0] +:logdrop-1217 - [0:0] +:logdrop-1218 - [0:0] +:logdrop-1219 - [0:0] :logdrop-122 - [0:0] +:logdrop-1220 - [0:0] +:logdrop-1221 - [0:0] +:logdrop-1222 - [0:0] +:logdrop-1223 - [0:0] +:logdrop-1224 - [0:0] +:logdrop-1225 - [0:0] +:logdrop-1226 - [0:0] +:logdrop-1227 - [0:0] +:logdrop-1228 - [0:0] +:logdrop-1229 - [0:0] :logdrop-123 - [0:0] +:logdrop-1230 - [0:0] +:logdrop-1231 - [0:0] +:logdrop-1232 - [0:0] +:logdrop-1233 - [0:0] +:logdrop-1234 - [0:0] +:logdrop-1235 - [0:0] +:logdrop-1236 - [0:0] +:logdrop-1237 - [0:0] +:logdrop-1238 - [0:0] +:logdrop-1239 - [0:0] :logdrop-124 - [0:0] +:logdrop-1240 - [0:0] +:logdrop-1241 - [0:0] +:logdrop-1242 - [0:0] +:logdrop-1243 - [0:0] +:logdrop-1244 - [0:0] +:logdrop-1245 - [0:0] +:logdrop-1246 - [0:0] +:logdrop-1247 - [0:0] +:logdrop-1248 - [0:0] +:logdrop-1249 - [0:0] :logdrop-125 - [0:0] +:logdrop-1250 - [0:0] +:logdrop-1251 - [0:0] +:logdrop-1252 - [0:0] +:logdrop-1253 - [0:0] +:logdrop-1254 - [0:0] +:logdrop-1255 - [0:0] +:logdrop-1256 - [0:0] +:logdrop-1257 - [0:0] +:logdrop-1258 - [0:0] +:logdrop-1259 - [0:0] :logdrop-126 - [0:0] +:logdrop-1260 - [0:0] +:logdrop-1261 - [0:0] +:logdrop-1262 - [0:0] +:logdrop-1263 - [0:0] +:logdrop-1264 - [0:0] +:logdrop-1265 - [0:0] +:logdrop-1266 - [0:0] +:logdrop-1267 - [0:0] +:logdrop-1268 - [0:0] +:logdrop-1269 - [0:0] :logdrop-127 - [0:0] +:logdrop-1270 - [0:0] +:logdrop-1271 - [0:0] +:logdrop-1272 - [0:0] +:logdrop-1273 - [0:0] +:logdrop-1274 - [0:0] +:logdrop-1275 - [0:0] +:logdrop-1276 - [0:0] +:logdrop-1277 - [0:0] +:logdrop-1278 - [0:0] +:logdrop-1279 - [0:0] :logdrop-128 - [0:0] +:logdrop-1280 - [0:0] +:logdrop-1281 - [0:0] +:logdrop-1282 - [0:0] +:logdrop-1283 - [0:0] +:logdrop-1284 - [0:0] +:logdrop-1285 - [0:0] +:logdrop-1286 - [0:0] +:logdrop-1287 - [0:0] +:logdrop-1288 - [0:0] +:logdrop-1289 - [0:0] :logdrop-129 - [0:0] +:logdrop-1290 - [0:0] +:logdrop-1291 - [0:0] +:logdrop-1292 - [0:0] +:logdrop-1293 - [0:0] +:logdrop-1294 - [0:0] +:logdrop-1295 - [0:0] +:logdrop-1296 - [0:0] +:logdrop-1297 - [0:0] +:logdrop-1298 - [0:0] +:logdrop-1299 - [0:0] :logdrop-13 - [0:0] :logdrop-130 - [0:0] +:logdrop-1300 - [0:0] +:logdrop-1301 - [0:0] +:logdrop-1302 - [0:0] +:logdrop-1303 - [0:0] +:logdrop-1304 - [0:0] +:logdrop-1305 - [0:0] +:logdrop-1306 - [0:0] +:logdrop-1307 - [0:0] +:logdrop-1308 - [0:0] +:logdrop-1309 - [0:0] :logdrop-131 - [0:0] +:logdrop-1310 - [0:0] +:logdrop-1311 - [0:0] +:logdrop-1312 - [0:0] +:logdrop-1313 - [0:0] +:logdrop-1314 - [0:0] +:logdrop-1315 - [0:0] +:logdrop-1316 - [0:0] +:logdrop-1317 - [0:0] +:logdrop-1318 - [0:0] +:logdrop-1319 - [0:0] :logdrop-132 - [0:0] +:logdrop-1320 - [0:0] +:logdrop-1321 - [0:0] +:logdrop-1322 - [0:0] +:logdrop-1323 - [0:0] +:logdrop-1324 - [0:0] +:logdrop-1325 - [0:0] +:logdrop-1326 - [0:0] +:logdrop-1327 - [0:0] +:logdrop-1328 - [0:0] +:logdrop-1329 - [0:0] :logdrop-133 - [0:0] +:logdrop-1330 - [0:0] +:logdrop-1331 - [0:0] +:logdrop-1332 - [0:0] +:logdrop-1333 - [0:0] +:logdrop-1334 - [0:0] +:logdrop-1335 - [0:0] +:logdrop-1336 - [0:0] +:logdrop-1337 - [0:0] +:logdrop-1338 - [0:0] +:logdrop-1339 - [0:0] :logdrop-134 - [0:0] +:logdrop-1340 - [0:0] +:logdrop-1341 - [0:0] +:logdrop-1342 - [0:0] +:logdrop-1343 - [0:0] +:logdrop-1344 - [0:0] +:logdrop-1345 - [0:0] +:logdrop-1346 - [0:0] +:logdrop-1347 - [0:0] +:logdrop-1348 - [0:0] +:logdrop-1349 - [0:0] :logdrop-135 - [0:0] +:logdrop-1350 - [0:0] +:logdrop-1351 - [0:0] +:logdrop-1352 - [0:0] +:logdrop-1353 - [0:0] +:logdrop-1354 - [0:0] +:logdrop-1355 - [0:0] +:logdrop-1356 - [0:0] +:logdrop-1357 - [0:0] +:logdrop-1358 - [0:0] +:logdrop-1359 - [0:0] :logdrop-136 - [0:0] +:logdrop-1360 - [0:0] +:logdrop-1361 - [0:0] +:logdrop-1362 - [0:0] +:logdrop-1363 - [0:0] +:logdrop-1364 - [0:0] +:logdrop-1365 - [0:0] +:logdrop-1366 - [0:0] +:logdrop-1367 - [0:0] +:logdrop-1368 - [0:0] +:logdrop-1369 - [0:0] :logdrop-137 - [0:0] +:logdrop-1370 - [0:0] +:logdrop-1371 - [0:0] +:logdrop-1372 - [0:0] +:logdrop-1373 - [0:0] +:logdrop-1374 - [0:0] +:logdrop-1375 - [0:0] +:logdrop-1376 - [0:0] +:logdrop-1377 - [0:0] +:logdrop-1378 - [0:0] +:logdrop-1379 - [0:0] :logdrop-138 - [0:0] +:logdrop-1380 - [0:0] +:logdrop-1381 - [0:0] +:logdrop-1382 - [0:0] +:logdrop-1383 - [0:0] +:logdrop-1384 - [0:0] +:logdrop-1385 - [0:0] +:logdrop-1386 - [0:0] +:logdrop-1387 - [0:0] +:logdrop-1388 - [0:0] +:logdrop-1389 - [0:0] :logdrop-139 - [0:0] +:logdrop-1390 - [0:0] +:logdrop-1391 - [0:0] +:logdrop-1392 - [0:0] +:logdrop-1393 - [0:0] +:logdrop-1394 - [0:0] +:logdrop-1395 - [0:0] +:logdrop-1396 - [0:0] +:logdrop-1397 - [0:0] +:logdrop-1398 - [0:0] +:logdrop-1399 - [0:0] :logdrop-14 - [0:0] :logdrop-140 - [0:0] +:logdrop-1400 - [0:0] +:logdrop-1401 - [0:0] +:logdrop-1402 - [0:0] +:logdrop-1403 - [0:0] +:logdrop-1404 - [0:0] +:logdrop-1405 - [0:0] +:logdrop-1406 - [0:0] +:logdrop-1407 - [0:0] +:logdrop-1408 - [0:0] +:logdrop-1409 - [0:0] :logdrop-141 - [0:0] +:logdrop-1410 - [0:0] +:logdrop-1411 - [0:0] +:logdrop-1412 - [0:0] +:logdrop-1413 - [0:0] +:logdrop-1414 - [0:0] +:logdrop-1415 - [0:0] +:logdrop-1416 - [0:0] +:logdrop-1417 - [0:0] +:logdrop-1418 - [0:0] +:logdrop-1419 - [0:0] :logdrop-142 - [0:0] +:logdrop-1420 - [0:0] +:logdrop-1421 - [0:0] +:logdrop-1422 - [0:0] +:logdrop-1423 - [0:0] +:logdrop-1424 - [0:0] +:logdrop-1425 - [0:0] +:logdrop-1426 - [0:0] +:logdrop-1427 - [0:0] +:logdrop-1428 - [0:0] +:logdrop-1429 - [0:0] :logdrop-143 - [0:0] +:logdrop-1430 - [0:0] +:logdrop-1431 - [0:0] +:logdrop-1432 - [0:0] +:logdrop-1433 - [0:0] +:logdrop-1434 - [0:0] +:logdrop-1435 - [0:0] +:logdrop-1436 - [0:0] +:logdrop-1437 - [0:0] +:logdrop-1438 - [0:0] +:logdrop-1439 - [0:0] :logdrop-144 - [0:0] +:logdrop-1440 - [0:0] +:logdrop-1441 - [0:0] +:logdrop-1442 - [0:0] +:logdrop-1443 - [0:0] +:logdrop-1444 - [0:0] +:logdrop-1445 - [0:0] +:logdrop-1446 - [0:0] +:logdrop-1447 - [0:0] +:logdrop-1448 - [0:0] +:logdrop-1449 - [0:0] :logdrop-145 - [0:0] +:logdrop-1450 - [0:0] +:logdrop-1451 - [0:0] +:logdrop-1452 - [0:0] +:logdrop-1453 - [0:0] +:logdrop-1454 - [0:0] +:logdrop-1455 - [0:0] +:logdrop-1456 - [0:0] +:logdrop-1457 - [0:0] +:logdrop-1458 - [0:0] +:logdrop-1459 - [0:0] :logdrop-146 - [0:0] +:logdrop-1460 - [0:0] +:logdrop-1461 - [0:0] +:logdrop-1462 - [0:0] +:logdrop-1463 - [0:0] +:logdrop-1464 - [0:0] +:logdrop-1465 - [0:0] +:logdrop-1466 - [0:0] +:logdrop-1467 - [0:0] +:logdrop-1468 - [0:0] +:logdrop-1469 - [0:0] :logdrop-147 - [0:0] +:logdrop-1470 - [0:0] +:logdrop-1471 - [0:0] +:logdrop-1472 - [0:0] +:logdrop-1473 - [0:0] +:logdrop-1474 - [0:0] +:logdrop-1475 - [0:0] +:logdrop-1476 - [0:0] +:logdrop-1477 - [0:0] +:logdrop-1478 - [0:0] +:logdrop-1479 - [0:0] :logdrop-148 - [0:0] +:logdrop-1480 - [0:0] +:logdrop-1481 - [0:0] +:logdrop-1482 - [0:0] +:logdrop-1483 - [0:0] +:logdrop-1484 - [0:0] +:logdrop-1485 - [0:0] +:logdrop-1486 - [0:0] +:logdrop-1487 - [0:0] +:logdrop-1488 - [0:0] +:logdrop-1489 - [0:0] :logdrop-149 - [0:0] +:logdrop-1490 - [0:0] +:logdrop-1491 - [0:0] +:logdrop-1492 - [0:0] +:logdrop-1493 - [0:0] +:logdrop-1494 - [0:0] +:logdrop-1495 - [0:0] +:logdrop-1496 - [0:0] +:logdrop-1497 - [0:0] +:logdrop-1498 - [0:0] +:logdrop-1499 - [0:0] :logdrop-15 - [0:0] :logdrop-150 - [0:0] +:logdrop-1500 - [0:0] +:logdrop-1501 - [0:0] +:logdrop-1502 - [0:0] +:logdrop-1503 - [0:0] +:logdrop-1504 - [0:0] +:logdrop-1505 - [0:0] +:logdrop-1506 - [0:0] +:logdrop-1507 - [0:0] +:logdrop-1508 - [0:0] +:logdrop-1509 - [0:0] :logdrop-151 - [0:0] +:logdrop-1510 - [0:0] +:logdrop-1511 - [0:0] +:logdrop-1512 - [0:0] +:logdrop-1513 - [0:0] +:logdrop-1514 - [0:0] +:logdrop-1515 - [0:0] +:logdrop-1516 - [0:0] +:logdrop-1517 - [0:0] +:logdrop-1518 - [0:0] +:logdrop-1519 - [0:0] :logdrop-152 - [0:0] +:logdrop-1520 - [0:0] +:logdrop-1521 - [0:0] +:logdrop-1522 - [0:0] +:logdrop-1523 - [0:0] +:logdrop-1524 - [0:0] +:logdrop-1525 - [0:0] +:logdrop-1526 - [0:0] +:logdrop-1527 - [0:0] +:logdrop-1528 - [0:0] +:logdrop-1529 - [0:0] :logdrop-153 - [0:0] +:logdrop-1530 - [0:0] +:logdrop-1531 - [0:0] +:logdrop-1532 - [0:0] +:logdrop-1533 - [0:0] +:logdrop-1534 - [0:0] +:logdrop-1535 - [0:0] +:logdrop-1536 - [0:0] +:logdrop-1537 - [0:0] +:logdrop-1538 - [0:0] +:logdrop-1539 - [0:0] :logdrop-154 - [0:0] +:logdrop-1540 - [0:0] +:logdrop-1541 - [0:0] +:logdrop-1542 - [0:0] +:logdrop-1543 - [0:0] +:logdrop-1544 - [0:0] +:logdrop-1545 - [0:0] +:logdrop-1546 - [0:0] +:logdrop-1547 - [0:0] +:logdrop-1548 - [0:0] +:logdrop-1549 - [0:0] :logdrop-155 - [0:0] +:logdrop-1550 - [0:0] +:logdrop-1551 - [0:0] +:logdrop-1552 - [0:0] +:logdrop-1553 - [0:0] +:logdrop-1554 - [0:0] +:logdrop-1555 - [0:0] +:logdrop-1556 - [0:0] +:logdrop-1557 - [0:0] +:logdrop-1558 - [0:0] +:logdrop-1559 - [0:0] :logdrop-156 - [0:0] +:logdrop-1560 - [0:0] +:logdrop-1561 - [0:0] +:logdrop-1562 - [0:0] +:logdrop-1563 - [0:0] +:logdrop-1564 - [0:0] +:logdrop-1565 - [0:0] +:logdrop-1566 - [0:0] +:logdrop-1567 - [0:0] +:logdrop-1568 - [0:0] +:logdrop-1569 - [0:0] :logdrop-157 - [0:0] +:logdrop-1570 - [0:0] +:logdrop-1571 - [0:0] +:logdrop-1572 - [0:0] +:logdrop-1573 - [0:0] +:logdrop-1574 - [0:0] +:logdrop-1575 - [0:0] +:logdrop-1576 - [0:0] +:logdrop-1577 - [0:0] +:logdrop-1578 - [0:0] +:logdrop-1579 - [0:0] :logdrop-158 - [0:0] +:logdrop-1580 - [0:0] +:logdrop-1581 - [0:0] +:logdrop-1582 - [0:0] +:logdrop-1583 - [0:0] +:logdrop-1584 - [0:0] +:logdrop-1585 - [0:0] +:logdrop-1586 - [0:0] +:logdrop-1587 - [0:0] +:logdrop-1588 - [0:0] +:logdrop-1589 - [0:0] :logdrop-159 - [0:0] +:logdrop-1590 - [0:0] +:logdrop-1591 - [0:0] +:logdrop-1592 - [0:0] +:logdrop-1593 - [0:0] +:logdrop-1594 - [0:0] +:logdrop-1595 - [0:0] +:logdrop-1596 - [0:0] +:logdrop-1597 - [0:0] +:logdrop-1598 - [0:0] +:logdrop-1599 - [0:0] :logdrop-16 - [0:0] :logdrop-160 - [0:0] +:logdrop-1600 - [0:0] +:logdrop-1601 - [0:0] +:logdrop-1602 - [0:0] +:logdrop-1603 - [0:0] +:logdrop-1604 - [0:0] +:logdrop-1605 - [0:0] +:logdrop-1606 - [0:0] +:logdrop-1607 - [0:0] +:logdrop-1608 - [0:0] +:logdrop-1609 - [0:0] :logdrop-161 - [0:0] +:logdrop-1610 - [0:0] +:logdrop-1611 - [0:0] +:logdrop-1612 - [0:0] +:logdrop-1613 - [0:0] +:logdrop-1614 - [0:0] +:logdrop-1615 - [0:0] +:logdrop-1616 - [0:0] +:logdrop-1617 - [0:0] +:logdrop-1618 - [0:0] +:logdrop-1619 - [0:0] :logdrop-162 - [0:0] +:logdrop-1620 - [0:0] +:logdrop-1621 - [0:0] +:logdrop-1622 - [0:0] +:logdrop-1623 - [0:0] +:logdrop-1624 - [0:0] +:logdrop-1625 - [0:0] +:logdrop-1626 - [0:0] +:logdrop-1627 - [0:0] +:logdrop-1628 - [0:0] +:logdrop-1629 - [0:0] :logdrop-163 - [0:0] +:logdrop-1630 - [0:0] +:logdrop-1631 - [0:0] +:logdrop-1632 - [0:0] +:logdrop-1633 - [0:0] +:logdrop-1634 - [0:0] +:logdrop-1635 - [0:0] +:logdrop-1636 - [0:0] +:logdrop-1637 - [0:0] +:logdrop-1638 - [0:0] +:logdrop-1639 - [0:0] :logdrop-164 - [0:0] +:logdrop-1640 - [0:0] +:logdrop-1641 - [0:0] +:logdrop-1642 - [0:0] +:logdrop-1643 - [0:0] +:logdrop-1644 - [0:0] +:logdrop-1645 - [0:0] +:logdrop-1646 - [0:0] +:logdrop-1647 - [0:0] +:logdrop-1648 - [0:0] +:logdrop-1649 - [0:0] :logdrop-165 - [0:0] +:logdrop-1650 - [0:0] +:logdrop-1651 - [0:0] +:logdrop-1652 - [0:0] +:logdrop-1653 - [0:0] +:logdrop-1654 - [0:0] +:logdrop-1655 - [0:0] +:logdrop-1656 - [0:0] +:logdrop-1657 - [0:0] +:logdrop-1658 - [0:0] +:logdrop-1659 - [0:0] :logdrop-166 - [0:0] +:logdrop-1660 - [0:0] +:logdrop-1661 - [0:0] +:logdrop-1662 - [0:0] +:logdrop-1663 - [0:0] +:logdrop-1664 - [0:0] +:logdrop-1665 - [0:0] +:logdrop-1666 - [0:0] +:logdrop-1667 - [0:0] +:logdrop-1668 - [0:0] +:logdrop-1669 - [0:0] :logdrop-167 - [0:0] +:logdrop-1670 - [0:0] +:logdrop-1671 - [0:0] +:logdrop-1672 - [0:0] +:logdrop-1673 - [0:0] +:logdrop-1674 - [0:0] +:logdrop-1675 - [0:0] +:logdrop-1676 - [0:0] +:logdrop-1677 - [0:0] +:logdrop-1678 - [0:0] +:logdrop-1679 - [0:0] :logdrop-168 - [0:0] +:logdrop-1680 - [0:0] +:logdrop-1681 - [0:0] +:logdrop-1682 - [0:0] +:logdrop-1683 - [0:0] +:logdrop-1684 - [0:0] +:logdrop-1685 - [0:0] +:logdrop-1686 - [0:0] +:logdrop-1687 - [0:0] +:logdrop-1688 - [0:0] +:logdrop-1689 - [0:0] :logdrop-169 - [0:0] +:logdrop-1690 - [0:0] +:logdrop-1691 - [0:0] +:logdrop-1692 - [0:0] +:logdrop-1693 - [0:0] +:logdrop-1694 - [0:0] +:logdrop-1695 - [0:0] +:logdrop-1696 - [0:0] +:logdrop-1697 - [0:0] +:logdrop-1698 - [0:0] +:logdrop-1699 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] +:logdrop-1700 - [0:0] +:logdrop-1701 - [0:0] +:logdrop-1702 - [0:0] +:logdrop-1703 - [0:0] +:logdrop-1704 - [0:0] +:logdrop-1705 - [0:0] +:logdrop-1706 - [0:0] +:logdrop-1707 - [0:0] +:logdrop-1708 - [0:0] +:logdrop-1709 - [0:0] :logdrop-171 - [0:0] +:logdrop-1710 - [0:0] +:logdrop-1711 - [0:0] +:logdrop-1712 - [0:0] +:logdrop-1713 - [0:0] +:logdrop-1714 - [0:0] +:logdrop-1715 - [0:0] +:logdrop-1716 - [0:0] +:logdrop-1717 - [0:0] +:logdrop-1718 - [0:0] +:logdrop-1719 - [0:0] :logdrop-172 - [0:0] +:logdrop-1720 - [0:0] +:logdrop-1721 - [0:0] +:logdrop-1722 - [0:0] +:logdrop-1723 - [0:0] +:logdrop-1724 - [0:0] +:logdrop-1725 - [0:0] +:logdrop-1726 - [0:0] +:logdrop-1727 - [0:0] +:logdrop-1728 - [0:0] +:logdrop-1729 - [0:0] :logdrop-173 - [0:0] +:logdrop-1730 - [0:0] +:logdrop-1731 - [0:0] +:logdrop-1732 - [0:0] +:logdrop-1733 - [0:0] +:logdrop-1734 - [0:0] +:logdrop-1735 - [0:0] +:logdrop-1736 - [0:0] +:logdrop-1737 - [0:0] +:logdrop-1738 - [0:0] +:logdrop-1739 - [0:0] :logdrop-174 - [0:0] +:logdrop-1740 - [0:0] +:logdrop-1741 - [0:0] +:logdrop-1742 - [0:0] +:logdrop-1743 - [0:0] +:logdrop-1744 - [0:0] +:logdrop-1745 - [0:0] +:logdrop-1746 - [0:0] +:logdrop-1747 - [0:0] +:logdrop-1748 - [0:0] +:logdrop-1749 - [0:0] :logdrop-175 - [0:0] +:logdrop-1750 - [0:0] +:logdrop-1751 - [0:0] +:logdrop-1752 - [0:0] +:logdrop-1753 - [0:0] +:logdrop-1754 - [0:0] +:logdrop-1755 - [0:0] +:logdrop-1756 - [0:0] +:logdrop-1757 - [0:0] +:logdrop-1758 - [0:0] +:logdrop-1759 - [0:0] :logdrop-176 - [0:0] +:logdrop-1760 - [0:0] +:logdrop-1761 - [0:0] +:logdrop-1762 - [0:0] +:logdrop-1763 - [0:0] +:logdrop-1764 - [0:0] +:logdrop-1765 - [0:0] +:logdrop-1766 - [0:0] +:logdrop-1767 - [0:0] +:logdrop-1768 - [0:0] +:logdrop-1769 - [0:0] :logdrop-177 - [0:0] +:logdrop-1770 - [0:0] +:logdrop-1771 - [0:0] +:logdrop-1772 - [0:0] +:logdrop-1773 - [0:0] +:logdrop-1774 - [0:0] +:logdrop-1775 - [0:0] +:logdrop-1776 - [0:0] +:logdrop-1777 - [0:0] +:logdrop-1778 - [0:0] +:logdrop-1779 - [0:0] :logdrop-178 - [0:0] +:logdrop-1780 - [0:0] +:logdrop-1781 - [0:0] +:logdrop-1782 - [0:0] +:logdrop-1783 - [0:0] +:logdrop-1784 - [0:0] +:logdrop-1785 - [0:0] +:logdrop-1786 - [0:0] +:logdrop-1787 - [0:0] +:logdrop-1788 - [0:0] +:logdrop-1789 - [0:0] :logdrop-179 - [0:0] +:logdrop-1790 - [0:0] +:logdrop-1791 - [0:0] +:logdrop-1792 - [0:0] +:logdrop-1793 - [0:0] +:logdrop-1794 - [0:0] +:logdrop-1795 - [0:0] +:logdrop-1796 - [0:0] +:logdrop-1797 - [0:0] +:logdrop-1798 - [0:0] +:logdrop-1799 - [0:0] :logdrop-18 - [0:0] :logdrop-180 - [0:0] +:logdrop-1800 - [0:0] +:logdrop-1801 - [0:0] +:logdrop-1802 - [0:0] +:logdrop-1803 - [0:0] +:logdrop-1804 - [0:0] +:logdrop-1805 - [0:0] +:logdrop-1806 - [0:0] +:logdrop-1807 - [0:0] +:logdrop-1808 - [0:0] +:logdrop-1809 - [0:0] :logdrop-181 - [0:0] +:logdrop-1810 - [0:0] +:logdrop-1811 - [0:0] +:logdrop-1812 - [0:0] +:logdrop-1813 - [0:0] +:logdrop-1814 - [0:0] +:logdrop-1815 - [0:0] +:logdrop-1816 - [0:0] +:logdrop-1817 - [0:0] +:logdrop-1818 - [0:0] +:logdrop-1819 - [0:0] :logdrop-182 - [0:0] +:logdrop-1820 - [0:0] +:logdrop-1821 - [0:0] +:logdrop-1822 - [0:0] +:logdrop-1823 - [0:0] +:logdrop-1824 - [0:0] +:logdrop-1825 - [0:0] +:logdrop-1826 - [0:0] +:logdrop-1827 - [0:0] +:logdrop-1828 - [0:0] +:logdrop-1829 - [0:0] :logdrop-183 - [0:0] +:logdrop-1830 - [0:0] +:logdrop-1831 - [0:0] +:logdrop-1832 - [0:0] +:logdrop-1833 - [0:0] +:logdrop-1834 - [0:0] +:logdrop-1835 - [0:0] +:logdrop-1836 - [0:0] +:logdrop-1837 - [0:0] +:logdrop-1838 - [0:0] +:logdrop-1839 - [0:0] :logdrop-184 - [0:0] +:logdrop-1840 - [0:0] +:logdrop-1841 - [0:0] +:logdrop-1842 - [0:0] +:logdrop-1843 - [0:0] +:logdrop-1844 - [0:0] +:logdrop-1845 - [0:0] +:logdrop-1846 - [0:0] +:logdrop-1847 - [0:0] +:logdrop-1848 - [0:0] +:logdrop-1849 - [0:0] :logdrop-185 - [0:0] +:logdrop-1850 - [0:0] +:logdrop-1851 - [0:0] +:logdrop-1852 - [0:0] +:logdrop-1853 - [0:0] +:logdrop-1854 - [0:0] +:logdrop-1855 - [0:0] +:logdrop-1856 - [0:0] +:logdrop-1857 - [0:0] +:logdrop-1858 - [0:0] +:logdrop-1859 - [0:0] :logdrop-186 - [0:0] +:logdrop-1860 - [0:0] +:logdrop-1861 - [0:0] +:logdrop-1862 - [0:0] +:logdrop-1863 - [0:0] +:logdrop-1864 - [0:0] +:logdrop-1865 - [0:0] +:logdrop-1866 - [0:0] +:logdrop-1867 - [0:0] +:logdrop-1868 - [0:0] +:logdrop-1869 - [0:0] :logdrop-187 - [0:0] +:logdrop-1870 - [0:0] +:logdrop-1871 - [0:0] +:logdrop-1872 - [0:0] +:logdrop-1873 - [0:0] +:logdrop-1874 - [0:0] +:logdrop-1875 - [0:0] +:logdrop-1876 - [0:0] +:logdrop-1877 - [0:0] +:logdrop-1878 - [0:0] +:logdrop-1879 - [0:0] :logdrop-188 - [0:0] +:logdrop-1880 - [0:0] +:logdrop-1881 - [0:0] +:logdrop-1882 - [0:0] +:logdrop-1883 - [0:0] +:logdrop-1884 - [0:0] +:logdrop-1885 - [0:0] +:logdrop-1886 - [0:0] +:logdrop-1887 - [0:0] +:logdrop-1888 - [0:0] +:logdrop-1889 - [0:0] :logdrop-189 - [0:0] +:logdrop-1890 - [0:0] +:logdrop-1891 - [0:0] +:logdrop-1892 - [0:0] +:logdrop-1893 - [0:0] +:logdrop-1894 - [0:0] +:logdrop-1895 - [0:0] +:logdrop-1896 - [0:0] +:logdrop-1897 - [0:0] +:logdrop-1898 - [0:0] +:logdrop-1899 - [0:0] :logdrop-19 - [0:0] :logdrop-190 - [0:0] +:logdrop-1900 - [0:0] +:logdrop-1901 - [0:0] +:logdrop-1902 - [0:0] +:logdrop-1903 - [0:0] +:logdrop-1904 - [0:0] +:logdrop-1905 - [0:0] +:logdrop-1906 - [0:0] +:logdrop-1907 - [0:0] +:logdrop-1908 - [0:0] +:logdrop-1909 - [0:0] :logdrop-191 - [0:0] +:logdrop-1910 - [0:0] +:logdrop-1911 - [0:0] +:logdrop-1912 - [0:0] +:logdrop-1913 - [0:0] +:logdrop-1914 - [0:0] +:logdrop-1915 - [0:0] +:logdrop-1916 - [0:0] +:logdrop-1917 - [0:0] +:logdrop-1918 - [0:0] +:logdrop-1919 - [0:0] :logdrop-192 - [0:0] +:logdrop-1920 - [0:0] +:logdrop-1921 - [0:0] +:logdrop-1922 - [0:0] +:logdrop-1923 - [0:0] +:logdrop-1924 - [0:0] +:logdrop-1925 - [0:0] +:logdrop-1926 - [0:0] +:logdrop-1927 - [0:0] +:logdrop-1928 - [0:0] +:logdrop-1929 - [0:0] :logdrop-193 - [0:0] +:logdrop-1930 - [0:0] +:logdrop-1931 - [0:0] +:logdrop-1932 - [0:0] +:logdrop-1933 - [0:0] +:logdrop-1934 - [0:0] +:logdrop-1935 - [0:0] +:logdrop-1936 - [0:0] +:logdrop-1937 - [0:0] +:logdrop-1938 - [0:0] +:logdrop-1939 - [0:0] :logdrop-194 - [0:0] +:logdrop-1940 - [0:0] +:logdrop-1941 - [0:0] +:logdrop-1942 - [0:0] +:logdrop-1943 - [0:0] +:logdrop-1944 - [0:0] +:logdrop-1945 - [0:0] +:logdrop-1946 - [0:0] +:logdrop-1947 - [0:0] +:logdrop-1948 - [0:0] +:logdrop-1949 - [0:0] :logdrop-195 - [0:0] +:logdrop-1950 - [0:0] +:logdrop-1951 - [0:0] +:logdrop-1952 - [0:0] +:logdrop-1953 - [0:0] +:logdrop-1954 - [0:0] +:logdrop-1955 - [0:0] +:logdrop-1956 - [0:0] +:logdrop-1957 - [0:0] +:logdrop-1958 - [0:0] +:logdrop-1959 - [0:0] :logdrop-196 - [0:0] +:logdrop-1960 - [0:0] +:logdrop-1961 - [0:0] +:logdrop-1962 - [0:0] +:logdrop-1963 - [0:0] +:logdrop-1964 - [0:0] +:logdrop-1965 - [0:0] +:logdrop-1966 - [0:0] +:logdrop-1967 - [0:0] +:logdrop-1968 - [0:0] +:logdrop-1969 - [0:0] :logdrop-197 - [0:0] +:logdrop-1970 - [0:0] +:logdrop-1971 - [0:0] +:logdrop-1972 - [0:0] +:logdrop-1973 - [0:0] +:logdrop-1974 - [0:0] +:logdrop-1975 - [0:0] +:logdrop-1976 - [0:0] +:logdrop-1977 - [0:0] +:logdrop-1978 - [0:0] +:logdrop-1979 - [0:0] :logdrop-198 - [0:0] +:logdrop-1980 - [0:0] +:logdrop-1981 - [0:0] +:logdrop-1982 - [0:0] +:logdrop-1983 - [0:0] +:logdrop-1984 - [0:0] +:logdrop-1985 - [0:0] +:logdrop-1986 - [0:0] +:logdrop-1987 - [0:0] +:logdrop-1988 - [0:0] +:logdrop-1989 - [0:0] :logdrop-199 - [0:0] +:logdrop-1990 - [0:0] +:logdrop-1991 - [0:0] +:logdrop-1992 - [0:0] +:logdrop-1993 - [0:0] +:logdrop-1994 - [0:0] +:logdrop-1995 - [0:0] +:logdrop-1996 - [0:0] +:logdrop-1997 - [0:0] +:logdrop-1998 - [0:0] +:logdrop-1999 - [0:0] :logdrop-2 - [0:0] :logdrop-20 - [0:0] :logdrop-200 - [0:0] +:logdrop-2000 - [0:0] +:logdrop-2001 - [0:0] +:logdrop-2002 - [0:0] +:logdrop-2003 - [0:0] +:logdrop-2004 - [0:0] +:logdrop-2005 - [0:0] +:logdrop-2006 - [0:0] +:logdrop-2007 - [0:0] +:logdrop-2008 - [0:0] +:logdrop-2009 - [0:0] :logdrop-201 - [0:0] +:logdrop-2010 - [0:0] +:logdrop-2011 - [0:0] +:logdrop-2012 - [0:0] +:logdrop-2013 - [0:0] +:logdrop-2014 - [0:0] +:logdrop-2015 - [0:0] +:logdrop-2016 - [0:0] +:logdrop-2017 - [0:0] +:logdrop-2018 - [0:0] +:logdrop-2019 - [0:0] :logdrop-202 - [0:0] +:logdrop-2020 - [0:0] +:logdrop-2021 - [0:0] +:logdrop-2022 - [0:0] +:logdrop-2023 - [0:0] +:logdrop-2024 - [0:0] +:logdrop-2025 - [0:0] +:logdrop-2026 - [0:0] +:logdrop-2027 - [0:0] +:logdrop-2028 - [0:0] +:logdrop-2029 - [0:0] :logdrop-203 - [0:0] +:logdrop-2030 - [0:0] +:logdrop-2031 - [0:0] +:logdrop-2032 - [0:0] +:logdrop-2033 - [0:0] +:logdrop-2034 - [0:0] +:logdrop-2035 - [0:0] +:logdrop-2036 - [0:0] +:logdrop-2037 - [0:0] +:logdrop-2038 - [0:0] +:logdrop-2039 - [0:0] :logdrop-204 - [0:0] +:logdrop-2040 - [0:0] +:logdrop-2041 - [0:0] +:logdrop-2042 - [0:0] +:logdrop-2043 - [0:0] +:logdrop-2044 - [0:0] +:logdrop-2045 - [0:0] +:logdrop-2046 - [0:0] +:logdrop-2047 - [0:0] +:logdrop-2048 - [0:0] +:logdrop-2049 - [0:0] :logdrop-205 - [0:0] +:logdrop-2050 - [0:0] +:logdrop-2051 - [0:0] +:logdrop-2052 - [0:0] +:logdrop-2053 - [0:0] +:logdrop-2054 - [0:0] +:logdrop-2055 - [0:0] +:logdrop-2056 - [0:0] +:logdrop-2057 - [0:0] +:logdrop-2058 - [0:0] +:logdrop-2059 - [0:0] :logdrop-206 - [0:0] +:logdrop-2060 - [0:0] +:logdrop-2061 - [0:0] +:logdrop-2062 - [0:0] +:logdrop-2063 - [0:0] +:logdrop-2064 - [0:0] +:logdrop-2065 - [0:0] +:logdrop-2066 - [0:0] +:logdrop-2067 - [0:0] +:logdrop-2068 - [0:0] +:logdrop-2069 - [0:0] :logdrop-207 - [0:0] +:logdrop-2070 - [0:0] +:logdrop-2071 - [0:0] +:logdrop-2072 - [0:0] +:logdrop-2073 - [0:0] +:logdrop-2074 - [0:0] +:logdrop-2075 - [0:0] +:logdrop-2076 - [0:0] +:logdrop-2077 - [0:0] +:logdrop-2078 - [0:0] +:logdrop-2079 - [0:0] :logdrop-208 - [0:0] +:logdrop-2080 - [0:0] +:logdrop-2081 - [0:0] +:logdrop-2082 - [0:0] +:logdrop-2083 - [0:0] +:logdrop-2084 - [0:0] +:logdrop-2085 - [0:0] +:logdrop-2086 - [0:0] +:logdrop-2087 - [0:0] +:logdrop-2088 - [0:0] +:logdrop-2089 - [0:0] :logdrop-209 - [0:0] +:logdrop-2090 - [0:0] +:logdrop-2091 - [0:0] +:logdrop-2092 - [0:0] +:logdrop-2093 - [0:0] +:logdrop-2094 - [0:0] +:logdrop-2095 - [0:0] +:logdrop-2096 - [0:0] +:logdrop-2097 - [0:0] +:logdrop-2098 - [0:0] +:logdrop-2099 - [0:0] :logdrop-21 - [0:0] :logdrop-210 - [0:0] +:logdrop-2100 - [0:0] +:logdrop-2101 - [0:0] +:logdrop-2102 - [0:0] +:logdrop-2103 - [0:0] +:logdrop-2104 - [0:0] +:logdrop-2105 - [0:0] +:logdrop-2106 - [0:0] +:logdrop-2107 - [0:0] +:logdrop-2108 - [0:0] +:logdrop-2109 - [0:0] :logdrop-211 - [0:0] +:logdrop-2110 - [0:0] +:logdrop-2111 - [0:0] +:logdrop-2112 - [0:0] +:logdrop-2113 - [0:0] +:logdrop-2114 - [0:0] +:logdrop-2115 - [0:0] +:logdrop-2116 - [0:0] +:logdrop-2117 - [0:0] +:logdrop-2118 - [0:0] +:logdrop-2119 - [0:0] :logdrop-212 - [0:0] +:logdrop-2120 - [0:0] +:logdrop-2121 - [0:0] +:logdrop-2122 - [0:0] +:logdrop-2123 - [0:0] +:logdrop-2124 - [0:0] +:logdrop-2125 - [0:0] +:logdrop-2126 - [0:0] +:logdrop-2127 - [0:0] +:logdrop-2128 - [0:0] +:logdrop-2129 - [0:0] :logdrop-213 - [0:0] +:logdrop-2130 - [0:0] +:logdrop-2131 - [0:0] +:logdrop-2132 - [0:0] +:logdrop-2133 - [0:0] +:logdrop-2134 - [0:0] +:logdrop-2135 - [0:0] +:logdrop-2136 - [0:0] +:logdrop-2137 - [0:0] +:logdrop-2138 - [0:0] +:logdrop-2139 - [0:0] :logdrop-214 - [0:0] +:logdrop-2140 - [0:0] +:logdrop-2141 - [0:0] +:logdrop-2142 - [0:0] +:logdrop-2143 - [0:0] +:logdrop-2144 - [0:0] +:logdrop-2145 - [0:0] +:logdrop-2146 - [0:0] +:logdrop-2147 - [0:0] +:logdrop-2148 - [0:0] +:logdrop-2149 - [0:0] :logdrop-215 - [0:0] +:logdrop-2150 - [0:0] +:logdrop-2151 - [0:0] +:logdrop-2152 - [0:0] +:logdrop-2153 - [0:0] +:logdrop-2154 - [0:0] +:logdrop-2155 - [0:0] +:logdrop-2156 - [0:0] +:logdrop-2157 - [0:0] +:logdrop-2158 - [0:0] +:logdrop-2159 - [0:0] :logdrop-216 - [0:0] +:logdrop-2160 - [0:0] +:logdrop-2161 - [0:0] +:logdrop-2162 - [0:0] +:logdrop-2163 - [0:0] +:logdrop-2164 - [0:0] +:logdrop-2165 - [0:0] +:logdrop-2166 - [0:0] +:logdrop-2167 - [0:0] +:logdrop-2168 - [0:0] +:logdrop-2169 - [0:0] :logdrop-217 - [0:0] +:logdrop-2170 - [0:0] +:logdrop-2171 - [0:0] +:logdrop-2172 - [0:0] +:logdrop-2173 - [0:0] +:logdrop-2174 - [0:0] +:logdrop-2175 - [0:0] +:logdrop-2176 - [0:0] +:logdrop-2177 - [0:0] +:logdrop-2178 - [0:0] +:logdrop-2179 - [0:0] :logdrop-218 - [0:0] +:logdrop-2180 - [0:0] +:logdrop-2181 - [0:0] +:logdrop-2182 - [0:0] +:logdrop-2183 - [0:0] +:logdrop-2184 - [0:0] +:logdrop-2185 - [0:0] +:logdrop-2186 - [0:0] +:logdrop-2187 - [0:0] +:logdrop-2188 - [0:0] +:logdrop-2189 - [0:0] :logdrop-219 - [0:0] +:logdrop-2190 - [0:0] +:logdrop-2191 - [0:0] +:logdrop-2192 - [0:0] +:logdrop-2193 - [0:0] +:logdrop-2194 - [0:0] +:logdrop-2195 - [0:0] +:logdrop-2196 - [0:0] +:logdrop-2197 - [0:0] +:logdrop-2198 - [0:0] +:logdrop-2199 - [0:0] :logdrop-22 - [0:0] :logdrop-220 - [0:0] +:logdrop-2200 - [0:0] +:logdrop-2201 - [0:0] +:logdrop-2202 - [0:0] +:logdrop-2203 - [0:0] +:logdrop-2204 - [0:0] :logdrop-221 - [0:0] :logdrop-222 - [0:0] :logdrop-223 - [0:0] @@ -3801,637 +6364,986 @@ :logdrop-999 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] +:logpass-2 - [0:0] +:logpass-3 - [0:0] -A FORWARD -m recent --name user:B --rdest --mask 255.255.255.255 --set -A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set --A FORWARD -j limit-1886 --A FORWARD -j limit-1885 --A FORWARD -j limit-1884 --A FORWARD -j limit-1883 --A FORWARD -j limit-1882 --A FORWARD -j limit-1881 --A FORWARD -j limit-1880 --A FORWARD -j limit-1879 --A FORWARD -j limit-1878 --A FORWARD -j limit-1877 --A FORWARD -j limit-1876 --A FORWARD -j limit-1875 --A FORWARD -j limit-1874 --A FORWARD -j limit-1873 --A FORWARD -j limit-1872 --A FORWARD -j limit-1871 --A FORWARD -j limit-1870 --A FORWARD -j limit-1869 --A FORWARD -j limit-1868 --A FORWARD -j limit-1867 --A FORWARD -j limit-1866 --A FORWARD -j limit-1865 --A FORWARD -j limit-1864 --A FORWARD -j limit-1863 --A FORWARD -j limit-1862 --A FORWARD -j limit-1861 --A FORWARD -j limit-1860 --A FORWARD -j limit-1859 --A FORWARD -j limit-1858 --A FORWARD -j limit-1857 --A FORWARD -j limit-1856 --A FORWARD -j limit-1855 --A FORWARD -j limit-1854 --A FORWARD -j limit-1853 --A FORWARD -j limit-1852 --A FORWARD -j limit-1851 --A FORWARD -j limit-1850 --A FORWARD -j limit-1849 --A FORWARD -j limit-1848 --A FORWARD -j limit-1847 --A FORWARD -j limit-1846 --A FORWARD -j limit-1845 --A FORWARD -j limit-1844 --A FORWARD -j limit-1843 --A FORWARD -j limit-1842 --A FORWARD -j limit-1841 --A FORWARD -j limit-1840 --A FORWARD -j limit-1839 --A FORWARD -j limit-1838 --A FORWARD -j limit-1837 --A FORWARD -j limit-1836 --A FORWARD -j limit-1835 --A FORWARD -j limit-1834 --A FORWARD -j limit-1833 --A FORWARD -j limit-1832 --A FORWARD -j limit-1831 --A FORWARD -j limit-1830 --A FORWARD -j limit-1829 --A FORWARD -j limit-1828 --A FORWARD -j limit-1827 --A FORWARD -j limit-1826 --A FORWARD -j limit-1825 --A FORWARD -j limit-1824 --A FORWARD -j limit-1823 --A FORWARD -j limit-1822 --A FORWARD -j limit-1821 --A FORWARD -j limit-1820 --A FORWARD -j limit-1819 --A FORWARD -j limit-1818 --A FORWARD -j limit-1817 --A FORWARD -j limit-1816 --A FORWARD -j limit-1815 --A FORWARD -j limit-1814 --A FORWARD -j limit-1813 --A FORWARD -j limit-1812 --A FORWARD -j limit-1811 --A FORWARD -j limit-1810 --A FORWARD -j limit-1809 --A FORWARD -j limit-1808 --A FORWARD -j limit-1807 --A FORWARD -j limit-1806 --A FORWARD -j limit-1805 --A FORWARD -j limit-1804 --A FORWARD -j limit-1803 --A FORWARD -j limit-1802 --A FORWARD -j limit-1801 --A FORWARD -j limit-1800 --A FORWARD -j limit-1799 --A FORWARD -j limit-1798 --A FORWARD -j limit-1797 --A FORWARD -j limit-1796 --A FORWARD -j limit-1795 --A FORWARD -j limit-1794 --A FORWARD -j limit-1793 --A FORWARD -j limit-1792 --A FORWARD -j limit-1791 --A FORWARD -j limit-1790 --A FORWARD -j limit-1789 --A FORWARD -j limit-1788 --A FORWARD -j limit-1787 --A FORWARD -j limit-1786 --A FORWARD -j limit-1785 --A FORWARD -j limit-1784 --A FORWARD -j limit-1783 --A FORWARD -j limit-1782 --A FORWARD -j limit-1781 --A FORWARD -j limit-1780 --A FORWARD -j limit-1779 --A FORWARD -j limit-1778 --A FORWARD -j limit-1777 --A FORWARD -j limit-1776 --A FORWARD -j limit-1775 --A FORWARD -j limit-1774 --A FORWARD -j limit-1773 --A FORWARD -j limit-1772 --A FORWARD -j limit-1771 --A FORWARD -j limit-1770 --A FORWARD -j limit-1769 --A FORWARD -j limit-1768 --A FORWARD -j limit-1767 --A FORWARD -j limit-1766 --A FORWARD -j limit-1765 --A FORWARD -j limit-1764 --A FORWARD -j limit-1763 --A FORWARD -j limit-1762 --A FORWARD -j limit-1761 --A FORWARD -j limit-1760 --A FORWARD -j limit-1759 --A FORWARD -j limit-1758 --A FORWARD -j limit-1757 --A FORWARD -j limit-1756 --A FORWARD -j limit-1755 --A FORWARD -j limit-1754 --A FORWARD -j limit-1753 --A FORWARD -j limit-1752 --A FORWARD -j limit-1751 --A FORWARD -j limit-1750 --A FORWARD -j limit-1749 --A FORWARD -j limit-1748 --A FORWARD -j limit-1747 --A FORWARD -j limit-1746 --A FORWARD -j limit-1745 --A FORWARD -j limit-1744 --A FORWARD -j limit-1743 --A FORWARD -j limit-1742 --A FORWARD -j limit-1741 --A FORWARD -j limit-1740 --A FORWARD -j limit-1739 --A FORWARD -j limit-1738 --A FORWARD -j limit-1737 --A FORWARD -j limit-1736 --A FORWARD -j limit-1735 --A FORWARD -j limit-1734 --A FORWARD -j limit-1733 --A FORWARD -j limit-1732 --A FORWARD -j limit-1731 --A FORWARD -j limit-1730 --A FORWARD -j limit-1729 --A FORWARD -j limit-1728 --A FORWARD -j limit-1727 --A FORWARD -j limit-1726 --A FORWARD -j limit-1725 --A FORWARD -j limit-1724 --A FORWARD -j limit-1723 --A FORWARD -j limit-1722 --A FORWARD -j limit-1721 --A FORWARD -j limit-1720 --A FORWARD -j limit-1719 --A FORWARD -j limit-1718 --A FORWARD -j limit-1717 --A FORWARD -j limit-1716 --A FORWARD -j limit-1715 --A FORWARD -j limit-1714 --A FORWARD -j limit-1713 --A FORWARD -j limit-1712 --A FORWARD -j limit-1711 --A FORWARD -j limit-1710 --A FORWARD -j limit-1709 --A FORWARD -j limit-1708 --A FORWARD -j limit-1707 --A FORWARD -j limit-1706 --A FORWARD -j limit-1705 --A FORWARD -j limit-1704 --A FORWARD -j limit-1703 --A FORWARD -j limit-1702 --A FORWARD -j limit-1701 --A FORWARD -j limit-1700 --A FORWARD -j limit-1699 --A FORWARD -j limit-1698 --A FORWARD -j limit-1697 --A FORWARD -j limit-1696 --A FORWARD -j limit-1695 --A FORWARD -j limit-1694 --A FORWARD -j limit-1693 --A FORWARD -j limit-1692 --A FORWARD -j limit-1691 --A FORWARD -j limit-1690 --A FORWARD -j limit-1689 --A FORWARD -j limit-1688 --A FORWARD -j limit-1687 --A FORWARD -j limit-1686 --A FORWARD -j limit-1685 --A FORWARD -j limit-1684 --A FORWARD -j limit-1683 --A FORWARD -j limit-1682 --A FORWARD -j limit-1681 --A FORWARD -j limit-1680 --A FORWARD -j limit-1679 --A FORWARD -j limit-1678 --A FORWARD -j limit-1677 --A FORWARD -j limit-1676 --A FORWARD -j limit-1675 --A FORWARD -j limit-1674 --A FORWARD -j limit-1673 --A FORWARD -j limit-1672 --A FORWARD -j limit-1671 --A FORWARD -j limit-1670 --A FORWARD -j limit-1669 --A FORWARD -j limit-1668 --A FORWARD -j limit-1667 --A FORWARD -j limit-1666 --A FORWARD -j limit-1665 --A FORWARD -j limit-1664 --A FORWARD -j limit-1663 --A FORWARD -j limit-1662 --A FORWARD -j limit-1661 --A FORWARD -j limit-1660 --A FORWARD -j limit-1659 --A FORWARD -j limit-1658 --A FORWARD -j limit-1657 --A FORWARD -j limit-1656 --A FORWARD -j limit-1655 --A FORWARD -j limit-1654 --A FORWARD -j limit-1653 --A FORWARD -j limit-1652 --A FORWARD -j limit-1651 --A FORWARD -j limit-1650 --A FORWARD -j limit-1649 --A FORWARD -j limit-1648 --A FORWARD -j limit-1647 --A FORWARD -j limit-1646 --A FORWARD -j limit-1645 --A FORWARD -j limit-1644 --A FORWARD -j limit-1643 --A FORWARD -j limit-1642 --A FORWARD -j limit-1641 --A FORWARD -j limit-1640 --A FORWARD -j limit-1639 --A FORWARD -j limit-1638 --A FORWARD -j limit-1637 --A FORWARD -j limit-1636 --A FORWARD -j limit-1635 --A FORWARD -j limit-1634 --A FORWARD -j limit-1633 --A FORWARD -j limit-1632 --A FORWARD -j limit-1631 --A FORWARD -j limit-1630 --A FORWARD -j limit-1629 --A FORWARD -j limit-1628 --A FORWARD -j limit-1627 --A FORWARD -j limit-1626 --A FORWARD -j limit-1625 --A FORWARD -j limit-1624 --A FORWARD -j limit-1623 --A FORWARD -j limit-1622 --A FORWARD -j limit-1621 --A FORWARD -j limit-1620 --A FORWARD -j limit-1619 --A FORWARD -j limit-1618 --A FORWARD -j limit-1617 --A FORWARD -j limit-1616 --A FORWARD -j limit-1615 --A FORWARD -j limit-1614 --A FORWARD -j limit-1613 --A FORWARD -j limit-1612 --A FORWARD -j limit-1611 --A FORWARD -j limit-1610 --A FORWARD -j limit-1609 --A FORWARD -j limit-1608 --A FORWARD -j limit-1607 --A FORWARD -j limit-1606 --A FORWARD -j limit-1605 --A FORWARD -j limit-1604 --A FORWARD -j limit-1603 --A FORWARD -j limit-1602 --A FORWARD -j limit-1601 --A FORWARD -j limit-1600 --A FORWARD -j limit-1599 --A FORWARD -j limit-1598 --A FORWARD -j limit-1597 --A FORWARD -j limit-1596 --A FORWARD -j limit-1595 --A FORWARD -j limit-1594 --A FORWARD -j limit-1593 --A FORWARD -j limit-1592 --A FORWARD -j limit-1591 --A FORWARD -j limit-1590 --A FORWARD -j limit-1589 --A FORWARD -j limit-1588 --A FORWARD -j limit-1587 --A FORWARD -j limit-1586 --A FORWARD -j limit-1585 --A FORWARD -j limit-1584 --A FORWARD -j limit-1583 --A FORWARD -j limit-1582 --A FORWARD -j limit-1581 --A FORWARD -j limit-1580 --A FORWARD -j limit-1579 --A FORWARD -j limit-1578 --A FORWARD -j limit-1577 --A FORWARD -j limit-1576 --A FORWARD -j limit-1575 --A FORWARD -j limit-1574 --A FORWARD -j limit-1573 --A FORWARD -j limit-1572 --A FORWARD -j limit-1571 --A FORWARD -j limit-1570 --A FORWARD -j limit-1569 --A FORWARD -j limit-1568 --A FORWARD -j limit-1567 --A FORWARD -j limit-1566 --A FORWARD -j limit-1565 --A FORWARD -j limit-1564 --A FORWARD -j limit-1563 --A FORWARD -j limit-1562 --A FORWARD -j limit-1561 --A FORWARD -j limit-1560 --A FORWARD -j limit-1559 --A FORWARD -j limit-1558 --A FORWARD -j limit-1557 --A FORWARD -j limit-1556 --A FORWARD -j limit-1555 --A FORWARD -j limit-1554 --A FORWARD -j limit-1553 --A FORWARD -j limit-1552 --A FORWARD -j limit-1551 --A FORWARD -j limit-1550 --A FORWARD -j limit-1549 --A FORWARD -j limit-1548 --A FORWARD -j limit-1547 --A FORWARD -j limit-1546 --A FORWARD -j limit-1545 --A FORWARD -j limit-1544 --A FORWARD -j limit-1543 --A FORWARD -j limit-1542 --A FORWARD -j limit-1541 --A FORWARD -j limit-1540 --A FORWARD -j limit-1539 --A FORWARD -j limit-1538 --A FORWARD -j limit-1537 --A FORWARD -j limit-1536 --A FORWARD -j limit-1535 --A FORWARD -j limit-1534 --A FORWARD -j limit-1533 --A FORWARD -j limit-1532 --A FORWARD -j limit-1531 --A FORWARD -j limit-1530 --A FORWARD -j limit-1529 --A FORWARD -j limit-1528 --A FORWARD -j limit-1527 --A FORWARD -j limit-1526 --A FORWARD -j limit-1525 --A FORWARD -j limit-1524 --A FORWARD -j limit-1523 --A FORWARD -j limit-1522 --A FORWARD -j limit-1521 --A FORWARD -j limit-1520 --A FORWARD -j limit-1519 --A FORWARD -j limit-1518 --A FORWARD -j limit-1517 --A FORWARD -j limit-1516 --A FORWARD -j limit-1515 --A FORWARD -j limit-1514 --A FORWARD -j limit-1513 --A FORWARD -j limit-1512 --A FORWARD -j limit-1511 --A FORWARD -j limit-1510 --A FORWARD -j limit-1509 --A FORWARD -j limit-1508 --A FORWARD -j limit-1507 --A FORWARD -j limit-1506 --A FORWARD -j limit-1505 --A FORWARD -j limit-1504 --A FORWARD -j limit-1503 --A FORWARD -j limit-1502 --A FORWARD -j limit-1501 --A FORWARD -j limit-1500 --A FORWARD -j limit-1499 --A FORWARD -j limit-1498 --A FORWARD -j limit-1497 --A FORWARD -j limit-1496 --A FORWARD -j limit-1495 --A FORWARD -j limit-1494 --A FORWARD -j limit-1493 --A FORWARD -j limit-1492 --A FORWARD -j limit-1491 --A FORWARD -j limit-1490 --A FORWARD -j limit-1489 --A FORWARD -j limit-1488 --A FORWARD -j limit-1487 --A FORWARD -j limit-1486 --A FORWARD -j limit-1485 --A FORWARD -j limit-1484 --A FORWARD -j limit-1483 --A FORWARD -j limit-1482 --A FORWARD -j limit-1481 --A FORWARD -j limit-1480 --A FORWARD -j limit-1479 --A FORWARD -j limit-1478 --A FORWARD -j limit-1477 --A FORWARD -j limit-1476 --A FORWARD -j limit-1475 --A FORWARD -j limit-1474 --A FORWARD -j limit-1473 --A FORWARD -j limit-1472 --A FORWARD -j limit-1471 --A FORWARD -j limit-1470 --A FORWARD -j limit-1469 --A FORWARD -j limit-1468 --A FORWARD -j limit-1467 --A FORWARD -j limit-1466 --A FORWARD -j limit-1465 --A FORWARD -j limit-1464 --A FORWARD -j limit-1463 --A FORWARD -j limit-1462 --A FORWARD -j limit-1461 --A FORWARD -j limit-1460 --A FORWARD -j limit-1459 --A FORWARD -j limit-1458 --A FORWARD -j limit-1457 --A FORWARD -j limit-1456 --A FORWARD -j limit-1455 --A FORWARD -j limit-1454 --A FORWARD -j limit-1453 --A FORWARD -j limit-1452 --A FORWARD -j limit-1451 --A FORWARD -j limit-1450 --A FORWARD -j limit-1449 --A FORWARD -j limit-1448 --A FORWARD -j limit-1447 --A FORWARD -j limit-1446 --A FORWARD -j limit-1445 --A FORWARD -j limit-1444 --A FORWARD -j limit-1443 --A FORWARD -j limit-1442 --A FORWARD -j limit-1441 --A FORWARD -j limit-1440 --A FORWARD -j limit-1439 --A FORWARD -j limit-1438 --A FORWARD -j limit-1437 --A FORWARD -j limit-1436 --A FORWARD -j limit-1435 --A FORWARD -j limit-1434 --A FORWARD -j limit-1433 --A FORWARD -j limit-1432 --A FORWARD -j limit-1431 --A FORWARD -j limit-1430 --A FORWARD -j limit-1429 --A FORWARD -j limit-1428 --A FORWARD -j limit-1427 --A FORWARD -j limit-1426 --A FORWARD -j limit-1425 --A FORWARD -j limit-1424 --A FORWARD -j limit-1423 --A FORWARD -j limit-1422 --A FORWARD -j limit-1421 --A FORWARD -j limit-1420 --A FORWARD -j limit-1419 --A FORWARD -j limit-1418 --A FORWARD -j limit-1417 --A FORWARD -j limit-1416 --A FORWARD -j limit-1415 --A FORWARD -j limit-1414 --A FORWARD -j limit-1413 --A FORWARD -j limit-1412 --A FORWARD -j limit-1411 --A FORWARD -j limit-1410 --A FORWARD -j limit-1409 --A FORWARD -j limit-1408 --A FORWARD -j limit-1407 --A FORWARD -j limit-1406 --A FORWARD -j limit-1405 --A FORWARD -j limit-1404 --A FORWARD -j limit-1403 --A FORWARD -j limit-1402 --A FORWARD -j limit-1401 --A FORWARD -j limit-1400 --A FORWARD -j limit-1399 --A FORWARD -j limit-1398 --A FORWARD -j limit-1397 --A FORWARD -j limit-1396 --A FORWARD -j limit-1395 --A FORWARD -j limit-1394 --A FORWARD -j limit-1393 --A FORWARD -j limit-1392 --A FORWARD -j limit-1391 --A FORWARD -j limit-1390 --A FORWARD -j limit-1389 --A FORWARD -j limit-1388 --A FORWARD -j limit-1387 --A FORWARD -j limit-1386 --A FORWARD -j limit-1385 --A FORWARD -j limit-1384 --A FORWARD -j limit-1383 --A FORWARD -j limit-1382 --A FORWARD -j limit-1381 --A FORWARD -j limit-1380 --A FORWARD -j limit-1379 --A FORWARD -j limit-1378 --A FORWARD -j limit-1377 --A FORWARD -j limit-1376 --A FORWARD -j limit-1375 --A FORWARD -j limit-1374 --A FORWARD -j limit-1373 --A FORWARD -j limit-1372 --A FORWARD -j limit-1371 --A FORWARD -j limit-1370 --A FORWARD -j limit-1369 --A FORWARD -j limit-1368 --A FORWARD -j limit-1367 --A FORWARD -j limit-1366 --A FORWARD -j limit-1365 --A FORWARD -j limit-1364 --A FORWARD -j limit-1363 --A FORWARD -j limit-1362 --A FORWARD -j limit-1361 --A FORWARD -j limit-1360 --A FORWARD -j limit-1359 --A FORWARD -j limit-1358 --A FORWARD -j limit-1357 --A FORWARD -j limit-1356 --A FORWARD -j limit-1355 --A FORWARD -j limit-1354 --A FORWARD -j limit-1353 --A FORWARD -j limit-1352 --A FORWARD -j limit-1351 --A FORWARD -j limit-1350 --A FORWARD -j limit-1349 --A FORWARD -j limit-1348 --A FORWARD -j limit-1347 --A FORWARD -j limit-1346 --A FORWARD -j limit-1345 --A FORWARD -j limit-1344 --A FORWARD -j limit-1343 --A FORWARD -j limit-1342 --A FORWARD -j limit-1341 --A FORWARD -j limit-1340 --A FORWARD -j limit-1339 --A FORWARD -j limit-1338 --A FORWARD -j limit-1337 --A FORWARD -j limit-1336 --A FORWARD -j limit-1335 --A FORWARD -j limit-1334 --A FORWARD -j limit-1333 --A FORWARD -j limit-1332 --A FORWARD -j limit-1331 --A FORWARD -j limit-1330 --A FORWARD -j limit-1329 --A FORWARD -j limit-1328 --A FORWARD -j limit-1327 --A FORWARD -j limit-1326 --A FORWARD -j limit-1325 --A FORWARD -j limit-1324 --A FORWARD -j limit-1323 --A FORWARD -j limit-1322 --A FORWARD -j limit-1321 --A FORWARD -j limit-1320 --A FORWARD -j limit-1319 --A FORWARD -j limit-1318 --A FORWARD -j limit-1317 --A FORWARD -j limit-1316 --A FORWARD -j limit-1315 --A FORWARD -j limit-1314 --A FORWARD -j limit-1313 --A FORWARD -j limit-1312 --A FORWARD -j limit-1311 --A FORWARD -j limit-1310 --A FORWARD -j limit-1309 --A FORWARD -j limit-1308 --A FORWARD -j limit-1307 --A FORWARD -j limit-1306 --A FORWARD -j limit-1305 --A FORWARD -j limit-1304 --A FORWARD -j limit-1303 --A FORWARD -j limit-1302 --A FORWARD -j limit-1301 --A FORWARD -j limit-1300 --A FORWARD -j limit-1299 --A FORWARD -j limit-1298 --A FORWARD -j limit-1297 --A FORWARD -j limit-1296 --A FORWARD -j limit-1295 --A FORWARD -j limit-1294 --A FORWARD -j limit-1293 --A FORWARD -j limit-1292 --A FORWARD -j limit-1291 --A FORWARD -j limit-1290 --A FORWARD -j limit-1289 --A FORWARD -j limit-1288 --A FORWARD -j limit-1287 --A FORWARD -j limit-1286 --A FORWARD -j limit-1285 --A FORWARD -j limit-1284 --A FORWARD -j limit-1283 --A FORWARD -j limit-1282 --A FORWARD -j limit-1281 --A FORWARD -j limit-1280 --A FORWARD -j limit-1279 --A FORWARD -j limit-1278 --A FORWARD -j limit-1277 --A FORWARD -j limit-1276 --A FORWARD -j limit-1275 --A FORWARD -j limit-1274 --A FORWARD -j limit-1273 --A FORWARD -j limit-1272 --A FORWARD -j limit-1271 --A FORWARD -j limit-1270 --A FORWARD -j limit-1269 --A FORWARD -j limit-1268 --A FORWARD -j limit-1267 --A FORWARD -j limit-1266 --A FORWARD -j limit-1265 --A FORWARD -j limit-1264 --A FORWARD -j limit-1263 --A FORWARD -j limit-1262 --A FORWARD -j limit-1261 --A FORWARD -j limit-1260 --A FORWARD -j limit-1259 --A FORWARD -j limit-1258 +-A FORWARD -j limit-2927 +-A FORWARD -j limit-2926 +-A FORWARD -j limit-2925 +-A FORWARD -j limit-2924 +-A FORWARD -j limit-2923 +-A FORWARD -j limit-2922 +-A FORWARD -j limit-2921 +-A FORWARD -j limit-2920 +-A FORWARD -j limit-2919 +-A FORWARD -j limit-2918 +-A FORWARD -j limit-2917 +-A FORWARD -j limit-2916 +-A FORWARD -j limit-2915 +-A FORWARD -j limit-2914 +-A FORWARD -j limit-2913 +-A FORWARD -j limit-2912 +-A FORWARD -j limit-2911 +-A FORWARD -j limit-2910 +-A FORWARD -j limit-2909 +-A FORWARD -j limit-2908 +-A FORWARD -j limit-2907 +-A FORWARD -j limit-2906 +-A FORWARD -j limit-2905 +-A FORWARD -j limit-2904 +-A FORWARD -j limit-2903 +-A FORWARD -j limit-2902 +-A FORWARD -j limit-2901 +-A FORWARD -j limit-2900 +-A FORWARD -j limit-2899 +-A FORWARD -j limit-2898 +-A FORWARD -j limit-2897 +-A FORWARD -j limit-2896 +-A FORWARD -j limit-2895 +-A FORWARD -j limit-2894 +-A FORWARD -j limit-2893 +-A FORWARD -j limit-2892 +-A FORWARD -j limit-2891 +-A FORWARD -j limit-2890 +-A FORWARD -j limit-2889 +-A FORWARD -j limit-2888 +-A FORWARD -j limit-2887 +-A FORWARD -j limit-2886 +-A FORWARD -j limit-2885 +-A FORWARD -j limit-2884 +-A FORWARD -j limit-2883 +-A FORWARD -j limit-2882 +-A FORWARD -j limit-2881 +-A FORWARD -j limit-2880 +-A FORWARD -j limit-2879 +-A FORWARD -j limit-2878 +-A FORWARD -j limit-2877 +-A FORWARD -j limit-2876 +-A FORWARD -j limit-2875 +-A FORWARD -j limit-2874 +-A FORWARD -j limit-2873 +-A FORWARD -j limit-2872 +-A FORWARD -j limit-2871 +-A FORWARD -j limit-2870 +-A FORWARD -j limit-2869 +-A FORWARD -j limit-2868 +-A FORWARD -j limit-2867 +-A FORWARD -j limit-2866 +-A FORWARD -j limit-2865 +-A FORWARD -j limit-2864 +-A FORWARD -j limit-2863 +-A FORWARD -j limit-2862 +-A FORWARD -j limit-2861 +-A FORWARD -j limit-2860 +-A FORWARD -j limit-2859 +-A FORWARD -j limit-2858 +-A FORWARD -j limit-2857 +-A FORWARD -j limit-2856 +-A FORWARD -j limit-2855 +-A FORWARD -j limit-2854 +-A FORWARD -j limit-2853 +-A FORWARD -j limit-2852 +-A FORWARD -j limit-2851 +-A FORWARD -j limit-2850 +-A FORWARD -j limit-2849 +-A FORWARD -j limit-2848 +-A FORWARD -j limit-2847 +-A FORWARD -j limit-2846 +-A FORWARD -j limit-2845 +-A FORWARD -j limit-2844 +-A FORWARD -j limit-2843 +-A FORWARD -j limit-2842 +-A FORWARD -j limit-2841 +-A FORWARD -j limit-2840 +-A FORWARD -j limit-2839 +-A FORWARD -j limit-2838 +-A FORWARD -j limit-2837 +-A FORWARD -j limit-2836 +-A FORWARD -j limit-2835 +-A FORWARD -j limit-2834 +-A FORWARD -j limit-2833 +-A FORWARD -j limit-2832 +-A FORWARD -j limit-2831 +-A FORWARD -j limit-2830 +-A FORWARD -j limit-2829 +-A FORWARD -j limit-2828 +-A FORWARD -j limit-2827 +-A FORWARD -j limit-2826 +-A FORWARD -j limit-2825 +-A FORWARD -j limit-2824 +-A FORWARD -j limit-2823 +-A FORWARD -j limit-2822 +-A FORWARD -j limit-2821 +-A FORWARD -j limit-2820 +-A FORWARD -j limit-2819 +-A FORWARD -j limit-2818 +-A FORWARD -j limit-2817 +-A FORWARD -j limit-2816 +-A FORWARD -j limit-2815 +-A FORWARD -j limit-2814 +-A FORWARD -j limit-2813 +-A FORWARD -j limit-2812 +-A FORWARD -j limit-2811 +-A FORWARD -j limit-2810 +-A FORWARD -j limit-2809 +-A FORWARD -j limit-2808 +-A FORWARD -j limit-2807 +-A FORWARD -j limit-2806 +-A FORWARD -j limit-2805 +-A FORWARD -j limit-2804 +-A FORWARD -j limit-2803 +-A FORWARD -j limit-2802 +-A FORWARD -j limit-2801 +-A FORWARD -j limit-2800 +-A FORWARD -j limit-2799 +-A FORWARD -j limit-2798 +-A FORWARD -j limit-2797 +-A FORWARD -j limit-2796 +-A FORWARD -j limit-2795 +-A FORWARD -j limit-2794 +-A FORWARD -j limit-2793 +-A FORWARD -j limit-2792 +-A FORWARD -j limit-2791 +-A FORWARD -j limit-2790 +-A FORWARD -j limit-2789 +-A FORWARD -j limit-2788 +-A FORWARD -j limit-2787 +-A FORWARD -j limit-2786 +-A FORWARD -j limit-2785 +-A FORWARD -j limit-2784 +-A FORWARD -j limit-2783 +-A FORWARD -j limit-2782 +-A FORWARD -j limit-2781 +-A FORWARD -j limit-2780 +-A FORWARD -j limit-2779 +-A FORWARD -j limit-2778 +-A FORWARD -j limit-2777 +-A FORWARD -j limit-2776 +-A FORWARD -j limit-2775 +-A FORWARD -j limit-2774 +-A FORWARD -j limit-2773 +-A FORWARD -j limit-2772 +-A FORWARD -j limit-2771 +-A FORWARD -j limit-2770 +-A FORWARD -j limit-2769 +-A FORWARD -j limit-2768 +-A FORWARD -j limit-2767 +-A FORWARD -j limit-2766 +-A FORWARD -j limit-2765 +-A FORWARD -j limit-2764 +-A FORWARD -j limit-2763 +-A FORWARD -j limit-2762 +-A FORWARD -j limit-2761 +-A FORWARD -j limit-2760 +-A FORWARD -j limit-2759 +-A FORWARD -j limit-2758 +-A FORWARD -j limit-2757 +-A FORWARD -j limit-2756 +-A FORWARD -j limit-2755 +-A FORWARD -j limit-2754 +-A FORWARD -j limit-2753 +-A FORWARD -j limit-2752 +-A FORWARD -j limit-2751 +-A FORWARD -j limit-2750 +-A FORWARD -j limit-2749 +-A FORWARD -j limit-2748 +-A FORWARD -j limit-2747 +-A FORWARD -j limit-2746 +-A FORWARD -j limit-2745 +-A FORWARD -j limit-2744 +-A FORWARD -j limit-2743 +-A FORWARD -j limit-2742 +-A FORWARD -j limit-2741 +-A FORWARD -j limit-2740 +-A FORWARD -j limit-2739 +-A FORWARD -j limit-2738 +-A FORWARD -j limit-2737 +-A FORWARD -j limit-2736 +-A FORWARD -j limit-2735 +-A FORWARD -j limit-2734 +-A FORWARD -j limit-2733 +-A FORWARD -j limit-2732 +-A FORWARD -j limit-2731 +-A FORWARD -j limit-2730 +-A FORWARD -j limit-2729 +-A FORWARD -j limit-2728 +-A FORWARD -j limit-2727 +-A FORWARD -j limit-2726 +-A FORWARD -j limit-2725 +-A FORWARD -j limit-2724 +-A FORWARD -j limit-2723 +-A FORWARD -j limit-2722 +-A FORWARD -j limit-2721 +-A FORWARD -j limit-2720 +-A FORWARD -j limit-2719 +-A FORWARD -j limit-2718 +-A FORWARD -j limit-2717 +-A FORWARD -j limit-2716 +-A FORWARD -j limit-2715 +-A FORWARD -j limit-2714 +-A FORWARD -j limit-2713 +-A FORWARD -j limit-2712 +-A FORWARD -j limit-2711 +-A FORWARD -j limit-2710 +-A FORWARD -j limit-2709 +-A FORWARD -j limit-2708 +-A FORWARD -j limit-2707 +-A FORWARD -j limit-2706 +-A FORWARD -j limit-2705 +-A FORWARD -j limit-2704 +-A FORWARD -j limit-2703 +-A FORWARD -j limit-2702 +-A FORWARD -j limit-2701 +-A FORWARD -j limit-2700 +-A FORWARD -j limit-2699 +-A FORWARD -j limit-2698 +-A FORWARD -j limit-2697 +-A FORWARD -j limit-2696 +-A FORWARD -j limit-2695 +-A FORWARD -j limit-2694 +-A FORWARD -j limit-2693 +-A FORWARD -j limit-2692 +-A FORWARD -j limit-2691 +-A FORWARD -j limit-2690 +-A FORWARD -j limit-2689 +-A FORWARD -j limit-2688 +-A FORWARD -j limit-2687 +-A FORWARD -j limit-2686 +-A FORWARD -j limit-2685 +-A FORWARD -j limit-2684 +-A FORWARD -j limit-2683 +-A FORWARD -j limit-2682 +-A FORWARD -j limit-2681 +-A FORWARD -j limit-2680 +-A FORWARD -j limit-2679 +-A FORWARD -j limit-2678 +-A FORWARD -j limit-2677 +-A FORWARD -j limit-2676 +-A FORWARD -j limit-2675 +-A FORWARD -j limit-2674 +-A FORWARD -j limit-2673 +-A FORWARD -j limit-2672 +-A FORWARD -j limit-2671 +-A FORWARD -j limit-2670 +-A FORWARD -j limit-2669 +-A FORWARD -j limit-2668 +-A FORWARD -j limit-2667 +-A FORWARD -j limit-2666 +-A FORWARD -j limit-2665 +-A FORWARD -j limit-2664 +-A FORWARD -j limit-2663 +-A FORWARD -j limit-2662 +-A FORWARD -j limit-2661 +-A FORWARD -j limit-2660 +-A FORWARD -j limit-2659 +-A FORWARD -j limit-2658 +-A FORWARD -j limit-2657 +-A FORWARD -j limit-2656 +-A FORWARD -j limit-2655 +-A FORWARD -j limit-2654 +-A FORWARD -j limit-2653 +-A FORWARD -j limit-2652 +-A FORWARD -j limit-2651 +-A FORWARD -j limit-2650 +-A FORWARD -j limit-2649 +-A FORWARD -j limit-2648 +-A FORWARD -j limit-2647 +-A FORWARD -j limit-2646 +-A FORWARD -j limit-2645 +-A FORWARD -j limit-2644 +-A FORWARD -j limit-2643 +-A FORWARD -j limit-2642 +-A FORWARD -j limit-2641 +-A FORWARD -j limit-2640 +-A FORWARD -j limit-2639 +-A FORWARD -j limit-2638 +-A FORWARD -j limit-2637 +-A FORWARD -j limit-2636 +-A FORWARD -j limit-2635 +-A FORWARD -j limit-2634 +-A FORWARD -j limit-2633 +-A FORWARD -j limit-2632 +-A FORWARD -j limit-2631 +-A FORWARD -j limit-2630 +-A FORWARD -j limit-2629 +-A FORWARD -j limit-2628 +-A FORWARD -j limit-2627 +-A FORWARD -j limit-2626 +-A FORWARD -j limit-2625 +-A FORWARD -j limit-2624 +-A FORWARD -j limit-2623 +-A FORWARD -j limit-2622 +-A FORWARD -j limit-2621 +-A FORWARD -j limit-2620 +-A FORWARD -j limit-2619 +-A FORWARD -j limit-2618 +-A FORWARD -j limit-2617 +-A FORWARD -j limit-2616 +-A FORWARD -j limit-2615 +-A FORWARD -j limit-2614 +-A FORWARD -j limit-2613 +-A FORWARD -j limit-2612 +-A FORWARD -j limit-2611 +-A FORWARD -j limit-2610 +-A FORWARD -j limit-2609 +-A FORWARD -j limit-2608 +-A FORWARD -j limit-2607 +-A FORWARD -j limit-2606 +-A FORWARD -j limit-2605 +-A FORWARD -j limit-2604 +-A FORWARD -j limit-2603 +-A FORWARD -j limit-2602 +-A FORWARD -j limit-2601 +-A FORWARD -j limit-2600 +-A FORWARD -j limit-2599 +-A FORWARD -j limit-2598 +-A FORWARD -j limit-2597 +-A FORWARD -j limit-2596 +-A FORWARD -j limit-2595 +-A FORWARD -j limit-2594 +-A FORWARD -j limit-2593 +-A FORWARD -j limit-2592 +-A FORWARD -j limit-2591 +-A FORWARD -j limit-2590 +-A FORWARD -j limit-2589 +-A FORWARD -j limit-2588 +-A FORWARD -j limit-2587 +-A FORWARD -j limit-2586 +-A FORWARD -j limit-2585 +-A FORWARD -j limit-2584 +-A FORWARD -j limit-2583 +-A FORWARD -j limit-2582 +-A FORWARD -j limit-2581 +-A FORWARD -j limit-2580 +-A FORWARD -j limit-2579 +-A FORWARD -j limit-2578 +-A FORWARD -j limit-2577 +-A FORWARD -j limit-2576 +-A FORWARD -j limit-2575 +-A FORWARD -j limit-2574 +-A FORWARD -j limit-2573 +-A FORWARD -j limit-2572 +-A FORWARD -j limit-2571 +-A FORWARD -j limit-2570 +-A FORWARD -j limit-2569 +-A FORWARD -j limit-2568 +-A FORWARD -j limit-2567 +-A FORWARD -j limit-2566 +-A FORWARD -j limit-2565 +-A FORWARD -j limit-2564 +-A FORWARD -j limit-2563 +-A FORWARD -j limit-2562 +-A FORWARD -j limit-2561 +-A FORWARD -j limit-2560 +-A FORWARD -j limit-2559 +-A FORWARD -j limit-2558 +-A FORWARD -j limit-2557 +-A FORWARD -j limit-2556 +-A FORWARD -j limit-2555 +-A FORWARD -j limit-2554 +-A FORWARD -j limit-2553 +-A FORWARD -j limit-2552 +-A FORWARD -j limit-2551 +-A FORWARD -j limit-2550 +-A FORWARD -j limit-2549 +-A FORWARD -j limit-2548 +-A FORWARD -j limit-2547 +-A FORWARD -j limit-2546 +-A FORWARD -j limit-2545 +-A FORWARD -j limit-2544 +-A FORWARD -j limit-2543 +-A FORWARD -j limit-2542 +-A FORWARD -j limit-2541 +-A FORWARD -j limit-2540 +-A FORWARD -j limit-2539 +-A FORWARD -j limit-2538 +-A FORWARD -j limit-2537 +-A FORWARD -j limit-2536 +-A FORWARD -j limit-2535 +-A FORWARD -j limit-2534 +-A FORWARD -j limit-2533 +-A FORWARD -j limit-2532 +-A FORWARD -j limit-2531 +-A FORWARD -j limit-2530 +-A FORWARD -j limit-2529 +-A FORWARD -j limit-2528 +-A FORWARD -j limit-2527 +-A FORWARD -j limit-2526 +-A FORWARD -j limit-2525 +-A FORWARD -j limit-2524 +-A FORWARD -j limit-2523 +-A FORWARD -j limit-2522 +-A FORWARD -j limit-2521 +-A FORWARD -j limit-2520 +-A FORWARD -j limit-2519 +-A FORWARD -j limit-2518 +-A FORWARD -j limit-2517 +-A FORWARD -j limit-2516 +-A FORWARD -j limit-2515 +-A FORWARD -j limit-2514 +-A FORWARD -j limit-2513 +-A FORWARD -j limit-2512 +-A FORWARD -j limit-2511 +-A FORWARD -j limit-2510 +-A FORWARD -j limit-2509 +-A FORWARD -j limit-2508 +-A FORWARD -j limit-2507 +-A FORWARD -j limit-2506 +-A FORWARD -j limit-2505 +-A FORWARD -j limit-2504 +-A FORWARD -j limit-2503 +-A FORWARD -j limit-2502 +-A FORWARD -j limit-2501 +-A FORWARD -j limit-2500 +-A FORWARD -j limit-2499 +-A FORWARD -j limit-2498 +-A FORWARD -j limit-2497 +-A FORWARD -j limit-2496 +-A FORWARD -j limit-2495 +-A FORWARD -j limit-2494 +-A FORWARD -j limit-2493 +-A FORWARD -j limit-2492 +-A FORWARD -j limit-2491 +-A FORWARD -j limit-2490 +-A FORWARD -j limit-2489 +-A FORWARD -j limit-2488 +-A FORWARD -j limit-2487 +-A FORWARD -j limit-2486 +-A FORWARD -j limit-2485 +-A FORWARD -j limit-2484 +-A FORWARD -j limit-2483 +-A FORWARD -j limit-2482 +-A FORWARD -j limit-2481 +-A FORWARD -j limit-2480 +-A FORWARD -j limit-2479 +-A FORWARD -j limit-2478 +-A FORWARD -j limit-2477 +-A FORWARD -j limit-2476 +-A FORWARD -j limit-2475 +-A FORWARD -j limit-2474 +-A FORWARD -j limit-2473 +-A FORWARD -j limit-2472 +-A FORWARD -j limit-2471 +-A FORWARD -j limit-2470 +-A FORWARD -j limit-2469 +-A FORWARD -j limit-2468 +-A FORWARD -j limit-2467 +-A FORWARD -j limit-2466 +-A FORWARD -j limit-2465 +-A FORWARD -j limit-2464 +-A FORWARD -j limit-2463 +-A FORWARD -j limit-2462 +-A FORWARD -j limit-2461 +-A FORWARD -j limit-2460 +-A FORWARD -j limit-2459 +-A FORWARD -j limit-2458 +-A FORWARD -j limit-2457 +-A FORWARD -j limit-2456 +-A FORWARD -j limit-2455 +-A FORWARD -j limit-2454 +-A FORWARD -j limit-2453 +-A FORWARD -j limit-2452 +-A FORWARD -j limit-2451 +-A FORWARD -j limit-2450 +-A FORWARD -j limit-2449 +-A FORWARD -j limit-2448 +-A FORWARD -j limit-2447 +-A FORWARD -j limit-2446 +-A FORWARD -j limit-2445 +-A FORWARD -j limit-2444 +-A FORWARD -j limit-2443 +-A FORWARD -j limit-2442 +-A FORWARD -j limit-2441 +-A FORWARD -j limit-2440 +-A FORWARD -j limit-2439 +-A FORWARD -j limit-2438 +-A FORWARD -j limit-2437 +-A FORWARD -j limit-2436 +-A FORWARD -j limit-2435 +-A FORWARD -j limit-2434 +-A FORWARD -j limit-2433 +-A FORWARD -j limit-2432 +-A FORWARD -j limit-2431 +-A FORWARD -j limit-2430 +-A FORWARD -j limit-2429 +-A FORWARD -j limit-2428 +-A FORWARD -j limit-2427 +-A FORWARD -j limit-2426 +-A FORWARD -j limit-2425 +-A FORWARD -j limit-2424 +-A FORWARD -j limit-2423 +-A FORWARD -j limit-2422 +-A FORWARD -j limit-2421 +-A FORWARD -j limit-2420 +-A FORWARD -j limit-2419 +-A FORWARD -j limit-2418 +-A FORWARD -j limit-2417 +-A FORWARD -j limit-2416 +-A FORWARD -j limit-2415 +-A FORWARD -j limit-2414 +-A FORWARD -j limit-2413 +-A FORWARD -j limit-2412 +-A FORWARD -j limit-2411 +-A FORWARD -j limit-2410 +-A FORWARD -j limit-2409 +-A FORWARD -j limit-2408 +-A FORWARD -j limit-2407 +-A FORWARD -j limit-2406 +-A FORWARD -j limit-2405 +-A FORWARD -j limit-2404 +-A FORWARD -j limit-2403 +-A FORWARD -j limit-2402 +-A FORWARD -j limit-2401 +-A FORWARD -j limit-2400 +-A FORWARD -j limit-2399 +-A FORWARD -j limit-2398 +-A FORWARD -j limit-2397 +-A FORWARD -j limit-2396 +-A FORWARD -j limit-2395 +-A FORWARD -j limit-2394 +-A FORWARD -j limit-2393 +-A FORWARD -j limit-2392 +-A FORWARD -j limit-2391 +-A FORWARD -j limit-2390 +-A FORWARD -j limit-2389 +-A FORWARD -j limit-2388 +-A FORWARD -j limit-2387 +-A FORWARD -j limit-2386 +-A FORWARD -j limit-2385 +-A FORWARD -j limit-2384 +-A FORWARD -j limit-2383 +-A FORWARD -j limit-2382 +-A FORWARD -j limit-2381 +-A FORWARD -j limit-2380 +-A FORWARD -j limit-2379 +-A FORWARD -j limit-2378 +-A FORWARD -j limit-2377 +-A FORWARD -j limit-2376 +-A FORWARD -j limit-2375 +-A FORWARD -j limit-2374 +-A FORWARD -j limit-2373 +-A FORWARD -j limit-2372 +-A FORWARD -j limit-2371 +-A FORWARD -j limit-2370 +-A FORWARD -j limit-2369 +-A FORWARD -j limit-2368 +-A FORWARD -j limit-2367 +-A FORWARD -j limit-2366 +-A FORWARD -j limit-2365 +-A FORWARD -j limit-2364 +-A FORWARD -j limit-2363 +-A FORWARD -j limit-2362 +-A FORWARD -j limit-2361 +-A FORWARD -j limit-2360 +-A FORWARD -j limit-2359 +-A FORWARD -j limit-2358 +-A FORWARD -j limit-2357 +-A FORWARD -j limit-2356 +-A FORWARD -j limit-2355 +-A FORWARD -j limit-2354 +-A FORWARD -j limit-2353 +-A FORWARD -j limit-2352 +-A FORWARD -j limit-2351 +-A FORWARD -j limit-2350 +-A FORWARD -j limit-2349 +-A FORWARD -j limit-2348 +-A FORWARD -j limit-2347 +-A FORWARD -j limit-2346 +-A FORWARD -j limit-2345 +-A FORWARD -j limit-2344 +-A FORWARD -j limit-2343 +-A FORWARD -j limit-2342 +-A FORWARD -j limit-2341 +-A FORWARD -j limit-2340 +-A FORWARD -j limit-2339 +-A FORWARD -j limit-2338 +-A FORWARD -j limit-2337 +-A FORWARD -j limit-2336 +-A FORWARD -j limit-2335 +-A FORWARD -j limit-2334 +-A FORWARD -j limit-2333 +-A FORWARD -j limit-2332 +-A FORWARD -j limit-2331 +-A FORWARD -j limit-2330 +-A FORWARD -j limit-2329 +-A FORWARD -j limit-2328 +-A FORWARD -j limit-2327 +-A FORWARD -j limit-2326 +-A FORWARD -j limit-2325 +-A FORWARD -j limit-2324 +-A FORWARD -j limit-2323 +-A FORWARD -j limit-2322 +-A FORWARD -j limit-2321 +-A FORWARD -j limit-2320 +-A FORWARD -j limit-2319 +-A FORWARD -j limit-2318 +-A FORWARD -j limit-2317 +-A FORWARD -j limit-2316 +-A FORWARD -j limit-2315 +-A FORWARD -j limit-2314 +-A FORWARD -j limit-2313 +-A FORWARD -j limit-2312 +-A FORWARD -j limit-2311 +-A FORWARD -j limit-2310 +-A FORWARD -j limit-2309 +-A FORWARD -j limit-2308 +-A FORWARD -j limit-2307 +-A FORWARD -j limit-2306 +-A FORWARD -j limit-2305 +-A FORWARD -j limit-2304 +-A FORWARD -j limit-2303 +-A FORWARD -j limit-2302 +-A FORWARD -j limit-2301 +-A FORWARD -j limit-2300 +-A FORWARD -j limit-2299 +-A FORWARD -j limit-2298 +-A FORWARD -j limit-2297 +-A FORWARD -j limit-2296 +-A FORWARD -j limit-2295 +-A FORWARD -j limit-2294 +-A FORWARD -j limit-2293 +-A FORWARD -j limit-2292 +-A FORWARD -j limit-2291 +-A FORWARD -j limit-2290 +-A FORWARD -j limit-2289 +-A FORWARD -j limit-2288 +-A FORWARD -j limit-2287 +-A FORWARD -j limit-2286 +-A FORWARD -j limit-2285 +-A FORWARD -j limit-2284 +-A FORWARD -j limit-2283 +-A FORWARD -j limit-2282 +-A FORWARD -j limit-2281 +-A FORWARD -j limit-2280 +-A FORWARD -j limit-2279 +-A FORWARD -j limit-2278 +-A FORWARD -j limit-2277 +-A FORWARD -j limit-2276 +-A FORWARD -j limit-2275 +-A FORWARD -j limit-2274 +-A FORWARD -j limit-2273 +-A FORWARD -j limit-2272 +-A FORWARD -j limit-2271 +-A FORWARD -j limit-2270 +-A FORWARD -j limit-2269 +-A FORWARD -j limit-2268 +-A FORWARD -j limit-2267 +-A FORWARD -j limit-2266 +-A FORWARD -j limit-2265 +-A FORWARD -j limit-2264 +-A FORWARD -j limit-2263 +-A FORWARD -j limit-2262 +-A FORWARD -j limit-2261 +-A FORWARD -j limit-2260 +-A FORWARD -j limit-2259 +-A FORWARD -j limit-2258 +-A FORWARD -j limit-2257 +-A FORWARD -j limit-2256 +-A FORWARD -j limit-2255 +-A FORWARD -j limit-2254 +-A FORWARD -j limit-2253 +-A FORWARD -j limit-2252 +-A FORWARD -j limit-2251 +-A FORWARD -j limit-2250 +-A FORWARD -j limit-2249 +-A FORWARD -j limit-2248 +-A FORWARD -j limit-2247 +-A FORWARD -j limit-2246 +-A FORWARD -j limit-2245 +-A FORWARD -j limit-2244 +-A FORWARD -j limit-2243 +-A FORWARD -j limit-2242 +-A FORWARD -j limit-2241 +-A FORWARD -j limit-2240 +-A FORWARD -j limit-2239 +-A FORWARD -j limit-2238 +-A FORWARD -j limit-2237 +-A FORWARD -j limit-2236 +-A FORWARD -j limit-2235 +-A FORWARD -j limit-2234 +-A FORWARD -j limit-2233 +-A FORWARD -j limit-2232 +-A FORWARD -j limit-2231 +-A FORWARD -j limit-2230 +-A FORWARD -j limit-2229 +-A FORWARD -j limit-2228 +-A FORWARD -j limit-2227 +-A FORWARD -j limit-2226 +-A FORWARD -j limit-2225 +-A FORWARD -j limit-2224 +-A FORWARD -j limit-2223 +-A FORWARD -j limit-2222 +-A FORWARD -j limit-2221 +-A FORWARD -j limit-2220 +-A FORWARD -j limit-2219 +-A FORWARD -j limit-2218 +-A FORWARD -j limit-2217 +-A FORWARD -j limit-2216 +-A FORWARD -j limit-2215 +-A FORWARD -j limit-2214 +-A FORWARD -j limit-2213 +-A FORWARD -j limit-2212 +-A FORWARD -j limit-2211 +-A FORWARD -j limit-2210 +-A FORWARD -j limit-2209 +-A FORWARD -j limit-2208 +-A FORWARD -j limit-2207 +-A FORWARD -j limit-2206 +-A FORWARD -j limit-2205 +-A FORWARD -j limit-2204 +-A FORWARD -j limit-2203 +-A FORWARD -j limit-2202 +-A FORWARD -j limit-2201 +-A FORWARD -j limit-2200 +-A FORWARD -j limit-2199 +-A FORWARD -j limit-2198 +-A FORWARD -j limit-2197 +-A FORWARD -j limit-2196 +-A FORWARD -j limit-2195 +-A FORWARD -j limit-2194 +-A FORWARD -j limit-2193 +-A FORWARD -j limit-2192 +-A FORWARD -j limit-2191 +-A FORWARD -j limit-2190 +-A FORWARD -j limit-2189 +-A FORWARD -j limit-2188 +-A FORWARD -j limit-2187 +-A FORWARD -j limit-2186 +-A FORWARD -j limit-2185 +-A FORWARD -j limit-2184 +-A FORWARD -j limit-2183 +-A FORWARD -j limit-2182 +-A FORWARD -j limit-2181 +-A FORWARD -j limit-2180 +-A FORWARD -j limit-2179 +-A FORWARD -j limit-2178 +-A FORWARD -j limit-2177 +-A FORWARD -j limit-2176 +-A FORWARD -j limit-2175 +-A FORWARD -j limit-2174 +-A FORWARD -j limit-2173 +-A FORWARD -j limit-2172 +-A FORWARD -j limit-2171 +-A FORWARD -j limit-2170 +-A FORWARD -j limit-2169 +-A FORWARD -j limit-2168 +-A FORWARD -j limit-2167 +-A FORWARD -j limit-2166 +-A FORWARD -j limit-2165 +-A FORWARD -j limit-2164 +-A FORWARD -j limit-2163 +-A FORWARD -j limit-2162 +-A FORWARD -j limit-2161 +-A FORWARD -j limit-2160 +-A FORWARD -j limit-2159 +-A FORWARD -j limit-2158 +-A FORWARD -j limit-2157 +-A FORWARD -j limit-2156 +-A FORWARD -j limit-2155 +-A FORWARD -j limit-2154 +-A FORWARD -j limit-2153 +-A FORWARD -j limit-2152 +-A FORWARD -j limit-2151 +-A FORWARD -j limit-2150 +-A FORWARD -j limit-2149 +-A FORWARD -j limit-2148 +-A FORWARD -j limit-2147 +-A FORWARD -j limit-2146 +-A FORWARD -j limit-2145 +-A FORWARD -j limit-2144 +-A FORWARD -j limit-2143 +-A FORWARD -j limit-2142 +-A FORWARD -j limit-2141 +-A FORWARD -j limit-2140 +-A FORWARD -j limit-2139 +-A FORWARD -j limit-2138 +-A FORWARD -j limit-2137 +-A FORWARD -j limit-2136 +-A FORWARD -j limit-2135 +-A FORWARD -j limit-2134 +-A FORWARD -j limit-2133 +-A FORWARD -j limit-2132 +-A FORWARD -j limit-2131 +-A FORWARD -j limit-2130 +-A FORWARD -j limit-2129 +-A FORWARD -j limit-2128 +-A FORWARD -j limit-2127 +-A FORWARD -j limit-2126 +-A FORWARD -j limit-2125 +-A FORWARD -j limit-2124 +-A FORWARD -j limit-2123 +-A FORWARD -j limit-2122 +-A FORWARD -j limit-2121 +-A FORWARD -j limit-2120 +-A FORWARD -j limit-2119 +-A FORWARD -j limit-2118 +-A FORWARD -j limit-2117 +-A FORWARD -j limit-2116 +-A FORWARD -j limit-2115 +-A FORWARD -j limit-2114 +-A FORWARD -j limit-2113 +-A FORWARD -j limit-2112 +-A FORWARD -j limit-2111 +-A FORWARD -j limit-2110 +-A FORWARD -j limit-2109 +-A FORWARD -j limit-2108 +-A FORWARD -j limit-2107 +-A FORWARD -j limit-2106 +-A FORWARD -j limit-2105 +-A FORWARD -j limit-2104 +-A FORWARD -j limit-2103 +-A FORWARD -j limit-2102 +-A FORWARD -j limit-2101 +-A FORWARD -j limit-2100 +-A FORWARD -j limit-2099 +-A FORWARD -j limit-2098 +-A FORWARD -j limit-2097 +-A FORWARD -j limit-2096 +-A FORWARD -j limit-2095 +-A FORWARD -j limit-2094 +-A FORWARD -j limit-2093 +-A FORWARD -j limit-2092 +-A FORWARD -j limit-2091 +-A FORWARD -j limit-2090 +-A FORWARD -j limit-2089 +-A FORWARD -j limit-2088 +-A FORWARD -j limit-2087 +-A FORWARD -j limit-2086 +-A FORWARD -j limit-2085 +-A FORWARD -j limit-2084 +-A FORWARD -j limit-2083 +-A FORWARD -j limit-2082 +-A FORWARD -j limit-2081 +-A FORWARD -j limit-2080 +-A FORWARD -j limit-2079 +-A FORWARD -j limit-2078 +-A FORWARD -j limit-2077 +-A FORWARD -j limit-2076 +-A FORWARD -j limit-2075 +-A FORWARD -j limit-2074 +-A FORWARD -j limit-2073 +-A FORWARD -j limit-2072 +-A FORWARD -j limit-2071 +-A FORWARD -j limit-2070 +-A FORWARD -j limit-2069 +-A FORWARD -j limit-2068 +-A FORWARD -j limit-2067 +-A FORWARD -j limit-2066 +-A FORWARD -j limit-2065 +-A FORWARD -j limit-2064 +-A FORWARD -j limit-2063 +-A FORWARD -j limit-2062 +-A FORWARD -j limit-2061 +-A FORWARD -j limit-2060 +-A FORWARD -j limit-2059 +-A FORWARD -j limit-2058 +-A FORWARD -j limit-2057 +-A FORWARD -j limit-2056 +-A FORWARD -j limit-2055 +-A FORWARD -j limit-2054 +-A FORWARD -j limit-2053 +-A FORWARD -j limit-2052 +-A FORWARD -j limit-2051 +-A FORWARD -j limit-2050 +-A FORWARD -j limit-2049 +-A FORWARD -j limit-2048 +-A FORWARD -j limit-2047 +-A FORWARD -j limit-2046 +-A FORWARD -j limit-2045 +-A FORWARD -j limit-2044 +-A FORWARD -j limit-2043 +-A FORWARD -j limit-2042 +-A FORWARD -j limit-2041 +-A FORWARD -j limit-2040 +-A FORWARD -j limit-2039 +-A FORWARD -j limit-2038 +-A FORWARD -j limit-2037 +-A FORWARD -j limit-2036 +-A FORWARD -j limit-2035 +-A FORWARD -j limit-2034 +-A FORWARD -j limit-2033 +-A FORWARD -j limit-2032 +-A FORWARD -j limit-2031 +-A FORWARD -j limit-2030 +-A FORWARD -j limit-2029 +-A FORWARD -j limit-2028 +-A FORWARD -j limit-2027 +-A FORWARD -j limit-2026 +-A FORWARD -j limit-2025 +-A FORWARD -j limit-2024 +-A FORWARD -j limit-2023 +-A FORWARD -j limit-2022 +-A FORWARD -j limit-2021 +-A FORWARD -j limit-2020 +-A FORWARD -j limit-2019 +-A FORWARD -j limit-2018 +-A FORWARD -j limit-2017 +-A FORWARD -j limit-2016 +-A FORWARD -j limit-2015 +-A FORWARD -j limit-2014 +-A FORWARD -j limit-2013 +-A FORWARD -j limit-2012 +-A FORWARD -j limit-2011 +-A FORWARD -j limit-2010 +-A FORWARD -j limit-2009 +-A FORWARD -j limit-2008 +-A FORWARD -j limit-2007 +-A FORWARD -j limit-2006 +-A FORWARD -j limit-2005 +-A FORWARD -j limit-2004 +-A FORWARD -j limit-2003 +-A FORWARD -j limit-2002 +-A FORWARD -j limit-2001 +-A FORWARD -j limit-2000 +-A FORWARD -j limit-1999 +-A FORWARD -j limit-1998 +-A FORWARD -j limit-1997 +-A FORWARD -j limit-1996 +-A FORWARD -j limit-1995 +-A FORWARD -j limit-1994 +-A FORWARD -j limit-1993 +-A FORWARD -j limit-1992 +-A FORWARD -j limit-1991 +-A FORWARD -j limit-1990 +-A FORWARD -j limit-1989 +-A FORWARD -j limit-1988 +-A FORWARD -j limit-1987 +-A FORWARD -j limit-1986 +-A FORWARD -j limit-1985 +-A FORWARD -j limit-1984 +-A FORWARD -j limit-1983 +-A FORWARD -j limit-1982 +-A FORWARD -j limit-1981 +-A FORWARD -j limit-1980 +-A FORWARD -j limit-1979 +-A FORWARD -j limit-1978 +-A FORWARD -j limit-1977 +-A FORWARD -j limit-1976 +-A FORWARD -j limit-1975 +-A FORWARD -j limit-1974 +-A FORWARD -j limit-1973 +-A FORWARD -j limit-1972 +-A FORWARD -j limit-1971 +-A FORWARD -j limit-1970 +-A FORWARD -j limit-1969 +-A FORWARD -j limit-1968 +-A FORWARD -j limit-1967 +-A FORWARD -j limit-1966 +-A FORWARD -j limit-1965 +-A FORWARD -j limit-1964 +-A FORWARD -j limit-1963 +-A FORWARD -j limit-1962 +-A FORWARD -j limit-1961 +-A FORWARD -j limit-1960 +-A FORWARD -j limit-1959 +-A FORWARD -j limit-1958 +-A FORWARD -j limit-1957 +-A FORWARD -j limit-1956 +-A FORWARD -j limit-1955 +-A FORWARD -j limit-1954 +-A FORWARD -j limit-1953 +-A FORWARD -j limit-1952 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 @@ -5062,334 +7974,863 @@ -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-626 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-627 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-628 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-629 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-630 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-631 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-632 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-633 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-634 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-635 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-636 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-637 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-638 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-639 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-640 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-641 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-642 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-643 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-644 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-645 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-646 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-647 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-648 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-649 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-650 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-651 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-652 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-653 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-654 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-655 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-656 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-657 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-658 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-659 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-660 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-661 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-662 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-663 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-664 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-665 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-666 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-667 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-668 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-669 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-670 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-671 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-672 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-673 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-674 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-675 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-676 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-677 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-678 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-679 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-680 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-681 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-682 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-683 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-684 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-685 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-686 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-687 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-688 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-689 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-690 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-691 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-692 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-693 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-694 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-695 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-696 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-697 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-698 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-699 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-700 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-701 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-702 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-703 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-704 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-705 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-706 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-707 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-708 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-709 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-710 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-711 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-712 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-713 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-714 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-715 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-716 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-717 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-718 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-719 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-720 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-721 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-722 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-723 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-724 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-725 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-726 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-727 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-728 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-729 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-730 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-731 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-732 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-733 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-734 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-735 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-736 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-737 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-738 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-739 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-740 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-741 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-742 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-743 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-744 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-745 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-746 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-747 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-748 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-749 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-750 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-751 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-752 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-753 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-754 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-755 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-756 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-757 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-758 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-759 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-760 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-761 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-762 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-763 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-764 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-765 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-766 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-767 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-768 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-769 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-770 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-771 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-772 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-773 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-774 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-775 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-776 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-777 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-778 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-779 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-780 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-781 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-782 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-783 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-784 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-785 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-786 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-787 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-788 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-789 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-790 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-791 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-792 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-793 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-794 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-795 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-796 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-797 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-798 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-799 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-800 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-801 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-802 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-803 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-804 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-805 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-806 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-807 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-808 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-809 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-810 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-811 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-812 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-813 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-814 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-815 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-816 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-817 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-818 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-819 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-820 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-821 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-822 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-823 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-824 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-825 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-826 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-827 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-828 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-829 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-830 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-831 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-832 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-833 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-834 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-835 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-836 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-837 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-838 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-839 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-840 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-841 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-842 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-843 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-844 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-845 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-846 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-847 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-848 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-849 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-850 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-851 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-852 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-853 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-854 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-855 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-856 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-857 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-858 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-859 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-860 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-861 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-862 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-863 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-864 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-865 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-866 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-867 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-868 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-869 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-870 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-871 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-872 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-873 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-874 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-875 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-876 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-877 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-878 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-879 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-880 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-881 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-882 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-883 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-884 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-885 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-886 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-887 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-888 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-889 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-890 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-891 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-892 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-893 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-894 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-895 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-896 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-897 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-898 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-899 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-900 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-901 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-902 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-903 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-904 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-905 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-906 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-907 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-908 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-909 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-910 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-911 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-912 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-913 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-914 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-915 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-916 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-917 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-918 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-919 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-920 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-921 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-922 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-923 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-924 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-925 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-926 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-927 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-928 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-929 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-930 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-931 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-932 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-933 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-934 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-935 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-936 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-937 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-938 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-939 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-940 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-941 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-942 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-943 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-944 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-945 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-946 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-947 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-948 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-949 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-950 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-951 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-952 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-953 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-954 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-955 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-956 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-957 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-958 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-959 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-960 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-961 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-962 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-963 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-964 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-965 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-966 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-967 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-968 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-969 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-970 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-971 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-972 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-973 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-974 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-975 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-0 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-1 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-2 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-3 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-4 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-5 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-6 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-7 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-8 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-9 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-10 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-11 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-12 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-13 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-14 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-15 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-16 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-17 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-18 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-19 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-20 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-21 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-22 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-23 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-24 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-25 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-26 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-27 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-28 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-29 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-30 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-31 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-32 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-33 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-34 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-35 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-36 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-37 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-38 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-39 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-40 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-41 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-42 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-43 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-44 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-45 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-46 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-47 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-48 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-49 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-50 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-51 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-52 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-53 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-54 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-55 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-56 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-57 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-58 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-59 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-60 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-61 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-62 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-63 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-64 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-65 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-66 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-67 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-68 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-69 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-70 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-71 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-72 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-73 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-74 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-75 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-76 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-77 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-78 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-79 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-80 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-81 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-82 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-83 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-84 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-85 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-86 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-87 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-88 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-89 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-90 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-91 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-92 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-93 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-94 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-95 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-96 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-97 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-98 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-99 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-100 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-101 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-102 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-103 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-104 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-105 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-106 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-107 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-108 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-109 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-110 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-111 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-112 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-113 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-114 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-115 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-116 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-117 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-118 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-119 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-120 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-121 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-122 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-123 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-124 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-125 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-126 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-127 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-128 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-129 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-130 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-131 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-132 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-133 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-134 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-135 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-136 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-137 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-138 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-139 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-140 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-141 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-142 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-143 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-144 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-145 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-146 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-147 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-148 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-149 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-150 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-151 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-152 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-153 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-154 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-155 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-156 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-157 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-158 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-159 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-160 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-161 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-162 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-163 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-164 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-165 +-A FORWARD -j logaccept-final-166 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-167 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-168 +-A FORWARD -j logaccept-final-169 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-170 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-171 +-A FORWARD -j logaccept-final-172 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-173 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-174 +-A FORWARD -j logaccept-final-175 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-176 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-177 +-A FORWARD -j logaccept-final-178 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-179 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-180 +-A FORWARD -j logaccept-final-181 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-182 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-183 +-A FORWARD -j logaccept-final-184 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-185 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-186 +-A FORWARD -j logaccept-final-187 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-188 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-189 +-A FORWARD -j logaccept-final-190 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-191 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-192 +-A FORWARD -j logaccept-final-193 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-194 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-195 +-A FORWARD -j logaccept-final-196 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-197 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-198 +-A FORWARD -j logaccept-final-199 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-200 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-201 +-A FORWARD -j logaccept-final-202 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-203 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-204 +-A FORWARD -j logaccept-final-205 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-206 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-207 +-A FORWARD -j logaccept-final-208 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-209 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-210 +-A FORWARD -j logaccept-final-211 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-212 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-213 +-A FORWARD -j logaccept-final-214 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-215 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-216 +-A FORWARD -j logaccept-final-217 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-218 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-219 +-A FORWARD -j logaccept-final-220 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-221 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-222 +-A FORWARD -j logaccept-final-223 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-224 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-225 +-A FORWARD -j logaccept-final-226 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-227 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-228 +-A FORWARD -j logaccept-final-229 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-230 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-231 +-A FORWARD -j logaccept-final-232 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-233 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-234 +-A FORWARD -j logaccept-final-235 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-236 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-237 +-A FORWARD -j logaccept-final-238 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-239 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-240 +-A FORWARD -j logaccept-final-241 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-242 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-243 +-A FORWARD -j logaccept-final-244 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-245 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-246 +-A FORWARD -j logaccept-final-247 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-248 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-249 +-A FORWARD -j logaccept-final-250 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-251 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-252 +-A FORWARD -j logaccept-final-253 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-254 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-255 +-A FORWARD -j logaccept-final-256 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-257 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-258 +-A FORWARD -j logaccept-final-259 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-260 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-261 +-A FORWARD -j logaccept-final-262 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-263 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-264 +-A FORWARD -j logaccept-final-265 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-266 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-267 +-A FORWARD -j logaccept-final-268 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-269 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-270 +-A FORWARD -j logaccept-final-271 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-272 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-273 +-A FORWARD -j logaccept-final-274 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-275 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-276 +-A FORWARD -j logaccept-final-277 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-278 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-279 +-A FORWARD -j logaccept-final-280 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-281 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-282 +-A FORWARD -j logaccept-final-283 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-284 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-285 +-A FORWARD -j logaccept-final-286 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-287 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-288 +-A FORWARD -j logaccept-final-289 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-290 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-291 +-A FORWARD -j logaccept-final-292 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-293 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-294 +-A FORWARD -j logaccept-final-295 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-296 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-297 +-A FORWARD -j logaccept-final-298 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-299 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-300 +-A FORWARD -j logaccept-final-301 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-302 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-303 +-A FORWARD -j logaccept-final-304 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-305 -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set @@ -5397,20 +8838,26 @@ -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-1184 +-A FORWARD -j logdrop-2200 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-54 --A FORWARD -j logdrop-1185 +-A FORWARD -j logaccept-99 +-A FORWARD -j logdrop-2201 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-100 +-A FORWARD -j logdrop-2202 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-101 +-A FORWARD -j logdrop-2203 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-55 --A FORWARD -j logdrop-1186 --A FORWARD -j logpass-1 +-A FORWARD -j logaccept-102 +-A FORWARD -j logdrop-2204 +-A FORWARD -j logpass-3 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -5462,2252 +8909,3483 @@ -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m recent --name user:B --rdest --mask 255.255.255.255 --set -A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set --A INPUT -j limit-1886 --A INPUT -j limit-1885 --A INPUT -j limit-1884 --A INPUT -j limit-1883 --A INPUT -j limit-1882 --A INPUT -j limit-1881 --A INPUT -j limit-1880 --A INPUT -j limit-1879 --A INPUT -j limit-1878 --A INPUT -j limit-1877 --A INPUT -j limit-1876 --A INPUT -j limit-1875 --A INPUT -j limit-1874 --A INPUT -j limit-1873 --A INPUT -j limit-1872 --A INPUT -j limit-1871 --A INPUT -j limit-1870 --A INPUT -j limit-1869 --A INPUT -j limit-1868 --A INPUT -j limit-1867 --A INPUT -j limit-1866 --A INPUT -j limit-1865 --A INPUT -j limit-1864 --A INPUT -j limit-1863 --A INPUT -j limit-1862 --A INPUT -j limit-1861 --A INPUT -j limit-1860 --A INPUT -j limit-1859 --A INPUT -j limit-1858 --A INPUT -j limit-1857 --A INPUT -j limit-1856 --A INPUT -j limit-1855 --A INPUT -j limit-1854 --A INPUT -j limit-1853 --A INPUT -j limit-1852 --A INPUT -j limit-1851 --A INPUT -j limit-1850 --A INPUT -j limit-1849 --A INPUT -j limit-1848 --A INPUT -j limit-1847 --A INPUT -j limit-1846 --A INPUT -j limit-1845 --A INPUT -j limit-1844 --A INPUT -j limit-1843 --A INPUT -j limit-1842 --A INPUT -j limit-1841 --A INPUT -j limit-1840 --A INPUT -j limit-1839 --A INPUT -j limit-1838 --A INPUT -j limit-1837 --A INPUT -j limit-1836 --A INPUT -j limit-1835 --A INPUT -j limit-1834 --A INPUT -j limit-1833 --A INPUT -j limit-1832 --A INPUT -j limit-1831 --A INPUT -j limit-1830 --A INPUT -j limit-1829 --A INPUT -j limit-1828 --A INPUT -j limit-1827 --A INPUT -j limit-1826 --A INPUT -j limit-1825 --A INPUT -j limit-1824 --A INPUT -j limit-1823 --A INPUT -j limit-1822 --A INPUT -j limit-1821 --A INPUT -j limit-1820 --A INPUT -j limit-1819 --A INPUT -j limit-1818 --A INPUT -j limit-1817 --A INPUT -j limit-1816 --A INPUT -j limit-1815 --A INPUT -j limit-1814 --A INPUT -j limit-1813 --A INPUT -j limit-1812 --A INPUT -j limit-1811 --A INPUT -j limit-1810 --A INPUT -j limit-1809 --A INPUT -j limit-1808 --A INPUT -j limit-1807 --A INPUT -j limit-1806 --A INPUT -j limit-1805 --A INPUT -j limit-1804 --A INPUT -j limit-1803 --A INPUT -j limit-1802 --A INPUT -j limit-1801 --A INPUT -j limit-1800 --A INPUT -j limit-1799 --A INPUT -j limit-1798 --A INPUT -j limit-1797 --A INPUT -j limit-1796 --A INPUT -j limit-1795 --A INPUT -j limit-1794 --A INPUT -j limit-1793 --A INPUT -j limit-1792 --A INPUT -j limit-1791 --A INPUT -j limit-1790 --A INPUT -j limit-1789 --A INPUT -j limit-1788 --A INPUT -j limit-1787 --A INPUT -j limit-1786 --A INPUT -j limit-1785 --A INPUT -j limit-1784 --A INPUT -j limit-1783 --A INPUT -j limit-1782 --A INPUT -j limit-1781 --A INPUT -j limit-1780 --A INPUT -j limit-1779 --A INPUT -j limit-1778 --A INPUT -j limit-1777 --A INPUT -j limit-1776 --A INPUT -j limit-1775 --A INPUT -j limit-1774 --A INPUT -j limit-1773 --A INPUT -j limit-1772 --A INPUT -j limit-1771 --A INPUT -j limit-1770 --A INPUT -j limit-1769 --A INPUT -j limit-1768 --A INPUT -j limit-1767 --A INPUT -j limit-1766 --A INPUT -j limit-1765 --A INPUT -j limit-1764 --A INPUT -j limit-1763 --A INPUT -j limit-1762 --A INPUT -j limit-1761 --A INPUT -j limit-1760 --A INPUT -j limit-1759 --A INPUT -j limit-1758 --A INPUT -j limit-1757 --A INPUT -j limit-1756 --A INPUT -j limit-1755 --A INPUT -j limit-1754 --A INPUT -j limit-1753 --A INPUT -j limit-1752 --A INPUT -j limit-1751 --A INPUT -j limit-1750 --A INPUT -j limit-1749 --A INPUT -j limit-1748 --A INPUT -j limit-1747 --A INPUT -j limit-1746 --A INPUT -j limit-1745 --A INPUT -j limit-1744 --A INPUT -j limit-1743 --A INPUT -j limit-1742 --A INPUT -j limit-1741 --A INPUT -j limit-1740 --A INPUT -j limit-1739 --A INPUT -j limit-1738 --A INPUT -j limit-1737 --A INPUT -j limit-1736 --A INPUT -j limit-1735 --A INPUT -j limit-1734 --A INPUT -j limit-1733 --A INPUT -j limit-1732 --A INPUT -j limit-1731 --A INPUT -j limit-1730 --A INPUT -j limit-1729 --A INPUT -j limit-1728 --A INPUT -j limit-1727 --A INPUT -j limit-1726 --A INPUT -j limit-1725 --A INPUT -j limit-1724 --A INPUT -j limit-1723 --A INPUT -j limit-1722 --A INPUT -j limit-1721 --A INPUT -j limit-1720 --A INPUT -j limit-1719 --A INPUT -j limit-1718 --A INPUT -j limit-1717 --A INPUT -j limit-1716 --A INPUT -j limit-1715 --A INPUT -j limit-1714 --A INPUT -j limit-1713 --A INPUT -j limit-1712 --A INPUT -j limit-1711 --A INPUT -j limit-1710 --A INPUT -j limit-1709 --A INPUT -j limit-1708 --A INPUT -j limit-1707 --A INPUT -j limit-1706 --A INPUT -j limit-1705 --A INPUT -j limit-1704 --A INPUT -j limit-1703 --A INPUT -j limit-1702 --A INPUT -j limit-1701 --A INPUT -j limit-1700 --A INPUT -j limit-1699 --A INPUT -j limit-1698 --A INPUT -j limit-1697 --A INPUT -j limit-1696 --A INPUT -j limit-1695 --A INPUT -j limit-1694 --A INPUT -j limit-1693 --A INPUT -j limit-1692 --A INPUT -j limit-1691 --A INPUT -j limit-1690 --A INPUT -j limit-1689 --A INPUT -j limit-1688 --A INPUT -j limit-1687 --A INPUT -j limit-1686 --A INPUT -j limit-1685 --A INPUT -j limit-1684 --A INPUT -j limit-1683 --A INPUT -j limit-1682 --A INPUT -j limit-1681 --A INPUT -j limit-1680 --A INPUT -j limit-1679 --A INPUT -j limit-1678 --A INPUT -j limit-1677 --A INPUT -j limit-1676 --A INPUT -j limit-1675 --A INPUT -j limit-1674 --A INPUT -j limit-1673 --A INPUT -j limit-1672 --A INPUT -j limit-1671 --A INPUT -j limit-1670 --A INPUT -j limit-1669 --A INPUT -j limit-1668 --A INPUT -j limit-1667 --A INPUT -j limit-1666 --A INPUT -j limit-1665 --A INPUT -j limit-1664 --A INPUT -j limit-1663 --A INPUT -j limit-1662 --A INPUT -j limit-1661 --A INPUT -j limit-1660 --A INPUT -j limit-1659 --A INPUT -j limit-1658 --A INPUT -j limit-1657 --A INPUT -j limit-1656 --A INPUT -j limit-1655 --A INPUT -j limit-1654 --A INPUT -j limit-1653 --A INPUT -j limit-1652 --A INPUT -j limit-1651 --A INPUT -j limit-1650 --A INPUT -j limit-1649 --A INPUT -j limit-1648 --A INPUT -j limit-1647 --A INPUT -j limit-1646 --A INPUT -j limit-1645 --A INPUT -j limit-1644 --A INPUT -j limit-1643 --A INPUT -j limit-1642 --A INPUT -j limit-1641 --A INPUT -j limit-1640 --A INPUT -j limit-1639 --A INPUT -j limit-1638 --A INPUT -j limit-1637 --A INPUT -j limit-1636 --A INPUT -j limit-1635 --A INPUT -j limit-1634 --A INPUT -j limit-1633 --A INPUT -j limit-1632 --A INPUT -j limit-1631 --A INPUT -j limit-1630 --A INPUT -j limit-1629 --A INPUT -j limit-1628 --A INPUT -j limit-1627 --A INPUT -j limit-1626 --A INPUT -j limit-1625 --A INPUT -j limit-1624 --A INPUT -j limit-1623 --A INPUT -j limit-1622 --A INPUT -j limit-1621 --A INPUT -j limit-1620 --A INPUT -j limit-1619 --A INPUT -j limit-1618 --A INPUT -j limit-1617 --A INPUT -j limit-1616 --A INPUT -j limit-1615 --A INPUT -j limit-1614 --A INPUT -j limit-1613 --A INPUT -j limit-1612 --A INPUT -j limit-1611 --A INPUT -j limit-1610 --A INPUT -j limit-1609 --A INPUT -j limit-1608 --A INPUT -j limit-1607 --A INPUT -j limit-1606 --A INPUT -j limit-1605 --A INPUT -j limit-1604 --A INPUT -j limit-1603 --A INPUT -j limit-1602 --A INPUT -j limit-1601 --A INPUT -j limit-1600 --A INPUT -j limit-1599 --A INPUT -j limit-1598 --A INPUT -j limit-1597 --A INPUT -j limit-1596 --A INPUT -j limit-1595 --A INPUT -j limit-1594 --A INPUT -j limit-1593 --A INPUT -j limit-1592 --A INPUT -j limit-1591 --A INPUT -j limit-1590 --A INPUT -j limit-1589 --A INPUT -j limit-1588 --A INPUT -j limit-1587 --A INPUT -j limit-1586 --A INPUT -j limit-1585 --A INPUT -j limit-1584 --A INPUT -j limit-1583 --A INPUT -j limit-1582 --A INPUT -j limit-1581 --A INPUT -j limit-1580 --A INPUT -j limit-1579 --A INPUT -j limit-1578 --A INPUT -j limit-1577 --A INPUT -j limit-1576 --A INPUT -j limit-1575 --A INPUT -j limit-1574 --A INPUT -j limit-1573 --A INPUT -j limit-1572 --A INPUT -j limit-1571 --A INPUT -j limit-1570 --A INPUT -j limit-1569 --A INPUT -j limit-1568 --A INPUT -j limit-1567 --A INPUT -j limit-1566 --A INPUT -j limit-1565 --A INPUT -j limit-1564 --A INPUT -j limit-1563 --A INPUT -j limit-1562 --A INPUT -j limit-1561 --A INPUT -j limit-1560 --A INPUT -j limit-1559 --A INPUT -j limit-1558 --A INPUT -j limit-1557 --A INPUT -j limit-1556 --A INPUT -j limit-1555 --A INPUT -j limit-1554 --A INPUT -j limit-1553 --A INPUT -j limit-1552 --A INPUT -j limit-1551 --A INPUT -j limit-1550 --A INPUT -j limit-1549 --A INPUT -j limit-1548 --A INPUT -j limit-1547 --A INPUT -j limit-1546 --A INPUT -j limit-1545 --A INPUT -j limit-1544 --A INPUT -j limit-1543 --A INPUT -j limit-1542 --A INPUT -j limit-1541 --A INPUT -j limit-1540 --A INPUT -j limit-1539 --A INPUT -j limit-1538 --A INPUT -j limit-1537 --A INPUT -j limit-1536 --A INPUT -j limit-1535 --A INPUT -j limit-1534 --A INPUT -j limit-1533 --A INPUT -j limit-1532 --A INPUT -j limit-1531 --A INPUT -j limit-1530 --A INPUT -j limit-1529 --A INPUT -j limit-1528 --A INPUT -j limit-1527 --A INPUT -j limit-1526 --A INPUT -j limit-1525 --A INPUT -j limit-1524 --A INPUT -j limit-1523 --A INPUT -j limit-1522 --A INPUT -j limit-1521 --A INPUT -j limit-1520 --A INPUT -j limit-1519 --A INPUT -j limit-1518 --A INPUT -j limit-1517 --A INPUT -j limit-1516 --A INPUT -j limit-1515 --A INPUT -j limit-1514 --A INPUT -j limit-1513 --A INPUT -j limit-1512 --A INPUT -j limit-1511 --A INPUT -j limit-1510 --A INPUT -j limit-1509 --A INPUT -j limit-1508 --A INPUT -j limit-1507 --A INPUT -j limit-1506 --A INPUT -j limit-1505 --A INPUT -j limit-1504 --A INPUT -j limit-1503 --A INPUT -j limit-1502 --A INPUT -j limit-1501 --A INPUT -j limit-1500 --A INPUT -j limit-1499 --A INPUT -j limit-1498 --A INPUT -j limit-1497 --A INPUT -j limit-1496 --A INPUT -j limit-1495 --A INPUT -j limit-1494 --A INPUT -j limit-1493 --A INPUT -j limit-1492 --A INPUT -j limit-1491 --A INPUT -j limit-1490 --A INPUT -j limit-1489 --A INPUT -j limit-1488 --A INPUT -j limit-1487 --A INPUT -j limit-1486 --A INPUT -j limit-1485 --A INPUT -j limit-1484 --A INPUT -j limit-1483 --A INPUT -j limit-1482 --A INPUT -j limit-1481 --A INPUT -j limit-1480 --A INPUT -j limit-1479 --A INPUT -j limit-1478 --A INPUT -j limit-1477 --A INPUT -j limit-1476 --A INPUT -j limit-1475 --A INPUT -j limit-1474 --A INPUT -j limit-1473 --A INPUT -j limit-1472 --A INPUT -j limit-1471 --A INPUT -j limit-1470 --A INPUT -j limit-1469 --A INPUT -j limit-1468 --A INPUT -j limit-1467 --A INPUT -j limit-1466 --A INPUT -j limit-1465 --A INPUT -j limit-1464 --A INPUT -j limit-1463 --A INPUT -j limit-1462 --A INPUT -j limit-1461 --A INPUT -j limit-1460 --A INPUT -j limit-1459 --A INPUT -j limit-1458 --A INPUT -j limit-1457 --A INPUT -j limit-1456 --A INPUT -j limit-1455 --A INPUT -j limit-1454 --A INPUT -j limit-1453 --A INPUT -j limit-1452 --A INPUT -j limit-1451 --A INPUT -j limit-1450 --A INPUT -j limit-1449 --A INPUT -j limit-1448 --A INPUT -j limit-1447 --A INPUT -j limit-1446 --A INPUT -j limit-1445 --A INPUT -j limit-1444 --A INPUT -j limit-1443 --A INPUT -j limit-1442 --A INPUT -j limit-1441 --A INPUT -j limit-1440 --A INPUT -j limit-1439 --A INPUT -j limit-1438 --A INPUT -j limit-1437 --A INPUT -j limit-1436 --A INPUT -j limit-1435 --A INPUT -j limit-1434 --A INPUT -j limit-1433 --A INPUT -j limit-1432 --A INPUT -j limit-1431 --A INPUT -j limit-1430 --A INPUT -j limit-1429 --A INPUT -j limit-1428 --A INPUT -j limit-1427 --A INPUT -j limit-1426 --A INPUT -j limit-1425 --A INPUT -j limit-1424 --A INPUT -j limit-1423 --A INPUT -j limit-1422 --A INPUT -j limit-1421 --A INPUT -j limit-1420 --A INPUT -j limit-1419 --A INPUT -j limit-1418 --A INPUT -j limit-1417 --A INPUT -j limit-1416 --A INPUT -j limit-1415 --A INPUT -j limit-1414 --A INPUT -j limit-1413 --A INPUT -j limit-1412 --A INPUT -j limit-1411 --A INPUT -j limit-1410 --A INPUT -j limit-1409 --A INPUT -j limit-1408 --A INPUT -j limit-1407 --A INPUT -j limit-1406 --A INPUT -j limit-1405 --A INPUT -j limit-1404 --A INPUT -j limit-1403 --A INPUT -j limit-1402 --A INPUT -j limit-1401 --A INPUT -j limit-1400 --A INPUT -j limit-1399 --A INPUT -j limit-1398 --A INPUT -j limit-1397 --A INPUT -j limit-1396 --A INPUT -j limit-1395 --A INPUT -j limit-1394 --A INPUT -j limit-1393 --A INPUT -j limit-1392 --A INPUT -j limit-1391 --A INPUT -j limit-1390 --A INPUT -j limit-1389 --A INPUT -j limit-1388 --A INPUT -j limit-1387 --A INPUT -j limit-1386 --A INPUT -j limit-1385 --A INPUT -j limit-1384 --A INPUT -j limit-1383 --A INPUT -j limit-1382 --A INPUT -j limit-1381 --A INPUT -j limit-1380 --A INPUT -j limit-1379 --A INPUT -j limit-1378 --A INPUT -j limit-1377 --A INPUT -j limit-1376 --A INPUT -j limit-1375 --A INPUT -j limit-1374 --A INPUT -j limit-1373 --A INPUT -j limit-1372 --A INPUT -j limit-1371 --A INPUT -j limit-1370 --A INPUT -j limit-1369 --A INPUT -j limit-1368 --A INPUT -j limit-1367 --A INPUT -j limit-1366 --A INPUT -j limit-1365 --A INPUT -j limit-1364 --A INPUT -j limit-1363 --A INPUT -j limit-1362 --A INPUT -j limit-1361 --A INPUT -j limit-1360 --A INPUT -j limit-1359 --A INPUT -j limit-1358 --A INPUT -j limit-1357 --A INPUT -j limit-1356 --A INPUT -j limit-1355 --A INPUT -j limit-1354 --A INPUT -j limit-1353 --A INPUT -j limit-1352 --A INPUT -j limit-1351 --A INPUT -j limit-1350 --A INPUT -j limit-1349 --A INPUT -j limit-1348 --A INPUT -j limit-1347 --A INPUT -j limit-1346 --A INPUT -j limit-1345 --A INPUT -j limit-1344 --A INPUT -j limit-1343 --A INPUT -j limit-1342 --A INPUT -j limit-1341 --A INPUT -j limit-1340 --A INPUT -j limit-1339 --A INPUT -j limit-1338 --A INPUT -j limit-1337 --A INPUT -j limit-1336 --A INPUT -j limit-1335 --A INPUT -j limit-1334 --A INPUT -j limit-1333 --A INPUT -j limit-1332 --A INPUT -j limit-1331 --A INPUT -j limit-1330 --A INPUT -j limit-1329 --A INPUT -j limit-1328 --A INPUT -j limit-1327 --A INPUT -j limit-1326 --A INPUT -j limit-1325 --A INPUT -j limit-1324 --A INPUT -j limit-1323 --A INPUT -j limit-1322 --A INPUT -j limit-1321 --A INPUT -j limit-1320 --A INPUT -j limit-1319 --A INPUT -j limit-1318 --A INPUT -j limit-1317 --A INPUT -j limit-1316 --A INPUT -j limit-1315 --A INPUT -j limit-1314 --A INPUT -j limit-1313 --A INPUT -j limit-1312 --A INPUT -j limit-1311 --A INPUT -j limit-1310 --A INPUT -j limit-1309 --A INPUT -j limit-1308 --A INPUT -j limit-1307 --A INPUT -j limit-1306 --A INPUT -j limit-1305 --A INPUT -j limit-1304 --A INPUT -j limit-1303 --A INPUT -j limit-1302 --A INPUT -j limit-1301 --A INPUT -j limit-1300 --A INPUT -j limit-1299 --A INPUT -j limit-1298 --A INPUT -j limit-1297 --A INPUT -j limit-1296 --A INPUT -j limit-1295 --A INPUT -j limit-1294 --A INPUT -j limit-1293 --A INPUT -j limit-1292 --A INPUT -j limit-1291 --A INPUT -j limit-1290 --A INPUT -j limit-1289 --A INPUT -j limit-1288 --A INPUT -j limit-1287 --A INPUT -j limit-1286 --A INPUT -j limit-1285 --A INPUT -j limit-1284 --A INPUT -j limit-1283 --A INPUT -j limit-1282 --A INPUT -j limit-1281 --A INPUT -j limit-1280 --A INPUT -j limit-1279 --A INPUT -j limit-1278 --A INPUT -j limit-1277 --A INPUT -j limit-1276 --A INPUT -j limit-1275 --A INPUT -j limit-1274 --A INPUT -j limit-1273 --A INPUT -j limit-1272 --A INPUT -j limit-1271 --A INPUT -j limit-1270 --A INPUT -j limit-1269 --A INPUT -j limit-1268 --A INPUT -j limit-1267 --A INPUT -j limit-1266 --A INPUT -j limit-1265 --A INPUT -j limit-1264 --A INPUT -j limit-1263 --A INPUT -j limit-1262 --A INPUT -j limit-1261 --A INPUT -j limit-1260 --A INPUT -j limit-1259 --A INPUT -j limit-1258 +-A INPUT -j limit-2927 +-A INPUT -j limit-2926 +-A INPUT -j limit-2925 +-A INPUT -j limit-2924 +-A INPUT -j limit-2923 +-A INPUT -j limit-2922 +-A INPUT -j limit-2921 +-A INPUT -j limit-2920 +-A INPUT -j limit-2919 +-A INPUT -j limit-2918 +-A INPUT -j limit-2917 +-A INPUT -j limit-2916 +-A INPUT -j limit-2915 +-A INPUT -j limit-2914 +-A INPUT -j limit-2913 +-A INPUT -j limit-2912 +-A INPUT -j limit-2911 +-A INPUT -j limit-2910 +-A INPUT -j limit-2909 +-A INPUT -j limit-2908 +-A INPUT -j limit-2907 +-A INPUT -j limit-2906 +-A INPUT -j limit-2905 +-A INPUT -j limit-2904 +-A INPUT -j limit-2903 +-A INPUT -j limit-2902 +-A INPUT -j limit-2901 +-A INPUT -j limit-2900 +-A INPUT -j limit-2899 +-A INPUT -j limit-2898 +-A INPUT -j limit-2897 +-A INPUT -j limit-2896 +-A INPUT -j limit-2895 +-A INPUT -j limit-2894 +-A INPUT -j limit-2893 +-A INPUT -j limit-2892 +-A INPUT -j limit-2891 +-A INPUT -j limit-2890 +-A INPUT -j limit-2889 +-A INPUT -j limit-2888 +-A INPUT -j limit-2887 +-A INPUT -j limit-2886 +-A INPUT -j limit-2885 +-A INPUT -j limit-2884 +-A INPUT -j limit-2883 +-A INPUT -j limit-2882 +-A INPUT -j limit-2881 +-A INPUT -j limit-2880 +-A INPUT -j limit-2879 +-A INPUT -j limit-2878 +-A INPUT -j limit-2877 +-A INPUT -j limit-2876 +-A INPUT -j limit-2875 +-A INPUT -j limit-2874 +-A INPUT -j limit-2873 +-A INPUT -j limit-2872 +-A INPUT -j limit-2871 +-A INPUT -j limit-2870 +-A INPUT -j limit-2869 +-A INPUT -j limit-2868 +-A INPUT -j limit-2867 +-A INPUT -j limit-2866 +-A INPUT -j limit-2865 +-A INPUT -j limit-2864 +-A INPUT -j limit-2863 +-A INPUT -j limit-2862 +-A INPUT -j limit-2861 +-A INPUT -j limit-2860 +-A INPUT -j limit-2859 +-A INPUT -j limit-2858 +-A INPUT -j limit-2857 +-A INPUT -j limit-2856 +-A INPUT -j limit-2855 +-A INPUT -j limit-2854 +-A INPUT -j limit-2853 +-A INPUT -j limit-2852 +-A INPUT -j limit-2851 +-A INPUT -j limit-2850 +-A INPUT -j limit-2849 +-A INPUT -j limit-2848 +-A INPUT -j limit-2847 +-A INPUT -j limit-2846 +-A INPUT -j limit-2845 +-A INPUT -j limit-2844 +-A INPUT -j limit-2843 +-A INPUT -j limit-2842 +-A INPUT -j limit-2841 +-A INPUT -j limit-2840 +-A INPUT -j limit-2839 +-A INPUT -j limit-2838 +-A INPUT -j limit-2837 +-A INPUT -j limit-2836 +-A INPUT -j limit-2835 +-A INPUT -j limit-2834 +-A INPUT -j limit-2833 +-A INPUT -j limit-2832 +-A INPUT -j limit-2831 +-A INPUT -j limit-2830 +-A INPUT -j limit-2829 +-A INPUT -j limit-2828 +-A INPUT -j limit-2827 +-A INPUT -j limit-2826 +-A INPUT -j limit-2825 +-A INPUT -j limit-2824 +-A INPUT -j limit-2823 +-A INPUT -j limit-2822 +-A INPUT -j limit-2821 +-A INPUT -j limit-2820 +-A INPUT -j limit-2819 +-A INPUT -j limit-2818 +-A INPUT -j limit-2817 +-A INPUT -j limit-2816 +-A INPUT -j limit-2815 +-A INPUT -j limit-2814 +-A INPUT -j limit-2813 +-A INPUT -j limit-2812 +-A INPUT -j limit-2811 +-A INPUT -j limit-2810 +-A INPUT -j limit-2809 +-A INPUT -j limit-2808 +-A INPUT -j limit-2807 +-A INPUT -j limit-2806 +-A INPUT -j limit-2805 +-A INPUT -j limit-2804 +-A INPUT -j limit-2803 +-A INPUT -j limit-2802 +-A INPUT -j limit-2801 +-A INPUT -j limit-2800 +-A INPUT -j limit-2799 +-A INPUT -j limit-2798 +-A INPUT -j limit-2797 +-A INPUT -j limit-2796 +-A INPUT -j limit-2795 +-A INPUT -j limit-2794 +-A INPUT -j limit-2793 +-A INPUT -j limit-2792 +-A INPUT -j limit-2791 +-A INPUT -j limit-2790 +-A INPUT -j limit-2789 +-A INPUT -j limit-2788 +-A INPUT -j limit-2787 +-A INPUT -j limit-2786 +-A INPUT -j limit-2785 +-A INPUT -j limit-2784 +-A INPUT -j limit-2783 +-A INPUT -j limit-2782 +-A INPUT -j limit-2781 +-A INPUT -j limit-2780 +-A INPUT -j limit-2779 +-A INPUT -j limit-2778 +-A INPUT -j limit-2777 +-A INPUT -j limit-2776 +-A INPUT -j limit-2775 +-A INPUT -j limit-2774 +-A INPUT -j limit-2773 +-A INPUT -j limit-2772 +-A INPUT -j limit-2771 +-A INPUT -j limit-2770 +-A INPUT -j limit-2769 +-A INPUT -j limit-2768 +-A INPUT -j limit-2767 +-A INPUT -j limit-2766 +-A INPUT -j limit-2765 +-A INPUT -j limit-2764 +-A INPUT -j limit-2763 +-A INPUT -j limit-2762 +-A INPUT -j limit-2761 +-A INPUT -j limit-2760 +-A INPUT -j limit-2759 +-A INPUT -j limit-2758 +-A INPUT -j limit-2757 +-A INPUT -j limit-2756 +-A INPUT -j limit-2755 +-A INPUT -j limit-2754 +-A INPUT -j limit-2753 +-A INPUT -j limit-2752 +-A INPUT -j limit-2751 +-A INPUT -j limit-2750 +-A INPUT -j limit-2749 +-A INPUT -j limit-2748 +-A INPUT -j limit-2747 +-A INPUT -j limit-2746 +-A INPUT -j limit-2745 +-A INPUT -j limit-2744 +-A INPUT -j limit-2743 +-A INPUT -j limit-2742 +-A INPUT -j limit-2741 +-A INPUT -j limit-2740 +-A INPUT -j limit-2739 +-A INPUT -j limit-2738 +-A INPUT -j limit-2737 +-A INPUT -j limit-2736 +-A INPUT -j limit-2735 +-A INPUT -j limit-2734 +-A INPUT -j limit-2733 +-A INPUT -j limit-2732 +-A INPUT -j limit-2731 +-A INPUT -j limit-2730 +-A INPUT -j limit-2729 +-A INPUT -j limit-2728 +-A INPUT -j limit-2727 +-A INPUT -j limit-2726 +-A INPUT -j limit-2725 +-A INPUT -j limit-2724 +-A INPUT -j limit-2723 +-A INPUT -j limit-2722 +-A INPUT -j limit-2721 +-A INPUT -j limit-2720 +-A INPUT -j limit-2719 +-A INPUT -j limit-2718 +-A INPUT -j limit-2717 +-A INPUT -j limit-2716 +-A INPUT -j limit-2715 +-A INPUT -j limit-2714 +-A INPUT -j limit-2713 +-A INPUT -j limit-2712 +-A INPUT -j limit-2711 +-A INPUT -j limit-2710 +-A INPUT -j limit-2709 +-A INPUT -j limit-2708 +-A INPUT -j limit-2707 +-A INPUT -j limit-2706 +-A INPUT -j limit-2705 +-A INPUT -j limit-2704 +-A INPUT -j limit-2703 +-A INPUT -j limit-2702 +-A INPUT -j limit-2701 +-A INPUT -j limit-2700 +-A INPUT -j limit-2699 +-A INPUT -j limit-2698 +-A INPUT -j limit-2697 +-A INPUT -j limit-2696 +-A INPUT -j limit-2695 +-A INPUT -j limit-2694 +-A INPUT -j limit-2693 +-A INPUT -j limit-2692 +-A INPUT -j limit-2691 +-A INPUT -j limit-2690 +-A INPUT -j limit-2689 +-A INPUT -j limit-2688 +-A INPUT -j limit-2687 +-A INPUT -j limit-2686 +-A INPUT -j limit-2685 +-A INPUT -j limit-2684 +-A INPUT -j limit-2683 +-A INPUT -j limit-2682 +-A INPUT -j limit-2681 +-A INPUT -j limit-2680 +-A INPUT -j limit-2679 +-A INPUT -j limit-2678 +-A INPUT -j limit-2677 +-A INPUT -j limit-2676 +-A INPUT -j limit-2675 +-A INPUT -j limit-2674 +-A INPUT -j limit-2673 +-A INPUT -j limit-2672 +-A INPUT -j limit-2671 +-A INPUT -j limit-2670 +-A INPUT -j limit-2669 +-A INPUT -j limit-2668 +-A INPUT -j limit-2667 +-A INPUT -j limit-2666 +-A INPUT -j limit-2665 +-A INPUT -j limit-2664 +-A INPUT -j limit-2663 +-A INPUT -j limit-2662 +-A INPUT -j limit-2661 +-A INPUT -j limit-2660 +-A INPUT -j limit-2659 +-A INPUT -j limit-2658 +-A INPUT -j limit-2657 +-A INPUT -j limit-2656 +-A INPUT -j limit-2655 +-A INPUT -j limit-2654 +-A INPUT -j limit-2653 +-A INPUT -j limit-2652 +-A INPUT -j limit-2651 +-A INPUT -j limit-2650 +-A INPUT -j limit-2649 +-A INPUT -j limit-2648 +-A INPUT -j limit-2647 +-A INPUT -j limit-2646 +-A INPUT -j limit-2645 +-A INPUT -j limit-2644 +-A INPUT -j limit-2643 +-A INPUT -j limit-2642 +-A INPUT -j limit-2641 +-A INPUT -j limit-2640 +-A INPUT -j limit-2639 +-A INPUT -j limit-2638 +-A INPUT -j limit-2637 +-A INPUT -j limit-2636 +-A INPUT -j limit-2635 +-A INPUT -j limit-2634 +-A INPUT -j limit-2633 +-A INPUT -j limit-2632 +-A INPUT -j limit-2631 +-A INPUT -j limit-2630 +-A INPUT -j limit-2629 +-A INPUT -j limit-2628 +-A INPUT -j limit-2627 +-A INPUT -j limit-2626 +-A INPUT -j limit-2625 +-A INPUT -j limit-2624 +-A INPUT -j limit-2623 +-A INPUT -j limit-2622 +-A INPUT -j limit-2621 +-A INPUT -j limit-2620 +-A INPUT -j limit-2619 +-A INPUT -j limit-2618 +-A INPUT -j limit-2617 +-A INPUT -j limit-2616 +-A INPUT -j limit-2615 +-A INPUT -j limit-2614 +-A INPUT -j limit-2613 +-A INPUT -j limit-2612 +-A INPUT -j limit-2611 +-A INPUT -j limit-2610 +-A INPUT -j limit-2609 +-A INPUT -j limit-2608 +-A INPUT -j limit-2607 +-A INPUT -j limit-2606 +-A INPUT -j limit-2605 +-A INPUT -j limit-2604 +-A INPUT -j limit-2603 +-A INPUT -j limit-2602 +-A INPUT -j limit-2601 +-A INPUT -j limit-2600 +-A INPUT -j limit-2599 +-A INPUT -j limit-2598 +-A INPUT -j limit-2597 +-A INPUT -j limit-2596 +-A INPUT -j limit-2595 +-A INPUT -j limit-2594 +-A INPUT -j limit-2593 +-A INPUT -j limit-2592 +-A INPUT -j limit-2591 +-A INPUT -j limit-2590 +-A INPUT -j limit-2589 +-A INPUT -j limit-2588 +-A INPUT -j limit-2587 +-A INPUT -j limit-2586 +-A INPUT -j limit-2585 +-A INPUT -j limit-2584 +-A INPUT -j limit-2583 +-A INPUT -j limit-2582 +-A INPUT -j limit-2581 +-A INPUT -j limit-2580 +-A INPUT -j limit-2579 +-A INPUT -j limit-2578 +-A INPUT -j limit-2577 +-A INPUT -j limit-2576 +-A INPUT -j limit-2575 +-A INPUT -j limit-2574 +-A INPUT -j limit-2573 +-A INPUT -j limit-2572 +-A INPUT -j limit-2571 +-A INPUT -j limit-2570 +-A INPUT -j limit-2569 +-A INPUT -j limit-2568 +-A INPUT -j limit-2567 +-A INPUT -j limit-2566 +-A INPUT -j limit-2565 +-A INPUT -j limit-2564 +-A INPUT -j limit-2563 +-A INPUT -j limit-2562 +-A INPUT -j limit-2561 +-A INPUT -j limit-2560 +-A INPUT -j limit-2559 +-A INPUT -j limit-2558 +-A INPUT -j limit-2557 +-A INPUT -j limit-2556 +-A INPUT -j limit-2555 +-A INPUT -j limit-2554 +-A INPUT -j limit-2553 +-A INPUT -j limit-2552 +-A INPUT -j limit-2551 +-A INPUT -j limit-2550 +-A INPUT -j limit-2549 +-A INPUT -j limit-2548 +-A INPUT -j limit-2547 +-A INPUT -j limit-2546 +-A INPUT -j limit-2545 +-A INPUT -j limit-2544 +-A INPUT -j limit-2543 +-A INPUT -j limit-2542 +-A INPUT -j limit-2541 +-A INPUT -j limit-2540 +-A INPUT -j limit-2539 +-A INPUT -j limit-2538 +-A INPUT -j limit-2537 +-A INPUT -j limit-2536 +-A INPUT -j limit-2535 +-A INPUT -j limit-2534 +-A INPUT -j limit-2533 +-A INPUT -j limit-2532 +-A INPUT -j limit-2531 +-A INPUT -j limit-2530 +-A INPUT -j limit-2529 +-A INPUT -j limit-2528 +-A INPUT -j limit-2527 +-A INPUT -j limit-2526 +-A INPUT -j limit-2525 +-A INPUT -j limit-2524 +-A INPUT -j limit-2523 +-A INPUT -j limit-2522 +-A INPUT -j limit-2521 +-A INPUT -j limit-2520 +-A INPUT -j limit-2519 +-A INPUT -j limit-2518 +-A INPUT -j limit-2517 +-A INPUT -j limit-2516 +-A INPUT -j limit-2515 +-A INPUT -j limit-2514 +-A INPUT -j limit-2513 +-A INPUT -j limit-2512 +-A INPUT -j limit-2511 +-A INPUT -j limit-2510 +-A INPUT -j limit-2509 +-A INPUT -j limit-2508 +-A INPUT -j limit-2507 +-A INPUT -j limit-2506 +-A INPUT -j limit-2505 +-A INPUT -j limit-2504 +-A INPUT -j limit-2503 +-A INPUT -j limit-2502 +-A INPUT -j limit-2501 +-A INPUT -j limit-2500 +-A INPUT -j limit-2499 +-A INPUT -j limit-2498 +-A INPUT -j limit-2497 +-A INPUT -j limit-2496 +-A INPUT -j limit-2495 +-A INPUT -j limit-2494 +-A INPUT -j limit-2493 +-A INPUT -j limit-2492 +-A INPUT -j limit-2491 +-A INPUT -j limit-2490 +-A INPUT -j limit-2489 +-A INPUT -j limit-2488 +-A INPUT -j limit-2487 +-A INPUT -j limit-2486 +-A INPUT -j limit-2485 +-A INPUT -j limit-2484 +-A INPUT -j limit-2483 +-A INPUT -j limit-2482 +-A INPUT -j limit-2481 +-A INPUT -j limit-2480 +-A INPUT -j limit-2479 +-A INPUT -j limit-2478 +-A INPUT -j limit-2477 +-A INPUT -j limit-2476 +-A INPUT -j limit-2475 +-A INPUT -j limit-2474 +-A INPUT -j limit-2473 +-A INPUT -j limit-2472 +-A INPUT -j limit-2471 +-A INPUT -j limit-2470 +-A INPUT -j limit-2469 +-A INPUT -j limit-2468 +-A INPUT -j limit-2467 +-A INPUT -j limit-2466 +-A INPUT -j limit-2465 +-A INPUT -j limit-2464 +-A INPUT -j limit-2463 +-A INPUT -j limit-2462 +-A INPUT -j limit-2461 +-A INPUT -j limit-2460 +-A INPUT -j limit-2459 +-A INPUT -j limit-2458 +-A INPUT -j limit-2457 +-A INPUT -j limit-2456 +-A INPUT -j limit-2455 +-A INPUT -j limit-2454 +-A INPUT -j limit-2453 +-A INPUT -j limit-2452 +-A INPUT -j limit-2451 +-A INPUT -j limit-2450 +-A INPUT -j limit-2449 +-A INPUT -j limit-2448 +-A INPUT -j limit-2447 +-A INPUT -j limit-2446 +-A INPUT -j limit-2445 +-A INPUT -j limit-2444 +-A INPUT -j limit-2443 +-A INPUT -j limit-2442 +-A INPUT -j limit-2441 +-A INPUT -j limit-2440 +-A INPUT -j limit-2439 +-A INPUT -j limit-2438 +-A INPUT -j limit-2437 +-A INPUT -j limit-2436 +-A INPUT -j limit-2435 +-A INPUT -j limit-2434 +-A INPUT -j limit-2433 +-A INPUT -j limit-2432 +-A INPUT -j limit-2431 +-A INPUT -j limit-2430 +-A INPUT -j limit-2429 +-A INPUT -j limit-2428 +-A INPUT -j limit-2427 +-A INPUT -j limit-2426 +-A INPUT -j limit-2425 +-A INPUT -j limit-2424 +-A INPUT -j limit-2423 +-A INPUT -j limit-2422 +-A INPUT -j limit-2421 +-A INPUT -j limit-2420 +-A INPUT -j limit-2419 +-A INPUT -j limit-2418 +-A INPUT -j limit-2417 +-A INPUT -j limit-2416 +-A INPUT -j limit-2415 +-A INPUT -j limit-2414 +-A INPUT -j limit-2413 +-A INPUT -j limit-2412 +-A INPUT -j limit-2411 +-A INPUT -j limit-2410 +-A INPUT -j limit-2409 +-A INPUT -j limit-2408 +-A INPUT -j limit-2407 +-A INPUT -j limit-2406 +-A INPUT -j limit-2405 +-A INPUT -j limit-2404 +-A INPUT -j limit-2403 +-A INPUT -j limit-2402 +-A INPUT -j limit-2401 +-A INPUT -j limit-2400 +-A INPUT -j limit-2399 +-A INPUT -j limit-2398 +-A INPUT -j limit-2397 +-A INPUT -j limit-2396 +-A INPUT -j limit-2395 +-A INPUT -j limit-2394 +-A INPUT -j limit-2393 +-A INPUT -j limit-2392 +-A INPUT -j limit-2391 +-A INPUT -j limit-2390 +-A INPUT -j limit-2389 +-A INPUT -j limit-2388 +-A INPUT -j limit-2387 +-A INPUT -j limit-2386 +-A INPUT -j limit-2385 +-A INPUT -j limit-2384 +-A INPUT -j limit-2383 +-A INPUT -j limit-2382 +-A INPUT -j limit-2381 +-A INPUT -j limit-2380 +-A INPUT -j limit-2379 +-A INPUT -j limit-2378 +-A INPUT -j limit-2377 +-A INPUT -j limit-2376 +-A INPUT -j limit-2375 +-A INPUT -j limit-2374 +-A INPUT -j limit-2373 +-A INPUT -j limit-2372 +-A INPUT -j limit-2371 +-A INPUT -j limit-2370 +-A INPUT -j limit-2369 +-A INPUT -j limit-2368 +-A INPUT -j limit-2367 +-A INPUT -j limit-2366 +-A INPUT -j limit-2365 +-A INPUT -j limit-2364 +-A INPUT -j limit-2363 +-A INPUT -j limit-2362 +-A INPUT -j limit-2361 +-A INPUT -j limit-2360 +-A INPUT -j limit-2359 +-A INPUT -j limit-2358 +-A INPUT -j limit-2357 +-A INPUT -j limit-2356 +-A INPUT -j limit-2355 +-A INPUT -j limit-2354 +-A INPUT -j limit-2353 +-A INPUT -j limit-2352 +-A INPUT -j limit-2351 +-A INPUT -j limit-2350 +-A INPUT -j limit-2349 +-A INPUT -j limit-2348 +-A INPUT -j limit-2347 +-A INPUT -j limit-2346 +-A INPUT -j limit-2345 +-A INPUT -j limit-2344 +-A INPUT -j limit-2343 +-A INPUT -j limit-2342 +-A INPUT -j limit-2341 +-A INPUT -j limit-2340 +-A INPUT -j limit-2339 +-A INPUT -j limit-2338 +-A INPUT -j limit-2337 +-A INPUT -j limit-2336 +-A INPUT -j limit-2335 +-A INPUT -j limit-2334 +-A INPUT -j limit-2333 +-A INPUT -j limit-2332 +-A INPUT -j limit-2331 +-A INPUT -j limit-2330 +-A INPUT -j limit-2329 +-A INPUT -j limit-2328 +-A INPUT -j limit-2327 +-A INPUT -j limit-2326 +-A INPUT -j limit-2325 +-A INPUT -j limit-2324 +-A INPUT -j limit-2323 +-A INPUT -j limit-2322 +-A INPUT -j limit-2321 +-A INPUT -j limit-2320 +-A INPUT -j limit-2319 +-A INPUT -j limit-2318 +-A INPUT -j limit-2317 +-A INPUT -j limit-2316 +-A INPUT -j limit-2315 +-A INPUT -j limit-2314 +-A INPUT -j limit-2313 +-A INPUT -j limit-2312 +-A INPUT -j limit-2311 +-A INPUT -j limit-2310 +-A INPUT -j limit-2309 +-A INPUT -j limit-2308 +-A INPUT -j limit-2307 +-A INPUT -j limit-2306 +-A INPUT -j limit-2305 +-A INPUT -j limit-2304 +-A INPUT -j limit-2303 +-A INPUT -j limit-2302 +-A INPUT -j limit-2301 +-A INPUT -j limit-2300 +-A INPUT -j limit-2299 +-A INPUT -j limit-2298 +-A INPUT -j limit-2297 +-A INPUT -j limit-2296 +-A INPUT -j limit-2295 +-A INPUT -j limit-2294 +-A INPUT -j limit-2293 +-A INPUT -j limit-2292 +-A INPUT -j limit-2291 +-A INPUT -j limit-2290 +-A INPUT -j limit-2289 +-A INPUT -j limit-2288 +-A INPUT -j limit-2287 +-A INPUT -j limit-2286 +-A INPUT -j limit-2285 +-A INPUT -j limit-2284 +-A INPUT -j limit-2283 +-A INPUT -j limit-2282 +-A INPUT -j limit-2281 +-A INPUT -j limit-2280 +-A INPUT -j limit-2279 +-A INPUT -j limit-2278 +-A INPUT -j limit-2277 +-A INPUT -j limit-2276 +-A INPUT -j limit-2275 +-A INPUT -j limit-2274 +-A INPUT -j limit-2273 +-A INPUT -j limit-2272 +-A INPUT -j limit-2271 +-A INPUT -j limit-2270 +-A INPUT -j limit-2269 +-A INPUT -j limit-2268 +-A INPUT -j limit-2267 +-A INPUT -j limit-2266 +-A INPUT -j limit-2265 +-A INPUT -j limit-2264 +-A INPUT -j limit-2263 +-A INPUT -j limit-2262 +-A INPUT -j limit-2261 +-A INPUT -j limit-2260 +-A INPUT -j limit-2259 +-A INPUT -j limit-2258 +-A INPUT -j limit-2257 +-A INPUT -j limit-2256 +-A INPUT -j limit-2255 +-A INPUT -j limit-2254 +-A INPUT -j limit-2253 +-A INPUT -j limit-2252 +-A INPUT -j limit-2251 +-A INPUT -j limit-2250 +-A INPUT -j limit-2249 +-A INPUT -j limit-2248 +-A INPUT -j limit-2247 +-A INPUT -j limit-2246 +-A INPUT -j limit-2245 +-A INPUT -j limit-2244 +-A INPUT -j limit-2243 +-A INPUT -j limit-2242 +-A INPUT -j limit-2241 +-A INPUT -j limit-2240 +-A INPUT -j limit-2239 +-A INPUT -j limit-2238 +-A INPUT -j limit-2237 +-A INPUT -j limit-2236 +-A INPUT -j limit-2235 +-A INPUT -j limit-2234 +-A INPUT -j limit-2233 +-A INPUT -j limit-2232 +-A INPUT -j limit-2231 +-A INPUT -j limit-2230 +-A INPUT -j limit-2229 +-A INPUT -j limit-2228 +-A INPUT -j limit-2227 +-A INPUT -j limit-2226 +-A INPUT -j limit-2225 +-A INPUT -j limit-2224 +-A INPUT -j limit-2223 +-A INPUT -j limit-2222 +-A INPUT -j limit-2221 +-A INPUT -j limit-2220 +-A INPUT -j limit-2219 +-A INPUT -j limit-2218 +-A INPUT -j limit-2217 +-A INPUT -j limit-2216 +-A INPUT -j limit-2215 +-A INPUT -j limit-2214 +-A INPUT -j limit-2213 +-A INPUT -j limit-2212 +-A INPUT -j limit-2211 +-A INPUT -j limit-2210 +-A INPUT -j limit-2209 +-A INPUT -j limit-2208 +-A INPUT -j limit-2207 +-A INPUT -j limit-2206 +-A INPUT -j limit-2205 +-A INPUT -j limit-2204 +-A INPUT -j limit-2203 +-A INPUT -j limit-2202 +-A INPUT -j limit-2201 +-A INPUT -j limit-2200 +-A INPUT -j limit-2199 +-A INPUT -j limit-2198 +-A INPUT -j limit-2197 +-A INPUT -j limit-2196 +-A INPUT -j limit-2195 +-A INPUT -j limit-2194 +-A INPUT -j limit-2193 +-A INPUT -j limit-2192 +-A INPUT -j limit-2191 +-A INPUT -j limit-2190 +-A INPUT -j limit-2189 +-A INPUT -j limit-2188 +-A INPUT -j limit-2187 +-A INPUT -j limit-2186 +-A INPUT -j limit-2185 +-A INPUT -j limit-2184 +-A INPUT -j limit-2183 +-A INPUT -j limit-2182 +-A INPUT -j limit-2181 +-A INPUT -j limit-2180 +-A INPUT -j limit-2179 +-A INPUT -j limit-2178 +-A INPUT -j limit-2177 +-A INPUT -j limit-2176 +-A INPUT -j limit-2175 +-A INPUT -j limit-2174 +-A INPUT -j limit-2173 +-A INPUT -j limit-2172 +-A INPUT -j limit-2171 +-A INPUT -j limit-2170 +-A INPUT -j limit-2169 +-A INPUT -j limit-2168 +-A INPUT -j limit-2167 +-A INPUT -j limit-2166 +-A INPUT -j limit-2165 +-A INPUT -j limit-2164 +-A INPUT -j limit-2163 +-A INPUT -j limit-2162 +-A INPUT -j limit-2161 +-A INPUT -j limit-2160 +-A INPUT -j limit-2159 +-A INPUT -j limit-2158 +-A INPUT -j limit-2157 +-A INPUT -j limit-2156 +-A INPUT -j limit-2155 +-A INPUT -j limit-2154 +-A INPUT -j limit-2153 +-A INPUT -j limit-2152 +-A INPUT -j limit-2151 +-A INPUT -j limit-2150 +-A INPUT -j limit-2149 +-A INPUT -j limit-2148 +-A INPUT -j limit-2147 +-A INPUT -j limit-2146 +-A INPUT -j limit-2145 +-A INPUT -j limit-2144 +-A INPUT -j limit-2143 +-A INPUT -j limit-2142 +-A INPUT -j limit-2141 +-A INPUT -j limit-2140 +-A INPUT -j limit-2139 +-A INPUT -j limit-2138 +-A INPUT -j limit-2137 +-A INPUT -j limit-2136 +-A INPUT -j limit-2135 +-A INPUT -j limit-2134 +-A INPUT -j limit-2133 +-A INPUT -j limit-2132 +-A INPUT -j limit-2131 +-A INPUT -j limit-2130 +-A INPUT -j limit-2129 +-A INPUT -j limit-2128 +-A INPUT -j limit-2127 +-A INPUT -j limit-2126 +-A INPUT -j limit-2125 +-A INPUT -j limit-2124 +-A INPUT -j limit-2123 +-A INPUT -j limit-2122 +-A INPUT -j limit-2121 +-A INPUT -j limit-2120 +-A INPUT -j limit-2119 +-A INPUT -j limit-2118 +-A INPUT -j limit-2117 +-A INPUT -j limit-2116 +-A INPUT -j limit-2115 +-A INPUT -j limit-2114 +-A INPUT -j limit-2113 +-A INPUT -j limit-2112 +-A INPUT -j limit-2111 +-A INPUT -j limit-2110 +-A INPUT -j limit-2109 +-A INPUT -j limit-2108 +-A INPUT -j limit-2107 +-A INPUT -j limit-2106 +-A INPUT -j limit-2105 +-A INPUT -j limit-2104 +-A INPUT -j limit-2103 +-A INPUT -j limit-2102 +-A INPUT -j limit-2101 +-A INPUT -j limit-2100 +-A INPUT -j limit-2099 +-A INPUT -j limit-2098 +-A INPUT -j limit-2097 +-A INPUT -j limit-2096 +-A INPUT -j limit-2095 +-A INPUT -j limit-2094 +-A INPUT -j limit-2093 +-A INPUT -j limit-2092 +-A INPUT -j limit-2091 +-A INPUT -j limit-2090 +-A INPUT -j limit-2089 +-A INPUT -j limit-2088 +-A INPUT -j limit-2087 +-A INPUT -j limit-2086 +-A INPUT -j limit-2085 +-A INPUT -j limit-2084 +-A INPUT -j limit-2083 +-A INPUT -j limit-2082 +-A INPUT -j limit-2081 +-A INPUT -j limit-2080 +-A INPUT -j limit-2079 +-A INPUT -j limit-2078 +-A INPUT -j limit-2077 +-A INPUT -j limit-2076 +-A INPUT -j limit-2075 +-A INPUT -j limit-2074 +-A INPUT -j limit-2073 +-A INPUT -j limit-2072 +-A INPUT -j limit-2071 +-A INPUT -j limit-2070 +-A INPUT -j limit-2069 +-A INPUT -j limit-2068 +-A INPUT -j limit-2067 +-A INPUT -j limit-2066 +-A INPUT -j limit-2065 +-A INPUT -j limit-2064 +-A INPUT -j limit-2063 +-A INPUT -j limit-2062 +-A INPUT -j limit-2061 +-A INPUT -j limit-2060 +-A INPUT -j limit-2059 +-A INPUT -j limit-2058 +-A INPUT -j limit-2057 +-A INPUT -j limit-2056 +-A INPUT -j limit-2055 +-A INPUT -j limit-2054 +-A INPUT -j limit-2053 +-A INPUT -j limit-2052 +-A INPUT -j limit-2051 +-A INPUT -j limit-2050 +-A INPUT -j limit-2049 +-A INPUT -j limit-2048 +-A INPUT -j limit-2047 +-A INPUT -j limit-2046 +-A INPUT -j limit-2045 +-A INPUT -j limit-2044 +-A INPUT -j limit-2043 +-A INPUT -j limit-2042 +-A INPUT -j limit-2041 +-A INPUT -j limit-2040 +-A INPUT -j limit-2039 +-A INPUT -j limit-2038 +-A INPUT -j limit-2037 +-A INPUT -j limit-2036 +-A INPUT -j limit-2035 +-A INPUT -j limit-2034 +-A INPUT -j limit-2033 +-A INPUT -j limit-2032 +-A INPUT -j limit-2031 +-A INPUT -j limit-2030 +-A INPUT -j limit-2029 +-A INPUT -j limit-2028 +-A INPUT -j limit-2027 +-A INPUT -j limit-2026 +-A INPUT -j limit-2025 +-A INPUT -j limit-2024 +-A INPUT -j limit-2023 +-A INPUT -j limit-2022 +-A INPUT -j limit-2021 +-A INPUT -j limit-2020 +-A INPUT -j limit-2019 +-A INPUT -j limit-2018 +-A INPUT -j limit-2017 +-A INPUT -j limit-2016 +-A INPUT -j limit-2015 +-A INPUT -j limit-2014 +-A INPUT -j limit-2013 +-A INPUT -j limit-2012 +-A INPUT -j limit-2011 +-A INPUT -j limit-2010 +-A INPUT -j limit-2009 +-A INPUT -j limit-2008 +-A INPUT -j limit-2007 +-A INPUT -j limit-2006 +-A INPUT -j limit-2005 +-A INPUT -j limit-2004 +-A INPUT -j limit-2003 +-A INPUT -j limit-2002 +-A INPUT -j limit-2001 +-A INPUT -j limit-2000 +-A INPUT -j limit-1999 +-A INPUT -j limit-1998 +-A INPUT -j limit-1997 +-A INPUT -j limit-1996 +-A INPUT -j limit-1995 +-A INPUT -j limit-1994 +-A INPUT -j limit-1993 +-A INPUT -j limit-1992 +-A INPUT -j limit-1991 +-A INPUT -j limit-1990 +-A INPUT -j limit-1989 +-A INPUT -j limit-1988 +-A INPUT -j limit-1987 +-A INPUT -j limit-1986 +-A INPUT -j limit-1985 +-A INPUT -j limit-1984 +-A INPUT -j limit-1983 +-A INPUT -j limit-1982 +-A INPUT -j limit-1981 +-A INPUT -j limit-1980 +-A INPUT -j limit-1979 +-A INPUT -j limit-1978 +-A INPUT -j limit-1977 +-A INPUT -j limit-1976 +-A INPUT -j limit-1975 +-A INPUT -j limit-1974 +-A INPUT -j limit-1973 +-A INPUT -j limit-1972 +-A INPUT -j limit-1971 +-A INPUT -j limit-1970 +-A INPUT -j limit-1969 +-A INPUT -j limit-1968 +-A INPUT -j limit-1967 +-A INPUT -j limit-1966 +-A INPUT -j limit-1965 +-A INPUT -j limit-1964 +-A INPUT -j limit-1963 +-A INPUT -j limit-1962 +-A INPUT -j limit-1961 +-A INPUT -j limit-1960 +-A INPUT -j limit-1959 +-A INPUT -j limit-1958 +-A INPUT -j limit-1957 +-A INPUT -j limit-1956 +-A INPUT -j limit-1955 +-A INPUT -j limit-1954 +-A INPUT -j limit-1953 +-A INPUT -j limit-1952 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT -A INPUT -j logaccept-final-0 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-1 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-2 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-3 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-4 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-5 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-6 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-7 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-8 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-9 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-10 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-11 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-12 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-13 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-14 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-15 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-16 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-17 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-18 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-19 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-20 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-21 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-22 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-23 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-24 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-25 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-26 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-27 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-28 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-29 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-30 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-31 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-32 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-33 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-34 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-35 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-36 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-37 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-38 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-39 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-40 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-41 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-42 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-43 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-44 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-45 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-46 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-47 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-48 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-49 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-50 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-51 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-52 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-53 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-54 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-55 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-56 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-57 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-58 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-59 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-60 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-61 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-62 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-63 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-64 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-65 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-66 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-67 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-68 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-69 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-70 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-71 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-72 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-73 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-74 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-75 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-76 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-77 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-78 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-79 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-80 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-81 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-82 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-83 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-84 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-85 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-86 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-87 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-88 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-89 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-90 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-91 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-92 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-93 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-94 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-95 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-96 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-97 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-98 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-99 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-100 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-101 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-102 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-103 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-104 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-105 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-106 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-107 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-108 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-109 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-110 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-111 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-112 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-113 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-114 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-115 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-116 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-117 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-118 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-119 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-120 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-121 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-122 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-123 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-124 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-125 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-126 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-127 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-128 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-129 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-130 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-131 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-132 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-133 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-134 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-135 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-136 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-137 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-138 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-139 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-140 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-141 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-142 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-143 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-144 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-145 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-146 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-147 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-148 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-149 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-150 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-151 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-152 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-153 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-154 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-155 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-156 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-157 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-158 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-159 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-160 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-161 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-162 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-163 --A INPUT -i eth0 -j limit-1887 --A INPUT -i eth0 -j limit-1888 --A INPUT -i eth0 -j limit-1889 --A INPUT -i eth0 -j limit-1890 --A INPUT -i eth0 -j limit-1891 --A INPUT -i eth0 -j limit-1892 --A INPUT -i eth0 -j limit-1893 --A INPUT -i eth0 -j limit-1894 --A INPUT -i eth0 -j limit-1895 --A INPUT -i eth0 -j limit-1896 --A INPUT -i eth0 -j limit-1897 --A INPUT -i eth0 -j limit-1898 --A INPUT -i eth0 -j limit-1899 --A INPUT -i eth0 -j limit-1900 --A INPUT -i eth0 -j limit-1901 --A INPUT -i eth0 -j limit-1902 --A INPUT -i eth0 -j limit-1903 --A INPUT -i eth0 -j limit-1904 --A INPUT -i eth0 -j limit-1905 --A INPUT -i eth0 -j limit-1906 --A INPUT -i eth0 -j limit-1907 --A INPUT -i eth0 -j limit-1908 --A INPUT -i eth0 -j limit-1909 --A INPUT -i eth0 -j limit-1910 --A INPUT -i eth0 -j limit-1911 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1913 --A INPUT -i eth0 -j limit-1914 --A INPUT -i eth0 -j limit-1915 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1917 --A INPUT -i eth0 -j limit-1918 --A INPUT -i eth0 -j limit-1919 --A INPUT -i eth0 -j limit-1920 --A INPUT -i eth0 -j limit-1921 --A INPUT -i eth0 -j limit-1922 --A INPUT -i eth0 -j limit-1923 --A INPUT -i eth0 -j limit-1924 --A INPUT -i eth0 -j limit-1925 --A INPUT -i eth0 -j limit-1926 --A INPUT -i eth0 -j limit-1927 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1929 --A INPUT -i eth0 -j limit-1930 --A INPUT -i eth0 -j limit-1931 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1933 --A INPUT -i eth0 -j limit-1934 --A INPUT -i eth0 -j limit-1935 --A INPUT -i eth0 -j limit-1936 --A INPUT -i eth0 -j limit-1937 --A INPUT -i eth0 -j limit-1938 --A INPUT -i eth0 -j limit-1939 --A INPUT -i eth0 -j limit-1940 --A INPUT -i eth0 -j limit-1941 --A INPUT -i eth0 -j limit-1942 --A INPUT -i eth0 -j limit-1943 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1945 --A INPUT -i eth0 -j limit-1946 --A INPUT -i eth0 -j limit-1947 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1949 --A INPUT -i eth0 -j limit-1950 --A INPUT -i eth0 -j limit-1951 --A INPUT -i eth0 -j limit-1952 --A INPUT -i eth0 -j limit-1953 --A INPUT -i eth0 -j limit-1954 --A INPUT -i eth0 -j limit-1955 --A INPUT -i eth0 -j limit-1956 --A INPUT -i eth0 -j limit-1957 --A INPUT -i eth0 -j limit-1958 --A INPUT -i eth0 -j limit-1959 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1961 --A INPUT -i eth0 -j limit-1962 --A INPUT -i eth0 -j limit-1963 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1965 --A INPUT -i eth0 -j limit-1966 --A INPUT -i eth0 -j limit-1967 --A INPUT -i eth0 -j limit-1968 --A INPUT -i eth0 -j limit-1969 --A INPUT -i eth0 -j limit-1970 --A INPUT -i eth0 -j limit-1971 --A INPUT -i eth0 -j limit-1972 --A INPUT -i eth0 -j limit-1973 --A INPUT -i eth0 -j limit-1974 --A INPUT -i eth0 -j limit-1975 --A INPUT -i eth0 -j limit-1976 --A INPUT -i eth0 -j limit-1977 --A INPUT -i eth0 -j limit-1978 --A INPUT -i eth0 -j limit-1979 --A INPUT -i eth0 -j limit-1980 --A INPUT -i eth0 -j limit-1981 --A INPUT -i eth0 -j limit-1982 --A INPUT -i eth0 -j limit-1983 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-913 --A INPUT -i eth0 -j limit-1985 --A INPUT -i eth0 -j limit-1986 --A INPUT -i eth0 -j limit-1987 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-917 --A INPUT -i eth0 -j limit-1989 --A INPUT -i eth0 -j limit-1990 --A INPUT -i eth0 -j limit-1991 --A INPUT -i eth0 -j limit-1992 --A INPUT -i eth0 -j limit-1993 --A INPUT -i eth0 -j limit-1994 --A INPUT -i eth0 -j limit-1995 --A INPUT -i eth0 -j limit-1996 --A INPUT -i eth0 -j limit-1997 --A INPUT -i eth0 -j limit-1998 --A INPUT -i eth0 -j limit-1999 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-929 --A INPUT -i eth0 -j limit-2001 --A INPUT -i eth0 -j limit-2002 --A INPUT -i eth0 -j limit-2003 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-933 --A INPUT -i eth0 -j limit-2005 --A INPUT -i eth0 -j limit-2006 --A INPUT -i eth0 -j limit-2007 --A INPUT -i eth0 -j limit-2008 --A INPUT -i eth0 -j limit-2009 --A INPUT -i eth0 -j limit-2010 --A INPUT -i eth0 -j limit-2011 --A INPUT -i eth0 -j limit-2012 --A INPUT -i eth0 -j limit-2013 --A INPUT -i eth0 -j limit-2014 --A INPUT -i eth0 -j limit-2015 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-945 --A INPUT -i eth0 -j limit-2017 --A INPUT -i eth0 -j limit-2018 --A INPUT -i eth0 -j limit-2019 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-949 --A INPUT -i eth0 -j limit-2021 --A INPUT -i eth0 -j limit-2022 --A INPUT -i eth0 -j limit-2023 --A INPUT -i eth0 -j limit-2024 --A INPUT -i eth0 -j limit-2025 --A INPUT -i eth0 -j limit-2026 --A INPUT -i eth0 -j limit-2027 --A INPUT -i eth0 -j limit-2028 --A INPUT -i eth0 -j limit-2029 --A INPUT -i eth0 -j limit-2030 --A INPUT -i eth0 -j limit-2031 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-961 --A INPUT -i eth0 -j limit-2033 --A INPUT -i eth0 -j limit-2034 --A INPUT -i eth0 -j limit-2035 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-965 --A INPUT -i eth0 -j limit-2037 --A INPUT -i eth0 -j limit-2038 --A INPUT -i eth0 -j limit-2039 --A INPUT -i eth0 -j limit-2040 --A INPUT -i eth0 -j limit-2041 --A INPUT -i eth0 -j limit-2042 --A INPUT -i eth0 -j limit-2043 --A INPUT -i eth0 -j limit-2044 --A INPUT -i eth0 -j limit-2045 --A INPUT -i eth0 -j limit-2046 --A INPUT -i eth0 -j limit-2047 --A INPUT -i eth0 -j limit-2048 --A INPUT -i eth0 -j limit-2049 --A INPUT -i eth0 -j limit-2050 --A INPUT -i eth0 -j limit-2051 --A INPUT -i eth0 -j limit-2052 --A INPUT -i eth0 -j limit-2053 --A INPUT -i eth0 -j limit-2054 --A INPUT -i eth0 -j limit-2055 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2057 --A INPUT -i eth0 -j limit-2058 --A INPUT -i eth0 -j limit-2059 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2061 --A INPUT -i eth0 -j limit-2062 --A INPUT -i eth0 -j limit-2063 --A INPUT -i eth0 -j limit-2064 --A INPUT -i eth0 -j limit-2065 --A INPUT -i eth0 -j limit-2066 --A INPUT -i eth0 -j limit-2067 --A INPUT -i eth0 -j limit-2068 --A INPUT -i eth0 -j limit-2069 --A INPUT -i eth0 -j limit-2070 --A INPUT -i eth0 -j limit-2071 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2073 --A INPUT -i eth0 -j limit-2074 --A INPUT -i eth0 -j limit-2075 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2077 --A INPUT -i eth0 -j limit-2078 --A INPUT -i eth0 -j limit-2079 --A INPUT -i eth0 -j limit-2080 --A INPUT -i eth0 -j limit-2081 --A INPUT -i eth0 -j limit-2082 --A INPUT -i eth0 -j limit-2083 --A INPUT -i eth0 -j limit-2084 --A INPUT -i eth0 -j limit-2085 --A INPUT -i eth0 -j limit-2086 --A INPUT -i eth0 -j limit-2087 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2089 --A INPUT -i eth0 -j limit-2090 --A INPUT -i eth0 -j limit-2091 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2093 --A INPUT -i eth0 -j limit-2094 --A INPUT -i eth0 -j limit-2095 --A INPUT -i eth0 -j limit-2096 --A INPUT -i eth0 -j limit-2097 --A INPUT -i eth0 -j limit-2098 --A INPUT -i eth0 -j limit-2099 --A INPUT -i eth0 -j limit-2100 --A INPUT -i eth0 -j limit-2101 --A INPUT -i eth0 -j limit-2102 --A INPUT -i eth0 -j limit-2103 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2105 --A INPUT -i eth0 -j limit-2106 --A INPUT -i eth0 -j limit-2107 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2109 --A INPUT -i eth0 -j limit-2110 --A INPUT -i eth0 -j limit-2111 --A INPUT -i eth0 -j limit-2112 --A INPUT -i eth0 -j limit-2113 --A INPUT -i eth0 -j limit-2114 --A INPUT -i eth0 -j limit-2115 --A INPUT -i eth0 -j limit-2116 --A INPUT -i eth0 -j limit-2117 --A INPUT -i eth0 -j limit-2118 --A INPUT -i eth0 -j limit-2119 --A INPUT -i eth0 -j limit-2120 --A INPUT -i eth0 -j limit-2121 --A INPUT -i eth0 -j limit-2122 --A INPUT -i eth0 -j limit-2123 --A INPUT -i eth0 -j limit-2124 --A INPUT -i eth0 -j limit-2125 --A INPUT -i eth0 -j limit-2126 --A INPUT -i eth0 -j limit-2127 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-985 --A INPUT -i eth0 -j limit-2129 --A INPUT -i eth0 -j limit-2130 --A INPUT -i eth0 -j limit-2131 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-989 --A INPUT -i eth0 -j limit-2133 --A INPUT -i eth0 -j limit-2134 --A INPUT -i eth0 -j limit-2135 --A INPUT -i eth0 -j limit-2136 --A INPUT -i eth0 -j limit-2137 --A INPUT -i eth0 -j limit-2138 --A INPUT -i eth0 -j limit-2139 --A INPUT -i eth0 -j limit-2140 --A INPUT -i eth0 -j limit-2141 --A INPUT -i eth0 -j limit-2142 --A INPUT -i eth0 -j limit-2143 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1001 --A INPUT -i eth0 -j limit-2145 --A INPUT -i eth0 -j limit-2146 --A INPUT -i eth0 -j limit-2147 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1005 --A INPUT -i eth0 -j limit-2149 --A INPUT -i eth0 -j limit-2150 --A INPUT -i eth0 -j limit-2151 --A INPUT -i eth0 -j limit-2152 --A INPUT -i eth0 -j limit-2153 --A INPUT -i eth0 -j limit-2154 --A INPUT -i eth0 -j limit-2155 --A INPUT -i eth0 -j limit-2156 --A INPUT -i eth0 -j limit-2157 --A INPUT -i eth0 -j limit-2158 --A INPUT -i eth0 -j limit-2159 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1017 --A INPUT -i eth0 -j limit-2161 --A INPUT -i eth0 -j limit-2162 --A INPUT -i eth0 -j limit-2163 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1021 --A INPUT -i eth0 -j limit-2165 --A INPUT -i eth0 -j limit-2166 --A INPUT -i eth0 -j limit-2167 --A INPUT -i eth0 -j limit-2168 --A INPUT -i eth0 -j limit-2169 --A INPUT -i eth0 -j limit-2170 --A INPUT -i eth0 -j limit-2171 --A INPUT -i eth0 -j limit-2172 --A INPUT -i eth0 -j limit-2173 --A INPUT -i eth0 -j limit-2174 --A INPUT -i eth0 -j limit-2175 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1033 --A INPUT -i eth0 -j limit-2177 --A INPUT -i eth0 -j limit-2178 --A INPUT -i eth0 -j limit-2179 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1037 --A INPUT -i eth0 -j limit-2181 --A INPUT -i eth0 -j limit-2182 --A INPUT -i eth0 -j limit-2183 --A INPUT -i eth0 -j limit-2184 --A INPUT -i eth0 -j limit-2185 --A INPUT -i eth0 -j limit-2186 --A INPUT -i eth0 -j limit-2187 --A INPUT -i eth0 -j limit-2188 --A INPUT -i eth0 -j limit-2189 --A INPUT -i eth0 -j limit-2190 --A INPUT -i eth0 -j limit-2191 --A INPUT -i eth0 -j limit-2192 --A INPUT -i eth0 -j limit-2193 --A INPUT -i eth0 -j limit-2194 --A INPUT -i eth0 -j limit-2195 --A INPUT -i eth0 -j limit-2196 --A INPUT -i eth0 -j limit-2197 --A INPUT -i eth0 -j limit-2198 --A INPUT -i eth0 -j limit-2199 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2201 --A INPUT -i eth0 -j limit-2202 --A INPUT -i eth0 -j limit-2203 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2205 --A INPUT -i eth0 -j limit-2206 --A INPUT -i eth0 -j limit-2207 --A INPUT -i eth0 -j limit-2208 --A INPUT -i eth0 -j limit-2209 --A INPUT -i eth0 -j limit-2210 --A INPUT -i eth0 -j limit-2211 --A INPUT -i eth0 -j limit-2212 --A INPUT -i eth0 -j limit-2213 --A INPUT -i eth0 -j limit-2214 --A INPUT -i eth0 -j limit-2215 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2217 --A INPUT -i eth0 -j limit-2218 --A INPUT -i eth0 -j limit-2219 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2221 --A INPUT -i eth0 -j limit-2222 --A INPUT -i eth0 -j limit-2223 --A INPUT -i eth0 -j limit-2224 --A INPUT -i eth0 -j limit-2225 --A INPUT -i eth0 -j limit-2226 --A INPUT -i eth0 -j limit-2227 --A INPUT -i eth0 -j limit-2228 --A INPUT -i eth0 -j limit-2229 --A INPUT -i eth0 -j limit-2230 --A INPUT -i eth0 -j limit-2231 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2233 --A INPUT -i eth0 -j limit-2234 --A INPUT -i eth0 -j limit-2235 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2237 --A INPUT -i eth0 -j limit-2238 --A INPUT -i eth0 -j limit-2239 --A INPUT -i eth0 -j limit-2240 --A INPUT -i eth0 -j limit-2241 --A INPUT -i eth0 -j limit-2242 --A INPUT -i eth0 -j limit-2243 --A INPUT -i eth0 -j limit-2244 --A INPUT -i eth0 -j limit-2245 --A INPUT -i eth0 -j limit-2246 --A INPUT -i eth0 -j limit-2247 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2249 --A INPUT -i eth0 -j limit-2250 --A INPUT -i eth0 -j limit-2251 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2253 --A INPUT -i eth0 -j limit-2254 --A INPUT -i eth0 -j limit-2255 --A INPUT -i eth0 -j limit-2256 --A INPUT -i eth0 -j limit-2257 --A INPUT -i eth0 -j limit-2258 --A INPUT -i eth0 -j limit-2259 --A INPUT -i eth0 -j limit-2260 --A INPUT -i eth0 -j limit-2261 --A INPUT -i eth0 -j limit-2262 --A INPUT -i eth0 -j limit-2263 --A INPUT -i eth0 -j limit-2264 --A INPUT -i eth0 -j limit-2265 --A INPUT -i eth0 -j limit-2266 --A INPUT -i eth0 -j limit-2267 --A INPUT -i eth0 -j limit-2268 --A INPUT -i eth0 -j limit-2269 --A INPUT -i eth0 -j limit-2270 --A INPUT -i eth0 -j limit-2271 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 --A INPUT -i eth0 -j limit-2273 --A INPUT -i eth0 -j limit-2274 --A INPUT -i eth0 -j limit-2275 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1061 --A INPUT -i eth0 -j limit-2277 --A INPUT -i eth0 -j limit-2278 --A INPUT -i eth0 -j limit-2279 --A INPUT -i eth0 -j limit-2280 --A INPUT -i eth0 -j limit-2281 --A INPUT -i eth0 -j limit-2282 --A INPUT -i eth0 -j limit-2283 --A INPUT -i eth0 -j limit-2284 --A INPUT -i eth0 -j limit-2285 --A INPUT -i eth0 -j limit-2286 --A INPUT -i eth0 -j limit-2287 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 --A INPUT -i eth0 -j limit-2289 --A INPUT -i eth0 -j limit-2290 --A INPUT -i eth0 -j limit-2291 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 --A INPUT -i eth0 -j limit-2293 --A INPUT -i eth0 -j limit-2294 --A INPUT -i eth0 -j limit-2295 --A INPUT -i eth0 -j limit-2296 --A INPUT -i eth0 -j limit-2297 --A INPUT -i eth0 -j limit-2298 --A INPUT -i eth0 -j limit-2299 --A INPUT -i eth0 -j limit-2300 --A INPUT -i eth0 -j limit-2301 --A INPUT -i eth0 -j limit-2302 --A INPUT -i eth0 -j limit-2303 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1089 --A INPUT -i eth0 -j limit-2305 --A INPUT -i eth0 -j limit-2306 --A INPUT -i eth0 -j limit-2307 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 --A INPUT -i eth0 -j limit-2309 --A INPUT -i eth0 -j limit-2310 --A INPUT -i eth0 -j limit-2311 --A INPUT -i eth0 -j limit-2312 --A INPUT -i eth0 -j limit-2313 --A INPUT -i eth0 -j limit-2314 --A INPUT -i eth0 -j limit-2315 --A INPUT -i eth0 -j limit-2316 --A INPUT -i eth0 -j limit-2317 --A INPUT -i eth0 -j limit-2318 --A INPUT -i eth0 -j limit-2319 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1105 --A INPUT -i eth0 -j limit-2321 --A INPUT -i eth0 -j limit-2322 --A INPUT -i eth0 -j limit-2323 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1109 --A INPUT -i eth0 -j limit-2325 --A INPUT -i eth0 -j limit-2326 --A INPUT -i eth0 -j limit-2327 --A INPUT -i eth0 -j limit-2328 --A INPUT -i eth0 -j limit-2329 --A INPUT -i eth0 -j limit-2330 --A INPUT -i eth0 -j limit-2331 --A INPUT -i eth0 -j limit-2332 --A INPUT -i eth0 -j limit-2333 --A INPUT -i eth0 -j limit-2334 --A INPUT -i eth0 -j limit-2335 --A INPUT -i eth0 -j limit-2336 --A INPUT -i eth0 -j limit-2337 --A INPUT -i eth0 -j limit-2338 --A INPUT -i eth0 -j limit-2339 --A INPUT -i eth0 -j limit-2340 --A INPUT -i eth0 -j limit-2341 --A INPUT -i eth0 -j limit-2342 --A INPUT -i eth0 -j limit-2343 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2345 --A INPUT -i eth0 -j limit-2346 --A INPUT -i eth0 -j limit-2347 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2349 --A INPUT -i eth0 -j limit-2350 --A INPUT -i eth0 -j limit-2351 --A INPUT -i eth0 -j limit-2352 --A INPUT -i eth0 -j limit-2353 --A INPUT -i eth0 -j limit-2354 --A INPUT -i eth0 -j limit-2355 --A INPUT -i eth0 -j limit-2356 --A INPUT -i eth0 -j limit-2357 --A INPUT -i eth0 -j limit-2358 --A INPUT -i eth0 -j limit-2359 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2361 --A INPUT -i eth0 -j limit-2362 --A INPUT -i eth0 -j limit-2363 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2365 --A INPUT -i eth0 -j limit-2366 --A INPUT -i eth0 -j limit-2367 --A INPUT -i eth0 -j limit-2368 --A INPUT -i eth0 -j limit-2369 --A INPUT -i eth0 -j limit-2370 --A INPUT -i eth0 -j limit-2371 --A INPUT -i eth0 -j limit-2372 --A INPUT -i eth0 -j limit-2373 --A INPUT -i eth0 -j limit-2374 --A INPUT -i eth0 -j limit-2375 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2377 --A INPUT -i eth0 -j limit-2378 --A INPUT -i eth0 -j limit-2379 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2381 --A INPUT -i eth0 -j limit-2382 --A INPUT -i eth0 -j limit-2383 --A INPUT -i eth0 -j limit-2384 --A INPUT -i eth0 -j limit-2385 --A INPUT -i eth0 -j limit-2386 --A INPUT -i eth0 -j limit-2387 --A INPUT -i eth0 -j limit-2388 --A INPUT -i eth0 -j limit-2389 --A INPUT -i eth0 -j limit-2390 --A INPUT -i eth0 -j limit-2391 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2393 --A INPUT -i eth0 -j limit-2394 --A INPUT -i eth0 -j limit-2395 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2397 --A INPUT -i eth0 -j limit-2398 --A INPUT -i eth0 -j limit-2399 --A INPUT -i eth0 -j limit-2400 --A INPUT -i eth0 -j limit-2401 --A INPUT -i eth0 -j limit-2402 --A INPUT -i eth0 -j limit-2403 --A INPUT -i eth0 -j limit-2404 --A INPUT -i eth0 -j limit-2405 --A INPUT -i eth0 -j limit-2406 --A INPUT -i eth0 -j limit-2407 --A INPUT -i eth0 -j limit-2408 --A INPUT -i eth0 -j limit-2409 --A INPUT -i eth0 -j limit-2410 --A INPUT -i eth0 -j limit-2411 --A INPUT -i eth0 -j limit-2412 --A INPUT -i eth0 -j limit-2413 --A INPUT -i eth0 -j limit-2414 --A INPUT -i eth0 -j limit-2415 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1129 --A INPUT -i eth0 -j limit-2417 --A INPUT -i eth0 -j limit-2418 --A INPUT -i eth0 -j limit-2419 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1133 --A INPUT -i eth0 -j limit-2421 --A INPUT -i eth0 -j limit-2422 --A INPUT -i eth0 -j limit-2423 --A INPUT -i eth0 -j limit-2424 --A INPUT -i eth0 -j limit-2425 --A INPUT -i eth0 -j limit-2426 --A INPUT -i eth0 -j limit-2427 --A INPUT -i eth0 -j limit-2428 --A INPUT -i eth0 -j limit-2429 --A INPUT -i eth0 -j limit-2430 --A INPUT -i eth0 -j limit-2431 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1145 --A INPUT -i eth0 -j limit-2433 --A INPUT -i eth0 -j limit-2434 --A INPUT -i eth0 -j limit-2435 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1149 --A INPUT -i eth0 -j limit-2437 --A INPUT -i eth0 -j limit-2438 --A INPUT -i eth0 -j limit-2439 --A INPUT -i eth0 -j limit-2440 --A INPUT -i eth0 -j limit-2441 --A INPUT -i eth0 -j limit-2442 --A INPUT -i eth0 -j limit-2443 --A INPUT -i eth0 -j limit-2444 --A INPUT -i eth0 -j limit-2445 --A INPUT -i eth0 -j limit-2446 --A INPUT -i eth0 -j limit-2447 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1161 --A INPUT -i eth0 -j limit-2449 --A INPUT -i eth0 -j limit-2450 --A INPUT -i eth0 -j limit-2451 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1165 --A INPUT -i eth0 -j limit-2453 --A INPUT -i eth0 -j limit-2454 --A INPUT -i eth0 -j limit-2455 --A INPUT -i eth0 -j limit-2456 --A INPUT -i eth0 -j limit-2457 --A INPUT -i eth0 -j limit-2458 --A INPUT -i eth0 -j limit-2459 --A INPUT -i eth0 -j limit-2460 --A INPUT -i eth0 -j limit-2461 --A INPUT -i eth0 -j limit-2462 --A INPUT -i eth0 -j limit-2463 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1177 --A INPUT -i eth0 -j limit-2465 --A INPUT -i eth0 -j limit-2466 --A INPUT -i eth0 -j limit-2467 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1181 --A INPUT -i eth0 -j limit-2469 --A INPUT -i eth0 -j limit-2470 --A INPUT -i eth0 -j limit-2471 --A INPUT -i eth0 -j limit-2472 --A INPUT -i eth0 -j limit-2473 --A INPUT -i eth0 -j limit-2474 --A INPUT -i eth0 -j limit-2475 --A INPUT -i eth0 -j limit-2476 --A INPUT -i eth0 -j limit-2477 --A INPUT -i eth0 -j limit-2478 --A INPUT -i eth0 -j limit-2479 --A INPUT -i eth0 -j limit-2480 --A INPUT -i eth0 -j limit-2481 --A INPUT -i eth0 -j limit-2482 --A INPUT -i eth0 -j limit-2483 --A INPUT -i eth0 -j limit-2484 --A INPUT -i eth0 -j limit-2485 --A INPUT -i eth0 -j limit-2486 --A INPUT -i eth0 -j limit-2487 --A INPUT -i eth0 -j limit-2488 --A INPUT -i eth0 -j limit-2489 --A INPUT -i eth0 -j limit-2490 --A INPUT -i eth0 -j limit-2491 --A INPUT -i eth0 -j limit-2492 --A INPUT -i eth0 -j limit-2493 --A INPUT -i eth0 -j limit-2494 --A INPUT -i eth0 -j limit-2495 --A INPUT -i eth0 -j limit-2496 --A INPUT -i eth0 -j limit-2497 --A INPUT -i eth0 -j limit-2498 --A INPUT -i eth0 -j limit-2499 --A INPUT -i eth0 -j limit-2500 --A INPUT -i eth0 -j limit-2501 --A INPUT -i eth0 -j limit-2502 --A INPUT -i eth0 -j limit-2503 --A INPUT -i eth0 -j limit-2504 --A INPUT -i eth0 -j limit-2505 --A INPUT -i eth0 -j limit-2506 --A INPUT -i eth0 -j limit-2507 --A INPUT -i eth0 -j limit-2508 --A INPUT -i eth0 -j limit-2509 --A INPUT -i eth0 -j limit-2510 --A INPUT -i eth0 -j limit-2511 --A INPUT -i eth0 -j limit-2512 --A INPUT -i eth0 -j limit-2513 --A INPUT -i eth0 -j limit-2514 --A INPUT -i eth0 -j limit-2515 --A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set --A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set --A INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set --A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A INPUT -j ACCEPT --A INPUT -j logdrop-1184 --A INPUT +-A INPUT -j logaccept-final-164 -A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -j logaccept-54 --A INPUT -j logdrop-1185 --A INPUT -j logpass-0 +-A INPUT -j logaccept-final-165 +-A INPUT -j logaccept-final-166 -A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -j logaccept-55 --A INPUT -j logdrop-1186 --A INPUT -j logpass-1 --A INPUT -i eth0 -j ACCEPT +-A INPUT -j logaccept-final-167 -A INPUT -j ACCEPT --A INPUT -p icmp -j icmp-routing --A OUTPUT -m recent --name user:B --rdest --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set --A OUTPUT -j limit-1886 --A OUTPUT -j limit-1885 --A OUTPUT -j limit-1884 --A OUTPUT -j limit-1883 --A OUTPUT -j limit-1882 --A OUTPUT -j limit-1881 --A OUTPUT -j limit-1880 --A OUTPUT -j limit-1879 --A OUTPUT -j limit-1878 --A OUTPUT -j limit-1877 --A OUTPUT -j limit-1876 --A OUTPUT -j limit-1875 --A OUTPUT -j limit-1874 --A OUTPUT -j limit-1873 --A OUTPUT -j limit-1872 --A OUTPUT -j limit-1871 --A OUTPUT -j limit-1870 --A OUTPUT -j limit-1869 --A OUTPUT -j limit-1868 --A OUTPUT -j limit-1867 --A OUTPUT -j limit-1866 --A OUTPUT -j limit-1865 --A OUTPUT -j limit-1864 --A OUTPUT -j limit-1863 --A OUTPUT -j limit-1862 --A OUTPUT -j limit-1861 --A OUTPUT -j limit-1860 --A OUTPUT -j limit-1859 --A OUTPUT -j limit-1858 --A OUTPUT -j limit-1857 --A OUTPUT -j limit-1856 --A OUTPUT -j limit-1855 --A OUTPUT -j limit-1854 --A OUTPUT -j limit-1853 --A OUTPUT -j limit-1852 --A OUTPUT -j limit-1851 --A OUTPUT -j limit-1850 --A OUTPUT -j limit-1849 --A OUTPUT -j limit-1848 --A OUTPUT -j limit-1847 --A OUTPUT -j limit-1846 --A OUTPUT -j limit-1845 --A OUTPUT -j limit-1844 --A OUTPUT -j limit-1843 --A OUTPUT -j limit-1842 --A OUTPUT -j limit-1841 --A OUTPUT -j limit-1840 --A OUTPUT -j limit-1839 --A OUTPUT -j limit-1838 --A OUTPUT -j limit-1837 --A OUTPUT -j limit-1836 --A OUTPUT -j limit-1835 --A OUTPUT -j limit-1834 --A OUTPUT -j limit-1833 --A OUTPUT -j limit-1832 --A OUTPUT -j limit-1831 --A OUTPUT -j limit-1830 --A OUTPUT -j limit-1829 --A OUTPUT -j limit-1828 --A OUTPUT -j limit-1827 --A OUTPUT -j limit-1826 --A OUTPUT -j limit-1825 --A OUTPUT -j limit-1824 --A OUTPUT -j limit-1823 --A OUTPUT -j limit-1822 --A OUTPUT -j limit-1821 --A OUTPUT -j limit-1820 --A OUTPUT -j limit-1819 --A OUTPUT -j limit-1818 --A OUTPUT -j limit-1817 --A OUTPUT -j limit-1816 --A OUTPUT -j limit-1815 --A OUTPUT -j limit-1814 --A OUTPUT -j limit-1813 --A OUTPUT -j limit-1812 --A OUTPUT -j limit-1811 --A OUTPUT -j limit-1810 --A OUTPUT -j limit-1809 --A OUTPUT -j limit-1808 --A OUTPUT -j limit-1807 --A OUTPUT -j limit-1806 --A OUTPUT -j limit-1805 --A OUTPUT -j limit-1804 --A OUTPUT -j limit-1803 --A OUTPUT -j limit-1802 --A OUTPUT -j limit-1801 --A OUTPUT -j limit-1800 --A OUTPUT -j limit-1799 --A OUTPUT -j limit-1798 --A OUTPUT -j limit-1797 --A OUTPUT -j limit-1796 --A OUTPUT -j limit-1795 --A OUTPUT -j limit-1794 --A OUTPUT -j limit-1793 --A OUTPUT -j limit-1792 --A OUTPUT -j limit-1791 --A OUTPUT -j limit-1790 --A OUTPUT -j limit-1789 --A OUTPUT -j limit-1788 --A OUTPUT -j limit-1787 --A OUTPUT -j limit-1786 --A OUTPUT -j limit-1785 --A OUTPUT -j limit-1784 --A OUTPUT -j limit-1783 --A OUTPUT -j limit-1782 --A OUTPUT -j limit-1781 --A OUTPUT -j limit-1780 --A OUTPUT -j limit-1779 --A OUTPUT -j limit-1778 --A OUTPUT -j limit-1777 --A OUTPUT -j limit-1776 --A OUTPUT -j limit-1775 --A OUTPUT -j limit-1774 --A OUTPUT -j limit-1773 --A OUTPUT -j limit-1772 --A OUTPUT -j limit-1771 --A OUTPUT -j limit-1770 --A OUTPUT -j limit-1769 --A OUTPUT -j limit-1768 --A OUTPUT -j limit-1767 --A OUTPUT -j limit-1766 --A OUTPUT -j limit-1765 --A OUTPUT -j limit-1764 --A OUTPUT -j limit-1763 --A OUTPUT -j limit-1762 --A OUTPUT -j limit-1761 --A OUTPUT -j limit-1760 --A OUTPUT -j limit-1759 --A OUTPUT -j limit-1758 --A OUTPUT -j limit-1757 --A OUTPUT -j limit-1756 --A OUTPUT -j limit-1755 --A OUTPUT -j limit-1754 --A OUTPUT -j limit-1753 --A OUTPUT -j limit-1752 --A OUTPUT -j limit-1751 --A OUTPUT -j limit-1750 --A OUTPUT -j limit-1749 --A OUTPUT -j limit-1748 --A OUTPUT -j limit-1747 --A OUTPUT -j limit-1746 --A OUTPUT -j limit-1745 --A OUTPUT -j limit-1744 --A OUTPUT -j limit-1743 --A OUTPUT -j limit-1742 --A OUTPUT -j limit-1741 --A OUTPUT -j limit-1740 --A OUTPUT -j limit-1739 --A OUTPUT -j limit-1738 --A OUTPUT -j limit-1737 --A OUTPUT -j limit-1736 --A OUTPUT -j limit-1735 --A OUTPUT -j limit-1734 --A OUTPUT -j limit-1733 --A OUTPUT -j limit-1732 --A OUTPUT -j limit-1731 --A OUTPUT -j limit-1730 --A OUTPUT -j limit-1729 --A OUTPUT -j limit-1728 --A OUTPUT -j limit-1727 --A OUTPUT -j limit-1726 --A OUTPUT -j limit-1725 --A OUTPUT -j limit-1724 --A OUTPUT -j limit-1723 --A OUTPUT -j limit-1722 --A OUTPUT -j limit-1721 --A OUTPUT -j limit-1720 --A OUTPUT -j limit-1719 --A OUTPUT -j limit-1718 --A OUTPUT -j limit-1717 --A OUTPUT -j limit-1716 --A OUTPUT -j limit-1715 --A OUTPUT -j limit-1714 --A OUTPUT -j limit-1713 --A OUTPUT -j limit-1712 --A OUTPUT -j limit-1711 --A OUTPUT -j limit-1710 --A OUTPUT -j limit-1709 --A OUTPUT -j limit-1708 --A OUTPUT -j limit-1707 --A OUTPUT -j limit-1706 --A OUTPUT -j limit-1705 --A OUTPUT -j limit-1704 --A OUTPUT -j limit-1703 --A OUTPUT -j limit-1702 --A OUTPUT -j limit-1701 --A OUTPUT -j limit-1700 --A OUTPUT -j limit-1699 --A OUTPUT -j limit-1698 --A OUTPUT -j limit-1697 --A OUTPUT -j limit-1696 --A OUTPUT -j limit-1695 --A OUTPUT -j limit-1694 --A OUTPUT -j limit-1693 --A OUTPUT -j limit-1692 --A OUTPUT -j limit-1691 --A OUTPUT -j limit-1690 --A OUTPUT -j limit-1689 --A OUTPUT -j limit-1688 --A OUTPUT -j limit-1687 --A OUTPUT -j limit-1686 --A OUTPUT -j limit-1685 --A OUTPUT -j limit-1684 --A OUTPUT -j limit-1683 --A OUTPUT -j limit-1682 --A OUTPUT -j limit-1681 --A OUTPUT -j limit-1680 --A OUTPUT -j limit-1679 --A OUTPUT -j limit-1678 --A OUTPUT -j limit-1677 --A OUTPUT -j limit-1676 --A OUTPUT -j limit-1675 --A OUTPUT -j limit-1674 --A OUTPUT -j limit-1673 --A OUTPUT -j limit-1672 --A OUTPUT -j limit-1671 --A OUTPUT -j limit-1670 --A OUTPUT -j limit-1669 --A OUTPUT -j limit-1668 --A OUTPUT -j limit-1667 --A OUTPUT -j limit-1666 --A OUTPUT -j limit-1665 --A OUTPUT -j limit-1664 --A OUTPUT -j limit-1663 --A OUTPUT -j limit-1662 --A OUTPUT -j limit-1661 --A OUTPUT -j limit-1660 --A OUTPUT -j limit-1659 --A OUTPUT -j limit-1658 --A OUTPUT -j limit-1657 --A OUTPUT -j limit-1656 --A OUTPUT -j limit-1655 --A OUTPUT -j limit-1654 --A OUTPUT -j limit-1653 --A OUTPUT -j limit-1652 --A OUTPUT -j limit-1651 --A OUTPUT -j limit-1650 --A OUTPUT -j limit-1649 --A OUTPUT -j limit-1648 --A OUTPUT -j limit-1647 --A OUTPUT -j limit-1646 --A OUTPUT -j limit-1645 --A OUTPUT -j limit-1644 --A OUTPUT -j limit-1643 --A OUTPUT -j limit-1642 --A OUTPUT -j limit-1641 --A OUTPUT -j limit-1640 --A OUTPUT -j limit-1639 --A OUTPUT -j limit-1638 --A OUTPUT -j limit-1637 --A OUTPUT -j limit-1636 --A OUTPUT -j limit-1635 --A OUTPUT -j limit-1634 --A OUTPUT -j limit-1633 --A OUTPUT -j limit-1632 --A OUTPUT -j limit-1631 --A OUTPUT -j limit-1630 --A OUTPUT -j limit-1629 --A OUTPUT -j limit-1628 --A OUTPUT -j limit-1627 --A OUTPUT -j limit-1626 --A OUTPUT -j limit-1625 --A OUTPUT -j limit-1624 --A OUTPUT -j limit-1623 --A OUTPUT -j limit-1622 --A OUTPUT -j limit-1621 --A OUTPUT -j limit-1620 --A OUTPUT -j limit-1619 --A OUTPUT -j limit-1618 --A OUTPUT -j limit-1617 --A OUTPUT -j limit-1616 --A OUTPUT -j limit-1615 --A OUTPUT -j limit-1614 --A OUTPUT -j limit-1613 --A OUTPUT -j limit-1612 --A OUTPUT -j limit-1611 --A OUTPUT -j limit-1610 --A OUTPUT -j limit-1609 --A OUTPUT -j limit-1608 --A OUTPUT -j limit-1607 --A OUTPUT -j limit-1606 --A OUTPUT -j limit-1605 --A OUTPUT -j limit-1604 --A OUTPUT -j limit-1603 --A OUTPUT -j limit-1602 --A OUTPUT -j limit-1601 --A OUTPUT -j limit-1600 --A OUTPUT -j limit-1599 --A OUTPUT -j limit-1598 --A OUTPUT -j limit-1597 --A OUTPUT -j limit-1596 --A OUTPUT -j limit-1595 --A OUTPUT -j limit-1594 --A OUTPUT -j limit-1593 --A OUTPUT -j limit-1592 --A OUTPUT -j limit-1591 --A OUTPUT -j limit-1590 --A OUTPUT -j limit-1589 --A OUTPUT -j limit-1588 --A OUTPUT -j limit-1587 --A OUTPUT -j limit-1586 --A OUTPUT -j limit-1585 --A OUTPUT -j limit-1584 --A OUTPUT -j limit-1583 --A OUTPUT -j limit-1582 --A OUTPUT -j limit-1581 --A OUTPUT -j limit-1580 --A OUTPUT -j limit-1579 --A OUTPUT -j limit-1578 --A OUTPUT -j limit-1577 --A OUTPUT -j limit-1576 --A OUTPUT -j limit-1575 --A OUTPUT -j limit-1574 --A OUTPUT -j limit-1573 --A OUTPUT -j limit-1572 --A OUTPUT -j limit-1571 --A OUTPUT -j limit-1570 --A OUTPUT -j limit-1569 --A OUTPUT -j limit-1568 --A OUTPUT -j limit-1567 --A OUTPUT -j limit-1566 --A OUTPUT -j limit-1565 --A OUTPUT -j limit-1564 --A OUTPUT -j limit-1563 --A OUTPUT -j limit-1562 --A OUTPUT -j limit-1561 --A OUTPUT -j limit-1560 --A OUTPUT -j limit-1559 --A OUTPUT -j limit-1558 --A OUTPUT -j limit-1557 --A OUTPUT -j limit-1556 --A OUTPUT -j limit-1555 --A OUTPUT -j limit-1554 --A OUTPUT -j limit-1553 --A OUTPUT -j limit-1552 --A OUTPUT -j limit-1551 --A OUTPUT -j limit-1550 --A OUTPUT -j limit-1549 --A OUTPUT -j limit-1548 --A OUTPUT -j limit-1547 --A OUTPUT -j limit-1546 --A OUTPUT -j limit-1545 --A OUTPUT -j limit-1544 --A OUTPUT -j limit-1543 --A OUTPUT -j limit-1542 --A OUTPUT -j limit-1541 --A OUTPUT -j limit-1540 --A OUTPUT -j limit-1539 --A OUTPUT -j limit-1538 --A OUTPUT -j limit-1537 --A OUTPUT -j limit-1536 --A OUTPUT -j limit-1535 --A OUTPUT -j limit-1534 --A OUTPUT -j limit-1533 --A OUTPUT -j limit-1532 --A OUTPUT -j limit-1531 --A OUTPUT -j limit-1530 --A OUTPUT -j limit-1529 --A OUTPUT -j limit-1528 --A OUTPUT -j limit-1527 --A OUTPUT -j limit-1526 --A OUTPUT -j limit-1525 --A OUTPUT -j limit-1524 --A OUTPUT -j limit-1523 --A OUTPUT -j limit-1522 --A OUTPUT -j limit-1521 --A OUTPUT -j limit-1520 --A OUTPUT -j limit-1519 --A OUTPUT -j limit-1518 --A OUTPUT -j limit-1517 --A OUTPUT -j limit-1516 --A OUTPUT -j limit-1515 --A OUTPUT -j limit-1514 --A OUTPUT -j limit-1513 --A OUTPUT -j limit-1512 --A OUTPUT -j limit-1511 --A OUTPUT -j limit-1510 --A OUTPUT -j limit-1509 --A OUTPUT -j limit-1508 --A OUTPUT -j limit-1507 --A OUTPUT -j limit-1506 --A OUTPUT -j limit-1505 --A OUTPUT -j limit-1504 --A OUTPUT -j limit-1503 --A OUTPUT -j limit-1502 --A OUTPUT -j limit-1501 --A OUTPUT -j limit-1500 --A OUTPUT -j limit-1499 --A OUTPUT -j limit-1498 --A OUTPUT -j limit-1497 --A OUTPUT -j limit-1496 --A OUTPUT -j limit-1495 --A OUTPUT -j limit-1494 --A OUTPUT -j limit-1493 --A OUTPUT -j limit-1492 --A OUTPUT -j limit-1491 --A OUTPUT -j limit-1490 --A OUTPUT -j limit-1489 --A OUTPUT -j limit-1488 --A OUTPUT -j limit-1487 --A OUTPUT -j limit-1486 --A OUTPUT -j limit-1485 --A OUTPUT -j limit-1484 --A OUTPUT -j limit-1483 --A OUTPUT -j limit-1482 --A OUTPUT -j limit-1481 --A OUTPUT -j limit-1480 --A OUTPUT -j limit-1479 --A OUTPUT -j limit-1478 --A OUTPUT -j limit-1477 --A OUTPUT -j limit-1476 --A OUTPUT -j limit-1475 --A OUTPUT -j limit-1474 --A OUTPUT -j limit-1473 --A OUTPUT -j limit-1472 --A OUTPUT -j limit-1471 --A OUTPUT -j limit-1470 --A OUTPUT -j limit-1469 --A OUTPUT -j limit-1468 --A OUTPUT -j limit-1467 --A OUTPUT -j limit-1466 --A OUTPUT -j limit-1465 --A OUTPUT -j limit-1464 --A OUTPUT -j limit-1463 --A OUTPUT -j limit-1462 --A OUTPUT -j limit-1461 --A OUTPUT -j limit-1460 --A OUTPUT -j limit-1459 --A OUTPUT -j limit-1458 --A OUTPUT -j limit-1457 --A OUTPUT -j limit-1456 --A OUTPUT -j limit-1455 --A OUTPUT -j limit-1454 --A OUTPUT -j limit-1453 --A OUTPUT -j limit-1452 --A OUTPUT -j limit-1451 --A OUTPUT -j limit-1450 --A OUTPUT -j limit-1449 --A OUTPUT -j limit-1448 --A OUTPUT -j limit-1447 --A OUTPUT -j limit-1446 --A OUTPUT -j limit-1445 --A OUTPUT -j limit-1444 --A OUTPUT -j limit-1443 --A OUTPUT -j limit-1442 --A OUTPUT -j limit-1441 --A OUTPUT -j limit-1440 --A OUTPUT -j limit-1439 --A OUTPUT -j limit-1438 --A OUTPUT -j limit-1437 --A OUTPUT -j limit-1436 --A OUTPUT -j limit-1435 --A OUTPUT -j limit-1434 --A OUTPUT -j limit-1433 --A OUTPUT -j limit-1432 --A OUTPUT -j limit-1431 --A OUTPUT -j limit-1430 --A OUTPUT -j limit-1429 --A OUTPUT -j limit-1428 --A OUTPUT -j limit-1427 --A OUTPUT -j limit-1426 --A OUTPUT -j limit-1425 --A OUTPUT -j limit-1424 --A OUTPUT -j limit-1423 --A OUTPUT -j limit-1422 --A OUTPUT -j limit-1421 --A OUTPUT -j limit-1420 --A OUTPUT -j limit-1419 --A OUTPUT -j limit-1418 --A OUTPUT -j limit-1417 --A OUTPUT -j limit-1416 --A OUTPUT -j limit-1415 --A OUTPUT -j limit-1414 --A OUTPUT -j limit-1413 --A OUTPUT -j limit-1412 --A OUTPUT -j limit-1411 --A OUTPUT -j limit-1410 --A OUTPUT -j limit-1409 --A OUTPUT -j limit-1408 --A OUTPUT -j limit-1407 --A OUTPUT -j limit-1406 --A OUTPUT -j limit-1405 --A OUTPUT -j limit-1404 --A OUTPUT -j limit-1403 --A OUTPUT -j limit-1402 --A OUTPUT -j limit-1401 --A OUTPUT -j limit-1400 --A OUTPUT -j limit-1399 --A OUTPUT -j limit-1398 --A OUTPUT -j limit-1397 --A OUTPUT -j limit-1396 --A OUTPUT -j limit-1395 --A OUTPUT -j limit-1394 --A OUTPUT -j limit-1393 --A OUTPUT -j limit-1392 --A OUTPUT -j limit-1391 --A OUTPUT -j limit-1390 --A OUTPUT -j limit-1389 --A OUTPUT -j limit-1388 --A OUTPUT -j limit-1387 --A OUTPUT -j limit-1386 --A OUTPUT -j limit-1385 --A OUTPUT -j limit-1384 --A OUTPUT -j limit-1383 --A OUTPUT -j limit-1382 --A OUTPUT -j limit-1381 --A OUTPUT -j limit-1380 --A OUTPUT -j limit-1379 --A OUTPUT -j limit-1378 --A OUTPUT -j limit-1377 --A OUTPUT -j limit-1376 --A OUTPUT -j limit-1375 --A OUTPUT -j limit-1374 --A OUTPUT -j limit-1373 --A OUTPUT -j limit-1372 --A OUTPUT -j limit-1371 --A OUTPUT -j limit-1370 --A OUTPUT -j limit-1369 --A OUTPUT -j limit-1368 --A OUTPUT -j limit-1367 --A OUTPUT -j limit-1366 --A OUTPUT -j limit-1365 --A OUTPUT -j limit-1364 --A OUTPUT -j limit-1363 --A OUTPUT -j limit-1362 --A OUTPUT -j limit-1361 --A OUTPUT -j limit-1360 --A OUTPUT -j limit-1359 --A OUTPUT -j limit-1358 --A OUTPUT -j limit-1357 --A OUTPUT -j limit-1356 --A OUTPUT -j limit-1355 --A OUTPUT -j limit-1354 --A OUTPUT -j limit-1353 --A OUTPUT -j limit-1352 --A OUTPUT -j limit-1351 --A OUTPUT -j limit-1350 --A OUTPUT -j limit-1349 --A OUTPUT -j limit-1348 --A OUTPUT -j limit-1347 --A OUTPUT -j limit-1346 --A OUTPUT -j limit-1345 --A OUTPUT -j limit-1344 --A OUTPUT -j limit-1343 --A OUTPUT -j limit-1342 --A OUTPUT -j limit-1341 --A OUTPUT -j limit-1340 --A OUTPUT -j limit-1339 --A OUTPUT -j limit-1338 --A OUTPUT -j limit-1337 --A OUTPUT -j limit-1336 --A OUTPUT -j limit-1335 --A OUTPUT -j limit-1334 --A OUTPUT -j limit-1333 --A OUTPUT -j limit-1332 --A OUTPUT -j limit-1331 --A OUTPUT -j limit-1330 --A OUTPUT -j limit-1329 --A OUTPUT -j limit-1328 --A OUTPUT -j limit-1327 --A OUTPUT -j limit-1326 --A OUTPUT -j limit-1325 --A OUTPUT -j limit-1324 --A OUTPUT -j limit-1323 --A OUTPUT -j limit-1322 --A OUTPUT -j limit-1321 --A OUTPUT -j limit-1320 --A OUTPUT -j limit-1319 --A OUTPUT -j limit-1318 --A OUTPUT -j limit-1317 --A OUTPUT -j limit-1316 --A OUTPUT -j limit-1315 --A OUTPUT -j limit-1314 --A OUTPUT -j limit-1313 --A OUTPUT -j limit-1312 --A OUTPUT -j limit-1311 --A OUTPUT -j limit-1310 --A OUTPUT -j limit-1309 --A OUTPUT -j limit-1308 --A OUTPUT -j limit-1307 --A OUTPUT -j limit-1306 --A OUTPUT -j limit-1305 --A OUTPUT -j limit-1304 --A OUTPUT -j limit-1303 --A OUTPUT -j limit-1302 --A OUTPUT -j limit-1301 --A OUTPUT -j limit-1300 --A OUTPUT -j limit-1299 --A OUTPUT -j limit-1298 --A OUTPUT -j limit-1297 --A OUTPUT -j limit-1296 --A OUTPUT -j limit-1295 --A OUTPUT -j limit-1294 --A OUTPUT -j limit-1293 --A OUTPUT -j limit-1292 --A OUTPUT -j limit-1291 --A OUTPUT -j limit-1290 --A OUTPUT -j limit-1289 --A OUTPUT -j limit-1288 --A OUTPUT -j limit-1287 --A OUTPUT -j limit-1286 --A OUTPUT -j limit-1285 --A OUTPUT -j limit-1284 --A OUTPUT -j limit-1283 --A OUTPUT -j limit-1282 --A OUTPUT -j limit-1281 --A OUTPUT -j limit-1280 --A OUTPUT -j limit-1279 --A OUTPUT -j limit-1278 --A OUTPUT -j limit-1277 --A OUTPUT -j limit-1276 --A OUTPUT -j limit-1275 --A OUTPUT -j limit-1274 --A OUTPUT -j limit-1273 --A OUTPUT -j limit-1272 --A OUTPUT -j limit-1271 --A OUTPUT -j limit-1270 --A OUTPUT -j limit-1269 --A OUTPUT -j limit-1268 --A OUTPUT -j limit-1267 --A OUTPUT -j limit-1266 --A OUTPUT -j limit-1265 --A OUTPUT -j limit-1264 --A OUTPUT -j limit-1263 --A OUTPUT -j limit-1262 --A OUTPUT -j limit-1261 --A OUTPUT -j limit-1260 --A OUTPUT -j limit-1259 --A OUTPUT -j limit-1258 +-A INPUT -j logaccept-final-168 +-A INPUT -j logaccept-final-169 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-170 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-171 +-A INPUT -j logaccept-final-172 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-173 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-174 +-A INPUT -j logaccept-final-175 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-176 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-177 +-A INPUT -j logaccept-final-178 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-179 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-180 +-A INPUT -j logaccept-final-181 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-182 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-183 +-A INPUT -j logaccept-final-184 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-185 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-186 +-A INPUT -j logaccept-final-187 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-188 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-189 +-A INPUT -j logaccept-final-190 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-191 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-192 +-A INPUT -j logaccept-final-193 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-194 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-195 +-A INPUT -j logaccept-final-196 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-197 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-198 +-A INPUT -j logaccept-final-199 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-200 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-201 +-A INPUT -j logaccept-final-202 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-203 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-204 +-A INPUT -j logaccept-final-205 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-206 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-207 +-A INPUT -j logaccept-final-208 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-209 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-210 +-A INPUT -j logaccept-final-211 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-212 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-213 +-A INPUT -j logaccept-final-214 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-215 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-216 +-A INPUT -j logaccept-final-217 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-218 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-219 +-A INPUT -j logaccept-final-220 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-221 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-222 +-A INPUT -j logaccept-final-223 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-224 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-225 +-A INPUT -j logaccept-final-226 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-227 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-228 +-A INPUT -j logaccept-final-229 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-230 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-231 +-A INPUT -j logaccept-final-232 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-233 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-234 +-A INPUT -j logaccept-final-235 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-236 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-237 +-A INPUT -j logaccept-final-238 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-239 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-240 +-A INPUT -j logaccept-final-241 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-242 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-243 +-A INPUT -j logaccept-final-244 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-245 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-246 +-A INPUT -j logaccept-final-247 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-248 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-249 +-A INPUT -j logaccept-final-250 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-251 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-252 +-A INPUT -j logaccept-final-253 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-254 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-255 +-A INPUT -j logaccept-final-256 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-257 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-258 +-A INPUT -j logaccept-final-259 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-260 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-261 +-A INPUT -j logaccept-final-262 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-263 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-264 +-A INPUT -j logaccept-final-265 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-266 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-267 +-A INPUT -j logaccept-final-268 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-269 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-270 +-A INPUT -j logaccept-final-271 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-272 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-273 +-A INPUT -j logaccept-final-274 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-275 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-276 +-A INPUT -j logaccept-final-277 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-278 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-279 +-A INPUT -j logaccept-final-280 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-281 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-282 +-A INPUT -j logaccept-final-283 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-284 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-285 +-A INPUT -j logaccept-final-286 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-287 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-288 +-A INPUT -j logaccept-final-289 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-290 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-291 +-A INPUT -j logaccept-final-292 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-293 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-294 +-A INPUT -j logaccept-final-295 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-296 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-297 +-A INPUT -j logaccept-final-298 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-299 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-300 +-A INPUT -j logaccept-final-301 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-302 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-303 +-A INPUT -j logaccept-final-304 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-305 +-A INPUT -i eth0 -j limit-2928 +-A INPUT -i eth0 -j limit-2929 +-A INPUT -i eth0 -j limit-2930 +-A INPUT -i eth0 -j limit-2931 +-A INPUT -i eth0 -j limit-2932 +-A INPUT -i eth0 -j limit-2933 +-A INPUT -i eth0 -j limit-2934 +-A INPUT -i eth0 -j limit-2935 +-A INPUT -i eth0 -j limit-2936 +-A INPUT -i eth0 -j limit-2937 +-A INPUT -i eth0 -j limit-2938 +-A INPUT -i eth0 -j limit-2939 +-A INPUT -i eth0 -j limit-2940 +-A INPUT -i eth0 -j limit-2941 +-A INPUT -i eth0 -j limit-2942 +-A INPUT -i eth0 -j limit-2943 +-A INPUT -i eth0 -j limit-2944 +-A INPUT -i eth0 -j limit-2945 +-A INPUT -i eth0 -j limit-2946 +-A INPUT -i eth0 -j limit-2947 +-A INPUT -i eth0 -j limit-2948 +-A INPUT -i eth0 -j limit-2949 +-A INPUT -i eth0 -j limit-2950 +-A INPUT -i eth0 -j limit-2951 +-A INPUT -i eth0 -j limit-2952 +-A INPUT -i eth0 -j limit-2953 +-A INPUT -i eth0 -j limit-2954 +-A INPUT -i eth0 -j limit-2955 +-A INPUT -i eth0 -j limit-2956 +-A INPUT -i eth0 -j limit-2957 +-A INPUT -i eth0 -j limit-2958 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-2960 +-A INPUT -i eth0 -j limit-2961 +-A INPUT -i eth0 -j limit-2962 +-A INPUT -i eth0 -j limit-2963 +-A INPUT -i eth0 -j limit-2964 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-2966 +-A INPUT -i eth0 -j limit-2967 +-A INPUT -i eth0 -j limit-2968 +-A INPUT -i eth0 -j limit-2969 +-A INPUT -i eth0 -j limit-2970 +-A INPUT -i eth0 -j limit-2971 +-A INPUT -i eth0 -j limit-2972 +-A INPUT -i eth0 -j limit-2973 +-A INPUT -i eth0 -j limit-2974 +-A INPUT -i eth0 -j limit-2975 +-A INPUT -i eth0 -j limit-2976 +-A INPUT -i eth0 -j limit-2977 +-A INPUT -i eth0 -j limit-2978 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-2980 +-A INPUT -i eth0 -j limit-2981 +-A INPUT -i eth0 -j limit-2982 +-A INPUT -i eth0 -j limit-2983 +-A INPUT -i eth0 -j limit-2984 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-2986 +-A INPUT -i eth0 -j limit-2987 +-A INPUT -i eth0 -j limit-2988 +-A INPUT -i eth0 -j limit-2989 +-A INPUT -i eth0 -j limit-2990 +-A INPUT -i eth0 -j limit-2991 +-A INPUT -i eth0 -j limit-2992 +-A INPUT -i eth0 -j limit-2993 +-A INPUT -i eth0 -j limit-2994 +-A INPUT -i eth0 -j limit-2995 +-A INPUT -i eth0 -j limit-2996 +-A INPUT -i eth0 -j limit-2997 +-A INPUT -i eth0 -j limit-2998 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3000 +-A INPUT -i eth0 -j limit-3001 +-A INPUT -i eth0 -j limit-3002 +-A INPUT -i eth0 -j limit-3003 +-A INPUT -i eth0 -j limit-3004 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3006 +-A INPUT -i eth0 -j limit-3007 +-A INPUT -i eth0 -j limit-3008 +-A INPUT -i eth0 -j limit-3009 +-A INPUT -i eth0 -j limit-3010 +-A INPUT -i eth0 -j limit-3011 +-A INPUT -i eth0 -j limit-3012 +-A INPUT -i eth0 -j limit-3013 +-A INPUT -i eth0 -j limit-3014 +-A INPUT -i eth0 -j limit-3015 +-A INPUT -i eth0 -j limit-3016 +-A INPUT -i eth0 -j limit-3017 +-A INPUT -i eth0 -j limit-3018 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3020 +-A INPUT -i eth0 -j limit-3021 +-A INPUT -i eth0 -j limit-3022 +-A INPUT -i eth0 -j limit-3023 +-A INPUT -i eth0 -j limit-3024 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3026 +-A INPUT -i eth0 -j limit-3027 +-A INPUT -i eth0 -j limit-3028 +-A INPUT -i eth0 -j limit-3029 +-A INPUT -i eth0 -j limit-3030 +-A INPUT -i eth0 -j limit-3031 +-A INPUT -i eth0 -j limit-3032 +-A INPUT -i eth0 -j limit-3033 +-A INPUT -i eth0 -j limit-3034 +-A INPUT -i eth0 -j limit-3035 +-A INPUT -i eth0 -j limit-3036 +-A INPUT -i eth0 -j limit-3037 +-A INPUT -i eth0 -j limit-3038 +-A INPUT -i eth0 -j limit-3039 +-A INPUT -i eth0 -j limit-3040 +-A INPUT -i eth0 -j limit-3041 +-A INPUT -i eth0 -j limit-3042 +-A INPUT -i eth0 -j limit-3043 +-A INPUT -i eth0 -j limit-3044 +-A INPUT -i eth0 -j limit-3045 +-A INPUT -i eth0 -j limit-3046 +-A INPUT -i eth0 -j limit-3047 +-A INPUT -i eth0 -j limit-3048 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 +-A INPUT -i eth0 -j limit-3050 +-A INPUT -i eth0 -j limit-3051 +-A INPUT -i eth0 -j limit-3052 +-A INPUT -i eth0 -j limit-3053 +-A INPUT -i eth0 -j limit-3054 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 +-A INPUT -i eth0 -j limit-3056 +-A INPUT -i eth0 -j limit-3057 +-A INPUT -i eth0 -j limit-3058 +-A INPUT -i eth0 -j limit-3059 +-A INPUT -i eth0 -j limit-3060 +-A INPUT -i eth0 -j limit-3061 +-A INPUT -i eth0 -j limit-3062 +-A INPUT -i eth0 -j limit-3063 +-A INPUT -i eth0 -j limit-3064 +-A INPUT -i eth0 -j limit-3065 +-A INPUT -i eth0 -j limit-3066 +-A INPUT -i eth0 -j limit-3067 +-A INPUT -i eth0 -j limit-3068 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 +-A INPUT -i eth0 -j limit-3070 +-A INPUT -i eth0 -j limit-3071 +-A INPUT -i eth0 -j limit-3072 +-A INPUT -i eth0 -j limit-3073 +-A INPUT -i eth0 -j limit-3074 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 +-A INPUT -i eth0 -j limit-3076 +-A INPUT -i eth0 -j limit-3077 +-A INPUT -i eth0 -j limit-3078 +-A INPUT -i eth0 -j limit-3079 +-A INPUT -i eth0 -j limit-3080 +-A INPUT -i eth0 -j limit-3081 +-A INPUT -i eth0 -j limit-3082 +-A INPUT -i eth0 -j limit-3083 +-A INPUT -i eth0 -j limit-3084 +-A INPUT -i eth0 -j limit-3085 +-A INPUT -i eth0 -j limit-3086 +-A INPUT -i eth0 -j limit-3087 +-A INPUT -i eth0 -j limit-3088 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 +-A INPUT -i eth0 -j limit-3090 +-A INPUT -i eth0 -j limit-3091 +-A INPUT -i eth0 -j limit-3092 +-A INPUT -i eth0 -j limit-3093 +-A INPUT -i eth0 -j limit-3094 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 +-A INPUT -i eth0 -j limit-3096 +-A INPUT -i eth0 -j limit-3097 +-A INPUT -i eth0 -j limit-3098 +-A INPUT -i eth0 -j limit-3099 +-A INPUT -i eth0 -j limit-3100 +-A INPUT -i eth0 -j limit-3101 +-A INPUT -i eth0 -j limit-3102 +-A INPUT -i eth0 -j limit-3103 +-A INPUT -i eth0 -j limit-3104 +-A INPUT -i eth0 -j limit-3105 +-A INPUT -i eth0 -j limit-3106 +-A INPUT -i eth0 -j limit-3107 +-A INPUT -i eth0 -j limit-3108 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 +-A INPUT -i eth0 -j limit-3110 +-A INPUT -i eth0 -j limit-3111 +-A INPUT -i eth0 -j limit-3112 +-A INPUT -i eth0 -j limit-3113 +-A INPUT -i eth0 -j limit-3114 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 +-A INPUT -i eth0 -j limit-3116 +-A INPUT -i eth0 -j limit-3117 +-A INPUT -i eth0 -j limit-3118 +-A INPUT -i eth0 -j limit-3119 +-A INPUT -i eth0 -j limit-3120 +-A INPUT -i eth0 -j limit-3121 +-A INPUT -i eth0 -j limit-3122 +-A INPUT -i eth0 -j limit-3123 +-A INPUT -i eth0 -j limit-3124 +-A INPUT -i eth0 -j limit-3125 +-A INPUT -i eth0 -j limit-3126 +-A INPUT -i eth0 -j limit-3127 +-A INPUT -i eth0 -j limit-3128 +-A INPUT -i eth0 -j limit-3129 +-A INPUT -i eth0 -j limit-3130 +-A INPUT -i eth0 -j limit-3131 +-A INPUT -i eth0 -j limit-3132 +-A INPUT -i eth0 -j limit-3133 +-A INPUT -i eth0 -j limit-3134 +-A INPUT -i eth0 -j limit-3135 +-A INPUT -i eth0 -j limit-3136 +-A INPUT -i eth0 -j limit-3137 +-A INPUT -i eth0 -j limit-3138 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 +-A INPUT -i eth0 -j limit-3140 +-A INPUT -i eth0 -j limit-3141 +-A INPUT -i eth0 -j limit-3142 +-A INPUT -i eth0 -j limit-3143 +-A INPUT -i eth0 -j limit-3144 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 +-A INPUT -i eth0 -j limit-3146 +-A INPUT -i eth0 -j limit-3147 +-A INPUT -i eth0 -j limit-3148 +-A INPUT -i eth0 -j limit-3149 +-A INPUT -i eth0 -j limit-3150 +-A INPUT -i eth0 -j limit-3151 +-A INPUT -i eth0 -j limit-3152 +-A INPUT -i eth0 -j limit-3153 +-A INPUT -i eth0 -j limit-3154 +-A INPUT -i eth0 -j limit-3155 +-A INPUT -i eth0 -j limit-3156 +-A INPUT -i eth0 -j limit-3157 +-A INPUT -i eth0 -j limit-3158 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 +-A INPUT -i eth0 -j limit-3160 +-A INPUT -i eth0 -j limit-3161 +-A INPUT -i eth0 -j limit-3162 +-A INPUT -i eth0 -j limit-3163 +-A INPUT -i eth0 -j limit-3164 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 +-A INPUT -i eth0 -j limit-3166 +-A INPUT -i eth0 -j limit-3167 +-A INPUT -i eth0 -j limit-3168 +-A INPUT -i eth0 -j limit-3169 +-A INPUT -i eth0 -j limit-3170 +-A INPUT -i eth0 -j limit-3171 +-A INPUT -i eth0 -j limit-3172 +-A INPUT -i eth0 -j limit-3173 +-A INPUT -i eth0 -j limit-3174 +-A INPUT -i eth0 -j limit-3175 +-A INPUT -i eth0 -j limit-3176 +-A INPUT -i eth0 -j limit-3177 +-A INPUT -i eth0 -j limit-3178 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 +-A INPUT -i eth0 -j limit-3180 +-A INPUT -i eth0 -j limit-3181 +-A INPUT -i eth0 -j limit-3182 +-A INPUT -i eth0 -j limit-3183 +-A INPUT -i eth0 -j limit-3184 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 +-A INPUT -i eth0 -j limit-3186 +-A INPUT -i eth0 -j limit-3187 +-A INPUT -i eth0 -j limit-3188 +-A INPUT -i eth0 -j limit-3189 +-A INPUT -i eth0 -j limit-3190 +-A INPUT -i eth0 -j limit-3191 +-A INPUT -i eth0 -j limit-3192 +-A INPUT -i eth0 -j limit-3193 +-A INPUT -i eth0 -j limit-3194 +-A INPUT -i eth0 -j limit-3195 +-A INPUT -i eth0 -j limit-3196 +-A INPUT -i eth0 -j limit-3197 +-A INPUT -i eth0 -j limit-3198 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 +-A INPUT -i eth0 -j limit-3200 +-A INPUT -i eth0 -j limit-3201 +-A INPUT -i eth0 -j limit-3202 +-A INPUT -i eth0 -j limit-3203 +-A INPUT -i eth0 -j limit-3204 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 +-A INPUT -i eth0 -j limit-3206 +-A INPUT -i eth0 -j limit-3207 +-A INPUT -i eth0 -j limit-3208 +-A INPUT -i eth0 -j limit-3209 +-A INPUT -i eth0 -j limit-3210 +-A INPUT -i eth0 -j limit-3211 +-A INPUT -i eth0 -j limit-3212 +-A INPUT -i eth0 -j limit-3213 +-A INPUT -i eth0 -j limit-3214 +-A INPUT -i eth0 -j limit-3215 +-A INPUT -i eth0 -j limit-3216 +-A INPUT -i eth0 -j limit-3217 +-A INPUT -i eth0 -j limit-3218 +-A INPUT -i eth0 -j limit-3219 +-A INPUT -i eth0 -j limit-3220 +-A INPUT -i eth0 -j limit-3221 +-A INPUT -i eth0 -j limit-3222 +-A INPUT -i eth0 -j limit-3223 +-A INPUT -i eth0 -j limit-3224 +-A INPUT -i eth0 -j limit-3225 +-A INPUT -i eth0 -j limit-3226 +-A INPUT -i eth0 -j limit-3227 +-A INPUT -i eth0 -j limit-3228 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3230 +-A INPUT -i eth0 -j limit-3231 +-A INPUT -i eth0 -j limit-3232 +-A INPUT -i eth0 -j limit-3233 +-A INPUT -i eth0 -j limit-3234 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3236 +-A INPUT -i eth0 -j limit-3237 +-A INPUT -i eth0 -j limit-3238 +-A INPUT -i eth0 -j limit-3239 +-A INPUT -i eth0 -j limit-3240 +-A INPUT -i eth0 -j limit-3241 +-A INPUT -i eth0 -j limit-3242 +-A INPUT -i eth0 -j limit-3243 +-A INPUT -i eth0 -j limit-3244 +-A INPUT -i eth0 -j limit-3245 +-A INPUT -i eth0 -j limit-3246 +-A INPUT -i eth0 -j limit-3247 +-A INPUT -i eth0 -j limit-3248 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3250 +-A INPUT -i eth0 -j limit-3251 +-A INPUT -i eth0 -j limit-3252 +-A INPUT -i eth0 -j limit-3253 +-A INPUT -i eth0 -j limit-3254 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3256 +-A INPUT -i eth0 -j limit-3257 +-A INPUT -i eth0 -j limit-3258 +-A INPUT -i eth0 -j limit-3259 +-A INPUT -i eth0 -j limit-3260 +-A INPUT -i eth0 -j limit-3261 +-A INPUT -i eth0 -j limit-3262 +-A INPUT -i eth0 -j limit-3263 +-A INPUT -i eth0 -j limit-3264 +-A INPUT -i eth0 -j limit-3265 +-A INPUT -i eth0 -j limit-3266 +-A INPUT -i eth0 -j limit-3267 +-A INPUT -i eth0 -j limit-3268 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3270 +-A INPUT -i eth0 -j limit-3271 +-A INPUT -i eth0 -j limit-3272 +-A INPUT -i eth0 -j limit-3273 +-A INPUT -i eth0 -j limit-3274 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3276 +-A INPUT -i eth0 -j limit-3277 +-A INPUT -i eth0 -j limit-3278 +-A INPUT -i eth0 -j limit-3279 +-A INPUT -i eth0 -j limit-3280 +-A INPUT -i eth0 -j limit-3281 +-A INPUT -i eth0 -j limit-3282 +-A INPUT -i eth0 -j limit-3283 +-A INPUT -i eth0 -j limit-3284 +-A INPUT -i eth0 -j limit-3285 +-A INPUT -i eth0 -j limit-3286 +-A INPUT -i eth0 -j limit-3287 +-A INPUT -i eth0 -j limit-3288 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3290 +-A INPUT -i eth0 -j limit-3291 +-A INPUT -i eth0 -j limit-3292 +-A INPUT -i eth0 -j limit-3293 +-A INPUT -i eth0 -j limit-3294 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3296 +-A INPUT -i eth0 -j limit-3297 +-A INPUT -i eth0 -j limit-3298 +-A INPUT -i eth0 -j limit-3299 +-A INPUT -i eth0 -j limit-3300 +-A INPUT -i eth0 -j limit-3301 +-A INPUT -i eth0 -j limit-3302 +-A INPUT -i eth0 -j limit-3303 +-A INPUT -i eth0 -j limit-3304 +-A INPUT -i eth0 -j limit-3305 +-A INPUT -i eth0 -j limit-3306 +-A INPUT -i eth0 -j limit-3307 +-A INPUT -i eth0 -j limit-3308 +-A INPUT -i eth0 -j limit-3309 +-A INPUT -i eth0 -j limit-3310 +-A INPUT -i eth0 -j limit-3311 +-A INPUT -i eth0 -j limit-3312 +-A INPUT -i eth0 -j limit-3313 +-A INPUT -i eth0 -j limit-3314 +-A INPUT -i eth0 -j limit-3315 +-A INPUT -i eth0 -j limit-3316 +-A INPUT -i eth0 -j limit-3317 +-A INPUT -i eth0 -j limit-3318 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 +-A INPUT -i eth0 -j limit-3320 +-A INPUT -i eth0 -j limit-3321 +-A INPUT -i eth0 -j limit-3322 +-A INPUT -i eth0 -j limit-3323 +-A INPUT -i eth0 -j limit-3324 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 +-A INPUT -i eth0 -j limit-3326 +-A INPUT -i eth0 -j limit-3327 +-A INPUT -i eth0 -j limit-3328 +-A INPUT -i eth0 -j limit-3329 +-A INPUT -i eth0 -j limit-3330 +-A INPUT -i eth0 -j limit-3331 +-A INPUT -i eth0 -j limit-3332 +-A INPUT -i eth0 -j limit-3333 +-A INPUT -i eth0 -j limit-3334 +-A INPUT -i eth0 -j limit-3335 +-A INPUT -i eth0 -j limit-3336 +-A INPUT -i eth0 -j limit-3337 +-A INPUT -i eth0 -j limit-3338 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 +-A INPUT -i eth0 -j limit-3340 +-A INPUT -i eth0 -j limit-3341 +-A INPUT -i eth0 -j limit-3342 +-A INPUT -i eth0 -j limit-3343 +-A INPUT -i eth0 -j limit-3344 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 +-A INPUT -i eth0 -j limit-3346 +-A INPUT -i eth0 -j limit-3347 +-A INPUT -i eth0 -j limit-3348 +-A INPUT -i eth0 -j limit-3349 +-A INPUT -i eth0 -j limit-3350 +-A INPUT -i eth0 -j limit-3351 +-A INPUT -i eth0 -j limit-3352 +-A INPUT -i eth0 -j limit-3353 +-A INPUT -i eth0 -j limit-3354 +-A INPUT -i eth0 -j limit-3355 +-A INPUT -i eth0 -j limit-3356 +-A INPUT -i eth0 -j limit-3357 +-A INPUT -i eth0 -j limit-3358 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 +-A INPUT -i eth0 -j limit-3360 +-A INPUT -i eth0 -j limit-3361 +-A INPUT -i eth0 -j limit-3362 +-A INPUT -i eth0 -j limit-3363 +-A INPUT -i eth0 -j limit-3364 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 +-A INPUT -i eth0 -j limit-3366 +-A INPUT -i eth0 -j limit-3367 +-A INPUT -i eth0 -j limit-3368 +-A INPUT -i eth0 -j limit-3369 +-A INPUT -i eth0 -j limit-3370 +-A INPUT -i eth0 -j limit-3371 +-A INPUT -i eth0 -j limit-3372 +-A INPUT -i eth0 -j limit-3373 +-A INPUT -i eth0 -j limit-3374 +-A INPUT -i eth0 -j limit-3375 +-A INPUT -i eth0 -j limit-3376 +-A INPUT -i eth0 -j limit-3377 +-A INPUT -i eth0 -j limit-3378 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 +-A INPUT -i eth0 -j limit-3380 +-A INPUT -i eth0 -j limit-3381 +-A INPUT -i eth0 -j limit-3382 +-A INPUT -i eth0 -j limit-3383 +-A INPUT -i eth0 -j limit-3384 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 +-A INPUT -i eth0 -j limit-3386 +-A INPUT -i eth0 -j limit-3387 +-A INPUT -i eth0 -j limit-3388 +-A INPUT -i eth0 -j limit-3389 +-A INPUT -i eth0 -j limit-3390 +-A INPUT -i eth0 -j limit-3391 +-A INPUT -i eth0 -j limit-3392 +-A INPUT -i eth0 -j limit-3393 +-A INPUT -i eth0 -j limit-3394 +-A INPUT -i eth0 -j limit-3395 +-A INPUT -i eth0 -j limit-3396 +-A INPUT -i eth0 -j limit-3397 +-A INPUT -i eth0 -j limit-3398 +-A INPUT -i eth0 -j limit-3399 +-A INPUT -i eth0 -j limit-3400 +-A INPUT -i eth0 -j limit-3401 +-A INPUT -i eth0 -j limit-3402 +-A INPUT -i eth0 -j limit-3403 +-A INPUT -i eth0 -j limit-3404 +-A INPUT -i eth0 -j limit-3405 +-A INPUT -i eth0 -j limit-3406 +-A INPUT -i eth0 -j limit-3407 +-A INPUT -i eth0 -j limit-3408 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3410 +-A INPUT -i eth0 -j limit-3411 +-A INPUT -i eth0 -j limit-3412 +-A INPUT -i eth0 -j limit-3413 +-A INPUT -i eth0 -j limit-3414 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3416 +-A INPUT -i eth0 -j limit-3417 +-A INPUT -i eth0 -j limit-3418 +-A INPUT -i eth0 -j limit-3419 +-A INPUT -i eth0 -j limit-3420 +-A INPUT -i eth0 -j limit-3421 +-A INPUT -i eth0 -j limit-3422 +-A INPUT -i eth0 -j limit-3423 +-A INPUT -i eth0 -j limit-3424 +-A INPUT -i eth0 -j limit-3425 +-A INPUT -i eth0 -j limit-3426 +-A INPUT -i eth0 -j limit-3427 +-A INPUT -i eth0 -j limit-3428 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3430 +-A INPUT -i eth0 -j limit-3431 +-A INPUT -i eth0 -j limit-3432 +-A INPUT -i eth0 -j limit-3433 +-A INPUT -i eth0 -j limit-3434 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3436 +-A INPUT -i eth0 -j limit-3437 +-A INPUT -i eth0 -j limit-3438 +-A INPUT -i eth0 -j limit-3439 +-A INPUT -i eth0 -j limit-3440 +-A INPUT -i eth0 -j limit-3441 +-A INPUT -i eth0 -j limit-3442 +-A INPUT -i eth0 -j limit-3443 +-A INPUT -i eth0 -j limit-3444 +-A INPUT -i eth0 -j limit-3445 +-A INPUT -i eth0 -j limit-3446 +-A INPUT -i eth0 -j limit-3447 +-A INPUT -i eth0 -j limit-3448 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3450 +-A INPUT -i eth0 -j limit-3451 +-A INPUT -i eth0 -j limit-3452 +-A INPUT -i eth0 -j limit-3453 +-A INPUT -i eth0 -j limit-3454 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3456 +-A INPUT -i eth0 -j limit-3457 +-A INPUT -i eth0 -j limit-3458 +-A INPUT -i eth0 -j limit-3459 +-A INPUT -i eth0 -j limit-3460 +-A INPUT -i eth0 -j limit-3461 +-A INPUT -i eth0 -j limit-3462 +-A INPUT -i eth0 -j limit-3463 +-A INPUT -i eth0 -j limit-3464 +-A INPUT -i eth0 -j limit-3465 +-A INPUT -i eth0 -j limit-3466 +-A INPUT -i eth0 -j limit-3467 +-A INPUT -i eth0 -j limit-3468 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3470 +-A INPUT -i eth0 -j limit-3471 +-A INPUT -i eth0 -j limit-3472 +-A INPUT -i eth0 -j limit-3473 +-A INPUT -i eth0 -j limit-3474 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3476 +-A INPUT -i eth0 -j limit-3477 +-A INPUT -i eth0 -j limit-3478 +-A INPUT -i eth0 -j limit-3479 +-A INPUT -i eth0 -j limit-3480 +-A INPUT -i eth0 -j limit-3481 +-A INPUT -i eth0 -j limit-3482 +-A INPUT -i eth0 -j limit-3483 +-A INPUT -i eth0 -j limit-3484 +-A INPUT -i eth0 -j limit-3485 +-A INPUT -i eth0 -j limit-3486 +-A INPUT -i eth0 -j limit-3487 +-A INPUT -i eth0 -j limit-3488 +-A INPUT -i eth0 -j limit-3489 +-A INPUT -i eth0 -j limit-3490 +-A INPUT -i eth0 -j limit-3491 +-A INPUT -i eth0 -j limit-3492 +-A INPUT -i eth0 -j limit-3493 +-A INPUT -i eth0 -j limit-3494 +-A INPUT -i eth0 -j limit-3495 +-A INPUT -i eth0 -j limit-3496 +-A INPUT -i eth0 -j limit-3497 +-A INPUT -i eth0 -j limit-3498 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 +-A INPUT -i eth0 -j limit-3500 +-A INPUT -i eth0 -j limit-3501 +-A INPUT -i eth0 -j limit-3502 +-A INPUT -i eth0 -j limit-3503 +-A INPUT -i eth0 -j limit-3504 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 +-A INPUT -i eth0 -j limit-3506 +-A INPUT -i eth0 -j limit-3507 +-A INPUT -i eth0 -j limit-3508 +-A INPUT -i eth0 -j limit-3509 +-A INPUT -i eth0 -j limit-3510 +-A INPUT -i eth0 -j limit-3511 +-A INPUT -i eth0 -j limit-3512 +-A INPUT -i eth0 -j limit-3513 +-A INPUT -i eth0 -j limit-3514 +-A INPUT -i eth0 -j limit-3515 +-A INPUT -i eth0 -j limit-3516 +-A INPUT -i eth0 -j limit-3517 +-A INPUT -i eth0 -j limit-3518 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 +-A INPUT -i eth0 -j limit-3520 +-A INPUT -i eth0 -j limit-3521 +-A INPUT -i eth0 -j limit-3522 +-A INPUT -i eth0 -j limit-3523 +-A INPUT -i eth0 -j limit-3524 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 +-A INPUT -i eth0 -j limit-3526 +-A INPUT -i eth0 -j limit-3527 +-A INPUT -i eth0 -j limit-3528 +-A INPUT -i eth0 -j limit-3529 +-A INPUT -i eth0 -j limit-3530 +-A INPUT -i eth0 -j limit-3531 +-A INPUT -i eth0 -j limit-3532 +-A INPUT -i eth0 -j limit-3533 +-A INPUT -i eth0 -j limit-3534 +-A INPUT -i eth0 -j limit-3535 +-A INPUT -i eth0 -j limit-3536 +-A INPUT -i eth0 -j limit-3537 +-A INPUT -i eth0 -j limit-3538 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 +-A INPUT -i eth0 -j limit-3540 +-A INPUT -i eth0 -j limit-3541 +-A INPUT -i eth0 -j limit-3542 +-A INPUT -i eth0 -j limit-3543 +-A INPUT -i eth0 -j limit-3544 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 +-A INPUT -i eth0 -j limit-3546 +-A INPUT -i eth0 -j limit-3547 +-A INPUT -i eth0 -j limit-3548 +-A INPUT -i eth0 -j limit-3549 +-A INPUT -i eth0 -j limit-3550 +-A INPUT -i eth0 -j limit-3551 +-A INPUT -i eth0 -j limit-3552 +-A INPUT -i eth0 -j limit-3553 +-A INPUT -i eth0 -j limit-3554 +-A INPUT -i eth0 -j limit-3555 +-A INPUT -i eth0 -j limit-3556 +-A INPUT -i eth0 -j limit-3557 +-A INPUT -i eth0 -j limit-3558 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 +-A INPUT -i eth0 -j limit-3560 +-A INPUT -i eth0 -j limit-3561 +-A INPUT -i eth0 -j limit-3562 +-A INPUT -i eth0 -j limit-3563 +-A INPUT -i eth0 -j limit-3564 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 +-A INPUT -i eth0 -j limit-3566 +-A INPUT -i eth0 -j limit-3567 +-A INPUT -i eth0 -j limit-3568 +-A INPUT -i eth0 -j limit-3569 +-A INPUT -i eth0 -j limit-3570 +-A INPUT -i eth0 -j limit-3571 +-A INPUT -i eth0 -j limit-3572 +-A INPUT -i eth0 -j limit-3573 +-A INPUT -i eth0 -j limit-3574 +-A INPUT -i eth0 -j limit-3575 +-A INPUT -i eth0 -j limit-3576 +-A INPUT -i eth0 -j limit-3577 +-A INPUT -i eth0 -j limit-3578 +-A INPUT -i eth0 -j limit-3579 +-A INPUT -i eth0 -j limit-3580 +-A INPUT -i eth0 -j limit-3581 +-A INPUT -i eth0 -j limit-3582 +-A INPUT -i eth0 -j limit-3583 +-A INPUT -i eth0 -j limit-3584 +-A INPUT -i eth0 -j limit-3585 +-A INPUT -i eth0 -j limit-3586 +-A INPUT -i eth0 -j limit-3587 +-A INPUT -i eth0 -j limit-3588 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 +-A INPUT -i eth0 -j limit-3590 +-A INPUT -i eth0 -j limit-3591 +-A INPUT -i eth0 -j limit-3592 +-A INPUT -i eth0 -j limit-3593 +-A INPUT -i eth0 -j limit-3594 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 +-A INPUT -i eth0 -j limit-3596 +-A INPUT -i eth0 -j limit-3597 +-A INPUT -i eth0 -j limit-3598 +-A INPUT -i eth0 -j limit-3599 +-A INPUT -i eth0 -j limit-3600 +-A INPUT -i eth0 -j limit-3601 +-A INPUT -i eth0 -j limit-3602 +-A INPUT -i eth0 -j limit-3603 +-A INPUT -i eth0 -j limit-3604 +-A INPUT -i eth0 -j limit-3605 +-A INPUT -i eth0 -j limit-3606 +-A INPUT -i eth0 -j limit-3607 +-A INPUT -i eth0 -j limit-3608 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 +-A INPUT -i eth0 -j limit-3610 +-A INPUT -i eth0 -j limit-3611 +-A INPUT -i eth0 -j limit-3612 +-A INPUT -i eth0 -j limit-3613 +-A INPUT -i eth0 -j limit-3614 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 +-A INPUT -i eth0 -j limit-3616 +-A INPUT -i eth0 -j limit-3617 +-A INPUT -i eth0 -j limit-3618 +-A INPUT -i eth0 -j limit-3619 +-A INPUT -i eth0 -j limit-3620 +-A INPUT -i eth0 -j limit-3621 +-A INPUT -i eth0 -j limit-3622 +-A INPUT -i eth0 -j limit-3623 +-A INPUT -i eth0 -j limit-3624 +-A INPUT -i eth0 -j limit-3625 +-A INPUT -i eth0 -j limit-3626 +-A INPUT -i eth0 -j limit-3627 +-A INPUT -i eth0 -j limit-3628 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 +-A INPUT -i eth0 -j limit-3630 +-A INPUT -i eth0 -j limit-3631 +-A INPUT -i eth0 -j limit-3632 +-A INPUT -i eth0 -j limit-3633 +-A INPUT -i eth0 -j limit-3634 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 +-A INPUT -i eth0 -j limit-3636 +-A INPUT -i eth0 -j limit-3637 +-A INPUT -i eth0 -j limit-3638 +-A INPUT -i eth0 -j limit-3639 +-A INPUT -i eth0 -j limit-3640 +-A INPUT -i eth0 -j limit-3641 +-A INPUT -i eth0 -j limit-3642 +-A INPUT -i eth0 -j limit-3643 +-A INPUT -i eth0 -j limit-3644 +-A INPUT -i eth0 -j limit-3645 +-A INPUT -i eth0 -j limit-3646 +-A INPUT -i eth0 -j limit-3647 +-A INPUT -i eth0 -j limit-3648 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 +-A INPUT -i eth0 -j limit-3650 +-A INPUT -i eth0 -j limit-3651 +-A INPUT -i eth0 -j limit-3652 +-A INPUT -i eth0 -j limit-3653 +-A INPUT -i eth0 -j limit-3654 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 +-A INPUT -i eth0 -j limit-3656 +-A INPUT -i eth0 -j limit-3657 +-A INPUT -i eth0 -j limit-3658 +-A INPUT -i eth0 -j limit-3659 +-A INPUT -i eth0 -j limit-3660 +-A INPUT -i eth0 -j limit-3661 +-A INPUT -i eth0 -j limit-3662 +-A INPUT -i eth0 -j limit-3663 +-A INPUT -i eth0 -j limit-3664 +-A INPUT -i eth0 -j limit-3665 +-A INPUT -i eth0 -j limit-3666 +-A INPUT -i eth0 -j limit-3667 +-A INPUT -i eth0 -j limit-3668 +-A INPUT -i eth0 -j limit-3669 +-A INPUT -i eth0 -j limit-3670 +-A INPUT -i eth0 -j limit-3671 +-A INPUT -i eth0 -j limit-3672 +-A INPUT -i eth0 -j limit-3673 +-A INPUT -i eth0 -j limit-3674 +-A INPUT -i eth0 -j limit-3675 +-A INPUT -i eth0 -j limit-3676 +-A INPUT -i eth0 -j limit-3677 +-A INPUT -i eth0 -j limit-3678 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3680 +-A INPUT -i eth0 -j limit-3681 +-A INPUT -i eth0 -j limit-3682 +-A INPUT -i eth0 -j limit-3683 +-A INPUT -i eth0 -j limit-3684 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3686 +-A INPUT -i eth0 -j limit-3687 +-A INPUT -i eth0 -j limit-3688 +-A INPUT -i eth0 -j limit-3689 +-A INPUT -i eth0 -j limit-3690 +-A INPUT -i eth0 -j limit-3691 +-A INPUT -i eth0 -j limit-3692 +-A INPUT -i eth0 -j limit-3693 +-A INPUT -i eth0 -j limit-3694 +-A INPUT -i eth0 -j limit-3695 +-A INPUT -i eth0 -j limit-3696 +-A INPUT -i eth0 -j limit-3697 +-A INPUT -i eth0 -j limit-3698 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3700 +-A INPUT -i eth0 -j limit-3701 +-A INPUT -i eth0 -j limit-3702 +-A INPUT -i eth0 -j limit-3703 +-A INPUT -i eth0 -j limit-3704 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3706 +-A INPUT -i eth0 -j limit-3707 +-A INPUT -i eth0 -j limit-3708 +-A INPUT -i eth0 -j limit-3709 +-A INPUT -i eth0 -j limit-3710 +-A INPUT -i eth0 -j limit-3711 +-A INPUT -i eth0 -j limit-3712 +-A INPUT -i eth0 -j limit-3713 +-A INPUT -i eth0 -j limit-3714 +-A INPUT -i eth0 -j limit-3715 +-A INPUT -i eth0 -j limit-3716 +-A INPUT -i eth0 -j limit-3717 +-A INPUT -i eth0 -j limit-3718 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3720 +-A INPUT -i eth0 -j limit-3721 +-A INPUT -i eth0 -j limit-3722 +-A INPUT -i eth0 -j limit-3723 +-A INPUT -i eth0 -j limit-3724 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3726 +-A INPUT -i eth0 -j limit-3727 +-A INPUT -i eth0 -j limit-3728 +-A INPUT -i eth0 -j limit-3729 +-A INPUT -i eth0 -j limit-3730 +-A INPUT -i eth0 -j limit-3731 +-A INPUT -i eth0 -j limit-3732 +-A INPUT -i eth0 -j limit-3733 +-A INPUT -i eth0 -j limit-3734 +-A INPUT -i eth0 -j limit-3735 +-A INPUT -i eth0 -j limit-3736 +-A INPUT -i eth0 -j limit-3737 +-A INPUT -i eth0 -j limit-3738 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3740 +-A INPUT -i eth0 -j limit-3741 +-A INPUT -i eth0 -j limit-3742 +-A INPUT -i eth0 -j limit-3743 +-A INPUT -i eth0 -j limit-3744 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3746 +-A INPUT -i eth0 -j limit-3747 +-A INPUT -i eth0 -j limit-3748 +-A INPUT -i eth0 -j limit-3749 +-A INPUT -i eth0 -j limit-3750 +-A INPUT -i eth0 -j limit-3751 +-A INPUT -i eth0 -j limit-3752 +-A INPUT -i eth0 -j limit-3753 +-A INPUT -i eth0 -j limit-3754 +-A INPUT -i eth0 -j limit-3755 +-A INPUT -i eth0 -j limit-3756 +-A INPUT -i eth0 -j limit-3757 +-A INPUT -i eth0 -j limit-3758 +-A INPUT -i eth0 -j limit-3759 +-A INPUT -i eth0 -j limit-3760 +-A INPUT -i eth0 -j limit-3761 +-A INPUT -i eth0 -j limit-3762 +-A INPUT -i eth0 -j limit-3763 +-A INPUT -i eth0 -j limit-3764 +-A INPUT -i eth0 -j limit-3765 +-A INPUT -i eth0 -j limit-3766 +-A INPUT -i eth0 -j limit-3767 +-A INPUT -i eth0 -j limit-3768 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 +-A INPUT -i eth0 -j limit-3770 +-A INPUT -i eth0 -j limit-3771 +-A INPUT -i eth0 -j limit-3772 +-A INPUT -i eth0 -j limit-3773 +-A INPUT -i eth0 -j limit-3774 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 +-A INPUT -i eth0 -j limit-3776 +-A INPUT -i eth0 -j limit-3777 +-A INPUT -i eth0 -j limit-3778 +-A INPUT -i eth0 -j limit-3779 +-A INPUT -i eth0 -j limit-3780 +-A INPUT -i eth0 -j limit-3781 +-A INPUT -i eth0 -j limit-3782 +-A INPUT -i eth0 -j limit-3783 +-A INPUT -i eth0 -j limit-3784 +-A INPUT -i eth0 -j limit-3785 +-A INPUT -i eth0 -j limit-3786 +-A INPUT -i eth0 -j limit-3787 +-A INPUT -i eth0 -j limit-3788 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 +-A INPUT -i eth0 -j limit-3790 +-A INPUT -i eth0 -j limit-3791 +-A INPUT -i eth0 -j limit-3792 +-A INPUT -i eth0 -j limit-3793 +-A INPUT -i eth0 -j limit-3794 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 +-A INPUT -i eth0 -j limit-3796 +-A INPUT -i eth0 -j limit-3797 +-A INPUT -i eth0 -j limit-3798 +-A INPUT -i eth0 -j limit-3799 +-A INPUT -i eth0 -j limit-3800 +-A INPUT -i eth0 -j limit-3801 +-A INPUT -i eth0 -j limit-3802 +-A INPUT -i eth0 -j limit-3803 +-A INPUT -i eth0 -j limit-3804 +-A INPUT -i eth0 -j limit-3805 +-A INPUT -i eth0 -j limit-3806 +-A INPUT -i eth0 -j limit-3807 +-A INPUT -i eth0 -j limit-3808 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 +-A INPUT -i eth0 -j limit-3810 +-A INPUT -i eth0 -j limit-3811 +-A INPUT -i eth0 -j limit-3812 +-A INPUT -i eth0 -j limit-3813 +-A INPUT -i eth0 -j limit-3814 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 +-A INPUT -i eth0 -j limit-3816 +-A INPUT -i eth0 -j limit-3817 +-A INPUT -i eth0 -j limit-3818 +-A INPUT -i eth0 -j limit-3819 +-A INPUT -i eth0 -j limit-3820 +-A INPUT -i eth0 -j limit-3821 +-A INPUT -i eth0 -j limit-3822 +-A INPUT -i eth0 -j limit-3823 +-A INPUT -i eth0 -j limit-3824 +-A INPUT -i eth0 -j limit-3825 +-A INPUT -i eth0 -j limit-3826 +-A INPUT -i eth0 -j limit-3827 +-A INPUT -i eth0 -j limit-3828 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 +-A INPUT -i eth0 -j limit-3830 +-A INPUT -i eth0 -j limit-3831 +-A INPUT -i eth0 -j limit-3832 +-A INPUT -i eth0 -j limit-3833 +-A INPUT -i eth0 -j limit-3834 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 +-A INPUT -i eth0 -j limit-3836 +-A INPUT -i eth0 -j limit-3837 +-A INPUT -i eth0 -j limit-3838 +-A INPUT -i eth0 -j limit-3839 +-A INPUT -i eth0 -j limit-3840 +-A INPUT -i eth0 -j limit-3841 +-A INPUT -i eth0 -j limit-3842 +-A INPUT -i eth0 -j limit-3843 +-A INPUT -i eth0 -j limit-3844 +-A INPUT -i eth0 -j limit-3845 +-A INPUT -i eth0 -j limit-3846 +-A INPUT -i eth0 -j limit-3847 +-A INPUT -i eth0 -j limit-3848 +-A INPUT -i eth0 -j limit-3849 +-A INPUT -i eth0 -j limit-3850 +-A INPUT -i eth0 -j limit-3851 +-A INPUT -i eth0 -j limit-3852 +-A INPUT -i eth0 -j limit-3853 +-A INPUT -i eth0 -j limit-3854 +-A INPUT -i eth0 -j limit-3855 +-A INPUT -i eth0 -j limit-3856 +-A INPUT -i eth0 -j limit-3857 +-A INPUT -i eth0 -j limit-3858 +-A INPUT -i eth0 -j limit-3859 +-A INPUT -i eth0 -j limit-3860 +-A INPUT -i eth0 -j limit-3861 +-A INPUT -i eth0 -j limit-3862 +-A INPUT -i eth0 -j limit-3863 +-A INPUT -i eth0 -j limit-3864 +-A INPUT -i eth0 -j limit-3865 +-A INPUT -i eth0 -j limit-3866 +-A INPUT -i eth0 -j limit-3867 +-A INPUT -i eth0 -j limit-3868 +-A INPUT -i eth0 -j limit-3869 +-A INPUT -i eth0 -j limit-3870 +-A INPUT -i eth0 -j limit-3871 +-A INPUT -i eth0 -j limit-3872 +-A INPUT -i eth0 -j limit-3873 +-A INPUT -i eth0 -j limit-3874 +-A INPUT -i eth0 -j limit-3875 +-A INPUT -i eth0 -j limit-3876 +-A INPUT -i eth0 -j limit-3877 +-A INPUT -i eth0 -j limit-3878 +-A INPUT -i eth0 -j limit-3879 +-A INPUT -i eth0 -j limit-3880 +-A INPUT -i eth0 -j limit-3881 +-A INPUT -i eth0 -j limit-3882 +-A INPUT -i eth0 -j limit-3883 +-A INPUT -i eth0 -j limit-3884 +-A INPUT -i eth0 -j limit-3885 +-A INPUT -i eth0 -j limit-3886 +-A INPUT -i eth0 -j limit-3887 +-A INPUT -i eth0 -j limit-3888 +-A INPUT -i eth0 -j limit-3889 +-A INPUT -i eth0 -j limit-3890 +-A INPUT -i eth0 -j limit-3891 +-A INPUT -i eth0 -j limit-3892 +-A INPUT -i eth0 -j limit-3893 +-A INPUT -i eth0 -j limit-3894 +-A INPUT -i eth0 -j limit-3895 +-A INPUT -i eth0 -j limit-3896 +-A INPUT -i eth0 -j limit-3897 +-A INPUT -i eth0 -j limit-3898 +-A INPUT -i eth0 -j limit-3899 +-A INPUT -i eth0 -j limit-3900 +-A INPUT -i eth0 -j limit-3901 +-A INPUT -i eth0 -j limit-3902 +-A INPUT -i eth0 -j limit-3903 +-A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set +-A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A INPUT -j ACCEPT +-A INPUT -j logdrop-2200 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-99 +-A INPUT -j logdrop-2201 +-A INPUT -j logpass-0 +-A INPUT -j logaccept-100 +-A INPUT -j logdrop-2202 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-101 +-A INPUT -j logdrop-2203 +-A INPUT -j logpass-2 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-102 +-A INPUT -j logdrop-2204 +-A INPUT -j logpass-3 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m recent --name user:B --rdest --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A OUTPUT -j limit-2927 +-A OUTPUT -j limit-2926 +-A OUTPUT -j limit-2925 +-A OUTPUT -j limit-2924 +-A OUTPUT -j limit-2923 +-A OUTPUT -j limit-2922 +-A OUTPUT -j limit-2921 +-A OUTPUT -j limit-2920 +-A OUTPUT -j limit-2919 +-A OUTPUT -j limit-2918 +-A OUTPUT -j limit-2917 +-A OUTPUT -j limit-2916 +-A OUTPUT -j limit-2915 +-A OUTPUT -j limit-2914 +-A OUTPUT -j limit-2913 +-A OUTPUT -j limit-2912 +-A OUTPUT -j limit-2911 +-A OUTPUT -j limit-2910 +-A OUTPUT -j limit-2909 +-A OUTPUT -j limit-2908 +-A OUTPUT -j limit-2907 +-A OUTPUT -j limit-2906 +-A OUTPUT -j limit-2905 +-A OUTPUT -j limit-2904 +-A OUTPUT -j limit-2903 +-A OUTPUT -j limit-2902 +-A OUTPUT -j limit-2901 +-A OUTPUT -j limit-2900 +-A OUTPUT -j limit-2899 +-A OUTPUT -j limit-2898 +-A OUTPUT -j limit-2897 +-A OUTPUT -j limit-2896 +-A OUTPUT -j limit-2895 +-A OUTPUT -j limit-2894 +-A OUTPUT -j limit-2893 +-A OUTPUT -j limit-2892 +-A OUTPUT -j limit-2891 +-A OUTPUT -j limit-2890 +-A OUTPUT -j limit-2889 +-A OUTPUT -j limit-2888 +-A OUTPUT -j limit-2887 +-A OUTPUT -j limit-2886 +-A OUTPUT -j limit-2885 +-A OUTPUT -j limit-2884 +-A OUTPUT -j limit-2883 +-A OUTPUT -j limit-2882 +-A OUTPUT -j limit-2881 +-A OUTPUT -j limit-2880 +-A OUTPUT -j limit-2879 +-A OUTPUT -j limit-2878 +-A OUTPUT -j limit-2877 +-A OUTPUT -j limit-2876 +-A OUTPUT -j limit-2875 +-A OUTPUT -j limit-2874 +-A OUTPUT -j limit-2873 +-A OUTPUT -j limit-2872 +-A OUTPUT -j limit-2871 +-A OUTPUT -j limit-2870 +-A OUTPUT -j limit-2869 +-A OUTPUT -j limit-2868 +-A OUTPUT -j limit-2867 +-A OUTPUT -j limit-2866 +-A OUTPUT -j limit-2865 +-A OUTPUT -j limit-2864 +-A OUTPUT -j limit-2863 +-A OUTPUT -j limit-2862 +-A OUTPUT -j limit-2861 +-A OUTPUT -j limit-2860 +-A OUTPUT -j limit-2859 +-A OUTPUT -j limit-2858 +-A OUTPUT -j limit-2857 +-A OUTPUT -j limit-2856 +-A OUTPUT -j limit-2855 +-A OUTPUT -j limit-2854 +-A OUTPUT -j limit-2853 +-A OUTPUT -j limit-2852 +-A OUTPUT -j limit-2851 +-A OUTPUT -j limit-2850 +-A OUTPUT -j limit-2849 +-A OUTPUT -j limit-2848 +-A OUTPUT -j limit-2847 +-A OUTPUT -j limit-2846 +-A OUTPUT -j limit-2845 +-A OUTPUT -j limit-2844 +-A OUTPUT -j limit-2843 +-A OUTPUT -j limit-2842 +-A OUTPUT -j limit-2841 +-A OUTPUT -j limit-2840 +-A OUTPUT -j limit-2839 +-A OUTPUT -j limit-2838 +-A OUTPUT -j limit-2837 +-A OUTPUT -j limit-2836 +-A OUTPUT -j limit-2835 +-A OUTPUT -j limit-2834 +-A OUTPUT -j limit-2833 +-A OUTPUT -j limit-2832 +-A OUTPUT -j limit-2831 +-A OUTPUT -j limit-2830 +-A OUTPUT -j limit-2829 +-A OUTPUT -j limit-2828 +-A OUTPUT -j limit-2827 +-A OUTPUT -j limit-2826 +-A OUTPUT -j limit-2825 +-A OUTPUT -j limit-2824 +-A OUTPUT -j limit-2823 +-A OUTPUT -j limit-2822 +-A OUTPUT -j limit-2821 +-A OUTPUT -j limit-2820 +-A OUTPUT -j limit-2819 +-A OUTPUT -j limit-2818 +-A OUTPUT -j limit-2817 +-A OUTPUT -j limit-2816 +-A OUTPUT -j limit-2815 +-A OUTPUT -j limit-2814 +-A OUTPUT -j limit-2813 +-A OUTPUT -j limit-2812 +-A OUTPUT -j limit-2811 +-A OUTPUT -j limit-2810 +-A OUTPUT -j limit-2809 +-A OUTPUT -j limit-2808 +-A OUTPUT -j limit-2807 +-A OUTPUT -j limit-2806 +-A OUTPUT -j limit-2805 +-A OUTPUT -j limit-2804 +-A OUTPUT -j limit-2803 +-A OUTPUT -j limit-2802 +-A OUTPUT -j limit-2801 +-A OUTPUT -j limit-2800 +-A OUTPUT -j limit-2799 +-A OUTPUT -j limit-2798 +-A OUTPUT -j limit-2797 +-A OUTPUT -j limit-2796 +-A OUTPUT -j limit-2795 +-A OUTPUT -j limit-2794 +-A OUTPUT -j limit-2793 +-A OUTPUT -j limit-2792 +-A OUTPUT -j limit-2791 +-A OUTPUT -j limit-2790 +-A OUTPUT -j limit-2789 +-A OUTPUT -j limit-2788 +-A OUTPUT -j limit-2787 +-A OUTPUT -j limit-2786 +-A OUTPUT -j limit-2785 +-A OUTPUT -j limit-2784 +-A OUTPUT -j limit-2783 +-A OUTPUT -j limit-2782 +-A OUTPUT -j limit-2781 +-A OUTPUT -j limit-2780 +-A OUTPUT -j limit-2779 +-A OUTPUT -j limit-2778 +-A OUTPUT -j limit-2777 +-A OUTPUT -j limit-2776 +-A OUTPUT -j limit-2775 +-A OUTPUT -j limit-2774 +-A OUTPUT -j limit-2773 +-A OUTPUT -j limit-2772 +-A OUTPUT -j limit-2771 +-A OUTPUT -j limit-2770 +-A OUTPUT -j limit-2769 +-A OUTPUT -j limit-2768 +-A OUTPUT -j limit-2767 +-A OUTPUT -j limit-2766 +-A OUTPUT -j limit-2765 +-A OUTPUT -j limit-2764 +-A OUTPUT -j limit-2763 +-A OUTPUT -j limit-2762 +-A OUTPUT -j limit-2761 +-A OUTPUT -j limit-2760 +-A OUTPUT -j limit-2759 +-A OUTPUT -j limit-2758 +-A OUTPUT -j limit-2757 +-A OUTPUT -j limit-2756 +-A OUTPUT -j limit-2755 +-A OUTPUT -j limit-2754 +-A OUTPUT -j limit-2753 +-A OUTPUT -j limit-2752 +-A OUTPUT -j limit-2751 +-A OUTPUT -j limit-2750 +-A OUTPUT -j limit-2749 +-A OUTPUT -j limit-2748 +-A OUTPUT -j limit-2747 +-A OUTPUT -j limit-2746 +-A OUTPUT -j limit-2745 +-A OUTPUT -j limit-2744 +-A OUTPUT -j limit-2743 +-A OUTPUT -j limit-2742 +-A OUTPUT -j limit-2741 +-A OUTPUT -j limit-2740 +-A OUTPUT -j limit-2739 +-A OUTPUT -j limit-2738 +-A OUTPUT -j limit-2737 +-A OUTPUT -j limit-2736 +-A OUTPUT -j limit-2735 +-A OUTPUT -j limit-2734 +-A OUTPUT -j limit-2733 +-A OUTPUT -j limit-2732 +-A OUTPUT -j limit-2731 +-A OUTPUT -j limit-2730 +-A OUTPUT -j limit-2729 +-A OUTPUT -j limit-2728 +-A OUTPUT -j limit-2727 +-A OUTPUT -j limit-2726 +-A OUTPUT -j limit-2725 +-A OUTPUT -j limit-2724 +-A OUTPUT -j limit-2723 +-A OUTPUT -j limit-2722 +-A OUTPUT -j limit-2721 +-A OUTPUT -j limit-2720 +-A OUTPUT -j limit-2719 +-A OUTPUT -j limit-2718 +-A OUTPUT -j limit-2717 +-A OUTPUT -j limit-2716 +-A OUTPUT -j limit-2715 +-A OUTPUT -j limit-2714 +-A OUTPUT -j limit-2713 +-A OUTPUT -j limit-2712 +-A OUTPUT -j limit-2711 +-A OUTPUT -j limit-2710 +-A OUTPUT -j limit-2709 +-A OUTPUT -j limit-2708 +-A OUTPUT -j limit-2707 +-A OUTPUT -j limit-2706 +-A OUTPUT -j limit-2705 +-A OUTPUT -j limit-2704 +-A OUTPUT -j limit-2703 +-A OUTPUT -j limit-2702 +-A OUTPUT -j limit-2701 +-A OUTPUT -j limit-2700 +-A OUTPUT -j limit-2699 +-A OUTPUT -j limit-2698 +-A OUTPUT -j limit-2697 +-A OUTPUT -j limit-2696 +-A OUTPUT -j limit-2695 +-A OUTPUT -j limit-2694 +-A OUTPUT -j limit-2693 +-A OUTPUT -j limit-2692 +-A OUTPUT -j limit-2691 +-A OUTPUT -j limit-2690 +-A OUTPUT -j limit-2689 +-A OUTPUT -j limit-2688 +-A OUTPUT -j limit-2687 +-A OUTPUT -j limit-2686 +-A OUTPUT -j limit-2685 +-A OUTPUT -j limit-2684 +-A OUTPUT -j limit-2683 +-A OUTPUT -j limit-2682 +-A OUTPUT -j limit-2681 +-A OUTPUT -j limit-2680 +-A OUTPUT -j limit-2679 +-A OUTPUT -j limit-2678 +-A OUTPUT -j limit-2677 +-A OUTPUT -j limit-2676 +-A OUTPUT -j limit-2675 +-A OUTPUT -j limit-2674 +-A OUTPUT -j limit-2673 +-A OUTPUT -j limit-2672 +-A OUTPUT -j limit-2671 +-A OUTPUT -j limit-2670 +-A OUTPUT -j limit-2669 +-A OUTPUT -j limit-2668 +-A OUTPUT -j limit-2667 +-A OUTPUT -j limit-2666 +-A OUTPUT -j limit-2665 +-A OUTPUT -j limit-2664 +-A OUTPUT -j limit-2663 +-A OUTPUT -j limit-2662 +-A OUTPUT -j limit-2661 +-A OUTPUT -j limit-2660 +-A OUTPUT -j limit-2659 +-A OUTPUT -j limit-2658 +-A OUTPUT -j limit-2657 +-A OUTPUT -j limit-2656 +-A OUTPUT -j limit-2655 +-A OUTPUT -j limit-2654 +-A OUTPUT -j limit-2653 +-A OUTPUT -j limit-2652 +-A OUTPUT -j limit-2651 +-A OUTPUT -j limit-2650 +-A OUTPUT -j limit-2649 +-A OUTPUT -j limit-2648 +-A OUTPUT -j limit-2647 +-A OUTPUT -j limit-2646 +-A OUTPUT -j limit-2645 +-A OUTPUT -j limit-2644 +-A OUTPUT -j limit-2643 +-A OUTPUT -j limit-2642 +-A OUTPUT -j limit-2641 +-A OUTPUT -j limit-2640 +-A OUTPUT -j limit-2639 +-A OUTPUT -j limit-2638 +-A OUTPUT -j limit-2637 +-A OUTPUT -j limit-2636 +-A OUTPUT -j limit-2635 +-A OUTPUT -j limit-2634 +-A OUTPUT -j limit-2633 +-A OUTPUT -j limit-2632 +-A OUTPUT -j limit-2631 +-A OUTPUT -j limit-2630 +-A OUTPUT -j limit-2629 +-A OUTPUT -j limit-2628 +-A OUTPUT -j limit-2627 +-A OUTPUT -j limit-2626 +-A OUTPUT -j limit-2625 +-A OUTPUT -j limit-2624 +-A OUTPUT -j limit-2623 +-A OUTPUT -j limit-2622 +-A OUTPUT -j limit-2621 +-A OUTPUT -j limit-2620 +-A OUTPUT -j limit-2619 +-A OUTPUT -j limit-2618 +-A OUTPUT -j limit-2617 +-A OUTPUT -j limit-2616 +-A OUTPUT -j limit-2615 +-A OUTPUT -j limit-2614 +-A OUTPUT -j limit-2613 +-A OUTPUT -j limit-2612 +-A OUTPUT -j limit-2611 +-A OUTPUT -j limit-2610 +-A OUTPUT -j limit-2609 +-A OUTPUT -j limit-2608 +-A OUTPUT -j limit-2607 +-A OUTPUT -j limit-2606 +-A OUTPUT -j limit-2605 +-A OUTPUT -j limit-2604 +-A OUTPUT -j limit-2603 +-A OUTPUT -j limit-2602 +-A OUTPUT -j limit-2601 +-A OUTPUT -j limit-2600 +-A OUTPUT -j limit-2599 +-A OUTPUT -j limit-2598 +-A OUTPUT -j limit-2597 +-A OUTPUT -j limit-2596 +-A OUTPUT -j limit-2595 +-A OUTPUT -j limit-2594 +-A OUTPUT -j limit-2593 +-A OUTPUT -j limit-2592 +-A OUTPUT -j limit-2591 +-A OUTPUT -j limit-2590 +-A OUTPUT -j limit-2589 +-A OUTPUT -j limit-2588 +-A OUTPUT -j limit-2587 +-A OUTPUT -j limit-2586 +-A OUTPUT -j limit-2585 +-A OUTPUT -j limit-2584 +-A OUTPUT -j limit-2583 +-A OUTPUT -j limit-2582 +-A OUTPUT -j limit-2581 +-A OUTPUT -j limit-2580 +-A OUTPUT -j limit-2579 +-A OUTPUT -j limit-2578 +-A OUTPUT -j limit-2577 +-A OUTPUT -j limit-2576 +-A OUTPUT -j limit-2575 +-A OUTPUT -j limit-2574 +-A OUTPUT -j limit-2573 +-A OUTPUT -j limit-2572 +-A OUTPUT -j limit-2571 +-A OUTPUT -j limit-2570 +-A OUTPUT -j limit-2569 +-A OUTPUT -j limit-2568 +-A OUTPUT -j limit-2567 +-A OUTPUT -j limit-2566 +-A OUTPUT -j limit-2565 +-A OUTPUT -j limit-2564 +-A OUTPUT -j limit-2563 +-A OUTPUT -j limit-2562 +-A OUTPUT -j limit-2561 +-A OUTPUT -j limit-2560 +-A OUTPUT -j limit-2559 +-A OUTPUT -j limit-2558 +-A OUTPUT -j limit-2557 +-A OUTPUT -j limit-2556 +-A OUTPUT -j limit-2555 +-A OUTPUT -j limit-2554 +-A OUTPUT -j limit-2553 +-A OUTPUT -j limit-2552 +-A OUTPUT -j limit-2551 +-A OUTPUT -j limit-2550 +-A OUTPUT -j limit-2549 +-A OUTPUT -j limit-2548 +-A OUTPUT -j limit-2547 +-A OUTPUT -j limit-2546 +-A OUTPUT -j limit-2545 +-A OUTPUT -j limit-2544 +-A OUTPUT -j limit-2543 +-A OUTPUT -j limit-2542 +-A OUTPUT -j limit-2541 +-A OUTPUT -j limit-2540 +-A OUTPUT -j limit-2539 +-A OUTPUT -j limit-2538 +-A OUTPUT -j limit-2537 +-A OUTPUT -j limit-2536 +-A OUTPUT -j limit-2535 +-A OUTPUT -j limit-2534 +-A OUTPUT -j limit-2533 +-A OUTPUT -j limit-2532 +-A OUTPUT -j limit-2531 +-A OUTPUT -j limit-2530 +-A OUTPUT -j limit-2529 +-A OUTPUT -j limit-2528 +-A OUTPUT -j limit-2527 +-A OUTPUT -j limit-2526 +-A OUTPUT -j limit-2525 +-A OUTPUT -j limit-2524 +-A OUTPUT -j limit-2523 +-A OUTPUT -j limit-2522 +-A OUTPUT -j limit-2521 +-A OUTPUT -j limit-2520 +-A OUTPUT -j limit-2519 +-A OUTPUT -j limit-2518 +-A OUTPUT -j limit-2517 +-A OUTPUT -j limit-2516 +-A OUTPUT -j limit-2515 +-A OUTPUT -j limit-2514 +-A OUTPUT -j limit-2513 +-A OUTPUT -j limit-2512 +-A OUTPUT -j limit-2511 +-A OUTPUT -j limit-2510 +-A OUTPUT -j limit-2509 +-A OUTPUT -j limit-2508 +-A OUTPUT -j limit-2507 +-A OUTPUT -j limit-2506 +-A OUTPUT -j limit-2505 +-A OUTPUT -j limit-2504 +-A OUTPUT -j limit-2503 +-A OUTPUT -j limit-2502 +-A OUTPUT -j limit-2501 +-A OUTPUT -j limit-2500 +-A OUTPUT -j limit-2499 +-A OUTPUT -j limit-2498 +-A OUTPUT -j limit-2497 +-A OUTPUT -j limit-2496 +-A OUTPUT -j limit-2495 +-A OUTPUT -j limit-2494 +-A OUTPUT -j limit-2493 +-A OUTPUT -j limit-2492 +-A OUTPUT -j limit-2491 +-A OUTPUT -j limit-2490 +-A OUTPUT -j limit-2489 +-A OUTPUT -j limit-2488 +-A OUTPUT -j limit-2487 +-A OUTPUT -j limit-2486 +-A OUTPUT -j limit-2485 +-A OUTPUT -j limit-2484 +-A OUTPUT -j limit-2483 +-A OUTPUT -j limit-2482 +-A OUTPUT -j limit-2481 +-A OUTPUT -j limit-2480 +-A OUTPUT -j limit-2479 +-A OUTPUT -j limit-2478 +-A OUTPUT -j limit-2477 +-A OUTPUT -j limit-2476 +-A OUTPUT -j limit-2475 +-A OUTPUT -j limit-2474 +-A OUTPUT -j limit-2473 +-A OUTPUT -j limit-2472 +-A OUTPUT -j limit-2471 +-A OUTPUT -j limit-2470 +-A OUTPUT -j limit-2469 +-A OUTPUT -j limit-2468 +-A OUTPUT -j limit-2467 +-A OUTPUT -j limit-2466 +-A OUTPUT -j limit-2465 +-A OUTPUT -j limit-2464 +-A OUTPUT -j limit-2463 +-A OUTPUT -j limit-2462 +-A OUTPUT -j limit-2461 +-A OUTPUT -j limit-2460 +-A OUTPUT -j limit-2459 +-A OUTPUT -j limit-2458 +-A OUTPUT -j limit-2457 +-A OUTPUT -j limit-2456 +-A OUTPUT -j limit-2455 +-A OUTPUT -j limit-2454 +-A OUTPUT -j limit-2453 +-A OUTPUT -j limit-2452 +-A OUTPUT -j limit-2451 +-A OUTPUT -j limit-2450 +-A OUTPUT -j limit-2449 +-A OUTPUT -j limit-2448 +-A OUTPUT -j limit-2447 +-A OUTPUT -j limit-2446 +-A OUTPUT -j limit-2445 +-A OUTPUT -j limit-2444 +-A OUTPUT -j limit-2443 +-A OUTPUT -j limit-2442 +-A OUTPUT -j limit-2441 +-A OUTPUT -j limit-2440 +-A OUTPUT -j limit-2439 +-A OUTPUT -j limit-2438 +-A OUTPUT -j limit-2437 +-A OUTPUT -j limit-2436 +-A OUTPUT -j limit-2435 +-A OUTPUT -j limit-2434 +-A OUTPUT -j limit-2433 +-A OUTPUT -j limit-2432 +-A OUTPUT -j limit-2431 +-A OUTPUT -j limit-2430 +-A OUTPUT -j limit-2429 +-A OUTPUT -j limit-2428 +-A OUTPUT -j limit-2427 +-A OUTPUT -j limit-2426 +-A OUTPUT -j limit-2425 +-A OUTPUT -j limit-2424 +-A OUTPUT -j limit-2423 +-A OUTPUT -j limit-2422 +-A OUTPUT -j limit-2421 +-A OUTPUT -j limit-2420 +-A OUTPUT -j limit-2419 +-A OUTPUT -j limit-2418 +-A OUTPUT -j limit-2417 +-A OUTPUT -j limit-2416 +-A OUTPUT -j limit-2415 +-A OUTPUT -j limit-2414 +-A OUTPUT -j limit-2413 +-A OUTPUT -j limit-2412 +-A OUTPUT -j limit-2411 +-A OUTPUT -j limit-2410 +-A OUTPUT -j limit-2409 +-A OUTPUT -j limit-2408 +-A OUTPUT -j limit-2407 +-A OUTPUT -j limit-2406 +-A OUTPUT -j limit-2405 +-A OUTPUT -j limit-2404 +-A OUTPUT -j limit-2403 +-A OUTPUT -j limit-2402 +-A OUTPUT -j limit-2401 +-A OUTPUT -j limit-2400 +-A OUTPUT -j limit-2399 +-A OUTPUT -j limit-2398 +-A OUTPUT -j limit-2397 +-A OUTPUT -j limit-2396 +-A OUTPUT -j limit-2395 +-A OUTPUT -j limit-2394 +-A OUTPUT -j limit-2393 +-A OUTPUT -j limit-2392 +-A OUTPUT -j limit-2391 +-A OUTPUT -j limit-2390 +-A OUTPUT -j limit-2389 +-A OUTPUT -j limit-2388 +-A OUTPUT -j limit-2387 +-A OUTPUT -j limit-2386 +-A OUTPUT -j limit-2385 +-A OUTPUT -j limit-2384 +-A OUTPUT -j limit-2383 +-A OUTPUT -j limit-2382 +-A OUTPUT -j limit-2381 +-A OUTPUT -j limit-2380 +-A OUTPUT -j limit-2379 +-A OUTPUT -j limit-2378 +-A OUTPUT -j limit-2377 +-A OUTPUT -j limit-2376 +-A OUTPUT -j limit-2375 +-A OUTPUT -j limit-2374 +-A OUTPUT -j limit-2373 +-A OUTPUT -j limit-2372 +-A OUTPUT -j limit-2371 +-A OUTPUT -j limit-2370 +-A OUTPUT -j limit-2369 +-A OUTPUT -j limit-2368 +-A OUTPUT -j limit-2367 +-A OUTPUT -j limit-2366 +-A OUTPUT -j limit-2365 +-A OUTPUT -j limit-2364 +-A OUTPUT -j limit-2363 +-A OUTPUT -j limit-2362 +-A OUTPUT -j limit-2361 +-A OUTPUT -j limit-2360 +-A OUTPUT -j limit-2359 +-A OUTPUT -j limit-2358 +-A OUTPUT -j limit-2357 +-A OUTPUT -j limit-2356 +-A OUTPUT -j limit-2355 +-A OUTPUT -j limit-2354 +-A OUTPUT -j limit-2353 +-A OUTPUT -j limit-2352 +-A OUTPUT -j limit-2351 +-A OUTPUT -j limit-2350 +-A OUTPUT -j limit-2349 +-A OUTPUT -j limit-2348 +-A OUTPUT -j limit-2347 +-A OUTPUT -j limit-2346 +-A OUTPUT -j limit-2345 +-A OUTPUT -j limit-2344 +-A OUTPUT -j limit-2343 +-A OUTPUT -j limit-2342 +-A OUTPUT -j limit-2341 +-A OUTPUT -j limit-2340 +-A OUTPUT -j limit-2339 +-A OUTPUT -j limit-2338 +-A OUTPUT -j limit-2337 +-A OUTPUT -j limit-2336 +-A OUTPUT -j limit-2335 +-A OUTPUT -j limit-2334 +-A OUTPUT -j limit-2333 +-A OUTPUT -j limit-2332 +-A OUTPUT -j limit-2331 +-A OUTPUT -j limit-2330 +-A OUTPUT -j limit-2329 +-A OUTPUT -j limit-2328 +-A OUTPUT -j limit-2327 +-A OUTPUT -j limit-2326 +-A OUTPUT -j limit-2325 +-A OUTPUT -j limit-2324 +-A OUTPUT -j limit-2323 +-A OUTPUT -j limit-2322 +-A OUTPUT -j limit-2321 +-A OUTPUT -j limit-2320 +-A OUTPUT -j limit-2319 +-A OUTPUT -j limit-2318 +-A OUTPUT -j limit-2317 +-A OUTPUT -j limit-2316 +-A OUTPUT -j limit-2315 +-A OUTPUT -j limit-2314 +-A OUTPUT -j limit-2313 +-A OUTPUT -j limit-2312 +-A OUTPUT -j limit-2311 +-A OUTPUT -j limit-2310 +-A OUTPUT -j limit-2309 +-A OUTPUT -j limit-2308 +-A OUTPUT -j limit-2307 +-A OUTPUT -j limit-2306 +-A OUTPUT -j limit-2305 +-A OUTPUT -j limit-2304 +-A OUTPUT -j limit-2303 +-A OUTPUT -j limit-2302 +-A OUTPUT -j limit-2301 +-A OUTPUT -j limit-2300 +-A OUTPUT -j limit-2299 +-A OUTPUT -j limit-2298 +-A OUTPUT -j limit-2297 +-A OUTPUT -j limit-2296 +-A OUTPUT -j limit-2295 +-A OUTPUT -j limit-2294 +-A OUTPUT -j limit-2293 +-A OUTPUT -j limit-2292 +-A OUTPUT -j limit-2291 +-A OUTPUT -j limit-2290 +-A OUTPUT -j limit-2289 +-A OUTPUT -j limit-2288 +-A OUTPUT -j limit-2287 +-A OUTPUT -j limit-2286 +-A OUTPUT -j limit-2285 +-A OUTPUT -j limit-2284 +-A OUTPUT -j limit-2283 +-A OUTPUT -j limit-2282 +-A OUTPUT -j limit-2281 +-A OUTPUT -j limit-2280 +-A OUTPUT -j limit-2279 +-A OUTPUT -j limit-2278 +-A OUTPUT -j limit-2277 +-A OUTPUT -j limit-2276 +-A OUTPUT -j limit-2275 +-A OUTPUT -j limit-2274 +-A OUTPUT -j limit-2273 +-A OUTPUT -j limit-2272 +-A OUTPUT -j limit-2271 +-A OUTPUT -j limit-2270 +-A OUTPUT -j limit-2269 +-A OUTPUT -j limit-2268 +-A OUTPUT -j limit-2267 +-A OUTPUT -j limit-2266 +-A OUTPUT -j limit-2265 +-A OUTPUT -j limit-2264 +-A OUTPUT -j limit-2263 +-A OUTPUT -j limit-2262 +-A OUTPUT -j limit-2261 +-A OUTPUT -j limit-2260 +-A OUTPUT -j limit-2259 +-A OUTPUT -j limit-2258 +-A OUTPUT -j limit-2257 +-A OUTPUT -j limit-2256 +-A OUTPUT -j limit-2255 +-A OUTPUT -j limit-2254 +-A OUTPUT -j limit-2253 +-A OUTPUT -j limit-2252 +-A OUTPUT -j limit-2251 +-A OUTPUT -j limit-2250 +-A OUTPUT -j limit-2249 +-A OUTPUT -j limit-2248 +-A OUTPUT -j limit-2247 +-A OUTPUT -j limit-2246 +-A OUTPUT -j limit-2245 +-A OUTPUT -j limit-2244 +-A OUTPUT -j limit-2243 +-A OUTPUT -j limit-2242 +-A OUTPUT -j limit-2241 +-A OUTPUT -j limit-2240 +-A OUTPUT -j limit-2239 +-A OUTPUT -j limit-2238 +-A OUTPUT -j limit-2237 +-A OUTPUT -j limit-2236 +-A OUTPUT -j limit-2235 +-A OUTPUT -j limit-2234 +-A OUTPUT -j limit-2233 +-A OUTPUT -j limit-2232 +-A OUTPUT -j limit-2231 +-A OUTPUT -j limit-2230 +-A OUTPUT -j limit-2229 +-A OUTPUT -j limit-2228 +-A OUTPUT -j limit-2227 +-A OUTPUT -j limit-2226 +-A OUTPUT -j limit-2225 +-A OUTPUT -j limit-2224 +-A OUTPUT -j limit-2223 +-A OUTPUT -j limit-2222 +-A OUTPUT -j limit-2221 +-A OUTPUT -j limit-2220 +-A OUTPUT -j limit-2219 +-A OUTPUT -j limit-2218 +-A OUTPUT -j limit-2217 +-A OUTPUT -j limit-2216 +-A OUTPUT -j limit-2215 +-A OUTPUT -j limit-2214 +-A OUTPUT -j limit-2213 +-A OUTPUT -j limit-2212 +-A OUTPUT -j limit-2211 +-A OUTPUT -j limit-2210 +-A OUTPUT -j limit-2209 +-A OUTPUT -j limit-2208 +-A OUTPUT -j limit-2207 +-A OUTPUT -j limit-2206 +-A OUTPUT -j limit-2205 +-A OUTPUT -j limit-2204 +-A OUTPUT -j limit-2203 +-A OUTPUT -j limit-2202 +-A OUTPUT -j limit-2201 +-A OUTPUT -j limit-2200 +-A OUTPUT -j limit-2199 +-A OUTPUT -j limit-2198 +-A OUTPUT -j limit-2197 +-A OUTPUT -j limit-2196 +-A OUTPUT -j limit-2195 +-A OUTPUT -j limit-2194 +-A OUTPUT -j limit-2193 +-A OUTPUT -j limit-2192 +-A OUTPUT -j limit-2191 +-A OUTPUT -j limit-2190 +-A OUTPUT -j limit-2189 +-A OUTPUT -j limit-2188 +-A OUTPUT -j limit-2187 +-A OUTPUT -j limit-2186 +-A OUTPUT -j limit-2185 +-A OUTPUT -j limit-2184 +-A OUTPUT -j limit-2183 +-A OUTPUT -j limit-2182 +-A OUTPUT -j limit-2181 +-A OUTPUT -j limit-2180 +-A OUTPUT -j limit-2179 +-A OUTPUT -j limit-2178 +-A OUTPUT -j limit-2177 +-A OUTPUT -j limit-2176 +-A OUTPUT -j limit-2175 +-A OUTPUT -j limit-2174 +-A OUTPUT -j limit-2173 +-A OUTPUT -j limit-2172 +-A OUTPUT -j limit-2171 +-A OUTPUT -j limit-2170 +-A OUTPUT -j limit-2169 +-A OUTPUT -j limit-2168 +-A OUTPUT -j limit-2167 +-A OUTPUT -j limit-2166 +-A OUTPUT -j limit-2165 +-A OUTPUT -j limit-2164 +-A OUTPUT -j limit-2163 +-A OUTPUT -j limit-2162 +-A OUTPUT -j limit-2161 +-A OUTPUT -j limit-2160 +-A OUTPUT -j limit-2159 +-A OUTPUT -j limit-2158 +-A OUTPUT -j limit-2157 +-A OUTPUT -j limit-2156 +-A OUTPUT -j limit-2155 +-A OUTPUT -j limit-2154 +-A OUTPUT -j limit-2153 +-A OUTPUT -j limit-2152 +-A OUTPUT -j limit-2151 +-A OUTPUT -j limit-2150 +-A OUTPUT -j limit-2149 +-A OUTPUT -j limit-2148 +-A OUTPUT -j limit-2147 +-A OUTPUT -j limit-2146 +-A OUTPUT -j limit-2145 +-A OUTPUT -j limit-2144 +-A OUTPUT -j limit-2143 +-A OUTPUT -j limit-2142 +-A OUTPUT -j limit-2141 +-A OUTPUT -j limit-2140 +-A OUTPUT -j limit-2139 +-A OUTPUT -j limit-2138 +-A OUTPUT -j limit-2137 +-A OUTPUT -j limit-2136 +-A OUTPUT -j limit-2135 +-A OUTPUT -j limit-2134 +-A OUTPUT -j limit-2133 +-A OUTPUT -j limit-2132 +-A OUTPUT -j limit-2131 +-A OUTPUT -j limit-2130 +-A OUTPUT -j limit-2129 +-A OUTPUT -j limit-2128 +-A OUTPUT -j limit-2127 +-A OUTPUT -j limit-2126 +-A OUTPUT -j limit-2125 +-A OUTPUT -j limit-2124 +-A OUTPUT -j limit-2123 +-A OUTPUT -j limit-2122 +-A OUTPUT -j limit-2121 +-A OUTPUT -j limit-2120 +-A OUTPUT -j limit-2119 +-A OUTPUT -j limit-2118 +-A OUTPUT -j limit-2117 +-A OUTPUT -j limit-2116 +-A OUTPUT -j limit-2115 +-A OUTPUT -j limit-2114 +-A OUTPUT -j limit-2113 +-A OUTPUT -j limit-2112 +-A OUTPUT -j limit-2111 +-A OUTPUT -j limit-2110 +-A OUTPUT -j limit-2109 +-A OUTPUT -j limit-2108 +-A OUTPUT -j limit-2107 +-A OUTPUT -j limit-2106 +-A OUTPUT -j limit-2105 +-A OUTPUT -j limit-2104 +-A OUTPUT -j limit-2103 +-A OUTPUT -j limit-2102 +-A OUTPUT -j limit-2101 +-A OUTPUT -j limit-2100 +-A OUTPUT -j limit-2099 +-A OUTPUT -j limit-2098 +-A OUTPUT -j limit-2097 +-A OUTPUT -j limit-2096 +-A OUTPUT -j limit-2095 +-A OUTPUT -j limit-2094 +-A OUTPUT -j limit-2093 +-A OUTPUT -j limit-2092 +-A OUTPUT -j limit-2091 +-A OUTPUT -j limit-2090 +-A OUTPUT -j limit-2089 +-A OUTPUT -j limit-2088 +-A OUTPUT -j limit-2087 +-A OUTPUT -j limit-2086 +-A OUTPUT -j limit-2085 +-A OUTPUT -j limit-2084 +-A OUTPUT -j limit-2083 +-A OUTPUT -j limit-2082 +-A OUTPUT -j limit-2081 +-A OUTPUT -j limit-2080 +-A OUTPUT -j limit-2079 +-A OUTPUT -j limit-2078 +-A OUTPUT -j limit-2077 +-A OUTPUT -j limit-2076 +-A OUTPUT -j limit-2075 +-A OUTPUT -j limit-2074 +-A OUTPUT -j limit-2073 +-A OUTPUT -j limit-2072 +-A OUTPUT -j limit-2071 +-A OUTPUT -j limit-2070 +-A OUTPUT -j limit-2069 +-A OUTPUT -j limit-2068 +-A OUTPUT -j limit-2067 +-A OUTPUT -j limit-2066 +-A OUTPUT -j limit-2065 +-A OUTPUT -j limit-2064 +-A OUTPUT -j limit-2063 +-A OUTPUT -j limit-2062 +-A OUTPUT -j limit-2061 +-A OUTPUT -j limit-2060 +-A OUTPUT -j limit-2059 +-A OUTPUT -j limit-2058 +-A OUTPUT -j limit-2057 +-A OUTPUT -j limit-2056 +-A OUTPUT -j limit-2055 +-A OUTPUT -j limit-2054 +-A OUTPUT -j limit-2053 +-A OUTPUT -j limit-2052 +-A OUTPUT -j limit-2051 +-A OUTPUT -j limit-2050 +-A OUTPUT -j limit-2049 +-A OUTPUT -j limit-2048 +-A OUTPUT -j limit-2047 +-A OUTPUT -j limit-2046 +-A OUTPUT -j limit-2045 +-A OUTPUT -j limit-2044 +-A OUTPUT -j limit-2043 +-A OUTPUT -j limit-2042 +-A OUTPUT -j limit-2041 +-A OUTPUT -j limit-2040 +-A OUTPUT -j limit-2039 +-A OUTPUT -j limit-2038 +-A OUTPUT -j limit-2037 +-A OUTPUT -j limit-2036 +-A OUTPUT -j limit-2035 +-A OUTPUT -j limit-2034 +-A OUTPUT -j limit-2033 +-A OUTPUT -j limit-2032 +-A OUTPUT -j limit-2031 +-A OUTPUT -j limit-2030 +-A OUTPUT -j limit-2029 +-A OUTPUT -j limit-2028 +-A OUTPUT -j limit-2027 +-A OUTPUT -j limit-2026 +-A OUTPUT -j limit-2025 +-A OUTPUT -j limit-2024 +-A OUTPUT -j limit-2023 +-A OUTPUT -j limit-2022 +-A OUTPUT -j limit-2021 +-A OUTPUT -j limit-2020 +-A OUTPUT -j limit-2019 +-A OUTPUT -j limit-2018 +-A OUTPUT -j limit-2017 +-A OUTPUT -j limit-2016 +-A OUTPUT -j limit-2015 +-A OUTPUT -j limit-2014 +-A OUTPUT -j limit-2013 +-A OUTPUT -j limit-2012 +-A OUTPUT -j limit-2011 +-A OUTPUT -j limit-2010 +-A OUTPUT -j limit-2009 +-A OUTPUT -j limit-2008 +-A OUTPUT -j limit-2007 +-A OUTPUT -j limit-2006 +-A OUTPUT -j limit-2005 +-A OUTPUT -j limit-2004 +-A OUTPUT -j limit-2003 +-A OUTPUT -j limit-2002 +-A OUTPUT -j limit-2001 +-A OUTPUT -j limit-2000 +-A OUTPUT -j limit-1999 +-A OUTPUT -j limit-1998 +-A OUTPUT -j limit-1997 +-A OUTPUT -j limit-1996 +-A OUTPUT -j limit-1995 +-A OUTPUT -j limit-1994 +-A OUTPUT -j limit-1993 +-A OUTPUT -j limit-1992 +-A OUTPUT -j limit-1991 +-A OUTPUT -j limit-1990 +-A OUTPUT -j limit-1989 +-A OUTPUT -j limit-1988 +-A OUTPUT -j limit-1987 +-A OUTPUT -j limit-1986 +-A OUTPUT -j limit-1985 +-A OUTPUT -j limit-1984 +-A OUTPUT -j limit-1983 +-A OUTPUT -j limit-1982 +-A OUTPUT -j limit-1981 +-A OUTPUT -j limit-1980 +-A OUTPUT -j limit-1979 +-A OUTPUT -j limit-1978 +-A OUTPUT -j limit-1977 +-A OUTPUT -j limit-1976 +-A OUTPUT -j limit-1975 +-A OUTPUT -j limit-1974 +-A OUTPUT -j limit-1973 +-A OUTPUT -j limit-1972 +-A OUTPUT -j limit-1971 +-A OUTPUT -j limit-1970 +-A OUTPUT -j limit-1969 +-A OUTPUT -j limit-1968 +-A OUTPUT -j limit-1967 +-A OUTPUT -j limit-1966 +-A OUTPUT -j limit-1965 +-A OUTPUT -j limit-1964 +-A OUTPUT -j limit-1963 +-A OUTPUT -j limit-1962 +-A OUTPUT -j limit-1961 +-A OUTPUT -j limit-1960 +-A OUTPUT -j limit-1959 +-A OUTPUT -j limit-1958 +-A OUTPUT -j limit-1957 +-A OUTPUT -j limit-1956 +-A OUTPUT -j limit-1955 +-A OUTPUT -j limit-1954 +-A OUTPUT -j limit-1953 +-A OUTPUT -j limit-1952 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 @@ -8364,11 +13042,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-651 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-659 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 @@ -8380,11 +13058,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-671 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-675 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 @@ -8396,11 +13074,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-683 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-687 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 @@ -8412,11 +13090,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 @@ -8436,11 +13114,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-723 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-724 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-725 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-321 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-726 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-727 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-728 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-729 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-325 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-730 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-731 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-732 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-733 @@ -8452,11 +13130,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-739 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-740 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-741 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-337 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-742 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-743 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-744 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-745 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-341 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-746 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-747 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-748 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-749 @@ -8468,11 +13146,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-755 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-756 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-757 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-353 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-758 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-759 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-760 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-761 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-357 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-762 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-763 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-764 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-765 @@ -8484,11 +13162,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-771 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-772 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-773 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-369 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-774 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-775 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-776 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-777 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-778 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-779 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-780 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-781 @@ -8508,11 +13186,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-795 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-796 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-797 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-798 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-799 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-800 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-801 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-802 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-803 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-804 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-805 @@ -8524,11 +13202,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-811 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-812 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-813 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-814 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-815 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-816 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-817 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-818 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-819 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-820 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-821 @@ -8540,11 +13218,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-827 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-828 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-829 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-830 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-831 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-832 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-833 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-834 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-835 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-836 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-837 @@ -8556,11 +13234,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-843 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-844 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-845 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-846 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-847 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-848 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-849 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-850 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-851 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-852 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-853 @@ -8580,11 +13258,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-867 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-868 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-869 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-393 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-870 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-871 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-872 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-873 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-874 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-875 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-876 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-877 @@ -8596,11 +13274,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-883 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-884 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-885 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-409 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-886 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-887 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-888 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-889 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-413 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-890 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-891 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-892 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-893 @@ -8612,11 +13290,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-899 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-900 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-901 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-425 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-902 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-903 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-904 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-905 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-429 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-906 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-907 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-908 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-909 @@ -8628,11 +13306,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-915 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-916 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-917 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-441 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-918 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-919 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-920 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-921 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-445 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-922 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-923 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-924 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-925 @@ -8652,11 +13330,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-939 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-940 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-941 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-942 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-943 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-944 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-945 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-946 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-947 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-948 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-949 @@ -8668,11 +13346,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-955 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-956 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-957 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-958 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-959 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-960 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-961 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-962 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-963 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-964 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-965 @@ -8684,11 +13362,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-971 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-972 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-973 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-974 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-975 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-976 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-977 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-978 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-979 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-980 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-981 @@ -8700,11 +13378,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-987 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-988 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-989 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-990 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-991 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-992 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-993 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-994 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-995 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-996 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-997 @@ -8717,18 +13395,18 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1004 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1005 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1006 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1007 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1008 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1009 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1010 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1011 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1012 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1013 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-465 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1014 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1015 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1016 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1017 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-469 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1018 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1019 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1020 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1021 @@ -8737,14 +13415,14 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1024 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1025 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1026 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1027 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1028 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1029 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-481 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1030 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1031 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1032 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1033 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-485 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1034 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1035 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1036 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1037 @@ -8756,14 +13434,14 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1043 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1044 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1045 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-497 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1047 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1046 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1048 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1049 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-501 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1050 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1051 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1052 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1053 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1054 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1055 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1056 @@ -8772,18 +13450,18 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1059 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1060 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1061 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-513 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1062 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1063 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1064 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1065 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-517 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1067 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1066 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1068 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1069 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1070 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1071 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1072 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1073 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1074 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1075 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1076 @@ -8796,27 +13474,27 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1083 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1084 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1085 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1086 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1087 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1088 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1089 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1090 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1091 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1092 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1093 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1094 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1095 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1096 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1097 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-581 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1098 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1099 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1100 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1101 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1103 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1102 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-587 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1104 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1105 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1106 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1107 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1108 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1109 @@ -8827,13 +13505,13 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1114 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1115 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1116 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1117 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-601 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1118 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1119 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1120 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1121 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1123 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1122 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-607 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1124 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1125 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1126 @@ -8844,16 +13522,16 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1131 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1132 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1133 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1134 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1135 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1136 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1137 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-621 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1138 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1139 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1140 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1141 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1142 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1143 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-627 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1144 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1145 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1146 @@ -8867,13 +13545,13 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1154 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1155 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1156 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1157 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-537 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-641 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1158 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1159 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1160 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1161 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-541 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1163 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1162 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-647 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1164 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1165 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1166 @@ -8884,11 +13562,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1171 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1172 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1173 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-553 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1174 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1175 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1176 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1177 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-557 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1178 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1179 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1180 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1181 @@ -8897,14 +13575,14 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1184 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1185 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1186 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1187 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-671 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1188 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1189 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-569 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1190 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1191 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1192 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1193 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-573 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-677 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1194 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1195 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1196 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1197 @@ -8916,14 +13594,14 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1203 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1204 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1205 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-585 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1207 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1206 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-691 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1208 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1209 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-589 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1210 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1211 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1212 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1213 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-697 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1214 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1215 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1216 @@ -8937,13 +13615,13 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1224 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1225 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1226 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1227 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-711 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1228 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1229 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1230 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1231 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1232 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1233 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-717 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1234 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1235 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1236 @@ -8957,345 +13635,1221 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1244 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1245 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1246 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1247 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-731 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1248 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1249 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1250 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1251 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1252 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1253 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-737 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1254 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1255 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1256 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1257 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1258 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1259 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1260 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1261 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1262 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1263 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1264 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1265 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1266 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1267 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1268 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1269 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1270 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1271 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1272 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1273 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1274 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1275 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1276 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1278 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1279 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1280 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1281 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1282 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1284 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1285 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1286 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1287 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1288 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1289 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1290 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1291 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1292 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1293 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1294 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1295 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1296 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1298 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1299 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1300 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1301 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1302 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1304 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1305 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1306 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1307 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1308 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1309 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1310 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1311 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1312 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1313 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1314 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1315 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1316 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1318 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1319 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1320 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1321 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1322 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1324 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1325 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1326 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1327 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1328 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1329 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1330 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1331 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1332 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1333 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1334 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1335 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1336 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1338 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1339 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1340 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1341 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1342 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1344 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1345 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1346 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1347 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1348 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1349 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1350 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1351 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1352 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1353 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1354 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1355 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1356 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1357 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1358 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1359 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1360 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1361 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1362 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1363 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1364 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1365 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1366 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-761 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1368 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1369 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1370 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1371 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1372 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-767 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1374 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1375 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1376 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1377 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1378 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1379 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1380 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1381 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1382 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1383 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1384 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1385 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1386 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-781 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1388 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1389 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1390 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1391 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1392 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-787 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1394 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1395 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1396 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1397 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1398 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1399 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1400 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1401 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1402 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1403 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1404 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1405 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1406 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-801 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1408 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1409 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1410 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1411 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1412 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-807 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1414 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1415 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1416 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1417 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1418 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1419 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1420 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1421 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1422 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1423 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1424 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1425 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1426 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-821 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1428 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1429 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1430 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1431 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1432 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-827 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1434 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1435 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1436 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1437 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1438 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1439 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1440 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1441 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1442 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1443 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1444 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1445 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1446 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1447 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1448 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1449 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1450 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1451 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1452 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1453 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1454 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1455 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1456 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1458 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1459 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1460 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1461 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1462 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1464 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1465 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1466 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1467 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1468 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1469 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1470 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1471 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1472 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1473 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1474 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1475 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1476 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1478 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1479 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1480 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1481 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1482 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1484 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1485 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1486 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1487 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1488 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1489 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1490 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1491 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1492 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1493 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1494 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1495 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1496 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1498 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1499 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1500 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1501 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1502 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1504 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1505 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1506 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1507 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1508 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1509 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1510 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1511 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1512 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1513 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1514 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1515 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1516 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1518 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1519 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1520 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1521 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1522 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1524 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1525 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1526 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1527 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1528 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1529 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1530 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1531 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1532 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1533 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1534 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1535 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1536 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1537 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1538 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1539 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1540 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1541 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1542 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1543 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1544 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1545 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1546 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-851 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1548 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1549 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1550 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1551 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1552 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-857 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1554 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1555 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1556 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1557 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1558 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1559 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1560 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1561 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1562 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1563 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1564 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1565 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1566 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-871 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1568 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1569 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1570 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1571 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1572 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-877 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1574 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1575 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1576 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1577 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1578 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1579 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1580 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1581 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1582 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1583 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1584 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1585 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1586 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-891 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1588 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1589 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1590 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1591 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1592 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-897 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1594 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1595 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1596 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1597 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1598 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1599 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1600 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1601 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1602 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1603 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1604 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1605 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1606 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-911 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1608 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1609 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1610 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1611 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1612 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-917 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1614 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1615 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1616 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1617 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1618 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1619 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1620 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1621 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1622 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1623 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1624 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1625 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1626 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1627 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1628 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1629 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1630 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1631 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1632 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1633 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1634 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1635 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1636 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-941 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1638 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1639 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1640 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1641 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1642 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-947 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1644 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1645 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1646 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1647 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1648 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1649 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1650 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1651 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1652 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1653 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1654 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1655 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1656 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-961 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1658 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1659 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1660 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1661 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1662 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-967 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1664 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1665 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1666 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1667 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1668 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1669 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1670 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1671 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1672 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1673 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1674 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1675 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1676 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-981 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1678 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1679 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1680 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1681 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1682 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-987 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1684 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1685 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1686 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1687 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1688 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1689 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1690 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1691 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1692 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1693 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1694 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1695 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1696 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1001 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1698 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1699 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1700 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1701 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1702 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1007 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1704 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1705 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1706 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1707 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1708 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1709 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1710 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1711 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1712 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1713 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1714 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1715 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1716 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1717 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1718 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1719 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1720 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1721 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1722 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1723 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1724 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1725 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1726 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1728 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1729 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1730 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1731 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1732 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1734 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1735 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1736 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1737 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1738 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1739 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1740 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1741 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1742 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1743 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1744 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1745 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1746 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1748 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1749 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1750 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1751 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1752 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1754 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1755 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1756 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1757 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1758 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1759 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1760 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1761 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1762 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1763 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1764 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1765 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1766 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1768 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1769 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1770 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1771 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1772 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1774 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1775 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1776 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1777 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1778 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1779 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1780 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1781 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1782 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1783 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1784 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1785 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1786 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1788 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1789 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1790 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1791 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1792 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1794 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1795 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1796 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1797 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1798 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1799 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1800 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1801 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1802 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1803 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1804 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1805 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1806 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1807 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1808 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1809 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1810 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1811 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1812 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1813 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1814 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1815 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1816 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1031 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1818 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1819 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1820 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1821 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1822 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1037 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1824 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1825 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1826 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1827 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1828 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1829 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1830 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1831 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1832 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1833 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1834 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1835 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1836 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1051 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1838 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1839 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1840 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1841 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1842 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1844 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1845 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1846 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1847 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1848 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1849 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1850 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1851 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1852 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1853 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1854 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1855 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1856 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1071 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1858 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1859 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1860 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1861 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1862 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1864 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1865 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1866 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1867 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1868 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1869 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1870 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1871 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1872 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1873 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1874 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1875 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1876 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1878 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1879 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1880 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1881 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1882 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1097 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1884 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1885 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1886 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1887 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1888 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1889 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1890 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1891 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1892 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1893 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1894 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1895 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1896 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1897 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1898 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1899 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1900 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1901 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1902 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1903 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1904 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1905 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1906 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1907 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1908 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1909 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1910 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1911 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1912 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1913 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1914 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1915 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1916 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1917 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1918 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1919 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1920 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1921 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1922 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1923 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1924 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1925 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1926 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1927 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1928 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1929 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1930 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1931 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1932 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1933 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1934 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1935 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1936 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1937 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1938 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1939 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1940 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1941 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1942 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1943 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1944 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1945 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1946 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1947 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1948 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1949 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1950 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1951 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-0 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-1 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-2 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-3 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-4 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-5 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-6 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-7 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-8 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-9 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-10 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-11 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-12 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-13 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-14 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-15 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-16 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-17 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-18 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-19 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-20 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-21 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-22 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-23 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-24 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-25 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-26 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-27 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-28 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-29 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-30 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-31 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-32 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-33 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-34 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-35 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-36 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-37 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-38 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-39 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-40 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-41 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-42 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-43 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-44 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-45 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-46 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-47 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-48 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-49 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-50 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-51 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-52 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-53 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-54 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-55 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-56 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-57 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-58 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-59 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-60 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-61 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-62 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-63 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-64 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-65 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-66 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-67 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-68 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-69 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-70 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-71 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-72 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-73 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-74 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-75 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-76 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-77 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-78 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-79 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-80 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-81 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-82 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-83 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-84 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-85 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-86 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-87 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-88 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-89 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-90 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-91 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-92 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-93 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-94 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-95 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-96 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-97 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-98 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-99 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-100 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-101 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-102 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-103 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-104 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-105 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-106 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-107 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-108 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-109 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-110 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-111 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-112 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-113 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-114 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-115 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-116 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-117 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-118 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-119 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-120 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-121 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-122 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-123 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-124 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-125 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-126 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-127 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-128 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-129 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-130 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-131 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-132 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-133 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-134 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-135 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-136 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-137 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-138 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-139 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-140 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-141 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-142 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-143 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-144 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-145 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-146 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-147 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-148 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-149 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-150 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-151 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-152 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-153 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-154 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-155 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-156 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-157 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-158 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-159 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-160 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-161 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-162 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-163 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-164 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-165 +-A OUTPUT -j logaccept-final-166 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-167 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-168 +-A OUTPUT -j logaccept-final-169 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-170 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-171 +-A OUTPUT -j logaccept-final-172 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-173 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-174 +-A OUTPUT -j logaccept-final-175 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-176 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-177 +-A OUTPUT -j logaccept-final-178 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-179 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-180 +-A OUTPUT -j logaccept-final-181 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-182 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-183 +-A OUTPUT -j logaccept-final-184 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-185 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-186 +-A OUTPUT -j logaccept-final-187 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-188 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-189 +-A OUTPUT -j logaccept-final-190 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-191 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-192 +-A OUTPUT -j logaccept-final-193 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-194 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-195 +-A OUTPUT -j logaccept-final-196 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-197 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-198 +-A OUTPUT -j logaccept-final-199 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-200 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-201 +-A OUTPUT -j logaccept-final-202 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-203 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-204 +-A OUTPUT -j logaccept-final-205 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-206 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-207 +-A OUTPUT -j logaccept-final-208 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-209 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-210 +-A OUTPUT -j logaccept-final-211 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-212 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-213 +-A OUTPUT -j logaccept-final-214 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-215 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-216 +-A OUTPUT -j logaccept-final-217 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-218 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-219 +-A OUTPUT -j logaccept-final-220 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-221 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-222 +-A OUTPUT -j logaccept-final-223 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-224 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-225 +-A OUTPUT -j logaccept-final-226 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-227 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-228 +-A OUTPUT -j logaccept-final-229 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-230 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-231 +-A OUTPUT -j logaccept-final-232 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-233 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-234 +-A OUTPUT -j logaccept-final-235 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-236 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-237 +-A OUTPUT -j logaccept-final-238 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-239 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-240 +-A OUTPUT -j logaccept-final-241 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-242 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-243 +-A OUTPUT -j logaccept-final-244 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-245 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-246 +-A OUTPUT -j logaccept-final-247 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-248 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-249 +-A OUTPUT -j logaccept-final-250 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-251 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-252 +-A OUTPUT -j logaccept-final-253 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-254 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-255 +-A OUTPUT -j logaccept-final-256 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-257 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-258 +-A OUTPUT -j logaccept-final-259 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-260 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-261 +-A OUTPUT -j logaccept-final-262 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-263 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-264 +-A OUTPUT -j logaccept-final-265 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-266 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-267 +-A OUTPUT -j logaccept-final-268 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-269 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-270 +-A OUTPUT -j logaccept-final-271 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-272 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-273 +-A OUTPUT -j logaccept-final-274 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-275 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-276 +-A OUTPUT -j logaccept-final-277 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-278 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-279 +-A OUTPUT -j logaccept-final-280 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-281 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-282 +-A OUTPUT -j logaccept-final-283 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-284 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-285 +-A OUTPUT -j logaccept-final-286 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-287 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-288 +-A OUTPUT -j logaccept-final-289 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-290 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-291 +-A OUTPUT -j logaccept-final-292 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-293 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-294 +-A OUTPUT -j logaccept-final-295 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-296 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-297 +-A OUTPUT -j logaccept-final-298 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-299 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-300 +-A OUTPUT -j logaccept-final-301 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-302 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-303 +-A OUTPUT -j logaccept-final-304 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-305 -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT @@ -9624,5249 +15178,9316 @@ -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set --A OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set --A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set --A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-1184 --A OUTPUT --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -j logaccept-54 --A OUTPUT -j logdrop-1185 --A OUTPUT -j logpass-0 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -j logaccept-55 --A OUTPUT -j logdrop-1186 --A OUTPUT -j logpass-1 --A OUTPUT -m limit --limit 12/minute -j ULOG --A OUTPUT -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT --A OUTPUT -p icmp -j icmp-routing --A icmp-routing -p icmp --icmp-type 3 -j ACCEPT --A icmp-routing -p icmp --icmp-type 11 -j ACCEPT --A icmp-routing -p icmp --icmp-type 12 -j ACCEPT --A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-0 --A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 --A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set --A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-10 -m limit --limit 1/second -j LOG --A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-100 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-28 --A limit-100 -j ACCEPT --A limit-1000 -m recent --name limit-1000 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-451 --A limit-1000 -m recent --name limit-1000 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1001 -m recent --name limit-1001 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-452 --A limit-1001 -m recent --name limit-1001 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1002 -m recent --name limit-1002 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-453 --A limit-1002 -m recent --name limit-1002 --rsource --mask 255.255.255.255 --set --A limit-1003 -m recent --name limit-1003 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-454 --A limit-1003 -m limit --limit 12/minute -j ULOG --A limit-1003 -m recent --name limit-1003 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1004 -m recent --name limit-1004 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-455 --A limit-1004 -m recent --name limit-1004 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-456 --A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-457 --A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-458 --A limit-1007 -m limit --limit 1/second -j LOG --A limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-459 --A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-460 --A limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-101 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-29 --A limit-1010 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-461 --A limit-1010 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1011 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-462 --A limit-1011 -m limit --limit 12/minute -j ULOG --A limit-1011 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1012 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-463 --A limit-1012 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1013 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-464 --A limit-1013 -j ACCEPT --A limit-1015 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-466 --A limit-1015 -m limit --limit 1/second -j LOG --A limit-1015 -j ACCEPT --A limit-1016 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-467 --A limit-1016 -m limit --limit 1/second -j LOG --A limit-1017 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-468 --A limit-1017 -j ACCEPT --A limit-1019 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-470 --A limit-1019 -m limit --limit 12/minute -j ULOG --A limit-1019 -j ACCEPT --A limit-102 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 --A limit-102 -m limit --limit 12/minute -j ULOG --A limit-102 -j ACCEPT --A limit-1020 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-471 --A limit-1020 -m limit --limit 12/minute -j ULOG --A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-472 --A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-473 --A limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-474 --A limit-1023 -m limit --limit 1/second -j LOG --A limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-475 --A limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-476 --A limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1026 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-477 --A limit-1026 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1027 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-478 --A limit-1027 -m limit --limit 12/minute -j ULOG --A limit-1027 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1028 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-479 --A limit-1028 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1029 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-480 --A limit-1029 -j ACCEPT --A limit-103 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 --A limit-103 -m limit --limit 12/minute -j ULOG --A limit-1031 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-482 --A limit-1031 -m limit --limit 1/second -j LOG --A limit-1031 -j ACCEPT --A limit-1032 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-483 --A limit-1032 -m limit --limit 1/second -j LOG --A limit-1033 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-484 --A limit-1033 -j ACCEPT --A limit-1035 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-486 --A limit-1035 -m limit --limit 12/minute -j ULOG --A limit-1035 -j ACCEPT --A limit-1036 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-487 --A limit-1036 -m limit --limit 12/minute -j ULOG --A limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-488 --A limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-489 --A limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-490 --A limit-1039 -m limit --limit 1/second -j LOG --A limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-104 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-32 --A limit-104 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-491 --A limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-492 --A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-493 --A limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-494 --A limit-1043 -m limit --limit 12/minute -j ULOG --A limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-495 --A limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-496 --A limit-1045 -j ACCEPT --A limit-1047 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-498 --A limit-1047 -m limit --limit 1/second -j LOG --A limit-1047 -j ACCEPT --A limit-1048 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-499 --A limit-1048 -m limit --limit 1/second -j LOG --A limit-1049 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-500 --A limit-1049 -j ACCEPT --A limit-105 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-33 --A limit-105 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1051 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-502 --A limit-1051 -m limit --limit 12/minute -j ULOG --A limit-1051 -j ACCEPT --A limit-1052 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-503 --A limit-1052 -m limit --limit 12/minute -j ULOG --A limit-1053 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-504 --A limit-1053 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1054 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-505 --A limit-1054 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1055 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-506 --A limit-1055 -m limit --limit 1/second -j LOG --A limit-1055 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-507 --A limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-508 --A limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-509 --A limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-510 --A limit-1059 -m limit --limit 12/minute -j ULOG --A limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-106 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-34 --A limit-106 -m limit --limit 1/second -j LOG --A limit-106 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-511 --A limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-512 --A limit-1061 -j ACCEPT --A limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-514 --A limit-1063 -m limit --limit 1/second -j LOG --A limit-1063 -j ACCEPT --A limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-515 --A limit-1064 -m limit --limit 1/second -j LOG --A limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-516 --A limit-1065 -j ACCEPT --A limit-1067 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-518 --A limit-1067 -m limit --limit 12/minute -j ULOG --A limit-1067 -j ACCEPT --A limit-1068 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-519 --A limit-1068 -m limit --limit 12/minute -j ULOG --A limit-1069 -m recent --name limit-1069 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1069 -m recent --name limit-1069 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-107 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-35 --A limit-107 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1070 -m recent --name limit-1070 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1070 -m recent --name limit-1070 --rsource --mask 255.255.255.255 --set --A limit-1071 -m recent --name limit-1071 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1071 -m limit --limit 1/second -j LOG --A limit-1071 -m recent --name limit-1071 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1072 -m recent --name limit-1072 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1072 -m recent --name limit-1072 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1073 -m recent --name limit-1073 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1073 -m recent --name limit-1073 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set --A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1075 -m limit --limit 12/minute -j ULOG --A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1077 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1077 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1078 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1078 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1079 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1079 -m limit --limit 1/second -j LOG --A limit-1079 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-108 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-36 --A limit-108 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1080 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1080 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1081 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1081 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1082 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1082 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1083 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1083 -m limit --limit 12/minute -j ULOG --A limit-1083 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1084 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1084 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1085 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1085 -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1087 -m limit --limit 1/second -j LOG --A limit-1087 -j ACCEPT --A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1088 -m limit --limit 1/second -j LOG --A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1089 -j ACCEPT --A limit-109 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-37 --A limit-109 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1091 -m limit --limit 12/minute -j ULOG --A limit-1091 -j ACCEPT --A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1092 -m limit --limit 12/minute -j ULOG --A limit-1093 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1093 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1094 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1094 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1095 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1095 -m limit --limit 1/second -j LOG --A limit-1095 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1096 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1096 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1097 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1097 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1099 -m limit --limit 12/minute -j ULOG --A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-110 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-38 --A limit-110 -m limit --limit 12/minute -j ULOG --A limit-110 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1101 -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1103 -m limit --limit 1/second -j LOG --A limit-1103 -j ACCEPT --A limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1104 -m limit --limit 1/second -j LOG --A limit-1105 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1105 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1107 -m limit --limit 12/minute -j ULOG --A limit-1107 -j ACCEPT --A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1108 -m limit --limit 12/minute -j ULOG --A limit-1109 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1109 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-111 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-39 --A limit-111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1111 -m limit --limit 1/second -j LOG --A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1115 -m limit --limit 12/minute -j ULOG --A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1117 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1117 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1119 -m limit --limit 1/second -j LOG --A limit-1119 -j ACCEPT --A limit-112 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-40 --A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1120 -m limit --limit 1/second -j LOG --A limit-1121 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1121 -j ACCEPT --A limit-1123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1123 -m limit --limit 12/minute -j ULOG --A limit-1123 -j ACCEPT --A limit-1124 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1124 -m limit --limit 12/minute -j ULOG --A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1127 -m limit --limit 1/second -j LOG --A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1129 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1129 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-113 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-41 --A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1131 -m limit --limit 12/minute -j ULOG --A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1133 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1133 -j ACCEPT --A limit-1135 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1135 -m limit --limit 1/second -j LOG --A limit-1135 -j ACCEPT --A limit-1136 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1136 -m limit --limit 1/second -j LOG --A limit-1137 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1137 -j ACCEPT --A limit-1139 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1139 -m limit --limit 12/minute -j ULOG --A limit-1139 -j ACCEPT --A limit-114 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-42 --A limit-114 -m limit --limit 1/second -j LOG --A limit-114 -j ACCEPT --A limit-1140 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1140 -m limit --limit 12/minute -j ULOG --A limit-1141 -m recent --name limit-1141 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-520 --A limit-1141 -m recent --name limit-1141 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1142 -m recent --name limit-1142 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-521 --A limit-1142 -m recent --name limit-1142 --rsource --mask 255.255.255.255 --set --A limit-1143 -m recent --name limit-1143 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-522 --A limit-1143 -m limit --limit 1/second -j LOG --A limit-1143 -m recent --name limit-1143 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1144 -m recent --name limit-1144 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-523 --A limit-1144 -m recent --name limit-1144 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1145 -m recent --name limit-1145 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-524 --A limit-1145 -m recent --name limit-1145 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1146 -m recent --name limit-1146 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-525 --A limit-1146 -m recent --name limit-1146 --rsource --mask 255.255.255.255 --set --A limit-1147 -m recent --name limit-1147 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-526 --A limit-1147 -m limit --limit 12/minute -j ULOG --A limit-1147 -m recent --name limit-1147 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1148 -m recent --name limit-1148 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-527 --A limit-1148 -m recent --name limit-1148 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-528 --A limit-1149 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-115 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 --A limit-115 -m limit --limit 1/second -j LOG --A limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-529 --A limit-1150 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1151 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-530 --A limit-1151 -m limit --limit 1/second -j LOG --A limit-1151 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1152 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-531 --A limit-1152 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1153 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-532 --A limit-1153 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1154 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-533 --A limit-1154 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1155 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-534 --A limit-1155 -m limit --limit 12/minute -j ULOG --A limit-1155 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1156 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-535 --A limit-1156 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1157 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-536 --A limit-1157 -j ACCEPT --A limit-1159 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-538 --A limit-1159 -m limit --limit 1/second -j LOG --A limit-1159 -j ACCEPT --A limit-116 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 --A limit-116 -j ACCEPT --A limit-1160 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-539 --A limit-1160 -m limit --limit 1/second -j LOG --A limit-1161 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-540 --A limit-1161 -j ACCEPT --A limit-1163 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-542 --A limit-1163 -m limit --limit 12/minute -j ULOG --A limit-1163 -j ACCEPT --A limit-1164 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-543 --A limit-1164 -m limit --limit 12/minute -j ULOG --A limit-1165 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-544 --A limit-1165 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1166 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-545 --A limit-1166 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1167 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-546 --A limit-1167 -m limit --limit 1/second -j LOG --A limit-1167 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1168 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-547 --A limit-1168 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1169 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-548 --A limit-1169 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-117 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 --A limit-1170 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-549 --A limit-1170 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1171 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-550 --A limit-1171 -m limit --limit 12/minute -j ULOG --A limit-1171 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1172 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-551 --A limit-1172 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1173 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-552 --A limit-1173 -j ACCEPT --A limit-1175 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-554 --A limit-1175 -m limit --limit 1/second -j LOG --A limit-1175 -j ACCEPT --A limit-1176 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-555 --A limit-1176 -m limit --limit 1/second -j LOG --A limit-1177 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-556 --A limit-1177 -j ACCEPT --A limit-1179 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-558 --A limit-1179 -m limit --limit 12/minute -j ULOG --A limit-1179 -j ACCEPT --A limit-118 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 --A limit-118 -m limit --limit 12/minute -j ULOG --A limit-118 -j ACCEPT --A limit-1180 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-559 --A limit-1180 -m limit --limit 12/minute -j ULOG --A limit-1181 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-560 --A limit-1181 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1182 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-561 --A limit-1182 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1183 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-562 --A limit-1183 -m limit --limit 1/second -j LOG --A limit-1183 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1184 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-563 --A limit-1184 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1185 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-564 --A limit-1185 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1186 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-565 --A limit-1186 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1187 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-566 --A limit-1187 -m limit --limit 12/minute -j ULOG --A limit-1187 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1188 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-567 --A limit-1188 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1189 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-568 --A limit-1189 -j ACCEPT --A limit-119 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 --A limit-119 -m limit --limit 12/minute -j ULOG --A limit-1191 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-570 --A limit-1191 -m limit --limit 1/second -j LOG --A limit-1191 -j ACCEPT --A limit-1192 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-571 --A limit-1192 -m limit --limit 1/second -j LOG --A limit-1193 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-572 --A limit-1193 -j ACCEPT --A limit-1195 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-574 --A limit-1195 -m limit --limit 12/minute -j ULOG --A limit-1195 -j ACCEPT --A limit-1196 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-575 --A limit-1196 -m limit --limit 12/minute -j ULOG --A limit-1197 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-576 --A limit-1197 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1198 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-577 --A limit-1198 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1199 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-578 --A limit-1199 -m limit --limit 1/second -j LOG --A limit-1199 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-120 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-48 --A limit-120 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1200 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-579 --A limit-1200 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1201 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-580 --A limit-1201 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1202 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-581 --A limit-1202 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1203 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-582 --A limit-1203 -m limit --limit 12/minute -j ULOG --A limit-1203 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1204 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-583 --A limit-1204 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1205 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-584 --A limit-1205 -j ACCEPT --A limit-1207 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-586 --A limit-1207 -m limit --limit 1/second -j LOG --A limit-1207 -j ACCEPT --A limit-1208 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-587 --A limit-1208 -m limit --limit 1/second -j LOG --A limit-1209 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-588 --A limit-1209 -j ACCEPT --A limit-121 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 --A limit-121 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1211 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-590 --A limit-1211 -m limit --limit 12/minute -j ULOG --A limit-1211 -j ACCEPT --A limit-1212 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-591 --A limit-1212 -m limit --limit 12/minute -j ULOG --A limit-1213 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1213 -j ACCEPT --A limit-1213 -m limit --limit 1/second -j LOG --A limit-1213 -j DROP --A limit-1214 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1214 -j RETURN --A limit-1214 -m limit --limit 1/second -j LOG --A limit-1214 -j DROP --A limit-1215 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1215 -j logaccept-18 --A limit-1215 -m limit --limit 1/second -j LOG --A limit-1215 -j DROP --A limit-1216 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1216 -j ACCEPT --A limit-1216 -m limit --limit 1/second -j LOG --A limit-1216 -j DROP --A limit-1217 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1217 -j logaccept-19 --A limit-1217 -m limit --limit 1/second -j LOG --A limit-1217 -j DROP --A limit-1218 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1218 -j ACCEPT --A limit-1218 -j DROP --A limit-1219 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1219 -j RETURN --A limit-1219 -j DROP --A limit-122 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 --A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1220 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1220 -j logaccept-20 --A limit-1220 -j DROP --A limit-1221 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1221 -j ACCEPT --A limit-1221 -j DROP --A limit-1222 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1222 -j logaccept-21 --A limit-1222 -j DROP --A limit-1223 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1223 -j ACCEPT --A limit-1223 -m limit --limit 1/second -j LOG --A limit-1223 -j DROP --A limit-1224 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1224 -j RETURN --A limit-1224 -m limit --limit 1/second -j LOG --A limit-1224 -j DROP --A limit-1225 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1225 -j logaccept-22 --A limit-1225 -m limit --limit 1/second -j LOG --A limit-1225 -j DROP --A limit-1226 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1226 -j ACCEPT --A limit-1226 -m limit --limit 1/second -j LOG --A limit-1226 -j DROP --A limit-1227 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1227 -j logaccept-23 --A limit-1227 -m limit --limit 1/second -j LOG --A limit-1227 -j DROP --A limit-1228 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1228 -j ACCEPT --A limit-1228 -j DROP --A limit-1229 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1229 -j RETURN --A limit-1229 -j DROP --A limit-123 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 --A limit-123 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1230 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1230 -j logaccept-24 --A limit-1230 -j DROP --A limit-1231 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1231 -j ACCEPT --A limit-1231 -j DROP --A limit-1232 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1232 -j logaccept-25 --A limit-1232 -j DROP --A limit-1233 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1233 -j ACCEPT --A limit-1233 -m limit --limit 12/minute -j ULOG --A limit-1233 -j DROP --A limit-1234 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1234 -j RETURN --A limit-1234 -m limit --limit 12/minute -j ULOG --A limit-1234 -j DROP --A limit-1235 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1235 -j logaccept-26 --A limit-1235 -m limit --limit 12/minute -j ULOG --A limit-1235 -j DROP --A limit-1236 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1236 -j ACCEPT --A limit-1236 -m limit --limit 12/minute -j ULOG --A limit-1236 -j DROP --A limit-1237 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1237 -j logaccept-27 --A limit-1237 -m limit --limit 12/minute -j ULOG --A limit-1237 -j DROP --A limit-1238 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1238 -j ACCEPT --A limit-1238 -j DROP --A limit-1239 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1239 -j RETURN --A limit-1239 -j DROP --A limit-124 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 --A limit-124 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1240 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1240 -j logaccept-28 --A limit-1240 -j DROP --A limit-1241 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1241 -j ACCEPT --A limit-1241 -j DROP --A limit-1242 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1242 -j logaccept-29 --A limit-1242 -j DROP --A limit-1243 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1243 -j ACCEPT --A limit-1243 -m limit --limit 1/second -j LOG --A limit-1243 -j DROP --A limit-1244 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1244 -j RETURN --A limit-1244 -m limit --limit 1/second -j LOG --A limit-1244 -j DROP --A limit-1245 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1245 -j logaccept-30 --A limit-1245 -m limit --limit 1/second -j LOG --A limit-1245 -j DROP --A limit-1246 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1246 -j ACCEPT --A limit-1246 -m limit --limit 1/second -j LOG --A limit-1246 -j DROP --A limit-1247 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1247 -j logaccept-31 --A limit-1247 -m limit --limit 1/second -j LOG --A limit-1247 -j DROP --A limit-1248 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1248 -j ACCEPT --A limit-1248 -j DROP --A limit-1249 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1249 -j RETURN --A limit-1249 -j DROP --A limit-125 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 --A limit-125 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1250 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1250 -j logaccept-32 --A limit-1250 -j DROP --A limit-1251 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1251 -j ACCEPT --A limit-1251 -j DROP --A limit-1252 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1252 -j logaccept-33 --A limit-1252 -j DROP --A limit-1253 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1253 -j ACCEPT --A limit-1253 -m limit --limit 12/minute -j ULOG --A limit-1253 -j DROP --A limit-1254 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1254 -j RETURN --A limit-1254 -m limit --limit 12/minute -j ULOG --A limit-1254 -j DROP --A limit-1255 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1255 -j logaccept-34 --A limit-1255 -m limit --limit 12/minute -j ULOG --A limit-1255 -j DROP --A limit-1256 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1256 -j ACCEPT --A limit-1256 -m limit --limit 12/minute -j ULOG --A limit-1256 -j DROP --A limit-1257 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1257 -j logaccept-35 --A limit-1257 -m limit --limit 12/minute -j ULOG --A limit-1257 -j DROP --A limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-592 --A limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --set --A limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-593 --A limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --set --A limit-126 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 --A limit-126 -m limit --limit 12/minute -j ULOG --A limit-126 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-594 --A limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --set --A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-595 --A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-596 --A limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --set --A limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-597 --A limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --set --A limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-598 --A limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --set --A limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-599 --A limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1266 -m recent --name limit-1266 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1266 -m recent --name limit-1266 --rsource --mask 255.255.255.255 --set --A limit-1267 -m recent --name limit-1267 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1267 -m recent --name limit-1267 --rsource --mask 255.255.255.255 --set --A limit-1268 -m recent --name limit-1268 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1268 -m recent --name limit-1268 --rsource --mask 255.255.255.255 --set --A limit-1269 -m recent --name limit-1269 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1269 -m recent --name limit-1269 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-127 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-55 --A limit-127 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1270 -m recent --name limit-1270 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name limit-1270 --rsource --mask 255.255.255.255 --set --A limit-1271 -m recent --name limit-1271 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1271 -m recent --name limit-1271 --rsource --mask 255.255.255.255 --set --A limit-1272 -m recent --name limit-1272 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1272 -m recent --name limit-1272 --rsource --mask 255.255.255.255 --set --A limit-1273 -m recent --name limit-1273 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1273 -m recent --name limit-1273 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1276 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1276 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1277 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1277 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1278 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1278 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1279 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1279 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-128 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 --A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1280 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1281 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1281 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1282 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1283 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1284 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1285 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1285 -m limit --limit 1/second -j LOG --A limit-1286 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1287 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1289 -m limit --limit 12/minute -j ULOG --A limit-129 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 --A limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1296 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1298 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1299 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --set --A limit-130 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 --A limit-130 -m limit --limit 1/second -j LOG --A limit-130 -j ACCEPT --A limit-1300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1301 -m limit --limit 1/second -j LOG --A limit-1302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1305 -m limit --limit 12/minute -j ULOG --A limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-131 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 --A limit-131 -m limit --limit 1/second -j LOG --A limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1317 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1317 -m limit --limit 1/second -j LOG --A limit-1318 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1319 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-132 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 --A limit-132 -j ACCEPT --A limit-1320 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1321 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1321 -m limit --limit 12/minute -j ULOG --A limit-1322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1322 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1323 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1324 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1324 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1325 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1325 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-133 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-61 --A limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1333 -m limit --limit 1/second -j LOG --A limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1336 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1337 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1337 -m limit --limit 12/minute -j ULOG --A limit-1338 -m recent --name limit-1338 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-600 --A limit-1338 -m recent --name limit-1338 --rsource --mask 255.255.255.255 --set --A limit-1339 -m recent --name limit-1339 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-601 --A limit-1339 -m recent --name limit-1339 --rsource --mask 255.255.255.255 --set --A limit-134 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-62 --A limit-134 -m limit --limit 12/minute -j ULOG --A limit-134 -j ACCEPT --A limit-1340 -m recent --name limit-1340 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-602 --A limit-1340 -m recent --name limit-1340 --rsource --mask 255.255.255.255 --set --A limit-1341 -m recent --name limit-1341 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-603 --A limit-1341 -m recent --name limit-1341 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1342 -m recent --name limit-1342 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-604 --A limit-1342 -m recent --name limit-1342 --rsource --mask 255.255.255.255 --set --A limit-1343 -m recent --name limit-1343 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-605 --A limit-1343 -m recent --name limit-1343 --rsource --mask 255.255.255.255 --set --A limit-1344 -m recent --name limit-1344 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-606 --A limit-1344 -m recent --name limit-1344 --rsource --mask 255.255.255.255 --set --A limit-1345 -m recent --name limit-1345 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-607 --A limit-1345 -m recent --name limit-1345 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1346 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-608 --A limit-1346 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1347 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-609 --A limit-1347 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1348 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-610 --A limit-1348 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1349 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-611 --A limit-1349 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-135 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-63 --A limit-135 -m limit --limit 12/minute -j ULOG --A limit-1350 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-612 --A limit-1350 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1351 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-613 --A limit-1351 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1352 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-614 --A limit-1352 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1353 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-615 --A limit-1353 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1354 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-616 --A limit-1355 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-617 --A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-618 --A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-619 --A limit-1357 -m limit --limit 1/second -j LOG --A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-620 --A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-621 --A limit-136 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-64 --A limit-136 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-622 --A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-623 --A limit-1361 -m limit --limit 12/minute -j ULOG --A limit-1362 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-624 --A limit-1362 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1363 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-625 --A limit-1363 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1364 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-626 --A limit-1364 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1365 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-627 --A limit-1365 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1366 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-628 --A limit-1366 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1367 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-629 --A limit-1367 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-630 --A limit-1368 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-631 --A limit-1369 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-137 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-65 --A limit-137 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1370 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-632 --A limit-1371 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-633 --A limit-1372 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-634 --A limit-1373 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-635 --A limit-1373 -m limit --limit 1/second -j LOG --A limit-1374 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-636 --A limit-1375 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-637 --A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-638 --A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-639 --A limit-1377 -m limit --limit 12/minute -j ULOG --A limit-1378 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-640 --A limit-1378 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1379 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-641 --A limit-1379 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-138 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-66 --A limit-138 -m limit --limit 1/second -j LOG --A limit-138 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-642 --A limit-1380 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-643 --A limit-1381 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-644 --A limit-1382 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-645 --A limit-1383 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-646 --A limit-1384 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-647 --A limit-1385 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-648 --A limit-1387 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-649 --A limit-1388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-650 --A limit-1389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-651 --A limit-1389 -m limit --limit 1/second -j LOG --A limit-139 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-67 --A limit-139 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-652 --A limit-1391 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-653 --A limit-1392 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-654 --A limit-1393 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-655 --A limit-1393 -m limit --limit 12/minute -j ULOG --A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-656 --A limit-1394 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-657 --A limit-1395 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-658 --A limit-1396 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-659 --A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-660 --A limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1399 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-661 --A limit-1399 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-14 -m limit --limit 12/minute -j ULOG --A limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-140 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-68 --A limit-140 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-662 --A limit-1400 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-663 --A limit-1401 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-664 --A limit-1403 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-665 --A limit-1404 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-666 --A limit-1405 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-667 --A limit-1405 -m limit --limit 1/second -j LOG --A limit-1406 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-668 --A limit-1407 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-669 --A limit-1408 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-670 --A limit-1409 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-671 --A limit-1409 -m limit --limit 12/minute -j ULOG --A limit-141 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-69 --A limit-141 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1410 -m recent --name limit-1410 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1410 -m recent --name limit-1410 --rsource --mask 255.255.255.255 --set --A limit-1411 -m recent --name limit-1411 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1411 -m recent --name limit-1411 --rsource --mask 255.255.255.255 --set --A limit-1412 -m recent --name limit-1412 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1412 -m recent --name limit-1412 --rsource --mask 255.255.255.255 --set --A limit-1413 -m recent --name limit-1413 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1413 -m recent --name limit-1413 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1414 -m recent --name limit-1414 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1414 -m recent --name limit-1414 --rsource --mask 255.255.255.255 --set --A limit-1415 -m recent --name limit-1415 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1415 -m recent --name limit-1415 --rsource --mask 255.255.255.255 --set --A limit-1416 -m recent --name limit-1416 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1416 -m recent --name limit-1416 --rsource --mask 255.255.255.255 --set --A limit-1417 -m recent --name limit-1417 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1417 -m recent --name limit-1417 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1418 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1418 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1419 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1419 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-142 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-70 --A limit-142 -m limit --limit 12/minute -j ULOG --A limit-142 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1420 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1420 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1421 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1421 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1422 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1422 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1423 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1423 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1424 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1425 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1426 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1427 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1428 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1429 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1429 -m limit --limit 1/second -j LOG --A limit-143 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-71 --A limit-143 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1431 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1433 -m limit --limit 12/minute -j ULOG --A limit-1434 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1434 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1435 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1435 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1436 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1437 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1438 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1439 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-144 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-72 --A limit-144 -j ACCEPT --A limit-1440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1440 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1441 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1443 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1445 -m limit --limit 1/second -j LOG --A limit-1446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1447 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1448 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1449 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1449 -m limit --limit 12/minute -j ULOG --A limit-145 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-73 --A limit-1450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1450 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1451 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1452 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1453 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1454 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1454 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1455 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1455 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1456 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1456 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1457 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1457 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1459 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-146 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-74 --A limit-146 -m limit --limit 1/second -j LOG --A limit-146 -j ACCEPT --A limit-1460 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1461 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1461 -m limit --limit 1/second -j LOG --A limit-1462 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1463 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1464 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1465 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1465 -m limit --limit 12/minute -j ULOG --A limit-1466 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1466 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1467 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1467 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1468 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1468 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1469 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1469 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-147 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-75 --A limit-147 -m limit --limit 1/second -j LOG --A limit-1470 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1470 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1471 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1471 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1472 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1472 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1473 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1473 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1474 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1475 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1476 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1477 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1477 -m limit --limit 1/second -j LOG --A limit-1478 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1479 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-148 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-76 --A limit-148 -j ACCEPT --A limit-1480 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1481 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1481 -m limit --limit 12/minute -j ULOG --A limit-1482 -m recent --name limit-1482 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-672 --A limit-1482 -m recent --name limit-1482 --rsource --mask 255.255.255.255 --set --A limit-1483 -m recent --name limit-1483 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-673 --A limit-1483 -m recent --name limit-1483 --rsource --mask 255.255.255.255 --set --A limit-1484 -m recent --name limit-1484 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-674 --A limit-1484 -m recent --name limit-1484 --rsource --mask 255.255.255.255 --set --A limit-1485 -m recent --name limit-1485 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-675 --A limit-1485 -m recent --name limit-1485 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1486 -m recent --name limit-1486 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-676 --A limit-1486 -m recent --name limit-1486 --rsource --mask 255.255.255.255 --set --A limit-1487 -m recent --name limit-1487 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-677 --A limit-1487 -m recent --name limit-1487 --rsource --mask 255.255.255.255 --set --A limit-1488 -m recent --name limit-1488 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-678 --A limit-1488 -m recent --name limit-1488 --rsource --mask 255.255.255.255 --set --A limit-1489 -m recent --name limit-1489 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-679 --A limit-1489 -m recent --name limit-1489 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-149 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-77 --A limit-1490 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-680 --A limit-1490 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1491 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-681 --A limit-1491 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1492 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-682 --A limit-1492 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1493 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-683 --A limit-1493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1494 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-684 --A limit-1494 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1495 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-685 --A limit-1495 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1496 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-686 --A limit-1496 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1497 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-687 --A limit-1497 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1498 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-688 --A limit-1499 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-689 --A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-150 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-78 --A limit-150 -m limit --limit 12/minute -j ULOG --A limit-150 -j ACCEPT --A limit-1500 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-690 --A limit-1501 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-691 --A limit-1501 -m limit --limit 1/second -j LOG --A limit-1502 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-692 --A limit-1503 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-693 --A limit-1504 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-694 --A limit-1505 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-695 --A limit-1505 -m limit --limit 12/minute -j ULOG --A limit-1506 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-696 --A limit-1506 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1507 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-697 --A limit-1507 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1508 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-698 --A limit-1508 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1509 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-699 --A limit-1509 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-151 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-79 --A limit-151 -m limit --limit 12/minute -j ULOG --A limit-1510 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-700 --A limit-1510 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1511 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-701 --A limit-1511 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-702 --A limit-1512 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-703 --A limit-1513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1514 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-704 --A limit-1515 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-705 --A limit-1516 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-706 --A limit-1517 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-707 --A limit-1517 -m limit --limit 1/second -j LOG --A limit-1518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-708 --A limit-1519 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-709 --A limit-152 -m recent --name limit-152 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-152 -m recent --name limit-152 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-710 --A limit-1521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-711 --A limit-1521 -m limit --limit 12/minute -j ULOG --A limit-1522 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-712 --A limit-1522 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1523 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-713 --A limit-1523 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1524 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-714 --A limit-1524 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1525 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-715 --A limit-1525 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1526 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-716 --A limit-1526 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1527 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-717 --A limit-1527 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1528 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-718 --A limit-1528 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1529 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-719 --A limit-1529 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-153 -m recent --name limit-153 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-153 -m recent --name limit-153 --rsource --mask 255.255.255.255 --set --A limit-1530 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-720 --A limit-1531 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-721 --A limit-1532 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-722 --A limit-1533 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-723 --A limit-1533 -m limit --limit 1/second -j LOG --A limit-1534 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-724 --A limit-1535 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-725 --A limit-1536 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-726 --A limit-1537 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-727 --A limit-1537 -m limit --limit 12/minute -j ULOG --A limit-1538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-728 --A limit-1538 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-729 --A limit-1539 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-154 -m recent --name limit-154 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-154 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name limit-154 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1540 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-730 --A limit-1540 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1541 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-731 --A limit-1541 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1542 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-732 --A limit-1542 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1543 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-733 --A limit-1543 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1544 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-734 --A limit-1544 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1545 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-735 --A limit-1545 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-736 --A limit-1547 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-737 --A limit-1548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-738 --A limit-1549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-739 --A limit-1549 -m limit --limit 1/second -j LOG --A limit-155 -m recent --name limit-155 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-155 -m recent --name limit-155 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1550 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-740 --A limit-1551 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-741 --A limit-1552 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-742 --A limit-1553 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-743 --A limit-1553 -m limit --limit 12/minute -j ULOG --A limit-1554 -m recent --name limit-1554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1554 -m recent --name limit-1554 --rsource --mask 255.255.255.255 --set --A limit-1555 -m recent --name limit-1555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1555 -m recent --name limit-1555 --rsource --mask 255.255.255.255 --set --A limit-1556 -m recent --name limit-1556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1556 -m recent --name limit-1556 --rsource --mask 255.255.255.255 --set --A limit-1557 -m recent --name limit-1557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1557 -m recent --name limit-1557 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1558 -m recent --name limit-1558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1558 -m recent --name limit-1558 --rsource --mask 255.255.255.255 --set --A limit-1559 -m recent --name limit-1559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1559 -m recent --name limit-1559 --rsource --mask 255.255.255.255 --set --A limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1560 -m recent --name limit-1560 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1560 -m recent --name limit-1560 --rsource --mask 255.255.255.255 --set --A limit-1561 -m recent --name limit-1561 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1561 -m recent --name limit-1561 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1562 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1563 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1564 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1566 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1567 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1568 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --set --A limit-1570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1571 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1573 -m limit --limit 1/second -j LOG --A limit-1574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1577 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1577 -m limit --limit 12/minute -j ULOG --A limit-1578 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1578 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1579 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1579 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-158 -m limit --limit 12/minute -j ULOG --A limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1580 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1581 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1582 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1583 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1584 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1586 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1587 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1588 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1589 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1589 -m limit --limit 1/second -j LOG --A limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1591 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1593 -m limit --limit 12/minute -j ULOG --A limit-1594 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1594 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1595 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1595 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1596 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1596 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1597 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1597 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1598 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1598 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1599 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1599 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-160 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-160 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1600 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1601 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1602 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1603 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1604 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1605 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1605 -m limit --limit 1/second -j LOG --A limit-1606 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1607 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1608 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1609 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1609 -m limit --limit 12/minute -j ULOG --A limit-161 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-161 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1610 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1610 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1611 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1611 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1612 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1612 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1613 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1613 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1614 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1614 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1615 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1615 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1616 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1616 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1617 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1617 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1618 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1619 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-162 -m limit --limit 1/second -j LOG --A limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1620 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1621 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1621 -m limit --limit 1/second -j LOG --A limit-1622 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1623 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1624 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1625 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1625 -m limit --limit 12/minute -j ULOG --A limit-1626 -m recent --name limit-1626 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-744 --A limit-1626 -m recent --name limit-1626 --rsource --mask 255.255.255.255 --set --A limit-1627 -m recent --name limit-1627 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-745 --A limit-1627 -m recent --name limit-1627 --rsource --mask 255.255.255.255 --set --A limit-1628 -m recent --name limit-1628 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-746 --A limit-1628 -m recent --name limit-1628 --rsource --mask 255.255.255.255 --set --A limit-1629 -m recent --name limit-1629 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-747 --A limit-1629 -m recent --name limit-1629 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1630 -m recent --name limit-1630 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-748 --A limit-1630 -m recent --name limit-1630 --rsource --mask 255.255.255.255 --set --A limit-1631 -m recent --name limit-1631 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-749 --A limit-1631 -m recent --name limit-1631 --rsource --mask 255.255.255.255 --set --A limit-1632 -m recent --name limit-1632 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-750 --A limit-1632 -m recent --name limit-1632 --rsource --mask 255.255.255.255 --set --A limit-1633 -m recent --name limit-1633 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-751 --A limit-1633 -m recent --name limit-1633 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-752 --A limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-753 --A limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1636 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-754 --A limit-1636 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1637 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-755 --A limit-1637 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1638 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-756 --A limit-1638 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1639 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-757 --A limit-1639 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-758 --A limit-1640 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-759 --A limit-1641 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1642 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-760 --A limit-1643 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-761 --A limit-1644 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-762 --A limit-1645 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-763 --A limit-1645 -m limit --limit 1/second -j LOG --A limit-1646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-764 --A limit-1647 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-765 --A limit-1648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-766 --A limit-1649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-767 --A limit-1649 -m limit --limit 12/minute -j ULOG --A limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-768 --A limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-769 --A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-770 --A limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-771 --A limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-772 --A limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-773 --A limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-774 --A limit-1656 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-775 --A limit-1657 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-776 --A limit-1659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-777 --A limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-166 -m limit --limit 12/minute -j ULOG --A limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-778 --A limit-1661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-779 --A limit-1661 -m limit --limit 1/second -j LOG --A limit-1662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-780 --A limit-1663 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-781 --A limit-1664 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-782 --A limit-1665 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-783 --A limit-1665 -m limit --limit 12/minute -j ULOG --A limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-784 --A limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-785 --A limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-786 --A limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-787 --A limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-788 --A limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-789 --A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-790 --A limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-791 --A limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-792 --A limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-793 --A limit-1676 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-794 --A limit-1677 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-795 --A limit-1677 -m limit --limit 1/second -j LOG --A limit-1678 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-796 --A limit-1679 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-797 --A limit-168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-168 -j ACCEPT --A limit-1680 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-798 --A limit-1681 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-799 --A limit-1681 -m limit --limit 12/minute -j ULOG --A limit-1682 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-800 --A limit-1682 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1683 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-801 --A limit-1683 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1684 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-802 --A limit-1684 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1685 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-803 --A limit-1685 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-804 --A limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-805 --A limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-806 --A limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-807 --A limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-169 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-808 --A limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-809 --A limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-810 --A limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-811 --A limit-1693 -m limit --limit 1/second -j LOG --A limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-812 --A limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-813 --A limit-1696 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-814 --A limit-1697 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-815 --A limit-1697 -m limit --limit 12/minute -j ULOG --A limit-1698 -m recent --name limit-1698 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1698 -m recent --name limit-1698 --rsource --mask 255.255.255.255 --set --A limit-1699 -m recent --name limit-1699 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1699 -m recent --name limit-1699 --rsource --mask 255.255.255.255 --set --A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -j ACCEPT --A limit-1700 -m recent --name limit-1700 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1700 -m recent --name limit-1700 --rsource --mask 255.255.255.255 --set --A limit-1701 -m recent --name limit-1701 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1701 -m recent --name limit-1701 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1702 -m recent --name limit-1702 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1702 -m recent --name limit-1702 --rsource --mask 255.255.255.255 --set --A limit-1703 -m recent --name limit-1703 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1703 -m recent --name limit-1703 --rsource --mask 255.255.255.255 --set --A limit-1704 -m recent --name limit-1704 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1704 -m recent --name limit-1704 --rsource --mask 255.255.255.255 --set --A limit-1705 -m recent --name limit-1705 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1705 -m recent --name limit-1705 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1706 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1706 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1707 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1707 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1708 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1708 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1709 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1709 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-171 -m limit --limit 1/second -j LOG --A limit-1710 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1710 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1711 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1711 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1712 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1712 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1713 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1713 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1714 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1715 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1717 -m limit --limit 1/second -j LOG --A limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-172 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-172 -j ACCEPT --A limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1721 -m limit --limit 12/minute -j ULOG --A limit-1722 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1722 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1723 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1723 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1724 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1724 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1725 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1725 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1726 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1726 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1727 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1727 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1728 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1728 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1729 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-1729 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-173 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1730 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1731 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1732 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1733 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1733 -m limit --limit 1/second -j LOG --A limit-1734 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1735 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1737 -m limit --limit 12/minute -j ULOG --A limit-1738 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1738 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1739 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1739 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-174 -m limit --limit 12/minute -j ULOG --A limit-174 -j ACCEPT --A limit-1740 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1740 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1741 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1741 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1742 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1742 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1743 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1743 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1744 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1744 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1745 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1745 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1746 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1747 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1748 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1749 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1749 -m limit --limit 1/second -j LOG --A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-175 -m limit --limit 12/minute -j ULOG --A limit-1750 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1751 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1752 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1753 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1753 -m limit --limit 12/minute -j ULOG --A limit-1754 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1754 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1755 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1755 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1756 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1756 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1757 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1758 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1758 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1759 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1759 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1760 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1760 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1761 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-1761 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1762 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1763 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1764 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1765 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1765 -m limit --limit 1/second -j LOG --A limit-1766 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1767 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1768 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1769 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1769 -m limit --limit 12/minute -j ULOG --A limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1770 -m recent --name limit-1770 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-816 --A limit-1770 -m recent --name limit-1770 --rsource --mask 255.255.255.255 --set --A limit-1771 -m recent --name limit-1771 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-817 --A limit-1771 -m recent --name limit-1771 --rsource --mask 255.255.255.255 --set --A limit-1772 -m recent --name limit-1772 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-818 --A limit-1772 -m recent --name limit-1772 --rsource --mask 255.255.255.255 --set --A limit-1773 -m recent --name limit-1773 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-819 --A limit-1773 -m recent --name limit-1773 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1774 -m recent --name limit-1774 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-820 --A limit-1774 -m recent --name limit-1774 --rsource --mask 255.255.255.255 --set --A limit-1775 -m recent --name limit-1775 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-821 --A limit-1775 -m recent --name limit-1775 --rsource --mask 255.255.255.255 --set --A limit-1776 -m recent --name limit-1776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-822 --A limit-1776 -m recent --name limit-1776 --rsource --mask 255.255.255.255 --set --A limit-1777 -m recent --name limit-1777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-823 --A limit-1777 -m recent --name limit-1777 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1778 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-824 --A limit-1778 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1779 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-825 --A limit-1779 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-178 -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1780 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-826 --A limit-1780 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1781 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-827 --A limit-1781 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-828 --A limit-1782 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-829 --A limit-1783 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-830 --A limit-1784 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-831 --A limit-1785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1786 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-832 --A limit-1787 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-833 --A limit-1788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-834 --A limit-1789 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-835 --A limit-1789 -m limit --limit 1/second -j LOG --A limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-836 --A limit-1791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-837 --A limit-1792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-838 --A limit-1793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-839 --A limit-1793 -m limit --limit 12/minute -j ULOG --A limit-1794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-840 --A limit-1794 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-841 --A limit-1795 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-842 --A limit-1796 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-843 --A limit-1797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-844 --A limit-1798 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-845 --A limit-1799 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-18 -m limit --limit 1/second -j LOG --A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-180 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-180 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1800 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-846 --A limit-1800 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1801 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-847 --A limit-1801 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-848 --A limit-1803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-849 --A limit-1804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-850 --A limit-1805 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-851 --A limit-1805 -m limit --limit 1/second -j LOG --A limit-1806 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-852 --A limit-1807 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-853 --A limit-1808 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-854 --A limit-1809 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-855 --A limit-1809 -m limit --limit 12/minute -j ULOG --A limit-181 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-181 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-856 --A limit-1810 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-857 --A limit-1811 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1812 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-858 --A limit-1812 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1813 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-859 --A limit-1813 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1814 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-860 --A limit-1814 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1815 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-861 --A limit-1815 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1816 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-862 --A limit-1816 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1817 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-863 --A limit-1817 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1818 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-864 --A limit-1819 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-865 --A limit-182 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-182 -m limit --limit 12/minute -j ULOG --A limit-182 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1820 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-866 --A limit-1821 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-867 --A limit-1821 -m limit --limit 1/second -j LOG --A limit-1822 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-868 --A limit-1823 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-869 --A limit-1824 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-870 --A limit-1825 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-871 --A limit-1825 -m limit --limit 12/minute -j ULOG --A limit-1826 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-872 --A limit-1826 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1827 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-873 --A limit-1827 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1828 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-874 --A limit-1828 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1829 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-875 --A limit-1829 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-183 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-183 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1830 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-876 --A limit-1830 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1831 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-877 --A limit-1831 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1832 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-878 --A limit-1832 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1833 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-879 --A limit-1833 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1834 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-880 --A limit-1835 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-881 --A limit-1836 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-882 --A limit-1837 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-883 --A limit-1837 -m limit --limit 1/second -j LOG --A limit-1838 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-884 --A limit-1839 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-885 --A limit-184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-184 -j ACCEPT --A limit-1840 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-886 --A limit-1841 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-887 --A limit-1841 -m limit --limit 12/minute -j ULOG --A limit-1842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1842 -j RETURN --A limit-1842 -m limit --limit 1/second -j LOG --A limit-1842 -j DROP --A limit-1843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1843 -j RETURN --A limit-1843 -m limit --limit 1/second -j LOG --A limit-1843 -j DROP --A limit-1844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1844 -j RETURN --A limit-1844 -m limit --limit 1/second -j LOG --A limit-1844 -j DROP --A limit-1845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1845 -j RETURN --A limit-1845 -m limit --limit 1/second -j LOG --A limit-1845 -j DROP --A limit-1846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1846 -j RETURN --A limit-1846 -m limit --limit 1/second -j LOG --A limit-1846 -j DROP --A limit-1847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1847 -j RETURN --A limit-1847 -j DROP --A limit-1848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1848 -j RETURN --A limit-1848 -j DROP --A limit-1849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1849 -j RETURN --A limit-1849 -j DROP --A limit-185 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1850 -j RETURN --A limit-1850 -j DROP --A limit-1851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1851 -j RETURN --A limit-1851 -j DROP --A limit-1852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1852 -j RETURN --A limit-1852 -m limit --limit 1/second -j LOG --A limit-1852 -j DROP --A limit-1853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1853 -j RETURN --A limit-1853 -m limit --limit 1/second -j LOG --A limit-1853 -j DROP --A limit-1854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1854 -j RETURN --A limit-1854 -m limit --limit 1/second -j LOG --A limit-1854 -j DROP --A limit-1855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1855 -j RETURN --A limit-1855 -m limit --limit 1/second -j LOG --A limit-1855 -j DROP --A limit-1856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1856 -j RETURN --A limit-1856 -m limit --limit 1/second -j LOG --A limit-1856 -j DROP --A limit-1857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1857 -j RETURN --A limit-1857 -j DROP --A limit-1858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1858 -j RETURN --A limit-1858 -j DROP --A limit-1859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1859 -j RETURN --A limit-1859 -j DROP --A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-186 -m limit --limit 1/second -j LOG --A limit-186 -j ACCEPT --A limit-1860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1860 -j RETURN --A limit-1860 -j DROP --A limit-1861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1861 -j RETURN --A limit-1861 -j DROP --A limit-1862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1862 -j RETURN --A limit-1862 -m limit --limit 12/minute -j ULOG --A limit-1862 -j DROP --A limit-1863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1863 -j RETURN --A limit-1863 -m limit --limit 12/minute -j ULOG --A limit-1863 -j DROP --A limit-1864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1864 -j RETURN --A limit-1864 -m limit --limit 12/minute -j ULOG --A limit-1864 -j DROP --A limit-1865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1865 -j RETURN --A limit-1865 -m limit --limit 12/minute -j ULOG --A limit-1865 -j DROP --A limit-1866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1866 -j RETURN --A limit-1866 -m limit --limit 12/minute -j ULOG --A limit-1866 -j DROP --A limit-1867 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1867 -j RETURN --A limit-1867 -j DROP --A limit-1868 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1868 -j RETURN --A limit-1868 -j DROP --A limit-1869 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1869 -j RETURN --A limit-1869 -j DROP --A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-187 -m limit --limit 1/second -j LOG --A limit-1870 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1870 -j RETURN --A limit-1870 -j DROP --A limit-1871 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1871 -j RETURN --A limit-1871 -j DROP --A limit-1872 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1872 -j RETURN --A limit-1872 -m limit --limit 1/second -j LOG --A limit-1872 -j DROP --A limit-1873 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1873 -j RETURN --A limit-1873 -m limit --limit 1/second -j LOG --A limit-1873 -j DROP --A limit-1874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1874 -j RETURN --A limit-1874 -m limit --limit 1/second -j LOG --A limit-1874 -j DROP --A limit-1875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1875 -j RETURN --A limit-1875 -m limit --limit 1/second -j LOG --A limit-1875 -j DROP --A limit-1876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1876 -j RETURN --A limit-1876 -m limit --limit 1/second -j LOG --A limit-1876 -j DROP --A limit-1877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1877 -j RETURN --A limit-1877 -j DROP --A limit-1878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1878 -j RETURN --A limit-1878 -j DROP --A limit-1879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1879 -j RETURN --A limit-1879 -j DROP --A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-188 -j ACCEPT --A limit-1880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1880 -j RETURN --A limit-1880 -j DROP --A limit-1881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1881 -j RETURN --A limit-1881 -j DROP --A limit-1882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1882 -j RETURN --A limit-1882 -m limit --limit 12/minute -j ULOG --A limit-1882 -j DROP --A limit-1883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1883 -j RETURN --A limit-1883 -m limit --limit 12/minute -j ULOG --A limit-1883 -j DROP --A limit-1884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1884 -j RETURN --A limit-1884 -m limit --limit 12/minute -j ULOG --A limit-1884 -j DROP --A limit-1885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1885 -j RETURN --A limit-1885 -m limit --limit 12/minute -j ULOG --A limit-1885 -j DROP --A limit-1886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1886 -j RETURN --A limit-1886 -m limit --limit 12/minute -j ULOG --A limit-1886 -j DROP --A limit-1887 -m recent --name limit-1887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-888 --A limit-1887 -m recent --name limit-1887 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1888 -m recent --name limit-1888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-889 --A limit-1888 -m recent --name limit-1888 --rsource --mask 255.255.255.255 --set --A limit-1889 -m recent --name limit-1889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-890 --A limit-1889 -m limit --limit 1/second -j LOG --A limit-1889 -m recent --name limit-1889 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1890 -m recent --name limit-1890 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-891 --A limit-1890 -m recent --name limit-1890 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1891 -m recent --name limit-1891 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-892 --A limit-1891 -m recent --name limit-1891 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1892 -m recent --name limit-1892 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-893 --A limit-1892 -m recent --name limit-1892 --rsource --mask 255.255.255.255 --set --A limit-1893 -m recent --name limit-1893 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-894 --A limit-1893 -m limit --limit 12/minute -j ULOG --A limit-1893 -m recent --name limit-1893 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1894 -m recent --name limit-1894 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-895 --A limit-1894 -m recent --name limit-1894 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1895 -m recent --name limit-1895 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1895 -m recent --name limit-1895 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1896 -m recent --name limit-1896 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1896 -m recent --name limit-1896 --rsource --mask 255.255.255.255 --set --A limit-1897 -m recent --name limit-1897 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1897 -m limit --limit 1/second -j LOG --A limit-1897 -m recent --name limit-1897 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1898 -m recent --name limit-1898 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1898 -m recent --name limit-1898 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1899 -m recent --name limit-1899 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1899 -m recent --name limit-1899 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-190 -m limit --limit 12/minute -j ULOG --A limit-190 -j ACCEPT --A limit-1900 -m recent --name limit-1900 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1900 -m recent --name limit-1900 --rsource --mask 255.255.255.255 --set --A limit-1901 -m recent --name limit-1901 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1901 -m limit --limit 12/minute -j ULOG --A limit-1901 -m recent --name limit-1901 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1902 -m recent --name limit-1902 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1902 -m recent --name limit-1902 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1903 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1903 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1904 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1904 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1905 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1905 -m limit --limit 1/second -j LOG --A limit-1905 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1906 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1906 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1907 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1907 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1908 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1908 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1909 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1909 -m limit --limit 12/minute -j ULOG --A limit-1909 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-191 -m limit --limit 12/minute -j ULOG --A limit-1910 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1910 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1911 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1911 -j ACCEPT --A limit-1913 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1913 -m limit --limit 1/second -j LOG --A limit-1913 -j ACCEPT --A limit-1914 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1914 -m limit --limit 1/second -j LOG --A limit-1915 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1915 -j ACCEPT --A limit-1917 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1917 -m limit --limit 12/minute -j ULOG --A limit-1917 -j ACCEPT --A limit-1918 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1918 -m limit --limit 12/minute -j ULOG --A limit-1919 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1919 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-192 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-192 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1920 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1920 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1921 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1921 -m limit --limit 1/second -j LOG --A limit-1921 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1922 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1922 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1923 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1923 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1924 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1924 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1925 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1925 -m limit --limit 12/minute -j ULOG --A limit-1925 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1926 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-1926 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1927 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1927 -j ACCEPT --A limit-1929 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1929 -m limit --limit 1/second -j LOG --A limit-1929 -j ACCEPT --A limit-193 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-193 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1930 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1930 -m limit --limit 1/second -j LOG --A limit-1931 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1931 -j ACCEPT --A limit-1933 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1933 -m limit --limit 12/minute -j ULOG --A limit-1933 -j ACCEPT --A limit-1934 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1934 -m limit --limit 12/minute -j ULOG --A limit-1935 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1935 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1936 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1936 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1937 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1937 -m limit --limit 1/second -j LOG --A limit-1937 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1938 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1938 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1939 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1939 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-194 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-194 -m limit --limit 1/second -j LOG --A limit-194 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1940 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1940 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1941 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1941 -m limit --limit 12/minute -j ULOG --A limit-1941 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1942 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1942 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1943 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1943 -j ACCEPT --A limit-1945 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1945 -m limit --limit 1/second -j LOG --A limit-1945 -j ACCEPT --A limit-1946 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1946 -m limit --limit 1/second -j LOG --A limit-1947 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1947 -j ACCEPT --A limit-1949 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1949 -m limit --limit 12/minute -j ULOG --A limit-1949 -j ACCEPT --A limit-195 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-195 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1950 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1950 -m limit --limit 12/minute -j ULOG --A limit-1951 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1951 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1952 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1952 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1953 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1953 -m limit --limit 1/second -j LOG --A limit-1953 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1954 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1954 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1955 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1955 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1956 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1956 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1957 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1957 -m limit --limit 12/minute -j ULOG --A limit-1957 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1958 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-1958 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1959 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1959 -j ACCEPT --A limit-196 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-196 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1961 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1961 -m limit --limit 1/second -j LOG --A limit-1961 -j ACCEPT --A limit-1962 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1962 -m limit --limit 1/second -j LOG --A limit-1963 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1963 -j ACCEPT --A limit-1965 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1965 -m limit --limit 12/minute -j ULOG --A limit-1965 -j ACCEPT --A limit-1966 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1966 -m limit --limit 12/minute -j ULOG --A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-896 --A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-897 --A limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --set --A limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-898 --A limit-1969 -m limit --limit 1/second -j LOG --A limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-197 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-197 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-899 --A limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-900 --A limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1972 -m recent --name limit-1972 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-901 --A limit-1972 -m recent --name limit-1972 --rsource --mask 255.255.255.255 --set --A limit-1973 -m recent --name limit-1973 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-902 --A limit-1973 -m limit --limit 12/minute -j ULOG --A limit-1973 -m recent --name limit-1973 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1974 -m recent --name limit-1974 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-903 --A limit-1974 -m recent --name limit-1974 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-904 --A limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-905 --A limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-906 --A limit-1977 -m limit --limit 1/second -j LOG --A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-907 --A limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-908 --A limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-198 -m limit --limit 12/minute -j ULOG --A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-909 --A limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-910 --A limit-1981 -m limit --limit 12/minute -j ULOG --A limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1982 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-911 --A limit-1982 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1983 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-912 --A limit-1983 -j ACCEPT --A limit-1985 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-914 --A limit-1985 -m limit --limit 1/second -j LOG --A limit-1985 -j ACCEPT --A limit-1986 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-915 --A limit-1986 -m limit --limit 1/second -j LOG --A limit-1987 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-916 --A limit-1987 -j ACCEPT --A limit-1989 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-918 --A limit-1989 -m limit --limit 12/minute -j ULOG --A limit-1989 -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-1990 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-919 --A limit-1990 -m limit --limit 12/minute -j ULOG --A limit-1991 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-920 --A limit-1991 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-921 --A limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-922 --A limit-1993 -m limit --limit 1/second -j LOG --A limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-923 --A limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-924 --A limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-925 --A limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-926 --A limit-1997 -m limit --limit 12/minute -j ULOG --A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-927 --A limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-928 --A limit-1999 -j ACCEPT --A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 --A limit-2 -m limit --limit 1/second -j LOG --A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-200 -j ACCEPT --A limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-930 --A limit-2001 -m limit --limit 1/second -j LOG --A limit-2001 -j ACCEPT --A limit-2002 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-931 --A limit-2002 -m limit --limit 1/second -j LOG --A limit-2003 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-932 --A limit-2003 -j ACCEPT --A limit-2005 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-934 --A limit-2005 -m limit --limit 12/minute -j ULOG --A limit-2005 -j ACCEPT --A limit-2006 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-935 --A limit-2006 -m limit --limit 12/minute -j ULOG --A limit-2007 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-936 --A limit-2007 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2008 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-937 --A limit-2008 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2009 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-938 --A limit-2009 -m limit --limit 1/second -j LOG --A limit-2009 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2010 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-939 --A limit-2010 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2011 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-940 --A limit-2011 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-941 --A limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-942 --A limit-2013 -m limit --limit 12/minute -j ULOG --A limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-943 --A limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-944 --A limit-2015 -j ACCEPT --A limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-946 --A limit-2017 -m limit --limit 1/second -j LOG --A limit-2017 -j ACCEPT --A limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-947 --A limit-2018 -m limit --limit 1/second -j LOG --A limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-948 --A limit-2019 -j ACCEPT --A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-202 -m limit --limit 1/second -j LOG --A limit-202 -j ACCEPT --A limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-950 --A limit-2021 -m limit --limit 12/minute -j ULOG --A limit-2021 -j ACCEPT --A limit-2022 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-951 --A limit-2022 -m limit --limit 12/minute -j ULOG --A limit-2023 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-952 --A limit-2023 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2024 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-953 --A limit-2024 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2025 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-954 --A limit-2025 -m limit --limit 1/second -j LOG --A limit-2025 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2026 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-955 --A limit-2026 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2027 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-956 --A limit-2027 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2028 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-957 --A limit-2028 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2029 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-958 --A limit-2029 -m limit --limit 12/minute -j ULOG --A limit-2029 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-203 -m limit --limit 1/second -j LOG --A limit-2030 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-959 --A limit-2030 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2031 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-960 --A limit-2031 -j ACCEPT --A limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-962 --A limit-2033 -m limit --limit 1/second -j LOG --A limit-2033 -j ACCEPT --A limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-963 --A limit-2034 -m limit --limit 1/second -j LOG --A limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-964 --A limit-2035 -j ACCEPT --A limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-966 --A limit-2037 -m limit --limit 12/minute -j ULOG --A limit-2037 -j ACCEPT --A limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-967 --A limit-2038 -m limit --limit 12/minute -j ULOG --A limit-2039 -m recent --name limit-2039 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2039 -m recent --name limit-2039 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-204 -j ACCEPT --A limit-2040 -m recent --name limit-2040 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2040 -m recent --name limit-2040 --rsource --mask 255.255.255.255 --set --A limit-2041 -m recent --name limit-2041 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2041 -m limit --limit 1/second -j LOG --A limit-2041 -m recent --name limit-2041 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2042 -m recent --name limit-2042 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2042 -m recent --name limit-2042 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2043 -m recent --name limit-2043 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2043 -m recent --name limit-2043 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2044 -m recent --name limit-2044 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2044 -m recent --name limit-2044 --rsource --mask 255.255.255.255 --set --A limit-2045 -m recent --name limit-2045 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2045 -m limit --limit 12/minute -j ULOG --A limit-2045 -m recent --name limit-2045 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2046 -m recent --name limit-2046 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2046 -m recent --name limit-2046 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2047 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2047 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2048 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2048 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2049 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2049 -m limit --limit 1/second -j LOG --A limit-2049 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2050 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2050 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2051 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2051 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2052 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2052 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2053 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2053 -m limit --limit 12/minute -j ULOG --A limit-2053 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2054 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2054 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2055 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2055 -j ACCEPT --A limit-2057 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2057 -m limit --limit 1/second -j LOG --A limit-2057 -j ACCEPT --A limit-2058 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2058 -m limit --limit 1/second -j LOG --A limit-2059 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2059 -j ACCEPT --A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-206 -m limit --limit 12/minute -j ULOG --A limit-206 -j ACCEPT --A limit-2061 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2061 -m limit --limit 12/minute -j ULOG --A limit-2061 -j ACCEPT --A limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2062 -m limit --limit 12/minute -j ULOG --A limit-2063 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2064 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2064 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2065 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2065 -m limit --limit 1/second -j LOG --A limit-2065 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2066 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2066 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2067 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2067 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2068 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2068 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2069 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2069 -m limit --limit 12/minute -j ULOG --A limit-2069 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-207 -m limit --limit 12/minute -j ULOG --A limit-2070 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-2070 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2071 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2071 -j ACCEPT --A limit-2073 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2073 -m limit --limit 1/second -j LOG --A limit-2073 -j ACCEPT --A limit-2074 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2074 -m limit --limit 1/second -j LOG --A limit-2075 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2075 -j ACCEPT --A limit-2077 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2077 -m limit --limit 12/minute -j ULOG --A limit-2077 -j ACCEPT --A limit-2078 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2078 -m limit --limit 12/minute -j ULOG --A limit-2079 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2079 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-208 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-208 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2080 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2080 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2081 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2081 -m limit --limit 1/second -j LOG --A limit-2081 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2082 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2082 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2083 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2084 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2084 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2085 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2085 -m limit --limit 12/minute -j ULOG --A limit-2085 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2086 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2086 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2087 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2087 -j ACCEPT --A limit-2089 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2089 -m limit --limit 1/second -j LOG --A limit-2089 -j ACCEPT --A limit-209 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-209 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2090 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2090 -m limit --limit 1/second -j LOG --A limit-2091 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2091 -j ACCEPT --A limit-2093 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2093 -m limit --limit 12/minute -j ULOG --A limit-2093 -j ACCEPT --A limit-2094 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2094 -m limit --limit 12/minute -j ULOG --A limit-2095 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2095 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2096 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2096 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2097 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2097 -m limit --limit 1/second -j LOG --A limit-2097 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2098 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2098 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2099 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2099 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-210 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2100 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2100 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2101 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2101 -m limit --limit 12/minute -j ULOG --A limit-2101 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-2102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2103 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2103 -j ACCEPT --A limit-2105 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2105 -m limit --limit 1/second -j LOG --A limit-2105 -j ACCEPT --A limit-2106 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2106 -m limit --limit 1/second -j LOG --A limit-2107 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2107 -j ACCEPT --A limit-2109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2109 -m limit --limit 12/minute -j ULOG --A limit-2109 -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2110 -m limit --limit 12/minute -j ULOG --A limit-2111 -m recent --name limit-2111 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-968 --A limit-2111 -m recent --name limit-2111 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2112 -m recent --name limit-2112 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-969 --A limit-2112 -m recent --name limit-2112 --rsource --mask 255.255.255.255 --set --A limit-2113 -m recent --name limit-2113 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-970 --A limit-2113 -m limit --limit 1/second -j LOG --A limit-2113 -m recent --name limit-2113 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2114 -m recent --name limit-2114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-971 --A limit-2114 -m recent --name limit-2114 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2115 -m recent --name limit-2115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-972 --A limit-2115 -m recent --name limit-2115 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2116 -m recent --name limit-2116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-973 --A limit-2116 -m recent --name limit-2116 --rsource --mask 255.255.255.255 --set --A limit-2117 -m recent --name limit-2117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-974 --A limit-2117 -m limit --limit 12/minute -j ULOG --A limit-2117 -m recent --name limit-2117 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2118 -m recent --name limit-2118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-975 --A limit-2118 -m recent --name limit-2118 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-976 --A limit-2119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-977 --A limit-2120 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-978 --A limit-2121 -m limit --limit 1/second -j LOG --A limit-2121 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-979 --A limit-2122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-980 --A limit-2123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-981 --A limit-2124 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-982 --A limit-2125 -m limit --limit 12/minute -j ULOG --A limit-2125 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2126 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-983 --A limit-2126 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-984 --A limit-2127 -j ACCEPT --A limit-2129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-986 --A limit-2129 -m limit --limit 1/second -j LOG --A limit-2129 -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-987 --A limit-2130 -m limit --limit 1/second -j LOG --A limit-2131 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-988 --A limit-2131 -j ACCEPT --A limit-2133 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-990 --A limit-2133 -m limit --limit 12/minute -j ULOG --A limit-2133 -j ACCEPT --A limit-2134 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-991 --A limit-2134 -m limit --limit 12/minute -j ULOG --A limit-2135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-992 --A limit-2135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-993 --A limit-2136 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-994 --A limit-2137 -m limit --limit 1/second -j LOG --A limit-2137 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-995 --A limit-2138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-996 --A limit-2139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-214 -m limit --limit 12/minute -j ULOG --A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2140 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-997 --A limit-2140 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2141 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-998 --A limit-2141 -m limit --limit 12/minute -j ULOG --A limit-2141 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2142 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-999 --A limit-2142 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1000 --A limit-2143 -j ACCEPT --A limit-2145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1002 --A limit-2145 -m limit --limit 1/second -j LOG --A limit-2145 -j ACCEPT --A limit-2146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1003 --A limit-2146 -m limit --limit 1/second -j LOG --A limit-2147 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1004 --A limit-2147 -j ACCEPT --A limit-2149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1006 --A limit-2149 -m limit --limit 12/minute -j ULOG --A limit-2149 -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2150 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1007 --A limit-2150 -m limit --limit 12/minute -j ULOG --A limit-2151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1008 --A limit-2151 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1009 --A limit-2152 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1010 --A limit-2153 -m limit --limit 1/second -j LOG --A limit-2153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1011 --A limit-2154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1012 --A limit-2155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1013 --A limit-2156 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1014 --A limit-2157 -m limit --limit 12/minute -j ULOG --A limit-2157 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1015 --A limit-2158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2159 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1016 --A limit-2159 -j ACCEPT --A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-216 -j ACCEPT --A limit-2161 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1018 --A limit-2161 -m limit --limit 1/second -j LOG --A limit-2161 -j ACCEPT --A limit-2162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1019 --A limit-2162 -m limit --limit 1/second -j LOG --A limit-2163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1020 --A limit-2163 -j ACCEPT --A limit-2165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1022 --A limit-2165 -m limit --limit 12/minute -j ULOG --A limit-2165 -j ACCEPT --A limit-2166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1023 --A limit-2166 -m limit --limit 12/minute -j ULOG --A limit-2167 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1024 --A limit-2167 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2168 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1025 --A limit-2168 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2169 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1026 --A limit-2169 -m limit --limit 1/second -j LOG --A limit-2169 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1027 --A limit-2170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1028 --A limit-2171 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1029 --A limit-2172 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1030 --A limit-2173 -m limit --limit 12/minute -j ULOG --A limit-2173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1031 --A limit-2174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2175 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1032 --A limit-2175 -j ACCEPT --A limit-2177 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1034 --A limit-2177 -m limit --limit 1/second -j LOG --A limit-2177 -j ACCEPT --A limit-2178 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1035 --A limit-2178 -m limit --limit 1/second -j LOG --A limit-2179 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1036 --A limit-2179 -j ACCEPT --A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-218 -m limit --limit 1/second -j LOG --A limit-218 -j ACCEPT --A limit-2181 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1038 --A limit-2181 -m limit --limit 12/minute -j ULOG --A limit-2181 -j ACCEPT --A limit-2182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1039 --A limit-2182 -m limit --limit 12/minute -j ULOG --A limit-2183 -m recent --name limit-2183 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2183 -m recent --name limit-2183 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2184 -m recent --name limit-2184 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2184 -m recent --name limit-2184 --rsource --mask 255.255.255.255 --set --A limit-2185 -m recent --name limit-2185 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2185 -m limit --limit 1/second -j LOG --A limit-2185 -m recent --name limit-2185 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2186 -m recent --name limit-2186 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2186 -m recent --name limit-2186 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2187 -m recent --name limit-2187 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2187 -m recent --name limit-2187 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2188 -m recent --name limit-2188 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2188 -m recent --name limit-2188 --rsource --mask 255.255.255.255 --set --A limit-2189 -m recent --name limit-2189 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2189 -m limit --limit 12/minute -j ULOG --A limit-2189 -m recent --name limit-2189 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-219 -m limit --limit 1/second -j LOG --A limit-2190 -m recent --name limit-2190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2190 -m recent --name limit-2190 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2191 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2191 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2192 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2192 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2193 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2193 -m limit --limit 1/second -j LOG --A limit-2193 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2194 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2194 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2195 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2195 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2196 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2196 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2197 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2197 -m limit --limit 12/minute -j ULOG --A limit-2197 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2198 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2198 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2199 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2199 -j ACCEPT --A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-22 -m limit --limit 12/minute -j ULOG --A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-220 -j ACCEPT --A limit-2201 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2201 -m limit --limit 1/second -j LOG --A limit-2201 -j ACCEPT --A limit-2202 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2202 -m limit --limit 1/second -j LOG --A limit-2203 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2203 -j ACCEPT --A limit-2205 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2205 -m limit --limit 12/minute -j ULOG --A limit-2205 -j ACCEPT --A limit-2206 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2206 -m limit --limit 12/minute -j ULOG --A limit-2207 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2207 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2208 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2208 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2209 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2209 -m limit --limit 1/second -j LOG --A limit-2209 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2210 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2210 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2211 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2211 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2212 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2212 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2213 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2213 -m limit --limit 12/minute -j ULOG --A limit-2213 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2214 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2214 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2215 -j ACCEPT --A limit-2217 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2217 -m limit --limit 1/second -j LOG --A limit-2217 -j ACCEPT --A limit-2218 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2218 -m limit --limit 1/second -j LOG --A limit-2219 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2219 -j ACCEPT --A limit-222 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-222 -m limit --limit 12/minute -j ULOG --A limit-222 -j ACCEPT --A limit-2221 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2221 -m limit --limit 12/minute -j ULOG --A limit-2221 -j ACCEPT --A limit-2222 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2222 -m limit --limit 12/minute -j ULOG --A limit-2223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2223 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2224 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2224 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2225 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2225 -m limit --limit 1/second -j LOG --A limit-2225 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2226 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2226 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2227 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2227 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2228 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2228 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2229 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2229 -m limit --limit 12/minute -j ULOG --A limit-2229 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-223 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-223 -m limit --limit 12/minute -j ULOG --A limit-2230 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2230 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2231 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2231 -j ACCEPT --A limit-2233 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2233 -m limit --limit 1/second -j LOG --A limit-2233 -j ACCEPT --A limit-2234 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2234 -m limit --limit 1/second -j LOG --A limit-2235 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2235 -j ACCEPT --A limit-2237 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2237 -m limit --limit 12/minute -j ULOG --A limit-2237 -j ACCEPT --A limit-2238 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2238 -m limit --limit 12/minute -j ULOG --A limit-2239 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2239 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-80 --A limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2240 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2240 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2241 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2241 -m limit --limit 1/second -j LOG --A limit-2241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2242 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2242 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2243 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2243 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2244 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2244 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2245 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2245 -m limit --limit 12/minute -j ULOG --A limit-2245 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2246 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2246 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2247 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2247 -j ACCEPT --A limit-2249 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2249 -m limit --limit 1/second -j LOG --A limit-2249 -j ACCEPT --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-81 --A limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set --A limit-2250 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2250 -m limit --limit 1/second -j LOG --A limit-2251 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2251 -j ACCEPT --A limit-2253 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2253 -m limit --limit 12/minute -j ULOG --A limit-2253 -j ACCEPT --A limit-2254 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2254 -m limit --limit 12/minute -j ULOG --A limit-2255 -m recent --name limit-2255 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1040 --A limit-2255 -m recent --name limit-2255 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2256 -m recent --name limit-2256 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1041 --A limit-2256 -m recent --name limit-2256 --rsource --mask 255.255.255.255 --set --A limit-2257 -m recent --name limit-2257 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1042 --A limit-2257 -m limit --limit 1/second -j LOG --A limit-2257 -m recent --name limit-2257 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2258 -m recent --name limit-2258 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1043 --A limit-2258 -m recent --name limit-2258 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2259 -m recent --name limit-2259 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1044 --A limit-2259 -m recent --name limit-2259 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-82 --A limit-226 -m limit --limit 1/second -j LOG --A limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2260 -m recent --name limit-2260 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1045 --A limit-2260 -m recent --name limit-2260 --rsource --mask 255.255.255.255 --set --A limit-2261 -m recent --name limit-2261 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1046 +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set +-A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-2200 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-99 +-A OUTPUT -j logdrop-2201 +-A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-100 +-A OUTPUT -j logdrop-2202 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-101 +-A OUTPUT -j logdrop-2203 +-A OUTPUT -j logpass-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-102 +-A OUTPUT -j logdrop-2204 +-A OUTPUT -j logpass-3 +-A OUTPUT -m limit --limit 12/minute -j ULOG +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-0 +-A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 +-A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set +-A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1000 -j TEE --gateway 10.0.0.1 +-A limit-1000 -j TEE --gateway 10.0.0.2 +-A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1004 -m limit --limit 12/minute -j ULOG +-A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1006 -j ACCEPT +-A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1008 -m limit --limit 1/second -j LOG +-A limit-1008 -j ACCEPT +-A limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1009 -m limit --limit 1/second -j LOG +-A limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --set +-A limit-1010 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1010 -j TEE --gateway 10.0.0.1 +-A limit-1010 -j TEE --gateway 10.0.0.2 +-A limit-1010 -j ACCEPT +-A limit-1011 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1011 -j TEE --gateway 10.0.0.1 +-A limit-1011 -j TEE --gateway 10.0.0.2 +-A limit-1012 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1012 -j ACCEPT +-A limit-1014 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1014 -m limit --limit 12/minute -j ULOG +-A limit-1014 -j ACCEPT +-A limit-1015 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1015 -m limit --limit 12/minute -j ULOG +-A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1018 -m limit --limit 1/second -j LOG +-A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name limit-102 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-102 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name limit-102 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1020 -j TEE --gateway 10.0.0.1 +-A limit-1020 -j TEE --gateway 10.0.0.2 +-A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1024 -m limit --limit 12/minute -j ULOG +-A limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1026 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1026 -j ACCEPT +-A limit-1028 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1028 -m limit --limit 1/second -j LOG +-A limit-1028 -j ACCEPT +-A limit-1029 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1029 -m limit --limit 1/second -j LOG +-A limit-103 -m recent --name limit-103 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-103 -m recent --name limit-103 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1030 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1030 -j TEE --gateway 10.0.0.1 +-A limit-1030 -j TEE --gateway 10.0.0.2 +-A limit-1030 -j ACCEPT +-A limit-1031 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1031 -j TEE --gateway 10.0.0.1 +-A limit-1031 -j TEE --gateway 10.0.0.2 +-A limit-1032 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1032 -j ACCEPT +-A limit-1034 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1034 -m limit --limit 12/minute -j ULOG +-A limit-1034 -j ACCEPT +-A limit-1035 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1035 -m limit --limit 12/minute -j ULOG +-A limit-1036 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1036 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1038 -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-104 -m recent --name limit-104 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-104 -j TEE --gateway 10.0.0.1 +-A limit-104 -j TEE --gateway 10.0.0.2 +-A limit-104 -m recent --name limit-104 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1040 -j TEE --gateway 10.0.0.1 +-A limit-1040 -j TEE --gateway 10.0.0.2 +-A limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1044 -m limit --limit 12/minute -j ULOG +-A limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1046 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1046 -j ACCEPT +-A limit-1048 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1048 -m limit --limit 1/second -j LOG +-A limit-1048 -j ACCEPT +-A limit-1049 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1050 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1050 -j TEE --gateway 10.0.0.1 +-A limit-1050 -j TEE --gateway 10.0.0.2 +-A limit-1050 -j ACCEPT +-A limit-1051 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1051 -j TEE --gateway 10.0.0.1 +-A limit-1051 -j TEE --gateway 10.0.0.2 +-A limit-1052 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1052 -j ACCEPT +-A limit-1054 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1054 -m limit --limit 12/minute -j ULOG +-A limit-1054 -j ACCEPT +-A limit-1055 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1055 -m limit --limit 12/minute -j ULOG +-A limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1058 -m limit --limit 1/second -j LOG +-A limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-106 -m recent --name limit-106 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-106 -m recent --name limit-106 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1060 -j TEE --gateway 10.0.0.1 +-A limit-1060 -j TEE --gateway 10.0.0.2 +-A limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1062 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1062 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1064 -m limit --limit 12/minute -j ULOG +-A limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1066 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1066 -j ACCEPT +-A limit-1068 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1068 -m limit --limit 1/second -j LOG +-A limit-1068 -j ACCEPT +-A limit-1069 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1069 -m limit --limit 1/second -j LOG +-A limit-107 -m recent --name limit-107 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-107 -m recent --name limit-107 --rsource --mask 255.255.255.255 --set +-A limit-1070 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1070 -j TEE --gateway 10.0.0.1 +-A limit-1070 -j TEE --gateway 10.0.0.2 +-A limit-1070 -j ACCEPT +-A limit-1071 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1071 -j TEE --gateway 10.0.0.1 +-A limit-1071 -j TEE --gateway 10.0.0.2 +-A limit-1072 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1072 -j ACCEPT +-A limit-1074 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1074 -m limit --limit 12/minute -j ULOG +-A limit-1074 -j ACCEPT +-A limit-1075 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1075 -m limit --limit 12/minute -j ULOG +-A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-560 +-A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-561 +-A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set +-A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-562 +-A limit-1078 -m limit --limit 1/second -j LOG +-A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-563 +-A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-108 -m recent --name limit-108 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-108 -m limit --limit 12/minute -j ULOG +-A limit-108 -m recent --name limit-108 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-564 +-A limit-1080 -j TEE --gateway 10.0.0.1 +-A limit-1080 -j TEE --gateway 10.0.0.2 +-A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-565 +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-566 +-A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-567 +-A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set +-A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-568 +-A limit-1084 -m limit --limit 12/minute -j ULOG +-A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-569 +-A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-570 +-A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-571 +-A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-572 +-A limit-1088 -m limit --limit 1/second -j LOG +-A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-573 +-A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-109 -m recent --name limit-109 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-109 -m recent --name limit-109 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-574 +-A limit-1090 -j TEE --gateway 10.0.0.1 +-A limit-1090 -j TEE --gateway 10.0.0.2 +-A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-575 +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-576 +-A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1093 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-577 +-A limit-1093 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-578 +-A limit-1094 -m limit --limit 12/minute -j ULOG +-A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-579 +-A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-580 +-A limit-1096 -j ACCEPT +-A limit-1098 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-582 +-A limit-1098 -m limit --limit 1/second -j LOG +-A limit-1098 -j ACCEPT +-A limit-1099 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-583 +-A limit-1099 -m limit --limit 1/second -j LOG +-A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set +-A limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-20 +-A limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1100 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-584 +-A limit-1100 -j TEE --gateway 10.0.0.1 +-A limit-1100 -j TEE --gateway 10.0.0.2 +-A limit-1100 -j ACCEPT +-A limit-1101 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-585 +-A limit-1101 -j TEE --gateway 10.0.0.1 +-A limit-1101 -j TEE --gateway 10.0.0.2 +-A limit-1102 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-586 +-A limit-1102 -j ACCEPT +-A limit-1104 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-588 +-A limit-1104 -m limit --limit 12/minute -j ULOG +-A limit-1104 -j ACCEPT +-A limit-1105 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-589 +-A limit-1105 -m limit --limit 12/minute -j ULOG +-A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-590 +-A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-591 +-A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-592 +-A limit-1108 -m limit --limit 1/second -j LOG +-A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1109 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-593 +-A limit-1109 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1110 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-594 +-A limit-1110 -j TEE --gateway 10.0.0.1 +-A limit-1110 -j TEE --gateway 10.0.0.2 +-A limit-1110 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-595 +-A limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1112 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-596 +-A limit-1112 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1113 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-597 +-A limit-1113 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1114 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-598 +-A limit-1114 -m limit --limit 12/minute -j ULOG +-A limit-1114 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1115 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-599 +-A limit-1115 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1116 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-600 +-A limit-1116 -j ACCEPT +-A limit-1118 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-602 +-A limit-1118 -m limit --limit 1/second -j LOG +-A limit-1118 -j ACCEPT +-A limit-1119 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-603 +-A limit-1119 -m limit --limit 1/second -j LOG +-A limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-112 -m limit --limit 1/second -j LOG +-A limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1120 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-604 +-A limit-1120 -j TEE --gateway 10.0.0.1 +-A limit-1120 -j TEE --gateway 10.0.0.2 +-A limit-1120 -j ACCEPT +-A limit-1121 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-605 +-A limit-1121 -j TEE --gateway 10.0.0.1 +-A limit-1121 -j TEE --gateway 10.0.0.2 +-A limit-1122 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-606 +-A limit-1122 -j ACCEPT +-A limit-1124 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-608 +-A limit-1124 -m limit --limit 12/minute -j ULOG +-A limit-1124 -j ACCEPT +-A limit-1125 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-609 +-A limit-1125 -m limit --limit 12/minute -j ULOG +-A limit-1126 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-610 +-A limit-1126 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1127 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-611 +-A limit-1127 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1128 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-612 +-A limit-1128 -m limit --limit 1/second -j LOG +-A limit-1128 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1129 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-613 +-A limit-1129 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-113 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-113 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1130 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-614 +-A limit-1130 -j TEE --gateway 10.0.0.1 +-A limit-1130 -j TEE --gateway 10.0.0.2 +-A limit-1130 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-615 +-A limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1132 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-616 +-A limit-1132 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1133 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-617 +-A limit-1133 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1134 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-618 +-A limit-1134 -m limit --limit 12/minute -j ULOG +-A limit-1134 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1135 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-619 +-A limit-1135 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1136 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-620 +-A limit-1136 -j ACCEPT +-A limit-1138 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-622 +-A limit-1138 -m limit --limit 1/second -j LOG +-A limit-1138 -j ACCEPT +-A limit-1139 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-623 +-A limit-1139 -m limit --limit 1/second -j LOG +-A limit-114 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-114 -j TEE --gateway 10.0.0.1 +-A limit-114 -j TEE --gateway 10.0.0.2 +-A limit-114 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1140 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-624 +-A limit-1140 -j TEE --gateway 10.0.0.1 +-A limit-1140 -j TEE --gateway 10.0.0.2 +-A limit-1140 -j ACCEPT +-A limit-1141 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-625 +-A limit-1141 -j TEE --gateway 10.0.0.1 +-A limit-1141 -j TEE --gateway 10.0.0.2 +-A limit-1142 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-626 +-A limit-1142 -j ACCEPT +-A limit-1144 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-628 +-A limit-1144 -m limit --limit 12/minute -j ULOG +-A limit-1144 -j ACCEPT +-A limit-1145 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-629 +-A limit-1145 -m limit --limit 12/minute -j ULOG +-A limit-1146 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-630 +-A limit-1146 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1147 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-631 +-A limit-1147 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1148 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-632 +-A limit-1148 -m limit --limit 1/second -j LOG +-A limit-1148 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1149 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-633 +-A limit-1149 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1150 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-634 +-A limit-1150 -j TEE --gateway 10.0.0.1 +-A limit-1150 -j TEE --gateway 10.0.0.2 +-A limit-1150 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-635 +-A limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1152 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-636 +-A limit-1152 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1153 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-637 +-A limit-1153 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1154 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-638 +-A limit-1154 -m limit --limit 12/minute -j ULOG +-A limit-1154 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1155 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-639 +-A limit-1155 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1156 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-640 +-A limit-1156 -j ACCEPT +-A limit-1158 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-642 +-A limit-1158 -m limit --limit 1/second -j LOG +-A limit-1158 -j ACCEPT +-A limit-1159 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-643 +-A limit-1159 -m limit --limit 1/second -j LOG +-A limit-116 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-116 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1160 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-644 +-A limit-1160 -j TEE --gateway 10.0.0.1 +-A limit-1160 -j TEE --gateway 10.0.0.2 +-A limit-1160 -j ACCEPT +-A limit-1161 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-645 +-A limit-1161 -j TEE --gateway 10.0.0.1 +-A limit-1161 -j TEE --gateway 10.0.0.2 +-A limit-1162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-646 +-A limit-1162 -j ACCEPT +-A limit-1164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-648 +-A limit-1164 -m limit --limit 12/minute -j ULOG +-A limit-1164 -j ACCEPT +-A limit-1165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-649 +-A limit-1165 -m limit --limit 12/minute -j ULOG +-A limit-1166 -m recent --name limit-1166 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-650 +-A limit-1166 -m recent --name limit-1166 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1167 -m recent --name limit-1167 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-651 +-A limit-1167 -m recent --name limit-1167 --rsource --mask 255.255.255.255 --set +-A limit-1168 -m recent --name limit-1168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-652 +-A limit-1168 -m limit --limit 1/second -j LOG +-A limit-1168 -m recent --name limit-1168 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1169 -m recent --name limit-1169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-653 +-A limit-1169 -m recent --name limit-1169 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-117 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-117 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1170 -m recent --name limit-1170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-654 +-A limit-1170 -j TEE --gateway 10.0.0.1 +-A limit-1170 -j TEE --gateway 10.0.0.2 +-A limit-1170 -m recent --name limit-1170 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-655 +-A limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1172 -m recent --name limit-1172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-656 +-A limit-1172 -m recent --name limit-1172 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1173 -m recent --name limit-1173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-657 +-A limit-1173 -m recent --name limit-1173 --rsource --mask 255.255.255.255 --set +-A limit-1174 -m recent --name limit-1174 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-658 +-A limit-1174 -m limit --limit 12/minute -j ULOG +-A limit-1174 -m recent --name limit-1174 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1175 -m recent --name limit-1175 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-659 +-A limit-1175 -m recent --name limit-1175 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-660 +-A limit-1176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-661 +-A limit-1177 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-662 +-A limit-1178 -m limit --limit 1/second -j LOG +-A limit-1178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-663 +-A limit-1179 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-118 -m limit --limit 12/minute -j ULOG +-A limit-118 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1180 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-664 +-A limit-1180 -j TEE --gateway 10.0.0.1 +-A limit-1180 -j TEE --gateway 10.0.0.2 +-A limit-1180 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-665 +-A limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1182 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-666 +-A limit-1182 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1183 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-667 +-A limit-1183 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1184 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-668 +-A limit-1184 -m limit --limit 12/minute -j ULOG +-A limit-1184 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1185 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-669 +-A limit-1185 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1186 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-670 +-A limit-1186 -j ACCEPT +-A limit-1188 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-672 +-A limit-1188 -m limit --limit 1/second -j LOG +-A limit-1188 -j ACCEPT +-A limit-1189 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-673 +-A limit-1189 -m limit --limit 1/second -j LOG +-A limit-119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1190 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-674 +-A limit-1190 -j TEE --gateway 10.0.0.1 +-A limit-1190 -j TEE --gateway 10.0.0.2 +-A limit-1190 -j ACCEPT +-A limit-1191 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-675 +-A limit-1191 -j TEE --gateway 10.0.0.1 +-A limit-1191 -j TEE --gateway 10.0.0.2 +-A limit-1192 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-676 +-A limit-1192 -j ACCEPT +-A limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-678 +-A limit-1194 -m limit --limit 12/minute -j ULOG +-A limit-1194 -j ACCEPT +-A limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-679 +-A limit-1195 -m limit --limit 12/minute -j ULOG +-A limit-1196 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-680 +-A limit-1196 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1197 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-681 +-A limit-1197 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1198 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-682 +-A limit-1198 -m limit --limit 1/second -j LOG +-A limit-1198 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1199 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-683 +-A limit-1199 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-12 -m limit --limit 1/second -j LOG +-A limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-120 -j ACCEPT +-A limit-1200 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-684 +-A limit-1200 -j TEE --gateway 10.0.0.1 +-A limit-1200 -j TEE --gateway 10.0.0.2 +-A limit-1200 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-685 +-A limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1202 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-686 +-A limit-1202 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1203 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-687 +-A limit-1203 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1204 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-688 +-A limit-1204 -m limit --limit 12/minute -j ULOG +-A limit-1204 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1205 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-689 +-A limit-1205 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-690 +-A limit-1206 -j ACCEPT +-A limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-692 +-A limit-1208 -m limit --limit 1/second -j LOG +-A limit-1208 -j ACCEPT +-A limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-693 +-A limit-1209 -m limit --limit 1/second -j LOG +-A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-694 +-A limit-1210 -j TEE --gateway 10.0.0.1 +-A limit-1210 -j TEE --gateway 10.0.0.2 +-A limit-1210 -j ACCEPT +-A limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-695 +-A limit-1211 -j TEE --gateway 10.0.0.1 +-A limit-1211 -j TEE --gateway 10.0.0.2 +-A limit-1212 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-696 +-A limit-1212 -j ACCEPT +-A limit-1214 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-698 +-A limit-1214 -m limit --limit 12/minute -j ULOG +-A limit-1214 -j ACCEPT +-A limit-1215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-699 +-A limit-1215 -m limit --limit 12/minute -j ULOG +-A limit-1216 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-700 +-A limit-1216 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1217 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-701 +-A limit-1217 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-702 +-A limit-1218 -m limit --limit 1/second -j LOG +-A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-703 +-A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 +-A limit-122 -m limit --limit 1/second -j LOG +-A limit-122 -j ACCEPT +-A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-704 +-A limit-1220 -j TEE --gateway 10.0.0.1 +-A limit-1220 -j TEE --gateway 10.0.0.2 +-A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-705 +-A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-706 +-A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-707 +-A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-708 +-A limit-1224 -m limit --limit 12/minute -j ULOG +-A limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1225 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-709 +-A limit-1225 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1226 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-710 +-A limit-1226 -j ACCEPT +-A limit-1228 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-712 +-A limit-1228 -m limit --limit 1/second -j LOG +-A limit-1228 -j ACCEPT +-A limit-1229 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-713 +-A limit-1229 -m limit --limit 1/second -j LOG +-A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-123 -m limit --limit 1/second -j LOG +-A limit-1230 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-714 +-A limit-1230 -j TEE --gateway 10.0.0.1 +-A limit-1230 -j TEE --gateway 10.0.0.2 +-A limit-1230 -j ACCEPT +-A limit-1231 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-715 +-A limit-1231 -j TEE --gateway 10.0.0.1 +-A limit-1231 -j TEE --gateway 10.0.0.2 +-A limit-1232 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-716 +-A limit-1232 -j ACCEPT +-A limit-1234 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-718 +-A limit-1234 -m limit --limit 12/minute -j ULOG +-A limit-1234 -j ACCEPT +-A limit-1235 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-719 +-A limit-1235 -m limit --limit 12/minute -j ULOG +-A limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-720 +-A limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1237 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-721 +-A limit-1237 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-722 +-A limit-1238 -m limit --limit 1/second -j LOG +-A limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-723 +-A limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-124 -j TEE --gateway 10.0.0.1 +-A limit-124 -j TEE --gateway 10.0.0.2 +-A limit-124 -j ACCEPT +-A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-724 +-A limit-1240 -j TEE --gateway 10.0.0.1 +-A limit-1240 -j TEE --gateway 10.0.0.2 +-A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-725 +-A limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1242 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-726 +-A limit-1242 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1243 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-727 +-A limit-1243 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1244 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-728 +-A limit-1244 -m limit --limit 12/minute -j ULOG +-A limit-1244 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1245 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-729 +-A limit-1245 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1246 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-730 +-A limit-1246 -j ACCEPT +-A limit-1248 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-732 +-A limit-1248 -m limit --limit 1/second -j LOG +-A limit-1248 -j ACCEPT +-A limit-1249 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-733 +-A limit-1249 -m limit --limit 1/second -j LOG +-A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-125 -j TEE --gateway 10.0.0.1 +-A limit-125 -j TEE --gateway 10.0.0.2 +-A limit-1250 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-734 +-A limit-1250 -j TEE --gateway 10.0.0.1 +-A limit-1250 -j TEE --gateway 10.0.0.2 +-A limit-1250 -j ACCEPT +-A limit-1251 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-735 +-A limit-1251 -j TEE --gateway 10.0.0.1 +-A limit-1251 -j TEE --gateway 10.0.0.2 +-A limit-1252 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-736 +-A limit-1252 -j ACCEPT +-A limit-1254 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-738 +-A limit-1254 -m limit --limit 12/minute -j ULOG +-A limit-1254 -j ACCEPT +-A limit-1255 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-739 +-A limit-1255 -m limit --limit 12/minute -j ULOG +-A limit-1256 -m recent --name limit-1256 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1256 -m recent --name limit-1256 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1257 -m recent --name limit-1257 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1257 -m recent --name limit-1257 --rsource --mask 255.255.255.255 --set +-A limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1258 -m limit --limit 1/second -j LOG +-A limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-126 -j ACCEPT +-A limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1260 -j TEE --gateway 10.0.0.1 +-A limit-1260 -j TEE --gateway 10.0.0.2 +-A limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --set +-A limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1264 -m limit --limit 12/minute -j ULOG +-A limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1266 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1266 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1267 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1267 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1268 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1268 -m limit --limit 1/second -j LOG +-A limit-1268 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1269 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1269 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-1270 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1270 -j TEE --gateway 10.0.0.1 +-A limit-1270 -j TEE --gateway 10.0.0.2 +-A limit-1270 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1272 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1272 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1273 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1273 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1274 -m limit --limit 12/minute -j ULOG +-A limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1276 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1276 -j ACCEPT +-A limit-1278 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1278 -m limit --limit 1/second -j LOG +-A limit-1278 -j ACCEPT +-A limit-1279 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1279 -m limit --limit 1/second -j LOG +-A limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-128 -m limit --limit 12/minute -j ULOG +-A limit-128 -j ACCEPT +-A limit-1280 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1280 -j TEE --gateway 10.0.0.1 +-A limit-1280 -j TEE --gateway 10.0.0.2 +-A limit-1280 -j ACCEPT +-A limit-1281 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1281 -j TEE --gateway 10.0.0.1 +-A limit-1281 -j TEE --gateway 10.0.0.2 +-A limit-1282 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1282 -j ACCEPT +-A limit-1284 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1284 -m limit --limit 12/minute -j ULOG +-A limit-1284 -j ACCEPT +-A limit-1285 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1285 -m limit --limit 12/minute -j ULOG +-A limit-1286 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1286 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1287 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1287 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1288 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1288 -m limit --limit 1/second -j LOG +-A limit-1288 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1289 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1289 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-129 -m limit --limit 12/minute -j ULOG +-A limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1290 -j TEE --gateway 10.0.0.1 +-A limit-1290 -j TEE --gateway 10.0.0.2 +-A limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1294 -m limit --limit 12/minute -j ULOG +-A limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1296 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1296 -j ACCEPT +-A limit-1298 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1298 -m limit --limit 1/second -j LOG +-A limit-1298 -j ACCEPT +-A limit-1299 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1299 -m limit --limit 1/second -j LOG +-A limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-130 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-130 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1300 -j TEE --gateway 10.0.0.1 +-A limit-1300 -j TEE --gateway 10.0.0.2 +-A limit-1300 -j ACCEPT +-A limit-1301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1301 -j TEE --gateway 10.0.0.1 +-A limit-1301 -j TEE --gateway 10.0.0.2 +-A limit-1302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1302 -j ACCEPT +-A limit-1304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1304 -m limit --limit 12/minute -j ULOG +-A limit-1304 -j ACCEPT +-A limit-1305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1305 -m limit --limit 12/minute -j ULOG +-A limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1308 -m limit --limit 1/second -j LOG +-A limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-131 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-131 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1310 -j TEE --gateway 10.0.0.1 +-A limit-1310 -j TEE --gateway 10.0.0.2 +-A limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1314 -m limit --limit 12/minute -j ULOG +-A limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1316 -j ACCEPT +-A limit-1318 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1318 -m limit --limit 1/second -j LOG +-A limit-1318 -j ACCEPT +-A limit-1319 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1319 -m limit --limit 1/second -j LOG +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-132 -m limit --limit 1/second -j LOG +-A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1320 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1320 -j TEE --gateway 10.0.0.1 +-A limit-1320 -j TEE --gateway 10.0.0.2 +-A limit-1320 -j ACCEPT +-A limit-1321 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1321 -j TEE --gateway 10.0.0.1 +-A limit-1321 -j TEE --gateway 10.0.0.2 +-A limit-1322 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1322 -j ACCEPT +-A limit-1324 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1324 -m limit --limit 12/minute -j ULOG +-A limit-1324 -j ACCEPT +-A limit-1325 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1325 -m limit --limit 12/minute -j ULOG +-A limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1328 -m limit --limit 1/second -j LOG +-A limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1330 -j TEE --gateway 10.0.0.1 +-A limit-1330 -j TEE --gateway 10.0.0.2 +-A limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1334 -m limit --limit 12/minute -j ULOG +-A limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1336 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1336 -j ACCEPT +-A limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1338 -m limit --limit 1/second -j LOG +-A limit-1338 -j ACCEPT +-A limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1339 -m limit --limit 1/second -j LOG +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-134 -j TEE --gateway 10.0.0.1 +-A limit-134 -j TEE --gateway 10.0.0.2 +-A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1340 -j TEE --gateway 10.0.0.1 +-A limit-1340 -j TEE --gateway 10.0.0.2 +-A limit-1340 -j ACCEPT +-A limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1341 -j TEE --gateway 10.0.0.1 +-A limit-1341 -j TEE --gateway 10.0.0.2 +-A limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1342 -j ACCEPT +-A limit-1344 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1344 -m limit --limit 12/minute -j ULOG +-A limit-1344 -j ACCEPT +-A limit-1345 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1345 -m limit --limit 12/minute -j ULOG +-A limit-1346 -m recent --name limit-1346 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-740 +-A limit-1346 -m recent --name limit-1346 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1347 -m recent --name limit-1347 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-741 +-A limit-1347 -m recent --name limit-1347 --rsource --mask 255.255.255.255 --set +-A limit-1348 -m recent --name limit-1348 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-742 +-A limit-1348 -m limit --limit 1/second -j LOG +-A limit-1348 -m recent --name limit-1348 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1349 -m recent --name limit-1349 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-743 +-A limit-1349 -m recent --name limit-1349 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-744 +-A limit-1350 -j TEE --gateway 10.0.0.1 +-A limit-1350 -j TEE --gateway 10.0.0.2 +-A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-745 +-A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-746 +-A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-747 +-A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --set +-A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-748 +-A limit-1354 -m limit --limit 12/minute -j ULOG +-A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-749 +-A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-750 +-A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-751 +-A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-752 +-A limit-1358 -m limit --limit 1/second -j LOG +-A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-753 +-A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-754 +-A limit-1360 -j TEE --gateway 10.0.0.1 +-A limit-1360 -j TEE --gateway 10.0.0.2 +-A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-755 +-A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-756 +-A limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1363 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-757 +-A limit-1363 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-758 +-A limit-1364 -m limit --limit 12/minute -j ULOG +-A limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-759 +-A limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1366 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-760 +-A limit-1366 -j ACCEPT +-A limit-1368 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-762 +-A limit-1368 -m limit --limit 1/second -j LOG +-A limit-1368 -j ACCEPT +-A limit-1369 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-763 +-A limit-1369 -m limit --limit 1/second -j LOG +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1370 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-764 +-A limit-1370 -j TEE --gateway 10.0.0.1 +-A limit-1370 -j TEE --gateway 10.0.0.2 +-A limit-1370 -j ACCEPT +-A limit-1371 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-765 +-A limit-1371 -j TEE --gateway 10.0.0.1 +-A limit-1371 -j TEE --gateway 10.0.0.2 +-A limit-1372 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-766 +-A limit-1372 -j ACCEPT +-A limit-1374 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-768 +-A limit-1374 -m limit --limit 12/minute -j ULOG +-A limit-1374 -j ACCEPT +-A limit-1375 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-769 +-A limit-1375 -m limit --limit 12/minute -j ULOG +-A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-770 +-A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-771 +-A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-772 +-A limit-1378 -m limit --limit 1/second -j LOG +-A limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1379 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-773 +-A limit-1379 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-138 -m limit --limit 12/minute -j ULOG +-A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1380 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-774 +-A limit-1380 -j TEE --gateway 10.0.0.1 +-A limit-1380 -j TEE --gateway 10.0.0.2 +-A limit-1380 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-775 +-A limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-776 +-A limit-1382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-777 +-A limit-1383 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-778 +-A limit-1384 -m limit --limit 12/minute -j ULOG +-A limit-1384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-779 +-A limit-1385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1386 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-780 +-A limit-1386 -j ACCEPT +-A limit-1388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-782 +-A limit-1388 -m limit --limit 1/second -j LOG +-A limit-1388 -j ACCEPT +-A limit-1389 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-783 +-A limit-1389 -m limit --limit 1/second -j LOG +-A limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-784 +-A limit-1390 -j TEE --gateway 10.0.0.1 +-A limit-1390 -j TEE --gateway 10.0.0.2 +-A limit-1390 -j ACCEPT +-A limit-1391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-785 +-A limit-1391 -j TEE --gateway 10.0.0.1 +-A limit-1391 -j TEE --gateway 10.0.0.2 +-A limit-1392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-786 +-A limit-1392 -j ACCEPT +-A limit-1394 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-788 +-A limit-1394 -m limit --limit 12/minute -j ULOG +-A limit-1394 -j ACCEPT +-A limit-1395 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-789 +-A limit-1395 -m limit --limit 12/minute -j ULOG +-A limit-1396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-790 +-A limit-1396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-791 +-A limit-1397 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-792 +-A limit-1398 -m limit --limit 1/second -j LOG +-A limit-1398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-793 +-A limit-1399 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-14 -j TEE --gateway 10.0.0.1 +-A limit-14 -j TEE --gateway 10.0.0.2 +-A limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-140 -j ACCEPT +-A limit-1400 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-794 +-A limit-1400 -j TEE --gateway 10.0.0.1 +-A limit-1400 -j TEE --gateway 10.0.0.2 +-A limit-1400 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-795 +-A limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1402 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-796 +-A limit-1402 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1403 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-797 +-A limit-1403 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1404 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-798 +-A limit-1404 -m limit --limit 12/minute -j ULOG +-A limit-1404 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1405 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-799 +-A limit-1405 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1406 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-800 +-A limit-1406 -j ACCEPT +-A limit-1408 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-802 +-A limit-1408 -m limit --limit 1/second -j LOG +-A limit-1408 -j ACCEPT +-A limit-1409 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-803 +-A limit-1409 -m limit --limit 1/second -j LOG +-A limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-1410 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-804 +-A limit-1410 -j TEE --gateway 10.0.0.1 +-A limit-1410 -j TEE --gateway 10.0.0.2 +-A limit-1410 -j ACCEPT +-A limit-1411 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-805 +-A limit-1411 -j TEE --gateway 10.0.0.1 +-A limit-1411 -j TEE --gateway 10.0.0.2 +-A limit-1412 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-806 +-A limit-1412 -j ACCEPT +-A limit-1414 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-808 +-A limit-1414 -m limit --limit 12/minute -j ULOG +-A limit-1414 -j ACCEPT +-A limit-1415 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-809 +-A limit-1415 -m limit --limit 12/minute -j ULOG +-A limit-1416 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-810 +-A limit-1416 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1417 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-811 +-A limit-1417 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1418 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-812 +-A limit-1418 -m limit --limit 1/second -j LOG +-A limit-1418 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1419 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-813 +-A limit-1419 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-142 -m limit --limit 1/second -j LOG +-A limit-142 -j ACCEPT +-A limit-1420 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-814 +-A limit-1420 -j TEE --gateway 10.0.0.1 +-A limit-1420 -j TEE --gateway 10.0.0.2 +-A limit-1420 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-815 +-A limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1422 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-816 +-A limit-1422 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1423 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-817 +-A limit-1423 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1424 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-818 +-A limit-1424 -m limit --limit 12/minute -j ULOG +-A limit-1424 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1425 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-819 +-A limit-1425 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1426 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-820 +-A limit-1426 -j ACCEPT +-A limit-1428 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-822 +-A limit-1428 -m limit --limit 1/second -j LOG +-A limit-1428 -j ACCEPT +-A limit-1429 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-823 +-A limit-1429 -m limit --limit 1/second -j LOG +-A limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-143 -m limit --limit 1/second -j LOG +-A limit-1430 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-824 +-A limit-1430 -j TEE --gateway 10.0.0.1 +-A limit-1430 -j TEE --gateway 10.0.0.2 +-A limit-1430 -j ACCEPT +-A limit-1431 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-825 +-A limit-1431 -j TEE --gateway 10.0.0.1 +-A limit-1431 -j TEE --gateway 10.0.0.2 +-A limit-1432 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-826 +-A limit-1432 -j ACCEPT +-A limit-1434 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-828 +-A limit-1434 -m limit --limit 12/minute -j ULOG +-A limit-1434 -j ACCEPT +-A limit-1435 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-829 +-A limit-1435 -m limit --limit 12/minute -j ULOG +-A limit-1436 -m recent --name limit-1436 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1436 -m recent --name limit-1436 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1437 -m recent --name limit-1437 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1437 -m recent --name limit-1437 --rsource --mask 255.255.255.255 --set +-A limit-1438 -m recent --name limit-1438 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1438 -m limit --limit 1/second -j LOG +-A limit-1438 -m recent --name limit-1438 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1439 -m recent --name limit-1439 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1439 -m recent --name limit-1439 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-144 -j TEE --gateway 10.0.0.1 +-A limit-144 -j TEE --gateway 10.0.0.2 +-A limit-144 -j ACCEPT +-A limit-1440 -m recent --name limit-1440 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1440 -j TEE --gateway 10.0.0.1 +-A limit-1440 -j TEE --gateway 10.0.0.2 +-A limit-1440 -m recent --name limit-1440 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1442 -m recent --name limit-1442 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1442 -m recent --name limit-1442 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1443 -m recent --name limit-1443 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1443 -m recent --name limit-1443 --rsource --mask 255.255.255.255 --set +-A limit-1444 -m recent --name limit-1444 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1444 -m limit --limit 12/minute -j ULOG +-A limit-1444 -m recent --name limit-1444 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1445 -m recent --name limit-1445 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1445 -m recent --name limit-1445 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1446 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1446 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1447 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1447 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1448 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1448 -m limit --limit 1/second -j LOG +-A limit-1448 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1449 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1449 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-145 -j TEE --gateway 10.0.0.1 +-A limit-145 -j TEE --gateway 10.0.0.2 +-A limit-1450 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1450 -j TEE --gateway 10.0.0.1 +-A limit-1450 -j TEE --gateway 10.0.0.2 +-A limit-1450 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1452 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1452 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1453 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1453 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1454 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1454 -m limit --limit 12/minute -j ULOG +-A limit-1454 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1455 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1455 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1456 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1456 -j ACCEPT +-A limit-1458 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1458 -m limit --limit 1/second -j LOG +-A limit-1458 -j ACCEPT +-A limit-1459 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1459 -m limit --limit 1/second -j LOG +-A limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 +-A limit-146 -j ACCEPT +-A limit-1460 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1460 -j TEE --gateway 10.0.0.1 +-A limit-1460 -j TEE --gateway 10.0.0.2 +-A limit-1460 -j ACCEPT +-A limit-1461 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1461 -j TEE --gateway 10.0.0.1 +-A limit-1461 -j TEE --gateway 10.0.0.2 +-A limit-1462 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1462 -j ACCEPT +-A limit-1464 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1464 -m limit --limit 12/minute -j ULOG +-A limit-1464 -j ACCEPT +-A limit-1465 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1465 -m limit --limit 12/minute -j ULOG +-A limit-1466 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1466 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1467 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1467 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1468 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1468 -m limit --limit 1/second -j LOG +-A limit-1468 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1469 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1469 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-1470 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1470 -j TEE --gateway 10.0.0.1 +-A limit-1470 -j TEE --gateway 10.0.0.2 +-A limit-1470 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1472 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1472 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1473 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1473 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1474 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1474 -m limit --limit 12/minute -j ULOG +-A limit-1474 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1475 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1475 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1476 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1476 -j ACCEPT +-A limit-1478 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1478 -m limit --limit 1/second -j LOG +-A limit-1478 -j ACCEPT +-A limit-1479 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1479 -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-148 -m limit --limit 12/minute -j ULOG +-A limit-148 -j ACCEPT +-A limit-1480 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1480 -j TEE --gateway 10.0.0.1 +-A limit-1480 -j TEE --gateway 10.0.0.2 +-A limit-1480 -j ACCEPT +-A limit-1481 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1481 -j TEE --gateway 10.0.0.1 +-A limit-1481 -j TEE --gateway 10.0.0.2 +-A limit-1482 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1482 -j ACCEPT +-A limit-1484 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1484 -m limit --limit 12/minute -j ULOG +-A limit-1484 -j ACCEPT +-A limit-1485 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1485 -m limit --limit 12/minute -j ULOG +-A limit-1486 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1486 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1487 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1487 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1488 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1488 -m limit --limit 1/second -j LOG +-A limit-1488 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1489 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1489 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-149 -m limit --limit 12/minute -j ULOG +-A limit-1490 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1490 -j TEE --gateway 10.0.0.1 +-A limit-1490 -j TEE --gateway 10.0.0.2 +-A limit-1490 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1492 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1492 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1493 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1493 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1494 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1494 -m limit --limit 12/minute -j ULOG +-A limit-1494 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1495 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1495 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1496 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1496 -j ACCEPT +-A limit-1498 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1498 -m limit --limit 1/second -j LOG +-A limit-1498 -j ACCEPT +-A limit-1499 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1499 -m limit --limit 1/second -j LOG +-A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-60 +-A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1500 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1500 -j TEE --gateway 10.0.0.1 +-A limit-1500 -j TEE --gateway 10.0.0.2 +-A limit-1500 -j ACCEPT +-A limit-1501 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1501 -j TEE --gateway 10.0.0.1 +-A limit-1501 -j TEE --gateway 10.0.0.2 +-A limit-1502 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1502 -j ACCEPT +-A limit-1504 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1504 -m limit --limit 12/minute -j ULOG +-A limit-1504 -j ACCEPT +-A limit-1505 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1505 -m limit --limit 12/minute -j ULOG +-A limit-1506 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1506 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1507 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1507 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1508 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1508 -m limit --limit 1/second -j LOG +-A limit-1508 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1509 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1509 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-61 +-A limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1510 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1510 -j TEE --gateway 10.0.0.1 +-A limit-1510 -j TEE --gateway 10.0.0.2 +-A limit-1510 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1512 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1512 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1513 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1513 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1514 -m limit --limit 12/minute -j ULOG +-A limit-1514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1515 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1516 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1516 -j ACCEPT +-A limit-1518 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1518 -m limit --limit 1/second -j LOG +-A limit-1518 -j ACCEPT +-A limit-1519 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1519 -m limit --limit 1/second -j LOG +-A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-62 +-A limit-152 -m limit --limit 1/second -j LOG +-A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1520 -j TEE --gateway 10.0.0.1 +-A limit-1520 -j TEE --gateway 10.0.0.2 +-A limit-1520 -j ACCEPT +-A limit-1521 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1521 -j TEE --gateway 10.0.0.1 +-A limit-1521 -j TEE --gateway 10.0.0.2 +-A limit-1522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1522 -j ACCEPT +-A limit-1524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1524 -m limit --limit 12/minute -j ULOG +-A limit-1524 -j ACCEPT +-A limit-1525 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1525 -m limit --limit 12/minute -j ULOG +-A limit-1526 -m recent --name limit-1526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-830 +-A limit-1526 -m recent --name limit-1526 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1527 -m recent --name limit-1527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-831 +-A limit-1527 -m recent --name limit-1527 --rsource --mask 255.255.255.255 --set +-A limit-1528 -m recent --name limit-1528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-832 +-A limit-1528 -m limit --limit 1/second -j LOG +-A limit-1528 -m recent --name limit-1528 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1529 -m recent --name limit-1529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-833 +-A limit-1529 -m recent --name limit-1529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-63 +-A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1530 -m recent --name limit-1530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-834 +-A limit-1530 -j TEE --gateway 10.0.0.1 +-A limit-1530 -j TEE --gateway 10.0.0.2 +-A limit-1530 -m recent --name limit-1530 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-835 +-A limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1532 -m recent --name limit-1532 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-836 +-A limit-1532 -m recent --name limit-1532 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1533 -m recent --name limit-1533 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-837 +-A limit-1533 -m recent --name limit-1533 --rsource --mask 255.255.255.255 --set +-A limit-1534 -m recent --name limit-1534 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-838 +-A limit-1534 -m limit --limit 12/minute -j ULOG +-A limit-1534 -m recent --name limit-1534 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1535 -m recent --name limit-1535 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-839 +-A limit-1535 -m recent --name limit-1535 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-840 +-A limit-1536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-841 +-A limit-1537 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1538 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-842 +-A limit-1538 -m limit --limit 1/second -j LOG +-A limit-1538 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1539 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-843 +-A limit-1539 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-64 +-A limit-154 -j TEE --gateway 10.0.0.1 +-A limit-154 -j TEE --gateway 10.0.0.2 +-A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1540 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-844 +-A limit-1540 -j TEE --gateway 10.0.0.1 +-A limit-1540 -j TEE --gateway 10.0.0.2 +-A limit-1540 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-845 +-A limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1542 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-846 +-A limit-1542 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1543 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-847 +-A limit-1543 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1544 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-848 +-A limit-1544 -m limit --limit 12/minute -j ULOG +-A limit-1544 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1545 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-849 +-A limit-1545 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1546 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-850 +-A limit-1546 -j ACCEPT +-A limit-1548 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-852 +-A limit-1548 -m limit --limit 1/second -j LOG +-A limit-1548 -j ACCEPT +-A limit-1549 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-853 +-A limit-1549 -m limit --limit 1/second -j LOG +-A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-65 +-A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1550 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-854 +-A limit-1550 -j TEE --gateway 10.0.0.1 +-A limit-1550 -j TEE --gateway 10.0.0.2 +-A limit-1550 -j ACCEPT +-A limit-1551 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-855 +-A limit-1551 -j TEE --gateway 10.0.0.1 +-A limit-1551 -j TEE --gateway 10.0.0.2 +-A limit-1552 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-856 +-A limit-1552 -j ACCEPT +-A limit-1554 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-858 +-A limit-1554 -m limit --limit 12/minute -j ULOG +-A limit-1554 -j ACCEPT +-A limit-1555 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-859 +-A limit-1555 -m limit --limit 12/minute -j ULOG +-A limit-1556 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-860 +-A limit-1556 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1557 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-861 +-A limit-1557 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1558 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-862 +-A limit-1558 -m limit --limit 1/second -j LOG +-A limit-1558 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1559 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-863 +-A limit-1559 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-66 +-A limit-156 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1560 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-864 +-A limit-1560 -j TEE --gateway 10.0.0.1 +-A limit-1560 -j TEE --gateway 10.0.0.2 +-A limit-1560 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-865 +-A limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1562 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-866 +-A limit-1562 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1563 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-867 +-A limit-1563 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1564 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-868 +-A limit-1564 -m limit --limit 12/minute -j ULOG +-A limit-1564 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1565 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-869 +-A limit-1565 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1566 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-870 +-A limit-1566 -j ACCEPT +-A limit-1568 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-872 +-A limit-1568 -m limit --limit 1/second -j LOG +-A limit-1568 -j ACCEPT +-A limit-1569 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-873 +-A limit-1569 -m limit --limit 1/second -j LOG +-A limit-157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-67 +-A limit-157 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1570 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-874 +-A limit-1570 -j TEE --gateway 10.0.0.1 +-A limit-1570 -j TEE --gateway 10.0.0.2 +-A limit-1570 -j ACCEPT +-A limit-1571 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-875 +-A limit-1571 -j TEE --gateway 10.0.0.1 +-A limit-1571 -j TEE --gateway 10.0.0.2 +-A limit-1572 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-876 +-A limit-1572 -j ACCEPT +-A limit-1574 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-878 +-A limit-1574 -m limit --limit 12/minute -j ULOG +-A limit-1574 -j ACCEPT +-A limit-1575 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-879 +-A limit-1575 -m limit --limit 12/minute -j ULOG +-A limit-1576 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-880 +-A limit-1576 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1577 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-881 +-A limit-1577 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1578 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-882 +-A limit-1578 -m limit --limit 1/second -j LOG +-A limit-1578 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1579 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-883 +-A limit-1579 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-68 +-A limit-158 -m limit --limit 12/minute -j ULOG +-A limit-158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1580 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-884 +-A limit-1580 -j TEE --gateway 10.0.0.1 +-A limit-1580 -j TEE --gateway 10.0.0.2 +-A limit-1580 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-885 +-A limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1582 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-886 +-A limit-1582 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1583 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-887 +-A limit-1583 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1584 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-888 +-A limit-1584 -m limit --limit 12/minute -j ULOG +-A limit-1584 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1585 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-889 +-A limit-1585 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1586 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-890 +-A limit-1586 -j ACCEPT +-A limit-1588 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-892 +-A limit-1588 -m limit --limit 1/second -j LOG +-A limit-1588 -j ACCEPT +-A limit-1589 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-893 +-A limit-1589 -m limit --limit 1/second -j LOG +-A limit-159 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-69 +-A limit-159 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1590 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-894 +-A limit-1590 -j TEE --gateway 10.0.0.1 +-A limit-1590 -j TEE --gateway 10.0.0.2 +-A limit-1590 -j ACCEPT +-A limit-1591 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-895 +-A limit-1591 -j TEE --gateway 10.0.0.1 +-A limit-1591 -j TEE --gateway 10.0.0.2 +-A limit-1592 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-896 +-A limit-1592 -j ACCEPT +-A limit-1594 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-898 +-A limit-1594 -m limit --limit 12/minute -j ULOG +-A limit-1594 -j ACCEPT +-A limit-1595 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-899 +-A limit-1595 -m limit --limit 12/minute -j ULOG +-A limit-1596 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-900 +-A limit-1596 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1597 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-901 +-A limit-1597 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1598 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-902 +-A limit-1598 -m limit --limit 1/second -j LOG +-A limit-1598 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1599 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-903 +-A limit-1599 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-16 -m recent --name limit-16 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-16 -m recent --name limit-16 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-160 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-70 +-A limit-160 -j ACCEPT +-A limit-1600 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-904 +-A limit-1600 -j TEE --gateway 10.0.0.1 +-A limit-1600 -j TEE --gateway 10.0.0.2 +-A limit-1600 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-905 +-A limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1602 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-906 +-A limit-1602 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1603 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-907 +-A limit-1603 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1604 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-908 +-A limit-1604 -m limit --limit 12/minute -j ULOG +-A limit-1604 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1605 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-909 +-A limit-1605 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1606 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-910 +-A limit-1606 -j ACCEPT +-A limit-1608 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-912 +-A limit-1608 -m limit --limit 1/second -j LOG +-A limit-1608 -j ACCEPT +-A limit-1609 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-913 +-A limit-1609 -m limit --limit 1/second -j LOG +-A limit-161 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-71 +-A limit-1610 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-914 +-A limit-1610 -j TEE --gateway 10.0.0.1 +-A limit-1610 -j TEE --gateway 10.0.0.2 +-A limit-1610 -j ACCEPT +-A limit-1611 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-915 +-A limit-1611 -j TEE --gateway 10.0.0.1 +-A limit-1611 -j TEE --gateway 10.0.0.2 +-A limit-1612 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-916 +-A limit-1612 -j ACCEPT +-A limit-1614 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-918 +-A limit-1614 -m limit --limit 12/minute -j ULOG +-A limit-1614 -j ACCEPT +-A limit-1615 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-919 +-A limit-1615 -m limit --limit 12/minute -j ULOG +-A limit-1616 -m recent --name limit-1616 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-920 +-A limit-1616 -m recent --name limit-1616 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1617 -m recent --name limit-1617 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-921 +-A limit-1617 -m recent --name limit-1617 --rsource --mask 255.255.255.255 --set +-A limit-1618 -m recent --name limit-1618 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-922 +-A limit-1618 -m limit --limit 1/second -j LOG +-A limit-1618 -m recent --name limit-1618 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1619 -m recent --name limit-1619 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-923 +-A limit-1619 -m recent --name limit-1619 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-72 +-A limit-162 -m limit --limit 1/second -j LOG +-A limit-162 -j ACCEPT +-A limit-1620 -m recent --name limit-1620 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-924 +-A limit-1620 -j TEE --gateway 10.0.0.1 +-A limit-1620 -j TEE --gateway 10.0.0.2 +-A limit-1620 -m recent --name limit-1620 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-925 +-A limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1622 -m recent --name limit-1622 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-926 +-A limit-1622 -m recent --name limit-1622 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1623 -m recent --name limit-1623 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-927 +-A limit-1623 -m recent --name limit-1623 --rsource --mask 255.255.255.255 --set +-A limit-1624 -m recent --name limit-1624 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-928 +-A limit-1624 -m limit --limit 12/minute -j ULOG +-A limit-1624 -m recent --name limit-1624 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1625 -m recent --name limit-1625 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-929 +-A limit-1625 -m recent --name limit-1625 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1626 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-930 +-A limit-1626 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1627 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-931 +-A limit-1627 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1628 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-932 +-A limit-1628 -m limit --limit 1/second -j LOG +-A limit-1628 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1629 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-933 +-A limit-1629 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-73 +-A limit-163 -m limit --limit 1/second -j LOG +-A limit-1630 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-934 +-A limit-1630 -j TEE --gateway 10.0.0.1 +-A limit-1630 -j TEE --gateway 10.0.0.2 +-A limit-1630 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-935 +-A limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1632 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-936 +-A limit-1632 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1633 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-937 +-A limit-1633 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-938 +-A limit-1634 -m limit --limit 12/minute -j ULOG +-A limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-939 +-A limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1636 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-940 +-A limit-1636 -j ACCEPT +-A limit-1638 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-942 +-A limit-1638 -m limit --limit 1/second -j LOG +-A limit-1638 -j ACCEPT +-A limit-1639 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-943 +-A limit-1639 -m limit --limit 1/second -j LOG +-A limit-164 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-74 +-A limit-164 -j TEE --gateway 10.0.0.1 +-A limit-164 -j TEE --gateway 10.0.0.2 +-A limit-164 -j ACCEPT +-A limit-1640 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-944 +-A limit-1640 -j TEE --gateway 10.0.0.1 +-A limit-1640 -j TEE --gateway 10.0.0.2 +-A limit-1640 -j ACCEPT +-A limit-1641 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-945 +-A limit-1641 -j TEE --gateway 10.0.0.1 +-A limit-1641 -j TEE --gateway 10.0.0.2 +-A limit-1642 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-946 +-A limit-1642 -j ACCEPT +-A limit-1644 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-948 +-A limit-1644 -m limit --limit 12/minute -j ULOG +-A limit-1644 -j ACCEPT +-A limit-1645 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-949 +-A limit-1645 -m limit --limit 12/minute -j ULOG +-A limit-1646 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-950 +-A limit-1646 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1647 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-951 +-A limit-1647 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1648 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-952 +-A limit-1648 -m limit --limit 1/second -j LOG +-A limit-1648 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1649 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-953 +-A limit-1649 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-75 +-A limit-165 -j TEE --gateway 10.0.0.1 +-A limit-165 -j TEE --gateway 10.0.0.2 +-A limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-954 +-A limit-1650 -j TEE --gateway 10.0.0.1 +-A limit-1650 -j TEE --gateway 10.0.0.2 +-A limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-955 +-A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-956 +-A limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-957 +-A limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-958 +-A limit-1654 -m limit --limit 12/minute -j ULOG +-A limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-959 +-A limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1656 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-960 +-A limit-1656 -j ACCEPT +-A limit-1658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-962 +-A limit-1658 -m limit --limit 1/second -j LOG +-A limit-1658 -j ACCEPT +-A limit-1659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-963 +-A limit-1659 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-76 +-A limit-166 -j ACCEPT +-A limit-1660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-964 +-A limit-1660 -j TEE --gateway 10.0.0.1 +-A limit-1660 -j TEE --gateway 10.0.0.2 +-A limit-1660 -j ACCEPT +-A limit-1661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-965 +-A limit-1661 -j TEE --gateway 10.0.0.1 +-A limit-1661 -j TEE --gateway 10.0.0.2 +-A limit-1662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-966 +-A limit-1662 -j ACCEPT +-A limit-1664 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-968 +-A limit-1664 -m limit --limit 12/minute -j ULOG +-A limit-1664 -j ACCEPT +-A limit-1665 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-969 +-A limit-1665 -m limit --limit 12/minute -j ULOG +-A limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-970 +-A limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-971 +-A limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-972 +-A limit-1668 -m limit --limit 1/second -j LOG +-A limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-973 +-A limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-167 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-77 +-A limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-974 +-A limit-1670 -j TEE --gateway 10.0.0.1 +-A limit-1670 -j TEE --gateway 10.0.0.2 +-A limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-975 +-A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-976 +-A limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-977 +-A limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-978 +-A limit-1674 -m limit --limit 12/minute -j ULOG +-A limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-979 +-A limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1676 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-980 +-A limit-1676 -j ACCEPT +-A limit-1678 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-982 +-A limit-1678 -m limit --limit 1/second -j LOG +-A limit-1678 -j ACCEPT +-A limit-1679 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-983 +-A limit-1679 -m limit --limit 1/second -j LOG +-A limit-168 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-78 +-A limit-168 -m limit --limit 12/minute -j ULOG +-A limit-168 -j ACCEPT +-A limit-1680 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-984 +-A limit-1680 -j TEE --gateway 10.0.0.1 +-A limit-1680 -j TEE --gateway 10.0.0.2 +-A limit-1680 -j ACCEPT +-A limit-1681 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-985 +-A limit-1681 -j TEE --gateway 10.0.0.1 +-A limit-1681 -j TEE --gateway 10.0.0.2 +-A limit-1682 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-986 +-A limit-1682 -j ACCEPT +-A limit-1684 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-988 +-A limit-1684 -m limit --limit 12/minute -j ULOG +-A limit-1684 -j ACCEPT +-A limit-1685 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-989 +-A limit-1685 -m limit --limit 12/minute -j ULOG +-A limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-990 +-A limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-991 +-A limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-992 +-A limit-1688 -m limit --limit 1/second -j LOG +-A limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-993 +-A limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-169 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-79 +-A limit-169 -m limit --limit 12/minute -j ULOG +-A limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-994 +-A limit-1690 -j TEE --gateway 10.0.0.1 +-A limit-1690 -j TEE --gateway 10.0.0.2 +-A limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-995 +-A limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-996 +-A limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-997 +-A limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-998 +-A limit-1694 -m limit --limit 12/minute -j ULOG +-A limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-999 +-A limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1696 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1000 +-A limit-1696 -j ACCEPT +-A limit-1698 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1002 +-A limit-1698 -m limit --limit 1/second -j LOG +-A limit-1698 -j ACCEPT +-A limit-1699 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1003 +-A limit-1699 -m limit --limit 1/second -j LOG +-A limit-17 -m recent --name limit-17 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-17 -m recent --name limit-17 --rsource --mask 255.255.255.255 --set +-A limit-170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-80 +-A limit-170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1700 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1004 +-A limit-1700 -j TEE --gateway 10.0.0.1 +-A limit-1700 -j TEE --gateway 10.0.0.2 +-A limit-1700 -j ACCEPT +-A limit-1701 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1005 +-A limit-1701 -j TEE --gateway 10.0.0.1 +-A limit-1701 -j TEE --gateway 10.0.0.2 +-A limit-1702 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1006 +-A limit-1702 -j ACCEPT +-A limit-1704 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1008 +-A limit-1704 -m limit --limit 12/minute -j ULOG +-A limit-1704 -j ACCEPT +-A limit-1705 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1009 +-A limit-1705 -m limit --limit 12/minute -j ULOG +-A limit-1706 -m recent --name limit-1706 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1706 -m recent --name limit-1706 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1707 -m recent --name limit-1707 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1707 -m recent --name limit-1707 --rsource --mask 255.255.255.255 --set +-A limit-1708 -m recent --name limit-1708 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1708 -m limit --limit 1/second -j LOG +-A limit-1708 -m recent --name limit-1708 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1709 -m recent --name limit-1709 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1709 -m recent --name limit-1709 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-81 +-A limit-171 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1710 -m recent --name limit-1710 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1710 -j TEE --gateway 10.0.0.1 +-A limit-1710 -j TEE --gateway 10.0.0.2 +-A limit-1710 -m recent --name limit-1710 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1712 -m recent --name limit-1712 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1712 -m recent --name limit-1712 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1713 -m recent --name limit-1713 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1713 -m recent --name limit-1713 --rsource --mask 255.255.255.255 --set +-A limit-1714 -m recent --name limit-1714 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1714 -m limit --limit 12/minute -j ULOG +-A limit-1714 -m recent --name limit-1714 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1715 -m recent --name limit-1715 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1715 -m recent --name limit-1715 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1718 -m limit --limit 1/second -j LOG +-A limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-82 +-A limit-172 -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1720 -j TEE --gateway 10.0.0.1 +-A limit-1720 -j TEE --gateway 10.0.0.2 +-A limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1722 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1722 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1723 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1723 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1724 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1724 -m limit --limit 12/minute -j ULOG +-A limit-1724 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1725 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1725 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1726 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1726 -j ACCEPT +-A limit-1728 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1728 -m limit --limit 1/second -j LOG +-A limit-1728 -j ACCEPT +-A limit-1729 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1729 -m limit --limit 1/second -j LOG +-A limit-173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-83 +-A limit-173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-1730 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1730 -j TEE --gateway 10.0.0.1 +-A limit-1730 -j TEE --gateway 10.0.0.2 +-A limit-1730 -j ACCEPT +-A limit-1731 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1731 -j TEE --gateway 10.0.0.1 +-A limit-1731 -j TEE --gateway 10.0.0.2 +-A limit-1732 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1732 -j ACCEPT +-A limit-1734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1734 -m limit --limit 12/minute -j ULOG +-A limit-1734 -j ACCEPT +-A limit-1735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1735 -m limit --limit 12/minute -j ULOG +-A limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1738 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1738 -m limit --limit 1/second -j LOG +-A limit-1738 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1739 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1739 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-84 +-A limit-174 -j TEE --gateway 10.0.0.1 +-A limit-174 -j TEE --gateway 10.0.0.2 +-A limit-174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1740 -j TEE --gateway 10.0.0.1 +-A limit-1740 -j TEE --gateway 10.0.0.2 +-A limit-1740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1742 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1743 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1744 -m limit --limit 12/minute -j ULOG +-A limit-1744 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1745 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1746 -j ACCEPT +-A limit-1748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1748 -m limit --limit 1/second -j LOG +-A limit-1748 -j ACCEPT +-A limit-1749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1749 -m limit --limit 1/second -j LOG +-A limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-85 +-A limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1750 -j TEE --gateway 10.0.0.1 +-A limit-1750 -j TEE --gateway 10.0.0.2 +-A limit-1750 -j ACCEPT +-A limit-1751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1751 -j TEE --gateway 10.0.0.1 +-A limit-1751 -j TEE --gateway 10.0.0.2 +-A limit-1752 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1752 -j ACCEPT +-A limit-1754 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1754 -m limit --limit 12/minute -j ULOG +-A limit-1754 -j ACCEPT +-A limit-1755 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1755 -m limit --limit 12/minute -j ULOG +-A limit-1756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1757 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1758 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1758 -m limit --limit 1/second -j LOG +-A limit-1758 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1759 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1759 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-86 +-A limit-176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1760 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1760 -j TEE --gateway 10.0.0.1 +-A limit-1760 -j TEE --gateway 10.0.0.2 +-A limit-1760 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1762 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1762 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1763 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1763 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1764 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1764 -m limit --limit 12/minute -j ULOG +-A limit-1764 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1765 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1765 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1766 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1766 -j ACCEPT +-A limit-1768 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1768 -m limit --limit 1/second -j LOG +-A limit-1768 -j ACCEPT +-A limit-1769 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1769 -m limit --limit 1/second -j LOG +-A limit-177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-87 +-A limit-177 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1770 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1770 -j TEE --gateway 10.0.0.1 +-A limit-1770 -j TEE --gateway 10.0.0.2 +-A limit-1770 -j ACCEPT +-A limit-1771 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1771 -j TEE --gateway 10.0.0.1 +-A limit-1771 -j TEE --gateway 10.0.0.2 +-A limit-1772 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1772 -j ACCEPT +-A limit-1774 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1774 -m limit --limit 12/minute -j ULOG +-A limit-1774 -j ACCEPT +-A limit-1775 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1775 -m limit --limit 12/minute -j ULOG +-A limit-1776 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1776 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1777 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1777 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1778 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1778 -m limit --limit 1/second -j LOG +-A limit-1778 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1779 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1779 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-88 +-A limit-178 -m limit --limit 12/minute -j ULOG +-A limit-178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1780 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1780 -j TEE --gateway 10.0.0.1 +-A limit-1780 -j TEE --gateway 10.0.0.2 +-A limit-1780 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1782 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1782 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1783 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1783 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1784 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1784 -m limit --limit 12/minute -j ULOG +-A limit-1784 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1785 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-1785 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1786 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1786 -j ACCEPT +-A limit-1788 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1788 -m limit --limit 1/second -j LOG +-A limit-1788 -j ACCEPT +-A limit-1789 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1789 -m limit --limit 1/second -j LOG +-A limit-179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-89 +-A limit-179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1790 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1790 -j TEE --gateway 10.0.0.1 +-A limit-1790 -j TEE --gateway 10.0.0.2 +-A limit-1790 -j ACCEPT +-A limit-1791 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1791 -j TEE --gateway 10.0.0.1 +-A limit-1791 -j TEE --gateway 10.0.0.2 +-A limit-1792 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1792 -j ACCEPT +-A limit-1794 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1794 -m limit --limit 12/minute -j ULOG +-A limit-1794 -j ACCEPT +-A limit-1795 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1795 -m limit --limit 12/minute -j ULOG +-A limit-1796 -m recent --name limit-1796 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1010 +-A limit-1796 -m recent --name limit-1796 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1797 -m recent --name limit-1797 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1011 +-A limit-1797 -m recent --name limit-1797 --rsource --mask 255.255.255.255 --set +-A limit-1798 -m recent --name limit-1798 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1012 +-A limit-1798 -m limit --limit 1/second -j LOG +-A limit-1798 -m recent --name limit-1798 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1799 -m recent --name limit-1799 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1013 +-A limit-1799 -m recent --name limit-1799 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-18 -m recent --name limit-18 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-18 -m limit --limit 12/minute -j ULOG +-A limit-18 -m recent --name limit-18 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-180 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-90 +-A limit-180 -j ACCEPT +-A limit-1800 -m recent --name limit-1800 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1014 +-A limit-1800 -j TEE --gateway 10.0.0.1 +-A limit-1800 -j TEE --gateway 10.0.0.2 +-A limit-1800 -m recent --name limit-1800 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1015 +-A limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1802 -m recent --name limit-1802 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1016 +-A limit-1802 -m recent --name limit-1802 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1803 -m recent --name limit-1803 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1017 +-A limit-1803 -m recent --name limit-1803 --rsource --mask 255.255.255.255 --set +-A limit-1804 -m recent --name limit-1804 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1018 +-A limit-1804 -m limit --limit 12/minute -j ULOG +-A limit-1804 -m recent --name limit-1804 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1805 -m recent --name limit-1805 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1019 +-A limit-1805 -m recent --name limit-1805 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1806 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1020 +-A limit-1806 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1807 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1021 +-A limit-1807 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1808 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1022 +-A limit-1808 -m limit --limit 1/second -j LOG +-A limit-1808 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1809 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1023 +-A limit-1809 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-181 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-91 +-A limit-1810 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1024 +-A limit-1810 -j TEE --gateway 10.0.0.1 +-A limit-1810 -j TEE --gateway 10.0.0.2 +-A limit-1810 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1025 +-A limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1812 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1026 +-A limit-1812 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1813 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1027 +-A limit-1813 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1814 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1028 +-A limit-1814 -m limit --limit 12/minute -j ULOG +-A limit-1814 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1815 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1029 +-A limit-1815 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1816 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1030 +-A limit-1816 -j ACCEPT +-A limit-1818 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1032 +-A limit-1818 -m limit --limit 1/second -j LOG +-A limit-1818 -j ACCEPT +-A limit-1819 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1033 +-A limit-1819 -m limit --limit 1/second -j LOG +-A limit-182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-92 +-A limit-182 -m limit --limit 1/second -j LOG +-A limit-182 -j ACCEPT +-A limit-1820 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1034 +-A limit-1820 -j TEE --gateway 10.0.0.1 +-A limit-1820 -j TEE --gateway 10.0.0.2 +-A limit-1820 -j ACCEPT +-A limit-1821 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1035 +-A limit-1821 -j TEE --gateway 10.0.0.1 +-A limit-1821 -j TEE --gateway 10.0.0.2 +-A limit-1822 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1036 +-A limit-1822 -j ACCEPT +-A limit-1824 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1038 +-A limit-1824 -m limit --limit 12/minute -j ULOG +-A limit-1824 -j ACCEPT +-A limit-1825 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1039 +-A limit-1825 -m limit --limit 12/minute -j ULOG +-A limit-1826 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1040 +-A limit-1826 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1827 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1041 +-A limit-1827 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1828 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1042 +-A limit-1828 -m limit --limit 1/second -j LOG +-A limit-1828 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1829 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1043 +-A limit-1829 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-183 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-93 +-A limit-183 -m limit --limit 1/second -j LOG +-A limit-1830 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1044 +-A limit-1830 -j TEE --gateway 10.0.0.1 +-A limit-1830 -j TEE --gateway 10.0.0.2 +-A limit-1830 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1045 +-A limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1832 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1046 +-A limit-1832 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1833 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1047 +-A limit-1833 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1834 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1048 +-A limit-1834 -m limit --limit 12/minute -j ULOG +-A limit-1834 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-1835 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1049 +-A limit-1835 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1836 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1050 +-A limit-1836 -j ACCEPT +-A limit-1838 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1052 +-A limit-1838 -m limit --limit 1/second -j LOG +-A limit-1838 -j ACCEPT +-A limit-1839 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1053 +-A limit-1839 -m limit --limit 1/second -j LOG +-A limit-184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-94 +-A limit-184 -j TEE --gateway 10.0.0.1 +-A limit-184 -j TEE --gateway 10.0.0.2 +-A limit-184 -j ACCEPT +-A limit-1840 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1054 +-A limit-1840 -j TEE --gateway 10.0.0.1 +-A limit-1840 -j TEE --gateway 10.0.0.2 +-A limit-1840 -j ACCEPT +-A limit-1841 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1055 +-A limit-1841 -j TEE --gateway 10.0.0.1 +-A limit-1841 -j TEE --gateway 10.0.0.2 +-A limit-1842 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 +-A limit-1842 -j ACCEPT +-A limit-1844 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 +-A limit-1844 -m limit --limit 12/minute -j ULOG +-A limit-1844 -j ACCEPT +-A limit-1845 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 +-A limit-1845 -m limit --limit 12/minute -j ULOG +-A limit-1846 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1060 +-A limit-1846 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1847 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1061 +-A limit-1847 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1848 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1062 +-A limit-1848 -m limit --limit 1/second -j LOG +-A limit-1848 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1849 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1063 +-A limit-1849 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-95 +-A limit-185 -j TEE --gateway 10.0.0.1 +-A limit-185 -j TEE --gateway 10.0.0.2 +-A limit-1850 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1064 +-A limit-1850 -j TEE --gateway 10.0.0.1 +-A limit-1850 -j TEE --gateway 10.0.0.2 +-A limit-1850 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1065 +-A limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1852 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1066 +-A limit-1852 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1853 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1067 +-A limit-1853 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-1854 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1068 +-A limit-1854 -m limit --limit 12/minute -j ULOG +-A limit-1854 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-1855 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1069 +-A limit-1855 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1856 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1070 +-A limit-1856 -j ACCEPT +-A limit-1858 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 +-A limit-1858 -m limit --limit 1/second -j LOG +-A limit-1858 -j ACCEPT +-A limit-1859 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 +-A limit-1859 -m limit --limit 1/second -j LOG +-A limit-186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-96 +-A limit-186 -j ACCEPT +-A limit-1860 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 +-A limit-1860 -j TEE --gateway 10.0.0.1 +-A limit-1860 -j TEE --gateway 10.0.0.2 +-A limit-1860 -j ACCEPT +-A limit-1861 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 +-A limit-1861 -j TEE --gateway 10.0.0.1 +-A limit-1861 -j TEE --gateway 10.0.0.2 +-A limit-1862 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 +-A limit-1862 -j ACCEPT +-A limit-1864 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 +-A limit-1864 -m limit --limit 12/minute -j ULOG +-A limit-1864 -j ACCEPT +-A limit-1865 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 +-A limit-1865 -m limit --limit 12/minute -j ULOG +-A limit-1866 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1080 +-A limit-1866 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1867 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1081 +-A limit-1867 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1868 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1082 +-A limit-1868 -m limit --limit 1/second -j LOG +-A limit-1868 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1869 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1083 +-A limit-1869 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-187 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 +-A limit-1870 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1084 +-A limit-1870 -j TEE --gateway 10.0.0.1 +-A limit-1870 -j TEE --gateway 10.0.0.2 +-A limit-1870 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1085 +-A limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-1872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1086 +-A limit-1872 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1087 +-A limit-1873 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-1874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1088 +-A limit-1874 -m limit --limit 12/minute -j ULOG +-A limit-1874 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-1875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1089 +-A limit-1875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-1876 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 +-A limit-1876 -j ACCEPT +-A limit-1878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 +-A limit-1878 -m limit --limit 1/second -j LOG +-A limit-1878 -j ACCEPT +-A limit-1879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 +-A limit-1879 -m limit --limit 1/second -j LOG +-A limit-188 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 +-A limit-188 -m limit --limit 12/minute -j ULOG +-A limit-188 -j ACCEPT +-A limit-1880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 +-A limit-1880 -j TEE --gateway 10.0.0.1 +-A limit-1880 -j TEE --gateway 10.0.0.2 +-A limit-1880 -j ACCEPT +-A limit-1881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 +-A limit-1881 -j TEE --gateway 10.0.0.1 +-A limit-1881 -j TEE --gateway 10.0.0.2 +-A limit-1882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1096 +-A limit-1882 -j ACCEPT +-A limit-1884 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1098 +-A limit-1884 -m limit --limit 12/minute -j ULOG +-A limit-1884 -j ACCEPT +-A limit-1885 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1099 +-A limit-1885 -m limit --limit 12/minute -j ULOG +-A limit-1886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1886 -j ACCEPT +-A limit-1886 -m limit --limit 1/second -j LOG +-A limit-1886 -j DROP +-A limit-1887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1887 -j RETURN +-A limit-1887 -m limit --limit 1/second -j LOG +-A limit-1887 -j DROP +-A limit-1888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1888 -j logaccept-33 +-A limit-1888 -m limit --limit 1/second -j LOG +-A limit-1888 -j DROP +-A limit-1889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1889 -j logaccept-34 +-A limit-1889 -m limit --limit 1/second -j LOG +-A limit-1889 -j DROP +-A limit-189 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 +-A limit-189 -m limit --limit 12/minute -j ULOG +-A limit-1890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1890 -j ACCEPT +-A limit-1890 -m limit --limit 1/second -j LOG +-A limit-1890 -j DROP +-A limit-1891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1891 -j logaccept-35 +-A limit-1891 -m limit --limit 1/second -j LOG +-A limit-1891 -j DROP +-A limit-1892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1892 -j ACCEPT +-A limit-1892 -j DROP +-A limit-1893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1893 -j RETURN +-A limit-1893 -j DROP +-A limit-1894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1894 -j logaccept-36 +-A limit-1894 -j DROP +-A limit-1895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1895 -j logaccept-37 +-A limit-1895 -j DROP +-A limit-1896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1896 -j ACCEPT +-A limit-1896 -j DROP +-A limit-1897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1897 -j logaccept-38 +-A limit-1897 -j DROP +-A limit-1898 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1898 -j ACCEPT +-A limit-1898 -m limit --limit 1/second -j LOG +-A limit-1898 -j DROP +-A limit-1899 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1899 -j RETURN +-A limit-1899 -m limit --limit 1/second -j LOG +-A limit-1899 -j DROP +-A limit-19 -m recent --name limit-19 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-19 -m recent --name limit-19 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-190 -m recent --name limit-190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-100 +-A limit-190 -m recent --name limit-190 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1900 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1900 -j logaccept-39 +-A limit-1900 -m limit --limit 1/second -j LOG +-A limit-1900 -j DROP +-A limit-1901 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1901 -j logaccept-40 +-A limit-1901 -m limit --limit 1/second -j LOG +-A limit-1901 -j DROP +-A limit-1902 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1902 -j ACCEPT +-A limit-1902 -m limit --limit 1/second -j LOG +-A limit-1902 -j DROP +-A limit-1903 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1903 -j logaccept-41 +-A limit-1903 -m limit --limit 1/second -j LOG +-A limit-1903 -j DROP +-A limit-1904 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1904 -j ACCEPT +-A limit-1904 -j TEE --gateway 10.0.0.1 +-A limit-1904 -j TEE --gateway 10.0.0.2 +-A limit-1904 -j DROP +-A limit-1905 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1905 -j RETURN +-A limit-1905 -j TEE --gateway 10.0.0.1 +-A limit-1905 -j TEE --gateway 10.0.0.2 +-A limit-1905 -j DROP +-A limit-1906 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1906 -j logaccept-42 +-A limit-1906 -j TEE --gateway 10.0.0.1 +-A limit-1906 -j TEE --gateway 10.0.0.2 +-A limit-1906 -j DROP +-A limit-1907 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1907 -j logaccept-43 +-A limit-1907 -j TEE --gateway 10.0.0.1 +-A limit-1907 -j TEE --gateway 10.0.0.2 +-A limit-1907 -j DROP +-A limit-1908 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1908 -j ACCEPT +-A limit-1908 -j TEE --gateway 10.0.0.1 +-A limit-1908 -j TEE --gateway 10.0.0.2 +-A limit-1908 -j DROP +-A limit-1909 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1909 -j logaccept-44 +-A limit-1909 -j TEE --gateway 10.0.0.1 +-A limit-1909 -j TEE --gateway 10.0.0.2 +-A limit-1909 -j DROP +-A limit-191 -m recent --name limit-191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-101 +-A limit-191 -m recent --name limit-191 --rsource --mask 255.255.255.255 --set +-A limit-1910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1910 -j ACCEPT +-A limit-1910 -j DROP +-A limit-1911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1911 -j RETURN +-A limit-1911 -j DROP +-A limit-1912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1912 -j logaccept-45 +-A limit-1912 -j DROP +-A limit-1913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1913 -j logaccept-46 +-A limit-1913 -j DROP +-A limit-1914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1914 -j ACCEPT +-A limit-1914 -j DROP +-A limit-1915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1915 -j logaccept-47 +-A limit-1915 -j DROP +-A limit-1916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1916 -j ACCEPT +-A limit-1916 -m limit --limit 12/minute -j ULOG +-A limit-1916 -j DROP +-A limit-1917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1917 -j RETURN +-A limit-1917 -m limit --limit 12/minute -j ULOG +-A limit-1917 -j DROP +-A limit-1918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1918 -j logaccept-48 +-A limit-1918 -m limit --limit 12/minute -j ULOG +-A limit-1918 -j DROP +-A limit-1919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1919 -j logaccept-49 +-A limit-1919 -m limit --limit 12/minute -j ULOG +-A limit-1919 -j DROP +-A limit-192 -m recent --name limit-192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-102 +-A limit-192 -m limit --limit 1/second -j LOG +-A limit-192 -m recent --name limit-192 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1920 -j ACCEPT +-A limit-1920 -m limit --limit 12/minute -j ULOG +-A limit-1920 -j DROP +-A limit-1921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1921 -j logaccept-50 +-A limit-1921 -m limit --limit 12/minute -j ULOG +-A limit-1921 -j DROP +-A limit-1922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1922 -j ACCEPT +-A limit-1922 -j DROP +-A limit-1923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1923 -j RETURN +-A limit-1923 -j DROP +-A limit-1924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1924 -j logaccept-51 +-A limit-1924 -j DROP +-A limit-1925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1925 -j logaccept-52 +-A limit-1925 -j DROP +-A limit-1926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1926 -j ACCEPT +-A limit-1926 -j DROP +-A limit-1927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1927 -j logaccept-53 +-A limit-1927 -j DROP +-A limit-1928 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1928 -j ACCEPT +-A limit-1928 -m limit --limit 1/second -j LOG +-A limit-1928 -j DROP +-A limit-1929 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1929 -j RETURN +-A limit-1929 -m limit --limit 1/second -j LOG +-A limit-1929 -j DROP +-A limit-193 -m recent --name limit-193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-103 +-A limit-193 -m recent --name limit-193 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1930 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1930 -j logaccept-54 +-A limit-1930 -m limit --limit 1/second -j LOG +-A limit-1930 -j DROP +-A limit-1931 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1931 -j logaccept-55 +-A limit-1931 -m limit --limit 1/second -j LOG +-A limit-1931 -j DROP +-A limit-1932 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1932 -j ACCEPT +-A limit-1932 -m limit --limit 1/second -j LOG +-A limit-1932 -j DROP +-A limit-1933 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1933 -j logaccept-56 +-A limit-1933 -m limit --limit 1/second -j LOG +-A limit-1933 -j DROP +-A limit-1934 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1934 -j ACCEPT +-A limit-1934 -j TEE --gateway 10.0.0.1 +-A limit-1934 -j TEE --gateway 10.0.0.2 +-A limit-1934 -j DROP +-A limit-1935 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1935 -j RETURN +-A limit-1935 -j TEE --gateway 10.0.0.1 +-A limit-1935 -j TEE --gateway 10.0.0.2 +-A limit-1935 -j DROP +-A limit-1936 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1936 -j logaccept-57 +-A limit-1936 -j TEE --gateway 10.0.0.1 +-A limit-1936 -j TEE --gateway 10.0.0.2 +-A limit-1936 -j DROP +-A limit-1937 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1937 -j logaccept-58 +-A limit-1937 -j TEE --gateway 10.0.0.1 +-A limit-1937 -j TEE --gateway 10.0.0.2 +-A limit-1937 -j DROP +-A limit-1938 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1938 -j ACCEPT +-A limit-1938 -j TEE --gateway 10.0.0.1 +-A limit-1938 -j TEE --gateway 10.0.0.2 +-A limit-1938 -j DROP +-A limit-1939 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1939 -j logaccept-59 +-A limit-1939 -j TEE --gateway 10.0.0.1 +-A limit-1939 -j TEE --gateway 10.0.0.2 +-A limit-1939 -j DROP +-A limit-194 -m recent --name limit-194 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-104 +-A limit-194 -j TEE --gateway 10.0.0.1 +-A limit-194 -j TEE --gateway 10.0.0.2 +-A limit-194 -m recent --name limit-194 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1940 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1940 -j ACCEPT +-A limit-1940 -j DROP +-A limit-1941 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1941 -j RETURN +-A limit-1941 -j DROP +-A limit-1942 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1942 -j logaccept-60 +-A limit-1942 -j DROP +-A limit-1943 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1943 -j logaccept-61 +-A limit-1943 -j DROP +-A limit-1944 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1944 -j ACCEPT +-A limit-1944 -j DROP +-A limit-1945 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1945 -j logaccept-62 +-A limit-1945 -j DROP +-A limit-1946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1946 -j ACCEPT +-A limit-1946 -m limit --limit 12/minute -j ULOG +-A limit-1946 -j DROP +-A limit-1947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1947 -j RETURN +-A limit-1947 -m limit --limit 12/minute -j ULOG +-A limit-1947 -j DROP +-A limit-1948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1948 -j logaccept-63 +-A limit-1948 -m limit --limit 12/minute -j ULOG +-A limit-1948 -j DROP +-A limit-1949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1949 -j logaccept-64 +-A limit-1949 -m limit --limit 12/minute -j ULOG +-A limit-1949 -j DROP +-A limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-105 +-A limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1950 -j ACCEPT +-A limit-1950 -m limit --limit 12/minute -j ULOG +-A limit-1950 -j DROP +-A limit-1951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1951 -j logaccept-65 +-A limit-1951 -m limit --limit 12/minute -j ULOG +-A limit-1951 -j DROP +-A limit-1952 -m recent --name limit-1952 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1100 +-A limit-1952 -m recent --name limit-1952 --rsource --mask 255.255.255.255 --set +-A limit-1953 -m recent --name limit-1953 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1101 +-A limit-1953 -m recent --name limit-1953 --rsource --mask 255.255.255.255 --set +-A limit-1954 -m recent --name limit-1954 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1102 +-A limit-1954 -m recent --name limit-1954 --rsource --mask 255.255.255.255 --set +-A limit-1955 -m recent --name limit-1955 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1103 +-A limit-1955 -m recent --name limit-1955 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1956 -m recent --name limit-1956 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1104 +-A limit-1956 -m recent --name limit-1956 --rsource --mask 255.255.255.255 --set +-A limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1105 +-A limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1958 -m recent --name limit-1958 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1106 +-A limit-1958 -m recent --name limit-1958 --rsource --mask 255.255.255.255 --set +-A limit-1959 -m recent --name limit-1959 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1107 +-A limit-1959 -m recent --name limit-1959 --rsource --mask 255.255.255.255 --set +-A limit-196 -m recent --name limit-196 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-106 +-A limit-196 -m recent --name limit-196 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1960 -m recent --name limit-1960 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1108 +-A limit-1960 -m recent --name limit-1960 --rsource --mask 255.255.255.255 --set +-A limit-1961 -m recent --name limit-1961 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1109 +-A limit-1961 -m recent --name limit-1961 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1962 -m recent --name limit-1962 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1962 -m recent --name limit-1962 --rsource --mask 255.255.255.255 --set +-A limit-1963 -m recent --name limit-1963 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1963 -m recent --name limit-1963 --rsource --mask 255.255.255.255 --set +-A limit-1964 -m recent --name limit-1964 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1964 -m recent --name limit-1964 --rsource --mask 255.255.255.255 --set +-A limit-1965 -m recent --name limit-1965 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1965 -m recent --name limit-1965 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1966 -m recent --name limit-1966 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1966 -m recent --name limit-1966 --rsource --mask 255.255.255.255 --set +-A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --set +-A limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --set +-A limit-197 -m recent --name limit-197 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-107 +-A limit-197 -m recent --name limit-197 --rsource --mask 255.255.255.255 --set +-A limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --set +-A limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1972 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1972 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1973 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1973 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1974 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1974 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-198 -m recent --name limit-198 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-108 +-A limit-198 -m limit --limit 12/minute -j ULOG +-A limit-198 -m recent --name limit-198 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1982 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1983 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1984 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1985 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1985 -m limit --limit 1/second -j LOG +-A limit-1986 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1987 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1987 -j TEE --gateway 10.0.0.1 +-A limit-1987 -j TEE --gateway 10.0.0.2 +-A limit-1988 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1989 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-199 -m recent --name limit-199 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-109 +-A limit-199 -m recent --name limit-199 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-1990 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1991 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1991 -m limit --limit 12/minute -j ULOG +-A limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 +-A limit-2 -m limit --limit 1/second -j LOG +-A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-200 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-110 +-A limit-200 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2000 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2000 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2002 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2003 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2004 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2005 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2005 -m limit --limit 1/second -j LOG +-A limit-2006 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2007 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2007 -j TEE --gateway 10.0.0.1 +-A limit-2007 -j TEE --gateway 10.0.0.2 +-A limit-2008 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2009 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-201 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-111 +-A limit-201 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2010 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2011 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2011 -m limit --limit 12/minute -j ULOG +-A limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2016 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2016 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-202 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-112 +-A limit-202 -m limit --limit 1/second -j LOG +-A limit-202 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2020 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2020 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2022 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2023 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2024 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2025 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2025 -m limit --limit 1/second -j LOG +-A limit-2026 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2027 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2027 -j TEE --gateway 10.0.0.1 +-A limit-2027 -j TEE --gateway 10.0.0.2 +-A limit-2028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-203 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-113 +-A limit-203 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2031 -m limit --limit 12/minute -j ULOG +-A limit-2032 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2032 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2036 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2039 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-204 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-114 +-A limit-204 -j TEE --gateway 10.0.0.1 +-A limit-204 -j TEE --gateway 10.0.0.2 +-A limit-204 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2040 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2040 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2041 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2041 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2045 -m limit --limit 1/second -j LOG +-A limit-2046 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2047 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2047 -j TEE --gateway 10.0.0.1 +-A limit-2047 -j TEE --gateway 10.0.0.2 +-A limit-2048 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2049 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2050 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2051 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2051 -m limit --limit 12/minute -j ULOG +-A limit-2052 -m recent --name limit-2052 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1110 +-A limit-2052 -m recent --name limit-2052 --rsource --mask 255.255.255.255 --set +-A limit-2053 -m recent --name limit-2053 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1111 +-A limit-2053 -m recent --name limit-2053 --rsource --mask 255.255.255.255 --set +-A limit-2054 -m recent --name limit-2054 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1112 +-A limit-2054 -m recent --name limit-2054 --rsource --mask 255.255.255.255 --set +-A limit-2055 -m recent --name limit-2055 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1113 +-A limit-2055 -m recent --name limit-2055 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2056 -m recent --name limit-2056 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1114 +-A limit-2056 -m recent --name limit-2056 --rsource --mask 255.255.255.255 --set +-A limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1115 +-A limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2058 -m recent --name limit-2058 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1116 +-A limit-2058 -m recent --name limit-2058 --rsource --mask 255.255.255.255 --set +-A limit-2059 -m recent --name limit-2059 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1117 +-A limit-2059 -m recent --name limit-2059 --rsource --mask 255.255.255.255 --set +-A limit-206 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-206 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2060 -m recent --name limit-2060 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1118 +-A limit-2060 -m recent --name limit-2060 --rsource --mask 255.255.255.255 --set +-A limit-2061 -m recent --name limit-2061 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1119 +-A limit-2061 -m recent --name limit-2061 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1120 +-A limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2063 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1121 +-A limit-2063 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2064 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1122 +-A limit-2064 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2065 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1123 +-A limit-2065 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2066 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1124 +-A limit-2066 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1125 +-A limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2068 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1126 +-A limit-2068 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2069 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1127 +-A limit-2069 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-207 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-207 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2070 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1128 +-A limit-2070 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2071 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1129 +-A limit-2071 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2072 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1130 +-A limit-2073 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1131 +-A limit-2074 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1132 +-A limit-2075 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1133 +-A limit-2075 -m limit --limit 1/second -j LOG +-A limit-2076 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1134 +-A limit-2077 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1135 +-A limit-2077 -j TEE --gateway 10.0.0.1 +-A limit-2077 -j TEE --gateway 10.0.0.2 +-A limit-2078 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1136 +-A limit-2079 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1137 +-A limit-208 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-208 -m limit --limit 12/minute -j ULOG +-A limit-208 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2080 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1138 +-A limit-2081 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1139 +-A limit-2081 -m limit --limit 12/minute -j ULOG +-A limit-2082 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1140 +-A limit-2082 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2083 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1141 +-A limit-2083 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2084 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1142 +-A limit-2084 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2085 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1143 +-A limit-2085 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2086 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1144 +-A limit-2086 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1145 +-A limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2088 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1146 +-A limit-2088 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2089 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1147 +-A limit-2089 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-209 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-209 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2090 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1148 +-A limit-2090 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2091 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1149 +-A limit-2091 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2092 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1150 +-A limit-2093 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1151 +-A limit-2094 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1152 +-A limit-2095 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1153 +-A limit-2095 -m limit --limit 1/second -j LOG +-A limit-2096 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1154 +-A limit-2097 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1155 +-A limit-2097 -j TEE --gateway 10.0.0.1 +-A limit-2097 -j TEE --gateway 10.0.0.2 +-A limit-2098 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1156 +-A limit-2099 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1157 +-A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-210 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-210 -j ACCEPT +-A limit-2100 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1158 +-A limit-2101 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1159 +-A limit-2101 -m limit --limit 12/minute -j ULOG +-A limit-2102 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1160 +-A limit-2102 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2103 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1161 +-A limit-2103 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2104 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1162 +-A limit-2104 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2105 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1163 +-A limit-2105 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2106 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1164 +-A limit-2106 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1165 +-A limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2108 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1166 +-A limit-2108 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2109 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1167 +-A limit-2109 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-211 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-2110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1168 +-A limit-2110 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1169 +-A limit-2111 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2112 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1170 +-A limit-2113 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1171 +-A limit-2114 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1172 +-A limit-2115 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1173 +-A limit-2115 -m limit --limit 1/second -j LOG +-A limit-2116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1174 +-A limit-2117 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1175 +-A limit-2117 -j TEE --gateway 10.0.0.1 +-A limit-2117 -j TEE --gateway 10.0.0.2 +-A limit-2118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1176 +-A limit-2119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1177 +-A limit-212 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -j ACCEPT +-A limit-2120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1178 +-A limit-2121 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1179 +-A limit-2121 -m limit --limit 12/minute -j ULOG +-A limit-2122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1180 +-A limit-2122 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1181 +-A limit-2123 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1182 +-A limit-2124 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1183 +-A limit-2125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1184 +-A limit-2126 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1185 +-A limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2128 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1186 +-A limit-2128 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2129 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1187 +-A limit-2129 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-213 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-213 -m limit --limit 1/second -j LOG +-A limit-2130 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1188 +-A limit-2130 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2131 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1189 +-A limit-2131 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1190 +-A limit-2133 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1191 +-A limit-2134 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1192 +-A limit-2135 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1193 +-A limit-2135 -m limit --limit 1/second -j LOG +-A limit-2136 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1194 +-A limit-2137 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1195 +-A limit-2137 -j TEE --gateway 10.0.0.1 +-A limit-2137 -j TEE --gateway 10.0.0.2 +-A limit-2138 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1196 +-A limit-2139 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1197 +-A limit-214 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-214 -j TEE --gateway 10.0.0.1 +-A limit-214 -j TEE --gateway 10.0.0.2 +-A limit-214 -j ACCEPT +-A limit-2140 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1198 +-A limit-2141 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1199 +-A limit-2141 -m limit --limit 12/minute -j ULOG +-A limit-2142 -m recent --name limit-2142 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1200 +-A limit-2142 -m recent --name limit-2142 --rsource --mask 255.255.255.255 --set +-A limit-2143 -m recent --name limit-2143 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1201 +-A limit-2143 -m recent --name limit-2143 --rsource --mask 255.255.255.255 --set +-A limit-2144 -m recent --name limit-2144 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1202 +-A limit-2144 -m recent --name limit-2144 --rsource --mask 255.255.255.255 --set +-A limit-2145 -m recent --name limit-2145 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1203 +-A limit-2145 -m recent --name limit-2145 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2146 -m recent --name limit-2146 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1204 +-A limit-2146 -m recent --name limit-2146 --rsource --mask 255.255.255.255 --set +-A limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1205 +-A limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2148 -m recent --name limit-2148 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1206 +-A limit-2148 -m recent --name limit-2148 --rsource --mask 255.255.255.255 --set +-A limit-2149 -m recent --name limit-2149 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1207 +-A limit-2149 -m recent --name limit-2149 --rsource --mask 255.255.255.255 --set +-A limit-215 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-215 -j TEE --gateway 10.0.0.1 +-A limit-215 -j TEE --gateway 10.0.0.2 +-A limit-2150 -m recent --name limit-2150 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1208 +-A limit-2150 -m recent --name limit-2150 --rsource --mask 255.255.255.255 --set +-A limit-2151 -m recent --name limit-2151 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1209 +-A limit-2151 -m recent --name limit-2151 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2152 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1210 +-A limit-2152 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2153 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1211 +-A limit-2153 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2154 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1212 +-A limit-2154 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2155 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1213 +-A limit-2155 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2156 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1214 +-A limit-2156 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1215 +-A limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2158 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1216 +-A limit-2158 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2159 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1217 +-A limit-2159 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-216 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-216 -j ACCEPT +-A limit-2160 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1218 +-A limit-2160 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2161 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1219 +-A limit-2161 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2162 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1220 +-A limit-2163 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1221 +-A limit-2164 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1222 +-A limit-2165 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1223 +-A limit-2165 -m limit --limit 1/second -j LOG +-A limit-2166 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1224 +-A limit-2167 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1225 +-A limit-2167 -j TEE --gateway 10.0.0.1 +-A limit-2167 -j TEE --gateway 10.0.0.2 +-A limit-2168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1226 +-A limit-2169 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1227 +-A limit-217 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-2170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1228 +-A limit-2171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1229 +-A limit-2171 -m limit --limit 12/minute -j ULOG +-A limit-2172 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1230 +-A limit-2172 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2173 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1231 +-A limit-2173 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2174 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1232 +-A limit-2174 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2175 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1233 +-A limit-2175 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1234 +-A limit-2176 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1235 +-A limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1236 +-A limit-2178 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1237 +-A limit-2179 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-218 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-218 -m limit --limit 12/minute -j ULOG +-A limit-218 -j ACCEPT +-A limit-2180 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1238 +-A limit-2180 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2181 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1239 +-A limit-2181 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2182 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1240 +-A limit-2183 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1241 +-A limit-2184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1242 +-A limit-2185 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1243 +-A limit-2185 -m limit --limit 1/second -j LOG +-A limit-2186 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1244 +-A limit-2187 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1245 +-A limit-2187 -j TEE --gateway 10.0.0.1 +-A limit-2187 -j TEE --gateway 10.0.0.2 +-A limit-2188 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1246 +-A limit-2189 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1247 +-A limit-219 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-219 -m limit --limit 12/minute -j ULOG +-A limit-2190 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1248 +-A limit-2191 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1249 +-A limit-2191 -m limit --limit 12/minute -j ULOG +-A limit-2192 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1250 +-A limit-2192 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2193 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1251 +-A limit-2193 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2194 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1252 +-A limit-2194 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2195 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1253 +-A limit-2195 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2196 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1254 +-A limit-2196 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1255 +-A limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1256 +-A limit-2198 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1257 +-A limit-2199 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-22 -m limit --limit 1/second -j LOG +-A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-220 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-220 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1258 +-A limit-2200 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1259 +-A limit-2201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2202 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1260 +-A limit-2203 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1261 +-A limit-2204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1262 +-A limit-2205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1263 +-A limit-2205 -m limit --limit 1/second -j LOG +-A limit-2206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1264 +-A limit-2207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1265 +-A limit-2207 -j TEE --gateway 10.0.0.1 +-A limit-2207 -j TEE --gateway 10.0.0.2 +-A limit-2208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1266 +-A limit-2209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1267 +-A limit-221 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-221 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2210 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1268 +-A limit-2211 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1269 +-A limit-2211 -m limit --limit 12/minute -j ULOG +-A limit-2212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1270 +-A limit-2212 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1271 +-A limit-2213 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1272 +-A limit-2214 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1273 +-A limit-2215 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2216 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1274 +-A limit-2216 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1275 +-A limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2218 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1276 +-A limit-2218 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2219 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1277 +-A limit-2219 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-222 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-222 -m limit --limit 1/second -j LOG +-A limit-222 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2220 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1278 +-A limit-2220 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2221 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1279 +-A limit-2221 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2222 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1280 +-A limit-2223 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1281 +-A limit-2224 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1282 +-A limit-2225 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1283 +-A limit-2225 -m limit --limit 1/second -j LOG +-A limit-2226 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1284 +-A limit-2227 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1285 +-A limit-2227 -j TEE --gateway 10.0.0.1 +-A limit-2227 -j TEE --gateway 10.0.0.2 +-A limit-2228 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1286 +-A limit-2229 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1287 +-A limit-223 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-223 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2230 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1288 +-A limit-2231 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1289 +-A limit-2231 -m limit --limit 12/minute -j ULOG +-A limit-2232 -m recent --name limit-2232 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2232 -m recent --name limit-2232 --rsource --mask 255.255.255.255 --set +-A limit-2233 -m recent --name limit-2233 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2233 -m recent --name limit-2233 --rsource --mask 255.255.255.255 --set +-A limit-2234 -m recent --name limit-2234 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2234 -m recent --name limit-2234 --rsource --mask 255.255.255.255 --set +-A limit-2235 -m recent --name limit-2235 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2235 -m recent --name limit-2235 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2236 -m recent --name limit-2236 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2236 -m recent --name limit-2236 --rsource --mask 255.255.255.255 --set +-A limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2238 -m recent --name limit-2238 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2238 -m recent --name limit-2238 --rsource --mask 255.255.255.255 --set +-A limit-2239 -m recent --name limit-2239 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2239 -m recent --name limit-2239 --rsource --mask 255.255.255.255 --set +-A limit-224 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-224 -j TEE --gateway 10.0.0.1 +-A limit-224 -j TEE --gateway 10.0.0.2 +-A limit-224 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2240 -m recent --name limit-2240 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2240 -m recent --name limit-2240 --rsource --mask 255.255.255.255 --set +-A limit-2241 -m recent --name limit-2241 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2241 -m recent --name limit-2241 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2242 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2242 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2243 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2243 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2244 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2244 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2245 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2245 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2246 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2246 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2248 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2249 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2250 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2252 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2253 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2255 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2255 -m limit --limit 1/second -j LOG +-A limit-2256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2257 -j TEE --gateway 10.0.0.1 +-A limit-2257 -j TEE --gateway 10.0.0.2 +-A limit-2258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2259 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-226 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-226 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2260 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2261 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2261 -m limit --limit 12/minute -j ULOG --A limit-2261 -m recent --name limit-2261 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2262 -m recent --name limit-2262 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1047 --A limit-2262 -m recent --name limit-2262 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2263 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1048 --A limit-2263 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2264 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1049 --A limit-2264 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2265 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1050 --A limit-2265 -m limit --limit 1/second -j LOG --A limit-2265 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2266 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1051 --A limit-2266 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2267 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1052 --A limit-2267 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2268 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1053 --A limit-2268 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2269 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1054 --A limit-2269 -m limit --limit 12/minute -j ULOG --A limit-2269 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-83 --A limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2270 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1055 --A limit-2270 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2271 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 --A limit-2271 -j ACCEPT --A limit-2273 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 --A limit-2273 -m limit --limit 1/second -j LOG --A limit-2273 -j ACCEPT --A limit-2274 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 --A limit-2274 -m limit --limit 1/second -j LOG --A limit-2275 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1060 --A limit-2275 -j ACCEPT --A limit-2277 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1062 --A limit-2277 -m limit --limit 12/minute -j ULOG --A limit-2277 -j ACCEPT --A limit-2278 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1063 --A limit-2278 -m limit --limit 12/minute -j ULOG --A limit-2279 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1064 --A limit-2279 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-228 -m recent --name limit-228 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-84 --A limit-228 -m recent --name limit-228 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2280 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1065 --A limit-2280 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2281 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1066 --A limit-2281 -m limit --limit 1/second -j LOG --A limit-2281 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2282 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1067 --A limit-2282 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2283 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1068 --A limit-2283 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2284 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1069 --A limit-2284 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2285 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1070 --A limit-2285 -m limit --limit 12/minute -j ULOG --A limit-2285 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2286 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1071 --A limit-2286 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2287 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 --A limit-2287 -j ACCEPT --A limit-2289 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 --A limit-2289 -m limit --limit 1/second -j LOG --A limit-2289 -j ACCEPT --A limit-229 -m recent --name limit-229 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-85 --A limit-229 -m recent --name limit-229 --rsource --mask 255.255.255.255 --set --A limit-2290 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 --A limit-2290 -m limit --limit 1/second -j LOG --A limit-2291 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 --A limit-2291 -j ACCEPT --A limit-2293 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 --A limit-2293 -m limit --limit 12/minute -j ULOG --A limit-2293 -j ACCEPT --A limit-2294 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 --A limit-2294 -m limit --limit 12/minute -j ULOG --A limit-2295 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1080 --A limit-2295 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2296 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1081 --A limit-2296 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2297 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1082 --A limit-2297 -m limit --limit 1/second -j LOG --A limit-2297 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2298 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1083 --A limit-2298 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2299 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1084 --A limit-2299 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2262 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2263 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2264 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2265 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2266 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2266 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2268 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2268 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2269 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2269 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-227 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-227 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2270 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2270 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2271 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2271 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2272 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2273 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2274 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2275 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2275 -m limit --limit 1/second -j LOG +-A limit-2276 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2277 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2277 -j TEE --gateway 10.0.0.1 +-A limit-2277 -j TEE --gateway 10.0.0.2 +-A limit-2278 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2279 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-228 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-228 -m limit --limit 12/minute -j ULOG +-A limit-228 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2280 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2281 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2281 -m limit --limit 12/minute -j ULOG +-A limit-2282 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2282 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2283 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2283 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2284 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2284 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2285 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2285 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2286 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2286 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2288 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2288 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2289 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2289 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-229 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-229 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2290 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2290 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2291 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2291 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2292 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2293 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2294 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2295 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2295 -m limit --limit 1/second -j LOG +-A limit-2296 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2297 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2297 -j TEE --gateway 10.0.0.1 +-A limit-2297 -j TEE --gateway 10.0.0.2 +-A limit-2298 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2299 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-230 -m recent --name limit-230 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-86 --A limit-230 -m limit --limit 12/minute -j ULOG --A limit-230 -m recent --name limit-230 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2300 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1085 --A limit-2300 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2301 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1086 +-A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-230 -j ACCEPT +-A limit-2300 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2301 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2301 -m limit --limit 12/minute -j ULOG --A limit-2301 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2302 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1087 --A limit-2302 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2303 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1088 --A limit-2303 -j ACCEPT --A limit-2305 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 --A limit-2305 -m limit --limit 1/second -j LOG --A limit-2305 -j ACCEPT --A limit-2306 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 --A limit-2306 -m limit --limit 1/second -j LOG --A limit-2307 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 --A limit-2307 -j ACCEPT --A limit-2309 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 --A limit-2309 -m limit --limit 12/minute -j ULOG --A limit-2309 -j ACCEPT --A limit-231 -m recent --name limit-231 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-87 --A limit-231 -m recent --name limit-231 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2310 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 --A limit-2310 -m limit --limit 12/minute -j ULOG --A limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1096 --A limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2312 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1097 --A limit-2312 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2313 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1098 --A limit-2313 -m limit --limit 1/second -j LOG --A limit-2313 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2314 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1099 --A limit-2314 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2315 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1100 --A limit-2315 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2316 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1101 --A limit-2316 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2317 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1102 --A limit-2317 -m limit --limit 12/minute -j ULOG --A limit-2317 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1103 --A limit-2318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2319 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1104 --A limit-2319 -j ACCEPT --A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-88 --A limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2321 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1106 --A limit-2321 -m limit --limit 1/second -j LOG --A limit-2321 -j ACCEPT --A limit-2322 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1107 --A limit-2322 -m limit --limit 1/second -j LOG --A limit-2323 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1108 --A limit-2323 -j ACCEPT --A limit-2325 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1110 --A limit-2325 -m limit --limit 12/minute -j ULOG --A limit-2325 -j ACCEPT --A limit-2326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1111 --A limit-2326 -m limit --limit 12/minute -j ULOG --A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2302 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2302 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2303 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2303 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2304 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2304 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2305 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2305 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2306 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2306 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2308 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2308 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2309 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2309 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-231 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-2310 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2310 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2312 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2313 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2314 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2315 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2315 -m limit --limit 1/second -j LOG +-A limit-2316 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2317 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2317 -j TEE --gateway 10.0.0.1 +-A limit-2317 -j TEE --gateway 10.0.0.2 +-A limit-2318 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2319 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-232 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-232 -m limit --limit 1/second -j LOG +-A limit-232 -j ACCEPT +-A limit-2320 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2321 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2321 -m limit --limit 12/minute -j ULOG +-A limit-2322 -m recent --name limit-2322 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1290 +-A limit-2322 -m recent --name limit-2322 --rsource --mask 255.255.255.255 --set +-A limit-2323 -m recent --name limit-2323 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1291 +-A limit-2323 -m recent --name limit-2323 --rsource --mask 255.255.255.255 --set +-A limit-2324 -m recent --name limit-2324 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1292 +-A limit-2324 -m recent --name limit-2324 --rsource --mask 255.255.255.255 --set +-A limit-2325 -m recent --name limit-2325 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1293 +-A limit-2325 -m recent --name limit-2325 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2326 -m recent --name limit-2326 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1294 +-A limit-2326 -m recent --name limit-2326 --rsource --mask 255.255.255.255 --set +-A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1295 +-A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1296 -A limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --set --A limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2329 -m limit --limit 1/second -j LOG --A limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-89 --A limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2332 -m recent --name limit-2332 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2332 -m recent --name limit-2332 --rsource --mask 255.255.255.255 --set --A limit-2333 -m recent --name limit-2333 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2333 -m limit --limit 12/minute -j ULOG --A limit-2333 -m recent --name limit-2333 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2334 -m recent --name limit-2334 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2334 -m recent --name limit-2334 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1297 +-A limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --set +-A limit-233 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-233 -m limit --limit 1/second -j LOG +-A limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1298 +-A limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --set +-A limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1299 +-A limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2332 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1300 +-A limit-2332 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2333 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1301 +-A limit-2333 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2334 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1302 +-A limit-2334 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1303 +-A limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1304 -A limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2337 -m limit --limit 1/second -j LOG --A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-90 --A limit-234 -m limit --limit 1/second -j LOG --A limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1305 +-A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1306 +-A limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1307 +-A limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-234 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-234 -j TEE --gateway 10.0.0.1 +-A limit-234 -j TEE --gateway 10.0.0.2 +-A limit-234 -j ACCEPT +-A limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1308 -A limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2341 -m limit --limit 12/minute -j ULOG --A limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2342 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2342 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2343 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2343 -j ACCEPT --A limit-2345 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1309 +-A limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2342 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1310 +-A limit-2343 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1311 +-A limit-2344 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1312 +-A limit-2345 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1313 -A limit-2345 -m limit --limit 1/second -j LOG --A limit-2345 -j ACCEPT --A limit-2346 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2346 -m limit --limit 1/second -j LOG --A limit-2347 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2347 -j ACCEPT --A limit-2349 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2349 -m limit --limit 12/minute -j ULOG --A limit-2349 -j ACCEPT --A limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-91 --A limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2350 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2350 -m limit --limit 12/minute -j ULOG --A limit-2351 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2351 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2346 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1314 +-A limit-2347 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1315 +-A limit-2347 -j TEE --gateway 10.0.0.1 +-A limit-2347 -j TEE --gateway 10.0.0.2 +-A limit-2348 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1316 +-A limit-2349 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1317 +-A limit-235 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-235 -j TEE --gateway 10.0.0.1 +-A limit-235 -j TEE --gateway 10.0.0.2 +-A limit-2350 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1318 +-A limit-2351 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1319 +-A limit-2351 -m limit --limit 12/minute -j ULOG +-A limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1320 -A limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2353 -m limit --limit 1/second -j LOG --A limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1321 +-A limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1322 +-A limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1323 +-A limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1324 -A limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2357 -m limit --limit 12/minute -j ULOG --A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2359 -j ACCEPT --A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-92 --A limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2361 -m limit --limit 1/second -j LOG --A limit-2361 -j ACCEPT --A limit-2362 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2362 -m limit --limit 1/second -j LOG --A limit-2363 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2363 -j ACCEPT --A limit-2365 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2365 -m limit --limit 12/minute -j ULOG --A limit-2365 -j ACCEPT --A limit-2366 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2366 -m limit --limit 12/minute -j ULOG --A limit-2367 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2367 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2368 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2368 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2369 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2369 -m limit --limit 1/second -j LOG --A limit-2369 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-93 --A limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2370 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2370 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2371 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2371 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1325 +-A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1326 +-A limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1327 +-A limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-236 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-236 -j ACCEPT +-A limit-2360 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1328 +-A limit-2360 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1329 +-A limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2362 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1330 +-A limit-2363 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1331 +-A limit-2364 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1332 +-A limit-2365 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1333 +-A limit-2365 -m limit --limit 1/second -j LOG +-A limit-2366 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1334 +-A limit-2367 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1335 +-A limit-2367 -j TEE --gateway 10.0.0.1 +-A limit-2367 -j TEE --gateway 10.0.0.2 +-A limit-2368 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1336 +-A limit-2369 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1337 +-A limit-237 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-2370 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1338 +-A limit-2371 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1339 +-A limit-2371 -m limit --limit 12/minute -j ULOG +-A limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1340 -A limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2373 -m limit --limit 12/minute -j ULOG --A limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2375 -j ACCEPT --A limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2377 -m limit --limit 1/second -j LOG --A limit-2377 -j ACCEPT --A limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2378 -m limit --limit 1/second -j LOG --A limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2379 -j ACCEPT --A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-94 +-A limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1341 +-A limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1342 +-A limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1343 +-A limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2376 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1344 +-A limit-2376 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1345 +-A limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1346 +-A limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1347 +-A limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 -A limit-238 -m limit --limit 12/minute -j ULOG --A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2381 -m limit --limit 12/minute -j ULOG --A limit-2381 -j ACCEPT --A limit-2382 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2382 -m limit --limit 12/minute -j ULOG --A limit-2383 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2383 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2384 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2384 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2385 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-238 -j ACCEPT +-A limit-2380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1348 +-A limit-2380 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1349 +-A limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2382 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1350 +-A limit-2383 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1351 +-A limit-2384 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1352 +-A limit-2385 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1353 -A limit-2385 -m limit --limit 1/second -j LOG --A limit-2385 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2386 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2386 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2387 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2387 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2388 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2388 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2389 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2389 -m limit --limit 12/minute -j ULOG --A limit-2389 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-95 --A limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2390 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-2390 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2391 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2391 -j ACCEPT --A limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2393 -m limit --limit 1/second -j LOG --A limit-2393 -j ACCEPT --A limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2394 -m limit --limit 1/second -j LOG --A limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2395 -j ACCEPT --A limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2397 -m limit --limit 12/minute -j ULOG --A limit-2397 -j ACCEPT --A limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2398 -m limit --limit 12/minute -j ULOG --A limit-2399 -m recent --name limit-2399 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1112 --A limit-2399 -m recent --name limit-2399 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-24 -j ACCEPT --A limit-240 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-96 --A limit-240 -j ACCEPT --A limit-2400 -m recent --name limit-2400 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1113 --A limit-2400 -m recent --name limit-2400 --rsource --mask 255.255.255.255 --set --A limit-2401 -m recent --name limit-2401 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1114 --A limit-2401 -m limit --limit 1/second -j LOG --A limit-2401 -m recent --name limit-2401 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2402 -m recent --name limit-2402 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1115 --A limit-2402 -m recent --name limit-2402 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2403 -m recent --name limit-2403 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1116 --A limit-2403 -m recent --name limit-2403 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2404 -m recent --name limit-2404 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1117 --A limit-2404 -m recent --name limit-2404 --rsource --mask 255.255.255.255 --set --A limit-2405 -m recent --name limit-2405 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1118 --A limit-2405 -m limit --limit 12/minute -j ULOG --A limit-2405 -m recent --name limit-2405 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2406 -m recent --name limit-2406 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1119 --A limit-2406 -m recent --name limit-2406 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2407 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1120 --A limit-2407 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2408 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1121 --A limit-2408 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2409 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1122 --A limit-2409 -m limit --limit 1/second -j LOG --A limit-2409 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-241 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 --A limit-2410 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1123 --A limit-2410 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2411 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1124 --A limit-2411 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2412 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1125 --A limit-2412 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-2413 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1126 --A limit-2413 -m limit --limit 12/minute -j ULOG --A limit-2413 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-2414 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1127 --A limit-2414 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2415 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1128 --A limit-2415 -j ACCEPT --A limit-2417 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1130 --A limit-2417 -m limit --limit 1/second -j LOG --A limit-2417 -j ACCEPT --A limit-2418 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1131 --A limit-2418 -m limit --limit 1/second -j LOG --A limit-2419 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1132 --A limit-2419 -j ACCEPT --A limit-242 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 +-A limit-2386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1354 +-A limit-2387 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1355 +-A limit-2387 -j TEE --gateway 10.0.0.1 +-A limit-2387 -j TEE --gateway 10.0.0.2 +-A limit-2388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1356 +-A limit-2389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1357 +-A limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-239 -m limit --limit 12/minute -j ULOG +-A limit-2390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1358 +-A limit-2391 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1359 +-A limit-2391 -m limit --limit 12/minute -j ULOG +-A limit-2392 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1360 +-A limit-2392 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1361 +-A limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1362 +-A limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1363 +-A limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1364 +-A limit-2396 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1365 +-A limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1366 +-A limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2399 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1367 +-A limit-2399 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-24 -j TEE --gateway 10.0.0.1 +-A limit-24 -j TEE --gateway 10.0.0.2 +-A limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-240 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-240 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2400 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1368 +-A limit-2400 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2401 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1369 +-A limit-2401 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1370 +-A limit-2403 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1371 +-A limit-2404 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1372 +-A limit-2405 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1373 +-A limit-2405 -m limit --limit 1/second -j LOG +-A limit-2406 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1374 +-A limit-2407 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1375 +-A limit-2407 -j TEE --gateway 10.0.0.1 +-A limit-2407 -j TEE --gateway 10.0.0.2 +-A limit-2408 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1376 +-A limit-2409 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1377 +-A limit-241 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-241 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2410 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1378 +-A limit-2411 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1379 +-A limit-2411 -m limit --limit 12/minute -j ULOG +-A limit-2412 -m recent --name limit-2412 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2412 -m recent --name limit-2412 --rsource --mask 255.255.255.255 --set +-A limit-2413 -m recent --name limit-2413 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2413 -m recent --name limit-2413 --rsource --mask 255.255.255.255 --set +-A limit-2414 -m recent --name limit-2414 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2414 -m recent --name limit-2414 --rsource --mask 255.255.255.255 --set +-A limit-2415 -m recent --name limit-2415 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2415 -m recent --name limit-2415 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2416 -m recent --name limit-2416 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2416 -m recent --name limit-2416 --rsource --mask 255.255.255.255 --set +-A limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2418 -m recent --name limit-2418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2418 -m recent --name limit-2418 --rsource --mask 255.255.255.255 --set +-A limit-2419 -m recent --name limit-2419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2419 -m recent --name limit-2419 --rsource --mask 255.255.255.255 --set +-A limit-242 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 -A limit-242 -m limit --limit 1/second -j LOG --A limit-242 -j ACCEPT --A limit-2421 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1134 --A limit-2421 -m limit --limit 12/minute -j ULOG --A limit-2421 -j ACCEPT --A limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1135 --A limit-2422 -m limit --limit 12/minute -j ULOG --A limit-2423 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1136 --A limit-2423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2424 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1137 --A limit-2424 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2425 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1138 --A limit-2425 -m limit --limit 1/second -j LOG --A limit-2425 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2426 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1139 --A limit-2426 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2427 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1140 --A limit-2427 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2428 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1141 --A limit-2428 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2429 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1142 --A limit-2429 -m limit --limit 12/minute -j ULOG --A limit-2429 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-243 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 --A limit-243 -m limit --limit 1/second -j LOG --A limit-2430 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1143 --A limit-2430 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-2431 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1144 --A limit-2431 -j ACCEPT --A limit-2433 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1146 --A limit-2433 -m limit --limit 1/second -j LOG --A limit-2433 -j ACCEPT --A limit-2434 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1147 --A limit-2434 -m limit --limit 1/second -j LOG --A limit-2435 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1148 --A limit-2435 -j ACCEPT --A limit-2437 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1150 --A limit-2437 -m limit --limit 12/minute -j ULOG --A limit-2437 -j ACCEPT --A limit-2438 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1151 --A limit-2438 -m limit --limit 12/minute -j ULOG --A limit-2439 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1152 --A limit-2439 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-244 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-100 --A limit-244 -j ACCEPT --A limit-2440 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1153 --A limit-2440 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2441 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1154 --A limit-2441 -m limit --limit 1/second -j LOG --A limit-2441 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2442 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1155 --A limit-2442 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2443 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1156 --A limit-2443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2444 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1157 --A limit-2444 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2445 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1158 --A limit-2445 -m limit --limit 12/minute -j ULOG --A limit-2445 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-2446 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1159 --A limit-2446 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2447 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1160 --A limit-2447 -j ACCEPT --A limit-2449 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1162 --A limit-2449 -m limit --limit 1/second -j LOG --A limit-2449 -j ACCEPT --A limit-245 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-101 --A limit-2450 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1163 --A limit-2450 -m limit --limit 1/second -j LOG --A limit-2451 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1164 --A limit-2451 -j ACCEPT --A limit-2453 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1166 --A limit-2453 -m limit --limit 12/minute -j ULOG --A limit-2453 -j ACCEPT --A limit-2454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1167 --A limit-2454 -m limit --limit 12/minute -j ULOG --A limit-2455 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1168 --A limit-2455 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2456 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1169 --A limit-2456 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2457 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1170 --A limit-2457 -m limit --limit 1/second -j LOG --A limit-2457 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2458 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1171 --A limit-2458 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-2459 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1172 --A limit-2459 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-246 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-102 --A limit-246 -m limit --limit 12/minute -j ULOG --A limit-246 -j ACCEPT --A limit-2460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1173 --A limit-2460 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-2461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1174 +-A limit-242 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2420 -m recent --name limit-2420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2420 -m recent --name limit-2420 --rsource --mask 255.255.255.255 --set +-A limit-2421 -m recent --name limit-2421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2421 -m recent --name limit-2421 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2423 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2423 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2424 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2425 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2426 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2428 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2429 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-243 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-243 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2430 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2430 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2431 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2431 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2435 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2435 -m limit --limit 1/second -j LOG +-A limit-2436 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2437 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2437 -j TEE --gateway 10.0.0.1 +-A limit-2437 -j TEE --gateway 10.0.0.2 +-A limit-2438 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2439 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-244 -j TEE --gateway 10.0.0.1 +-A limit-244 -j TEE --gateway 10.0.0.2 +-A limit-244 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2440 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2441 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2441 -m limit --limit 12/minute -j ULOG +-A limit-2442 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2442 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2443 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2443 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2444 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2444 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2445 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2445 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2446 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2446 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2448 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2448 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2449 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2449 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2450 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2450 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2451 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2451 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2452 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2453 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2454 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2455 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2455 -m limit --limit 1/second -j LOG +-A limit-2456 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2457 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2457 -j TEE --gateway 10.0.0.1 +-A limit-2457 -j TEE --gateway 10.0.0.2 +-A limit-2458 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2459 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-246 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2460 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2461 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2461 -m limit --limit 12/minute -j ULOG --A limit-2461 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-2462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1175 --A limit-2462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-2463 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1176 --A limit-2463 -j ACCEPT --A limit-2465 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1178 --A limit-2465 -m limit --limit 1/second -j LOG --A limit-2465 -j ACCEPT --A limit-2466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1179 --A limit-2466 -m limit --limit 1/second -j LOG --A limit-2467 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1180 --A limit-2467 -j ACCEPT --A limit-2469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1182 --A limit-2469 -m limit --limit 12/minute -j ULOG --A limit-2469 -j ACCEPT --A limit-247 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-103 --A limit-247 -m limit --limit 12/minute -j ULOG --A limit-2470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1183 --A limit-2470 -m limit --limit 12/minute -j ULOG --A limit-2471 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2471 -j ACCEPT --A limit-2471 -m limit --limit 1/second -j LOG --A limit-2471 -j DROP --A limit-2472 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2472 -j RETURN --A limit-2472 -m limit --limit 1/second -j LOG --A limit-2472 -j DROP --A limit-2473 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2473 -j logaccept-36 --A limit-2473 -m limit --limit 1/second -j LOG --A limit-2473 -j DROP --A limit-2474 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2474 -j ACCEPT --A limit-2474 -m limit --limit 1/second -j LOG --A limit-2474 -j DROP --A limit-2475 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2475 -j logaccept-37 +-A limit-2462 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2462 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2463 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2463 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2464 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2464 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2465 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2465 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2466 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2466 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2468 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2468 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2469 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2469 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-247 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-247 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2470 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2470 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2471 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2471 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2472 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2473 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2474 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2475 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2475 -m limit --limit 1/second -j LOG --A limit-2475 -j DROP --A limit-2476 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2476 -j ACCEPT --A limit-2476 -j DROP --A limit-2477 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2477 -j RETURN --A limit-2477 -j DROP --A limit-2478 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2478 -j logaccept-38 --A limit-2478 -j DROP --A limit-2479 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2479 -j ACCEPT --A limit-2479 -j DROP --A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-104 --A limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2480 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2480 -j logaccept-39 --A limit-2480 -j DROP --A limit-2481 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2481 -j ACCEPT --A limit-2481 -m limit --limit 1/second -j LOG --A limit-2481 -j DROP --A limit-2482 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2482 -j RETURN --A limit-2482 -m limit --limit 1/second -j LOG --A limit-2482 -j DROP --A limit-2483 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2483 -j logaccept-40 --A limit-2483 -m limit --limit 1/second -j LOG --A limit-2483 -j DROP --A limit-2484 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2484 -j ACCEPT --A limit-2484 -m limit --limit 1/second -j LOG --A limit-2484 -j DROP --A limit-2485 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2485 -j logaccept-41 --A limit-2485 -m limit --limit 1/second -j LOG --A limit-2485 -j DROP --A limit-2486 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2486 -j ACCEPT --A limit-2486 -j DROP --A limit-2487 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2487 -j RETURN --A limit-2487 -j DROP --A limit-2488 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2488 -j logaccept-42 --A limit-2488 -j DROP --A limit-2489 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2489 -j ACCEPT --A limit-2489 -j DROP --A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-105 --A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-2490 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2490 -j logaccept-43 --A limit-2490 -j DROP --A limit-2491 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2491 -j ACCEPT --A limit-2491 -m limit --limit 12/minute -j ULOG --A limit-2491 -j DROP --A limit-2492 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2492 -j RETURN --A limit-2492 -m limit --limit 12/minute -j ULOG --A limit-2492 -j DROP --A limit-2493 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2493 -j logaccept-44 --A limit-2493 -m limit --limit 12/minute -j ULOG --A limit-2493 -j DROP --A limit-2494 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2494 -j ACCEPT --A limit-2494 -m limit --limit 12/minute -j ULOG --A limit-2494 -j DROP --A limit-2495 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2495 -j logaccept-45 --A limit-2495 -m limit --limit 12/minute -j ULOG --A limit-2495 -j DROP --A limit-2496 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2496 -j ACCEPT --A limit-2496 -j DROP --A limit-2497 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2497 -j RETURN --A limit-2497 -j DROP --A limit-2498 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2498 -j logaccept-46 --A limit-2498 -j DROP --A limit-2499 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2499 -j ACCEPT --A limit-2499 -j DROP --A limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-106 --A limit-250 -m limit --limit 1/second -j LOG --A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-2500 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2500 -j logaccept-47 --A limit-2500 -j DROP --A limit-2501 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2501 -j ACCEPT --A limit-2501 -m limit --limit 1/second -j LOG --A limit-2501 -j DROP --A limit-2502 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2502 -j RETURN --A limit-2502 -m limit --limit 1/second -j LOG --A limit-2502 -j DROP --A limit-2503 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2503 -j logaccept-48 --A limit-2503 -m limit --limit 1/second -j LOG --A limit-2503 -j DROP --A limit-2504 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2504 -j ACCEPT --A limit-2504 -m limit --limit 1/second -j LOG --A limit-2504 -j DROP --A limit-2505 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2505 -j logaccept-49 --A limit-2505 -m limit --limit 1/second -j LOG --A limit-2505 -j DROP --A limit-2506 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2506 -j ACCEPT --A limit-2506 -j DROP --A limit-2507 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2507 -j RETURN --A limit-2507 -j DROP --A limit-2508 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2508 -j logaccept-50 --A limit-2508 -j DROP --A limit-2509 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2509 -j ACCEPT --A limit-2509 -j DROP --A limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-107 --A limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-2510 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2510 -j logaccept-51 --A limit-2510 -j DROP --A limit-2511 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2511 -j ACCEPT --A limit-2511 -m limit --limit 12/minute -j ULOG --A limit-2511 -j DROP --A limit-2512 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2512 -j RETURN --A limit-2512 -m limit --limit 12/minute -j ULOG --A limit-2512 -j DROP --A limit-2513 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2513 -j logaccept-52 --A limit-2513 -m limit --limit 12/minute -j ULOG --A limit-2513 -j DROP --A limit-2514 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2514 -j ACCEPT --A limit-2514 -m limit --limit 12/minute -j ULOG --A limit-2514 -j DROP --A limit-2515 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2515 -j logaccept-53 --A limit-2515 -m limit --limit 12/minute -j ULOG --A limit-2515 -j DROP --A limit-252 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-108 --A limit-252 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-253 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-109 --A limit-253 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-254 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-110 --A limit-254 -m limit --limit 12/minute -j ULOG --A limit-254 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-255 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-111 --A limit-255 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-256 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-112 +-A limit-2476 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2477 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2477 -j TEE --gateway 10.0.0.1 +-A limit-2477 -j TEE --gateway 10.0.0.2 +-A limit-2478 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2479 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-248 -m limit --limit 12/minute -j ULOG +-A limit-248 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2480 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2481 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2481 -m limit --limit 12/minute -j ULOG +-A limit-2482 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2482 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2483 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2483 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2484 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2484 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2485 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2485 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2486 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2486 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2488 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2488 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2489 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2489 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-249 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-249 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2490 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2490 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2491 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2491 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2492 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2493 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2494 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2495 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2495 -m limit --limit 1/second -j LOG +-A limit-2496 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2497 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2497 -j TEE --gateway 10.0.0.1 +-A limit-2497 -j TEE --gateway 10.0.0.2 +-A limit-2498 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2499 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-250 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-250 -j ACCEPT +-A limit-2500 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2501 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2501 -m limit --limit 12/minute -j ULOG +-A limit-2502 -m recent --name limit-2502 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1380 +-A limit-2502 -m recent --name limit-2502 --rsource --mask 255.255.255.255 --set +-A limit-2503 -m recent --name limit-2503 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1381 +-A limit-2503 -m recent --name limit-2503 --rsource --mask 255.255.255.255 --set +-A limit-2504 -m recent --name limit-2504 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1382 +-A limit-2504 -m recent --name limit-2504 --rsource --mask 255.255.255.255 --set +-A limit-2505 -m recent --name limit-2505 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1383 +-A limit-2505 -m recent --name limit-2505 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2506 -m recent --name limit-2506 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1384 +-A limit-2506 -m recent --name limit-2506 --rsource --mask 255.255.255.255 --set +-A limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1385 +-A limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2508 -m recent --name limit-2508 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1386 +-A limit-2508 -m recent --name limit-2508 --rsource --mask 255.255.255.255 --set +-A limit-2509 -m recent --name limit-2509 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1387 +-A limit-2509 -m recent --name limit-2509 --rsource --mask 255.255.255.255 --set +-A limit-251 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-2510 -m recent --name limit-2510 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1388 +-A limit-2510 -m recent --name limit-2510 --rsource --mask 255.255.255.255 --set +-A limit-2511 -m recent --name limit-2511 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1389 +-A limit-2511 -m recent --name limit-2511 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2512 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1390 +-A limit-2512 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2513 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1391 +-A limit-2513 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2514 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1392 +-A limit-2514 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2515 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1393 +-A limit-2515 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2516 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1394 +-A limit-2516 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1395 +-A limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2518 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1396 +-A limit-2518 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2519 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1397 +-A limit-2519 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-252 -m limit --limit 1/second -j LOG +-A limit-252 -j ACCEPT +-A limit-2520 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1398 +-A limit-2520 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2521 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1399 +-A limit-2521 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2522 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1400 +-A limit-2523 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1401 +-A limit-2524 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1402 +-A limit-2525 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1403 +-A limit-2525 -m limit --limit 1/second -j LOG +-A limit-2526 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1404 +-A limit-2527 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1405 +-A limit-2527 -j TEE --gateway 10.0.0.1 +-A limit-2527 -j TEE --gateway 10.0.0.2 +-A limit-2528 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1406 +-A limit-2529 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1407 +-A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-253 -m limit --limit 1/second -j LOG +-A limit-2530 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1408 +-A limit-2531 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1409 +-A limit-2531 -m limit --limit 12/minute -j ULOG +-A limit-2532 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1410 +-A limit-2532 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2533 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1411 +-A limit-2533 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2534 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1412 +-A limit-2534 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2535 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1413 +-A limit-2535 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2536 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1414 +-A limit-2536 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1415 +-A limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2538 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1416 +-A limit-2538 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2539 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1417 +-A limit-2539 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-254 -j TEE --gateway 10.0.0.1 +-A limit-254 -j TEE --gateway 10.0.0.2 +-A limit-254 -j ACCEPT +-A limit-2540 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1418 +-A limit-2540 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2541 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1419 +-A limit-2541 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2542 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1420 +-A limit-2543 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1421 +-A limit-2544 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1422 +-A limit-2545 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1423 +-A limit-2545 -m limit --limit 1/second -j LOG +-A limit-2546 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1424 +-A limit-2547 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1425 +-A limit-2547 -j TEE --gateway 10.0.0.1 +-A limit-2547 -j TEE --gateway 10.0.0.2 +-A limit-2548 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1426 +-A limit-2549 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1427 +-A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-255 -j TEE --gateway 10.0.0.1 +-A limit-255 -j TEE --gateway 10.0.0.2 +-A limit-2550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1428 +-A limit-2551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1429 +-A limit-2551 -m limit --limit 12/minute -j ULOG +-A limit-2552 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1430 +-A limit-2552 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2553 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1431 +-A limit-2553 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2554 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1432 +-A limit-2554 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2555 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1433 +-A limit-2555 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1434 +-A limit-2556 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1435 +-A limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1436 +-A limit-2558 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1437 +-A limit-2559 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-166 -A limit-256 -j ACCEPT --A limit-257 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-113 --A limit-258 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-114 --A limit-258 -m limit --limit 1/second -j LOG +-A limit-2560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1438 +-A limit-2560 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1439 +-A limit-2561 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1440 +-A limit-2563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1441 +-A limit-2564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1442 +-A limit-2565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1443 +-A limit-2565 -m limit --limit 1/second -j LOG +-A limit-2566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1444 +-A limit-2567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1445 +-A limit-2567 -j TEE --gateway 10.0.0.1 +-A limit-2567 -j TEE --gateway 10.0.0.2 +-A limit-2568 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1446 +-A limit-2569 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1447 +-A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-2570 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1448 +-A limit-2571 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1449 +-A limit-2571 -m limit --limit 12/minute -j ULOG +-A limit-2572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1450 +-A limit-2572 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1451 +-A limit-2573 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2574 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1452 +-A limit-2574 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2575 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1453 +-A limit-2575 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2576 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1454 +-A limit-2576 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1455 +-A limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2578 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1456 +-A limit-2578 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2579 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1457 +-A limit-2579 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-258 -m limit --limit 12/minute -j ULOG -A limit-258 -j ACCEPT --A limit-259 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-115 --A limit-259 -m limit --limit 1/second -j LOG --A limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-26 -m limit --limit 1/second -j LOG --A limit-26 -j ACCEPT --A limit-260 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-116 --A limit-260 -j ACCEPT --A limit-261 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-117 --A limit-262 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-118 --A limit-262 -m limit --limit 12/minute -j ULOG --A limit-262 -j ACCEPT --A limit-263 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-119 --A limit-263 -m limit --limit 12/minute -j ULOG --A limit-264 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-120 --A limit-264 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-265 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-121 --A limit-265 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-266 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-122 --A limit-266 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-267 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-123 --A limit-267 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-268 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-124 --A limit-268 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-269 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-125 --A limit-269 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-27 -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-126 --A limit-270 -m limit --limit 12/minute -j ULOG --A limit-270 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-271 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-127 --A limit-271 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-272 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-2580 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1458 +-A limit-2580 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2581 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1459 +-A limit-2581 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2582 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1460 +-A limit-2583 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1461 +-A limit-2584 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1462 +-A limit-2585 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1463 +-A limit-2585 -m limit --limit 1/second -j LOG +-A limit-2586 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1464 +-A limit-2587 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1465 +-A limit-2587 -j TEE --gateway 10.0.0.1 +-A limit-2587 -j TEE --gateway 10.0.0.2 +-A limit-2588 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1466 +-A limit-2589 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1467 +-A limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-259 -m limit --limit 12/minute -j ULOG +-A limit-2590 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1468 +-A limit-2591 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1469 +-A limit-2591 -m limit --limit 12/minute -j ULOG +-A limit-2592 -m recent --name limit-2592 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1470 +-A limit-2592 -m recent --name limit-2592 --rsource --mask 255.255.255.255 --set +-A limit-2593 -m recent --name limit-2593 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1471 +-A limit-2593 -m recent --name limit-2593 --rsource --mask 255.255.255.255 --set +-A limit-2594 -m recent --name limit-2594 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1472 +-A limit-2594 -m recent --name limit-2594 --rsource --mask 255.255.255.255 --set +-A limit-2595 -m recent --name limit-2595 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1473 +-A limit-2595 -m recent --name limit-2595 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2596 -m recent --name limit-2596 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1474 +-A limit-2596 -m recent --name limit-2596 --rsource --mask 255.255.255.255 --set +-A limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1475 +-A limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2598 -m recent --name limit-2598 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1476 +-A limit-2598 -m recent --name limit-2598 --rsource --mask 255.255.255.255 --set +-A limit-2599 -m recent --name limit-2599 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1477 +-A limit-2599 -m recent --name limit-2599 --rsource --mask 255.255.255.255 --set +-A limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-260 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-260 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-2600 -m recent --name limit-2600 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1478 +-A limit-2600 -m recent --name limit-2600 --rsource --mask 255.255.255.255 --set +-A limit-2601 -m recent --name limit-2601 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1479 +-A limit-2601 -m recent --name limit-2601 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2602 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1480 +-A limit-2602 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2603 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1481 +-A limit-2603 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2604 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1482 +-A limit-2604 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2605 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1483 +-A limit-2605 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2606 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1484 +-A limit-2606 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1485 +-A limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2608 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1486 +-A limit-2608 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2609 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1487 +-A limit-2609 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-261 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-261 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2610 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1488 +-A limit-2610 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2611 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1489 +-A limit-2611 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2612 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1490 +-A limit-2613 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1491 +-A limit-2614 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1492 +-A limit-2615 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1493 +-A limit-2615 -m limit --limit 1/second -j LOG +-A limit-2616 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1494 +-A limit-2617 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1495 +-A limit-2617 -j TEE --gateway 10.0.0.1 +-A limit-2617 -j TEE --gateway 10.0.0.2 +-A limit-2618 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1496 +-A limit-2619 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1497 +-A limit-262 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-262 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-2620 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1498 +-A limit-2621 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1499 +-A limit-2621 -m limit --limit 12/minute -j ULOG +-A limit-2622 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1500 +-A limit-2622 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2623 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1501 +-A limit-2623 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2624 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1502 +-A limit-2624 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2625 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1503 +-A limit-2625 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2626 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1504 +-A limit-2626 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1505 +-A limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2628 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1506 +-A limit-2628 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2629 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1507 +-A limit-2629 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-263 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-263 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2630 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1508 +-A limit-2630 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2631 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1509 +-A limit-2631 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2632 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1510 +-A limit-2633 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1511 +-A limit-2634 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1512 +-A limit-2635 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1513 +-A limit-2635 -m limit --limit 1/second -j LOG +-A limit-2636 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1514 +-A limit-2637 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1515 +-A limit-2637 -j TEE --gateway 10.0.0.1 +-A limit-2637 -j TEE --gateway 10.0.0.2 +-A limit-2638 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1516 +-A limit-2639 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1517 +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-174 +-A limit-264 -j TEE --gateway 10.0.0.1 +-A limit-264 -j TEE --gateway 10.0.0.2 +-A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-2640 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1518 +-A limit-2641 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1519 +-A limit-2641 -m limit --limit 12/minute -j ULOG +-A limit-2642 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1520 +-A limit-2642 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2643 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1521 +-A limit-2643 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2644 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1522 +-A limit-2644 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2645 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1523 +-A limit-2645 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2646 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1524 +-A limit-2646 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1525 +-A limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2648 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1526 +-A limit-2648 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2649 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1527 +-A limit-2649 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-175 +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2650 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1528 +-A limit-2650 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2651 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1529 +-A limit-2651 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2652 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1530 +-A limit-2653 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1531 +-A limit-2654 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1532 +-A limit-2655 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1533 +-A limit-2655 -m limit --limit 1/second -j LOG +-A limit-2656 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1534 +-A limit-2657 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1535 +-A limit-2657 -j TEE --gateway 10.0.0.1 +-A limit-2657 -j TEE --gateway 10.0.0.2 +-A limit-2658 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1536 +-A limit-2659 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1537 +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-176 +-A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-2660 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1538 +-A limit-2661 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1539 +-A limit-2661 -m limit --limit 12/minute -j ULOG +-A limit-2662 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1540 +-A limit-2662 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2663 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1541 +-A limit-2663 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2664 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1542 +-A limit-2664 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2665 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1543 +-A limit-2665 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2666 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1544 +-A limit-2666 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1545 +-A limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2668 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1546 +-A limit-2668 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2669 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1547 +-A limit-2669 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-177 +-A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2670 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1548 +-A limit-2670 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2671 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1549 +-A limit-2671 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2672 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1550 +-A limit-2673 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1551 +-A limit-2674 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1552 +-A limit-2675 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1553 +-A limit-2675 -m limit --limit 1/second -j LOG +-A limit-2676 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1554 +-A limit-2677 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1555 +-A limit-2677 -j TEE --gateway 10.0.0.1 +-A limit-2677 -j TEE --gateway 10.0.0.2 +-A limit-2678 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1556 +-A limit-2679 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1557 +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-178 +-A limit-268 -m limit --limit 12/minute -j ULOG +-A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-2680 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1558 +-A limit-2681 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1559 +-A limit-2681 -m limit --limit 12/minute -j ULOG +-A limit-2682 -m recent --name limit-2682 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2682 -m recent --name limit-2682 --rsource --mask 255.255.255.255 --set +-A limit-2683 -m recent --name limit-2683 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2683 -m recent --name limit-2683 --rsource --mask 255.255.255.255 --set +-A limit-2684 -m recent --name limit-2684 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2684 -m recent --name limit-2684 --rsource --mask 255.255.255.255 --set +-A limit-2685 -m recent --name limit-2685 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2685 -m recent --name limit-2685 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2686 -m recent --name limit-2686 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2686 -m recent --name limit-2686 --rsource --mask 255.255.255.255 --set +-A limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2688 -m recent --name limit-2688 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2688 -m recent --name limit-2688 --rsource --mask 255.255.255.255 --set +-A limit-2689 -m recent --name limit-2689 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2689 -m recent --name limit-2689 --rsource --mask 255.255.255.255 --set +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-179 +-A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2690 -m recent --name limit-2690 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2690 -m recent --name limit-2690 --rsource --mask 255.255.255.255 --set +-A limit-2691 -m recent --name limit-2691 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2691 -m recent --name limit-2691 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2692 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2692 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2693 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2693 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2694 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2694 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2695 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2695 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2696 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2696 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2698 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2698 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2699 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2699 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-180 +-A limit-270 -j ACCEPT +-A limit-2700 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2700 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2701 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2701 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2702 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2703 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2704 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2705 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2705 -m limit --limit 1/second -j LOG +-A limit-2706 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2707 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2707 -j TEE --gateway 10.0.0.1 +-A limit-2707 -j TEE --gateway 10.0.0.2 +-A limit-2708 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2709 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-181 +-A limit-2710 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2711 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2711 -m limit --limit 12/minute -j ULOG +-A limit-2712 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2712 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2713 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2713 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2714 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2714 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2715 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2715 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2716 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2716 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2718 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2718 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2719 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2719 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-182 +-A limit-272 -m limit --limit 1/second -j LOG -A limit-272 -j ACCEPT --A limit-273 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-129 --A limit-274 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-130 --A limit-274 -m limit --limit 1/second -j LOG +-A limit-2720 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2720 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2721 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2721 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2722 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2723 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2724 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2725 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2725 -m limit --limit 1/second -j LOG +-A limit-2726 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2727 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2727 -j TEE --gateway 10.0.0.1 +-A limit-2727 -j TEE --gateway 10.0.0.2 +-A limit-2728 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2729 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-183 +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-2730 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2731 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2731 -m limit --limit 12/minute -j ULOG +-A limit-2732 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2732 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2733 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2733 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2734 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2734 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2735 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2735 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2736 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2736 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2738 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2738 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2739 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2739 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-184 +-A limit-274 -j TEE --gateway 10.0.0.1 +-A limit-274 -j TEE --gateway 10.0.0.2 -A limit-274 -j ACCEPT --A limit-275 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-131 --A limit-275 -m limit --limit 1/second -j LOG --A limit-276 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-2740 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2740 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2741 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2741 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2742 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2743 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2744 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2745 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2745 -m limit --limit 1/second -j LOG +-A limit-2746 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2747 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2747 -j TEE --gateway 10.0.0.1 +-A limit-2747 -j TEE --gateway 10.0.0.2 +-A limit-2748 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2749 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-185 +-A limit-275 -j TEE --gateway 10.0.0.1 +-A limit-275 -j TEE --gateway 10.0.0.2 +-A limit-2750 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2751 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2751 -m limit --limit 12/minute -j ULOG +-A limit-2752 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2752 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2753 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2753 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2754 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2754 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2755 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2755 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2756 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2756 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2758 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2758 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2759 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2759 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-276 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-186 -A limit-276 -j ACCEPT --A limit-277 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 --A limit-278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-2760 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2760 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2761 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-2761 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2762 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2763 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2764 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2765 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2765 -m limit --limit 1/second -j LOG +-A limit-2766 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2767 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2767 -j TEE --gateway 10.0.0.1 +-A limit-2767 -j TEE --gateway 10.0.0.2 +-A limit-2768 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2769 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-187 +-A limit-2770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2771 -m limit --limit 12/minute -j ULOG +-A limit-2772 -m recent --name limit-2772 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1560 +-A limit-2772 -m recent --name limit-2772 --rsource --mask 255.255.255.255 --set +-A limit-2773 -m recent --name limit-2773 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1561 +-A limit-2773 -m recent --name limit-2773 --rsource --mask 255.255.255.255 --set +-A limit-2774 -m recent --name limit-2774 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1562 +-A limit-2774 -m recent --name limit-2774 --rsource --mask 255.255.255.255 --set +-A limit-2775 -m recent --name limit-2775 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1563 +-A limit-2775 -m recent --name limit-2775 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2776 -m recent --name limit-2776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1564 +-A limit-2776 -m recent --name limit-2776 --rsource --mask 255.255.255.255 --set +-A limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1565 +-A limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2778 -m recent --name limit-2778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1566 +-A limit-2778 -m recent --name limit-2778 --rsource --mask 255.255.255.255 --set +-A limit-2779 -m recent --name limit-2779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1567 +-A limit-2779 -m recent --name limit-2779 --rsource --mask 255.255.255.255 --set +-A limit-278 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-188 -A limit-278 -m limit --limit 12/minute -j ULOG -A limit-278 -j ACCEPT --A limit-279 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-2780 -m recent --name limit-2780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1568 +-A limit-2780 -m recent --name limit-2780 --rsource --mask 255.255.255.255 --set +-A limit-2781 -m recent --name limit-2781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1569 +-A limit-2781 -m recent --name limit-2781 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1570 +-A limit-2782 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1571 +-A limit-2783 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1572 +-A limit-2784 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1573 +-A limit-2785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1574 +-A limit-2786 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1575 +-A limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2788 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1576 +-A limit-2788 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2789 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1577 +-A limit-2789 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-279 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-189 -A limit-279 -m limit --limit 12/minute -j ULOG --A limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-28 -j ACCEPT --A limit-280 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-136 --A limit-280 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-281 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-137 --A limit-281 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-282 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-2790 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1578 +-A limit-2790 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2791 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1579 +-A limit-2791 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1580 +-A limit-2793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1581 +-A limit-2794 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1582 +-A limit-2795 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1583 +-A limit-2795 -m limit --limit 1/second -j LOG +-A limit-2796 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1584 +-A limit-2797 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1585 +-A limit-2797 -j TEE --gateway 10.0.0.1 +-A limit-2797 -j TEE --gateway 10.0.0.2 +-A limit-2798 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1586 +-A limit-2799 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1587 +-A limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-28 -m limit --limit 12/minute -j ULOG +-A limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2800 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1588 +-A limit-2801 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1589 +-A limit-2801 -m limit --limit 12/minute -j ULOG +-A limit-2802 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1590 +-A limit-2802 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2803 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1591 +-A limit-2803 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2804 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1592 +-A limit-2804 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2805 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1593 +-A limit-2805 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2806 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1594 +-A limit-2806 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1595 +-A limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2808 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1596 +-A limit-2808 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2809 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1597 +-A limit-2809 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set +-A limit-2810 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1598 +-A limit-2810 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2811 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1599 +-A limit-2811 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2812 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1600 +-A limit-2813 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1601 +-A limit-2814 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1602 +-A limit-2815 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1603 +-A limit-2815 -m limit --limit 1/second -j LOG +-A limit-2816 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1604 +-A limit-2817 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1605 +-A limit-2817 -j TEE --gateway 10.0.0.1 +-A limit-2817 -j TEE --gateway 10.0.0.2 +-A limit-2818 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1606 +-A limit-2819 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1607 +-A limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-282 -m limit --limit 1/second -j LOG --A limit-282 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-283 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-285 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-286 -m limit --limit 12/minute -j ULOG --A limit-286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-288 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 --A limit-288 -j ACCEPT --A limit-289 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 --A limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 --A limit-290 -m limit --limit 1/second -j LOG --A limit-290 -j ACCEPT --A limit-291 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 --A limit-291 -m limit --limit 1/second -j LOG --A limit-292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 --A limit-292 -j ACCEPT --A limit-293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 --A limit-294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 --A limit-294 -m limit --limit 12/minute -j ULOG --A limit-294 -j ACCEPT --A limit-295 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-151 --A limit-295 -m limit --limit 12/minute -j ULOG --A limit-296 -m recent --name limit-296 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-296 -m recent --name limit-296 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-297 -m recent --name limit-297 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-297 -m recent --name limit-297 --rsource --mask 255.255.255.255 --set --A limit-298 -m recent --name limit-298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-298 -m limit --limit 1/second -j LOG --A limit-298 -m recent --name limit-298 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-299 -m recent --name limit-299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-299 -m recent --name limit-299 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2820 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1608 +-A limit-2821 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1609 +-A limit-2821 -m limit --limit 12/minute -j ULOG +-A limit-2822 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1610 +-A limit-2822 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2823 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1611 +-A limit-2823 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2824 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1612 +-A limit-2824 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2825 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1613 +-A limit-2825 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2826 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1614 +-A limit-2826 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1615 +-A limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2828 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1616 +-A limit-2828 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2829 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1617 +-A limit-2829 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2830 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1618 +-A limit-2830 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2831 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1619 +-A limit-2831 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2832 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1620 +-A limit-2833 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1621 +-A limit-2834 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1622 +-A limit-2835 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1623 +-A limit-2835 -m limit --limit 1/second -j LOG +-A limit-2836 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1624 +-A limit-2837 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1625 +-A limit-2837 -j TEE --gateway 10.0.0.1 +-A limit-2837 -j TEE --gateway 10.0.0.2 +-A limit-2838 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1626 +-A limit-2839 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1627 +-A limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-284 -j TEE --gateway 10.0.0.1 +-A limit-284 -j TEE --gateway 10.0.0.2 +-A limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2840 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1628 +-A limit-2841 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1629 +-A limit-2841 -m limit --limit 12/minute -j ULOG +-A limit-2842 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1630 +-A limit-2842 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2843 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1631 +-A limit-2843 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2844 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1632 +-A limit-2844 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2845 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1633 +-A limit-2845 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2846 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1634 +-A limit-2846 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1635 +-A limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2848 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1636 +-A limit-2848 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2849 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1637 +-A limit-2849 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2850 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1638 +-A limit-2850 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-2851 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1639 +-A limit-2851 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2852 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1640 +-A limit-2853 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1641 +-A limit-2854 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1642 +-A limit-2855 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1643 +-A limit-2855 -m limit --limit 1/second -j LOG +-A limit-2856 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1644 +-A limit-2857 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1645 +-A limit-2857 -j TEE --gateway 10.0.0.1 +-A limit-2857 -j TEE --gateway 10.0.0.2 +-A limit-2858 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1646 +-A limit-2859 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1647 +-A limit-286 -m recent --name limit-286 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-286 -m recent --name limit-286 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2860 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1648 +-A limit-2861 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1649 +-A limit-2861 -m limit --limit 12/minute -j ULOG +-A limit-2862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2862 -j RETURN +-A limit-2862 -m limit --limit 1/second -j LOG +-A limit-2862 -j DROP +-A limit-2863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2863 -j RETURN +-A limit-2863 -m limit --limit 1/second -j LOG +-A limit-2863 -j DROP +-A limit-2864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2864 -j RETURN +-A limit-2864 -m limit --limit 1/second -j LOG +-A limit-2864 -j DROP +-A limit-2865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2865 -j RETURN +-A limit-2865 -m limit --limit 1/second -j LOG +-A limit-2865 -j DROP +-A limit-2866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2866 -j RETURN +-A limit-2866 -m limit --limit 1/second -j LOG +-A limit-2866 -j DROP +-A limit-2867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2867 -j RETURN +-A limit-2867 -m limit --limit 1/second -j LOG +-A limit-2867 -j DROP +-A limit-2868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2868 -j RETURN +-A limit-2868 -j DROP +-A limit-2869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2869 -j RETURN +-A limit-2869 -j DROP +-A limit-287 -m recent --name limit-287 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-287 -m recent --name limit-287 --rsource --mask 255.255.255.255 --set +-A limit-2870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2870 -j RETURN +-A limit-2870 -j DROP +-A limit-2871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2871 -j RETURN +-A limit-2871 -j DROP +-A limit-2872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2872 -j RETURN +-A limit-2872 -j DROP +-A limit-2873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2873 -j RETURN +-A limit-2873 -j DROP +-A limit-2874 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2874 -j RETURN +-A limit-2874 -m limit --limit 1/second -j LOG +-A limit-2874 -j DROP +-A limit-2875 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2875 -j RETURN +-A limit-2875 -m limit --limit 1/second -j LOG +-A limit-2875 -j DROP +-A limit-2876 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2876 -j RETURN +-A limit-2876 -m limit --limit 1/second -j LOG +-A limit-2876 -j DROP +-A limit-2877 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2877 -j RETURN +-A limit-2877 -m limit --limit 1/second -j LOG +-A limit-2877 -j DROP +-A limit-2878 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2878 -j RETURN +-A limit-2878 -m limit --limit 1/second -j LOG +-A limit-2878 -j DROP +-A limit-2879 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2879 -j RETURN +-A limit-2879 -m limit --limit 1/second -j LOG +-A limit-2879 -j DROP +-A limit-288 -m recent --name limit-288 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-288 -m limit --limit 12/minute -j ULOG +-A limit-288 -m recent --name limit-288 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2880 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2880 -j RETURN +-A limit-2880 -j TEE --gateway 10.0.0.1 +-A limit-2880 -j TEE --gateway 10.0.0.2 +-A limit-2880 -j DROP +-A limit-2881 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2881 -j RETURN +-A limit-2881 -j TEE --gateway 10.0.0.1 +-A limit-2881 -j TEE --gateway 10.0.0.2 +-A limit-2881 -j DROP +-A limit-2882 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2882 -j RETURN +-A limit-2882 -j TEE --gateway 10.0.0.1 +-A limit-2882 -j TEE --gateway 10.0.0.2 +-A limit-2882 -j DROP +-A limit-2883 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2883 -j RETURN +-A limit-2883 -j TEE --gateway 10.0.0.1 +-A limit-2883 -j TEE --gateway 10.0.0.2 +-A limit-2883 -j DROP +-A limit-2884 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2884 -j RETURN +-A limit-2884 -j TEE --gateway 10.0.0.1 +-A limit-2884 -j TEE --gateway 10.0.0.2 +-A limit-2884 -j DROP +-A limit-2885 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2885 -j RETURN +-A limit-2885 -j TEE --gateway 10.0.0.1 +-A limit-2885 -j TEE --gateway 10.0.0.2 +-A limit-2885 -j DROP +-A limit-2886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2886 -j RETURN +-A limit-2886 -j DROP +-A limit-2887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2887 -j RETURN +-A limit-2887 -j DROP +-A limit-2888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2888 -j RETURN +-A limit-2888 -j DROP +-A limit-2889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2889 -j RETURN +-A limit-2889 -j DROP +-A limit-289 -m recent --name limit-289 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-289 -m recent --name limit-289 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2890 -j RETURN +-A limit-2890 -j DROP +-A limit-2891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2891 -j RETURN +-A limit-2891 -j DROP +-A limit-2892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2892 -j RETURN +-A limit-2892 -m limit --limit 12/minute -j ULOG +-A limit-2892 -j DROP +-A limit-2893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2893 -j RETURN +-A limit-2893 -m limit --limit 12/minute -j ULOG +-A limit-2893 -j DROP +-A limit-2894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2894 -j RETURN +-A limit-2894 -m limit --limit 12/minute -j ULOG +-A limit-2894 -j DROP +-A limit-2895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2895 -j RETURN +-A limit-2895 -m limit --limit 12/minute -j ULOG +-A limit-2895 -j DROP +-A limit-2896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2896 -j RETURN +-A limit-2896 -m limit --limit 12/minute -j ULOG +-A limit-2896 -j DROP +-A limit-2897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2897 -j RETURN +-A limit-2897 -m limit --limit 12/minute -j ULOG +-A limit-2897 -j DROP +-A limit-2898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2898 -j RETURN +-A limit-2898 -j DROP +-A limit-2899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2899 -j RETURN +-A limit-2899 -j DROP +-A limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2900 -j RETURN +-A limit-2900 -j DROP +-A limit-2901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2901 -j RETURN +-A limit-2901 -j DROP +-A limit-2902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2902 -j RETURN +-A limit-2902 -j DROP +-A limit-2903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2903 -j RETURN +-A limit-2903 -j DROP +-A limit-2904 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2904 -j RETURN +-A limit-2904 -m limit --limit 1/second -j LOG +-A limit-2904 -j DROP +-A limit-2905 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2905 -j RETURN +-A limit-2905 -m limit --limit 1/second -j LOG +-A limit-2905 -j DROP +-A limit-2906 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2906 -j RETURN +-A limit-2906 -m limit --limit 1/second -j LOG +-A limit-2906 -j DROP +-A limit-2907 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2907 -j RETURN +-A limit-2907 -m limit --limit 1/second -j LOG +-A limit-2907 -j DROP +-A limit-2908 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2908 -j RETURN +-A limit-2908 -m limit --limit 1/second -j LOG +-A limit-2908 -j DROP +-A limit-2909 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2909 -j RETURN +-A limit-2909 -m limit --limit 1/second -j LOG +-A limit-2909 -j DROP +-A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2910 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2910 -j RETURN +-A limit-2910 -j TEE --gateway 10.0.0.1 +-A limit-2910 -j TEE --gateway 10.0.0.2 +-A limit-2910 -j DROP +-A limit-2911 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2911 -j RETURN +-A limit-2911 -j TEE --gateway 10.0.0.1 +-A limit-2911 -j TEE --gateway 10.0.0.2 +-A limit-2911 -j DROP +-A limit-2912 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2912 -j RETURN +-A limit-2912 -j TEE --gateway 10.0.0.1 +-A limit-2912 -j TEE --gateway 10.0.0.2 +-A limit-2912 -j DROP +-A limit-2913 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2913 -j RETURN +-A limit-2913 -j TEE --gateway 10.0.0.1 +-A limit-2913 -j TEE --gateway 10.0.0.2 +-A limit-2913 -j DROP +-A limit-2914 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2914 -j RETURN +-A limit-2914 -j TEE --gateway 10.0.0.1 +-A limit-2914 -j TEE --gateway 10.0.0.2 +-A limit-2914 -j DROP +-A limit-2915 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2915 -j RETURN +-A limit-2915 -j TEE --gateway 10.0.0.1 +-A limit-2915 -j TEE --gateway 10.0.0.2 +-A limit-2915 -j DROP +-A limit-2916 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2916 -j RETURN +-A limit-2916 -j DROP +-A limit-2917 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2917 -j RETURN +-A limit-2917 -j DROP +-A limit-2918 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2918 -j RETURN +-A limit-2918 -j DROP +-A limit-2919 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2919 -j RETURN +-A limit-2919 -j DROP +-A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-292 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2920 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2920 -j RETURN +-A limit-2920 -j DROP +-A limit-2921 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2921 -j RETURN +-A limit-2921 -j DROP +-A limit-2922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2922 -j RETURN +-A limit-2922 -m limit --limit 12/minute -j ULOG +-A limit-2922 -j DROP +-A limit-2923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2923 -j RETURN +-A limit-2923 -m limit --limit 12/minute -j ULOG +-A limit-2923 -j DROP +-A limit-2924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2924 -j RETURN +-A limit-2924 -m limit --limit 12/minute -j ULOG +-A limit-2924 -j DROP +-A limit-2925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2925 -j RETURN +-A limit-2925 -m limit --limit 12/minute -j ULOG +-A limit-2925 -j DROP +-A limit-2926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2926 -j RETURN +-A limit-2926 -m limit --limit 12/minute -j ULOG +-A limit-2926 -j DROP +-A limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2927 -j RETURN +-A limit-2927 -m limit --limit 12/minute -j ULOG +-A limit-2927 -j DROP +-A limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1650 +-A limit-2928 -m recent --name limit-2928 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1651 +-A limit-2929 -m recent --name limit-2929 --rsource --mask 255.255.255.255 --set +-A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1652 +-A limit-2930 -m limit --limit 1/second -j LOG +-A limit-2930 -m recent --name limit-2930 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1653 +-A limit-2931 -m recent --name limit-2931 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1654 +-A limit-2932 -j TEE --gateway 10.0.0.1 +-A limit-2932 -j TEE --gateway 10.0.0.2 +-A limit-2932 -m recent --name limit-2932 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1655 +-A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2933 -m recent --name limit-2933 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1656 +-A limit-2934 -m recent --name limit-2934 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1657 +-A limit-2935 -m recent --name limit-2935 --rsource --mask 255.255.255.255 --set +-A limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1658 +-A limit-2936 -m limit --limit 12/minute -j ULOG +-A limit-2936 -m recent --name limit-2936 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1659 +-A limit-2937 -m recent --name limit-2937 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2938 -m recent --name limit-2938 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2939 -m recent --name limit-2939 --rsource --mask 255.255.255.255 --set +-A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-294 -j TEE --gateway 10.0.0.1 +-A limit-294 -j TEE --gateway 10.0.0.2 +-A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2940 -m limit --limit 1/second -j LOG +-A limit-2940 -m recent --name limit-2940 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2941 -m recent --name limit-2941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2942 -j TEE --gateway 10.0.0.1 +-A limit-2942 -j TEE --gateway 10.0.0.2 +-A limit-2942 -m recent --name limit-2942 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2943 -m recent --name limit-2943 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2944 -m recent --name limit-2944 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2945 -m recent --name limit-2945 --rsource --mask 255.255.255.255 --set +-A limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2946 -m limit --limit 12/minute -j ULOG +-A limit-2946 -m recent --name limit-2946 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2947 -m recent --name limit-2947 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2948 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2949 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2950 -m limit --limit 1/second -j LOG +-A limit-2950 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2951 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2952 -j TEE --gateway 10.0.0.1 +-A limit-2952 -j TEE --gateway 10.0.0.2 +-A limit-2952 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2953 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2954 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2955 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2956 -m limit --limit 12/minute -j ULOG +-A limit-2956 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2957 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2958 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2958 -j ACCEPT +-A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2960 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2960 -m limit --limit 1/second -j LOG +-A limit-2960 -j ACCEPT +-A limit-2961 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2961 -m limit --limit 1/second -j LOG +-A limit-2962 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2962 -j TEE --gateway 10.0.0.1 +-A limit-2962 -j TEE --gateway 10.0.0.2 +-A limit-2962 -j ACCEPT +-A limit-2963 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2963 -j TEE --gateway 10.0.0.1 +-A limit-2963 -j TEE --gateway 10.0.0.2 +-A limit-2964 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2964 -j ACCEPT +-A limit-2966 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2966 -m limit --limit 12/minute -j ULOG +-A limit-2966 -j ACCEPT +-A limit-2967 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2967 -m limit --limit 12/minute -j ULOG +-A limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2968 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2969 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2970 -m limit --limit 1/second -j LOG +-A limit-2970 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2971 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2972 -j TEE --gateway 10.0.0.1 +-A limit-2972 -j TEE --gateway 10.0.0.2 +-A limit-2972 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-2973 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2974 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2975 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2976 -m limit --limit 12/minute -j ULOG +-A limit-2976 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2977 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2978 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2978 -j ACCEPT +-A limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-298 -m limit --limit 12/minute -j ULOG +-A limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-2980 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2980 -m limit --limit 1/second -j LOG +-A limit-2980 -j ACCEPT +-A limit-2981 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2981 -m limit --limit 1/second -j LOG +-A limit-2982 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2982 -j TEE --gateway 10.0.0.1 +-A limit-2982 -j TEE --gateway 10.0.0.2 +-A limit-2982 -j ACCEPT +-A limit-2983 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2983 -j TEE --gateway 10.0.0.1 +-A limit-2983 -j TEE --gateway 10.0.0.2 +-A limit-2984 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2984 -j ACCEPT +-A limit-2986 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2986 -m limit --limit 12/minute -j ULOG +-A limit-2986 -j ACCEPT +-A limit-2987 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2987 -m limit --limit 12/minute -j ULOG +-A limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2988 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2989 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2990 -m limit --limit 1/second -j LOG +-A limit-2990 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2991 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2992 -j TEE --gateway 10.0.0.1 +-A limit-2992 -j TEE --gateway 10.0.0.2 +-A limit-2992 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-2993 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2994 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2995 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2996 -m limit --limit 12/minute -j ULOG +-A limit-2996 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-2997 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-2998 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2998 -j ACCEPT -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-30 -m limit --limit 12/minute -j ULOG -A limit-30 -j ACCEPT --A limit-300 -m recent --name limit-300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-300 -m recent --name limit-300 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-301 -m recent --name limit-301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-301 -m recent --name limit-301 --rsource --mask 255.255.255.255 --set --A limit-302 -m recent --name limit-302 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-302 -m limit --limit 12/minute -j ULOG --A limit-302 -m recent --name limit-302 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-303 -m recent --name limit-303 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-303 -m recent --name limit-303 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-306 -m limit --limit 1/second -j LOG --A limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-300 -j ACCEPT +-A limit-3000 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3000 -m limit --limit 1/second -j LOG +-A limit-3000 -j ACCEPT +-A limit-3001 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3001 -m limit --limit 1/second -j LOG +-A limit-3002 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3002 -j TEE --gateway 10.0.0.1 +-A limit-3002 -j TEE --gateway 10.0.0.2 +-A limit-3002 -j ACCEPT +-A limit-3003 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3003 -j TEE --gateway 10.0.0.1 +-A limit-3003 -j TEE --gateway 10.0.0.2 +-A limit-3004 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3004 -j ACCEPT +-A limit-3006 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3006 -m limit --limit 12/minute -j ULOG +-A limit-3006 -j ACCEPT +-A limit-3007 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3007 -m limit --limit 12/minute -j ULOG +-A limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3008 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3009 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-301 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3010 -m limit --limit 1/second -j LOG +-A limit-3010 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3011 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3012 -j TEE --gateway 10.0.0.1 +-A limit-3012 -j TEE --gateway 10.0.0.2 +-A limit-3012 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3013 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3014 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3015 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3016 -m limit --limit 12/minute -j ULOG +-A limit-3016 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3017 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3018 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3018 -j ACCEPT +-A limit-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-3020 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3020 -m limit --limit 1/second -j LOG +-A limit-3020 -j ACCEPT +-A limit-3021 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3021 -m limit --limit 1/second -j LOG +-A limit-3022 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3022 -j TEE --gateway 10.0.0.1 +-A limit-3022 -j TEE --gateway 10.0.0.2 +-A limit-3022 -j ACCEPT +-A limit-3023 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3023 -j TEE --gateway 10.0.0.1 +-A limit-3023 -j TEE --gateway 10.0.0.2 +-A limit-3024 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3024 -j ACCEPT +-A limit-3026 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3026 -m limit --limit 12/minute -j ULOG +-A limit-3026 -j ACCEPT +-A limit-3027 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3027 -m limit --limit 12/minute -j ULOG +-A limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1660 +-A limit-3028 -m recent --name limit-3028 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1661 +-A limit-3029 -m recent --name limit-3029 --rsource --mask 255.255.255.255 --set +-A limit-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1662 +-A limit-3030 -m limit --limit 1/second -j LOG +-A limit-3030 -m recent --name limit-3030 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1663 +-A limit-3031 -m recent --name limit-3031 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1664 +-A limit-3032 -j TEE --gateway 10.0.0.1 +-A limit-3032 -j TEE --gateway 10.0.0.2 +-A limit-3032 -m recent --name limit-3032 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1665 +-A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3033 -m recent --name limit-3033 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1666 +-A limit-3034 -m recent --name limit-3034 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1667 +-A limit-3035 -m recent --name limit-3035 --rsource --mask 255.255.255.255 --set +-A limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1668 +-A limit-3036 -m limit --limit 12/minute -j ULOG +-A limit-3036 -m recent --name limit-3036 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1669 +-A limit-3037 -m recent --name limit-3037 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1670 +-A limit-3038 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1671 +-A limit-3039 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-304 -j TEE --gateway 10.0.0.1 +-A limit-304 -j TEE --gateway 10.0.0.2 +-A limit-304 -j ACCEPT +-A limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1672 +-A limit-3040 -m limit --limit 1/second -j LOG +-A limit-3040 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1673 +-A limit-3041 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1674 +-A limit-3042 -j TEE --gateway 10.0.0.1 +-A limit-3042 -j TEE --gateway 10.0.0.2 +-A limit-3042 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1675 +-A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3043 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1676 +-A limit-3044 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1677 +-A limit-3045 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1678 +-A limit-3046 -m limit --limit 12/minute -j ULOG +-A limit-3046 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1679 +-A limit-3047 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3048 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 +-A limit-3048 -j ACCEPT +-A limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-305 -j TEE --gateway 10.0.0.1 +-A limit-305 -j TEE --gateway 10.0.0.2 +-A limit-3050 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 +-A limit-3050 -m limit --limit 1/second -j LOG +-A limit-3050 -j ACCEPT +-A limit-3051 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 +-A limit-3051 -m limit --limit 1/second -j LOG +-A limit-3052 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 +-A limit-3052 -j TEE --gateway 10.0.0.1 +-A limit-3052 -j TEE --gateway 10.0.0.2 +-A limit-3052 -j ACCEPT +-A limit-3053 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 +-A limit-3053 -j TEE --gateway 10.0.0.1 +-A limit-3053 -j TEE --gateway 10.0.0.2 +-A limit-3054 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 +-A limit-3054 -j ACCEPT +-A limit-3056 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 +-A limit-3056 -m limit --limit 12/minute -j ULOG +-A limit-3056 -j ACCEPT +-A limit-3057 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 +-A limit-3057 -m limit --limit 12/minute -j ULOG +-A limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1690 +-A limit-3058 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1691 +-A limit-3059 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-306 -j ACCEPT +-A limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1692 +-A limit-3060 -m limit --limit 1/second -j LOG +-A limit-3060 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1693 +-A limit-3061 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1694 +-A limit-3062 -j TEE --gateway 10.0.0.1 +-A limit-3062 -j TEE --gateway 10.0.0.2 +-A limit-3062 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1695 +-A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3063 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1696 +-A limit-3064 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1697 +-A limit-3065 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1698 +-A limit-3066 -m limit --limit 12/minute -j ULOG +-A limit-3066 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1699 +-A limit-3067 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3068 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 +-A limit-3068 -j ACCEPT +-A limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3070 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 +-A limit-3070 -m limit --limit 1/second -j LOG +-A limit-3070 -j ACCEPT +-A limit-3071 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 +-A limit-3071 -m limit --limit 1/second -j LOG +-A limit-3072 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 +-A limit-3072 -j TEE --gateway 10.0.0.1 +-A limit-3072 -j TEE --gateway 10.0.0.2 +-A limit-3072 -j ACCEPT +-A limit-3073 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 +-A limit-3073 -j TEE --gateway 10.0.0.1 +-A limit-3073 -j TEE --gateway 10.0.0.2 +-A limit-3074 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 +-A limit-3074 -j ACCEPT +-A limit-3076 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 +-A limit-3076 -m limit --limit 12/minute -j ULOG +-A limit-3076 -j ACCEPT +-A limit-3077 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 +-A limit-3077 -m limit --limit 12/minute -j ULOG +-A limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1710 +-A limit-3078 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1711 +-A limit-3079 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-308 -m limit --limit 12/minute -j ULOG +-A limit-308 -j ACCEPT +-A limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1712 +-A limit-3080 -m limit --limit 1/second -j LOG +-A limit-3080 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1713 +-A limit-3081 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1714 +-A limit-3082 -j TEE --gateway 10.0.0.1 +-A limit-3082 -j TEE --gateway 10.0.0.2 +-A limit-3082 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1715 +-A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3083 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1716 +-A limit-3084 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1717 +-A limit-3085 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1718 +-A limit-3086 -m limit --limit 12/minute -j ULOG +-A limit-3086 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1719 +-A limit-3087 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3088 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 +-A limit-3088 -j ACCEPT +-A limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-309 -m limit --limit 12/minute -j ULOG +-A limit-3090 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 +-A limit-3090 -m limit --limit 1/second -j LOG +-A limit-3090 -j ACCEPT +-A limit-3091 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 +-A limit-3091 -m limit --limit 1/second -j LOG +-A limit-3092 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 +-A limit-3092 -j TEE --gateway 10.0.0.1 +-A limit-3092 -j TEE --gateway 10.0.0.2 +-A limit-3092 -j ACCEPT +-A limit-3093 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 +-A limit-3093 -j TEE --gateway 10.0.0.1 +-A limit-3093 -j TEE --gateway 10.0.0.2 +-A limit-3094 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 +-A limit-3094 -j ACCEPT +-A limit-3096 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 +-A limit-3096 -m limit --limit 12/minute -j ULOG +-A limit-3096 -j ACCEPT +-A limit-3097 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 +-A limit-3097 -m limit --limit 12/minute -j ULOG +-A limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1730 +-A limit-3098 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1731 +-A limit-3099 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-31 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-31 -m limit --limit 12/minute -j ULOG --A limit-310 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-310 -m limit --limit 12/minute -j ULOG --A limit-310 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-311 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-311 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-312 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-312 -j ACCEPT --A limit-313 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m limit --limit 1/second -j LOG --A limit-314 -j ACCEPT --A limit-315 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-315 -m limit --limit 1/second -j LOG --A limit-316 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-316 -j ACCEPT --A limit-317 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1732 +-A limit-3100 -m limit --limit 1/second -j LOG +-A limit-3100 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1733 +-A limit-3101 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1734 +-A limit-3102 -j TEE --gateway 10.0.0.1 +-A limit-3102 -j TEE --gateway 10.0.0.2 +-A limit-3102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1735 +-A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3103 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1736 +-A limit-3104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1737 +-A limit-3105 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1738 +-A limit-3106 -m limit --limit 12/minute -j ULOG +-A limit-3106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1739 +-A limit-3107 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 +-A limit-3108 -j ACCEPT +-A limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 +-A limit-3110 -m limit --limit 1/second -j LOG +-A limit-3110 -j ACCEPT +-A limit-3111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 +-A limit-3111 -m limit --limit 1/second -j LOG +-A limit-3112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 +-A limit-3112 -j TEE --gateway 10.0.0.1 +-A limit-3112 -j TEE --gateway 10.0.0.2 +-A limit-3112 -j ACCEPT +-A limit-3113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 +-A limit-3113 -j TEE --gateway 10.0.0.1 +-A limit-3113 -j TEE --gateway 10.0.0.2 +-A limit-3114 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 +-A limit-3114 -j ACCEPT +-A limit-3116 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 +-A limit-3116 -m limit --limit 12/minute -j ULOG +-A limit-3116 -j ACCEPT +-A limit-3117 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 +-A limit-3117 -m limit --limit 12/minute -j ULOG +-A limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1750 +-A limit-3118 -m recent --name limit-3118 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1751 +-A limit-3119 -m recent --name limit-3119 --rsource --mask 255.255.255.255 --set +-A limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-312 -m limit --limit 1/second -j LOG +-A limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1752 +-A limit-3120 -m limit --limit 1/second -j LOG +-A limit-3120 -m recent --name limit-3120 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1753 +-A limit-3121 -m recent --name limit-3121 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1754 +-A limit-3122 -j TEE --gateway 10.0.0.1 +-A limit-3122 -j TEE --gateway 10.0.0.2 +-A limit-3122 -m recent --name limit-3122 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1755 +-A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3123 -m recent --name limit-3123 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1756 +-A limit-3124 -m recent --name limit-3124 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1757 +-A limit-3125 -m recent --name limit-3125 --rsource --mask 255.255.255.255 --set +-A limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1758 +-A limit-3126 -m limit --limit 12/minute -j ULOG +-A limit-3126 -m recent --name limit-3126 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1759 +-A limit-3127 -m recent --name limit-3127 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1760 +-A limit-3128 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1761 +-A limit-3129 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1762 +-A limit-3130 -m limit --limit 1/second -j LOG +-A limit-3130 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1763 +-A limit-3131 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1764 +-A limit-3132 -j TEE --gateway 10.0.0.1 +-A limit-3132 -j TEE --gateway 10.0.0.2 +-A limit-3132 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1765 +-A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3133 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1766 +-A limit-3134 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1767 +-A limit-3135 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1768 +-A limit-3136 -m limit --limit 12/minute -j ULOG +-A limit-3136 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1769 +-A limit-3137 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3138 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 +-A limit-3138 -j ACCEPT +-A limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-314 -j TEE --gateway 10.0.0.1 +-A limit-314 -j TEE --gateway 10.0.0.2 +-A limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3140 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 +-A limit-3140 -m limit --limit 1/second -j LOG +-A limit-3140 -j ACCEPT +-A limit-3141 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 +-A limit-3141 -m limit --limit 1/second -j LOG +-A limit-3142 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 +-A limit-3142 -j TEE --gateway 10.0.0.1 +-A limit-3142 -j TEE --gateway 10.0.0.2 +-A limit-3142 -j ACCEPT +-A limit-3143 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 +-A limit-3143 -j TEE --gateway 10.0.0.1 +-A limit-3143 -j TEE --gateway 10.0.0.2 +-A limit-3144 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 +-A limit-3144 -j ACCEPT +-A limit-3146 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 +-A limit-3146 -m limit --limit 12/minute -j ULOG +-A limit-3146 -j ACCEPT +-A limit-3147 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 +-A limit-3147 -m limit --limit 12/minute -j ULOG +-A limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1780 +-A limit-3148 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1781 +-A limit-3149 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1782 +-A limit-3150 -m limit --limit 1/second -j LOG +-A limit-3150 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1783 +-A limit-3151 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1784 +-A limit-3152 -j TEE --gateway 10.0.0.1 +-A limit-3152 -j TEE --gateway 10.0.0.2 +-A limit-3152 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1785 +-A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3153 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1786 +-A limit-3154 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1787 +-A limit-3155 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1788 +-A limit-3156 -m limit --limit 12/minute -j ULOG +-A limit-3156 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1789 +-A limit-3157 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3158 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 +-A limit-3158 -j ACCEPT +-A limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3160 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 +-A limit-3160 -m limit --limit 1/second -j LOG +-A limit-3160 -j ACCEPT +-A limit-3161 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 +-A limit-3161 -m limit --limit 1/second -j LOG +-A limit-3162 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 +-A limit-3162 -j TEE --gateway 10.0.0.1 +-A limit-3162 -j TEE --gateway 10.0.0.2 +-A limit-3162 -j ACCEPT +-A limit-3163 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 +-A limit-3163 -j TEE --gateway 10.0.0.1 +-A limit-3163 -j TEE --gateway 10.0.0.2 +-A limit-3164 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 +-A limit-3164 -j ACCEPT +-A limit-3166 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 +-A limit-3166 -m limit --limit 12/minute -j ULOG +-A limit-3166 -j ACCEPT +-A limit-3167 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 +-A limit-3167 -m limit --limit 12/minute -j ULOG +-A limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1800 +-A limit-3168 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1801 +-A limit-3169 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1802 +-A limit-3170 -m limit --limit 1/second -j LOG +-A limit-3170 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1803 +-A limit-3171 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1804 +-A limit-3172 -j TEE --gateway 10.0.0.1 +-A limit-3172 -j TEE --gateway 10.0.0.2 +-A limit-3172 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1805 +-A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3173 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1806 +-A limit-3174 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1807 +-A limit-3175 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1808 +-A limit-3176 -m limit --limit 12/minute -j ULOG +-A limit-3176 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1809 +-A limit-3177 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3178 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 +-A limit-3178 -j ACCEPT +-A limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-318 -m limit --limit 12/minute -j ULOG --A limit-318 -j ACCEPT --A limit-319 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-319 -m limit --limit 12/minute -j ULOG --A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3180 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 +-A limit-3180 -m limit --limit 1/second -j LOG +-A limit-3180 -j ACCEPT +-A limit-3181 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 +-A limit-3181 -m limit --limit 1/second -j LOG +-A limit-3182 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 +-A limit-3182 -j TEE --gateway 10.0.0.1 +-A limit-3182 -j TEE --gateway 10.0.0.2 +-A limit-3182 -j ACCEPT +-A limit-3183 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 +-A limit-3183 -j TEE --gateway 10.0.0.1 +-A limit-3183 -j TEE --gateway 10.0.0.2 +-A limit-3184 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 +-A limit-3184 -j ACCEPT +-A limit-3186 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 +-A limit-3186 -m limit --limit 12/minute -j ULOG +-A limit-3186 -j ACCEPT +-A limit-3187 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 +-A limit-3187 -m limit --limit 12/minute -j ULOG +-A limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1820 +-A limit-3188 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1821 +-A limit-3189 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1822 +-A limit-3190 -m limit --limit 1/second -j LOG +-A limit-3190 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1823 +-A limit-3191 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1824 +-A limit-3192 -j TEE --gateway 10.0.0.1 +-A limit-3192 -j TEE --gateway 10.0.0.2 +-A limit-3192 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1825 +-A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3193 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1826 +-A limit-3194 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1827 +-A limit-3195 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1828 +-A limit-3196 -m limit --limit 12/minute -j ULOG +-A limit-3196 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1829 +-A limit-3197 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3198 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 +-A limit-3198 -j ACCEPT +-A limit-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-32 -m limit --limit 1/second -j LOG +-A limit-32 -j ACCEPT +-A limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-320 -j ACCEPT +-A limit-3200 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 +-A limit-3200 -m limit --limit 1/second -j LOG +-A limit-3200 -j ACCEPT +-A limit-3201 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 +-A limit-3201 -m limit --limit 1/second -j LOG +-A limit-3202 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 +-A limit-3202 -j TEE --gateway 10.0.0.1 +-A limit-3202 -j TEE --gateway 10.0.0.2 +-A limit-3202 -j ACCEPT +-A limit-3203 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 +-A limit-3203 -j TEE --gateway 10.0.0.1 +-A limit-3203 -j TEE --gateway 10.0.0.2 +-A limit-3204 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 +-A limit-3204 -j ACCEPT +-A limit-3206 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 +-A limit-3206 -m limit --limit 12/minute -j ULOG +-A limit-3206 -j ACCEPT +-A limit-3207 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 +-A limit-3207 -m limit --limit 12/minute -j ULOG +-A limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3208 -m recent --name limit-3208 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3209 -m recent --name limit-3209 --rsource --mask 255.255.255.255 --set +-A limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3210 -m limit --limit 1/second -j LOG +-A limit-3210 -m recent --name limit-3210 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3211 -m recent --name limit-3211 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3212 -j TEE --gateway 10.0.0.1 +-A limit-3212 -j TEE --gateway 10.0.0.2 +-A limit-3212 -m recent --name limit-3212 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3213 -m recent --name limit-3213 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3214 -m recent --name limit-3214 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3215 -m recent --name limit-3215 --rsource --mask 255.255.255.255 --set +-A limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3216 -m limit --limit 12/minute -j ULOG +-A limit-3216 -m recent --name limit-3216 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3217 -m recent --name limit-3217 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3218 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3219 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-322 -m limit --limit 1/second -j LOG --A limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-326 -m limit --limit 12/minute -j ULOG --A limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-322 -j ACCEPT +-A limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3220 -m limit --limit 1/second -j LOG +-A limit-3220 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3221 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3222 -j TEE --gateway 10.0.0.1 +-A limit-3222 -j TEE --gateway 10.0.0.2 +-A limit-3222 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3223 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3224 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3225 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3226 -m limit --limit 12/minute -j ULOG +-A limit-3226 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3227 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3228 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3228 -j ACCEPT +-A limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-323 -m limit --limit 1/second -j LOG +-A limit-3230 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3230 -m limit --limit 1/second -j LOG +-A limit-3230 -j ACCEPT +-A limit-3231 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3231 -m limit --limit 1/second -j LOG +-A limit-3232 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3232 -j TEE --gateway 10.0.0.1 +-A limit-3232 -j TEE --gateway 10.0.0.2 +-A limit-3232 -j ACCEPT +-A limit-3233 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3233 -j TEE --gateway 10.0.0.1 +-A limit-3233 -j TEE --gateway 10.0.0.2 +-A limit-3234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3234 -j ACCEPT +-A limit-3236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3236 -m limit --limit 12/minute -j ULOG +-A limit-3236 -j ACCEPT +-A limit-3237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3237 -m limit --limit 12/minute -j ULOG +-A limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3238 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3239 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-324 -j TEE --gateway 10.0.0.1 +-A limit-324 -j TEE --gateway 10.0.0.2 +-A limit-324 -j ACCEPT +-A limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3240 -m limit --limit 1/second -j LOG +-A limit-3240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3241 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3242 -j TEE --gateway 10.0.0.1 +-A limit-3242 -j TEE --gateway 10.0.0.2 +-A limit-3242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3245 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3246 -m limit --limit 12/minute -j ULOG +-A limit-3246 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3247 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3248 -j ACCEPT +-A limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-325 -j TEE --gateway 10.0.0.1 +-A limit-325 -j TEE --gateway 10.0.0.2 +-A limit-3250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3250 -m limit --limit 1/second -j LOG +-A limit-3250 -j ACCEPT +-A limit-3251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3251 -m limit --limit 1/second -j LOG +-A limit-3252 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3252 -j TEE --gateway 10.0.0.1 +-A limit-3252 -j TEE --gateway 10.0.0.2 +-A limit-3252 -j ACCEPT +-A limit-3253 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3253 -j TEE --gateway 10.0.0.1 +-A limit-3253 -j TEE --gateway 10.0.0.2 +-A limit-3254 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3254 -j ACCEPT +-A limit-3256 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3256 -m limit --limit 12/minute -j ULOG +-A limit-3256 -j ACCEPT +-A limit-3257 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3257 -m limit --limit 12/minute -j ULOG +-A limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3258 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3259 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-326 -j ACCEPT +-A limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3260 -m limit --limit 1/second -j LOG +-A limit-3260 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3261 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3262 -j TEE --gateway 10.0.0.1 +-A limit-3262 -j TEE --gateway 10.0.0.2 +-A limit-3262 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3263 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3264 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3265 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3266 -m limit --limit 12/minute -j ULOG +-A limit-3266 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3267 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3268 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3268 -j ACCEPT +-A limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3270 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3270 -m limit --limit 1/second -j LOG +-A limit-3270 -j ACCEPT +-A limit-3271 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3271 -m limit --limit 1/second -j LOG +-A limit-3272 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3272 -j TEE --gateway 10.0.0.1 +-A limit-3272 -j TEE --gateway 10.0.0.2 +-A limit-3272 -j ACCEPT +-A limit-3273 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3273 -j TEE --gateway 10.0.0.1 +-A limit-3273 -j TEE --gateway 10.0.0.2 +-A limit-3274 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3274 -j ACCEPT +-A limit-3276 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3276 -m limit --limit 12/minute -j ULOG +-A limit-3276 -j ACCEPT +-A limit-3277 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3277 -m limit --limit 12/minute -j ULOG +-A limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3278 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3279 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-328 -m limit --limit 12/minute -j ULOG -A limit-328 -j ACCEPT --A limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-330 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-330 -m limit --limit 1/second -j LOG --A limit-330 -j ACCEPT --A limit-331 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-331 -m limit --limit 1/second -j LOG --A limit-332 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-332 -j ACCEPT --A limit-333 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-334 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-334 -m limit --limit 12/minute -j ULOG --A limit-334 -j ACCEPT --A limit-335 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-335 -m limit --limit 12/minute -j ULOG --A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3280 -m limit --limit 1/second -j LOG +-A limit-3280 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3281 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3282 -j TEE --gateway 10.0.0.1 +-A limit-3282 -j TEE --gateway 10.0.0.2 +-A limit-3282 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3283 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3285 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3286 -m limit --limit 12/minute -j ULOG +-A limit-3286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3288 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3288 -j ACCEPT +-A limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-329 -m limit --limit 12/minute -j ULOG +-A limit-3290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3290 -m limit --limit 1/second -j LOG +-A limit-3290 -j ACCEPT +-A limit-3291 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3291 -m limit --limit 1/second -j LOG +-A limit-3292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3292 -j TEE --gateway 10.0.0.1 +-A limit-3292 -j TEE --gateway 10.0.0.2 +-A limit-3292 -j ACCEPT +-A limit-3293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3293 -j TEE --gateway 10.0.0.1 +-A limit-3293 -j TEE --gateway 10.0.0.2 +-A limit-3294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3294 -j ACCEPT +-A limit-3296 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3296 -m limit --limit 12/minute -j ULOG +-A limit-3296 -j ACCEPT +-A limit-3297 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3297 -m limit --limit 12/minute -j ULOG +-A limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1840 +-A limit-3298 -m recent --name limit-3298 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1841 +-A limit-3299 -m recent --name limit-3299 --rsource --mask 255.255.255.255 --set +-A limit-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-33 -m limit --limit 1/second -j LOG +-A limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1842 +-A limit-3300 -m limit --limit 1/second -j LOG +-A limit-3300 -m recent --name limit-3300 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1843 +-A limit-3301 -m recent --name limit-3301 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1844 +-A limit-3302 -j TEE --gateway 10.0.0.1 +-A limit-3302 -j TEE --gateway 10.0.0.2 +-A limit-3302 -m recent --name limit-3302 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1845 +-A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3303 -m recent --name limit-3303 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1846 +-A limit-3304 -m recent --name limit-3304 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1847 +-A limit-3305 -m recent --name limit-3305 --rsource --mask 255.255.255.255 --set +-A limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1848 +-A limit-3306 -m limit --limit 12/minute -j ULOG +-A limit-3306 -m recent --name limit-3306 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1849 +-A limit-3307 -m recent --name limit-3307 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1850 +-A limit-3308 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1851 +-A limit-3309 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1852 +-A limit-3310 -m limit --limit 1/second -j LOG +-A limit-3310 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1853 +-A limit-3311 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1854 +-A limit-3312 -j TEE --gateway 10.0.0.1 +-A limit-3312 -j TEE --gateway 10.0.0.2 +-A limit-3312 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1855 +-A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3313 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1856 +-A limit-3314 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1857 +-A limit-3315 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1858 +-A limit-3316 -m limit --limit 12/minute -j ULOG +-A limit-3316 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1859 +-A limit-3317 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3318 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 +-A limit-3318 -j ACCEPT +-A limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3320 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 +-A limit-3320 -m limit --limit 1/second -j LOG +-A limit-3320 -j ACCEPT +-A limit-3321 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 +-A limit-3321 -m limit --limit 1/second -j LOG +-A limit-3322 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 +-A limit-3322 -j TEE --gateway 10.0.0.1 +-A limit-3322 -j TEE --gateway 10.0.0.2 +-A limit-3322 -j ACCEPT +-A limit-3323 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 +-A limit-3323 -j TEE --gateway 10.0.0.1 +-A limit-3323 -j TEE --gateway 10.0.0.2 +-A limit-3324 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 +-A limit-3324 -j ACCEPT +-A limit-3326 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 +-A limit-3326 -m limit --limit 12/minute -j ULOG +-A limit-3326 -j ACCEPT +-A limit-3327 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 +-A limit-3327 -m limit --limit 12/minute -j ULOG +-A limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1870 +-A limit-3328 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1871 +-A limit-3329 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1872 +-A limit-3330 -m limit --limit 1/second -j LOG +-A limit-3330 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1873 +-A limit-3331 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1874 +-A limit-3332 -j TEE --gateway 10.0.0.1 +-A limit-3332 -j TEE --gateway 10.0.0.2 +-A limit-3332 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1875 +-A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3333 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1876 +-A limit-3334 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1877 +-A limit-3335 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1878 +-A limit-3336 -m limit --limit 12/minute -j ULOG +-A limit-3336 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1879 +-A limit-3337 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3338 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 +-A limit-3338 -j ACCEPT +-A limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-334 -j TEE --gateway 10.0.0.1 +-A limit-334 -j TEE --gateway 10.0.0.2 +-A limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3340 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 +-A limit-3340 -m limit --limit 1/second -j LOG +-A limit-3340 -j ACCEPT +-A limit-3341 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 +-A limit-3341 -m limit --limit 1/second -j LOG +-A limit-3342 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 +-A limit-3342 -j TEE --gateway 10.0.0.1 +-A limit-3342 -j TEE --gateway 10.0.0.2 +-A limit-3342 -j ACCEPT +-A limit-3343 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 +-A limit-3343 -j TEE --gateway 10.0.0.1 +-A limit-3343 -j TEE --gateway 10.0.0.2 +-A limit-3344 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 +-A limit-3344 -j ACCEPT +-A limit-3346 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 +-A limit-3346 -m limit --limit 12/minute -j ULOG +-A limit-3346 -j ACCEPT +-A limit-3347 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 +-A limit-3347 -m limit --limit 12/minute -j ULOG +-A limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1890 +-A limit-3348 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1891 +-A limit-3349 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1892 +-A limit-3350 -m limit --limit 1/second -j LOG +-A limit-3350 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1893 +-A limit-3351 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1894 +-A limit-3352 -j TEE --gateway 10.0.0.1 +-A limit-3352 -j TEE --gateway 10.0.0.2 +-A limit-3352 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1895 +-A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3353 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1896 +-A limit-3354 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1897 +-A limit-3355 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1898 +-A limit-3356 -m limit --limit 12/minute -j ULOG +-A limit-3356 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1899 +-A limit-3357 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3358 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 +-A limit-3358 -j ACCEPT +-A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3360 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 +-A limit-3360 -m limit --limit 1/second -j LOG +-A limit-3360 -j ACCEPT +-A limit-3361 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 +-A limit-3361 -m limit --limit 1/second -j LOG +-A limit-3362 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 +-A limit-3362 -j TEE --gateway 10.0.0.1 +-A limit-3362 -j TEE --gateway 10.0.0.2 +-A limit-3362 -j ACCEPT +-A limit-3363 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 +-A limit-3363 -j TEE --gateway 10.0.0.1 +-A limit-3363 -j TEE --gateway 10.0.0.2 +-A limit-3364 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 +-A limit-3364 -j ACCEPT +-A limit-3366 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 +-A limit-3366 -m limit --limit 12/minute -j ULOG +-A limit-3366 -j ACCEPT +-A limit-3367 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 +-A limit-3367 -m limit --limit 12/minute -j ULOG +-A limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1910 +-A limit-3368 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1911 +-A limit-3369 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-338 -m limit --limit 1/second -j LOG +-A limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1912 +-A limit-3370 -m limit --limit 1/second -j LOG +-A limit-3370 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1913 +-A limit-3371 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1914 +-A limit-3372 -j TEE --gateway 10.0.0.1 +-A limit-3372 -j TEE --gateway 10.0.0.2 +-A limit-3372 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1915 +-A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3373 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1916 +-A limit-3374 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1917 +-A limit-3375 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1918 +-A limit-3376 -m limit --limit 12/minute -j ULOG +-A limit-3376 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1919 +-A limit-3377 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3378 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 +-A limit-3378 -j ACCEPT +-A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-338 -m limit --limit 12/minute -j ULOG -A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-34 -m limit --limit 1/second -j LOG --A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-342 -m limit --limit 12/minute -j ULOG --A limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3380 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 +-A limit-3380 -m limit --limit 1/second -j LOG +-A limit-3380 -j ACCEPT +-A limit-3381 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 +-A limit-3381 -m limit --limit 1/second -j LOG +-A limit-3382 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 +-A limit-3382 -j TEE --gateway 10.0.0.1 +-A limit-3382 -j TEE --gateway 10.0.0.2 +-A limit-3382 -j ACCEPT +-A limit-3383 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 +-A limit-3383 -j TEE --gateway 10.0.0.1 +-A limit-3383 -j TEE --gateway 10.0.0.2 +-A limit-3384 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 +-A limit-3384 -j ACCEPT +-A limit-3386 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 +-A limit-3386 -m limit --limit 12/minute -j ULOG +-A limit-3386 -j ACCEPT +-A limit-3387 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 +-A limit-3387 -m limit --limit 12/minute -j ULOG +-A limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3388 -m recent --name limit-3388 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3389 -m recent --name limit-3389 --rsource --mask 255.255.255.255 --set +-A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3390 -m limit --limit 1/second -j LOG +-A limit-3390 -m recent --name limit-3390 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3391 -m recent --name limit-3391 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3392 -j TEE --gateway 10.0.0.1 +-A limit-3392 -j TEE --gateway 10.0.0.2 +-A limit-3392 -m recent --name limit-3392 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3393 -m recent --name limit-3393 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3394 -m recent --name limit-3394 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3395 -m recent --name limit-3395 --rsource --mask 255.255.255.255 --set +-A limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3396 -m limit --limit 12/minute -j ULOG +-A limit-3396 -m recent --name limit-3396 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3397 -m recent --name limit-3397 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3398 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3399 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-34 -j TEE --gateway 10.0.0.1 +-A limit-34 -j TEE --gateway 10.0.0.2 +-A limit-34 -j ACCEPT +-A limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-340 -j ACCEPT +-A limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3400 -m limit --limit 1/second -j LOG +-A limit-3400 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3401 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3402 -j TEE --gateway 10.0.0.1 +-A limit-3402 -j TEE --gateway 10.0.0.2 +-A limit-3402 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3403 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3404 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3405 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3406 -m limit --limit 12/minute -j ULOG +-A limit-3406 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3407 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3408 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3408 -j ACCEPT +-A limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3410 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3410 -m limit --limit 1/second -j LOG +-A limit-3410 -j ACCEPT +-A limit-3411 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3411 -m limit --limit 1/second -j LOG +-A limit-3412 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3412 -j TEE --gateway 10.0.0.1 +-A limit-3412 -j TEE --gateway 10.0.0.2 +-A limit-3412 -j ACCEPT +-A limit-3413 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3413 -j TEE --gateway 10.0.0.1 +-A limit-3413 -j TEE --gateway 10.0.0.2 +-A limit-3414 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3414 -j ACCEPT +-A limit-3416 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3416 -m limit --limit 12/minute -j ULOG +-A limit-3416 -j ACCEPT +-A limit-3417 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3417 -m limit --limit 12/minute -j ULOG +-A limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3418 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3419 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-342 -m limit --limit 1/second -j LOG +-A limit-342 -j ACCEPT +-A limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3420 -m limit --limit 1/second -j LOG +-A limit-3420 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3421 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3422 -j TEE --gateway 10.0.0.1 +-A limit-3422 -j TEE --gateway 10.0.0.2 +-A limit-3422 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3423 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3424 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3425 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3426 -m limit --limit 12/minute -j ULOG +-A limit-3426 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3427 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3428 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3428 -j ACCEPT +-A limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-343 -m limit --limit 1/second -j LOG +-A limit-3430 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3430 -m limit --limit 1/second -j LOG +-A limit-3430 -j ACCEPT +-A limit-3431 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3431 -m limit --limit 1/second -j LOG +-A limit-3432 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3432 -j TEE --gateway 10.0.0.1 +-A limit-3432 -j TEE --gateway 10.0.0.2 +-A limit-3432 -j ACCEPT +-A limit-3433 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3433 -j TEE --gateway 10.0.0.1 +-A limit-3433 -j TEE --gateway 10.0.0.2 +-A limit-3434 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3434 -j ACCEPT +-A limit-3436 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3436 -m limit --limit 12/minute -j ULOG +-A limit-3436 -j ACCEPT +-A limit-3437 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3437 -m limit --limit 12/minute -j ULOG +-A limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3438 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3439 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-344 -j TEE --gateway 10.0.0.1 +-A limit-344 -j TEE --gateway 10.0.0.2 -A limit-344 -j ACCEPT --A limit-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-346 -m limit --limit 1/second -j LOG +-A limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3440 -m limit --limit 1/second -j LOG +-A limit-3440 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3441 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3442 -j TEE --gateway 10.0.0.1 +-A limit-3442 -j TEE --gateway 10.0.0.2 +-A limit-3442 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3443 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3444 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3445 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3446 -m limit --limit 12/minute -j ULOG +-A limit-3446 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3447 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3448 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3448 -j ACCEPT +-A limit-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-345 -j TEE --gateway 10.0.0.1 +-A limit-345 -j TEE --gateway 10.0.0.2 +-A limit-3450 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3450 -m limit --limit 1/second -j LOG +-A limit-3450 -j ACCEPT +-A limit-3451 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3451 -m limit --limit 1/second -j LOG +-A limit-3452 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3452 -j TEE --gateway 10.0.0.1 +-A limit-3452 -j TEE --gateway 10.0.0.2 +-A limit-3452 -j ACCEPT +-A limit-3453 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3453 -j TEE --gateway 10.0.0.1 +-A limit-3453 -j TEE --gateway 10.0.0.2 +-A limit-3454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3454 -j ACCEPT +-A limit-3456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3456 -m limit --limit 12/minute -j ULOG +-A limit-3456 -j ACCEPT +-A limit-3457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3457 -m limit --limit 12/minute -j ULOG +-A limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3458 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3459 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-346 -j ACCEPT --A limit-347 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-347 -m limit --limit 1/second -j LOG --A limit-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3460 -m limit --limit 1/second -j LOG +-A limit-3460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3461 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3462 -j TEE --gateway 10.0.0.1 +-A limit-3462 -j TEE --gateway 10.0.0.2 +-A limit-3462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3465 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3466 -m limit --limit 12/minute -j ULOG +-A limit-3466 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3467 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3468 -j ACCEPT +-A limit-347 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3470 -m limit --limit 1/second -j LOG +-A limit-3470 -j ACCEPT +-A limit-3471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3471 -m limit --limit 1/second -j LOG +-A limit-3472 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3472 -j TEE --gateway 10.0.0.1 +-A limit-3472 -j TEE --gateway 10.0.0.2 +-A limit-3472 -j ACCEPT +-A limit-3473 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3473 -j TEE --gateway 10.0.0.1 +-A limit-3473 -j TEE --gateway 10.0.0.2 +-A limit-3474 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3474 -j ACCEPT +-A limit-3476 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3476 -m limit --limit 12/minute -j ULOG +-A limit-3476 -j ACCEPT +-A limit-3477 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3477 -m limit --limit 12/minute -j ULOG +-A limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1930 +-A limit-3478 -m recent --name limit-3478 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1931 +-A limit-3479 -m recent --name limit-3479 --rsource --mask 255.255.255.255 --set +-A limit-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-348 -m limit --limit 12/minute -j ULOG -A limit-348 -j ACCEPT --A limit-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-350 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-350 -m limit --limit 12/minute -j ULOG --A limit-350 -j ACCEPT --A limit-351 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-351 -m limit --limit 12/minute -j ULOG --A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1932 +-A limit-3480 -m limit --limit 1/second -j LOG +-A limit-3480 -m recent --name limit-3480 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1933 +-A limit-3481 -m recent --name limit-3481 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1934 +-A limit-3482 -j TEE --gateway 10.0.0.1 +-A limit-3482 -j TEE --gateway 10.0.0.2 +-A limit-3482 -m recent --name limit-3482 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1935 +-A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3483 -m recent --name limit-3483 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1936 +-A limit-3484 -m recent --name limit-3484 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1937 +-A limit-3485 -m recent --name limit-3485 --rsource --mask 255.255.255.255 --set +-A limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1938 +-A limit-3486 -m limit --limit 12/minute -j ULOG +-A limit-3486 -m recent --name limit-3486 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1939 +-A limit-3487 -m recent --name limit-3487 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1940 +-A limit-3488 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1941 +-A limit-3489 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-349 -m limit --limit 12/minute -j ULOG +-A limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1942 +-A limit-3490 -m limit --limit 1/second -j LOG +-A limit-3490 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1943 +-A limit-3491 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1944 +-A limit-3492 -j TEE --gateway 10.0.0.1 +-A limit-3492 -j TEE --gateway 10.0.0.2 +-A limit-3492 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1945 +-A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3493 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1946 +-A limit-3494 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1947 +-A limit-3495 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1948 +-A limit-3496 -m limit --limit 12/minute -j ULOG +-A limit-3496 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1949 +-A limit-3497 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3498 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 +-A limit-3498 -j ACCEPT +-A limit-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-35 -j TEE --gateway 10.0.0.1 +-A limit-35 -j TEE --gateway 10.0.0.2 +-A limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3500 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 +-A limit-3500 -m limit --limit 1/second -j LOG +-A limit-3500 -j ACCEPT +-A limit-3501 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 +-A limit-3501 -m limit --limit 1/second -j LOG +-A limit-3502 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 +-A limit-3502 -j TEE --gateway 10.0.0.1 +-A limit-3502 -j TEE --gateway 10.0.0.2 +-A limit-3502 -j ACCEPT +-A limit-3503 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 +-A limit-3503 -j TEE --gateway 10.0.0.1 +-A limit-3503 -j TEE --gateway 10.0.0.2 +-A limit-3504 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 +-A limit-3504 -j ACCEPT +-A limit-3506 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 +-A limit-3506 -m limit --limit 12/minute -j ULOG +-A limit-3506 -j ACCEPT +-A limit-3507 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 +-A limit-3507 -m limit --limit 12/minute -j ULOG +-A limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1960 +-A limit-3508 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1961 +-A limit-3509 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1962 +-A limit-3510 -m limit --limit 1/second -j LOG +-A limit-3510 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1963 +-A limit-3511 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1964 +-A limit-3512 -j TEE --gateway 10.0.0.1 +-A limit-3512 -j TEE --gateway 10.0.0.2 +-A limit-3512 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1965 +-A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3513 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1966 +-A limit-3514 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1967 +-A limit-3515 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1968 +-A limit-3516 -m limit --limit 12/minute -j ULOG +-A limit-3516 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1969 +-A limit-3517 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3518 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 +-A limit-3518 -j ACCEPT +-A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-352 -m limit --limit 1/second -j LOG -A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-354 -m limit --limit 1/second -j LOG +-A limit-3520 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 +-A limit-3520 -m limit --limit 1/second -j LOG +-A limit-3520 -j ACCEPT +-A limit-3521 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 +-A limit-3521 -m limit --limit 1/second -j LOG +-A limit-3522 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 +-A limit-3522 -j TEE --gateway 10.0.0.1 +-A limit-3522 -j TEE --gateway 10.0.0.2 +-A limit-3522 -j ACCEPT +-A limit-3523 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 +-A limit-3523 -j TEE --gateway 10.0.0.1 +-A limit-3523 -j TEE --gateway 10.0.0.2 +-A limit-3524 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 +-A limit-3524 -j ACCEPT +-A limit-3526 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 +-A limit-3526 -m limit --limit 12/minute -j ULOG +-A limit-3526 -j ACCEPT +-A limit-3527 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 +-A limit-3527 -m limit --limit 12/minute -j ULOG +-A limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1980 +-A limit-3528 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1981 +-A limit-3529 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1982 +-A limit-3530 -m limit --limit 1/second -j LOG +-A limit-3530 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1983 +-A limit-3531 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1984 +-A limit-3532 -j TEE --gateway 10.0.0.1 +-A limit-3532 -j TEE --gateway 10.0.0.2 +-A limit-3532 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1985 +-A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3533 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1986 +-A limit-3534 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1987 +-A limit-3535 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1988 +-A limit-3536 -m limit --limit 12/minute -j ULOG +-A limit-3536 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1989 +-A limit-3537 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3538 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 +-A limit-3538 -j ACCEPT +-A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-354 -j TEE --gateway 10.0.0.1 +-A limit-354 -j TEE --gateway 10.0.0.2 -A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3540 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 +-A limit-3540 -m limit --limit 1/second -j LOG +-A limit-3540 -j ACCEPT +-A limit-3541 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 +-A limit-3541 -m limit --limit 1/second -j LOG +-A limit-3542 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 +-A limit-3542 -j TEE --gateway 10.0.0.1 +-A limit-3542 -j TEE --gateway 10.0.0.2 +-A limit-3542 -j ACCEPT +-A limit-3543 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 +-A limit-3543 -j TEE --gateway 10.0.0.1 +-A limit-3543 -j TEE --gateway 10.0.0.2 +-A limit-3544 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 +-A limit-3544 -j ACCEPT +-A limit-3546 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 +-A limit-3546 -m limit --limit 12/minute -j ULOG +-A limit-3546 -j ACCEPT +-A limit-3547 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 +-A limit-3547 -m limit --limit 12/minute -j ULOG +-A limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2000 +-A limit-3548 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2001 +-A limit-3549 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2002 +-A limit-3550 -m limit --limit 1/second -j LOG +-A limit-3550 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2003 +-A limit-3551 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2004 +-A limit-3552 -j TEE --gateway 10.0.0.1 +-A limit-3552 -j TEE --gateway 10.0.0.2 +-A limit-3552 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2005 +-A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3553 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2006 +-A limit-3554 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2007 +-A limit-3555 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2008 +-A limit-3556 -m limit --limit 12/minute -j ULOG +-A limit-3556 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2009 +-A limit-3557 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3558 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 +-A limit-3558 -j ACCEPT +-A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3560 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 +-A limit-3560 -m limit --limit 1/second -j LOG +-A limit-3560 -j ACCEPT +-A limit-3561 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 +-A limit-3561 -m limit --limit 1/second -j LOG +-A limit-3562 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 +-A limit-3562 -j TEE --gateway 10.0.0.1 +-A limit-3562 -j TEE --gateway 10.0.0.2 +-A limit-3562 -j ACCEPT +-A limit-3563 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 +-A limit-3563 -j TEE --gateway 10.0.0.1 +-A limit-3563 -j TEE --gateway 10.0.0.2 +-A limit-3564 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 +-A limit-3564 -j ACCEPT +-A limit-3566 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 +-A limit-3566 -m limit --limit 12/minute -j ULOG +-A limit-3566 -j ACCEPT +-A limit-3567 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 +-A limit-3567 -m limit --limit 12/minute -j ULOG +-A limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2020 +-A limit-3568 -m recent --name limit-3568 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2021 +-A limit-3569 -m recent --name limit-3569 --rsource --mask 255.255.255.255 --set +-A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2022 +-A limit-3570 -m limit --limit 1/second -j LOG +-A limit-3570 -m recent --name limit-3570 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2023 +-A limit-3571 -m recent --name limit-3571 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2024 +-A limit-3572 -j TEE --gateway 10.0.0.1 +-A limit-3572 -j TEE --gateway 10.0.0.2 +-A limit-3572 -m recent --name limit-3572 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2025 +-A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3573 -m recent --name limit-3573 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2026 +-A limit-3574 -m recent --name limit-3574 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2027 +-A limit-3575 -m recent --name limit-3575 --rsource --mask 255.255.255.255 --set +-A limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2028 +-A limit-3576 -m limit --limit 12/minute -j ULOG +-A limit-3576 -m recent --name limit-3576 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2029 +-A limit-3577 -m recent --name limit-3577 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2030 +-A limit-3578 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2031 +-A limit-3579 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-358 -m limit --limit 12/minute -j ULOG -A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2032 +-A limit-3580 -m limit --limit 1/second -j LOG +-A limit-3580 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2033 +-A limit-3581 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2034 +-A limit-3582 -j TEE --gateway 10.0.0.1 +-A limit-3582 -j TEE --gateway 10.0.0.2 +-A limit-3582 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2035 +-A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3583 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2036 +-A limit-3584 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2037 +-A limit-3585 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2038 +-A limit-3586 -m limit --limit 12/minute -j ULOG +-A limit-3586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2039 +-A limit-3587 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3588 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 +-A limit-3588 -j ACCEPT +-A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-36 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-36 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3590 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 +-A limit-3590 -m limit --limit 1/second -j LOG +-A limit-3590 -j ACCEPT +-A limit-3591 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 +-A limit-3591 -m limit --limit 1/second -j LOG +-A limit-3592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 +-A limit-3592 -j TEE --gateway 10.0.0.1 +-A limit-3592 -j TEE --gateway 10.0.0.2 +-A limit-3592 -j ACCEPT +-A limit-3593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 +-A limit-3593 -j TEE --gateway 10.0.0.1 +-A limit-3593 -j TEE --gateway 10.0.0.2 +-A limit-3594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 +-A limit-3594 -j ACCEPT +-A limit-3596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 +-A limit-3596 -m limit --limit 12/minute -j ULOG +-A limit-3596 -j ACCEPT +-A limit-3597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 +-A limit-3597 -m limit --limit 12/minute -j ULOG +-A limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2050 +-A limit-3598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2051 +-A limit-3599 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-36 -j ACCEPT +-A limit-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-360 -j ACCEPT --A limit-361 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2052 +-A limit-3600 -m limit --limit 1/second -j LOG +-A limit-3600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2053 +-A limit-3601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2054 +-A limit-3602 -j TEE --gateway 10.0.0.1 +-A limit-3602 -j TEE --gateway 10.0.0.2 +-A limit-3602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2055 +-A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3603 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2056 +-A limit-3604 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2057 +-A limit-3605 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2058 +-A limit-3606 -m limit --limit 12/minute -j ULOG +-A limit-3606 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2059 +-A limit-3607 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 +-A limit-3608 -j ACCEPT +-A limit-361 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3610 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 +-A limit-3610 -m limit --limit 1/second -j LOG +-A limit-3610 -j ACCEPT +-A limit-3611 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 +-A limit-3611 -m limit --limit 1/second -j LOG +-A limit-3612 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 +-A limit-3612 -j TEE --gateway 10.0.0.1 +-A limit-3612 -j TEE --gateway 10.0.0.2 +-A limit-3612 -j ACCEPT +-A limit-3613 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 +-A limit-3613 -j TEE --gateway 10.0.0.1 +-A limit-3613 -j TEE --gateway 10.0.0.2 +-A limit-3614 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 +-A limit-3614 -j ACCEPT +-A limit-3616 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 +-A limit-3616 -m limit --limit 12/minute -j ULOG +-A limit-3616 -j ACCEPT +-A limit-3617 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 +-A limit-3617 -m limit --limit 12/minute -j ULOG +-A limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2070 +-A limit-3618 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2071 +-A limit-3619 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m limit --limit 1/second -j LOG -A limit-362 -j ACCEPT --A limit-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2072 +-A limit-3620 -m limit --limit 1/second -j LOG +-A limit-3620 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2073 +-A limit-3621 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2074 +-A limit-3622 -j TEE --gateway 10.0.0.1 +-A limit-3622 -j TEE --gateway 10.0.0.2 +-A limit-3622 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2075 +-A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3623 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2076 +-A limit-3624 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2077 +-A limit-3625 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2078 +-A limit-3626 -m limit --limit 12/minute -j ULOG +-A limit-3626 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2079 +-A limit-3627 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3628 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 +-A limit-3628 -j ACCEPT +-A limit-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-363 -m limit --limit 1/second -j LOG --A limit-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3630 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 +-A limit-3630 -m limit --limit 1/second -j LOG +-A limit-3630 -j ACCEPT +-A limit-3631 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 +-A limit-3631 -m limit --limit 1/second -j LOG +-A limit-3632 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 +-A limit-3632 -j TEE --gateway 10.0.0.1 +-A limit-3632 -j TEE --gateway 10.0.0.2 +-A limit-3632 -j ACCEPT +-A limit-3633 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 +-A limit-3633 -j TEE --gateway 10.0.0.1 +-A limit-3633 -j TEE --gateway 10.0.0.2 +-A limit-3634 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 +-A limit-3634 -j ACCEPT +-A limit-3636 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 +-A limit-3636 -m limit --limit 12/minute -j ULOG +-A limit-3636 -j ACCEPT +-A limit-3637 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 +-A limit-3637 -m limit --limit 12/minute -j ULOG +-A limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2090 +-A limit-3638 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2091 +-A limit-3639 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-364 -j TEE --gateway 10.0.0.1 +-A limit-364 -j TEE --gateway 10.0.0.2 -A limit-364 -j ACCEPT --A limit-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-366 -m limit --limit 12/minute -j ULOG +-A limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2092 +-A limit-3640 -m limit --limit 1/second -j LOG +-A limit-3640 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2093 +-A limit-3641 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2094 +-A limit-3642 -j TEE --gateway 10.0.0.1 +-A limit-3642 -j TEE --gateway 10.0.0.2 +-A limit-3642 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2095 +-A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3643 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2096 +-A limit-3644 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2097 +-A limit-3645 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2098 +-A limit-3646 -m limit --limit 12/minute -j ULOG +-A limit-3646 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2099 +-A limit-3647 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3648 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 +-A limit-3648 -j ACCEPT +-A limit-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-365 -j TEE --gateway 10.0.0.1 +-A limit-365 -j TEE --gateway 10.0.0.2 +-A limit-3650 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 +-A limit-3650 -m limit --limit 1/second -j LOG +-A limit-3650 -j ACCEPT +-A limit-3651 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 +-A limit-3651 -m limit --limit 1/second -j LOG +-A limit-3652 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 +-A limit-3652 -j TEE --gateway 10.0.0.1 +-A limit-3652 -j TEE --gateway 10.0.0.2 +-A limit-3652 -j ACCEPT +-A limit-3653 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 +-A limit-3653 -j TEE --gateway 10.0.0.1 +-A limit-3653 -j TEE --gateway 10.0.0.2 +-A limit-3654 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 +-A limit-3654 -j ACCEPT +-A limit-3656 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 +-A limit-3656 -m limit --limit 12/minute -j ULOG +-A limit-3656 -j ACCEPT +-A limit-3657 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 +-A limit-3657 -m limit --limit 12/minute -j ULOG +-A limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3658 -m recent --name limit-3658 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3659 -m recent --name limit-3659 --rsource --mask 255.255.255.255 --set +-A limit-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-366 -j ACCEPT --A limit-367 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-367 -m limit --limit 12/minute -j ULOG --A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-152 --A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-153 --A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set --A limit-37 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-37 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-154 --A limit-370 -m limit --limit 1/second -j LOG +-A limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3660 -m limit --limit 1/second -j LOG +-A limit-3660 -m recent --name limit-3660 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3661 -m recent --name limit-3661 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3662 -j TEE --gateway 10.0.0.1 +-A limit-3662 -j TEE --gateway 10.0.0.2 +-A limit-3662 -m recent --name limit-3662 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3663 -m recent --name limit-3663 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3664 -m recent --name limit-3664 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3665 -m recent --name limit-3665 --rsource --mask 255.255.255.255 --set +-A limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3666 -m limit --limit 12/minute -j ULOG +-A limit-3666 -m recent --name limit-3666 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3667 -m recent --name limit-3667 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3668 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3669 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-367 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3670 -m limit --limit 1/second -j LOG +-A limit-3670 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3671 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3672 -j TEE --gateway 10.0.0.1 +-A limit-3672 -j TEE --gateway 10.0.0.2 +-A limit-3672 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3673 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3674 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3675 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3676 -m limit --limit 12/minute -j ULOG +-A limit-3676 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3677 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3678 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3678 -j ACCEPT +-A limit-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-368 -m limit --limit 12/minute -j ULOG +-A limit-368 -j ACCEPT +-A limit-3680 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3680 -m limit --limit 1/second -j LOG +-A limit-3680 -j ACCEPT +-A limit-3681 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3681 -m limit --limit 1/second -j LOG +-A limit-3682 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3682 -j TEE --gateway 10.0.0.1 +-A limit-3682 -j TEE --gateway 10.0.0.2 +-A limit-3682 -j ACCEPT +-A limit-3683 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3683 -j TEE --gateway 10.0.0.1 +-A limit-3683 -j TEE --gateway 10.0.0.2 +-A limit-3684 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3684 -j ACCEPT +-A limit-3686 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3686 -m limit --limit 12/minute -j ULOG +-A limit-3686 -j ACCEPT +-A limit-3687 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3687 -m limit --limit 12/minute -j ULOG +-A limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3688 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3689 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-369 -m limit --limit 12/minute -j ULOG +-A limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3690 -m limit --limit 1/second -j LOG +-A limit-3690 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3691 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3692 -j TEE --gateway 10.0.0.1 +-A limit-3692 -j TEE --gateway 10.0.0.2 +-A limit-3692 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3693 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3694 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3695 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3696 -m limit --limit 12/minute -j ULOG +-A limit-3696 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3697 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3698 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3698 -j ACCEPT +-A limit-37 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-190 -A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-155 --A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-156 +-A limit-3700 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3700 -m limit --limit 1/second -j LOG +-A limit-3700 -j ACCEPT +-A limit-3701 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3701 -m limit --limit 1/second -j LOG +-A limit-3702 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3702 -j TEE --gateway 10.0.0.1 +-A limit-3702 -j TEE --gateway 10.0.0.2 +-A limit-3702 -j ACCEPT +-A limit-3703 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3703 -j TEE --gateway 10.0.0.1 +-A limit-3703 -j TEE --gateway 10.0.0.2 +-A limit-3704 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3704 -j ACCEPT +-A limit-3706 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3706 -m limit --limit 12/minute -j ULOG +-A limit-3706 -j ACCEPT +-A limit-3707 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3707 -m limit --limit 12/minute -j ULOG +-A limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3708 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3709 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-191 +-A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set +-A limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3710 -m limit --limit 1/second -j LOG +-A limit-3710 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3711 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3712 -j TEE --gateway 10.0.0.1 +-A limit-3712 -j TEE --gateway 10.0.0.2 +-A limit-3712 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3713 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3714 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3715 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3716 -m limit --limit 12/minute -j ULOG +-A limit-3716 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3717 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3718 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3718 -j ACCEPT +-A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-192 +-A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-157 --A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set --A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-158 --A limit-374 -m limit --limit 12/minute -j ULOG +-A limit-3720 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3720 -m limit --limit 1/second -j LOG +-A limit-3720 -j ACCEPT +-A limit-3721 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3721 -m limit --limit 1/second -j LOG +-A limit-3722 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3722 -j TEE --gateway 10.0.0.1 +-A limit-3722 -j TEE --gateway 10.0.0.2 +-A limit-3722 -j ACCEPT +-A limit-3723 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3723 -j TEE --gateway 10.0.0.1 +-A limit-3723 -j TEE --gateway 10.0.0.2 +-A limit-3724 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3724 -j ACCEPT +-A limit-3726 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3726 -m limit --limit 12/minute -j ULOG +-A limit-3726 -j ACCEPT +-A limit-3727 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3727 -m limit --limit 12/minute -j ULOG +-A limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3728 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3729 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-193 +-A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3730 -m limit --limit 1/second -j LOG +-A limit-3730 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3731 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3732 -j TEE --gateway 10.0.0.1 +-A limit-3732 -j TEE --gateway 10.0.0.2 +-A limit-3732 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3733 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3734 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3735 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3736 -m limit --limit 12/minute -j ULOG +-A limit-3736 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-3737 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3738 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3738 -j ACCEPT +-A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-194 +-A limit-374 -j TEE --gateway 10.0.0.1 +-A limit-374 -j TEE --gateway 10.0.0.2 -A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-159 --A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-160 --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-161 --A limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-162 --A limit-378 -m limit --limit 1/second -j LOG --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-163 --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-3740 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3740 -m limit --limit 1/second -j LOG +-A limit-3740 -j ACCEPT +-A limit-3741 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3741 -m limit --limit 1/second -j LOG +-A limit-3742 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3742 -j TEE --gateway 10.0.0.1 +-A limit-3742 -j TEE --gateway 10.0.0.2 +-A limit-3742 -j ACCEPT +-A limit-3743 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3743 -j TEE --gateway 10.0.0.1 +-A limit-3743 -j TEE --gateway 10.0.0.2 +-A limit-3744 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3744 -j ACCEPT +-A limit-3746 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3746 -m limit --limit 12/minute -j ULOG +-A limit-3746 -j ACCEPT +-A limit-3747 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3747 -m limit --limit 12/minute -j ULOG +-A limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2110 +-A limit-3748 -m recent --name limit-3748 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2111 +-A limit-3749 -m recent --name limit-3749 --rsource --mask 255.255.255.255 --set +-A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-195 +-A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2112 +-A limit-3750 -m limit --limit 1/second -j LOG +-A limit-3750 -m recent --name limit-3750 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2113 +-A limit-3751 -m recent --name limit-3751 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2114 +-A limit-3752 -j TEE --gateway 10.0.0.1 +-A limit-3752 -j TEE --gateway 10.0.0.2 +-A limit-3752 -m recent --name limit-3752 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2115 +-A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3753 -m recent --name limit-3753 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2116 +-A limit-3754 -m recent --name limit-3754 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2117 +-A limit-3755 -m recent --name limit-3755 --rsource --mask 255.255.255.255 --set +-A limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2118 +-A limit-3756 -m limit --limit 12/minute -j ULOG +-A limit-3756 -m recent --name limit-3756 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2119 +-A limit-3757 -m recent --name limit-3757 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2120 +-A limit-3758 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2121 +-A limit-3759 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-196 +-A limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2122 +-A limit-3760 -m limit --limit 1/second -j LOG +-A limit-3760 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2123 +-A limit-3761 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2124 +-A limit-3762 -j TEE --gateway 10.0.0.1 +-A limit-3762 -j TEE --gateway 10.0.0.2 +-A limit-3762 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2125 +-A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3763 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2126 +-A limit-3764 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2127 +-A limit-3765 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2128 +-A limit-3766 -m limit --limit 12/minute -j ULOG +-A limit-3766 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2129 +-A limit-3767 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3768 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 +-A limit-3768 -j ACCEPT +-A limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-197 +-A limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --set +-A limit-3770 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 +-A limit-3770 -m limit --limit 1/second -j LOG +-A limit-3770 -j ACCEPT +-A limit-3771 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 +-A limit-3771 -m limit --limit 1/second -j LOG +-A limit-3772 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 +-A limit-3772 -j TEE --gateway 10.0.0.1 +-A limit-3772 -j TEE --gateway 10.0.0.2 +-A limit-3772 -j ACCEPT +-A limit-3773 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 +-A limit-3773 -j TEE --gateway 10.0.0.1 +-A limit-3773 -j TEE --gateway 10.0.0.2 +-A limit-3774 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 +-A limit-3774 -j ACCEPT +-A limit-3776 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 +-A limit-3776 -m limit --limit 12/minute -j ULOG +-A limit-3776 -j ACCEPT +-A limit-3777 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 +-A limit-3777 -m limit --limit 12/minute -j ULOG +-A limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2140 +-A limit-3778 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2141 +-A limit-3779 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-198 +-A limit-378 -m limit --limit 12/minute -j ULOG +-A limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2142 +-A limit-3780 -m limit --limit 1/second -j LOG +-A limit-3780 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2143 +-A limit-3781 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2144 +-A limit-3782 -j TEE --gateway 10.0.0.1 +-A limit-3782 -j TEE --gateway 10.0.0.2 +-A limit-3782 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2145 +-A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-3783 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2146 +-A limit-3784 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2147 +-A limit-3785 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2148 +-A limit-3786 -m limit --limit 12/minute -j ULOG +-A limit-3786 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-2149 +-A limit-3787 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3788 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 +-A limit-3788 -j ACCEPT +-A limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-199 +-A limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3790 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 +-A limit-3790 -m limit --limit 1/second -j LOG +-A limit-3790 -j ACCEPT +-A limit-3791 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 +-A limit-3791 -m limit --limit 1/second -j LOG +-A limit-3792 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 +-A limit-3792 -j TEE --gateway 10.0.0.1 +-A limit-3792 -j TEE --gateway 10.0.0.2 +-A limit-3792 -j ACCEPT +-A limit-3793 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 +-A limit-3793 -j TEE --gateway 10.0.0.1 +-A limit-3793 -j TEE --gateway 10.0.0.2 +-A limit-3794 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 +-A limit-3794 -j ACCEPT +-A limit-3796 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 +-A limit-3796 -m limit --limit 12/minute -j ULOG +-A limit-3796 -j ACCEPT +-A limit-3797 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 +-A limit-3797 -m limit --limit 12/minute -j ULOG +-A limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2160 +-A limit-3798 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2161 +-A limit-3799 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-38 -m limit --limit 12/minute -j ULOG --A limit-38 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-164 +-A limit-38 -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-200 -A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-165 +-A limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2162 +-A limit-3800 -m limit --limit 1/second -j LOG +-A limit-3800 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2163 +-A limit-3801 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2164 +-A limit-3802 -j TEE --gateway 10.0.0.1 +-A limit-3802 -j TEE --gateway 10.0.0.2 +-A limit-3802 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2165 +-A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3803 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2166 +-A limit-3804 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2167 +-A limit-3805 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2168 +-A limit-3806 -m limit --limit 12/minute -j ULOG +-A limit-3806 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2169 +-A limit-3807 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3808 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 +-A limit-3808 -j ACCEPT +-A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-201 -A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-166 --A limit-382 -m limit --limit 12/minute -j ULOG +-A limit-3810 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 +-A limit-3810 -m limit --limit 1/second -j LOG +-A limit-3810 -j ACCEPT +-A limit-3811 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 +-A limit-3811 -m limit --limit 1/second -j LOG +-A limit-3812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 +-A limit-3812 -j TEE --gateway 10.0.0.1 +-A limit-3812 -j TEE --gateway 10.0.0.2 +-A limit-3812 -j ACCEPT +-A limit-3813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 +-A limit-3813 -j TEE --gateway 10.0.0.1 +-A limit-3813 -j TEE --gateway 10.0.0.2 +-A limit-3814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 +-A limit-3814 -j ACCEPT +-A limit-3816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 +-A limit-3816 -m limit --limit 12/minute -j ULOG +-A limit-3816 -j ACCEPT +-A limit-3817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 +-A limit-3817 -m limit --limit 12/minute -j ULOG +-A limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2180 +-A limit-3818 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2181 +-A limit-3819 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-202 +-A limit-382 -m limit --limit 1/second -j LOG -A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-167 --A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-168 --A limit-384 -j ACCEPT --A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-169 --A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-170 --A limit-386 -m limit --limit 1/second -j LOG --A limit-386 -j ACCEPT --A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-171 --A limit-387 -m limit --limit 1/second -j LOG --A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-172 --A limit-388 -j ACCEPT --A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-173 --A limit-39 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-39 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-174 --A limit-390 -m limit --limit 12/minute -j ULOG +-A limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2182 +-A limit-3820 -m limit --limit 1/second -j LOG +-A limit-3820 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2183 +-A limit-3821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2184 +-A limit-3822 -j TEE --gateway 10.0.0.1 +-A limit-3822 -j TEE --gateway 10.0.0.2 +-A limit-3822 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2185 +-A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-3823 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2186 +-A limit-3824 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2187 +-A limit-3825 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2188 +-A limit-3826 -m limit --limit 12/minute -j ULOG +-A limit-3826 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-2189 +-A limit-3827 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-3828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 +-A limit-3828 -j ACCEPT +-A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-203 +-A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-3830 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 +-A limit-3830 -m limit --limit 1/second -j LOG +-A limit-3830 -j ACCEPT +-A limit-3831 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 +-A limit-3831 -m limit --limit 1/second -j LOG +-A limit-3832 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 +-A limit-3832 -j TEE --gateway 10.0.0.1 +-A limit-3832 -j TEE --gateway 10.0.0.2 +-A limit-3832 -j ACCEPT +-A limit-3833 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 +-A limit-3833 -j TEE --gateway 10.0.0.1 +-A limit-3833 -j TEE --gateway 10.0.0.2 +-A limit-3834 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 +-A limit-3834 -j ACCEPT +-A limit-3836 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 +-A limit-3836 -m limit --limit 12/minute -j ULOG +-A limit-3836 -j ACCEPT +-A limit-3837 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 +-A limit-3837 -m limit --limit 12/minute -j ULOG +-A limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3838 -j ACCEPT +-A limit-3838 -m limit --limit 1/second -j LOG +-A limit-3838 -j DROP +-A limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3839 -j RETURN +-A limit-3839 -m limit --limit 1/second -j LOG +-A limit-3839 -j DROP +-A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-204 +-A limit-384 -j TEE --gateway 10.0.0.1 +-A limit-384 -j TEE --gateway 10.0.0.2 +-A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3840 -j logaccept-66 +-A limit-3840 -m limit --limit 1/second -j LOG +-A limit-3840 -j DROP +-A limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3841 -j logaccept-67 +-A limit-3841 -m limit --limit 1/second -j LOG +-A limit-3841 -j DROP +-A limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3842 -j ACCEPT +-A limit-3842 -m limit --limit 1/second -j LOG +-A limit-3842 -j DROP +-A limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3843 -j logaccept-68 +-A limit-3843 -m limit --limit 1/second -j LOG +-A limit-3843 -j DROP +-A limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3844 -j ACCEPT +-A limit-3844 -j DROP +-A limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3845 -j RETURN +-A limit-3845 -j DROP +-A limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3846 -j logaccept-69 +-A limit-3846 -j DROP +-A limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3847 -j logaccept-70 +-A limit-3847 -j DROP +-A limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3848 -j ACCEPT +-A limit-3848 -j DROP +-A limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3849 -j logaccept-71 +-A limit-3849 -j DROP +-A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-205 +-A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3850 -j ACCEPT +-A limit-3850 -m limit --limit 1/second -j LOG +-A limit-3850 -j DROP +-A limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3851 -j RETURN +-A limit-3851 -m limit --limit 1/second -j LOG +-A limit-3851 -j DROP +-A limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3852 -j logaccept-72 +-A limit-3852 -m limit --limit 1/second -j LOG +-A limit-3852 -j DROP +-A limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3853 -j logaccept-73 +-A limit-3853 -m limit --limit 1/second -j LOG +-A limit-3853 -j DROP +-A limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3854 -j ACCEPT +-A limit-3854 -m limit --limit 1/second -j LOG +-A limit-3854 -j DROP +-A limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3855 -j logaccept-74 +-A limit-3855 -m limit --limit 1/second -j LOG +-A limit-3855 -j DROP +-A limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3856 -j ACCEPT +-A limit-3856 -j TEE --gateway 10.0.0.1 +-A limit-3856 -j TEE --gateway 10.0.0.2 +-A limit-3856 -j DROP +-A limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3857 -j RETURN +-A limit-3857 -j TEE --gateway 10.0.0.1 +-A limit-3857 -j TEE --gateway 10.0.0.2 +-A limit-3857 -j DROP +-A limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3858 -j logaccept-75 +-A limit-3858 -j TEE --gateway 10.0.0.1 +-A limit-3858 -j TEE --gateway 10.0.0.2 +-A limit-3858 -j DROP +-A limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3859 -j logaccept-76 +-A limit-3859 -j TEE --gateway 10.0.0.1 +-A limit-3859 -j TEE --gateway 10.0.0.2 +-A limit-3859 -j DROP +-A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-206 +-A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3860 -j ACCEPT +-A limit-3860 -j TEE --gateway 10.0.0.1 +-A limit-3860 -j TEE --gateway 10.0.0.2 +-A limit-3860 -j DROP +-A limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3861 -j logaccept-77 +-A limit-3861 -j TEE --gateway 10.0.0.1 +-A limit-3861 -j TEE --gateway 10.0.0.2 +-A limit-3861 -j DROP +-A limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3862 -j ACCEPT +-A limit-3862 -j DROP +-A limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3863 -j RETURN +-A limit-3863 -j DROP +-A limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3864 -j logaccept-78 +-A limit-3864 -j DROP +-A limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3865 -j logaccept-79 +-A limit-3865 -j DROP +-A limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3866 -j ACCEPT +-A limit-3866 -j DROP +-A limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3867 -j logaccept-80 +-A limit-3867 -j DROP +-A limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3868 -j ACCEPT +-A limit-3868 -m limit --limit 12/minute -j ULOG +-A limit-3868 -j DROP +-A limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3869 -j RETURN +-A limit-3869 -m limit --limit 12/minute -j ULOG +-A limit-3869 -j DROP +-A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-207 +-A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3870 -j logaccept-81 +-A limit-3870 -m limit --limit 12/minute -j ULOG +-A limit-3870 -j DROP +-A limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3871 -j logaccept-82 +-A limit-3871 -m limit --limit 12/minute -j ULOG +-A limit-3871 -j DROP +-A limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3872 -j ACCEPT +-A limit-3872 -m limit --limit 12/minute -j ULOG +-A limit-3872 -j DROP +-A limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3873 -j logaccept-83 +-A limit-3873 -m limit --limit 12/minute -j ULOG +-A limit-3873 -j DROP +-A limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3874 -j ACCEPT +-A limit-3874 -j DROP +-A limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3875 -j RETURN +-A limit-3875 -j DROP +-A limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3876 -j logaccept-84 +-A limit-3876 -j DROP +-A limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3877 -j logaccept-85 +-A limit-3877 -j DROP +-A limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3878 -j ACCEPT +-A limit-3878 -j DROP +-A limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3879 -j logaccept-86 +-A limit-3879 -j DROP +-A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-208 +-A limit-388 -m limit --limit 12/minute -j ULOG +-A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3880 -j ACCEPT +-A limit-3880 -m limit --limit 1/second -j LOG +-A limit-3880 -j DROP +-A limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3881 -j RETURN +-A limit-3881 -m limit --limit 1/second -j LOG +-A limit-3881 -j DROP +-A limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3882 -j logaccept-87 +-A limit-3882 -m limit --limit 1/second -j LOG +-A limit-3882 -j DROP +-A limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3883 -j logaccept-88 +-A limit-3883 -m limit --limit 1/second -j LOG +-A limit-3883 -j DROP +-A limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3884 -j ACCEPT +-A limit-3884 -m limit --limit 1/second -j LOG +-A limit-3884 -j DROP +-A limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3885 -j logaccept-89 +-A limit-3885 -m limit --limit 1/second -j LOG +-A limit-3885 -j DROP +-A limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3886 -j ACCEPT +-A limit-3886 -j TEE --gateway 10.0.0.1 +-A limit-3886 -j TEE --gateway 10.0.0.2 +-A limit-3886 -j DROP +-A limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3887 -j RETURN +-A limit-3887 -j TEE --gateway 10.0.0.1 +-A limit-3887 -j TEE --gateway 10.0.0.2 +-A limit-3887 -j DROP +-A limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3888 -j logaccept-90 +-A limit-3888 -j TEE --gateway 10.0.0.1 +-A limit-3888 -j TEE --gateway 10.0.0.2 +-A limit-3888 -j DROP +-A limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3889 -j logaccept-91 +-A limit-3889 -j TEE --gateway 10.0.0.1 +-A limit-3889 -j TEE --gateway 10.0.0.2 +-A limit-3889 -j DROP +-A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-209 +-A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3890 -j ACCEPT +-A limit-3890 -j TEE --gateway 10.0.0.1 +-A limit-3890 -j TEE --gateway 10.0.0.2 +-A limit-3890 -j DROP +-A limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3891 -j logaccept-92 +-A limit-3891 -j TEE --gateway 10.0.0.1 +-A limit-3891 -j TEE --gateway 10.0.0.2 +-A limit-3891 -j DROP +-A limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3892 -j ACCEPT +-A limit-3892 -j DROP +-A limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3893 -j RETURN +-A limit-3893 -j DROP +-A limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3894 -j logaccept-93 +-A limit-3894 -j DROP +-A limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3895 -j logaccept-94 +-A limit-3895 -j DROP +-A limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3896 -j ACCEPT +-A limit-3896 -j DROP +-A limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3897 -j logaccept-95 +-A limit-3897 -j DROP +-A limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3898 -j ACCEPT +-A limit-3898 -m limit --limit 12/minute -j ULOG +-A limit-3898 -j DROP +-A limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3899 -j RETURN +-A limit-3899 -m limit --limit 12/minute -j ULOG +-A limit-3899 -j DROP +-A limit-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-39 -m limit --limit 12/minute -j ULOG +-A limit-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-210 -A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-175 --A limit-391 -m limit --limit 12/minute -j ULOG --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-394 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-394 -m limit --limit 1/second -j LOG --A limit-394 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-395 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-395 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-396 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-396 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-397 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 --A limit-397 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-398 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3900 -j logaccept-96 +-A limit-3900 -m limit --limit 12/minute -j ULOG +-A limit-3900 -j DROP +-A limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3901 -j logaccept-97 +-A limit-3901 -m limit --limit 12/minute -j ULOG +-A limit-3901 -j DROP +-A limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3902 -j ACCEPT +-A limit-3902 -m limit --limit 12/minute -j ULOG +-A limit-3902 -j DROP +-A limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-3903 -j logaccept-98 +-A limit-3903 -m limit --limit 12/minute -j ULOG +-A limit-3903 -j DROP +-A limit-391 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-211 +-A limit-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-212 +-A limit-392 -m limit --limit 1/second -j LOG +-A limit-392 -j ACCEPT +-A limit-393 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-213 +-A limit-393 -m limit --limit 1/second -j LOG +-A limit-394 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-214 +-A limit-394 -j TEE --gateway 10.0.0.1 +-A limit-394 -j TEE --gateway 10.0.0.2 +-A limit-394 -j ACCEPT +-A limit-395 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-215 +-A limit-395 -j TEE --gateway 10.0.0.1 +-A limit-395 -j TEE --gateway 10.0.0.2 +-A limit-396 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-216 +-A limit-396 -j ACCEPT +-A limit-397 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-217 +-A limit-398 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-218 -A limit-398 -m limit --limit 12/minute -j ULOG --A limit-398 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-399 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 --A limit-399 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-398 -j ACCEPT +-A limit-399 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-219 +-A limit-399 -m limit --limit 12/minute -j ULOG -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-4 -j TEE --gateway 10.0.0.1 +-A limit-4 -j TEE --gateway 10.0.0.2 -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-40 -j ACCEPT --A limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-184 --A limit-400 -j ACCEPT --A limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-185 --A limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-220 +-A limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-221 +-A limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-222 -A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j ACCEPT --A limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 --A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 --A limit-404 -j ACCEPT --A limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 --A limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 --A limit-406 -m limit --limit 12/minute -j ULOG --A limit-406 -j ACCEPT --A limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 --A limit-407 -m limit --limit 12/minute -j ULOG --A limit-408 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-192 --A limit-408 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-409 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-193 --A limit-409 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-410 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-194 --A limit-410 -m limit --limit 1/second -j LOG --A limit-410 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-411 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-195 --A limit-411 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-412 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-196 --A limit-412 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-413 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-197 --A limit-413 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-414 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-198 --A limit-414 -m limit --limit 12/minute -j ULOG --A limit-414 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-415 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-199 --A limit-415 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-416 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-223 +-A limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-224 +-A limit-404 -j TEE --gateway 10.0.0.1 +-A limit-404 -j TEE --gateway 10.0.0.2 +-A limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-225 +-A limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-226 +-A limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-227 +-A limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-408 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-228 +-A limit-408 -m limit --limit 12/minute -j ULOG +-A limit-408 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-409 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-409 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-410 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-410 -j ACCEPT +-A limit-411 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-412 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-412 -m limit --limit 1/second -j LOG +-A limit-412 -j ACCEPT +-A limit-413 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-413 -m limit --limit 1/second -j LOG +-A limit-414 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-414 -j TEE --gateway 10.0.0.1 +-A limit-414 -j TEE --gateway 10.0.0.2 +-A limit-414 -j ACCEPT +-A limit-415 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-415 -j TEE --gateway 10.0.0.1 +-A limit-415 -j TEE --gateway 10.0.0.2 +-A limit-416 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-236 -A limit-416 -j ACCEPT --A limit-417 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 --A limit-418 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 --A limit-418 -m limit --limit 1/second -j LOG +-A limit-417 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-418 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-418 -m limit --limit 12/minute -j ULOG -A limit-418 -j ACCEPT --A limit-419 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 --A limit-419 -m limit --limit 1/second -j LOG --A limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-419 -m limit --limit 12/minute -j ULOG +-A limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-42 -m limit --limit 1/second -j LOG --A limit-42 -j ACCEPT --A limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 --A limit-420 -j ACCEPT --A limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-205 --A limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-206 --A limit-422 -m limit --limit 12/minute -j ULOG --A limit-422 -j ACCEPT --A limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-207 --A limit-423 -m limit --limit 12/minute -j ULOG --A limit-424 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 --A limit-424 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-425 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 --A limit-425 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-426 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 --A limit-426 -m limit --limit 1/second -j LOG --A limit-426 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-427 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-211 --A limit-427 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-428 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-212 --A limit-428 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-429 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-213 --A limit-429 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-43 -m limit --limit 1/second -j LOG --A limit-430 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-214 --A limit-430 -m limit --limit 12/minute -j ULOG --A limit-430 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-431 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-215 --A limit-431 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-432 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-422 -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-424 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-424 -j TEE --gateway 10.0.0.1 +-A limit-424 -j TEE --gateway 10.0.0.2 +-A limit-424 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-426 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-426 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-427 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-427 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-428 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-428 -m limit --limit 12/minute -j ULOG +-A limit-428 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-429 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-429 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-430 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-430 -j ACCEPT +-A limit-431 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-432 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-432 -m limit --limit 1/second -j LOG -A limit-432 -j ACCEPT --A limit-433 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-217 --A limit-434 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-218 --A limit-434 -m limit --limit 1/second -j LOG +-A limit-433 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-434 -j TEE --gateway 10.0.0.1 +-A limit-434 -j TEE --gateway 10.0.0.2 -A limit-434 -j ACCEPT --A limit-435 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-219 --A limit-435 -m limit --limit 1/second -j LOG --A limit-436 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-435 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-435 -j TEE --gateway 10.0.0.1 +-A limit-435 -j TEE --gateway 10.0.0.2 +-A limit-436 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-256 -A limit-436 -j ACCEPT --A limit-437 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-221 --A limit-438 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-437 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-438 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-258 -A limit-438 -m limit --limit 12/minute -j ULOG -A limit-438 -j ACCEPT --A limit-439 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A limit-439 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 -A limit-439 -m limit --limit 12/minute -j ULOG --A limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-44 -j ACCEPT --A limit-440 -m recent --name limit-440 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-440 -m recent --name limit-440 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-441 -m recent --name limit-441 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-441 -m recent --name limit-441 --rsource --mask 255.255.255.255 --set --A limit-442 -m recent --name limit-442 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-44 -j TEE --gateway 10.0.0.1 +-A limit-44 -j TEE --gateway 10.0.0.2 +-A limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-440 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-440 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-441 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-441 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-442 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-262 -A limit-442 -m limit --limit 1/second -j LOG --A limit-442 -m recent --name limit-442 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-443 -m recent --name limit-443 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-443 -m recent --name limit-443 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-444 -m recent --name limit-444 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-444 -m recent --name limit-444 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-445 -m recent --name limit-445 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-445 -m recent --name limit-445 --rsource --mask 255.255.255.255 --set --A limit-446 -m recent --name limit-446 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-446 -m limit --limit 12/minute -j ULOG --A limit-446 -m recent --name limit-446 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-447 -m recent --name limit-447 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-447 -m recent --name limit-447 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-448 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-448 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-449 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-449 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-450 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-450 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-451 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-452 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-452 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-453 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-453 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-454 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-454 -m limit --limit 12/minute -j ULOG --A limit-454 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-455 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-455 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-456 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-442 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-443 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-443 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-444 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-264 +-A limit-444 -j TEE --gateway 10.0.0.1 +-A limit-444 -j TEE --gateway 10.0.0.2 +-A limit-444 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-446 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-446 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-447 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-447 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-448 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-448 -m limit --limit 12/minute -j ULOG +-A limit-448 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-449 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-449 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-450 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-450 -j ACCEPT +-A limit-451 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-452 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-452 -m limit --limit 1/second -j LOG +-A limit-452 -j ACCEPT +-A limit-453 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-453 -m limit --limit 1/second -j LOG +-A limit-454 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-454 -j TEE --gateway 10.0.0.1 +-A limit-454 -j TEE --gateway 10.0.0.2 +-A limit-454 -j ACCEPT +-A limit-455 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-455 -j TEE --gateway 10.0.0.1 +-A limit-455 -j TEE --gateway 10.0.0.2 +-A limit-456 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 -A limit-456 -j ACCEPT --A limit-457 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-458 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-458 -m limit --limit 1/second -j LOG +-A limit-457 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-458 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-458 -m limit --limit 12/minute -j ULOG -A limit-458 -j ACCEPT --A limit-459 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-459 -m limit --limit 1/second -j LOG --A limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-46 -m limit --limit 12/minute -j ULOG --A limit-46 -j ACCEPT --A limit-460 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-460 -j ACCEPT --A limit-461 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-462 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-462 -m limit --limit 12/minute -j ULOG --A limit-462 -j ACCEPT --A limit-463 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-463 -m limit --limit 12/minute -j ULOG --A limit-464 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-464 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-465 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-465 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-466 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-466 -m limit --limit 1/second -j LOG --A limit-466 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-467 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-467 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-468 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-468 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-469 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-469 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-47 -m limit --limit 12/minute -j ULOG --A limit-470 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-470 -m limit --limit 12/minute -j ULOG --A limit-470 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-471 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-472 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-472 -j ACCEPT --A limit-473 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-474 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-474 -m limit --limit 1/second -j LOG --A limit-474 -j ACCEPT --A limit-475 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-475 -m limit --limit 1/second -j LOG --A limit-476 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-476 -j ACCEPT --A limit-477 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-478 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-459 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-459 -m limit --limit 12/minute -j ULOG +-A limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-460 -m recent --name limit-460 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-460 -m recent --name limit-460 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-461 -m recent --name limit-461 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-461 -m recent --name limit-461 --rsource --mask 255.255.255.255 --set +-A limit-462 -m recent --name limit-462 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-462 -m limit --limit 1/second -j LOG +-A limit-462 -m recent --name limit-462 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-463 -m recent --name limit-463 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-463 -m recent --name limit-463 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-464 -j TEE --gateway 10.0.0.1 +-A limit-464 -j TEE --gateway 10.0.0.2 +-A limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --set +-A limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-468 -m limit --limit 12/minute -j ULOG +-A limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-472 -m limit --limit 1/second -j LOG +-A limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-474 -j TEE --gateway 10.0.0.1 +-A limit-474 -j TEE --gateway 10.0.0.2 +-A limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-477 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-477 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-478 -m limit --limit 12/minute -j ULOG --A limit-478 -j ACCEPT --A limit-479 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-479 -m limit --limit 12/minute -j ULOG --A limit-48 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-48 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-480 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-480 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-481 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-481 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-482 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-48 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-48 -m limit --limit 12/minute -j ULOG +-A limit-48 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-480 -j ACCEPT +-A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-482 -m limit --limit 1/second -j LOG --A limit-482 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-483 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-483 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-484 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-484 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-485 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-485 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-486 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-486 -m limit --limit 12/minute -j ULOG --A limit-486 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-487 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-487 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-488 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-482 -j ACCEPT +-A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-483 -m limit --limit 1/second -j LOG +-A limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-484 -j TEE --gateway 10.0.0.1 +-A limit-484 -j TEE --gateway 10.0.0.2 +-A limit-484 -j ACCEPT +-A limit-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-485 -j TEE --gateway 10.0.0.1 +-A limit-485 -j TEE --gateway 10.0.0.2 +-A limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-486 -j ACCEPT +-A limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-488 -m limit --limit 12/minute -j ULOG -A limit-488 -j ACCEPT --A limit-489 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-49 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-49 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-490 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-490 -m limit --limit 1/second -j LOG --A limit-490 -j ACCEPT --A limit-491 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-491 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-492 -j ACCEPT --A limit-493 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-494 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-494 -m limit --limit 12/minute -j ULOG --A limit-494 -j ACCEPT --A limit-495 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-495 -m limit --limit 12/minute -j ULOG --A limit-496 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-496 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-497 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-497 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-498 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-498 -m limit --limit 1/second -j LOG --A limit-498 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-499 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-499 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-489 -m limit --limit 12/minute -j ULOG +-A limit-49 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-49 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-492 -m limit --limit 1/second -j LOG +-A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-494 -j TEE --gateway 10.0.0.1 +-A limit-494 -j TEE --gateway 10.0.0.2 +-A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-498 -m limit --limit 12/minute -j ULOG +-A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 --A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set --A limit-50 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-500 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-500 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-501 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-501 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-502 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-502 -m limit --limit 12/minute -j ULOG --A limit-502 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-503 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-503 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-504 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-50 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-50 -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-500 -j ACCEPT +-A limit-501 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-502 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-502 -m limit --limit 1/second -j LOG +-A limit-502 -j ACCEPT +-A limit-503 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-503 -m limit --limit 1/second -j LOG +-A limit-504 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-504 -j TEE --gateway 10.0.0.1 +-A limit-504 -j TEE --gateway 10.0.0.2 -A limit-504 -j ACCEPT --A limit-505 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-506 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-506 -m limit --limit 1/second -j LOG +-A limit-505 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-505 -j TEE --gateway 10.0.0.1 +-A limit-505 -j TEE --gateway 10.0.0.2 +-A limit-506 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-506 -j ACCEPT --A limit-507 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-507 -m limit --limit 1/second -j LOG --A limit-508 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-507 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-508 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-508 -m limit --limit 12/minute -j ULOG -A limit-508 -j ACCEPT --A limit-509 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-51 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-51 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-510 -m limit --limit 12/minute -j ULOG --A limit-510 -j ACCEPT --A limit-511 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-511 -m limit --limit 12/minute -j ULOG --A limit-512 -m recent --name limit-512 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-224 --A limit-512 -m recent --name limit-512 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-513 -m recent --name limit-513 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-225 --A limit-513 -m recent --name limit-513 --rsource --mask 255.255.255.255 --set --A limit-514 -m recent --name limit-514 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-226 --A limit-514 -m limit --limit 1/second -j LOG --A limit-514 -m recent --name limit-514 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-515 -m recent --name limit-515 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-227 --A limit-515 -m recent --name limit-515 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-516 -m recent --name limit-516 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-228 --A limit-516 -m recent --name limit-516 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-517 -m recent --name limit-517 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-229 --A limit-517 -m recent --name limit-517 --rsource --mask 255.255.255.255 --set --A limit-518 -m recent --name limit-518 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-230 +-A limit-509 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-509 -m limit --limit 12/minute -j ULOG +-A limit-51 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-512 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-514 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-514 -j TEE --gateway 10.0.0.1 +-A limit-514 -j TEE --gateway 10.0.0.2 +-A limit-514 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-516 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-516 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-517 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-517 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-518 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-518 -m limit --limit 12/minute -j ULOG --A limit-518 -m recent --name limit-518 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-519 -m recent --name limit-519 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-231 --A limit-519 -m recent --name limit-519 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-52 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-52 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-520 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-232 --A limit-520 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-521 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-233 --A limit-521 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-522 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-234 +-A limit-518 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-519 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-519 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-52 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-52 -m limit --limit 1/second -j LOG +-A limit-52 -j ACCEPT +-A limit-520 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-520 -j ACCEPT +-A limit-521 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-522 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-522 -m limit --limit 1/second -j LOG --A limit-522 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-523 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-235 --A limit-523 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-524 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-236 --A limit-524 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-525 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-237 --A limit-525 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-526 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-238 --A limit-526 -m limit --limit 12/minute -j ULOG --A limit-526 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-527 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-239 --A limit-527 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-528 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-240 +-A limit-522 -j ACCEPT +-A limit-523 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-524 -j TEE --gateway 10.0.0.1 +-A limit-524 -j TEE --gateway 10.0.0.2 +-A limit-524 -j ACCEPT +-A limit-525 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-525 -j TEE --gateway 10.0.0.1 +-A limit-525 -j TEE --gateway 10.0.0.2 +-A limit-526 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-526 -j ACCEPT +-A limit-527 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-528 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-528 -m limit --limit 12/minute -j ULOG -A limit-528 -j ACCEPT --A limit-529 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-241 --A limit-53 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-53 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-530 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-242 --A limit-530 -m limit --limit 1/second -j LOG --A limit-530 -j ACCEPT --A limit-531 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-243 --A limit-531 -m limit --limit 1/second -j LOG --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-244 --A limit-532 -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-245 --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-246 --A limit-534 -m limit --limit 12/minute -j ULOG --A limit-534 -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-247 --A limit-535 -m limit --limit 12/minute -j ULOG --A limit-536 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-248 --A limit-536 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-537 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-249 --A limit-537 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-538 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-250 --A limit-538 -m limit --limit 1/second -j LOG --A limit-538 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-539 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-251 --A limit-539 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-54 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-54 -m limit --limit 12/minute -j ULOG --A limit-54 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-540 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-252 --A limit-540 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-541 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-253 --A limit-541 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-254 --A limit-542 -m limit --limit 12/minute -j ULOG --A limit-542 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-255 --A limit-543 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-256 +-A limit-529 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-529 -m limit --limit 12/minute -j ULOG +-A limit-53 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-53 -m limit --limit 1/second -j LOG +-A limit-530 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-530 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-531 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-531 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-532 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-532 -m limit --limit 1/second -j LOG +-A limit-532 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-533 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-533 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-534 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-534 -j TEE --gateway 10.0.0.1 +-A limit-534 -j TEE --gateway 10.0.0.2 +-A limit-534 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-536 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-536 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-537 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-537 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-538 -m limit --limit 12/minute -j ULOG +-A limit-538 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-539 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-54 -j TEE --gateway 10.0.0.1 +-A limit-54 -j TEE --gateway 10.0.0.2 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-540 -j ACCEPT +-A limit-541 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-542 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-542 -m limit --limit 1/second -j LOG +-A limit-542 -j ACCEPT +-A limit-543 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-543 -m limit --limit 1/second -j LOG +-A limit-544 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-544 -j TEE --gateway 10.0.0.1 +-A limit-544 -j TEE --gateway 10.0.0.2 -A limit-544 -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-257 --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-258 --A limit-546 -m limit --limit 1/second -j LOG +-A limit-545 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-545 -j TEE --gateway 10.0.0.1 +-A limit-545 -j TEE --gateway 10.0.0.2 +-A limit-546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-546 -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-259 --A limit-547 -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-260 +-A limit-547 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-548 -m limit --limit 12/minute -j ULOG -A limit-548 -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-261 --A limit-55 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-55 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-262 --A limit-550 -m limit --limit 12/minute -j ULOG --A limit-550 -j ACCEPT --A limit-551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-263 --A limit-551 -m limit --limit 12/minute -j ULOG --A limit-552 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-264 --A limit-552 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-553 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-265 --A limit-553 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-554 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-266 --A limit-554 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-555 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-267 --A limit-555 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-268 --A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-269 --A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-270 +-A limit-549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-549 -m limit --limit 12/minute -j ULOG +-A limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-55 -j TEE --gateway 10.0.0.1 +-A limit-55 -j TEE --gateway 10.0.0.2 +-A limit-550 -m recent --name limit-550 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-280 +-A limit-550 -m recent --name limit-550 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-551 -m recent --name limit-551 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-281 +-A limit-551 -m recent --name limit-551 --rsource --mask 255.255.255.255 --set +-A limit-552 -m recent --name limit-552 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-282 +-A limit-552 -m limit --limit 1/second -j LOG +-A limit-552 -m recent --name limit-552 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-553 -m recent --name limit-553 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-283 +-A limit-553 -m recent --name limit-553 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-284 +-A limit-554 -j TEE --gateway 10.0.0.1 +-A limit-554 -j TEE --gateway 10.0.0.2 +-A limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-285 +-A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-286 +-A limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-287 +-A limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --set +-A limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-288 -A limit-558 -m limit --limit 12/minute -j ULOG --A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-271 --A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-56 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-272 --A limit-560 -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-273 --A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-274 +-A limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 -A limit-562 -m limit --limit 1/second -j LOG --A limit-562 -j ACCEPT --A limit-563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-275 --A limit-563 -m limit --limit 1/second -j LOG --A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-276 --A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-277 --A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-278 --A limit-566 -m limit --limit 12/minute -j ULOG --A limit-566 -j ACCEPT --A limit-567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-279 --A limit-567 -m limit --limit 12/minute -j ULOG --A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-280 --A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-281 --A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-57 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-282 --A limit-570 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-283 --A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-284 --A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-285 --A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-286 --A limit-574 -m limit --limit 12/minute -j ULOG --A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-575 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-287 --A limit-575 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-288 +-A limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-564 -j TEE --gateway 10.0.0.1 +-A limit-564 -j TEE --gateway 10.0.0.2 +-A limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-567 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-568 -m limit --limit 12/minute -j ULOG +-A limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-570 -j ACCEPT +-A limit-571 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-572 -m limit --limit 1/second -j LOG +-A limit-572 -j ACCEPT +-A limit-573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-573 -m limit --limit 1/second -j LOG +-A limit-574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-574 -j TEE --gateway 10.0.0.1 +-A limit-574 -j TEE --gateway 10.0.0.2 +-A limit-574 -j ACCEPT +-A limit-575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-575 -j TEE --gateway 10.0.0.1 +-A limit-575 -j TEE --gateway 10.0.0.2 +-A limit-576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 -A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-289 --A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-290 --A limit-578 -m limit --limit 1/second -j LOG +-A limit-577 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-578 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-578 -m limit --limit 12/minute -j ULOG -A limit-578 -j ACCEPT --A limit-579 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-291 --A limit-579 -m limit --limit 1/second -j LOG --A limit-58 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-58 -m limit --limit 1/second -j LOG +-A limit-579 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-579 -m limit --limit 12/minute -j ULOG +-A limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-58 -m limit --limit 12/minute -j ULOG -A limit-58 -j ACCEPT --A limit-580 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-292 --A limit-580 -j ACCEPT --A limit-581 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-293 --A limit-582 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-294 --A limit-582 -m limit --limit 12/minute -j ULOG --A limit-582 -j ACCEPT --A limit-583 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-295 --A limit-583 -m limit --limit 12/minute -j ULOG --A limit-584 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-584 -j ACCEPT --A limit-584 -m limit --limit 1/second -j LOG --A limit-584 -j DROP --A limit-585 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-585 -j RETURN --A limit-585 -m limit --limit 1/second -j LOG --A limit-585 -j DROP --A limit-586 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-586 -j logaccept-0 --A limit-586 -m limit --limit 1/second -j LOG --A limit-586 -j DROP --A limit-587 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-587 -j ACCEPT --A limit-587 -m limit --limit 1/second -j LOG --A limit-587 -j DROP --A limit-588 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-588 -j logaccept-1 --A limit-588 -m limit --limit 1/second -j LOG --A limit-588 -j DROP --A limit-589 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-589 -j ACCEPT --A limit-589 -j DROP --A limit-59 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-59 -m limit --limit 1/second -j LOG --A limit-590 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-590 -j RETURN --A limit-590 -j DROP --A limit-591 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-591 -j logaccept-2 --A limit-591 -j DROP --A limit-592 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-592 -j ACCEPT --A limit-592 -j DROP --A limit-593 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-593 -j logaccept-3 --A limit-593 -j DROP --A limit-594 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-594 -j ACCEPT --A limit-594 -m limit --limit 1/second -j LOG --A limit-594 -j DROP --A limit-595 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-595 -j RETURN --A limit-595 -m limit --limit 1/second -j LOG --A limit-595 -j DROP --A limit-596 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-596 -j logaccept-4 --A limit-596 -m limit --limit 1/second -j LOG --A limit-596 -j DROP --A limit-597 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-597 -j ACCEPT --A limit-597 -m limit --limit 1/second -j LOG --A limit-597 -j DROP --A limit-598 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-598 -j logaccept-5 --A limit-598 -m limit --limit 1/second -j LOG --A limit-598 -j DROP --A limit-599 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-599 -j ACCEPT --A limit-599 -j DROP +-A limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-582 -m limit --limit 1/second -j LOG +-A limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-583 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-584 -j TEE --gateway 10.0.0.1 +-A limit-584 -j TEE --gateway 10.0.0.2 +-A limit-584 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-586 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-586 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-587 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-587 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-588 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-318 +-A limit-588 -m limit --limit 12/minute -j ULOG +-A limit-588 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-589 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-589 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-59 -m limit --limit 12/minute -j ULOG +-A limit-590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-590 -j ACCEPT +-A limit-591 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-592 -m limit --limit 1/second -j LOG +-A limit-592 -j ACCEPT +-A limit-593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-593 -m limit --limit 1/second -j LOG +-A limit-594 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-594 -j TEE --gateway 10.0.0.1 +-A limit-594 -j TEE --gateway 10.0.0.2 +-A limit-594 -j ACCEPT +-A limit-595 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-595 -j TEE --gateway 10.0.0.1 +-A limit-595 -j TEE --gateway 10.0.0.2 +-A limit-596 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-596 -j ACCEPT +-A limit-597 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-598 -m limit --limit 12/minute -j ULOG +-A limit-598 -j ACCEPT +-A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-599 -m limit --limit 12/minute -j ULOG -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 --A limit-6 -m limit --limit 12/minute -j ULOG -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-60 -j ACCEPT --A limit-600 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-600 -j RETURN --A limit-600 -j DROP --A limit-601 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-601 -j logaccept-6 --A limit-601 -j DROP --A limit-602 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-602 -j ACCEPT --A limit-602 -j DROP --A limit-603 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-603 -j logaccept-7 --A limit-603 -j DROP --A limit-604 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-604 -j ACCEPT --A limit-604 -m limit --limit 12/minute -j ULOG --A limit-604 -j DROP --A limit-605 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-605 -j RETURN --A limit-605 -m limit --limit 12/minute -j ULOG --A limit-605 -j DROP --A limit-606 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-606 -j logaccept-8 --A limit-606 -m limit --limit 12/minute -j ULOG --A limit-606 -j DROP --A limit-607 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-607 -j ACCEPT --A limit-607 -m limit --limit 12/minute -j ULOG --A limit-607 -j DROP --A limit-608 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-608 -j logaccept-9 +-A limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-330 +-A limit-600 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-601 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-602 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-602 -m limit --limit 1/second -j LOG +-A limit-602 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-603 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-603 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-604 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-604 -j TEE --gateway 10.0.0.1 +-A limit-604 -j TEE --gateway 10.0.0.2 +-A limit-604 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-606 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-606 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-607 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-607 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-608 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-338 -A limit-608 -m limit --limit 12/minute -j ULOG --A limit-608 -j DROP --A limit-609 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-609 -j ACCEPT --A limit-609 -j DROP --A limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-610 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-610 -j RETURN --A limit-610 -j DROP --A limit-611 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-611 -j logaccept-10 --A limit-611 -j DROP --A limit-612 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-612 -j ACCEPT --A limit-612 -j DROP --A limit-613 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-613 -j logaccept-11 --A limit-613 -j DROP --A limit-614 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-614 -j ACCEPT --A limit-614 -m limit --limit 1/second -j LOG --A limit-614 -j DROP --A limit-615 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-615 -j RETURN --A limit-615 -m limit --limit 1/second -j LOG --A limit-615 -j DROP --A limit-616 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-616 -j logaccept-12 --A limit-616 -m limit --limit 1/second -j LOG --A limit-616 -j DROP --A limit-617 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-617 -j ACCEPT --A limit-617 -m limit --limit 1/second -j LOG --A limit-617 -j DROP --A limit-618 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-618 -j logaccept-13 --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j DROP --A limit-619 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-619 -j ACCEPT --A limit-619 -j DROP --A limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-62 -m limit --limit 12/minute -j ULOG --A limit-62 -j ACCEPT --A limit-620 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-620 -j RETURN --A limit-620 -j DROP --A limit-621 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-621 -j logaccept-14 --A limit-621 -j DROP --A limit-622 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-622 -j ACCEPT --A limit-622 -j DROP --A limit-623 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-623 -j logaccept-15 --A limit-623 -j DROP --A limit-624 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-624 -j ACCEPT --A limit-624 -m limit --limit 12/minute -j ULOG --A limit-624 -j DROP --A limit-625 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-625 -j RETURN --A limit-625 -m limit --limit 12/minute -j ULOG --A limit-625 -j DROP --A limit-626 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-626 -j logaccept-16 --A limit-626 -m limit --limit 12/minute -j ULOG --A limit-626 -j DROP --A limit-627 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-627 -j ACCEPT --A limit-627 -m limit --limit 12/minute -j ULOG --A limit-627 -j DROP --A limit-628 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-628 -j logaccept-17 +-A limit-608 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-609 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-609 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-610 -j ACCEPT +-A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A limit-612 -m limit --limit 1/second -j LOG +-A limit-612 -j ACCEPT +-A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-343 +-A limit-613 -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-344 +-A limit-614 -j TEE --gateway 10.0.0.1 +-A limit-614 -j TEE --gateway 10.0.0.2 +-A limit-614 -j ACCEPT +-A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-345 +-A limit-615 -j TEE --gateway 10.0.0.1 +-A limit-615 -j TEE --gateway 10.0.0.2 +-A limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-346 +-A limit-616 -j ACCEPT +-A limit-617 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-347 +-A limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-348 +-A limit-618 -m limit --limit 12/minute -j ULOG +-A limit-618 -j ACCEPT +-A limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-349 +-A limit-619 -m limit --limit 12/minute -j ULOG +-A limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-620 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-350 +-A limit-620 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-621 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-351 +-A limit-621 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-352 +-A limit-622 -m limit --limit 1/second -j LOG +-A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-353 +-A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-354 +-A limit-624 -j TEE --gateway 10.0.0.1 +-A limit-624 -j TEE --gateway 10.0.0.2 +-A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-355 +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-356 +-A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-357 +-A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-358 -A limit-628 -m limit --limit 12/minute -j ULOG --A limit-628 -j DROP --A limit-629 -m recent --name limit-629 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-296 --A limit-629 -m recent --name limit-629 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-63 -m limit --limit 12/minute -j ULOG --A limit-630 -m recent --name limit-630 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-297 --A limit-630 -m recent --name limit-630 --rsource --mask 255.255.255.255 --set --A limit-631 -m recent --name limit-631 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-298 --A limit-631 -m limit --limit 1/second -j LOG --A limit-631 -m recent --name limit-631 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-632 -m recent --name limit-632 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-299 --A limit-632 -m recent --name limit-632 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-633 -m recent --name limit-633 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-300 --A limit-633 -m recent --name limit-633 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-301 --A limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set --A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-302 --A limit-635 -m limit --limit 12/minute -j ULOG --A limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-303 --A limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set --A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-639 -m limit --limit 1/second -j LOG --A limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-64 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-64 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --set --A limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-643 -m limit --limit 12/minute -j ULOG --A limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-647 -m limit --limit 1/second -j LOG --A limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-65 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-65 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-651 -m limit --limit 12/minute -j ULOG --A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-653 -j ACCEPT --A limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-655 -m limit --limit 1/second -j LOG --A limit-655 -j ACCEPT --A limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-656 -m limit --limit 1/second -j LOG --A limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-657 -j ACCEPT --A limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-659 -m limit --limit 12/minute -j ULOG --A limit-659 -j ACCEPT --A limit-66 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m limit --limit 1/second -j LOG --A limit-66 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-660 -m limit --limit 12/minute -j ULOG --A limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-359 +-A limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-360 +-A limit-630 -j ACCEPT +-A limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-361 +-A limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-362 +-A limit-632 -m limit --limit 1/second -j LOG +-A limit-632 -j ACCEPT +-A limit-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-363 +-A limit-633 -m limit --limit 1/second -j LOG +-A limit-634 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-364 +-A limit-634 -j TEE --gateway 10.0.0.1 +-A limit-634 -j TEE --gateway 10.0.0.2 +-A limit-634 -j ACCEPT +-A limit-635 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-365 +-A limit-635 -j TEE --gateway 10.0.0.1 +-A limit-635 -j TEE --gateway 10.0.0.2 +-A limit-636 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-366 +-A limit-636 -j ACCEPT +-A limit-637 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-367 +-A limit-638 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-368 +-A limit-638 -m limit --limit 12/minute -j ULOG +-A limit-638 -j ACCEPT +-A limit-639 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-369 +-A limit-639 -m limit --limit 12/minute -j ULOG +-A limit-64 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -j TEE --gateway 10.0.0.1 +-A limit-64 -j TEE --gateway 10.0.0.2 +-A limit-64 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-370 +-A limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-371 +-A limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --set +-A limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-372 +-A limit-642 -m limit --limit 1/second -j LOG +-A limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-373 +-A limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-374 +-A limit-644 -j TEE --gateway 10.0.0.1 +-A limit-644 -j TEE --gateway 10.0.0.2 +-A limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-375 +-A limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-646 -m recent --name limit-646 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-376 +-A limit-646 -m recent --name limit-646 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-647 -m recent --name limit-647 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-377 +-A limit-647 -m recent --name limit-647 --rsource --mask 255.255.255.255 --set +-A limit-648 -m recent --name limit-648 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-378 +-A limit-648 -m limit --limit 12/minute -j ULOG +-A limit-648 -m recent --name limit-648 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-649 -m recent --name limit-649 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-379 +-A limit-649 -m recent --name limit-649 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-380 +-A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-381 +-A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-382 +-A limit-652 -m limit --limit 1/second -j LOG +-A limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-383 +-A limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-654 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-384 +-A limit-654 -j TEE --gateway 10.0.0.1 +-A limit-654 -j TEE --gateway 10.0.0.2 +-A limit-654 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-385 +-A limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-386 +-A limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-387 +-A limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-658 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-388 +-A limit-658 -m limit --limit 12/minute -j ULOG +-A limit-658 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-389 +-A limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-66 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-390 +-A limit-660 -j ACCEPT +-A limit-661 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-391 +-A limit-662 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-392 +-A limit-662 -m limit --limit 1/second -j LOG +-A limit-662 -j ACCEPT +-A limit-663 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-393 -A limit-663 -m limit --limit 1/second -j LOG --A limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-664 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-664 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-665 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-665 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-666 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-666 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-667 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-667 -m limit --limit 12/minute -j ULOG --A limit-667 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-668 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-668 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-669 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-669 -j ACCEPT --A limit-67 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-671 -m limit --limit 1/second -j LOG --A limit-671 -j ACCEPT --A limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-664 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-394 +-A limit-664 -j TEE --gateway 10.0.0.1 +-A limit-664 -j TEE --gateway 10.0.0.2 +-A limit-664 -j ACCEPT +-A limit-665 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-395 +-A limit-665 -j TEE --gateway 10.0.0.1 +-A limit-665 -j TEE --gateway 10.0.0.2 +-A limit-666 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-396 +-A limit-666 -j ACCEPT +-A limit-667 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-397 +-A limit-668 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-398 +-A limit-668 -m limit --limit 12/minute -j ULOG +-A limit-668 -j ACCEPT +-A limit-669 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-399 +-A limit-669 -m limit --limit 12/minute -j ULOG +-A limit-67 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-670 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-400 +-A limit-670 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-401 +-A limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-402 -A limit-672 -m limit --limit 1/second -j LOG --A limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-673 -j ACCEPT --A limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-675 -m limit --limit 12/minute -j ULOG --A limit-675 -j ACCEPT --A limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-676 -m limit --limit 12/minute -j ULOG --A limit-677 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-677 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-678 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-678 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-679 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-679 -m limit --limit 1/second -j LOG --A limit-679 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-68 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-68 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-680 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-680 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-681 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-681 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-682 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-682 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-683 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-683 -m limit --limit 12/minute -j ULOG --A limit-683 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-684 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-684 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-685 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-685 -j ACCEPT --A limit-687 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-687 -m limit --limit 1/second -j LOG --A limit-687 -j ACCEPT --A limit-688 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-688 -m limit --limit 1/second -j LOG --A limit-689 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-689 -j ACCEPT --A limit-69 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-691 -m limit --limit 12/minute -j ULOG --A limit-691 -j ACCEPT --A limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-692 -m limit --limit 12/minute -j ULOG --A limit-693 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-693 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-694 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-694 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-695 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-695 -m limit --limit 1/second -j LOG --A limit-695 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-696 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-696 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-697 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-697 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-698 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-698 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-699 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-699 -m limit --limit 12/minute -j ULOG --A limit-699 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-674 -j TEE --gateway 10.0.0.1 +-A limit-674 -j TEE --gateway 10.0.0.2 +-A limit-674 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-677 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-677 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-678 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-678 -m limit --limit 12/minute -j ULOG +-A limit-678 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-679 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-679 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-68 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-68 -m limit --limit 12/minute -j ULOG +-A limit-68 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-680 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-680 -j ACCEPT +-A limit-681 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-682 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-682 -m limit --limit 1/second -j LOG +-A limit-682 -j ACCEPT +-A limit-683 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-683 -m limit --limit 1/second -j LOG +-A limit-684 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-684 -j TEE --gateway 10.0.0.1 +-A limit-684 -j TEE --gateway 10.0.0.2 +-A limit-684 -j ACCEPT +-A limit-685 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A limit-685 -j TEE --gateway 10.0.0.1 +-A limit-685 -j TEE --gateway 10.0.0.2 +-A limit-686 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A limit-686 -j ACCEPT +-A limit-687 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-688 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-688 -m limit --limit 12/minute -j ULOG +-A limit-688 -j ACCEPT +-A limit-689 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A limit-689 -m limit --limit 12/minute -j ULOG +-A limit-69 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-69 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-690 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-420 +-A limit-690 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-693 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-693 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-694 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-694 -j TEE --gateway 10.0.0.1 +-A limit-694 -j TEE --gateway 10.0.0.2 +-A limit-694 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-696 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-696 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-697 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-427 +-A limit-697 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-698 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-428 +-A limit-698 -m limit --limit 12/minute -j ULOG +-A limit-698 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-699 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-429 +-A limit-699 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 --A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-70 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m limit --limit 12/minute -j ULOG --A limit-70 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-700 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-700 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-701 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-701 -j ACCEPT --A limit-703 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set +-A limit-70 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-70 -j ACCEPT +-A limit-700 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-700 -j ACCEPT +-A limit-701 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A limit-702 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-432 +-A limit-702 -m limit --limit 1/second -j LOG +-A limit-702 -j ACCEPT +-A limit-703 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-433 -A limit-703 -m limit --limit 1/second -j LOG --A limit-703 -j ACCEPT --A limit-704 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-704 -m limit --limit 1/second -j LOG --A limit-705 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-705 -j ACCEPT --A limit-707 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-707 -m limit --limit 12/minute -j ULOG --A limit-707 -j ACCEPT --A limit-708 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-704 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-704 -j TEE --gateway 10.0.0.1 +-A limit-704 -j TEE --gateway 10.0.0.2 +-A limit-704 -j ACCEPT +-A limit-705 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-705 -j TEE --gateway 10.0.0.1 +-A limit-705 -j TEE --gateway 10.0.0.2 +-A limit-706 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-706 -j ACCEPT +-A limit-707 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-708 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-438 -A limit-708 -m limit --limit 12/minute -j ULOG --A limit-709 -m recent --name limit-709 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-304 --A limit-709 -m recent --name limit-709 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-71 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-71 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-710 -m recent --name limit-710 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-305 --A limit-710 -m recent --name limit-710 --rsource --mask 255.255.255.255 --set --A limit-711 -m recent --name limit-711 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-306 --A limit-711 -m limit --limit 1/second -j LOG --A limit-711 -m recent --name limit-711 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-712 -m recent --name limit-712 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-307 --A limit-712 -m recent --name limit-712 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-713 -m recent --name limit-713 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-308 --A limit-713 -m recent --name limit-713 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-714 -m recent --name limit-714 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-309 --A limit-714 -m recent --name limit-714 --rsource --mask 255.255.255.255 --set --A limit-715 -m recent --name limit-715 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-310 --A limit-715 -m limit --limit 12/minute -j ULOG --A limit-715 -m recent --name limit-715 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-311 --A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-717 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-312 --A limit-717 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-718 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-313 --A limit-718 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-719 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-314 --A limit-719 -m limit --limit 1/second -j LOG --A limit-719 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-72 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-708 -j ACCEPT +-A limit-709 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A limit-709 -m limit --limit 12/minute -j ULOG +-A limit-71 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-710 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-440 +-A limit-710 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-711 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-711 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-712 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-712 -m limit --limit 1/second -j LOG +-A limit-712 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-713 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-443 +-A limit-713 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-714 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-444 +-A limit-714 -j TEE --gateway 10.0.0.1 +-A limit-714 -j TEE --gateway 10.0.0.2 +-A limit-714 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-716 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-716 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-717 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-717 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-718 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-718 -m limit --limit 12/minute -j ULOG +-A limit-718 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-719 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-719 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-72 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -m limit --limit 1/second -j LOG -A limit-72 -j ACCEPT --A limit-720 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-315 --A limit-720 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-721 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-316 --A limit-721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-722 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-317 --A limit-722 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-723 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-318 --A limit-723 -m limit --limit 12/minute -j ULOG --A limit-723 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-724 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-319 --A limit-724 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-725 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-320 --A limit-725 -j ACCEPT --A limit-727 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-322 --A limit-727 -m limit --limit 1/second -j LOG --A limit-727 -j ACCEPT --A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-323 --A limit-728 -m limit --limit 1/second -j LOG --A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-324 --A limit-729 -j ACCEPT --A limit-73 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-326 --A limit-731 -m limit --limit 12/minute -j ULOG --A limit-731 -j ACCEPT --A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-327 --A limit-732 -m limit --limit 12/minute -j ULOG --A limit-733 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-328 --A limit-733 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-734 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-329 --A limit-734 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-735 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-330 --A limit-735 -m limit --limit 1/second -j LOG --A limit-735 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-736 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-331 --A limit-736 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-737 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-332 --A limit-737 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-738 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-333 --A limit-738 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-739 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-334 --A limit-739 -m limit --limit 12/minute -j ULOG --A limit-739 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-74 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-74 -m limit --limit 1/second -j LOG +-A limit-720 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-720 -j ACCEPT +-A limit-721 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A limit-722 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A limit-722 -m limit --limit 1/second -j LOG +-A limit-722 -j ACCEPT +-A limit-723 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-723 -m limit --limit 1/second -j LOG +-A limit-724 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-724 -j TEE --gateway 10.0.0.1 +-A limit-724 -j TEE --gateway 10.0.0.2 +-A limit-724 -j ACCEPT +-A limit-725 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A limit-725 -j TEE --gateway 10.0.0.1 +-A limit-725 -j TEE --gateway 10.0.0.2 +-A limit-726 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-456 +-A limit-726 -j ACCEPT +-A limit-727 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-457 +-A limit-728 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-458 +-A limit-728 -m limit --limit 12/minute -j ULOG +-A limit-728 -j ACCEPT +-A limit-729 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-459 +-A limit-729 -m limit --limit 12/minute -j ULOG +-A limit-73 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-73 -m limit --limit 1/second -j LOG +-A limit-730 -m recent --name limit-730 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-730 -m recent --name limit-730 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-731 -m recent --name limit-731 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-731 -m recent --name limit-731 --rsource --mask 255.255.255.255 --set +-A limit-732 -m recent --name limit-732 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-732 -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name limit-732 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-733 -m recent --name limit-733 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-733 -m recent --name limit-733 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-734 -m recent --name limit-734 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-734 -j TEE --gateway 10.0.0.1 +-A limit-734 -j TEE --gateway 10.0.0.2 +-A limit-734 -m recent --name limit-734 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-736 -m recent --name limit-736 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-736 -m recent --name limit-736 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-737 -m recent --name limit-737 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-737 -m recent --name limit-737 --rsource --mask 255.255.255.255 --set +-A limit-738 -m recent --name limit-738 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-738 -m limit --limit 12/minute -j ULOG +-A limit-738 -m recent --name limit-738 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-739 -m recent --name limit-739 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-739 -m recent --name limit-739 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-74 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-74 -j TEE --gateway 10.0.0.1 +-A limit-74 -j TEE --gateway 10.0.0.2 -A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-335 --A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-336 --A limit-741 -j ACCEPT --A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-338 --A limit-743 -m limit --limit 1/second -j LOG --A limit-743 -j ACCEPT --A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-339 --A limit-744 -m limit --limit 1/second -j LOG --A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-340 --A limit-745 -j ACCEPT --A limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-342 --A limit-747 -m limit --limit 12/minute -j ULOG --A limit-747 -j ACCEPT --A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-343 +-A limit-740 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-740 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-741 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-741 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-742 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-742 -m limit --limit 1/second -j LOG +-A limit-742 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-743 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-743 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-744 -j TEE --gateway 10.0.0.1 +-A limit-744 -j TEE --gateway 10.0.0.2 +-A limit-744 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-746 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-746 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-747 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-747 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-748 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-748 -m limit --limit 12/minute -j ULOG --A limit-749 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-344 --A limit-749 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-75 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-345 --A limit-750 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-751 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-346 --A limit-751 -m limit --limit 1/second -j LOG --A limit-751 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-347 --A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-348 --A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-349 --A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-350 --A limit-755 -m limit --limit 12/minute -j ULOG --A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-351 --A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-352 --A limit-757 -j ACCEPT --A limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-354 --A limit-759 -m limit --limit 1/second -j LOG --A limit-759 -j ACCEPT --A limit-76 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-748 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-749 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-749 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-75 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -j TEE --gateway 10.0.0.1 +-A limit-75 -j TEE --gateway 10.0.0.2 +-A limit-750 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-750 -j ACCEPT +-A limit-751 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-752 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-752 -m limit --limit 1/second -j LOG +-A limit-752 -j ACCEPT +-A limit-753 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-753 -m limit --limit 1/second -j LOG +-A limit-754 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-754 -j TEE --gateway 10.0.0.1 +-A limit-754 -j TEE --gateway 10.0.0.2 +-A limit-754 -j ACCEPT +-A limit-755 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-755 -j TEE --gateway 10.0.0.1 +-A limit-755 -j TEE --gateway 10.0.0.2 +-A limit-756 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-756 -j ACCEPT +-A limit-757 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-758 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-758 -m limit --limit 12/minute -j ULOG +-A limit-758 -j ACCEPT +-A limit-759 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-759 -m limit --limit 12/minute -j ULOG +-A limit-76 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-355 --A limit-760 -m limit --limit 1/second -j LOG --A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-356 --A limit-761 -j ACCEPT --A limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-358 --A limit-763 -m limit --limit 12/minute -j ULOG --A limit-763 -j ACCEPT --A limit-764 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-359 --A limit-764 -m limit --limit 12/minute -j ULOG --A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-360 --A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-361 --A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-362 --A limit-767 -m limit --limit 1/second -j LOG --A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-363 --A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-364 --A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-77 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-365 --A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-366 --A limit-771 -m limit --limit 12/minute -j ULOG --A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-367 --A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-368 --A limit-773 -j ACCEPT --A limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-370 --A limit-775 -m limit --limit 1/second -j LOG --A limit-775 -j ACCEPT --A limit-776 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-371 --A limit-776 -m limit --limit 1/second -j LOG --A limit-777 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-372 --A limit-777 -j ACCEPT --A limit-779 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 +-A limit-760 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-760 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-761 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-761 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-762 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-762 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-763 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-763 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-764 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-764 -j TEE --gateway 10.0.0.1 +-A limit-764 -j TEE --gateway 10.0.0.2 +-A limit-764 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-766 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-766 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-767 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-767 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-768 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-768 -m limit --limit 12/minute -j ULOG +-A limit-768 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-769 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-769 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-77 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-770 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-770 -j ACCEPT +-A limit-771 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-772 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-772 -m limit --limit 1/second -j LOG +-A limit-772 -j ACCEPT +-A limit-773 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-774 -j TEE --gateway 10.0.0.1 +-A limit-774 -j TEE --gateway 10.0.0.2 +-A limit-774 -j ACCEPT +-A limit-775 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-775 -j TEE --gateway 10.0.0.1 +-A limit-775 -j TEE --gateway 10.0.0.2 +-A limit-776 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-776 -j ACCEPT +-A limit-777 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-778 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-778 -m limit --limit 12/minute -j ULOG +-A limit-778 -j ACCEPT +-A limit-779 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-779 -m limit --limit 12/minute -j ULOG --A limit-779 -j ACCEPT --A limit-78 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-78 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-78 -m limit --limit 12/minute -j ULOG -A limit-78 -j ACCEPT --A limit-780 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 --A limit-780 -m limit --limit 12/minute -j ULOG --A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-782 -m recent --name limit-782 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-782 -m recent --name limit-782 --rsource --mask 255.255.255.255 --set --A limit-783 -m recent --name limit-783 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-783 -m limit --limit 1/second -j LOG --A limit-783 -m recent --name limit-783 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-784 -m recent --name limit-784 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-784 -m recent --name limit-784 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-785 -m recent --name limit-785 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-785 -m recent --name limit-785 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-786 -m recent --name limit-786 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-786 -m recent --name limit-786 --rsource --mask 255.255.255.255 --set --A limit-787 -m recent --name limit-787 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-787 -m limit --limit 12/minute -j ULOG --A limit-787 -m recent --name limit-787 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-788 -m recent --name limit-788 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-788 -m recent --name limit-788 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-79 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-780 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-781 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-781 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-782 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-782 -m limit --limit 1/second -j LOG +-A limit-782 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-783 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-783 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-784 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-784 -j TEE --gateway 10.0.0.1 +-A limit-784 -j TEE --gateway 10.0.0.2 +-A limit-784 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-786 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-786 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-787 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-787 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-788 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-788 -m limit --limit 12/minute -j ULOG +-A limit-788 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-789 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-789 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-79 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-79 -m limit --limit 12/minute -j ULOG --A limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-791 -m limit --limit 1/second -j LOG --A limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-794 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-795 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-795 -m limit --limit 12/minute -j ULOG --A limit-795 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-796 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-796 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-797 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-797 -j ACCEPT --A limit-799 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-799 -m limit --limit 1/second -j LOG --A limit-799 -j ACCEPT --A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-790 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-790 -j ACCEPT +-A limit-791 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-792 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-792 -m limit --limit 1/second -j LOG +-A limit-792 -j ACCEPT +-A limit-793 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-793 -m limit --limit 1/second -j LOG +-A limit-794 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-794 -j TEE --gateway 10.0.0.1 +-A limit-794 -j TEE --gateway 10.0.0.2 +-A limit-794 -j ACCEPT +-A limit-795 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-795 -j TEE --gateway 10.0.0.1 +-A limit-795 -j TEE --gateway 10.0.0.2 +-A limit-796 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-796 -j ACCEPT +-A limit-797 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-798 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-798 -m limit --limit 12/minute -j ULOG +-A limit-798 -j ACCEPT +-A limit-799 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-799 -m limit --limit 12/minute -j ULOG +-A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 +-A limit-8 -m limit --limit 12/minute -j ULOG -A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-80 -m recent --name limit-80 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 --A limit-80 -m recent --name limit-80 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-800 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-800 -m limit --limit 1/second -j LOG --A limit-801 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-801 -j ACCEPT --A limit-803 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -m limit --limit 12/minute -j ULOG --A limit-803 -j ACCEPT --A limit-804 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-804 -m limit --limit 12/minute -j ULOG --A limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-806 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-807 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-807 -m limit --limit 1/second -j LOG --A limit-807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-808 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-808 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-809 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-809 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-81 -m recent --name limit-81 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 --A limit-81 -m recent --name limit-81 --rsource --mask 255.255.255.255 --set --A limit-810 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-810 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-811 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-811 -m limit --limit 12/minute -j ULOG --A limit-811 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-812 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-812 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-813 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-813 -j ACCEPT --A limit-815 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m limit --limit 1/second -j LOG --A limit-815 -j ACCEPT --A limit-816 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-816 -m limit --limit 1/second -j LOG --A limit-817 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-817 -j ACCEPT --A limit-819 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-800 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-800 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-801 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-801 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-802 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-802 -m limit --limit 1/second -j LOG +-A limit-802 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-803 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-803 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-804 -j TEE --gateway 10.0.0.1 +-A limit-804 -j TEE --gateway 10.0.0.2 +-A limit-804 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-806 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-806 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-807 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-807 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-808 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-808 -m limit --limit 12/minute -j ULOG +-A limit-808 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-809 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-809 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-81 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-810 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-810 -j ACCEPT +-A limit-811 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-812 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-812 -m limit --limit 1/second -j LOG +-A limit-812 -j ACCEPT +-A limit-813 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-813 -m limit --limit 1/second -j LOG +-A limit-814 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-814 -j TEE --gateway 10.0.0.1 +-A limit-814 -j TEE --gateway 10.0.0.2 +-A limit-814 -j ACCEPT +-A limit-815 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-815 -j TEE --gateway 10.0.0.1 +-A limit-815 -j TEE --gateway 10.0.0.2 +-A limit-816 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-816 -j ACCEPT +-A limit-817 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-818 -m limit --limit 12/minute -j ULOG +-A limit-818 -j ACCEPT +-A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-819 -m limit --limit 12/minute -j ULOG --A limit-819 -j ACCEPT --A limit-82 -m recent --name limit-82 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-82 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-82 -m limit --limit 1/second -j LOG --A limit-82 -m recent --name limit-82 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-820 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-820 -m limit --limit 12/minute -j ULOG --A limit-821 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-821 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-822 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-822 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-823 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-823 -m limit --limit 1/second -j LOG --A limit-823 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-824 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-824 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-825 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-825 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-826 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-826 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-827 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-827 -m limit --limit 12/minute -j ULOG --A limit-827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-828 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-828 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-829 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-829 -j ACCEPT --A limit-83 -m recent --name limit-83 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 --A limit-83 -m recent --name limit-83 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-831 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-831 -m limit --limit 1/second -j LOG --A limit-831 -j ACCEPT --A limit-832 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-820 -m recent --name limit-820 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-460 +-A limit-820 -m recent --name limit-820 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-821 -m recent --name limit-821 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-461 +-A limit-821 -m recent --name limit-821 --rsource --mask 255.255.255.255 --set +-A limit-822 -m recent --name limit-822 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-462 +-A limit-822 -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name limit-822 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-823 -m recent --name limit-823 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-463 +-A limit-823 -m recent --name limit-823 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-824 -m recent --name limit-824 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-464 +-A limit-824 -j TEE --gateway 10.0.0.1 +-A limit-824 -j TEE --gateway 10.0.0.2 +-A limit-824 -m recent --name limit-824 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-465 +-A limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-826 -m recent --name limit-826 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-466 +-A limit-826 -m recent --name limit-826 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-827 -m recent --name limit-827 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-467 +-A limit-827 -m recent --name limit-827 --rsource --mask 255.255.255.255 --set +-A limit-828 -m recent --name limit-828 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-468 +-A limit-828 -m limit --limit 12/minute -j ULOG +-A limit-828 -m recent --name limit-828 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-829 -m recent --name limit-829 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-469 +-A limit-829 -m recent --name limit-829 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-83 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-830 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-470 +-A limit-830 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-831 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-471 +-A limit-831 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-832 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-472 -A limit-832 -m limit --limit 1/second -j LOG --A limit-833 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-833 -j ACCEPT --A limit-835 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-835 -m limit --limit 12/minute -j ULOG --A limit-835 -j ACCEPT --A limit-836 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-836 -m limit --limit 12/minute -j ULOG --A limit-837 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-837 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-838 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-838 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-839 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-839 -m limit --limit 1/second -j LOG --A limit-839 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-84 -m recent --name limit-84 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 --A limit-84 -m recent --name limit-84 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-840 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-840 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-841 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-841 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-842 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-842 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-843 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-843 -m limit --limit 12/minute -j ULOG --A limit-843 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-844 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP --A limit-844 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-845 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -j ACCEPT --A limit-847 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-847 -m limit --limit 1/second -j LOG --A limit-847 -j ACCEPT --A limit-848 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-848 -m limit --limit 1/second -j LOG --A limit-849 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-849 -j ACCEPT --A limit-85 -m recent --name limit-85 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 --A limit-85 -m recent --name limit-85 --rsource --mask 255.255.255.255 --set --A limit-851 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-851 -m limit --limit 12/minute -j ULOG --A limit-851 -j ACCEPT --A limit-852 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-852 -m limit --limit 12/minute -j ULOG --A limit-853 -m recent --name limit-853 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-376 --A limit-853 -m recent --name limit-853 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-854 -m recent --name limit-854 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-377 --A limit-854 -m recent --name limit-854 --rsource --mask 255.255.255.255 --set --A limit-855 -m recent --name limit-855 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-378 --A limit-855 -m limit --limit 1/second -j LOG --A limit-855 -m recent --name limit-855 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-856 -m recent --name limit-856 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-379 --A limit-856 -m recent --name limit-856 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-857 -m recent --name limit-857 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-380 --A limit-857 -m recent --name limit-857 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-858 -m recent --name limit-858 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-381 --A limit-858 -m recent --name limit-858 --rsource --mask 255.255.255.255 --set --A limit-859 -m recent --name limit-859 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-382 --A limit-859 -m limit --limit 12/minute -j ULOG --A limit-859 -m recent --name limit-859 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-86 -m recent --name limit-86 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 --A limit-86 -m limit --limit 12/minute -j ULOG --A limit-86 -m recent --name limit-86 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-860 -m recent --name limit-860 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-383 --A limit-860 -m recent --name limit-860 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-861 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-384 --A limit-861 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-862 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-385 --A limit-862 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-863 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-386 +-A limit-832 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-833 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-473 +-A limit-833 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-474 +-A limit-834 -j TEE --gateway 10.0.0.1 +-A limit-834 -j TEE --gateway 10.0.0.2 +-A limit-834 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-475 +-A limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-476 +-A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-477 +-A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-478 +-A limit-838 -m limit --limit 12/minute -j ULOG +-A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-479 +-A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-84 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j TEE --gateway 10.0.0.1 +-A limit-84 -j TEE --gateway 10.0.0.2 +-A limit-84 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-480 +-A limit-840 -j ACCEPT +-A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-481 +-A limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-482 +-A limit-842 -m limit --limit 1/second -j LOG +-A limit-842 -j ACCEPT +-A limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-483 +-A limit-843 -m limit --limit 1/second -j LOG +-A limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-484 +-A limit-844 -j TEE --gateway 10.0.0.1 +-A limit-844 -j TEE --gateway 10.0.0.2 +-A limit-844 -j ACCEPT +-A limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-485 +-A limit-845 -j TEE --gateway 10.0.0.1 +-A limit-845 -j TEE --gateway 10.0.0.2 +-A limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-486 +-A limit-846 -j ACCEPT +-A limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-487 +-A limit-848 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-488 +-A limit-848 -m limit --limit 12/minute -j ULOG +-A limit-848 -j ACCEPT +-A limit-849 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-489 +-A limit-849 -m limit --limit 12/minute -j ULOG +-A limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-490 +-A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-491 +-A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-492 +-A limit-852 -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-493 +-A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-494 +-A limit-854 -j TEE --gateway 10.0.0.1 +-A limit-854 -j TEE --gateway 10.0.0.2 +-A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-495 +-A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-496 +-A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-497 +-A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --set +-A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-498 +-A limit-858 -m limit --limit 12/minute -j ULOG +-A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT +-A limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-499 +-A limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-86 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-860 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-500 +-A limit-860 -j ACCEPT +-A limit-861 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-501 +-A limit-862 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-502 +-A limit-862 -m limit --limit 1/second -j LOG +-A limit-862 -j ACCEPT +-A limit-863 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-503 -A limit-863 -m limit --limit 1/second -j LOG --A limit-863 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-864 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-387 --A limit-864 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-865 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-388 --A limit-865 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-866 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-389 --A limit-866 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-867 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-390 --A limit-867 -m limit --limit 12/minute -j ULOG --A limit-867 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-868 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-391 --A limit-868 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-869 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-392 --A limit-869 -j ACCEPT --A limit-87 -m recent --name limit-87 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 --A limit-87 -m recent --name limit-87 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-871 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-394 --A limit-871 -m limit --limit 1/second -j LOG --A limit-871 -j ACCEPT --A limit-872 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-864 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-504 +-A limit-864 -j TEE --gateway 10.0.0.1 +-A limit-864 -j TEE --gateway 10.0.0.2 +-A limit-864 -j ACCEPT +-A limit-865 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-505 +-A limit-865 -j TEE --gateway 10.0.0.1 +-A limit-865 -j TEE --gateway 10.0.0.2 +-A limit-866 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-506 +-A limit-866 -j ACCEPT +-A limit-867 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-507 +-A limit-868 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-508 +-A limit-868 -m limit --limit 12/minute -j ULOG +-A limit-868 -j ACCEPT +-A limit-869 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-509 +-A limit-869 -m limit --limit 12/minute -j ULOG +-A limit-87 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-510 +-A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-511 +-A limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-872 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-512 -A limit-872 -m limit --limit 1/second -j LOG --A limit-873 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-396 --A limit-873 -j ACCEPT --A limit-875 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 --A limit-875 -m limit --limit 12/minute -j ULOG --A limit-875 -j ACCEPT --A limit-876 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 --A limit-876 -m limit --limit 12/minute -j ULOG --A limit-877 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-400 --A limit-877 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-878 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-401 --A limit-878 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-879 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-402 --A limit-879 -m limit --limit 1/second -j LOG --A limit-879 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-88 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 --A limit-88 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-880 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-403 --A limit-880 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-881 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-404 --A limit-881 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-882 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-405 --A limit-882 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-883 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-406 --A limit-883 -m limit --limit 12/minute -j ULOG --A limit-883 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-884 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-407 --A limit-884 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-885 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-408 --A limit-885 -j ACCEPT --A limit-887 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-410 --A limit-887 -m limit --limit 1/second -j LOG --A limit-887 -j ACCEPT --A limit-888 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-411 --A limit-888 -m limit --limit 1/second -j LOG --A limit-889 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-412 --A limit-889 -j ACCEPT --A limit-89 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 --A limit-89 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-891 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-414 --A limit-891 -m limit --limit 12/minute -j ULOG --A limit-891 -j ACCEPT --A limit-892 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-415 --A limit-892 -m limit --limit 12/minute -j ULOG --A limit-893 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-416 --A limit-893 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-894 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-417 --A limit-894 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-895 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-418 --A limit-895 -m limit --limit 1/second -j LOG --A limit-895 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-896 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-419 --A limit-896 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-897 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-420 --A limit-897 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-898 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-421 --A limit-898 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-899 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-422 --A limit-899 -m limit --limit 12/minute -j ULOG --A limit-899 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP --A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set --A limit-90 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 --A limit-90 -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-900 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-423 --A limit-900 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-901 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-424 --A limit-901 -j ACCEPT --A limit-903 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-426 +-A limit-872 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-873 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-513 +-A limit-873 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-874 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-514 +-A limit-874 -j TEE --gateway 10.0.0.1 +-A limit-874 -j TEE --gateway 10.0.0.2 +-A limit-874 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-515 +-A limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-876 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-516 +-A limit-876 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-877 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-517 +-A limit-877 -m recent --name user:C --rsource --mask 254.0.0.0 --set +-A limit-878 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-518 +-A limit-878 -m limit --limit 12/minute -j ULOG +-A limit-878 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT +-A limit-879 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-519 +-A limit-879 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-88 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-88 -m limit --limit 12/minute -j ULOG +-A limit-88 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-880 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-520 +-A limit-880 -j ACCEPT +-A limit-881 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-521 +-A limit-882 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-522 +-A limit-882 -m limit --limit 1/second -j LOG +-A limit-882 -j ACCEPT +-A limit-883 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-523 +-A limit-883 -m limit --limit 1/second -j LOG +-A limit-884 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-524 +-A limit-884 -j TEE --gateway 10.0.0.1 +-A limit-884 -j TEE --gateway 10.0.0.2 +-A limit-884 -j ACCEPT +-A limit-885 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-525 +-A limit-885 -j TEE --gateway 10.0.0.1 +-A limit-885 -j TEE --gateway 10.0.0.2 +-A limit-886 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-526 +-A limit-886 -j ACCEPT +-A limit-887 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-527 +-A limit-888 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-528 +-A limit-888 -m limit --limit 12/minute -j ULOG +-A limit-888 -j ACCEPT +-A limit-889 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-529 +-A limit-889 -m limit --limit 12/minute -j ULOG +-A limit-89 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP +-A limit-89 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-890 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-530 +-A limit-890 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-891 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-531 +-A limit-891 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-892 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-532 +-A limit-892 -m limit --limit 1/second -j LOG +-A limit-892 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-893 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-533 +-A limit-893 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-534 +-A limit-894 -j TEE --gateway 10.0.0.1 +-A limit-894 -j TEE --gateway 10.0.0.2 +-A limit-894 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-535 +-A limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 +-A limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 +-A limit-896 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-536 +-A limit-896 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-897 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-537 +-A limit-897 -m recent --name user:C --rdest --mask 254.0.0.0 --set +-A limit-898 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-538 +-A limit-898 -m limit --limit 12/minute -j ULOG +-A limit-898 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT +-A limit-899 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-539 +-A limit-899 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG +-A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-90 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-90 -j ACCEPT +-A limit-900 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-540 +-A limit-900 -j ACCEPT +-A limit-901 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-541 +-A limit-902 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-542 +-A limit-902 -m limit --limit 1/second -j LOG +-A limit-902 -j ACCEPT +-A limit-903 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-543 -A limit-903 -m limit --limit 1/second -j LOG --A limit-903 -j ACCEPT --A limit-904 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-427 --A limit-904 -m limit --limit 1/second -j LOG --A limit-905 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-428 --A limit-905 -j ACCEPT --A limit-907 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-430 --A limit-907 -m limit --limit 12/minute -j ULOG --A limit-907 -j ACCEPT --A limit-908 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-431 +-A limit-904 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-544 +-A limit-904 -j TEE --gateway 10.0.0.1 +-A limit-904 -j TEE --gateway 10.0.0.2 +-A limit-904 -j ACCEPT +-A limit-905 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-545 +-A limit-905 -j TEE --gateway 10.0.0.1 +-A limit-905 -j TEE --gateway 10.0.0.2 +-A limit-906 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-546 +-A limit-906 -j ACCEPT +-A limit-907 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-547 +-A limit-908 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-548 -A limit-908 -m limit --limit 12/minute -j ULOG --A limit-909 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-432 --A limit-909 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-91 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-19 --A limit-91 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-910 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-433 --A limit-910 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-911 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-434 +-A limit-908 -j ACCEPT +-A limit-909 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-549 +-A limit-909 -m limit --limit 12/minute -j ULOG +-A limit-91 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-910 -j ACCEPT +-A limit-910 -m limit --limit 1/second -j LOG +-A limit-910 -j DROP +-A limit-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-911 -j RETURN -A limit-911 -m limit --limit 1/second -j LOG --A limit-911 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-912 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-435 --A limit-912 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-913 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-436 --A limit-913 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-914 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-437 --A limit-914 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-915 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-438 --A limit-915 -m limit --limit 12/minute -j ULOG --A limit-915 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-916 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-439 --A limit-916 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-917 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-440 --A limit-917 -j ACCEPT --A limit-919 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-442 --A limit-919 -m limit --limit 1/second -j LOG --A limit-919 -j ACCEPT --A limit-92 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-20 --A limit-92 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-920 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-443 --A limit-920 -m limit --limit 1/second -j LOG --A limit-921 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-444 --A limit-921 -j ACCEPT --A limit-923 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-446 --A limit-923 -m limit --limit 12/minute -j ULOG --A limit-923 -j ACCEPT --A limit-924 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-447 --A limit-924 -m limit --limit 12/minute -j ULOG --A limit-925 -m recent --name limit-925 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-925 -m recent --name limit-925 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-926 -m recent --name limit-926 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-926 -m recent --name limit-926 --rsource --mask 255.255.255.255 --set --A limit-927 -m recent --name limit-927 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP +-A limit-911 -j DROP +-A limit-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-912 -j logaccept-0 +-A limit-912 -m limit --limit 1/second -j LOG +-A limit-912 -j DROP +-A limit-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-913 -j logaccept-1 +-A limit-913 -m limit --limit 1/second -j LOG +-A limit-913 -j DROP +-A limit-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-914 -j ACCEPT +-A limit-914 -m limit --limit 1/second -j LOG +-A limit-914 -j DROP +-A limit-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-915 -j logaccept-2 +-A limit-915 -m limit --limit 1/second -j LOG +-A limit-915 -j DROP +-A limit-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-916 -j ACCEPT +-A limit-916 -j DROP +-A limit-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-917 -j RETURN +-A limit-917 -j DROP +-A limit-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-918 -j logaccept-3 +-A limit-918 -j DROP +-A limit-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-919 -j logaccept-4 +-A limit-919 -j DROP +-A limit-92 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-92 -m limit --limit 1/second -j LOG +-A limit-92 -j ACCEPT +-A limit-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-920 -j ACCEPT +-A limit-920 -j DROP +-A limit-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-921 -j logaccept-5 +-A limit-921 -j DROP +-A limit-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-922 -j ACCEPT +-A limit-922 -m limit --limit 1/second -j LOG +-A limit-922 -j DROP +-A limit-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-923 -j RETURN +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-923 -j DROP +-A limit-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-924 -j logaccept-6 +-A limit-924 -m limit --limit 1/second -j LOG +-A limit-924 -j DROP +-A limit-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-925 -j logaccept-7 +-A limit-925 -m limit --limit 1/second -j LOG +-A limit-925 -j DROP +-A limit-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-926 -j ACCEPT +-A limit-926 -m limit --limit 1/second -j LOG +-A limit-926 -j DROP +-A limit-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-927 -j logaccept-8 -A limit-927 -m limit --limit 1/second -j LOG --A limit-927 -m recent --name limit-927 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-928 -m recent --name limit-928 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-928 -m recent --name limit-928 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-929 -m recent --name limit-929 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-929 -m recent --name limit-929 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-93 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-21 --A limit-93 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-930 -m recent --name limit-930 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-930 -m recent --name limit-930 --rsource --mask 255.255.255.255 --set --A limit-931 -m recent --name limit-931 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-931 -m limit --limit 12/minute -j ULOG --A limit-931 -m recent --name limit-931 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-932 -m recent --name limit-932 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-932 -m recent --name limit-932 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-933 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-933 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-934 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-934 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-935 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-935 -m limit --limit 1/second -j LOG --A limit-935 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-936 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-936 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-937 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-937 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-938 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-938 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-939 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-939 -m limit --limit 12/minute -j ULOG --A limit-939 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-94 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-22 --A limit-94 -m limit --limit 12/minute -j ULOG --A limit-94 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-940 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-940 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-941 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-941 -j ACCEPT --A limit-943 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-943 -m limit --limit 1/second -j LOG --A limit-943 -j ACCEPT --A limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-944 -m limit --limit 1/second -j LOG --A limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-945 -j ACCEPT --A limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-947 -m limit --limit 12/minute -j ULOG --A limit-947 -j ACCEPT --A limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-948 -m limit --limit 12/minute -j ULOG --A limit-949 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-949 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-95 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-23 --A limit-95 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-950 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-950 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-951 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-951 -m limit --limit 1/second -j LOG --A limit-951 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-952 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-952 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-953 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-953 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-954 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-954 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-955 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-955 -m limit --limit 12/minute -j ULOG --A limit-955 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP --A limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG --A limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-957 -j ACCEPT --A limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-959 -m limit --limit 1/second -j LOG --A limit-959 -j ACCEPT --A limit-96 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-927 -j DROP +-A limit-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-928 -j ACCEPT +-A limit-928 -j TEE --gateway 10.0.0.1 +-A limit-928 -j TEE --gateway 10.0.0.2 +-A limit-928 -j DROP +-A limit-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-929 -j RETURN +-A limit-929 -j TEE --gateway 10.0.0.1 +-A limit-929 -j TEE --gateway 10.0.0.2 +-A limit-929 -j DROP +-A limit-93 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m limit --limit 1/second -j LOG +-A limit-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-930 -j logaccept-9 +-A limit-930 -j TEE --gateway 10.0.0.1 +-A limit-930 -j TEE --gateway 10.0.0.2 +-A limit-930 -j DROP +-A limit-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-931 -j logaccept-10 +-A limit-931 -j TEE --gateway 10.0.0.1 +-A limit-931 -j TEE --gateway 10.0.0.2 +-A limit-931 -j DROP +-A limit-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-932 -j ACCEPT +-A limit-932 -j TEE --gateway 10.0.0.1 +-A limit-932 -j TEE --gateway 10.0.0.2 +-A limit-932 -j DROP +-A limit-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-933 -j logaccept-11 +-A limit-933 -j TEE --gateway 10.0.0.1 +-A limit-933 -j TEE --gateway 10.0.0.2 +-A limit-933 -j DROP +-A limit-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-934 -j ACCEPT +-A limit-934 -j DROP +-A limit-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-935 -j RETURN +-A limit-935 -j DROP +-A limit-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-936 -j logaccept-12 +-A limit-936 -j DROP +-A limit-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-937 -j logaccept-13 +-A limit-937 -j DROP +-A limit-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-938 -j ACCEPT +-A limit-938 -j DROP +-A limit-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-939 -j logaccept-14 +-A limit-939 -j DROP +-A limit-94 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-94 -j TEE --gateway 10.0.0.1 +-A limit-94 -j TEE --gateway 10.0.0.2 +-A limit-94 -j ACCEPT +-A limit-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-940 -j ACCEPT +-A limit-940 -m limit --limit 12/minute -j ULOG +-A limit-940 -j DROP +-A limit-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-941 -j RETURN +-A limit-941 -m limit --limit 12/minute -j ULOG +-A limit-941 -j DROP +-A limit-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-942 -j logaccept-15 +-A limit-942 -m limit --limit 12/minute -j ULOG +-A limit-942 -j DROP +-A limit-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-943 -j logaccept-16 +-A limit-943 -m limit --limit 12/minute -j ULOG +-A limit-943 -j DROP +-A limit-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-944 -j ACCEPT +-A limit-944 -m limit --limit 12/minute -j ULOG +-A limit-944 -j DROP +-A limit-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-945 -j logaccept-17 +-A limit-945 -m limit --limit 12/minute -j ULOG +-A limit-945 -j DROP +-A limit-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-946 -j ACCEPT +-A limit-946 -j DROP +-A limit-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-947 -j RETURN +-A limit-947 -j DROP +-A limit-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-948 -j logaccept-18 +-A limit-948 -j DROP +-A limit-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-949 -j logaccept-19 +-A limit-949 -j DROP +-A limit-95 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-95 -j TEE --gateway 10.0.0.1 +-A limit-95 -j TEE --gateway 10.0.0.2 +-A limit-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-950 -j ACCEPT +-A limit-950 -j DROP +-A limit-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-951 -j logaccept-20 +-A limit-951 -j DROP +-A limit-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-952 -j ACCEPT +-A limit-952 -m limit --limit 1/second -j LOG +-A limit-952 -j DROP +-A limit-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-953 -j RETURN +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-953 -j DROP +-A limit-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-954 -j logaccept-21 +-A limit-954 -m limit --limit 1/second -j LOG +-A limit-954 -j DROP +-A limit-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-955 -j logaccept-22 +-A limit-955 -m limit --limit 1/second -j LOG +-A limit-955 -j DROP +-A limit-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-956 -j ACCEPT +-A limit-956 -m limit --limit 1/second -j LOG +-A limit-956 -j DROP +-A limit-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-957 -j logaccept-23 +-A limit-957 -m limit --limit 1/second -j LOG +-A limit-957 -j DROP +-A limit-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-958 -j ACCEPT +-A limit-958 -j TEE --gateway 10.0.0.1 +-A limit-958 -j TEE --gateway 10.0.0.2 +-A limit-958 -j DROP +-A limit-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-959 -j RETURN +-A limit-959 -j TEE --gateway 10.0.0.1 +-A limit-959 -j TEE --gateway 10.0.0.2 +-A limit-959 -j DROP +-A limit-96 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-96 -j ACCEPT --A limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-960 -m limit --limit 1/second -j LOG --A limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-961 -j ACCEPT --A limit-963 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-963 -m limit --limit 12/minute -j ULOG --A limit-963 -j ACCEPT --A limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-964 -m limit --limit 12/minute -j ULOG --A limit-965 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-965 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-966 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-966 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-967 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-967 -m limit --limit 1/second -j LOG --A limit-967 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-97 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-25 --A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP +-A limit-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-960 -j logaccept-24 +-A limit-960 -j TEE --gateway 10.0.0.1 +-A limit-960 -j TEE --gateway 10.0.0.2 +-A limit-960 -j DROP +-A limit-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-961 -j logaccept-25 +-A limit-961 -j TEE --gateway 10.0.0.1 +-A limit-961 -j TEE --gateway 10.0.0.2 +-A limit-961 -j DROP +-A limit-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-962 -j ACCEPT +-A limit-962 -j TEE --gateway 10.0.0.1 +-A limit-962 -j TEE --gateway 10.0.0.2 +-A limit-962 -j DROP +-A limit-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-963 -j logaccept-26 +-A limit-963 -j TEE --gateway 10.0.0.1 +-A limit-963 -j TEE --gateway 10.0.0.2 +-A limit-963 -j DROP +-A limit-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-964 -j ACCEPT +-A limit-964 -j DROP +-A limit-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-965 -j RETURN +-A limit-965 -j DROP +-A limit-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-966 -j logaccept-27 +-A limit-966 -j DROP +-A limit-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-967 -j logaccept-28 +-A limit-967 -j DROP +-A limit-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-968 -j ACCEPT +-A limit-968 -j DROP +-A limit-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-969 -j logaccept-29 +-A limit-969 -j DROP +-A limit-97 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-970 -j ACCEPT +-A limit-970 -m limit --limit 12/minute -j ULOG +-A limit-970 -j DROP +-A limit-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-971 -j RETURN -A limit-971 -m limit --limit 12/minute -j ULOG --A limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-973 -j ACCEPT --A limit-975 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-975 -m limit --limit 1/second -j LOG --A limit-975 -j ACCEPT --A limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-976 -m limit --limit 1/second -j LOG --A limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -j ACCEPT --A limit-979 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-979 -m limit --limit 12/minute -j ULOG --A limit-979 -j ACCEPT --A limit-98 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-26 --A limit-98 -m limit --limit 1/second -j LOG +-A limit-971 -j DROP +-A limit-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-972 -j logaccept-30 +-A limit-972 -m limit --limit 12/minute -j ULOG +-A limit-972 -j DROP +-A limit-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-973 -j logaccept-31 +-A limit-973 -m limit --limit 12/minute -j ULOG +-A limit-973 -j DROP +-A limit-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-974 -j ACCEPT +-A limit-974 -m limit --limit 12/minute -j ULOG +-A limit-974 -j DROP +-A limit-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-975 -j logaccept-32 +-A limit-975 -m limit --limit 12/minute -j ULOG +-A limit-975 -j DROP +-A limit-976 -m recent --name limit-976 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-550 +-A limit-976 -m recent --name limit-976 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-977 -m recent --name limit-977 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-551 +-A limit-977 -m recent --name limit-977 --rsource --mask 255.255.255.255 --set +-A limit-978 -m recent --name limit-978 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-552 +-A limit-978 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name limit-978 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-979 -m recent --name limit-979 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-553 +-A limit-979 -m recent --name limit-979 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-98 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-98 -m limit --limit 12/minute -j ULOG -A limit-98 -j ACCEPT --A limit-980 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-980 -m limit --limit 12/minute -j ULOG --A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-983 -m limit --limit 1/second -j LOG --A limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-987 -m limit --limit 12/minute -j ULOG --A limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP --A limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG --A limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -j ACCEPT --A limit-99 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-27 --A limit-99 -m limit --limit 1/second -j LOG --A limit-991 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-991 -m limit --limit 1/second -j LOG --A limit-991 -j ACCEPT --A limit-992 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-992 -m limit --limit 1/second -j LOG --A limit-993 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-993 -j ACCEPT --A limit-995 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-995 -m limit --limit 12/minute -j ULOG --A limit-995 -j ACCEPT --A limit-996 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-996 -m limit --limit 12/minute -j ULOG --A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-448 --A limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-998 -m recent --name limit-998 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-449 --A limit-998 -m recent --name limit-998 --rsource --mask 255.255.255.255 --set --A limit-999 -m recent --name limit-999 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-450 --A limit-999 -m limit --limit 1/second -j LOG --A limit-999 -m recent --name limit-999 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-980 -m recent --name limit-980 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-554 +-A limit-980 -j TEE --gateway 10.0.0.1 +-A limit-980 -j TEE --gateway 10.0.0.2 +-A limit-980 -m recent --name limit-980 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-555 +-A limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-982 -m recent --name limit-982 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-556 +-A limit-982 -m recent --name limit-982 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-983 -m recent --name limit-983 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-557 +-A limit-983 -m recent --name limit-983 --rsource --mask 255.255.255.255 --set +-A limit-984 -m recent --name limit-984 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-558 +-A limit-984 -m limit --limit 12/minute -j ULOG +-A limit-984 -m recent --name limit-984 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-985 -m recent --name limit-985 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-559 +-A limit-985 -m recent --name limit-985 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-986 -m recent --name limit-986 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-986 -m recent --name limit-986 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-987 -m recent --name limit-987 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-987 -m recent --name limit-987 --rsource --mask 255.255.255.255 --set +-A limit-988 -m recent --name limit-988 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-988 -m limit --limit 1/second -j LOG +-A limit-988 -m recent --name limit-988 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-989 -m recent --name limit-989 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-989 -m recent --name limit-989 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-99 -m limit --limit 12/minute -j ULOG +-A limit-990 -m recent --name limit-990 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-990 -j TEE --gateway 10.0.0.1 +-A limit-990 -j TEE --gateway 10.0.0.2 +-A limit-990 -m recent --name limit-990 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 +-A limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-994 -m limit --limit 12/minute -j ULOG +-A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG +-A limit-996 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-996 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-997 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-997 -m recent --name user:A --rsource --mask 255.255.255.255 --set +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-998 -m limit --limit 1/second -j LOG +-A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 12/minute -j ULOG +-A logaccept-1 -j TEE --gateway 10.0.0.1 +-A logaccept-1 -j TEE --gateway 10.0.0.2 -A logaccept-1 -j ACCEPT --A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j TEE --gateway 10.0.0.1 +-A logaccept-10 -j TEE --gateway 10.0.0.2 -A logaccept-10 -j ACCEPT +-A logaccept-100 -j LOG +-A logaccept-100 -j ACCEPT +-A logaccept-101 -j TEE --gateway 10.0.0.1 +-A logaccept-101 -j TEE --gateway 10.0.0.2 +-A logaccept-101 -j ACCEPT +-A logaccept-102 -m limit --limit 12/minute -j ULOG +-A logaccept-102 -j ACCEPT -A logaccept-11 -m limit --limit 12/minute -j ULOG -A logaccept-11 -j ACCEPT -A logaccept-12 -m limit --limit 1/second -j LOG -A logaccept-12 -j ACCEPT --A logaccept-13 -m limit --limit 12/minute -j ULOG +-A logaccept-13 -j TEE --gateway 10.0.0.1 +-A logaccept-13 -j TEE --gateway 10.0.0.2 -A logaccept-13 -j ACCEPT --A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -m limit --limit 12/minute -j ULOG -A logaccept-14 -j ACCEPT --A logaccept-15 -m limit --limit 12/minute -j ULOG +-A logaccept-15 -m limit --limit 1/second -j LOG -A logaccept-15 -j ACCEPT --A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j TEE --gateway 10.0.0.1 +-A logaccept-16 -j TEE --gateway 10.0.0.2 -A logaccept-16 -j ACCEPT -A logaccept-17 -m limit --limit 12/minute -j ULOG -A logaccept-17 -j ACCEPT -A logaccept-18 -m limit --limit 1/second -j LOG -A logaccept-18 -j ACCEPT --A logaccept-19 -m limit --limit 12/minute -j ULOG +-A logaccept-19 -j TEE --gateway 10.0.0.1 +-A logaccept-19 -j TEE --gateway 10.0.0.2 -A logaccept-19 -j ACCEPT --A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -m limit --limit 12/minute -j ULOG -A logaccept-2 -j ACCEPT --A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -m limit --limit 12/minute -j ULOG -A logaccept-20 -j ACCEPT --A logaccept-21 -m limit --limit 12/minute -j ULOG +-A logaccept-21 -m limit --limit 1/second -j LOG -A logaccept-21 -j ACCEPT --A logaccept-22 -m limit --limit 1/second -j LOG +-A logaccept-22 -j TEE --gateway 10.0.0.1 +-A logaccept-22 -j TEE --gateway 10.0.0.2 -A logaccept-22 -j ACCEPT -A logaccept-23 -m limit --limit 12/minute -j ULOG -A logaccept-23 -j ACCEPT -A logaccept-24 -m limit --limit 1/second -j LOG -A logaccept-24 -j ACCEPT --A logaccept-25 -m limit --limit 12/minute -j ULOG +-A logaccept-25 -j TEE --gateway 10.0.0.1 +-A logaccept-25 -j TEE --gateway 10.0.0.2 -A logaccept-25 -j ACCEPT --A logaccept-26 -m limit --limit 1/second -j LOG +-A logaccept-26 -m limit --limit 12/minute -j ULOG -A logaccept-26 -j ACCEPT --A logaccept-27 -m limit --limit 12/minute -j ULOG +-A logaccept-27 -m limit --limit 1/second -j LOG -A logaccept-27 -j ACCEPT --A logaccept-28 -m limit --limit 1/second -j LOG +-A logaccept-28 -j TEE --gateway 10.0.0.1 +-A logaccept-28 -j TEE --gateway 10.0.0.2 -A logaccept-28 -j ACCEPT -A logaccept-29 -m limit --limit 12/minute -j ULOG -A logaccept-29 -j ACCEPT --A logaccept-3 -m limit --limit 12/minute -j ULOG +-A logaccept-3 -m limit --limit 1/second -j LOG -A logaccept-3 -j ACCEPT -A logaccept-30 -m limit --limit 1/second -j LOG -A logaccept-30 -j ACCEPT --A logaccept-31 -m limit --limit 12/minute -j ULOG +-A logaccept-31 -j TEE --gateway 10.0.0.1 +-A logaccept-31 -j TEE --gateway 10.0.0.2 -A logaccept-31 -j ACCEPT --A logaccept-32 -m limit --limit 1/second -j LOG +-A logaccept-32 -m limit --limit 12/minute -j ULOG -A logaccept-32 -j ACCEPT --A logaccept-33 -m limit --limit 12/minute -j ULOG +-A logaccept-33 -m limit --limit 1/second -j LOG -A logaccept-33 -j ACCEPT --A logaccept-34 -m limit --limit 1/second -j LOG +-A logaccept-34 -j TEE --gateway 10.0.0.1 +-A logaccept-34 -j TEE --gateway 10.0.0.2 -A logaccept-34 -j ACCEPT -A logaccept-35 -m limit --limit 12/minute -j ULOG -A logaccept-35 -j ACCEPT -A logaccept-36 -m limit --limit 1/second -j LOG -A logaccept-36 -j ACCEPT --A logaccept-37 -m limit --limit 12/minute -j ULOG +-A logaccept-37 -j TEE --gateway 10.0.0.1 +-A logaccept-37 -j TEE --gateway 10.0.0.2 -A logaccept-37 -j ACCEPT --A logaccept-38 -m limit --limit 1/second -j LOG +-A logaccept-38 -m limit --limit 12/minute -j ULOG -A logaccept-38 -j ACCEPT --A logaccept-39 -m limit --limit 12/minute -j ULOG +-A logaccept-39 -m limit --limit 1/second -j LOG -A logaccept-39 -j ACCEPT --A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j TEE --gateway 10.0.0.1 +-A logaccept-4 -j TEE --gateway 10.0.0.2 -A logaccept-4 -j ACCEPT --A logaccept-40 -m limit --limit 1/second -j LOG +-A logaccept-40 -j TEE --gateway 10.0.0.1 +-A logaccept-40 -j TEE --gateway 10.0.0.2 -A logaccept-40 -j ACCEPT -A logaccept-41 -m limit --limit 12/minute -j ULOG -A logaccept-41 -j ACCEPT -A logaccept-42 -m limit --limit 1/second -j LOG -A logaccept-42 -j ACCEPT --A logaccept-43 -m limit --limit 12/minute -j ULOG +-A logaccept-43 -j TEE --gateway 10.0.0.1 +-A logaccept-43 -j TEE --gateway 10.0.0.2 -A logaccept-43 -j ACCEPT --A logaccept-44 -m limit --limit 1/second -j LOG +-A logaccept-44 -m limit --limit 12/minute -j ULOG -A logaccept-44 -j ACCEPT --A logaccept-45 -m limit --limit 12/minute -j ULOG +-A logaccept-45 -m limit --limit 1/second -j LOG -A logaccept-45 -j ACCEPT --A logaccept-46 -m limit --limit 1/second -j LOG +-A logaccept-46 -j TEE --gateway 10.0.0.1 +-A logaccept-46 -j TEE --gateway 10.0.0.2 -A logaccept-46 -j ACCEPT -A logaccept-47 -m limit --limit 12/minute -j ULOG -A logaccept-47 -j ACCEPT -A logaccept-48 -m limit --limit 1/second -j LOG -A logaccept-48 -j ACCEPT --A logaccept-49 -m limit --limit 12/minute -j ULOG +-A logaccept-49 -j TEE --gateway 10.0.0.1 +-A logaccept-49 -j TEE --gateway 10.0.0.2 -A logaccept-49 -j ACCEPT -A logaccept-5 -m limit --limit 12/minute -j ULOG -A logaccept-5 -j ACCEPT --A logaccept-50 -m limit --limit 1/second -j LOG +-A logaccept-50 -m limit --limit 12/minute -j ULOG -A logaccept-50 -j ACCEPT --A logaccept-51 -m limit --limit 12/minute -j ULOG +-A logaccept-51 -m limit --limit 1/second -j LOG -A logaccept-51 -j ACCEPT --A logaccept-52 -m limit --limit 1/second -j LOG +-A logaccept-52 -j TEE --gateway 10.0.0.1 +-A logaccept-52 -j TEE --gateway 10.0.0.2 -A logaccept-52 -j ACCEPT -A logaccept-53 -m limit --limit 12/minute -j ULOG -A logaccept-53 -j ACCEPT -A logaccept-54 -m limit --limit 1/second -j LOG -A logaccept-54 -j ACCEPT --A logaccept-55 -m limit --limit 12/minute -j ULOG +-A logaccept-55 -j TEE --gateway 10.0.0.1 +-A logaccept-55 -j TEE --gateway 10.0.0.2 -A logaccept-55 -j ACCEPT +-A logaccept-56 -m limit --limit 12/minute -j ULOG +-A logaccept-56 -j ACCEPT +-A logaccept-57 -m limit --limit 1/second -j LOG +-A logaccept-57 -j ACCEPT +-A logaccept-58 -j TEE --gateway 10.0.0.1 +-A logaccept-58 -j TEE --gateway 10.0.0.2 +-A logaccept-58 -j ACCEPT +-A logaccept-59 -m limit --limit 12/minute -j ULOG +-A logaccept-59 -j ACCEPT -A logaccept-6 -m limit --limit 1/second -j LOG -A logaccept-6 -j ACCEPT --A logaccept-7 -m limit --limit 12/minute -j ULOG +-A logaccept-60 -m limit --limit 1/second -j LOG +-A logaccept-60 -j ACCEPT +-A logaccept-61 -j TEE --gateway 10.0.0.1 +-A logaccept-61 -j TEE --gateway 10.0.0.2 +-A logaccept-61 -j ACCEPT +-A logaccept-62 -m limit --limit 12/minute -j ULOG +-A logaccept-62 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-64 -j TEE --gateway 10.0.0.1 +-A logaccept-64 -j TEE --gateway 10.0.0.2 +-A logaccept-64 -j ACCEPT +-A logaccept-65 -m limit --limit 12/minute -j ULOG +-A logaccept-65 -j ACCEPT +-A logaccept-66 -m limit --limit 1/second -j LOG +-A logaccept-66 -j ACCEPT +-A logaccept-67 -j TEE --gateway 10.0.0.1 +-A logaccept-67 -j TEE --gateway 10.0.0.2 +-A logaccept-67 -j ACCEPT +-A logaccept-68 -m limit --limit 12/minute -j ULOG +-A logaccept-68 -j ACCEPT +-A logaccept-69 -m limit --limit 1/second -j LOG +-A logaccept-69 -j ACCEPT +-A logaccept-7 -j TEE --gateway 10.0.0.1 +-A logaccept-7 -j TEE --gateway 10.0.0.2 -A logaccept-7 -j ACCEPT --A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-70 -j TEE --gateway 10.0.0.1 +-A logaccept-70 -j TEE --gateway 10.0.0.2 +-A logaccept-70 -j ACCEPT +-A logaccept-71 -m limit --limit 12/minute -j ULOG +-A logaccept-71 -j ACCEPT +-A logaccept-72 -m limit --limit 1/second -j LOG +-A logaccept-72 -j ACCEPT +-A logaccept-73 -j TEE --gateway 10.0.0.1 +-A logaccept-73 -j TEE --gateway 10.0.0.2 +-A logaccept-73 -j ACCEPT +-A logaccept-74 -m limit --limit 12/minute -j ULOG +-A logaccept-74 -j ACCEPT +-A logaccept-75 -m limit --limit 1/second -j LOG +-A logaccept-75 -j ACCEPT +-A logaccept-76 -j TEE --gateway 10.0.0.1 +-A logaccept-76 -j TEE --gateway 10.0.0.2 +-A logaccept-76 -j ACCEPT +-A logaccept-77 -m limit --limit 12/minute -j ULOG +-A logaccept-77 -j ACCEPT +-A logaccept-78 -m limit --limit 1/second -j LOG +-A logaccept-78 -j ACCEPT +-A logaccept-79 -j TEE --gateway 10.0.0.1 +-A logaccept-79 -j TEE --gateway 10.0.0.2 +-A logaccept-79 -j ACCEPT +-A logaccept-8 -m limit --limit 12/minute -j ULOG -A logaccept-8 -j ACCEPT --A logaccept-9 -m limit --limit 12/minute -j ULOG +-A logaccept-80 -m limit --limit 12/minute -j ULOG +-A logaccept-80 -j ACCEPT +-A logaccept-81 -m limit --limit 1/second -j LOG +-A logaccept-81 -j ACCEPT +-A logaccept-82 -j TEE --gateway 10.0.0.1 +-A logaccept-82 -j TEE --gateway 10.0.0.2 +-A logaccept-82 -j ACCEPT +-A logaccept-83 -m limit --limit 12/minute -j ULOG +-A logaccept-83 -j ACCEPT +-A logaccept-84 -m limit --limit 1/second -j LOG +-A logaccept-84 -j ACCEPT +-A logaccept-85 -j TEE --gateway 10.0.0.1 +-A logaccept-85 -j TEE --gateway 10.0.0.2 +-A logaccept-85 -j ACCEPT +-A logaccept-86 -m limit --limit 12/minute -j ULOG +-A logaccept-86 -j ACCEPT +-A logaccept-87 -m limit --limit 1/second -j LOG +-A logaccept-87 -j ACCEPT +-A logaccept-88 -j TEE --gateway 10.0.0.1 +-A logaccept-88 -j TEE --gateway 10.0.0.2 +-A logaccept-88 -j ACCEPT +-A logaccept-89 -m limit --limit 12/minute -j ULOG +-A logaccept-89 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT +-A logaccept-90 -m limit --limit 1/second -j LOG +-A logaccept-90 -j ACCEPT +-A logaccept-91 -j TEE --gateway 10.0.0.1 +-A logaccept-91 -j TEE --gateway 10.0.0.2 +-A logaccept-91 -j ACCEPT +-A logaccept-92 -m limit --limit 12/minute -j ULOG +-A logaccept-92 -j ACCEPT +-A logaccept-93 -m limit --limit 1/second -j LOG +-A logaccept-93 -j ACCEPT +-A logaccept-94 -j TEE --gateway 10.0.0.1 +-A logaccept-94 -j TEE --gateway 10.0.0.2 +-A logaccept-94 -j ACCEPT +-A logaccept-95 -m limit --limit 12/minute -j ULOG +-A logaccept-95 -j ACCEPT +-A logaccept-96 -m limit --limit 1/second -j LOG +-A logaccept-96 -j ACCEPT +-A logaccept-97 -j TEE --gateway 10.0.0.1 +-A logaccept-97 -j TEE --gateway 10.0.0.2 +-A logaccept-97 -j ACCEPT +-A logaccept-98 -m limit --limit 12/minute -j ULOG +-A logaccept-98 -j ACCEPT +-A logaccept-99 -m limit --limit 1/second -j LOG +-A logaccept-99 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG -A logaccept-final-0 -j ACCEPT --A logaccept-final-1 -m limit --limit 12/minute -j ULOG +-A logaccept-final-1 -j TEE --gateway 10.0.0.1 +-A logaccept-final-1 -j TEE --gateway 10.0.0.2 -A logaccept-final-1 -j ACCEPT --A logaccept-final-10 -m limit --limit 1/second -j LOG +-A logaccept-final-10 -j TEE --gateway 10.0.0.1 +-A logaccept-final-10 -j TEE --gateway 10.0.0.2 -A logaccept-final-10 -j ACCEPT --A logaccept-final-100 -m limit --limit 1/second -j LOG +-A logaccept-final-100 -j TEE --gateway 10.0.0.1 +-A logaccept-final-100 -j TEE --gateway 10.0.0.2 -A logaccept-final-100 -j ACCEPT -A logaccept-final-101 -m limit --limit 12/minute -j ULOG -A logaccept-final-101 -j ACCEPT -A logaccept-final-102 -m limit --limit 1/second -j LOG -A logaccept-final-102 -j ACCEPT --A logaccept-final-103 -m limit --limit 12/minute -j ULOG +-A logaccept-final-103 -j TEE --gateway 10.0.0.1 +-A logaccept-final-103 -j TEE --gateway 10.0.0.2 -A logaccept-final-103 -j ACCEPT --A logaccept-final-104 -m limit --limit 1/second -j LOG +-A logaccept-final-104 -m limit --limit 12/minute -j ULOG -A logaccept-final-104 -j ACCEPT --A logaccept-final-105 -m limit --limit 12/minute -j ULOG +-A logaccept-final-105 -m limit --limit 1/second -j LOG -A logaccept-final-105 -j ACCEPT --A logaccept-final-106 -m limit --limit 1/second -j LOG +-A logaccept-final-106 -j TEE --gateway 10.0.0.1 +-A logaccept-final-106 -j TEE --gateway 10.0.0.2 -A logaccept-final-106 -j ACCEPT -A logaccept-final-107 -m limit --limit 12/minute -j ULOG -A logaccept-final-107 -j ACCEPT -A logaccept-final-108 -m limit --limit 1/second -j LOG -A logaccept-final-108 -j ACCEPT --A logaccept-final-109 -m limit --limit 12/minute -j ULOG +-A logaccept-final-109 -j TEE --gateway 10.0.0.1 +-A logaccept-final-109 -j TEE --gateway 10.0.0.2 -A logaccept-final-109 -j ACCEPT -A logaccept-final-11 -m limit --limit 12/minute -j ULOG -A logaccept-final-11 -j ACCEPT --A logaccept-final-110 -m limit --limit 1/second -j LOG +-A logaccept-final-110 -m limit --limit 12/minute -j ULOG -A logaccept-final-110 -j ACCEPT --A logaccept-final-111 -m limit --limit 12/minute -j ULOG +-A logaccept-final-111 -m limit --limit 1/second -j LOG -A logaccept-final-111 -j ACCEPT --A logaccept-final-112 -m limit --limit 1/second -j LOG +-A logaccept-final-112 -j TEE --gateway 10.0.0.1 +-A logaccept-final-112 -j TEE --gateway 10.0.0.2 -A logaccept-final-112 -j ACCEPT -A logaccept-final-113 -m limit --limit 12/minute -j ULOG -A logaccept-final-113 -j ACCEPT -A logaccept-final-114 -m limit --limit 1/second -j LOG -A logaccept-final-114 -j ACCEPT --A logaccept-final-115 -m limit --limit 12/minute -j ULOG +-A logaccept-final-115 -j TEE --gateway 10.0.0.1 +-A logaccept-final-115 -j TEE --gateway 10.0.0.2 -A logaccept-final-115 -j ACCEPT --A logaccept-final-116 -m limit --limit 1/second -j LOG +-A logaccept-final-116 -m limit --limit 12/minute -j ULOG -A logaccept-final-116 -j ACCEPT --A logaccept-final-117 -m limit --limit 12/minute -j ULOG +-A logaccept-final-117 -m limit --limit 1/second -j LOG -A logaccept-final-117 -j ACCEPT --A logaccept-final-118 -m limit --limit 1/second -j LOG +-A logaccept-final-118 -j TEE --gateway 10.0.0.1 +-A logaccept-final-118 -j TEE --gateway 10.0.0.2 -A logaccept-final-118 -j ACCEPT -A logaccept-final-119 -m limit --limit 12/minute -j ULOG -A logaccept-final-119 -j ACCEPT @@ -14874,191 +24495,554 @@ -A logaccept-final-12 -j ACCEPT -A logaccept-final-120 -m limit --limit 1/second -j LOG -A logaccept-final-120 -j ACCEPT --A logaccept-final-121 -m limit --limit 12/minute -j ULOG +-A logaccept-final-121 -j TEE --gateway 10.0.0.1 +-A logaccept-final-121 -j TEE --gateway 10.0.0.2 -A logaccept-final-121 -j ACCEPT --A logaccept-final-122 -m limit --limit 1/second -j LOG +-A logaccept-final-122 -m limit --limit 12/minute -j ULOG -A logaccept-final-122 -j ACCEPT --A logaccept-final-123 -m limit --limit 12/minute -j ULOG +-A logaccept-final-123 -m limit --limit 1/second -j LOG -A logaccept-final-123 -j ACCEPT --A logaccept-final-124 -m limit --limit 1/second -j LOG +-A logaccept-final-124 -j TEE --gateway 10.0.0.1 +-A logaccept-final-124 -j TEE --gateway 10.0.0.2 -A logaccept-final-124 -j ACCEPT -A logaccept-final-125 -m limit --limit 12/minute -j ULOG -A logaccept-final-125 -j ACCEPT -A logaccept-final-126 -m limit --limit 1/second -j LOG -A logaccept-final-126 -j ACCEPT --A logaccept-final-127 -m limit --limit 12/minute -j ULOG +-A logaccept-final-127 -j TEE --gateway 10.0.0.1 +-A logaccept-final-127 -j TEE --gateway 10.0.0.2 -A logaccept-final-127 -j ACCEPT --A logaccept-final-128 -m limit --limit 1/second -j LOG +-A logaccept-final-128 -m limit --limit 12/minute -j ULOG -A logaccept-final-128 -j ACCEPT --A logaccept-final-129 -m limit --limit 12/minute -j ULOG +-A logaccept-final-129 -m limit --limit 1/second -j LOG -A logaccept-final-129 -j ACCEPT --A logaccept-final-13 -m limit --limit 12/minute -j ULOG +-A logaccept-final-13 -j TEE --gateway 10.0.0.1 +-A logaccept-final-13 -j TEE --gateway 10.0.0.2 -A logaccept-final-13 -j ACCEPT --A logaccept-final-130 -m limit --limit 1/second -j LOG +-A logaccept-final-130 -j TEE --gateway 10.0.0.1 +-A logaccept-final-130 -j TEE --gateway 10.0.0.2 -A logaccept-final-130 -j ACCEPT -A logaccept-final-131 -m limit --limit 12/minute -j ULOG -A logaccept-final-131 -j ACCEPT -A logaccept-final-132 -m limit --limit 1/second -j LOG -A logaccept-final-132 -j ACCEPT --A logaccept-final-133 -m limit --limit 12/minute -j ULOG +-A logaccept-final-133 -j TEE --gateway 10.0.0.1 +-A logaccept-final-133 -j TEE --gateway 10.0.0.2 -A logaccept-final-133 -j ACCEPT --A logaccept-final-134 -m limit --limit 1/second -j LOG +-A logaccept-final-134 -m limit --limit 12/minute -j ULOG -A logaccept-final-134 -j ACCEPT --A logaccept-final-135 -m limit --limit 12/minute -j ULOG +-A logaccept-final-135 -m limit --limit 1/second -j LOG -A logaccept-final-135 -j ACCEPT --A logaccept-final-136 -m limit --limit 1/second -j LOG +-A logaccept-final-136 -j TEE --gateway 10.0.0.1 +-A logaccept-final-136 -j TEE --gateway 10.0.0.2 -A logaccept-final-136 -j ACCEPT -A logaccept-final-137 -m limit --limit 12/minute -j ULOG -A logaccept-final-137 -j ACCEPT -A logaccept-final-138 -m limit --limit 1/second -j LOG -A logaccept-final-138 -j ACCEPT --A logaccept-final-139 -m limit --limit 12/minute -j ULOG +-A logaccept-final-139 -j TEE --gateway 10.0.0.1 +-A logaccept-final-139 -j TEE --gateway 10.0.0.2 -A logaccept-final-139 -j ACCEPT --A logaccept-final-14 -m limit --limit 1/second -j LOG +-A logaccept-final-14 -m limit --limit 12/minute -j ULOG -A logaccept-final-14 -j ACCEPT --A logaccept-final-140 -m limit --limit 1/second -j LOG +-A logaccept-final-140 -m limit --limit 12/minute -j ULOG -A logaccept-final-140 -j ACCEPT --A logaccept-final-141 -m limit --limit 12/minute -j ULOG +-A logaccept-final-141 -m limit --limit 1/second -j LOG -A logaccept-final-141 -j ACCEPT --A logaccept-final-142 -m limit --limit 1/second -j LOG +-A logaccept-final-142 -j TEE --gateway 10.0.0.1 +-A logaccept-final-142 -j TEE --gateway 10.0.0.2 -A logaccept-final-142 -j ACCEPT -A logaccept-final-143 -m limit --limit 12/minute -j ULOG -A logaccept-final-143 -j ACCEPT -A logaccept-final-144 -m limit --limit 1/second -j LOG -A logaccept-final-144 -j ACCEPT --A logaccept-final-145 -m limit --limit 12/minute -j ULOG +-A logaccept-final-145 -j TEE --gateway 10.0.0.1 +-A logaccept-final-145 -j TEE --gateway 10.0.0.2 -A logaccept-final-145 -j ACCEPT --A logaccept-final-146 -m limit --limit 1/second -j LOG +-A logaccept-final-146 -m limit --limit 12/minute -j ULOG -A logaccept-final-146 -j ACCEPT --A logaccept-final-147 -m limit --limit 12/minute -j ULOG +-A logaccept-final-147 -m limit --limit 1/second -j LOG -A logaccept-final-147 -j ACCEPT --A logaccept-final-148 -m limit --limit 1/second -j LOG +-A logaccept-final-148 -j TEE --gateway 10.0.0.1 +-A logaccept-final-148 -j TEE --gateway 10.0.0.2 -A logaccept-final-148 -j ACCEPT -A logaccept-final-149 -m limit --limit 12/minute -j ULOG -A logaccept-final-149 -j ACCEPT --A logaccept-final-15 -m limit --limit 12/minute -j ULOG +-A logaccept-final-15 -m limit --limit 1/second -j LOG -A logaccept-final-15 -j ACCEPT -A logaccept-final-150 -m limit --limit 1/second -j LOG -A logaccept-final-150 -j ACCEPT --A logaccept-final-151 -m limit --limit 12/minute -j ULOG +-A logaccept-final-151 -j TEE --gateway 10.0.0.1 +-A logaccept-final-151 -j TEE --gateway 10.0.0.2 -A logaccept-final-151 -j ACCEPT --A logaccept-final-152 -m limit --limit 1/second -j LOG +-A logaccept-final-152 -m limit --limit 12/minute -j ULOG -A logaccept-final-152 -j ACCEPT --A logaccept-final-153 -m limit --limit 12/minute -j ULOG +-A logaccept-final-153 -m limit --limit 1/second -j LOG -A logaccept-final-153 -j ACCEPT --A logaccept-final-154 -m limit --limit 1/second -j LOG +-A logaccept-final-154 -j TEE --gateway 10.0.0.1 +-A logaccept-final-154 -j TEE --gateway 10.0.0.2 -A logaccept-final-154 -j ACCEPT -A logaccept-final-155 -m limit --limit 12/minute -j ULOG -A logaccept-final-155 -j ACCEPT -A logaccept-final-156 -m limit --limit 1/second -j LOG -A logaccept-final-156 -j ACCEPT --A logaccept-final-157 -m limit --limit 12/minute -j ULOG +-A logaccept-final-157 -j TEE --gateway 10.0.0.1 +-A logaccept-final-157 -j TEE --gateway 10.0.0.2 -A logaccept-final-157 -j ACCEPT --A logaccept-final-158 -m limit --limit 1/second -j LOG +-A logaccept-final-158 -m limit --limit 12/minute -j ULOG -A logaccept-final-158 -j ACCEPT --A logaccept-final-159 -m limit --limit 12/minute -j ULOG +-A logaccept-final-159 -m limit --limit 1/second -j LOG -A logaccept-final-159 -j ACCEPT --A logaccept-final-16 -m limit --limit 1/second -j LOG +-A logaccept-final-16 -j TEE --gateway 10.0.0.1 +-A logaccept-final-16 -j TEE --gateway 10.0.0.2 -A logaccept-final-16 -j ACCEPT --A logaccept-final-160 -m limit --limit 1/second -j LOG +-A logaccept-final-160 -j TEE --gateway 10.0.0.1 +-A logaccept-final-160 -j TEE --gateway 10.0.0.2 -A logaccept-final-160 -j ACCEPT -A logaccept-final-161 -m limit --limit 12/minute -j ULOG -A logaccept-final-161 -j ACCEPT -A logaccept-final-162 -m limit --limit 1/second -j LOG -A logaccept-final-162 -j ACCEPT --A logaccept-final-163 -m limit --limit 12/minute -j ULOG +-A logaccept-final-163 -j TEE --gateway 10.0.0.1 +-A logaccept-final-163 -j TEE --gateway 10.0.0.2 -A logaccept-final-163 -j ACCEPT +-A logaccept-final-164 -m limit --limit 12/minute -j ULOG +-A logaccept-final-164 -j ACCEPT +-A logaccept-final-165 -m limit --limit 1/second -j LOG +-A logaccept-final-165 -j ACCEPT +-A logaccept-final-166 -j TEE --gateway 10.0.0.1 +-A logaccept-final-166 -j TEE --gateway 10.0.0.2 +-A logaccept-final-166 -j ACCEPT +-A logaccept-final-167 -m limit --limit 12/minute -j ULOG +-A logaccept-final-167 -j ACCEPT +-A logaccept-final-168 -m limit --limit 1/second -j LOG +-A logaccept-final-168 -j ACCEPT +-A logaccept-final-169 -j TEE --gateway 10.0.0.1 +-A logaccept-final-169 -j TEE --gateway 10.0.0.2 +-A logaccept-final-169 -j ACCEPT -A logaccept-final-17 -m limit --limit 12/minute -j ULOG -A logaccept-final-17 -j ACCEPT +-A logaccept-final-170 -m limit --limit 12/minute -j ULOG +-A logaccept-final-170 -j ACCEPT +-A logaccept-final-171 -m limit --limit 1/second -j LOG +-A logaccept-final-171 -j ACCEPT +-A logaccept-final-172 -j TEE --gateway 10.0.0.1 +-A logaccept-final-172 -j TEE --gateway 10.0.0.2 +-A logaccept-final-172 -j ACCEPT +-A logaccept-final-173 -m limit --limit 12/minute -j ULOG +-A logaccept-final-173 -j ACCEPT +-A logaccept-final-174 -m limit --limit 1/second -j LOG +-A logaccept-final-174 -j ACCEPT +-A logaccept-final-175 -j TEE --gateway 10.0.0.1 +-A logaccept-final-175 -j TEE --gateway 10.0.0.2 +-A logaccept-final-175 -j ACCEPT +-A logaccept-final-176 -m limit --limit 12/minute -j ULOG +-A logaccept-final-176 -j ACCEPT +-A logaccept-final-177 -m limit --limit 1/second -j LOG +-A logaccept-final-177 -j ACCEPT +-A logaccept-final-178 -j TEE --gateway 10.0.0.1 +-A logaccept-final-178 -j TEE --gateway 10.0.0.2 +-A logaccept-final-178 -j ACCEPT +-A logaccept-final-179 -m limit --limit 12/minute -j ULOG +-A logaccept-final-179 -j ACCEPT -A logaccept-final-18 -m limit --limit 1/second -j LOG -A logaccept-final-18 -j ACCEPT --A logaccept-final-19 -m limit --limit 12/minute -j ULOG +-A logaccept-final-180 -m limit --limit 1/second -j LOG +-A logaccept-final-180 -j ACCEPT +-A logaccept-final-181 -j TEE --gateway 10.0.0.1 +-A logaccept-final-181 -j TEE --gateway 10.0.0.2 +-A logaccept-final-181 -j ACCEPT +-A logaccept-final-182 -m limit --limit 12/minute -j ULOG +-A logaccept-final-182 -j ACCEPT +-A logaccept-final-183 -m limit --limit 1/second -j LOG +-A logaccept-final-183 -j ACCEPT +-A logaccept-final-184 -j TEE --gateway 10.0.0.1 +-A logaccept-final-184 -j TEE --gateway 10.0.0.2 +-A logaccept-final-184 -j ACCEPT +-A logaccept-final-185 -m limit --limit 12/minute -j ULOG +-A logaccept-final-185 -j ACCEPT +-A logaccept-final-186 -m limit --limit 1/second -j LOG +-A logaccept-final-186 -j ACCEPT +-A logaccept-final-187 -j TEE --gateway 10.0.0.1 +-A logaccept-final-187 -j TEE --gateway 10.0.0.2 +-A logaccept-final-187 -j ACCEPT +-A logaccept-final-188 -m limit --limit 12/minute -j ULOG +-A logaccept-final-188 -j ACCEPT +-A logaccept-final-189 -m limit --limit 1/second -j LOG +-A logaccept-final-189 -j ACCEPT +-A logaccept-final-19 -j TEE --gateway 10.0.0.1 +-A logaccept-final-19 -j TEE --gateway 10.0.0.2 -A logaccept-final-19 -j ACCEPT --A logaccept-final-2 -m limit --limit 1/second -j LOG +-A logaccept-final-190 -j TEE --gateway 10.0.0.1 +-A logaccept-final-190 -j TEE --gateway 10.0.0.2 +-A logaccept-final-190 -j ACCEPT +-A logaccept-final-191 -m limit --limit 12/minute -j ULOG +-A logaccept-final-191 -j ACCEPT +-A logaccept-final-192 -m limit --limit 1/second -j LOG +-A logaccept-final-192 -j ACCEPT +-A logaccept-final-193 -j TEE --gateway 10.0.0.1 +-A logaccept-final-193 -j TEE --gateway 10.0.0.2 +-A logaccept-final-193 -j ACCEPT +-A logaccept-final-194 -m limit --limit 12/minute -j ULOG +-A logaccept-final-194 -j ACCEPT +-A logaccept-final-195 -m limit --limit 1/second -j LOG +-A logaccept-final-195 -j ACCEPT +-A logaccept-final-196 -j TEE --gateway 10.0.0.1 +-A logaccept-final-196 -j TEE --gateway 10.0.0.2 +-A logaccept-final-196 -j ACCEPT +-A logaccept-final-197 -m limit --limit 12/minute -j ULOG +-A logaccept-final-197 -j ACCEPT +-A logaccept-final-198 -m limit --limit 1/second -j LOG +-A logaccept-final-198 -j ACCEPT +-A logaccept-final-199 -j TEE --gateway 10.0.0.1 +-A logaccept-final-199 -j TEE --gateway 10.0.0.2 +-A logaccept-final-199 -j ACCEPT +-A logaccept-final-2 -m limit --limit 12/minute -j ULOG -A logaccept-final-2 -j ACCEPT --A logaccept-final-20 -m limit --limit 1/second -j LOG +-A logaccept-final-20 -m limit --limit 12/minute -j ULOG -A logaccept-final-20 -j ACCEPT --A logaccept-final-21 -m limit --limit 12/minute -j ULOG +-A logaccept-final-200 -m limit --limit 12/minute -j ULOG +-A logaccept-final-200 -j ACCEPT +-A logaccept-final-201 -m limit --limit 1/second -j LOG +-A logaccept-final-201 -j ACCEPT +-A logaccept-final-202 -j TEE --gateway 10.0.0.1 +-A logaccept-final-202 -j TEE --gateway 10.0.0.2 +-A logaccept-final-202 -j ACCEPT +-A logaccept-final-203 -m limit --limit 12/minute -j ULOG +-A logaccept-final-203 -j ACCEPT +-A logaccept-final-204 -m limit --limit 1/second -j LOG +-A logaccept-final-204 -j ACCEPT +-A logaccept-final-205 -j TEE --gateway 10.0.0.1 +-A logaccept-final-205 -j TEE --gateway 10.0.0.2 +-A logaccept-final-205 -j ACCEPT +-A logaccept-final-206 -m limit --limit 12/minute -j ULOG +-A logaccept-final-206 -j ACCEPT +-A logaccept-final-207 -m limit --limit 1/second -j LOG +-A logaccept-final-207 -j ACCEPT +-A logaccept-final-208 -j TEE --gateway 10.0.0.1 +-A logaccept-final-208 -j TEE --gateway 10.0.0.2 +-A logaccept-final-208 -j ACCEPT +-A logaccept-final-209 -m limit --limit 12/minute -j ULOG +-A logaccept-final-209 -j ACCEPT +-A logaccept-final-21 -m limit --limit 1/second -j LOG -A logaccept-final-21 -j ACCEPT --A logaccept-final-22 -m limit --limit 1/second -j LOG +-A logaccept-final-210 -m limit --limit 1/second -j LOG +-A logaccept-final-210 -j ACCEPT +-A logaccept-final-211 -j TEE --gateway 10.0.0.1 +-A logaccept-final-211 -j TEE --gateway 10.0.0.2 +-A logaccept-final-211 -j ACCEPT +-A logaccept-final-212 -m limit --limit 12/minute -j ULOG +-A logaccept-final-212 -j ACCEPT +-A logaccept-final-213 -m limit --limit 1/second -j LOG +-A logaccept-final-213 -j ACCEPT +-A logaccept-final-214 -j TEE --gateway 10.0.0.1 +-A logaccept-final-214 -j TEE --gateway 10.0.0.2 +-A logaccept-final-214 -j ACCEPT +-A logaccept-final-215 -m limit --limit 12/minute -j ULOG +-A logaccept-final-215 -j ACCEPT +-A logaccept-final-216 -m limit --limit 1/second -j LOG +-A logaccept-final-216 -j ACCEPT +-A logaccept-final-217 -j TEE --gateway 10.0.0.1 +-A logaccept-final-217 -j TEE --gateway 10.0.0.2 +-A logaccept-final-217 -j ACCEPT +-A logaccept-final-218 -m limit --limit 12/minute -j ULOG +-A logaccept-final-218 -j ACCEPT +-A logaccept-final-219 -m limit --limit 1/second -j LOG +-A logaccept-final-219 -j ACCEPT +-A logaccept-final-22 -j TEE --gateway 10.0.0.1 +-A logaccept-final-22 -j TEE --gateway 10.0.0.2 -A logaccept-final-22 -j ACCEPT +-A logaccept-final-220 -j TEE --gateway 10.0.0.1 +-A logaccept-final-220 -j TEE --gateway 10.0.0.2 +-A logaccept-final-220 -j ACCEPT +-A logaccept-final-221 -m limit --limit 12/minute -j ULOG +-A logaccept-final-221 -j ACCEPT +-A logaccept-final-222 -m limit --limit 1/second -j LOG +-A logaccept-final-222 -j ACCEPT +-A logaccept-final-223 -j TEE --gateway 10.0.0.1 +-A logaccept-final-223 -j TEE --gateway 10.0.0.2 +-A logaccept-final-223 -j ACCEPT +-A logaccept-final-224 -m limit --limit 12/minute -j ULOG +-A logaccept-final-224 -j ACCEPT +-A logaccept-final-225 -m limit --limit 1/second -j LOG +-A logaccept-final-225 -j ACCEPT +-A logaccept-final-226 -j TEE --gateway 10.0.0.1 +-A logaccept-final-226 -j TEE --gateway 10.0.0.2 +-A logaccept-final-226 -j ACCEPT +-A logaccept-final-227 -m limit --limit 12/minute -j ULOG +-A logaccept-final-227 -j ACCEPT +-A logaccept-final-228 -m limit --limit 1/second -j LOG +-A logaccept-final-228 -j ACCEPT +-A logaccept-final-229 -j TEE --gateway 10.0.0.1 +-A logaccept-final-229 -j TEE --gateway 10.0.0.2 +-A logaccept-final-229 -j ACCEPT -A logaccept-final-23 -m limit --limit 12/minute -j ULOG -A logaccept-final-23 -j ACCEPT +-A logaccept-final-230 -m limit --limit 12/minute -j ULOG +-A logaccept-final-230 -j ACCEPT +-A logaccept-final-231 -m limit --limit 1/second -j LOG +-A logaccept-final-231 -j ACCEPT +-A logaccept-final-232 -j TEE --gateway 10.0.0.1 +-A logaccept-final-232 -j TEE --gateway 10.0.0.2 +-A logaccept-final-232 -j ACCEPT +-A logaccept-final-233 -m limit --limit 12/minute -j ULOG +-A logaccept-final-233 -j ACCEPT +-A logaccept-final-234 -m limit --limit 1/second -j LOG +-A logaccept-final-234 -j ACCEPT +-A logaccept-final-235 -j TEE --gateway 10.0.0.1 +-A logaccept-final-235 -j TEE --gateway 10.0.0.2 +-A logaccept-final-235 -j ACCEPT +-A logaccept-final-236 -m limit --limit 12/minute -j ULOG +-A logaccept-final-236 -j ACCEPT +-A logaccept-final-237 -m limit --limit 1/second -j LOG +-A logaccept-final-237 -j ACCEPT +-A logaccept-final-238 -j TEE --gateway 10.0.0.1 +-A logaccept-final-238 -j TEE --gateway 10.0.0.2 +-A logaccept-final-238 -j ACCEPT +-A logaccept-final-239 -m limit --limit 12/minute -j ULOG +-A logaccept-final-239 -j ACCEPT -A logaccept-final-24 -m limit --limit 1/second -j LOG -A logaccept-final-24 -j ACCEPT --A logaccept-final-25 -m limit --limit 12/minute -j ULOG +-A logaccept-final-240 -m limit --limit 1/second -j LOG +-A logaccept-final-240 -j ACCEPT +-A logaccept-final-241 -j TEE --gateway 10.0.0.1 +-A logaccept-final-241 -j TEE --gateway 10.0.0.2 +-A logaccept-final-241 -j ACCEPT +-A logaccept-final-242 -m limit --limit 12/minute -j ULOG +-A logaccept-final-242 -j ACCEPT +-A logaccept-final-243 -m limit --limit 1/second -j LOG +-A logaccept-final-243 -j ACCEPT +-A logaccept-final-244 -j TEE --gateway 10.0.0.1 +-A logaccept-final-244 -j TEE --gateway 10.0.0.2 +-A logaccept-final-244 -j ACCEPT +-A logaccept-final-245 -m limit --limit 12/minute -j ULOG +-A logaccept-final-245 -j ACCEPT +-A logaccept-final-246 -m limit --limit 1/second -j LOG +-A logaccept-final-246 -j ACCEPT +-A logaccept-final-247 -j TEE --gateway 10.0.0.1 +-A logaccept-final-247 -j TEE --gateway 10.0.0.2 +-A logaccept-final-247 -j ACCEPT +-A logaccept-final-248 -m limit --limit 12/minute -j ULOG +-A logaccept-final-248 -j ACCEPT +-A logaccept-final-249 -m limit --limit 1/second -j LOG +-A logaccept-final-249 -j ACCEPT +-A logaccept-final-25 -j TEE --gateway 10.0.0.1 +-A logaccept-final-25 -j TEE --gateway 10.0.0.2 -A logaccept-final-25 -j ACCEPT --A logaccept-final-26 -m limit --limit 1/second -j LOG +-A logaccept-final-250 -j TEE --gateway 10.0.0.1 +-A logaccept-final-250 -j TEE --gateway 10.0.0.2 +-A logaccept-final-250 -j ACCEPT +-A logaccept-final-251 -m limit --limit 12/minute -j ULOG +-A logaccept-final-251 -j ACCEPT +-A logaccept-final-252 -m limit --limit 1/second -j LOG +-A logaccept-final-252 -j ACCEPT +-A logaccept-final-253 -j TEE --gateway 10.0.0.1 +-A logaccept-final-253 -j TEE --gateway 10.0.0.2 +-A logaccept-final-253 -j ACCEPT +-A logaccept-final-254 -m limit --limit 12/minute -j ULOG +-A logaccept-final-254 -j ACCEPT +-A logaccept-final-255 -m limit --limit 1/second -j LOG +-A logaccept-final-255 -j ACCEPT +-A logaccept-final-256 -j TEE --gateway 10.0.0.1 +-A logaccept-final-256 -j TEE --gateway 10.0.0.2 +-A logaccept-final-256 -j ACCEPT +-A logaccept-final-257 -m limit --limit 12/minute -j ULOG +-A logaccept-final-257 -j ACCEPT +-A logaccept-final-258 -m limit --limit 1/second -j LOG +-A logaccept-final-258 -j ACCEPT +-A logaccept-final-259 -j TEE --gateway 10.0.0.1 +-A logaccept-final-259 -j TEE --gateway 10.0.0.2 +-A logaccept-final-259 -j ACCEPT +-A logaccept-final-26 -m limit --limit 12/minute -j ULOG -A logaccept-final-26 -j ACCEPT --A logaccept-final-27 -m limit --limit 12/minute -j ULOG +-A logaccept-final-260 -m limit --limit 12/minute -j ULOG +-A logaccept-final-260 -j ACCEPT +-A logaccept-final-261 -m limit --limit 1/second -j LOG +-A logaccept-final-261 -j ACCEPT +-A logaccept-final-262 -j TEE --gateway 10.0.0.1 +-A logaccept-final-262 -j TEE --gateway 10.0.0.2 +-A logaccept-final-262 -j ACCEPT +-A logaccept-final-263 -m limit --limit 12/minute -j ULOG +-A logaccept-final-263 -j ACCEPT +-A logaccept-final-264 -m limit --limit 1/second -j LOG +-A logaccept-final-264 -j ACCEPT +-A logaccept-final-265 -j TEE --gateway 10.0.0.1 +-A logaccept-final-265 -j TEE --gateway 10.0.0.2 +-A logaccept-final-265 -j ACCEPT +-A logaccept-final-266 -m limit --limit 12/minute -j ULOG +-A logaccept-final-266 -j ACCEPT +-A logaccept-final-267 -m limit --limit 1/second -j LOG +-A logaccept-final-267 -j ACCEPT +-A logaccept-final-268 -j TEE --gateway 10.0.0.1 +-A logaccept-final-268 -j TEE --gateway 10.0.0.2 +-A logaccept-final-268 -j ACCEPT +-A logaccept-final-269 -m limit --limit 12/minute -j ULOG +-A logaccept-final-269 -j ACCEPT +-A logaccept-final-27 -m limit --limit 1/second -j LOG -A logaccept-final-27 -j ACCEPT --A logaccept-final-28 -m limit --limit 1/second -j LOG +-A logaccept-final-270 -m limit --limit 1/second -j LOG +-A logaccept-final-270 -j ACCEPT +-A logaccept-final-271 -j TEE --gateway 10.0.0.1 +-A logaccept-final-271 -j TEE --gateway 10.0.0.2 +-A logaccept-final-271 -j ACCEPT +-A logaccept-final-272 -m limit --limit 12/minute -j ULOG +-A logaccept-final-272 -j ACCEPT +-A logaccept-final-273 -m limit --limit 1/second -j LOG +-A logaccept-final-273 -j ACCEPT +-A logaccept-final-274 -j TEE --gateway 10.0.0.1 +-A logaccept-final-274 -j TEE --gateway 10.0.0.2 +-A logaccept-final-274 -j ACCEPT +-A logaccept-final-275 -m limit --limit 12/minute -j ULOG +-A logaccept-final-275 -j ACCEPT +-A logaccept-final-276 -m limit --limit 1/second -j LOG +-A logaccept-final-276 -j ACCEPT +-A logaccept-final-277 -j TEE --gateway 10.0.0.1 +-A logaccept-final-277 -j TEE --gateway 10.0.0.2 +-A logaccept-final-277 -j ACCEPT +-A logaccept-final-278 -m limit --limit 12/minute -j ULOG +-A logaccept-final-278 -j ACCEPT +-A logaccept-final-279 -m limit --limit 1/second -j LOG +-A logaccept-final-279 -j ACCEPT +-A logaccept-final-28 -j TEE --gateway 10.0.0.1 +-A logaccept-final-28 -j TEE --gateway 10.0.0.2 -A logaccept-final-28 -j ACCEPT +-A logaccept-final-280 -j TEE --gateway 10.0.0.1 +-A logaccept-final-280 -j TEE --gateway 10.0.0.2 +-A logaccept-final-280 -j ACCEPT +-A logaccept-final-281 -m limit --limit 12/minute -j ULOG +-A logaccept-final-281 -j ACCEPT +-A logaccept-final-282 -m limit --limit 1/second -j LOG +-A logaccept-final-282 -j ACCEPT +-A logaccept-final-283 -j TEE --gateway 10.0.0.1 +-A logaccept-final-283 -j TEE --gateway 10.0.0.2 +-A logaccept-final-283 -j ACCEPT +-A logaccept-final-284 -m limit --limit 12/minute -j ULOG +-A logaccept-final-284 -j ACCEPT +-A logaccept-final-285 -m limit --limit 1/second -j LOG +-A logaccept-final-285 -j ACCEPT +-A logaccept-final-286 -j TEE --gateway 10.0.0.1 +-A logaccept-final-286 -j TEE --gateway 10.0.0.2 +-A logaccept-final-286 -j ACCEPT +-A logaccept-final-287 -m limit --limit 12/minute -j ULOG +-A logaccept-final-287 -j ACCEPT +-A logaccept-final-288 -m limit --limit 1/second -j LOG +-A logaccept-final-288 -j ACCEPT +-A logaccept-final-289 -j TEE --gateway 10.0.0.1 +-A logaccept-final-289 -j TEE --gateway 10.0.0.2 +-A logaccept-final-289 -j ACCEPT -A logaccept-final-29 -m limit --limit 12/minute -j ULOG -A logaccept-final-29 -j ACCEPT --A logaccept-final-3 -m limit --limit 12/minute -j ULOG +-A logaccept-final-290 -m limit --limit 12/minute -j ULOG +-A logaccept-final-290 -j ACCEPT +-A logaccept-final-291 -m limit --limit 1/second -j LOG +-A logaccept-final-291 -j ACCEPT +-A logaccept-final-292 -j TEE --gateway 10.0.0.1 +-A logaccept-final-292 -j TEE --gateway 10.0.0.2 +-A logaccept-final-292 -j ACCEPT +-A logaccept-final-293 -m limit --limit 12/minute -j ULOG +-A logaccept-final-293 -j ACCEPT +-A logaccept-final-294 -m limit --limit 1/second -j LOG +-A logaccept-final-294 -j ACCEPT +-A logaccept-final-295 -j TEE --gateway 10.0.0.1 +-A logaccept-final-295 -j TEE --gateway 10.0.0.2 +-A logaccept-final-295 -j ACCEPT +-A logaccept-final-296 -m limit --limit 12/minute -j ULOG +-A logaccept-final-296 -j ACCEPT +-A logaccept-final-297 -m limit --limit 1/second -j LOG +-A logaccept-final-297 -j ACCEPT +-A logaccept-final-298 -j TEE --gateway 10.0.0.1 +-A logaccept-final-298 -j TEE --gateway 10.0.0.2 +-A logaccept-final-298 -j ACCEPT +-A logaccept-final-299 -m limit --limit 12/minute -j ULOG +-A logaccept-final-299 -j ACCEPT +-A logaccept-final-3 -m limit --limit 1/second -j LOG -A logaccept-final-3 -j ACCEPT -A logaccept-final-30 -m limit --limit 1/second -j LOG -A logaccept-final-30 -j ACCEPT --A logaccept-final-31 -m limit --limit 12/minute -j ULOG +-A logaccept-final-300 -m limit --limit 1/second -j LOG +-A logaccept-final-300 -j ACCEPT +-A logaccept-final-301 -j TEE --gateway 10.0.0.1 +-A logaccept-final-301 -j TEE --gateway 10.0.0.2 +-A logaccept-final-301 -j ACCEPT +-A logaccept-final-302 -m limit --limit 12/minute -j ULOG +-A logaccept-final-302 -j ACCEPT +-A logaccept-final-303 -m limit --limit 1/second -j LOG +-A logaccept-final-303 -j ACCEPT +-A logaccept-final-304 -j TEE --gateway 10.0.0.1 +-A logaccept-final-304 -j TEE --gateway 10.0.0.2 +-A logaccept-final-304 -j ACCEPT +-A logaccept-final-305 -m limit --limit 12/minute -j ULOG +-A logaccept-final-305 -j ACCEPT +-A logaccept-final-31 -j TEE --gateway 10.0.0.1 +-A logaccept-final-31 -j TEE --gateway 10.0.0.2 -A logaccept-final-31 -j ACCEPT --A logaccept-final-32 -m limit --limit 1/second -j LOG +-A logaccept-final-32 -m limit --limit 12/minute -j ULOG -A logaccept-final-32 -j ACCEPT --A logaccept-final-33 -m limit --limit 12/minute -j ULOG +-A logaccept-final-33 -m limit --limit 1/second -j LOG -A logaccept-final-33 -j ACCEPT --A logaccept-final-34 -m limit --limit 1/second -j LOG +-A logaccept-final-34 -j TEE --gateway 10.0.0.1 +-A logaccept-final-34 -j TEE --gateway 10.0.0.2 -A logaccept-final-34 -j ACCEPT -A logaccept-final-35 -m limit --limit 12/minute -j ULOG -A logaccept-final-35 -j ACCEPT -A logaccept-final-36 -m limit --limit 1/second -j LOG -A logaccept-final-36 -j ACCEPT --A logaccept-final-37 -m limit --limit 12/minute -j ULOG +-A logaccept-final-37 -j TEE --gateway 10.0.0.1 +-A logaccept-final-37 -j TEE --gateway 10.0.0.2 -A logaccept-final-37 -j ACCEPT --A logaccept-final-38 -m limit --limit 1/second -j LOG +-A logaccept-final-38 -m limit --limit 12/minute -j ULOG -A logaccept-final-38 -j ACCEPT --A logaccept-final-39 -m limit --limit 12/minute -j ULOG +-A logaccept-final-39 -m limit --limit 1/second -j LOG -A logaccept-final-39 -j ACCEPT --A logaccept-final-4 -m limit --limit 1/second -j LOG +-A logaccept-final-4 -j TEE --gateway 10.0.0.1 +-A logaccept-final-4 -j TEE --gateway 10.0.0.2 -A logaccept-final-4 -j ACCEPT --A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j TEE --gateway 10.0.0.1 +-A logaccept-final-40 -j TEE --gateway 10.0.0.2 -A logaccept-final-40 -j ACCEPT -A logaccept-final-41 -m limit --limit 12/minute -j ULOG -A logaccept-final-41 -j ACCEPT -A logaccept-final-42 -m limit --limit 1/second -j LOG -A logaccept-final-42 -j ACCEPT --A logaccept-final-43 -m limit --limit 12/minute -j ULOG +-A logaccept-final-43 -j TEE --gateway 10.0.0.1 +-A logaccept-final-43 -j TEE --gateway 10.0.0.2 -A logaccept-final-43 -j ACCEPT --A logaccept-final-44 -m limit --limit 1/second -j LOG +-A logaccept-final-44 -m limit --limit 12/minute -j ULOG -A logaccept-final-44 -j ACCEPT --A logaccept-final-45 -m limit --limit 12/minute -j ULOG +-A logaccept-final-45 -m limit --limit 1/second -j LOG -A logaccept-final-45 -j ACCEPT --A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j TEE --gateway 10.0.0.1 +-A logaccept-final-46 -j TEE --gateway 10.0.0.2 -A logaccept-final-46 -j ACCEPT -A logaccept-final-47 -m limit --limit 12/minute -j ULOG -A logaccept-final-47 -j ACCEPT -A logaccept-final-48 -m limit --limit 1/second -j LOG -A logaccept-final-48 -j ACCEPT --A logaccept-final-49 -m limit --limit 12/minute -j ULOG +-A logaccept-final-49 -j TEE --gateway 10.0.0.1 +-A logaccept-final-49 -j TEE --gateway 10.0.0.2 -A logaccept-final-49 -j ACCEPT -A logaccept-final-5 -m limit --limit 12/minute -j ULOG -A logaccept-final-5 -j ACCEPT --A logaccept-final-50 -m limit --limit 1/second -j LOG +-A logaccept-final-50 -m limit --limit 12/minute -j ULOG -A logaccept-final-50 -j ACCEPT --A logaccept-final-51 -m limit --limit 12/minute -j ULOG +-A logaccept-final-51 -m limit --limit 1/second -j LOG -A logaccept-final-51 -j ACCEPT --A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j TEE --gateway 10.0.0.1 +-A logaccept-final-52 -j TEE --gateway 10.0.0.2 -A logaccept-final-52 -j ACCEPT -A logaccept-final-53 -m limit --limit 12/minute -j ULOG -A logaccept-final-53 -j ACCEPT -A logaccept-final-54 -m limit --limit 1/second -j LOG -A logaccept-final-54 -j ACCEPT --A logaccept-final-55 -m limit --limit 12/minute -j ULOG +-A logaccept-final-55 -j TEE --gateway 10.0.0.1 +-A logaccept-final-55 -j TEE --gateway 10.0.0.2 -A logaccept-final-55 -j ACCEPT --A logaccept-final-56 -m limit --limit 1/second -j LOG +-A logaccept-final-56 -m limit --limit 12/minute -j ULOG -A logaccept-final-56 -j ACCEPT --A logaccept-final-57 -m limit --limit 12/minute -j ULOG +-A logaccept-final-57 -m limit --limit 1/second -j LOG -A logaccept-final-57 -j ACCEPT --A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j TEE --gateway 10.0.0.1 +-A logaccept-final-58 -j TEE --gateway 10.0.0.2 -A logaccept-final-58 -j ACCEPT -A logaccept-final-59 -m limit --limit 12/minute -j ULOG -A logaccept-final-59 -j ACCEPT @@ -15066,89 +25050,103 @@ -A logaccept-final-6 -j ACCEPT -A logaccept-final-60 -m limit --limit 1/second -j LOG -A logaccept-final-60 -j ACCEPT --A logaccept-final-61 -m limit --limit 12/minute -j ULOG +-A logaccept-final-61 -j TEE --gateway 10.0.0.1 +-A logaccept-final-61 -j TEE --gateway 10.0.0.2 -A logaccept-final-61 -j ACCEPT --A logaccept-final-62 -m limit --limit 1/second -j LOG +-A logaccept-final-62 -m limit --limit 12/minute -j ULOG -A logaccept-final-62 -j ACCEPT --A logaccept-final-63 -m limit --limit 12/minute -j ULOG +-A logaccept-final-63 -m limit --limit 1/second -j LOG -A logaccept-final-63 -j ACCEPT --A logaccept-final-64 -m limit --limit 1/second -j LOG +-A logaccept-final-64 -j TEE --gateway 10.0.0.1 +-A logaccept-final-64 -j TEE --gateway 10.0.0.2 -A logaccept-final-64 -j ACCEPT -A logaccept-final-65 -m limit --limit 12/minute -j ULOG -A logaccept-final-65 -j ACCEPT -A logaccept-final-66 -m limit --limit 1/second -j LOG -A logaccept-final-66 -j ACCEPT --A logaccept-final-67 -m limit --limit 12/minute -j ULOG +-A logaccept-final-67 -j TEE --gateway 10.0.0.1 +-A logaccept-final-67 -j TEE --gateway 10.0.0.2 -A logaccept-final-67 -j ACCEPT --A logaccept-final-68 -m limit --limit 1/second -j LOG +-A logaccept-final-68 -m limit --limit 12/minute -j ULOG -A logaccept-final-68 -j ACCEPT --A logaccept-final-69 -m limit --limit 12/minute -j ULOG +-A logaccept-final-69 -m limit --limit 1/second -j LOG -A logaccept-final-69 -j ACCEPT --A logaccept-final-7 -m limit --limit 12/minute -j ULOG +-A logaccept-final-7 -j TEE --gateway 10.0.0.1 +-A logaccept-final-7 -j TEE --gateway 10.0.0.2 -A logaccept-final-7 -j ACCEPT --A logaccept-final-70 -m limit --limit 1/second -j LOG +-A logaccept-final-70 -j TEE --gateway 10.0.0.1 +-A logaccept-final-70 -j TEE --gateway 10.0.0.2 -A logaccept-final-70 -j ACCEPT -A logaccept-final-71 -m limit --limit 12/minute -j ULOG -A logaccept-final-71 -j ACCEPT -A logaccept-final-72 -m limit --limit 1/second -j LOG -A logaccept-final-72 -j ACCEPT --A logaccept-final-73 -m limit --limit 12/minute -j ULOG +-A logaccept-final-73 -j TEE --gateway 10.0.0.1 +-A logaccept-final-73 -j TEE --gateway 10.0.0.2 -A logaccept-final-73 -j ACCEPT --A logaccept-final-74 -m limit --limit 1/second -j LOG +-A logaccept-final-74 -m limit --limit 12/minute -j ULOG -A logaccept-final-74 -j ACCEPT --A logaccept-final-75 -m limit --limit 12/minute -j ULOG +-A logaccept-final-75 -m limit --limit 1/second -j LOG -A logaccept-final-75 -j ACCEPT --A logaccept-final-76 -m limit --limit 1/second -j LOG +-A logaccept-final-76 -j TEE --gateway 10.0.0.1 +-A logaccept-final-76 -j TEE --gateway 10.0.0.2 -A logaccept-final-76 -j ACCEPT -A logaccept-final-77 -m limit --limit 12/minute -j ULOG -A logaccept-final-77 -j ACCEPT -A logaccept-final-78 -m limit --limit 1/second -j LOG -A logaccept-final-78 -j ACCEPT --A logaccept-final-79 -m limit --limit 12/minute -j ULOG +-A logaccept-final-79 -j TEE --gateway 10.0.0.1 +-A logaccept-final-79 -j TEE --gateway 10.0.0.2 -A logaccept-final-79 -j ACCEPT --A logaccept-final-8 -m limit --limit 1/second -j LOG +-A logaccept-final-8 -m limit --limit 12/minute -j ULOG -A logaccept-final-8 -j ACCEPT --A logaccept-final-80 -m limit --limit 1/second -j LOG +-A logaccept-final-80 -m limit --limit 12/minute -j ULOG -A logaccept-final-80 -j ACCEPT --A logaccept-final-81 -m limit --limit 12/minute -j ULOG +-A logaccept-final-81 -m limit --limit 1/second -j LOG -A logaccept-final-81 -j ACCEPT --A logaccept-final-82 -m limit --limit 1/second -j LOG +-A logaccept-final-82 -j TEE --gateway 10.0.0.1 +-A logaccept-final-82 -j TEE --gateway 10.0.0.2 -A logaccept-final-82 -j ACCEPT -A logaccept-final-83 -m limit --limit 12/minute -j ULOG -A logaccept-final-83 -j ACCEPT -A logaccept-final-84 -m limit --limit 1/second -j LOG -A logaccept-final-84 -j ACCEPT --A logaccept-final-85 -m limit --limit 12/minute -j ULOG +-A logaccept-final-85 -j TEE --gateway 10.0.0.1 +-A logaccept-final-85 -j TEE --gateway 10.0.0.2 -A logaccept-final-85 -j ACCEPT --A logaccept-final-86 -m limit --limit 1/second -j LOG +-A logaccept-final-86 -m limit --limit 12/minute -j ULOG -A logaccept-final-86 -j ACCEPT --A logaccept-final-87 -m limit --limit 12/minute -j ULOG +-A logaccept-final-87 -m limit --limit 1/second -j LOG -A logaccept-final-87 -j ACCEPT --A logaccept-final-88 -m limit --limit 1/second -j LOG +-A logaccept-final-88 -j TEE --gateway 10.0.0.1 +-A logaccept-final-88 -j TEE --gateway 10.0.0.2 -A logaccept-final-88 -j ACCEPT -A logaccept-final-89 -m limit --limit 12/minute -j ULOG -A logaccept-final-89 -j ACCEPT --A logaccept-final-9 -m limit --limit 12/minute -j ULOG +-A logaccept-final-9 -m limit --limit 1/second -j LOG -A logaccept-final-9 -j ACCEPT -A logaccept-final-90 -m limit --limit 1/second -j LOG -A logaccept-final-90 -j ACCEPT --A logaccept-final-91 -m limit --limit 12/minute -j ULOG +-A logaccept-final-91 -j TEE --gateway 10.0.0.1 +-A logaccept-final-91 -j TEE --gateway 10.0.0.2 -A logaccept-final-91 -j ACCEPT --A logaccept-final-92 -m limit --limit 1/second -j LOG +-A logaccept-final-92 -m limit --limit 12/minute -j ULOG -A logaccept-final-92 -j ACCEPT --A logaccept-final-93 -m limit --limit 12/minute -j ULOG +-A logaccept-final-93 -m limit --limit 1/second -j LOG -A logaccept-final-93 -j ACCEPT --A logaccept-final-94 -m limit --limit 1/second -j LOG +-A logaccept-final-94 -j TEE --gateway 10.0.0.1 +-A logaccept-final-94 -j TEE --gateway 10.0.0.2 -A logaccept-final-94 -j ACCEPT -A logaccept-final-95 -m limit --limit 12/minute -j ULOG -A logaccept-final-95 -j ACCEPT -A logaccept-final-96 -m limit --limit 1/second -j LOG -A logaccept-final-96 -j ACCEPT --A logaccept-final-97 -m limit --limit 12/minute -j ULOG +-A logaccept-final-97 -j TEE --gateway 10.0.0.1 +-A logaccept-final-97 -j TEE --gateway 10.0.0.2 -A logaccept-final-97 -j ACCEPT --A logaccept-final-98 -m limit --limit 1/second -j LOG +-A logaccept-final-98 -m limit --limit 12/minute -j ULOG -A logaccept-final-98 -j ACCEPT --A logaccept-final-99 -m limit --limit 12/minute -j ULOG +-A logaccept-final-99 -m limit --limit 1/second -j LOG -A logaccept-final-99 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP @@ -15156,29 +25154,41 @@ -A logdrop-1 -j DROP -A logdrop-10 -m limit --limit 1/second -j LOG -A logdrop-10 -j DROP --A logdrop-100 -m limit --limit 12/minute -j ULOG +-A logdrop-100 -j TEE --gateway 10.0.0.1 +-A logdrop-100 -j TEE --gateway 10.0.0.2 -A logdrop-100 -j DROP --A logdrop-1000 -m limit --limit 12/minute -j ULOG +-A logdrop-1000 -j TEE --gateway 10.0.0.1 +-A logdrop-1000 -j TEE --gateway 10.0.0.2 -A logdrop-1000 -j DROP --A logdrop-1001 -m limit --limit 12/minute -j ULOG +-A logdrop-1001 -j TEE --gateway 10.0.0.1 +-A logdrop-1001 -j TEE --gateway 10.0.0.2 -A logdrop-1001 -j DROP --A logdrop-1002 -m limit --limit 12/minute -j ULOG +-A logdrop-1002 -j TEE --gateway 10.0.0.1 +-A logdrop-1002 -j TEE --gateway 10.0.0.2 -A logdrop-1002 -j DROP --A logdrop-1003 -m limit --limit 12/minute -j ULOG +-A logdrop-1003 -j TEE --gateway 10.0.0.1 +-A logdrop-1003 -j TEE --gateway 10.0.0.2 -A logdrop-1003 -j DROP --A logdrop-1004 -m limit --limit 12/minute -j ULOG +-A logdrop-1004 -j TEE --gateway 10.0.0.1 +-A logdrop-1004 -j TEE --gateway 10.0.0.2 -A logdrop-1004 -j DROP --A logdrop-1005 -m limit --limit 12/minute -j ULOG +-A logdrop-1005 -j TEE --gateway 10.0.0.1 +-A logdrop-1005 -j TEE --gateway 10.0.0.2 -A logdrop-1005 -j DROP --A logdrop-1006 -m limit --limit 12/minute -j ULOG +-A logdrop-1006 -j TEE --gateway 10.0.0.1 +-A logdrop-1006 -j TEE --gateway 10.0.0.2 -A logdrop-1006 -j DROP --A logdrop-1007 -m limit --limit 12/minute -j ULOG +-A logdrop-1007 -j TEE --gateway 10.0.0.1 +-A logdrop-1007 -j TEE --gateway 10.0.0.2 -A logdrop-1007 -j DROP --A logdrop-1008 -m limit --limit 12/minute -j ULOG +-A logdrop-1008 -j TEE --gateway 10.0.0.1 +-A logdrop-1008 -j TEE --gateway 10.0.0.2 -A logdrop-1008 -j DROP --A logdrop-1009 -m limit --limit 12/minute -j ULOG +-A logdrop-1009 -j TEE --gateway 10.0.0.1 +-A logdrop-1009 -j TEE --gateway 10.0.0.2 -A logdrop-1009 -j DROP --A logdrop-101 -m limit --limit 12/minute -j ULOG +-A logdrop-101 -j TEE --gateway 10.0.0.1 +-A logdrop-101 -j TEE --gateway 10.0.0.2 -A logdrop-101 -j DROP -A logdrop-1010 -m limit --limit 12/minute -j ULOG -A logdrop-1010 -j DROP @@ -15200,7 +25210,8 @@ -A logdrop-1018 -j DROP -A logdrop-1019 -m limit --limit 12/minute -j ULOG -A logdrop-1019 -j DROP --A logdrop-102 -m limit --limit 12/minute -j ULOG +-A logdrop-102 -j TEE --gateway 10.0.0.1 +-A logdrop-102 -j TEE --gateway 10.0.0.2 -A logdrop-102 -j DROP -A logdrop-1020 -m limit --limit 12/minute -j ULOG -A logdrop-1020 -j DROP @@ -15222,7 +25233,8 @@ -A logdrop-1028 -j DROP -A logdrop-1029 -m limit --limit 12/minute -j ULOG -A logdrop-1029 -j DROP --A logdrop-103 -m limit --limit 12/minute -j ULOG +-A logdrop-103 -j TEE --gateway 10.0.0.1 +-A logdrop-103 -j TEE --gateway 10.0.0.2 -A logdrop-103 -j DROP -A logdrop-1030 -m limit --limit 12/minute -j ULOG -A logdrop-1030 -j DROP @@ -15244,141 +25256,148 @@ -A logdrop-1038 -j DROP -A logdrop-1039 -m limit --limit 12/minute -j ULOG -A logdrop-1039 -j DROP --A logdrop-104 -m limit --limit 12/minute -j ULOG +-A logdrop-104 -j TEE --gateway 10.0.0.1 +-A logdrop-104 -j TEE --gateway 10.0.0.2 -A logdrop-104 -j DROP --A logdrop-1040 -m limit --limit 1/second -j LOG +-A logdrop-1040 -m limit --limit 12/minute -j ULOG -A logdrop-1040 -j DROP --A logdrop-1041 -m limit --limit 1/second -j LOG +-A logdrop-1041 -m limit --limit 12/minute -j ULOG -A logdrop-1041 -j DROP --A logdrop-1042 -m limit --limit 1/second -j LOG +-A logdrop-1042 -m limit --limit 12/minute -j ULOG -A logdrop-1042 -j DROP --A logdrop-1043 -m limit --limit 1/second -j LOG +-A logdrop-1043 -m limit --limit 12/minute -j ULOG -A logdrop-1043 -j DROP --A logdrop-1044 -m limit --limit 1/second -j LOG +-A logdrop-1044 -m limit --limit 12/minute -j ULOG -A logdrop-1044 -j DROP --A logdrop-1045 -m limit --limit 1/second -j LOG +-A logdrop-1045 -m limit --limit 12/minute -j ULOG -A logdrop-1045 -j DROP --A logdrop-1046 -m limit --limit 1/second -j LOG +-A logdrop-1046 -m limit --limit 12/minute -j ULOG -A logdrop-1046 -j DROP --A logdrop-1047 -m limit --limit 1/second -j LOG +-A logdrop-1047 -m limit --limit 12/minute -j ULOG -A logdrop-1047 -j DROP --A logdrop-1048 -m limit --limit 1/second -j LOG +-A logdrop-1048 -m limit --limit 12/minute -j ULOG -A logdrop-1048 -j DROP --A logdrop-1049 -m limit --limit 1/second -j LOG +-A logdrop-1049 -m limit --limit 12/minute -j ULOG -A logdrop-1049 -j DROP --A logdrop-105 -m limit --limit 12/minute -j ULOG +-A logdrop-105 -j TEE --gateway 10.0.0.1 +-A logdrop-105 -j TEE --gateway 10.0.0.2 -A logdrop-105 -j DROP --A logdrop-1050 -m limit --limit 1/second -j LOG +-A logdrop-1050 -m limit --limit 12/minute -j ULOG -A logdrop-1050 -j DROP --A logdrop-1051 -m limit --limit 1/second -j LOG +-A logdrop-1051 -m limit --limit 12/minute -j ULOG -A logdrop-1051 -j DROP --A logdrop-1052 -m limit --limit 1/second -j LOG +-A logdrop-1052 -m limit --limit 12/minute -j ULOG -A logdrop-1052 -j DROP --A logdrop-1053 -m limit --limit 1/second -j LOG +-A logdrop-1053 -m limit --limit 12/minute -j ULOG -A logdrop-1053 -j DROP --A logdrop-1054 -m limit --limit 1/second -j LOG +-A logdrop-1054 -m limit --limit 12/minute -j ULOG -A logdrop-1054 -j DROP --A logdrop-1055 -m limit --limit 1/second -j LOG +-A logdrop-1055 -m limit --limit 12/minute -j ULOG -A logdrop-1055 -j DROP --A logdrop-1056 -m limit --limit 1/second -j LOG +-A logdrop-1056 -m limit --limit 12/minute -j ULOG -A logdrop-1056 -j DROP --A logdrop-1057 -m limit --limit 1/second -j LOG +-A logdrop-1057 -m limit --limit 12/minute -j ULOG -A logdrop-1057 -j DROP --A logdrop-1058 -m limit --limit 1/second -j LOG +-A logdrop-1058 -m limit --limit 12/minute -j ULOG -A logdrop-1058 -j DROP --A logdrop-1059 -m limit --limit 1/second -j LOG +-A logdrop-1059 -m limit --limit 12/minute -j ULOG -A logdrop-1059 -j DROP --A logdrop-106 -m limit --limit 12/minute -j ULOG +-A logdrop-106 -j TEE --gateway 10.0.0.1 +-A logdrop-106 -j TEE --gateway 10.0.0.2 -A logdrop-106 -j DROP --A logdrop-1060 -m limit --limit 1/second -j LOG +-A logdrop-1060 -m limit --limit 12/minute -j ULOG -A logdrop-1060 -j DROP --A logdrop-1061 -m limit --limit 1/second -j LOG +-A logdrop-1061 -m limit --limit 12/minute -j ULOG -A logdrop-1061 -j DROP --A logdrop-1062 -m limit --limit 1/second -j LOG +-A logdrop-1062 -m limit --limit 12/minute -j ULOG -A logdrop-1062 -j DROP --A logdrop-1063 -m limit --limit 1/second -j LOG +-A logdrop-1063 -m limit --limit 12/minute -j ULOG -A logdrop-1063 -j DROP --A logdrop-1064 -m limit --limit 1/second -j LOG +-A logdrop-1064 -m limit --limit 12/minute -j ULOG -A logdrop-1064 -j DROP --A logdrop-1065 -m limit --limit 1/second -j LOG +-A logdrop-1065 -m limit --limit 12/minute -j ULOG -A logdrop-1065 -j DROP --A logdrop-1066 -m limit --limit 1/second -j LOG +-A logdrop-1066 -m limit --limit 12/minute -j ULOG -A logdrop-1066 -j DROP --A logdrop-1067 -m limit --limit 1/second -j LOG +-A logdrop-1067 -m limit --limit 12/minute -j ULOG -A logdrop-1067 -j DROP --A logdrop-1068 -m limit --limit 1/second -j LOG +-A logdrop-1068 -m limit --limit 12/minute -j ULOG -A logdrop-1068 -j DROP --A logdrop-1069 -m limit --limit 1/second -j LOG +-A logdrop-1069 -m limit --limit 12/minute -j ULOG -A logdrop-1069 -j DROP --A logdrop-107 -m limit --limit 12/minute -j ULOG +-A logdrop-107 -j TEE --gateway 10.0.0.1 +-A logdrop-107 -j TEE --gateway 10.0.0.2 -A logdrop-107 -j DROP --A logdrop-1070 -m limit --limit 1/second -j LOG +-A logdrop-1070 -m limit --limit 12/minute -j ULOG -A logdrop-1070 -j DROP --A logdrop-1071 -m limit --limit 1/second -j LOG +-A logdrop-1071 -m limit --limit 12/minute -j ULOG -A logdrop-1071 -j DROP --A logdrop-1072 -m limit --limit 1/second -j LOG +-A logdrop-1072 -m limit --limit 12/minute -j ULOG -A logdrop-1072 -j DROP --A logdrop-1073 -m limit --limit 1/second -j LOG +-A logdrop-1073 -m limit --limit 12/minute -j ULOG -A logdrop-1073 -j DROP --A logdrop-1074 -m limit --limit 1/second -j LOG +-A logdrop-1074 -m limit --limit 12/minute -j ULOG -A logdrop-1074 -j DROP --A logdrop-1075 -m limit --limit 1/second -j LOG +-A logdrop-1075 -m limit --limit 12/minute -j ULOG -A logdrop-1075 -j DROP --A logdrop-1076 -m limit --limit 1/second -j LOG +-A logdrop-1076 -m limit --limit 12/minute -j ULOG -A logdrop-1076 -j DROP --A logdrop-1077 -m limit --limit 1/second -j LOG +-A logdrop-1077 -m limit --limit 12/minute -j ULOG -A logdrop-1077 -j DROP --A logdrop-1078 -m limit --limit 1/second -j LOG +-A logdrop-1078 -m limit --limit 12/minute -j ULOG -A logdrop-1078 -j DROP --A logdrop-1079 -m limit --limit 1/second -j LOG +-A logdrop-1079 -m limit --limit 12/minute -j ULOG -A logdrop-1079 -j DROP --A logdrop-108 -m limit --limit 12/minute -j ULOG +-A logdrop-108 -j TEE --gateway 10.0.0.1 +-A logdrop-108 -j TEE --gateway 10.0.0.2 -A logdrop-108 -j DROP --A logdrop-1080 -m limit --limit 1/second -j LOG +-A logdrop-1080 -m limit --limit 12/minute -j ULOG -A logdrop-1080 -j DROP --A logdrop-1081 -m limit --limit 1/second -j LOG +-A logdrop-1081 -m limit --limit 12/minute -j ULOG -A logdrop-1081 -j DROP --A logdrop-1082 -m limit --limit 1/second -j LOG +-A logdrop-1082 -m limit --limit 12/minute -j ULOG -A logdrop-1082 -j DROP --A logdrop-1083 -m limit --limit 1/second -j LOG +-A logdrop-1083 -m limit --limit 12/minute -j ULOG -A logdrop-1083 -j DROP --A logdrop-1084 -m limit --limit 1/second -j LOG +-A logdrop-1084 -m limit --limit 12/minute -j ULOG -A logdrop-1084 -j DROP --A logdrop-1085 -m limit --limit 1/second -j LOG +-A logdrop-1085 -m limit --limit 12/minute -j ULOG -A logdrop-1085 -j DROP --A logdrop-1086 -m limit --limit 1/second -j LOG +-A logdrop-1086 -m limit --limit 12/minute -j ULOG -A logdrop-1086 -j DROP --A logdrop-1087 -m limit --limit 1/second -j LOG +-A logdrop-1087 -m limit --limit 12/minute -j ULOG -A logdrop-1087 -j DROP --A logdrop-1088 -m limit --limit 1/second -j LOG +-A logdrop-1088 -m limit --limit 12/minute -j ULOG -A logdrop-1088 -j DROP --A logdrop-1089 -m limit --limit 1/second -j LOG +-A logdrop-1089 -m limit --limit 12/minute -j ULOG -A logdrop-1089 -j DROP --A logdrop-109 -m limit --limit 12/minute -j ULOG +-A logdrop-109 -j TEE --gateway 10.0.0.1 +-A logdrop-109 -j TEE --gateway 10.0.0.2 -A logdrop-109 -j DROP --A logdrop-1090 -m limit --limit 1/second -j LOG +-A logdrop-1090 -m limit --limit 12/minute -j ULOG -A logdrop-1090 -j DROP --A logdrop-1091 -m limit --limit 1/second -j LOG +-A logdrop-1091 -m limit --limit 12/minute -j ULOG -A logdrop-1091 -j DROP --A logdrop-1092 -m limit --limit 1/second -j LOG +-A logdrop-1092 -m limit --limit 12/minute -j ULOG -A logdrop-1092 -j DROP --A logdrop-1093 -m limit --limit 1/second -j LOG +-A logdrop-1093 -m limit --limit 12/minute -j ULOG -A logdrop-1093 -j DROP --A logdrop-1094 -m limit --limit 1/second -j LOG +-A logdrop-1094 -m limit --limit 12/minute -j ULOG -A logdrop-1094 -j DROP --A logdrop-1095 -m limit --limit 1/second -j LOG +-A logdrop-1095 -m limit --limit 12/minute -j ULOG -A logdrop-1095 -j DROP --A logdrop-1096 -m limit --limit 1/second -j LOG +-A logdrop-1096 -m limit --limit 12/minute -j ULOG -A logdrop-1096 -j DROP --A logdrop-1097 -m limit --limit 1/second -j LOG +-A logdrop-1097 -m limit --limit 12/minute -j ULOG -A logdrop-1097 -j DROP --A logdrop-1098 -m limit --limit 1/second -j LOG +-A logdrop-1098 -m limit --limit 12/minute -j ULOG -A logdrop-1098 -j DROP --A logdrop-1099 -m limit --limit 1/second -j LOG +-A logdrop-1099 -m limit --limit 12/minute -j ULOG -A logdrop-1099 -j DROP -A logdrop-11 -m limit --limit 1/second -j LOG -A logdrop-11 -j DROP --A logdrop-110 -m limit --limit 12/minute -j ULOG +-A logdrop-110 -j TEE --gateway 10.0.0.1 +-A logdrop-110 -j TEE --gateway 10.0.0.2 -A logdrop-110 -j DROP -A logdrop-1100 -m limit --limit 1/second -j LOG -A logdrop-1100 -j DROP @@ -15400,409 +25419,2885 @@ -A logdrop-1108 -j DROP -A logdrop-1109 -m limit --limit 1/second -j LOG -A logdrop-1109 -j DROP --A logdrop-111 -m limit --limit 12/minute -j ULOG +-A logdrop-111 -j TEE --gateway 10.0.0.1 +-A logdrop-111 -j TEE --gateway 10.0.0.2 -A logdrop-111 -j DROP -A logdrop-1110 -m limit --limit 1/second -j LOG -A logdrop-1110 -j DROP -A logdrop-1111 -m limit --limit 1/second -j LOG -A logdrop-1111 -j DROP --A logdrop-1112 -m limit --limit 12/minute -j ULOG +-A logdrop-1112 -m limit --limit 1/second -j LOG -A logdrop-1112 -j DROP --A logdrop-1113 -m limit --limit 12/minute -j ULOG +-A logdrop-1113 -m limit --limit 1/second -j LOG -A logdrop-1113 -j DROP --A logdrop-1114 -m limit --limit 12/minute -j ULOG +-A logdrop-1114 -m limit --limit 1/second -j LOG -A logdrop-1114 -j DROP --A logdrop-1115 -m limit --limit 12/minute -j ULOG +-A logdrop-1115 -m limit --limit 1/second -j LOG -A logdrop-1115 -j DROP --A logdrop-1116 -m limit --limit 12/minute -j ULOG +-A logdrop-1116 -m limit --limit 1/second -j LOG -A logdrop-1116 -j DROP --A logdrop-1117 -m limit --limit 12/minute -j ULOG +-A logdrop-1117 -m limit --limit 1/second -j LOG -A logdrop-1117 -j DROP --A logdrop-1118 -m limit --limit 12/minute -j ULOG +-A logdrop-1118 -m limit --limit 1/second -j LOG -A logdrop-1118 -j DROP --A logdrop-1119 -m limit --limit 12/minute -j ULOG +-A logdrop-1119 -m limit --limit 1/second -j LOG -A logdrop-1119 -j DROP --A logdrop-112 -m limit --limit 12/minute -j ULOG +-A logdrop-112 -j TEE --gateway 10.0.0.1 +-A logdrop-112 -j TEE --gateway 10.0.0.2 -A logdrop-112 -j DROP --A logdrop-1120 -m limit --limit 12/minute -j ULOG +-A logdrop-1120 -m limit --limit 1/second -j LOG -A logdrop-1120 -j DROP --A logdrop-1121 -m limit --limit 12/minute -j ULOG +-A logdrop-1121 -m limit --limit 1/second -j LOG -A logdrop-1121 -j DROP --A logdrop-1122 -m limit --limit 12/minute -j ULOG +-A logdrop-1122 -m limit --limit 1/second -j LOG -A logdrop-1122 -j DROP --A logdrop-1123 -m limit --limit 12/minute -j ULOG +-A logdrop-1123 -m limit --limit 1/second -j LOG -A logdrop-1123 -j DROP --A logdrop-1124 -m limit --limit 12/minute -j ULOG +-A logdrop-1124 -m limit --limit 1/second -j LOG -A logdrop-1124 -j DROP --A logdrop-1125 -m limit --limit 12/minute -j ULOG +-A logdrop-1125 -m limit --limit 1/second -j LOG -A logdrop-1125 -j DROP --A logdrop-1126 -m limit --limit 12/minute -j ULOG +-A logdrop-1126 -m limit --limit 1/second -j LOG -A logdrop-1126 -j DROP --A logdrop-1127 -m limit --limit 12/minute -j ULOG +-A logdrop-1127 -m limit --limit 1/second -j LOG -A logdrop-1127 -j DROP --A logdrop-1128 -m limit --limit 12/minute -j ULOG +-A logdrop-1128 -m limit --limit 1/second -j LOG -A logdrop-1128 -j DROP --A logdrop-1129 -m limit --limit 12/minute -j ULOG +-A logdrop-1129 -m limit --limit 1/second -j LOG -A logdrop-1129 -j DROP --A logdrop-113 -m limit --limit 12/minute -j ULOG +-A logdrop-113 -j TEE --gateway 10.0.0.1 +-A logdrop-113 -j TEE --gateway 10.0.0.2 -A logdrop-113 -j DROP --A logdrop-1130 -m limit --limit 12/minute -j ULOG +-A logdrop-1130 -m limit --limit 1/second -j LOG -A logdrop-1130 -j DROP --A logdrop-1131 -m limit --limit 12/minute -j ULOG +-A logdrop-1131 -m limit --limit 1/second -j LOG -A logdrop-1131 -j DROP --A logdrop-1132 -m limit --limit 12/minute -j ULOG +-A logdrop-1132 -m limit --limit 1/second -j LOG -A logdrop-1132 -j DROP --A logdrop-1133 -m limit --limit 12/minute -j ULOG +-A logdrop-1133 -m limit --limit 1/second -j LOG -A logdrop-1133 -j DROP --A logdrop-1134 -m limit --limit 12/minute -j ULOG +-A logdrop-1134 -m limit --limit 1/second -j LOG -A logdrop-1134 -j DROP --A logdrop-1135 -m limit --limit 12/minute -j ULOG +-A logdrop-1135 -m limit --limit 1/second -j LOG -A logdrop-1135 -j DROP --A logdrop-1136 -m limit --limit 12/minute -j ULOG +-A logdrop-1136 -m limit --limit 1/second -j LOG -A logdrop-1136 -j DROP --A logdrop-1137 -m limit --limit 12/minute -j ULOG +-A logdrop-1137 -m limit --limit 1/second -j LOG -A logdrop-1137 -j DROP --A logdrop-1138 -m limit --limit 12/minute -j ULOG +-A logdrop-1138 -m limit --limit 1/second -j LOG -A logdrop-1138 -j DROP --A logdrop-1139 -m limit --limit 12/minute -j ULOG +-A logdrop-1139 -m limit --limit 1/second -j LOG -A logdrop-1139 -j DROP --A logdrop-114 -m limit --limit 12/minute -j ULOG +-A logdrop-114 -j TEE --gateway 10.0.0.1 +-A logdrop-114 -j TEE --gateway 10.0.0.2 -A logdrop-114 -j DROP --A logdrop-1140 -m limit --limit 12/minute -j ULOG +-A logdrop-1140 -m limit --limit 1/second -j LOG -A logdrop-1140 -j DROP --A logdrop-1141 -m limit --limit 12/minute -j ULOG +-A logdrop-1141 -m limit --limit 1/second -j LOG -A logdrop-1141 -j DROP --A logdrop-1142 -m limit --limit 12/minute -j ULOG +-A logdrop-1142 -m limit --limit 1/second -j LOG -A logdrop-1142 -j DROP --A logdrop-1143 -m limit --limit 12/minute -j ULOG +-A logdrop-1143 -m limit --limit 1/second -j LOG -A logdrop-1143 -j DROP --A logdrop-1144 -m limit --limit 12/minute -j ULOG +-A logdrop-1144 -m limit --limit 1/second -j LOG -A logdrop-1144 -j DROP --A logdrop-1145 -m limit --limit 12/minute -j ULOG +-A logdrop-1145 -m limit --limit 1/second -j LOG -A logdrop-1145 -j DROP --A logdrop-1146 -m limit --limit 12/minute -j ULOG +-A logdrop-1146 -m limit --limit 1/second -j LOG -A logdrop-1146 -j DROP --A logdrop-1147 -m limit --limit 12/minute -j ULOG +-A logdrop-1147 -m limit --limit 1/second -j LOG -A logdrop-1147 -j DROP --A logdrop-1148 -m limit --limit 12/minute -j ULOG +-A logdrop-1148 -m limit --limit 1/second -j LOG -A logdrop-1148 -j DROP --A logdrop-1149 -m limit --limit 12/minute -j ULOG +-A logdrop-1149 -m limit --limit 1/second -j LOG -A logdrop-1149 -j DROP --A logdrop-115 -m limit --limit 12/minute -j ULOG +-A logdrop-115 -j TEE --gateway 10.0.0.1 +-A logdrop-115 -j TEE --gateway 10.0.0.2 -A logdrop-115 -j DROP --A logdrop-1150 -m limit --limit 12/minute -j ULOG +-A logdrop-1150 -m limit --limit 1/second -j LOG -A logdrop-1150 -j DROP --A logdrop-1151 -m limit --limit 12/minute -j ULOG +-A logdrop-1151 -m limit --limit 1/second -j LOG -A logdrop-1151 -j DROP --A logdrop-1152 -m limit --limit 12/minute -j ULOG +-A logdrop-1152 -m limit --limit 1/second -j LOG -A logdrop-1152 -j DROP --A logdrop-1153 -m limit --limit 12/minute -j ULOG +-A logdrop-1153 -m limit --limit 1/second -j LOG -A logdrop-1153 -j DROP --A logdrop-1154 -m limit --limit 12/minute -j ULOG +-A logdrop-1154 -m limit --limit 1/second -j LOG -A logdrop-1154 -j DROP --A logdrop-1155 -m limit --limit 12/minute -j ULOG +-A logdrop-1155 -m limit --limit 1/second -j LOG -A logdrop-1155 -j DROP --A logdrop-1156 -m limit --limit 12/minute -j ULOG +-A logdrop-1156 -m limit --limit 1/second -j LOG -A logdrop-1156 -j DROP --A logdrop-1157 -m limit --limit 12/minute -j ULOG +-A logdrop-1157 -m limit --limit 1/second -j LOG -A logdrop-1157 -j DROP --A logdrop-1158 -m limit --limit 12/minute -j ULOG +-A logdrop-1158 -m limit --limit 1/second -j LOG -A logdrop-1158 -j DROP --A logdrop-1159 -m limit --limit 12/minute -j ULOG +-A logdrop-1159 -m limit --limit 1/second -j LOG -A logdrop-1159 -j DROP --A logdrop-116 -m limit --limit 12/minute -j ULOG +-A logdrop-116 -j TEE --gateway 10.0.0.1 +-A logdrop-116 -j TEE --gateway 10.0.0.2 -A logdrop-116 -j DROP --A logdrop-1160 -m limit --limit 12/minute -j ULOG +-A logdrop-1160 -m limit --limit 1/second -j LOG -A logdrop-1160 -j DROP --A logdrop-1161 -m limit --limit 12/minute -j ULOG +-A logdrop-1161 -m limit --limit 1/second -j LOG -A logdrop-1161 -j DROP --A logdrop-1162 -m limit --limit 12/minute -j ULOG +-A logdrop-1162 -m limit --limit 1/second -j LOG -A logdrop-1162 -j DROP --A logdrop-1163 -m limit --limit 12/minute -j ULOG +-A logdrop-1163 -m limit --limit 1/second -j LOG -A logdrop-1163 -j DROP --A logdrop-1164 -m limit --limit 12/minute -j ULOG +-A logdrop-1164 -m limit --limit 1/second -j LOG -A logdrop-1164 -j DROP --A logdrop-1165 -m limit --limit 12/minute -j ULOG +-A logdrop-1165 -m limit --limit 1/second -j LOG -A logdrop-1165 -j DROP --A logdrop-1166 -m limit --limit 12/minute -j ULOG +-A logdrop-1166 -m limit --limit 1/second -j LOG -A logdrop-1166 -j DROP --A logdrop-1167 -m limit --limit 12/minute -j ULOG +-A logdrop-1167 -m limit --limit 1/second -j LOG -A logdrop-1167 -j DROP --A logdrop-1168 -m limit --limit 12/minute -j ULOG +-A logdrop-1168 -m limit --limit 1/second -j LOG -A logdrop-1168 -j DROP --A logdrop-1169 -m limit --limit 12/minute -j ULOG +-A logdrop-1169 -m limit --limit 1/second -j LOG -A logdrop-1169 -j DROP --A logdrop-117 -m limit --limit 12/minute -j ULOG +-A logdrop-117 -j TEE --gateway 10.0.0.1 +-A logdrop-117 -j TEE --gateway 10.0.0.2 -A logdrop-117 -j DROP --A logdrop-1170 -m limit --limit 12/minute -j ULOG +-A logdrop-1170 -m limit --limit 1/second -j LOG -A logdrop-1170 -j DROP --A logdrop-1171 -m limit --limit 12/minute -j ULOG +-A logdrop-1171 -m limit --limit 1/second -j LOG -A logdrop-1171 -j DROP --A logdrop-1172 -m limit --limit 12/minute -j ULOG +-A logdrop-1172 -m limit --limit 1/second -j LOG -A logdrop-1172 -j DROP --A logdrop-1173 -m limit --limit 12/minute -j ULOG +-A logdrop-1173 -m limit --limit 1/second -j LOG -A logdrop-1173 -j DROP --A logdrop-1174 -m limit --limit 12/minute -j ULOG +-A logdrop-1174 -m limit --limit 1/second -j LOG -A logdrop-1174 -j DROP --A logdrop-1175 -m limit --limit 12/minute -j ULOG +-A logdrop-1175 -m limit --limit 1/second -j LOG -A logdrop-1175 -j DROP --A logdrop-1176 -m limit --limit 12/minute -j ULOG +-A logdrop-1176 -m limit --limit 1/second -j LOG -A logdrop-1176 -j DROP --A logdrop-1177 -m limit --limit 12/minute -j ULOG +-A logdrop-1177 -m limit --limit 1/second -j LOG -A logdrop-1177 -j DROP --A logdrop-1178 -m limit --limit 12/minute -j ULOG +-A logdrop-1178 -m limit --limit 1/second -j LOG -A logdrop-1178 -j DROP --A logdrop-1179 -m limit --limit 12/minute -j ULOG +-A logdrop-1179 -m limit --limit 1/second -j LOG -A logdrop-1179 -j DROP --A logdrop-118 -m limit --limit 12/minute -j ULOG +-A logdrop-118 -j TEE --gateway 10.0.0.1 +-A logdrop-118 -j TEE --gateway 10.0.0.2 -A logdrop-118 -j DROP --A logdrop-1180 -m limit --limit 12/minute -j ULOG +-A logdrop-1180 -m limit --limit 1/second -j LOG -A logdrop-1180 -j DROP --A logdrop-1181 -m limit --limit 12/minute -j ULOG +-A logdrop-1181 -m limit --limit 1/second -j LOG -A logdrop-1181 -j DROP --A logdrop-1182 -m limit --limit 12/minute -j ULOG +-A logdrop-1182 -m limit --limit 1/second -j LOG -A logdrop-1182 -j DROP --A logdrop-1183 -m limit --limit 12/minute -j ULOG +-A logdrop-1183 -m limit --limit 1/second -j LOG -A logdrop-1183 -j DROP -A logdrop-1184 -m limit --limit 1/second -j LOG -A logdrop-1184 -j DROP -A logdrop-1185 -m limit --limit 1/second -j LOG -A logdrop-1185 -j DROP --A logdrop-1186 -m limit --limit 12/minute -j ULOG +-A logdrop-1186 -m limit --limit 1/second -j LOG -A logdrop-1186 -j DROP --A logdrop-119 -m limit --limit 12/minute -j ULOG +-A logdrop-1187 -m limit --limit 1/second -j LOG +-A logdrop-1187 -j DROP +-A logdrop-1188 -m limit --limit 1/second -j LOG +-A logdrop-1188 -j DROP +-A logdrop-1189 -m limit --limit 1/second -j LOG +-A logdrop-1189 -j DROP +-A logdrop-119 -j TEE --gateway 10.0.0.1 +-A logdrop-119 -j TEE --gateway 10.0.0.2 -A logdrop-119 -j DROP +-A logdrop-1190 -m limit --limit 1/second -j LOG +-A logdrop-1190 -j DROP +-A logdrop-1191 -m limit --limit 1/second -j LOG +-A logdrop-1191 -j DROP +-A logdrop-1192 -m limit --limit 1/second -j LOG +-A logdrop-1192 -j DROP +-A logdrop-1193 -m limit --limit 1/second -j LOG +-A logdrop-1193 -j DROP +-A logdrop-1194 -m limit --limit 1/second -j LOG +-A logdrop-1194 -j DROP +-A logdrop-1195 -m limit --limit 1/second -j LOG +-A logdrop-1195 -j DROP +-A logdrop-1196 -m limit --limit 1/second -j LOG +-A logdrop-1196 -j DROP +-A logdrop-1197 -m limit --limit 1/second -j LOG +-A logdrop-1197 -j DROP +-A logdrop-1198 -m limit --limit 1/second -j LOG +-A logdrop-1198 -j DROP +-A logdrop-1199 -m limit --limit 1/second -j LOG +-A logdrop-1199 -j DROP -A logdrop-12 -m limit --limit 1/second -j LOG -A logdrop-12 -j DROP --A logdrop-120 -m limit --limit 12/minute -j ULOG +-A logdrop-120 -j TEE --gateway 10.0.0.1 +-A logdrop-120 -j TEE --gateway 10.0.0.2 -A logdrop-120 -j DROP --A logdrop-121 -m limit --limit 12/minute -j ULOG +-A logdrop-1200 -j TEE --gateway 10.0.0.1 +-A logdrop-1200 -j TEE --gateway 10.0.0.2 +-A logdrop-1200 -j DROP +-A logdrop-1201 -j TEE --gateway 10.0.0.1 +-A logdrop-1201 -j TEE --gateway 10.0.0.2 +-A logdrop-1201 -j DROP +-A logdrop-1202 -j TEE --gateway 10.0.0.1 +-A logdrop-1202 -j TEE --gateway 10.0.0.2 +-A logdrop-1202 -j DROP +-A logdrop-1203 -j TEE --gateway 10.0.0.1 +-A logdrop-1203 -j TEE --gateway 10.0.0.2 +-A logdrop-1203 -j DROP +-A logdrop-1204 -j TEE --gateway 10.0.0.1 +-A logdrop-1204 -j TEE --gateway 10.0.0.2 +-A logdrop-1204 -j DROP +-A logdrop-1205 -j TEE --gateway 10.0.0.1 +-A logdrop-1205 -j TEE --gateway 10.0.0.2 +-A logdrop-1205 -j DROP +-A logdrop-1206 -j TEE --gateway 10.0.0.1 +-A logdrop-1206 -j TEE --gateway 10.0.0.2 +-A logdrop-1206 -j DROP +-A logdrop-1207 -j TEE --gateway 10.0.0.1 +-A logdrop-1207 -j TEE --gateway 10.0.0.2 +-A logdrop-1207 -j DROP +-A logdrop-1208 -j TEE --gateway 10.0.0.1 +-A logdrop-1208 -j TEE --gateway 10.0.0.2 +-A logdrop-1208 -j DROP +-A logdrop-1209 -j TEE --gateway 10.0.0.1 +-A logdrop-1209 -j TEE --gateway 10.0.0.2 +-A logdrop-1209 -j DROP +-A logdrop-121 -j TEE --gateway 10.0.0.1 +-A logdrop-121 -j TEE --gateway 10.0.0.2 -A logdrop-121 -j DROP --A logdrop-122 -m limit --limit 12/minute -j ULOG +-A logdrop-1210 -j TEE --gateway 10.0.0.1 +-A logdrop-1210 -j TEE --gateway 10.0.0.2 +-A logdrop-1210 -j DROP +-A logdrop-1211 -j TEE --gateway 10.0.0.1 +-A logdrop-1211 -j TEE --gateway 10.0.0.2 +-A logdrop-1211 -j DROP +-A logdrop-1212 -j TEE --gateway 10.0.0.1 +-A logdrop-1212 -j TEE --gateway 10.0.0.2 +-A logdrop-1212 -j DROP +-A logdrop-1213 -j TEE --gateway 10.0.0.1 +-A logdrop-1213 -j TEE --gateway 10.0.0.2 +-A logdrop-1213 -j DROP +-A logdrop-1214 -j TEE --gateway 10.0.0.1 +-A logdrop-1214 -j TEE --gateway 10.0.0.2 +-A logdrop-1214 -j DROP +-A logdrop-1215 -j TEE --gateway 10.0.0.1 +-A logdrop-1215 -j TEE --gateway 10.0.0.2 +-A logdrop-1215 -j DROP +-A logdrop-1216 -j TEE --gateway 10.0.0.1 +-A logdrop-1216 -j TEE --gateway 10.0.0.2 +-A logdrop-1216 -j DROP +-A logdrop-1217 -j TEE --gateway 10.0.0.1 +-A logdrop-1217 -j TEE --gateway 10.0.0.2 +-A logdrop-1217 -j DROP +-A logdrop-1218 -j TEE --gateway 10.0.0.1 +-A logdrop-1218 -j TEE --gateway 10.0.0.2 +-A logdrop-1218 -j DROP +-A logdrop-1219 -j TEE --gateway 10.0.0.1 +-A logdrop-1219 -j TEE --gateway 10.0.0.2 +-A logdrop-1219 -j DROP +-A logdrop-122 -j TEE --gateway 10.0.0.1 +-A logdrop-122 -j TEE --gateway 10.0.0.2 -A logdrop-122 -j DROP --A logdrop-123 -m limit --limit 12/minute -j ULOG +-A logdrop-1220 -j TEE --gateway 10.0.0.1 +-A logdrop-1220 -j TEE --gateway 10.0.0.2 +-A logdrop-1220 -j DROP +-A logdrop-1221 -j TEE --gateway 10.0.0.1 +-A logdrop-1221 -j TEE --gateway 10.0.0.2 +-A logdrop-1221 -j DROP +-A logdrop-1222 -j TEE --gateway 10.0.0.1 +-A logdrop-1222 -j TEE --gateway 10.0.0.2 +-A logdrop-1222 -j DROP +-A logdrop-1223 -j TEE --gateway 10.0.0.1 +-A logdrop-1223 -j TEE --gateway 10.0.0.2 +-A logdrop-1223 -j DROP +-A logdrop-1224 -j TEE --gateway 10.0.0.1 +-A logdrop-1224 -j TEE --gateway 10.0.0.2 +-A logdrop-1224 -j DROP +-A logdrop-1225 -j TEE --gateway 10.0.0.1 +-A logdrop-1225 -j TEE --gateway 10.0.0.2 +-A logdrop-1225 -j DROP +-A logdrop-1226 -j TEE --gateway 10.0.0.1 +-A logdrop-1226 -j TEE --gateway 10.0.0.2 +-A logdrop-1226 -j DROP +-A logdrop-1227 -j TEE --gateway 10.0.0.1 +-A logdrop-1227 -j TEE --gateway 10.0.0.2 +-A logdrop-1227 -j DROP +-A logdrop-1228 -j TEE --gateway 10.0.0.1 +-A logdrop-1228 -j TEE --gateway 10.0.0.2 +-A logdrop-1228 -j DROP +-A logdrop-1229 -j TEE --gateway 10.0.0.1 +-A logdrop-1229 -j TEE --gateway 10.0.0.2 +-A logdrop-1229 -j DROP +-A logdrop-123 -j TEE --gateway 10.0.0.1 +-A logdrop-123 -j TEE --gateway 10.0.0.2 -A logdrop-123 -j DROP --A logdrop-124 -m limit --limit 12/minute -j ULOG +-A logdrop-1230 -j TEE --gateway 10.0.0.1 +-A logdrop-1230 -j TEE --gateway 10.0.0.2 +-A logdrop-1230 -j DROP +-A logdrop-1231 -j TEE --gateway 10.0.0.1 +-A logdrop-1231 -j TEE --gateway 10.0.0.2 +-A logdrop-1231 -j DROP +-A logdrop-1232 -j TEE --gateway 10.0.0.1 +-A logdrop-1232 -j TEE --gateway 10.0.0.2 +-A logdrop-1232 -j DROP +-A logdrop-1233 -j TEE --gateway 10.0.0.1 +-A logdrop-1233 -j TEE --gateway 10.0.0.2 +-A logdrop-1233 -j DROP +-A logdrop-1234 -j TEE --gateway 10.0.0.1 +-A logdrop-1234 -j TEE --gateway 10.0.0.2 +-A logdrop-1234 -j DROP +-A logdrop-1235 -j TEE --gateway 10.0.0.1 +-A logdrop-1235 -j TEE --gateway 10.0.0.2 +-A logdrop-1235 -j DROP +-A logdrop-1236 -j TEE --gateway 10.0.0.1 +-A logdrop-1236 -j TEE --gateway 10.0.0.2 +-A logdrop-1236 -j DROP +-A logdrop-1237 -j TEE --gateway 10.0.0.1 +-A logdrop-1237 -j TEE --gateway 10.0.0.2 +-A logdrop-1237 -j DROP +-A logdrop-1238 -j TEE --gateway 10.0.0.1 +-A logdrop-1238 -j TEE --gateway 10.0.0.2 +-A logdrop-1238 -j DROP +-A logdrop-1239 -j TEE --gateway 10.0.0.1 +-A logdrop-1239 -j TEE --gateway 10.0.0.2 +-A logdrop-1239 -j DROP +-A logdrop-124 -j TEE --gateway 10.0.0.1 +-A logdrop-124 -j TEE --gateway 10.0.0.2 -A logdrop-124 -j DROP --A logdrop-125 -m limit --limit 12/minute -j ULOG +-A logdrop-1240 -j TEE --gateway 10.0.0.1 +-A logdrop-1240 -j TEE --gateway 10.0.0.2 +-A logdrop-1240 -j DROP +-A logdrop-1241 -j TEE --gateway 10.0.0.1 +-A logdrop-1241 -j TEE --gateway 10.0.0.2 +-A logdrop-1241 -j DROP +-A logdrop-1242 -j TEE --gateway 10.0.0.1 +-A logdrop-1242 -j TEE --gateway 10.0.0.2 +-A logdrop-1242 -j DROP +-A logdrop-1243 -j TEE --gateway 10.0.0.1 +-A logdrop-1243 -j TEE --gateway 10.0.0.2 +-A logdrop-1243 -j DROP +-A logdrop-1244 -j TEE --gateway 10.0.0.1 +-A logdrop-1244 -j TEE --gateway 10.0.0.2 +-A logdrop-1244 -j DROP +-A logdrop-1245 -j TEE --gateway 10.0.0.1 +-A logdrop-1245 -j TEE --gateway 10.0.0.2 +-A logdrop-1245 -j DROP +-A logdrop-1246 -j TEE --gateway 10.0.0.1 +-A logdrop-1246 -j TEE --gateway 10.0.0.2 +-A logdrop-1246 -j DROP +-A logdrop-1247 -j TEE --gateway 10.0.0.1 +-A logdrop-1247 -j TEE --gateway 10.0.0.2 +-A logdrop-1247 -j DROP +-A logdrop-1248 -j TEE --gateway 10.0.0.1 +-A logdrop-1248 -j TEE --gateway 10.0.0.2 +-A logdrop-1248 -j DROP +-A logdrop-1249 -j TEE --gateway 10.0.0.1 +-A logdrop-1249 -j TEE --gateway 10.0.0.2 +-A logdrop-1249 -j DROP +-A logdrop-125 -j TEE --gateway 10.0.0.1 +-A logdrop-125 -j TEE --gateway 10.0.0.2 -A logdrop-125 -j DROP --A logdrop-126 -m limit --limit 12/minute -j ULOG +-A logdrop-1250 -j TEE --gateway 10.0.0.1 +-A logdrop-1250 -j TEE --gateway 10.0.0.2 +-A logdrop-1250 -j DROP +-A logdrop-1251 -j TEE --gateway 10.0.0.1 +-A logdrop-1251 -j TEE --gateway 10.0.0.2 +-A logdrop-1251 -j DROP +-A logdrop-1252 -j TEE --gateway 10.0.0.1 +-A logdrop-1252 -j TEE --gateway 10.0.0.2 +-A logdrop-1252 -j DROP +-A logdrop-1253 -j TEE --gateway 10.0.0.1 +-A logdrop-1253 -j TEE --gateway 10.0.0.2 +-A logdrop-1253 -j DROP +-A logdrop-1254 -j TEE --gateway 10.0.0.1 +-A logdrop-1254 -j TEE --gateway 10.0.0.2 +-A logdrop-1254 -j DROP +-A logdrop-1255 -j TEE --gateway 10.0.0.1 +-A logdrop-1255 -j TEE --gateway 10.0.0.2 +-A logdrop-1255 -j DROP +-A logdrop-1256 -j TEE --gateway 10.0.0.1 +-A logdrop-1256 -j TEE --gateway 10.0.0.2 +-A logdrop-1256 -j DROP +-A logdrop-1257 -j TEE --gateway 10.0.0.1 +-A logdrop-1257 -j TEE --gateway 10.0.0.2 +-A logdrop-1257 -j DROP +-A logdrop-1258 -j TEE --gateway 10.0.0.1 +-A logdrop-1258 -j TEE --gateway 10.0.0.2 +-A logdrop-1258 -j DROP +-A logdrop-1259 -j TEE --gateway 10.0.0.1 +-A logdrop-1259 -j TEE --gateway 10.0.0.2 +-A logdrop-1259 -j DROP +-A logdrop-126 -j TEE --gateway 10.0.0.1 +-A logdrop-126 -j TEE --gateway 10.0.0.2 -A logdrop-126 -j DROP --A logdrop-127 -m limit --limit 12/minute -j ULOG +-A logdrop-1260 -j TEE --gateway 10.0.0.1 +-A logdrop-1260 -j TEE --gateway 10.0.0.2 +-A logdrop-1260 -j DROP +-A logdrop-1261 -j TEE --gateway 10.0.0.1 +-A logdrop-1261 -j TEE --gateway 10.0.0.2 +-A logdrop-1261 -j DROP +-A logdrop-1262 -j TEE --gateway 10.0.0.1 +-A logdrop-1262 -j TEE --gateway 10.0.0.2 +-A logdrop-1262 -j DROP +-A logdrop-1263 -j TEE --gateway 10.0.0.1 +-A logdrop-1263 -j TEE --gateway 10.0.0.2 +-A logdrop-1263 -j DROP +-A logdrop-1264 -j TEE --gateway 10.0.0.1 +-A logdrop-1264 -j TEE --gateway 10.0.0.2 +-A logdrop-1264 -j DROP +-A logdrop-1265 -j TEE --gateway 10.0.0.1 +-A logdrop-1265 -j TEE --gateway 10.0.0.2 +-A logdrop-1265 -j DROP +-A logdrop-1266 -j TEE --gateway 10.0.0.1 +-A logdrop-1266 -j TEE --gateway 10.0.0.2 +-A logdrop-1266 -j DROP +-A logdrop-1267 -j TEE --gateway 10.0.0.1 +-A logdrop-1267 -j TEE --gateway 10.0.0.2 +-A logdrop-1267 -j DROP +-A logdrop-1268 -j TEE --gateway 10.0.0.1 +-A logdrop-1268 -j TEE --gateway 10.0.0.2 +-A logdrop-1268 -j DROP +-A logdrop-1269 -j TEE --gateway 10.0.0.1 +-A logdrop-1269 -j TEE --gateway 10.0.0.2 +-A logdrop-1269 -j DROP +-A logdrop-127 -j TEE --gateway 10.0.0.1 +-A logdrop-127 -j TEE --gateway 10.0.0.2 -A logdrop-127 -j DROP --A logdrop-128 -m limit --limit 12/minute -j ULOG +-A logdrop-1270 -j TEE --gateway 10.0.0.1 +-A logdrop-1270 -j TEE --gateway 10.0.0.2 +-A logdrop-1270 -j DROP +-A logdrop-1271 -j TEE --gateway 10.0.0.1 +-A logdrop-1271 -j TEE --gateway 10.0.0.2 +-A logdrop-1271 -j DROP +-A logdrop-1272 -j TEE --gateway 10.0.0.1 +-A logdrop-1272 -j TEE --gateway 10.0.0.2 +-A logdrop-1272 -j DROP +-A logdrop-1273 -j TEE --gateway 10.0.0.1 +-A logdrop-1273 -j TEE --gateway 10.0.0.2 +-A logdrop-1273 -j DROP +-A logdrop-1274 -j TEE --gateway 10.0.0.1 +-A logdrop-1274 -j TEE --gateway 10.0.0.2 +-A logdrop-1274 -j DROP +-A logdrop-1275 -j TEE --gateway 10.0.0.1 +-A logdrop-1275 -j TEE --gateway 10.0.0.2 +-A logdrop-1275 -j DROP +-A logdrop-1276 -j TEE --gateway 10.0.0.1 +-A logdrop-1276 -j TEE --gateway 10.0.0.2 +-A logdrop-1276 -j DROP +-A logdrop-1277 -j TEE --gateway 10.0.0.1 +-A logdrop-1277 -j TEE --gateway 10.0.0.2 +-A logdrop-1277 -j DROP +-A logdrop-1278 -j TEE --gateway 10.0.0.1 +-A logdrop-1278 -j TEE --gateway 10.0.0.2 +-A logdrop-1278 -j DROP +-A logdrop-1279 -j TEE --gateway 10.0.0.1 +-A logdrop-1279 -j TEE --gateway 10.0.0.2 +-A logdrop-1279 -j DROP +-A logdrop-128 -j TEE --gateway 10.0.0.1 +-A logdrop-128 -j TEE --gateway 10.0.0.2 -A logdrop-128 -j DROP --A logdrop-129 -m limit --limit 12/minute -j ULOG +-A logdrop-1280 -j TEE --gateway 10.0.0.1 +-A logdrop-1280 -j TEE --gateway 10.0.0.2 +-A logdrop-1280 -j DROP +-A logdrop-1281 -j TEE --gateway 10.0.0.1 +-A logdrop-1281 -j TEE --gateway 10.0.0.2 +-A logdrop-1281 -j DROP +-A logdrop-1282 -j TEE --gateway 10.0.0.1 +-A logdrop-1282 -j TEE --gateway 10.0.0.2 +-A logdrop-1282 -j DROP +-A logdrop-1283 -j TEE --gateway 10.0.0.1 +-A logdrop-1283 -j TEE --gateway 10.0.0.2 +-A logdrop-1283 -j DROP +-A logdrop-1284 -j TEE --gateway 10.0.0.1 +-A logdrop-1284 -j TEE --gateway 10.0.0.2 +-A logdrop-1284 -j DROP +-A logdrop-1285 -j TEE --gateway 10.0.0.1 +-A logdrop-1285 -j TEE --gateway 10.0.0.2 +-A logdrop-1285 -j DROP +-A logdrop-1286 -j TEE --gateway 10.0.0.1 +-A logdrop-1286 -j TEE --gateway 10.0.0.2 +-A logdrop-1286 -j DROP +-A logdrop-1287 -j TEE --gateway 10.0.0.1 +-A logdrop-1287 -j TEE --gateway 10.0.0.2 +-A logdrop-1287 -j DROP +-A logdrop-1288 -j TEE --gateway 10.0.0.1 +-A logdrop-1288 -j TEE --gateway 10.0.0.2 +-A logdrop-1288 -j DROP +-A logdrop-1289 -j TEE --gateway 10.0.0.1 +-A logdrop-1289 -j TEE --gateway 10.0.0.2 +-A logdrop-1289 -j DROP +-A logdrop-129 -j TEE --gateway 10.0.0.1 +-A logdrop-129 -j TEE --gateway 10.0.0.2 -A logdrop-129 -j DROP +-A logdrop-1290 -m limit --limit 12/minute -j ULOG +-A logdrop-1290 -j DROP +-A logdrop-1291 -m limit --limit 12/minute -j ULOG +-A logdrop-1291 -j DROP +-A logdrop-1292 -m limit --limit 12/minute -j ULOG +-A logdrop-1292 -j DROP +-A logdrop-1293 -m limit --limit 12/minute -j ULOG +-A logdrop-1293 -j DROP +-A logdrop-1294 -m limit --limit 12/minute -j ULOG +-A logdrop-1294 -j DROP +-A logdrop-1295 -m limit --limit 12/minute -j ULOG +-A logdrop-1295 -j DROP +-A logdrop-1296 -m limit --limit 12/minute -j ULOG +-A logdrop-1296 -j DROP +-A logdrop-1297 -m limit --limit 12/minute -j ULOG +-A logdrop-1297 -j DROP +-A logdrop-1298 -m limit --limit 12/minute -j ULOG +-A logdrop-1298 -j DROP +-A logdrop-1299 -m limit --limit 12/minute -j ULOG +-A logdrop-1299 -j DROP -A logdrop-13 -m limit --limit 1/second -j LOG -A logdrop-13 -j DROP --A logdrop-130 -m limit --limit 12/minute -j ULOG +-A logdrop-130 -j TEE --gateway 10.0.0.1 +-A logdrop-130 -j TEE --gateway 10.0.0.2 -A logdrop-130 -j DROP --A logdrop-131 -m limit --limit 12/minute -j ULOG +-A logdrop-1300 -m limit --limit 12/minute -j ULOG +-A logdrop-1300 -j DROP +-A logdrop-1301 -m limit --limit 12/minute -j ULOG +-A logdrop-1301 -j DROP +-A logdrop-1302 -m limit --limit 12/minute -j ULOG +-A logdrop-1302 -j DROP +-A logdrop-1303 -m limit --limit 12/minute -j ULOG +-A logdrop-1303 -j DROP +-A logdrop-1304 -m limit --limit 12/minute -j ULOG +-A logdrop-1304 -j DROP +-A logdrop-1305 -m limit --limit 12/minute -j ULOG +-A logdrop-1305 -j DROP +-A logdrop-1306 -m limit --limit 12/minute -j ULOG +-A logdrop-1306 -j DROP +-A logdrop-1307 -m limit --limit 12/minute -j ULOG +-A logdrop-1307 -j DROP +-A logdrop-1308 -m limit --limit 12/minute -j ULOG +-A logdrop-1308 -j DROP +-A logdrop-1309 -m limit --limit 12/minute -j ULOG +-A logdrop-1309 -j DROP +-A logdrop-131 -j TEE --gateway 10.0.0.1 +-A logdrop-131 -j TEE --gateway 10.0.0.2 -A logdrop-131 -j DROP --A logdrop-132 -m limit --limit 12/minute -j ULOG +-A logdrop-1310 -m limit --limit 12/minute -j ULOG +-A logdrop-1310 -j DROP +-A logdrop-1311 -m limit --limit 12/minute -j ULOG +-A logdrop-1311 -j DROP +-A logdrop-1312 -m limit --limit 12/minute -j ULOG +-A logdrop-1312 -j DROP +-A logdrop-1313 -m limit --limit 12/minute -j ULOG +-A logdrop-1313 -j DROP +-A logdrop-1314 -m limit --limit 12/minute -j ULOG +-A logdrop-1314 -j DROP +-A logdrop-1315 -m limit --limit 12/minute -j ULOG +-A logdrop-1315 -j DROP +-A logdrop-1316 -m limit --limit 12/minute -j ULOG +-A logdrop-1316 -j DROP +-A logdrop-1317 -m limit --limit 12/minute -j ULOG +-A logdrop-1317 -j DROP +-A logdrop-1318 -m limit --limit 12/minute -j ULOG +-A logdrop-1318 -j DROP +-A logdrop-1319 -m limit --limit 12/minute -j ULOG +-A logdrop-1319 -j DROP +-A logdrop-132 -j TEE --gateway 10.0.0.1 +-A logdrop-132 -j TEE --gateway 10.0.0.2 -A logdrop-132 -j DROP --A logdrop-133 -m limit --limit 12/minute -j ULOG +-A logdrop-1320 -m limit --limit 12/minute -j ULOG +-A logdrop-1320 -j DROP +-A logdrop-1321 -m limit --limit 12/minute -j ULOG +-A logdrop-1321 -j DROP +-A logdrop-1322 -m limit --limit 12/minute -j ULOG +-A logdrop-1322 -j DROP +-A logdrop-1323 -m limit --limit 12/minute -j ULOG +-A logdrop-1323 -j DROP +-A logdrop-1324 -m limit --limit 12/minute -j ULOG +-A logdrop-1324 -j DROP +-A logdrop-1325 -m limit --limit 12/minute -j ULOG +-A logdrop-1325 -j DROP +-A logdrop-1326 -m limit --limit 12/minute -j ULOG +-A logdrop-1326 -j DROP +-A logdrop-1327 -m limit --limit 12/minute -j ULOG +-A logdrop-1327 -j DROP +-A logdrop-1328 -m limit --limit 12/minute -j ULOG +-A logdrop-1328 -j DROP +-A logdrop-1329 -m limit --limit 12/minute -j ULOG +-A logdrop-1329 -j DROP +-A logdrop-133 -j TEE --gateway 10.0.0.1 +-A logdrop-133 -j TEE --gateway 10.0.0.2 -A logdrop-133 -j DROP --A logdrop-134 -m limit --limit 12/minute -j ULOG +-A logdrop-1330 -m limit --limit 12/minute -j ULOG +-A logdrop-1330 -j DROP +-A logdrop-1331 -m limit --limit 12/minute -j ULOG +-A logdrop-1331 -j DROP +-A logdrop-1332 -m limit --limit 12/minute -j ULOG +-A logdrop-1332 -j DROP +-A logdrop-1333 -m limit --limit 12/minute -j ULOG +-A logdrop-1333 -j DROP +-A logdrop-1334 -m limit --limit 12/minute -j ULOG +-A logdrop-1334 -j DROP +-A logdrop-1335 -m limit --limit 12/minute -j ULOG +-A logdrop-1335 -j DROP +-A logdrop-1336 -m limit --limit 12/minute -j ULOG +-A logdrop-1336 -j DROP +-A logdrop-1337 -m limit --limit 12/minute -j ULOG +-A logdrop-1337 -j DROP +-A logdrop-1338 -m limit --limit 12/minute -j ULOG +-A logdrop-1338 -j DROP +-A logdrop-1339 -m limit --limit 12/minute -j ULOG +-A logdrop-1339 -j DROP +-A logdrop-134 -j TEE --gateway 10.0.0.1 +-A logdrop-134 -j TEE --gateway 10.0.0.2 -A logdrop-134 -j DROP --A logdrop-135 -m limit --limit 12/minute -j ULOG +-A logdrop-1340 -m limit --limit 12/minute -j ULOG +-A logdrop-1340 -j DROP +-A logdrop-1341 -m limit --limit 12/minute -j ULOG +-A logdrop-1341 -j DROP +-A logdrop-1342 -m limit --limit 12/minute -j ULOG +-A logdrop-1342 -j DROP +-A logdrop-1343 -m limit --limit 12/minute -j ULOG +-A logdrop-1343 -j DROP +-A logdrop-1344 -m limit --limit 12/minute -j ULOG +-A logdrop-1344 -j DROP +-A logdrop-1345 -m limit --limit 12/minute -j ULOG +-A logdrop-1345 -j DROP +-A logdrop-1346 -m limit --limit 12/minute -j ULOG +-A logdrop-1346 -j DROP +-A logdrop-1347 -m limit --limit 12/minute -j ULOG +-A logdrop-1347 -j DROP +-A logdrop-1348 -m limit --limit 12/minute -j ULOG +-A logdrop-1348 -j DROP +-A logdrop-1349 -m limit --limit 12/minute -j ULOG +-A logdrop-1349 -j DROP +-A logdrop-135 -j TEE --gateway 10.0.0.1 +-A logdrop-135 -j TEE --gateway 10.0.0.2 -A logdrop-135 -j DROP --A logdrop-136 -m limit --limit 12/minute -j ULOG +-A logdrop-1350 -m limit --limit 12/minute -j ULOG +-A logdrop-1350 -j DROP +-A logdrop-1351 -m limit --limit 12/minute -j ULOG +-A logdrop-1351 -j DROP +-A logdrop-1352 -m limit --limit 12/minute -j ULOG +-A logdrop-1352 -j DROP +-A logdrop-1353 -m limit --limit 12/minute -j ULOG +-A logdrop-1353 -j DROP +-A logdrop-1354 -m limit --limit 12/minute -j ULOG +-A logdrop-1354 -j DROP +-A logdrop-1355 -m limit --limit 12/minute -j ULOG +-A logdrop-1355 -j DROP +-A logdrop-1356 -m limit --limit 12/minute -j ULOG +-A logdrop-1356 -j DROP +-A logdrop-1357 -m limit --limit 12/minute -j ULOG +-A logdrop-1357 -j DROP +-A logdrop-1358 -m limit --limit 12/minute -j ULOG +-A logdrop-1358 -j DROP +-A logdrop-1359 -m limit --limit 12/minute -j ULOG +-A logdrop-1359 -j DROP +-A logdrop-136 -j TEE --gateway 10.0.0.1 +-A logdrop-136 -j TEE --gateway 10.0.0.2 -A logdrop-136 -j DROP --A logdrop-137 -m limit --limit 12/minute -j ULOG +-A logdrop-1360 -m limit --limit 12/minute -j ULOG +-A logdrop-1360 -j DROP +-A logdrop-1361 -m limit --limit 12/minute -j ULOG +-A logdrop-1361 -j DROP +-A logdrop-1362 -m limit --limit 12/minute -j ULOG +-A logdrop-1362 -j DROP +-A logdrop-1363 -m limit --limit 12/minute -j ULOG +-A logdrop-1363 -j DROP +-A logdrop-1364 -m limit --limit 12/minute -j ULOG +-A logdrop-1364 -j DROP +-A logdrop-1365 -m limit --limit 12/minute -j ULOG +-A logdrop-1365 -j DROP +-A logdrop-1366 -m limit --limit 12/minute -j ULOG +-A logdrop-1366 -j DROP +-A logdrop-1367 -m limit --limit 12/minute -j ULOG +-A logdrop-1367 -j DROP +-A logdrop-1368 -m limit --limit 12/minute -j ULOG +-A logdrop-1368 -j DROP +-A logdrop-1369 -m limit --limit 12/minute -j ULOG +-A logdrop-1369 -j DROP +-A logdrop-137 -j TEE --gateway 10.0.0.1 +-A logdrop-137 -j TEE --gateway 10.0.0.2 -A logdrop-137 -j DROP --A logdrop-138 -m limit --limit 12/minute -j ULOG +-A logdrop-1370 -m limit --limit 12/minute -j ULOG +-A logdrop-1370 -j DROP +-A logdrop-1371 -m limit --limit 12/minute -j ULOG +-A logdrop-1371 -j DROP +-A logdrop-1372 -m limit --limit 12/minute -j ULOG +-A logdrop-1372 -j DROP +-A logdrop-1373 -m limit --limit 12/minute -j ULOG +-A logdrop-1373 -j DROP +-A logdrop-1374 -m limit --limit 12/minute -j ULOG +-A logdrop-1374 -j DROP +-A logdrop-1375 -m limit --limit 12/minute -j ULOG +-A logdrop-1375 -j DROP +-A logdrop-1376 -m limit --limit 12/minute -j ULOG +-A logdrop-1376 -j DROP +-A logdrop-1377 -m limit --limit 12/minute -j ULOG +-A logdrop-1377 -j DROP +-A logdrop-1378 -m limit --limit 12/minute -j ULOG +-A logdrop-1378 -j DROP +-A logdrop-1379 -m limit --limit 12/minute -j ULOG +-A logdrop-1379 -j DROP +-A logdrop-138 -j TEE --gateway 10.0.0.1 +-A logdrop-138 -j TEE --gateway 10.0.0.2 -A logdrop-138 -j DROP --A logdrop-139 -m limit --limit 12/minute -j ULOG +-A logdrop-1380 -m limit --limit 1/second -j LOG +-A logdrop-1380 -j DROP +-A logdrop-1381 -m limit --limit 1/second -j LOG +-A logdrop-1381 -j DROP +-A logdrop-1382 -m limit --limit 1/second -j LOG +-A logdrop-1382 -j DROP +-A logdrop-1383 -m limit --limit 1/second -j LOG +-A logdrop-1383 -j DROP +-A logdrop-1384 -m limit --limit 1/second -j LOG +-A logdrop-1384 -j DROP +-A logdrop-1385 -m limit --limit 1/second -j LOG +-A logdrop-1385 -j DROP +-A logdrop-1386 -m limit --limit 1/second -j LOG +-A logdrop-1386 -j DROP +-A logdrop-1387 -m limit --limit 1/second -j LOG +-A logdrop-1387 -j DROP +-A logdrop-1388 -m limit --limit 1/second -j LOG +-A logdrop-1388 -j DROP +-A logdrop-1389 -m limit --limit 1/second -j LOG +-A logdrop-1389 -j DROP +-A logdrop-139 -j TEE --gateway 10.0.0.1 +-A logdrop-139 -j TEE --gateway 10.0.0.2 -A logdrop-139 -j DROP +-A logdrop-1390 -m limit --limit 1/second -j LOG +-A logdrop-1390 -j DROP +-A logdrop-1391 -m limit --limit 1/second -j LOG +-A logdrop-1391 -j DROP +-A logdrop-1392 -m limit --limit 1/second -j LOG +-A logdrop-1392 -j DROP +-A logdrop-1393 -m limit --limit 1/second -j LOG +-A logdrop-1393 -j DROP +-A logdrop-1394 -m limit --limit 1/second -j LOG +-A logdrop-1394 -j DROP +-A logdrop-1395 -m limit --limit 1/second -j LOG +-A logdrop-1395 -j DROP +-A logdrop-1396 -m limit --limit 1/second -j LOG +-A logdrop-1396 -j DROP +-A logdrop-1397 -m limit --limit 1/second -j LOG +-A logdrop-1397 -j DROP +-A logdrop-1398 -m limit --limit 1/second -j LOG +-A logdrop-1398 -j DROP +-A logdrop-1399 -m limit --limit 1/second -j LOG +-A logdrop-1399 -j DROP -A logdrop-14 -m limit --limit 1/second -j LOG -A logdrop-14 -j DROP --A logdrop-140 -m limit --limit 12/minute -j ULOG +-A logdrop-140 -j TEE --gateway 10.0.0.1 +-A logdrop-140 -j TEE --gateway 10.0.0.2 -A logdrop-140 -j DROP --A logdrop-141 -m limit --limit 12/minute -j ULOG +-A logdrop-1400 -m limit --limit 1/second -j LOG +-A logdrop-1400 -j DROP +-A logdrop-1401 -m limit --limit 1/second -j LOG +-A logdrop-1401 -j DROP +-A logdrop-1402 -m limit --limit 1/second -j LOG +-A logdrop-1402 -j DROP +-A logdrop-1403 -m limit --limit 1/second -j LOG +-A logdrop-1403 -j DROP +-A logdrop-1404 -m limit --limit 1/second -j LOG +-A logdrop-1404 -j DROP +-A logdrop-1405 -m limit --limit 1/second -j LOG +-A logdrop-1405 -j DROP +-A logdrop-1406 -m limit --limit 1/second -j LOG +-A logdrop-1406 -j DROP +-A logdrop-1407 -m limit --limit 1/second -j LOG +-A logdrop-1407 -j DROP +-A logdrop-1408 -m limit --limit 1/second -j LOG +-A logdrop-1408 -j DROP +-A logdrop-1409 -m limit --limit 1/second -j LOG +-A logdrop-1409 -j DROP +-A logdrop-141 -j TEE --gateway 10.0.0.1 +-A logdrop-141 -j TEE --gateway 10.0.0.2 -A logdrop-141 -j DROP --A logdrop-142 -m limit --limit 12/minute -j ULOG +-A logdrop-1410 -m limit --limit 1/second -j LOG +-A logdrop-1410 -j DROP +-A logdrop-1411 -m limit --limit 1/second -j LOG +-A logdrop-1411 -j DROP +-A logdrop-1412 -m limit --limit 1/second -j LOG +-A logdrop-1412 -j DROP +-A logdrop-1413 -m limit --limit 1/second -j LOG +-A logdrop-1413 -j DROP +-A logdrop-1414 -m limit --limit 1/second -j LOG +-A logdrop-1414 -j DROP +-A logdrop-1415 -m limit --limit 1/second -j LOG +-A logdrop-1415 -j DROP +-A logdrop-1416 -m limit --limit 1/second -j LOG +-A logdrop-1416 -j DROP +-A logdrop-1417 -m limit --limit 1/second -j LOG +-A logdrop-1417 -j DROP +-A logdrop-1418 -m limit --limit 1/second -j LOG +-A logdrop-1418 -j DROP +-A logdrop-1419 -m limit --limit 1/second -j LOG +-A logdrop-1419 -j DROP +-A logdrop-142 -j TEE --gateway 10.0.0.1 +-A logdrop-142 -j TEE --gateway 10.0.0.2 -A logdrop-142 -j DROP --A logdrop-143 -m limit --limit 12/minute -j ULOG +-A logdrop-1420 -m limit --limit 1/second -j LOG +-A logdrop-1420 -j DROP +-A logdrop-1421 -m limit --limit 1/second -j LOG +-A logdrop-1421 -j DROP +-A logdrop-1422 -m limit --limit 1/second -j LOG +-A logdrop-1422 -j DROP +-A logdrop-1423 -m limit --limit 1/second -j LOG +-A logdrop-1423 -j DROP +-A logdrop-1424 -m limit --limit 1/second -j LOG +-A logdrop-1424 -j DROP +-A logdrop-1425 -m limit --limit 1/second -j LOG +-A logdrop-1425 -j DROP +-A logdrop-1426 -m limit --limit 1/second -j LOG +-A logdrop-1426 -j DROP +-A logdrop-1427 -m limit --limit 1/second -j LOG +-A logdrop-1427 -j DROP +-A logdrop-1428 -m limit --limit 1/second -j LOG +-A logdrop-1428 -j DROP +-A logdrop-1429 -m limit --limit 1/second -j LOG +-A logdrop-1429 -j DROP +-A logdrop-143 -j TEE --gateway 10.0.0.1 +-A logdrop-143 -j TEE --gateway 10.0.0.2 -A logdrop-143 -j DROP --A logdrop-144 -m limit --limit 12/minute -j ULOG +-A logdrop-1430 -m limit --limit 1/second -j LOG +-A logdrop-1430 -j DROP +-A logdrop-1431 -m limit --limit 1/second -j LOG +-A logdrop-1431 -j DROP +-A logdrop-1432 -m limit --limit 1/second -j LOG +-A logdrop-1432 -j DROP +-A logdrop-1433 -m limit --limit 1/second -j LOG +-A logdrop-1433 -j DROP +-A logdrop-1434 -m limit --limit 1/second -j LOG +-A logdrop-1434 -j DROP +-A logdrop-1435 -m limit --limit 1/second -j LOG +-A logdrop-1435 -j DROP +-A logdrop-1436 -m limit --limit 1/second -j LOG +-A logdrop-1436 -j DROP +-A logdrop-1437 -m limit --limit 1/second -j LOG +-A logdrop-1437 -j DROP +-A logdrop-1438 -m limit --limit 1/second -j LOG +-A logdrop-1438 -j DROP +-A logdrop-1439 -m limit --limit 1/second -j LOG +-A logdrop-1439 -j DROP +-A logdrop-144 -j TEE --gateway 10.0.0.1 +-A logdrop-144 -j TEE --gateway 10.0.0.2 -A logdrop-144 -j DROP --A logdrop-145 -m limit --limit 12/minute -j ULOG +-A logdrop-1440 -m limit --limit 1/second -j LOG +-A logdrop-1440 -j DROP +-A logdrop-1441 -m limit --limit 1/second -j LOG +-A logdrop-1441 -j DROP +-A logdrop-1442 -m limit --limit 1/second -j LOG +-A logdrop-1442 -j DROP +-A logdrop-1443 -m limit --limit 1/second -j LOG +-A logdrop-1443 -j DROP +-A logdrop-1444 -m limit --limit 1/second -j LOG +-A logdrop-1444 -j DROP +-A logdrop-1445 -m limit --limit 1/second -j LOG +-A logdrop-1445 -j DROP +-A logdrop-1446 -m limit --limit 1/second -j LOG +-A logdrop-1446 -j DROP +-A logdrop-1447 -m limit --limit 1/second -j LOG +-A logdrop-1447 -j DROP +-A logdrop-1448 -m limit --limit 1/second -j LOG +-A logdrop-1448 -j DROP +-A logdrop-1449 -m limit --limit 1/second -j LOG +-A logdrop-1449 -j DROP +-A logdrop-145 -j TEE --gateway 10.0.0.1 +-A logdrop-145 -j TEE --gateway 10.0.0.2 -A logdrop-145 -j DROP --A logdrop-146 -m limit --limit 12/minute -j ULOG +-A logdrop-1450 -m limit --limit 1/second -j LOG +-A logdrop-1450 -j DROP +-A logdrop-1451 -m limit --limit 1/second -j LOG +-A logdrop-1451 -j DROP +-A logdrop-1452 -m limit --limit 1/second -j LOG +-A logdrop-1452 -j DROP +-A logdrop-1453 -m limit --limit 1/second -j LOG +-A logdrop-1453 -j DROP +-A logdrop-1454 -m limit --limit 1/second -j LOG +-A logdrop-1454 -j DROP +-A logdrop-1455 -m limit --limit 1/second -j LOG +-A logdrop-1455 -j DROP +-A logdrop-1456 -m limit --limit 1/second -j LOG +-A logdrop-1456 -j DROP +-A logdrop-1457 -m limit --limit 1/second -j LOG +-A logdrop-1457 -j DROP +-A logdrop-1458 -m limit --limit 1/second -j LOG +-A logdrop-1458 -j DROP +-A logdrop-1459 -m limit --limit 1/second -j LOG +-A logdrop-1459 -j DROP +-A logdrop-146 -j TEE --gateway 10.0.0.1 +-A logdrop-146 -j TEE --gateway 10.0.0.2 -A logdrop-146 -j DROP --A logdrop-147 -m limit --limit 12/minute -j ULOG +-A logdrop-1460 -m limit --limit 1/second -j LOG +-A logdrop-1460 -j DROP +-A logdrop-1461 -m limit --limit 1/second -j LOG +-A logdrop-1461 -j DROP +-A logdrop-1462 -m limit --limit 1/second -j LOG +-A logdrop-1462 -j DROP +-A logdrop-1463 -m limit --limit 1/second -j LOG +-A logdrop-1463 -j DROP +-A logdrop-1464 -m limit --limit 1/second -j LOG +-A logdrop-1464 -j DROP +-A logdrop-1465 -m limit --limit 1/second -j LOG +-A logdrop-1465 -j DROP +-A logdrop-1466 -m limit --limit 1/second -j LOG +-A logdrop-1466 -j DROP +-A logdrop-1467 -m limit --limit 1/second -j LOG +-A logdrop-1467 -j DROP +-A logdrop-1468 -m limit --limit 1/second -j LOG +-A logdrop-1468 -j DROP +-A logdrop-1469 -m limit --limit 1/second -j LOG +-A logdrop-1469 -j DROP +-A logdrop-147 -j TEE --gateway 10.0.0.1 +-A logdrop-147 -j TEE --gateway 10.0.0.2 -A logdrop-147 -j DROP --A logdrop-148 -m limit --limit 12/minute -j ULOG +-A logdrop-1470 -j TEE --gateway 10.0.0.1 +-A logdrop-1470 -j TEE --gateway 10.0.0.2 +-A logdrop-1470 -j DROP +-A logdrop-1471 -j TEE --gateway 10.0.0.1 +-A logdrop-1471 -j TEE --gateway 10.0.0.2 +-A logdrop-1471 -j DROP +-A logdrop-1472 -j TEE --gateway 10.0.0.1 +-A logdrop-1472 -j TEE --gateway 10.0.0.2 +-A logdrop-1472 -j DROP +-A logdrop-1473 -j TEE --gateway 10.0.0.1 +-A logdrop-1473 -j TEE --gateway 10.0.0.2 +-A logdrop-1473 -j DROP +-A logdrop-1474 -j TEE --gateway 10.0.0.1 +-A logdrop-1474 -j TEE --gateway 10.0.0.2 +-A logdrop-1474 -j DROP +-A logdrop-1475 -j TEE --gateway 10.0.0.1 +-A logdrop-1475 -j TEE --gateway 10.0.0.2 +-A logdrop-1475 -j DROP +-A logdrop-1476 -j TEE --gateway 10.0.0.1 +-A logdrop-1476 -j TEE --gateway 10.0.0.2 +-A logdrop-1476 -j DROP +-A logdrop-1477 -j TEE --gateway 10.0.0.1 +-A logdrop-1477 -j TEE --gateway 10.0.0.2 +-A logdrop-1477 -j DROP +-A logdrop-1478 -j TEE --gateway 10.0.0.1 +-A logdrop-1478 -j TEE --gateway 10.0.0.2 +-A logdrop-1478 -j DROP +-A logdrop-1479 -j TEE --gateway 10.0.0.1 +-A logdrop-1479 -j TEE --gateway 10.0.0.2 +-A logdrop-1479 -j DROP +-A logdrop-148 -j TEE --gateway 10.0.0.1 +-A logdrop-148 -j TEE --gateway 10.0.0.2 -A logdrop-148 -j DROP --A logdrop-149 -m limit --limit 12/minute -j ULOG +-A logdrop-1480 -j TEE --gateway 10.0.0.1 +-A logdrop-1480 -j TEE --gateway 10.0.0.2 +-A logdrop-1480 -j DROP +-A logdrop-1481 -j TEE --gateway 10.0.0.1 +-A logdrop-1481 -j TEE --gateway 10.0.0.2 +-A logdrop-1481 -j DROP +-A logdrop-1482 -j TEE --gateway 10.0.0.1 +-A logdrop-1482 -j TEE --gateway 10.0.0.2 +-A logdrop-1482 -j DROP +-A logdrop-1483 -j TEE --gateway 10.0.0.1 +-A logdrop-1483 -j TEE --gateway 10.0.0.2 +-A logdrop-1483 -j DROP +-A logdrop-1484 -j TEE --gateway 10.0.0.1 +-A logdrop-1484 -j TEE --gateway 10.0.0.2 +-A logdrop-1484 -j DROP +-A logdrop-1485 -j TEE --gateway 10.0.0.1 +-A logdrop-1485 -j TEE --gateway 10.0.0.2 +-A logdrop-1485 -j DROP +-A logdrop-1486 -j TEE --gateway 10.0.0.1 +-A logdrop-1486 -j TEE --gateway 10.0.0.2 +-A logdrop-1486 -j DROP +-A logdrop-1487 -j TEE --gateway 10.0.0.1 +-A logdrop-1487 -j TEE --gateway 10.0.0.2 +-A logdrop-1487 -j DROP +-A logdrop-1488 -j TEE --gateway 10.0.0.1 +-A logdrop-1488 -j TEE --gateway 10.0.0.2 +-A logdrop-1488 -j DROP +-A logdrop-1489 -j TEE --gateway 10.0.0.1 +-A logdrop-1489 -j TEE --gateway 10.0.0.2 +-A logdrop-1489 -j DROP +-A logdrop-149 -j TEE --gateway 10.0.0.1 +-A logdrop-149 -j TEE --gateway 10.0.0.2 -A logdrop-149 -j DROP +-A logdrop-1490 -j TEE --gateway 10.0.0.1 +-A logdrop-1490 -j TEE --gateway 10.0.0.2 +-A logdrop-1490 -j DROP +-A logdrop-1491 -j TEE --gateway 10.0.0.1 +-A logdrop-1491 -j TEE --gateway 10.0.0.2 +-A logdrop-1491 -j DROP +-A logdrop-1492 -j TEE --gateway 10.0.0.1 +-A logdrop-1492 -j TEE --gateway 10.0.0.2 +-A logdrop-1492 -j DROP +-A logdrop-1493 -j TEE --gateway 10.0.0.1 +-A logdrop-1493 -j TEE --gateway 10.0.0.2 +-A logdrop-1493 -j DROP +-A logdrop-1494 -j TEE --gateway 10.0.0.1 +-A logdrop-1494 -j TEE --gateway 10.0.0.2 +-A logdrop-1494 -j DROP +-A logdrop-1495 -j TEE --gateway 10.0.0.1 +-A logdrop-1495 -j TEE --gateway 10.0.0.2 +-A logdrop-1495 -j DROP +-A logdrop-1496 -j TEE --gateway 10.0.0.1 +-A logdrop-1496 -j TEE --gateway 10.0.0.2 +-A logdrop-1496 -j DROP +-A logdrop-1497 -j TEE --gateway 10.0.0.1 +-A logdrop-1497 -j TEE --gateway 10.0.0.2 +-A logdrop-1497 -j DROP +-A logdrop-1498 -j TEE --gateway 10.0.0.1 +-A logdrop-1498 -j TEE --gateway 10.0.0.2 +-A logdrop-1498 -j DROP +-A logdrop-1499 -j TEE --gateway 10.0.0.1 +-A logdrop-1499 -j TEE --gateway 10.0.0.2 +-A logdrop-1499 -j DROP -A logdrop-15 -m limit --limit 1/second -j LOG -A logdrop-15 -j DROP --A logdrop-150 -m limit --limit 12/minute -j ULOG +-A logdrop-150 -j TEE --gateway 10.0.0.1 +-A logdrop-150 -j TEE --gateway 10.0.0.2 -A logdrop-150 -j DROP --A logdrop-151 -m limit --limit 12/minute -j ULOG +-A logdrop-1500 -j TEE --gateway 10.0.0.1 +-A logdrop-1500 -j TEE --gateway 10.0.0.2 +-A logdrop-1500 -j DROP +-A logdrop-1501 -j TEE --gateway 10.0.0.1 +-A logdrop-1501 -j TEE --gateway 10.0.0.2 +-A logdrop-1501 -j DROP +-A logdrop-1502 -j TEE --gateway 10.0.0.1 +-A logdrop-1502 -j TEE --gateway 10.0.0.2 +-A logdrop-1502 -j DROP +-A logdrop-1503 -j TEE --gateway 10.0.0.1 +-A logdrop-1503 -j TEE --gateway 10.0.0.2 +-A logdrop-1503 -j DROP +-A logdrop-1504 -j TEE --gateway 10.0.0.1 +-A logdrop-1504 -j TEE --gateway 10.0.0.2 +-A logdrop-1504 -j DROP +-A logdrop-1505 -j TEE --gateway 10.0.0.1 +-A logdrop-1505 -j TEE --gateway 10.0.0.2 +-A logdrop-1505 -j DROP +-A logdrop-1506 -j TEE --gateway 10.0.0.1 +-A logdrop-1506 -j TEE --gateway 10.0.0.2 +-A logdrop-1506 -j DROP +-A logdrop-1507 -j TEE --gateway 10.0.0.1 +-A logdrop-1507 -j TEE --gateway 10.0.0.2 +-A logdrop-1507 -j DROP +-A logdrop-1508 -j TEE --gateway 10.0.0.1 +-A logdrop-1508 -j TEE --gateway 10.0.0.2 +-A logdrop-1508 -j DROP +-A logdrop-1509 -j TEE --gateway 10.0.0.1 +-A logdrop-1509 -j TEE --gateway 10.0.0.2 +-A logdrop-1509 -j DROP +-A logdrop-151 -j TEE --gateway 10.0.0.1 +-A logdrop-151 -j TEE --gateway 10.0.0.2 -A logdrop-151 -j DROP --A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-1510 -j TEE --gateway 10.0.0.1 +-A logdrop-1510 -j TEE --gateway 10.0.0.2 +-A logdrop-1510 -j DROP +-A logdrop-1511 -j TEE --gateway 10.0.0.1 +-A logdrop-1511 -j TEE --gateway 10.0.0.2 +-A logdrop-1511 -j DROP +-A logdrop-1512 -j TEE --gateway 10.0.0.1 +-A logdrop-1512 -j TEE --gateway 10.0.0.2 +-A logdrop-1512 -j DROP +-A logdrop-1513 -j TEE --gateway 10.0.0.1 +-A logdrop-1513 -j TEE --gateway 10.0.0.2 +-A logdrop-1513 -j DROP +-A logdrop-1514 -j TEE --gateway 10.0.0.1 +-A logdrop-1514 -j TEE --gateway 10.0.0.2 +-A logdrop-1514 -j DROP +-A logdrop-1515 -j TEE --gateway 10.0.0.1 +-A logdrop-1515 -j TEE --gateway 10.0.0.2 +-A logdrop-1515 -j DROP +-A logdrop-1516 -j TEE --gateway 10.0.0.1 +-A logdrop-1516 -j TEE --gateway 10.0.0.2 +-A logdrop-1516 -j DROP +-A logdrop-1517 -j TEE --gateway 10.0.0.1 +-A logdrop-1517 -j TEE --gateway 10.0.0.2 +-A logdrop-1517 -j DROP +-A logdrop-1518 -j TEE --gateway 10.0.0.1 +-A logdrop-1518 -j TEE --gateway 10.0.0.2 +-A logdrop-1518 -j DROP +-A logdrop-1519 -j TEE --gateway 10.0.0.1 +-A logdrop-1519 -j TEE --gateway 10.0.0.2 +-A logdrop-1519 -j DROP +-A logdrop-152 -j TEE --gateway 10.0.0.1 +-A logdrop-152 -j TEE --gateway 10.0.0.2 -A logdrop-152 -j DROP --A logdrop-153 -m limit --limit 1/second -j LOG +-A logdrop-1520 -j TEE --gateway 10.0.0.1 +-A logdrop-1520 -j TEE --gateway 10.0.0.2 +-A logdrop-1520 -j DROP +-A logdrop-1521 -j TEE --gateway 10.0.0.1 +-A logdrop-1521 -j TEE --gateway 10.0.0.2 +-A logdrop-1521 -j DROP +-A logdrop-1522 -j TEE --gateway 10.0.0.1 +-A logdrop-1522 -j TEE --gateway 10.0.0.2 +-A logdrop-1522 -j DROP +-A logdrop-1523 -j TEE --gateway 10.0.0.1 +-A logdrop-1523 -j TEE --gateway 10.0.0.2 +-A logdrop-1523 -j DROP +-A logdrop-1524 -j TEE --gateway 10.0.0.1 +-A logdrop-1524 -j TEE --gateway 10.0.0.2 +-A logdrop-1524 -j DROP +-A logdrop-1525 -j TEE --gateway 10.0.0.1 +-A logdrop-1525 -j TEE --gateway 10.0.0.2 +-A logdrop-1525 -j DROP +-A logdrop-1526 -j TEE --gateway 10.0.0.1 +-A logdrop-1526 -j TEE --gateway 10.0.0.2 +-A logdrop-1526 -j DROP +-A logdrop-1527 -j TEE --gateway 10.0.0.1 +-A logdrop-1527 -j TEE --gateway 10.0.0.2 +-A logdrop-1527 -j DROP +-A logdrop-1528 -j TEE --gateway 10.0.0.1 +-A logdrop-1528 -j TEE --gateway 10.0.0.2 +-A logdrop-1528 -j DROP +-A logdrop-1529 -j TEE --gateway 10.0.0.1 +-A logdrop-1529 -j TEE --gateway 10.0.0.2 +-A logdrop-1529 -j DROP +-A logdrop-153 -j TEE --gateway 10.0.0.1 +-A logdrop-153 -j TEE --gateway 10.0.0.2 -A logdrop-153 -j DROP --A logdrop-154 -m limit --limit 1/second -j LOG +-A logdrop-1530 -j TEE --gateway 10.0.0.1 +-A logdrop-1530 -j TEE --gateway 10.0.0.2 +-A logdrop-1530 -j DROP +-A logdrop-1531 -j TEE --gateway 10.0.0.1 +-A logdrop-1531 -j TEE --gateway 10.0.0.2 +-A logdrop-1531 -j DROP +-A logdrop-1532 -j TEE --gateway 10.0.0.1 +-A logdrop-1532 -j TEE --gateway 10.0.0.2 +-A logdrop-1532 -j DROP +-A logdrop-1533 -j TEE --gateway 10.0.0.1 +-A logdrop-1533 -j TEE --gateway 10.0.0.2 +-A logdrop-1533 -j DROP +-A logdrop-1534 -j TEE --gateway 10.0.0.1 +-A logdrop-1534 -j TEE --gateway 10.0.0.2 +-A logdrop-1534 -j DROP +-A logdrop-1535 -j TEE --gateway 10.0.0.1 +-A logdrop-1535 -j TEE --gateway 10.0.0.2 +-A logdrop-1535 -j DROP +-A logdrop-1536 -j TEE --gateway 10.0.0.1 +-A logdrop-1536 -j TEE --gateway 10.0.0.2 +-A logdrop-1536 -j DROP +-A logdrop-1537 -j TEE --gateway 10.0.0.1 +-A logdrop-1537 -j TEE --gateway 10.0.0.2 +-A logdrop-1537 -j DROP +-A logdrop-1538 -j TEE --gateway 10.0.0.1 +-A logdrop-1538 -j TEE --gateway 10.0.0.2 +-A logdrop-1538 -j DROP +-A logdrop-1539 -j TEE --gateway 10.0.0.1 +-A logdrop-1539 -j TEE --gateway 10.0.0.2 +-A logdrop-1539 -j DROP +-A logdrop-154 -j TEE --gateway 10.0.0.1 +-A logdrop-154 -j TEE --gateway 10.0.0.2 -A logdrop-154 -j DROP --A logdrop-155 -m limit --limit 1/second -j LOG +-A logdrop-1540 -j TEE --gateway 10.0.0.1 +-A logdrop-1540 -j TEE --gateway 10.0.0.2 +-A logdrop-1540 -j DROP +-A logdrop-1541 -j TEE --gateway 10.0.0.1 +-A logdrop-1541 -j TEE --gateway 10.0.0.2 +-A logdrop-1541 -j DROP +-A logdrop-1542 -j TEE --gateway 10.0.0.1 +-A logdrop-1542 -j TEE --gateway 10.0.0.2 +-A logdrop-1542 -j DROP +-A logdrop-1543 -j TEE --gateway 10.0.0.1 +-A logdrop-1543 -j TEE --gateway 10.0.0.2 +-A logdrop-1543 -j DROP +-A logdrop-1544 -j TEE --gateway 10.0.0.1 +-A logdrop-1544 -j TEE --gateway 10.0.0.2 +-A logdrop-1544 -j DROP +-A logdrop-1545 -j TEE --gateway 10.0.0.1 +-A logdrop-1545 -j TEE --gateway 10.0.0.2 +-A logdrop-1545 -j DROP +-A logdrop-1546 -j TEE --gateway 10.0.0.1 +-A logdrop-1546 -j TEE --gateway 10.0.0.2 +-A logdrop-1546 -j DROP +-A logdrop-1547 -j TEE --gateway 10.0.0.1 +-A logdrop-1547 -j TEE --gateway 10.0.0.2 +-A logdrop-1547 -j DROP +-A logdrop-1548 -j TEE --gateway 10.0.0.1 +-A logdrop-1548 -j TEE --gateway 10.0.0.2 +-A logdrop-1548 -j DROP +-A logdrop-1549 -j TEE --gateway 10.0.0.1 +-A logdrop-1549 -j TEE --gateway 10.0.0.2 +-A logdrop-1549 -j DROP +-A logdrop-155 -j TEE --gateway 10.0.0.1 +-A logdrop-155 -j TEE --gateway 10.0.0.2 -A logdrop-155 -j DROP --A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-1550 -j TEE --gateway 10.0.0.1 +-A logdrop-1550 -j TEE --gateway 10.0.0.2 +-A logdrop-1550 -j DROP +-A logdrop-1551 -j TEE --gateway 10.0.0.1 +-A logdrop-1551 -j TEE --gateway 10.0.0.2 +-A logdrop-1551 -j DROP +-A logdrop-1552 -j TEE --gateway 10.0.0.1 +-A logdrop-1552 -j TEE --gateway 10.0.0.2 +-A logdrop-1552 -j DROP +-A logdrop-1553 -j TEE --gateway 10.0.0.1 +-A logdrop-1553 -j TEE --gateway 10.0.0.2 +-A logdrop-1553 -j DROP +-A logdrop-1554 -j TEE --gateway 10.0.0.1 +-A logdrop-1554 -j TEE --gateway 10.0.0.2 +-A logdrop-1554 -j DROP +-A logdrop-1555 -j TEE --gateway 10.0.0.1 +-A logdrop-1555 -j TEE --gateway 10.0.0.2 +-A logdrop-1555 -j DROP +-A logdrop-1556 -j TEE --gateway 10.0.0.1 +-A logdrop-1556 -j TEE --gateway 10.0.0.2 +-A logdrop-1556 -j DROP +-A logdrop-1557 -j TEE --gateway 10.0.0.1 +-A logdrop-1557 -j TEE --gateway 10.0.0.2 +-A logdrop-1557 -j DROP +-A logdrop-1558 -j TEE --gateway 10.0.0.1 +-A logdrop-1558 -j TEE --gateway 10.0.0.2 +-A logdrop-1558 -j DROP +-A logdrop-1559 -j TEE --gateway 10.0.0.1 +-A logdrop-1559 -j TEE --gateway 10.0.0.2 +-A logdrop-1559 -j DROP +-A logdrop-156 -j TEE --gateway 10.0.0.1 +-A logdrop-156 -j TEE --gateway 10.0.0.2 -A logdrop-156 -j DROP --A logdrop-157 -m limit --limit 1/second -j LOG +-A logdrop-1560 -m limit --limit 12/minute -j ULOG +-A logdrop-1560 -j DROP +-A logdrop-1561 -m limit --limit 12/minute -j ULOG +-A logdrop-1561 -j DROP +-A logdrop-1562 -m limit --limit 12/minute -j ULOG +-A logdrop-1562 -j DROP +-A logdrop-1563 -m limit --limit 12/minute -j ULOG +-A logdrop-1563 -j DROP +-A logdrop-1564 -m limit --limit 12/minute -j ULOG +-A logdrop-1564 -j DROP +-A logdrop-1565 -m limit --limit 12/minute -j ULOG +-A logdrop-1565 -j DROP +-A logdrop-1566 -m limit --limit 12/minute -j ULOG +-A logdrop-1566 -j DROP +-A logdrop-1567 -m limit --limit 12/minute -j ULOG +-A logdrop-1567 -j DROP +-A logdrop-1568 -m limit --limit 12/minute -j ULOG +-A logdrop-1568 -j DROP +-A logdrop-1569 -m limit --limit 12/minute -j ULOG +-A logdrop-1569 -j DROP +-A logdrop-157 -j TEE --gateway 10.0.0.1 +-A logdrop-157 -j TEE --gateway 10.0.0.2 -A logdrop-157 -j DROP --A logdrop-158 -m limit --limit 1/second -j LOG +-A logdrop-1570 -m limit --limit 12/minute -j ULOG +-A logdrop-1570 -j DROP +-A logdrop-1571 -m limit --limit 12/minute -j ULOG +-A logdrop-1571 -j DROP +-A logdrop-1572 -m limit --limit 12/minute -j ULOG +-A logdrop-1572 -j DROP +-A logdrop-1573 -m limit --limit 12/minute -j ULOG +-A logdrop-1573 -j DROP +-A logdrop-1574 -m limit --limit 12/minute -j ULOG +-A logdrop-1574 -j DROP +-A logdrop-1575 -m limit --limit 12/minute -j ULOG +-A logdrop-1575 -j DROP +-A logdrop-1576 -m limit --limit 12/minute -j ULOG +-A logdrop-1576 -j DROP +-A logdrop-1577 -m limit --limit 12/minute -j ULOG +-A logdrop-1577 -j DROP +-A logdrop-1578 -m limit --limit 12/minute -j ULOG +-A logdrop-1578 -j DROP +-A logdrop-1579 -m limit --limit 12/minute -j ULOG +-A logdrop-1579 -j DROP +-A logdrop-158 -j TEE --gateway 10.0.0.1 +-A logdrop-158 -j TEE --gateway 10.0.0.2 -A logdrop-158 -j DROP --A logdrop-159 -m limit --limit 1/second -j LOG +-A logdrop-1580 -m limit --limit 12/minute -j ULOG +-A logdrop-1580 -j DROP +-A logdrop-1581 -m limit --limit 12/minute -j ULOG +-A logdrop-1581 -j DROP +-A logdrop-1582 -m limit --limit 12/minute -j ULOG +-A logdrop-1582 -j DROP +-A logdrop-1583 -m limit --limit 12/minute -j ULOG +-A logdrop-1583 -j DROP +-A logdrop-1584 -m limit --limit 12/minute -j ULOG +-A logdrop-1584 -j DROP +-A logdrop-1585 -m limit --limit 12/minute -j ULOG +-A logdrop-1585 -j DROP +-A logdrop-1586 -m limit --limit 12/minute -j ULOG +-A logdrop-1586 -j DROP +-A logdrop-1587 -m limit --limit 12/minute -j ULOG +-A logdrop-1587 -j DROP +-A logdrop-1588 -m limit --limit 12/minute -j ULOG +-A logdrop-1588 -j DROP +-A logdrop-1589 -m limit --limit 12/minute -j ULOG +-A logdrop-1589 -j DROP +-A logdrop-159 -j TEE --gateway 10.0.0.1 +-A logdrop-159 -j TEE --gateway 10.0.0.2 -A logdrop-159 -j DROP +-A logdrop-1590 -m limit --limit 12/minute -j ULOG +-A logdrop-1590 -j DROP +-A logdrop-1591 -m limit --limit 12/minute -j ULOG +-A logdrop-1591 -j DROP +-A logdrop-1592 -m limit --limit 12/minute -j ULOG +-A logdrop-1592 -j DROP +-A logdrop-1593 -m limit --limit 12/minute -j ULOG +-A logdrop-1593 -j DROP +-A logdrop-1594 -m limit --limit 12/minute -j ULOG +-A logdrop-1594 -j DROP +-A logdrop-1595 -m limit --limit 12/minute -j ULOG +-A logdrop-1595 -j DROP +-A logdrop-1596 -m limit --limit 12/minute -j ULOG +-A logdrop-1596 -j DROP +-A logdrop-1597 -m limit --limit 12/minute -j ULOG +-A logdrop-1597 -j DROP +-A logdrop-1598 -m limit --limit 12/minute -j ULOG +-A logdrop-1598 -j DROP +-A logdrop-1599 -m limit --limit 12/minute -j ULOG +-A logdrop-1599 -j DROP -A logdrop-16 -m limit --limit 1/second -j LOG -A logdrop-16 -j DROP --A logdrop-160 -m limit --limit 1/second -j LOG +-A logdrop-160 -j TEE --gateway 10.0.0.1 +-A logdrop-160 -j TEE --gateway 10.0.0.2 -A logdrop-160 -j DROP --A logdrop-161 -m limit --limit 1/second -j LOG +-A logdrop-1600 -m limit --limit 12/minute -j ULOG +-A logdrop-1600 -j DROP +-A logdrop-1601 -m limit --limit 12/minute -j ULOG +-A logdrop-1601 -j DROP +-A logdrop-1602 -m limit --limit 12/minute -j ULOG +-A logdrop-1602 -j DROP +-A logdrop-1603 -m limit --limit 12/minute -j ULOG +-A logdrop-1603 -j DROP +-A logdrop-1604 -m limit --limit 12/minute -j ULOG +-A logdrop-1604 -j DROP +-A logdrop-1605 -m limit --limit 12/minute -j ULOG +-A logdrop-1605 -j DROP +-A logdrop-1606 -m limit --limit 12/minute -j ULOG +-A logdrop-1606 -j DROP +-A logdrop-1607 -m limit --limit 12/minute -j ULOG +-A logdrop-1607 -j DROP +-A logdrop-1608 -m limit --limit 12/minute -j ULOG +-A logdrop-1608 -j DROP +-A logdrop-1609 -m limit --limit 12/minute -j ULOG +-A logdrop-1609 -j DROP +-A logdrop-161 -j TEE --gateway 10.0.0.1 +-A logdrop-161 -j TEE --gateway 10.0.0.2 -A logdrop-161 -j DROP --A logdrop-162 -m limit --limit 1/second -j LOG +-A logdrop-1610 -m limit --limit 12/minute -j ULOG +-A logdrop-1610 -j DROP +-A logdrop-1611 -m limit --limit 12/minute -j ULOG +-A logdrop-1611 -j DROP +-A logdrop-1612 -m limit --limit 12/minute -j ULOG +-A logdrop-1612 -j DROP +-A logdrop-1613 -m limit --limit 12/minute -j ULOG +-A logdrop-1613 -j DROP +-A logdrop-1614 -m limit --limit 12/minute -j ULOG +-A logdrop-1614 -j DROP +-A logdrop-1615 -m limit --limit 12/minute -j ULOG +-A logdrop-1615 -j DROP +-A logdrop-1616 -m limit --limit 12/minute -j ULOG +-A logdrop-1616 -j DROP +-A logdrop-1617 -m limit --limit 12/minute -j ULOG +-A logdrop-1617 -j DROP +-A logdrop-1618 -m limit --limit 12/minute -j ULOG +-A logdrop-1618 -j DROP +-A logdrop-1619 -m limit --limit 12/minute -j ULOG +-A logdrop-1619 -j DROP +-A logdrop-162 -j TEE --gateway 10.0.0.1 +-A logdrop-162 -j TEE --gateway 10.0.0.2 -A logdrop-162 -j DROP --A logdrop-163 -m limit --limit 1/second -j LOG +-A logdrop-1620 -m limit --limit 12/minute -j ULOG +-A logdrop-1620 -j DROP +-A logdrop-1621 -m limit --limit 12/minute -j ULOG +-A logdrop-1621 -j DROP +-A logdrop-1622 -m limit --limit 12/minute -j ULOG +-A logdrop-1622 -j DROP +-A logdrop-1623 -m limit --limit 12/minute -j ULOG +-A logdrop-1623 -j DROP +-A logdrop-1624 -m limit --limit 12/minute -j ULOG +-A logdrop-1624 -j DROP +-A logdrop-1625 -m limit --limit 12/minute -j ULOG +-A logdrop-1625 -j DROP +-A logdrop-1626 -m limit --limit 12/minute -j ULOG +-A logdrop-1626 -j DROP +-A logdrop-1627 -m limit --limit 12/minute -j ULOG +-A logdrop-1627 -j DROP +-A logdrop-1628 -m limit --limit 12/minute -j ULOG +-A logdrop-1628 -j DROP +-A logdrop-1629 -m limit --limit 12/minute -j ULOG +-A logdrop-1629 -j DROP +-A logdrop-163 -j TEE --gateway 10.0.0.1 +-A logdrop-163 -j TEE --gateway 10.0.0.2 -A logdrop-163 -j DROP --A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-1630 -m limit --limit 12/minute -j ULOG +-A logdrop-1630 -j DROP +-A logdrop-1631 -m limit --limit 12/minute -j ULOG +-A logdrop-1631 -j DROP +-A logdrop-1632 -m limit --limit 12/minute -j ULOG +-A logdrop-1632 -j DROP +-A logdrop-1633 -m limit --limit 12/minute -j ULOG +-A logdrop-1633 -j DROP +-A logdrop-1634 -m limit --limit 12/minute -j ULOG +-A logdrop-1634 -j DROP +-A logdrop-1635 -m limit --limit 12/minute -j ULOG +-A logdrop-1635 -j DROP +-A logdrop-1636 -m limit --limit 12/minute -j ULOG +-A logdrop-1636 -j DROP +-A logdrop-1637 -m limit --limit 12/minute -j ULOG +-A logdrop-1637 -j DROP +-A logdrop-1638 -m limit --limit 12/minute -j ULOG +-A logdrop-1638 -j DROP +-A logdrop-1639 -m limit --limit 12/minute -j ULOG +-A logdrop-1639 -j DROP +-A logdrop-164 -j TEE --gateway 10.0.0.1 +-A logdrop-164 -j TEE --gateway 10.0.0.2 -A logdrop-164 -j DROP --A logdrop-165 -m limit --limit 1/second -j LOG +-A logdrop-1640 -m limit --limit 12/minute -j ULOG +-A logdrop-1640 -j DROP +-A logdrop-1641 -m limit --limit 12/minute -j ULOG +-A logdrop-1641 -j DROP +-A logdrop-1642 -m limit --limit 12/minute -j ULOG +-A logdrop-1642 -j DROP +-A logdrop-1643 -m limit --limit 12/minute -j ULOG +-A logdrop-1643 -j DROP +-A logdrop-1644 -m limit --limit 12/minute -j ULOG +-A logdrop-1644 -j DROP +-A logdrop-1645 -m limit --limit 12/minute -j ULOG +-A logdrop-1645 -j DROP +-A logdrop-1646 -m limit --limit 12/minute -j ULOG +-A logdrop-1646 -j DROP +-A logdrop-1647 -m limit --limit 12/minute -j ULOG +-A logdrop-1647 -j DROP +-A logdrop-1648 -m limit --limit 12/minute -j ULOG +-A logdrop-1648 -j DROP +-A logdrop-1649 -m limit --limit 12/minute -j ULOG +-A logdrop-1649 -j DROP +-A logdrop-165 -j TEE --gateway 10.0.0.1 +-A logdrop-165 -j TEE --gateway 10.0.0.2 -A logdrop-165 -j DROP --A logdrop-166 -m limit --limit 1/second -j LOG +-A logdrop-1650 -m limit --limit 1/second -j LOG +-A logdrop-1650 -j DROP +-A logdrop-1651 -m limit --limit 1/second -j LOG +-A logdrop-1651 -j DROP +-A logdrop-1652 -m limit --limit 1/second -j LOG +-A logdrop-1652 -j DROP +-A logdrop-1653 -m limit --limit 1/second -j LOG +-A logdrop-1653 -j DROP +-A logdrop-1654 -m limit --limit 1/second -j LOG +-A logdrop-1654 -j DROP +-A logdrop-1655 -m limit --limit 1/second -j LOG +-A logdrop-1655 -j DROP +-A logdrop-1656 -m limit --limit 1/second -j LOG +-A logdrop-1656 -j DROP +-A logdrop-1657 -m limit --limit 1/second -j LOG +-A logdrop-1657 -j DROP +-A logdrop-1658 -m limit --limit 1/second -j LOG +-A logdrop-1658 -j DROP +-A logdrop-1659 -m limit --limit 1/second -j LOG +-A logdrop-1659 -j DROP +-A logdrop-166 -j TEE --gateway 10.0.0.1 +-A logdrop-166 -j TEE --gateway 10.0.0.2 -A logdrop-166 -j DROP --A logdrop-167 -m limit --limit 1/second -j LOG +-A logdrop-1660 -m limit --limit 1/second -j LOG +-A logdrop-1660 -j DROP +-A logdrop-1661 -m limit --limit 1/second -j LOG +-A logdrop-1661 -j DROP +-A logdrop-1662 -m limit --limit 1/second -j LOG +-A logdrop-1662 -j DROP +-A logdrop-1663 -m limit --limit 1/second -j LOG +-A logdrop-1663 -j DROP +-A logdrop-1664 -m limit --limit 1/second -j LOG +-A logdrop-1664 -j DROP +-A logdrop-1665 -m limit --limit 1/second -j LOG +-A logdrop-1665 -j DROP +-A logdrop-1666 -m limit --limit 1/second -j LOG +-A logdrop-1666 -j DROP +-A logdrop-1667 -m limit --limit 1/second -j LOG +-A logdrop-1667 -j DROP +-A logdrop-1668 -m limit --limit 1/second -j LOG +-A logdrop-1668 -j DROP +-A logdrop-1669 -m limit --limit 1/second -j LOG +-A logdrop-1669 -j DROP +-A logdrop-167 -j TEE --gateway 10.0.0.1 +-A logdrop-167 -j TEE --gateway 10.0.0.2 -A logdrop-167 -j DROP --A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-1670 -m limit --limit 1/second -j LOG +-A logdrop-1670 -j DROP +-A logdrop-1671 -m limit --limit 1/second -j LOG +-A logdrop-1671 -j DROP +-A logdrop-1672 -m limit --limit 1/second -j LOG +-A logdrop-1672 -j DROP +-A logdrop-1673 -m limit --limit 1/second -j LOG +-A logdrop-1673 -j DROP +-A logdrop-1674 -m limit --limit 1/second -j LOG +-A logdrop-1674 -j DROP +-A logdrop-1675 -m limit --limit 1/second -j LOG +-A logdrop-1675 -j DROP +-A logdrop-1676 -m limit --limit 1/second -j LOG +-A logdrop-1676 -j DROP +-A logdrop-1677 -m limit --limit 1/second -j LOG +-A logdrop-1677 -j DROP +-A logdrop-1678 -m limit --limit 1/second -j LOG +-A logdrop-1678 -j DROP +-A logdrop-1679 -m limit --limit 1/second -j LOG +-A logdrop-1679 -j DROP +-A logdrop-168 -j TEE --gateway 10.0.0.1 +-A logdrop-168 -j TEE --gateway 10.0.0.2 -A logdrop-168 -j DROP --A logdrop-169 -m limit --limit 1/second -j LOG +-A logdrop-1680 -m limit --limit 1/second -j LOG +-A logdrop-1680 -j DROP +-A logdrop-1681 -m limit --limit 1/second -j LOG +-A logdrop-1681 -j DROP +-A logdrop-1682 -m limit --limit 1/second -j LOG +-A logdrop-1682 -j DROP +-A logdrop-1683 -m limit --limit 1/second -j LOG +-A logdrop-1683 -j DROP +-A logdrop-1684 -m limit --limit 1/second -j LOG +-A logdrop-1684 -j DROP +-A logdrop-1685 -m limit --limit 1/second -j LOG +-A logdrop-1685 -j DROP +-A logdrop-1686 -m limit --limit 1/second -j LOG +-A logdrop-1686 -j DROP +-A logdrop-1687 -m limit --limit 1/second -j LOG +-A logdrop-1687 -j DROP +-A logdrop-1688 -m limit --limit 1/second -j LOG +-A logdrop-1688 -j DROP +-A logdrop-1689 -m limit --limit 1/second -j LOG +-A logdrop-1689 -j DROP +-A logdrop-169 -j TEE --gateway 10.0.0.1 +-A logdrop-169 -j TEE --gateway 10.0.0.2 -A logdrop-169 -j DROP +-A logdrop-1690 -m limit --limit 1/second -j LOG +-A logdrop-1690 -j DROP +-A logdrop-1691 -m limit --limit 1/second -j LOG +-A logdrop-1691 -j DROP +-A logdrop-1692 -m limit --limit 1/second -j LOG +-A logdrop-1692 -j DROP +-A logdrop-1693 -m limit --limit 1/second -j LOG +-A logdrop-1693 -j DROP +-A logdrop-1694 -m limit --limit 1/second -j LOG +-A logdrop-1694 -j DROP +-A logdrop-1695 -m limit --limit 1/second -j LOG +-A logdrop-1695 -j DROP +-A logdrop-1696 -m limit --limit 1/second -j LOG +-A logdrop-1696 -j DROP +-A logdrop-1697 -m limit --limit 1/second -j LOG +-A logdrop-1697 -j DROP +-A logdrop-1698 -m limit --limit 1/second -j LOG +-A logdrop-1698 -j DROP +-A logdrop-1699 -m limit --limit 1/second -j LOG +-A logdrop-1699 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG -A logdrop-17 -j DROP --A logdrop-170 -m limit --limit 1/second -j LOG +-A logdrop-170 -j TEE --gateway 10.0.0.1 +-A logdrop-170 -j TEE --gateway 10.0.0.2 -A logdrop-170 -j DROP --A logdrop-171 -m limit --limit 1/second -j LOG +-A logdrop-1700 -m limit --limit 1/second -j LOG +-A logdrop-1700 -j DROP +-A logdrop-1701 -m limit --limit 1/second -j LOG +-A logdrop-1701 -j DROP +-A logdrop-1702 -m limit --limit 1/second -j LOG +-A logdrop-1702 -j DROP +-A logdrop-1703 -m limit --limit 1/second -j LOG +-A logdrop-1703 -j DROP +-A logdrop-1704 -m limit --limit 1/second -j LOG +-A logdrop-1704 -j DROP +-A logdrop-1705 -m limit --limit 1/second -j LOG +-A logdrop-1705 -j DROP +-A logdrop-1706 -m limit --limit 1/second -j LOG +-A logdrop-1706 -j DROP +-A logdrop-1707 -m limit --limit 1/second -j LOG +-A logdrop-1707 -j DROP +-A logdrop-1708 -m limit --limit 1/second -j LOG +-A logdrop-1708 -j DROP +-A logdrop-1709 -m limit --limit 1/second -j LOG +-A logdrop-1709 -j DROP +-A logdrop-171 -j TEE --gateway 10.0.0.1 +-A logdrop-171 -j TEE --gateway 10.0.0.2 -A logdrop-171 -j DROP --A logdrop-172 -m limit --limit 1/second -j LOG +-A logdrop-1710 -m limit --limit 1/second -j LOG +-A logdrop-1710 -j DROP +-A logdrop-1711 -m limit --limit 1/second -j LOG +-A logdrop-1711 -j DROP +-A logdrop-1712 -m limit --limit 1/second -j LOG +-A logdrop-1712 -j DROP +-A logdrop-1713 -m limit --limit 1/second -j LOG +-A logdrop-1713 -j DROP +-A logdrop-1714 -m limit --limit 1/second -j LOG +-A logdrop-1714 -j DROP +-A logdrop-1715 -m limit --limit 1/second -j LOG +-A logdrop-1715 -j DROP +-A logdrop-1716 -m limit --limit 1/second -j LOG +-A logdrop-1716 -j DROP +-A logdrop-1717 -m limit --limit 1/second -j LOG +-A logdrop-1717 -j DROP +-A logdrop-1718 -m limit --limit 1/second -j LOG +-A logdrop-1718 -j DROP +-A logdrop-1719 -m limit --limit 1/second -j LOG +-A logdrop-1719 -j DROP +-A logdrop-172 -j TEE --gateway 10.0.0.1 +-A logdrop-172 -j TEE --gateway 10.0.0.2 -A logdrop-172 -j DROP --A logdrop-173 -m limit --limit 1/second -j LOG +-A logdrop-1720 -m limit --limit 1/second -j LOG +-A logdrop-1720 -j DROP +-A logdrop-1721 -m limit --limit 1/second -j LOG +-A logdrop-1721 -j DROP +-A logdrop-1722 -m limit --limit 1/second -j LOG +-A logdrop-1722 -j DROP +-A logdrop-1723 -m limit --limit 1/second -j LOG +-A logdrop-1723 -j DROP +-A logdrop-1724 -m limit --limit 1/second -j LOG +-A logdrop-1724 -j DROP +-A logdrop-1725 -m limit --limit 1/second -j LOG +-A logdrop-1725 -j DROP +-A logdrop-1726 -m limit --limit 1/second -j LOG +-A logdrop-1726 -j DROP +-A logdrop-1727 -m limit --limit 1/second -j LOG +-A logdrop-1727 -j DROP +-A logdrop-1728 -m limit --limit 1/second -j LOG +-A logdrop-1728 -j DROP +-A logdrop-1729 -m limit --limit 1/second -j LOG +-A logdrop-1729 -j DROP +-A logdrop-173 -j TEE --gateway 10.0.0.1 +-A logdrop-173 -j TEE --gateway 10.0.0.2 -A logdrop-173 -j DROP --A logdrop-174 -m limit --limit 1/second -j LOG +-A logdrop-1730 -m limit --limit 1/second -j LOG +-A logdrop-1730 -j DROP +-A logdrop-1731 -m limit --limit 1/second -j LOG +-A logdrop-1731 -j DROP +-A logdrop-1732 -m limit --limit 1/second -j LOG +-A logdrop-1732 -j DROP +-A logdrop-1733 -m limit --limit 1/second -j LOG +-A logdrop-1733 -j DROP +-A logdrop-1734 -m limit --limit 1/second -j LOG +-A logdrop-1734 -j DROP +-A logdrop-1735 -m limit --limit 1/second -j LOG +-A logdrop-1735 -j DROP +-A logdrop-1736 -m limit --limit 1/second -j LOG +-A logdrop-1736 -j DROP +-A logdrop-1737 -m limit --limit 1/second -j LOG +-A logdrop-1737 -j DROP +-A logdrop-1738 -m limit --limit 1/second -j LOG +-A logdrop-1738 -j DROP +-A logdrop-1739 -m limit --limit 1/second -j LOG +-A logdrop-1739 -j DROP +-A logdrop-174 -j TEE --gateway 10.0.0.1 +-A logdrop-174 -j TEE --gateway 10.0.0.2 -A logdrop-174 -j DROP --A logdrop-175 -m limit --limit 1/second -j LOG +-A logdrop-1740 -m limit --limit 1/second -j LOG +-A logdrop-1740 -j DROP +-A logdrop-1741 -m limit --limit 1/second -j LOG +-A logdrop-1741 -j DROP +-A logdrop-1742 -m limit --limit 1/second -j LOG +-A logdrop-1742 -j DROP +-A logdrop-1743 -m limit --limit 1/second -j LOG +-A logdrop-1743 -j DROP +-A logdrop-1744 -m limit --limit 1/second -j LOG +-A logdrop-1744 -j DROP +-A logdrop-1745 -m limit --limit 1/second -j LOG +-A logdrop-1745 -j DROP +-A logdrop-1746 -m limit --limit 1/second -j LOG +-A logdrop-1746 -j DROP +-A logdrop-1747 -m limit --limit 1/second -j LOG +-A logdrop-1747 -j DROP +-A logdrop-1748 -m limit --limit 1/second -j LOG +-A logdrop-1748 -j DROP +-A logdrop-1749 -m limit --limit 1/second -j LOG +-A logdrop-1749 -j DROP +-A logdrop-175 -j TEE --gateway 10.0.0.1 +-A logdrop-175 -j TEE --gateway 10.0.0.2 -A logdrop-175 -j DROP --A logdrop-176 -m limit --limit 1/second -j LOG +-A logdrop-1750 -j TEE --gateway 10.0.0.1 +-A logdrop-1750 -j TEE --gateway 10.0.0.2 +-A logdrop-1750 -j DROP +-A logdrop-1751 -j TEE --gateway 10.0.0.1 +-A logdrop-1751 -j TEE --gateway 10.0.0.2 +-A logdrop-1751 -j DROP +-A logdrop-1752 -j TEE --gateway 10.0.0.1 +-A logdrop-1752 -j TEE --gateway 10.0.0.2 +-A logdrop-1752 -j DROP +-A logdrop-1753 -j TEE --gateway 10.0.0.1 +-A logdrop-1753 -j TEE --gateway 10.0.0.2 +-A logdrop-1753 -j DROP +-A logdrop-1754 -j TEE --gateway 10.0.0.1 +-A logdrop-1754 -j TEE --gateway 10.0.0.2 +-A logdrop-1754 -j DROP +-A logdrop-1755 -j TEE --gateway 10.0.0.1 +-A logdrop-1755 -j TEE --gateway 10.0.0.2 +-A logdrop-1755 -j DROP +-A logdrop-1756 -j TEE --gateway 10.0.0.1 +-A logdrop-1756 -j TEE --gateway 10.0.0.2 +-A logdrop-1756 -j DROP +-A logdrop-1757 -j TEE --gateway 10.0.0.1 +-A logdrop-1757 -j TEE --gateway 10.0.0.2 +-A logdrop-1757 -j DROP +-A logdrop-1758 -j TEE --gateway 10.0.0.1 +-A logdrop-1758 -j TEE --gateway 10.0.0.2 +-A logdrop-1758 -j DROP +-A logdrop-1759 -j TEE --gateway 10.0.0.1 +-A logdrop-1759 -j TEE --gateway 10.0.0.2 +-A logdrop-1759 -j DROP +-A logdrop-176 -j TEE --gateway 10.0.0.1 +-A logdrop-176 -j TEE --gateway 10.0.0.2 -A logdrop-176 -j DROP --A logdrop-177 -m limit --limit 1/second -j LOG +-A logdrop-1760 -j TEE --gateway 10.0.0.1 +-A logdrop-1760 -j TEE --gateway 10.0.0.2 +-A logdrop-1760 -j DROP +-A logdrop-1761 -j TEE --gateway 10.0.0.1 +-A logdrop-1761 -j TEE --gateway 10.0.0.2 +-A logdrop-1761 -j DROP +-A logdrop-1762 -j TEE --gateway 10.0.0.1 +-A logdrop-1762 -j TEE --gateway 10.0.0.2 +-A logdrop-1762 -j DROP +-A logdrop-1763 -j TEE --gateway 10.0.0.1 +-A logdrop-1763 -j TEE --gateway 10.0.0.2 +-A logdrop-1763 -j DROP +-A logdrop-1764 -j TEE --gateway 10.0.0.1 +-A logdrop-1764 -j TEE --gateway 10.0.0.2 +-A logdrop-1764 -j DROP +-A logdrop-1765 -j TEE --gateway 10.0.0.1 +-A logdrop-1765 -j TEE --gateway 10.0.0.2 +-A logdrop-1765 -j DROP +-A logdrop-1766 -j TEE --gateway 10.0.0.1 +-A logdrop-1766 -j TEE --gateway 10.0.0.2 +-A logdrop-1766 -j DROP +-A logdrop-1767 -j TEE --gateway 10.0.0.1 +-A logdrop-1767 -j TEE --gateway 10.0.0.2 +-A logdrop-1767 -j DROP +-A logdrop-1768 -j TEE --gateway 10.0.0.1 +-A logdrop-1768 -j TEE --gateway 10.0.0.2 +-A logdrop-1768 -j DROP +-A logdrop-1769 -j TEE --gateway 10.0.0.1 +-A logdrop-1769 -j TEE --gateway 10.0.0.2 +-A logdrop-1769 -j DROP +-A logdrop-177 -j TEE --gateway 10.0.0.1 +-A logdrop-177 -j TEE --gateway 10.0.0.2 -A logdrop-177 -j DROP --A logdrop-178 -m limit --limit 1/second -j LOG +-A logdrop-1770 -j TEE --gateway 10.0.0.1 +-A logdrop-1770 -j TEE --gateway 10.0.0.2 +-A logdrop-1770 -j DROP +-A logdrop-1771 -j TEE --gateway 10.0.0.1 +-A logdrop-1771 -j TEE --gateway 10.0.0.2 +-A logdrop-1771 -j DROP +-A logdrop-1772 -j TEE --gateway 10.0.0.1 +-A logdrop-1772 -j TEE --gateway 10.0.0.2 +-A logdrop-1772 -j DROP +-A logdrop-1773 -j TEE --gateway 10.0.0.1 +-A logdrop-1773 -j TEE --gateway 10.0.0.2 +-A logdrop-1773 -j DROP +-A logdrop-1774 -j TEE --gateway 10.0.0.1 +-A logdrop-1774 -j TEE --gateway 10.0.0.2 +-A logdrop-1774 -j DROP +-A logdrop-1775 -j TEE --gateway 10.0.0.1 +-A logdrop-1775 -j TEE --gateway 10.0.0.2 +-A logdrop-1775 -j DROP +-A logdrop-1776 -j TEE --gateway 10.0.0.1 +-A logdrop-1776 -j TEE --gateway 10.0.0.2 +-A logdrop-1776 -j DROP +-A logdrop-1777 -j TEE --gateway 10.0.0.1 +-A logdrop-1777 -j TEE --gateway 10.0.0.2 +-A logdrop-1777 -j DROP +-A logdrop-1778 -j TEE --gateway 10.0.0.1 +-A logdrop-1778 -j TEE --gateway 10.0.0.2 +-A logdrop-1778 -j DROP +-A logdrop-1779 -j TEE --gateway 10.0.0.1 +-A logdrop-1779 -j TEE --gateway 10.0.0.2 +-A logdrop-1779 -j DROP +-A logdrop-178 -j TEE --gateway 10.0.0.1 +-A logdrop-178 -j TEE --gateway 10.0.0.2 -A logdrop-178 -j DROP --A logdrop-179 -m limit --limit 1/second -j LOG +-A logdrop-1780 -j TEE --gateway 10.0.0.1 +-A logdrop-1780 -j TEE --gateway 10.0.0.2 +-A logdrop-1780 -j DROP +-A logdrop-1781 -j TEE --gateway 10.0.0.1 +-A logdrop-1781 -j TEE --gateway 10.0.0.2 +-A logdrop-1781 -j DROP +-A logdrop-1782 -j TEE --gateway 10.0.0.1 +-A logdrop-1782 -j TEE --gateway 10.0.0.2 +-A logdrop-1782 -j DROP +-A logdrop-1783 -j TEE --gateway 10.0.0.1 +-A logdrop-1783 -j TEE --gateway 10.0.0.2 +-A logdrop-1783 -j DROP +-A logdrop-1784 -j TEE --gateway 10.0.0.1 +-A logdrop-1784 -j TEE --gateway 10.0.0.2 +-A logdrop-1784 -j DROP +-A logdrop-1785 -j TEE --gateway 10.0.0.1 +-A logdrop-1785 -j TEE --gateway 10.0.0.2 +-A logdrop-1785 -j DROP +-A logdrop-1786 -j TEE --gateway 10.0.0.1 +-A logdrop-1786 -j TEE --gateway 10.0.0.2 +-A logdrop-1786 -j DROP +-A logdrop-1787 -j TEE --gateway 10.0.0.1 +-A logdrop-1787 -j TEE --gateway 10.0.0.2 +-A logdrop-1787 -j DROP +-A logdrop-1788 -j TEE --gateway 10.0.0.1 +-A logdrop-1788 -j TEE --gateway 10.0.0.2 +-A logdrop-1788 -j DROP +-A logdrop-1789 -j TEE --gateway 10.0.0.1 +-A logdrop-1789 -j TEE --gateway 10.0.0.2 +-A logdrop-1789 -j DROP +-A logdrop-179 -j TEE --gateway 10.0.0.1 +-A logdrop-179 -j TEE --gateway 10.0.0.2 -A logdrop-179 -j DROP +-A logdrop-1790 -j TEE --gateway 10.0.0.1 +-A logdrop-1790 -j TEE --gateway 10.0.0.2 +-A logdrop-1790 -j DROP +-A logdrop-1791 -j TEE --gateway 10.0.0.1 +-A logdrop-1791 -j TEE --gateway 10.0.0.2 +-A logdrop-1791 -j DROP +-A logdrop-1792 -j TEE --gateway 10.0.0.1 +-A logdrop-1792 -j TEE --gateway 10.0.0.2 +-A logdrop-1792 -j DROP +-A logdrop-1793 -j TEE --gateway 10.0.0.1 +-A logdrop-1793 -j TEE --gateway 10.0.0.2 +-A logdrop-1793 -j DROP +-A logdrop-1794 -j TEE --gateway 10.0.0.1 +-A logdrop-1794 -j TEE --gateway 10.0.0.2 +-A logdrop-1794 -j DROP +-A logdrop-1795 -j TEE --gateway 10.0.0.1 +-A logdrop-1795 -j TEE --gateway 10.0.0.2 +-A logdrop-1795 -j DROP +-A logdrop-1796 -j TEE --gateway 10.0.0.1 +-A logdrop-1796 -j TEE --gateway 10.0.0.2 +-A logdrop-1796 -j DROP +-A logdrop-1797 -j TEE --gateway 10.0.0.1 +-A logdrop-1797 -j TEE --gateway 10.0.0.2 +-A logdrop-1797 -j DROP +-A logdrop-1798 -j TEE --gateway 10.0.0.1 +-A logdrop-1798 -j TEE --gateway 10.0.0.2 +-A logdrop-1798 -j DROP +-A logdrop-1799 -j TEE --gateway 10.0.0.1 +-A logdrop-1799 -j TEE --gateway 10.0.0.2 +-A logdrop-1799 -j DROP -A logdrop-18 -m limit --limit 1/second -j LOG -A logdrop-18 -j DROP --A logdrop-180 -m limit --limit 1/second -j LOG +-A logdrop-180 -j TEE --gateway 10.0.0.1 +-A logdrop-180 -j TEE --gateway 10.0.0.2 -A logdrop-180 -j DROP --A logdrop-181 -m limit --limit 1/second -j LOG +-A logdrop-1800 -j TEE --gateway 10.0.0.1 +-A logdrop-1800 -j TEE --gateway 10.0.0.2 +-A logdrop-1800 -j DROP +-A logdrop-1801 -j TEE --gateway 10.0.0.1 +-A logdrop-1801 -j TEE --gateway 10.0.0.2 +-A logdrop-1801 -j DROP +-A logdrop-1802 -j TEE --gateway 10.0.0.1 +-A logdrop-1802 -j TEE --gateway 10.0.0.2 +-A logdrop-1802 -j DROP +-A logdrop-1803 -j TEE --gateway 10.0.0.1 +-A logdrop-1803 -j TEE --gateway 10.0.0.2 +-A logdrop-1803 -j DROP +-A logdrop-1804 -j TEE --gateway 10.0.0.1 +-A logdrop-1804 -j TEE --gateway 10.0.0.2 +-A logdrop-1804 -j DROP +-A logdrop-1805 -j TEE --gateway 10.0.0.1 +-A logdrop-1805 -j TEE --gateway 10.0.0.2 +-A logdrop-1805 -j DROP +-A logdrop-1806 -j TEE --gateway 10.0.0.1 +-A logdrop-1806 -j TEE --gateway 10.0.0.2 +-A logdrop-1806 -j DROP +-A logdrop-1807 -j TEE --gateway 10.0.0.1 +-A logdrop-1807 -j TEE --gateway 10.0.0.2 +-A logdrop-1807 -j DROP +-A logdrop-1808 -j TEE --gateway 10.0.0.1 +-A logdrop-1808 -j TEE --gateway 10.0.0.2 +-A logdrop-1808 -j DROP +-A logdrop-1809 -j TEE --gateway 10.0.0.1 +-A logdrop-1809 -j TEE --gateway 10.0.0.2 +-A logdrop-1809 -j DROP +-A logdrop-181 -j TEE --gateway 10.0.0.1 +-A logdrop-181 -j TEE --gateway 10.0.0.2 -A logdrop-181 -j DROP --A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-1810 -j TEE --gateway 10.0.0.1 +-A logdrop-1810 -j TEE --gateway 10.0.0.2 +-A logdrop-1810 -j DROP +-A logdrop-1811 -j TEE --gateway 10.0.0.1 +-A logdrop-1811 -j TEE --gateway 10.0.0.2 +-A logdrop-1811 -j DROP +-A logdrop-1812 -j TEE --gateway 10.0.0.1 +-A logdrop-1812 -j TEE --gateway 10.0.0.2 +-A logdrop-1812 -j DROP +-A logdrop-1813 -j TEE --gateway 10.0.0.1 +-A logdrop-1813 -j TEE --gateway 10.0.0.2 +-A logdrop-1813 -j DROP +-A logdrop-1814 -j TEE --gateway 10.0.0.1 +-A logdrop-1814 -j TEE --gateway 10.0.0.2 +-A logdrop-1814 -j DROP +-A logdrop-1815 -j TEE --gateway 10.0.0.1 +-A logdrop-1815 -j TEE --gateway 10.0.0.2 +-A logdrop-1815 -j DROP +-A logdrop-1816 -j TEE --gateway 10.0.0.1 +-A logdrop-1816 -j TEE --gateway 10.0.0.2 +-A logdrop-1816 -j DROP +-A logdrop-1817 -j TEE --gateway 10.0.0.1 +-A logdrop-1817 -j TEE --gateway 10.0.0.2 +-A logdrop-1817 -j DROP +-A logdrop-1818 -j TEE --gateway 10.0.0.1 +-A logdrop-1818 -j TEE --gateway 10.0.0.2 +-A logdrop-1818 -j DROP +-A logdrop-1819 -j TEE --gateway 10.0.0.1 +-A logdrop-1819 -j TEE --gateway 10.0.0.2 +-A logdrop-1819 -j DROP +-A logdrop-182 -j TEE --gateway 10.0.0.1 +-A logdrop-182 -j TEE --gateway 10.0.0.2 -A logdrop-182 -j DROP --A logdrop-183 -m limit --limit 1/second -j LOG +-A logdrop-1820 -j TEE --gateway 10.0.0.1 +-A logdrop-1820 -j TEE --gateway 10.0.0.2 +-A logdrop-1820 -j DROP +-A logdrop-1821 -j TEE --gateway 10.0.0.1 +-A logdrop-1821 -j TEE --gateway 10.0.0.2 +-A logdrop-1821 -j DROP +-A logdrop-1822 -j TEE --gateway 10.0.0.1 +-A logdrop-1822 -j TEE --gateway 10.0.0.2 +-A logdrop-1822 -j DROP +-A logdrop-1823 -j TEE --gateway 10.0.0.1 +-A logdrop-1823 -j TEE --gateway 10.0.0.2 +-A logdrop-1823 -j DROP +-A logdrop-1824 -j TEE --gateway 10.0.0.1 +-A logdrop-1824 -j TEE --gateway 10.0.0.2 +-A logdrop-1824 -j DROP +-A logdrop-1825 -j TEE --gateway 10.0.0.1 +-A logdrop-1825 -j TEE --gateway 10.0.0.2 +-A logdrop-1825 -j DROP +-A logdrop-1826 -j TEE --gateway 10.0.0.1 +-A logdrop-1826 -j TEE --gateway 10.0.0.2 +-A logdrop-1826 -j DROP +-A logdrop-1827 -j TEE --gateway 10.0.0.1 +-A logdrop-1827 -j TEE --gateway 10.0.0.2 +-A logdrop-1827 -j DROP +-A logdrop-1828 -j TEE --gateway 10.0.0.1 +-A logdrop-1828 -j TEE --gateway 10.0.0.2 +-A logdrop-1828 -j DROP +-A logdrop-1829 -j TEE --gateway 10.0.0.1 +-A logdrop-1829 -j TEE --gateway 10.0.0.2 +-A logdrop-1829 -j DROP +-A logdrop-183 -j TEE --gateway 10.0.0.1 +-A logdrop-183 -j TEE --gateway 10.0.0.2 -A logdrop-183 -j DROP --A logdrop-184 -m limit --limit 1/second -j LOG +-A logdrop-1830 -j TEE --gateway 10.0.0.1 +-A logdrop-1830 -j TEE --gateway 10.0.0.2 +-A logdrop-1830 -j DROP +-A logdrop-1831 -j TEE --gateway 10.0.0.1 +-A logdrop-1831 -j TEE --gateway 10.0.0.2 +-A logdrop-1831 -j DROP +-A logdrop-1832 -j TEE --gateway 10.0.0.1 +-A logdrop-1832 -j TEE --gateway 10.0.0.2 +-A logdrop-1832 -j DROP +-A logdrop-1833 -j TEE --gateway 10.0.0.1 +-A logdrop-1833 -j TEE --gateway 10.0.0.2 +-A logdrop-1833 -j DROP +-A logdrop-1834 -j TEE --gateway 10.0.0.1 +-A logdrop-1834 -j TEE --gateway 10.0.0.2 +-A logdrop-1834 -j DROP +-A logdrop-1835 -j TEE --gateway 10.0.0.1 +-A logdrop-1835 -j TEE --gateway 10.0.0.2 +-A logdrop-1835 -j DROP +-A logdrop-1836 -j TEE --gateway 10.0.0.1 +-A logdrop-1836 -j TEE --gateway 10.0.0.2 +-A logdrop-1836 -j DROP +-A logdrop-1837 -j TEE --gateway 10.0.0.1 +-A logdrop-1837 -j TEE --gateway 10.0.0.2 +-A logdrop-1837 -j DROP +-A logdrop-1838 -j TEE --gateway 10.0.0.1 +-A logdrop-1838 -j TEE --gateway 10.0.0.2 +-A logdrop-1838 -j DROP +-A logdrop-1839 -j TEE --gateway 10.0.0.1 +-A logdrop-1839 -j TEE --gateway 10.0.0.2 +-A logdrop-1839 -j DROP +-A logdrop-184 -j TEE --gateway 10.0.0.1 +-A logdrop-184 -j TEE --gateway 10.0.0.2 -A logdrop-184 -j DROP --A logdrop-185 -m limit --limit 1/second -j LOG +-A logdrop-1840 -m limit --limit 12/minute -j ULOG +-A logdrop-1840 -j DROP +-A logdrop-1841 -m limit --limit 12/minute -j ULOG +-A logdrop-1841 -j DROP +-A logdrop-1842 -m limit --limit 12/minute -j ULOG +-A logdrop-1842 -j DROP +-A logdrop-1843 -m limit --limit 12/minute -j ULOG +-A logdrop-1843 -j DROP +-A logdrop-1844 -m limit --limit 12/minute -j ULOG +-A logdrop-1844 -j DROP +-A logdrop-1845 -m limit --limit 12/minute -j ULOG +-A logdrop-1845 -j DROP +-A logdrop-1846 -m limit --limit 12/minute -j ULOG +-A logdrop-1846 -j DROP +-A logdrop-1847 -m limit --limit 12/minute -j ULOG +-A logdrop-1847 -j DROP +-A logdrop-1848 -m limit --limit 12/minute -j ULOG +-A logdrop-1848 -j DROP +-A logdrop-1849 -m limit --limit 12/minute -j ULOG +-A logdrop-1849 -j DROP +-A logdrop-185 -j TEE --gateway 10.0.0.1 +-A logdrop-185 -j TEE --gateway 10.0.0.2 -A logdrop-185 -j DROP --A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-1850 -m limit --limit 12/minute -j ULOG +-A logdrop-1850 -j DROP +-A logdrop-1851 -m limit --limit 12/minute -j ULOG +-A logdrop-1851 -j DROP +-A logdrop-1852 -m limit --limit 12/minute -j ULOG +-A logdrop-1852 -j DROP +-A logdrop-1853 -m limit --limit 12/minute -j ULOG +-A logdrop-1853 -j DROP +-A logdrop-1854 -m limit --limit 12/minute -j ULOG +-A logdrop-1854 -j DROP +-A logdrop-1855 -m limit --limit 12/minute -j ULOG +-A logdrop-1855 -j DROP +-A logdrop-1856 -m limit --limit 12/minute -j ULOG +-A logdrop-1856 -j DROP +-A logdrop-1857 -m limit --limit 12/minute -j ULOG +-A logdrop-1857 -j DROP +-A logdrop-1858 -m limit --limit 12/minute -j ULOG +-A logdrop-1858 -j DROP +-A logdrop-1859 -m limit --limit 12/minute -j ULOG +-A logdrop-1859 -j DROP +-A logdrop-186 -j TEE --gateway 10.0.0.1 +-A logdrop-186 -j TEE --gateway 10.0.0.2 -A logdrop-186 -j DROP --A logdrop-187 -m limit --limit 1/second -j LOG +-A logdrop-1860 -m limit --limit 12/minute -j ULOG +-A logdrop-1860 -j DROP +-A logdrop-1861 -m limit --limit 12/minute -j ULOG +-A logdrop-1861 -j DROP +-A logdrop-1862 -m limit --limit 12/minute -j ULOG +-A logdrop-1862 -j DROP +-A logdrop-1863 -m limit --limit 12/minute -j ULOG +-A logdrop-1863 -j DROP +-A logdrop-1864 -m limit --limit 12/minute -j ULOG +-A logdrop-1864 -j DROP +-A logdrop-1865 -m limit --limit 12/minute -j ULOG +-A logdrop-1865 -j DROP +-A logdrop-1866 -m limit --limit 12/minute -j ULOG +-A logdrop-1866 -j DROP +-A logdrop-1867 -m limit --limit 12/minute -j ULOG +-A logdrop-1867 -j DROP +-A logdrop-1868 -m limit --limit 12/minute -j ULOG +-A logdrop-1868 -j DROP +-A logdrop-1869 -m limit --limit 12/minute -j ULOG +-A logdrop-1869 -j DROP +-A logdrop-187 -j TEE --gateway 10.0.0.1 +-A logdrop-187 -j TEE --gateway 10.0.0.2 -A logdrop-187 -j DROP --A logdrop-188 -m limit --limit 1/second -j LOG +-A logdrop-1870 -m limit --limit 12/minute -j ULOG +-A logdrop-1870 -j DROP +-A logdrop-1871 -m limit --limit 12/minute -j ULOG +-A logdrop-1871 -j DROP +-A logdrop-1872 -m limit --limit 12/minute -j ULOG +-A logdrop-1872 -j DROP +-A logdrop-1873 -m limit --limit 12/minute -j ULOG +-A logdrop-1873 -j DROP +-A logdrop-1874 -m limit --limit 12/minute -j ULOG +-A logdrop-1874 -j DROP +-A logdrop-1875 -m limit --limit 12/minute -j ULOG +-A logdrop-1875 -j DROP +-A logdrop-1876 -m limit --limit 12/minute -j ULOG +-A logdrop-1876 -j DROP +-A logdrop-1877 -m limit --limit 12/minute -j ULOG +-A logdrop-1877 -j DROP +-A logdrop-1878 -m limit --limit 12/minute -j ULOG +-A logdrop-1878 -j DROP +-A logdrop-1879 -m limit --limit 12/minute -j ULOG +-A logdrop-1879 -j DROP +-A logdrop-188 -j TEE --gateway 10.0.0.1 +-A logdrop-188 -j TEE --gateway 10.0.0.2 -A logdrop-188 -j DROP --A logdrop-189 -m limit --limit 1/second -j LOG +-A logdrop-1880 -m limit --limit 12/minute -j ULOG +-A logdrop-1880 -j DROP +-A logdrop-1881 -m limit --limit 12/minute -j ULOG +-A logdrop-1881 -j DROP +-A logdrop-1882 -m limit --limit 12/minute -j ULOG +-A logdrop-1882 -j DROP +-A logdrop-1883 -m limit --limit 12/minute -j ULOG +-A logdrop-1883 -j DROP +-A logdrop-1884 -m limit --limit 12/minute -j ULOG +-A logdrop-1884 -j DROP +-A logdrop-1885 -m limit --limit 12/minute -j ULOG +-A logdrop-1885 -j DROP +-A logdrop-1886 -m limit --limit 12/minute -j ULOG +-A logdrop-1886 -j DROP +-A logdrop-1887 -m limit --limit 12/minute -j ULOG +-A logdrop-1887 -j DROP +-A logdrop-1888 -m limit --limit 12/minute -j ULOG +-A logdrop-1888 -j DROP +-A logdrop-1889 -m limit --limit 12/minute -j ULOG +-A logdrop-1889 -j DROP +-A logdrop-189 -j TEE --gateway 10.0.0.1 +-A logdrop-189 -j TEE --gateway 10.0.0.2 -A logdrop-189 -j DROP +-A logdrop-1890 -m limit --limit 12/minute -j ULOG +-A logdrop-1890 -j DROP +-A logdrop-1891 -m limit --limit 12/minute -j ULOG +-A logdrop-1891 -j DROP +-A logdrop-1892 -m limit --limit 12/minute -j ULOG +-A logdrop-1892 -j DROP +-A logdrop-1893 -m limit --limit 12/minute -j ULOG +-A logdrop-1893 -j DROP +-A logdrop-1894 -m limit --limit 12/minute -j ULOG +-A logdrop-1894 -j DROP +-A logdrop-1895 -m limit --limit 12/minute -j ULOG +-A logdrop-1895 -j DROP +-A logdrop-1896 -m limit --limit 12/minute -j ULOG +-A logdrop-1896 -j DROP +-A logdrop-1897 -m limit --limit 12/minute -j ULOG +-A logdrop-1897 -j DROP +-A logdrop-1898 -m limit --limit 12/minute -j ULOG +-A logdrop-1898 -j DROP +-A logdrop-1899 -m limit --limit 12/minute -j ULOG +-A logdrop-1899 -j DROP -A logdrop-19 -m limit --limit 1/second -j LOG -A logdrop-19 -j DROP --A logdrop-190 -m limit --limit 1/second -j LOG +-A logdrop-190 -m limit --limit 12/minute -j ULOG -A logdrop-190 -j DROP --A logdrop-191 -m limit --limit 1/second -j LOG +-A logdrop-1900 -m limit --limit 12/minute -j ULOG +-A logdrop-1900 -j DROP +-A logdrop-1901 -m limit --limit 12/minute -j ULOG +-A logdrop-1901 -j DROP +-A logdrop-1902 -m limit --limit 12/minute -j ULOG +-A logdrop-1902 -j DROP +-A logdrop-1903 -m limit --limit 12/minute -j ULOG +-A logdrop-1903 -j DROP +-A logdrop-1904 -m limit --limit 12/minute -j ULOG +-A logdrop-1904 -j DROP +-A logdrop-1905 -m limit --limit 12/minute -j ULOG +-A logdrop-1905 -j DROP +-A logdrop-1906 -m limit --limit 12/minute -j ULOG +-A logdrop-1906 -j DROP +-A logdrop-1907 -m limit --limit 12/minute -j ULOG +-A logdrop-1907 -j DROP +-A logdrop-1908 -m limit --limit 12/minute -j ULOG +-A logdrop-1908 -j DROP +-A logdrop-1909 -m limit --limit 12/minute -j ULOG +-A logdrop-1909 -j DROP +-A logdrop-191 -m limit --limit 12/minute -j ULOG -A logdrop-191 -j DROP --A logdrop-192 -m limit --limit 1/second -j LOG +-A logdrop-1910 -m limit --limit 12/minute -j ULOG +-A logdrop-1910 -j DROP +-A logdrop-1911 -m limit --limit 12/minute -j ULOG +-A logdrop-1911 -j DROP +-A logdrop-1912 -m limit --limit 12/minute -j ULOG +-A logdrop-1912 -j DROP +-A logdrop-1913 -m limit --limit 12/minute -j ULOG +-A logdrop-1913 -j DROP +-A logdrop-1914 -m limit --limit 12/minute -j ULOG +-A logdrop-1914 -j DROP +-A logdrop-1915 -m limit --limit 12/minute -j ULOG +-A logdrop-1915 -j DROP +-A logdrop-1916 -m limit --limit 12/minute -j ULOG +-A logdrop-1916 -j DROP +-A logdrop-1917 -m limit --limit 12/minute -j ULOG +-A logdrop-1917 -j DROP +-A logdrop-1918 -m limit --limit 12/minute -j ULOG +-A logdrop-1918 -j DROP +-A logdrop-1919 -m limit --limit 12/minute -j ULOG +-A logdrop-1919 -j DROP +-A logdrop-192 -m limit --limit 12/minute -j ULOG -A logdrop-192 -j DROP --A logdrop-193 -m limit --limit 1/second -j LOG +-A logdrop-1920 -m limit --limit 12/minute -j ULOG +-A logdrop-1920 -j DROP +-A logdrop-1921 -m limit --limit 12/minute -j ULOG +-A logdrop-1921 -j DROP +-A logdrop-1922 -m limit --limit 12/minute -j ULOG +-A logdrop-1922 -j DROP +-A logdrop-1923 -m limit --limit 12/minute -j ULOG +-A logdrop-1923 -j DROP +-A logdrop-1924 -m limit --limit 12/minute -j ULOG +-A logdrop-1924 -j DROP +-A logdrop-1925 -m limit --limit 12/minute -j ULOG +-A logdrop-1925 -j DROP +-A logdrop-1926 -m limit --limit 12/minute -j ULOG +-A logdrop-1926 -j DROP +-A logdrop-1927 -m limit --limit 12/minute -j ULOG +-A logdrop-1927 -j DROP +-A logdrop-1928 -m limit --limit 12/minute -j ULOG +-A logdrop-1928 -j DROP +-A logdrop-1929 -m limit --limit 12/minute -j ULOG +-A logdrop-1929 -j DROP +-A logdrop-193 -m limit --limit 12/minute -j ULOG -A logdrop-193 -j DROP --A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-1930 -m limit --limit 1/second -j LOG +-A logdrop-1930 -j DROP +-A logdrop-1931 -m limit --limit 1/second -j LOG +-A logdrop-1931 -j DROP +-A logdrop-1932 -m limit --limit 1/second -j LOG +-A logdrop-1932 -j DROP +-A logdrop-1933 -m limit --limit 1/second -j LOG +-A logdrop-1933 -j DROP +-A logdrop-1934 -m limit --limit 1/second -j LOG +-A logdrop-1934 -j DROP +-A logdrop-1935 -m limit --limit 1/second -j LOG +-A logdrop-1935 -j DROP +-A logdrop-1936 -m limit --limit 1/second -j LOG +-A logdrop-1936 -j DROP +-A logdrop-1937 -m limit --limit 1/second -j LOG +-A logdrop-1937 -j DROP +-A logdrop-1938 -m limit --limit 1/second -j LOG +-A logdrop-1938 -j DROP +-A logdrop-1939 -m limit --limit 1/second -j LOG +-A logdrop-1939 -j DROP +-A logdrop-194 -m limit --limit 12/minute -j ULOG -A logdrop-194 -j DROP --A logdrop-195 -m limit --limit 1/second -j LOG +-A logdrop-1940 -m limit --limit 1/second -j LOG +-A logdrop-1940 -j DROP +-A logdrop-1941 -m limit --limit 1/second -j LOG +-A logdrop-1941 -j DROP +-A logdrop-1942 -m limit --limit 1/second -j LOG +-A logdrop-1942 -j DROP +-A logdrop-1943 -m limit --limit 1/second -j LOG +-A logdrop-1943 -j DROP +-A logdrop-1944 -m limit --limit 1/second -j LOG +-A logdrop-1944 -j DROP +-A logdrop-1945 -m limit --limit 1/second -j LOG +-A logdrop-1945 -j DROP +-A logdrop-1946 -m limit --limit 1/second -j LOG +-A logdrop-1946 -j DROP +-A logdrop-1947 -m limit --limit 1/second -j LOG +-A logdrop-1947 -j DROP +-A logdrop-1948 -m limit --limit 1/second -j LOG +-A logdrop-1948 -j DROP +-A logdrop-1949 -m limit --limit 1/second -j LOG +-A logdrop-1949 -j DROP +-A logdrop-195 -m limit --limit 12/minute -j ULOG -A logdrop-195 -j DROP --A logdrop-196 -m limit --limit 1/second -j LOG +-A logdrop-1950 -m limit --limit 1/second -j LOG +-A logdrop-1950 -j DROP +-A logdrop-1951 -m limit --limit 1/second -j LOG +-A logdrop-1951 -j DROP +-A logdrop-1952 -m limit --limit 1/second -j LOG +-A logdrop-1952 -j DROP +-A logdrop-1953 -m limit --limit 1/second -j LOG +-A logdrop-1953 -j DROP +-A logdrop-1954 -m limit --limit 1/second -j LOG +-A logdrop-1954 -j DROP +-A logdrop-1955 -m limit --limit 1/second -j LOG +-A logdrop-1955 -j DROP +-A logdrop-1956 -m limit --limit 1/second -j LOG +-A logdrop-1956 -j DROP +-A logdrop-1957 -m limit --limit 1/second -j LOG +-A logdrop-1957 -j DROP +-A logdrop-1958 -m limit --limit 1/second -j LOG +-A logdrop-1958 -j DROP +-A logdrop-1959 -m limit --limit 1/second -j LOG +-A logdrop-1959 -j DROP +-A logdrop-196 -m limit --limit 12/minute -j ULOG -A logdrop-196 -j DROP --A logdrop-197 -m limit --limit 1/second -j LOG +-A logdrop-1960 -m limit --limit 1/second -j LOG +-A logdrop-1960 -j DROP +-A logdrop-1961 -m limit --limit 1/second -j LOG +-A logdrop-1961 -j DROP +-A logdrop-1962 -m limit --limit 1/second -j LOG +-A logdrop-1962 -j DROP +-A logdrop-1963 -m limit --limit 1/second -j LOG +-A logdrop-1963 -j DROP +-A logdrop-1964 -m limit --limit 1/second -j LOG +-A logdrop-1964 -j DROP +-A logdrop-1965 -m limit --limit 1/second -j LOG +-A logdrop-1965 -j DROP +-A logdrop-1966 -m limit --limit 1/second -j LOG +-A logdrop-1966 -j DROP +-A logdrop-1967 -m limit --limit 1/second -j LOG +-A logdrop-1967 -j DROP +-A logdrop-1968 -m limit --limit 1/second -j LOG +-A logdrop-1968 -j DROP +-A logdrop-1969 -m limit --limit 1/second -j LOG +-A logdrop-1969 -j DROP +-A logdrop-197 -m limit --limit 12/minute -j ULOG -A logdrop-197 -j DROP --A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-1970 -m limit --limit 1/second -j LOG +-A logdrop-1970 -j DROP +-A logdrop-1971 -m limit --limit 1/second -j LOG +-A logdrop-1971 -j DROP +-A logdrop-1972 -m limit --limit 1/second -j LOG +-A logdrop-1972 -j DROP +-A logdrop-1973 -m limit --limit 1/second -j LOG +-A logdrop-1973 -j DROP +-A logdrop-1974 -m limit --limit 1/second -j LOG +-A logdrop-1974 -j DROP +-A logdrop-1975 -m limit --limit 1/second -j LOG +-A logdrop-1975 -j DROP +-A logdrop-1976 -m limit --limit 1/second -j LOG +-A logdrop-1976 -j DROP +-A logdrop-1977 -m limit --limit 1/second -j LOG +-A logdrop-1977 -j DROP +-A logdrop-1978 -m limit --limit 1/second -j LOG +-A logdrop-1978 -j DROP +-A logdrop-1979 -m limit --limit 1/second -j LOG +-A logdrop-1979 -j DROP +-A logdrop-198 -m limit --limit 12/minute -j ULOG -A logdrop-198 -j DROP --A logdrop-199 -m limit --limit 1/second -j LOG +-A logdrop-1980 -m limit --limit 1/second -j LOG +-A logdrop-1980 -j DROP +-A logdrop-1981 -m limit --limit 1/second -j LOG +-A logdrop-1981 -j DROP +-A logdrop-1982 -m limit --limit 1/second -j LOG +-A logdrop-1982 -j DROP +-A logdrop-1983 -m limit --limit 1/second -j LOG +-A logdrop-1983 -j DROP +-A logdrop-1984 -m limit --limit 1/second -j LOG +-A logdrop-1984 -j DROP +-A logdrop-1985 -m limit --limit 1/second -j LOG +-A logdrop-1985 -j DROP +-A logdrop-1986 -m limit --limit 1/second -j LOG +-A logdrop-1986 -j DROP +-A logdrop-1987 -m limit --limit 1/second -j LOG +-A logdrop-1987 -j DROP +-A logdrop-1988 -m limit --limit 1/second -j LOG +-A logdrop-1988 -j DROP +-A logdrop-1989 -m limit --limit 1/second -j LOG +-A logdrop-1989 -j DROP +-A logdrop-199 -m limit --limit 12/minute -j ULOG -A logdrop-199 -j DROP +-A logdrop-1990 -m limit --limit 1/second -j LOG +-A logdrop-1990 -j DROP +-A logdrop-1991 -m limit --limit 1/second -j LOG +-A logdrop-1991 -j DROP +-A logdrop-1992 -m limit --limit 1/second -j LOG +-A logdrop-1992 -j DROP +-A logdrop-1993 -m limit --limit 1/second -j LOG +-A logdrop-1993 -j DROP +-A logdrop-1994 -m limit --limit 1/second -j LOG +-A logdrop-1994 -j DROP +-A logdrop-1995 -m limit --limit 1/second -j LOG +-A logdrop-1995 -j DROP +-A logdrop-1996 -m limit --limit 1/second -j LOG +-A logdrop-1996 -j DROP +-A logdrop-1997 -m limit --limit 1/second -j LOG +-A logdrop-1997 -j DROP +-A logdrop-1998 -m limit --limit 1/second -j LOG +-A logdrop-1998 -j DROP +-A logdrop-1999 -m limit --limit 1/second -j LOG +-A logdrop-1999 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-20 -m limit --limit 1/second -j LOG -A logdrop-20 -j DROP --A logdrop-200 -m limit --limit 1/second -j LOG +-A logdrop-200 -m limit --limit 12/minute -j ULOG -A logdrop-200 -j DROP --A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-2000 -m limit --limit 1/second -j LOG +-A logdrop-2000 -j DROP +-A logdrop-2001 -m limit --limit 1/second -j LOG +-A logdrop-2001 -j DROP +-A logdrop-2002 -m limit --limit 1/second -j LOG +-A logdrop-2002 -j DROP +-A logdrop-2003 -m limit --limit 1/second -j LOG +-A logdrop-2003 -j DROP +-A logdrop-2004 -m limit --limit 1/second -j LOG +-A logdrop-2004 -j DROP +-A logdrop-2005 -m limit --limit 1/second -j LOG +-A logdrop-2005 -j DROP +-A logdrop-2006 -m limit --limit 1/second -j LOG +-A logdrop-2006 -j DROP +-A logdrop-2007 -m limit --limit 1/second -j LOG +-A logdrop-2007 -j DROP +-A logdrop-2008 -m limit --limit 1/second -j LOG +-A logdrop-2008 -j DROP +-A logdrop-2009 -m limit --limit 1/second -j LOG +-A logdrop-2009 -j DROP +-A logdrop-201 -m limit --limit 12/minute -j ULOG -A logdrop-201 -j DROP --A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-2010 -m limit --limit 1/second -j LOG +-A logdrop-2010 -j DROP +-A logdrop-2011 -m limit --limit 1/second -j LOG +-A logdrop-2011 -j DROP +-A logdrop-2012 -m limit --limit 1/second -j LOG +-A logdrop-2012 -j DROP +-A logdrop-2013 -m limit --limit 1/second -j LOG +-A logdrop-2013 -j DROP +-A logdrop-2014 -m limit --limit 1/second -j LOG +-A logdrop-2014 -j DROP +-A logdrop-2015 -m limit --limit 1/second -j LOG +-A logdrop-2015 -j DROP +-A logdrop-2016 -m limit --limit 1/second -j LOG +-A logdrop-2016 -j DROP +-A logdrop-2017 -m limit --limit 1/second -j LOG +-A logdrop-2017 -j DROP +-A logdrop-2018 -m limit --limit 1/second -j LOG +-A logdrop-2018 -j DROP +-A logdrop-2019 -m limit --limit 1/second -j LOG +-A logdrop-2019 -j DROP +-A logdrop-202 -m limit --limit 12/minute -j ULOG -A logdrop-202 -j DROP --A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-2020 -j TEE --gateway 10.0.0.1 +-A logdrop-2020 -j TEE --gateway 10.0.0.2 +-A logdrop-2020 -j DROP +-A logdrop-2021 -j TEE --gateway 10.0.0.1 +-A logdrop-2021 -j TEE --gateway 10.0.0.2 +-A logdrop-2021 -j DROP +-A logdrop-2022 -j TEE --gateway 10.0.0.1 +-A logdrop-2022 -j TEE --gateway 10.0.0.2 +-A logdrop-2022 -j DROP +-A logdrop-2023 -j TEE --gateway 10.0.0.1 +-A logdrop-2023 -j TEE --gateway 10.0.0.2 +-A logdrop-2023 -j DROP +-A logdrop-2024 -j TEE --gateway 10.0.0.1 +-A logdrop-2024 -j TEE --gateway 10.0.0.2 +-A logdrop-2024 -j DROP +-A logdrop-2025 -j TEE --gateway 10.0.0.1 +-A logdrop-2025 -j TEE --gateway 10.0.0.2 +-A logdrop-2025 -j DROP +-A logdrop-2026 -j TEE --gateway 10.0.0.1 +-A logdrop-2026 -j TEE --gateway 10.0.0.2 +-A logdrop-2026 -j DROP +-A logdrop-2027 -j TEE --gateway 10.0.0.1 +-A logdrop-2027 -j TEE --gateway 10.0.0.2 +-A logdrop-2027 -j DROP +-A logdrop-2028 -j TEE --gateway 10.0.0.1 +-A logdrop-2028 -j TEE --gateway 10.0.0.2 +-A logdrop-2028 -j DROP +-A logdrop-2029 -j TEE --gateway 10.0.0.1 +-A logdrop-2029 -j TEE --gateway 10.0.0.2 +-A logdrop-2029 -j DROP +-A logdrop-203 -m limit --limit 12/minute -j ULOG -A logdrop-203 -j DROP --A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-2030 -j TEE --gateway 10.0.0.1 +-A logdrop-2030 -j TEE --gateway 10.0.0.2 +-A logdrop-2030 -j DROP +-A logdrop-2031 -j TEE --gateway 10.0.0.1 +-A logdrop-2031 -j TEE --gateway 10.0.0.2 +-A logdrop-2031 -j DROP +-A logdrop-2032 -j TEE --gateway 10.0.0.1 +-A logdrop-2032 -j TEE --gateway 10.0.0.2 +-A logdrop-2032 -j DROP +-A logdrop-2033 -j TEE --gateway 10.0.0.1 +-A logdrop-2033 -j TEE --gateway 10.0.0.2 +-A logdrop-2033 -j DROP +-A logdrop-2034 -j TEE --gateway 10.0.0.1 +-A logdrop-2034 -j TEE --gateway 10.0.0.2 +-A logdrop-2034 -j DROP +-A logdrop-2035 -j TEE --gateway 10.0.0.1 +-A logdrop-2035 -j TEE --gateway 10.0.0.2 +-A logdrop-2035 -j DROP +-A logdrop-2036 -j TEE --gateway 10.0.0.1 +-A logdrop-2036 -j TEE --gateway 10.0.0.2 +-A logdrop-2036 -j DROP +-A logdrop-2037 -j TEE --gateway 10.0.0.1 +-A logdrop-2037 -j TEE --gateway 10.0.0.2 +-A logdrop-2037 -j DROP +-A logdrop-2038 -j TEE --gateway 10.0.0.1 +-A logdrop-2038 -j TEE --gateway 10.0.0.2 +-A logdrop-2038 -j DROP +-A logdrop-2039 -j TEE --gateway 10.0.0.1 +-A logdrop-2039 -j TEE --gateway 10.0.0.2 +-A logdrop-2039 -j DROP +-A logdrop-204 -m limit --limit 12/minute -j ULOG -A logdrop-204 -j DROP --A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-2040 -j TEE --gateway 10.0.0.1 +-A logdrop-2040 -j TEE --gateway 10.0.0.2 +-A logdrop-2040 -j DROP +-A logdrop-2041 -j TEE --gateway 10.0.0.1 +-A logdrop-2041 -j TEE --gateway 10.0.0.2 +-A logdrop-2041 -j DROP +-A logdrop-2042 -j TEE --gateway 10.0.0.1 +-A logdrop-2042 -j TEE --gateway 10.0.0.2 +-A logdrop-2042 -j DROP +-A logdrop-2043 -j TEE --gateway 10.0.0.1 +-A logdrop-2043 -j TEE --gateway 10.0.0.2 +-A logdrop-2043 -j DROP +-A logdrop-2044 -j TEE --gateway 10.0.0.1 +-A logdrop-2044 -j TEE --gateway 10.0.0.2 +-A logdrop-2044 -j DROP +-A logdrop-2045 -j TEE --gateway 10.0.0.1 +-A logdrop-2045 -j TEE --gateway 10.0.0.2 +-A logdrop-2045 -j DROP +-A logdrop-2046 -j TEE --gateway 10.0.0.1 +-A logdrop-2046 -j TEE --gateway 10.0.0.2 +-A logdrop-2046 -j DROP +-A logdrop-2047 -j TEE --gateway 10.0.0.1 +-A logdrop-2047 -j TEE --gateway 10.0.0.2 +-A logdrop-2047 -j DROP +-A logdrop-2048 -j TEE --gateway 10.0.0.1 +-A logdrop-2048 -j TEE --gateway 10.0.0.2 +-A logdrop-2048 -j DROP +-A logdrop-2049 -j TEE --gateway 10.0.0.1 +-A logdrop-2049 -j TEE --gateway 10.0.0.2 +-A logdrop-2049 -j DROP +-A logdrop-205 -m limit --limit 12/minute -j ULOG -A logdrop-205 -j DROP --A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-2050 -j TEE --gateway 10.0.0.1 +-A logdrop-2050 -j TEE --gateway 10.0.0.2 +-A logdrop-2050 -j DROP +-A logdrop-2051 -j TEE --gateway 10.0.0.1 +-A logdrop-2051 -j TEE --gateway 10.0.0.2 +-A logdrop-2051 -j DROP +-A logdrop-2052 -j TEE --gateway 10.0.0.1 +-A logdrop-2052 -j TEE --gateway 10.0.0.2 +-A logdrop-2052 -j DROP +-A logdrop-2053 -j TEE --gateway 10.0.0.1 +-A logdrop-2053 -j TEE --gateway 10.0.0.2 +-A logdrop-2053 -j DROP +-A logdrop-2054 -j TEE --gateway 10.0.0.1 +-A logdrop-2054 -j TEE --gateway 10.0.0.2 +-A logdrop-2054 -j DROP +-A logdrop-2055 -j TEE --gateway 10.0.0.1 +-A logdrop-2055 -j TEE --gateway 10.0.0.2 +-A logdrop-2055 -j DROP +-A logdrop-2056 -j TEE --gateway 10.0.0.1 +-A logdrop-2056 -j TEE --gateway 10.0.0.2 +-A logdrop-2056 -j DROP +-A logdrop-2057 -j TEE --gateway 10.0.0.1 +-A logdrop-2057 -j TEE --gateway 10.0.0.2 +-A logdrop-2057 -j DROP +-A logdrop-2058 -j TEE --gateway 10.0.0.1 +-A logdrop-2058 -j TEE --gateway 10.0.0.2 +-A logdrop-2058 -j DROP +-A logdrop-2059 -j TEE --gateway 10.0.0.1 +-A logdrop-2059 -j TEE --gateway 10.0.0.2 +-A logdrop-2059 -j DROP +-A logdrop-206 -m limit --limit 12/minute -j ULOG -A logdrop-206 -j DROP --A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-2060 -j TEE --gateway 10.0.0.1 +-A logdrop-2060 -j TEE --gateway 10.0.0.2 +-A logdrop-2060 -j DROP +-A logdrop-2061 -j TEE --gateway 10.0.0.1 +-A logdrop-2061 -j TEE --gateway 10.0.0.2 +-A logdrop-2061 -j DROP +-A logdrop-2062 -j TEE --gateway 10.0.0.1 +-A logdrop-2062 -j TEE --gateway 10.0.0.2 +-A logdrop-2062 -j DROP +-A logdrop-2063 -j TEE --gateway 10.0.0.1 +-A logdrop-2063 -j TEE --gateway 10.0.0.2 +-A logdrop-2063 -j DROP +-A logdrop-2064 -j TEE --gateway 10.0.0.1 +-A logdrop-2064 -j TEE --gateway 10.0.0.2 +-A logdrop-2064 -j DROP +-A logdrop-2065 -j TEE --gateway 10.0.0.1 +-A logdrop-2065 -j TEE --gateway 10.0.0.2 +-A logdrop-2065 -j DROP +-A logdrop-2066 -j TEE --gateway 10.0.0.1 +-A logdrop-2066 -j TEE --gateway 10.0.0.2 +-A logdrop-2066 -j DROP +-A logdrop-2067 -j TEE --gateway 10.0.0.1 +-A logdrop-2067 -j TEE --gateway 10.0.0.2 +-A logdrop-2067 -j DROP +-A logdrop-2068 -j TEE --gateway 10.0.0.1 +-A logdrop-2068 -j TEE --gateway 10.0.0.2 +-A logdrop-2068 -j DROP +-A logdrop-2069 -j TEE --gateway 10.0.0.1 +-A logdrop-2069 -j TEE --gateway 10.0.0.2 +-A logdrop-2069 -j DROP +-A logdrop-207 -m limit --limit 12/minute -j ULOG -A logdrop-207 -j DROP --A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-2070 -j TEE --gateway 10.0.0.1 +-A logdrop-2070 -j TEE --gateway 10.0.0.2 +-A logdrop-2070 -j DROP +-A logdrop-2071 -j TEE --gateway 10.0.0.1 +-A logdrop-2071 -j TEE --gateway 10.0.0.2 +-A logdrop-2071 -j DROP +-A logdrop-2072 -j TEE --gateway 10.0.0.1 +-A logdrop-2072 -j TEE --gateway 10.0.0.2 +-A logdrop-2072 -j DROP +-A logdrop-2073 -j TEE --gateway 10.0.0.1 +-A logdrop-2073 -j TEE --gateway 10.0.0.2 +-A logdrop-2073 -j DROP +-A logdrop-2074 -j TEE --gateway 10.0.0.1 +-A logdrop-2074 -j TEE --gateway 10.0.0.2 +-A logdrop-2074 -j DROP +-A logdrop-2075 -j TEE --gateway 10.0.0.1 +-A logdrop-2075 -j TEE --gateway 10.0.0.2 +-A logdrop-2075 -j DROP +-A logdrop-2076 -j TEE --gateway 10.0.0.1 +-A logdrop-2076 -j TEE --gateway 10.0.0.2 +-A logdrop-2076 -j DROP +-A logdrop-2077 -j TEE --gateway 10.0.0.1 +-A logdrop-2077 -j TEE --gateway 10.0.0.2 +-A logdrop-2077 -j DROP +-A logdrop-2078 -j TEE --gateway 10.0.0.1 +-A logdrop-2078 -j TEE --gateway 10.0.0.2 +-A logdrop-2078 -j DROP +-A logdrop-2079 -j TEE --gateway 10.0.0.1 +-A logdrop-2079 -j TEE --gateway 10.0.0.2 +-A logdrop-2079 -j DROP +-A logdrop-208 -m limit --limit 12/minute -j ULOG -A logdrop-208 -j DROP --A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-2080 -j TEE --gateway 10.0.0.1 +-A logdrop-2080 -j TEE --gateway 10.0.0.2 +-A logdrop-2080 -j DROP +-A logdrop-2081 -j TEE --gateway 10.0.0.1 +-A logdrop-2081 -j TEE --gateway 10.0.0.2 +-A logdrop-2081 -j DROP +-A logdrop-2082 -j TEE --gateway 10.0.0.1 +-A logdrop-2082 -j TEE --gateway 10.0.0.2 +-A logdrop-2082 -j DROP +-A logdrop-2083 -j TEE --gateway 10.0.0.1 +-A logdrop-2083 -j TEE --gateway 10.0.0.2 +-A logdrop-2083 -j DROP +-A logdrop-2084 -j TEE --gateway 10.0.0.1 +-A logdrop-2084 -j TEE --gateway 10.0.0.2 +-A logdrop-2084 -j DROP +-A logdrop-2085 -j TEE --gateway 10.0.0.1 +-A logdrop-2085 -j TEE --gateway 10.0.0.2 +-A logdrop-2085 -j DROP +-A logdrop-2086 -j TEE --gateway 10.0.0.1 +-A logdrop-2086 -j TEE --gateway 10.0.0.2 +-A logdrop-2086 -j DROP +-A logdrop-2087 -j TEE --gateway 10.0.0.1 +-A logdrop-2087 -j TEE --gateway 10.0.0.2 +-A logdrop-2087 -j DROP +-A logdrop-2088 -j TEE --gateway 10.0.0.1 +-A logdrop-2088 -j TEE --gateway 10.0.0.2 +-A logdrop-2088 -j DROP +-A logdrop-2089 -j TEE --gateway 10.0.0.1 +-A logdrop-2089 -j TEE --gateway 10.0.0.2 +-A logdrop-2089 -j DROP +-A logdrop-209 -m limit --limit 12/minute -j ULOG -A logdrop-209 -j DROP +-A logdrop-2090 -j TEE --gateway 10.0.0.1 +-A logdrop-2090 -j TEE --gateway 10.0.0.2 +-A logdrop-2090 -j DROP +-A logdrop-2091 -j TEE --gateway 10.0.0.1 +-A logdrop-2091 -j TEE --gateway 10.0.0.2 +-A logdrop-2091 -j DROP +-A logdrop-2092 -j TEE --gateway 10.0.0.1 +-A logdrop-2092 -j TEE --gateway 10.0.0.2 +-A logdrop-2092 -j DROP +-A logdrop-2093 -j TEE --gateway 10.0.0.1 +-A logdrop-2093 -j TEE --gateway 10.0.0.2 +-A logdrop-2093 -j DROP +-A logdrop-2094 -j TEE --gateway 10.0.0.1 +-A logdrop-2094 -j TEE --gateway 10.0.0.2 +-A logdrop-2094 -j DROP +-A logdrop-2095 -j TEE --gateway 10.0.0.1 +-A logdrop-2095 -j TEE --gateway 10.0.0.2 +-A logdrop-2095 -j DROP +-A logdrop-2096 -j TEE --gateway 10.0.0.1 +-A logdrop-2096 -j TEE --gateway 10.0.0.2 +-A logdrop-2096 -j DROP +-A logdrop-2097 -j TEE --gateway 10.0.0.1 +-A logdrop-2097 -j TEE --gateway 10.0.0.2 +-A logdrop-2097 -j DROP +-A logdrop-2098 -j TEE --gateway 10.0.0.1 +-A logdrop-2098 -j TEE --gateway 10.0.0.2 +-A logdrop-2098 -j DROP +-A logdrop-2099 -j TEE --gateway 10.0.0.1 +-A logdrop-2099 -j TEE --gateway 10.0.0.2 +-A logdrop-2099 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP --A logdrop-210 -m limit --limit 1/second -j LOG +-A logdrop-210 -m limit --limit 12/minute -j ULOG -A logdrop-210 -j DROP --A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-2100 -j TEE --gateway 10.0.0.1 +-A logdrop-2100 -j TEE --gateway 10.0.0.2 +-A logdrop-2100 -j DROP +-A logdrop-2101 -j TEE --gateway 10.0.0.1 +-A logdrop-2101 -j TEE --gateway 10.0.0.2 +-A logdrop-2101 -j DROP +-A logdrop-2102 -j TEE --gateway 10.0.0.1 +-A logdrop-2102 -j TEE --gateway 10.0.0.2 +-A logdrop-2102 -j DROP +-A logdrop-2103 -j TEE --gateway 10.0.0.1 +-A logdrop-2103 -j TEE --gateway 10.0.0.2 +-A logdrop-2103 -j DROP +-A logdrop-2104 -j TEE --gateway 10.0.0.1 +-A logdrop-2104 -j TEE --gateway 10.0.0.2 +-A logdrop-2104 -j DROP +-A logdrop-2105 -j TEE --gateway 10.0.0.1 +-A logdrop-2105 -j TEE --gateway 10.0.0.2 +-A logdrop-2105 -j DROP +-A logdrop-2106 -j TEE --gateway 10.0.0.1 +-A logdrop-2106 -j TEE --gateway 10.0.0.2 +-A logdrop-2106 -j DROP +-A logdrop-2107 -j TEE --gateway 10.0.0.1 +-A logdrop-2107 -j TEE --gateway 10.0.0.2 +-A logdrop-2107 -j DROP +-A logdrop-2108 -j TEE --gateway 10.0.0.1 +-A logdrop-2108 -j TEE --gateway 10.0.0.2 +-A logdrop-2108 -j DROP +-A logdrop-2109 -j TEE --gateway 10.0.0.1 +-A logdrop-2109 -j TEE --gateway 10.0.0.2 +-A logdrop-2109 -j DROP +-A logdrop-211 -m limit --limit 12/minute -j ULOG -A logdrop-211 -j DROP --A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-2110 -m limit --limit 12/minute -j ULOG +-A logdrop-2110 -j DROP +-A logdrop-2111 -m limit --limit 12/minute -j ULOG +-A logdrop-2111 -j DROP +-A logdrop-2112 -m limit --limit 12/minute -j ULOG +-A logdrop-2112 -j DROP +-A logdrop-2113 -m limit --limit 12/minute -j ULOG +-A logdrop-2113 -j DROP +-A logdrop-2114 -m limit --limit 12/minute -j ULOG +-A logdrop-2114 -j DROP +-A logdrop-2115 -m limit --limit 12/minute -j ULOG +-A logdrop-2115 -j DROP +-A logdrop-2116 -m limit --limit 12/minute -j ULOG +-A logdrop-2116 -j DROP +-A logdrop-2117 -m limit --limit 12/minute -j ULOG +-A logdrop-2117 -j DROP +-A logdrop-2118 -m limit --limit 12/minute -j ULOG +-A logdrop-2118 -j DROP +-A logdrop-2119 -m limit --limit 12/minute -j ULOG +-A logdrop-2119 -j DROP +-A logdrop-212 -m limit --limit 12/minute -j ULOG -A logdrop-212 -j DROP --A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-2120 -m limit --limit 12/minute -j ULOG +-A logdrop-2120 -j DROP +-A logdrop-2121 -m limit --limit 12/minute -j ULOG +-A logdrop-2121 -j DROP +-A logdrop-2122 -m limit --limit 12/minute -j ULOG +-A logdrop-2122 -j DROP +-A logdrop-2123 -m limit --limit 12/minute -j ULOG +-A logdrop-2123 -j DROP +-A logdrop-2124 -m limit --limit 12/minute -j ULOG +-A logdrop-2124 -j DROP +-A logdrop-2125 -m limit --limit 12/minute -j ULOG +-A logdrop-2125 -j DROP +-A logdrop-2126 -m limit --limit 12/minute -j ULOG +-A logdrop-2126 -j DROP +-A logdrop-2127 -m limit --limit 12/minute -j ULOG +-A logdrop-2127 -j DROP +-A logdrop-2128 -m limit --limit 12/minute -j ULOG +-A logdrop-2128 -j DROP +-A logdrop-2129 -m limit --limit 12/minute -j ULOG +-A logdrop-2129 -j DROP +-A logdrop-213 -m limit --limit 12/minute -j ULOG -A logdrop-213 -j DROP --A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-2130 -m limit --limit 12/minute -j ULOG +-A logdrop-2130 -j DROP +-A logdrop-2131 -m limit --limit 12/minute -j ULOG +-A logdrop-2131 -j DROP +-A logdrop-2132 -m limit --limit 12/minute -j ULOG +-A logdrop-2132 -j DROP +-A logdrop-2133 -m limit --limit 12/minute -j ULOG +-A logdrop-2133 -j DROP +-A logdrop-2134 -m limit --limit 12/minute -j ULOG +-A logdrop-2134 -j DROP +-A logdrop-2135 -m limit --limit 12/minute -j ULOG +-A logdrop-2135 -j DROP +-A logdrop-2136 -m limit --limit 12/minute -j ULOG +-A logdrop-2136 -j DROP +-A logdrop-2137 -m limit --limit 12/minute -j ULOG +-A logdrop-2137 -j DROP +-A logdrop-2138 -m limit --limit 12/minute -j ULOG +-A logdrop-2138 -j DROP +-A logdrop-2139 -m limit --limit 12/minute -j ULOG +-A logdrop-2139 -j DROP +-A logdrop-214 -m limit --limit 12/minute -j ULOG -A logdrop-214 -j DROP --A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-2140 -m limit --limit 12/minute -j ULOG +-A logdrop-2140 -j DROP +-A logdrop-2141 -m limit --limit 12/minute -j ULOG +-A logdrop-2141 -j DROP +-A logdrop-2142 -m limit --limit 12/minute -j ULOG +-A logdrop-2142 -j DROP +-A logdrop-2143 -m limit --limit 12/minute -j ULOG +-A logdrop-2143 -j DROP +-A logdrop-2144 -m limit --limit 12/minute -j ULOG +-A logdrop-2144 -j DROP +-A logdrop-2145 -m limit --limit 12/minute -j ULOG +-A logdrop-2145 -j DROP +-A logdrop-2146 -m limit --limit 12/minute -j ULOG +-A logdrop-2146 -j DROP +-A logdrop-2147 -m limit --limit 12/minute -j ULOG +-A logdrop-2147 -j DROP +-A logdrop-2148 -m limit --limit 12/minute -j ULOG +-A logdrop-2148 -j DROP +-A logdrop-2149 -m limit --limit 12/minute -j ULOG +-A logdrop-2149 -j DROP +-A logdrop-215 -m limit --limit 12/minute -j ULOG -A logdrop-215 -j DROP --A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-2150 -m limit --limit 12/minute -j ULOG +-A logdrop-2150 -j DROP +-A logdrop-2151 -m limit --limit 12/minute -j ULOG +-A logdrop-2151 -j DROP +-A logdrop-2152 -m limit --limit 12/minute -j ULOG +-A logdrop-2152 -j DROP +-A logdrop-2153 -m limit --limit 12/minute -j ULOG +-A logdrop-2153 -j DROP +-A logdrop-2154 -m limit --limit 12/minute -j ULOG +-A logdrop-2154 -j DROP +-A logdrop-2155 -m limit --limit 12/minute -j ULOG +-A logdrop-2155 -j DROP +-A logdrop-2156 -m limit --limit 12/minute -j ULOG +-A logdrop-2156 -j DROP +-A logdrop-2157 -m limit --limit 12/minute -j ULOG +-A logdrop-2157 -j DROP +-A logdrop-2158 -m limit --limit 12/minute -j ULOG +-A logdrop-2158 -j DROP +-A logdrop-2159 -m limit --limit 12/minute -j ULOG +-A logdrop-2159 -j DROP +-A logdrop-216 -m limit --limit 12/minute -j ULOG -A logdrop-216 -j DROP --A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-2160 -m limit --limit 12/minute -j ULOG +-A logdrop-2160 -j DROP +-A logdrop-2161 -m limit --limit 12/minute -j ULOG +-A logdrop-2161 -j DROP +-A logdrop-2162 -m limit --limit 12/minute -j ULOG +-A logdrop-2162 -j DROP +-A logdrop-2163 -m limit --limit 12/minute -j ULOG +-A logdrop-2163 -j DROP +-A logdrop-2164 -m limit --limit 12/minute -j ULOG +-A logdrop-2164 -j DROP +-A logdrop-2165 -m limit --limit 12/minute -j ULOG +-A logdrop-2165 -j DROP +-A logdrop-2166 -m limit --limit 12/minute -j ULOG +-A logdrop-2166 -j DROP +-A logdrop-2167 -m limit --limit 12/minute -j ULOG +-A logdrop-2167 -j DROP +-A logdrop-2168 -m limit --limit 12/minute -j ULOG +-A logdrop-2168 -j DROP +-A logdrop-2169 -m limit --limit 12/minute -j ULOG +-A logdrop-2169 -j DROP +-A logdrop-217 -m limit --limit 12/minute -j ULOG -A logdrop-217 -j DROP --A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-2170 -m limit --limit 12/minute -j ULOG +-A logdrop-2170 -j DROP +-A logdrop-2171 -m limit --limit 12/minute -j ULOG +-A logdrop-2171 -j DROP +-A logdrop-2172 -m limit --limit 12/minute -j ULOG +-A logdrop-2172 -j DROP +-A logdrop-2173 -m limit --limit 12/minute -j ULOG +-A logdrop-2173 -j DROP +-A logdrop-2174 -m limit --limit 12/minute -j ULOG +-A logdrop-2174 -j DROP +-A logdrop-2175 -m limit --limit 12/minute -j ULOG +-A logdrop-2175 -j DROP +-A logdrop-2176 -m limit --limit 12/minute -j ULOG +-A logdrop-2176 -j DROP +-A logdrop-2177 -m limit --limit 12/minute -j ULOG +-A logdrop-2177 -j DROP +-A logdrop-2178 -m limit --limit 12/minute -j ULOG +-A logdrop-2178 -j DROP +-A logdrop-2179 -m limit --limit 12/minute -j ULOG +-A logdrop-2179 -j DROP +-A logdrop-218 -m limit --limit 12/minute -j ULOG -A logdrop-218 -j DROP --A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-2180 -m limit --limit 12/minute -j ULOG +-A logdrop-2180 -j DROP +-A logdrop-2181 -m limit --limit 12/minute -j ULOG +-A logdrop-2181 -j DROP +-A logdrop-2182 -m limit --limit 12/minute -j ULOG +-A logdrop-2182 -j DROP +-A logdrop-2183 -m limit --limit 12/minute -j ULOG +-A logdrop-2183 -j DROP +-A logdrop-2184 -m limit --limit 12/minute -j ULOG +-A logdrop-2184 -j DROP +-A logdrop-2185 -m limit --limit 12/minute -j ULOG +-A logdrop-2185 -j DROP +-A logdrop-2186 -m limit --limit 12/minute -j ULOG +-A logdrop-2186 -j DROP +-A logdrop-2187 -m limit --limit 12/minute -j ULOG +-A logdrop-2187 -j DROP +-A logdrop-2188 -m limit --limit 12/minute -j ULOG +-A logdrop-2188 -j DROP +-A logdrop-2189 -m limit --limit 12/minute -j ULOG +-A logdrop-2189 -j DROP +-A logdrop-219 -m limit --limit 12/minute -j ULOG -A logdrop-219 -j DROP +-A logdrop-2190 -m limit --limit 12/minute -j ULOG +-A logdrop-2190 -j DROP +-A logdrop-2191 -m limit --limit 12/minute -j ULOG +-A logdrop-2191 -j DROP +-A logdrop-2192 -m limit --limit 12/minute -j ULOG +-A logdrop-2192 -j DROP +-A logdrop-2193 -m limit --limit 12/minute -j ULOG +-A logdrop-2193 -j DROP +-A logdrop-2194 -m limit --limit 12/minute -j ULOG +-A logdrop-2194 -j DROP +-A logdrop-2195 -m limit --limit 12/minute -j ULOG +-A logdrop-2195 -j DROP +-A logdrop-2196 -m limit --limit 12/minute -j ULOG +-A logdrop-2196 -j DROP +-A logdrop-2197 -m limit --limit 12/minute -j ULOG +-A logdrop-2197 -j DROP +-A logdrop-2198 -m limit --limit 12/minute -j ULOG +-A logdrop-2198 -j DROP +-A logdrop-2199 -m limit --limit 12/minute -j ULOG +-A logdrop-2199 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP --A logdrop-220 -m limit --limit 1/second -j LOG +-A logdrop-220 -m limit --limit 12/minute -j ULOG -A logdrop-220 -j DROP --A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-2200 -m limit --limit 1/second -j LOG +-A logdrop-2200 -j DROP +-A logdrop-2201 -m limit --limit 1/second -j LOG +-A logdrop-2201 -j DROP +-A logdrop-2202 -j LOG +-A logdrop-2202 -j DROP +-A logdrop-2203 -j TEE --gateway 10.0.0.1 +-A logdrop-2203 -j TEE --gateway 10.0.0.2 +-A logdrop-2203 -j DROP +-A logdrop-2204 -m limit --limit 12/minute -j ULOG +-A logdrop-2204 -j DROP +-A logdrop-221 -m limit --limit 12/minute -j ULOG -A logdrop-221 -j DROP --A logdrop-222 -m limit --limit 1/second -j LOG +-A logdrop-222 -m limit --limit 12/minute -j ULOG -A logdrop-222 -j DROP --A logdrop-223 -m limit --limit 1/second -j LOG +-A logdrop-223 -m limit --limit 12/minute -j ULOG -A logdrop-223 -j DROP -A logdrop-224 -m limit --limit 12/minute -j ULOG -A logdrop-224 -j DROP @@ -15928,39 +28423,39 @@ -A logdrop-279 -j DROP -A logdrop-28 -m limit --limit 1/second -j LOG -A logdrop-28 -j DROP --A logdrop-280 -m limit --limit 12/minute -j ULOG +-A logdrop-280 -m limit --limit 1/second -j LOG -A logdrop-280 -j DROP --A logdrop-281 -m limit --limit 12/minute -j ULOG +-A logdrop-281 -m limit --limit 1/second -j LOG -A logdrop-281 -j DROP --A logdrop-282 -m limit --limit 12/minute -j ULOG +-A logdrop-282 -m limit --limit 1/second -j LOG -A logdrop-282 -j DROP --A logdrop-283 -m limit --limit 12/minute -j ULOG +-A logdrop-283 -m limit --limit 1/second -j LOG -A logdrop-283 -j DROP --A logdrop-284 -m limit --limit 12/minute -j ULOG +-A logdrop-284 -m limit --limit 1/second -j LOG -A logdrop-284 -j DROP --A logdrop-285 -m limit --limit 12/minute -j ULOG +-A logdrop-285 -m limit --limit 1/second -j LOG -A logdrop-285 -j DROP --A logdrop-286 -m limit --limit 12/minute -j ULOG +-A logdrop-286 -m limit --limit 1/second -j LOG -A logdrop-286 -j DROP --A logdrop-287 -m limit --limit 12/minute -j ULOG +-A logdrop-287 -m limit --limit 1/second -j LOG -A logdrop-287 -j DROP --A logdrop-288 -m limit --limit 12/minute -j ULOG +-A logdrop-288 -m limit --limit 1/second -j LOG -A logdrop-288 -j DROP --A logdrop-289 -m limit --limit 12/minute -j ULOG +-A logdrop-289 -m limit --limit 1/second -j LOG -A logdrop-289 -j DROP -A logdrop-29 -m limit --limit 1/second -j LOG -A logdrop-29 -j DROP --A logdrop-290 -m limit --limit 12/minute -j ULOG +-A logdrop-290 -m limit --limit 1/second -j LOG -A logdrop-290 -j DROP --A logdrop-291 -m limit --limit 12/minute -j ULOG +-A logdrop-291 -m limit --limit 1/second -j LOG -A logdrop-291 -j DROP --A logdrop-292 -m limit --limit 12/minute -j ULOG +-A logdrop-292 -m limit --limit 1/second -j LOG -A logdrop-292 -j DROP --A logdrop-293 -m limit --limit 12/minute -j ULOG +-A logdrop-293 -m limit --limit 1/second -j LOG -A logdrop-293 -j DROP --A logdrop-294 -m limit --limit 12/minute -j ULOG +-A logdrop-294 -m limit --limit 1/second -j LOG -A logdrop-294 -j DROP --A logdrop-295 -m limit --limit 12/minute -j ULOG +-A logdrop-295 -m limit --limit 1/second -j LOG -A logdrop-295 -j DROP -A logdrop-296 -m limit --limit 1/second -j LOG -A logdrop-296 -j DROP @@ -16128,337 +28623,427 @@ -A logdrop-369 -j DROP -A logdrop-37 -m limit --limit 1/second -j LOG -A logdrop-37 -j DROP --A logdrop-370 -m limit --limit 1/second -j LOG +-A logdrop-370 -j TEE --gateway 10.0.0.1 +-A logdrop-370 -j TEE --gateway 10.0.0.2 -A logdrop-370 -j DROP --A logdrop-371 -m limit --limit 1/second -j LOG +-A logdrop-371 -j TEE --gateway 10.0.0.1 +-A logdrop-371 -j TEE --gateway 10.0.0.2 -A logdrop-371 -j DROP --A logdrop-372 -m limit --limit 1/second -j LOG +-A logdrop-372 -j TEE --gateway 10.0.0.1 +-A logdrop-372 -j TEE --gateway 10.0.0.2 -A logdrop-372 -j DROP --A logdrop-373 -m limit --limit 1/second -j LOG +-A logdrop-373 -j TEE --gateway 10.0.0.1 +-A logdrop-373 -j TEE --gateway 10.0.0.2 -A logdrop-373 -j DROP --A logdrop-374 -m limit --limit 1/second -j LOG +-A logdrop-374 -j TEE --gateway 10.0.0.1 +-A logdrop-374 -j TEE --gateway 10.0.0.2 -A logdrop-374 -j DROP --A logdrop-375 -m limit --limit 1/second -j LOG +-A logdrop-375 -j TEE --gateway 10.0.0.1 +-A logdrop-375 -j TEE --gateway 10.0.0.2 -A logdrop-375 -j DROP --A logdrop-376 -m limit --limit 12/minute -j ULOG +-A logdrop-376 -j TEE --gateway 10.0.0.1 +-A logdrop-376 -j TEE --gateway 10.0.0.2 -A logdrop-376 -j DROP --A logdrop-377 -m limit --limit 12/minute -j ULOG +-A logdrop-377 -j TEE --gateway 10.0.0.1 +-A logdrop-377 -j TEE --gateway 10.0.0.2 -A logdrop-377 -j DROP --A logdrop-378 -m limit --limit 12/minute -j ULOG +-A logdrop-378 -j TEE --gateway 10.0.0.1 +-A logdrop-378 -j TEE --gateway 10.0.0.2 -A logdrop-378 -j DROP --A logdrop-379 -m limit --limit 12/minute -j ULOG +-A logdrop-379 -j TEE --gateway 10.0.0.1 +-A logdrop-379 -j TEE --gateway 10.0.0.2 -A logdrop-379 -j DROP -A logdrop-38 -m limit --limit 1/second -j LOG -A logdrop-38 -j DROP --A logdrop-380 -m limit --limit 12/minute -j ULOG +-A logdrop-380 -j TEE --gateway 10.0.0.1 +-A logdrop-380 -j TEE --gateway 10.0.0.2 -A logdrop-380 -j DROP --A logdrop-381 -m limit --limit 12/minute -j ULOG +-A logdrop-381 -j TEE --gateway 10.0.0.1 +-A logdrop-381 -j TEE --gateway 10.0.0.2 -A logdrop-381 -j DROP --A logdrop-382 -m limit --limit 12/minute -j ULOG +-A logdrop-382 -j TEE --gateway 10.0.0.1 +-A logdrop-382 -j TEE --gateway 10.0.0.2 -A logdrop-382 -j DROP --A logdrop-383 -m limit --limit 12/minute -j ULOG +-A logdrop-383 -j TEE --gateway 10.0.0.1 +-A logdrop-383 -j TEE --gateway 10.0.0.2 -A logdrop-383 -j DROP --A logdrop-384 -m limit --limit 12/minute -j ULOG +-A logdrop-384 -j TEE --gateway 10.0.0.1 +-A logdrop-384 -j TEE --gateway 10.0.0.2 -A logdrop-384 -j DROP --A logdrop-385 -m limit --limit 12/minute -j ULOG +-A logdrop-385 -j TEE --gateway 10.0.0.1 +-A logdrop-385 -j TEE --gateway 10.0.0.2 -A logdrop-385 -j DROP --A logdrop-386 -m limit --limit 12/minute -j ULOG +-A logdrop-386 -j TEE --gateway 10.0.0.1 +-A logdrop-386 -j TEE --gateway 10.0.0.2 -A logdrop-386 -j DROP --A logdrop-387 -m limit --limit 12/minute -j ULOG +-A logdrop-387 -j TEE --gateway 10.0.0.1 +-A logdrop-387 -j TEE --gateway 10.0.0.2 -A logdrop-387 -j DROP --A logdrop-388 -m limit --limit 12/minute -j ULOG +-A logdrop-388 -j TEE --gateway 10.0.0.1 +-A logdrop-388 -j TEE --gateway 10.0.0.2 -A logdrop-388 -j DROP --A logdrop-389 -m limit --limit 12/minute -j ULOG +-A logdrop-389 -j TEE --gateway 10.0.0.1 +-A logdrop-389 -j TEE --gateway 10.0.0.2 -A logdrop-389 -j DROP -A logdrop-39 -m limit --limit 1/second -j LOG -A logdrop-39 -j DROP --A logdrop-390 -m limit --limit 12/minute -j ULOG +-A logdrop-390 -j TEE --gateway 10.0.0.1 +-A logdrop-390 -j TEE --gateway 10.0.0.2 -A logdrop-390 -j DROP --A logdrop-391 -m limit --limit 12/minute -j ULOG +-A logdrop-391 -j TEE --gateway 10.0.0.1 +-A logdrop-391 -j TEE --gateway 10.0.0.2 -A logdrop-391 -j DROP --A logdrop-392 -m limit --limit 12/minute -j ULOG +-A logdrop-392 -j TEE --gateway 10.0.0.1 +-A logdrop-392 -j TEE --gateway 10.0.0.2 -A logdrop-392 -j DROP --A logdrop-393 -m limit --limit 12/minute -j ULOG +-A logdrop-393 -j TEE --gateway 10.0.0.1 +-A logdrop-393 -j TEE --gateway 10.0.0.2 -A logdrop-393 -j DROP --A logdrop-394 -m limit --limit 12/minute -j ULOG +-A logdrop-394 -j TEE --gateway 10.0.0.1 +-A logdrop-394 -j TEE --gateway 10.0.0.2 -A logdrop-394 -j DROP --A logdrop-395 -m limit --limit 12/minute -j ULOG +-A logdrop-395 -j TEE --gateway 10.0.0.1 +-A logdrop-395 -j TEE --gateway 10.0.0.2 -A logdrop-395 -j DROP --A logdrop-396 -m limit --limit 12/minute -j ULOG +-A logdrop-396 -j TEE --gateway 10.0.0.1 +-A logdrop-396 -j TEE --gateway 10.0.0.2 -A logdrop-396 -j DROP --A logdrop-397 -m limit --limit 12/minute -j ULOG +-A logdrop-397 -j TEE --gateway 10.0.0.1 +-A logdrop-397 -j TEE --gateway 10.0.0.2 -A logdrop-397 -j DROP --A logdrop-398 -m limit --limit 12/minute -j ULOG +-A logdrop-398 -j TEE --gateway 10.0.0.1 +-A logdrop-398 -j TEE --gateway 10.0.0.2 -A logdrop-398 -j DROP --A logdrop-399 -m limit --limit 12/minute -j ULOG +-A logdrop-399 -j TEE --gateway 10.0.0.1 +-A logdrop-399 -j TEE --gateway 10.0.0.2 -A logdrop-399 -j DROP -A logdrop-4 -m limit --limit 1/second -j LOG -A logdrop-4 -j DROP -A logdrop-40 -m limit --limit 1/second -j LOG -A logdrop-40 -j DROP --A logdrop-400 -m limit --limit 12/minute -j ULOG +-A logdrop-400 -j TEE --gateway 10.0.0.1 +-A logdrop-400 -j TEE --gateway 10.0.0.2 -A logdrop-400 -j DROP --A logdrop-401 -m limit --limit 12/minute -j ULOG +-A logdrop-401 -j TEE --gateway 10.0.0.1 +-A logdrop-401 -j TEE --gateway 10.0.0.2 -A logdrop-401 -j DROP --A logdrop-402 -m limit --limit 12/minute -j ULOG +-A logdrop-402 -j TEE --gateway 10.0.0.1 +-A logdrop-402 -j TEE --gateway 10.0.0.2 -A logdrop-402 -j DROP --A logdrop-403 -m limit --limit 12/minute -j ULOG +-A logdrop-403 -j TEE --gateway 10.0.0.1 +-A logdrop-403 -j TEE --gateway 10.0.0.2 -A logdrop-403 -j DROP --A logdrop-404 -m limit --limit 12/minute -j ULOG +-A logdrop-404 -j TEE --gateway 10.0.0.1 +-A logdrop-404 -j TEE --gateway 10.0.0.2 -A logdrop-404 -j DROP --A logdrop-405 -m limit --limit 12/minute -j ULOG +-A logdrop-405 -j TEE --gateway 10.0.0.1 +-A logdrop-405 -j TEE --gateway 10.0.0.2 -A logdrop-405 -j DROP --A logdrop-406 -m limit --limit 12/minute -j ULOG +-A logdrop-406 -j TEE --gateway 10.0.0.1 +-A logdrop-406 -j TEE --gateway 10.0.0.2 -A logdrop-406 -j DROP --A logdrop-407 -m limit --limit 12/minute -j ULOG +-A logdrop-407 -j TEE --gateway 10.0.0.1 +-A logdrop-407 -j TEE --gateway 10.0.0.2 -A logdrop-407 -j DROP --A logdrop-408 -m limit --limit 12/minute -j ULOG +-A logdrop-408 -j TEE --gateway 10.0.0.1 +-A logdrop-408 -j TEE --gateway 10.0.0.2 -A logdrop-408 -j DROP --A logdrop-409 -m limit --limit 12/minute -j ULOG +-A logdrop-409 -j TEE --gateway 10.0.0.1 +-A logdrop-409 -j TEE --gateway 10.0.0.2 -A logdrop-409 -j DROP -A logdrop-41 -m limit --limit 1/second -j LOG -A logdrop-41 -j DROP --A logdrop-410 -m limit --limit 12/minute -j ULOG +-A logdrop-410 -j TEE --gateway 10.0.0.1 +-A logdrop-410 -j TEE --gateway 10.0.0.2 -A logdrop-410 -j DROP --A logdrop-411 -m limit --limit 12/minute -j ULOG +-A logdrop-411 -j TEE --gateway 10.0.0.1 +-A logdrop-411 -j TEE --gateway 10.0.0.2 -A logdrop-411 -j DROP --A logdrop-412 -m limit --limit 12/minute -j ULOG +-A logdrop-412 -j TEE --gateway 10.0.0.1 +-A logdrop-412 -j TEE --gateway 10.0.0.2 -A logdrop-412 -j DROP --A logdrop-413 -m limit --limit 12/minute -j ULOG +-A logdrop-413 -j TEE --gateway 10.0.0.1 +-A logdrop-413 -j TEE --gateway 10.0.0.2 -A logdrop-413 -j DROP --A logdrop-414 -m limit --limit 12/minute -j ULOG +-A logdrop-414 -j TEE --gateway 10.0.0.1 +-A logdrop-414 -j TEE --gateway 10.0.0.2 -A logdrop-414 -j DROP --A logdrop-415 -m limit --limit 12/minute -j ULOG +-A logdrop-415 -j TEE --gateway 10.0.0.1 +-A logdrop-415 -j TEE --gateway 10.0.0.2 -A logdrop-415 -j DROP --A logdrop-416 -m limit --limit 12/minute -j ULOG +-A logdrop-416 -j TEE --gateway 10.0.0.1 +-A logdrop-416 -j TEE --gateway 10.0.0.2 -A logdrop-416 -j DROP --A logdrop-417 -m limit --limit 12/minute -j ULOG +-A logdrop-417 -j TEE --gateway 10.0.0.1 +-A logdrop-417 -j TEE --gateway 10.0.0.2 -A logdrop-417 -j DROP --A logdrop-418 -m limit --limit 12/minute -j ULOG +-A logdrop-418 -j TEE --gateway 10.0.0.1 +-A logdrop-418 -j TEE --gateway 10.0.0.2 -A logdrop-418 -j DROP --A logdrop-419 -m limit --limit 12/minute -j ULOG +-A logdrop-419 -j TEE --gateway 10.0.0.1 +-A logdrop-419 -j TEE --gateway 10.0.0.2 -A logdrop-419 -j DROP -A logdrop-42 -m limit --limit 1/second -j LOG -A logdrop-42 -j DROP --A logdrop-420 -m limit --limit 12/minute -j ULOG +-A logdrop-420 -j TEE --gateway 10.0.0.1 +-A logdrop-420 -j TEE --gateway 10.0.0.2 -A logdrop-420 -j DROP --A logdrop-421 -m limit --limit 12/minute -j ULOG +-A logdrop-421 -j TEE --gateway 10.0.0.1 +-A logdrop-421 -j TEE --gateway 10.0.0.2 -A logdrop-421 -j DROP --A logdrop-422 -m limit --limit 12/minute -j ULOG +-A logdrop-422 -j TEE --gateway 10.0.0.1 +-A logdrop-422 -j TEE --gateway 10.0.0.2 -A logdrop-422 -j DROP --A logdrop-423 -m limit --limit 12/minute -j ULOG +-A logdrop-423 -j TEE --gateway 10.0.0.1 +-A logdrop-423 -j TEE --gateway 10.0.0.2 -A logdrop-423 -j DROP --A logdrop-424 -m limit --limit 12/minute -j ULOG +-A logdrop-424 -j TEE --gateway 10.0.0.1 +-A logdrop-424 -j TEE --gateway 10.0.0.2 -A logdrop-424 -j DROP --A logdrop-425 -m limit --limit 12/minute -j ULOG +-A logdrop-425 -j TEE --gateway 10.0.0.1 +-A logdrop-425 -j TEE --gateway 10.0.0.2 -A logdrop-425 -j DROP --A logdrop-426 -m limit --limit 12/minute -j ULOG +-A logdrop-426 -j TEE --gateway 10.0.0.1 +-A logdrop-426 -j TEE --gateway 10.0.0.2 -A logdrop-426 -j DROP --A logdrop-427 -m limit --limit 12/minute -j ULOG +-A logdrop-427 -j TEE --gateway 10.0.0.1 +-A logdrop-427 -j TEE --gateway 10.0.0.2 -A logdrop-427 -j DROP --A logdrop-428 -m limit --limit 12/minute -j ULOG +-A logdrop-428 -j TEE --gateway 10.0.0.1 +-A logdrop-428 -j TEE --gateway 10.0.0.2 -A logdrop-428 -j DROP --A logdrop-429 -m limit --limit 12/minute -j ULOG +-A logdrop-429 -j TEE --gateway 10.0.0.1 +-A logdrop-429 -j TEE --gateway 10.0.0.2 -A logdrop-429 -j DROP -A logdrop-43 -m limit --limit 1/second -j LOG -A logdrop-43 -j DROP --A logdrop-430 -m limit --limit 12/minute -j ULOG +-A logdrop-430 -j TEE --gateway 10.0.0.1 +-A logdrop-430 -j TEE --gateway 10.0.0.2 -A logdrop-430 -j DROP --A logdrop-431 -m limit --limit 12/minute -j ULOG +-A logdrop-431 -j TEE --gateway 10.0.0.1 +-A logdrop-431 -j TEE --gateway 10.0.0.2 -A logdrop-431 -j DROP --A logdrop-432 -m limit --limit 12/minute -j ULOG +-A logdrop-432 -j TEE --gateway 10.0.0.1 +-A logdrop-432 -j TEE --gateway 10.0.0.2 -A logdrop-432 -j DROP --A logdrop-433 -m limit --limit 12/minute -j ULOG +-A logdrop-433 -j TEE --gateway 10.0.0.1 +-A logdrop-433 -j TEE --gateway 10.0.0.2 -A logdrop-433 -j DROP --A logdrop-434 -m limit --limit 12/minute -j ULOG +-A logdrop-434 -j TEE --gateway 10.0.0.1 +-A logdrop-434 -j TEE --gateway 10.0.0.2 -A logdrop-434 -j DROP --A logdrop-435 -m limit --limit 12/minute -j ULOG +-A logdrop-435 -j TEE --gateway 10.0.0.1 +-A logdrop-435 -j TEE --gateway 10.0.0.2 -A logdrop-435 -j DROP --A logdrop-436 -m limit --limit 12/minute -j ULOG +-A logdrop-436 -j TEE --gateway 10.0.0.1 +-A logdrop-436 -j TEE --gateway 10.0.0.2 -A logdrop-436 -j DROP --A logdrop-437 -m limit --limit 12/minute -j ULOG +-A logdrop-437 -j TEE --gateway 10.0.0.1 +-A logdrop-437 -j TEE --gateway 10.0.0.2 -A logdrop-437 -j DROP --A logdrop-438 -m limit --limit 12/minute -j ULOG +-A logdrop-438 -j TEE --gateway 10.0.0.1 +-A logdrop-438 -j TEE --gateway 10.0.0.2 -A logdrop-438 -j DROP --A logdrop-439 -m limit --limit 12/minute -j ULOG +-A logdrop-439 -j TEE --gateway 10.0.0.1 +-A logdrop-439 -j TEE --gateway 10.0.0.2 -A logdrop-439 -j DROP -A logdrop-44 -m limit --limit 1/second -j LOG -A logdrop-44 -j DROP --A logdrop-440 -m limit --limit 12/minute -j ULOG +-A logdrop-440 -j TEE --gateway 10.0.0.1 +-A logdrop-440 -j TEE --gateway 10.0.0.2 -A logdrop-440 -j DROP --A logdrop-441 -m limit --limit 12/minute -j ULOG +-A logdrop-441 -j TEE --gateway 10.0.0.1 +-A logdrop-441 -j TEE --gateway 10.0.0.2 -A logdrop-441 -j DROP --A logdrop-442 -m limit --limit 12/minute -j ULOG +-A logdrop-442 -j TEE --gateway 10.0.0.1 +-A logdrop-442 -j TEE --gateway 10.0.0.2 -A logdrop-442 -j DROP --A logdrop-443 -m limit --limit 12/minute -j ULOG +-A logdrop-443 -j TEE --gateway 10.0.0.1 +-A logdrop-443 -j TEE --gateway 10.0.0.2 -A logdrop-443 -j DROP --A logdrop-444 -m limit --limit 12/minute -j ULOG +-A logdrop-444 -j TEE --gateway 10.0.0.1 +-A logdrop-444 -j TEE --gateway 10.0.0.2 -A logdrop-444 -j DROP --A logdrop-445 -m limit --limit 12/minute -j ULOG +-A logdrop-445 -j TEE --gateway 10.0.0.1 +-A logdrop-445 -j TEE --gateway 10.0.0.2 -A logdrop-445 -j DROP --A logdrop-446 -m limit --limit 12/minute -j ULOG +-A logdrop-446 -j TEE --gateway 10.0.0.1 +-A logdrop-446 -j TEE --gateway 10.0.0.2 -A logdrop-446 -j DROP --A logdrop-447 -m limit --limit 12/minute -j ULOG +-A logdrop-447 -j TEE --gateway 10.0.0.1 +-A logdrop-447 -j TEE --gateway 10.0.0.2 -A logdrop-447 -j DROP --A logdrop-448 -m limit --limit 1/second -j LOG +-A logdrop-448 -j TEE --gateway 10.0.0.1 +-A logdrop-448 -j TEE --gateway 10.0.0.2 -A logdrop-448 -j DROP --A logdrop-449 -m limit --limit 1/second -j LOG +-A logdrop-449 -j TEE --gateway 10.0.0.1 +-A logdrop-449 -j TEE --gateway 10.0.0.2 -A logdrop-449 -j DROP -A logdrop-45 -m limit --limit 1/second -j LOG -A logdrop-45 -j DROP --A logdrop-450 -m limit --limit 1/second -j LOG +-A logdrop-450 -j TEE --gateway 10.0.0.1 +-A logdrop-450 -j TEE --gateway 10.0.0.2 -A logdrop-450 -j DROP --A logdrop-451 -m limit --limit 1/second -j LOG +-A logdrop-451 -j TEE --gateway 10.0.0.1 +-A logdrop-451 -j TEE --gateway 10.0.0.2 -A logdrop-451 -j DROP --A logdrop-452 -m limit --limit 1/second -j LOG +-A logdrop-452 -j TEE --gateway 10.0.0.1 +-A logdrop-452 -j TEE --gateway 10.0.0.2 -A logdrop-452 -j DROP --A logdrop-453 -m limit --limit 1/second -j LOG +-A logdrop-453 -j TEE --gateway 10.0.0.1 +-A logdrop-453 -j TEE --gateway 10.0.0.2 -A logdrop-453 -j DROP --A logdrop-454 -m limit --limit 1/second -j LOG +-A logdrop-454 -j TEE --gateway 10.0.0.1 +-A logdrop-454 -j TEE --gateway 10.0.0.2 -A logdrop-454 -j DROP --A logdrop-455 -m limit --limit 1/second -j LOG +-A logdrop-455 -j TEE --gateway 10.0.0.1 +-A logdrop-455 -j TEE --gateway 10.0.0.2 -A logdrop-455 -j DROP --A logdrop-456 -m limit --limit 1/second -j LOG +-A logdrop-456 -j TEE --gateway 10.0.0.1 +-A logdrop-456 -j TEE --gateway 10.0.0.2 -A logdrop-456 -j DROP --A logdrop-457 -m limit --limit 1/second -j LOG +-A logdrop-457 -j TEE --gateway 10.0.0.1 +-A logdrop-457 -j TEE --gateway 10.0.0.2 -A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG +-A logdrop-458 -j TEE --gateway 10.0.0.1 +-A logdrop-458 -j TEE --gateway 10.0.0.2 -A logdrop-458 -j DROP --A logdrop-459 -m limit --limit 1/second -j LOG +-A logdrop-459 -j TEE --gateway 10.0.0.1 +-A logdrop-459 -j TEE --gateway 10.0.0.2 -A logdrop-459 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP --A logdrop-460 -m limit --limit 1/second -j LOG +-A logdrop-460 -m limit --limit 12/minute -j ULOG -A logdrop-460 -j DROP --A logdrop-461 -m limit --limit 1/second -j LOG +-A logdrop-461 -m limit --limit 12/minute -j ULOG -A logdrop-461 -j DROP --A logdrop-462 -m limit --limit 1/second -j LOG +-A logdrop-462 -m limit --limit 12/minute -j ULOG -A logdrop-462 -j DROP --A logdrop-463 -m limit --limit 1/second -j LOG +-A logdrop-463 -m limit --limit 12/minute -j ULOG -A logdrop-463 -j DROP --A logdrop-464 -m limit --limit 1/second -j LOG +-A logdrop-464 -m limit --limit 12/minute -j ULOG -A logdrop-464 -j DROP --A logdrop-465 -m limit --limit 1/second -j LOG +-A logdrop-465 -m limit --limit 12/minute -j ULOG -A logdrop-465 -j DROP --A logdrop-466 -m limit --limit 1/second -j LOG +-A logdrop-466 -m limit --limit 12/minute -j ULOG -A logdrop-466 -j DROP --A logdrop-467 -m limit --limit 1/second -j LOG +-A logdrop-467 -m limit --limit 12/minute -j ULOG -A logdrop-467 -j DROP --A logdrop-468 -m limit --limit 1/second -j LOG +-A logdrop-468 -m limit --limit 12/minute -j ULOG -A logdrop-468 -j DROP --A logdrop-469 -m limit --limit 1/second -j LOG +-A logdrop-469 -m limit --limit 12/minute -j ULOG -A logdrop-469 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG -A logdrop-47 -j DROP --A logdrop-470 -m limit --limit 1/second -j LOG +-A logdrop-470 -m limit --limit 12/minute -j ULOG -A logdrop-470 -j DROP --A logdrop-471 -m limit --limit 1/second -j LOG +-A logdrop-471 -m limit --limit 12/minute -j ULOG -A logdrop-471 -j DROP --A logdrop-472 -m limit --limit 1/second -j LOG +-A logdrop-472 -m limit --limit 12/minute -j ULOG -A logdrop-472 -j DROP --A logdrop-473 -m limit --limit 1/second -j LOG +-A logdrop-473 -m limit --limit 12/minute -j ULOG -A logdrop-473 -j DROP --A logdrop-474 -m limit --limit 1/second -j LOG +-A logdrop-474 -m limit --limit 12/minute -j ULOG -A logdrop-474 -j DROP --A logdrop-475 -m limit --limit 1/second -j LOG +-A logdrop-475 -m limit --limit 12/minute -j ULOG -A logdrop-475 -j DROP --A logdrop-476 -m limit --limit 1/second -j LOG +-A logdrop-476 -m limit --limit 12/minute -j ULOG -A logdrop-476 -j DROP --A logdrop-477 -m limit --limit 1/second -j LOG +-A logdrop-477 -m limit --limit 12/minute -j ULOG -A logdrop-477 -j DROP --A logdrop-478 -m limit --limit 1/second -j LOG +-A logdrop-478 -m limit --limit 12/minute -j ULOG -A logdrop-478 -j DROP --A logdrop-479 -m limit --limit 1/second -j LOG +-A logdrop-479 -m limit --limit 12/minute -j ULOG -A logdrop-479 -j DROP -A logdrop-48 -m limit --limit 1/second -j LOG -A logdrop-48 -j DROP --A logdrop-480 -m limit --limit 1/second -j LOG +-A logdrop-480 -m limit --limit 12/minute -j ULOG -A logdrop-480 -j DROP --A logdrop-481 -m limit --limit 1/second -j LOG +-A logdrop-481 -m limit --limit 12/minute -j ULOG -A logdrop-481 -j DROP --A logdrop-482 -m limit --limit 1/second -j LOG +-A logdrop-482 -m limit --limit 12/minute -j ULOG -A logdrop-482 -j DROP --A logdrop-483 -m limit --limit 1/second -j LOG +-A logdrop-483 -m limit --limit 12/minute -j ULOG -A logdrop-483 -j DROP --A logdrop-484 -m limit --limit 1/second -j LOG +-A logdrop-484 -m limit --limit 12/minute -j ULOG -A logdrop-484 -j DROP --A logdrop-485 -m limit --limit 1/second -j LOG +-A logdrop-485 -m limit --limit 12/minute -j ULOG -A logdrop-485 -j DROP --A logdrop-486 -m limit --limit 1/second -j LOG +-A logdrop-486 -m limit --limit 12/minute -j ULOG -A logdrop-486 -j DROP --A logdrop-487 -m limit --limit 1/second -j LOG +-A logdrop-487 -m limit --limit 12/minute -j ULOG -A logdrop-487 -j DROP --A logdrop-488 -m limit --limit 1/second -j LOG +-A logdrop-488 -m limit --limit 12/minute -j ULOG -A logdrop-488 -j DROP --A logdrop-489 -m limit --limit 1/second -j LOG +-A logdrop-489 -m limit --limit 12/minute -j ULOG -A logdrop-489 -j DROP -A logdrop-49 -m limit --limit 1/second -j LOG -A logdrop-49 -j DROP --A logdrop-490 -m limit --limit 1/second -j LOG +-A logdrop-490 -m limit --limit 12/minute -j ULOG -A logdrop-490 -j DROP --A logdrop-491 -m limit --limit 1/second -j LOG +-A logdrop-491 -m limit --limit 12/minute -j ULOG -A logdrop-491 -j DROP --A logdrop-492 -m limit --limit 1/second -j LOG +-A logdrop-492 -m limit --limit 12/minute -j ULOG -A logdrop-492 -j DROP --A logdrop-493 -m limit --limit 1/second -j LOG +-A logdrop-493 -m limit --limit 12/minute -j ULOG -A logdrop-493 -j DROP --A logdrop-494 -m limit --limit 1/second -j LOG +-A logdrop-494 -m limit --limit 12/minute -j ULOG -A logdrop-494 -j DROP --A logdrop-495 -m limit --limit 1/second -j LOG +-A logdrop-495 -m limit --limit 12/minute -j ULOG -A logdrop-495 -j DROP --A logdrop-496 -m limit --limit 1/second -j LOG +-A logdrop-496 -m limit --limit 12/minute -j ULOG -A logdrop-496 -j DROP --A logdrop-497 -m limit --limit 1/second -j LOG +-A logdrop-497 -m limit --limit 12/minute -j ULOG -A logdrop-497 -j DROP --A logdrop-498 -m limit --limit 1/second -j LOG +-A logdrop-498 -m limit --limit 12/minute -j ULOG -A logdrop-498 -j DROP --A logdrop-499 -m limit --limit 1/second -j LOG +-A logdrop-499 -m limit --limit 12/minute -j ULOG -A logdrop-499 -j DROP -A logdrop-5 -m limit --limit 1/second -j LOG -A logdrop-5 -j DROP -A logdrop-50 -m limit --limit 1/second -j LOG -A logdrop-50 -j DROP --A logdrop-500 -m limit --limit 1/second -j LOG +-A logdrop-500 -m limit --limit 12/minute -j ULOG -A logdrop-500 -j DROP --A logdrop-501 -m limit --limit 1/second -j LOG +-A logdrop-501 -m limit --limit 12/minute -j ULOG -A logdrop-501 -j DROP --A logdrop-502 -m limit --limit 1/second -j LOG +-A logdrop-502 -m limit --limit 12/minute -j ULOG -A logdrop-502 -j DROP --A logdrop-503 -m limit --limit 1/second -j LOG +-A logdrop-503 -m limit --limit 12/minute -j ULOG -A logdrop-503 -j DROP --A logdrop-504 -m limit --limit 1/second -j LOG +-A logdrop-504 -m limit --limit 12/minute -j ULOG -A logdrop-504 -j DROP --A logdrop-505 -m limit --limit 1/second -j LOG +-A logdrop-505 -m limit --limit 12/minute -j ULOG -A logdrop-505 -j DROP --A logdrop-506 -m limit --limit 1/second -j LOG +-A logdrop-506 -m limit --limit 12/minute -j ULOG -A logdrop-506 -j DROP --A logdrop-507 -m limit --limit 1/second -j LOG +-A logdrop-507 -m limit --limit 12/minute -j ULOG -A logdrop-507 -j DROP --A logdrop-508 -m limit --limit 1/second -j LOG +-A logdrop-508 -m limit --limit 12/minute -j ULOG -A logdrop-508 -j DROP --A logdrop-509 -m limit --limit 1/second -j LOG +-A logdrop-509 -m limit --limit 12/minute -j ULOG -A logdrop-509 -j DROP -A logdrop-51 -m limit --limit 1/second -j LOG -A logdrop-51 -j DROP --A logdrop-510 -m limit --limit 1/second -j LOG +-A logdrop-510 -m limit --limit 12/minute -j ULOG -A logdrop-510 -j DROP --A logdrop-511 -m limit --limit 1/second -j LOG +-A logdrop-511 -m limit --limit 12/minute -j ULOG -A logdrop-511 -j DROP --A logdrop-512 -m limit --limit 1/second -j LOG +-A logdrop-512 -m limit --limit 12/minute -j ULOG -A logdrop-512 -j DROP --A logdrop-513 -m limit --limit 1/second -j LOG +-A logdrop-513 -m limit --limit 12/minute -j ULOG -A logdrop-513 -j DROP --A logdrop-514 -m limit --limit 1/second -j LOG +-A logdrop-514 -m limit --limit 12/minute -j ULOG -A logdrop-514 -j DROP --A logdrop-515 -m limit --limit 1/second -j LOG +-A logdrop-515 -m limit --limit 12/minute -j ULOG -A logdrop-515 -j DROP --A logdrop-516 -m limit --limit 1/second -j LOG +-A logdrop-516 -m limit --limit 12/minute -j ULOG -A logdrop-516 -j DROP --A logdrop-517 -m limit --limit 1/second -j LOG +-A logdrop-517 -m limit --limit 12/minute -j ULOG -A logdrop-517 -j DROP --A logdrop-518 -m limit --limit 1/second -j LOG +-A logdrop-518 -m limit --limit 12/minute -j ULOG -A logdrop-518 -j DROP --A logdrop-519 -m limit --limit 1/second -j LOG +-A logdrop-519 -m limit --limit 12/minute -j ULOG -A logdrop-519 -j DROP -A logdrop-52 -m limit --limit 1/second -j LOG -A logdrop-52 -j DROP @@ -16528,97 +29113,97 @@ -A logdrop-549 -j DROP -A logdrop-55 -m limit --limit 1/second -j LOG -A logdrop-55 -j DROP --A logdrop-550 -m limit --limit 12/minute -j ULOG +-A logdrop-550 -m limit --limit 1/second -j LOG -A logdrop-550 -j DROP --A logdrop-551 -m limit --limit 12/minute -j ULOG +-A logdrop-551 -m limit --limit 1/second -j LOG -A logdrop-551 -j DROP --A logdrop-552 -m limit --limit 12/minute -j ULOG +-A logdrop-552 -m limit --limit 1/second -j LOG -A logdrop-552 -j DROP --A logdrop-553 -m limit --limit 12/minute -j ULOG +-A logdrop-553 -m limit --limit 1/second -j LOG -A logdrop-553 -j DROP --A logdrop-554 -m limit --limit 12/minute -j ULOG +-A logdrop-554 -m limit --limit 1/second -j LOG -A logdrop-554 -j DROP --A logdrop-555 -m limit --limit 12/minute -j ULOG +-A logdrop-555 -m limit --limit 1/second -j LOG -A logdrop-555 -j DROP --A logdrop-556 -m limit --limit 12/minute -j ULOG +-A logdrop-556 -m limit --limit 1/second -j LOG -A logdrop-556 -j DROP --A logdrop-557 -m limit --limit 12/minute -j ULOG +-A logdrop-557 -m limit --limit 1/second -j LOG -A logdrop-557 -j DROP --A logdrop-558 -m limit --limit 12/minute -j ULOG +-A logdrop-558 -m limit --limit 1/second -j LOG -A logdrop-558 -j DROP --A logdrop-559 -m limit --limit 12/minute -j ULOG +-A logdrop-559 -m limit --limit 1/second -j LOG -A logdrop-559 -j DROP -A logdrop-56 -m limit --limit 1/second -j LOG -A logdrop-56 -j DROP --A logdrop-560 -m limit --limit 12/minute -j ULOG +-A logdrop-560 -m limit --limit 1/second -j LOG -A logdrop-560 -j DROP --A logdrop-561 -m limit --limit 12/minute -j ULOG +-A logdrop-561 -m limit --limit 1/second -j LOG -A logdrop-561 -j DROP --A logdrop-562 -m limit --limit 12/minute -j ULOG +-A logdrop-562 -m limit --limit 1/second -j LOG -A logdrop-562 -j DROP --A logdrop-563 -m limit --limit 12/minute -j ULOG +-A logdrop-563 -m limit --limit 1/second -j LOG -A logdrop-563 -j DROP --A logdrop-564 -m limit --limit 12/minute -j ULOG +-A logdrop-564 -m limit --limit 1/second -j LOG -A logdrop-564 -j DROP --A logdrop-565 -m limit --limit 12/minute -j ULOG +-A logdrop-565 -m limit --limit 1/second -j LOG -A logdrop-565 -j DROP --A logdrop-566 -m limit --limit 12/minute -j ULOG +-A logdrop-566 -m limit --limit 1/second -j LOG -A logdrop-566 -j DROP --A logdrop-567 -m limit --limit 12/minute -j ULOG +-A logdrop-567 -m limit --limit 1/second -j LOG -A logdrop-567 -j DROP --A logdrop-568 -m limit --limit 12/minute -j ULOG +-A logdrop-568 -m limit --limit 1/second -j LOG -A logdrop-568 -j DROP --A logdrop-569 -m limit --limit 12/minute -j ULOG +-A logdrop-569 -m limit --limit 1/second -j LOG -A logdrop-569 -j DROP -A logdrop-57 -m limit --limit 1/second -j LOG -A logdrop-57 -j DROP --A logdrop-570 -m limit --limit 12/minute -j ULOG +-A logdrop-570 -m limit --limit 1/second -j LOG -A logdrop-570 -j DROP --A logdrop-571 -m limit --limit 12/minute -j ULOG +-A logdrop-571 -m limit --limit 1/second -j LOG -A logdrop-571 -j DROP --A logdrop-572 -m limit --limit 12/minute -j ULOG +-A logdrop-572 -m limit --limit 1/second -j LOG -A logdrop-572 -j DROP --A logdrop-573 -m limit --limit 12/minute -j ULOG +-A logdrop-573 -m limit --limit 1/second -j LOG -A logdrop-573 -j DROP --A logdrop-574 -m limit --limit 12/minute -j ULOG +-A logdrop-574 -m limit --limit 1/second -j LOG -A logdrop-574 -j DROP --A logdrop-575 -m limit --limit 12/minute -j ULOG +-A logdrop-575 -m limit --limit 1/second -j LOG -A logdrop-575 -j DROP --A logdrop-576 -m limit --limit 12/minute -j ULOG +-A logdrop-576 -m limit --limit 1/second -j LOG -A logdrop-576 -j DROP --A logdrop-577 -m limit --limit 12/minute -j ULOG +-A logdrop-577 -m limit --limit 1/second -j LOG -A logdrop-577 -j DROP --A logdrop-578 -m limit --limit 12/minute -j ULOG +-A logdrop-578 -m limit --limit 1/second -j LOG -A logdrop-578 -j DROP --A logdrop-579 -m limit --limit 12/minute -j ULOG +-A logdrop-579 -m limit --limit 1/second -j LOG -A logdrop-579 -j DROP -A logdrop-58 -m limit --limit 1/second -j LOG -A logdrop-58 -j DROP --A logdrop-580 -m limit --limit 12/minute -j ULOG +-A logdrop-580 -m limit --limit 1/second -j LOG -A logdrop-580 -j DROP --A logdrop-581 -m limit --limit 12/minute -j ULOG +-A logdrop-581 -m limit --limit 1/second -j LOG -A logdrop-581 -j DROP --A logdrop-582 -m limit --limit 12/minute -j ULOG +-A logdrop-582 -m limit --limit 1/second -j LOG -A logdrop-582 -j DROP --A logdrop-583 -m limit --limit 12/minute -j ULOG +-A logdrop-583 -m limit --limit 1/second -j LOG -A logdrop-583 -j DROP --A logdrop-584 -m limit --limit 12/minute -j ULOG +-A logdrop-584 -m limit --limit 1/second -j LOG -A logdrop-584 -j DROP --A logdrop-585 -m limit --limit 12/minute -j ULOG +-A logdrop-585 -m limit --limit 1/second -j LOG -A logdrop-585 -j DROP --A logdrop-586 -m limit --limit 12/minute -j ULOG +-A logdrop-586 -m limit --limit 1/second -j LOG -A logdrop-586 -j DROP --A logdrop-587 -m limit --limit 12/minute -j ULOG +-A logdrop-587 -m limit --limit 1/second -j LOG -A logdrop-587 -j DROP --A logdrop-588 -m limit --limit 12/minute -j ULOG +-A logdrop-588 -m limit --limit 1/second -j LOG -A logdrop-588 -j DROP --A logdrop-589 -m limit --limit 12/minute -j ULOG +-A logdrop-589 -m limit --limit 1/second -j LOG -A logdrop-589 -j DROP -A logdrop-59 -m limit --limit 1/second -j LOG -A logdrop-59 -j DROP --A logdrop-590 -m limit --limit 12/minute -j ULOG +-A logdrop-590 -m limit --limit 1/second -j LOG -A logdrop-590 -j DROP --A logdrop-591 -m limit --limit 12/minute -j ULOG +-A logdrop-591 -m limit --limit 1/second -j LOG -A logdrop-591 -j DROP -A logdrop-592 -m limit --limit 1/second -j LOG -A logdrop-592 -j DROP @@ -16750,203 +29335,293 @@ -A logdrop-649 -j DROP -A logdrop-65 -m limit --limit 1/second -j LOG -A logdrop-65 -j DROP --A logdrop-650 -m limit --limit 1/second -j LOG +-A logdrop-650 -j TEE --gateway 10.0.0.1 +-A logdrop-650 -j TEE --gateway 10.0.0.2 -A logdrop-650 -j DROP --A logdrop-651 -m limit --limit 1/second -j LOG +-A logdrop-651 -j TEE --gateway 10.0.0.1 +-A logdrop-651 -j TEE --gateway 10.0.0.2 -A logdrop-651 -j DROP --A logdrop-652 -m limit --limit 1/second -j LOG +-A logdrop-652 -j TEE --gateway 10.0.0.1 +-A logdrop-652 -j TEE --gateway 10.0.0.2 -A logdrop-652 -j DROP --A logdrop-653 -m limit --limit 1/second -j LOG +-A logdrop-653 -j TEE --gateway 10.0.0.1 +-A logdrop-653 -j TEE --gateway 10.0.0.2 -A logdrop-653 -j DROP --A logdrop-654 -m limit --limit 1/second -j LOG +-A logdrop-654 -j TEE --gateway 10.0.0.1 +-A logdrop-654 -j TEE --gateway 10.0.0.2 -A logdrop-654 -j DROP --A logdrop-655 -m limit --limit 1/second -j LOG +-A logdrop-655 -j TEE --gateway 10.0.0.1 +-A logdrop-655 -j TEE --gateway 10.0.0.2 -A logdrop-655 -j DROP --A logdrop-656 -m limit --limit 1/second -j LOG +-A logdrop-656 -j TEE --gateway 10.0.0.1 +-A logdrop-656 -j TEE --gateway 10.0.0.2 -A logdrop-656 -j DROP --A logdrop-657 -m limit --limit 1/second -j LOG +-A logdrop-657 -j TEE --gateway 10.0.0.1 +-A logdrop-657 -j TEE --gateway 10.0.0.2 -A logdrop-657 -j DROP --A logdrop-658 -m limit --limit 1/second -j LOG +-A logdrop-658 -j TEE --gateway 10.0.0.1 +-A logdrop-658 -j TEE --gateway 10.0.0.2 -A logdrop-658 -j DROP --A logdrop-659 -m limit --limit 1/second -j LOG +-A logdrop-659 -j TEE --gateway 10.0.0.1 +-A logdrop-659 -j TEE --gateway 10.0.0.2 -A logdrop-659 -j DROP -A logdrop-66 -m limit --limit 1/second -j LOG -A logdrop-66 -j DROP --A logdrop-660 -m limit --limit 1/second -j LOG +-A logdrop-660 -j TEE --gateway 10.0.0.1 +-A logdrop-660 -j TEE --gateway 10.0.0.2 -A logdrop-660 -j DROP --A logdrop-661 -m limit --limit 1/second -j LOG +-A logdrop-661 -j TEE --gateway 10.0.0.1 +-A logdrop-661 -j TEE --gateway 10.0.0.2 -A logdrop-661 -j DROP --A logdrop-662 -m limit --limit 1/second -j LOG +-A logdrop-662 -j TEE --gateway 10.0.0.1 +-A logdrop-662 -j TEE --gateway 10.0.0.2 -A logdrop-662 -j DROP --A logdrop-663 -m limit --limit 1/second -j LOG +-A logdrop-663 -j TEE --gateway 10.0.0.1 +-A logdrop-663 -j TEE --gateway 10.0.0.2 -A logdrop-663 -j DROP --A logdrop-664 -m limit --limit 1/second -j LOG +-A logdrop-664 -j TEE --gateway 10.0.0.1 +-A logdrop-664 -j TEE --gateway 10.0.0.2 -A logdrop-664 -j DROP --A logdrop-665 -m limit --limit 1/second -j LOG +-A logdrop-665 -j TEE --gateway 10.0.0.1 +-A logdrop-665 -j TEE --gateway 10.0.0.2 -A logdrop-665 -j DROP --A logdrop-666 -m limit --limit 1/second -j LOG +-A logdrop-666 -j TEE --gateway 10.0.0.1 +-A logdrop-666 -j TEE --gateway 10.0.0.2 -A logdrop-666 -j DROP --A logdrop-667 -m limit --limit 1/second -j LOG +-A logdrop-667 -j TEE --gateway 10.0.0.1 +-A logdrop-667 -j TEE --gateway 10.0.0.2 -A logdrop-667 -j DROP --A logdrop-668 -m limit --limit 1/second -j LOG +-A logdrop-668 -j TEE --gateway 10.0.0.1 +-A logdrop-668 -j TEE --gateway 10.0.0.2 -A logdrop-668 -j DROP --A logdrop-669 -m limit --limit 1/second -j LOG +-A logdrop-669 -j TEE --gateway 10.0.0.1 +-A logdrop-669 -j TEE --gateway 10.0.0.2 -A logdrop-669 -j DROP -A logdrop-67 -m limit --limit 1/second -j LOG -A logdrop-67 -j DROP --A logdrop-670 -m limit --limit 1/second -j LOG +-A logdrop-670 -j TEE --gateway 10.0.0.1 +-A logdrop-670 -j TEE --gateway 10.0.0.2 -A logdrop-670 -j DROP --A logdrop-671 -m limit --limit 1/second -j LOG +-A logdrop-671 -j TEE --gateway 10.0.0.1 +-A logdrop-671 -j TEE --gateway 10.0.0.2 -A logdrop-671 -j DROP --A logdrop-672 -m limit --limit 12/minute -j ULOG +-A logdrop-672 -j TEE --gateway 10.0.0.1 +-A logdrop-672 -j TEE --gateway 10.0.0.2 -A logdrop-672 -j DROP --A logdrop-673 -m limit --limit 12/minute -j ULOG +-A logdrop-673 -j TEE --gateway 10.0.0.1 +-A logdrop-673 -j TEE --gateway 10.0.0.2 -A logdrop-673 -j DROP --A logdrop-674 -m limit --limit 12/minute -j ULOG +-A logdrop-674 -j TEE --gateway 10.0.0.1 +-A logdrop-674 -j TEE --gateway 10.0.0.2 -A logdrop-674 -j DROP --A logdrop-675 -m limit --limit 12/minute -j ULOG +-A logdrop-675 -j TEE --gateway 10.0.0.1 +-A logdrop-675 -j TEE --gateway 10.0.0.2 -A logdrop-675 -j DROP --A logdrop-676 -m limit --limit 12/minute -j ULOG +-A logdrop-676 -j TEE --gateway 10.0.0.1 +-A logdrop-676 -j TEE --gateway 10.0.0.2 -A logdrop-676 -j DROP --A logdrop-677 -m limit --limit 12/minute -j ULOG +-A logdrop-677 -j TEE --gateway 10.0.0.1 +-A logdrop-677 -j TEE --gateway 10.0.0.2 -A logdrop-677 -j DROP --A logdrop-678 -m limit --limit 12/minute -j ULOG +-A logdrop-678 -j TEE --gateway 10.0.0.1 +-A logdrop-678 -j TEE --gateway 10.0.0.2 -A logdrop-678 -j DROP --A logdrop-679 -m limit --limit 12/minute -j ULOG +-A logdrop-679 -j TEE --gateway 10.0.0.1 +-A logdrop-679 -j TEE --gateway 10.0.0.2 -A logdrop-679 -j DROP -A logdrop-68 -m limit --limit 1/second -j LOG -A logdrop-68 -j DROP --A logdrop-680 -m limit --limit 12/minute -j ULOG +-A logdrop-680 -j TEE --gateway 10.0.0.1 +-A logdrop-680 -j TEE --gateway 10.0.0.2 -A logdrop-680 -j DROP --A logdrop-681 -m limit --limit 12/minute -j ULOG +-A logdrop-681 -j TEE --gateway 10.0.0.1 +-A logdrop-681 -j TEE --gateway 10.0.0.2 -A logdrop-681 -j DROP --A logdrop-682 -m limit --limit 12/minute -j ULOG +-A logdrop-682 -j TEE --gateway 10.0.0.1 +-A logdrop-682 -j TEE --gateway 10.0.0.2 -A logdrop-682 -j DROP --A logdrop-683 -m limit --limit 12/minute -j ULOG +-A logdrop-683 -j TEE --gateway 10.0.0.1 +-A logdrop-683 -j TEE --gateway 10.0.0.2 -A logdrop-683 -j DROP --A logdrop-684 -m limit --limit 12/minute -j ULOG +-A logdrop-684 -j TEE --gateway 10.0.0.1 +-A logdrop-684 -j TEE --gateway 10.0.0.2 -A logdrop-684 -j DROP --A logdrop-685 -m limit --limit 12/minute -j ULOG +-A logdrop-685 -j TEE --gateway 10.0.0.1 +-A logdrop-685 -j TEE --gateway 10.0.0.2 -A logdrop-685 -j DROP --A logdrop-686 -m limit --limit 12/minute -j ULOG +-A logdrop-686 -j TEE --gateway 10.0.0.1 +-A logdrop-686 -j TEE --gateway 10.0.0.2 -A logdrop-686 -j DROP --A logdrop-687 -m limit --limit 12/minute -j ULOG +-A logdrop-687 -j TEE --gateway 10.0.0.1 +-A logdrop-687 -j TEE --gateway 10.0.0.2 -A logdrop-687 -j DROP --A logdrop-688 -m limit --limit 12/minute -j ULOG +-A logdrop-688 -j TEE --gateway 10.0.0.1 +-A logdrop-688 -j TEE --gateway 10.0.0.2 -A logdrop-688 -j DROP --A logdrop-689 -m limit --limit 12/minute -j ULOG +-A logdrop-689 -j TEE --gateway 10.0.0.1 +-A logdrop-689 -j TEE --gateway 10.0.0.2 -A logdrop-689 -j DROP -A logdrop-69 -m limit --limit 1/second -j LOG -A logdrop-69 -j DROP --A logdrop-690 -m limit --limit 12/minute -j ULOG +-A logdrop-690 -j TEE --gateway 10.0.0.1 +-A logdrop-690 -j TEE --gateway 10.0.0.2 -A logdrop-690 -j DROP --A logdrop-691 -m limit --limit 12/minute -j ULOG +-A logdrop-691 -j TEE --gateway 10.0.0.1 +-A logdrop-691 -j TEE --gateway 10.0.0.2 -A logdrop-691 -j DROP --A logdrop-692 -m limit --limit 12/minute -j ULOG +-A logdrop-692 -j TEE --gateway 10.0.0.1 +-A logdrop-692 -j TEE --gateway 10.0.0.2 -A logdrop-692 -j DROP --A logdrop-693 -m limit --limit 12/minute -j ULOG +-A logdrop-693 -j TEE --gateway 10.0.0.1 +-A logdrop-693 -j TEE --gateway 10.0.0.2 -A logdrop-693 -j DROP --A logdrop-694 -m limit --limit 12/minute -j ULOG +-A logdrop-694 -j TEE --gateway 10.0.0.1 +-A logdrop-694 -j TEE --gateway 10.0.0.2 -A logdrop-694 -j DROP --A logdrop-695 -m limit --limit 12/minute -j ULOG +-A logdrop-695 -j TEE --gateway 10.0.0.1 +-A logdrop-695 -j TEE --gateway 10.0.0.2 -A logdrop-695 -j DROP --A logdrop-696 -m limit --limit 12/minute -j ULOG +-A logdrop-696 -j TEE --gateway 10.0.0.1 +-A logdrop-696 -j TEE --gateway 10.0.0.2 -A logdrop-696 -j DROP --A logdrop-697 -m limit --limit 12/minute -j ULOG +-A logdrop-697 -j TEE --gateway 10.0.0.1 +-A logdrop-697 -j TEE --gateway 10.0.0.2 -A logdrop-697 -j DROP --A logdrop-698 -m limit --limit 12/minute -j ULOG +-A logdrop-698 -j TEE --gateway 10.0.0.1 +-A logdrop-698 -j TEE --gateway 10.0.0.2 -A logdrop-698 -j DROP --A logdrop-699 -m limit --limit 12/minute -j ULOG +-A logdrop-699 -j TEE --gateway 10.0.0.1 +-A logdrop-699 -j TEE --gateway 10.0.0.2 -A logdrop-699 -j DROP -A logdrop-7 -m limit --limit 1/second -j LOG -A logdrop-7 -j DROP -A logdrop-70 -m limit --limit 1/second -j LOG -A logdrop-70 -j DROP --A logdrop-700 -m limit --limit 12/minute -j ULOG +-A logdrop-700 -j TEE --gateway 10.0.0.1 +-A logdrop-700 -j TEE --gateway 10.0.0.2 -A logdrop-700 -j DROP --A logdrop-701 -m limit --limit 12/minute -j ULOG +-A logdrop-701 -j TEE --gateway 10.0.0.1 +-A logdrop-701 -j TEE --gateway 10.0.0.2 -A logdrop-701 -j DROP --A logdrop-702 -m limit --limit 12/minute -j ULOG +-A logdrop-702 -j TEE --gateway 10.0.0.1 +-A logdrop-702 -j TEE --gateway 10.0.0.2 -A logdrop-702 -j DROP --A logdrop-703 -m limit --limit 12/minute -j ULOG +-A logdrop-703 -j TEE --gateway 10.0.0.1 +-A logdrop-703 -j TEE --gateway 10.0.0.2 -A logdrop-703 -j DROP --A logdrop-704 -m limit --limit 12/minute -j ULOG +-A logdrop-704 -j TEE --gateway 10.0.0.1 +-A logdrop-704 -j TEE --gateway 10.0.0.2 -A logdrop-704 -j DROP --A logdrop-705 -m limit --limit 12/minute -j ULOG +-A logdrop-705 -j TEE --gateway 10.0.0.1 +-A logdrop-705 -j TEE --gateway 10.0.0.2 -A logdrop-705 -j DROP --A logdrop-706 -m limit --limit 12/minute -j ULOG +-A logdrop-706 -j TEE --gateway 10.0.0.1 +-A logdrop-706 -j TEE --gateway 10.0.0.2 -A logdrop-706 -j DROP --A logdrop-707 -m limit --limit 12/minute -j ULOG +-A logdrop-707 -j TEE --gateway 10.0.0.1 +-A logdrop-707 -j TEE --gateway 10.0.0.2 -A logdrop-707 -j DROP --A logdrop-708 -m limit --limit 12/minute -j ULOG +-A logdrop-708 -j TEE --gateway 10.0.0.1 +-A logdrop-708 -j TEE --gateway 10.0.0.2 -A logdrop-708 -j DROP --A logdrop-709 -m limit --limit 12/minute -j ULOG +-A logdrop-709 -j TEE --gateway 10.0.0.1 +-A logdrop-709 -j TEE --gateway 10.0.0.2 -A logdrop-709 -j DROP -A logdrop-71 -m limit --limit 1/second -j LOG -A logdrop-71 -j DROP --A logdrop-710 -m limit --limit 12/minute -j ULOG +-A logdrop-710 -j TEE --gateway 10.0.0.1 +-A logdrop-710 -j TEE --gateway 10.0.0.2 -A logdrop-710 -j DROP --A logdrop-711 -m limit --limit 12/minute -j ULOG +-A logdrop-711 -j TEE --gateway 10.0.0.1 +-A logdrop-711 -j TEE --gateway 10.0.0.2 -A logdrop-711 -j DROP --A logdrop-712 -m limit --limit 12/minute -j ULOG +-A logdrop-712 -j TEE --gateway 10.0.0.1 +-A logdrop-712 -j TEE --gateway 10.0.0.2 -A logdrop-712 -j DROP --A logdrop-713 -m limit --limit 12/minute -j ULOG +-A logdrop-713 -j TEE --gateway 10.0.0.1 +-A logdrop-713 -j TEE --gateway 10.0.0.2 -A logdrop-713 -j DROP --A logdrop-714 -m limit --limit 12/minute -j ULOG +-A logdrop-714 -j TEE --gateway 10.0.0.1 +-A logdrop-714 -j TEE --gateway 10.0.0.2 -A logdrop-714 -j DROP --A logdrop-715 -m limit --limit 12/minute -j ULOG +-A logdrop-715 -j TEE --gateway 10.0.0.1 +-A logdrop-715 -j TEE --gateway 10.0.0.2 -A logdrop-715 -j DROP --A logdrop-716 -m limit --limit 12/minute -j ULOG +-A logdrop-716 -j TEE --gateway 10.0.0.1 +-A logdrop-716 -j TEE --gateway 10.0.0.2 -A logdrop-716 -j DROP --A logdrop-717 -m limit --limit 12/minute -j ULOG +-A logdrop-717 -j TEE --gateway 10.0.0.1 +-A logdrop-717 -j TEE --gateway 10.0.0.2 -A logdrop-717 -j DROP --A logdrop-718 -m limit --limit 12/minute -j ULOG +-A logdrop-718 -j TEE --gateway 10.0.0.1 +-A logdrop-718 -j TEE --gateway 10.0.0.2 -A logdrop-718 -j DROP --A logdrop-719 -m limit --limit 12/minute -j ULOG +-A logdrop-719 -j TEE --gateway 10.0.0.1 +-A logdrop-719 -j TEE --gateway 10.0.0.2 -A logdrop-719 -j DROP -A logdrop-72 -m limit --limit 1/second -j LOG -A logdrop-72 -j DROP --A logdrop-720 -m limit --limit 12/minute -j ULOG +-A logdrop-720 -j TEE --gateway 10.0.0.1 +-A logdrop-720 -j TEE --gateway 10.0.0.2 -A logdrop-720 -j DROP --A logdrop-721 -m limit --limit 12/minute -j ULOG +-A logdrop-721 -j TEE --gateway 10.0.0.1 +-A logdrop-721 -j TEE --gateway 10.0.0.2 -A logdrop-721 -j DROP --A logdrop-722 -m limit --limit 12/minute -j ULOG +-A logdrop-722 -j TEE --gateway 10.0.0.1 +-A logdrop-722 -j TEE --gateway 10.0.0.2 -A logdrop-722 -j DROP --A logdrop-723 -m limit --limit 12/minute -j ULOG +-A logdrop-723 -j TEE --gateway 10.0.0.1 +-A logdrop-723 -j TEE --gateway 10.0.0.2 -A logdrop-723 -j DROP --A logdrop-724 -m limit --limit 12/minute -j ULOG +-A logdrop-724 -j TEE --gateway 10.0.0.1 +-A logdrop-724 -j TEE --gateway 10.0.0.2 -A logdrop-724 -j DROP --A logdrop-725 -m limit --limit 12/minute -j ULOG +-A logdrop-725 -j TEE --gateway 10.0.0.1 +-A logdrop-725 -j TEE --gateway 10.0.0.2 -A logdrop-725 -j DROP --A logdrop-726 -m limit --limit 12/minute -j ULOG +-A logdrop-726 -j TEE --gateway 10.0.0.1 +-A logdrop-726 -j TEE --gateway 10.0.0.2 -A logdrop-726 -j DROP --A logdrop-727 -m limit --limit 12/minute -j ULOG +-A logdrop-727 -j TEE --gateway 10.0.0.1 +-A logdrop-727 -j TEE --gateway 10.0.0.2 -A logdrop-727 -j DROP --A logdrop-728 -m limit --limit 12/minute -j ULOG +-A logdrop-728 -j TEE --gateway 10.0.0.1 +-A logdrop-728 -j TEE --gateway 10.0.0.2 -A logdrop-728 -j DROP --A logdrop-729 -m limit --limit 12/minute -j ULOG +-A logdrop-729 -j TEE --gateway 10.0.0.1 +-A logdrop-729 -j TEE --gateway 10.0.0.2 -A logdrop-729 -j DROP -A logdrop-73 -m limit --limit 1/second -j LOG -A logdrop-73 -j DROP --A logdrop-730 -m limit --limit 12/minute -j ULOG +-A logdrop-730 -j TEE --gateway 10.0.0.1 +-A logdrop-730 -j TEE --gateway 10.0.0.2 -A logdrop-730 -j DROP --A logdrop-731 -m limit --limit 12/minute -j ULOG +-A logdrop-731 -j TEE --gateway 10.0.0.1 +-A logdrop-731 -j TEE --gateway 10.0.0.2 -A logdrop-731 -j DROP --A logdrop-732 -m limit --limit 12/minute -j ULOG +-A logdrop-732 -j TEE --gateway 10.0.0.1 +-A logdrop-732 -j TEE --gateway 10.0.0.2 -A logdrop-732 -j DROP --A logdrop-733 -m limit --limit 12/minute -j ULOG +-A logdrop-733 -j TEE --gateway 10.0.0.1 +-A logdrop-733 -j TEE --gateway 10.0.0.2 -A logdrop-733 -j DROP --A logdrop-734 -m limit --limit 12/minute -j ULOG +-A logdrop-734 -j TEE --gateway 10.0.0.1 +-A logdrop-734 -j TEE --gateway 10.0.0.2 -A logdrop-734 -j DROP --A logdrop-735 -m limit --limit 12/minute -j ULOG +-A logdrop-735 -j TEE --gateway 10.0.0.1 +-A logdrop-735 -j TEE --gateway 10.0.0.2 -A logdrop-735 -j DROP --A logdrop-736 -m limit --limit 12/minute -j ULOG +-A logdrop-736 -j TEE --gateway 10.0.0.1 +-A logdrop-736 -j TEE --gateway 10.0.0.2 -A logdrop-736 -j DROP --A logdrop-737 -m limit --limit 12/minute -j ULOG +-A logdrop-737 -j TEE --gateway 10.0.0.1 +-A logdrop-737 -j TEE --gateway 10.0.0.2 -A logdrop-737 -j DROP --A logdrop-738 -m limit --limit 12/minute -j ULOG +-A logdrop-738 -j TEE --gateway 10.0.0.1 +-A logdrop-738 -j TEE --gateway 10.0.0.2 -A logdrop-738 -j DROP --A logdrop-739 -m limit --limit 12/minute -j ULOG +-A logdrop-739 -j TEE --gateway 10.0.0.1 +-A logdrop-739 -j TEE --gateway 10.0.0.2 -A logdrop-739 -j DROP -A logdrop-74 -m limit --limit 1/second -j LOG -A logdrop-74 -j DROP @@ -16958,165 +29633,165 @@ -A logdrop-742 -j DROP -A logdrop-743 -m limit --limit 12/minute -j ULOG -A logdrop-743 -j DROP --A logdrop-744 -m limit --limit 1/second -j LOG +-A logdrop-744 -m limit --limit 12/minute -j ULOG -A logdrop-744 -j DROP --A logdrop-745 -m limit --limit 1/second -j LOG +-A logdrop-745 -m limit --limit 12/minute -j ULOG -A logdrop-745 -j DROP --A logdrop-746 -m limit --limit 1/second -j LOG +-A logdrop-746 -m limit --limit 12/minute -j ULOG -A logdrop-746 -j DROP --A logdrop-747 -m limit --limit 1/second -j LOG +-A logdrop-747 -m limit --limit 12/minute -j ULOG -A logdrop-747 -j DROP --A logdrop-748 -m limit --limit 1/second -j LOG +-A logdrop-748 -m limit --limit 12/minute -j ULOG -A logdrop-748 -j DROP --A logdrop-749 -m limit --limit 1/second -j LOG +-A logdrop-749 -m limit --limit 12/minute -j ULOG -A logdrop-749 -j DROP -A logdrop-75 -m limit --limit 1/second -j LOG -A logdrop-75 -j DROP --A logdrop-750 -m limit --limit 1/second -j LOG +-A logdrop-750 -m limit --limit 12/minute -j ULOG -A logdrop-750 -j DROP --A logdrop-751 -m limit --limit 1/second -j LOG +-A logdrop-751 -m limit --limit 12/minute -j ULOG -A logdrop-751 -j DROP --A logdrop-752 -m limit --limit 1/second -j LOG +-A logdrop-752 -m limit --limit 12/minute -j ULOG -A logdrop-752 -j DROP --A logdrop-753 -m limit --limit 1/second -j LOG +-A logdrop-753 -m limit --limit 12/minute -j ULOG -A logdrop-753 -j DROP --A logdrop-754 -m limit --limit 1/second -j LOG +-A logdrop-754 -m limit --limit 12/minute -j ULOG -A logdrop-754 -j DROP --A logdrop-755 -m limit --limit 1/second -j LOG +-A logdrop-755 -m limit --limit 12/minute -j ULOG -A logdrop-755 -j DROP --A logdrop-756 -m limit --limit 1/second -j LOG +-A logdrop-756 -m limit --limit 12/minute -j ULOG -A logdrop-756 -j DROP --A logdrop-757 -m limit --limit 1/second -j LOG +-A logdrop-757 -m limit --limit 12/minute -j ULOG -A logdrop-757 -j DROP --A logdrop-758 -m limit --limit 1/second -j LOG +-A logdrop-758 -m limit --limit 12/minute -j ULOG -A logdrop-758 -j DROP --A logdrop-759 -m limit --limit 1/second -j LOG +-A logdrop-759 -m limit --limit 12/minute -j ULOG -A logdrop-759 -j DROP -A logdrop-76 -m limit --limit 1/second -j LOG -A logdrop-76 -j DROP --A logdrop-760 -m limit --limit 1/second -j LOG +-A logdrop-760 -m limit --limit 12/minute -j ULOG -A logdrop-760 -j DROP --A logdrop-761 -m limit --limit 1/second -j LOG +-A logdrop-761 -m limit --limit 12/minute -j ULOG -A logdrop-761 -j DROP --A logdrop-762 -m limit --limit 1/second -j LOG +-A logdrop-762 -m limit --limit 12/minute -j ULOG -A logdrop-762 -j DROP --A logdrop-763 -m limit --limit 1/second -j LOG +-A logdrop-763 -m limit --limit 12/minute -j ULOG -A logdrop-763 -j DROP --A logdrop-764 -m limit --limit 1/second -j LOG +-A logdrop-764 -m limit --limit 12/minute -j ULOG -A logdrop-764 -j DROP --A logdrop-765 -m limit --limit 1/second -j LOG +-A logdrop-765 -m limit --limit 12/minute -j ULOG -A logdrop-765 -j DROP --A logdrop-766 -m limit --limit 1/second -j LOG +-A logdrop-766 -m limit --limit 12/minute -j ULOG -A logdrop-766 -j DROP --A logdrop-767 -m limit --limit 1/second -j LOG +-A logdrop-767 -m limit --limit 12/minute -j ULOG -A logdrop-767 -j DROP --A logdrop-768 -m limit --limit 1/second -j LOG +-A logdrop-768 -m limit --limit 12/minute -j ULOG -A logdrop-768 -j DROP --A logdrop-769 -m limit --limit 1/second -j LOG +-A logdrop-769 -m limit --limit 12/minute -j ULOG -A logdrop-769 -j DROP -A logdrop-77 -m limit --limit 1/second -j LOG -A logdrop-77 -j DROP --A logdrop-770 -m limit --limit 1/second -j LOG +-A logdrop-770 -m limit --limit 12/minute -j ULOG -A logdrop-770 -j DROP --A logdrop-771 -m limit --limit 1/second -j LOG +-A logdrop-771 -m limit --limit 12/minute -j ULOG -A logdrop-771 -j DROP --A logdrop-772 -m limit --limit 1/second -j LOG +-A logdrop-772 -m limit --limit 12/minute -j ULOG -A logdrop-772 -j DROP --A logdrop-773 -m limit --limit 1/second -j LOG +-A logdrop-773 -m limit --limit 12/minute -j ULOG -A logdrop-773 -j DROP --A logdrop-774 -m limit --limit 1/second -j LOG +-A logdrop-774 -m limit --limit 12/minute -j ULOG -A logdrop-774 -j DROP --A logdrop-775 -m limit --limit 1/second -j LOG +-A logdrop-775 -m limit --limit 12/minute -j ULOG -A logdrop-775 -j DROP --A logdrop-776 -m limit --limit 1/second -j LOG +-A logdrop-776 -m limit --limit 12/minute -j ULOG -A logdrop-776 -j DROP --A logdrop-777 -m limit --limit 1/second -j LOG +-A logdrop-777 -m limit --limit 12/minute -j ULOG -A logdrop-777 -j DROP --A logdrop-778 -m limit --limit 1/second -j LOG +-A logdrop-778 -m limit --limit 12/minute -j ULOG -A logdrop-778 -j DROP --A logdrop-779 -m limit --limit 1/second -j LOG +-A logdrop-779 -m limit --limit 12/minute -j ULOG -A logdrop-779 -j DROP -A logdrop-78 -m limit --limit 1/second -j LOG -A logdrop-78 -j DROP --A logdrop-780 -m limit --limit 1/second -j LOG +-A logdrop-780 -m limit --limit 12/minute -j ULOG -A logdrop-780 -j DROP --A logdrop-781 -m limit --limit 1/second -j LOG +-A logdrop-781 -m limit --limit 12/minute -j ULOG -A logdrop-781 -j DROP --A logdrop-782 -m limit --limit 1/second -j LOG +-A logdrop-782 -m limit --limit 12/minute -j ULOG -A logdrop-782 -j DROP --A logdrop-783 -m limit --limit 1/second -j LOG +-A logdrop-783 -m limit --limit 12/minute -j ULOG -A logdrop-783 -j DROP --A logdrop-784 -m limit --limit 1/second -j LOG +-A logdrop-784 -m limit --limit 12/minute -j ULOG -A logdrop-784 -j DROP --A logdrop-785 -m limit --limit 1/second -j LOG +-A logdrop-785 -m limit --limit 12/minute -j ULOG -A logdrop-785 -j DROP --A logdrop-786 -m limit --limit 1/second -j LOG +-A logdrop-786 -m limit --limit 12/minute -j ULOG -A logdrop-786 -j DROP --A logdrop-787 -m limit --limit 1/second -j LOG +-A logdrop-787 -m limit --limit 12/minute -j ULOG -A logdrop-787 -j DROP --A logdrop-788 -m limit --limit 1/second -j LOG +-A logdrop-788 -m limit --limit 12/minute -j ULOG -A logdrop-788 -j DROP --A logdrop-789 -m limit --limit 1/second -j LOG +-A logdrop-789 -m limit --limit 12/minute -j ULOG -A logdrop-789 -j DROP -A logdrop-79 -m limit --limit 1/second -j LOG -A logdrop-79 -j DROP --A logdrop-790 -m limit --limit 1/second -j LOG +-A logdrop-790 -m limit --limit 12/minute -j ULOG -A logdrop-790 -j DROP --A logdrop-791 -m limit --limit 1/second -j LOG +-A logdrop-791 -m limit --limit 12/minute -j ULOG -A logdrop-791 -j DROP --A logdrop-792 -m limit --limit 1/second -j LOG +-A logdrop-792 -m limit --limit 12/minute -j ULOG -A logdrop-792 -j DROP --A logdrop-793 -m limit --limit 1/second -j LOG +-A logdrop-793 -m limit --limit 12/minute -j ULOG -A logdrop-793 -j DROP --A logdrop-794 -m limit --limit 1/second -j LOG +-A logdrop-794 -m limit --limit 12/minute -j ULOG -A logdrop-794 -j DROP --A logdrop-795 -m limit --limit 1/second -j LOG +-A logdrop-795 -m limit --limit 12/minute -j ULOG -A logdrop-795 -j DROP --A logdrop-796 -m limit --limit 1/second -j LOG +-A logdrop-796 -m limit --limit 12/minute -j ULOG -A logdrop-796 -j DROP --A logdrop-797 -m limit --limit 1/second -j LOG +-A logdrop-797 -m limit --limit 12/minute -j ULOG -A logdrop-797 -j DROP --A logdrop-798 -m limit --limit 1/second -j LOG +-A logdrop-798 -m limit --limit 12/minute -j ULOG -A logdrop-798 -j DROP --A logdrop-799 -m limit --limit 1/second -j LOG +-A logdrop-799 -m limit --limit 12/minute -j ULOG -A logdrop-799 -j DROP -A logdrop-8 -m limit --limit 1/second -j LOG -A logdrop-8 -j DROP --A logdrop-80 -m limit --limit 12/minute -j ULOG +-A logdrop-80 -m limit --limit 1/second -j LOG -A logdrop-80 -j DROP --A logdrop-800 -m limit --limit 1/second -j LOG +-A logdrop-800 -m limit --limit 12/minute -j ULOG -A logdrop-800 -j DROP --A logdrop-801 -m limit --limit 1/second -j LOG +-A logdrop-801 -m limit --limit 12/minute -j ULOG -A logdrop-801 -j DROP --A logdrop-802 -m limit --limit 1/second -j LOG +-A logdrop-802 -m limit --limit 12/minute -j ULOG -A logdrop-802 -j DROP --A logdrop-803 -m limit --limit 1/second -j LOG +-A logdrop-803 -m limit --limit 12/minute -j ULOG -A logdrop-803 -j DROP --A logdrop-804 -m limit --limit 1/second -j LOG +-A logdrop-804 -m limit --limit 12/minute -j ULOG -A logdrop-804 -j DROP --A logdrop-805 -m limit --limit 1/second -j LOG +-A logdrop-805 -m limit --limit 12/minute -j ULOG -A logdrop-805 -j DROP --A logdrop-806 -m limit --limit 1/second -j LOG +-A logdrop-806 -m limit --limit 12/minute -j ULOG -A logdrop-806 -j DROP --A logdrop-807 -m limit --limit 1/second -j LOG +-A logdrop-807 -m limit --limit 12/minute -j ULOG -A logdrop-807 -j DROP --A logdrop-808 -m limit --limit 1/second -j LOG +-A logdrop-808 -m limit --limit 12/minute -j ULOG -A logdrop-808 -j DROP --A logdrop-809 -m limit --limit 1/second -j LOG +-A logdrop-809 -m limit --limit 12/minute -j ULOG -A logdrop-809 -j DROP --A logdrop-81 -m limit --limit 12/minute -j ULOG +-A logdrop-81 -m limit --limit 1/second -j LOG -A logdrop-81 -j DROP --A logdrop-810 -m limit --limit 1/second -j LOG +-A logdrop-810 -m limit --limit 12/minute -j ULOG -A logdrop-810 -j DROP --A logdrop-811 -m limit --limit 1/second -j LOG +-A logdrop-811 -m limit --limit 12/minute -j ULOG -A logdrop-811 -j DROP --A logdrop-812 -m limit --limit 1/second -j LOG +-A logdrop-812 -m limit --limit 12/minute -j ULOG -A logdrop-812 -j DROP --A logdrop-813 -m limit --limit 1/second -j LOG +-A logdrop-813 -m limit --limit 12/minute -j ULOG -A logdrop-813 -j DROP --A logdrop-814 -m limit --limit 1/second -j LOG +-A logdrop-814 -m limit --limit 12/minute -j ULOG -A logdrop-814 -j DROP --A logdrop-815 -m limit --limit 1/second -j LOG +-A logdrop-815 -m limit --limit 12/minute -j ULOG -A logdrop-815 -j DROP -A logdrop-816 -m limit --limit 12/minute -j ULOG -A logdrop-816 -j DROP @@ -17126,7 +29801,7 @@ -A logdrop-818 -j DROP -A logdrop-819 -m limit --limit 12/minute -j ULOG -A logdrop-819 -j DROP --A logdrop-82 -m limit --limit 12/minute -j ULOG +-A logdrop-82 -m limit --limit 1/second -j LOG -A logdrop-82 -j DROP -A logdrop-820 -m limit --limit 12/minute -j ULOG -A logdrop-820 -j DROP @@ -17148,139 +29823,139 @@ -A logdrop-828 -j DROP -A logdrop-829 -m limit --limit 12/minute -j ULOG -A logdrop-829 -j DROP --A logdrop-83 -m limit --limit 12/minute -j ULOG +-A logdrop-83 -m limit --limit 1/second -j LOG -A logdrop-83 -j DROP --A logdrop-830 -m limit --limit 12/minute -j ULOG +-A logdrop-830 -m limit --limit 1/second -j LOG -A logdrop-830 -j DROP --A logdrop-831 -m limit --limit 12/minute -j ULOG +-A logdrop-831 -m limit --limit 1/second -j LOG -A logdrop-831 -j DROP --A logdrop-832 -m limit --limit 12/minute -j ULOG +-A logdrop-832 -m limit --limit 1/second -j LOG -A logdrop-832 -j DROP --A logdrop-833 -m limit --limit 12/minute -j ULOG +-A logdrop-833 -m limit --limit 1/second -j LOG -A logdrop-833 -j DROP --A logdrop-834 -m limit --limit 12/minute -j ULOG +-A logdrop-834 -m limit --limit 1/second -j LOG -A logdrop-834 -j DROP --A logdrop-835 -m limit --limit 12/minute -j ULOG +-A logdrop-835 -m limit --limit 1/second -j LOG -A logdrop-835 -j DROP --A logdrop-836 -m limit --limit 12/minute -j ULOG +-A logdrop-836 -m limit --limit 1/second -j LOG -A logdrop-836 -j DROP --A logdrop-837 -m limit --limit 12/minute -j ULOG +-A logdrop-837 -m limit --limit 1/second -j LOG -A logdrop-837 -j DROP --A logdrop-838 -m limit --limit 12/minute -j ULOG +-A logdrop-838 -m limit --limit 1/second -j LOG -A logdrop-838 -j DROP --A logdrop-839 -m limit --limit 12/minute -j ULOG +-A logdrop-839 -m limit --limit 1/second -j LOG -A logdrop-839 -j DROP --A logdrop-84 -m limit --limit 12/minute -j ULOG +-A logdrop-84 -m limit --limit 1/second -j LOG -A logdrop-84 -j DROP --A logdrop-840 -m limit --limit 12/minute -j ULOG +-A logdrop-840 -m limit --limit 1/second -j LOG -A logdrop-840 -j DROP --A logdrop-841 -m limit --limit 12/minute -j ULOG +-A logdrop-841 -m limit --limit 1/second -j LOG -A logdrop-841 -j DROP --A logdrop-842 -m limit --limit 12/minute -j ULOG +-A logdrop-842 -m limit --limit 1/second -j LOG -A logdrop-842 -j DROP --A logdrop-843 -m limit --limit 12/minute -j ULOG +-A logdrop-843 -m limit --limit 1/second -j LOG -A logdrop-843 -j DROP --A logdrop-844 -m limit --limit 12/minute -j ULOG +-A logdrop-844 -m limit --limit 1/second -j LOG -A logdrop-844 -j DROP --A logdrop-845 -m limit --limit 12/minute -j ULOG +-A logdrop-845 -m limit --limit 1/second -j LOG -A logdrop-845 -j DROP --A logdrop-846 -m limit --limit 12/minute -j ULOG +-A logdrop-846 -m limit --limit 1/second -j LOG -A logdrop-846 -j DROP --A logdrop-847 -m limit --limit 12/minute -j ULOG +-A logdrop-847 -m limit --limit 1/second -j LOG -A logdrop-847 -j DROP --A logdrop-848 -m limit --limit 12/minute -j ULOG +-A logdrop-848 -m limit --limit 1/second -j LOG -A logdrop-848 -j DROP --A logdrop-849 -m limit --limit 12/minute -j ULOG +-A logdrop-849 -m limit --limit 1/second -j LOG -A logdrop-849 -j DROP --A logdrop-85 -m limit --limit 12/minute -j ULOG +-A logdrop-85 -m limit --limit 1/second -j LOG -A logdrop-85 -j DROP --A logdrop-850 -m limit --limit 12/minute -j ULOG +-A logdrop-850 -m limit --limit 1/second -j LOG -A logdrop-850 -j DROP --A logdrop-851 -m limit --limit 12/minute -j ULOG +-A logdrop-851 -m limit --limit 1/second -j LOG -A logdrop-851 -j DROP --A logdrop-852 -m limit --limit 12/minute -j ULOG +-A logdrop-852 -m limit --limit 1/second -j LOG -A logdrop-852 -j DROP --A logdrop-853 -m limit --limit 12/minute -j ULOG +-A logdrop-853 -m limit --limit 1/second -j LOG -A logdrop-853 -j DROP --A logdrop-854 -m limit --limit 12/minute -j ULOG +-A logdrop-854 -m limit --limit 1/second -j LOG -A logdrop-854 -j DROP --A logdrop-855 -m limit --limit 12/minute -j ULOG +-A logdrop-855 -m limit --limit 1/second -j LOG -A logdrop-855 -j DROP --A logdrop-856 -m limit --limit 12/minute -j ULOG +-A logdrop-856 -m limit --limit 1/second -j LOG -A logdrop-856 -j DROP --A logdrop-857 -m limit --limit 12/minute -j ULOG +-A logdrop-857 -m limit --limit 1/second -j LOG -A logdrop-857 -j DROP --A logdrop-858 -m limit --limit 12/minute -j ULOG +-A logdrop-858 -m limit --limit 1/second -j LOG -A logdrop-858 -j DROP --A logdrop-859 -m limit --limit 12/minute -j ULOG +-A logdrop-859 -m limit --limit 1/second -j LOG -A logdrop-859 -j DROP --A logdrop-86 -m limit --limit 12/minute -j ULOG +-A logdrop-86 -m limit --limit 1/second -j LOG -A logdrop-86 -j DROP --A logdrop-860 -m limit --limit 12/minute -j ULOG +-A logdrop-860 -m limit --limit 1/second -j LOG -A logdrop-860 -j DROP --A logdrop-861 -m limit --limit 12/minute -j ULOG +-A logdrop-861 -m limit --limit 1/second -j LOG -A logdrop-861 -j DROP --A logdrop-862 -m limit --limit 12/minute -j ULOG +-A logdrop-862 -m limit --limit 1/second -j LOG -A logdrop-862 -j DROP --A logdrop-863 -m limit --limit 12/minute -j ULOG +-A logdrop-863 -m limit --limit 1/second -j LOG -A logdrop-863 -j DROP --A logdrop-864 -m limit --limit 12/minute -j ULOG +-A logdrop-864 -m limit --limit 1/second -j LOG -A logdrop-864 -j DROP --A logdrop-865 -m limit --limit 12/minute -j ULOG +-A logdrop-865 -m limit --limit 1/second -j LOG -A logdrop-865 -j DROP --A logdrop-866 -m limit --limit 12/minute -j ULOG +-A logdrop-866 -m limit --limit 1/second -j LOG -A logdrop-866 -j DROP --A logdrop-867 -m limit --limit 12/minute -j ULOG +-A logdrop-867 -m limit --limit 1/second -j LOG -A logdrop-867 -j DROP --A logdrop-868 -m limit --limit 12/minute -j ULOG +-A logdrop-868 -m limit --limit 1/second -j LOG -A logdrop-868 -j DROP --A logdrop-869 -m limit --limit 12/minute -j ULOG +-A logdrop-869 -m limit --limit 1/second -j LOG -A logdrop-869 -j DROP --A logdrop-87 -m limit --limit 12/minute -j ULOG +-A logdrop-87 -m limit --limit 1/second -j LOG -A logdrop-87 -j DROP --A logdrop-870 -m limit --limit 12/minute -j ULOG +-A logdrop-870 -m limit --limit 1/second -j LOG -A logdrop-870 -j DROP --A logdrop-871 -m limit --limit 12/minute -j ULOG +-A logdrop-871 -m limit --limit 1/second -j LOG -A logdrop-871 -j DROP --A logdrop-872 -m limit --limit 12/minute -j ULOG +-A logdrop-872 -m limit --limit 1/second -j LOG -A logdrop-872 -j DROP --A logdrop-873 -m limit --limit 12/minute -j ULOG +-A logdrop-873 -m limit --limit 1/second -j LOG -A logdrop-873 -j DROP --A logdrop-874 -m limit --limit 12/minute -j ULOG +-A logdrop-874 -m limit --limit 1/second -j LOG -A logdrop-874 -j DROP --A logdrop-875 -m limit --limit 12/minute -j ULOG +-A logdrop-875 -m limit --limit 1/second -j LOG -A logdrop-875 -j DROP --A logdrop-876 -m limit --limit 12/minute -j ULOG +-A logdrop-876 -m limit --limit 1/second -j LOG -A logdrop-876 -j DROP --A logdrop-877 -m limit --limit 12/minute -j ULOG +-A logdrop-877 -m limit --limit 1/second -j LOG -A logdrop-877 -j DROP --A logdrop-878 -m limit --limit 12/minute -j ULOG +-A logdrop-878 -m limit --limit 1/second -j LOG -A logdrop-878 -j DROP --A logdrop-879 -m limit --limit 12/minute -j ULOG +-A logdrop-879 -m limit --limit 1/second -j LOG -A logdrop-879 -j DROP --A logdrop-88 -m limit --limit 12/minute -j ULOG +-A logdrop-88 -m limit --limit 1/second -j LOG -A logdrop-88 -j DROP --A logdrop-880 -m limit --limit 12/minute -j ULOG +-A logdrop-880 -m limit --limit 1/second -j LOG -A logdrop-880 -j DROP --A logdrop-881 -m limit --limit 12/minute -j ULOG +-A logdrop-881 -m limit --limit 1/second -j LOG -A logdrop-881 -j DROP --A logdrop-882 -m limit --limit 12/minute -j ULOG +-A logdrop-882 -m limit --limit 1/second -j LOG -A logdrop-882 -j DROP --A logdrop-883 -m limit --limit 12/minute -j ULOG +-A logdrop-883 -m limit --limit 1/second -j LOG -A logdrop-883 -j DROP --A logdrop-884 -m limit --limit 12/minute -j ULOG +-A logdrop-884 -m limit --limit 1/second -j LOG -A logdrop-884 -j DROP --A logdrop-885 -m limit --limit 12/minute -j ULOG +-A logdrop-885 -m limit --limit 1/second -j LOG -A logdrop-885 -j DROP --A logdrop-886 -m limit --limit 12/minute -j ULOG +-A logdrop-886 -m limit --limit 1/second -j LOG -A logdrop-886 -j DROP --A logdrop-887 -m limit --limit 12/minute -j ULOG +-A logdrop-887 -m limit --limit 1/second -j LOG -A logdrop-887 -j DROP -A logdrop-888 -m limit --limit 1/second -j LOG -A logdrop-888 -j DROP -A logdrop-889 -m limit --limit 1/second -j LOG -A logdrop-889 -j DROP --A logdrop-89 -m limit --limit 12/minute -j ULOG +-A logdrop-89 -m limit --limit 1/second -j LOG -A logdrop-89 -j DROP -A logdrop-890 -m limit --limit 1/second -j LOG -A logdrop-890 -j DROP @@ -17304,7 +29979,7 @@ -A logdrop-899 -j DROP -A logdrop-9 -m limit --limit 1/second -j LOG -A logdrop-9 -j DROP --A logdrop-90 -m limit --limit 12/minute -j ULOG +-A logdrop-90 -m limit --limit 1/second -j LOG -A logdrop-90 -j DROP -A logdrop-900 -m limit --limit 1/second -j LOG -A logdrop-900 -j DROP @@ -17326,7 +30001,7 @@ -A logdrop-908 -j DROP -A logdrop-909 -m limit --limit 1/second -j LOG -A logdrop-909 -j DROP --A logdrop-91 -m limit --limit 12/minute -j ULOG +-A logdrop-91 -m limit --limit 1/second -j LOG -A logdrop-91 -j DROP -A logdrop-910 -m limit --limit 1/second -j LOG -A logdrop-910 -j DROP @@ -17348,184 +30023,267 @@ -A logdrop-918 -j DROP -A logdrop-919 -m limit --limit 1/second -j LOG -A logdrop-919 -j DROP --A logdrop-92 -m limit --limit 12/minute -j ULOG +-A logdrop-92 -m limit --limit 1/second -j LOG -A logdrop-92 -j DROP --A logdrop-920 -m limit --limit 1/second -j LOG +-A logdrop-920 -j TEE --gateway 10.0.0.1 +-A logdrop-920 -j TEE --gateway 10.0.0.2 -A logdrop-920 -j DROP --A logdrop-921 -m limit --limit 1/second -j LOG +-A logdrop-921 -j TEE --gateway 10.0.0.1 +-A logdrop-921 -j TEE --gateway 10.0.0.2 -A logdrop-921 -j DROP --A logdrop-922 -m limit --limit 1/second -j LOG +-A logdrop-922 -j TEE --gateway 10.0.0.1 +-A logdrop-922 -j TEE --gateway 10.0.0.2 -A logdrop-922 -j DROP --A logdrop-923 -m limit --limit 1/second -j LOG +-A logdrop-923 -j TEE --gateway 10.0.0.1 +-A logdrop-923 -j TEE --gateway 10.0.0.2 -A logdrop-923 -j DROP --A logdrop-924 -m limit --limit 1/second -j LOG +-A logdrop-924 -j TEE --gateway 10.0.0.1 +-A logdrop-924 -j TEE --gateway 10.0.0.2 -A logdrop-924 -j DROP --A logdrop-925 -m limit --limit 1/second -j LOG +-A logdrop-925 -j TEE --gateway 10.0.0.1 +-A logdrop-925 -j TEE --gateway 10.0.0.2 -A logdrop-925 -j DROP --A logdrop-926 -m limit --limit 1/second -j LOG +-A logdrop-926 -j TEE --gateway 10.0.0.1 +-A logdrop-926 -j TEE --gateway 10.0.0.2 -A logdrop-926 -j DROP --A logdrop-927 -m limit --limit 1/second -j LOG +-A logdrop-927 -j TEE --gateway 10.0.0.1 +-A logdrop-927 -j TEE --gateway 10.0.0.2 -A logdrop-927 -j DROP --A logdrop-928 -m limit --limit 1/second -j LOG +-A logdrop-928 -j TEE --gateway 10.0.0.1 +-A logdrop-928 -j TEE --gateway 10.0.0.2 -A logdrop-928 -j DROP --A logdrop-929 -m limit --limit 1/second -j LOG +-A logdrop-929 -j TEE --gateway 10.0.0.1 +-A logdrop-929 -j TEE --gateway 10.0.0.2 -A logdrop-929 -j DROP --A logdrop-93 -m limit --limit 12/minute -j ULOG +-A logdrop-93 -m limit --limit 1/second -j LOG -A logdrop-93 -j DROP --A logdrop-930 -m limit --limit 1/second -j LOG +-A logdrop-930 -j TEE --gateway 10.0.0.1 +-A logdrop-930 -j TEE --gateway 10.0.0.2 -A logdrop-930 -j DROP --A logdrop-931 -m limit --limit 1/second -j LOG +-A logdrop-931 -j TEE --gateway 10.0.0.1 +-A logdrop-931 -j TEE --gateway 10.0.0.2 -A logdrop-931 -j DROP --A logdrop-932 -m limit --limit 1/second -j LOG +-A logdrop-932 -j TEE --gateway 10.0.0.1 +-A logdrop-932 -j TEE --gateway 10.0.0.2 -A logdrop-932 -j DROP --A logdrop-933 -m limit --limit 1/second -j LOG +-A logdrop-933 -j TEE --gateway 10.0.0.1 +-A logdrop-933 -j TEE --gateway 10.0.0.2 -A logdrop-933 -j DROP --A logdrop-934 -m limit --limit 1/second -j LOG +-A logdrop-934 -j TEE --gateway 10.0.0.1 +-A logdrop-934 -j TEE --gateway 10.0.0.2 -A logdrop-934 -j DROP --A logdrop-935 -m limit --limit 1/second -j LOG +-A logdrop-935 -j TEE --gateway 10.0.0.1 +-A logdrop-935 -j TEE --gateway 10.0.0.2 -A logdrop-935 -j DROP --A logdrop-936 -m limit --limit 1/second -j LOG +-A logdrop-936 -j TEE --gateway 10.0.0.1 +-A logdrop-936 -j TEE --gateway 10.0.0.2 -A logdrop-936 -j DROP --A logdrop-937 -m limit --limit 1/second -j LOG +-A logdrop-937 -j TEE --gateway 10.0.0.1 +-A logdrop-937 -j TEE --gateway 10.0.0.2 -A logdrop-937 -j DROP --A logdrop-938 -m limit --limit 1/second -j LOG +-A logdrop-938 -j TEE --gateway 10.0.0.1 +-A logdrop-938 -j TEE --gateway 10.0.0.2 -A logdrop-938 -j DROP --A logdrop-939 -m limit --limit 1/second -j LOG +-A logdrop-939 -j TEE --gateway 10.0.0.1 +-A logdrop-939 -j TEE --gateway 10.0.0.2 -A logdrop-939 -j DROP --A logdrop-94 -m limit --limit 12/minute -j ULOG +-A logdrop-94 -m limit --limit 1/second -j LOG -A logdrop-94 -j DROP --A logdrop-940 -m limit --limit 1/second -j LOG +-A logdrop-940 -j TEE --gateway 10.0.0.1 +-A logdrop-940 -j TEE --gateway 10.0.0.2 -A logdrop-940 -j DROP --A logdrop-941 -m limit --limit 1/second -j LOG +-A logdrop-941 -j TEE --gateway 10.0.0.1 +-A logdrop-941 -j TEE --gateway 10.0.0.2 -A logdrop-941 -j DROP --A logdrop-942 -m limit --limit 1/second -j LOG +-A logdrop-942 -j TEE --gateway 10.0.0.1 +-A logdrop-942 -j TEE --gateway 10.0.0.2 -A logdrop-942 -j DROP --A logdrop-943 -m limit --limit 1/second -j LOG +-A logdrop-943 -j TEE --gateway 10.0.0.1 +-A logdrop-943 -j TEE --gateway 10.0.0.2 -A logdrop-943 -j DROP --A logdrop-944 -m limit --limit 1/second -j LOG +-A logdrop-944 -j TEE --gateway 10.0.0.1 +-A logdrop-944 -j TEE --gateway 10.0.0.2 -A logdrop-944 -j DROP --A logdrop-945 -m limit --limit 1/second -j LOG +-A logdrop-945 -j TEE --gateway 10.0.0.1 +-A logdrop-945 -j TEE --gateway 10.0.0.2 -A logdrop-945 -j DROP --A logdrop-946 -m limit --limit 1/second -j LOG +-A logdrop-946 -j TEE --gateway 10.0.0.1 +-A logdrop-946 -j TEE --gateway 10.0.0.2 -A logdrop-946 -j DROP --A logdrop-947 -m limit --limit 1/second -j LOG +-A logdrop-947 -j TEE --gateway 10.0.0.1 +-A logdrop-947 -j TEE --gateway 10.0.0.2 -A logdrop-947 -j DROP --A logdrop-948 -m limit --limit 1/second -j LOG +-A logdrop-948 -j TEE --gateway 10.0.0.1 +-A logdrop-948 -j TEE --gateway 10.0.0.2 -A logdrop-948 -j DROP --A logdrop-949 -m limit --limit 1/second -j LOG +-A logdrop-949 -j TEE --gateway 10.0.0.1 +-A logdrop-949 -j TEE --gateway 10.0.0.2 -A logdrop-949 -j DROP --A logdrop-95 -m limit --limit 12/minute -j ULOG +-A logdrop-95 -m limit --limit 1/second -j LOG -A logdrop-95 -j DROP --A logdrop-950 -m limit --limit 1/second -j LOG +-A logdrop-950 -j TEE --gateway 10.0.0.1 +-A logdrop-950 -j TEE --gateway 10.0.0.2 -A logdrop-950 -j DROP --A logdrop-951 -m limit --limit 1/second -j LOG +-A logdrop-951 -j TEE --gateway 10.0.0.1 +-A logdrop-951 -j TEE --gateway 10.0.0.2 -A logdrop-951 -j DROP --A logdrop-952 -m limit --limit 1/second -j LOG +-A logdrop-952 -j TEE --gateway 10.0.0.1 +-A logdrop-952 -j TEE --gateway 10.0.0.2 -A logdrop-952 -j DROP --A logdrop-953 -m limit --limit 1/second -j LOG +-A logdrop-953 -j TEE --gateway 10.0.0.1 +-A logdrop-953 -j TEE --gateway 10.0.0.2 -A logdrop-953 -j DROP --A logdrop-954 -m limit --limit 1/second -j LOG +-A logdrop-954 -j TEE --gateway 10.0.0.1 +-A logdrop-954 -j TEE --gateway 10.0.0.2 -A logdrop-954 -j DROP --A logdrop-955 -m limit --limit 1/second -j LOG +-A logdrop-955 -j TEE --gateway 10.0.0.1 +-A logdrop-955 -j TEE --gateway 10.0.0.2 -A logdrop-955 -j DROP --A logdrop-956 -m limit --limit 1/second -j LOG +-A logdrop-956 -j TEE --gateway 10.0.0.1 +-A logdrop-956 -j TEE --gateway 10.0.0.2 -A logdrop-956 -j DROP --A logdrop-957 -m limit --limit 1/second -j LOG +-A logdrop-957 -j TEE --gateway 10.0.0.1 +-A logdrop-957 -j TEE --gateway 10.0.0.2 -A logdrop-957 -j DROP --A logdrop-958 -m limit --limit 1/second -j LOG +-A logdrop-958 -j TEE --gateway 10.0.0.1 +-A logdrop-958 -j TEE --gateway 10.0.0.2 -A logdrop-958 -j DROP --A logdrop-959 -m limit --limit 1/second -j LOG +-A logdrop-959 -j TEE --gateway 10.0.0.1 +-A logdrop-959 -j TEE --gateway 10.0.0.2 -A logdrop-959 -j DROP --A logdrop-96 -m limit --limit 12/minute -j ULOG +-A logdrop-96 -m limit --limit 1/second -j LOG -A logdrop-96 -j DROP --A logdrop-960 -m limit --limit 1/second -j LOG +-A logdrop-960 -j TEE --gateway 10.0.0.1 +-A logdrop-960 -j TEE --gateway 10.0.0.2 -A logdrop-960 -j DROP --A logdrop-961 -m limit --limit 1/second -j LOG +-A logdrop-961 -j TEE --gateway 10.0.0.1 +-A logdrop-961 -j TEE --gateway 10.0.0.2 -A logdrop-961 -j DROP --A logdrop-962 -m limit --limit 1/second -j LOG +-A logdrop-962 -j TEE --gateway 10.0.0.1 +-A logdrop-962 -j TEE --gateway 10.0.0.2 -A logdrop-962 -j DROP --A logdrop-963 -m limit --limit 1/second -j LOG +-A logdrop-963 -j TEE --gateway 10.0.0.1 +-A logdrop-963 -j TEE --gateway 10.0.0.2 -A logdrop-963 -j DROP --A logdrop-964 -m limit --limit 1/second -j LOG +-A logdrop-964 -j TEE --gateway 10.0.0.1 +-A logdrop-964 -j TEE --gateway 10.0.0.2 -A logdrop-964 -j DROP --A logdrop-965 -m limit --limit 1/second -j LOG +-A logdrop-965 -j TEE --gateway 10.0.0.1 +-A logdrop-965 -j TEE --gateway 10.0.0.2 -A logdrop-965 -j DROP --A logdrop-966 -m limit --limit 1/second -j LOG +-A logdrop-966 -j TEE --gateway 10.0.0.1 +-A logdrop-966 -j TEE --gateway 10.0.0.2 -A logdrop-966 -j DROP --A logdrop-967 -m limit --limit 1/second -j LOG +-A logdrop-967 -j TEE --gateway 10.0.0.1 +-A logdrop-967 -j TEE --gateway 10.0.0.2 -A logdrop-967 -j DROP --A logdrop-968 -m limit --limit 12/minute -j ULOG +-A logdrop-968 -j TEE --gateway 10.0.0.1 +-A logdrop-968 -j TEE --gateway 10.0.0.2 -A logdrop-968 -j DROP --A logdrop-969 -m limit --limit 12/minute -j ULOG +-A logdrop-969 -j TEE --gateway 10.0.0.1 +-A logdrop-969 -j TEE --gateway 10.0.0.2 -A logdrop-969 -j DROP --A logdrop-97 -m limit --limit 12/minute -j ULOG +-A logdrop-97 -m limit --limit 1/second -j LOG -A logdrop-97 -j DROP --A logdrop-970 -m limit --limit 12/minute -j ULOG +-A logdrop-970 -j TEE --gateway 10.0.0.1 +-A logdrop-970 -j TEE --gateway 10.0.0.2 -A logdrop-970 -j DROP --A logdrop-971 -m limit --limit 12/minute -j ULOG +-A logdrop-971 -j TEE --gateway 10.0.0.1 +-A logdrop-971 -j TEE --gateway 10.0.0.2 -A logdrop-971 -j DROP --A logdrop-972 -m limit --limit 12/minute -j ULOG +-A logdrop-972 -j TEE --gateway 10.0.0.1 +-A logdrop-972 -j TEE --gateway 10.0.0.2 -A logdrop-972 -j DROP --A logdrop-973 -m limit --limit 12/minute -j ULOG +-A logdrop-973 -j TEE --gateway 10.0.0.1 +-A logdrop-973 -j TEE --gateway 10.0.0.2 -A logdrop-973 -j DROP --A logdrop-974 -m limit --limit 12/minute -j ULOG +-A logdrop-974 -j TEE --gateway 10.0.0.1 +-A logdrop-974 -j TEE --gateway 10.0.0.2 -A logdrop-974 -j DROP --A logdrop-975 -m limit --limit 12/minute -j ULOG +-A logdrop-975 -j TEE --gateway 10.0.0.1 +-A logdrop-975 -j TEE --gateway 10.0.0.2 -A logdrop-975 -j DROP --A logdrop-976 -m limit --limit 12/minute -j ULOG +-A logdrop-976 -j TEE --gateway 10.0.0.1 +-A logdrop-976 -j TEE --gateway 10.0.0.2 -A logdrop-976 -j DROP --A logdrop-977 -m limit --limit 12/minute -j ULOG +-A logdrop-977 -j TEE --gateway 10.0.0.1 +-A logdrop-977 -j TEE --gateway 10.0.0.2 -A logdrop-977 -j DROP --A logdrop-978 -m limit --limit 12/minute -j ULOG +-A logdrop-978 -j TEE --gateway 10.0.0.1 +-A logdrop-978 -j TEE --gateway 10.0.0.2 -A logdrop-978 -j DROP --A logdrop-979 -m limit --limit 12/minute -j ULOG +-A logdrop-979 -j TEE --gateway 10.0.0.1 +-A logdrop-979 -j TEE --gateway 10.0.0.2 -A logdrop-979 -j DROP --A logdrop-98 -m limit --limit 12/minute -j ULOG +-A logdrop-98 -m limit --limit 1/second -j LOG -A logdrop-98 -j DROP --A logdrop-980 -m limit --limit 12/minute -j ULOG +-A logdrop-980 -j TEE --gateway 10.0.0.1 +-A logdrop-980 -j TEE --gateway 10.0.0.2 -A logdrop-980 -j DROP --A logdrop-981 -m limit --limit 12/minute -j ULOG +-A logdrop-981 -j TEE --gateway 10.0.0.1 +-A logdrop-981 -j TEE --gateway 10.0.0.2 -A logdrop-981 -j DROP --A logdrop-982 -m limit --limit 12/minute -j ULOG +-A logdrop-982 -j TEE --gateway 10.0.0.1 +-A logdrop-982 -j TEE --gateway 10.0.0.2 -A logdrop-982 -j DROP --A logdrop-983 -m limit --limit 12/minute -j ULOG +-A logdrop-983 -j TEE --gateway 10.0.0.1 +-A logdrop-983 -j TEE --gateway 10.0.0.2 -A logdrop-983 -j DROP --A logdrop-984 -m limit --limit 12/minute -j ULOG +-A logdrop-984 -j TEE --gateway 10.0.0.1 +-A logdrop-984 -j TEE --gateway 10.0.0.2 -A logdrop-984 -j DROP --A logdrop-985 -m limit --limit 12/minute -j ULOG +-A logdrop-985 -j TEE --gateway 10.0.0.1 +-A logdrop-985 -j TEE --gateway 10.0.0.2 -A logdrop-985 -j DROP --A logdrop-986 -m limit --limit 12/minute -j ULOG +-A logdrop-986 -j TEE --gateway 10.0.0.1 +-A logdrop-986 -j TEE --gateway 10.0.0.2 -A logdrop-986 -j DROP --A logdrop-987 -m limit --limit 12/minute -j ULOG +-A logdrop-987 -j TEE --gateway 10.0.0.1 +-A logdrop-987 -j TEE --gateway 10.0.0.2 -A logdrop-987 -j DROP --A logdrop-988 -m limit --limit 12/minute -j ULOG +-A logdrop-988 -j TEE --gateway 10.0.0.1 +-A logdrop-988 -j TEE --gateway 10.0.0.2 -A logdrop-988 -j DROP --A logdrop-989 -m limit --limit 12/minute -j ULOG +-A logdrop-989 -j TEE --gateway 10.0.0.1 +-A logdrop-989 -j TEE --gateway 10.0.0.2 -A logdrop-989 -j DROP --A logdrop-99 -m limit --limit 12/minute -j ULOG +-A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP --A logdrop-990 -m limit --limit 12/minute -j ULOG +-A logdrop-990 -j TEE --gateway 10.0.0.1 +-A logdrop-990 -j TEE --gateway 10.0.0.2 -A logdrop-990 -j DROP --A logdrop-991 -m limit --limit 12/minute -j ULOG +-A logdrop-991 -j TEE --gateway 10.0.0.1 +-A logdrop-991 -j TEE --gateway 10.0.0.2 -A logdrop-991 -j DROP --A logdrop-992 -m limit --limit 12/minute -j ULOG +-A logdrop-992 -j TEE --gateway 10.0.0.1 +-A logdrop-992 -j TEE --gateway 10.0.0.2 -A logdrop-992 -j DROP --A logdrop-993 -m limit --limit 12/minute -j ULOG +-A logdrop-993 -j TEE --gateway 10.0.0.1 +-A logdrop-993 -j TEE --gateway 10.0.0.2 -A logdrop-993 -j DROP --A logdrop-994 -m limit --limit 12/minute -j ULOG +-A logdrop-994 -j TEE --gateway 10.0.0.1 +-A logdrop-994 -j TEE --gateway 10.0.0.2 -A logdrop-994 -j DROP --A logdrop-995 -m limit --limit 12/minute -j ULOG +-A logdrop-995 -j TEE --gateway 10.0.0.1 +-A logdrop-995 -j TEE --gateway 10.0.0.2 -A logdrop-995 -j DROP --A logdrop-996 -m limit --limit 12/minute -j ULOG +-A logdrop-996 -j TEE --gateway 10.0.0.1 +-A logdrop-996 -j TEE --gateway 10.0.0.2 -A logdrop-996 -j DROP --A logdrop-997 -m limit --limit 12/minute -j ULOG +-A logdrop-997 -j TEE --gateway 10.0.0.1 +-A logdrop-997 -j TEE --gateway 10.0.0.2 -A logdrop-997 -j DROP --A logdrop-998 -m limit --limit 12/minute -j ULOG +-A logdrop-998 -j TEE --gateway 10.0.0.1 +-A logdrop-998 -j TEE --gateway 10.0.0.2 -A logdrop-998 -j DROP --A logdrop-999 -m limit --limit 12/minute -j ULOG +-A logdrop-999 -j TEE --gateway 10.0.0.1 +-A logdrop-999 -j TEE --gateway 10.0.0.2 -A logdrop-999 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 12/minute -j ULOG +-A logpass-1 -j LOG +-A logpass-2 -j TEE --gateway 10.0.0.1 +-A logpass-2 -j TEE --gateway 10.0.0.2 +-A logpass-3 -m limit --limit 12/minute -j ULOG COMMIT *mangle :FORWARD ACCEPT [0:0] @@ -17885,6 +30643,188 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -18515,6 +31455,353 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack diff --git a/test/output/filter-limit/rules6-save b/test/output/filter-limit/rules6-save index f8161b3..2eef3cb 100644 --- a/test/output/filter-limit/rules6-save +++ b/test/output/filter-limit/rules6-save @@ -15,17 +15,17 @@ :limit-1004 - [0:0] :limit-1005 - [0:0] :limit-1006 - [0:0] -:limit-1007 - [0:0] :limit-1008 - [0:0] :limit-1009 - [0:0] :limit-101 - [0:0] :limit-1010 - [0:0] :limit-1011 - [0:0] :limit-1012 - [0:0] -:limit-1013 - [0:0] +:limit-1014 - [0:0] :limit-1015 - [0:0] :limit-1016 - [0:0] :limit-1017 - [0:0] +:limit-1018 - [0:0] :limit-1019 - [0:0] :limit-102 - [0:0] :limit-1020 - [0:0] @@ -35,13 +35,13 @@ :limit-1024 - [0:0] :limit-1025 - [0:0] :limit-1026 - [0:0] -:limit-1027 - [0:0] :limit-1028 - [0:0] :limit-1029 - [0:0] :limit-103 - [0:0] +:limit-1030 - [0:0] :limit-1031 - [0:0] :limit-1032 - [0:0] -:limit-1033 - [0:0] +:limit-1034 - [0:0] :limit-1035 - [0:0] :limit-1036 - [0:0] :limit-1037 - [0:0] @@ -54,13 +54,13 @@ :limit-1043 - [0:0] :limit-1044 - [0:0] :limit-1045 - [0:0] -:limit-1047 - [0:0] +:limit-1046 - [0:0] :limit-1048 - [0:0] :limit-1049 - [0:0] :limit-105 - [0:0] +:limit-1050 - [0:0] :limit-1051 - [0:0] :limit-1052 - [0:0] -:limit-1053 - [0:0] :limit-1054 - [0:0] :limit-1055 - [0:0] :limit-1056 - [0:0] @@ -70,17 +70,17 @@ :limit-106 - [0:0] :limit-1060 - [0:0] :limit-1061 - [0:0] +:limit-1062 - [0:0] :limit-1063 - [0:0] :limit-1064 - [0:0] :limit-1065 - [0:0] -:limit-1067 - [0:0] +:limit-1066 - [0:0] :limit-1068 - [0:0] :limit-1069 - [0:0] :limit-107 - [0:0] :limit-1070 - [0:0] :limit-1071 - [0:0] :limit-1072 - [0:0] -:limit-1073 - [0:0] :limit-1074 - [0:0] :limit-1075 - [0:0] :limit-1076 - [0:0] @@ -94,26 +94,28 @@ :limit-1083 - [0:0] :limit-1084 - [0:0] :limit-1085 - [0:0] +:limit-1086 - [0:0] :limit-1087 - [0:0] :limit-1088 - [0:0] :limit-1089 - [0:0] :limit-109 - [0:0] +:limit-1090 - [0:0] :limit-1091 - [0:0] :limit-1092 - [0:0] :limit-1093 - [0:0] :limit-1094 - [0:0] :limit-1095 - [0:0] :limit-1096 - [0:0] -:limit-1097 - [0:0] :limit-1098 - [0:0] :limit-1099 - [0:0] :limit-11 - [0:0] :limit-110 - [0:0] :limit-1100 - [0:0] :limit-1101 - [0:0] -:limit-1103 - [0:0] +:limit-1102 - [0:0] :limit-1104 - [0:0] :limit-1105 - [0:0] +:limit-1106 - [0:0] :limit-1107 - [0:0] :limit-1108 - [0:0] :limit-1109 - [0:0] @@ -125,12 +127,12 @@ :limit-1114 - [0:0] :limit-1115 - [0:0] :limit-1116 - [0:0] -:limit-1117 - [0:0] +:limit-1118 - [0:0] :limit-1119 - [0:0] :limit-112 - [0:0] :limit-1120 - [0:0] :limit-1121 - [0:0] -:limit-1123 - [0:0] +:limit-1122 - [0:0] :limit-1124 - [0:0] :limit-1125 - [0:0] :limit-1126 - [0:0] @@ -142,15 +144,15 @@ :limit-1131 - [0:0] :limit-1132 - [0:0] :limit-1133 - [0:0] +:limit-1134 - [0:0] :limit-1135 - [0:0] :limit-1136 - [0:0] -:limit-1137 - [0:0] +:limit-1138 - [0:0] :limit-1139 - [0:0] :limit-114 - [0:0] :limit-1140 - [0:0] :limit-1141 - [0:0] :limit-1142 - [0:0] -:limit-1143 - [0:0] :limit-1144 - [0:0] :limit-1145 - [0:0] :limit-1146 - [0:0] @@ -165,12 +167,12 @@ :limit-1154 - [0:0] :limit-1155 - [0:0] :limit-1156 - [0:0] -:limit-1157 - [0:0] +:limit-1158 - [0:0] :limit-1159 - [0:0] :limit-116 - [0:0] :limit-1160 - [0:0] :limit-1161 - [0:0] -:limit-1163 - [0:0] +:limit-1162 - [0:0] :limit-1164 - [0:0] :limit-1165 - [0:0] :limit-1166 - [0:0] @@ -182,9 +184,11 @@ :limit-1171 - [0:0] :limit-1172 - [0:0] :limit-1173 - [0:0] +:limit-1174 - [0:0] :limit-1175 - [0:0] :limit-1176 - [0:0] :limit-1177 - [0:0] +:limit-1178 - [0:0] :limit-1179 - [0:0] :limit-118 - [0:0] :limit-1180 - [0:0] @@ -194,13 +198,13 @@ :limit-1184 - [0:0] :limit-1185 - [0:0] :limit-1186 - [0:0] -:limit-1187 - [0:0] :limit-1188 - [0:0] :limit-1189 - [0:0] :limit-119 - [0:0] +:limit-1190 - [0:0] :limit-1191 - [0:0] :limit-1192 - [0:0] -:limit-1193 - [0:0] +:limit-1194 - [0:0] :limit-1195 - [0:0] :limit-1196 - [0:0] :limit-1197 - [0:0] @@ -214,13 +218,13 @@ :limit-1203 - [0:0] :limit-1204 - [0:0] :limit-1205 - [0:0] -:limit-1207 - [0:0] +:limit-1206 - [0:0] :limit-1208 - [0:0] :limit-1209 - [0:0] :limit-121 - [0:0] +:limit-1210 - [0:0] :limit-1211 - [0:0] :limit-1212 - [0:0] -:limit-1213 - [0:0] :limit-1214 - [0:0] :limit-1215 - [0:0] :limit-1216 - [0:0] @@ -235,14 +239,12 @@ :limit-1224 - [0:0] :limit-1225 - [0:0] :limit-1226 - [0:0] -:limit-1227 - [0:0] :limit-1228 - [0:0] :limit-1229 - [0:0] :limit-123 - [0:0] :limit-1230 - [0:0] :limit-1231 - [0:0] :limit-1232 - [0:0] -:limit-1233 - [0:0] :limit-1234 - [0:0] :limit-1235 - [0:0] :limit-1236 - [0:0] @@ -257,14 +259,12 @@ :limit-1244 - [0:0] :limit-1245 - [0:0] :limit-1246 - [0:0] -:limit-1247 - [0:0] :limit-1248 - [0:0] :limit-1249 - [0:0] :limit-125 - [0:0] :limit-1250 - [0:0] :limit-1251 - [0:0] :limit-1252 - [0:0] -:limit-1253 - [0:0] :limit-1254 - [0:0] :limit-1255 - [0:0] :limit-1256 - [0:0] @@ -290,14 +290,12 @@ :limit-1274 - [0:0] :limit-1275 - [0:0] :limit-1276 - [0:0] -:limit-1277 - [0:0] :limit-1278 - [0:0] :limit-1279 - [0:0] :limit-128 - [0:0] :limit-1280 - [0:0] :limit-1281 - [0:0] :limit-1282 - [0:0] -:limit-1283 - [0:0] :limit-1284 - [0:0] :limit-1285 - [0:0] :limit-1286 - [0:0] @@ -312,7 +310,6 @@ :limit-1294 - [0:0] :limit-1295 - [0:0] :limit-1296 - [0:0] -:limit-1297 - [0:0] :limit-1298 - [0:0] :limit-1299 - [0:0] :limit-13 - [0:0] @@ -320,7 +317,6 @@ :limit-1300 - [0:0] :limit-1301 - [0:0] :limit-1302 - [0:0] -:limit-1303 - [0:0] :limit-1304 - [0:0] :limit-1305 - [0:0] :limit-1306 - [0:0] @@ -335,14 +331,12 @@ :limit-1314 - [0:0] :limit-1315 - [0:0] :limit-1316 - [0:0] -:limit-1317 - [0:0] :limit-1318 - [0:0] :limit-1319 - [0:0] :limit-132 - [0:0] :limit-1320 - [0:0] :limit-1321 - [0:0] :limit-1322 - [0:0] -:limit-1323 - [0:0] :limit-1324 - [0:0] :limit-1325 - [0:0] :limit-1326 - [0:0] @@ -357,14 +351,12 @@ :limit-1334 - [0:0] :limit-1335 - [0:0] :limit-1336 - [0:0] -:limit-1337 - [0:0] :limit-1338 - [0:0] :limit-1339 - [0:0] :limit-134 - [0:0] :limit-1340 - [0:0] :limit-1341 - [0:0] :limit-1342 - [0:0] -:limit-1343 - [0:0] :limit-1344 - [0:0] :limit-1345 - [0:0] :limit-1346 - [0:0] @@ -390,14 +382,12 @@ :limit-1364 - [0:0] :limit-1365 - [0:0] :limit-1366 - [0:0] -:limit-1367 - [0:0] :limit-1368 - [0:0] :limit-1369 - [0:0] :limit-137 - [0:0] :limit-1370 - [0:0] :limit-1371 - [0:0] :limit-1372 - [0:0] -:limit-1373 - [0:0] :limit-1374 - [0:0] :limit-1375 - [0:0] :limit-1376 - [0:0] @@ -412,14 +402,12 @@ :limit-1384 - [0:0] :limit-1385 - [0:0] :limit-1386 - [0:0] -:limit-1387 - [0:0] :limit-1388 - [0:0] :limit-1389 - [0:0] :limit-139 - [0:0] :limit-1390 - [0:0] :limit-1391 - [0:0] :limit-1392 - [0:0] -:limit-1393 - [0:0] :limit-1394 - [0:0] :limit-1395 - [0:0] :limit-1396 - [0:0] @@ -435,14 +423,12 @@ :limit-1404 - [0:0] :limit-1405 - [0:0] :limit-1406 - [0:0] -:limit-1407 - [0:0] :limit-1408 - [0:0] :limit-1409 - [0:0] :limit-141 - [0:0] :limit-1410 - [0:0] :limit-1411 - [0:0] :limit-1412 - [0:0] -:limit-1413 - [0:0] :limit-1414 - [0:0] :limit-1415 - [0:0] :limit-1416 - [0:0] @@ -457,14 +443,12 @@ :limit-1424 - [0:0] :limit-1425 - [0:0] :limit-1426 - [0:0] -:limit-1427 - [0:0] :limit-1428 - [0:0] :limit-1429 - [0:0] :limit-143 - [0:0] :limit-1430 - [0:0] :limit-1431 - [0:0] :limit-1432 - [0:0] -:limit-1433 - [0:0] :limit-1434 - [0:0] :limit-1435 - [0:0] :limit-1436 - [0:0] @@ -490,14 +474,12 @@ :limit-1454 - [0:0] :limit-1455 - [0:0] :limit-1456 - [0:0] -:limit-1457 - [0:0] :limit-1458 - [0:0] :limit-1459 - [0:0] :limit-146 - [0:0] :limit-1460 - [0:0] :limit-1461 - [0:0] :limit-1462 - [0:0] -:limit-1463 - [0:0] :limit-1464 - [0:0] :limit-1465 - [0:0] :limit-1466 - [0:0] @@ -512,14 +494,12 @@ :limit-1474 - [0:0] :limit-1475 - [0:0] :limit-1476 - [0:0] -:limit-1477 - [0:0] :limit-1478 - [0:0] :limit-1479 - [0:0] :limit-148 - [0:0] :limit-1480 - [0:0] :limit-1481 - [0:0] :limit-1482 - [0:0] -:limit-1483 - [0:0] :limit-1484 - [0:0] :limit-1485 - [0:0] :limit-1486 - [0:0] @@ -534,7 +514,6 @@ :limit-1494 - [0:0] :limit-1495 - [0:0] :limit-1496 - [0:0] -:limit-1497 - [0:0] :limit-1498 - [0:0] :limit-1499 - [0:0] :limit-15 - [0:0] @@ -542,7 +521,6 @@ :limit-1500 - [0:0] :limit-1501 - [0:0] :limit-1502 - [0:0] -:limit-1503 - [0:0] :limit-1504 - [0:0] :limit-1505 - [0:0] :limit-1506 - [0:0] @@ -557,14 +535,12 @@ :limit-1514 - [0:0] :limit-1515 - [0:0] :limit-1516 - [0:0] -:limit-1517 - [0:0] :limit-1518 - [0:0] :limit-1519 - [0:0] :limit-152 - [0:0] :limit-1520 - [0:0] :limit-1521 - [0:0] :limit-1522 - [0:0] -:limit-1523 - [0:0] :limit-1524 - [0:0] :limit-1525 - [0:0] :limit-1526 - [0:0] @@ -590,14 +566,12 @@ :limit-1544 - [0:0] :limit-1545 - [0:0] :limit-1546 - [0:0] -:limit-1547 - [0:0] :limit-1548 - [0:0] :limit-1549 - [0:0] :limit-155 - [0:0] :limit-1550 - [0:0] :limit-1551 - [0:0] :limit-1552 - [0:0] -:limit-1553 - [0:0] :limit-1554 - [0:0] :limit-1555 - [0:0] :limit-1556 - [0:0] @@ -612,14 +586,12 @@ :limit-1564 - [0:0] :limit-1565 - [0:0] :limit-1566 - [0:0] -:limit-1567 - [0:0] :limit-1568 - [0:0] :limit-1569 - [0:0] :limit-157 - [0:0] :limit-1570 - [0:0] :limit-1571 - [0:0] :limit-1572 - [0:0] -:limit-1573 - [0:0] :limit-1574 - [0:0] :limit-1575 - [0:0] :limit-1576 - [0:0] @@ -634,14 +606,12 @@ :limit-1584 - [0:0] :limit-1585 - [0:0] :limit-1586 - [0:0] -:limit-1587 - [0:0] :limit-1588 - [0:0] :limit-1589 - [0:0] :limit-159 - [0:0] :limit-1590 - [0:0] :limit-1591 - [0:0] :limit-1592 - [0:0] -:limit-1593 - [0:0] :limit-1594 - [0:0] :limit-1595 - [0:0] :limit-1596 - [0:0] @@ -657,14 +627,12 @@ :limit-1604 - [0:0] :limit-1605 - [0:0] :limit-1606 - [0:0] -:limit-1607 - [0:0] :limit-1608 - [0:0] :limit-1609 - [0:0] :limit-161 - [0:0] :limit-1610 - [0:0] :limit-1611 - [0:0] :limit-1612 - [0:0] -:limit-1613 - [0:0] :limit-1614 - [0:0] :limit-1615 - [0:0] :limit-1616 - [0:0] @@ -690,14 +658,12 @@ :limit-1634 - [0:0] :limit-1635 - [0:0] :limit-1636 - [0:0] -:limit-1637 - [0:0] :limit-1638 - [0:0] :limit-1639 - [0:0] :limit-164 - [0:0] :limit-1640 - [0:0] :limit-1641 - [0:0] :limit-1642 - [0:0] -:limit-1643 - [0:0] :limit-1644 - [0:0] :limit-1645 - [0:0] :limit-1646 - [0:0] @@ -712,14 +678,12 @@ :limit-1654 - [0:0] :limit-1655 - [0:0] :limit-1656 - [0:0] -:limit-1657 - [0:0] :limit-1658 - [0:0] :limit-1659 - [0:0] :limit-166 - [0:0] :limit-1660 - [0:0] :limit-1661 - [0:0] :limit-1662 - [0:0] -:limit-1663 - [0:0] :limit-1664 - [0:0] :limit-1665 - [0:0] :limit-1666 - [0:0] @@ -734,14 +698,12 @@ :limit-1674 - [0:0] :limit-1675 - [0:0] :limit-1676 - [0:0] -:limit-1677 - [0:0] :limit-1678 - [0:0] :limit-1679 - [0:0] :limit-168 - [0:0] :limit-1680 - [0:0] :limit-1681 - [0:0] :limit-1682 - [0:0] -:limit-1683 - [0:0] :limit-1684 - [0:0] :limit-1685 - [0:0] :limit-1686 - [0:0] @@ -756,7 +718,6 @@ :limit-1694 - [0:0] :limit-1695 - [0:0] :limit-1696 - [0:0] -:limit-1697 - [0:0] :limit-1698 - [0:0] :limit-1699 - [0:0] :limit-17 - [0:0] @@ -764,7 +725,6 @@ :limit-1700 - [0:0] :limit-1701 - [0:0] :limit-1702 - [0:0] -:limit-1703 - [0:0] :limit-1704 - [0:0] :limit-1705 - [0:0] :limit-1706 - [0:0] @@ -790,14 +750,12 @@ :limit-1724 - [0:0] :limit-1725 - [0:0] :limit-1726 - [0:0] -:limit-1727 - [0:0] :limit-1728 - [0:0] :limit-1729 - [0:0] :limit-173 - [0:0] :limit-1730 - [0:0] :limit-1731 - [0:0] :limit-1732 - [0:0] -:limit-1733 - [0:0] :limit-1734 - [0:0] :limit-1735 - [0:0] :limit-1736 - [0:0] @@ -812,14 +770,12 @@ :limit-1744 - [0:0] :limit-1745 - [0:0] :limit-1746 - [0:0] -:limit-1747 - [0:0] :limit-1748 - [0:0] :limit-1749 - [0:0] :limit-175 - [0:0] :limit-1750 - [0:0] :limit-1751 - [0:0] :limit-1752 - [0:0] -:limit-1753 - [0:0] :limit-1754 - [0:0] :limit-1755 - [0:0] :limit-1756 - [0:0] @@ -834,14 +790,12 @@ :limit-1764 - [0:0] :limit-1765 - [0:0] :limit-1766 - [0:0] -:limit-1767 - [0:0] :limit-1768 - [0:0] :limit-1769 - [0:0] :limit-177 - [0:0] :limit-1770 - [0:0] :limit-1771 - [0:0] :limit-1772 - [0:0] -:limit-1773 - [0:0] :limit-1774 - [0:0] :limit-1775 - [0:0] :limit-1776 - [0:0] @@ -856,14 +810,12 @@ :limit-1784 - [0:0] :limit-1785 - [0:0] :limit-1786 - [0:0] -:limit-1787 - [0:0] :limit-1788 - [0:0] :limit-1789 - [0:0] :limit-179 - [0:0] :limit-1790 - [0:0] :limit-1791 - [0:0] :limit-1792 - [0:0] -:limit-1793 - [0:0] :limit-1794 - [0:0] :limit-1795 - [0:0] :limit-1796 - [0:0] @@ -890,14 +842,12 @@ :limit-1814 - [0:0] :limit-1815 - [0:0] :limit-1816 - [0:0] -:limit-1817 - [0:0] :limit-1818 - [0:0] :limit-1819 - [0:0] :limit-182 - [0:0] :limit-1820 - [0:0] :limit-1821 - [0:0] :limit-1822 - [0:0] -:limit-1823 - [0:0] :limit-1824 - [0:0] :limit-1825 - [0:0] :limit-1826 - [0:0] @@ -912,14 +862,12 @@ :limit-1834 - [0:0] :limit-1835 - [0:0] :limit-1836 - [0:0] -:limit-1837 - [0:0] :limit-1838 - [0:0] :limit-1839 - [0:0] :limit-184 - [0:0] :limit-1840 - [0:0] :limit-1841 - [0:0] :limit-1842 - [0:0] -:limit-1843 - [0:0] :limit-1844 - [0:0] :limit-1845 - [0:0] :limit-1846 - [0:0] @@ -934,14 +882,12 @@ :limit-1854 - [0:0] :limit-1855 - [0:0] :limit-1856 - [0:0] -:limit-1857 - [0:0] :limit-1858 - [0:0] :limit-1859 - [0:0] :limit-186 - [0:0] :limit-1860 - [0:0] :limit-1861 - [0:0] :limit-1862 - [0:0] -:limit-1863 - [0:0] :limit-1864 - [0:0] :limit-1865 - [0:0] :limit-1866 - [0:0] @@ -956,14 +902,12 @@ :limit-1874 - [0:0] :limit-1875 - [0:0] :limit-1876 - [0:0] -:limit-1877 - [0:0] :limit-1878 - [0:0] :limit-1879 - [0:0] :limit-188 - [0:0] :limit-1880 - [0:0] :limit-1881 - [0:0] :limit-1882 - [0:0] -:limit-1883 - [0:0] :limit-1884 - [0:0] :limit-1885 - [0:0] :limit-1886 - [0:0] @@ -996,9 +940,11 @@ :limit-191 - [0:0] :limit-1910 - [0:0] :limit-1911 - [0:0] +:limit-1912 - [0:0] :limit-1913 - [0:0] :limit-1914 - [0:0] :limit-1915 - [0:0] +:limit-1916 - [0:0] :limit-1917 - [0:0] :limit-1918 - [0:0] :limit-1919 - [0:0] @@ -1011,10 +957,12 @@ :limit-1925 - [0:0] :limit-1926 - [0:0] :limit-1927 - [0:0] +:limit-1928 - [0:0] :limit-1929 - [0:0] :limit-193 - [0:0] :limit-1930 - [0:0] :limit-1931 - [0:0] +:limit-1932 - [0:0] :limit-1933 - [0:0] :limit-1934 - [0:0] :limit-1935 - [0:0] @@ -1027,9 +975,11 @@ :limit-1941 - [0:0] :limit-1942 - [0:0] :limit-1943 - [0:0] +:limit-1944 - [0:0] :limit-1945 - [0:0] :limit-1946 - [0:0] :limit-1947 - [0:0] +:limit-1948 - [0:0] :limit-1949 - [0:0] :limit-195 - [0:0] :limit-1950 - [0:0] @@ -1043,9 +993,11 @@ :limit-1958 - [0:0] :limit-1959 - [0:0] :limit-196 - [0:0] +:limit-1960 - [0:0] :limit-1961 - [0:0] :limit-1962 - [0:0] :limit-1963 - [0:0] +:limit-1964 - [0:0] :limit-1965 - [0:0] :limit-1966 - [0:0] :limit-1967 - [0:0] @@ -1067,9 +1019,11 @@ :limit-1981 - [0:0] :limit-1982 - [0:0] :limit-1983 - [0:0] +:limit-1984 - [0:0] :limit-1985 - [0:0] :limit-1986 - [0:0] :limit-1987 - [0:0] +:limit-1988 - [0:0] :limit-1989 - [0:0] :limit-199 - [0:0] :limit-1990 - [0:0] @@ -1085,9 +1039,11 @@ :limit-2 - [0:0] :limit-20 - [0:0] :limit-200 - [0:0] +:limit-2000 - [0:0] :limit-2001 - [0:0] :limit-2002 - [0:0] :limit-2003 - [0:0] +:limit-2004 - [0:0] :limit-2005 - [0:0] :limit-2006 - [0:0] :limit-2007 - [0:0] @@ -1100,10 +1056,12 @@ :limit-2013 - [0:0] :limit-2014 - [0:0] :limit-2015 - [0:0] +:limit-2016 - [0:0] :limit-2017 - [0:0] :limit-2018 - [0:0] :limit-2019 - [0:0] :limit-202 - [0:0] +:limit-2020 - [0:0] :limit-2021 - [0:0] :limit-2022 - [0:0] :limit-2023 - [0:0] @@ -1116,9 +1074,11 @@ :limit-203 - [0:0] :limit-2030 - [0:0] :limit-2031 - [0:0] +:limit-2032 - [0:0] :limit-2033 - [0:0] :limit-2034 - [0:0] :limit-2035 - [0:0] +:limit-2036 - [0:0] :limit-2037 - [0:0] :limit-2038 - [0:0] :limit-2039 - [0:0] @@ -1140,10 +1100,12 @@ :limit-2053 - [0:0] :limit-2054 - [0:0] :limit-2055 - [0:0] +:limit-2056 - [0:0] :limit-2057 - [0:0] :limit-2058 - [0:0] :limit-2059 - [0:0] :limit-206 - [0:0] +:limit-2060 - [0:0] :limit-2061 - [0:0] :limit-2062 - [0:0] :limit-2063 - [0:0] @@ -1156,9 +1118,11 @@ :limit-207 - [0:0] :limit-2070 - [0:0] :limit-2071 - [0:0] +:limit-2072 - [0:0] :limit-2073 - [0:0] :limit-2074 - [0:0] :limit-2075 - [0:0] +:limit-2076 - [0:0] :limit-2077 - [0:0] :limit-2078 - [0:0] :limit-2079 - [0:0] @@ -1171,10 +1135,12 @@ :limit-2085 - [0:0] :limit-2086 - [0:0] :limit-2087 - [0:0] +:limit-2088 - [0:0] :limit-2089 - [0:0] :limit-209 - [0:0] :limit-2090 - [0:0] :limit-2091 - [0:0] +:limit-2092 - [0:0] :limit-2093 - [0:0] :limit-2094 - [0:0] :limit-2095 - [0:0] @@ -1188,9 +1154,11 @@ :limit-2101 - [0:0] :limit-2102 - [0:0] :limit-2103 - [0:0] +:limit-2104 - [0:0] :limit-2105 - [0:0] :limit-2106 - [0:0] :limit-2107 - [0:0] +:limit-2108 - [0:0] :limit-2109 - [0:0] :limit-211 - [0:0] :limit-2110 - [0:0] @@ -1212,10 +1180,12 @@ :limit-2125 - [0:0] :limit-2126 - [0:0] :limit-2127 - [0:0] +:limit-2128 - [0:0] :limit-2129 - [0:0] :limit-213 - [0:0] :limit-2130 - [0:0] :limit-2131 - [0:0] +:limit-2132 - [0:0] :limit-2133 - [0:0] :limit-2134 - [0:0] :limit-2135 - [0:0] @@ -1228,9 +1198,11 @@ :limit-2141 - [0:0] :limit-2142 - [0:0] :limit-2143 - [0:0] +:limit-2144 - [0:0] :limit-2145 - [0:0] :limit-2146 - [0:0] :limit-2147 - [0:0] +:limit-2148 - [0:0] :limit-2149 - [0:0] :limit-215 - [0:0] :limit-2150 - [0:0] @@ -1244,9 +1216,11 @@ :limit-2158 - [0:0] :limit-2159 - [0:0] :limit-216 - [0:0] +:limit-2160 - [0:0] :limit-2161 - [0:0] :limit-2162 - [0:0] :limit-2163 - [0:0] +:limit-2164 - [0:0] :limit-2165 - [0:0] :limit-2166 - [0:0] :limit-2167 - [0:0] @@ -1259,10 +1233,12 @@ :limit-2173 - [0:0] :limit-2174 - [0:0] :limit-2175 - [0:0] +:limit-2176 - [0:0] :limit-2177 - [0:0] :limit-2178 - [0:0] :limit-2179 - [0:0] :limit-218 - [0:0] +:limit-2180 - [0:0] :limit-2181 - [0:0] :limit-2182 - [0:0] :limit-2183 - [0:0] @@ -1285,9 +1261,11 @@ :limit-2199 - [0:0] :limit-22 - [0:0] :limit-220 - [0:0] +:limit-2200 - [0:0] :limit-2201 - [0:0] :limit-2202 - [0:0] :limit-2203 - [0:0] +:limit-2204 - [0:0] :limit-2205 - [0:0] :limit-2206 - [0:0] :limit-2207 - [0:0] @@ -1300,10 +1278,12 @@ :limit-2213 - [0:0] :limit-2214 - [0:0] :limit-2215 - [0:0] +:limit-2216 - [0:0] :limit-2217 - [0:0] :limit-2218 - [0:0] :limit-2219 - [0:0] :limit-222 - [0:0] +:limit-2220 - [0:0] :limit-2221 - [0:0] :limit-2222 - [0:0] :limit-2223 - [0:0] @@ -1316,9 +1296,11 @@ :limit-223 - [0:0] :limit-2230 - [0:0] :limit-2231 - [0:0] +:limit-2232 - [0:0] :limit-2233 - [0:0] :limit-2234 - [0:0] :limit-2235 - [0:0] +:limit-2236 - [0:0] :limit-2237 - [0:0] :limit-2238 - [0:0] :limit-2239 - [0:0] @@ -1331,10 +1313,12 @@ :limit-2245 - [0:0] :limit-2246 - [0:0] :limit-2247 - [0:0] +:limit-2248 - [0:0] :limit-2249 - [0:0] :limit-225 - [0:0] :limit-2250 - [0:0] :limit-2251 - [0:0] +:limit-2252 - [0:0] :limit-2253 - [0:0] :limit-2254 - [0:0] :limit-2255 - [0:0] @@ -1356,9 +1340,11 @@ :limit-227 - [0:0] :limit-2270 - [0:0] :limit-2271 - [0:0] +:limit-2272 - [0:0] :limit-2273 - [0:0] :limit-2274 - [0:0] :limit-2275 - [0:0] +:limit-2276 - [0:0] :limit-2277 - [0:0] :limit-2278 - [0:0] :limit-2279 - [0:0] @@ -1371,10 +1357,12 @@ :limit-2285 - [0:0] :limit-2286 - [0:0] :limit-2287 - [0:0] +:limit-2288 - [0:0] :limit-2289 - [0:0] :limit-229 - [0:0] :limit-2290 - [0:0] :limit-2291 - [0:0] +:limit-2292 - [0:0] :limit-2293 - [0:0] :limit-2294 - [0:0] :limit-2295 - [0:0] @@ -1388,9 +1376,11 @@ :limit-2301 - [0:0] :limit-2302 - [0:0] :limit-2303 - [0:0] +:limit-2304 - [0:0] :limit-2305 - [0:0] :limit-2306 - [0:0] :limit-2307 - [0:0] +:limit-2308 - [0:0] :limit-2309 - [0:0] :limit-231 - [0:0] :limit-2310 - [0:0] @@ -1404,9 +1394,11 @@ :limit-2318 - [0:0] :limit-2319 - [0:0] :limit-232 - [0:0] +:limit-2320 - [0:0] :limit-2321 - [0:0] :limit-2322 - [0:0] :limit-2323 - [0:0] +:limit-2324 - [0:0] :limit-2325 - [0:0] :limit-2326 - [0:0] :limit-2327 - [0:0] @@ -1428,9 +1420,11 @@ :limit-2341 - [0:0] :limit-2342 - [0:0] :limit-2343 - [0:0] +:limit-2344 - [0:0] :limit-2345 - [0:0] :limit-2346 - [0:0] :limit-2347 - [0:0] +:limit-2348 - [0:0] :limit-2349 - [0:0] :limit-235 - [0:0] :limit-2350 - [0:0] @@ -1444,9 +1438,11 @@ :limit-2358 - [0:0] :limit-2359 - [0:0] :limit-236 - [0:0] +:limit-2360 - [0:0] :limit-2361 - [0:0] :limit-2362 - [0:0] :limit-2363 - [0:0] +:limit-2364 - [0:0] :limit-2365 - [0:0] :limit-2366 - [0:0] :limit-2367 - [0:0] @@ -1459,10 +1455,12 @@ :limit-2373 - [0:0] :limit-2374 - [0:0] :limit-2375 - [0:0] +:limit-2376 - [0:0] :limit-2377 - [0:0] :limit-2378 - [0:0] :limit-2379 - [0:0] :limit-238 - [0:0] +:limit-2380 - [0:0] :limit-2381 - [0:0] :limit-2382 - [0:0] :limit-2383 - [0:0] @@ -1475,9 +1473,11 @@ :limit-239 - [0:0] :limit-2390 - [0:0] :limit-2391 - [0:0] +:limit-2392 - [0:0] :limit-2393 - [0:0] :limit-2394 - [0:0] :limit-2395 - [0:0] +:limit-2396 - [0:0] :limit-2397 - [0:0] :limit-2398 - [0:0] :limit-2399 - [0:0] @@ -1500,10 +1500,12 @@ :limit-2413 - [0:0] :limit-2414 - [0:0] :limit-2415 - [0:0] +:limit-2416 - [0:0] :limit-2417 - [0:0] :limit-2418 - [0:0] :limit-2419 - [0:0] :limit-242 - [0:0] +:limit-2420 - [0:0] :limit-2421 - [0:0] :limit-2422 - [0:0] :limit-2423 - [0:0] @@ -1516,9 +1518,11 @@ :limit-243 - [0:0] :limit-2430 - [0:0] :limit-2431 - [0:0] +:limit-2432 - [0:0] :limit-2433 - [0:0] :limit-2434 - [0:0] :limit-2435 - [0:0] +:limit-2436 - [0:0] :limit-2437 - [0:0] :limit-2438 - [0:0] :limit-2439 - [0:0] @@ -1531,10 +1535,12 @@ :limit-2445 - [0:0] :limit-2446 - [0:0] :limit-2447 - [0:0] +:limit-2448 - [0:0] :limit-2449 - [0:0] :limit-245 - [0:0] :limit-2450 - [0:0] :limit-2451 - [0:0] +:limit-2452 - [0:0] :limit-2453 - [0:0] :limit-2454 - [0:0] :limit-2455 - [0:0] @@ -1547,9 +1553,11 @@ :limit-2461 - [0:0] :limit-2462 - [0:0] :limit-2463 - [0:0] +:limit-2464 - [0:0] :limit-2465 - [0:0] :limit-2466 - [0:0] :limit-2467 - [0:0] +:limit-2468 - [0:0] :limit-2469 - [0:0] :limit-247 - [0:0] :limit-2470 - [0:0] @@ -1603,160 +1611,1468 @@ :limit-2513 - [0:0] :limit-2514 - [0:0] :limit-2515 - [0:0] +:limit-2516 - [0:0] +:limit-2517 - [0:0] +:limit-2518 - [0:0] +:limit-2519 - [0:0] :limit-252 - [0:0] +:limit-2520 - [0:0] +:limit-2521 - [0:0] +:limit-2522 - [0:0] +:limit-2523 - [0:0] +:limit-2524 - [0:0] +:limit-2525 - [0:0] +:limit-2526 - [0:0] +:limit-2527 - [0:0] +:limit-2528 - [0:0] +:limit-2529 - [0:0] :limit-253 - [0:0] +:limit-2530 - [0:0] +:limit-2531 - [0:0] +:limit-2532 - [0:0] +:limit-2533 - [0:0] +:limit-2534 - [0:0] +:limit-2535 - [0:0] +:limit-2536 - [0:0] +:limit-2537 - [0:0] +:limit-2538 - [0:0] +:limit-2539 - [0:0] :limit-254 - [0:0] +:limit-2540 - [0:0] +:limit-2541 - [0:0] +:limit-2542 - [0:0] +:limit-2543 - [0:0] +:limit-2544 - [0:0] +:limit-2545 - [0:0] +:limit-2546 - [0:0] +:limit-2547 - [0:0] +:limit-2548 - [0:0] +:limit-2549 - [0:0] :limit-255 - [0:0] +:limit-2550 - [0:0] +:limit-2551 - [0:0] +:limit-2552 - [0:0] +:limit-2553 - [0:0] +:limit-2554 - [0:0] +:limit-2555 - [0:0] +:limit-2556 - [0:0] +:limit-2557 - [0:0] +:limit-2558 - [0:0] +:limit-2559 - [0:0] :limit-256 - [0:0] +:limit-2560 - [0:0] +:limit-2561 - [0:0] +:limit-2562 - [0:0] +:limit-2563 - [0:0] +:limit-2564 - [0:0] +:limit-2565 - [0:0] +:limit-2566 - [0:0] +:limit-2567 - [0:0] +:limit-2568 - [0:0] +:limit-2569 - [0:0] :limit-257 - [0:0] +:limit-2570 - [0:0] +:limit-2571 - [0:0] +:limit-2572 - [0:0] +:limit-2573 - [0:0] +:limit-2574 - [0:0] +:limit-2575 - [0:0] +:limit-2576 - [0:0] +:limit-2577 - [0:0] +:limit-2578 - [0:0] +:limit-2579 - [0:0] :limit-258 - [0:0] +:limit-2580 - [0:0] +:limit-2581 - [0:0] +:limit-2582 - [0:0] +:limit-2583 - [0:0] +:limit-2584 - [0:0] +:limit-2585 - [0:0] +:limit-2586 - [0:0] +:limit-2587 - [0:0] +:limit-2588 - [0:0] +:limit-2589 - [0:0] :limit-259 - [0:0] +:limit-2590 - [0:0] +:limit-2591 - [0:0] +:limit-2592 - [0:0] +:limit-2593 - [0:0] +:limit-2594 - [0:0] +:limit-2595 - [0:0] +:limit-2596 - [0:0] +:limit-2597 - [0:0] +:limit-2598 - [0:0] +:limit-2599 - [0:0] :limit-26 - [0:0] :limit-260 - [0:0] +:limit-2600 - [0:0] +:limit-2601 - [0:0] +:limit-2602 - [0:0] +:limit-2603 - [0:0] +:limit-2604 - [0:0] +:limit-2605 - [0:0] +:limit-2606 - [0:0] +:limit-2607 - [0:0] +:limit-2608 - [0:0] +:limit-2609 - [0:0] :limit-261 - [0:0] +:limit-2610 - [0:0] +:limit-2611 - [0:0] +:limit-2612 - [0:0] +:limit-2613 - [0:0] +:limit-2614 - [0:0] +:limit-2615 - [0:0] +:limit-2616 - [0:0] +:limit-2617 - [0:0] +:limit-2618 - [0:0] +:limit-2619 - [0:0] :limit-262 - [0:0] +:limit-2620 - [0:0] +:limit-2621 - [0:0] +:limit-2622 - [0:0] +:limit-2623 - [0:0] +:limit-2624 - [0:0] +:limit-2625 - [0:0] +:limit-2626 - [0:0] +:limit-2627 - [0:0] +:limit-2628 - [0:0] +:limit-2629 - [0:0] :limit-263 - [0:0] +:limit-2630 - [0:0] +:limit-2631 - [0:0] +:limit-2632 - [0:0] +:limit-2633 - [0:0] +:limit-2634 - [0:0] +:limit-2635 - [0:0] +:limit-2636 - [0:0] +:limit-2637 - [0:0] +:limit-2638 - [0:0] +:limit-2639 - [0:0] :limit-264 - [0:0] +:limit-2640 - [0:0] +:limit-2641 - [0:0] +:limit-2642 - [0:0] +:limit-2643 - [0:0] +:limit-2644 - [0:0] +:limit-2645 - [0:0] +:limit-2646 - [0:0] +:limit-2647 - [0:0] +:limit-2648 - [0:0] +:limit-2649 - [0:0] :limit-265 - [0:0] +:limit-2650 - [0:0] +:limit-2651 - [0:0] +:limit-2652 - [0:0] +:limit-2653 - [0:0] +:limit-2654 - [0:0] +:limit-2655 - [0:0] +:limit-2656 - [0:0] +:limit-2657 - [0:0] +:limit-2658 - [0:0] +:limit-2659 - [0:0] :limit-266 - [0:0] +:limit-2660 - [0:0] +:limit-2661 - [0:0] +:limit-2662 - [0:0] +:limit-2663 - [0:0] +:limit-2664 - [0:0] +:limit-2665 - [0:0] +:limit-2666 - [0:0] +:limit-2667 - [0:0] +:limit-2668 - [0:0] +:limit-2669 - [0:0] :limit-267 - [0:0] +:limit-2670 - [0:0] +:limit-2671 - [0:0] +:limit-2672 - [0:0] +:limit-2673 - [0:0] +:limit-2674 - [0:0] +:limit-2675 - [0:0] +:limit-2676 - [0:0] +:limit-2677 - [0:0] +:limit-2678 - [0:0] +:limit-2679 - [0:0] :limit-268 - [0:0] +:limit-2680 - [0:0] +:limit-2681 - [0:0] +:limit-2682 - [0:0] +:limit-2683 - [0:0] +:limit-2684 - [0:0] +:limit-2685 - [0:0] +:limit-2686 - [0:0] +:limit-2687 - [0:0] +:limit-2688 - [0:0] +:limit-2689 - [0:0] :limit-269 - [0:0] +:limit-2690 - [0:0] +:limit-2691 - [0:0] +:limit-2692 - [0:0] +:limit-2693 - [0:0] +:limit-2694 - [0:0] +:limit-2695 - [0:0] +:limit-2696 - [0:0] +:limit-2697 - [0:0] +:limit-2698 - [0:0] +:limit-2699 - [0:0] :limit-27 - [0:0] :limit-270 - [0:0] +:limit-2700 - [0:0] +:limit-2701 - [0:0] +:limit-2702 - [0:0] +:limit-2703 - [0:0] +:limit-2704 - [0:0] +:limit-2705 - [0:0] +:limit-2706 - [0:0] +:limit-2707 - [0:0] +:limit-2708 - [0:0] +:limit-2709 - [0:0] :limit-271 - [0:0] +:limit-2710 - [0:0] +:limit-2711 - [0:0] +:limit-2712 - [0:0] +:limit-2713 - [0:0] +:limit-2714 - [0:0] +:limit-2715 - [0:0] +:limit-2716 - [0:0] +:limit-2717 - [0:0] +:limit-2718 - [0:0] +:limit-2719 - [0:0] :limit-272 - [0:0] +:limit-2720 - [0:0] +:limit-2721 - [0:0] +:limit-2722 - [0:0] +:limit-2723 - [0:0] +:limit-2724 - [0:0] +:limit-2725 - [0:0] +:limit-2726 - [0:0] +:limit-2727 - [0:0] +:limit-2728 - [0:0] +:limit-2729 - [0:0] :limit-273 - [0:0] +:limit-2730 - [0:0] +:limit-2731 - [0:0] +:limit-2732 - [0:0] +:limit-2733 - [0:0] +:limit-2734 - [0:0] +:limit-2735 - [0:0] +:limit-2736 - [0:0] +:limit-2737 - [0:0] +:limit-2738 - [0:0] +:limit-2739 - [0:0] :limit-274 - [0:0] +:limit-2740 - [0:0] +:limit-2741 - [0:0] +:limit-2742 - [0:0] +:limit-2743 - [0:0] +:limit-2744 - [0:0] +:limit-2745 - [0:0] +:limit-2746 - [0:0] +:limit-2747 - [0:0] +:limit-2748 - [0:0] +:limit-2749 - [0:0] :limit-275 - [0:0] +:limit-2750 - [0:0] +:limit-2751 - [0:0] +:limit-2752 - [0:0] +:limit-2753 - [0:0] +:limit-2754 - [0:0] +:limit-2755 - [0:0] +:limit-2756 - [0:0] +:limit-2757 - [0:0] +:limit-2758 - [0:0] +:limit-2759 - [0:0] :limit-276 - [0:0] +:limit-2760 - [0:0] +:limit-2761 - [0:0] +:limit-2762 - [0:0] +:limit-2763 - [0:0] +:limit-2764 - [0:0] +:limit-2765 - [0:0] +:limit-2766 - [0:0] +:limit-2767 - [0:0] +:limit-2768 - [0:0] +:limit-2769 - [0:0] :limit-277 - [0:0] +:limit-2770 - [0:0] +:limit-2771 - [0:0] +:limit-2772 - [0:0] +:limit-2773 - [0:0] +:limit-2774 - [0:0] +:limit-2775 - [0:0] +:limit-2776 - [0:0] +:limit-2777 - [0:0] +:limit-2778 - [0:0] +:limit-2779 - [0:0] :limit-278 - [0:0] +:limit-2780 - [0:0] +:limit-2781 - [0:0] +:limit-2782 - [0:0] +:limit-2783 - [0:0] +:limit-2784 - [0:0] +:limit-2785 - [0:0] +:limit-2786 - [0:0] +:limit-2787 - [0:0] +:limit-2788 - [0:0] +:limit-2789 - [0:0] :limit-279 - [0:0] +:limit-2790 - [0:0] +:limit-2791 - [0:0] +:limit-2792 - [0:0] +:limit-2793 - [0:0] +:limit-2794 - [0:0] +:limit-2795 - [0:0] +:limit-2796 - [0:0] +:limit-2797 - [0:0] +:limit-2798 - [0:0] +:limit-2799 - [0:0] :limit-28 - [0:0] :limit-280 - [0:0] +:limit-2800 - [0:0] +:limit-2801 - [0:0] +:limit-2802 - [0:0] +:limit-2803 - [0:0] +:limit-2804 - [0:0] +:limit-2805 - [0:0] +:limit-2806 - [0:0] +:limit-2807 - [0:0] +:limit-2808 - [0:0] +:limit-2809 - [0:0] :limit-281 - [0:0] +:limit-2810 - [0:0] +:limit-2811 - [0:0] +:limit-2812 - [0:0] +:limit-2813 - [0:0] +:limit-2814 - [0:0] +:limit-2815 - [0:0] +:limit-2816 - [0:0] +:limit-2817 - [0:0] +:limit-2818 - [0:0] +:limit-2819 - [0:0] :limit-282 - [0:0] +:limit-2820 - [0:0] +:limit-2821 - [0:0] +:limit-2822 - [0:0] +:limit-2823 - [0:0] +:limit-2824 - [0:0] +:limit-2825 - [0:0] +:limit-2826 - [0:0] +:limit-2827 - [0:0] +:limit-2828 - [0:0] +:limit-2829 - [0:0] :limit-283 - [0:0] +:limit-2830 - [0:0] +:limit-2831 - [0:0] +:limit-2832 - [0:0] +:limit-2833 - [0:0] +:limit-2834 - [0:0] +:limit-2835 - [0:0] +:limit-2836 - [0:0] +:limit-2837 - [0:0] +:limit-2838 - [0:0] +:limit-2839 - [0:0] :limit-284 - [0:0] +:limit-2840 - [0:0] +:limit-2841 - [0:0] +:limit-2842 - [0:0] +:limit-2843 - [0:0] +:limit-2844 - [0:0] +:limit-2845 - [0:0] +:limit-2846 - [0:0] +:limit-2847 - [0:0] +:limit-2848 - [0:0] +:limit-2849 - [0:0] :limit-285 - [0:0] +:limit-2850 - [0:0] +:limit-2851 - [0:0] +:limit-2852 - [0:0] +:limit-2853 - [0:0] +:limit-2854 - [0:0] +:limit-2855 - [0:0] +:limit-2856 - [0:0] +:limit-2857 - [0:0] +:limit-2858 - [0:0] +:limit-2859 - [0:0] :limit-286 - [0:0] +:limit-2860 - [0:0] +:limit-2861 - [0:0] +:limit-2862 - [0:0] +:limit-2863 - [0:0] +:limit-2864 - [0:0] +:limit-2865 - [0:0] +:limit-2866 - [0:0] +:limit-2867 - [0:0] +:limit-2868 - [0:0] +:limit-2869 - [0:0] :limit-287 - [0:0] +:limit-2870 - [0:0] +:limit-2871 - [0:0] +:limit-2872 - [0:0] +:limit-2873 - [0:0] +:limit-2874 - [0:0] +:limit-2875 - [0:0] +:limit-2876 - [0:0] +:limit-2877 - [0:0] +:limit-2878 - [0:0] +:limit-2879 - [0:0] :limit-288 - [0:0] +:limit-2880 - [0:0] +:limit-2881 - [0:0] +:limit-2882 - [0:0] +:limit-2883 - [0:0] +:limit-2884 - [0:0] +:limit-2885 - [0:0] +:limit-2886 - [0:0] +:limit-2887 - [0:0] +:limit-2888 - [0:0] +:limit-2889 - [0:0] :limit-289 - [0:0] +:limit-2890 - [0:0] +:limit-2891 - [0:0] +:limit-2892 - [0:0] +:limit-2893 - [0:0] +:limit-2894 - [0:0] +:limit-2895 - [0:0] +:limit-2896 - [0:0] +:limit-2897 - [0:0] +:limit-2898 - [0:0] +:limit-2899 - [0:0] :limit-29 - [0:0] :limit-290 - [0:0] +:limit-2900 - [0:0] +:limit-2901 - [0:0] +:limit-2902 - [0:0] +:limit-2903 - [0:0] +:limit-2904 - [0:0] +:limit-2905 - [0:0] +:limit-2906 - [0:0] +:limit-2907 - [0:0] +:limit-2908 - [0:0] +:limit-2909 - [0:0] :limit-291 - [0:0] +:limit-2910 - [0:0] +:limit-2911 - [0:0] +:limit-2912 - [0:0] +:limit-2913 - [0:0] +:limit-2914 - [0:0] +:limit-2915 - [0:0] +:limit-2916 - [0:0] +:limit-2917 - [0:0] +:limit-2918 - [0:0] +:limit-2919 - [0:0] :limit-292 - [0:0] +:limit-2920 - [0:0] +:limit-2921 - [0:0] +:limit-2922 - [0:0] +:limit-2923 - [0:0] +:limit-2924 - [0:0] +:limit-2925 - [0:0] +:limit-2926 - [0:0] +:limit-2927 - [0:0] +:limit-2928 - [0:0] +:limit-2929 - [0:0] :limit-293 - [0:0] +:limit-2930 - [0:0] +:limit-2931 - [0:0] +:limit-2932 - [0:0] +:limit-2933 - [0:0] +:limit-2934 - [0:0] +:limit-2935 - [0:0] +:limit-2936 - [0:0] +:limit-2937 - [0:0] +:limit-2938 - [0:0] +:limit-2939 - [0:0] :limit-294 - [0:0] +:limit-2940 - [0:0] +:limit-2941 - [0:0] +:limit-2942 - [0:0] +:limit-2943 - [0:0] +:limit-2944 - [0:0] +:limit-2945 - [0:0] +:limit-2946 - [0:0] +:limit-2947 - [0:0] +:limit-2948 - [0:0] +:limit-2949 - [0:0] :limit-295 - [0:0] +:limit-2950 - [0:0] +:limit-2951 - [0:0] +:limit-2952 - [0:0] +:limit-2953 - [0:0] +:limit-2954 - [0:0] +:limit-2955 - [0:0] +:limit-2956 - [0:0] +:limit-2957 - [0:0] +:limit-2958 - [0:0] :limit-296 - [0:0] +:limit-2960 - [0:0] +:limit-2961 - [0:0] +:limit-2962 - [0:0] +:limit-2963 - [0:0] +:limit-2964 - [0:0] +:limit-2966 - [0:0] +:limit-2967 - [0:0] +:limit-2968 - [0:0] +:limit-2969 - [0:0] :limit-297 - [0:0] +:limit-2970 - [0:0] +:limit-2971 - [0:0] +:limit-2972 - [0:0] +:limit-2973 - [0:0] +:limit-2974 - [0:0] +:limit-2975 - [0:0] +:limit-2976 - [0:0] +:limit-2977 - [0:0] +:limit-2978 - [0:0] :limit-298 - [0:0] +:limit-2980 - [0:0] +:limit-2981 - [0:0] +:limit-2982 - [0:0] +:limit-2983 - [0:0] +:limit-2984 - [0:0] +:limit-2986 - [0:0] +:limit-2987 - [0:0] +:limit-2988 - [0:0] +:limit-2989 - [0:0] :limit-299 - [0:0] +:limit-2990 - [0:0] +:limit-2991 - [0:0] +:limit-2992 - [0:0] +:limit-2993 - [0:0] +:limit-2994 - [0:0] +:limit-2995 - [0:0] +:limit-2996 - [0:0] +:limit-2997 - [0:0] +:limit-2998 - [0:0] :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] +:limit-3000 - [0:0] +:limit-3001 - [0:0] +:limit-3002 - [0:0] +:limit-3003 - [0:0] +:limit-3004 - [0:0] +:limit-3006 - [0:0] +:limit-3007 - [0:0] +:limit-3008 - [0:0] +:limit-3009 - [0:0] :limit-301 - [0:0] +:limit-3010 - [0:0] +:limit-3011 - [0:0] +:limit-3012 - [0:0] +:limit-3013 - [0:0] +:limit-3014 - [0:0] +:limit-3015 - [0:0] +:limit-3016 - [0:0] +:limit-3017 - [0:0] +:limit-3018 - [0:0] :limit-302 - [0:0] +:limit-3020 - [0:0] +:limit-3021 - [0:0] +:limit-3022 - [0:0] +:limit-3023 - [0:0] +:limit-3024 - [0:0] +:limit-3026 - [0:0] +:limit-3027 - [0:0] +:limit-3028 - [0:0] +:limit-3029 - [0:0] :limit-303 - [0:0] +:limit-3030 - [0:0] +:limit-3031 - [0:0] +:limit-3032 - [0:0] +:limit-3033 - [0:0] +:limit-3034 - [0:0] +:limit-3035 - [0:0] +:limit-3036 - [0:0] +:limit-3037 - [0:0] +:limit-3038 - [0:0] +:limit-3039 - [0:0] :limit-304 - [0:0] +:limit-3040 - [0:0] +:limit-3041 - [0:0] +:limit-3042 - [0:0] +:limit-3043 - [0:0] +:limit-3044 - [0:0] +:limit-3045 - [0:0] +:limit-3046 - [0:0] +:limit-3047 - [0:0] +:limit-3048 - [0:0] :limit-305 - [0:0] +:limit-3050 - [0:0] +:limit-3051 - [0:0] +:limit-3052 - [0:0] +:limit-3053 - [0:0] +:limit-3054 - [0:0] +:limit-3056 - [0:0] +:limit-3057 - [0:0] +:limit-3058 - [0:0] +:limit-3059 - [0:0] :limit-306 - [0:0] +:limit-3060 - [0:0] +:limit-3061 - [0:0] +:limit-3062 - [0:0] +:limit-3063 - [0:0] +:limit-3064 - [0:0] +:limit-3065 - [0:0] +:limit-3066 - [0:0] +:limit-3067 - [0:0] +:limit-3068 - [0:0] :limit-307 - [0:0] +:limit-3070 - [0:0] +:limit-3071 - [0:0] +:limit-3072 - [0:0] +:limit-3073 - [0:0] +:limit-3074 - [0:0] +:limit-3076 - [0:0] +:limit-3077 - [0:0] +:limit-3078 - [0:0] +:limit-3079 - [0:0] :limit-308 - [0:0] +:limit-3080 - [0:0] +:limit-3081 - [0:0] +:limit-3082 - [0:0] +:limit-3083 - [0:0] +:limit-3084 - [0:0] +:limit-3085 - [0:0] +:limit-3086 - [0:0] +:limit-3087 - [0:0] +:limit-3088 - [0:0] :limit-309 - [0:0] +:limit-3090 - [0:0] +:limit-3091 - [0:0] +:limit-3092 - [0:0] +:limit-3093 - [0:0] +:limit-3094 - [0:0] +:limit-3096 - [0:0] +:limit-3097 - [0:0] +:limit-3098 - [0:0] +:limit-3099 - [0:0] :limit-31 - [0:0] :limit-310 - [0:0] +:limit-3100 - [0:0] +:limit-3101 - [0:0] +:limit-3102 - [0:0] +:limit-3103 - [0:0] +:limit-3104 - [0:0] +:limit-3105 - [0:0] +:limit-3106 - [0:0] +:limit-3107 - [0:0] +:limit-3108 - [0:0] :limit-311 - [0:0] +:limit-3110 - [0:0] +:limit-3111 - [0:0] +:limit-3112 - [0:0] +:limit-3113 - [0:0] +:limit-3114 - [0:0] +:limit-3116 - [0:0] +:limit-3117 - [0:0] +:limit-3118 - [0:0] +:limit-3119 - [0:0] :limit-312 - [0:0] +:limit-3120 - [0:0] +:limit-3121 - [0:0] +:limit-3122 - [0:0] +:limit-3123 - [0:0] +:limit-3124 - [0:0] +:limit-3125 - [0:0] +:limit-3126 - [0:0] +:limit-3127 - [0:0] +:limit-3128 - [0:0] +:limit-3129 - [0:0] :limit-313 - [0:0] +:limit-3130 - [0:0] +:limit-3131 - [0:0] +:limit-3132 - [0:0] +:limit-3133 - [0:0] +:limit-3134 - [0:0] +:limit-3135 - [0:0] +:limit-3136 - [0:0] +:limit-3137 - [0:0] +:limit-3138 - [0:0] :limit-314 - [0:0] +:limit-3140 - [0:0] +:limit-3141 - [0:0] +:limit-3142 - [0:0] +:limit-3143 - [0:0] +:limit-3144 - [0:0] +:limit-3146 - [0:0] +:limit-3147 - [0:0] +:limit-3148 - [0:0] +:limit-3149 - [0:0] :limit-315 - [0:0] +:limit-3150 - [0:0] +:limit-3151 - [0:0] +:limit-3152 - [0:0] +:limit-3153 - [0:0] +:limit-3154 - [0:0] +:limit-3155 - [0:0] +:limit-3156 - [0:0] +:limit-3157 - [0:0] +:limit-3158 - [0:0] :limit-316 - [0:0] +:limit-3160 - [0:0] +:limit-3161 - [0:0] +:limit-3162 - [0:0] +:limit-3163 - [0:0] +:limit-3164 - [0:0] +:limit-3166 - [0:0] +:limit-3167 - [0:0] +:limit-3168 - [0:0] +:limit-3169 - [0:0] :limit-317 - [0:0] +:limit-3170 - [0:0] +:limit-3171 - [0:0] +:limit-3172 - [0:0] +:limit-3173 - [0:0] +:limit-3174 - [0:0] +:limit-3175 - [0:0] +:limit-3176 - [0:0] +:limit-3177 - [0:0] +:limit-3178 - [0:0] :limit-318 - [0:0] +:limit-3180 - [0:0] +:limit-3181 - [0:0] +:limit-3182 - [0:0] +:limit-3183 - [0:0] +:limit-3184 - [0:0] +:limit-3186 - [0:0] +:limit-3187 - [0:0] +:limit-3188 - [0:0] +:limit-3189 - [0:0] :limit-319 - [0:0] +:limit-3190 - [0:0] +:limit-3191 - [0:0] +:limit-3192 - [0:0] +:limit-3193 - [0:0] +:limit-3194 - [0:0] +:limit-3195 - [0:0] +:limit-3196 - [0:0] +:limit-3197 - [0:0] +:limit-3198 - [0:0] :limit-32 - [0:0] :limit-320 - [0:0] +:limit-3200 - [0:0] +:limit-3201 - [0:0] +:limit-3202 - [0:0] +:limit-3203 - [0:0] +:limit-3204 - [0:0] +:limit-3206 - [0:0] +:limit-3207 - [0:0] +:limit-3208 - [0:0] +:limit-3209 - [0:0] :limit-321 - [0:0] +:limit-3210 - [0:0] +:limit-3211 - [0:0] +:limit-3212 - [0:0] +:limit-3213 - [0:0] +:limit-3214 - [0:0] +:limit-3215 - [0:0] +:limit-3216 - [0:0] +:limit-3217 - [0:0] +:limit-3218 - [0:0] +:limit-3219 - [0:0] :limit-322 - [0:0] +:limit-3220 - [0:0] +:limit-3221 - [0:0] +:limit-3222 - [0:0] +:limit-3223 - [0:0] +:limit-3224 - [0:0] +:limit-3225 - [0:0] +:limit-3226 - [0:0] +:limit-3227 - [0:0] +:limit-3228 - [0:0] :limit-323 - [0:0] +:limit-3230 - [0:0] +:limit-3231 - [0:0] +:limit-3232 - [0:0] +:limit-3233 - [0:0] +:limit-3234 - [0:0] +:limit-3236 - [0:0] +:limit-3237 - [0:0] +:limit-3238 - [0:0] +:limit-3239 - [0:0] :limit-324 - [0:0] +:limit-3240 - [0:0] +:limit-3241 - [0:0] +:limit-3242 - [0:0] +:limit-3243 - [0:0] +:limit-3244 - [0:0] +:limit-3245 - [0:0] +:limit-3246 - [0:0] +:limit-3247 - [0:0] +:limit-3248 - [0:0] :limit-325 - [0:0] +:limit-3250 - [0:0] +:limit-3251 - [0:0] +:limit-3252 - [0:0] +:limit-3253 - [0:0] +:limit-3254 - [0:0] +:limit-3256 - [0:0] +:limit-3257 - [0:0] +:limit-3258 - [0:0] +:limit-3259 - [0:0] :limit-326 - [0:0] +:limit-3260 - [0:0] +:limit-3261 - [0:0] +:limit-3262 - [0:0] +:limit-3263 - [0:0] +:limit-3264 - [0:0] +:limit-3265 - [0:0] +:limit-3266 - [0:0] +:limit-3267 - [0:0] +:limit-3268 - [0:0] :limit-327 - [0:0] +:limit-3270 - [0:0] +:limit-3271 - [0:0] +:limit-3272 - [0:0] +:limit-3273 - [0:0] +:limit-3274 - [0:0] +:limit-3276 - [0:0] +:limit-3277 - [0:0] +:limit-3278 - [0:0] +:limit-3279 - [0:0] :limit-328 - [0:0] +:limit-3280 - [0:0] +:limit-3281 - [0:0] +:limit-3282 - [0:0] +:limit-3283 - [0:0] +:limit-3284 - [0:0] +:limit-3285 - [0:0] +:limit-3286 - [0:0] +:limit-3287 - [0:0] +:limit-3288 - [0:0] :limit-329 - [0:0] +:limit-3290 - [0:0] +:limit-3291 - [0:0] +:limit-3292 - [0:0] +:limit-3293 - [0:0] +:limit-3294 - [0:0] +:limit-3296 - [0:0] +:limit-3297 - [0:0] +:limit-3298 - [0:0] +:limit-3299 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] +:limit-3300 - [0:0] +:limit-3301 - [0:0] +:limit-3302 - [0:0] +:limit-3303 - [0:0] +:limit-3304 - [0:0] +:limit-3305 - [0:0] +:limit-3306 - [0:0] +:limit-3307 - [0:0] +:limit-3308 - [0:0] +:limit-3309 - [0:0] :limit-331 - [0:0] +:limit-3310 - [0:0] +:limit-3311 - [0:0] +:limit-3312 - [0:0] +:limit-3313 - [0:0] +:limit-3314 - [0:0] +:limit-3315 - [0:0] +:limit-3316 - [0:0] +:limit-3317 - [0:0] +:limit-3318 - [0:0] :limit-332 - [0:0] +:limit-3320 - [0:0] +:limit-3321 - [0:0] +:limit-3322 - [0:0] +:limit-3323 - [0:0] +:limit-3324 - [0:0] +:limit-3326 - [0:0] +:limit-3327 - [0:0] +:limit-3328 - [0:0] +:limit-3329 - [0:0] :limit-333 - [0:0] +:limit-3330 - [0:0] +:limit-3331 - [0:0] +:limit-3332 - [0:0] +:limit-3333 - [0:0] +:limit-3334 - [0:0] +:limit-3335 - [0:0] +:limit-3336 - [0:0] +:limit-3337 - [0:0] +:limit-3338 - [0:0] :limit-334 - [0:0] +:limit-3340 - [0:0] +:limit-3341 - [0:0] +:limit-3342 - [0:0] +:limit-3343 - [0:0] +:limit-3344 - [0:0] +:limit-3346 - [0:0] +:limit-3347 - [0:0] +:limit-3348 - [0:0] +:limit-3349 - [0:0] :limit-335 - [0:0] +:limit-3350 - [0:0] +:limit-3351 - [0:0] +:limit-3352 - [0:0] +:limit-3353 - [0:0] +:limit-3354 - [0:0] +:limit-3355 - [0:0] +:limit-3356 - [0:0] +:limit-3357 - [0:0] +:limit-3358 - [0:0] :limit-336 - [0:0] +:limit-3360 - [0:0] +:limit-3361 - [0:0] +:limit-3362 - [0:0] +:limit-3363 - [0:0] +:limit-3364 - [0:0] +:limit-3366 - [0:0] +:limit-3367 - [0:0] +:limit-3368 - [0:0] +:limit-3369 - [0:0] :limit-337 - [0:0] +:limit-3370 - [0:0] +:limit-3371 - [0:0] +:limit-3372 - [0:0] +:limit-3373 - [0:0] +:limit-3374 - [0:0] +:limit-3375 - [0:0] +:limit-3376 - [0:0] +:limit-3377 - [0:0] +:limit-3378 - [0:0] :limit-338 - [0:0] +:limit-3380 - [0:0] +:limit-3381 - [0:0] +:limit-3382 - [0:0] +:limit-3383 - [0:0] +:limit-3384 - [0:0] +:limit-3386 - [0:0] +:limit-3387 - [0:0] +:limit-3388 - [0:0] +:limit-3389 - [0:0] :limit-339 - [0:0] +:limit-3390 - [0:0] +:limit-3391 - [0:0] +:limit-3392 - [0:0] +:limit-3393 - [0:0] +:limit-3394 - [0:0] +:limit-3395 - [0:0] +:limit-3396 - [0:0] +:limit-3397 - [0:0] +:limit-3398 - [0:0] +:limit-3399 - [0:0] :limit-34 - [0:0] :limit-340 - [0:0] +:limit-3400 - [0:0] +:limit-3401 - [0:0] +:limit-3402 - [0:0] +:limit-3403 - [0:0] +:limit-3404 - [0:0] +:limit-3405 - [0:0] +:limit-3406 - [0:0] +:limit-3407 - [0:0] +:limit-3408 - [0:0] :limit-341 - [0:0] +:limit-3410 - [0:0] +:limit-3411 - [0:0] +:limit-3412 - [0:0] +:limit-3413 - [0:0] +:limit-3414 - [0:0] +:limit-3416 - [0:0] +:limit-3417 - [0:0] +:limit-3418 - [0:0] +:limit-3419 - [0:0] :limit-342 - [0:0] +:limit-3420 - [0:0] +:limit-3421 - [0:0] +:limit-3422 - [0:0] +:limit-3423 - [0:0] +:limit-3424 - [0:0] +:limit-3425 - [0:0] +:limit-3426 - [0:0] +:limit-3427 - [0:0] +:limit-3428 - [0:0] :limit-343 - [0:0] +:limit-3430 - [0:0] +:limit-3431 - [0:0] +:limit-3432 - [0:0] +:limit-3433 - [0:0] +:limit-3434 - [0:0] +:limit-3436 - [0:0] +:limit-3437 - [0:0] +:limit-3438 - [0:0] +:limit-3439 - [0:0] :limit-344 - [0:0] +:limit-3440 - [0:0] +:limit-3441 - [0:0] +:limit-3442 - [0:0] +:limit-3443 - [0:0] +:limit-3444 - [0:0] +:limit-3445 - [0:0] +:limit-3446 - [0:0] +:limit-3447 - [0:0] +:limit-3448 - [0:0] :limit-345 - [0:0] +:limit-3450 - [0:0] +:limit-3451 - [0:0] +:limit-3452 - [0:0] +:limit-3453 - [0:0] +:limit-3454 - [0:0] +:limit-3456 - [0:0] +:limit-3457 - [0:0] +:limit-3458 - [0:0] +:limit-3459 - [0:0] :limit-346 - [0:0] +:limit-3460 - [0:0] +:limit-3461 - [0:0] +:limit-3462 - [0:0] +:limit-3463 - [0:0] +:limit-3464 - [0:0] +:limit-3465 - [0:0] +:limit-3466 - [0:0] +:limit-3467 - [0:0] +:limit-3468 - [0:0] :limit-347 - [0:0] +:limit-3470 - [0:0] +:limit-3471 - [0:0] +:limit-3472 - [0:0] +:limit-3473 - [0:0] +:limit-3474 - [0:0] +:limit-3476 - [0:0] +:limit-3477 - [0:0] +:limit-3478 - [0:0] +:limit-3479 - [0:0] :limit-348 - [0:0] +:limit-3480 - [0:0] +:limit-3481 - [0:0] +:limit-3482 - [0:0] +:limit-3483 - [0:0] +:limit-3484 - [0:0] +:limit-3485 - [0:0] +:limit-3486 - [0:0] +:limit-3487 - [0:0] +:limit-3488 - [0:0] +:limit-3489 - [0:0] :limit-349 - [0:0] +:limit-3490 - [0:0] +:limit-3491 - [0:0] +:limit-3492 - [0:0] +:limit-3493 - [0:0] +:limit-3494 - [0:0] +:limit-3495 - [0:0] +:limit-3496 - [0:0] +:limit-3497 - [0:0] +:limit-3498 - [0:0] :limit-35 - [0:0] :limit-350 - [0:0] +:limit-3500 - [0:0] +:limit-3501 - [0:0] +:limit-3502 - [0:0] +:limit-3503 - [0:0] +:limit-3504 - [0:0] +:limit-3506 - [0:0] +:limit-3507 - [0:0] +:limit-3508 - [0:0] +:limit-3509 - [0:0] :limit-351 - [0:0] +:limit-3510 - [0:0] +:limit-3511 - [0:0] +:limit-3512 - [0:0] +:limit-3513 - [0:0] +:limit-3514 - [0:0] +:limit-3515 - [0:0] +:limit-3516 - [0:0] +:limit-3517 - [0:0] +:limit-3518 - [0:0] :limit-352 - [0:0] +:limit-3520 - [0:0] +:limit-3521 - [0:0] +:limit-3522 - [0:0] +:limit-3523 - [0:0] +:limit-3524 - [0:0] +:limit-3526 - [0:0] +:limit-3527 - [0:0] +:limit-3528 - [0:0] +:limit-3529 - [0:0] :limit-353 - [0:0] +:limit-3530 - [0:0] +:limit-3531 - [0:0] +:limit-3532 - [0:0] +:limit-3533 - [0:0] +:limit-3534 - [0:0] +:limit-3535 - [0:0] +:limit-3536 - [0:0] +:limit-3537 - [0:0] +:limit-3538 - [0:0] :limit-354 - [0:0] +:limit-3540 - [0:0] +:limit-3541 - [0:0] +:limit-3542 - [0:0] +:limit-3543 - [0:0] +:limit-3544 - [0:0] +:limit-3546 - [0:0] +:limit-3547 - [0:0] +:limit-3548 - [0:0] +:limit-3549 - [0:0] :limit-355 - [0:0] +:limit-3550 - [0:0] +:limit-3551 - [0:0] +:limit-3552 - [0:0] +:limit-3553 - [0:0] +:limit-3554 - [0:0] +:limit-3555 - [0:0] +:limit-3556 - [0:0] +:limit-3557 - [0:0] +:limit-3558 - [0:0] :limit-356 - [0:0] +:limit-3560 - [0:0] +:limit-3561 - [0:0] +:limit-3562 - [0:0] +:limit-3563 - [0:0] +:limit-3564 - [0:0] +:limit-3566 - [0:0] +:limit-3567 - [0:0] +:limit-3568 - [0:0] +:limit-3569 - [0:0] :limit-357 - [0:0] +:limit-3570 - [0:0] +:limit-3571 - [0:0] +:limit-3572 - [0:0] +:limit-3573 - [0:0] +:limit-3574 - [0:0] +:limit-3575 - [0:0] +:limit-3576 - [0:0] +:limit-3577 - [0:0] +:limit-3578 - [0:0] +:limit-3579 - [0:0] :limit-358 - [0:0] +:limit-3580 - [0:0] +:limit-3581 - [0:0] +:limit-3582 - [0:0] +:limit-3583 - [0:0] +:limit-3584 - [0:0] +:limit-3585 - [0:0] +:limit-3586 - [0:0] +:limit-3587 - [0:0] +:limit-3588 - [0:0] :limit-359 - [0:0] +:limit-3590 - [0:0] +:limit-3591 - [0:0] +:limit-3592 - [0:0] +:limit-3593 - [0:0] +:limit-3594 - [0:0] +:limit-3596 - [0:0] +:limit-3597 - [0:0] +:limit-3598 - [0:0] +:limit-3599 - [0:0] :limit-36 - [0:0] :limit-360 - [0:0] +:limit-3600 - [0:0] +:limit-3601 - [0:0] +:limit-3602 - [0:0] +:limit-3603 - [0:0] +:limit-3604 - [0:0] +:limit-3605 - [0:0] +:limit-3606 - [0:0] +:limit-3607 - [0:0] +:limit-3608 - [0:0] :limit-361 - [0:0] +:limit-3610 - [0:0] +:limit-3611 - [0:0] +:limit-3612 - [0:0] +:limit-3613 - [0:0] +:limit-3614 - [0:0] +:limit-3616 - [0:0] +:limit-3617 - [0:0] +:limit-3618 - [0:0] +:limit-3619 - [0:0] :limit-362 - [0:0] +:limit-3620 - [0:0] +:limit-3621 - [0:0] +:limit-3622 - [0:0] +:limit-3623 - [0:0] +:limit-3624 - [0:0] +:limit-3625 - [0:0] +:limit-3626 - [0:0] +:limit-3627 - [0:0] +:limit-3628 - [0:0] :limit-363 - [0:0] +:limit-3630 - [0:0] +:limit-3631 - [0:0] +:limit-3632 - [0:0] +:limit-3633 - [0:0] +:limit-3634 - [0:0] +:limit-3636 - [0:0] +:limit-3637 - [0:0] +:limit-3638 - [0:0] +:limit-3639 - [0:0] :limit-364 - [0:0] +:limit-3640 - [0:0] +:limit-3641 - [0:0] +:limit-3642 - [0:0] +:limit-3643 - [0:0] +:limit-3644 - [0:0] +:limit-3645 - [0:0] +:limit-3646 - [0:0] +:limit-3647 - [0:0] +:limit-3648 - [0:0] :limit-365 - [0:0] +:limit-3650 - [0:0] +:limit-3651 - [0:0] +:limit-3652 - [0:0] +:limit-3653 - [0:0] +:limit-3654 - [0:0] +:limit-3656 - [0:0] +:limit-3657 - [0:0] +:limit-3658 - [0:0] +:limit-3659 - [0:0] :limit-366 - [0:0] +:limit-3660 - [0:0] +:limit-3661 - [0:0] +:limit-3662 - [0:0] +:limit-3663 - [0:0] +:limit-3664 - [0:0] +:limit-3665 - [0:0] +:limit-3666 - [0:0] +:limit-3667 - [0:0] +:limit-3668 - [0:0] +:limit-3669 - [0:0] :limit-367 - [0:0] +:limit-3670 - [0:0] +:limit-3671 - [0:0] +:limit-3672 - [0:0] +:limit-3673 - [0:0] +:limit-3674 - [0:0] +:limit-3675 - [0:0] +:limit-3676 - [0:0] +:limit-3677 - [0:0] +:limit-3678 - [0:0] :limit-368 - [0:0] +:limit-3680 - [0:0] +:limit-3681 - [0:0] +:limit-3682 - [0:0] +:limit-3683 - [0:0] +:limit-3684 - [0:0] +:limit-3686 - [0:0] +:limit-3687 - [0:0] +:limit-3688 - [0:0] +:limit-3689 - [0:0] :limit-369 - [0:0] +:limit-3690 - [0:0] +:limit-3691 - [0:0] +:limit-3692 - [0:0] +:limit-3693 - [0:0] +:limit-3694 - [0:0] +:limit-3695 - [0:0] +:limit-3696 - [0:0] +:limit-3697 - [0:0] +:limit-3698 - [0:0] :limit-37 - [0:0] :limit-370 - [0:0] +:limit-3700 - [0:0] +:limit-3701 - [0:0] +:limit-3702 - [0:0] +:limit-3703 - [0:0] +:limit-3704 - [0:0] +:limit-3706 - [0:0] +:limit-3707 - [0:0] +:limit-3708 - [0:0] +:limit-3709 - [0:0] :limit-371 - [0:0] +:limit-3710 - [0:0] +:limit-3711 - [0:0] +:limit-3712 - [0:0] +:limit-3713 - [0:0] +:limit-3714 - [0:0] +:limit-3715 - [0:0] +:limit-3716 - [0:0] +:limit-3717 - [0:0] +:limit-3718 - [0:0] :limit-372 - [0:0] +:limit-3720 - [0:0] +:limit-3721 - [0:0] +:limit-3722 - [0:0] +:limit-3723 - [0:0] +:limit-3724 - [0:0] +:limit-3726 - [0:0] +:limit-3727 - [0:0] +:limit-3728 - [0:0] +:limit-3729 - [0:0] :limit-373 - [0:0] +:limit-3730 - [0:0] +:limit-3731 - [0:0] +:limit-3732 - [0:0] +:limit-3733 - [0:0] +:limit-3734 - [0:0] +:limit-3735 - [0:0] +:limit-3736 - [0:0] +:limit-3737 - [0:0] +:limit-3738 - [0:0] :limit-374 - [0:0] +:limit-3740 - [0:0] +:limit-3741 - [0:0] +:limit-3742 - [0:0] +:limit-3743 - [0:0] +:limit-3744 - [0:0] +:limit-3746 - [0:0] +:limit-3747 - [0:0] +:limit-3748 - [0:0] +:limit-3749 - [0:0] :limit-375 - [0:0] +:limit-3750 - [0:0] +:limit-3751 - [0:0] +:limit-3752 - [0:0] +:limit-3753 - [0:0] +:limit-3754 - [0:0] +:limit-3755 - [0:0] +:limit-3756 - [0:0] +:limit-3757 - [0:0] +:limit-3758 - [0:0] +:limit-3759 - [0:0] :limit-376 - [0:0] +:limit-3760 - [0:0] +:limit-3761 - [0:0] +:limit-3762 - [0:0] +:limit-3763 - [0:0] +:limit-3764 - [0:0] +:limit-3765 - [0:0] +:limit-3766 - [0:0] +:limit-3767 - [0:0] +:limit-3768 - [0:0] :limit-377 - [0:0] +:limit-3770 - [0:0] +:limit-3771 - [0:0] +:limit-3772 - [0:0] +:limit-3773 - [0:0] +:limit-3774 - [0:0] +:limit-3776 - [0:0] +:limit-3777 - [0:0] +:limit-3778 - [0:0] +:limit-3779 - [0:0] :limit-378 - [0:0] +:limit-3780 - [0:0] +:limit-3781 - [0:0] +:limit-3782 - [0:0] +:limit-3783 - [0:0] +:limit-3784 - [0:0] +:limit-3785 - [0:0] +:limit-3786 - [0:0] +:limit-3787 - [0:0] +:limit-3788 - [0:0] :limit-379 - [0:0] +:limit-3790 - [0:0] +:limit-3791 - [0:0] +:limit-3792 - [0:0] +:limit-3793 - [0:0] +:limit-3794 - [0:0] +:limit-3796 - [0:0] +:limit-3797 - [0:0] +:limit-3798 - [0:0] +:limit-3799 - [0:0] :limit-38 - [0:0] :limit-380 - [0:0] +:limit-3800 - [0:0] +:limit-3801 - [0:0] +:limit-3802 - [0:0] +:limit-3803 - [0:0] +:limit-3804 - [0:0] +:limit-3805 - [0:0] +:limit-3806 - [0:0] +:limit-3807 - [0:0] +:limit-3808 - [0:0] :limit-381 - [0:0] +:limit-3810 - [0:0] +:limit-3811 - [0:0] +:limit-3812 - [0:0] +:limit-3813 - [0:0] +:limit-3814 - [0:0] +:limit-3816 - [0:0] +:limit-3817 - [0:0] +:limit-3818 - [0:0] +:limit-3819 - [0:0] :limit-382 - [0:0] +:limit-3820 - [0:0] +:limit-3821 - [0:0] +:limit-3822 - [0:0] +:limit-3823 - [0:0] +:limit-3824 - [0:0] +:limit-3825 - [0:0] +:limit-3826 - [0:0] +:limit-3827 - [0:0] +:limit-3828 - [0:0] :limit-383 - [0:0] +:limit-3830 - [0:0] +:limit-3831 - [0:0] +:limit-3832 - [0:0] +:limit-3833 - [0:0] +:limit-3834 - [0:0] +:limit-3836 - [0:0] +:limit-3837 - [0:0] +:limit-3838 - [0:0] +:limit-3839 - [0:0] :limit-384 - [0:0] +:limit-3840 - [0:0] +:limit-3841 - [0:0] +:limit-3842 - [0:0] +:limit-3843 - [0:0] +:limit-3844 - [0:0] +:limit-3845 - [0:0] +:limit-3846 - [0:0] +:limit-3847 - [0:0] +:limit-3848 - [0:0] +:limit-3849 - [0:0] :limit-385 - [0:0] +:limit-3850 - [0:0] +:limit-3851 - [0:0] +:limit-3852 - [0:0] +:limit-3853 - [0:0] +:limit-3854 - [0:0] +:limit-3855 - [0:0] +:limit-3856 - [0:0] +:limit-3857 - [0:0] +:limit-3858 - [0:0] +:limit-3859 - [0:0] :limit-386 - [0:0] +:limit-3860 - [0:0] +:limit-3861 - [0:0] +:limit-3862 - [0:0] +:limit-3863 - [0:0] +:limit-3864 - [0:0] +:limit-3865 - [0:0] +:limit-3866 - [0:0] +:limit-3867 - [0:0] +:limit-3868 - [0:0] +:limit-3869 - [0:0] :limit-387 - [0:0] +:limit-3870 - [0:0] +:limit-3871 - [0:0] +:limit-3872 - [0:0] +:limit-3873 - [0:0] +:limit-3874 - [0:0] +:limit-3875 - [0:0] +:limit-3876 - [0:0] +:limit-3877 - [0:0] +:limit-3878 - [0:0] +:limit-3879 - [0:0] :limit-388 - [0:0] +:limit-3880 - [0:0] +:limit-3881 - [0:0] +:limit-3882 - [0:0] +:limit-3883 - [0:0] +:limit-3884 - [0:0] +:limit-3885 - [0:0] +:limit-3886 - [0:0] +:limit-3887 - [0:0] +:limit-3888 - [0:0] +:limit-3889 - [0:0] :limit-389 - [0:0] +:limit-3890 - [0:0] +:limit-3891 - [0:0] +:limit-3892 - [0:0] +:limit-3893 - [0:0] +:limit-3894 - [0:0] +:limit-3895 - [0:0] +:limit-3896 - [0:0] +:limit-3897 - [0:0] +:limit-3898 - [0:0] +:limit-3899 - [0:0] :limit-39 - [0:0] :limit-390 - [0:0] +:limit-3900 - [0:0] +:limit-3901 - [0:0] +:limit-3902 - [0:0] +:limit-3903 - [0:0] :limit-391 - [0:0] :limit-392 - [0:0] :limit-393 - [0:0] @@ -2049,9 +3365,11 @@ :limit-651 - [0:0] :limit-652 - [0:0] :limit-653 - [0:0] +:limit-654 - [0:0] :limit-655 - [0:0] :limit-656 - [0:0] :limit-657 - [0:0] +:limit-658 - [0:0] :limit-659 - [0:0] :limit-66 - [0:0] :limit-660 - [0:0] @@ -2065,9 +3383,11 @@ :limit-668 - [0:0] :limit-669 - [0:0] :limit-67 - [0:0] +:limit-670 - [0:0] :limit-671 - [0:0] :limit-672 - [0:0] :limit-673 - [0:0] +:limit-674 - [0:0] :limit-675 - [0:0] :limit-676 - [0:0] :limit-677 - [0:0] @@ -2080,10 +3400,12 @@ :limit-683 - [0:0] :limit-684 - [0:0] :limit-685 - [0:0] +:limit-686 - [0:0] :limit-687 - [0:0] :limit-688 - [0:0] :limit-689 - [0:0] :limit-69 - [0:0] +:limit-690 - [0:0] :limit-691 - [0:0] :limit-692 - [0:0] :limit-693 - [0:0] @@ -2097,9 +3419,11 @@ :limit-70 - [0:0] :limit-700 - [0:0] :limit-701 - [0:0] +:limit-702 - [0:0] :limit-703 - [0:0] :limit-704 - [0:0] :limit-705 - [0:0] +:limit-706 - [0:0] :limit-707 - [0:0] :limit-708 - [0:0] :limit-709 - [0:0] @@ -2121,10 +3445,12 @@ :limit-723 - [0:0] :limit-724 - [0:0] :limit-725 - [0:0] +:limit-726 - [0:0] :limit-727 - [0:0] :limit-728 - [0:0] :limit-729 - [0:0] :limit-73 - [0:0] +:limit-730 - [0:0] :limit-731 - [0:0] :limit-732 - [0:0] :limit-733 - [0:0] @@ -2137,9 +3463,11 @@ :limit-74 - [0:0] :limit-740 - [0:0] :limit-741 - [0:0] +:limit-742 - [0:0] :limit-743 - [0:0] :limit-744 - [0:0] :limit-745 - [0:0] +:limit-746 - [0:0] :limit-747 - [0:0] :limit-748 - [0:0] :limit-749 - [0:0] @@ -2152,10 +3480,12 @@ :limit-755 - [0:0] :limit-756 - [0:0] :limit-757 - [0:0] +:limit-758 - [0:0] :limit-759 - [0:0] :limit-76 - [0:0] :limit-760 - [0:0] :limit-761 - [0:0] +:limit-762 - [0:0] :limit-763 - [0:0] :limit-764 - [0:0] :limit-765 - [0:0] @@ -2168,9 +3498,11 @@ :limit-771 - [0:0] :limit-772 - [0:0] :limit-773 - [0:0] +:limit-774 - [0:0] :limit-775 - [0:0] :limit-776 - [0:0] :limit-777 - [0:0] +:limit-778 - [0:0] :limit-779 - [0:0] :limit-78 - [0:0] :limit-780 - [0:0] @@ -2192,11 +3524,13 @@ :limit-795 - [0:0] :limit-796 - [0:0] :limit-797 - [0:0] +:limit-798 - [0:0] :limit-799 - [0:0] :limit-8 - [0:0] :limit-80 - [0:0] :limit-800 - [0:0] :limit-801 - [0:0] +:limit-802 - [0:0] :limit-803 - [0:0] :limit-804 - [0:0] :limit-805 - [0:0] @@ -2209,9 +3543,11 @@ :limit-811 - [0:0] :limit-812 - [0:0] :limit-813 - [0:0] +:limit-814 - [0:0] :limit-815 - [0:0] :limit-816 - [0:0] :limit-817 - [0:0] +:limit-818 - [0:0] :limit-819 - [0:0] :limit-82 - [0:0] :limit-820 - [0:0] @@ -2225,9 +3561,11 @@ :limit-828 - [0:0] :limit-829 - [0:0] :limit-83 - [0:0] +:limit-830 - [0:0] :limit-831 - [0:0] :limit-832 - [0:0] :limit-833 - [0:0] +:limit-834 - [0:0] :limit-835 - [0:0] :limit-836 - [0:0] :limit-837 - [0:0] @@ -2240,10 +3578,12 @@ :limit-843 - [0:0] :limit-844 - [0:0] :limit-845 - [0:0] +:limit-846 - [0:0] :limit-847 - [0:0] :limit-848 - [0:0] :limit-849 - [0:0] :limit-85 - [0:0] +:limit-850 - [0:0] :limit-851 - [0:0] :limit-852 - [0:0] :limit-853 - [0:0] @@ -2265,9 +3605,11 @@ :limit-868 - [0:0] :limit-869 - [0:0] :limit-87 - [0:0] +:limit-870 - [0:0] :limit-871 - [0:0] :limit-872 - [0:0] :limit-873 - [0:0] +:limit-874 - [0:0] :limit-875 - [0:0] :limit-876 - [0:0] :limit-877 - [0:0] @@ -2280,10 +3622,12 @@ :limit-883 - [0:0] :limit-884 - [0:0] :limit-885 - [0:0] +:limit-886 - [0:0] :limit-887 - [0:0] :limit-888 - [0:0] :limit-889 - [0:0] :limit-89 - [0:0] +:limit-890 - [0:0] :limit-891 - [0:0] :limit-892 - [0:0] :limit-893 - [0:0] @@ -2297,9 +3641,11 @@ :limit-90 - [0:0] :limit-900 - [0:0] :limit-901 - [0:0] +:limit-902 - [0:0] :limit-903 - [0:0] :limit-904 - [0:0] :limit-905 - [0:0] +:limit-906 - [0:0] :limit-907 - [0:0] :limit-908 - [0:0] :limit-909 - [0:0] @@ -2312,10 +3658,12 @@ :limit-915 - [0:0] :limit-916 - [0:0] :limit-917 - [0:0] +:limit-918 - [0:0] :limit-919 - [0:0] :limit-92 - [0:0] :limit-920 - [0:0] :limit-921 - [0:0] +:limit-922 - [0:0] :limit-923 - [0:0] :limit-924 - [0:0] :limit-925 - [0:0] @@ -2337,9 +3685,11 @@ :limit-94 - [0:0] :limit-940 - [0:0] :limit-941 - [0:0] +:limit-942 - [0:0] :limit-943 - [0:0] :limit-944 - [0:0] :limit-945 - [0:0] +:limit-946 - [0:0] :limit-947 - [0:0] :limit-948 - [0:0] :limit-949 - [0:0] @@ -2352,10 +3702,12 @@ :limit-955 - [0:0] :limit-956 - [0:0] :limit-957 - [0:0] +:limit-958 - [0:0] :limit-959 - [0:0] :limit-96 - [0:0] :limit-960 - [0:0] :limit-961 - [0:0] +:limit-962 - [0:0] :limit-963 - [0:0] :limit-964 - [0:0] :limit-965 - [0:0] @@ -2368,9 +3720,11 @@ :limit-971 - [0:0] :limit-972 - [0:0] :limit-973 - [0:0] +:limit-974 - [0:0] :limit-975 - [0:0] :limit-976 - [0:0] :limit-977 - [0:0] +:limit-978 - [0:0] :limit-979 - [0:0] :limit-98 - [0:0] :limit-980 - [0:0] @@ -2384,9 +3738,11 @@ :limit-988 - [0:0] :limit-989 - [0:0] :limit-99 - [0:0] +:limit-990 - [0:0] :limit-991 - [0:0] :limit-992 - [0:0] :limit-993 - [0:0] +:limit-994 - [0:0] :limit-995 - [0:0] :limit-996 - [0:0] :limit-997 - [0:0] @@ -2395,6 +3751,9 @@ :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] +:logaccept-100 - [0:0] +:logaccept-101 - [0:0] +:logaccept-102 - [0:0] :logaccept-11 - [0:0] :logaccept-12 - [0:0] :logaccept-13 - [0:0] @@ -2444,10 +3803,54 @@ :logaccept-53 - [0:0] :logaccept-54 - [0:0] :logaccept-55 - [0:0] +:logaccept-56 - [0:0] +:logaccept-57 - [0:0] +:logaccept-58 - [0:0] +:logaccept-59 - [0:0] :logaccept-6 - [0:0] +:logaccept-60 - [0:0] +:logaccept-61 - [0:0] +:logaccept-62 - [0:0] +:logaccept-63 - [0:0] +:logaccept-64 - [0:0] +:logaccept-65 - [0:0] +:logaccept-66 - [0:0] +:logaccept-67 - [0:0] +:logaccept-68 - [0:0] +:logaccept-69 - [0:0] :logaccept-7 - [0:0] +:logaccept-70 - [0:0] +:logaccept-71 - [0:0] +:logaccept-72 - [0:0] +:logaccept-73 - [0:0] +:logaccept-74 - [0:0] +:logaccept-75 - [0:0] +:logaccept-76 - [0:0] +:logaccept-77 - [0:0] +:logaccept-78 - [0:0] +:logaccept-79 - [0:0] :logaccept-8 - [0:0] +:logaccept-80 - [0:0] +:logaccept-81 - [0:0] +:logaccept-82 - [0:0] +:logaccept-83 - [0:0] +:logaccept-84 - [0:0] +:logaccept-85 - [0:0] +:logaccept-86 - [0:0] +:logaccept-87 - [0:0] +:logaccept-88 - [0:0] +:logaccept-89 - [0:0] :logaccept-9 - [0:0] +:logaccept-90 - [0:0] +:logaccept-91 - [0:0] +:logaccept-92 - [0:0] +:logaccept-93 - [0:0] +:logaccept-94 - [0:0] +:logaccept-95 - [0:0] +:logaccept-96 - [0:0] +:logaccept-97 - [0:0] +:logaccept-98 - [0:0] +:logaccept-99 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] :logaccept-final-10 - [0:0] @@ -2521,22 +3924,164 @@ :logaccept-final-161 - [0:0] :logaccept-final-162 - [0:0] :logaccept-final-163 - [0:0] +:logaccept-final-164 - [0:0] +:logaccept-final-165 - [0:0] +:logaccept-final-166 - [0:0] +:logaccept-final-167 - [0:0] +:logaccept-final-168 - [0:0] +:logaccept-final-169 - [0:0] :logaccept-final-17 - [0:0] +:logaccept-final-170 - [0:0] +:logaccept-final-171 - [0:0] +:logaccept-final-172 - [0:0] +:logaccept-final-173 - [0:0] +:logaccept-final-174 - [0:0] +:logaccept-final-175 - [0:0] +:logaccept-final-176 - [0:0] +:logaccept-final-177 - [0:0] +:logaccept-final-178 - [0:0] +:logaccept-final-179 - [0:0] :logaccept-final-18 - [0:0] +:logaccept-final-180 - [0:0] +:logaccept-final-181 - [0:0] +:logaccept-final-182 - [0:0] +:logaccept-final-183 - [0:0] +:logaccept-final-184 - [0:0] +:logaccept-final-185 - [0:0] +:logaccept-final-186 - [0:0] +:logaccept-final-187 - [0:0] +:logaccept-final-188 - [0:0] +:logaccept-final-189 - [0:0] :logaccept-final-19 - [0:0] +:logaccept-final-190 - [0:0] +:logaccept-final-191 - [0:0] +:logaccept-final-192 - [0:0] +:logaccept-final-193 - [0:0] +:logaccept-final-194 - [0:0] +:logaccept-final-195 - [0:0] +:logaccept-final-196 - [0:0] +:logaccept-final-197 - [0:0] +:logaccept-final-198 - [0:0] +:logaccept-final-199 - [0:0] :logaccept-final-2 - [0:0] :logaccept-final-20 - [0:0] +:logaccept-final-200 - [0:0] +:logaccept-final-201 - [0:0] +:logaccept-final-202 - [0:0] +:logaccept-final-203 - [0:0] +:logaccept-final-204 - [0:0] +:logaccept-final-205 - [0:0] +:logaccept-final-206 - [0:0] +:logaccept-final-207 - [0:0] +:logaccept-final-208 - [0:0] +:logaccept-final-209 - [0:0] :logaccept-final-21 - [0:0] +:logaccept-final-210 - [0:0] +:logaccept-final-211 - [0:0] +:logaccept-final-212 - [0:0] +:logaccept-final-213 - [0:0] +:logaccept-final-214 - [0:0] +:logaccept-final-215 - [0:0] +:logaccept-final-216 - [0:0] +:logaccept-final-217 - [0:0] +:logaccept-final-218 - [0:0] +:logaccept-final-219 - [0:0] :logaccept-final-22 - [0:0] +:logaccept-final-220 - [0:0] +:logaccept-final-221 - [0:0] +:logaccept-final-222 - [0:0] +:logaccept-final-223 - [0:0] +:logaccept-final-224 - [0:0] +:logaccept-final-225 - [0:0] +:logaccept-final-226 - [0:0] +:logaccept-final-227 - [0:0] +:logaccept-final-228 - [0:0] +:logaccept-final-229 - [0:0] :logaccept-final-23 - [0:0] +:logaccept-final-230 - [0:0] +:logaccept-final-231 - [0:0] +:logaccept-final-232 - [0:0] +:logaccept-final-233 - [0:0] +:logaccept-final-234 - [0:0] +:logaccept-final-235 - [0:0] +:logaccept-final-236 - [0:0] +:logaccept-final-237 - [0:0] +:logaccept-final-238 - [0:0] +:logaccept-final-239 - [0:0] :logaccept-final-24 - [0:0] +:logaccept-final-240 - [0:0] +:logaccept-final-241 - [0:0] +:logaccept-final-242 - [0:0] +:logaccept-final-243 - [0:0] +:logaccept-final-244 - [0:0] +:logaccept-final-245 - [0:0] +:logaccept-final-246 - [0:0] +:logaccept-final-247 - [0:0] +:logaccept-final-248 - [0:0] +:logaccept-final-249 - [0:0] :logaccept-final-25 - [0:0] +:logaccept-final-250 - [0:0] +:logaccept-final-251 - [0:0] +:logaccept-final-252 - [0:0] +:logaccept-final-253 - [0:0] +:logaccept-final-254 - [0:0] +:logaccept-final-255 - [0:0] +:logaccept-final-256 - [0:0] +:logaccept-final-257 - [0:0] +:logaccept-final-258 - [0:0] +:logaccept-final-259 - [0:0] :logaccept-final-26 - [0:0] +:logaccept-final-260 - [0:0] +:logaccept-final-261 - [0:0] +:logaccept-final-262 - [0:0] +:logaccept-final-263 - [0:0] +:logaccept-final-264 - [0:0] +:logaccept-final-265 - [0:0] +:logaccept-final-266 - [0:0] +:logaccept-final-267 - [0:0] +:logaccept-final-268 - [0:0] +:logaccept-final-269 - [0:0] :logaccept-final-27 - [0:0] +:logaccept-final-270 - [0:0] +:logaccept-final-271 - [0:0] +:logaccept-final-272 - [0:0] +:logaccept-final-273 - [0:0] +:logaccept-final-274 - [0:0] +:logaccept-final-275 - [0:0] +:logaccept-final-276 - [0:0] +:logaccept-final-277 - [0:0] +:logaccept-final-278 - [0:0] +:logaccept-final-279 - [0:0] :logaccept-final-28 - [0:0] +:logaccept-final-280 - [0:0] +:logaccept-final-281 - [0:0] +:logaccept-final-282 - [0:0] +:logaccept-final-283 - [0:0] +:logaccept-final-284 - [0:0] +:logaccept-final-285 - [0:0] +:logaccept-final-286 - [0:0] +:logaccept-final-287 - [0:0] +:logaccept-final-288 - [0:0] +:logaccept-final-289 - [0:0] :logaccept-final-29 - [0:0] +:logaccept-final-290 - [0:0] +:logaccept-final-291 - [0:0] +:logaccept-final-292 - [0:0] +:logaccept-final-293 - [0:0] +:logaccept-final-294 - [0:0] +:logaccept-final-295 - [0:0] +:logaccept-final-296 - [0:0] +:logaccept-final-297 - [0:0] +:logaccept-final-298 - [0:0] +:logaccept-final-299 - [0:0] :logaccept-final-3 - [0:0] :logaccept-final-30 - [0:0] +:logaccept-final-300 - [0:0] +:logaccept-final-301 - [0:0] +:logaccept-final-302 - [0:0] +:logaccept-final-303 - [0:0] +:logaccept-final-304 - [0:0] +:logaccept-final-305 - [0:0] :logaccept-final-31 - [0:0] :logaccept-final-32 - [0:0] :logaccept-final-33 - [0:0] @@ -2822,120 +4367,1138 @@ :logdrop-1184 - [0:0] :logdrop-1185 - [0:0] :logdrop-1186 - [0:0] +:logdrop-1187 - [0:0] +:logdrop-1188 - [0:0] +:logdrop-1189 - [0:0] :logdrop-119 - [0:0] +:logdrop-1190 - [0:0] +:logdrop-1191 - [0:0] +:logdrop-1192 - [0:0] +:logdrop-1193 - [0:0] +:logdrop-1194 - [0:0] +:logdrop-1195 - [0:0] +:logdrop-1196 - [0:0] +:logdrop-1197 - [0:0] +:logdrop-1198 - [0:0] +:logdrop-1199 - [0:0] :logdrop-12 - [0:0] :logdrop-120 - [0:0] +:logdrop-1200 - [0:0] +:logdrop-1201 - [0:0] +:logdrop-1202 - [0:0] +:logdrop-1203 - [0:0] +:logdrop-1204 - [0:0] +:logdrop-1205 - [0:0] +:logdrop-1206 - [0:0] +:logdrop-1207 - [0:0] +:logdrop-1208 - [0:0] +:logdrop-1209 - [0:0] :logdrop-121 - [0:0] +:logdrop-1210 - [0:0] +:logdrop-1211 - [0:0] +:logdrop-1212 - [0:0] +:logdrop-1213 - [0:0] +:logdrop-1214 - [0:0] +:logdrop-1215 - [0:0] +:logdrop-1216 - [0:0] +:logdrop-1217 - [0:0] +:logdrop-1218 - [0:0] +:logdrop-1219 - [0:0] :logdrop-122 - [0:0] +:logdrop-1220 - [0:0] +:logdrop-1221 - [0:0] +:logdrop-1222 - [0:0] +:logdrop-1223 - [0:0] +:logdrop-1224 - [0:0] +:logdrop-1225 - [0:0] +:logdrop-1226 - [0:0] +:logdrop-1227 - [0:0] +:logdrop-1228 - [0:0] +:logdrop-1229 - [0:0] :logdrop-123 - [0:0] +:logdrop-1230 - [0:0] +:logdrop-1231 - [0:0] +:logdrop-1232 - [0:0] +:logdrop-1233 - [0:0] +:logdrop-1234 - [0:0] +:logdrop-1235 - [0:0] +:logdrop-1236 - [0:0] +:logdrop-1237 - [0:0] +:logdrop-1238 - [0:0] +:logdrop-1239 - [0:0] :logdrop-124 - [0:0] +:logdrop-1240 - [0:0] +:logdrop-1241 - [0:0] +:logdrop-1242 - [0:0] +:logdrop-1243 - [0:0] +:logdrop-1244 - [0:0] +:logdrop-1245 - [0:0] +:logdrop-1246 - [0:0] +:logdrop-1247 - [0:0] +:logdrop-1248 - [0:0] +:logdrop-1249 - [0:0] :logdrop-125 - [0:0] +:logdrop-1250 - [0:0] +:logdrop-1251 - [0:0] +:logdrop-1252 - [0:0] +:logdrop-1253 - [0:0] +:logdrop-1254 - [0:0] +:logdrop-1255 - [0:0] +:logdrop-1256 - [0:0] +:logdrop-1257 - [0:0] +:logdrop-1258 - [0:0] +:logdrop-1259 - [0:0] :logdrop-126 - [0:0] +:logdrop-1260 - [0:0] +:logdrop-1261 - [0:0] +:logdrop-1262 - [0:0] +:logdrop-1263 - [0:0] +:logdrop-1264 - [0:0] +:logdrop-1265 - [0:0] +:logdrop-1266 - [0:0] +:logdrop-1267 - [0:0] +:logdrop-1268 - [0:0] +:logdrop-1269 - [0:0] :logdrop-127 - [0:0] +:logdrop-1270 - [0:0] +:logdrop-1271 - [0:0] +:logdrop-1272 - [0:0] +:logdrop-1273 - [0:0] +:logdrop-1274 - [0:0] +:logdrop-1275 - [0:0] +:logdrop-1276 - [0:0] +:logdrop-1277 - [0:0] +:logdrop-1278 - [0:0] +:logdrop-1279 - [0:0] :logdrop-128 - [0:0] +:logdrop-1280 - [0:0] +:logdrop-1281 - [0:0] +:logdrop-1282 - [0:0] +:logdrop-1283 - [0:0] +:logdrop-1284 - [0:0] +:logdrop-1285 - [0:0] +:logdrop-1286 - [0:0] +:logdrop-1287 - [0:0] +:logdrop-1288 - [0:0] +:logdrop-1289 - [0:0] :logdrop-129 - [0:0] +:logdrop-1290 - [0:0] +:logdrop-1291 - [0:0] +:logdrop-1292 - [0:0] +:logdrop-1293 - [0:0] +:logdrop-1294 - [0:0] +:logdrop-1295 - [0:0] +:logdrop-1296 - [0:0] +:logdrop-1297 - [0:0] +:logdrop-1298 - [0:0] +:logdrop-1299 - [0:0] :logdrop-13 - [0:0] :logdrop-130 - [0:0] +:logdrop-1300 - [0:0] +:logdrop-1301 - [0:0] +:logdrop-1302 - [0:0] +:logdrop-1303 - [0:0] +:logdrop-1304 - [0:0] +:logdrop-1305 - [0:0] +:logdrop-1306 - [0:0] +:logdrop-1307 - [0:0] +:logdrop-1308 - [0:0] +:logdrop-1309 - [0:0] :logdrop-131 - [0:0] +:logdrop-1310 - [0:0] +:logdrop-1311 - [0:0] +:logdrop-1312 - [0:0] +:logdrop-1313 - [0:0] +:logdrop-1314 - [0:0] +:logdrop-1315 - [0:0] +:logdrop-1316 - [0:0] +:logdrop-1317 - [0:0] +:logdrop-1318 - [0:0] +:logdrop-1319 - [0:0] :logdrop-132 - [0:0] +:logdrop-1320 - [0:0] +:logdrop-1321 - [0:0] +:logdrop-1322 - [0:0] +:logdrop-1323 - [0:0] +:logdrop-1324 - [0:0] +:logdrop-1325 - [0:0] +:logdrop-1326 - [0:0] +:logdrop-1327 - [0:0] +:logdrop-1328 - [0:0] +:logdrop-1329 - [0:0] :logdrop-133 - [0:0] +:logdrop-1330 - [0:0] +:logdrop-1331 - [0:0] +:logdrop-1332 - [0:0] +:logdrop-1333 - [0:0] +:logdrop-1334 - [0:0] +:logdrop-1335 - [0:0] +:logdrop-1336 - [0:0] +:logdrop-1337 - [0:0] +:logdrop-1338 - [0:0] +:logdrop-1339 - [0:0] :logdrop-134 - [0:0] +:logdrop-1340 - [0:0] +:logdrop-1341 - [0:0] +:logdrop-1342 - [0:0] +:logdrop-1343 - [0:0] +:logdrop-1344 - [0:0] +:logdrop-1345 - [0:0] +:logdrop-1346 - [0:0] +:logdrop-1347 - [0:0] +:logdrop-1348 - [0:0] +:logdrop-1349 - [0:0] :logdrop-135 - [0:0] +:logdrop-1350 - [0:0] +:logdrop-1351 - [0:0] +:logdrop-1352 - [0:0] +:logdrop-1353 - [0:0] +:logdrop-1354 - [0:0] +:logdrop-1355 - [0:0] +:logdrop-1356 - [0:0] +:logdrop-1357 - [0:0] +:logdrop-1358 - [0:0] +:logdrop-1359 - [0:0] :logdrop-136 - [0:0] +:logdrop-1360 - [0:0] +:logdrop-1361 - [0:0] +:logdrop-1362 - [0:0] +:logdrop-1363 - [0:0] +:logdrop-1364 - [0:0] +:logdrop-1365 - [0:0] +:logdrop-1366 - [0:0] +:logdrop-1367 - [0:0] +:logdrop-1368 - [0:0] +:logdrop-1369 - [0:0] :logdrop-137 - [0:0] +:logdrop-1370 - [0:0] +:logdrop-1371 - [0:0] +:logdrop-1372 - [0:0] +:logdrop-1373 - [0:0] +:logdrop-1374 - [0:0] +:logdrop-1375 - [0:0] +:logdrop-1376 - [0:0] +:logdrop-1377 - [0:0] +:logdrop-1378 - [0:0] +:logdrop-1379 - [0:0] :logdrop-138 - [0:0] +:logdrop-1380 - [0:0] +:logdrop-1381 - [0:0] +:logdrop-1382 - [0:0] +:logdrop-1383 - [0:0] +:logdrop-1384 - [0:0] +:logdrop-1385 - [0:0] +:logdrop-1386 - [0:0] +:logdrop-1387 - [0:0] +:logdrop-1388 - [0:0] +:logdrop-1389 - [0:0] :logdrop-139 - [0:0] +:logdrop-1390 - [0:0] +:logdrop-1391 - [0:0] +:logdrop-1392 - [0:0] +:logdrop-1393 - [0:0] +:logdrop-1394 - [0:0] +:logdrop-1395 - [0:0] +:logdrop-1396 - [0:0] +:logdrop-1397 - [0:0] +:logdrop-1398 - [0:0] +:logdrop-1399 - [0:0] :logdrop-14 - [0:0] :logdrop-140 - [0:0] +:logdrop-1400 - [0:0] +:logdrop-1401 - [0:0] +:logdrop-1402 - [0:0] +:logdrop-1403 - [0:0] +:logdrop-1404 - [0:0] +:logdrop-1405 - [0:0] +:logdrop-1406 - [0:0] +:logdrop-1407 - [0:0] +:logdrop-1408 - [0:0] +:logdrop-1409 - [0:0] :logdrop-141 - [0:0] +:logdrop-1410 - [0:0] +:logdrop-1411 - [0:0] +:logdrop-1412 - [0:0] +:logdrop-1413 - [0:0] +:logdrop-1414 - [0:0] +:logdrop-1415 - [0:0] +:logdrop-1416 - [0:0] +:logdrop-1417 - [0:0] +:logdrop-1418 - [0:0] +:logdrop-1419 - [0:0] :logdrop-142 - [0:0] +:logdrop-1420 - [0:0] +:logdrop-1421 - [0:0] +:logdrop-1422 - [0:0] +:logdrop-1423 - [0:0] +:logdrop-1424 - [0:0] +:logdrop-1425 - [0:0] +:logdrop-1426 - [0:0] +:logdrop-1427 - [0:0] +:logdrop-1428 - [0:0] +:logdrop-1429 - [0:0] :logdrop-143 - [0:0] +:logdrop-1430 - [0:0] +:logdrop-1431 - [0:0] +:logdrop-1432 - [0:0] +:logdrop-1433 - [0:0] +:logdrop-1434 - [0:0] +:logdrop-1435 - [0:0] +:logdrop-1436 - [0:0] +:logdrop-1437 - [0:0] +:logdrop-1438 - [0:0] +:logdrop-1439 - [0:0] :logdrop-144 - [0:0] +:logdrop-1440 - [0:0] +:logdrop-1441 - [0:0] +:logdrop-1442 - [0:0] +:logdrop-1443 - [0:0] +:logdrop-1444 - [0:0] +:logdrop-1445 - [0:0] +:logdrop-1446 - [0:0] +:logdrop-1447 - [0:0] +:logdrop-1448 - [0:0] +:logdrop-1449 - [0:0] :logdrop-145 - [0:0] +:logdrop-1450 - [0:0] +:logdrop-1451 - [0:0] +:logdrop-1452 - [0:0] +:logdrop-1453 - [0:0] +:logdrop-1454 - [0:0] +:logdrop-1455 - [0:0] +:logdrop-1456 - [0:0] +:logdrop-1457 - [0:0] +:logdrop-1458 - [0:0] +:logdrop-1459 - [0:0] :logdrop-146 - [0:0] +:logdrop-1460 - [0:0] +:logdrop-1461 - [0:0] +:logdrop-1462 - [0:0] +:logdrop-1463 - [0:0] +:logdrop-1464 - [0:0] +:logdrop-1465 - [0:0] +:logdrop-1466 - [0:0] +:logdrop-1467 - [0:0] +:logdrop-1468 - [0:0] +:logdrop-1469 - [0:0] :logdrop-147 - [0:0] +:logdrop-1470 - [0:0] +:logdrop-1471 - [0:0] +:logdrop-1472 - [0:0] +:logdrop-1473 - [0:0] +:logdrop-1474 - [0:0] +:logdrop-1475 - [0:0] +:logdrop-1476 - [0:0] +:logdrop-1477 - [0:0] +:logdrop-1478 - [0:0] +:logdrop-1479 - [0:0] :logdrop-148 - [0:0] +:logdrop-1480 - [0:0] +:logdrop-1481 - [0:0] +:logdrop-1482 - [0:0] +:logdrop-1483 - [0:0] +:logdrop-1484 - [0:0] +:logdrop-1485 - [0:0] +:logdrop-1486 - [0:0] +:logdrop-1487 - [0:0] +:logdrop-1488 - [0:0] +:logdrop-1489 - [0:0] :logdrop-149 - [0:0] +:logdrop-1490 - [0:0] +:logdrop-1491 - [0:0] +:logdrop-1492 - [0:0] +:logdrop-1493 - [0:0] +:logdrop-1494 - [0:0] +:logdrop-1495 - [0:0] +:logdrop-1496 - [0:0] +:logdrop-1497 - [0:0] +:logdrop-1498 - [0:0] +:logdrop-1499 - [0:0] :logdrop-15 - [0:0] :logdrop-150 - [0:0] +:logdrop-1500 - [0:0] +:logdrop-1501 - [0:0] +:logdrop-1502 - [0:0] +:logdrop-1503 - [0:0] +:logdrop-1504 - [0:0] +:logdrop-1505 - [0:0] +:logdrop-1506 - [0:0] +:logdrop-1507 - [0:0] +:logdrop-1508 - [0:0] +:logdrop-1509 - [0:0] :logdrop-151 - [0:0] +:logdrop-1510 - [0:0] +:logdrop-1511 - [0:0] +:logdrop-1512 - [0:0] +:logdrop-1513 - [0:0] +:logdrop-1514 - [0:0] +:logdrop-1515 - [0:0] +:logdrop-1516 - [0:0] +:logdrop-1517 - [0:0] +:logdrop-1518 - [0:0] +:logdrop-1519 - [0:0] :logdrop-152 - [0:0] +:logdrop-1520 - [0:0] +:logdrop-1521 - [0:0] +:logdrop-1522 - [0:0] +:logdrop-1523 - [0:0] +:logdrop-1524 - [0:0] +:logdrop-1525 - [0:0] +:logdrop-1526 - [0:0] +:logdrop-1527 - [0:0] +:logdrop-1528 - [0:0] +:logdrop-1529 - [0:0] :logdrop-153 - [0:0] +:logdrop-1530 - [0:0] +:logdrop-1531 - [0:0] +:logdrop-1532 - [0:0] +:logdrop-1533 - [0:0] +:logdrop-1534 - [0:0] +:logdrop-1535 - [0:0] +:logdrop-1536 - [0:0] +:logdrop-1537 - [0:0] +:logdrop-1538 - [0:0] +:logdrop-1539 - [0:0] :logdrop-154 - [0:0] +:logdrop-1540 - [0:0] +:logdrop-1541 - [0:0] +:logdrop-1542 - [0:0] +:logdrop-1543 - [0:0] +:logdrop-1544 - [0:0] +:logdrop-1545 - [0:0] +:logdrop-1546 - [0:0] +:logdrop-1547 - [0:0] +:logdrop-1548 - [0:0] +:logdrop-1549 - [0:0] :logdrop-155 - [0:0] +:logdrop-1550 - [0:0] +:logdrop-1551 - [0:0] +:logdrop-1552 - [0:0] +:logdrop-1553 - [0:0] +:logdrop-1554 - [0:0] +:logdrop-1555 - [0:0] +:logdrop-1556 - [0:0] +:logdrop-1557 - [0:0] +:logdrop-1558 - [0:0] +:logdrop-1559 - [0:0] :logdrop-156 - [0:0] +:logdrop-1560 - [0:0] +:logdrop-1561 - [0:0] +:logdrop-1562 - [0:0] +:logdrop-1563 - [0:0] +:logdrop-1564 - [0:0] +:logdrop-1565 - [0:0] +:logdrop-1566 - [0:0] +:logdrop-1567 - [0:0] +:logdrop-1568 - [0:0] +:logdrop-1569 - [0:0] :logdrop-157 - [0:0] +:logdrop-1570 - [0:0] +:logdrop-1571 - [0:0] +:logdrop-1572 - [0:0] +:logdrop-1573 - [0:0] +:logdrop-1574 - [0:0] +:logdrop-1575 - [0:0] +:logdrop-1576 - [0:0] +:logdrop-1577 - [0:0] +:logdrop-1578 - [0:0] +:logdrop-1579 - [0:0] :logdrop-158 - [0:0] +:logdrop-1580 - [0:0] +:logdrop-1581 - [0:0] +:logdrop-1582 - [0:0] +:logdrop-1583 - [0:0] +:logdrop-1584 - [0:0] +:logdrop-1585 - [0:0] +:logdrop-1586 - [0:0] +:logdrop-1587 - [0:0] +:logdrop-1588 - [0:0] +:logdrop-1589 - [0:0] :logdrop-159 - [0:0] +:logdrop-1590 - [0:0] +:logdrop-1591 - [0:0] +:logdrop-1592 - [0:0] +:logdrop-1593 - [0:0] +:logdrop-1594 - [0:0] +:logdrop-1595 - [0:0] +:logdrop-1596 - [0:0] +:logdrop-1597 - [0:0] +:logdrop-1598 - [0:0] +:logdrop-1599 - [0:0] :logdrop-16 - [0:0] :logdrop-160 - [0:0] +:logdrop-1600 - [0:0] +:logdrop-1601 - [0:0] +:logdrop-1602 - [0:0] +:logdrop-1603 - [0:0] +:logdrop-1604 - [0:0] +:logdrop-1605 - [0:0] +:logdrop-1606 - [0:0] +:logdrop-1607 - [0:0] +:logdrop-1608 - [0:0] +:logdrop-1609 - [0:0] :logdrop-161 - [0:0] +:logdrop-1610 - [0:0] +:logdrop-1611 - [0:0] +:logdrop-1612 - [0:0] +:logdrop-1613 - [0:0] +:logdrop-1614 - [0:0] +:logdrop-1615 - [0:0] +:logdrop-1616 - [0:0] +:logdrop-1617 - [0:0] +:logdrop-1618 - [0:0] +:logdrop-1619 - [0:0] :logdrop-162 - [0:0] +:logdrop-1620 - [0:0] +:logdrop-1621 - [0:0] +:logdrop-1622 - [0:0] +:logdrop-1623 - [0:0] +:logdrop-1624 - [0:0] +:logdrop-1625 - [0:0] +:logdrop-1626 - [0:0] +:logdrop-1627 - [0:0] +:logdrop-1628 - [0:0] +:logdrop-1629 - [0:0] :logdrop-163 - [0:0] +:logdrop-1630 - [0:0] +:logdrop-1631 - [0:0] +:logdrop-1632 - [0:0] +:logdrop-1633 - [0:0] +:logdrop-1634 - [0:0] +:logdrop-1635 - [0:0] +:logdrop-1636 - [0:0] +:logdrop-1637 - [0:0] +:logdrop-1638 - [0:0] +:logdrop-1639 - [0:0] :logdrop-164 - [0:0] +:logdrop-1640 - [0:0] +:logdrop-1641 - [0:0] +:logdrop-1642 - [0:0] +:logdrop-1643 - [0:0] +:logdrop-1644 - [0:0] +:logdrop-1645 - [0:0] +:logdrop-1646 - [0:0] +:logdrop-1647 - [0:0] +:logdrop-1648 - [0:0] +:logdrop-1649 - [0:0] :logdrop-165 - [0:0] +:logdrop-1650 - [0:0] +:logdrop-1651 - [0:0] +:logdrop-1652 - [0:0] +:logdrop-1653 - [0:0] +:logdrop-1654 - [0:0] +:logdrop-1655 - [0:0] +:logdrop-1656 - [0:0] +:logdrop-1657 - [0:0] +:logdrop-1658 - [0:0] +:logdrop-1659 - [0:0] :logdrop-166 - [0:0] +:logdrop-1660 - [0:0] +:logdrop-1661 - [0:0] +:logdrop-1662 - [0:0] +:logdrop-1663 - [0:0] +:logdrop-1664 - [0:0] +:logdrop-1665 - [0:0] +:logdrop-1666 - [0:0] +:logdrop-1667 - [0:0] +:logdrop-1668 - [0:0] +:logdrop-1669 - [0:0] :logdrop-167 - [0:0] +:logdrop-1670 - [0:0] +:logdrop-1671 - [0:0] +:logdrop-1672 - [0:0] +:logdrop-1673 - [0:0] +:logdrop-1674 - [0:0] +:logdrop-1675 - [0:0] +:logdrop-1676 - [0:0] +:logdrop-1677 - [0:0] +:logdrop-1678 - [0:0] +:logdrop-1679 - [0:0] :logdrop-168 - [0:0] +:logdrop-1680 - [0:0] +:logdrop-1681 - [0:0] +:logdrop-1682 - [0:0] +:logdrop-1683 - [0:0] +:logdrop-1684 - [0:0] +:logdrop-1685 - [0:0] +:logdrop-1686 - [0:0] +:logdrop-1687 - [0:0] +:logdrop-1688 - [0:0] +:logdrop-1689 - [0:0] :logdrop-169 - [0:0] +:logdrop-1690 - [0:0] +:logdrop-1691 - [0:0] +:logdrop-1692 - [0:0] +:logdrop-1693 - [0:0] +:logdrop-1694 - [0:0] +:logdrop-1695 - [0:0] +:logdrop-1696 - [0:0] +:logdrop-1697 - [0:0] +:logdrop-1698 - [0:0] +:logdrop-1699 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] +:logdrop-1700 - [0:0] +:logdrop-1701 - [0:0] +:logdrop-1702 - [0:0] +:logdrop-1703 - [0:0] +:logdrop-1704 - [0:0] +:logdrop-1705 - [0:0] +:logdrop-1706 - [0:0] +:logdrop-1707 - [0:0] +:logdrop-1708 - [0:0] +:logdrop-1709 - [0:0] :logdrop-171 - [0:0] +:logdrop-1710 - [0:0] +:logdrop-1711 - [0:0] +:logdrop-1712 - [0:0] +:logdrop-1713 - [0:0] +:logdrop-1714 - [0:0] +:logdrop-1715 - [0:0] +:logdrop-1716 - [0:0] +:logdrop-1717 - [0:0] +:logdrop-1718 - [0:0] +:logdrop-1719 - [0:0] :logdrop-172 - [0:0] +:logdrop-1720 - [0:0] +:logdrop-1721 - [0:0] +:logdrop-1722 - [0:0] +:logdrop-1723 - [0:0] +:logdrop-1724 - [0:0] +:logdrop-1725 - [0:0] +:logdrop-1726 - [0:0] +:logdrop-1727 - [0:0] +:logdrop-1728 - [0:0] +:logdrop-1729 - [0:0] :logdrop-173 - [0:0] +:logdrop-1730 - [0:0] +:logdrop-1731 - [0:0] +:logdrop-1732 - [0:0] +:logdrop-1733 - [0:0] +:logdrop-1734 - [0:0] +:logdrop-1735 - [0:0] +:logdrop-1736 - [0:0] +:logdrop-1737 - [0:0] +:logdrop-1738 - [0:0] +:logdrop-1739 - [0:0] :logdrop-174 - [0:0] +:logdrop-1740 - [0:0] +:logdrop-1741 - [0:0] +:logdrop-1742 - [0:0] +:logdrop-1743 - [0:0] +:logdrop-1744 - [0:0] +:logdrop-1745 - [0:0] +:logdrop-1746 - [0:0] +:logdrop-1747 - [0:0] +:logdrop-1748 - [0:0] +:logdrop-1749 - [0:0] :logdrop-175 - [0:0] +:logdrop-1750 - [0:0] +:logdrop-1751 - [0:0] +:logdrop-1752 - [0:0] +:logdrop-1753 - [0:0] +:logdrop-1754 - [0:0] +:logdrop-1755 - [0:0] +:logdrop-1756 - [0:0] +:logdrop-1757 - [0:0] +:logdrop-1758 - [0:0] +:logdrop-1759 - [0:0] :logdrop-176 - [0:0] +:logdrop-1760 - [0:0] +:logdrop-1761 - [0:0] +:logdrop-1762 - [0:0] +:logdrop-1763 - [0:0] +:logdrop-1764 - [0:0] +:logdrop-1765 - [0:0] +:logdrop-1766 - [0:0] +:logdrop-1767 - [0:0] +:logdrop-1768 - [0:0] +:logdrop-1769 - [0:0] :logdrop-177 - [0:0] +:logdrop-1770 - [0:0] +:logdrop-1771 - [0:0] +:logdrop-1772 - [0:0] +:logdrop-1773 - [0:0] +:logdrop-1774 - [0:0] +:logdrop-1775 - [0:0] +:logdrop-1776 - [0:0] +:logdrop-1777 - [0:0] +:logdrop-1778 - [0:0] +:logdrop-1779 - [0:0] :logdrop-178 - [0:0] +:logdrop-1780 - [0:0] +:logdrop-1781 - [0:0] +:logdrop-1782 - [0:0] +:logdrop-1783 - [0:0] +:logdrop-1784 - [0:0] +:logdrop-1785 - [0:0] +:logdrop-1786 - [0:0] +:logdrop-1787 - [0:0] +:logdrop-1788 - [0:0] +:logdrop-1789 - [0:0] :logdrop-179 - [0:0] +:logdrop-1790 - [0:0] +:logdrop-1791 - [0:0] +:logdrop-1792 - [0:0] +:logdrop-1793 - [0:0] +:logdrop-1794 - [0:0] +:logdrop-1795 - [0:0] +:logdrop-1796 - [0:0] +:logdrop-1797 - [0:0] +:logdrop-1798 - [0:0] +:logdrop-1799 - [0:0] :logdrop-18 - [0:0] :logdrop-180 - [0:0] +:logdrop-1800 - [0:0] +:logdrop-1801 - [0:0] +:logdrop-1802 - [0:0] +:logdrop-1803 - [0:0] +:logdrop-1804 - [0:0] +:logdrop-1805 - [0:0] +:logdrop-1806 - [0:0] +:logdrop-1807 - [0:0] +:logdrop-1808 - [0:0] +:logdrop-1809 - [0:0] :logdrop-181 - [0:0] +:logdrop-1810 - [0:0] +:logdrop-1811 - [0:0] +:logdrop-1812 - [0:0] +:logdrop-1813 - [0:0] +:logdrop-1814 - [0:0] +:logdrop-1815 - [0:0] +:logdrop-1816 - [0:0] +:logdrop-1817 - [0:0] +:logdrop-1818 - [0:0] +:logdrop-1819 - [0:0] :logdrop-182 - [0:0] +:logdrop-1820 - [0:0] +:logdrop-1821 - [0:0] +:logdrop-1822 - [0:0] +:logdrop-1823 - [0:0] +:logdrop-1824 - [0:0] +:logdrop-1825 - [0:0] +:logdrop-1826 - [0:0] +:logdrop-1827 - [0:0] +:logdrop-1828 - [0:0] +:logdrop-1829 - [0:0] :logdrop-183 - [0:0] +:logdrop-1830 - [0:0] +:logdrop-1831 - [0:0] +:logdrop-1832 - [0:0] +:logdrop-1833 - [0:0] +:logdrop-1834 - [0:0] +:logdrop-1835 - [0:0] +:logdrop-1836 - [0:0] +:logdrop-1837 - [0:0] +:logdrop-1838 - [0:0] +:logdrop-1839 - [0:0] :logdrop-184 - [0:0] +:logdrop-1840 - [0:0] +:logdrop-1841 - [0:0] +:logdrop-1842 - [0:0] +:logdrop-1843 - [0:0] +:logdrop-1844 - [0:0] +:logdrop-1845 - [0:0] +:logdrop-1846 - [0:0] +:logdrop-1847 - [0:0] +:logdrop-1848 - [0:0] +:logdrop-1849 - [0:0] :logdrop-185 - [0:0] +:logdrop-1850 - [0:0] +:logdrop-1851 - [0:0] +:logdrop-1852 - [0:0] +:logdrop-1853 - [0:0] +:logdrop-1854 - [0:0] +:logdrop-1855 - [0:0] +:logdrop-1856 - [0:0] +:logdrop-1857 - [0:0] +:logdrop-1858 - [0:0] +:logdrop-1859 - [0:0] :logdrop-186 - [0:0] +:logdrop-1860 - [0:0] +:logdrop-1861 - [0:0] +:logdrop-1862 - [0:0] +:logdrop-1863 - [0:0] +:logdrop-1864 - [0:0] +:logdrop-1865 - [0:0] +:logdrop-1866 - [0:0] +:logdrop-1867 - [0:0] +:logdrop-1868 - [0:0] +:logdrop-1869 - [0:0] :logdrop-187 - [0:0] +:logdrop-1870 - [0:0] +:logdrop-1871 - [0:0] +:logdrop-1872 - [0:0] +:logdrop-1873 - [0:0] +:logdrop-1874 - [0:0] +:logdrop-1875 - [0:0] +:logdrop-1876 - [0:0] +:logdrop-1877 - [0:0] +:logdrop-1878 - [0:0] +:logdrop-1879 - [0:0] :logdrop-188 - [0:0] +:logdrop-1880 - [0:0] +:logdrop-1881 - [0:0] +:logdrop-1882 - [0:0] +:logdrop-1883 - [0:0] +:logdrop-1884 - [0:0] +:logdrop-1885 - [0:0] +:logdrop-1886 - [0:0] +:logdrop-1887 - [0:0] +:logdrop-1888 - [0:0] +:logdrop-1889 - [0:0] :logdrop-189 - [0:0] +:logdrop-1890 - [0:0] +:logdrop-1891 - [0:0] +:logdrop-1892 - [0:0] +:logdrop-1893 - [0:0] +:logdrop-1894 - [0:0] +:logdrop-1895 - [0:0] +:logdrop-1896 - [0:0] +:logdrop-1897 - [0:0] +:logdrop-1898 - [0:0] +:logdrop-1899 - [0:0] :logdrop-19 - [0:0] :logdrop-190 - [0:0] +:logdrop-1900 - [0:0] +:logdrop-1901 - [0:0] +:logdrop-1902 - [0:0] +:logdrop-1903 - [0:0] +:logdrop-1904 - [0:0] +:logdrop-1905 - [0:0] +:logdrop-1906 - [0:0] +:logdrop-1907 - [0:0] +:logdrop-1908 - [0:0] +:logdrop-1909 - [0:0] :logdrop-191 - [0:0] +:logdrop-1910 - [0:0] +:logdrop-1911 - [0:0] +:logdrop-1912 - [0:0] +:logdrop-1913 - [0:0] +:logdrop-1914 - [0:0] +:logdrop-1915 - [0:0] +:logdrop-1916 - [0:0] +:logdrop-1917 - [0:0] +:logdrop-1918 - [0:0] +:logdrop-1919 - [0:0] :logdrop-192 - [0:0] +:logdrop-1920 - [0:0] +:logdrop-1921 - [0:0] +:logdrop-1922 - [0:0] +:logdrop-1923 - [0:0] +:logdrop-1924 - [0:0] +:logdrop-1925 - [0:0] +:logdrop-1926 - [0:0] +:logdrop-1927 - [0:0] +:logdrop-1928 - [0:0] +:logdrop-1929 - [0:0] :logdrop-193 - [0:0] +:logdrop-1930 - [0:0] +:logdrop-1931 - [0:0] +:logdrop-1932 - [0:0] +:logdrop-1933 - [0:0] +:logdrop-1934 - [0:0] +:logdrop-1935 - [0:0] +:logdrop-1936 - [0:0] +:logdrop-1937 - [0:0] +:logdrop-1938 - [0:0] +:logdrop-1939 - [0:0] :logdrop-194 - [0:0] +:logdrop-1940 - [0:0] +:logdrop-1941 - [0:0] +:logdrop-1942 - [0:0] +:logdrop-1943 - [0:0] +:logdrop-1944 - [0:0] +:logdrop-1945 - [0:0] +:logdrop-1946 - [0:0] +:logdrop-1947 - [0:0] +:logdrop-1948 - [0:0] +:logdrop-1949 - [0:0] :logdrop-195 - [0:0] +:logdrop-1950 - [0:0] +:logdrop-1951 - [0:0] +:logdrop-1952 - [0:0] +:logdrop-1953 - [0:0] +:logdrop-1954 - [0:0] +:logdrop-1955 - [0:0] +:logdrop-1956 - [0:0] +:logdrop-1957 - [0:0] +:logdrop-1958 - [0:0] +:logdrop-1959 - [0:0] :logdrop-196 - [0:0] +:logdrop-1960 - [0:0] +:logdrop-1961 - [0:0] +:logdrop-1962 - [0:0] +:logdrop-1963 - [0:0] +:logdrop-1964 - [0:0] +:logdrop-1965 - [0:0] +:logdrop-1966 - [0:0] +:logdrop-1967 - [0:0] +:logdrop-1968 - [0:0] +:logdrop-1969 - [0:0] :logdrop-197 - [0:0] +:logdrop-1970 - [0:0] +:logdrop-1971 - [0:0] +:logdrop-1972 - [0:0] +:logdrop-1973 - [0:0] +:logdrop-1974 - [0:0] +:logdrop-1975 - [0:0] +:logdrop-1976 - [0:0] +:logdrop-1977 - [0:0] +:logdrop-1978 - [0:0] +:logdrop-1979 - [0:0] :logdrop-198 - [0:0] +:logdrop-1980 - [0:0] +:logdrop-1981 - [0:0] +:logdrop-1982 - [0:0] +:logdrop-1983 - [0:0] +:logdrop-1984 - [0:0] +:logdrop-1985 - [0:0] +:logdrop-1986 - [0:0] +:logdrop-1987 - [0:0] +:logdrop-1988 - [0:0] +:logdrop-1989 - [0:0] :logdrop-199 - [0:0] +:logdrop-1990 - [0:0] +:logdrop-1991 - [0:0] +:logdrop-1992 - [0:0] +:logdrop-1993 - [0:0] +:logdrop-1994 - [0:0] +:logdrop-1995 - [0:0] +:logdrop-1996 - [0:0] +:logdrop-1997 - [0:0] +:logdrop-1998 - [0:0] +:logdrop-1999 - [0:0] :logdrop-2 - [0:0] :logdrop-20 - [0:0] :logdrop-200 - [0:0] +:logdrop-2000 - [0:0] +:logdrop-2001 - [0:0] +:logdrop-2002 - [0:0] +:logdrop-2003 - [0:0] +:logdrop-2004 - [0:0] +:logdrop-2005 - [0:0] +:logdrop-2006 - [0:0] +:logdrop-2007 - [0:0] +:logdrop-2008 - [0:0] +:logdrop-2009 - [0:0] :logdrop-201 - [0:0] +:logdrop-2010 - [0:0] +:logdrop-2011 - [0:0] +:logdrop-2012 - [0:0] +:logdrop-2013 - [0:0] +:logdrop-2014 - [0:0] +:logdrop-2015 - [0:0] +:logdrop-2016 - [0:0] +:logdrop-2017 - [0:0] +:logdrop-2018 - [0:0] +:logdrop-2019 - [0:0] :logdrop-202 - [0:0] +:logdrop-2020 - [0:0] +:logdrop-2021 - [0:0] +:logdrop-2022 - [0:0] +:logdrop-2023 - [0:0] +:logdrop-2024 - [0:0] +:logdrop-2025 - [0:0] +:logdrop-2026 - [0:0] +:logdrop-2027 - [0:0] +:logdrop-2028 - [0:0] +:logdrop-2029 - [0:0] :logdrop-203 - [0:0] +:logdrop-2030 - [0:0] +:logdrop-2031 - [0:0] +:logdrop-2032 - [0:0] +:logdrop-2033 - [0:0] +:logdrop-2034 - [0:0] +:logdrop-2035 - [0:0] +:logdrop-2036 - [0:0] +:logdrop-2037 - [0:0] +:logdrop-2038 - [0:0] +:logdrop-2039 - [0:0] :logdrop-204 - [0:0] +:logdrop-2040 - [0:0] +:logdrop-2041 - [0:0] +:logdrop-2042 - [0:0] +:logdrop-2043 - [0:0] +:logdrop-2044 - [0:0] +:logdrop-2045 - [0:0] +:logdrop-2046 - [0:0] +:logdrop-2047 - [0:0] +:logdrop-2048 - [0:0] +:logdrop-2049 - [0:0] :logdrop-205 - [0:0] +:logdrop-2050 - [0:0] +:logdrop-2051 - [0:0] +:logdrop-2052 - [0:0] +:logdrop-2053 - [0:0] +:logdrop-2054 - [0:0] +:logdrop-2055 - [0:0] +:logdrop-2056 - [0:0] +:logdrop-2057 - [0:0] +:logdrop-2058 - [0:0] +:logdrop-2059 - [0:0] :logdrop-206 - [0:0] +:logdrop-2060 - [0:0] +:logdrop-2061 - [0:0] +:logdrop-2062 - [0:0] +:logdrop-2063 - [0:0] +:logdrop-2064 - [0:0] +:logdrop-2065 - [0:0] +:logdrop-2066 - [0:0] +:logdrop-2067 - [0:0] +:logdrop-2068 - [0:0] +:logdrop-2069 - [0:0] :logdrop-207 - [0:0] +:logdrop-2070 - [0:0] +:logdrop-2071 - [0:0] +:logdrop-2072 - [0:0] +:logdrop-2073 - [0:0] +:logdrop-2074 - [0:0] +:logdrop-2075 - [0:0] +:logdrop-2076 - [0:0] +:logdrop-2077 - [0:0] +:logdrop-2078 - [0:0] +:logdrop-2079 - [0:0] :logdrop-208 - [0:0] +:logdrop-2080 - [0:0] +:logdrop-2081 - [0:0] +:logdrop-2082 - [0:0] +:logdrop-2083 - [0:0] +:logdrop-2084 - [0:0] +:logdrop-2085 - [0:0] +:logdrop-2086 - [0:0] +:logdrop-2087 - [0:0] +:logdrop-2088 - [0:0] +:logdrop-2089 - [0:0] :logdrop-209 - [0:0] +:logdrop-2090 - [0:0] +:logdrop-2091 - [0:0] +:logdrop-2092 - [0:0] +:logdrop-2093 - [0:0] +:logdrop-2094 - [0:0] +:logdrop-2095 - [0:0] +:logdrop-2096 - [0:0] +:logdrop-2097 - [0:0] +:logdrop-2098 - [0:0] +:logdrop-2099 - [0:0] :logdrop-21 - [0:0] :logdrop-210 - [0:0] +:logdrop-2100 - [0:0] +:logdrop-2101 - [0:0] +:logdrop-2102 - [0:0] +:logdrop-2103 - [0:0] +:logdrop-2104 - [0:0] +:logdrop-2105 - [0:0] +:logdrop-2106 - [0:0] +:logdrop-2107 - [0:0] +:logdrop-2108 - [0:0] +:logdrop-2109 - [0:0] :logdrop-211 - [0:0] +:logdrop-2110 - [0:0] +:logdrop-2111 - [0:0] +:logdrop-2112 - [0:0] +:logdrop-2113 - [0:0] +:logdrop-2114 - [0:0] +:logdrop-2115 - [0:0] +:logdrop-2116 - [0:0] +:logdrop-2117 - [0:0] +:logdrop-2118 - [0:0] +:logdrop-2119 - [0:0] :logdrop-212 - [0:0] +:logdrop-2120 - [0:0] +:logdrop-2121 - [0:0] +:logdrop-2122 - [0:0] +:logdrop-2123 - [0:0] +:logdrop-2124 - [0:0] +:logdrop-2125 - [0:0] +:logdrop-2126 - [0:0] +:logdrop-2127 - [0:0] +:logdrop-2128 - [0:0] +:logdrop-2129 - [0:0] :logdrop-213 - [0:0] +:logdrop-2130 - [0:0] +:logdrop-2131 - [0:0] +:logdrop-2132 - [0:0] +:logdrop-2133 - [0:0] +:logdrop-2134 - [0:0] +:logdrop-2135 - [0:0] +:logdrop-2136 - [0:0] +:logdrop-2137 - [0:0] +:logdrop-2138 - [0:0] +:logdrop-2139 - [0:0] :logdrop-214 - [0:0] +:logdrop-2140 - [0:0] +:logdrop-2141 - [0:0] +:logdrop-2142 - [0:0] +:logdrop-2143 - [0:0] +:logdrop-2144 - [0:0] +:logdrop-2145 - [0:0] +:logdrop-2146 - [0:0] +:logdrop-2147 - [0:0] +:logdrop-2148 - [0:0] +:logdrop-2149 - [0:0] :logdrop-215 - [0:0] +:logdrop-2150 - [0:0] +:logdrop-2151 - [0:0] +:logdrop-2152 - [0:0] +:logdrop-2153 - [0:0] +:logdrop-2154 - [0:0] +:logdrop-2155 - [0:0] +:logdrop-2156 - [0:0] +:logdrop-2157 - [0:0] +:logdrop-2158 - [0:0] +:logdrop-2159 - [0:0] :logdrop-216 - [0:0] +:logdrop-2160 - [0:0] +:logdrop-2161 - [0:0] +:logdrop-2162 - [0:0] +:logdrop-2163 - [0:0] +:logdrop-2164 - [0:0] +:logdrop-2165 - [0:0] +:logdrop-2166 - [0:0] +:logdrop-2167 - [0:0] +:logdrop-2168 - [0:0] +:logdrop-2169 - [0:0] :logdrop-217 - [0:0] +:logdrop-2170 - [0:0] +:logdrop-2171 - [0:0] +:logdrop-2172 - [0:0] +:logdrop-2173 - [0:0] +:logdrop-2174 - [0:0] +:logdrop-2175 - [0:0] +:logdrop-2176 - [0:0] +:logdrop-2177 - [0:0] +:logdrop-2178 - [0:0] +:logdrop-2179 - [0:0] :logdrop-218 - [0:0] +:logdrop-2180 - [0:0] +:logdrop-2181 - [0:0] +:logdrop-2182 - [0:0] +:logdrop-2183 - [0:0] +:logdrop-2184 - [0:0] +:logdrop-2185 - [0:0] +:logdrop-2186 - [0:0] +:logdrop-2187 - [0:0] +:logdrop-2188 - [0:0] +:logdrop-2189 - [0:0] :logdrop-219 - [0:0] +:logdrop-2190 - [0:0] +:logdrop-2191 - [0:0] +:logdrop-2192 - [0:0] +:logdrop-2193 - [0:0] +:logdrop-2194 - [0:0] +:logdrop-2195 - [0:0] +:logdrop-2196 - [0:0] +:logdrop-2197 - [0:0] +:logdrop-2198 - [0:0] +:logdrop-2199 - [0:0] :logdrop-22 - [0:0] :logdrop-220 - [0:0] +:logdrop-2200 - [0:0] +:logdrop-2201 - [0:0] +:logdrop-2202 - [0:0] +:logdrop-2203 - [0:0] +:logdrop-2204 - [0:0] :logdrop-221 - [0:0] :logdrop-222 - [0:0] :logdrop-223 - [0:0] @@ -3800,637 +6363,986 @@ :logdrop-998 - [0:0] :logdrop-999 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-2 - [0:0] -A FORWARD -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A FORWARD -j limit-1886 --A FORWARD -j limit-1885 --A FORWARD -j limit-1884 --A FORWARD -j limit-1883 --A FORWARD -j limit-1882 --A FORWARD -j limit-1881 --A FORWARD -j limit-1880 --A FORWARD -j limit-1879 --A FORWARD -j limit-1878 --A FORWARD -j limit-1877 --A FORWARD -j limit-1876 --A FORWARD -j limit-1875 --A FORWARD -j limit-1874 --A FORWARD -j limit-1873 --A FORWARD -j limit-1872 --A FORWARD -j limit-1871 --A FORWARD -j limit-1870 --A FORWARD -j limit-1869 --A FORWARD -j limit-1868 --A FORWARD -j limit-1867 --A FORWARD -j limit-1866 --A FORWARD -j limit-1865 --A FORWARD -j limit-1864 --A FORWARD -j limit-1863 --A FORWARD -j limit-1862 --A FORWARD -j limit-1861 --A FORWARD -j limit-1860 --A FORWARD -j limit-1859 --A FORWARD -j limit-1858 --A FORWARD -j limit-1857 --A FORWARD -j limit-1856 --A FORWARD -j limit-1855 --A FORWARD -j limit-1854 --A FORWARD -j limit-1853 --A FORWARD -j limit-1852 --A FORWARD -j limit-1851 --A FORWARD -j limit-1850 --A FORWARD -j limit-1849 --A FORWARD -j limit-1848 --A FORWARD -j limit-1847 --A FORWARD -j limit-1846 --A FORWARD -j limit-1845 --A FORWARD -j limit-1844 --A FORWARD -j limit-1843 --A FORWARD -j limit-1842 --A FORWARD -j limit-1841 --A FORWARD -j limit-1840 --A FORWARD -j limit-1839 --A FORWARD -j limit-1838 --A FORWARD -j limit-1837 --A FORWARD -j limit-1836 --A FORWARD -j limit-1835 --A FORWARD -j limit-1834 --A FORWARD -j limit-1833 --A FORWARD -j limit-1832 --A FORWARD -j limit-1831 --A FORWARD -j limit-1830 --A FORWARD -j limit-1829 --A FORWARD -j limit-1828 --A FORWARD -j limit-1827 --A FORWARD -j limit-1826 --A FORWARD -j limit-1825 --A FORWARD -j limit-1824 --A FORWARD -j limit-1823 --A FORWARD -j limit-1822 --A FORWARD -j limit-1821 --A FORWARD -j limit-1820 --A FORWARD -j limit-1819 --A FORWARD -j limit-1818 --A FORWARD -j limit-1817 --A FORWARD -j limit-1816 --A FORWARD -j limit-1815 --A FORWARD -j limit-1814 --A FORWARD -j limit-1813 --A FORWARD -j limit-1812 --A FORWARD -j limit-1811 --A FORWARD -j limit-1810 --A FORWARD -j limit-1809 --A FORWARD -j limit-1808 --A FORWARD -j limit-1807 --A FORWARD -j limit-1806 --A FORWARD -j limit-1805 --A FORWARD -j limit-1804 --A FORWARD -j limit-1803 --A FORWARD -j limit-1802 --A FORWARD -j limit-1801 --A FORWARD -j limit-1800 --A FORWARD -j limit-1799 --A FORWARD -j limit-1798 --A FORWARD -j limit-1797 --A FORWARD -j limit-1796 --A FORWARD -j limit-1795 --A FORWARD -j limit-1794 --A FORWARD -j limit-1793 --A FORWARD -j limit-1792 --A FORWARD -j limit-1791 --A FORWARD -j limit-1790 --A FORWARD -j limit-1789 --A FORWARD -j limit-1788 --A FORWARD -j limit-1787 --A FORWARD -j limit-1786 --A FORWARD -j limit-1785 --A FORWARD -j limit-1784 --A FORWARD -j limit-1783 --A FORWARD -j limit-1782 --A FORWARD -j limit-1781 --A FORWARD -j limit-1780 --A FORWARD -j limit-1779 --A FORWARD -j limit-1778 --A FORWARD -j limit-1777 --A FORWARD -j limit-1776 --A FORWARD -j limit-1775 --A FORWARD -j limit-1774 --A FORWARD -j limit-1773 --A FORWARD -j limit-1772 --A FORWARD -j limit-1771 --A FORWARD -j limit-1770 --A FORWARD -j limit-1769 --A FORWARD -j limit-1768 --A FORWARD -j limit-1767 --A FORWARD -j limit-1766 --A FORWARD -j limit-1765 --A FORWARD -j limit-1764 --A FORWARD -j limit-1763 --A FORWARD -j limit-1762 --A FORWARD -j limit-1761 --A FORWARD -j limit-1760 --A FORWARD -j limit-1759 --A FORWARD -j limit-1758 --A FORWARD -j limit-1757 --A FORWARD -j limit-1756 --A FORWARD -j limit-1755 --A FORWARD -j limit-1754 --A FORWARD -j limit-1753 --A FORWARD -j limit-1752 --A FORWARD -j limit-1751 --A FORWARD -j limit-1750 --A FORWARD -j limit-1749 --A FORWARD -j limit-1748 --A FORWARD -j limit-1747 --A FORWARD -j limit-1746 --A FORWARD -j limit-1745 --A FORWARD -j limit-1744 --A FORWARD -j limit-1743 --A FORWARD -j limit-1742 --A FORWARD -j limit-1741 --A FORWARD -j limit-1740 --A FORWARD -j limit-1739 --A FORWARD -j limit-1738 --A FORWARD -j limit-1737 --A FORWARD -j limit-1736 --A FORWARD -j limit-1735 --A FORWARD -j limit-1734 --A FORWARD -j limit-1733 --A FORWARD -j limit-1732 --A FORWARD -j limit-1731 --A FORWARD -j limit-1730 --A FORWARD -j limit-1729 --A FORWARD -j limit-1728 --A FORWARD -j limit-1727 --A FORWARD -j limit-1726 --A FORWARD -j limit-1725 --A FORWARD -j limit-1724 --A FORWARD -j limit-1723 --A FORWARD -j limit-1722 --A FORWARD -j limit-1721 --A FORWARD -j limit-1720 --A FORWARD -j limit-1719 --A FORWARD -j limit-1718 --A FORWARD -j limit-1717 --A FORWARD -j limit-1716 --A FORWARD -j limit-1715 --A FORWARD -j limit-1714 --A FORWARD -j limit-1713 --A FORWARD -j limit-1712 --A FORWARD -j limit-1711 --A FORWARD -j limit-1710 --A FORWARD -j limit-1709 --A FORWARD -j limit-1708 --A FORWARD -j limit-1707 --A FORWARD -j limit-1706 --A FORWARD -j limit-1705 --A FORWARD -j limit-1704 --A FORWARD -j limit-1703 --A FORWARD -j limit-1702 --A FORWARD -j limit-1701 --A FORWARD -j limit-1700 --A FORWARD -j limit-1699 --A FORWARD -j limit-1698 --A FORWARD -j limit-1697 --A FORWARD -j limit-1696 --A FORWARD -j limit-1695 --A FORWARD -j limit-1694 --A FORWARD -j limit-1693 --A FORWARD -j limit-1692 --A FORWARD -j limit-1691 --A FORWARD -j limit-1690 --A FORWARD -j limit-1689 --A FORWARD -j limit-1688 --A FORWARD -j limit-1687 --A FORWARD -j limit-1686 --A FORWARD -j limit-1685 --A FORWARD -j limit-1684 --A FORWARD -j limit-1683 --A FORWARD -j limit-1682 --A FORWARD -j limit-1681 --A FORWARD -j limit-1680 --A FORWARD -j limit-1679 --A FORWARD -j limit-1678 --A FORWARD -j limit-1677 --A FORWARD -j limit-1676 --A FORWARD -j limit-1675 --A FORWARD -j limit-1674 --A FORWARD -j limit-1673 --A FORWARD -j limit-1672 --A FORWARD -j limit-1671 --A FORWARD -j limit-1670 --A FORWARD -j limit-1669 --A FORWARD -j limit-1668 --A FORWARD -j limit-1667 --A FORWARD -j limit-1666 --A FORWARD -j limit-1665 --A FORWARD -j limit-1664 --A FORWARD -j limit-1663 --A FORWARD -j limit-1662 --A FORWARD -j limit-1661 --A FORWARD -j limit-1660 --A FORWARD -j limit-1659 --A FORWARD -j limit-1658 --A FORWARD -j limit-1657 --A FORWARD -j limit-1656 --A FORWARD -j limit-1655 --A FORWARD -j limit-1654 --A FORWARD -j limit-1653 --A FORWARD -j limit-1652 --A FORWARD -j limit-1651 --A FORWARD -j limit-1650 --A FORWARD -j limit-1649 --A FORWARD -j limit-1648 --A FORWARD -j limit-1647 --A FORWARD -j limit-1646 --A FORWARD -j limit-1645 --A FORWARD -j limit-1644 --A FORWARD -j limit-1643 --A FORWARD -j limit-1642 --A FORWARD -j limit-1641 --A FORWARD -j limit-1640 --A FORWARD -j limit-1639 --A FORWARD -j limit-1638 --A FORWARD -j limit-1637 --A FORWARD -j limit-1636 --A FORWARD -j limit-1635 --A FORWARD -j limit-1634 --A FORWARD -j limit-1633 --A FORWARD -j limit-1632 --A FORWARD -j limit-1631 --A FORWARD -j limit-1630 --A FORWARD -j limit-1629 --A FORWARD -j limit-1628 --A FORWARD -j limit-1627 --A FORWARD -j limit-1626 --A FORWARD -j limit-1625 --A FORWARD -j limit-1624 --A FORWARD -j limit-1623 --A FORWARD -j limit-1622 --A FORWARD -j limit-1621 --A FORWARD -j limit-1620 --A FORWARD -j limit-1619 --A FORWARD -j limit-1618 --A FORWARD -j limit-1617 --A FORWARD -j limit-1616 --A FORWARD -j limit-1615 --A FORWARD -j limit-1614 --A FORWARD -j limit-1613 --A FORWARD -j limit-1612 --A FORWARD -j limit-1611 --A FORWARD -j limit-1610 --A FORWARD -j limit-1609 --A FORWARD -j limit-1608 --A FORWARD -j limit-1607 --A FORWARD -j limit-1606 --A FORWARD -j limit-1605 --A FORWARD -j limit-1604 --A FORWARD -j limit-1603 --A FORWARD -j limit-1602 --A FORWARD -j limit-1601 --A FORWARD -j limit-1600 --A FORWARD -j limit-1599 --A FORWARD -j limit-1598 --A FORWARD -j limit-1597 --A FORWARD -j limit-1596 --A FORWARD -j limit-1595 --A FORWARD -j limit-1594 --A FORWARD -j limit-1593 --A FORWARD -j limit-1592 --A FORWARD -j limit-1591 --A FORWARD -j limit-1590 --A FORWARD -j limit-1589 --A FORWARD -j limit-1588 --A FORWARD -j limit-1587 --A FORWARD -j limit-1586 --A FORWARD -j limit-1585 --A FORWARD -j limit-1584 --A FORWARD -j limit-1583 --A FORWARD -j limit-1582 --A FORWARD -j limit-1581 --A FORWARD -j limit-1580 --A FORWARD -j limit-1579 --A FORWARD -j limit-1578 --A FORWARD -j limit-1577 --A FORWARD -j limit-1576 --A FORWARD -j limit-1575 --A FORWARD -j limit-1574 --A FORWARD -j limit-1573 --A FORWARD -j limit-1572 --A FORWARD -j limit-1571 --A FORWARD -j limit-1570 --A FORWARD -j limit-1569 --A FORWARD -j limit-1568 --A FORWARD -j limit-1567 --A FORWARD -j limit-1566 --A FORWARD -j limit-1565 --A FORWARD -j limit-1564 --A FORWARD -j limit-1563 --A FORWARD -j limit-1562 --A FORWARD -j limit-1561 --A FORWARD -j limit-1560 --A FORWARD -j limit-1559 --A FORWARD -j limit-1558 --A FORWARD -j limit-1557 --A FORWARD -j limit-1556 --A FORWARD -j limit-1555 --A FORWARD -j limit-1554 --A FORWARD -j limit-1553 --A FORWARD -j limit-1552 --A FORWARD -j limit-1551 --A FORWARD -j limit-1550 --A FORWARD -j limit-1549 --A FORWARD -j limit-1548 --A FORWARD -j limit-1547 --A FORWARD -j limit-1546 --A FORWARD -j limit-1545 --A FORWARD -j limit-1544 --A FORWARD -j limit-1543 --A FORWARD -j limit-1542 --A FORWARD -j limit-1541 --A FORWARD -j limit-1540 --A FORWARD -j limit-1539 --A FORWARD -j limit-1538 --A FORWARD -j limit-1537 --A FORWARD -j limit-1536 --A FORWARD -j limit-1535 --A FORWARD -j limit-1534 --A FORWARD -j limit-1533 --A FORWARD -j limit-1532 --A FORWARD -j limit-1531 --A FORWARD -j limit-1530 --A FORWARD -j limit-1529 --A FORWARD -j limit-1528 --A FORWARD -j limit-1527 --A FORWARD -j limit-1526 --A FORWARD -j limit-1525 --A FORWARD -j limit-1524 --A FORWARD -j limit-1523 --A FORWARD -j limit-1522 --A FORWARD -j limit-1521 --A FORWARD -j limit-1520 --A FORWARD -j limit-1519 --A FORWARD -j limit-1518 --A FORWARD -j limit-1517 --A FORWARD -j limit-1516 --A FORWARD -j limit-1515 --A FORWARD -j limit-1514 --A FORWARD -j limit-1513 --A FORWARD -j limit-1512 --A FORWARD -j limit-1511 --A FORWARD -j limit-1510 --A FORWARD -j limit-1509 --A FORWARD -j limit-1508 --A FORWARD -j limit-1507 --A FORWARD -j limit-1506 --A FORWARD -j limit-1505 --A FORWARD -j limit-1504 --A FORWARD -j limit-1503 --A FORWARD -j limit-1502 --A FORWARD -j limit-1501 --A FORWARD -j limit-1500 --A FORWARD -j limit-1499 --A FORWARD -j limit-1498 --A FORWARD -j limit-1497 --A FORWARD -j limit-1496 --A FORWARD -j limit-1495 --A FORWARD -j limit-1494 --A FORWARD -j limit-1493 --A FORWARD -j limit-1492 --A FORWARD -j limit-1491 --A FORWARD -j limit-1490 --A FORWARD -j limit-1489 --A FORWARD -j limit-1488 --A FORWARD -j limit-1487 --A FORWARD -j limit-1486 --A FORWARD -j limit-1485 --A FORWARD -j limit-1484 --A FORWARD -j limit-1483 --A FORWARD -j limit-1482 --A FORWARD -j limit-1481 --A FORWARD -j limit-1480 --A FORWARD -j limit-1479 --A FORWARD -j limit-1478 --A FORWARD -j limit-1477 --A FORWARD -j limit-1476 --A FORWARD -j limit-1475 --A FORWARD -j limit-1474 --A FORWARD -j limit-1473 --A FORWARD -j limit-1472 --A FORWARD -j limit-1471 --A FORWARD -j limit-1470 --A FORWARD -j limit-1469 --A FORWARD -j limit-1468 --A FORWARD -j limit-1467 --A FORWARD -j limit-1466 --A FORWARD -j limit-1465 --A FORWARD -j limit-1464 --A FORWARD -j limit-1463 --A FORWARD -j limit-1462 --A FORWARD -j limit-1461 --A FORWARD -j limit-1460 --A FORWARD -j limit-1459 --A FORWARD -j limit-1458 --A FORWARD -j limit-1457 --A FORWARD -j limit-1456 --A FORWARD -j limit-1455 --A FORWARD -j limit-1454 --A FORWARD -j limit-1453 --A FORWARD -j limit-1452 --A FORWARD -j limit-1451 --A FORWARD -j limit-1450 --A FORWARD -j limit-1449 --A FORWARD -j limit-1448 --A FORWARD -j limit-1447 --A FORWARD -j limit-1446 --A FORWARD -j limit-1445 --A FORWARD -j limit-1444 --A FORWARD -j limit-1443 --A FORWARD -j limit-1442 --A FORWARD -j limit-1441 --A FORWARD -j limit-1440 --A FORWARD -j limit-1439 --A FORWARD -j limit-1438 --A FORWARD -j limit-1437 --A FORWARD -j limit-1436 --A FORWARD -j limit-1435 --A FORWARD -j limit-1434 --A FORWARD -j limit-1433 --A FORWARD -j limit-1432 --A FORWARD -j limit-1431 --A FORWARD -j limit-1430 --A FORWARD -j limit-1429 --A FORWARD -j limit-1428 --A FORWARD -j limit-1427 --A FORWARD -j limit-1426 --A FORWARD -j limit-1425 --A FORWARD -j limit-1424 --A FORWARD -j limit-1423 --A FORWARD -j limit-1422 --A FORWARD -j limit-1421 --A FORWARD -j limit-1420 --A FORWARD -j limit-1419 --A FORWARD -j limit-1418 --A FORWARD -j limit-1417 --A FORWARD -j limit-1416 --A FORWARD -j limit-1415 --A FORWARD -j limit-1414 --A FORWARD -j limit-1413 --A FORWARD -j limit-1412 --A FORWARD -j limit-1411 --A FORWARD -j limit-1410 --A FORWARD -j limit-1409 --A FORWARD -j limit-1408 --A FORWARD -j limit-1407 --A FORWARD -j limit-1406 --A FORWARD -j limit-1405 --A FORWARD -j limit-1404 --A FORWARD -j limit-1403 --A FORWARD -j limit-1402 --A FORWARD -j limit-1401 --A FORWARD -j limit-1400 --A FORWARD -j limit-1399 --A FORWARD -j limit-1398 --A FORWARD -j limit-1397 --A FORWARD -j limit-1396 --A FORWARD -j limit-1395 --A FORWARD -j limit-1394 --A FORWARD -j limit-1393 --A FORWARD -j limit-1392 --A FORWARD -j limit-1391 --A FORWARD -j limit-1390 --A FORWARD -j limit-1389 --A FORWARD -j limit-1388 --A FORWARD -j limit-1387 --A FORWARD -j limit-1386 --A FORWARD -j limit-1385 --A FORWARD -j limit-1384 --A FORWARD -j limit-1383 --A FORWARD -j limit-1382 --A FORWARD -j limit-1381 --A FORWARD -j limit-1380 --A FORWARD -j limit-1379 --A FORWARD -j limit-1378 --A FORWARD -j limit-1377 --A FORWARD -j limit-1376 --A FORWARD -j limit-1375 --A FORWARD -j limit-1374 --A FORWARD -j limit-1373 --A FORWARD -j limit-1372 --A FORWARD -j limit-1371 --A FORWARD -j limit-1370 --A FORWARD -j limit-1369 --A FORWARD -j limit-1368 --A FORWARD -j limit-1367 --A FORWARD -j limit-1366 --A FORWARD -j limit-1365 --A FORWARD -j limit-1364 --A FORWARD -j limit-1363 --A FORWARD -j limit-1362 --A FORWARD -j limit-1361 --A FORWARD -j limit-1360 --A FORWARD -j limit-1359 --A FORWARD -j limit-1358 --A FORWARD -j limit-1357 --A FORWARD -j limit-1356 --A FORWARD -j limit-1355 --A FORWARD -j limit-1354 --A FORWARD -j limit-1353 --A FORWARD -j limit-1352 --A FORWARD -j limit-1351 --A FORWARD -j limit-1350 --A FORWARD -j limit-1349 --A FORWARD -j limit-1348 --A FORWARD -j limit-1347 --A FORWARD -j limit-1346 --A FORWARD -j limit-1345 --A FORWARD -j limit-1344 --A FORWARD -j limit-1343 --A FORWARD -j limit-1342 --A FORWARD -j limit-1341 --A FORWARD -j limit-1340 --A FORWARD -j limit-1339 --A FORWARD -j limit-1338 --A FORWARD -j limit-1337 --A FORWARD -j limit-1336 --A FORWARD -j limit-1335 --A FORWARD -j limit-1334 --A FORWARD -j limit-1333 --A FORWARD -j limit-1332 --A FORWARD -j limit-1331 --A FORWARD -j limit-1330 --A FORWARD -j limit-1329 --A FORWARD -j limit-1328 --A FORWARD -j limit-1327 --A FORWARD -j limit-1326 --A FORWARD -j limit-1325 --A FORWARD -j limit-1324 --A FORWARD -j limit-1323 --A FORWARD -j limit-1322 --A FORWARD -j limit-1321 --A FORWARD -j limit-1320 --A FORWARD -j limit-1319 --A FORWARD -j limit-1318 --A FORWARD -j limit-1317 --A FORWARD -j limit-1316 --A FORWARD -j limit-1315 --A FORWARD -j limit-1314 --A FORWARD -j limit-1313 --A FORWARD -j limit-1312 --A FORWARD -j limit-1311 --A FORWARD -j limit-1310 --A FORWARD -j limit-1309 --A FORWARD -j limit-1308 --A FORWARD -j limit-1307 --A FORWARD -j limit-1306 --A FORWARD -j limit-1305 --A FORWARD -j limit-1304 --A FORWARD -j limit-1303 --A FORWARD -j limit-1302 --A FORWARD -j limit-1301 --A FORWARD -j limit-1300 --A FORWARD -j limit-1299 --A FORWARD -j limit-1298 --A FORWARD -j limit-1297 --A FORWARD -j limit-1296 --A FORWARD -j limit-1295 --A FORWARD -j limit-1294 --A FORWARD -j limit-1293 --A FORWARD -j limit-1292 --A FORWARD -j limit-1291 --A FORWARD -j limit-1290 --A FORWARD -j limit-1289 --A FORWARD -j limit-1288 --A FORWARD -j limit-1287 --A FORWARD -j limit-1286 --A FORWARD -j limit-1285 --A FORWARD -j limit-1284 --A FORWARD -j limit-1283 --A FORWARD -j limit-1282 --A FORWARD -j limit-1281 --A FORWARD -j limit-1280 --A FORWARD -j limit-1279 --A FORWARD -j limit-1278 --A FORWARD -j limit-1277 --A FORWARD -j limit-1276 --A FORWARD -j limit-1275 --A FORWARD -j limit-1274 --A FORWARD -j limit-1273 --A FORWARD -j limit-1272 --A FORWARD -j limit-1271 --A FORWARD -j limit-1270 --A FORWARD -j limit-1269 --A FORWARD -j limit-1268 --A FORWARD -j limit-1267 --A FORWARD -j limit-1266 --A FORWARD -j limit-1265 --A FORWARD -j limit-1264 --A FORWARD -j limit-1263 --A FORWARD -j limit-1262 --A FORWARD -j limit-1261 --A FORWARD -j limit-1260 --A FORWARD -j limit-1259 --A FORWARD -j limit-1258 +-A FORWARD -j limit-2927 +-A FORWARD -j limit-2926 +-A FORWARD -j limit-2925 +-A FORWARD -j limit-2924 +-A FORWARD -j limit-2923 +-A FORWARD -j limit-2922 +-A FORWARD -j limit-2921 +-A FORWARD -j limit-2920 +-A FORWARD -j limit-2919 +-A FORWARD -j limit-2918 +-A FORWARD -j limit-2917 +-A FORWARD -j limit-2916 +-A FORWARD -j limit-2915 +-A FORWARD -j limit-2914 +-A FORWARD -j limit-2913 +-A FORWARD -j limit-2912 +-A FORWARD -j limit-2911 +-A FORWARD -j limit-2910 +-A FORWARD -j limit-2909 +-A FORWARD -j limit-2908 +-A FORWARD -j limit-2907 +-A FORWARD -j limit-2906 +-A FORWARD -j limit-2905 +-A FORWARD -j limit-2904 +-A FORWARD -j limit-2903 +-A FORWARD -j limit-2902 +-A FORWARD -j limit-2901 +-A FORWARD -j limit-2900 +-A FORWARD -j limit-2899 +-A FORWARD -j limit-2898 +-A FORWARD -j limit-2897 +-A FORWARD -j limit-2896 +-A FORWARD -j limit-2895 +-A FORWARD -j limit-2894 +-A FORWARD -j limit-2893 +-A FORWARD -j limit-2892 +-A FORWARD -j limit-2891 +-A FORWARD -j limit-2890 +-A FORWARD -j limit-2889 +-A FORWARD -j limit-2888 +-A FORWARD -j limit-2887 +-A FORWARD -j limit-2886 +-A FORWARD -j limit-2885 +-A FORWARD -j limit-2884 +-A FORWARD -j limit-2883 +-A FORWARD -j limit-2882 +-A FORWARD -j limit-2881 +-A FORWARD -j limit-2880 +-A FORWARD -j limit-2879 +-A FORWARD -j limit-2878 +-A FORWARD -j limit-2877 +-A FORWARD -j limit-2876 +-A FORWARD -j limit-2875 +-A FORWARD -j limit-2874 +-A FORWARD -j limit-2873 +-A FORWARD -j limit-2872 +-A FORWARD -j limit-2871 +-A FORWARD -j limit-2870 +-A FORWARD -j limit-2869 +-A FORWARD -j limit-2868 +-A FORWARD -j limit-2867 +-A FORWARD -j limit-2866 +-A FORWARD -j limit-2865 +-A FORWARD -j limit-2864 +-A FORWARD -j limit-2863 +-A FORWARD -j limit-2862 +-A FORWARD -j limit-2861 +-A FORWARD -j limit-2860 +-A FORWARD -j limit-2859 +-A FORWARD -j limit-2858 +-A FORWARD -j limit-2857 +-A FORWARD -j limit-2856 +-A FORWARD -j limit-2855 +-A FORWARD -j limit-2854 +-A FORWARD -j limit-2853 +-A FORWARD -j limit-2852 +-A FORWARD -j limit-2851 +-A FORWARD -j limit-2850 +-A FORWARD -j limit-2849 +-A FORWARD -j limit-2848 +-A FORWARD -j limit-2847 +-A FORWARD -j limit-2846 +-A FORWARD -j limit-2845 +-A FORWARD -j limit-2844 +-A FORWARD -j limit-2843 +-A FORWARD -j limit-2842 +-A FORWARD -j limit-2841 +-A FORWARD -j limit-2840 +-A FORWARD -j limit-2839 +-A FORWARD -j limit-2838 +-A FORWARD -j limit-2837 +-A FORWARD -j limit-2836 +-A FORWARD -j limit-2835 +-A FORWARD -j limit-2834 +-A FORWARD -j limit-2833 +-A FORWARD -j limit-2832 +-A FORWARD -j limit-2831 +-A FORWARD -j limit-2830 +-A FORWARD -j limit-2829 +-A FORWARD -j limit-2828 +-A FORWARD -j limit-2827 +-A FORWARD -j limit-2826 +-A FORWARD -j limit-2825 +-A FORWARD -j limit-2824 +-A FORWARD -j limit-2823 +-A FORWARD -j limit-2822 +-A FORWARD -j limit-2821 +-A FORWARD -j limit-2820 +-A FORWARD -j limit-2819 +-A FORWARD -j limit-2818 +-A FORWARD -j limit-2817 +-A FORWARD -j limit-2816 +-A FORWARD -j limit-2815 +-A FORWARD -j limit-2814 +-A FORWARD -j limit-2813 +-A FORWARD -j limit-2812 +-A FORWARD -j limit-2811 +-A FORWARD -j limit-2810 +-A FORWARD -j limit-2809 +-A FORWARD -j limit-2808 +-A FORWARD -j limit-2807 +-A FORWARD -j limit-2806 +-A FORWARD -j limit-2805 +-A FORWARD -j limit-2804 +-A FORWARD -j limit-2803 +-A FORWARD -j limit-2802 +-A FORWARD -j limit-2801 +-A FORWARD -j limit-2800 +-A FORWARD -j limit-2799 +-A FORWARD -j limit-2798 +-A FORWARD -j limit-2797 +-A FORWARD -j limit-2796 +-A FORWARD -j limit-2795 +-A FORWARD -j limit-2794 +-A FORWARD -j limit-2793 +-A FORWARD -j limit-2792 +-A FORWARD -j limit-2791 +-A FORWARD -j limit-2790 +-A FORWARD -j limit-2789 +-A FORWARD -j limit-2788 +-A FORWARD -j limit-2787 +-A FORWARD -j limit-2786 +-A FORWARD -j limit-2785 +-A FORWARD -j limit-2784 +-A FORWARD -j limit-2783 +-A FORWARD -j limit-2782 +-A FORWARD -j limit-2781 +-A FORWARD -j limit-2780 +-A FORWARD -j limit-2779 +-A FORWARD -j limit-2778 +-A FORWARD -j limit-2777 +-A FORWARD -j limit-2776 +-A FORWARD -j limit-2775 +-A FORWARD -j limit-2774 +-A FORWARD -j limit-2773 +-A FORWARD -j limit-2772 +-A FORWARD -j limit-2771 +-A FORWARD -j limit-2770 +-A FORWARD -j limit-2769 +-A FORWARD -j limit-2768 +-A FORWARD -j limit-2767 +-A FORWARD -j limit-2766 +-A FORWARD -j limit-2765 +-A FORWARD -j limit-2764 +-A FORWARD -j limit-2763 +-A FORWARD -j limit-2762 +-A FORWARD -j limit-2761 +-A FORWARD -j limit-2760 +-A FORWARD -j limit-2759 +-A FORWARD -j limit-2758 +-A FORWARD -j limit-2757 +-A FORWARD -j limit-2756 +-A FORWARD -j limit-2755 +-A FORWARD -j limit-2754 +-A FORWARD -j limit-2753 +-A FORWARD -j limit-2752 +-A FORWARD -j limit-2751 +-A FORWARD -j limit-2750 +-A FORWARD -j limit-2749 +-A FORWARD -j limit-2748 +-A FORWARD -j limit-2747 +-A FORWARD -j limit-2746 +-A FORWARD -j limit-2745 +-A FORWARD -j limit-2744 +-A FORWARD -j limit-2743 +-A FORWARD -j limit-2742 +-A FORWARD -j limit-2741 +-A FORWARD -j limit-2740 +-A FORWARD -j limit-2739 +-A FORWARD -j limit-2738 +-A FORWARD -j limit-2737 +-A FORWARD -j limit-2736 +-A FORWARD -j limit-2735 +-A FORWARD -j limit-2734 +-A FORWARD -j limit-2733 +-A FORWARD -j limit-2732 +-A FORWARD -j limit-2731 +-A FORWARD -j limit-2730 +-A FORWARD -j limit-2729 +-A FORWARD -j limit-2728 +-A FORWARD -j limit-2727 +-A FORWARD -j limit-2726 +-A FORWARD -j limit-2725 +-A FORWARD -j limit-2724 +-A FORWARD -j limit-2723 +-A FORWARD -j limit-2722 +-A FORWARD -j limit-2721 +-A FORWARD -j limit-2720 +-A FORWARD -j limit-2719 +-A FORWARD -j limit-2718 +-A FORWARD -j limit-2717 +-A FORWARD -j limit-2716 +-A FORWARD -j limit-2715 +-A FORWARD -j limit-2714 +-A FORWARD -j limit-2713 +-A FORWARD -j limit-2712 +-A FORWARD -j limit-2711 +-A FORWARD -j limit-2710 +-A FORWARD -j limit-2709 +-A FORWARD -j limit-2708 +-A FORWARD -j limit-2707 +-A FORWARD -j limit-2706 +-A FORWARD -j limit-2705 +-A FORWARD -j limit-2704 +-A FORWARD -j limit-2703 +-A FORWARD -j limit-2702 +-A FORWARD -j limit-2701 +-A FORWARD -j limit-2700 +-A FORWARD -j limit-2699 +-A FORWARD -j limit-2698 +-A FORWARD -j limit-2697 +-A FORWARD -j limit-2696 +-A FORWARD -j limit-2695 +-A FORWARD -j limit-2694 +-A FORWARD -j limit-2693 +-A FORWARD -j limit-2692 +-A FORWARD -j limit-2691 +-A FORWARD -j limit-2690 +-A FORWARD -j limit-2689 +-A FORWARD -j limit-2688 +-A FORWARD -j limit-2687 +-A FORWARD -j limit-2686 +-A FORWARD -j limit-2685 +-A FORWARD -j limit-2684 +-A FORWARD -j limit-2683 +-A FORWARD -j limit-2682 +-A FORWARD -j limit-2681 +-A FORWARD -j limit-2680 +-A FORWARD -j limit-2679 +-A FORWARD -j limit-2678 +-A FORWARD -j limit-2677 +-A FORWARD -j limit-2676 +-A FORWARD -j limit-2675 +-A FORWARD -j limit-2674 +-A FORWARD -j limit-2673 +-A FORWARD -j limit-2672 +-A FORWARD -j limit-2671 +-A FORWARD -j limit-2670 +-A FORWARD -j limit-2669 +-A FORWARD -j limit-2668 +-A FORWARD -j limit-2667 +-A FORWARD -j limit-2666 +-A FORWARD -j limit-2665 +-A FORWARD -j limit-2664 +-A FORWARD -j limit-2663 +-A FORWARD -j limit-2662 +-A FORWARD -j limit-2661 +-A FORWARD -j limit-2660 +-A FORWARD -j limit-2659 +-A FORWARD -j limit-2658 +-A FORWARD -j limit-2657 +-A FORWARD -j limit-2656 +-A FORWARD -j limit-2655 +-A FORWARD -j limit-2654 +-A FORWARD -j limit-2653 +-A FORWARD -j limit-2652 +-A FORWARD -j limit-2651 +-A FORWARD -j limit-2650 +-A FORWARD -j limit-2649 +-A FORWARD -j limit-2648 +-A FORWARD -j limit-2647 +-A FORWARD -j limit-2646 +-A FORWARD -j limit-2645 +-A FORWARD -j limit-2644 +-A FORWARD -j limit-2643 +-A FORWARD -j limit-2642 +-A FORWARD -j limit-2641 +-A FORWARD -j limit-2640 +-A FORWARD -j limit-2639 +-A FORWARD -j limit-2638 +-A FORWARD -j limit-2637 +-A FORWARD -j limit-2636 +-A FORWARD -j limit-2635 +-A FORWARD -j limit-2634 +-A FORWARD -j limit-2633 +-A FORWARD -j limit-2632 +-A FORWARD -j limit-2631 +-A FORWARD -j limit-2630 +-A FORWARD -j limit-2629 +-A FORWARD -j limit-2628 +-A FORWARD -j limit-2627 +-A FORWARD -j limit-2626 +-A FORWARD -j limit-2625 +-A FORWARD -j limit-2624 +-A FORWARD -j limit-2623 +-A FORWARD -j limit-2622 +-A FORWARD -j limit-2621 +-A FORWARD -j limit-2620 +-A FORWARD -j limit-2619 +-A FORWARD -j limit-2618 +-A FORWARD -j limit-2617 +-A FORWARD -j limit-2616 +-A FORWARD -j limit-2615 +-A FORWARD -j limit-2614 +-A FORWARD -j limit-2613 +-A FORWARD -j limit-2612 +-A FORWARD -j limit-2611 +-A FORWARD -j limit-2610 +-A FORWARD -j limit-2609 +-A FORWARD -j limit-2608 +-A FORWARD -j limit-2607 +-A FORWARD -j limit-2606 +-A FORWARD -j limit-2605 +-A FORWARD -j limit-2604 +-A FORWARD -j limit-2603 +-A FORWARD -j limit-2602 +-A FORWARD -j limit-2601 +-A FORWARD -j limit-2600 +-A FORWARD -j limit-2599 +-A FORWARD -j limit-2598 +-A FORWARD -j limit-2597 +-A FORWARD -j limit-2596 +-A FORWARD -j limit-2595 +-A FORWARD -j limit-2594 +-A FORWARD -j limit-2593 +-A FORWARD -j limit-2592 +-A FORWARD -j limit-2591 +-A FORWARD -j limit-2590 +-A FORWARD -j limit-2589 +-A FORWARD -j limit-2588 +-A FORWARD -j limit-2587 +-A FORWARD -j limit-2586 +-A FORWARD -j limit-2585 +-A FORWARD -j limit-2584 +-A FORWARD -j limit-2583 +-A FORWARD -j limit-2582 +-A FORWARD -j limit-2581 +-A FORWARD -j limit-2580 +-A FORWARD -j limit-2579 +-A FORWARD -j limit-2578 +-A FORWARD -j limit-2577 +-A FORWARD -j limit-2576 +-A FORWARD -j limit-2575 +-A FORWARD -j limit-2574 +-A FORWARD -j limit-2573 +-A FORWARD -j limit-2572 +-A FORWARD -j limit-2571 +-A FORWARD -j limit-2570 +-A FORWARD -j limit-2569 +-A FORWARD -j limit-2568 +-A FORWARD -j limit-2567 +-A FORWARD -j limit-2566 +-A FORWARD -j limit-2565 +-A FORWARD -j limit-2564 +-A FORWARD -j limit-2563 +-A FORWARD -j limit-2562 +-A FORWARD -j limit-2561 +-A FORWARD -j limit-2560 +-A FORWARD -j limit-2559 +-A FORWARD -j limit-2558 +-A FORWARD -j limit-2557 +-A FORWARD -j limit-2556 +-A FORWARD -j limit-2555 +-A FORWARD -j limit-2554 +-A FORWARD -j limit-2553 +-A FORWARD -j limit-2552 +-A FORWARD -j limit-2551 +-A FORWARD -j limit-2550 +-A FORWARD -j limit-2549 +-A FORWARD -j limit-2548 +-A FORWARD -j limit-2547 +-A FORWARD -j limit-2546 +-A FORWARD -j limit-2545 +-A FORWARD -j limit-2544 +-A FORWARD -j limit-2543 +-A FORWARD -j limit-2542 +-A FORWARD -j limit-2541 +-A FORWARD -j limit-2540 +-A FORWARD -j limit-2539 +-A FORWARD -j limit-2538 +-A FORWARD -j limit-2537 +-A FORWARD -j limit-2536 +-A FORWARD -j limit-2535 +-A FORWARD -j limit-2534 +-A FORWARD -j limit-2533 +-A FORWARD -j limit-2532 +-A FORWARD -j limit-2531 +-A FORWARD -j limit-2530 +-A FORWARD -j limit-2529 +-A FORWARD -j limit-2528 +-A FORWARD -j limit-2527 +-A FORWARD -j limit-2526 +-A FORWARD -j limit-2525 +-A FORWARD -j limit-2524 +-A FORWARD -j limit-2523 +-A FORWARD -j limit-2522 +-A FORWARD -j limit-2521 +-A FORWARD -j limit-2520 +-A FORWARD -j limit-2519 +-A FORWARD -j limit-2518 +-A FORWARD -j limit-2517 +-A FORWARD -j limit-2516 +-A FORWARD -j limit-2515 +-A FORWARD -j limit-2514 +-A FORWARD -j limit-2513 +-A FORWARD -j limit-2512 +-A FORWARD -j limit-2511 +-A FORWARD -j limit-2510 +-A FORWARD -j limit-2509 +-A FORWARD -j limit-2508 +-A FORWARD -j limit-2507 +-A FORWARD -j limit-2506 +-A FORWARD -j limit-2505 +-A FORWARD -j limit-2504 +-A FORWARD -j limit-2503 +-A FORWARD -j limit-2502 +-A FORWARD -j limit-2501 +-A FORWARD -j limit-2500 +-A FORWARD -j limit-2499 +-A FORWARD -j limit-2498 +-A FORWARD -j limit-2497 +-A FORWARD -j limit-2496 +-A FORWARD -j limit-2495 +-A FORWARD -j limit-2494 +-A FORWARD -j limit-2493 +-A FORWARD -j limit-2492 +-A FORWARD -j limit-2491 +-A FORWARD -j limit-2490 +-A FORWARD -j limit-2489 +-A FORWARD -j limit-2488 +-A FORWARD -j limit-2487 +-A FORWARD -j limit-2486 +-A FORWARD -j limit-2485 +-A FORWARD -j limit-2484 +-A FORWARD -j limit-2483 +-A FORWARD -j limit-2482 +-A FORWARD -j limit-2481 +-A FORWARD -j limit-2480 +-A FORWARD -j limit-2479 +-A FORWARD -j limit-2478 +-A FORWARD -j limit-2477 +-A FORWARD -j limit-2476 +-A FORWARD -j limit-2475 +-A FORWARD -j limit-2474 +-A FORWARD -j limit-2473 +-A FORWARD -j limit-2472 +-A FORWARD -j limit-2471 +-A FORWARD -j limit-2470 +-A FORWARD -j limit-2469 +-A FORWARD -j limit-2468 +-A FORWARD -j limit-2467 +-A FORWARD -j limit-2466 +-A FORWARD -j limit-2465 +-A FORWARD -j limit-2464 +-A FORWARD -j limit-2463 +-A FORWARD -j limit-2462 +-A FORWARD -j limit-2461 +-A FORWARD -j limit-2460 +-A FORWARD -j limit-2459 +-A FORWARD -j limit-2458 +-A FORWARD -j limit-2457 +-A FORWARD -j limit-2456 +-A FORWARD -j limit-2455 +-A FORWARD -j limit-2454 +-A FORWARD -j limit-2453 +-A FORWARD -j limit-2452 +-A FORWARD -j limit-2451 +-A FORWARD -j limit-2450 +-A FORWARD -j limit-2449 +-A FORWARD -j limit-2448 +-A FORWARD -j limit-2447 +-A FORWARD -j limit-2446 +-A FORWARD -j limit-2445 +-A FORWARD -j limit-2444 +-A FORWARD -j limit-2443 +-A FORWARD -j limit-2442 +-A FORWARD -j limit-2441 +-A FORWARD -j limit-2440 +-A FORWARD -j limit-2439 +-A FORWARD -j limit-2438 +-A FORWARD -j limit-2437 +-A FORWARD -j limit-2436 +-A FORWARD -j limit-2435 +-A FORWARD -j limit-2434 +-A FORWARD -j limit-2433 +-A FORWARD -j limit-2432 +-A FORWARD -j limit-2431 +-A FORWARD -j limit-2430 +-A FORWARD -j limit-2429 +-A FORWARD -j limit-2428 +-A FORWARD -j limit-2427 +-A FORWARD -j limit-2426 +-A FORWARD -j limit-2425 +-A FORWARD -j limit-2424 +-A FORWARD -j limit-2423 +-A FORWARD -j limit-2422 +-A FORWARD -j limit-2421 +-A FORWARD -j limit-2420 +-A FORWARD -j limit-2419 +-A FORWARD -j limit-2418 +-A FORWARD -j limit-2417 +-A FORWARD -j limit-2416 +-A FORWARD -j limit-2415 +-A FORWARD -j limit-2414 +-A FORWARD -j limit-2413 +-A FORWARD -j limit-2412 +-A FORWARD -j limit-2411 +-A FORWARD -j limit-2410 +-A FORWARD -j limit-2409 +-A FORWARD -j limit-2408 +-A FORWARD -j limit-2407 +-A FORWARD -j limit-2406 +-A FORWARD -j limit-2405 +-A FORWARD -j limit-2404 +-A FORWARD -j limit-2403 +-A FORWARD -j limit-2402 +-A FORWARD -j limit-2401 +-A FORWARD -j limit-2400 +-A FORWARD -j limit-2399 +-A FORWARD -j limit-2398 +-A FORWARD -j limit-2397 +-A FORWARD -j limit-2396 +-A FORWARD -j limit-2395 +-A FORWARD -j limit-2394 +-A FORWARD -j limit-2393 +-A FORWARD -j limit-2392 +-A FORWARD -j limit-2391 +-A FORWARD -j limit-2390 +-A FORWARD -j limit-2389 +-A FORWARD -j limit-2388 +-A FORWARD -j limit-2387 +-A FORWARD -j limit-2386 +-A FORWARD -j limit-2385 +-A FORWARD -j limit-2384 +-A FORWARD -j limit-2383 +-A FORWARD -j limit-2382 +-A FORWARD -j limit-2381 +-A FORWARD -j limit-2380 +-A FORWARD -j limit-2379 +-A FORWARD -j limit-2378 +-A FORWARD -j limit-2377 +-A FORWARD -j limit-2376 +-A FORWARD -j limit-2375 +-A FORWARD -j limit-2374 +-A FORWARD -j limit-2373 +-A FORWARD -j limit-2372 +-A FORWARD -j limit-2371 +-A FORWARD -j limit-2370 +-A FORWARD -j limit-2369 +-A FORWARD -j limit-2368 +-A FORWARD -j limit-2367 +-A FORWARD -j limit-2366 +-A FORWARD -j limit-2365 +-A FORWARD -j limit-2364 +-A FORWARD -j limit-2363 +-A FORWARD -j limit-2362 +-A FORWARD -j limit-2361 +-A FORWARD -j limit-2360 +-A FORWARD -j limit-2359 +-A FORWARD -j limit-2358 +-A FORWARD -j limit-2357 +-A FORWARD -j limit-2356 +-A FORWARD -j limit-2355 +-A FORWARD -j limit-2354 +-A FORWARD -j limit-2353 +-A FORWARD -j limit-2352 +-A FORWARD -j limit-2351 +-A FORWARD -j limit-2350 +-A FORWARD -j limit-2349 +-A FORWARD -j limit-2348 +-A FORWARD -j limit-2347 +-A FORWARD -j limit-2346 +-A FORWARD -j limit-2345 +-A FORWARD -j limit-2344 +-A FORWARD -j limit-2343 +-A FORWARD -j limit-2342 +-A FORWARD -j limit-2341 +-A FORWARD -j limit-2340 +-A FORWARD -j limit-2339 +-A FORWARD -j limit-2338 +-A FORWARD -j limit-2337 +-A FORWARD -j limit-2336 +-A FORWARD -j limit-2335 +-A FORWARD -j limit-2334 +-A FORWARD -j limit-2333 +-A FORWARD -j limit-2332 +-A FORWARD -j limit-2331 +-A FORWARD -j limit-2330 +-A FORWARD -j limit-2329 +-A FORWARD -j limit-2328 +-A FORWARD -j limit-2327 +-A FORWARD -j limit-2326 +-A FORWARD -j limit-2325 +-A FORWARD -j limit-2324 +-A FORWARD -j limit-2323 +-A FORWARD -j limit-2322 +-A FORWARD -j limit-2321 +-A FORWARD -j limit-2320 +-A FORWARD -j limit-2319 +-A FORWARD -j limit-2318 +-A FORWARD -j limit-2317 +-A FORWARD -j limit-2316 +-A FORWARD -j limit-2315 +-A FORWARD -j limit-2314 +-A FORWARD -j limit-2313 +-A FORWARD -j limit-2312 +-A FORWARD -j limit-2311 +-A FORWARD -j limit-2310 +-A FORWARD -j limit-2309 +-A FORWARD -j limit-2308 +-A FORWARD -j limit-2307 +-A FORWARD -j limit-2306 +-A FORWARD -j limit-2305 +-A FORWARD -j limit-2304 +-A FORWARD -j limit-2303 +-A FORWARD -j limit-2302 +-A FORWARD -j limit-2301 +-A FORWARD -j limit-2300 +-A FORWARD -j limit-2299 +-A FORWARD -j limit-2298 +-A FORWARD -j limit-2297 +-A FORWARD -j limit-2296 +-A FORWARD -j limit-2295 +-A FORWARD -j limit-2294 +-A FORWARD -j limit-2293 +-A FORWARD -j limit-2292 +-A FORWARD -j limit-2291 +-A FORWARD -j limit-2290 +-A FORWARD -j limit-2289 +-A FORWARD -j limit-2288 +-A FORWARD -j limit-2287 +-A FORWARD -j limit-2286 +-A FORWARD -j limit-2285 +-A FORWARD -j limit-2284 +-A FORWARD -j limit-2283 +-A FORWARD -j limit-2282 +-A FORWARD -j limit-2281 +-A FORWARD -j limit-2280 +-A FORWARD -j limit-2279 +-A FORWARD -j limit-2278 +-A FORWARD -j limit-2277 +-A FORWARD -j limit-2276 +-A FORWARD -j limit-2275 +-A FORWARD -j limit-2274 +-A FORWARD -j limit-2273 +-A FORWARD -j limit-2272 +-A FORWARD -j limit-2271 +-A FORWARD -j limit-2270 +-A FORWARD -j limit-2269 +-A FORWARD -j limit-2268 +-A FORWARD -j limit-2267 +-A FORWARD -j limit-2266 +-A FORWARD -j limit-2265 +-A FORWARD -j limit-2264 +-A FORWARD -j limit-2263 +-A FORWARD -j limit-2262 +-A FORWARD -j limit-2261 +-A FORWARD -j limit-2260 +-A FORWARD -j limit-2259 +-A FORWARD -j limit-2258 +-A FORWARD -j limit-2257 +-A FORWARD -j limit-2256 +-A FORWARD -j limit-2255 +-A FORWARD -j limit-2254 +-A FORWARD -j limit-2253 +-A FORWARD -j limit-2252 +-A FORWARD -j limit-2251 +-A FORWARD -j limit-2250 +-A FORWARD -j limit-2249 +-A FORWARD -j limit-2248 +-A FORWARD -j limit-2247 +-A FORWARD -j limit-2246 +-A FORWARD -j limit-2245 +-A FORWARD -j limit-2244 +-A FORWARD -j limit-2243 +-A FORWARD -j limit-2242 +-A FORWARD -j limit-2241 +-A FORWARD -j limit-2240 +-A FORWARD -j limit-2239 +-A FORWARD -j limit-2238 +-A FORWARD -j limit-2237 +-A FORWARD -j limit-2236 +-A FORWARD -j limit-2235 +-A FORWARD -j limit-2234 +-A FORWARD -j limit-2233 +-A FORWARD -j limit-2232 +-A FORWARD -j limit-2231 +-A FORWARD -j limit-2230 +-A FORWARD -j limit-2229 +-A FORWARD -j limit-2228 +-A FORWARD -j limit-2227 +-A FORWARD -j limit-2226 +-A FORWARD -j limit-2225 +-A FORWARD -j limit-2224 +-A FORWARD -j limit-2223 +-A FORWARD -j limit-2222 +-A FORWARD -j limit-2221 +-A FORWARD -j limit-2220 +-A FORWARD -j limit-2219 +-A FORWARD -j limit-2218 +-A FORWARD -j limit-2217 +-A FORWARD -j limit-2216 +-A FORWARD -j limit-2215 +-A FORWARD -j limit-2214 +-A FORWARD -j limit-2213 +-A FORWARD -j limit-2212 +-A FORWARD -j limit-2211 +-A FORWARD -j limit-2210 +-A FORWARD -j limit-2209 +-A FORWARD -j limit-2208 +-A FORWARD -j limit-2207 +-A FORWARD -j limit-2206 +-A FORWARD -j limit-2205 +-A FORWARD -j limit-2204 +-A FORWARD -j limit-2203 +-A FORWARD -j limit-2202 +-A FORWARD -j limit-2201 +-A FORWARD -j limit-2200 +-A FORWARD -j limit-2199 +-A FORWARD -j limit-2198 +-A FORWARD -j limit-2197 +-A FORWARD -j limit-2196 +-A FORWARD -j limit-2195 +-A FORWARD -j limit-2194 +-A FORWARD -j limit-2193 +-A FORWARD -j limit-2192 +-A FORWARD -j limit-2191 +-A FORWARD -j limit-2190 +-A FORWARD -j limit-2189 +-A FORWARD -j limit-2188 +-A FORWARD -j limit-2187 +-A FORWARD -j limit-2186 +-A FORWARD -j limit-2185 +-A FORWARD -j limit-2184 +-A FORWARD -j limit-2183 +-A FORWARD -j limit-2182 +-A FORWARD -j limit-2181 +-A FORWARD -j limit-2180 +-A FORWARD -j limit-2179 +-A FORWARD -j limit-2178 +-A FORWARD -j limit-2177 +-A FORWARD -j limit-2176 +-A FORWARD -j limit-2175 +-A FORWARD -j limit-2174 +-A FORWARD -j limit-2173 +-A FORWARD -j limit-2172 +-A FORWARD -j limit-2171 +-A FORWARD -j limit-2170 +-A FORWARD -j limit-2169 +-A FORWARD -j limit-2168 +-A FORWARD -j limit-2167 +-A FORWARD -j limit-2166 +-A FORWARD -j limit-2165 +-A FORWARD -j limit-2164 +-A FORWARD -j limit-2163 +-A FORWARD -j limit-2162 +-A FORWARD -j limit-2161 +-A FORWARD -j limit-2160 +-A FORWARD -j limit-2159 +-A FORWARD -j limit-2158 +-A FORWARD -j limit-2157 +-A FORWARD -j limit-2156 +-A FORWARD -j limit-2155 +-A FORWARD -j limit-2154 +-A FORWARD -j limit-2153 +-A FORWARD -j limit-2152 +-A FORWARD -j limit-2151 +-A FORWARD -j limit-2150 +-A FORWARD -j limit-2149 +-A FORWARD -j limit-2148 +-A FORWARD -j limit-2147 +-A FORWARD -j limit-2146 +-A FORWARD -j limit-2145 +-A FORWARD -j limit-2144 +-A FORWARD -j limit-2143 +-A FORWARD -j limit-2142 +-A FORWARD -j limit-2141 +-A FORWARD -j limit-2140 +-A FORWARD -j limit-2139 +-A FORWARD -j limit-2138 +-A FORWARD -j limit-2137 +-A FORWARD -j limit-2136 +-A FORWARD -j limit-2135 +-A FORWARD -j limit-2134 +-A FORWARD -j limit-2133 +-A FORWARD -j limit-2132 +-A FORWARD -j limit-2131 +-A FORWARD -j limit-2130 +-A FORWARD -j limit-2129 +-A FORWARD -j limit-2128 +-A FORWARD -j limit-2127 +-A FORWARD -j limit-2126 +-A FORWARD -j limit-2125 +-A FORWARD -j limit-2124 +-A FORWARD -j limit-2123 +-A FORWARD -j limit-2122 +-A FORWARD -j limit-2121 +-A FORWARD -j limit-2120 +-A FORWARD -j limit-2119 +-A FORWARD -j limit-2118 +-A FORWARD -j limit-2117 +-A FORWARD -j limit-2116 +-A FORWARD -j limit-2115 +-A FORWARD -j limit-2114 +-A FORWARD -j limit-2113 +-A FORWARD -j limit-2112 +-A FORWARD -j limit-2111 +-A FORWARD -j limit-2110 +-A FORWARD -j limit-2109 +-A FORWARD -j limit-2108 +-A FORWARD -j limit-2107 +-A FORWARD -j limit-2106 +-A FORWARD -j limit-2105 +-A FORWARD -j limit-2104 +-A FORWARD -j limit-2103 +-A FORWARD -j limit-2102 +-A FORWARD -j limit-2101 +-A FORWARD -j limit-2100 +-A FORWARD -j limit-2099 +-A FORWARD -j limit-2098 +-A FORWARD -j limit-2097 +-A FORWARD -j limit-2096 +-A FORWARD -j limit-2095 +-A FORWARD -j limit-2094 +-A FORWARD -j limit-2093 +-A FORWARD -j limit-2092 +-A FORWARD -j limit-2091 +-A FORWARD -j limit-2090 +-A FORWARD -j limit-2089 +-A FORWARD -j limit-2088 +-A FORWARD -j limit-2087 +-A FORWARD -j limit-2086 +-A FORWARD -j limit-2085 +-A FORWARD -j limit-2084 +-A FORWARD -j limit-2083 +-A FORWARD -j limit-2082 +-A FORWARD -j limit-2081 +-A FORWARD -j limit-2080 +-A FORWARD -j limit-2079 +-A FORWARD -j limit-2078 +-A FORWARD -j limit-2077 +-A FORWARD -j limit-2076 +-A FORWARD -j limit-2075 +-A FORWARD -j limit-2074 +-A FORWARD -j limit-2073 +-A FORWARD -j limit-2072 +-A FORWARD -j limit-2071 +-A FORWARD -j limit-2070 +-A FORWARD -j limit-2069 +-A FORWARD -j limit-2068 +-A FORWARD -j limit-2067 +-A FORWARD -j limit-2066 +-A FORWARD -j limit-2065 +-A FORWARD -j limit-2064 +-A FORWARD -j limit-2063 +-A FORWARD -j limit-2062 +-A FORWARD -j limit-2061 +-A FORWARD -j limit-2060 +-A FORWARD -j limit-2059 +-A FORWARD -j limit-2058 +-A FORWARD -j limit-2057 +-A FORWARD -j limit-2056 +-A FORWARD -j limit-2055 +-A FORWARD -j limit-2054 +-A FORWARD -j limit-2053 +-A FORWARD -j limit-2052 +-A FORWARD -j limit-2051 +-A FORWARD -j limit-2050 +-A FORWARD -j limit-2049 +-A FORWARD -j limit-2048 +-A FORWARD -j limit-2047 +-A FORWARD -j limit-2046 +-A FORWARD -j limit-2045 +-A FORWARD -j limit-2044 +-A FORWARD -j limit-2043 +-A FORWARD -j limit-2042 +-A FORWARD -j limit-2041 +-A FORWARD -j limit-2040 +-A FORWARD -j limit-2039 +-A FORWARD -j limit-2038 +-A FORWARD -j limit-2037 +-A FORWARD -j limit-2036 +-A FORWARD -j limit-2035 +-A FORWARD -j limit-2034 +-A FORWARD -j limit-2033 +-A FORWARD -j limit-2032 +-A FORWARD -j limit-2031 +-A FORWARD -j limit-2030 +-A FORWARD -j limit-2029 +-A FORWARD -j limit-2028 +-A FORWARD -j limit-2027 +-A FORWARD -j limit-2026 +-A FORWARD -j limit-2025 +-A FORWARD -j limit-2024 +-A FORWARD -j limit-2023 +-A FORWARD -j limit-2022 +-A FORWARD -j limit-2021 +-A FORWARD -j limit-2020 +-A FORWARD -j limit-2019 +-A FORWARD -j limit-2018 +-A FORWARD -j limit-2017 +-A FORWARD -j limit-2016 +-A FORWARD -j limit-2015 +-A FORWARD -j limit-2014 +-A FORWARD -j limit-2013 +-A FORWARD -j limit-2012 +-A FORWARD -j limit-2011 +-A FORWARD -j limit-2010 +-A FORWARD -j limit-2009 +-A FORWARD -j limit-2008 +-A FORWARD -j limit-2007 +-A FORWARD -j limit-2006 +-A FORWARD -j limit-2005 +-A FORWARD -j limit-2004 +-A FORWARD -j limit-2003 +-A FORWARD -j limit-2002 +-A FORWARD -j limit-2001 +-A FORWARD -j limit-2000 +-A FORWARD -j limit-1999 +-A FORWARD -j limit-1998 +-A FORWARD -j limit-1997 +-A FORWARD -j limit-1996 +-A FORWARD -j limit-1995 +-A FORWARD -j limit-1994 +-A FORWARD -j limit-1993 +-A FORWARD -j limit-1992 +-A FORWARD -j limit-1991 +-A FORWARD -j limit-1990 +-A FORWARD -j limit-1989 +-A FORWARD -j limit-1988 +-A FORWARD -j limit-1987 +-A FORWARD -j limit-1986 +-A FORWARD -j limit-1985 +-A FORWARD -j limit-1984 +-A FORWARD -j limit-1983 +-A FORWARD -j limit-1982 +-A FORWARD -j limit-1981 +-A FORWARD -j limit-1980 +-A FORWARD -j limit-1979 +-A FORWARD -j limit-1978 +-A FORWARD -j limit-1977 +-A FORWARD -j limit-1976 +-A FORWARD -j limit-1975 +-A FORWARD -j limit-1974 +-A FORWARD -j limit-1973 +-A FORWARD -j limit-1972 +-A FORWARD -j limit-1971 +-A FORWARD -j limit-1970 +-A FORWARD -j limit-1969 +-A FORWARD -j limit-1968 +-A FORWARD -j limit-1967 +-A FORWARD -j limit-1966 +-A FORWARD -j limit-1965 +-A FORWARD -j limit-1964 +-A FORWARD -j limit-1963 +-A FORWARD -j limit-1962 +-A FORWARD -j limit-1961 +-A FORWARD -j limit-1960 +-A FORWARD -j limit-1959 +-A FORWARD -j limit-1958 +-A FORWARD -j limit-1957 +-A FORWARD -j limit-1956 +-A FORWARD -j limit-1955 +-A FORWARD -j limit-1954 +-A FORWARD -j limit-1953 +-A FORWARD -j limit-1952 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j limit-0 -A FORWARD -o eth1 -d fc00::/7 -j limit-1 @@ -5061,334 +7973,863 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-626 -A FORWARD -o eth1 -d fc00::/7 -j limit-627 -A FORWARD -o eth1 -d fc00::/7 -j limit-628 +-A FORWARD -o eth1 -d fc00::/7 -j limit-629 +-A FORWARD -o eth1 -d fc00::/7 -j limit-630 +-A FORWARD -o eth1 -d fc00::/7 -j limit-631 +-A FORWARD -o eth1 -d fc00::/7 -j limit-632 +-A FORWARD -o eth1 -d fc00::/7 -j limit-633 +-A FORWARD -o eth1 -d fc00::/7 -j limit-634 +-A FORWARD -o eth1 -d fc00::/7 -j limit-635 +-A FORWARD -o eth1 -d fc00::/7 -j limit-636 +-A FORWARD -o eth1 -d fc00::/7 -j limit-637 +-A FORWARD -o eth1 -d fc00::/7 -j limit-638 +-A FORWARD -o eth1 -d fc00::/7 -j limit-639 +-A FORWARD -o eth1 -d fc00::/7 -j limit-640 +-A FORWARD -o eth1 -d fc00::/7 -j limit-641 +-A FORWARD -o eth1 -d fc00::/7 -j limit-642 +-A FORWARD -o eth1 -d fc00::/7 -j limit-643 +-A FORWARD -o eth1 -d fc00::/7 -j limit-644 +-A FORWARD -o eth1 -d fc00::/7 -j limit-645 +-A FORWARD -o eth1 -d fc00::/7 -j limit-646 +-A FORWARD -o eth1 -d fc00::/7 -j limit-647 +-A FORWARD -o eth1 -d fc00::/7 -j limit-648 +-A FORWARD -o eth1 -d fc00::/7 -j limit-649 +-A FORWARD -o eth1 -d fc00::/7 -j limit-650 +-A FORWARD -o eth1 -d fc00::/7 -j limit-651 +-A FORWARD -o eth1 -d fc00::/7 -j limit-652 +-A FORWARD -o eth1 -d fc00::/7 -j limit-653 +-A FORWARD -o eth1 -d fc00::/7 -j limit-654 +-A FORWARD -o eth1 -d fc00::/7 -j limit-655 +-A FORWARD -o eth1 -d fc00::/7 -j limit-656 +-A FORWARD -o eth1 -d fc00::/7 -j limit-657 +-A FORWARD -o eth1 -d fc00::/7 -j limit-658 +-A FORWARD -o eth1 -d fc00::/7 -j limit-659 +-A FORWARD -o eth1 -d fc00::/7 -j limit-660 +-A FORWARD -o eth1 -d fc00::/7 -j limit-661 +-A FORWARD -o eth1 -d fc00::/7 -j limit-662 +-A FORWARD -o eth1 -d fc00::/7 -j limit-663 +-A FORWARD -o eth1 -d fc00::/7 -j limit-664 +-A FORWARD -o eth1 -d fc00::/7 -j limit-665 +-A FORWARD -o eth1 -d fc00::/7 -j limit-666 +-A FORWARD -o eth1 -d fc00::/7 -j limit-667 +-A FORWARD -o eth1 -d fc00::/7 -j limit-668 +-A FORWARD -o eth1 -d fc00::/7 -j limit-669 +-A FORWARD -o eth1 -d fc00::/7 -j limit-670 +-A FORWARD -o eth1 -d fc00::/7 -j limit-671 +-A FORWARD -o eth1 -d fc00::/7 -j limit-672 +-A FORWARD -o eth1 -d fc00::/7 -j limit-673 +-A FORWARD -o eth1 -d fc00::/7 -j limit-674 +-A FORWARD -o eth1 -d fc00::/7 -j limit-675 +-A FORWARD -o eth1 -d fc00::/7 -j limit-676 +-A FORWARD -o eth1 -d fc00::/7 -j limit-677 +-A FORWARD -o eth1 -d fc00::/7 -j limit-678 +-A FORWARD -o eth1 -d fc00::/7 -j limit-679 +-A FORWARD -o eth1 -d fc00::/7 -j limit-680 +-A FORWARD -o eth1 -d fc00::/7 -j limit-681 +-A FORWARD -o eth1 -d fc00::/7 -j limit-682 +-A FORWARD -o eth1 -d fc00::/7 -j limit-683 +-A FORWARD -o eth1 -d fc00::/7 -j limit-684 +-A FORWARD -o eth1 -d fc00::/7 -j limit-685 +-A FORWARD -o eth1 -d fc00::/7 -j limit-686 +-A FORWARD -o eth1 -d fc00::/7 -j limit-687 +-A FORWARD -o eth1 -d fc00::/7 -j limit-688 +-A FORWARD -o eth1 -d fc00::/7 -j limit-689 +-A FORWARD -o eth1 -d fc00::/7 -j limit-690 +-A FORWARD -o eth1 -d fc00::/7 -j limit-691 +-A FORWARD -o eth1 -d fc00::/7 -j limit-692 +-A FORWARD -o eth1 -d fc00::/7 -j limit-693 +-A FORWARD -o eth1 -d fc00::/7 -j limit-694 +-A FORWARD -o eth1 -d fc00::/7 -j limit-695 +-A FORWARD -o eth1 -d fc00::/7 -j limit-696 +-A FORWARD -o eth1 -d fc00::/7 -j limit-697 +-A FORWARD -o eth1 -d fc00::/7 -j limit-698 +-A FORWARD -o eth1 -d fc00::/7 -j limit-699 +-A FORWARD -o eth1 -d fc00::/7 -j limit-700 +-A FORWARD -o eth1 -d fc00::/7 -j limit-701 +-A FORWARD -o eth1 -d fc00::/7 -j limit-702 +-A FORWARD -o eth1 -d fc00::/7 -j limit-703 +-A FORWARD -o eth1 -d fc00::/7 -j limit-704 +-A FORWARD -o eth1 -d fc00::/7 -j limit-705 +-A FORWARD -o eth1 -d fc00::/7 -j limit-706 +-A FORWARD -o eth1 -d fc00::/7 -j limit-707 +-A FORWARD -o eth1 -d fc00::/7 -j limit-708 +-A FORWARD -o eth1 -d fc00::/7 -j limit-709 +-A FORWARD -o eth1 -d fc00::/7 -j limit-710 +-A FORWARD -o eth1 -d fc00::/7 -j limit-711 +-A FORWARD -o eth1 -d fc00::/7 -j limit-712 +-A FORWARD -o eth1 -d fc00::/7 -j limit-713 +-A FORWARD -o eth1 -d fc00::/7 -j limit-714 +-A FORWARD -o eth1 -d fc00::/7 -j limit-715 +-A FORWARD -o eth1 -d fc00::/7 -j limit-716 +-A FORWARD -o eth1 -d fc00::/7 -j limit-717 +-A FORWARD -o eth1 -d fc00::/7 -j limit-718 +-A FORWARD -o eth1 -d fc00::/7 -j limit-719 +-A FORWARD -o eth1 -d fc00::/7 -j limit-720 +-A FORWARD -o eth1 -d fc00::/7 -j limit-721 +-A FORWARD -o eth1 -d fc00::/7 -j limit-722 +-A FORWARD -o eth1 -d fc00::/7 -j limit-723 +-A FORWARD -o eth1 -d fc00::/7 -j limit-724 +-A FORWARD -o eth1 -d fc00::/7 -j limit-725 +-A FORWARD -o eth1 -d fc00::/7 -j limit-726 +-A FORWARD -o eth1 -d fc00::/7 -j limit-727 +-A FORWARD -o eth1 -d fc00::/7 -j limit-728 +-A FORWARD -o eth1 -d fc00::/7 -j limit-729 +-A FORWARD -o eth1 -d fc00::/7 -j limit-730 +-A FORWARD -o eth1 -d fc00::/7 -j limit-731 +-A FORWARD -o eth1 -d fc00::/7 -j limit-732 +-A FORWARD -o eth1 -d fc00::/7 -j limit-733 +-A FORWARD -o eth1 -d fc00::/7 -j limit-734 +-A FORWARD -o eth1 -d fc00::/7 -j limit-735 +-A FORWARD -o eth1 -d fc00::/7 -j limit-736 +-A FORWARD -o eth1 -d fc00::/7 -j limit-737 +-A FORWARD -o eth1 -d fc00::/7 -j limit-738 +-A FORWARD -o eth1 -d fc00::/7 -j limit-739 +-A FORWARD -o eth1 -d fc00::/7 -j limit-740 +-A FORWARD -o eth1 -d fc00::/7 -j limit-741 +-A FORWARD -o eth1 -d fc00::/7 -j limit-742 +-A FORWARD -o eth1 -d fc00::/7 -j limit-743 +-A FORWARD -o eth1 -d fc00::/7 -j limit-744 +-A FORWARD -o eth1 -d fc00::/7 -j limit-745 +-A FORWARD -o eth1 -d fc00::/7 -j limit-746 +-A FORWARD -o eth1 -d fc00::/7 -j limit-747 +-A FORWARD -o eth1 -d fc00::/7 -j limit-748 +-A FORWARD -o eth1 -d fc00::/7 -j limit-749 +-A FORWARD -o eth1 -d fc00::/7 -j limit-750 +-A FORWARD -o eth1 -d fc00::/7 -j limit-751 +-A FORWARD -o eth1 -d fc00::/7 -j limit-752 +-A FORWARD -o eth1 -d fc00::/7 -j limit-753 +-A FORWARD -o eth1 -d fc00::/7 -j limit-754 +-A FORWARD -o eth1 -d fc00::/7 -j limit-755 +-A FORWARD -o eth1 -d fc00::/7 -j limit-756 +-A FORWARD -o eth1 -d fc00::/7 -j limit-757 +-A FORWARD -o eth1 -d fc00::/7 -j limit-758 +-A FORWARD -o eth1 -d fc00::/7 -j limit-759 +-A FORWARD -o eth1 -d fc00::/7 -j limit-760 +-A FORWARD -o eth1 -d fc00::/7 -j limit-761 +-A FORWARD -o eth1 -d fc00::/7 -j limit-762 +-A FORWARD -o eth1 -d fc00::/7 -j limit-763 +-A FORWARD -o eth1 -d fc00::/7 -j limit-764 +-A FORWARD -o eth1 -d fc00::/7 -j limit-765 +-A FORWARD -o eth1 -d fc00::/7 -j limit-766 +-A FORWARD -o eth1 -d fc00::/7 -j limit-767 +-A FORWARD -o eth1 -d fc00::/7 -j limit-768 +-A FORWARD -o eth1 -d fc00::/7 -j limit-769 +-A FORWARD -o eth1 -d fc00::/7 -j limit-770 +-A FORWARD -o eth1 -d fc00::/7 -j limit-771 +-A FORWARD -o eth1 -d fc00::/7 -j limit-772 +-A FORWARD -o eth1 -d fc00::/7 -j limit-773 +-A FORWARD -o eth1 -d fc00::/7 -j limit-774 +-A FORWARD -o eth1 -d fc00::/7 -j limit-775 +-A FORWARD -o eth1 -d fc00::/7 -j limit-776 +-A FORWARD -o eth1 -d fc00::/7 -j limit-777 +-A FORWARD -o eth1 -d fc00::/7 -j limit-778 +-A FORWARD -o eth1 -d fc00::/7 -j limit-779 +-A FORWARD -o eth1 -d fc00::/7 -j limit-780 +-A FORWARD -o eth1 -d fc00::/7 -j limit-781 +-A FORWARD -o eth1 -d fc00::/7 -j limit-782 +-A FORWARD -o eth1 -d fc00::/7 -j limit-783 +-A FORWARD -o eth1 -d fc00::/7 -j limit-784 +-A FORWARD -o eth1 -d fc00::/7 -j limit-785 +-A FORWARD -o eth1 -d fc00::/7 -j limit-786 +-A FORWARD -o eth1 -d fc00::/7 -j limit-787 +-A FORWARD -o eth1 -d fc00::/7 -j limit-788 +-A FORWARD -o eth1 -d fc00::/7 -j limit-789 +-A FORWARD -o eth1 -d fc00::/7 -j limit-790 +-A FORWARD -o eth1 -d fc00::/7 -j limit-791 +-A FORWARD -o eth1 -d fc00::/7 -j limit-792 +-A FORWARD -o eth1 -d fc00::/7 -j limit-793 +-A FORWARD -o eth1 -d fc00::/7 -j limit-794 +-A FORWARD -o eth1 -d fc00::/7 -j limit-795 +-A FORWARD -o eth1 -d fc00::/7 -j limit-796 +-A FORWARD -o eth1 -d fc00::/7 -j limit-797 +-A FORWARD -o eth1 -d fc00::/7 -j limit-798 +-A FORWARD -o eth1 -d fc00::/7 -j limit-799 +-A FORWARD -o eth1 -d fc00::/7 -j limit-800 +-A FORWARD -o eth1 -d fc00::/7 -j limit-801 +-A FORWARD -o eth1 -d fc00::/7 -j limit-802 +-A FORWARD -o eth1 -d fc00::/7 -j limit-803 +-A FORWARD -o eth1 -d fc00::/7 -j limit-804 +-A FORWARD -o eth1 -d fc00::/7 -j limit-805 +-A FORWARD -o eth1 -d fc00::/7 -j limit-806 +-A FORWARD -o eth1 -d fc00::/7 -j limit-807 +-A FORWARD -o eth1 -d fc00::/7 -j limit-808 +-A FORWARD -o eth1 -d fc00::/7 -j limit-809 +-A FORWARD -o eth1 -d fc00::/7 -j limit-810 +-A FORWARD -o eth1 -d fc00::/7 -j limit-811 +-A FORWARD -o eth1 -d fc00::/7 -j limit-812 +-A FORWARD -o eth1 -d fc00::/7 -j limit-813 +-A FORWARD -o eth1 -d fc00::/7 -j limit-814 +-A FORWARD -o eth1 -d fc00::/7 -j limit-815 +-A FORWARD -o eth1 -d fc00::/7 -j limit-816 +-A FORWARD -o eth1 -d fc00::/7 -j limit-817 +-A FORWARD -o eth1 -d fc00::/7 -j limit-818 +-A FORWARD -o eth1 -d fc00::/7 -j limit-819 +-A FORWARD -o eth1 -d fc00::/7 -j limit-820 +-A FORWARD -o eth1 -d fc00::/7 -j limit-821 +-A FORWARD -o eth1 -d fc00::/7 -j limit-822 +-A FORWARD -o eth1 -d fc00::/7 -j limit-823 +-A FORWARD -o eth1 -d fc00::/7 -j limit-824 +-A FORWARD -o eth1 -d fc00::/7 -j limit-825 +-A FORWARD -o eth1 -d fc00::/7 -j limit-826 +-A FORWARD -o eth1 -d fc00::/7 -j limit-827 +-A FORWARD -o eth1 -d fc00::/7 -j limit-828 +-A FORWARD -o eth1 -d fc00::/7 -j limit-829 +-A FORWARD -o eth1 -d fc00::/7 -j limit-830 +-A FORWARD -o eth1 -d fc00::/7 -j limit-831 +-A FORWARD -o eth1 -d fc00::/7 -j limit-832 +-A FORWARD -o eth1 -d fc00::/7 -j limit-833 +-A FORWARD -o eth1 -d fc00::/7 -j limit-834 +-A FORWARD -o eth1 -d fc00::/7 -j limit-835 +-A FORWARD -o eth1 -d fc00::/7 -j limit-836 +-A FORWARD -o eth1 -d fc00::/7 -j limit-837 +-A FORWARD -o eth1 -d fc00::/7 -j limit-838 +-A FORWARD -o eth1 -d fc00::/7 -j limit-839 +-A FORWARD -o eth1 -d fc00::/7 -j limit-840 +-A FORWARD -o eth1 -d fc00::/7 -j limit-841 +-A FORWARD -o eth1 -d fc00::/7 -j limit-842 +-A FORWARD -o eth1 -d fc00::/7 -j limit-843 +-A FORWARD -o eth1 -d fc00::/7 -j limit-844 +-A FORWARD -o eth1 -d fc00::/7 -j limit-845 +-A FORWARD -o eth1 -d fc00::/7 -j limit-846 +-A FORWARD -o eth1 -d fc00::/7 -j limit-847 +-A FORWARD -o eth1 -d fc00::/7 -j limit-848 +-A FORWARD -o eth1 -d fc00::/7 -j limit-849 +-A FORWARD -o eth1 -d fc00::/7 -j limit-850 +-A FORWARD -o eth1 -d fc00::/7 -j limit-851 +-A FORWARD -o eth1 -d fc00::/7 -j limit-852 +-A FORWARD -o eth1 -d fc00::/7 -j limit-853 +-A FORWARD -o eth1 -d fc00::/7 -j limit-854 +-A FORWARD -o eth1 -d fc00::/7 -j limit-855 +-A FORWARD -o eth1 -d fc00::/7 -j limit-856 +-A FORWARD -o eth1 -d fc00::/7 -j limit-857 +-A FORWARD -o eth1 -d fc00::/7 -j limit-858 +-A FORWARD -o eth1 -d fc00::/7 -j limit-859 +-A FORWARD -o eth1 -d fc00::/7 -j limit-860 +-A FORWARD -o eth1 -d fc00::/7 -j limit-861 +-A FORWARD -o eth1 -d fc00::/7 -j limit-862 +-A FORWARD -o eth1 -d fc00::/7 -j limit-863 +-A FORWARD -o eth1 -d fc00::/7 -j limit-864 +-A FORWARD -o eth1 -d fc00::/7 -j limit-865 +-A FORWARD -o eth1 -d fc00::/7 -j limit-866 +-A FORWARD -o eth1 -d fc00::/7 -j limit-867 +-A FORWARD -o eth1 -d fc00::/7 -j limit-868 +-A FORWARD -o eth1 -d fc00::/7 -j limit-869 +-A FORWARD -o eth1 -d fc00::/7 -j limit-870 +-A FORWARD -o eth1 -d fc00::/7 -j limit-871 +-A FORWARD -o eth1 -d fc00::/7 -j limit-872 +-A FORWARD -o eth1 -d fc00::/7 -j limit-873 +-A FORWARD -o eth1 -d fc00::/7 -j limit-874 +-A FORWARD -o eth1 -d fc00::/7 -j limit-875 +-A FORWARD -o eth1 -d fc00::/7 -j limit-876 +-A FORWARD -o eth1 -d fc00::/7 -j limit-877 +-A FORWARD -o eth1 -d fc00::/7 -j limit-878 +-A FORWARD -o eth1 -d fc00::/7 -j limit-879 +-A FORWARD -o eth1 -d fc00::/7 -j limit-880 +-A FORWARD -o eth1 -d fc00::/7 -j limit-881 +-A FORWARD -o eth1 -d fc00::/7 -j limit-882 +-A FORWARD -o eth1 -d fc00::/7 -j limit-883 +-A FORWARD -o eth1 -d fc00::/7 -j limit-884 +-A FORWARD -o eth1 -d fc00::/7 -j limit-885 +-A FORWARD -o eth1 -d fc00::/7 -j limit-886 +-A FORWARD -o eth1 -d fc00::/7 -j limit-887 +-A FORWARD -o eth1 -d fc00::/7 -j limit-888 +-A FORWARD -o eth1 -d fc00::/7 -j limit-889 +-A FORWARD -o eth1 -d fc00::/7 -j limit-890 +-A FORWARD -o eth1 -d fc00::/7 -j limit-891 +-A FORWARD -o eth1 -d fc00::/7 -j limit-892 +-A FORWARD -o eth1 -d fc00::/7 -j limit-893 +-A FORWARD -o eth1 -d fc00::/7 -j limit-894 +-A FORWARD -o eth1 -d fc00::/7 -j limit-895 +-A FORWARD -o eth1 -d fc00::/7 -j limit-896 +-A FORWARD -o eth1 -d fc00::/7 -j limit-897 +-A FORWARD -o eth1 -d fc00::/7 -j limit-898 +-A FORWARD -o eth1 -d fc00::/7 -j limit-899 +-A FORWARD -o eth1 -d fc00::/7 -j limit-900 +-A FORWARD -o eth1 -d fc00::/7 -j limit-901 +-A FORWARD -o eth1 -d fc00::/7 -j limit-902 +-A FORWARD -o eth1 -d fc00::/7 -j limit-903 +-A FORWARD -o eth1 -d fc00::/7 -j limit-904 +-A FORWARD -o eth1 -d fc00::/7 -j limit-905 +-A FORWARD -o eth1 -d fc00::/7 -j limit-906 +-A FORWARD -o eth1 -d fc00::/7 -j limit-907 +-A FORWARD -o eth1 -d fc00::/7 -j limit-908 +-A FORWARD -o eth1 -d fc00::/7 -j limit-909 +-A FORWARD -o eth1 -d fc00::/7 -j limit-910 +-A FORWARD -o eth1 -d fc00::/7 -j limit-911 +-A FORWARD -o eth1 -d fc00::/7 -j limit-912 +-A FORWARD -o eth1 -d fc00::/7 -j limit-913 +-A FORWARD -o eth1 -d fc00::/7 -j limit-914 +-A FORWARD -o eth1 -d fc00::/7 -j limit-915 +-A FORWARD -o eth1 -d fc00::/7 -j limit-916 +-A FORWARD -o eth1 -d fc00::/7 -j limit-917 +-A FORWARD -o eth1 -d fc00::/7 -j limit-918 +-A FORWARD -o eth1 -d fc00::/7 -j limit-919 +-A FORWARD -o eth1 -d fc00::/7 -j limit-920 +-A FORWARD -o eth1 -d fc00::/7 -j limit-921 +-A FORWARD -o eth1 -d fc00::/7 -j limit-922 +-A FORWARD -o eth1 -d fc00::/7 -j limit-923 +-A FORWARD -o eth1 -d fc00::/7 -j limit-924 +-A FORWARD -o eth1 -d fc00::/7 -j limit-925 +-A FORWARD -o eth1 -d fc00::/7 -j limit-926 +-A FORWARD -o eth1 -d fc00::/7 -j limit-927 +-A FORWARD -o eth1 -d fc00::/7 -j limit-928 +-A FORWARD -o eth1 -d fc00::/7 -j limit-929 +-A FORWARD -o eth1 -d fc00::/7 -j limit-930 +-A FORWARD -o eth1 -d fc00::/7 -j limit-931 +-A FORWARD -o eth1 -d fc00::/7 -j limit-932 +-A FORWARD -o eth1 -d fc00::/7 -j limit-933 +-A FORWARD -o eth1 -d fc00::/7 -j limit-934 +-A FORWARD -o eth1 -d fc00::/7 -j limit-935 +-A FORWARD -o eth1 -d fc00::/7 -j limit-936 +-A FORWARD -o eth1 -d fc00::/7 -j limit-937 +-A FORWARD -o eth1 -d fc00::/7 -j limit-938 +-A FORWARD -o eth1 -d fc00::/7 -j limit-939 +-A FORWARD -o eth1 -d fc00::/7 -j limit-940 +-A FORWARD -o eth1 -d fc00::/7 -j limit-941 +-A FORWARD -o eth1 -d fc00::/7 -j limit-942 +-A FORWARD -o eth1 -d fc00::/7 -j limit-943 +-A FORWARD -o eth1 -d fc00::/7 -j limit-944 +-A FORWARD -o eth1 -d fc00::/7 -j limit-945 +-A FORWARD -o eth1 -d fc00::/7 -j limit-946 +-A FORWARD -o eth1 -d fc00::/7 -j limit-947 +-A FORWARD -o eth1 -d fc00::/7 -j limit-948 +-A FORWARD -o eth1 -d fc00::/7 -j limit-949 +-A FORWARD -o eth1 -d fc00::/7 -j limit-950 +-A FORWARD -o eth1 -d fc00::/7 -j limit-951 +-A FORWARD -o eth1 -d fc00::/7 -j limit-952 +-A FORWARD -o eth1 -d fc00::/7 -j limit-953 +-A FORWARD -o eth1 -d fc00::/7 -j limit-954 +-A FORWARD -o eth1 -d fc00::/7 -j limit-955 +-A FORWARD -o eth1 -d fc00::/7 -j limit-956 +-A FORWARD -o eth1 -d fc00::/7 -j limit-957 +-A FORWARD -o eth1 -d fc00::/7 -j limit-958 +-A FORWARD -o eth1 -d fc00::/7 -j limit-959 +-A FORWARD -o eth1 -d fc00::/7 -j limit-960 +-A FORWARD -o eth1 -d fc00::/7 -j limit-961 +-A FORWARD -o eth1 -d fc00::/7 -j limit-962 +-A FORWARD -o eth1 -d fc00::/7 -j limit-963 +-A FORWARD -o eth1 -d fc00::/7 -j limit-964 +-A FORWARD -o eth1 -d fc00::/7 -j limit-965 +-A FORWARD -o eth1 -d fc00::/7 -j limit-966 +-A FORWARD -o eth1 -d fc00::/7 -j limit-967 +-A FORWARD -o eth1 -d fc00::/7 -j limit-968 +-A FORWARD -o eth1 -d fc00::/7 -j limit-969 +-A FORWARD -o eth1 -d fc00::/7 -j limit-970 +-A FORWARD -o eth1 -d fc00::/7 -j limit-971 +-A FORWARD -o eth1 -d fc00::/7 -j limit-972 +-A FORWARD -o eth1 -d fc00::/7 -j limit-973 +-A FORWARD -o eth1 -d fc00::/7 -j limit-974 +-A FORWARD -o eth1 -d fc00::/7 -j limit-975 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-0 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-1 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-2 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-3 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-4 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-5 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-6 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-7 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-8 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-9 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-10 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-11 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-12 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-13 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-14 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-15 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-16 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-17 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-18 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-19 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-20 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-21 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-22 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-23 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-24 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-25 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-26 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-27 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-28 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-29 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-30 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-31 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-32 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-33 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-34 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-35 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-36 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-37 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-38 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-39 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-40 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-41 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-42 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-43 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-44 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-45 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-46 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-47 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-48 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-49 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-50 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-51 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-52 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-53 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-54 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-55 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-56 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-57 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-58 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-59 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-60 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-61 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-62 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-63 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-64 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-65 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-66 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-67 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-68 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-69 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-70 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-71 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-72 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-73 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-74 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-75 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-76 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-77 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-78 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-79 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-80 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-81 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-82 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-83 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-84 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-85 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-86 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-87 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-88 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-89 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-90 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-91 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-92 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-93 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-94 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-95 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-96 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-97 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-98 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-99 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-100 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-101 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-102 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-103 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-104 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-105 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-106 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-107 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-108 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-109 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-110 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-111 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-112 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-113 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-114 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-115 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-116 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-117 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-118 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-119 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-120 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-121 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-122 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-123 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-124 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-125 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-126 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-127 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-128 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-129 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-130 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-131 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-132 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-133 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-134 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-135 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-136 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-137 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-138 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-139 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-140 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-141 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-142 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-143 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-144 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-145 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-146 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-147 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-148 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-149 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-150 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-151 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-152 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-153 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-154 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-155 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-156 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-157 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-158 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-159 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-160 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-161 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-162 --A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-163 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-164 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-165 +-A FORWARD -j logaccept-final-166 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-167 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-168 +-A FORWARD -j logaccept-final-169 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-170 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-171 +-A FORWARD -j logaccept-final-172 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-173 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-174 +-A FORWARD -j logaccept-final-175 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-176 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-177 +-A FORWARD -j logaccept-final-178 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-179 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-180 +-A FORWARD -j logaccept-final-181 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-182 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-183 +-A FORWARD -j logaccept-final-184 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-185 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-186 +-A FORWARD -j logaccept-final-187 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-188 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-189 +-A FORWARD -j logaccept-final-190 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-191 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-192 +-A FORWARD -j logaccept-final-193 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-194 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-195 +-A FORWARD -j logaccept-final-196 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-197 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-198 +-A FORWARD -j logaccept-final-199 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-200 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-201 +-A FORWARD -j logaccept-final-202 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-203 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-204 +-A FORWARD -j logaccept-final-205 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-206 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-207 +-A FORWARD -j logaccept-final-208 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-209 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-210 +-A FORWARD -j logaccept-final-211 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-212 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-213 +-A FORWARD -j logaccept-final-214 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-215 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-216 +-A FORWARD -j logaccept-final-217 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-218 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-219 +-A FORWARD -j logaccept-final-220 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-221 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-222 +-A FORWARD -j logaccept-final-223 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-224 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-225 +-A FORWARD -j logaccept-final-226 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-227 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-228 +-A FORWARD -j logaccept-final-229 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-230 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-231 +-A FORWARD -j logaccept-final-232 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-233 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-234 +-A FORWARD -j logaccept-final-235 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-236 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-237 +-A FORWARD -j logaccept-final-238 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-239 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-240 +-A FORWARD -j logaccept-final-241 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-242 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-243 +-A FORWARD -j logaccept-final-244 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-245 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-246 +-A FORWARD -j logaccept-final-247 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-248 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-249 +-A FORWARD -j logaccept-final-250 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-251 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-252 +-A FORWARD -j logaccept-final-253 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-254 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-255 +-A FORWARD -j logaccept-final-256 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-257 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-258 +-A FORWARD -j logaccept-final-259 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-260 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-261 +-A FORWARD -j logaccept-final-262 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-263 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-264 +-A FORWARD -j logaccept-final-265 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-266 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-267 +-A FORWARD -j logaccept-final-268 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-269 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-270 +-A FORWARD -j logaccept-final-271 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-272 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-273 +-A FORWARD -j logaccept-final-274 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-275 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-276 +-A FORWARD -j logaccept-final-277 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-278 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-279 +-A FORWARD -j logaccept-final-280 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-281 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-282 +-A FORWARD -j logaccept-final-283 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-284 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-285 +-A FORWARD -j logaccept-final-286 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-287 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-288 +-A FORWARD -j logaccept-final-289 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-290 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-291 +-A FORWARD -j logaccept-final-292 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-293 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-294 +-A FORWARD -j logaccept-final-295 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-296 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-297 +-A FORWARD -j logaccept-final-298 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-299 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-300 +-A FORWARD -j logaccept-final-301 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-302 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-303 +-A FORWARD -j logaccept-final-304 +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-305 -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:C --rsource --mask fe00:: --set @@ -5396,19 +8837,25 @@ -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-1184 +-A FORWARD -j logdrop-2200 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-54 --A FORWARD -j logdrop-1185 +-A FORWARD -j logaccept-99 +-A FORWARD -j logdrop-2201 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-100 +-A FORWARD -j logdrop-2202 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-101 +-A FORWARD -j logdrop-2203 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-55 --A FORWARD -j logdrop-1186 +-A FORWARD -j logaccept-102 +-A FORWARD -j logdrop-2204 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -5435,2254 +8882,3484 @@ -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -j limit-1886 --A INPUT -j limit-1885 --A INPUT -j limit-1884 --A INPUT -j limit-1883 --A INPUT -j limit-1882 --A INPUT -j limit-1881 --A INPUT -j limit-1880 --A INPUT -j limit-1879 --A INPUT -j limit-1878 --A INPUT -j limit-1877 --A INPUT -j limit-1876 --A INPUT -j limit-1875 --A INPUT -j limit-1874 --A INPUT -j limit-1873 --A INPUT -j limit-1872 --A INPUT -j limit-1871 --A INPUT -j limit-1870 --A INPUT -j limit-1869 --A INPUT -j limit-1868 --A INPUT -j limit-1867 --A INPUT -j limit-1866 --A INPUT -j limit-1865 --A INPUT -j limit-1864 --A INPUT -j limit-1863 --A INPUT -j limit-1862 --A INPUT -j limit-1861 --A INPUT -j limit-1860 --A INPUT -j limit-1859 --A INPUT -j limit-1858 --A INPUT -j limit-1857 --A INPUT -j limit-1856 --A INPUT -j limit-1855 --A INPUT -j limit-1854 --A INPUT -j limit-1853 --A INPUT -j limit-1852 --A INPUT -j limit-1851 --A INPUT -j limit-1850 --A INPUT -j limit-1849 --A INPUT -j limit-1848 --A INPUT -j limit-1847 --A INPUT -j limit-1846 --A INPUT -j limit-1845 --A INPUT -j limit-1844 --A INPUT -j limit-1843 --A INPUT -j limit-1842 --A INPUT -j limit-1841 --A INPUT -j limit-1840 --A INPUT -j limit-1839 --A INPUT -j limit-1838 --A INPUT -j limit-1837 --A INPUT -j limit-1836 --A INPUT -j limit-1835 --A INPUT -j limit-1834 --A INPUT -j limit-1833 --A INPUT -j limit-1832 --A INPUT -j limit-1831 --A INPUT -j limit-1830 --A INPUT -j limit-1829 --A INPUT -j limit-1828 --A INPUT -j limit-1827 --A INPUT -j limit-1826 --A INPUT -j limit-1825 --A INPUT -j limit-1824 --A INPUT -j limit-1823 --A INPUT -j limit-1822 --A INPUT -j limit-1821 --A INPUT -j limit-1820 --A INPUT -j limit-1819 --A INPUT -j limit-1818 --A INPUT -j limit-1817 --A INPUT -j limit-1816 --A INPUT -j limit-1815 --A INPUT -j limit-1814 --A INPUT -j limit-1813 --A INPUT -j limit-1812 --A INPUT -j limit-1811 --A INPUT -j limit-1810 --A INPUT -j limit-1809 --A INPUT -j limit-1808 --A INPUT -j limit-1807 --A INPUT -j limit-1806 --A INPUT -j limit-1805 --A INPUT -j limit-1804 --A INPUT -j limit-1803 --A INPUT -j limit-1802 --A INPUT -j limit-1801 --A INPUT -j limit-1800 --A INPUT -j limit-1799 --A INPUT -j limit-1798 --A INPUT -j limit-1797 --A INPUT -j limit-1796 --A INPUT -j limit-1795 --A INPUT -j limit-1794 --A INPUT -j limit-1793 --A INPUT -j limit-1792 --A INPUT -j limit-1791 --A INPUT -j limit-1790 --A INPUT -j limit-1789 --A INPUT -j limit-1788 --A INPUT -j limit-1787 --A INPUT -j limit-1786 --A INPUT -j limit-1785 --A INPUT -j limit-1784 --A INPUT -j limit-1783 --A INPUT -j limit-1782 --A INPUT -j limit-1781 --A INPUT -j limit-1780 --A INPUT -j limit-1779 --A INPUT -j limit-1778 --A INPUT -j limit-1777 --A INPUT -j limit-1776 --A INPUT -j limit-1775 --A INPUT -j limit-1774 --A INPUT -j limit-1773 --A INPUT -j limit-1772 --A INPUT -j limit-1771 --A INPUT -j limit-1770 --A INPUT -j limit-1769 --A INPUT -j limit-1768 --A INPUT -j limit-1767 --A INPUT -j limit-1766 --A INPUT -j limit-1765 --A INPUT -j limit-1764 --A INPUT -j limit-1763 --A INPUT -j limit-1762 --A INPUT -j limit-1761 --A INPUT -j limit-1760 --A INPUT -j limit-1759 --A INPUT -j limit-1758 --A INPUT -j limit-1757 --A INPUT -j limit-1756 --A INPUT -j limit-1755 --A INPUT -j limit-1754 --A INPUT -j limit-1753 --A INPUT -j limit-1752 --A INPUT -j limit-1751 --A INPUT -j limit-1750 --A INPUT -j limit-1749 --A INPUT -j limit-1748 --A INPUT -j limit-1747 --A INPUT -j limit-1746 --A INPUT -j limit-1745 --A INPUT -j limit-1744 --A INPUT -j limit-1743 --A INPUT -j limit-1742 --A INPUT -j limit-1741 --A INPUT -j limit-1740 --A INPUT -j limit-1739 --A INPUT -j limit-1738 --A INPUT -j limit-1737 --A INPUT -j limit-1736 --A INPUT -j limit-1735 --A INPUT -j limit-1734 --A INPUT -j limit-1733 --A INPUT -j limit-1732 --A INPUT -j limit-1731 --A INPUT -j limit-1730 --A INPUT -j limit-1729 --A INPUT -j limit-1728 --A INPUT -j limit-1727 --A INPUT -j limit-1726 --A INPUT -j limit-1725 --A INPUT -j limit-1724 --A INPUT -j limit-1723 --A INPUT -j limit-1722 --A INPUT -j limit-1721 --A INPUT -j limit-1720 --A INPUT -j limit-1719 --A INPUT -j limit-1718 --A INPUT -j limit-1717 --A INPUT -j limit-1716 --A INPUT -j limit-1715 --A INPUT -j limit-1714 --A INPUT -j limit-1713 --A INPUT -j limit-1712 --A INPUT -j limit-1711 --A INPUT -j limit-1710 --A INPUT -j limit-1709 --A INPUT -j limit-1708 --A INPUT -j limit-1707 --A INPUT -j limit-1706 --A INPUT -j limit-1705 --A INPUT -j limit-1704 --A INPUT -j limit-1703 --A INPUT -j limit-1702 --A INPUT -j limit-1701 --A INPUT -j limit-1700 --A INPUT -j limit-1699 --A INPUT -j limit-1698 --A INPUT -j limit-1697 --A INPUT -j limit-1696 --A INPUT -j limit-1695 --A INPUT -j limit-1694 --A INPUT -j limit-1693 --A INPUT -j limit-1692 --A INPUT -j limit-1691 --A INPUT -j limit-1690 --A INPUT -j limit-1689 --A INPUT -j limit-1688 --A INPUT -j limit-1687 --A INPUT -j limit-1686 --A INPUT -j limit-1685 --A INPUT -j limit-1684 --A INPUT -j limit-1683 --A INPUT -j limit-1682 --A INPUT -j limit-1681 --A INPUT -j limit-1680 --A INPUT -j limit-1679 --A INPUT -j limit-1678 --A INPUT -j limit-1677 --A INPUT -j limit-1676 --A INPUT -j limit-1675 --A INPUT -j limit-1674 --A INPUT -j limit-1673 --A INPUT -j limit-1672 --A INPUT -j limit-1671 --A INPUT -j limit-1670 --A INPUT -j limit-1669 --A INPUT -j limit-1668 --A INPUT -j limit-1667 --A INPUT -j limit-1666 --A INPUT -j limit-1665 --A INPUT -j limit-1664 --A INPUT -j limit-1663 --A INPUT -j limit-1662 --A INPUT -j limit-1661 --A INPUT -j limit-1660 --A INPUT -j limit-1659 --A INPUT -j limit-1658 --A INPUT -j limit-1657 --A INPUT -j limit-1656 --A INPUT -j limit-1655 --A INPUT -j limit-1654 --A INPUT -j limit-1653 --A INPUT -j limit-1652 --A INPUT -j limit-1651 --A INPUT -j limit-1650 --A INPUT -j limit-1649 --A INPUT -j limit-1648 --A INPUT -j limit-1647 --A INPUT -j limit-1646 --A INPUT -j limit-1645 --A INPUT -j limit-1644 --A INPUT -j limit-1643 --A INPUT -j limit-1642 --A INPUT -j limit-1641 --A INPUT -j limit-1640 --A INPUT -j limit-1639 --A INPUT -j limit-1638 --A INPUT -j limit-1637 --A INPUT -j limit-1636 --A INPUT -j limit-1635 --A INPUT -j limit-1634 --A INPUT -j limit-1633 --A INPUT -j limit-1632 --A INPUT -j limit-1631 --A INPUT -j limit-1630 --A INPUT -j limit-1629 --A INPUT -j limit-1628 --A INPUT -j limit-1627 --A INPUT -j limit-1626 --A INPUT -j limit-1625 --A INPUT -j limit-1624 --A INPUT -j limit-1623 --A INPUT -j limit-1622 --A INPUT -j limit-1621 --A INPUT -j limit-1620 --A INPUT -j limit-1619 --A INPUT -j limit-1618 --A INPUT -j limit-1617 --A INPUT -j limit-1616 --A INPUT -j limit-1615 --A INPUT -j limit-1614 --A INPUT -j limit-1613 --A INPUT -j limit-1612 --A INPUT -j limit-1611 --A INPUT -j limit-1610 --A INPUT -j limit-1609 --A INPUT -j limit-1608 --A INPUT -j limit-1607 --A INPUT -j limit-1606 --A INPUT -j limit-1605 --A INPUT -j limit-1604 --A INPUT -j limit-1603 --A INPUT -j limit-1602 --A INPUT -j limit-1601 --A INPUT -j limit-1600 --A INPUT -j limit-1599 --A INPUT -j limit-1598 --A INPUT -j limit-1597 --A INPUT -j limit-1596 --A INPUT -j limit-1595 --A INPUT -j limit-1594 --A INPUT -j limit-1593 --A INPUT -j limit-1592 --A INPUT -j limit-1591 --A INPUT -j limit-1590 --A INPUT -j limit-1589 --A INPUT -j limit-1588 --A INPUT -j limit-1587 --A INPUT -j limit-1586 --A INPUT -j limit-1585 --A INPUT -j limit-1584 --A INPUT -j limit-1583 --A INPUT -j limit-1582 --A INPUT -j limit-1581 --A INPUT -j limit-1580 --A INPUT -j limit-1579 --A INPUT -j limit-1578 --A INPUT -j limit-1577 --A INPUT -j limit-1576 --A INPUT -j limit-1575 --A INPUT -j limit-1574 --A INPUT -j limit-1573 --A INPUT -j limit-1572 --A INPUT -j limit-1571 --A INPUT -j limit-1570 --A INPUT -j limit-1569 --A INPUT -j limit-1568 --A INPUT -j limit-1567 --A INPUT -j limit-1566 --A INPUT -j limit-1565 --A INPUT -j limit-1564 --A INPUT -j limit-1563 --A INPUT -j limit-1562 --A INPUT -j limit-1561 --A INPUT -j limit-1560 --A INPUT -j limit-1559 --A INPUT -j limit-1558 --A INPUT -j limit-1557 --A INPUT -j limit-1556 --A INPUT -j limit-1555 --A INPUT -j limit-1554 --A INPUT -j limit-1553 --A INPUT -j limit-1552 --A INPUT -j limit-1551 --A INPUT -j limit-1550 --A INPUT -j limit-1549 --A INPUT -j limit-1548 --A INPUT -j limit-1547 --A INPUT -j limit-1546 --A INPUT -j limit-1545 --A INPUT -j limit-1544 --A INPUT -j limit-1543 --A INPUT -j limit-1542 --A INPUT -j limit-1541 --A INPUT -j limit-1540 --A INPUT -j limit-1539 --A INPUT -j limit-1538 --A INPUT -j limit-1537 --A INPUT -j limit-1536 --A INPUT -j limit-1535 --A INPUT -j limit-1534 --A INPUT -j limit-1533 --A INPUT -j limit-1532 --A INPUT -j limit-1531 --A INPUT -j limit-1530 --A INPUT -j limit-1529 --A INPUT -j limit-1528 --A INPUT -j limit-1527 --A INPUT -j limit-1526 --A INPUT -j limit-1525 --A INPUT -j limit-1524 --A INPUT -j limit-1523 --A INPUT -j limit-1522 --A INPUT -j limit-1521 --A INPUT -j limit-1520 --A INPUT -j limit-1519 --A INPUT -j limit-1518 --A INPUT -j limit-1517 --A INPUT -j limit-1516 --A INPUT -j limit-1515 --A INPUT -j limit-1514 --A INPUT -j limit-1513 --A INPUT -j limit-1512 --A INPUT -j limit-1511 --A INPUT -j limit-1510 --A INPUT -j limit-1509 --A INPUT -j limit-1508 --A INPUT -j limit-1507 --A INPUT -j limit-1506 --A INPUT -j limit-1505 --A INPUT -j limit-1504 --A INPUT -j limit-1503 --A INPUT -j limit-1502 --A INPUT -j limit-1501 --A INPUT -j limit-1500 --A INPUT -j limit-1499 --A INPUT -j limit-1498 --A INPUT -j limit-1497 --A INPUT -j limit-1496 --A INPUT -j limit-1495 --A INPUT -j limit-1494 --A INPUT -j limit-1493 --A INPUT -j limit-1492 --A INPUT -j limit-1491 --A INPUT -j limit-1490 --A INPUT -j limit-1489 --A INPUT -j limit-1488 --A INPUT -j limit-1487 --A INPUT -j limit-1486 --A INPUT -j limit-1485 --A INPUT -j limit-1484 --A INPUT -j limit-1483 --A INPUT -j limit-1482 --A INPUT -j limit-1481 --A INPUT -j limit-1480 --A INPUT -j limit-1479 --A INPUT -j limit-1478 --A INPUT -j limit-1477 --A INPUT -j limit-1476 --A INPUT -j limit-1475 --A INPUT -j limit-1474 --A INPUT -j limit-1473 --A INPUT -j limit-1472 --A INPUT -j limit-1471 --A INPUT -j limit-1470 --A INPUT -j limit-1469 --A INPUT -j limit-1468 --A INPUT -j limit-1467 --A INPUT -j limit-1466 --A INPUT -j limit-1465 --A INPUT -j limit-1464 --A INPUT -j limit-1463 --A INPUT -j limit-1462 --A INPUT -j limit-1461 --A INPUT -j limit-1460 --A INPUT -j limit-1459 --A INPUT -j limit-1458 --A INPUT -j limit-1457 --A INPUT -j limit-1456 --A INPUT -j limit-1455 --A INPUT -j limit-1454 --A INPUT -j limit-1453 --A INPUT -j limit-1452 --A INPUT -j limit-1451 --A INPUT -j limit-1450 --A INPUT -j limit-1449 --A INPUT -j limit-1448 --A INPUT -j limit-1447 --A INPUT -j limit-1446 --A INPUT -j limit-1445 --A INPUT -j limit-1444 --A INPUT -j limit-1443 --A INPUT -j limit-1442 --A INPUT -j limit-1441 --A INPUT -j limit-1440 --A INPUT -j limit-1439 --A INPUT -j limit-1438 --A INPUT -j limit-1437 --A INPUT -j limit-1436 --A INPUT -j limit-1435 --A INPUT -j limit-1434 --A INPUT -j limit-1433 --A INPUT -j limit-1432 --A INPUT -j limit-1431 --A INPUT -j limit-1430 --A INPUT -j limit-1429 --A INPUT -j limit-1428 --A INPUT -j limit-1427 --A INPUT -j limit-1426 --A INPUT -j limit-1425 --A INPUT -j limit-1424 --A INPUT -j limit-1423 --A INPUT -j limit-1422 --A INPUT -j limit-1421 --A INPUT -j limit-1420 --A INPUT -j limit-1419 --A INPUT -j limit-1418 --A INPUT -j limit-1417 --A INPUT -j limit-1416 --A INPUT -j limit-1415 --A INPUT -j limit-1414 --A INPUT -j limit-1413 --A INPUT -j limit-1412 --A INPUT -j limit-1411 --A INPUT -j limit-1410 --A INPUT -j limit-1409 --A INPUT -j limit-1408 --A INPUT -j limit-1407 --A INPUT -j limit-1406 --A INPUT -j limit-1405 --A INPUT -j limit-1404 --A INPUT -j limit-1403 --A INPUT -j limit-1402 --A INPUT -j limit-1401 --A INPUT -j limit-1400 --A INPUT -j limit-1399 --A INPUT -j limit-1398 --A INPUT -j limit-1397 --A INPUT -j limit-1396 --A INPUT -j limit-1395 --A INPUT -j limit-1394 --A INPUT -j limit-1393 --A INPUT -j limit-1392 --A INPUT -j limit-1391 --A INPUT -j limit-1390 --A INPUT -j limit-1389 --A INPUT -j limit-1388 --A INPUT -j limit-1387 --A INPUT -j limit-1386 --A INPUT -j limit-1385 --A INPUT -j limit-1384 --A INPUT -j limit-1383 --A INPUT -j limit-1382 --A INPUT -j limit-1381 --A INPUT -j limit-1380 --A INPUT -j limit-1379 --A INPUT -j limit-1378 --A INPUT -j limit-1377 --A INPUT -j limit-1376 --A INPUT -j limit-1375 --A INPUT -j limit-1374 --A INPUT -j limit-1373 --A INPUT -j limit-1372 --A INPUT -j limit-1371 --A INPUT -j limit-1370 --A INPUT -j limit-1369 --A INPUT -j limit-1368 --A INPUT -j limit-1367 --A INPUT -j limit-1366 --A INPUT -j limit-1365 --A INPUT -j limit-1364 --A INPUT -j limit-1363 --A INPUT -j limit-1362 --A INPUT -j limit-1361 --A INPUT -j limit-1360 --A INPUT -j limit-1359 --A INPUT -j limit-1358 --A INPUT -j limit-1357 --A INPUT -j limit-1356 --A INPUT -j limit-1355 --A INPUT -j limit-1354 --A INPUT -j limit-1353 --A INPUT -j limit-1352 --A INPUT -j limit-1351 --A INPUT -j limit-1350 --A INPUT -j limit-1349 --A INPUT -j limit-1348 --A INPUT -j limit-1347 --A INPUT -j limit-1346 --A INPUT -j limit-1345 --A INPUT -j limit-1344 --A INPUT -j limit-1343 --A INPUT -j limit-1342 --A INPUT -j limit-1341 --A INPUT -j limit-1340 --A INPUT -j limit-1339 --A INPUT -j limit-1338 --A INPUT -j limit-1337 --A INPUT -j limit-1336 --A INPUT -j limit-1335 --A INPUT -j limit-1334 --A INPUT -j limit-1333 --A INPUT -j limit-1332 --A INPUT -j limit-1331 --A INPUT -j limit-1330 --A INPUT -j limit-1329 --A INPUT -j limit-1328 --A INPUT -j limit-1327 --A INPUT -j limit-1326 --A INPUT -j limit-1325 --A INPUT -j limit-1324 --A INPUT -j limit-1323 --A INPUT -j limit-1322 --A INPUT -j limit-1321 --A INPUT -j limit-1320 --A INPUT -j limit-1319 --A INPUT -j limit-1318 --A INPUT -j limit-1317 --A INPUT -j limit-1316 --A INPUT -j limit-1315 --A INPUT -j limit-1314 --A INPUT -j limit-1313 --A INPUT -j limit-1312 --A INPUT -j limit-1311 --A INPUT -j limit-1310 --A INPUT -j limit-1309 --A INPUT -j limit-1308 --A INPUT -j limit-1307 --A INPUT -j limit-1306 --A INPUT -j limit-1305 --A INPUT -j limit-1304 --A INPUT -j limit-1303 --A INPUT -j limit-1302 --A INPUT -j limit-1301 --A INPUT -j limit-1300 --A INPUT -j limit-1299 --A INPUT -j limit-1298 --A INPUT -j limit-1297 --A INPUT -j limit-1296 --A INPUT -j limit-1295 --A INPUT -j limit-1294 --A INPUT -j limit-1293 --A INPUT -j limit-1292 --A INPUT -j limit-1291 --A INPUT -j limit-1290 --A INPUT -j limit-1289 --A INPUT -j limit-1288 --A INPUT -j limit-1287 --A INPUT -j limit-1286 --A INPUT -j limit-1285 --A INPUT -j limit-1284 --A INPUT -j limit-1283 --A INPUT -j limit-1282 --A INPUT -j limit-1281 --A INPUT -j limit-1280 --A INPUT -j limit-1279 --A INPUT -j limit-1278 --A INPUT -j limit-1277 --A INPUT -j limit-1276 --A INPUT -j limit-1275 --A INPUT -j limit-1274 --A INPUT -j limit-1273 --A INPUT -j limit-1272 --A INPUT -j limit-1271 --A INPUT -j limit-1270 --A INPUT -j limit-1269 --A INPUT -j limit-1268 --A INPUT -j limit-1267 --A INPUT -j limit-1266 --A INPUT -j limit-1265 --A INPUT -j limit-1264 --A INPUT -j limit-1263 --A INPUT -j limit-1262 --A INPUT -j limit-1261 --A INPUT -j limit-1260 --A INPUT -j limit-1259 --A INPUT -j limit-1258 +-A INPUT -j limit-2927 +-A INPUT -j limit-2926 +-A INPUT -j limit-2925 +-A INPUT -j limit-2924 +-A INPUT -j limit-2923 +-A INPUT -j limit-2922 +-A INPUT -j limit-2921 +-A INPUT -j limit-2920 +-A INPUT -j limit-2919 +-A INPUT -j limit-2918 +-A INPUT -j limit-2917 +-A INPUT -j limit-2916 +-A INPUT -j limit-2915 +-A INPUT -j limit-2914 +-A INPUT -j limit-2913 +-A INPUT -j limit-2912 +-A INPUT -j limit-2911 +-A INPUT -j limit-2910 +-A INPUT -j limit-2909 +-A INPUT -j limit-2908 +-A INPUT -j limit-2907 +-A INPUT -j limit-2906 +-A INPUT -j limit-2905 +-A INPUT -j limit-2904 +-A INPUT -j limit-2903 +-A INPUT -j limit-2902 +-A INPUT -j limit-2901 +-A INPUT -j limit-2900 +-A INPUT -j limit-2899 +-A INPUT -j limit-2898 +-A INPUT -j limit-2897 +-A INPUT -j limit-2896 +-A INPUT -j limit-2895 +-A INPUT -j limit-2894 +-A INPUT -j limit-2893 +-A INPUT -j limit-2892 +-A INPUT -j limit-2891 +-A INPUT -j limit-2890 +-A INPUT -j limit-2889 +-A INPUT -j limit-2888 +-A INPUT -j limit-2887 +-A INPUT -j limit-2886 +-A INPUT -j limit-2885 +-A INPUT -j limit-2884 +-A INPUT -j limit-2883 +-A INPUT -j limit-2882 +-A INPUT -j limit-2881 +-A INPUT -j limit-2880 +-A INPUT -j limit-2879 +-A INPUT -j limit-2878 +-A INPUT -j limit-2877 +-A INPUT -j limit-2876 +-A INPUT -j limit-2875 +-A INPUT -j limit-2874 +-A INPUT -j limit-2873 +-A INPUT -j limit-2872 +-A INPUT -j limit-2871 +-A INPUT -j limit-2870 +-A INPUT -j limit-2869 +-A INPUT -j limit-2868 +-A INPUT -j limit-2867 +-A INPUT -j limit-2866 +-A INPUT -j limit-2865 +-A INPUT -j limit-2864 +-A INPUT -j limit-2863 +-A INPUT -j limit-2862 +-A INPUT -j limit-2861 +-A INPUT -j limit-2860 +-A INPUT -j limit-2859 +-A INPUT -j limit-2858 +-A INPUT -j limit-2857 +-A INPUT -j limit-2856 +-A INPUT -j limit-2855 +-A INPUT -j limit-2854 +-A INPUT -j limit-2853 +-A INPUT -j limit-2852 +-A INPUT -j limit-2851 +-A INPUT -j limit-2850 +-A INPUT -j limit-2849 +-A INPUT -j limit-2848 +-A INPUT -j limit-2847 +-A INPUT -j limit-2846 +-A INPUT -j limit-2845 +-A INPUT -j limit-2844 +-A INPUT -j limit-2843 +-A INPUT -j limit-2842 +-A INPUT -j limit-2841 +-A INPUT -j limit-2840 +-A INPUT -j limit-2839 +-A INPUT -j limit-2838 +-A INPUT -j limit-2837 +-A INPUT -j limit-2836 +-A INPUT -j limit-2835 +-A INPUT -j limit-2834 +-A INPUT -j limit-2833 +-A INPUT -j limit-2832 +-A INPUT -j limit-2831 +-A INPUT -j limit-2830 +-A INPUT -j limit-2829 +-A INPUT -j limit-2828 +-A INPUT -j limit-2827 +-A INPUT -j limit-2826 +-A INPUT -j limit-2825 +-A INPUT -j limit-2824 +-A INPUT -j limit-2823 +-A INPUT -j limit-2822 +-A INPUT -j limit-2821 +-A INPUT -j limit-2820 +-A INPUT -j limit-2819 +-A INPUT -j limit-2818 +-A INPUT -j limit-2817 +-A INPUT -j limit-2816 +-A INPUT -j limit-2815 +-A INPUT -j limit-2814 +-A INPUT -j limit-2813 +-A INPUT -j limit-2812 +-A INPUT -j limit-2811 +-A INPUT -j limit-2810 +-A INPUT -j limit-2809 +-A INPUT -j limit-2808 +-A INPUT -j limit-2807 +-A INPUT -j limit-2806 +-A INPUT -j limit-2805 +-A INPUT -j limit-2804 +-A INPUT -j limit-2803 +-A INPUT -j limit-2802 +-A INPUT -j limit-2801 +-A INPUT -j limit-2800 +-A INPUT -j limit-2799 +-A INPUT -j limit-2798 +-A INPUT -j limit-2797 +-A INPUT -j limit-2796 +-A INPUT -j limit-2795 +-A INPUT -j limit-2794 +-A INPUT -j limit-2793 +-A INPUT -j limit-2792 +-A INPUT -j limit-2791 +-A INPUT -j limit-2790 +-A INPUT -j limit-2789 +-A INPUT -j limit-2788 +-A INPUT -j limit-2787 +-A INPUT -j limit-2786 +-A INPUT -j limit-2785 +-A INPUT -j limit-2784 +-A INPUT -j limit-2783 +-A INPUT -j limit-2782 +-A INPUT -j limit-2781 +-A INPUT -j limit-2780 +-A INPUT -j limit-2779 +-A INPUT -j limit-2778 +-A INPUT -j limit-2777 +-A INPUT -j limit-2776 +-A INPUT -j limit-2775 +-A INPUT -j limit-2774 +-A INPUT -j limit-2773 +-A INPUT -j limit-2772 +-A INPUT -j limit-2771 +-A INPUT -j limit-2770 +-A INPUT -j limit-2769 +-A INPUT -j limit-2768 +-A INPUT -j limit-2767 +-A INPUT -j limit-2766 +-A INPUT -j limit-2765 +-A INPUT -j limit-2764 +-A INPUT -j limit-2763 +-A INPUT -j limit-2762 +-A INPUT -j limit-2761 +-A INPUT -j limit-2760 +-A INPUT -j limit-2759 +-A INPUT -j limit-2758 +-A INPUT -j limit-2757 +-A INPUT -j limit-2756 +-A INPUT -j limit-2755 +-A INPUT -j limit-2754 +-A INPUT -j limit-2753 +-A INPUT -j limit-2752 +-A INPUT -j limit-2751 +-A INPUT -j limit-2750 +-A INPUT -j limit-2749 +-A INPUT -j limit-2748 +-A INPUT -j limit-2747 +-A INPUT -j limit-2746 +-A INPUT -j limit-2745 +-A INPUT -j limit-2744 +-A INPUT -j limit-2743 +-A INPUT -j limit-2742 +-A INPUT -j limit-2741 +-A INPUT -j limit-2740 +-A INPUT -j limit-2739 +-A INPUT -j limit-2738 +-A INPUT -j limit-2737 +-A INPUT -j limit-2736 +-A INPUT -j limit-2735 +-A INPUT -j limit-2734 +-A INPUT -j limit-2733 +-A INPUT -j limit-2732 +-A INPUT -j limit-2731 +-A INPUT -j limit-2730 +-A INPUT -j limit-2729 +-A INPUT -j limit-2728 +-A INPUT -j limit-2727 +-A INPUT -j limit-2726 +-A INPUT -j limit-2725 +-A INPUT -j limit-2724 +-A INPUT -j limit-2723 +-A INPUT -j limit-2722 +-A INPUT -j limit-2721 +-A INPUT -j limit-2720 +-A INPUT -j limit-2719 +-A INPUT -j limit-2718 +-A INPUT -j limit-2717 +-A INPUT -j limit-2716 +-A INPUT -j limit-2715 +-A INPUT -j limit-2714 +-A INPUT -j limit-2713 +-A INPUT -j limit-2712 +-A INPUT -j limit-2711 +-A INPUT -j limit-2710 +-A INPUT -j limit-2709 +-A INPUT -j limit-2708 +-A INPUT -j limit-2707 +-A INPUT -j limit-2706 +-A INPUT -j limit-2705 +-A INPUT -j limit-2704 +-A INPUT -j limit-2703 +-A INPUT -j limit-2702 +-A INPUT -j limit-2701 +-A INPUT -j limit-2700 +-A INPUT -j limit-2699 +-A INPUT -j limit-2698 +-A INPUT -j limit-2697 +-A INPUT -j limit-2696 +-A INPUT -j limit-2695 +-A INPUT -j limit-2694 +-A INPUT -j limit-2693 +-A INPUT -j limit-2692 +-A INPUT -j limit-2691 +-A INPUT -j limit-2690 +-A INPUT -j limit-2689 +-A INPUT -j limit-2688 +-A INPUT -j limit-2687 +-A INPUT -j limit-2686 +-A INPUT -j limit-2685 +-A INPUT -j limit-2684 +-A INPUT -j limit-2683 +-A INPUT -j limit-2682 +-A INPUT -j limit-2681 +-A INPUT -j limit-2680 +-A INPUT -j limit-2679 +-A INPUT -j limit-2678 +-A INPUT -j limit-2677 +-A INPUT -j limit-2676 +-A INPUT -j limit-2675 +-A INPUT -j limit-2674 +-A INPUT -j limit-2673 +-A INPUT -j limit-2672 +-A INPUT -j limit-2671 +-A INPUT -j limit-2670 +-A INPUT -j limit-2669 +-A INPUT -j limit-2668 +-A INPUT -j limit-2667 +-A INPUT -j limit-2666 +-A INPUT -j limit-2665 +-A INPUT -j limit-2664 +-A INPUT -j limit-2663 +-A INPUT -j limit-2662 +-A INPUT -j limit-2661 +-A INPUT -j limit-2660 +-A INPUT -j limit-2659 +-A INPUT -j limit-2658 +-A INPUT -j limit-2657 +-A INPUT -j limit-2656 +-A INPUT -j limit-2655 +-A INPUT -j limit-2654 +-A INPUT -j limit-2653 +-A INPUT -j limit-2652 +-A INPUT -j limit-2651 +-A INPUT -j limit-2650 +-A INPUT -j limit-2649 +-A INPUT -j limit-2648 +-A INPUT -j limit-2647 +-A INPUT -j limit-2646 +-A INPUT -j limit-2645 +-A INPUT -j limit-2644 +-A INPUT -j limit-2643 +-A INPUT -j limit-2642 +-A INPUT -j limit-2641 +-A INPUT -j limit-2640 +-A INPUT -j limit-2639 +-A INPUT -j limit-2638 +-A INPUT -j limit-2637 +-A INPUT -j limit-2636 +-A INPUT -j limit-2635 +-A INPUT -j limit-2634 +-A INPUT -j limit-2633 +-A INPUT -j limit-2632 +-A INPUT -j limit-2631 +-A INPUT -j limit-2630 +-A INPUT -j limit-2629 +-A INPUT -j limit-2628 +-A INPUT -j limit-2627 +-A INPUT -j limit-2626 +-A INPUT -j limit-2625 +-A INPUT -j limit-2624 +-A INPUT -j limit-2623 +-A INPUT -j limit-2622 +-A INPUT -j limit-2621 +-A INPUT -j limit-2620 +-A INPUT -j limit-2619 +-A INPUT -j limit-2618 +-A INPUT -j limit-2617 +-A INPUT -j limit-2616 +-A INPUT -j limit-2615 +-A INPUT -j limit-2614 +-A INPUT -j limit-2613 +-A INPUT -j limit-2612 +-A INPUT -j limit-2611 +-A INPUT -j limit-2610 +-A INPUT -j limit-2609 +-A INPUT -j limit-2608 +-A INPUT -j limit-2607 +-A INPUT -j limit-2606 +-A INPUT -j limit-2605 +-A INPUT -j limit-2604 +-A INPUT -j limit-2603 +-A INPUT -j limit-2602 +-A INPUT -j limit-2601 +-A INPUT -j limit-2600 +-A INPUT -j limit-2599 +-A INPUT -j limit-2598 +-A INPUT -j limit-2597 +-A INPUT -j limit-2596 +-A INPUT -j limit-2595 +-A INPUT -j limit-2594 +-A INPUT -j limit-2593 +-A INPUT -j limit-2592 +-A INPUT -j limit-2591 +-A INPUT -j limit-2590 +-A INPUT -j limit-2589 +-A INPUT -j limit-2588 +-A INPUT -j limit-2587 +-A INPUT -j limit-2586 +-A INPUT -j limit-2585 +-A INPUT -j limit-2584 +-A INPUT -j limit-2583 +-A INPUT -j limit-2582 +-A INPUT -j limit-2581 +-A INPUT -j limit-2580 +-A INPUT -j limit-2579 +-A INPUT -j limit-2578 +-A INPUT -j limit-2577 +-A INPUT -j limit-2576 +-A INPUT -j limit-2575 +-A INPUT -j limit-2574 +-A INPUT -j limit-2573 +-A INPUT -j limit-2572 +-A INPUT -j limit-2571 +-A INPUT -j limit-2570 +-A INPUT -j limit-2569 +-A INPUT -j limit-2568 +-A INPUT -j limit-2567 +-A INPUT -j limit-2566 +-A INPUT -j limit-2565 +-A INPUT -j limit-2564 +-A INPUT -j limit-2563 +-A INPUT -j limit-2562 +-A INPUT -j limit-2561 +-A INPUT -j limit-2560 +-A INPUT -j limit-2559 +-A INPUT -j limit-2558 +-A INPUT -j limit-2557 +-A INPUT -j limit-2556 +-A INPUT -j limit-2555 +-A INPUT -j limit-2554 +-A INPUT -j limit-2553 +-A INPUT -j limit-2552 +-A INPUT -j limit-2551 +-A INPUT -j limit-2550 +-A INPUT -j limit-2549 +-A INPUT -j limit-2548 +-A INPUT -j limit-2547 +-A INPUT -j limit-2546 +-A INPUT -j limit-2545 +-A INPUT -j limit-2544 +-A INPUT -j limit-2543 +-A INPUT -j limit-2542 +-A INPUT -j limit-2541 +-A INPUT -j limit-2540 +-A INPUT -j limit-2539 +-A INPUT -j limit-2538 +-A INPUT -j limit-2537 +-A INPUT -j limit-2536 +-A INPUT -j limit-2535 +-A INPUT -j limit-2534 +-A INPUT -j limit-2533 +-A INPUT -j limit-2532 +-A INPUT -j limit-2531 +-A INPUT -j limit-2530 +-A INPUT -j limit-2529 +-A INPUT -j limit-2528 +-A INPUT -j limit-2527 +-A INPUT -j limit-2526 +-A INPUT -j limit-2525 +-A INPUT -j limit-2524 +-A INPUT -j limit-2523 +-A INPUT -j limit-2522 +-A INPUT -j limit-2521 +-A INPUT -j limit-2520 +-A INPUT -j limit-2519 +-A INPUT -j limit-2518 +-A INPUT -j limit-2517 +-A INPUT -j limit-2516 +-A INPUT -j limit-2515 +-A INPUT -j limit-2514 +-A INPUT -j limit-2513 +-A INPUT -j limit-2512 +-A INPUT -j limit-2511 +-A INPUT -j limit-2510 +-A INPUT -j limit-2509 +-A INPUT -j limit-2508 +-A INPUT -j limit-2507 +-A INPUT -j limit-2506 +-A INPUT -j limit-2505 +-A INPUT -j limit-2504 +-A INPUT -j limit-2503 +-A INPUT -j limit-2502 +-A INPUT -j limit-2501 +-A INPUT -j limit-2500 +-A INPUT -j limit-2499 +-A INPUT -j limit-2498 +-A INPUT -j limit-2497 +-A INPUT -j limit-2496 +-A INPUT -j limit-2495 +-A INPUT -j limit-2494 +-A INPUT -j limit-2493 +-A INPUT -j limit-2492 +-A INPUT -j limit-2491 +-A INPUT -j limit-2490 +-A INPUT -j limit-2489 +-A INPUT -j limit-2488 +-A INPUT -j limit-2487 +-A INPUT -j limit-2486 +-A INPUT -j limit-2485 +-A INPUT -j limit-2484 +-A INPUT -j limit-2483 +-A INPUT -j limit-2482 +-A INPUT -j limit-2481 +-A INPUT -j limit-2480 +-A INPUT -j limit-2479 +-A INPUT -j limit-2478 +-A INPUT -j limit-2477 +-A INPUT -j limit-2476 +-A INPUT -j limit-2475 +-A INPUT -j limit-2474 +-A INPUT -j limit-2473 +-A INPUT -j limit-2472 +-A INPUT -j limit-2471 +-A INPUT -j limit-2470 +-A INPUT -j limit-2469 +-A INPUT -j limit-2468 +-A INPUT -j limit-2467 +-A INPUT -j limit-2466 +-A INPUT -j limit-2465 +-A INPUT -j limit-2464 +-A INPUT -j limit-2463 +-A INPUT -j limit-2462 +-A INPUT -j limit-2461 +-A INPUT -j limit-2460 +-A INPUT -j limit-2459 +-A INPUT -j limit-2458 +-A INPUT -j limit-2457 +-A INPUT -j limit-2456 +-A INPUT -j limit-2455 +-A INPUT -j limit-2454 +-A INPUT -j limit-2453 +-A INPUT -j limit-2452 +-A INPUT -j limit-2451 +-A INPUT -j limit-2450 +-A INPUT -j limit-2449 +-A INPUT -j limit-2448 +-A INPUT -j limit-2447 +-A INPUT -j limit-2446 +-A INPUT -j limit-2445 +-A INPUT -j limit-2444 +-A INPUT -j limit-2443 +-A INPUT -j limit-2442 +-A INPUT -j limit-2441 +-A INPUT -j limit-2440 +-A INPUT -j limit-2439 +-A INPUT -j limit-2438 +-A INPUT -j limit-2437 +-A INPUT -j limit-2436 +-A INPUT -j limit-2435 +-A INPUT -j limit-2434 +-A INPUT -j limit-2433 +-A INPUT -j limit-2432 +-A INPUT -j limit-2431 +-A INPUT -j limit-2430 +-A INPUT -j limit-2429 +-A INPUT -j limit-2428 +-A INPUT -j limit-2427 +-A INPUT -j limit-2426 +-A INPUT -j limit-2425 +-A INPUT -j limit-2424 +-A INPUT -j limit-2423 +-A INPUT -j limit-2422 +-A INPUT -j limit-2421 +-A INPUT -j limit-2420 +-A INPUT -j limit-2419 +-A INPUT -j limit-2418 +-A INPUT -j limit-2417 +-A INPUT -j limit-2416 +-A INPUT -j limit-2415 +-A INPUT -j limit-2414 +-A INPUT -j limit-2413 +-A INPUT -j limit-2412 +-A INPUT -j limit-2411 +-A INPUT -j limit-2410 +-A INPUT -j limit-2409 +-A INPUT -j limit-2408 +-A INPUT -j limit-2407 +-A INPUT -j limit-2406 +-A INPUT -j limit-2405 +-A INPUT -j limit-2404 +-A INPUT -j limit-2403 +-A INPUT -j limit-2402 +-A INPUT -j limit-2401 +-A INPUT -j limit-2400 +-A INPUT -j limit-2399 +-A INPUT -j limit-2398 +-A INPUT -j limit-2397 +-A INPUT -j limit-2396 +-A INPUT -j limit-2395 +-A INPUT -j limit-2394 +-A INPUT -j limit-2393 +-A INPUT -j limit-2392 +-A INPUT -j limit-2391 +-A INPUT -j limit-2390 +-A INPUT -j limit-2389 +-A INPUT -j limit-2388 +-A INPUT -j limit-2387 +-A INPUT -j limit-2386 +-A INPUT -j limit-2385 +-A INPUT -j limit-2384 +-A INPUT -j limit-2383 +-A INPUT -j limit-2382 +-A INPUT -j limit-2381 +-A INPUT -j limit-2380 +-A INPUT -j limit-2379 +-A INPUT -j limit-2378 +-A INPUT -j limit-2377 +-A INPUT -j limit-2376 +-A INPUT -j limit-2375 +-A INPUT -j limit-2374 +-A INPUT -j limit-2373 +-A INPUT -j limit-2372 +-A INPUT -j limit-2371 +-A INPUT -j limit-2370 +-A INPUT -j limit-2369 +-A INPUT -j limit-2368 +-A INPUT -j limit-2367 +-A INPUT -j limit-2366 +-A INPUT -j limit-2365 +-A INPUT -j limit-2364 +-A INPUT -j limit-2363 +-A INPUT -j limit-2362 +-A INPUT -j limit-2361 +-A INPUT -j limit-2360 +-A INPUT -j limit-2359 +-A INPUT -j limit-2358 +-A INPUT -j limit-2357 +-A INPUT -j limit-2356 +-A INPUT -j limit-2355 +-A INPUT -j limit-2354 +-A INPUT -j limit-2353 +-A INPUT -j limit-2352 +-A INPUT -j limit-2351 +-A INPUT -j limit-2350 +-A INPUT -j limit-2349 +-A INPUT -j limit-2348 +-A INPUT -j limit-2347 +-A INPUT -j limit-2346 +-A INPUT -j limit-2345 +-A INPUT -j limit-2344 +-A INPUT -j limit-2343 +-A INPUT -j limit-2342 +-A INPUT -j limit-2341 +-A INPUT -j limit-2340 +-A INPUT -j limit-2339 +-A INPUT -j limit-2338 +-A INPUT -j limit-2337 +-A INPUT -j limit-2336 +-A INPUT -j limit-2335 +-A INPUT -j limit-2334 +-A INPUT -j limit-2333 +-A INPUT -j limit-2332 +-A INPUT -j limit-2331 +-A INPUT -j limit-2330 +-A INPUT -j limit-2329 +-A INPUT -j limit-2328 +-A INPUT -j limit-2327 +-A INPUT -j limit-2326 +-A INPUT -j limit-2325 +-A INPUT -j limit-2324 +-A INPUT -j limit-2323 +-A INPUT -j limit-2322 +-A INPUT -j limit-2321 +-A INPUT -j limit-2320 +-A INPUT -j limit-2319 +-A INPUT -j limit-2318 +-A INPUT -j limit-2317 +-A INPUT -j limit-2316 +-A INPUT -j limit-2315 +-A INPUT -j limit-2314 +-A INPUT -j limit-2313 +-A INPUT -j limit-2312 +-A INPUT -j limit-2311 +-A INPUT -j limit-2310 +-A INPUT -j limit-2309 +-A INPUT -j limit-2308 +-A INPUT -j limit-2307 +-A INPUT -j limit-2306 +-A INPUT -j limit-2305 +-A INPUT -j limit-2304 +-A INPUT -j limit-2303 +-A INPUT -j limit-2302 +-A INPUT -j limit-2301 +-A INPUT -j limit-2300 +-A INPUT -j limit-2299 +-A INPUT -j limit-2298 +-A INPUT -j limit-2297 +-A INPUT -j limit-2296 +-A INPUT -j limit-2295 +-A INPUT -j limit-2294 +-A INPUT -j limit-2293 +-A INPUT -j limit-2292 +-A INPUT -j limit-2291 +-A INPUT -j limit-2290 +-A INPUT -j limit-2289 +-A INPUT -j limit-2288 +-A INPUT -j limit-2287 +-A INPUT -j limit-2286 +-A INPUT -j limit-2285 +-A INPUT -j limit-2284 +-A INPUT -j limit-2283 +-A INPUT -j limit-2282 +-A INPUT -j limit-2281 +-A INPUT -j limit-2280 +-A INPUT -j limit-2279 +-A INPUT -j limit-2278 +-A INPUT -j limit-2277 +-A INPUT -j limit-2276 +-A INPUT -j limit-2275 +-A INPUT -j limit-2274 +-A INPUT -j limit-2273 +-A INPUT -j limit-2272 +-A INPUT -j limit-2271 +-A INPUT -j limit-2270 +-A INPUT -j limit-2269 +-A INPUT -j limit-2268 +-A INPUT -j limit-2267 +-A INPUT -j limit-2266 +-A INPUT -j limit-2265 +-A INPUT -j limit-2264 +-A INPUT -j limit-2263 +-A INPUT -j limit-2262 +-A INPUT -j limit-2261 +-A INPUT -j limit-2260 +-A INPUT -j limit-2259 +-A INPUT -j limit-2258 +-A INPUT -j limit-2257 +-A INPUT -j limit-2256 +-A INPUT -j limit-2255 +-A INPUT -j limit-2254 +-A INPUT -j limit-2253 +-A INPUT -j limit-2252 +-A INPUT -j limit-2251 +-A INPUT -j limit-2250 +-A INPUT -j limit-2249 +-A INPUT -j limit-2248 +-A INPUT -j limit-2247 +-A INPUT -j limit-2246 +-A INPUT -j limit-2245 +-A INPUT -j limit-2244 +-A INPUT -j limit-2243 +-A INPUT -j limit-2242 +-A INPUT -j limit-2241 +-A INPUT -j limit-2240 +-A INPUT -j limit-2239 +-A INPUT -j limit-2238 +-A INPUT -j limit-2237 +-A INPUT -j limit-2236 +-A INPUT -j limit-2235 +-A INPUT -j limit-2234 +-A INPUT -j limit-2233 +-A INPUT -j limit-2232 +-A INPUT -j limit-2231 +-A INPUT -j limit-2230 +-A INPUT -j limit-2229 +-A INPUT -j limit-2228 +-A INPUT -j limit-2227 +-A INPUT -j limit-2226 +-A INPUT -j limit-2225 +-A INPUT -j limit-2224 +-A INPUT -j limit-2223 +-A INPUT -j limit-2222 +-A INPUT -j limit-2221 +-A INPUT -j limit-2220 +-A INPUT -j limit-2219 +-A INPUT -j limit-2218 +-A INPUT -j limit-2217 +-A INPUT -j limit-2216 +-A INPUT -j limit-2215 +-A INPUT -j limit-2214 +-A INPUT -j limit-2213 +-A INPUT -j limit-2212 +-A INPUT -j limit-2211 +-A INPUT -j limit-2210 +-A INPUT -j limit-2209 +-A INPUT -j limit-2208 +-A INPUT -j limit-2207 +-A INPUT -j limit-2206 +-A INPUT -j limit-2205 +-A INPUT -j limit-2204 +-A INPUT -j limit-2203 +-A INPUT -j limit-2202 +-A INPUT -j limit-2201 +-A INPUT -j limit-2200 +-A INPUT -j limit-2199 +-A INPUT -j limit-2198 +-A INPUT -j limit-2197 +-A INPUT -j limit-2196 +-A INPUT -j limit-2195 +-A INPUT -j limit-2194 +-A INPUT -j limit-2193 +-A INPUT -j limit-2192 +-A INPUT -j limit-2191 +-A INPUT -j limit-2190 +-A INPUT -j limit-2189 +-A INPUT -j limit-2188 +-A INPUT -j limit-2187 +-A INPUT -j limit-2186 +-A INPUT -j limit-2185 +-A INPUT -j limit-2184 +-A INPUT -j limit-2183 +-A INPUT -j limit-2182 +-A INPUT -j limit-2181 +-A INPUT -j limit-2180 +-A INPUT -j limit-2179 +-A INPUT -j limit-2178 +-A INPUT -j limit-2177 +-A INPUT -j limit-2176 +-A INPUT -j limit-2175 +-A INPUT -j limit-2174 +-A INPUT -j limit-2173 +-A INPUT -j limit-2172 +-A INPUT -j limit-2171 +-A INPUT -j limit-2170 +-A INPUT -j limit-2169 +-A INPUT -j limit-2168 +-A INPUT -j limit-2167 +-A INPUT -j limit-2166 +-A INPUT -j limit-2165 +-A INPUT -j limit-2164 +-A INPUT -j limit-2163 +-A INPUT -j limit-2162 +-A INPUT -j limit-2161 +-A INPUT -j limit-2160 +-A INPUT -j limit-2159 +-A INPUT -j limit-2158 +-A INPUT -j limit-2157 +-A INPUT -j limit-2156 +-A INPUT -j limit-2155 +-A INPUT -j limit-2154 +-A INPUT -j limit-2153 +-A INPUT -j limit-2152 +-A INPUT -j limit-2151 +-A INPUT -j limit-2150 +-A INPUT -j limit-2149 +-A INPUT -j limit-2148 +-A INPUT -j limit-2147 +-A INPUT -j limit-2146 +-A INPUT -j limit-2145 +-A INPUT -j limit-2144 +-A INPUT -j limit-2143 +-A INPUT -j limit-2142 +-A INPUT -j limit-2141 +-A INPUT -j limit-2140 +-A INPUT -j limit-2139 +-A INPUT -j limit-2138 +-A INPUT -j limit-2137 +-A INPUT -j limit-2136 +-A INPUT -j limit-2135 +-A INPUT -j limit-2134 +-A INPUT -j limit-2133 +-A INPUT -j limit-2132 +-A INPUT -j limit-2131 +-A INPUT -j limit-2130 +-A INPUT -j limit-2129 +-A INPUT -j limit-2128 +-A INPUT -j limit-2127 +-A INPUT -j limit-2126 +-A INPUT -j limit-2125 +-A INPUT -j limit-2124 +-A INPUT -j limit-2123 +-A INPUT -j limit-2122 +-A INPUT -j limit-2121 +-A INPUT -j limit-2120 +-A INPUT -j limit-2119 +-A INPUT -j limit-2118 +-A INPUT -j limit-2117 +-A INPUT -j limit-2116 +-A INPUT -j limit-2115 +-A INPUT -j limit-2114 +-A INPUT -j limit-2113 +-A INPUT -j limit-2112 +-A INPUT -j limit-2111 +-A INPUT -j limit-2110 +-A INPUT -j limit-2109 +-A INPUT -j limit-2108 +-A INPUT -j limit-2107 +-A INPUT -j limit-2106 +-A INPUT -j limit-2105 +-A INPUT -j limit-2104 +-A INPUT -j limit-2103 +-A INPUT -j limit-2102 +-A INPUT -j limit-2101 +-A INPUT -j limit-2100 +-A INPUT -j limit-2099 +-A INPUT -j limit-2098 +-A INPUT -j limit-2097 +-A INPUT -j limit-2096 +-A INPUT -j limit-2095 +-A INPUT -j limit-2094 +-A INPUT -j limit-2093 +-A INPUT -j limit-2092 +-A INPUT -j limit-2091 +-A INPUT -j limit-2090 +-A INPUT -j limit-2089 +-A INPUT -j limit-2088 +-A INPUT -j limit-2087 +-A INPUT -j limit-2086 +-A INPUT -j limit-2085 +-A INPUT -j limit-2084 +-A INPUT -j limit-2083 +-A INPUT -j limit-2082 +-A INPUT -j limit-2081 +-A INPUT -j limit-2080 +-A INPUT -j limit-2079 +-A INPUT -j limit-2078 +-A INPUT -j limit-2077 +-A INPUT -j limit-2076 +-A INPUT -j limit-2075 +-A INPUT -j limit-2074 +-A INPUT -j limit-2073 +-A INPUT -j limit-2072 +-A INPUT -j limit-2071 +-A INPUT -j limit-2070 +-A INPUT -j limit-2069 +-A INPUT -j limit-2068 +-A INPUT -j limit-2067 +-A INPUT -j limit-2066 +-A INPUT -j limit-2065 +-A INPUT -j limit-2064 +-A INPUT -j limit-2063 +-A INPUT -j limit-2062 +-A INPUT -j limit-2061 +-A INPUT -j limit-2060 +-A INPUT -j limit-2059 +-A INPUT -j limit-2058 +-A INPUT -j limit-2057 +-A INPUT -j limit-2056 +-A INPUT -j limit-2055 +-A INPUT -j limit-2054 +-A INPUT -j limit-2053 +-A INPUT -j limit-2052 +-A INPUT -j limit-2051 +-A INPUT -j limit-2050 +-A INPUT -j limit-2049 +-A INPUT -j limit-2048 +-A INPUT -j limit-2047 +-A INPUT -j limit-2046 +-A INPUT -j limit-2045 +-A INPUT -j limit-2044 +-A INPUT -j limit-2043 +-A INPUT -j limit-2042 +-A INPUT -j limit-2041 +-A INPUT -j limit-2040 +-A INPUT -j limit-2039 +-A INPUT -j limit-2038 +-A INPUT -j limit-2037 +-A INPUT -j limit-2036 +-A INPUT -j limit-2035 +-A INPUT -j limit-2034 +-A INPUT -j limit-2033 +-A INPUT -j limit-2032 +-A INPUT -j limit-2031 +-A INPUT -j limit-2030 +-A INPUT -j limit-2029 +-A INPUT -j limit-2028 +-A INPUT -j limit-2027 +-A INPUT -j limit-2026 +-A INPUT -j limit-2025 +-A INPUT -j limit-2024 +-A INPUT -j limit-2023 +-A INPUT -j limit-2022 +-A INPUT -j limit-2021 +-A INPUT -j limit-2020 +-A INPUT -j limit-2019 +-A INPUT -j limit-2018 +-A INPUT -j limit-2017 +-A INPUT -j limit-2016 +-A INPUT -j limit-2015 +-A INPUT -j limit-2014 +-A INPUT -j limit-2013 +-A INPUT -j limit-2012 +-A INPUT -j limit-2011 +-A INPUT -j limit-2010 +-A INPUT -j limit-2009 +-A INPUT -j limit-2008 +-A INPUT -j limit-2007 +-A INPUT -j limit-2006 +-A INPUT -j limit-2005 +-A INPUT -j limit-2004 +-A INPUT -j limit-2003 +-A INPUT -j limit-2002 +-A INPUT -j limit-2001 +-A INPUT -j limit-2000 +-A INPUT -j limit-1999 +-A INPUT -j limit-1998 +-A INPUT -j limit-1997 +-A INPUT -j limit-1996 +-A INPUT -j limit-1995 +-A INPUT -j limit-1994 +-A INPUT -j limit-1993 +-A INPUT -j limit-1992 +-A INPUT -j limit-1991 +-A INPUT -j limit-1990 +-A INPUT -j limit-1989 +-A INPUT -j limit-1988 +-A INPUT -j limit-1987 +-A INPUT -j limit-1986 +-A INPUT -j limit-1985 +-A INPUT -j limit-1984 +-A INPUT -j limit-1983 +-A INPUT -j limit-1982 +-A INPUT -j limit-1981 +-A INPUT -j limit-1980 +-A INPUT -j limit-1979 +-A INPUT -j limit-1978 +-A INPUT -j limit-1977 +-A INPUT -j limit-1976 +-A INPUT -j limit-1975 +-A INPUT -j limit-1974 +-A INPUT -j limit-1973 +-A INPUT -j limit-1972 +-A INPUT -j limit-1971 +-A INPUT -j limit-1970 +-A INPUT -j limit-1969 +-A INPUT -j limit-1968 +-A INPUT -j limit-1967 +-A INPUT -j limit-1966 +-A INPUT -j limit-1965 +-A INPUT -j limit-1964 +-A INPUT -j limit-1963 +-A INPUT -j limit-1962 +-A INPUT -j limit-1961 +-A INPUT -j limit-1960 +-A INPUT -j limit-1959 +-A INPUT -j limit-1958 +-A INPUT -j limit-1957 +-A INPUT -j limit-1956 +-A INPUT -j limit-1955 +-A INPUT -j limit-1954 +-A INPUT -j limit-1953 +-A INPUT -j limit-1952 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT -A INPUT -j logaccept-final-0 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-1 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-2 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-3 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-4 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-5 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-6 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-7 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-8 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-9 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-10 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-11 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-12 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-13 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-14 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-15 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-16 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-17 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-18 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-19 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-20 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-21 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-22 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-23 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-24 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-25 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-26 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-27 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-28 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-29 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-30 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-31 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-32 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-33 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-34 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-35 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-36 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-37 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-38 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-39 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-40 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-41 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-42 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-43 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-44 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-45 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-46 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-47 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-48 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-49 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-50 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-51 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-52 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-53 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-54 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-55 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-56 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-57 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-58 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-59 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-60 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-61 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-62 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-63 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-64 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-65 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-66 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-67 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-68 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-69 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-70 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-71 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-72 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-73 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-74 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-75 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-76 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-77 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-78 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-79 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-80 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-81 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-82 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-83 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-84 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-85 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-86 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-87 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-88 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-89 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-90 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-91 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-92 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-93 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-94 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-95 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-96 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-97 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-98 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-99 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-100 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-101 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-102 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-103 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-104 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-105 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-106 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-107 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-108 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-109 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-110 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-111 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-112 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-113 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-114 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-115 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-116 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-117 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-118 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-119 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-120 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-121 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-122 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-123 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-124 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-125 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-126 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-127 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-128 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-129 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-130 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-131 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-132 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-133 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-134 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-135 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-136 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-137 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-138 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-139 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-140 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-141 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-142 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-143 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-144 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-145 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-146 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-147 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-148 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-149 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-150 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-151 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-152 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-153 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-154 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-155 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-156 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-157 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-158 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-159 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-160 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-161 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-162 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-163 --A INPUT -i eth0 -j limit-1887 --A INPUT -i eth0 -j limit-1888 --A INPUT -i eth0 -j limit-1889 --A INPUT -i eth0 -j limit-1890 --A INPUT -i eth0 -j limit-1891 --A INPUT -i eth0 -j limit-1892 --A INPUT -i eth0 -j limit-1893 --A INPUT -i eth0 -j limit-1894 --A INPUT -i eth0 -j limit-1895 --A INPUT -i eth0 -j limit-1896 --A INPUT -i eth0 -j limit-1897 --A INPUT -i eth0 -j limit-1898 --A INPUT -i eth0 -j limit-1899 --A INPUT -i eth0 -j limit-1900 --A INPUT -i eth0 -j limit-1901 --A INPUT -i eth0 -j limit-1902 --A INPUT -i eth0 -j limit-1903 --A INPUT -i eth0 -j limit-1904 --A INPUT -i eth0 -j limit-1905 --A INPUT -i eth0 -j limit-1906 --A INPUT -i eth0 -j limit-1907 --A INPUT -i eth0 -j limit-1908 --A INPUT -i eth0 -j limit-1909 --A INPUT -i eth0 -j limit-1910 --A INPUT -i eth0 -j limit-1911 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1913 --A INPUT -i eth0 -j limit-1914 --A INPUT -i eth0 -j limit-1915 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1917 --A INPUT -i eth0 -j limit-1918 --A INPUT -i eth0 -j limit-1919 --A INPUT -i eth0 -j limit-1920 --A INPUT -i eth0 -j limit-1921 --A INPUT -i eth0 -j limit-1922 --A INPUT -i eth0 -j limit-1923 --A INPUT -i eth0 -j limit-1924 --A INPUT -i eth0 -j limit-1925 --A INPUT -i eth0 -j limit-1926 --A INPUT -i eth0 -j limit-1927 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1929 --A INPUT -i eth0 -j limit-1930 --A INPUT -i eth0 -j limit-1931 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1933 --A INPUT -i eth0 -j limit-1934 --A INPUT -i eth0 -j limit-1935 --A INPUT -i eth0 -j limit-1936 --A INPUT -i eth0 -j limit-1937 --A INPUT -i eth0 -j limit-1938 --A INPUT -i eth0 -j limit-1939 --A INPUT -i eth0 -j limit-1940 --A INPUT -i eth0 -j limit-1941 --A INPUT -i eth0 -j limit-1942 --A INPUT -i eth0 -j limit-1943 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1945 --A INPUT -i eth0 -j limit-1946 --A INPUT -i eth0 -j limit-1947 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1949 --A INPUT -i eth0 -j limit-1950 --A INPUT -i eth0 -j limit-1951 --A INPUT -i eth0 -j limit-1952 --A INPUT -i eth0 -j limit-1953 --A INPUT -i eth0 -j limit-1954 --A INPUT -i eth0 -j limit-1955 --A INPUT -i eth0 -j limit-1956 --A INPUT -i eth0 -j limit-1957 --A INPUT -i eth0 -j limit-1958 --A INPUT -i eth0 -j limit-1959 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1961 --A INPUT -i eth0 -j limit-1962 --A INPUT -i eth0 -j limit-1963 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-1965 --A INPUT -i eth0 -j limit-1966 --A INPUT -i eth0 -j limit-1967 --A INPUT -i eth0 -j limit-1968 --A INPUT -i eth0 -j limit-1969 --A INPUT -i eth0 -j limit-1970 --A INPUT -i eth0 -j limit-1971 --A INPUT -i eth0 -j limit-1972 --A INPUT -i eth0 -j limit-1973 --A INPUT -i eth0 -j limit-1974 --A INPUT -i eth0 -j limit-1975 --A INPUT -i eth0 -j limit-1976 --A INPUT -i eth0 -j limit-1977 --A INPUT -i eth0 -j limit-1978 --A INPUT -i eth0 -j limit-1979 --A INPUT -i eth0 -j limit-1980 --A INPUT -i eth0 -j limit-1981 --A INPUT -i eth0 -j limit-1982 --A INPUT -i eth0 -j limit-1983 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-913 --A INPUT -i eth0 -j limit-1985 --A INPUT -i eth0 -j limit-1986 --A INPUT -i eth0 -j limit-1987 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-917 --A INPUT -i eth0 -j limit-1989 --A INPUT -i eth0 -j limit-1990 --A INPUT -i eth0 -j limit-1991 --A INPUT -i eth0 -j limit-1992 --A INPUT -i eth0 -j limit-1993 --A INPUT -i eth0 -j limit-1994 --A INPUT -i eth0 -j limit-1995 --A INPUT -i eth0 -j limit-1996 --A INPUT -i eth0 -j limit-1997 --A INPUT -i eth0 -j limit-1998 --A INPUT -i eth0 -j limit-1999 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-929 --A INPUT -i eth0 -j limit-2001 --A INPUT -i eth0 -j limit-2002 --A INPUT -i eth0 -j limit-2003 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-933 --A INPUT -i eth0 -j limit-2005 --A INPUT -i eth0 -j limit-2006 --A INPUT -i eth0 -j limit-2007 --A INPUT -i eth0 -j limit-2008 --A INPUT -i eth0 -j limit-2009 --A INPUT -i eth0 -j limit-2010 --A INPUT -i eth0 -j limit-2011 --A INPUT -i eth0 -j limit-2012 --A INPUT -i eth0 -j limit-2013 --A INPUT -i eth0 -j limit-2014 --A INPUT -i eth0 -j limit-2015 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-945 --A INPUT -i eth0 -j limit-2017 --A INPUT -i eth0 -j limit-2018 --A INPUT -i eth0 -j limit-2019 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-949 --A INPUT -i eth0 -j limit-2021 --A INPUT -i eth0 -j limit-2022 --A INPUT -i eth0 -j limit-2023 --A INPUT -i eth0 -j limit-2024 --A INPUT -i eth0 -j limit-2025 --A INPUT -i eth0 -j limit-2026 --A INPUT -i eth0 -j limit-2027 --A INPUT -i eth0 -j limit-2028 --A INPUT -i eth0 -j limit-2029 --A INPUT -i eth0 -j limit-2030 --A INPUT -i eth0 -j limit-2031 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-961 --A INPUT -i eth0 -j limit-2033 --A INPUT -i eth0 -j limit-2034 --A INPUT -i eth0 -j limit-2035 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-965 --A INPUT -i eth0 -j limit-2037 --A INPUT -i eth0 -j limit-2038 --A INPUT -i eth0 -j limit-2039 --A INPUT -i eth0 -j limit-2040 --A INPUT -i eth0 -j limit-2041 --A INPUT -i eth0 -j limit-2042 --A INPUT -i eth0 -j limit-2043 --A INPUT -i eth0 -j limit-2044 --A INPUT -i eth0 -j limit-2045 --A INPUT -i eth0 -j limit-2046 --A INPUT -i eth0 -j limit-2047 --A INPUT -i eth0 -j limit-2048 --A INPUT -i eth0 -j limit-2049 --A INPUT -i eth0 -j limit-2050 --A INPUT -i eth0 -j limit-2051 --A INPUT -i eth0 -j limit-2052 --A INPUT -i eth0 -j limit-2053 --A INPUT -i eth0 -j limit-2054 --A INPUT -i eth0 -j limit-2055 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2057 --A INPUT -i eth0 -j limit-2058 --A INPUT -i eth0 -j limit-2059 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2061 --A INPUT -i eth0 -j limit-2062 --A INPUT -i eth0 -j limit-2063 --A INPUT -i eth0 -j limit-2064 --A INPUT -i eth0 -j limit-2065 --A INPUT -i eth0 -j limit-2066 --A INPUT -i eth0 -j limit-2067 --A INPUT -i eth0 -j limit-2068 --A INPUT -i eth0 -j limit-2069 --A INPUT -i eth0 -j limit-2070 --A INPUT -i eth0 -j limit-2071 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2073 --A INPUT -i eth0 -j limit-2074 --A INPUT -i eth0 -j limit-2075 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2077 --A INPUT -i eth0 -j limit-2078 --A INPUT -i eth0 -j limit-2079 --A INPUT -i eth0 -j limit-2080 --A INPUT -i eth0 -j limit-2081 --A INPUT -i eth0 -j limit-2082 --A INPUT -i eth0 -j limit-2083 --A INPUT -i eth0 -j limit-2084 --A INPUT -i eth0 -j limit-2085 --A INPUT -i eth0 -j limit-2086 --A INPUT -i eth0 -j limit-2087 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2089 --A INPUT -i eth0 -j limit-2090 --A INPUT -i eth0 -j limit-2091 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2093 --A INPUT -i eth0 -j limit-2094 --A INPUT -i eth0 -j limit-2095 --A INPUT -i eth0 -j limit-2096 --A INPUT -i eth0 -j limit-2097 --A INPUT -i eth0 -j limit-2098 --A INPUT -i eth0 -j limit-2099 --A INPUT -i eth0 -j limit-2100 --A INPUT -i eth0 -j limit-2101 --A INPUT -i eth0 -j limit-2102 --A INPUT -i eth0 -j limit-2103 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2105 --A INPUT -i eth0 -j limit-2106 --A INPUT -i eth0 -j limit-2107 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-2109 --A INPUT -i eth0 -j limit-2110 --A INPUT -i eth0 -j limit-2111 --A INPUT -i eth0 -j limit-2112 --A INPUT -i eth0 -j limit-2113 --A INPUT -i eth0 -j limit-2114 --A INPUT -i eth0 -j limit-2115 --A INPUT -i eth0 -j limit-2116 --A INPUT -i eth0 -j limit-2117 --A INPUT -i eth0 -j limit-2118 --A INPUT -i eth0 -j limit-2119 --A INPUT -i eth0 -j limit-2120 --A INPUT -i eth0 -j limit-2121 --A INPUT -i eth0 -j limit-2122 --A INPUT -i eth0 -j limit-2123 --A INPUT -i eth0 -j limit-2124 --A INPUT -i eth0 -j limit-2125 --A INPUT -i eth0 -j limit-2126 --A INPUT -i eth0 -j limit-2127 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-985 --A INPUT -i eth0 -j limit-2129 --A INPUT -i eth0 -j limit-2130 --A INPUT -i eth0 -j limit-2131 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-989 --A INPUT -i eth0 -j limit-2133 --A INPUT -i eth0 -j limit-2134 --A INPUT -i eth0 -j limit-2135 --A INPUT -i eth0 -j limit-2136 --A INPUT -i eth0 -j limit-2137 --A INPUT -i eth0 -j limit-2138 --A INPUT -i eth0 -j limit-2139 --A INPUT -i eth0 -j limit-2140 --A INPUT -i eth0 -j limit-2141 --A INPUT -i eth0 -j limit-2142 --A INPUT -i eth0 -j limit-2143 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1001 --A INPUT -i eth0 -j limit-2145 --A INPUT -i eth0 -j limit-2146 --A INPUT -i eth0 -j limit-2147 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1005 --A INPUT -i eth0 -j limit-2149 --A INPUT -i eth0 -j limit-2150 --A INPUT -i eth0 -j limit-2151 --A INPUT -i eth0 -j limit-2152 --A INPUT -i eth0 -j limit-2153 --A INPUT -i eth0 -j limit-2154 --A INPUT -i eth0 -j limit-2155 --A INPUT -i eth0 -j limit-2156 --A INPUT -i eth0 -j limit-2157 --A INPUT -i eth0 -j limit-2158 --A INPUT -i eth0 -j limit-2159 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1017 --A INPUT -i eth0 -j limit-2161 --A INPUT -i eth0 -j limit-2162 --A INPUT -i eth0 -j limit-2163 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1021 --A INPUT -i eth0 -j limit-2165 --A INPUT -i eth0 -j limit-2166 --A INPUT -i eth0 -j limit-2167 --A INPUT -i eth0 -j limit-2168 --A INPUT -i eth0 -j limit-2169 --A INPUT -i eth0 -j limit-2170 --A INPUT -i eth0 -j limit-2171 --A INPUT -i eth0 -j limit-2172 --A INPUT -i eth0 -j limit-2173 --A INPUT -i eth0 -j limit-2174 --A INPUT -i eth0 -j limit-2175 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1033 --A INPUT -i eth0 -j limit-2177 --A INPUT -i eth0 -j limit-2178 --A INPUT -i eth0 -j limit-2179 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1037 --A INPUT -i eth0 -j limit-2181 --A INPUT -i eth0 -j limit-2182 --A INPUT -i eth0 -j limit-2183 --A INPUT -i eth0 -j limit-2184 --A INPUT -i eth0 -j limit-2185 --A INPUT -i eth0 -j limit-2186 --A INPUT -i eth0 -j limit-2187 --A INPUT -i eth0 -j limit-2188 --A INPUT -i eth0 -j limit-2189 --A INPUT -i eth0 -j limit-2190 --A INPUT -i eth0 -j limit-2191 --A INPUT -i eth0 -j limit-2192 --A INPUT -i eth0 -j limit-2193 --A INPUT -i eth0 -j limit-2194 --A INPUT -i eth0 -j limit-2195 --A INPUT -i eth0 -j limit-2196 --A INPUT -i eth0 -j limit-2197 --A INPUT -i eth0 -j limit-2198 --A INPUT -i eth0 -j limit-2199 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2201 --A INPUT -i eth0 -j limit-2202 --A INPUT -i eth0 -j limit-2203 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2205 --A INPUT -i eth0 -j limit-2206 --A INPUT -i eth0 -j limit-2207 --A INPUT -i eth0 -j limit-2208 --A INPUT -i eth0 -j limit-2209 --A INPUT -i eth0 -j limit-2210 --A INPUT -i eth0 -j limit-2211 --A INPUT -i eth0 -j limit-2212 --A INPUT -i eth0 -j limit-2213 --A INPUT -i eth0 -j limit-2214 --A INPUT -i eth0 -j limit-2215 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2217 --A INPUT -i eth0 -j limit-2218 --A INPUT -i eth0 -j limit-2219 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2221 --A INPUT -i eth0 -j limit-2222 --A INPUT -i eth0 -j limit-2223 --A INPUT -i eth0 -j limit-2224 --A INPUT -i eth0 -j limit-2225 --A INPUT -i eth0 -j limit-2226 --A INPUT -i eth0 -j limit-2227 --A INPUT -i eth0 -j limit-2228 --A INPUT -i eth0 -j limit-2229 --A INPUT -i eth0 -j limit-2230 --A INPUT -i eth0 -j limit-2231 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2233 --A INPUT -i eth0 -j limit-2234 --A INPUT -i eth0 -j limit-2235 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2237 --A INPUT -i eth0 -j limit-2238 --A INPUT -i eth0 -j limit-2239 --A INPUT -i eth0 -j limit-2240 --A INPUT -i eth0 -j limit-2241 --A INPUT -i eth0 -j limit-2242 --A INPUT -i eth0 -j limit-2243 --A INPUT -i eth0 -j limit-2244 --A INPUT -i eth0 -j limit-2245 --A INPUT -i eth0 -j limit-2246 --A INPUT -i eth0 -j limit-2247 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2249 --A INPUT -i eth0 -j limit-2250 --A INPUT -i eth0 -j limit-2251 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2253 --A INPUT -i eth0 -j limit-2254 --A INPUT -i eth0 -j limit-2255 --A INPUT -i eth0 -j limit-2256 --A INPUT -i eth0 -j limit-2257 --A INPUT -i eth0 -j limit-2258 --A INPUT -i eth0 -j limit-2259 --A INPUT -i eth0 -j limit-2260 --A INPUT -i eth0 -j limit-2261 --A INPUT -i eth0 -j limit-2262 --A INPUT -i eth0 -j limit-2263 --A INPUT -i eth0 -j limit-2264 --A INPUT -i eth0 -j limit-2265 --A INPUT -i eth0 -j limit-2266 --A INPUT -i eth0 -j limit-2267 --A INPUT -i eth0 -j limit-2268 --A INPUT -i eth0 -j limit-2269 --A INPUT -i eth0 -j limit-2270 --A INPUT -i eth0 -j limit-2271 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 --A INPUT -i eth0 -j limit-2273 --A INPUT -i eth0 -j limit-2274 --A INPUT -i eth0 -j limit-2275 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1061 --A INPUT -i eth0 -j limit-2277 --A INPUT -i eth0 -j limit-2278 --A INPUT -i eth0 -j limit-2279 --A INPUT -i eth0 -j limit-2280 --A INPUT -i eth0 -j limit-2281 --A INPUT -i eth0 -j limit-2282 --A INPUT -i eth0 -j limit-2283 --A INPUT -i eth0 -j limit-2284 --A INPUT -i eth0 -j limit-2285 --A INPUT -i eth0 -j limit-2286 --A INPUT -i eth0 -j limit-2287 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 --A INPUT -i eth0 -j limit-2289 --A INPUT -i eth0 -j limit-2290 --A INPUT -i eth0 -j limit-2291 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 --A INPUT -i eth0 -j limit-2293 --A INPUT -i eth0 -j limit-2294 --A INPUT -i eth0 -j limit-2295 --A INPUT -i eth0 -j limit-2296 --A INPUT -i eth0 -j limit-2297 --A INPUT -i eth0 -j limit-2298 --A INPUT -i eth0 -j limit-2299 --A INPUT -i eth0 -j limit-2300 --A INPUT -i eth0 -j limit-2301 --A INPUT -i eth0 -j limit-2302 --A INPUT -i eth0 -j limit-2303 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1089 --A INPUT -i eth0 -j limit-2305 --A INPUT -i eth0 -j limit-2306 --A INPUT -i eth0 -j limit-2307 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 --A INPUT -i eth0 -j limit-2309 --A INPUT -i eth0 -j limit-2310 --A INPUT -i eth0 -j limit-2311 --A INPUT -i eth0 -j limit-2312 --A INPUT -i eth0 -j limit-2313 --A INPUT -i eth0 -j limit-2314 --A INPUT -i eth0 -j limit-2315 --A INPUT -i eth0 -j limit-2316 --A INPUT -i eth0 -j limit-2317 --A INPUT -i eth0 -j limit-2318 --A INPUT -i eth0 -j limit-2319 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1105 --A INPUT -i eth0 -j limit-2321 --A INPUT -i eth0 -j limit-2322 --A INPUT -i eth0 -j limit-2323 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1109 --A INPUT -i eth0 -j limit-2325 --A INPUT -i eth0 -j limit-2326 --A INPUT -i eth0 -j limit-2327 --A INPUT -i eth0 -j limit-2328 --A INPUT -i eth0 -j limit-2329 --A INPUT -i eth0 -j limit-2330 --A INPUT -i eth0 -j limit-2331 --A INPUT -i eth0 -j limit-2332 --A INPUT -i eth0 -j limit-2333 --A INPUT -i eth0 -j limit-2334 --A INPUT -i eth0 -j limit-2335 --A INPUT -i eth0 -j limit-2336 --A INPUT -i eth0 -j limit-2337 --A INPUT -i eth0 -j limit-2338 --A INPUT -i eth0 -j limit-2339 --A INPUT -i eth0 -j limit-2340 --A INPUT -i eth0 -j limit-2341 --A INPUT -i eth0 -j limit-2342 --A INPUT -i eth0 -j limit-2343 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2345 --A INPUT -i eth0 -j limit-2346 --A INPUT -i eth0 -j limit-2347 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2349 --A INPUT -i eth0 -j limit-2350 --A INPUT -i eth0 -j limit-2351 --A INPUT -i eth0 -j limit-2352 --A INPUT -i eth0 -j limit-2353 --A INPUT -i eth0 -j limit-2354 --A INPUT -i eth0 -j limit-2355 --A INPUT -i eth0 -j limit-2356 --A INPUT -i eth0 -j limit-2357 --A INPUT -i eth0 -j limit-2358 --A INPUT -i eth0 -j limit-2359 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2361 --A INPUT -i eth0 -j limit-2362 --A INPUT -i eth0 -j limit-2363 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2365 --A INPUT -i eth0 -j limit-2366 --A INPUT -i eth0 -j limit-2367 --A INPUT -i eth0 -j limit-2368 --A INPUT -i eth0 -j limit-2369 --A INPUT -i eth0 -j limit-2370 --A INPUT -i eth0 -j limit-2371 --A INPUT -i eth0 -j limit-2372 --A INPUT -i eth0 -j limit-2373 --A INPUT -i eth0 -j limit-2374 --A INPUT -i eth0 -j limit-2375 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2377 --A INPUT -i eth0 -j limit-2378 --A INPUT -i eth0 -j limit-2379 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2381 --A INPUT -i eth0 -j limit-2382 --A INPUT -i eth0 -j limit-2383 --A INPUT -i eth0 -j limit-2384 --A INPUT -i eth0 -j limit-2385 --A INPUT -i eth0 -j limit-2386 --A INPUT -i eth0 -j limit-2387 --A INPUT -i eth0 -j limit-2388 --A INPUT -i eth0 -j limit-2389 --A INPUT -i eth0 -j limit-2390 --A INPUT -i eth0 -j limit-2391 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2393 --A INPUT -i eth0 -j limit-2394 --A INPUT -i eth0 -j limit-2395 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A INPUT -i eth0 -j limit-2397 --A INPUT -i eth0 -j limit-2398 --A INPUT -i eth0 -j limit-2399 --A INPUT -i eth0 -j limit-2400 --A INPUT -i eth0 -j limit-2401 --A INPUT -i eth0 -j limit-2402 --A INPUT -i eth0 -j limit-2403 --A INPUT -i eth0 -j limit-2404 --A INPUT -i eth0 -j limit-2405 --A INPUT -i eth0 -j limit-2406 --A INPUT -i eth0 -j limit-2407 --A INPUT -i eth0 -j limit-2408 --A INPUT -i eth0 -j limit-2409 --A INPUT -i eth0 -j limit-2410 --A INPUT -i eth0 -j limit-2411 --A INPUT -i eth0 -j limit-2412 --A INPUT -i eth0 -j limit-2413 --A INPUT -i eth0 -j limit-2414 --A INPUT -i eth0 -j limit-2415 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1129 --A INPUT -i eth0 -j limit-2417 --A INPUT -i eth0 -j limit-2418 --A INPUT -i eth0 -j limit-2419 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1133 --A INPUT -i eth0 -j limit-2421 --A INPUT -i eth0 -j limit-2422 --A INPUT -i eth0 -j limit-2423 --A INPUT -i eth0 -j limit-2424 --A INPUT -i eth0 -j limit-2425 --A INPUT -i eth0 -j limit-2426 --A INPUT -i eth0 -j limit-2427 --A INPUT -i eth0 -j limit-2428 --A INPUT -i eth0 -j limit-2429 --A INPUT -i eth0 -j limit-2430 --A INPUT -i eth0 -j limit-2431 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1145 --A INPUT -i eth0 -j limit-2433 --A INPUT -i eth0 -j limit-2434 --A INPUT -i eth0 -j limit-2435 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1149 --A INPUT -i eth0 -j limit-2437 --A INPUT -i eth0 -j limit-2438 --A INPUT -i eth0 -j limit-2439 --A INPUT -i eth0 -j limit-2440 --A INPUT -i eth0 -j limit-2441 --A INPUT -i eth0 -j limit-2442 --A INPUT -i eth0 -j limit-2443 --A INPUT -i eth0 -j limit-2444 --A INPUT -i eth0 -j limit-2445 --A INPUT -i eth0 -j limit-2446 --A INPUT -i eth0 -j limit-2447 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1161 --A INPUT -i eth0 -j limit-2449 --A INPUT -i eth0 -j limit-2450 --A INPUT -i eth0 -j limit-2451 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1165 --A INPUT -i eth0 -j limit-2453 --A INPUT -i eth0 -j limit-2454 --A INPUT -i eth0 -j limit-2455 --A INPUT -i eth0 -j limit-2456 --A INPUT -i eth0 -j limit-2457 --A INPUT -i eth0 -j limit-2458 --A INPUT -i eth0 -j limit-2459 --A INPUT -i eth0 -j limit-2460 --A INPUT -i eth0 -j limit-2461 --A INPUT -i eth0 -j limit-2462 --A INPUT -i eth0 -j limit-2463 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1177 --A INPUT -i eth0 -j limit-2465 --A INPUT -i eth0 -j limit-2466 --A INPUT -i eth0 -j limit-2467 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1181 --A INPUT -i eth0 -j limit-2469 --A INPUT -i eth0 -j limit-2470 --A INPUT -i eth0 -j limit-2471 --A INPUT -i eth0 -j limit-2472 --A INPUT -i eth0 -j limit-2473 --A INPUT -i eth0 -j limit-2474 --A INPUT -i eth0 -j limit-2475 --A INPUT -i eth0 -j limit-2476 --A INPUT -i eth0 -j limit-2477 --A INPUT -i eth0 -j limit-2478 --A INPUT -i eth0 -j limit-2479 --A INPUT -i eth0 -j limit-2480 --A INPUT -i eth0 -j limit-2481 --A INPUT -i eth0 -j limit-2482 --A INPUT -i eth0 -j limit-2483 --A INPUT -i eth0 -j limit-2484 --A INPUT -i eth0 -j limit-2485 --A INPUT -i eth0 -j limit-2486 --A INPUT -i eth0 -j limit-2487 --A INPUT -i eth0 -j limit-2488 --A INPUT -i eth0 -j limit-2489 --A INPUT -i eth0 -j limit-2490 --A INPUT -i eth0 -j limit-2491 --A INPUT -i eth0 -j limit-2492 --A INPUT -i eth0 -j limit-2493 --A INPUT -i eth0 -j limit-2494 --A INPUT -i eth0 -j limit-2495 --A INPUT -i eth0 -j limit-2496 --A INPUT -i eth0 -j limit-2497 --A INPUT -i eth0 -j limit-2498 --A INPUT -i eth0 -j limit-2499 --A INPUT -i eth0 -j limit-2500 --A INPUT -i eth0 -j limit-2501 --A INPUT -i eth0 -j limit-2502 --A INPUT -i eth0 -j limit-2503 --A INPUT -i eth0 -j limit-2504 --A INPUT -i eth0 -j limit-2505 --A INPUT -i eth0 -j limit-2506 --A INPUT -i eth0 -j limit-2507 --A INPUT -i eth0 -j limit-2508 --A INPUT -i eth0 -j limit-2509 --A INPUT -i eth0 -j limit-2510 --A INPUT -i eth0 -j limit-2511 --A INPUT -i eth0 -j limit-2512 --A INPUT -i eth0 -j limit-2513 --A INPUT -i eth0 -j limit-2514 --A INPUT -i eth0 -j limit-2515 --A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -m recent --name user:C --rsource --mask fe00:: --set --A INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set --A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -j ACCEPT --A INPUT -j logdrop-1184 --A INPUT +-A INPUT -j logaccept-final-164 -A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -j logaccept-54 --A INPUT -j logdrop-1185 --A INPUT -j logpass-0 +-A INPUT -j logaccept-final-165 +-A INPUT -j logaccept-final-166 -A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT --A INPUT -j logaccept-55 --A INPUT -j logdrop-1186 --A INPUT -i eth0 -j ACCEPT +-A INPUT -j logaccept-final-167 -A INPUT -j ACCEPT --A INPUT -p icmpv6 -j ACCEPT --A OUTPUT -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -j limit-1886 --A OUTPUT -j limit-1885 --A OUTPUT -j limit-1884 --A OUTPUT -j limit-1883 --A OUTPUT -j limit-1882 --A OUTPUT -j limit-1881 --A OUTPUT -j limit-1880 --A OUTPUT -j limit-1879 --A OUTPUT -j limit-1878 --A OUTPUT -j limit-1877 --A OUTPUT -j limit-1876 --A OUTPUT -j limit-1875 --A OUTPUT -j limit-1874 --A OUTPUT -j limit-1873 --A OUTPUT -j limit-1872 --A OUTPUT -j limit-1871 --A OUTPUT -j limit-1870 --A OUTPUT -j limit-1869 --A OUTPUT -j limit-1868 --A OUTPUT -j limit-1867 --A OUTPUT -j limit-1866 --A OUTPUT -j limit-1865 --A OUTPUT -j limit-1864 --A OUTPUT -j limit-1863 --A OUTPUT -j limit-1862 --A OUTPUT -j limit-1861 --A OUTPUT -j limit-1860 --A OUTPUT -j limit-1859 --A OUTPUT -j limit-1858 --A OUTPUT -j limit-1857 --A OUTPUT -j limit-1856 --A OUTPUT -j limit-1855 --A OUTPUT -j limit-1854 --A OUTPUT -j limit-1853 --A OUTPUT -j limit-1852 --A OUTPUT -j limit-1851 --A OUTPUT -j limit-1850 --A OUTPUT -j limit-1849 --A OUTPUT -j limit-1848 --A OUTPUT -j limit-1847 --A OUTPUT -j limit-1846 --A OUTPUT -j limit-1845 --A OUTPUT -j limit-1844 --A OUTPUT -j limit-1843 --A OUTPUT -j limit-1842 --A OUTPUT -j limit-1841 --A OUTPUT -j limit-1840 --A OUTPUT -j limit-1839 --A OUTPUT -j limit-1838 --A OUTPUT -j limit-1837 --A OUTPUT -j limit-1836 --A OUTPUT -j limit-1835 --A OUTPUT -j limit-1834 --A OUTPUT -j limit-1833 --A OUTPUT -j limit-1832 --A OUTPUT -j limit-1831 --A OUTPUT -j limit-1830 --A OUTPUT -j limit-1829 --A OUTPUT -j limit-1828 --A OUTPUT -j limit-1827 --A OUTPUT -j limit-1826 --A OUTPUT -j limit-1825 --A OUTPUT -j limit-1824 --A OUTPUT -j limit-1823 --A OUTPUT -j limit-1822 --A OUTPUT -j limit-1821 --A OUTPUT -j limit-1820 --A OUTPUT -j limit-1819 --A OUTPUT -j limit-1818 --A OUTPUT -j limit-1817 --A OUTPUT -j limit-1816 --A OUTPUT -j limit-1815 --A OUTPUT -j limit-1814 --A OUTPUT -j limit-1813 --A OUTPUT -j limit-1812 --A OUTPUT -j limit-1811 --A OUTPUT -j limit-1810 --A OUTPUT -j limit-1809 --A OUTPUT -j limit-1808 --A OUTPUT -j limit-1807 --A OUTPUT -j limit-1806 --A OUTPUT -j limit-1805 --A OUTPUT -j limit-1804 --A OUTPUT -j limit-1803 --A OUTPUT -j limit-1802 --A OUTPUT -j limit-1801 --A OUTPUT -j limit-1800 --A OUTPUT -j limit-1799 --A OUTPUT -j limit-1798 --A OUTPUT -j limit-1797 --A OUTPUT -j limit-1796 --A OUTPUT -j limit-1795 --A OUTPUT -j limit-1794 --A OUTPUT -j limit-1793 --A OUTPUT -j limit-1792 --A OUTPUT -j limit-1791 --A OUTPUT -j limit-1790 --A OUTPUT -j limit-1789 --A OUTPUT -j limit-1788 --A OUTPUT -j limit-1787 --A OUTPUT -j limit-1786 --A OUTPUT -j limit-1785 --A OUTPUT -j limit-1784 --A OUTPUT -j limit-1783 --A OUTPUT -j limit-1782 --A OUTPUT -j limit-1781 --A OUTPUT -j limit-1780 --A OUTPUT -j limit-1779 --A OUTPUT -j limit-1778 --A OUTPUT -j limit-1777 --A OUTPUT -j limit-1776 --A OUTPUT -j limit-1775 --A OUTPUT -j limit-1774 --A OUTPUT -j limit-1773 --A OUTPUT -j limit-1772 --A OUTPUT -j limit-1771 --A OUTPUT -j limit-1770 --A OUTPUT -j limit-1769 --A OUTPUT -j limit-1768 --A OUTPUT -j limit-1767 --A OUTPUT -j limit-1766 --A OUTPUT -j limit-1765 --A OUTPUT -j limit-1764 --A OUTPUT -j limit-1763 --A OUTPUT -j limit-1762 --A OUTPUT -j limit-1761 --A OUTPUT -j limit-1760 --A OUTPUT -j limit-1759 --A OUTPUT -j limit-1758 --A OUTPUT -j limit-1757 --A OUTPUT -j limit-1756 --A OUTPUT -j limit-1755 --A OUTPUT -j limit-1754 --A OUTPUT -j limit-1753 --A OUTPUT -j limit-1752 --A OUTPUT -j limit-1751 --A OUTPUT -j limit-1750 --A OUTPUT -j limit-1749 --A OUTPUT -j limit-1748 --A OUTPUT -j limit-1747 --A OUTPUT -j limit-1746 --A OUTPUT -j limit-1745 --A OUTPUT -j limit-1744 --A OUTPUT -j limit-1743 --A OUTPUT -j limit-1742 --A OUTPUT -j limit-1741 --A OUTPUT -j limit-1740 --A OUTPUT -j limit-1739 --A OUTPUT -j limit-1738 --A OUTPUT -j limit-1737 --A OUTPUT -j limit-1736 --A OUTPUT -j limit-1735 --A OUTPUT -j limit-1734 --A OUTPUT -j limit-1733 --A OUTPUT -j limit-1732 --A OUTPUT -j limit-1731 --A OUTPUT -j limit-1730 --A OUTPUT -j limit-1729 --A OUTPUT -j limit-1728 --A OUTPUT -j limit-1727 --A OUTPUT -j limit-1726 --A OUTPUT -j limit-1725 --A OUTPUT -j limit-1724 --A OUTPUT -j limit-1723 --A OUTPUT -j limit-1722 --A OUTPUT -j limit-1721 --A OUTPUT -j limit-1720 --A OUTPUT -j limit-1719 --A OUTPUT -j limit-1718 --A OUTPUT -j limit-1717 --A OUTPUT -j limit-1716 --A OUTPUT -j limit-1715 --A OUTPUT -j limit-1714 --A OUTPUT -j limit-1713 --A OUTPUT -j limit-1712 --A OUTPUT -j limit-1711 --A OUTPUT -j limit-1710 --A OUTPUT -j limit-1709 --A OUTPUT -j limit-1708 --A OUTPUT -j limit-1707 --A OUTPUT -j limit-1706 --A OUTPUT -j limit-1705 --A OUTPUT -j limit-1704 --A OUTPUT -j limit-1703 --A OUTPUT -j limit-1702 --A OUTPUT -j limit-1701 --A OUTPUT -j limit-1700 --A OUTPUT -j limit-1699 --A OUTPUT -j limit-1698 --A OUTPUT -j limit-1697 --A OUTPUT -j limit-1696 --A OUTPUT -j limit-1695 --A OUTPUT -j limit-1694 --A OUTPUT -j limit-1693 --A OUTPUT -j limit-1692 --A OUTPUT -j limit-1691 --A OUTPUT -j limit-1690 --A OUTPUT -j limit-1689 --A OUTPUT -j limit-1688 --A OUTPUT -j limit-1687 --A OUTPUT -j limit-1686 --A OUTPUT -j limit-1685 --A OUTPUT -j limit-1684 --A OUTPUT -j limit-1683 --A OUTPUT -j limit-1682 --A OUTPUT -j limit-1681 --A OUTPUT -j limit-1680 --A OUTPUT -j limit-1679 --A OUTPUT -j limit-1678 --A OUTPUT -j limit-1677 --A OUTPUT -j limit-1676 --A OUTPUT -j limit-1675 --A OUTPUT -j limit-1674 --A OUTPUT -j limit-1673 --A OUTPUT -j limit-1672 --A OUTPUT -j limit-1671 --A OUTPUT -j limit-1670 --A OUTPUT -j limit-1669 --A OUTPUT -j limit-1668 --A OUTPUT -j limit-1667 --A OUTPUT -j limit-1666 --A OUTPUT -j limit-1665 --A OUTPUT -j limit-1664 --A OUTPUT -j limit-1663 --A OUTPUT -j limit-1662 --A OUTPUT -j limit-1661 --A OUTPUT -j limit-1660 --A OUTPUT -j limit-1659 --A OUTPUT -j limit-1658 --A OUTPUT -j limit-1657 --A OUTPUT -j limit-1656 --A OUTPUT -j limit-1655 --A OUTPUT -j limit-1654 --A OUTPUT -j limit-1653 --A OUTPUT -j limit-1652 --A OUTPUT -j limit-1651 --A OUTPUT -j limit-1650 --A OUTPUT -j limit-1649 --A OUTPUT -j limit-1648 --A OUTPUT -j limit-1647 --A OUTPUT -j limit-1646 --A OUTPUT -j limit-1645 --A OUTPUT -j limit-1644 --A OUTPUT -j limit-1643 --A OUTPUT -j limit-1642 --A OUTPUT -j limit-1641 --A OUTPUT -j limit-1640 --A OUTPUT -j limit-1639 --A OUTPUT -j limit-1638 --A OUTPUT -j limit-1637 --A OUTPUT -j limit-1636 --A OUTPUT -j limit-1635 --A OUTPUT -j limit-1634 --A OUTPUT -j limit-1633 --A OUTPUT -j limit-1632 --A OUTPUT -j limit-1631 --A OUTPUT -j limit-1630 --A OUTPUT -j limit-1629 --A OUTPUT -j limit-1628 --A OUTPUT -j limit-1627 --A OUTPUT -j limit-1626 --A OUTPUT -j limit-1625 --A OUTPUT -j limit-1624 --A OUTPUT -j limit-1623 --A OUTPUT -j limit-1622 --A OUTPUT -j limit-1621 --A OUTPUT -j limit-1620 --A OUTPUT -j limit-1619 --A OUTPUT -j limit-1618 --A OUTPUT -j limit-1617 --A OUTPUT -j limit-1616 --A OUTPUT -j limit-1615 --A OUTPUT -j limit-1614 --A OUTPUT -j limit-1613 --A OUTPUT -j limit-1612 --A OUTPUT -j limit-1611 --A OUTPUT -j limit-1610 --A OUTPUT -j limit-1609 --A OUTPUT -j limit-1608 --A OUTPUT -j limit-1607 --A OUTPUT -j limit-1606 --A OUTPUT -j limit-1605 --A OUTPUT -j limit-1604 --A OUTPUT -j limit-1603 --A OUTPUT -j limit-1602 --A OUTPUT -j limit-1601 --A OUTPUT -j limit-1600 --A OUTPUT -j limit-1599 --A OUTPUT -j limit-1598 --A OUTPUT -j limit-1597 --A OUTPUT -j limit-1596 --A OUTPUT -j limit-1595 --A OUTPUT -j limit-1594 --A OUTPUT -j limit-1593 --A OUTPUT -j limit-1592 --A OUTPUT -j limit-1591 --A OUTPUT -j limit-1590 --A OUTPUT -j limit-1589 --A OUTPUT -j limit-1588 --A OUTPUT -j limit-1587 --A OUTPUT -j limit-1586 --A OUTPUT -j limit-1585 --A OUTPUT -j limit-1584 --A OUTPUT -j limit-1583 --A OUTPUT -j limit-1582 --A OUTPUT -j limit-1581 --A OUTPUT -j limit-1580 --A OUTPUT -j limit-1579 --A OUTPUT -j limit-1578 --A OUTPUT -j limit-1577 --A OUTPUT -j limit-1576 --A OUTPUT -j limit-1575 --A OUTPUT -j limit-1574 --A OUTPUT -j limit-1573 --A OUTPUT -j limit-1572 --A OUTPUT -j limit-1571 --A OUTPUT -j limit-1570 --A OUTPUT -j limit-1569 --A OUTPUT -j limit-1568 --A OUTPUT -j limit-1567 --A OUTPUT -j limit-1566 --A OUTPUT -j limit-1565 --A OUTPUT -j limit-1564 --A OUTPUT -j limit-1563 --A OUTPUT -j limit-1562 --A OUTPUT -j limit-1561 --A OUTPUT -j limit-1560 --A OUTPUT -j limit-1559 --A OUTPUT -j limit-1558 --A OUTPUT -j limit-1557 --A OUTPUT -j limit-1556 --A OUTPUT -j limit-1555 --A OUTPUT -j limit-1554 --A OUTPUT -j limit-1553 --A OUTPUT -j limit-1552 --A OUTPUT -j limit-1551 --A OUTPUT -j limit-1550 --A OUTPUT -j limit-1549 --A OUTPUT -j limit-1548 --A OUTPUT -j limit-1547 --A OUTPUT -j limit-1546 --A OUTPUT -j limit-1545 --A OUTPUT -j limit-1544 --A OUTPUT -j limit-1543 --A OUTPUT -j limit-1542 --A OUTPUT -j limit-1541 --A OUTPUT -j limit-1540 --A OUTPUT -j limit-1539 --A OUTPUT -j limit-1538 --A OUTPUT -j limit-1537 --A OUTPUT -j limit-1536 --A OUTPUT -j limit-1535 --A OUTPUT -j limit-1534 --A OUTPUT -j limit-1533 --A OUTPUT -j limit-1532 --A OUTPUT -j limit-1531 --A OUTPUT -j limit-1530 --A OUTPUT -j limit-1529 --A OUTPUT -j limit-1528 --A OUTPUT -j limit-1527 --A OUTPUT -j limit-1526 --A OUTPUT -j limit-1525 --A OUTPUT -j limit-1524 --A OUTPUT -j limit-1523 --A OUTPUT -j limit-1522 --A OUTPUT -j limit-1521 --A OUTPUT -j limit-1520 --A OUTPUT -j limit-1519 --A OUTPUT -j limit-1518 --A OUTPUT -j limit-1517 --A OUTPUT -j limit-1516 --A OUTPUT -j limit-1515 --A OUTPUT -j limit-1514 --A OUTPUT -j limit-1513 --A OUTPUT -j limit-1512 --A OUTPUT -j limit-1511 --A OUTPUT -j limit-1510 --A OUTPUT -j limit-1509 --A OUTPUT -j limit-1508 --A OUTPUT -j limit-1507 --A OUTPUT -j limit-1506 --A OUTPUT -j limit-1505 --A OUTPUT -j limit-1504 --A OUTPUT -j limit-1503 --A OUTPUT -j limit-1502 --A OUTPUT -j limit-1501 --A OUTPUT -j limit-1500 --A OUTPUT -j limit-1499 --A OUTPUT -j limit-1498 --A OUTPUT -j limit-1497 --A OUTPUT -j limit-1496 --A OUTPUT -j limit-1495 --A OUTPUT -j limit-1494 --A OUTPUT -j limit-1493 --A OUTPUT -j limit-1492 --A OUTPUT -j limit-1491 --A OUTPUT -j limit-1490 --A OUTPUT -j limit-1489 --A OUTPUT -j limit-1488 --A OUTPUT -j limit-1487 --A OUTPUT -j limit-1486 --A OUTPUT -j limit-1485 --A OUTPUT -j limit-1484 --A OUTPUT -j limit-1483 --A OUTPUT -j limit-1482 --A OUTPUT -j limit-1481 --A OUTPUT -j limit-1480 --A OUTPUT -j limit-1479 --A OUTPUT -j limit-1478 --A OUTPUT -j limit-1477 --A OUTPUT -j limit-1476 --A OUTPUT -j limit-1475 --A OUTPUT -j limit-1474 --A OUTPUT -j limit-1473 --A OUTPUT -j limit-1472 --A OUTPUT -j limit-1471 --A OUTPUT -j limit-1470 --A OUTPUT -j limit-1469 --A OUTPUT -j limit-1468 --A OUTPUT -j limit-1467 --A OUTPUT -j limit-1466 --A OUTPUT -j limit-1465 --A OUTPUT -j limit-1464 --A OUTPUT -j limit-1463 --A OUTPUT -j limit-1462 --A OUTPUT -j limit-1461 --A OUTPUT -j limit-1460 --A OUTPUT -j limit-1459 --A OUTPUT -j limit-1458 --A OUTPUT -j limit-1457 --A OUTPUT -j limit-1456 --A OUTPUT -j limit-1455 --A OUTPUT -j limit-1454 --A OUTPUT -j limit-1453 --A OUTPUT -j limit-1452 --A OUTPUT -j limit-1451 --A OUTPUT -j limit-1450 --A OUTPUT -j limit-1449 --A OUTPUT -j limit-1448 --A OUTPUT -j limit-1447 --A OUTPUT -j limit-1446 --A OUTPUT -j limit-1445 --A OUTPUT -j limit-1444 --A OUTPUT -j limit-1443 --A OUTPUT -j limit-1442 --A OUTPUT -j limit-1441 --A OUTPUT -j limit-1440 --A OUTPUT -j limit-1439 --A OUTPUT -j limit-1438 --A OUTPUT -j limit-1437 --A OUTPUT -j limit-1436 --A OUTPUT -j limit-1435 --A OUTPUT -j limit-1434 --A OUTPUT -j limit-1433 --A OUTPUT -j limit-1432 --A OUTPUT -j limit-1431 --A OUTPUT -j limit-1430 --A OUTPUT -j limit-1429 --A OUTPUT -j limit-1428 --A OUTPUT -j limit-1427 --A OUTPUT -j limit-1426 --A OUTPUT -j limit-1425 --A OUTPUT -j limit-1424 --A OUTPUT -j limit-1423 --A OUTPUT -j limit-1422 --A OUTPUT -j limit-1421 --A OUTPUT -j limit-1420 --A OUTPUT -j limit-1419 --A OUTPUT -j limit-1418 --A OUTPUT -j limit-1417 --A OUTPUT -j limit-1416 --A OUTPUT -j limit-1415 --A OUTPUT -j limit-1414 --A OUTPUT -j limit-1413 --A OUTPUT -j limit-1412 --A OUTPUT -j limit-1411 --A OUTPUT -j limit-1410 --A OUTPUT -j limit-1409 --A OUTPUT -j limit-1408 --A OUTPUT -j limit-1407 --A OUTPUT -j limit-1406 --A OUTPUT -j limit-1405 --A OUTPUT -j limit-1404 --A OUTPUT -j limit-1403 --A OUTPUT -j limit-1402 --A OUTPUT -j limit-1401 --A OUTPUT -j limit-1400 --A OUTPUT -j limit-1399 --A OUTPUT -j limit-1398 --A OUTPUT -j limit-1397 --A OUTPUT -j limit-1396 --A OUTPUT -j limit-1395 --A OUTPUT -j limit-1394 --A OUTPUT -j limit-1393 --A OUTPUT -j limit-1392 --A OUTPUT -j limit-1391 --A OUTPUT -j limit-1390 --A OUTPUT -j limit-1389 --A OUTPUT -j limit-1388 --A OUTPUT -j limit-1387 --A OUTPUT -j limit-1386 --A OUTPUT -j limit-1385 --A OUTPUT -j limit-1384 --A OUTPUT -j limit-1383 --A OUTPUT -j limit-1382 --A OUTPUT -j limit-1381 --A OUTPUT -j limit-1380 --A OUTPUT -j limit-1379 --A OUTPUT -j limit-1378 --A OUTPUT -j limit-1377 --A OUTPUT -j limit-1376 --A OUTPUT -j limit-1375 --A OUTPUT -j limit-1374 --A OUTPUT -j limit-1373 --A OUTPUT -j limit-1372 --A OUTPUT -j limit-1371 --A OUTPUT -j limit-1370 --A OUTPUT -j limit-1369 --A OUTPUT -j limit-1368 --A OUTPUT -j limit-1367 --A OUTPUT -j limit-1366 --A OUTPUT -j limit-1365 --A OUTPUT -j limit-1364 --A OUTPUT -j limit-1363 --A OUTPUT -j limit-1362 --A OUTPUT -j limit-1361 --A OUTPUT -j limit-1360 --A OUTPUT -j limit-1359 --A OUTPUT -j limit-1358 --A OUTPUT -j limit-1357 --A OUTPUT -j limit-1356 --A OUTPUT -j limit-1355 --A OUTPUT -j limit-1354 --A OUTPUT -j limit-1353 --A OUTPUT -j limit-1352 --A OUTPUT -j limit-1351 --A OUTPUT -j limit-1350 --A OUTPUT -j limit-1349 --A OUTPUT -j limit-1348 --A OUTPUT -j limit-1347 --A OUTPUT -j limit-1346 --A OUTPUT -j limit-1345 --A OUTPUT -j limit-1344 --A OUTPUT -j limit-1343 --A OUTPUT -j limit-1342 --A OUTPUT -j limit-1341 --A OUTPUT -j limit-1340 --A OUTPUT -j limit-1339 --A OUTPUT -j limit-1338 --A OUTPUT -j limit-1337 --A OUTPUT -j limit-1336 --A OUTPUT -j limit-1335 --A OUTPUT -j limit-1334 --A OUTPUT -j limit-1333 --A OUTPUT -j limit-1332 --A OUTPUT -j limit-1331 --A OUTPUT -j limit-1330 --A OUTPUT -j limit-1329 --A OUTPUT -j limit-1328 --A OUTPUT -j limit-1327 --A OUTPUT -j limit-1326 --A OUTPUT -j limit-1325 --A OUTPUT -j limit-1324 --A OUTPUT -j limit-1323 --A OUTPUT -j limit-1322 --A OUTPUT -j limit-1321 --A OUTPUT -j limit-1320 --A OUTPUT -j limit-1319 --A OUTPUT -j limit-1318 --A OUTPUT -j limit-1317 --A OUTPUT -j limit-1316 --A OUTPUT -j limit-1315 --A OUTPUT -j limit-1314 --A OUTPUT -j limit-1313 --A OUTPUT -j limit-1312 --A OUTPUT -j limit-1311 --A OUTPUT -j limit-1310 --A OUTPUT -j limit-1309 --A OUTPUT -j limit-1308 --A OUTPUT -j limit-1307 --A OUTPUT -j limit-1306 --A OUTPUT -j limit-1305 --A OUTPUT -j limit-1304 --A OUTPUT -j limit-1303 --A OUTPUT -j limit-1302 --A OUTPUT -j limit-1301 --A OUTPUT -j limit-1300 --A OUTPUT -j limit-1299 --A OUTPUT -j limit-1298 --A OUTPUT -j limit-1297 --A OUTPUT -j limit-1296 --A OUTPUT -j limit-1295 --A OUTPUT -j limit-1294 --A OUTPUT -j limit-1293 --A OUTPUT -j limit-1292 --A OUTPUT -j limit-1291 --A OUTPUT -j limit-1290 --A OUTPUT -j limit-1289 --A OUTPUT -j limit-1288 --A OUTPUT -j limit-1287 --A OUTPUT -j limit-1286 --A OUTPUT -j limit-1285 --A OUTPUT -j limit-1284 --A OUTPUT -j limit-1283 --A OUTPUT -j limit-1282 --A OUTPUT -j limit-1281 --A OUTPUT -j limit-1280 --A OUTPUT -j limit-1279 --A OUTPUT -j limit-1278 --A OUTPUT -j limit-1277 --A OUTPUT -j limit-1276 --A OUTPUT -j limit-1275 --A OUTPUT -j limit-1274 --A OUTPUT -j limit-1273 --A OUTPUT -j limit-1272 --A OUTPUT -j limit-1271 --A OUTPUT -j limit-1270 --A OUTPUT -j limit-1269 --A OUTPUT -j limit-1268 --A OUTPUT -j limit-1267 --A OUTPUT -j limit-1266 --A OUTPUT -j limit-1265 --A OUTPUT -j limit-1264 --A OUTPUT -j limit-1263 --A OUTPUT -j limit-1262 --A OUTPUT -j limit-1261 --A OUTPUT -j limit-1260 --A OUTPUT -j limit-1259 --A OUTPUT -j limit-1258 --A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT --A OUTPUT -o lo -j ACCEPT --A OUTPUT -o eth1 -d fc00::/7 -j limit-0 +-A INPUT -j logaccept-final-168 +-A INPUT -j logaccept-final-169 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-170 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-171 +-A INPUT -j logaccept-final-172 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-173 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-174 +-A INPUT -j logaccept-final-175 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-176 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-177 +-A INPUT -j logaccept-final-178 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-179 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-180 +-A INPUT -j logaccept-final-181 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-182 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-183 +-A INPUT -j logaccept-final-184 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-185 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-186 +-A INPUT -j logaccept-final-187 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-188 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-189 +-A INPUT -j logaccept-final-190 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-191 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-192 +-A INPUT -j logaccept-final-193 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-194 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-195 +-A INPUT -j logaccept-final-196 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-197 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-198 +-A INPUT -j logaccept-final-199 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-200 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-201 +-A INPUT -j logaccept-final-202 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-203 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-204 +-A INPUT -j logaccept-final-205 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-206 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-207 +-A INPUT -j logaccept-final-208 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-209 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-210 +-A INPUT -j logaccept-final-211 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-212 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-213 +-A INPUT -j logaccept-final-214 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-215 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-216 +-A INPUT -j logaccept-final-217 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-218 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-219 +-A INPUT -j logaccept-final-220 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-221 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-222 +-A INPUT -j logaccept-final-223 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-224 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-225 +-A INPUT -j logaccept-final-226 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-227 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-228 +-A INPUT -j logaccept-final-229 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-230 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-231 +-A INPUT -j logaccept-final-232 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-233 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-234 +-A INPUT -j logaccept-final-235 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-236 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-237 +-A INPUT -j logaccept-final-238 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-239 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-240 +-A INPUT -j logaccept-final-241 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-242 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-243 +-A INPUT -j logaccept-final-244 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-245 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-246 +-A INPUT -j logaccept-final-247 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-248 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-249 +-A INPUT -j logaccept-final-250 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-251 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-252 +-A INPUT -j logaccept-final-253 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-254 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-255 +-A INPUT -j logaccept-final-256 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-257 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-258 +-A INPUT -j logaccept-final-259 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-260 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-261 +-A INPUT -j logaccept-final-262 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-263 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-264 +-A INPUT -j logaccept-final-265 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-266 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-267 +-A INPUT -j logaccept-final-268 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-269 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-270 +-A INPUT -j logaccept-final-271 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-272 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-273 +-A INPUT -j logaccept-final-274 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-275 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-276 +-A INPUT -j logaccept-final-277 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-278 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-279 +-A INPUT -j logaccept-final-280 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-281 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-282 +-A INPUT -j logaccept-final-283 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-284 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-285 +-A INPUT -j logaccept-final-286 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-287 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-288 +-A INPUT -j logaccept-final-289 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-290 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-291 +-A INPUT -j logaccept-final-292 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-293 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-294 +-A INPUT -j logaccept-final-295 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-296 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-297 +-A INPUT -j logaccept-final-298 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-299 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-300 +-A INPUT -j logaccept-final-301 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-302 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-303 +-A INPUT -j logaccept-final-304 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-305 +-A INPUT -i eth0 -j limit-2928 +-A INPUT -i eth0 -j limit-2929 +-A INPUT -i eth0 -j limit-2930 +-A INPUT -i eth0 -j limit-2931 +-A INPUT -i eth0 -j limit-2932 +-A INPUT -i eth0 -j limit-2933 +-A INPUT -i eth0 -j limit-2934 +-A INPUT -i eth0 -j limit-2935 +-A INPUT -i eth0 -j limit-2936 +-A INPUT -i eth0 -j limit-2937 +-A INPUT -i eth0 -j limit-2938 +-A INPUT -i eth0 -j limit-2939 +-A INPUT -i eth0 -j limit-2940 +-A INPUT -i eth0 -j limit-2941 +-A INPUT -i eth0 -j limit-2942 +-A INPUT -i eth0 -j limit-2943 +-A INPUT -i eth0 -j limit-2944 +-A INPUT -i eth0 -j limit-2945 +-A INPUT -i eth0 -j limit-2946 +-A INPUT -i eth0 -j limit-2947 +-A INPUT -i eth0 -j limit-2948 +-A INPUT -i eth0 -j limit-2949 +-A INPUT -i eth0 -j limit-2950 +-A INPUT -i eth0 -j limit-2951 +-A INPUT -i eth0 -j limit-2952 +-A INPUT -i eth0 -j limit-2953 +-A INPUT -i eth0 -j limit-2954 +-A INPUT -i eth0 -j limit-2955 +-A INPUT -i eth0 -j limit-2956 +-A INPUT -i eth0 -j limit-2957 +-A INPUT -i eth0 -j limit-2958 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-2960 +-A INPUT -i eth0 -j limit-2961 +-A INPUT -i eth0 -j limit-2962 +-A INPUT -i eth0 -j limit-2963 +-A INPUT -i eth0 -j limit-2964 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-2966 +-A INPUT -i eth0 -j limit-2967 +-A INPUT -i eth0 -j limit-2968 +-A INPUT -i eth0 -j limit-2969 +-A INPUT -i eth0 -j limit-2970 +-A INPUT -i eth0 -j limit-2971 +-A INPUT -i eth0 -j limit-2972 +-A INPUT -i eth0 -j limit-2973 +-A INPUT -i eth0 -j limit-2974 +-A INPUT -i eth0 -j limit-2975 +-A INPUT -i eth0 -j limit-2976 +-A INPUT -i eth0 -j limit-2977 +-A INPUT -i eth0 -j limit-2978 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-2980 +-A INPUT -i eth0 -j limit-2981 +-A INPUT -i eth0 -j limit-2982 +-A INPUT -i eth0 -j limit-2983 +-A INPUT -i eth0 -j limit-2984 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-2986 +-A INPUT -i eth0 -j limit-2987 +-A INPUT -i eth0 -j limit-2988 +-A INPUT -i eth0 -j limit-2989 +-A INPUT -i eth0 -j limit-2990 +-A INPUT -i eth0 -j limit-2991 +-A INPUT -i eth0 -j limit-2992 +-A INPUT -i eth0 -j limit-2993 +-A INPUT -i eth0 -j limit-2994 +-A INPUT -i eth0 -j limit-2995 +-A INPUT -i eth0 -j limit-2996 +-A INPUT -i eth0 -j limit-2997 +-A INPUT -i eth0 -j limit-2998 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3000 +-A INPUT -i eth0 -j limit-3001 +-A INPUT -i eth0 -j limit-3002 +-A INPUT -i eth0 -j limit-3003 +-A INPUT -i eth0 -j limit-3004 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3006 +-A INPUT -i eth0 -j limit-3007 +-A INPUT -i eth0 -j limit-3008 +-A INPUT -i eth0 -j limit-3009 +-A INPUT -i eth0 -j limit-3010 +-A INPUT -i eth0 -j limit-3011 +-A INPUT -i eth0 -j limit-3012 +-A INPUT -i eth0 -j limit-3013 +-A INPUT -i eth0 -j limit-3014 +-A INPUT -i eth0 -j limit-3015 +-A INPUT -i eth0 -j limit-3016 +-A INPUT -i eth0 -j limit-3017 +-A INPUT -i eth0 -j limit-3018 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3020 +-A INPUT -i eth0 -j limit-3021 +-A INPUT -i eth0 -j limit-3022 +-A INPUT -i eth0 -j limit-3023 +-A INPUT -i eth0 -j limit-3024 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3026 +-A INPUT -i eth0 -j limit-3027 +-A INPUT -i eth0 -j limit-3028 +-A INPUT -i eth0 -j limit-3029 +-A INPUT -i eth0 -j limit-3030 +-A INPUT -i eth0 -j limit-3031 +-A INPUT -i eth0 -j limit-3032 +-A INPUT -i eth0 -j limit-3033 +-A INPUT -i eth0 -j limit-3034 +-A INPUT -i eth0 -j limit-3035 +-A INPUT -i eth0 -j limit-3036 +-A INPUT -i eth0 -j limit-3037 +-A INPUT -i eth0 -j limit-3038 +-A INPUT -i eth0 -j limit-3039 +-A INPUT -i eth0 -j limit-3040 +-A INPUT -i eth0 -j limit-3041 +-A INPUT -i eth0 -j limit-3042 +-A INPUT -i eth0 -j limit-3043 +-A INPUT -i eth0 -j limit-3044 +-A INPUT -i eth0 -j limit-3045 +-A INPUT -i eth0 -j limit-3046 +-A INPUT -i eth0 -j limit-3047 +-A INPUT -i eth0 -j limit-3048 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1681 +-A INPUT -i eth0 -j limit-3050 +-A INPUT -i eth0 -j limit-3051 +-A INPUT -i eth0 -j limit-3052 +-A INPUT -i eth0 -j limit-3053 +-A INPUT -i eth0 -j limit-3054 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1687 +-A INPUT -i eth0 -j limit-3056 +-A INPUT -i eth0 -j limit-3057 +-A INPUT -i eth0 -j limit-3058 +-A INPUT -i eth0 -j limit-3059 +-A INPUT -i eth0 -j limit-3060 +-A INPUT -i eth0 -j limit-3061 +-A INPUT -i eth0 -j limit-3062 +-A INPUT -i eth0 -j limit-3063 +-A INPUT -i eth0 -j limit-3064 +-A INPUT -i eth0 -j limit-3065 +-A INPUT -i eth0 -j limit-3066 +-A INPUT -i eth0 -j limit-3067 +-A INPUT -i eth0 -j limit-3068 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1701 +-A INPUT -i eth0 -j limit-3070 +-A INPUT -i eth0 -j limit-3071 +-A INPUT -i eth0 -j limit-3072 +-A INPUT -i eth0 -j limit-3073 +-A INPUT -i eth0 -j limit-3074 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1707 +-A INPUT -i eth0 -j limit-3076 +-A INPUT -i eth0 -j limit-3077 +-A INPUT -i eth0 -j limit-3078 +-A INPUT -i eth0 -j limit-3079 +-A INPUT -i eth0 -j limit-3080 +-A INPUT -i eth0 -j limit-3081 +-A INPUT -i eth0 -j limit-3082 +-A INPUT -i eth0 -j limit-3083 +-A INPUT -i eth0 -j limit-3084 +-A INPUT -i eth0 -j limit-3085 +-A INPUT -i eth0 -j limit-3086 +-A INPUT -i eth0 -j limit-3087 +-A INPUT -i eth0 -j limit-3088 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1721 +-A INPUT -i eth0 -j limit-3090 +-A INPUT -i eth0 -j limit-3091 +-A INPUT -i eth0 -j limit-3092 +-A INPUT -i eth0 -j limit-3093 +-A INPUT -i eth0 -j limit-3094 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1727 +-A INPUT -i eth0 -j limit-3096 +-A INPUT -i eth0 -j limit-3097 +-A INPUT -i eth0 -j limit-3098 +-A INPUT -i eth0 -j limit-3099 +-A INPUT -i eth0 -j limit-3100 +-A INPUT -i eth0 -j limit-3101 +-A INPUT -i eth0 -j limit-3102 +-A INPUT -i eth0 -j limit-3103 +-A INPUT -i eth0 -j limit-3104 +-A INPUT -i eth0 -j limit-3105 +-A INPUT -i eth0 -j limit-3106 +-A INPUT -i eth0 -j limit-3107 +-A INPUT -i eth0 -j limit-3108 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1741 +-A INPUT -i eth0 -j limit-3110 +-A INPUT -i eth0 -j limit-3111 +-A INPUT -i eth0 -j limit-3112 +-A INPUT -i eth0 -j limit-3113 +-A INPUT -i eth0 -j limit-3114 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1747 +-A INPUT -i eth0 -j limit-3116 +-A INPUT -i eth0 -j limit-3117 +-A INPUT -i eth0 -j limit-3118 +-A INPUT -i eth0 -j limit-3119 +-A INPUT -i eth0 -j limit-3120 +-A INPUT -i eth0 -j limit-3121 +-A INPUT -i eth0 -j limit-3122 +-A INPUT -i eth0 -j limit-3123 +-A INPUT -i eth0 -j limit-3124 +-A INPUT -i eth0 -j limit-3125 +-A INPUT -i eth0 -j limit-3126 +-A INPUT -i eth0 -j limit-3127 +-A INPUT -i eth0 -j limit-3128 +-A INPUT -i eth0 -j limit-3129 +-A INPUT -i eth0 -j limit-3130 +-A INPUT -i eth0 -j limit-3131 +-A INPUT -i eth0 -j limit-3132 +-A INPUT -i eth0 -j limit-3133 +-A INPUT -i eth0 -j limit-3134 +-A INPUT -i eth0 -j limit-3135 +-A INPUT -i eth0 -j limit-3136 +-A INPUT -i eth0 -j limit-3137 +-A INPUT -i eth0 -j limit-3138 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1771 +-A INPUT -i eth0 -j limit-3140 +-A INPUT -i eth0 -j limit-3141 +-A INPUT -i eth0 -j limit-3142 +-A INPUT -i eth0 -j limit-3143 +-A INPUT -i eth0 -j limit-3144 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1777 +-A INPUT -i eth0 -j limit-3146 +-A INPUT -i eth0 -j limit-3147 +-A INPUT -i eth0 -j limit-3148 +-A INPUT -i eth0 -j limit-3149 +-A INPUT -i eth0 -j limit-3150 +-A INPUT -i eth0 -j limit-3151 +-A INPUT -i eth0 -j limit-3152 +-A INPUT -i eth0 -j limit-3153 +-A INPUT -i eth0 -j limit-3154 +-A INPUT -i eth0 -j limit-3155 +-A INPUT -i eth0 -j limit-3156 +-A INPUT -i eth0 -j limit-3157 +-A INPUT -i eth0 -j limit-3158 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1791 +-A INPUT -i eth0 -j limit-3160 +-A INPUT -i eth0 -j limit-3161 +-A INPUT -i eth0 -j limit-3162 +-A INPUT -i eth0 -j limit-3163 +-A INPUT -i eth0 -j limit-3164 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1797 +-A INPUT -i eth0 -j limit-3166 +-A INPUT -i eth0 -j limit-3167 +-A INPUT -i eth0 -j limit-3168 +-A INPUT -i eth0 -j limit-3169 +-A INPUT -i eth0 -j limit-3170 +-A INPUT -i eth0 -j limit-3171 +-A INPUT -i eth0 -j limit-3172 +-A INPUT -i eth0 -j limit-3173 +-A INPUT -i eth0 -j limit-3174 +-A INPUT -i eth0 -j limit-3175 +-A INPUT -i eth0 -j limit-3176 +-A INPUT -i eth0 -j limit-3177 +-A INPUT -i eth0 -j limit-3178 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1811 +-A INPUT -i eth0 -j limit-3180 +-A INPUT -i eth0 -j limit-3181 +-A INPUT -i eth0 -j limit-3182 +-A INPUT -i eth0 -j limit-3183 +-A INPUT -i eth0 -j limit-3184 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1817 +-A INPUT -i eth0 -j limit-3186 +-A INPUT -i eth0 -j limit-3187 +-A INPUT -i eth0 -j limit-3188 +-A INPUT -i eth0 -j limit-3189 +-A INPUT -i eth0 -j limit-3190 +-A INPUT -i eth0 -j limit-3191 +-A INPUT -i eth0 -j limit-3192 +-A INPUT -i eth0 -j limit-3193 +-A INPUT -i eth0 -j limit-3194 +-A INPUT -i eth0 -j limit-3195 +-A INPUT -i eth0 -j limit-3196 +-A INPUT -i eth0 -j limit-3197 +-A INPUT -i eth0 -j limit-3198 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1831 +-A INPUT -i eth0 -j limit-3200 +-A INPUT -i eth0 -j limit-3201 +-A INPUT -i eth0 -j limit-3202 +-A INPUT -i eth0 -j limit-3203 +-A INPUT -i eth0 -j limit-3204 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1837 +-A INPUT -i eth0 -j limit-3206 +-A INPUT -i eth0 -j limit-3207 +-A INPUT -i eth0 -j limit-3208 +-A INPUT -i eth0 -j limit-3209 +-A INPUT -i eth0 -j limit-3210 +-A INPUT -i eth0 -j limit-3211 +-A INPUT -i eth0 -j limit-3212 +-A INPUT -i eth0 -j limit-3213 +-A INPUT -i eth0 -j limit-3214 +-A INPUT -i eth0 -j limit-3215 +-A INPUT -i eth0 -j limit-3216 +-A INPUT -i eth0 -j limit-3217 +-A INPUT -i eth0 -j limit-3218 +-A INPUT -i eth0 -j limit-3219 +-A INPUT -i eth0 -j limit-3220 +-A INPUT -i eth0 -j limit-3221 +-A INPUT -i eth0 -j limit-3222 +-A INPUT -i eth0 -j limit-3223 +-A INPUT -i eth0 -j limit-3224 +-A INPUT -i eth0 -j limit-3225 +-A INPUT -i eth0 -j limit-3226 +-A INPUT -i eth0 -j limit-3227 +-A INPUT -i eth0 -j limit-3228 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3230 +-A INPUT -i eth0 -j limit-3231 +-A INPUT -i eth0 -j limit-3232 +-A INPUT -i eth0 -j limit-3233 +-A INPUT -i eth0 -j limit-3234 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3236 +-A INPUT -i eth0 -j limit-3237 +-A INPUT -i eth0 -j limit-3238 +-A INPUT -i eth0 -j limit-3239 +-A INPUT -i eth0 -j limit-3240 +-A INPUT -i eth0 -j limit-3241 +-A INPUT -i eth0 -j limit-3242 +-A INPUT -i eth0 -j limit-3243 +-A INPUT -i eth0 -j limit-3244 +-A INPUT -i eth0 -j limit-3245 +-A INPUT -i eth0 -j limit-3246 +-A INPUT -i eth0 -j limit-3247 +-A INPUT -i eth0 -j limit-3248 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3250 +-A INPUT -i eth0 -j limit-3251 +-A INPUT -i eth0 -j limit-3252 +-A INPUT -i eth0 -j limit-3253 +-A INPUT -i eth0 -j limit-3254 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3256 +-A INPUT -i eth0 -j limit-3257 +-A INPUT -i eth0 -j limit-3258 +-A INPUT -i eth0 -j limit-3259 +-A INPUT -i eth0 -j limit-3260 +-A INPUT -i eth0 -j limit-3261 +-A INPUT -i eth0 -j limit-3262 +-A INPUT -i eth0 -j limit-3263 +-A INPUT -i eth0 -j limit-3264 +-A INPUT -i eth0 -j limit-3265 +-A INPUT -i eth0 -j limit-3266 +-A INPUT -i eth0 -j limit-3267 +-A INPUT -i eth0 -j limit-3268 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3270 +-A INPUT -i eth0 -j limit-3271 +-A INPUT -i eth0 -j limit-3272 +-A INPUT -i eth0 -j limit-3273 +-A INPUT -i eth0 -j limit-3274 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3276 +-A INPUT -i eth0 -j limit-3277 +-A INPUT -i eth0 -j limit-3278 +-A INPUT -i eth0 -j limit-3279 +-A INPUT -i eth0 -j limit-3280 +-A INPUT -i eth0 -j limit-3281 +-A INPUT -i eth0 -j limit-3282 +-A INPUT -i eth0 -j limit-3283 +-A INPUT -i eth0 -j limit-3284 +-A INPUT -i eth0 -j limit-3285 +-A INPUT -i eth0 -j limit-3286 +-A INPUT -i eth0 -j limit-3287 +-A INPUT -i eth0 -j limit-3288 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3290 +-A INPUT -i eth0 -j limit-3291 +-A INPUT -i eth0 -j limit-3292 +-A INPUT -i eth0 -j limit-3293 +-A INPUT -i eth0 -j limit-3294 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-3296 +-A INPUT -i eth0 -j limit-3297 +-A INPUT -i eth0 -j limit-3298 +-A INPUT -i eth0 -j limit-3299 +-A INPUT -i eth0 -j limit-3300 +-A INPUT -i eth0 -j limit-3301 +-A INPUT -i eth0 -j limit-3302 +-A INPUT -i eth0 -j limit-3303 +-A INPUT -i eth0 -j limit-3304 +-A INPUT -i eth0 -j limit-3305 +-A INPUT -i eth0 -j limit-3306 +-A INPUT -i eth0 -j limit-3307 +-A INPUT -i eth0 -j limit-3308 +-A INPUT -i eth0 -j limit-3309 +-A INPUT -i eth0 -j limit-3310 +-A INPUT -i eth0 -j limit-3311 +-A INPUT -i eth0 -j limit-3312 +-A INPUT -i eth0 -j limit-3313 +-A INPUT -i eth0 -j limit-3314 +-A INPUT -i eth0 -j limit-3315 +-A INPUT -i eth0 -j limit-3316 +-A INPUT -i eth0 -j limit-3317 +-A INPUT -i eth0 -j limit-3318 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1861 +-A INPUT -i eth0 -j limit-3320 +-A INPUT -i eth0 -j limit-3321 +-A INPUT -i eth0 -j limit-3322 +-A INPUT -i eth0 -j limit-3323 +-A INPUT -i eth0 -j limit-3324 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1867 +-A INPUT -i eth0 -j limit-3326 +-A INPUT -i eth0 -j limit-3327 +-A INPUT -i eth0 -j limit-3328 +-A INPUT -i eth0 -j limit-3329 +-A INPUT -i eth0 -j limit-3330 +-A INPUT -i eth0 -j limit-3331 +-A INPUT -i eth0 -j limit-3332 +-A INPUT -i eth0 -j limit-3333 +-A INPUT -i eth0 -j limit-3334 +-A INPUT -i eth0 -j limit-3335 +-A INPUT -i eth0 -j limit-3336 +-A INPUT -i eth0 -j limit-3337 +-A INPUT -i eth0 -j limit-3338 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1881 +-A INPUT -i eth0 -j limit-3340 +-A INPUT -i eth0 -j limit-3341 +-A INPUT -i eth0 -j limit-3342 +-A INPUT -i eth0 -j limit-3343 +-A INPUT -i eth0 -j limit-3344 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1887 +-A INPUT -i eth0 -j limit-3346 +-A INPUT -i eth0 -j limit-3347 +-A INPUT -i eth0 -j limit-3348 +-A INPUT -i eth0 -j limit-3349 +-A INPUT -i eth0 -j limit-3350 +-A INPUT -i eth0 -j limit-3351 +-A INPUT -i eth0 -j limit-3352 +-A INPUT -i eth0 -j limit-3353 +-A INPUT -i eth0 -j limit-3354 +-A INPUT -i eth0 -j limit-3355 +-A INPUT -i eth0 -j limit-3356 +-A INPUT -i eth0 -j limit-3357 +-A INPUT -i eth0 -j limit-3358 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1901 +-A INPUT -i eth0 -j limit-3360 +-A INPUT -i eth0 -j limit-3361 +-A INPUT -i eth0 -j limit-3362 +-A INPUT -i eth0 -j limit-3363 +-A INPUT -i eth0 -j limit-3364 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1907 +-A INPUT -i eth0 -j limit-3366 +-A INPUT -i eth0 -j limit-3367 +-A INPUT -i eth0 -j limit-3368 +-A INPUT -i eth0 -j limit-3369 +-A INPUT -i eth0 -j limit-3370 +-A INPUT -i eth0 -j limit-3371 +-A INPUT -i eth0 -j limit-3372 +-A INPUT -i eth0 -j limit-3373 +-A INPUT -i eth0 -j limit-3374 +-A INPUT -i eth0 -j limit-3375 +-A INPUT -i eth0 -j limit-3376 +-A INPUT -i eth0 -j limit-3377 +-A INPUT -i eth0 -j limit-3378 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1921 +-A INPUT -i eth0 -j limit-3380 +-A INPUT -i eth0 -j limit-3381 +-A INPUT -i eth0 -j limit-3382 +-A INPUT -i eth0 -j limit-3383 +-A INPUT -i eth0 -j limit-3384 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1927 +-A INPUT -i eth0 -j limit-3386 +-A INPUT -i eth0 -j limit-3387 +-A INPUT -i eth0 -j limit-3388 +-A INPUT -i eth0 -j limit-3389 +-A INPUT -i eth0 -j limit-3390 +-A INPUT -i eth0 -j limit-3391 +-A INPUT -i eth0 -j limit-3392 +-A INPUT -i eth0 -j limit-3393 +-A INPUT -i eth0 -j limit-3394 +-A INPUT -i eth0 -j limit-3395 +-A INPUT -i eth0 -j limit-3396 +-A INPUT -i eth0 -j limit-3397 +-A INPUT -i eth0 -j limit-3398 +-A INPUT -i eth0 -j limit-3399 +-A INPUT -i eth0 -j limit-3400 +-A INPUT -i eth0 -j limit-3401 +-A INPUT -i eth0 -j limit-3402 +-A INPUT -i eth0 -j limit-3403 +-A INPUT -i eth0 -j limit-3404 +-A INPUT -i eth0 -j limit-3405 +-A INPUT -i eth0 -j limit-3406 +-A INPUT -i eth0 -j limit-3407 +-A INPUT -i eth0 -j limit-3408 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3410 +-A INPUT -i eth0 -j limit-3411 +-A INPUT -i eth0 -j limit-3412 +-A INPUT -i eth0 -j limit-3413 +-A INPUT -i eth0 -j limit-3414 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3416 +-A INPUT -i eth0 -j limit-3417 +-A INPUT -i eth0 -j limit-3418 +-A INPUT -i eth0 -j limit-3419 +-A INPUT -i eth0 -j limit-3420 +-A INPUT -i eth0 -j limit-3421 +-A INPUT -i eth0 -j limit-3422 +-A INPUT -i eth0 -j limit-3423 +-A INPUT -i eth0 -j limit-3424 +-A INPUT -i eth0 -j limit-3425 +-A INPUT -i eth0 -j limit-3426 +-A INPUT -i eth0 -j limit-3427 +-A INPUT -i eth0 -j limit-3428 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3430 +-A INPUT -i eth0 -j limit-3431 +-A INPUT -i eth0 -j limit-3432 +-A INPUT -i eth0 -j limit-3433 +-A INPUT -i eth0 -j limit-3434 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3436 +-A INPUT -i eth0 -j limit-3437 +-A INPUT -i eth0 -j limit-3438 +-A INPUT -i eth0 -j limit-3439 +-A INPUT -i eth0 -j limit-3440 +-A INPUT -i eth0 -j limit-3441 +-A INPUT -i eth0 -j limit-3442 +-A INPUT -i eth0 -j limit-3443 +-A INPUT -i eth0 -j limit-3444 +-A INPUT -i eth0 -j limit-3445 +-A INPUT -i eth0 -j limit-3446 +-A INPUT -i eth0 -j limit-3447 +-A INPUT -i eth0 -j limit-3448 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3450 +-A INPUT -i eth0 -j limit-3451 +-A INPUT -i eth0 -j limit-3452 +-A INPUT -i eth0 -j limit-3453 +-A INPUT -i eth0 -j limit-3454 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3456 +-A INPUT -i eth0 -j limit-3457 +-A INPUT -i eth0 -j limit-3458 +-A INPUT -i eth0 -j limit-3459 +-A INPUT -i eth0 -j limit-3460 +-A INPUT -i eth0 -j limit-3461 +-A INPUT -i eth0 -j limit-3462 +-A INPUT -i eth0 -j limit-3463 +-A INPUT -i eth0 -j limit-3464 +-A INPUT -i eth0 -j limit-3465 +-A INPUT -i eth0 -j limit-3466 +-A INPUT -i eth0 -j limit-3467 +-A INPUT -i eth0 -j limit-3468 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3470 +-A INPUT -i eth0 -j limit-3471 +-A INPUT -i eth0 -j limit-3472 +-A INPUT -i eth0 -j limit-3473 +-A INPUT -i eth0 -j limit-3474 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3476 +-A INPUT -i eth0 -j limit-3477 +-A INPUT -i eth0 -j limit-3478 +-A INPUT -i eth0 -j limit-3479 +-A INPUT -i eth0 -j limit-3480 +-A INPUT -i eth0 -j limit-3481 +-A INPUT -i eth0 -j limit-3482 +-A INPUT -i eth0 -j limit-3483 +-A INPUT -i eth0 -j limit-3484 +-A INPUT -i eth0 -j limit-3485 +-A INPUT -i eth0 -j limit-3486 +-A INPUT -i eth0 -j limit-3487 +-A INPUT -i eth0 -j limit-3488 +-A INPUT -i eth0 -j limit-3489 +-A INPUT -i eth0 -j limit-3490 +-A INPUT -i eth0 -j limit-3491 +-A INPUT -i eth0 -j limit-3492 +-A INPUT -i eth0 -j limit-3493 +-A INPUT -i eth0 -j limit-3494 +-A INPUT -i eth0 -j limit-3495 +-A INPUT -i eth0 -j limit-3496 +-A INPUT -i eth0 -j limit-3497 +-A INPUT -i eth0 -j limit-3498 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1951 +-A INPUT -i eth0 -j limit-3500 +-A INPUT -i eth0 -j limit-3501 +-A INPUT -i eth0 -j limit-3502 +-A INPUT -i eth0 -j limit-3503 +-A INPUT -i eth0 -j limit-3504 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1957 +-A INPUT -i eth0 -j limit-3506 +-A INPUT -i eth0 -j limit-3507 +-A INPUT -i eth0 -j limit-3508 +-A INPUT -i eth0 -j limit-3509 +-A INPUT -i eth0 -j limit-3510 +-A INPUT -i eth0 -j limit-3511 +-A INPUT -i eth0 -j limit-3512 +-A INPUT -i eth0 -j limit-3513 +-A INPUT -i eth0 -j limit-3514 +-A INPUT -i eth0 -j limit-3515 +-A INPUT -i eth0 -j limit-3516 +-A INPUT -i eth0 -j limit-3517 +-A INPUT -i eth0 -j limit-3518 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1971 +-A INPUT -i eth0 -j limit-3520 +-A INPUT -i eth0 -j limit-3521 +-A INPUT -i eth0 -j limit-3522 +-A INPUT -i eth0 -j limit-3523 +-A INPUT -i eth0 -j limit-3524 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1977 +-A INPUT -i eth0 -j limit-3526 +-A INPUT -i eth0 -j limit-3527 +-A INPUT -i eth0 -j limit-3528 +-A INPUT -i eth0 -j limit-3529 +-A INPUT -i eth0 -j limit-3530 +-A INPUT -i eth0 -j limit-3531 +-A INPUT -i eth0 -j limit-3532 +-A INPUT -i eth0 -j limit-3533 +-A INPUT -i eth0 -j limit-3534 +-A INPUT -i eth0 -j limit-3535 +-A INPUT -i eth0 -j limit-3536 +-A INPUT -i eth0 -j limit-3537 +-A INPUT -i eth0 -j limit-3538 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1991 +-A INPUT -i eth0 -j limit-3540 +-A INPUT -i eth0 -j limit-3541 +-A INPUT -i eth0 -j limit-3542 +-A INPUT -i eth0 -j limit-3543 +-A INPUT -i eth0 -j limit-3544 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1997 +-A INPUT -i eth0 -j limit-3546 +-A INPUT -i eth0 -j limit-3547 +-A INPUT -i eth0 -j limit-3548 +-A INPUT -i eth0 -j limit-3549 +-A INPUT -i eth0 -j limit-3550 +-A INPUT -i eth0 -j limit-3551 +-A INPUT -i eth0 -j limit-3552 +-A INPUT -i eth0 -j limit-3553 +-A INPUT -i eth0 -j limit-3554 +-A INPUT -i eth0 -j limit-3555 +-A INPUT -i eth0 -j limit-3556 +-A INPUT -i eth0 -j limit-3557 +-A INPUT -i eth0 -j limit-3558 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2011 +-A INPUT -i eth0 -j limit-3560 +-A INPUT -i eth0 -j limit-3561 +-A INPUT -i eth0 -j limit-3562 +-A INPUT -i eth0 -j limit-3563 +-A INPUT -i eth0 -j limit-3564 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2017 +-A INPUT -i eth0 -j limit-3566 +-A INPUT -i eth0 -j limit-3567 +-A INPUT -i eth0 -j limit-3568 +-A INPUT -i eth0 -j limit-3569 +-A INPUT -i eth0 -j limit-3570 +-A INPUT -i eth0 -j limit-3571 +-A INPUT -i eth0 -j limit-3572 +-A INPUT -i eth0 -j limit-3573 +-A INPUT -i eth0 -j limit-3574 +-A INPUT -i eth0 -j limit-3575 +-A INPUT -i eth0 -j limit-3576 +-A INPUT -i eth0 -j limit-3577 +-A INPUT -i eth0 -j limit-3578 +-A INPUT -i eth0 -j limit-3579 +-A INPUT -i eth0 -j limit-3580 +-A INPUT -i eth0 -j limit-3581 +-A INPUT -i eth0 -j limit-3582 +-A INPUT -i eth0 -j limit-3583 +-A INPUT -i eth0 -j limit-3584 +-A INPUT -i eth0 -j limit-3585 +-A INPUT -i eth0 -j limit-3586 +-A INPUT -i eth0 -j limit-3587 +-A INPUT -i eth0 -j limit-3588 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2041 +-A INPUT -i eth0 -j limit-3590 +-A INPUT -i eth0 -j limit-3591 +-A INPUT -i eth0 -j limit-3592 +-A INPUT -i eth0 -j limit-3593 +-A INPUT -i eth0 -j limit-3594 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2047 +-A INPUT -i eth0 -j limit-3596 +-A INPUT -i eth0 -j limit-3597 +-A INPUT -i eth0 -j limit-3598 +-A INPUT -i eth0 -j limit-3599 +-A INPUT -i eth0 -j limit-3600 +-A INPUT -i eth0 -j limit-3601 +-A INPUT -i eth0 -j limit-3602 +-A INPUT -i eth0 -j limit-3603 +-A INPUT -i eth0 -j limit-3604 +-A INPUT -i eth0 -j limit-3605 +-A INPUT -i eth0 -j limit-3606 +-A INPUT -i eth0 -j limit-3607 +-A INPUT -i eth0 -j limit-3608 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2061 +-A INPUT -i eth0 -j limit-3610 +-A INPUT -i eth0 -j limit-3611 +-A INPUT -i eth0 -j limit-3612 +-A INPUT -i eth0 -j limit-3613 +-A INPUT -i eth0 -j limit-3614 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2067 +-A INPUT -i eth0 -j limit-3616 +-A INPUT -i eth0 -j limit-3617 +-A INPUT -i eth0 -j limit-3618 +-A INPUT -i eth0 -j limit-3619 +-A INPUT -i eth0 -j limit-3620 +-A INPUT -i eth0 -j limit-3621 +-A INPUT -i eth0 -j limit-3622 +-A INPUT -i eth0 -j limit-3623 +-A INPUT -i eth0 -j limit-3624 +-A INPUT -i eth0 -j limit-3625 +-A INPUT -i eth0 -j limit-3626 +-A INPUT -i eth0 -j limit-3627 +-A INPUT -i eth0 -j limit-3628 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2081 +-A INPUT -i eth0 -j limit-3630 +-A INPUT -i eth0 -j limit-3631 +-A INPUT -i eth0 -j limit-3632 +-A INPUT -i eth0 -j limit-3633 +-A INPUT -i eth0 -j limit-3634 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2087 +-A INPUT -i eth0 -j limit-3636 +-A INPUT -i eth0 -j limit-3637 +-A INPUT -i eth0 -j limit-3638 +-A INPUT -i eth0 -j limit-3639 +-A INPUT -i eth0 -j limit-3640 +-A INPUT -i eth0 -j limit-3641 +-A INPUT -i eth0 -j limit-3642 +-A INPUT -i eth0 -j limit-3643 +-A INPUT -i eth0 -j limit-3644 +-A INPUT -i eth0 -j limit-3645 +-A INPUT -i eth0 -j limit-3646 +-A INPUT -i eth0 -j limit-3647 +-A INPUT -i eth0 -j limit-3648 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2101 +-A INPUT -i eth0 -j limit-3650 +-A INPUT -i eth0 -j limit-3651 +-A INPUT -i eth0 -j limit-3652 +-A INPUT -i eth0 -j limit-3653 +-A INPUT -i eth0 -j limit-3654 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2107 +-A INPUT -i eth0 -j limit-3656 +-A INPUT -i eth0 -j limit-3657 +-A INPUT -i eth0 -j limit-3658 +-A INPUT -i eth0 -j limit-3659 +-A INPUT -i eth0 -j limit-3660 +-A INPUT -i eth0 -j limit-3661 +-A INPUT -i eth0 -j limit-3662 +-A INPUT -i eth0 -j limit-3663 +-A INPUT -i eth0 -j limit-3664 +-A INPUT -i eth0 -j limit-3665 +-A INPUT -i eth0 -j limit-3666 +-A INPUT -i eth0 -j limit-3667 +-A INPUT -i eth0 -j limit-3668 +-A INPUT -i eth0 -j limit-3669 +-A INPUT -i eth0 -j limit-3670 +-A INPUT -i eth0 -j limit-3671 +-A INPUT -i eth0 -j limit-3672 +-A INPUT -i eth0 -j limit-3673 +-A INPUT -i eth0 -j limit-3674 +-A INPUT -i eth0 -j limit-3675 +-A INPUT -i eth0 -j limit-3676 +-A INPUT -i eth0 -j limit-3677 +-A INPUT -i eth0 -j limit-3678 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3680 +-A INPUT -i eth0 -j limit-3681 +-A INPUT -i eth0 -j limit-3682 +-A INPUT -i eth0 -j limit-3683 +-A INPUT -i eth0 -j limit-3684 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3686 +-A INPUT -i eth0 -j limit-3687 +-A INPUT -i eth0 -j limit-3688 +-A INPUT -i eth0 -j limit-3689 +-A INPUT -i eth0 -j limit-3690 +-A INPUT -i eth0 -j limit-3691 +-A INPUT -i eth0 -j limit-3692 +-A INPUT -i eth0 -j limit-3693 +-A INPUT -i eth0 -j limit-3694 +-A INPUT -i eth0 -j limit-3695 +-A INPUT -i eth0 -j limit-3696 +-A INPUT -i eth0 -j limit-3697 +-A INPUT -i eth0 -j limit-3698 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3700 +-A INPUT -i eth0 -j limit-3701 +-A INPUT -i eth0 -j limit-3702 +-A INPUT -i eth0 -j limit-3703 +-A INPUT -i eth0 -j limit-3704 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3706 +-A INPUT -i eth0 -j limit-3707 +-A INPUT -i eth0 -j limit-3708 +-A INPUT -i eth0 -j limit-3709 +-A INPUT -i eth0 -j limit-3710 +-A INPUT -i eth0 -j limit-3711 +-A INPUT -i eth0 -j limit-3712 +-A INPUT -i eth0 -j limit-3713 +-A INPUT -i eth0 -j limit-3714 +-A INPUT -i eth0 -j limit-3715 +-A INPUT -i eth0 -j limit-3716 +-A INPUT -i eth0 -j limit-3717 +-A INPUT -i eth0 -j limit-3718 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3720 +-A INPUT -i eth0 -j limit-3721 +-A INPUT -i eth0 -j limit-3722 +-A INPUT -i eth0 -j limit-3723 +-A INPUT -i eth0 -j limit-3724 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3726 +-A INPUT -i eth0 -j limit-3727 +-A INPUT -i eth0 -j limit-3728 +-A INPUT -i eth0 -j limit-3729 +-A INPUT -i eth0 -j limit-3730 +-A INPUT -i eth0 -j limit-3731 +-A INPUT -i eth0 -j limit-3732 +-A INPUT -i eth0 -j limit-3733 +-A INPUT -i eth0 -j limit-3734 +-A INPUT -i eth0 -j limit-3735 +-A INPUT -i eth0 -j limit-3736 +-A INPUT -i eth0 -j limit-3737 +-A INPUT -i eth0 -j limit-3738 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3740 +-A INPUT -i eth0 -j limit-3741 +-A INPUT -i eth0 -j limit-3742 +-A INPUT -i eth0 -j limit-3743 +-A INPUT -i eth0 -j limit-3744 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A INPUT -i eth0 -j limit-3746 +-A INPUT -i eth0 -j limit-3747 +-A INPUT -i eth0 -j limit-3748 +-A INPUT -i eth0 -j limit-3749 +-A INPUT -i eth0 -j limit-3750 +-A INPUT -i eth0 -j limit-3751 +-A INPUT -i eth0 -j limit-3752 +-A INPUT -i eth0 -j limit-3753 +-A INPUT -i eth0 -j limit-3754 +-A INPUT -i eth0 -j limit-3755 +-A INPUT -i eth0 -j limit-3756 +-A INPUT -i eth0 -j limit-3757 +-A INPUT -i eth0 -j limit-3758 +-A INPUT -i eth0 -j limit-3759 +-A INPUT -i eth0 -j limit-3760 +-A INPUT -i eth0 -j limit-3761 +-A INPUT -i eth0 -j limit-3762 +-A INPUT -i eth0 -j limit-3763 +-A INPUT -i eth0 -j limit-3764 +-A INPUT -i eth0 -j limit-3765 +-A INPUT -i eth0 -j limit-3766 +-A INPUT -i eth0 -j limit-3767 +-A INPUT -i eth0 -j limit-3768 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2131 +-A INPUT -i eth0 -j limit-3770 +-A INPUT -i eth0 -j limit-3771 +-A INPUT -i eth0 -j limit-3772 +-A INPUT -i eth0 -j limit-3773 +-A INPUT -i eth0 -j limit-3774 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2137 +-A INPUT -i eth0 -j limit-3776 +-A INPUT -i eth0 -j limit-3777 +-A INPUT -i eth0 -j limit-3778 +-A INPUT -i eth0 -j limit-3779 +-A INPUT -i eth0 -j limit-3780 +-A INPUT -i eth0 -j limit-3781 +-A INPUT -i eth0 -j limit-3782 +-A INPUT -i eth0 -j limit-3783 +-A INPUT -i eth0 -j limit-3784 +-A INPUT -i eth0 -j limit-3785 +-A INPUT -i eth0 -j limit-3786 +-A INPUT -i eth0 -j limit-3787 +-A INPUT -i eth0 -j limit-3788 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2151 +-A INPUT -i eth0 -j limit-3790 +-A INPUT -i eth0 -j limit-3791 +-A INPUT -i eth0 -j limit-3792 +-A INPUT -i eth0 -j limit-3793 +-A INPUT -i eth0 -j limit-3794 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2157 +-A INPUT -i eth0 -j limit-3796 +-A INPUT -i eth0 -j limit-3797 +-A INPUT -i eth0 -j limit-3798 +-A INPUT -i eth0 -j limit-3799 +-A INPUT -i eth0 -j limit-3800 +-A INPUT -i eth0 -j limit-3801 +-A INPUT -i eth0 -j limit-3802 +-A INPUT -i eth0 -j limit-3803 +-A INPUT -i eth0 -j limit-3804 +-A INPUT -i eth0 -j limit-3805 +-A INPUT -i eth0 -j limit-3806 +-A INPUT -i eth0 -j limit-3807 +-A INPUT -i eth0 -j limit-3808 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2171 +-A INPUT -i eth0 -j limit-3810 +-A INPUT -i eth0 -j limit-3811 +-A INPUT -i eth0 -j limit-3812 +-A INPUT -i eth0 -j limit-3813 +-A INPUT -i eth0 -j limit-3814 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2177 +-A INPUT -i eth0 -j limit-3816 +-A INPUT -i eth0 -j limit-3817 +-A INPUT -i eth0 -j limit-3818 +-A INPUT -i eth0 -j limit-3819 +-A INPUT -i eth0 -j limit-3820 +-A INPUT -i eth0 -j limit-3821 +-A INPUT -i eth0 -j limit-3822 +-A INPUT -i eth0 -j limit-3823 +-A INPUT -i eth0 -j limit-3824 +-A INPUT -i eth0 -j limit-3825 +-A INPUT -i eth0 -j limit-3826 +-A INPUT -i eth0 -j limit-3827 +-A INPUT -i eth0 -j limit-3828 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2191 +-A INPUT -i eth0 -j limit-3830 +-A INPUT -i eth0 -j limit-3831 +-A INPUT -i eth0 -j limit-3832 +-A INPUT -i eth0 -j limit-3833 +-A INPUT -i eth0 -j limit-3834 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2197 +-A INPUT -i eth0 -j limit-3836 +-A INPUT -i eth0 -j limit-3837 +-A INPUT -i eth0 -j limit-3838 +-A INPUT -i eth0 -j limit-3839 +-A INPUT -i eth0 -j limit-3840 +-A INPUT -i eth0 -j limit-3841 +-A INPUT -i eth0 -j limit-3842 +-A INPUT -i eth0 -j limit-3843 +-A INPUT -i eth0 -j limit-3844 +-A INPUT -i eth0 -j limit-3845 +-A INPUT -i eth0 -j limit-3846 +-A INPUT -i eth0 -j limit-3847 +-A INPUT -i eth0 -j limit-3848 +-A INPUT -i eth0 -j limit-3849 +-A INPUT -i eth0 -j limit-3850 +-A INPUT -i eth0 -j limit-3851 +-A INPUT -i eth0 -j limit-3852 +-A INPUT -i eth0 -j limit-3853 +-A INPUT -i eth0 -j limit-3854 +-A INPUT -i eth0 -j limit-3855 +-A INPUT -i eth0 -j limit-3856 +-A INPUT -i eth0 -j limit-3857 +-A INPUT -i eth0 -j limit-3858 +-A INPUT -i eth0 -j limit-3859 +-A INPUT -i eth0 -j limit-3860 +-A INPUT -i eth0 -j limit-3861 +-A INPUT -i eth0 -j limit-3862 +-A INPUT -i eth0 -j limit-3863 +-A INPUT -i eth0 -j limit-3864 +-A INPUT -i eth0 -j limit-3865 +-A INPUT -i eth0 -j limit-3866 +-A INPUT -i eth0 -j limit-3867 +-A INPUT -i eth0 -j limit-3868 +-A INPUT -i eth0 -j limit-3869 +-A INPUT -i eth0 -j limit-3870 +-A INPUT -i eth0 -j limit-3871 +-A INPUT -i eth0 -j limit-3872 +-A INPUT -i eth0 -j limit-3873 +-A INPUT -i eth0 -j limit-3874 +-A INPUT -i eth0 -j limit-3875 +-A INPUT -i eth0 -j limit-3876 +-A INPUT -i eth0 -j limit-3877 +-A INPUT -i eth0 -j limit-3878 +-A INPUT -i eth0 -j limit-3879 +-A INPUT -i eth0 -j limit-3880 +-A INPUT -i eth0 -j limit-3881 +-A INPUT -i eth0 -j limit-3882 +-A INPUT -i eth0 -j limit-3883 +-A INPUT -i eth0 -j limit-3884 +-A INPUT -i eth0 -j limit-3885 +-A INPUT -i eth0 -j limit-3886 +-A INPUT -i eth0 -j limit-3887 +-A INPUT -i eth0 -j limit-3888 +-A INPUT -i eth0 -j limit-3889 +-A INPUT -i eth0 -j limit-3890 +-A INPUT -i eth0 -j limit-3891 +-A INPUT -i eth0 -j limit-3892 +-A INPUT -i eth0 -j limit-3893 +-A INPUT -i eth0 -j limit-3894 +-A INPUT -i eth0 -j limit-3895 +-A INPUT -i eth0 -j limit-3896 +-A INPUT -i eth0 -j limit-3897 +-A INPUT -i eth0 -j limit-3898 +-A INPUT -i eth0 -j limit-3899 +-A INPUT -i eth0 -j limit-3900 +-A INPUT -i eth0 -j limit-3901 +-A INPUT -i eth0 -j limit-3902 +-A INPUT -i eth0 -j limit-3903 +-A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:C --rsource --mask fe00:: --set +-A INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set +-A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -j ACCEPT +-A INPUT -j logdrop-2200 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-99 +-A INPUT -j logdrop-2201 +-A INPUT -j logpass-0 +-A INPUT -j logaccept-100 +-A INPUT -j logdrop-2202 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-101 +-A INPUT -j logdrop-2203 +-A INPUT -j logpass-2 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-102 +-A INPUT -j logdrop-2204 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -j limit-2927 +-A OUTPUT -j limit-2926 +-A OUTPUT -j limit-2925 +-A OUTPUT -j limit-2924 +-A OUTPUT -j limit-2923 +-A OUTPUT -j limit-2922 +-A OUTPUT -j limit-2921 +-A OUTPUT -j limit-2920 +-A OUTPUT -j limit-2919 +-A OUTPUT -j limit-2918 +-A OUTPUT -j limit-2917 +-A OUTPUT -j limit-2916 +-A OUTPUT -j limit-2915 +-A OUTPUT -j limit-2914 +-A OUTPUT -j limit-2913 +-A OUTPUT -j limit-2912 +-A OUTPUT -j limit-2911 +-A OUTPUT -j limit-2910 +-A OUTPUT -j limit-2909 +-A OUTPUT -j limit-2908 +-A OUTPUT -j limit-2907 +-A OUTPUT -j limit-2906 +-A OUTPUT -j limit-2905 +-A OUTPUT -j limit-2904 +-A OUTPUT -j limit-2903 +-A OUTPUT -j limit-2902 +-A OUTPUT -j limit-2901 +-A OUTPUT -j limit-2900 +-A OUTPUT -j limit-2899 +-A OUTPUT -j limit-2898 +-A OUTPUT -j limit-2897 +-A OUTPUT -j limit-2896 +-A OUTPUT -j limit-2895 +-A OUTPUT -j limit-2894 +-A OUTPUT -j limit-2893 +-A OUTPUT -j limit-2892 +-A OUTPUT -j limit-2891 +-A OUTPUT -j limit-2890 +-A OUTPUT -j limit-2889 +-A OUTPUT -j limit-2888 +-A OUTPUT -j limit-2887 +-A OUTPUT -j limit-2886 +-A OUTPUT -j limit-2885 +-A OUTPUT -j limit-2884 +-A OUTPUT -j limit-2883 +-A OUTPUT -j limit-2882 +-A OUTPUT -j limit-2881 +-A OUTPUT -j limit-2880 +-A OUTPUT -j limit-2879 +-A OUTPUT -j limit-2878 +-A OUTPUT -j limit-2877 +-A OUTPUT -j limit-2876 +-A OUTPUT -j limit-2875 +-A OUTPUT -j limit-2874 +-A OUTPUT -j limit-2873 +-A OUTPUT -j limit-2872 +-A OUTPUT -j limit-2871 +-A OUTPUT -j limit-2870 +-A OUTPUT -j limit-2869 +-A OUTPUT -j limit-2868 +-A OUTPUT -j limit-2867 +-A OUTPUT -j limit-2866 +-A OUTPUT -j limit-2865 +-A OUTPUT -j limit-2864 +-A OUTPUT -j limit-2863 +-A OUTPUT -j limit-2862 +-A OUTPUT -j limit-2861 +-A OUTPUT -j limit-2860 +-A OUTPUT -j limit-2859 +-A OUTPUT -j limit-2858 +-A OUTPUT -j limit-2857 +-A OUTPUT -j limit-2856 +-A OUTPUT -j limit-2855 +-A OUTPUT -j limit-2854 +-A OUTPUT -j limit-2853 +-A OUTPUT -j limit-2852 +-A OUTPUT -j limit-2851 +-A OUTPUT -j limit-2850 +-A OUTPUT -j limit-2849 +-A OUTPUT -j limit-2848 +-A OUTPUT -j limit-2847 +-A OUTPUT -j limit-2846 +-A OUTPUT -j limit-2845 +-A OUTPUT -j limit-2844 +-A OUTPUT -j limit-2843 +-A OUTPUT -j limit-2842 +-A OUTPUT -j limit-2841 +-A OUTPUT -j limit-2840 +-A OUTPUT -j limit-2839 +-A OUTPUT -j limit-2838 +-A OUTPUT -j limit-2837 +-A OUTPUT -j limit-2836 +-A OUTPUT -j limit-2835 +-A OUTPUT -j limit-2834 +-A OUTPUT -j limit-2833 +-A OUTPUT -j limit-2832 +-A OUTPUT -j limit-2831 +-A OUTPUT -j limit-2830 +-A OUTPUT -j limit-2829 +-A OUTPUT -j limit-2828 +-A OUTPUT -j limit-2827 +-A OUTPUT -j limit-2826 +-A OUTPUT -j limit-2825 +-A OUTPUT -j limit-2824 +-A OUTPUT -j limit-2823 +-A OUTPUT -j limit-2822 +-A OUTPUT -j limit-2821 +-A OUTPUT -j limit-2820 +-A OUTPUT -j limit-2819 +-A OUTPUT -j limit-2818 +-A OUTPUT -j limit-2817 +-A OUTPUT -j limit-2816 +-A OUTPUT -j limit-2815 +-A OUTPUT -j limit-2814 +-A OUTPUT -j limit-2813 +-A OUTPUT -j limit-2812 +-A OUTPUT -j limit-2811 +-A OUTPUT -j limit-2810 +-A OUTPUT -j limit-2809 +-A OUTPUT -j limit-2808 +-A OUTPUT -j limit-2807 +-A OUTPUT -j limit-2806 +-A OUTPUT -j limit-2805 +-A OUTPUT -j limit-2804 +-A OUTPUT -j limit-2803 +-A OUTPUT -j limit-2802 +-A OUTPUT -j limit-2801 +-A OUTPUT -j limit-2800 +-A OUTPUT -j limit-2799 +-A OUTPUT -j limit-2798 +-A OUTPUT -j limit-2797 +-A OUTPUT -j limit-2796 +-A OUTPUT -j limit-2795 +-A OUTPUT -j limit-2794 +-A OUTPUT -j limit-2793 +-A OUTPUT -j limit-2792 +-A OUTPUT -j limit-2791 +-A OUTPUT -j limit-2790 +-A OUTPUT -j limit-2789 +-A OUTPUT -j limit-2788 +-A OUTPUT -j limit-2787 +-A OUTPUT -j limit-2786 +-A OUTPUT -j limit-2785 +-A OUTPUT -j limit-2784 +-A OUTPUT -j limit-2783 +-A OUTPUT -j limit-2782 +-A OUTPUT -j limit-2781 +-A OUTPUT -j limit-2780 +-A OUTPUT -j limit-2779 +-A OUTPUT -j limit-2778 +-A OUTPUT -j limit-2777 +-A OUTPUT -j limit-2776 +-A OUTPUT -j limit-2775 +-A OUTPUT -j limit-2774 +-A OUTPUT -j limit-2773 +-A OUTPUT -j limit-2772 +-A OUTPUT -j limit-2771 +-A OUTPUT -j limit-2770 +-A OUTPUT -j limit-2769 +-A OUTPUT -j limit-2768 +-A OUTPUT -j limit-2767 +-A OUTPUT -j limit-2766 +-A OUTPUT -j limit-2765 +-A OUTPUT -j limit-2764 +-A OUTPUT -j limit-2763 +-A OUTPUT -j limit-2762 +-A OUTPUT -j limit-2761 +-A OUTPUT -j limit-2760 +-A OUTPUT -j limit-2759 +-A OUTPUT -j limit-2758 +-A OUTPUT -j limit-2757 +-A OUTPUT -j limit-2756 +-A OUTPUT -j limit-2755 +-A OUTPUT -j limit-2754 +-A OUTPUT -j limit-2753 +-A OUTPUT -j limit-2752 +-A OUTPUT -j limit-2751 +-A OUTPUT -j limit-2750 +-A OUTPUT -j limit-2749 +-A OUTPUT -j limit-2748 +-A OUTPUT -j limit-2747 +-A OUTPUT -j limit-2746 +-A OUTPUT -j limit-2745 +-A OUTPUT -j limit-2744 +-A OUTPUT -j limit-2743 +-A OUTPUT -j limit-2742 +-A OUTPUT -j limit-2741 +-A OUTPUT -j limit-2740 +-A OUTPUT -j limit-2739 +-A OUTPUT -j limit-2738 +-A OUTPUT -j limit-2737 +-A OUTPUT -j limit-2736 +-A OUTPUT -j limit-2735 +-A OUTPUT -j limit-2734 +-A OUTPUT -j limit-2733 +-A OUTPUT -j limit-2732 +-A OUTPUT -j limit-2731 +-A OUTPUT -j limit-2730 +-A OUTPUT -j limit-2729 +-A OUTPUT -j limit-2728 +-A OUTPUT -j limit-2727 +-A OUTPUT -j limit-2726 +-A OUTPUT -j limit-2725 +-A OUTPUT -j limit-2724 +-A OUTPUT -j limit-2723 +-A OUTPUT -j limit-2722 +-A OUTPUT -j limit-2721 +-A OUTPUT -j limit-2720 +-A OUTPUT -j limit-2719 +-A OUTPUT -j limit-2718 +-A OUTPUT -j limit-2717 +-A OUTPUT -j limit-2716 +-A OUTPUT -j limit-2715 +-A OUTPUT -j limit-2714 +-A OUTPUT -j limit-2713 +-A OUTPUT -j limit-2712 +-A OUTPUT -j limit-2711 +-A OUTPUT -j limit-2710 +-A OUTPUT -j limit-2709 +-A OUTPUT -j limit-2708 +-A OUTPUT -j limit-2707 +-A OUTPUT -j limit-2706 +-A OUTPUT -j limit-2705 +-A OUTPUT -j limit-2704 +-A OUTPUT -j limit-2703 +-A OUTPUT -j limit-2702 +-A OUTPUT -j limit-2701 +-A OUTPUT -j limit-2700 +-A OUTPUT -j limit-2699 +-A OUTPUT -j limit-2698 +-A OUTPUT -j limit-2697 +-A OUTPUT -j limit-2696 +-A OUTPUT -j limit-2695 +-A OUTPUT -j limit-2694 +-A OUTPUT -j limit-2693 +-A OUTPUT -j limit-2692 +-A OUTPUT -j limit-2691 +-A OUTPUT -j limit-2690 +-A OUTPUT -j limit-2689 +-A OUTPUT -j limit-2688 +-A OUTPUT -j limit-2687 +-A OUTPUT -j limit-2686 +-A OUTPUT -j limit-2685 +-A OUTPUT -j limit-2684 +-A OUTPUT -j limit-2683 +-A OUTPUT -j limit-2682 +-A OUTPUT -j limit-2681 +-A OUTPUT -j limit-2680 +-A OUTPUT -j limit-2679 +-A OUTPUT -j limit-2678 +-A OUTPUT -j limit-2677 +-A OUTPUT -j limit-2676 +-A OUTPUT -j limit-2675 +-A OUTPUT -j limit-2674 +-A OUTPUT -j limit-2673 +-A OUTPUT -j limit-2672 +-A OUTPUT -j limit-2671 +-A OUTPUT -j limit-2670 +-A OUTPUT -j limit-2669 +-A OUTPUT -j limit-2668 +-A OUTPUT -j limit-2667 +-A OUTPUT -j limit-2666 +-A OUTPUT -j limit-2665 +-A OUTPUT -j limit-2664 +-A OUTPUT -j limit-2663 +-A OUTPUT -j limit-2662 +-A OUTPUT -j limit-2661 +-A OUTPUT -j limit-2660 +-A OUTPUT -j limit-2659 +-A OUTPUT -j limit-2658 +-A OUTPUT -j limit-2657 +-A OUTPUT -j limit-2656 +-A OUTPUT -j limit-2655 +-A OUTPUT -j limit-2654 +-A OUTPUT -j limit-2653 +-A OUTPUT -j limit-2652 +-A OUTPUT -j limit-2651 +-A OUTPUT -j limit-2650 +-A OUTPUT -j limit-2649 +-A OUTPUT -j limit-2648 +-A OUTPUT -j limit-2647 +-A OUTPUT -j limit-2646 +-A OUTPUT -j limit-2645 +-A OUTPUT -j limit-2644 +-A OUTPUT -j limit-2643 +-A OUTPUT -j limit-2642 +-A OUTPUT -j limit-2641 +-A OUTPUT -j limit-2640 +-A OUTPUT -j limit-2639 +-A OUTPUT -j limit-2638 +-A OUTPUT -j limit-2637 +-A OUTPUT -j limit-2636 +-A OUTPUT -j limit-2635 +-A OUTPUT -j limit-2634 +-A OUTPUT -j limit-2633 +-A OUTPUT -j limit-2632 +-A OUTPUT -j limit-2631 +-A OUTPUT -j limit-2630 +-A OUTPUT -j limit-2629 +-A OUTPUT -j limit-2628 +-A OUTPUT -j limit-2627 +-A OUTPUT -j limit-2626 +-A OUTPUT -j limit-2625 +-A OUTPUT -j limit-2624 +-A OUTPUT -j limit-2623 +-A OUTPUT -j limit-2622 +-A OUTPUT -j limit-2621 +-A OUTPUT -j limit-2620 +-A OUTPUT -j limit-2619 +-A OUTPUT -j limit-2618 +-A OUTPUT -j limit-2617 +-A OUTPUT -j limit-2616 +-A OUTPUT -j limit-2615 +-A OUTPUT -j limit-2614 +-A OUTPUT -j limit-2613 +-A OUTPUT -j limit-2612 +-A OUTPUT -j limit-2611 +-A OUTPUT -j limit-2610 +-A OUTPUT -j limit-2609 +-A OUTPUT -j limit-2608 +-A OUTPUT -j limit-2607 +-A OUTPUT -j limit-2606 +-A OUTPUT -j limit-2605 +-A OUTPUT -j limit-2604 +-A OUTPUT -j limit-2603 +-A OUTPUT -j limit-2602 +-A OUTPUT -j limit-2601 +-A OUTPUT -j limit-2600 +-A OUTPUT -j limit-2599 +-A OUTPUT -j limit-2598 +-A OUTPUT -j limit-2597 +-A OUTPUT -j limit-2596 +-A OUTPUT -j limit-2595 +-A OUTPUT -j limit-2594 +-A OUTPUT -j limit-2593 +-A OUTPUT -j limit-2592 +-A OUTPUT -j limit-2591 +-A OUTPUT -j limit-2590 +-A OUTPUT -j limit-2589 +-A OUTPUT -j limit-2588 +-A OUTPUT -j limit-2587 +-A OUTPUT -j limit-2586 +-A OUTPUT -j limit-2585 +-A OUTPUT -j limit-2584 +-A OUTPUT -j limit-2583 +-A OUTPUT -j limit-2582 +-A OUTPUT -j limit-2581 +-A OUTPUT -j limit-2580 +-A OUTPUT -j limit-2579 +-A OUTPUT -j limit-2578 +-A OUTPUT -j limit-2577 +-A OUTPUT -j limit-2576 +-A OUTPUT -j limit-2575 +-A OUTPUT -j limit-2574 +-A OUTPUT -j limit-2573 +-A OUTPUT -j limit-2572 +-A OUTPUT -j limit-2571 +-A OUTPUT -j limit-2570 +-A OUTPUT -j limit-2569 +-A OUTPUT -j limit-2568 +-A OUTPUT -j limit-2567 +-A OUTPUT -j limit-2566 +-A OUTPUT -j limit-2565 +-A OUTPUT -j limit-2564 +-A OUTPUT -j limit-2563 +-A OUTPUT -j limit-2562 +-A OUTPUT -j limit-2561 +-A OUTPUT -j limit-2560 +-A OUTPUT -j limit-2559 +-A OUTPUT -j limit-2558 +-A OUTPUT -j limit-2557 +-A OUTPUT -j limit-2556 +-A OUTPUT -j limit-2555 +-A OUTPUT -j limit-2554 +-A OUTPUT -j limit-2553 +-A OUTPUT -j limit-2552 +-A OUTPUT -j limit-2551 +-A OUTPUT -j limit-2550 +-A OUTPUT -j limit-2549 +-A OUTPUT -j limit-2548 +-A OUTPUT -j limit-2547 +-A OUTPUT -j limit-2546 +-A OUTPUT -j limit-2545 +-A OUTPUT -j limit-2544 +-A OUTPUT -j limit-2543 +-A OUTPUT -j limit-2542 +-A OUTPUT -j limit-2541 +-A OUTPUT -j limit-2540 +-A OUTPUT -j limit-2539 +-A OUTPUT -j limit-2538 +-A OUTPUT -j limit-2537 +-A OUTPUT -j limit-2536 +-A OUTPUT -j limit-2535 +-A OUTPUT -j limit-2534 +-A OUTPUT -j limit-2533 +-A OUTPUT -j limit-2532 +-A OUTPUT -j limit-2531 +-A OUTPUT -j limit-2530 +-A OUTPUT -j limit-2529 +-A OUTPUT -j limit-2528 +-A OUTPUT -j limit-2527 +-A OUTPUT -j limit-2526 +-A OUTPUT -j limit-2525 +-A OUTPUT -j limit-2524 +-A OUTPUT -j limit-2523 +-A OUTPUT -j limit-2522 +-A OUTPUT -j limit-2521 +-A OUTPUT -j limit-2520 +-A OUTPUT -j limit-2519 +-A OUTPUT -j limit-2518 +-A OUTPUT -j limit-2517 +-A OUTPUT -j limit-2516 +-A OUTPUT -j limit-2515 +-A OUTPUT -j limit-2514 +-A OUTPUT -j limit-2513 +-A OUTPUT -j limit-2512 +-A OUTPUT -j limit-2511 +-A OUTPUT -j limit-2510 +-A OUTPUT -j limit-2509 +-A OUTPUT -j limit-2508 +-A OUTPUT -j limit-2507 +-A OUTPUT -j limit-2506 +-A OUTPUT -j limit-2505 +-A OUTPUT -j limit-2504 +-A OUTPUT -j limit-2503 +-A OUTPUT -j limit-2502 +-A OUTPUT -j limit-2501 +-A OUTPUT -j limit-2500 +-A OUTPUT -j limit-2499 +-A OUTPUT -j limit-2498 +-A OUTPUT -j limit-2497 +-A OUTPUT -j limit-2496 +-A OUTPUT -j limit-2495 +-A OUTPUT -j limit-2494 +-A OUTPUT -j limit-2493 +-A OUTPUT -j limit-2492 +-A OUTPUT -j limit-2491 +-A OUTPUT -j limit-2490 +-A OUTPUT -j limit-2489 +-A OUTPUT -j limit-2488 +-A OUTPUT -j limit-2487 +-A OUTPUT -j limit-2486 +-A OUTPUT -j limit-2485 +-A OUTPUT -j limit-2484 +-A OUTPUT -j limit-2483 +-A OUTPUT -j limit-2482 +-A OUTPUT -j limit-2481 +-A OUTPUT -j limit-2480 +-A OUTPUT -j limit-2479 +-A OUTPUT -j limit-2478 +-A OUTPUT -j limit-2477 +-A OUTPUT -j limit-2476 +-A OUTPUT -j limit-2475 +-A OUTPUT -j limit-2474 +-A OUTPUT -j limit-2473 +-A OUTPUT -j limit-2472 +-A OUTPUT -j limit-2471 +-A OUTPUT -j limit-2470 +-A OUTPUT -j limit-2469 +-A OUTPUT -j limit-2468 +-A OUTPUT -j limit-2467 +-A OUTPUT -j limit-2466 +-A OUTPUT -j limit-2465 +-A OUTPUT -j limit-2464 +-A OUTPUT -j limit-2463 +-A OUTPUT -j limit-2462 +-A OUTPUT -j limit-2461 +-A OUTPUT -j limit-2460 +-A OUTPUT -j limit-2459 +-A OUTPUT -j limit-2458 +-A OUTPUT -j limit-2457 +-A OUTPUT -j limit-2456 +-A OUTPUT -j limit-2455 +-A OUTPUT -j limit-2454 +-A OUTPUT -j limit-2453 +-A OUTPUT -j limit-2452 +-A OUTPUT -j limit-2451 +-A OUTPUT -j limit-2450 +-A OUTPUT -j limit-2449 +-A OUTPUT -j limit-2448 +-A OUTPUT -j limit-2447 +-A OUTPUT -j limit-2446 +-A OUTPUT -j limit-2445 +-A OUTPUT -j limit-2444 +-A OUTPUT -j limit-2443 +-A OUTPUT -j limit-2442 +-A OUTPUT -j limit-2441 +-A OUTPUT -j limit-2440 +-A OUTPUT -j limit-2439 +-A OUTPUT -j limit-2438 +-A OUTPUT -j limit-2437 +-A OUTPUT -j limit-2436 +-A OUTPUT -j limit-2435 +-A OUTPUT -j limit-2434 +-A OUTPUT -j limit-2433 +-A OUTPUT -j limit-2432 +-A OUTPUT -j limit-2431 +-A OUTPUT -j limit-2430 +-A OUTPUT -j limit-2429 +-A OUTPUT -j limit-2428 +-A OUTPUT -j limit-2427 +-A OUTPUT -j limit-2426 +-A OUTPUT -j limit-2425 +-A OUTPUT -j limit-2424 +-A OUTPUT -j limit-2423 +-A OUTPUT -j limit-2422 +-A OUTPUT -j limit-2421 +-A OUTPUT -j limit-2420 +-A OUTPUT -j limit-2419 +-A OUTPUT -j limit-2418 +-A OUTPUT -j limit-2417 +-A OUTPUT -j limit-2416 +-A OUTPUT -j limit-2415 +-A OUTPUT -j limit-2414 +-A OUTPUT -j limit-2413 +-A OUTPUT -j limit-2412 +-A OUTPUT -j limit-2411 +-A OUTPUT -j limit-2410 +-A OUTPUT -j limit-2409 +-A OUTPUT -j limit-2408 +-A OUTPUT -j limit-2407 +-A OUTPUT -j limit-2406 +-A OUTPUT -j limit-2405 +-A OUTPUT -j limit-2404 +-A OUTPUT -j limit-2403 +-A OUTPUT -j limit-2402 +-A OUTPUT -j limit-2401 +-A OUTPUT -j limit-2400 +-A OUTPUT -j limit-2399 +-A OUTPUT -j limit-2398 +-A OUTPUT -j limit-2397 +-A OUTPUT -j limit-2396 +-A OUTPUT -j limit-2395 +-A OUTPUT -j limit-2394 +-A OUTPUT -j limit-2393 +-A OUTPUT -j limit-2392 +-A OUTPUT -j limit-2391 +-A OUTPUT -j limit-2390 +-A OUTPUT -j limit-2389 +-A OUTPUT -j limit-2388 +-A OUTPUT -j limit-2387 +-A OUTPUT -j limit-2386 +-A OUTPUT -j limit-2385 +-A OUTPUT -j limit-2384 +-A OUTPUT -j limit-2383 +-A OUTPUT -j limit-2382 +-A OUTPUT -j limit-2381 +-A OUTPUT -j limit-2380 +-A OUTPUT -j limit-2379 +-A OUTPUT -j limit-2378 +-A OUTPUT -j limit-2377 +-A OUTPUT -j limit-2376 +-A OUTPUT -j limit-2375 +-A OUTPUT -j limit-2374 +-A OUTPUT -j limit-2373 +-A OUTPUT -j limit-2372 +-A OUTPUT -j limit-2371 +-A OUTPUT -j limit-2370 +-A OUTPUT -j limit-2369 +-A OUTPUT -j limit-2368 +-A OUTPUT -j limit-2367 +-A OUTPUT -j limit-2366 +-A OUTPUT -j limit-2365 +-A OUTPUT -j limit-2364 +-A OUTPUT -j limit-2363 +-A OUTPUT -j limit-2362 +-A OUTPUT -j limit-2361 +-A OUTPUT -j limit-2360 +-A OUTPUT -j limit-2359 +-A OUTPUT -j limit-2358 +-A OUTPUT -j limit-2357 +-A OUTPUT -j limit-2356 +-A OUTPUT -j limit-2355 +-A OUTPUT -j limit-2354 +-A OUTPUT -j limit-2353 +-A OUTPUT -j limit-2352 +-A OUTPUT -j limit-2351 +-A OUTPUT -j limit-2350 +-A OUTPUT -j limit-2349 +-A OUTPUT -j limit-2348 +-A OUTPUT -j limit-2347 +-A OUTPUT -j limit-2346 +-A OUTPUT -j limit-2345 +-A OUTPUT -j limit-2344 +-A OUTPUT -j limit-2343 +-A OUTPUT -j limit-2342 +-A OUTPUT -j limit-2341 +-A OUTPUT -j limit-2340 +-A OUTPUT -j limit-2339 +-A OUTPUT -j limit-2338 +-A OUTPUT -j limit-2337 +-A OUTPUT -j limit-2336 +-A OUTPUT -j limit-2335 +-A OUTPUT -j limit-2334 +-A OUTPUT -j limit-2333 +-A OUTPUT -j limit-2332 +-A OUTPUT -j limit-2331 +-A OUTPUT -j limit-2330 +-A OUTPUT -j limit-2329 +-A OUTPUT -j limit-2328 +-A OUTPUT -j limit-2327 +-A OUTPUT -j limit-2326 +-A OUTPUT -j limit-2325 +-A OUTPUT -j limit-2324 +-A OUTPUT -j limit-2323 +-A OUTPUT -j limit-2322 +-A OUTPUT -j limit-2321 +-A OUTPUT -j limit-2320 +-A OUTPUT -j limit-2319 +-A OUTPUT -j limit-2318 +-A OUTPUT -j limit-2317 +-A OUTPUT -j limit-2316 +-A OUTPUT -j limit-2315 +-A OUTPUT -j limit-2314 +-A OUTPUT -j limit-2313 +-A OUTPUT -j limit-2312 +-A OUTPUT -j limit-2311 +-A OUTPUT -j limit-2310 +-A OUTPUT -j limit-2309 +-A OUTPUT -j limit-2308 +-A OUTPUT -j limit-2307 +-A OUTPUT -j limit-2306 +-A OUTPUT -j limit-2305 +-A OUTPUT -j limit-2304 +-A OUTPUT -j limit-2303 +-A OUTPUT -j limit-2302 +-A OUTPUT -j limit-2301 +-A OUTPUT -j limit-2300 +-A OUTPUT -j limit-2299 +-A OUTPUT -j limit-2298 +-A OUTPUT -j limit-2297 +-A OUTPUT -j limit-2296 +-A OUTPUT -j limit-2295 +-A OUTPUT -j limit-2294 +-A OUTPUT -j limit-2293 +-A OUTPUT -j limit-2292 +-A OUTPUT -j limit-2291 +-A OUTPUT -j limit-2290 +-A OUTPUT -j limit-2289 +-A OUTPUT -j limit-2288 +-A OUTPUT -j limit-2287 +-A OUTPUT -j limit-2286 +-A OUTPUT -j limit-2285 +-A OUTPUT -j limit-2284 +-A OUTPUT -j limit-2283 +-A OUTPUT -j limit-2282 +-A OUTPUT -j limit-2281 +-A OUTPUT -j limit-2280 +-A OUTPUT -j limit-2279 +-A OUTPUT -j limit-2278 +-A OUTPUT -j limit-2277 +-A OUTPUT -j limit-2276 +-A OUTPUT -j limit-2275 +-A OUTPUT -j limit-2274 +-A OUTPUT -j limit-2273 +-A OUTPUT -j limit-2272 +-A OUTPUT -j limit-2271 +-A OUTPUT -j limit-2270 +-A OUTPUT -j limit-2269 +-A OUTPUT -j limit-2268 +-A OUTPUT -j limit-2267 +-A OUTPUT -j limit-2266 +-A OUTPUT -j limit-2265 +-A OUTPUT -j limit-2264 +-A OUTPUT -j limit-2263 +-A OUTPUT -j limit-2262 +-A OUTPUT -j limit-2261 +-A OUTPUT -j limit-2260 +-A OUTPUT -j limit-2259 +-A OUTPUT -j limit-2258 +-A OUTPUT -j limit-2257 +-A OUTPUT -j limit-2256 +-A OUTPUT -j limit-2255 +-A OUTPUT -j limit-2254 +-A OUTPUT -j limit-2253 +-A OUTPUT -j limit-2252 +-A OUTPUT -j limit-2251 +-A OUTPUT -j limit-2250 +-A OUTPUT -j limit-2249 +-A OUTPUT -j limit-2248 +-A OUTPUT -j limit-2247 +-A OUTPUT -j limit-2246 +-A OUTPUT -j limit-2245 +-A OUTPUT -j limit-2244 +-A OUTPUT -j limit-2243 +-A OUTPUT -j limit-2242 +-A OUTPUT -j limit-2241 +-A OUTPUT -j limit-2240 +-A OUTPUT -j limit-2239 +-A OUTPUT -j limit-2238 +-A OUTPUT -j limit-2237 +-A OUTPUT -j limit-2236 +-A OUTPUT -j limit-2235 +-A OUTPUT -j limit-2234 +-A OUTPUT -j limit-2233 +-A OUTPUT -j limit-2232 +-A OUTPUT -j limit-2231 +-A OUTPUT -j limit-2230 +-A OUTPUT -j limit-2229 +-A OUTPUT -j limit-2228 +-A OUTPUT -j limit-2227 +-A OUTPUT -j limit-2226 +-A OUTPUT -j limit-2225 +-A OUTPUT -j limit-2224 +-A OUTPUT -j limit-2223 +-A OUTPUT -j limit-2222 +-A OUTPUT -j limit-2221 +-A OUTPUT -j limit-2220 +-A OUTPUT -j limit-2219 +-A OUTPUT -j limit-2218 +-A OUTPUT -j limit-2217 +-A OUTPUT -j limit-2216 +-A OUTPUT -j limit-2215 +-A OUTPUT -j limit-2214 +-A OUTPUT -j limit-2213 +-A OUTPUT -j limit-2212 +-A OUTPUT -j limit-2211 +-A OUTPUT -j limit-2210 +-A OUTPUT -j limit-2209 +-A OUTPUT -j limit-2208 +-A OUTPUT -j limit-2207 +-A OUTPUT -j limit-2206 +-A OUTPUT -j limit-2205 +-A OUTPUT -j limit-2204 +-A OUTPUT -j limit-2203 +-A OUTPUT -j limit-2202 +-A OUTPUT -j limit-2201 +-A OUTPUT -j limit-2200 +-A OUTPUT -j limit-2199 +-A OUTPUT -j limit-2198 +-A OUTPUT -j limit-2197 +-A OUTPUT -j limit-2196 +-A OUTPUT -j limit-2195 +-A OUTPUT -j limit-2194 +-A OUTPUT -j limit-2193 +-A OUTPUT -j limit-2192 +-A OUTPUT -j limit-2191 +-A OUTPUT -j limit-2190 +-A OUTPUT -j limit-2189 +-A OUTPUT -j limit-2188 +-A OUTPUT -j limit-2187 +-A OUTPUT -j limit-2186 +-A OUTPUT -j limit-2185 +-A OUTPUT -j limit-2184 +-A OUTPUT -j limit-2183 +-A OUTPUT -j limit-2182 +-A OUTPUT -j limit-2181 +-A OUTPUT -j limit-2180 +-A OUTPUT -j limit-2179 +-A OUTPUT -j limit-2178 +-A OUTPUT -j limit-2177 +-A OUTPUT -j limit-2176 +-A OUTPUT -j limit-2175 +-A OUTPUT -j limit-2174 +-A OUTPUT -j limit-2173 +-A OUTPUT -j limit-2172 +-A OUTPUT -j limit-2171 +-A OUTPUT -j limit-2170 +-A OUTPUT -j limit-2169 +-A OUTPUT -j limit-2168 +-A OUTPUT -j limit-2167 +-A OUTPUT -j limit-2166 +-A OUTPUT -j limit-2165 +-A OUTPUT -j limit-2164 +-A OUTPUT -j limit-2163 +-A OUTPUT -j limit-2162 +-A OUTPUT -j limit-2161 +-A OUTPUT -j limit-2160 +-A OUTPUT -j limit-2159 +-A OUTPUT -j limit-2158 +-A OUTPUT -j limit-2157 +-A OUTPUT -j limit-2156 +-A OUTPUT -j limit-2155 +-A OUTPUT -j limit-2154 +-A OUTPUT -j limit-2153 +-A OUTPUT -j limit-2152 +-A OUTPUT -j limit-2151 +-A OUTPUT -j limit-2150 +-A OUTPUT -j limit-2149 +-A OUTPUT -j limit-2148 +-A OUTPUT -j limit-2147 +-A OUTPUT -j limit-2146 +-A OUTPUT -j limit-2145 +-A OUTPUT -j limit-2144 +-A OUTPUT -j limit-2143 +-A OUTPUT -j limit-2142 +-A OUTPUT -j limit-2141 +-A OUTPUT -j limit-2140 +-A OUTPUT -j limit-2139 +-A OUTPUT -j limit-2138 +-A OUTPUT -j limit-2137 +-A OUTPUT -j limit-2136 +-A OUTPUT -j limit-2135 +-A OUTPUT -j limit-2134 +-A OUTPUT -j limit-2133 +-A OUTPUT -j limit-2132 +-A OUTPUT -j limit-2131 +-A OUTPUT -j limit-2130 +-A OUTPUT -j limit-2129 +-A OUTPUT -j limit-2128 +-A OUTPUT -j limit-2127 +-A OUTPUT -j limit-2126 +-A OUTPUT -j limit-2125 +-A OUTPUT -j limit-2124 +-A OUTPUT -j limit-2123 +-A OUTPUT -j limit-2122 +-A OUTPUT -j limit-2121 +-A OUTPUT -j limit-2120 +-A OUTPUT -j limit-2119 +-A OUTPUT -j limit-2118 +-A OUTPUT -j limit-2117 +-A OUTPUT -j limit-2116 +-A OUTPUT -j limit-2115 +-A OUTPUT -j limit-2114 +-A OUTPUT -j limit-2113 +-A OUTPUT -j limit-2112 +-A OUTPUT -j limit-2111 +-A OUTPUT -j limit-2110 +-A OUTPUT -j limit-2109 +-A OUTPUT -j limit-2108 +-A OUTPUT -j limit-2107 +-A OUTPUT -j limit-2106 +-A OUTPUT -j limit-2105 +-A OUTPUT -j limit-2104 +-A OUTPUT -j limit-2103 +-A OUTPUT -j limit-2102 +-A OUTPUT -j limit-2101 +-A OUTPUT -j limit-2100 +-A OUTPUT -j limit-2099 +-A OUTPUT -j limit-2098 +-A OUTPUT -j limit-2097 +-A OUTPUT -j limit-2096 +-A OUTPUT -j limit-2095 +-A OUTPUT -j limit-2094 +-A OUTPUT -j limit-2093 +-A OUTPUT -j limit-2092 +-A OUTPUT -j limit-2091 +-A OUTPUT -j limit-2090 +-A OUTPUT -j limit-2089 +-A OUTPUT -j limit-2088 +-A OUTPUT -j limit-2087 +-A OUTPUT -j limit-2086 +-A OUTPUT -j limit-2085 +-A OUTPUT -j limit-2084 +-A OUTPUT -j limit-2083 +-A OUTPUT -j limit-2082 +-A OUTPUT -j limit-2081 +-A OUTPUT -j limit-2080 +-A OUTPUT -j limit-2079 +-A OUTPUT -j limit-2078 +-A OUTPUT -j limit-2077 +-A OUTPUT -j limit-2076 +-A OUTPUT -j limit-2075 +-A OUTPUT -j limit-2074 +-A OUTPUT -j limit-2073 +-A OUTPUT -j limit-2072 +-A OUTPUT -j limit-2071 +-A OUTPUT -j limit-2070 +-A OUTPUT -j limit-2069 +-A OUTPUT -j limit-2068 +-A OUTPUT -j limit-2067 +-A OUTPUT -j limit-2066 +-A OUTPUT -j limit-2065 +-A OUTPUT -j limit-2064 +-A OUTPUT -j limit-2063 +-A OUTPUT -j limit-2062 +-A OUTPUT -j limit-2061 +-A OUTPUT -j limit-2060 +-A OUTPUT -j limit-2059 +-A OUTPUT -j limit-2058 +-A OUTPUT -j limit-2057 +-A OUTPUT -j limit-2056 +-A OUTPUT -j limit-2055 +-A OUTPUT -j limit-2054 +-A OUTPUT -j limit-2053 +-A OUTPUT -j limit-2052 +-A OUTPUT -j limit-2051 +-A OUTPUT -j limit-2050 +-A OUTPUT -j limit-2049 +-A OUTPUT -j limit-2048 +-A OUTPUT -j limit-2047 +-A OUTPUT -j limit-2046 +-A OUTPUT -j limit-2045 +-A OUTPUT -j limit-2044 +-A OUTPUT -j limit-2043 +-A OUTPUT -j limit-2042 +-A OUTPUT -j limit-2041 +-A OUTPUT -j limit-2040 +-A OUTPUT -j limit-2039 +-A OUTPUT -j limit-2038 +-A OUTPUT -j limit-2037 +-A OUTPUT -j limit-2036 +-A OUTPUT -j limit-2035 +-A OUTPUT -j limit-2034 +-A OUTPUT -j limit-2033 +-A OUTPUT -j limit-2032 +-A OUTPUT -j limit-2031 +-A OUTPUT -j limit-2030 +-A OUTPUT -j limit-2029 +-A OUTPUT -j limit-2028 +-A OUTPUT -j limit-2027 +-A OUTPUT -j limit-2026 +-A OUTPUT -j limit-2025 +-A OUTPUT -j limit-2024 +-A OUTPUT -j limit-2023 +-A OUTPUT -j limit-2022 +-A OUTPUT -j limit-2021 +-A OUTPUT -j limit-2020 +-A OUTPUT -j limit-2019 +-A OUTPUT -j limit-2018 +-A OUTPUT -j limit-2017 +-A OUTPUT -j limit-2016 +-A OUTPUT -j limit-2015 +-A OUTPUT -j limit-2014 +-A OUTPUT -j limit-2013 +-A OUTPUT -j limit-2012 +-A OUTPUT -j limit-2011 +-A OUTPUT -j limit-2010 +-A OUTPUT -j limit-2009 +-A OUTPUT -j limit-2008 +-A OUTPUT -j limit-2007 +-A OUTPUT -j limit-2006 +-A OUTPUT -j limit-2005 +-A OUTPUT -j limit-2004 +-A OUTPUT -j limit-2003 +-A OUTPUT -j limit-2002 +-A OUTPUT -j limit-2001 +-A OUTPUT -j limit-2000 +-A OUTPUT -j limit-1999 +-A OUTPUT -j limit-1998 +-A OUTPUT -j limit-1997 +-A OUTPUT -j limit-1996 +-A OUTPUT -j limit-1995 +-A OUTPUT -j limit-1994 +-A OUTPUT -j limit-1993 +-A OUTPUT -j limit-1992 +-A OUTPUT -j limit-1991 +-A OUTPUT -j limit-1990 +-A OUTPUT -j limit-1989 +-A OUTPUT -j limit-1988 +-A OUTPUT -j limit-1987 +-A OUTPUT -j limit-1986 +-A OUTPUT -j limit-1985 +-A OUTPUT -j limit-1984 +-A OUTPUT -j limit-1983 +-A OUTPUT -j limit-1982 +-A OUTPUT -j limit-1981 +-A OUTPUT -j limit-1980 +-A OUTPUT -j limit-1979 +-A OUTPUT -j limit-1978 +-A OUTPUT -j limit-1977 +-A OUTPUT -j limit-1976 +-A OUTPUT -j limit-1975 +-A OUTPUT -j limit-1974 +-A OUTPUT -j limit-1973 +-A OUTPUT -j limit-1972 +-A OUTPUT -j limit-1971 +-A OUTPUT -j limit-1970 +-A OUTPUT -j limit-1969 +-A OUTPUT -j limit-1968 +-A OUTPUT -j limit-1967 +-A OUTPUT -j limit-1966 +-A OUTPUT -j limit-1965 +-A OUTPUT -j limit-1964 +-A OUTPUT -j limit-1963 +-A OUTPUT -j limit-1962 +-A OUTPUT -j limit-1961 +-A OUTPUT -j limit-1960 +-A OUTPUT -j limit-1959 +-A OUTPUT -j limit-1958 +-A OUTPUT -j limit-1957 +-A OUTPUT -j limit-1956 +-A OUTPUT -j limit-1955 +-A OUTPUT -j limit-1954 +-A OUTPUT -j limit-1953 +-A OUTPUT -j limit-1952 +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j limit-0 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1 -A OUTPUT -o eth1 -d fc00::/7 -j limit-2 -A OUTPUT -o eth1 -d fc00::/7 -j limit-3 @@ -8336,11 +13013,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-651 -A OUTPUT -o eth1 -d fc00::/7 -j limit-652 -A OUTPUT -o eth1 -d fc00::/7 -j limit-653 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-654 -A OUTPUT -o eth1 -d fc00::/7 -j limit-655 -A OUTPUT -o eth1 -d fc00::/7 -j limit-656 -A OUTPUT -o eth1 -d fc00::/7 -j limit-657 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-658 -A OUTPUT -o eth1 -d fc00::/7 -j limit-659 -A OUTPUT -o eth1 -d fc00::/7 -j limit-660 -A OUTPUT -o eth1 -d fc00::/7 -j limit-661 @@ -8352,11 +13029,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-667 -A OUTPUT -o eth1 -d fc00::/7 -j limit-668 -A OUTPUT -o eth1 -d fc00::/7 -j limit-669 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-670 -A OUTPUT -o eth1 -d fc00::/7 -j limit-671 -A OUTPUT -o eth1 -d fc00::/7 -j limit-672 -A OUTPUT -o eth1 -d fc00::/7 -j limit-673 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-674 -A OUTPUT -o eth1 -d fc00::/7 -j limit-675 -A OUTPUT -o eth1 -d fc00::/7 -j limit-676 -A OUTPUT -o eth1 -d fc00::/7 -j limit-677 @@ -8368,11 +13045,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-683 -A OUTPUT -o eth1 -d fc00::/7 -j limit-684 -A OUTPUT -o eth1 -d fc00::/7 -j limit-685 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-686 -A OUTPUT -o eth1 -d fc00::/7 -j limit-687 -A OUTPUT -o eth1 -d fc00::/7 -j limit-688 -A OUTPUT -o eth1 -d fc00::/7 -j limit-689 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-690 -A OUTPUT -o eth1 -d fc00::/7 -j limit-691 -A OUTPUT -o eth1 -d fc00::/7 -j limit-692 -A OUTPUT -o eth1 -d fc00::/7 -j limit-693 @@ -8384,11 +13061,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-699 -A OUTPUT -o eth1 -d fc00::/7 -j limit-700 -A OUTPUT -o eth1 -d fc00::/7 -j limit-701 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-702 -A OUTPUT -o eth1 -d fc00::/7 -j limit-703 -A OUTPUT -o eth1 -d fc00::/7 -j limit-704 -A OUTPUT -o eth1 -d fc00::/7 -j limit-705 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-706 -A OUTPUT -o eth1 -d fc00::/7 -j limit-707 -A OUTPUT -o eth1 -d fc00::/7 -j limit-708 -A OUTPUT -o eth1 -d fc00::/7 -j limit-709 @@ -8408,11 +13085,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-723 -A OUTPUT -o eth1 -d fc00::/7 -j limit-724 -A OUTPUT -o eth1 -d fc00::/7 -j limit-725 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-321 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-726 -A OUTPUT -o eth1 -d fc00::/7 -j limit-727 -A OUTPUT -o eth1 -d fc00::/7 -j limit-728 -A OUTPUT -o eth1 -d fc00::/7 -j limit-729 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-325 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-730 -A OUTPUT -o eth1 -d fc00::/7 -j limit-731 -A OUTPUT -o eth1 -d fc00::/7 -j limit-732 -A OUTPUT -o eth1 -d fc00::/7 -j limit-733 @@ -8424,11 +13101,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-739 -A OUTPUT -o eth1 -d fc00::/7 -j limit-740 -A OUTPUT -o eth1 -d fc00::/7 -j limit-741 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-337 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-742 -A OUTPUT -o eth1 -d fc00::/7 -j limit-743 -A OUTPUT -o eth1 -d fc00::/7 -j limit-744 -A OUTPUT -o eth1 -d fc00::/7 -j limit-745 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-341 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-746 -A OUTPUT -o eth1 -d fc00::/7 -j limit-747 -A OUTPUT -o eth1 -d fc00::/7 -j limit-748 -A OUTPUT -o eth1 -d fc00::/7 -j limit-749 @@ -8440,11 +13117,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-755 -A OUTPUT -o eth1 -d fc00::/7 -j limit-756 -A OUTPUT -o eth1 -d fc00::/7 -j limit-757 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-353 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-758 -A OUTPUT -o eth1 -d fc00::/7 -j limit-759 -A OUTPUT -o eth1 -d fc00::/7 -j limit-760 -A OUTPUT -o eth1 -d fc00::/7 -j limit-761 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-357 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-762 -A OUTPUT -o eth1 -d fc00::/7 -j limit-763 -A OUTPUT -o eth1 -d fc00::/7 -j limit-764 -A OUTPUT -o eth1 -d fc00::/7 -j limit-765 @@ -8456,11 +13133,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-771 -A OUTPUT -o eth1 -d fc00::/7 -j limit-772 -A OUTPUT -o eth1 -d fc00::/7 -j limit-773 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-369 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-774 -A OUTPUT -o eth1 -d fc00::/7 -j limit-775 -A OUTPUT -o eth1 -d fc00::/7 -j limit-776 -A OUTPUT -o eth1 -d fc00::/7 -j limit-777 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-778 -A OUTPUT -o eth1 -d fc00::/7 -j limit-779 -A OUTPUT -o eth1 -d fc00::/7 -j limit-780 -A OUTPUT -o eth1 -d fc00::/7 -j limit-781 @@ -8480,11 +13157,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-795 -A OUTPUT -o eth1 -d fc00::/7 -j limit-796 -A OUTPUT -o eth1 -d fc00::/7 -j limit-797 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-798 -A OUTPUT -o eth1 -d fc00::/7 -j limit-799 -A OUTPUT -o eth1 -d fc00::/7 -j limit-800 -A OUTPUT -o eth1 -d fc00::/7 -j limit-801 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-802 -A OUTPUT -o eth1 -d fc00::/7 -j limit-803 -A OUTPUT -o eth1 -d fc00::/7 -j limit-804 -A OUTPUT -o eth1 -d fc00::/7 -j limit-805 @@ -8496,11 +13173,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-811 -A OUTPUT -o eth1 -d fc00::/7 -j limit-812 -A OUTPUT -o eth1 -d fc00::/7 -j limit-813 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-814 -A OUTPUT -o eth1 -d fc00::/7 -j limit-815 -A OUTPUT -o eth1 -d fc00::/7 -j limit-816 -A OUTPUT -o eth1 -d fc00::/7 -j limit-817 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-818 -A OUTPUT -o eth1 -d fc00::/7 -j limit-819 -A OUTPUT -o eth1 -d fc00::/7 -j limit-820 -A OUTPUT -o eth1 -d fc00::/7 -j limit-821 @@ -8512,11 +13189,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-827 -A OUTPUT -o eth1 -d fc00::/7 -j limit-828 -A OUTPUT -o eth1 -d fc00::/7 -j limit-829 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-830 -A OUTPUT -o eth1 -d fc00::/7 -j limit-831 -A OUTPUT -o eth1 -d fc00::/7 -j limit-832 -A OUTPUT -o eth1 -d fc00::/7 -j limit-833 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-834 -A OUTPUT -o eth1 -d fc00::/7 -j limit-835 -A OUTPUT -o eth1 -d fc00::/7 -j limit-836 -A OUTPUT -o eth1 -d fc00::/7 -j limit-837 @@ -8528,11 +13205,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-843 -A OUTPUT -o eth1 -d fc00::/7 -j limit-844 -A OUTPUT -o eth1 -d fc00::/7 -j limit-845 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-846 -A OUTPUT -o eth1 -d fc00::/7 -j limit-847 -A OUTPUT -o eth1 -d fc00::/7 -j limit-848 -A OUTPUT -o eth1 -d fc00::/7 -j limit-849 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-850 -A OUTPUT -o eth1 -d fc00::/7 -j limit-851 -A OUTPUT -o eth1 -d fc00::/7 -j limit-852 -A OUTPUT -o eth1 -d fc00::/7 -j limit-853 @@ -8552,11 +13229,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-867 -A OUTPUT -o eth1 -d fc00::/7 -j limit-868 -A OUTPUT -o eth1 -d fc00::/7 -j limit-869 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-393 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-870 -A OUTPUT -o eth1 -d fc00::/7 -j limit-871 -A OUTPUT -o eth1 -d fc00::/7 -j limit-872 -A OUTPUT -o eth1 -d fc00::/7 -j limit-873 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-874 -A OUTPUT -o eth1 -d fc00::/7 -j limit-875 -A OUTPUT -o eth1 -d fc00::/7 -j limit-876 -A OUTPUT -o eth1 -d fc00::/7 -j limit-877 @@ -8568,11 +13245,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-883 -A OUTPUT -o eth1 -d fc00::/7 -j limit-884 -A OUTPUT -o eth1 -d fc00::/7 -j limit-885 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-409 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-886 -A OUTPUT -o eth1 -d fc00::/7 -j limit-887 -A OUTPUT -o eth1 -d fc00::/7 -j limit-888 -A OUTPUT -o eth1 -d fc00::/7 -j limit-889 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-413 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-890 -A OUTPUT -o eth1 -d fc00::/7 -j limit-891 -A OUTPUT -o eth1 -d fc00::/7 -j limit-892 -A OUTPUT -o eth1 -d fc00::/7 -j limit-893 @@ -8584,11 +13261,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-899 -A OUTPUT -o eth1 -d fc00::/7 -j limit-900 -A OUTPUT -o eth1 -d fc00::/7 -j limit-901 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-425 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-902 -A OUTPUT -o eth1 -d fc00::/7 -j limit-903 -A OUTPUT -o eth1 -d fc00::/7 -j limit-904 -A OUTPUT -o eth1 -d fc00::/7 -j limit-905 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-429 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-906 -A OUTPUT -o eth1 -d fc00::/7 -j limit-907 -A OUTPUT -o eth1 -d fc00::/7 -j limit-908 -A OUTPUT -o eth1 -d fc00::/7 -j limit-909 @@ -8600,11 +13277,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-915 -A OUTPUT -o eth1 -d fc00::/7 -j limit-916 -A OUTPUT -o eth1 -d fc00::/7 -j limit-917 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-441 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-918 -A OUTPUT -o eth1 -d fc00::/7 -j limit-919 -A OUTPUT -o eth1 -d fc00::/7 -j limit-920 -A OUTPUT -o eth1 -d fc00::/7 -j limit-921 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-445 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-922 -A OUTPUT -o eth1 -d fc00::/7 -j limit-923 -A OUTPUT -o eth1 -d fc00::/7 -j limit-924 -A OUTPUT -o eth1 -d fc00::/7 -j limit-925 @@ -8624,11 +13301,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-939 -A OUTPUT -o eth1 -d fc00::/7 -j limit-940 -A OUTPUT -o eth1 -d fc00::/7 -j limit-941 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-942 -A OUTPUT -o eth1 -d fc00::/7 -j limit-943 -A OUTPUT -o eth1 -d fc00::/7 -j limit-944 -A OUTPUT -o eth1 -d fc00::/7 -j limit-945 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-946 -A OUTPUT -o eth1 -d fc00::/7 -j limit-947 -A OUTPUT -o eth1 -d fc00::/7 -j limit-948 -A OUTPUT -o eth1 -d fc00::/7 -j limit-949 @@ -8640,11 +13317,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-955 -A OUTPUT -o eth1 -d fc00::/7 -j limit-956 -A OUTPUT -o eth1 -d fc00::/7 -j limit-957 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-958 -A OUTPUT -o eth1 -d fc00::/7 -j limit-959 -A OUTPUT -o eth1 -d fc00::/7 -j limit-960 -A OUTPUT -o eth1 -d fc00::/7 -j limit-961 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-962 -A OUTPUT -o eth1 -d fc00::/7 -j limit-963 -A OUTPUT -o eth1 -d fc00::/7 -j limit-964 -A OUTPUT -o eth1 -d fc00::/7 -j limit-965 @@ -8656,11 +13333,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-971 -A OUTPUT -o eth1 -d fc00::/7 -j limit-972 -A OUTPUT -o eth1 -d fc00::/7 -j limit-973 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-974 -A OUTPUT -o eth1 -d fc00::/7 -j limit-975 -A OUTPUT -o eth1 -d fc00::/7 -j limit-976 -A OUTPUT -o eth1 -d fc00::/7 -j limit-977 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-978 -A OUTPUT -o eth1 -d fc00::/7 -j limit-979 -A OUTPUT -o eth1 -d fc00::/7 -j limit-980 -A OUTPUT -o eth1 -d fc00::/7 -j limit-981 @@ -8672,11 +13349,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-987 -A OUTPUT -o eth1 -d fc00::/7 -j limit-988 -A OUTPUT -o eth1 -d fc00::/7 -j limit-989 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-990 -A OUTPUT -o eth1 -d fc00::/7 -j limit-991 -A OUTPUT -o eth1 -d fc00::/7 -j limit-992 -A OUTPUT -o eth1 -d fc00::/7 -j limit-993 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-994 -A OUTPUT -o eth1 -d fc00::/7 -j limit-995 -A OUTPUT -o eth1 -d fc00::/7 -j limit-996 -A OUTPUT -o eth1 -d fc00::/7 -j limit-997 @@ -8689,18 +13366,18 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1004 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1005 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1006 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1007 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1008 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1009 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1010 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1011 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1012 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1013 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-465 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1014 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1015 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1016 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1017 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-469 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1018 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1019 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1020 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1021 @@ -8709,14 +13386,14 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1024 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1025 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1026 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1027 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1028 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1029 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-481 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1030 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1031 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1032 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1033 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-485 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1034 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1035 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1036 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1037 @@ -8728,14 +13405,14 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1043 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1044 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1045 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-497 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1047 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1046 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1048 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1049 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-501 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1050 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1051 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1052 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1053 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1054 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1055 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1056 @@ -8744,18 +13421,18 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1059 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1060 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1061 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-513 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1062 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1063 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1064 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1065 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-517 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1067 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1066 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1068 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1069 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1070 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1071 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1072 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1073 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1074 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1075 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1076 @@ -8768,27 +13445,27 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1083 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1084 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1085 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1086 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1087 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1088 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1089 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1090 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1091 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1092 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1093 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1094 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1095 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1096 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1097 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-581 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1098 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1099 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1100 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1101 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-1103 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1102 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-587 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1104 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1105 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1106 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1107 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1108 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1109 @@ -8799,13 +13476,13 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1114 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1115 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1116 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1117 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-601 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1118 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1119 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1120 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1121 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A OUTPUT -o eth1 -d fc00::/7 -j limit-1123 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1122 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-607 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1124 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1125 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1126 @@ -8816,16 +13493,16 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1131 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1132 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1133 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1134 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1135 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1136 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1137 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-621 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1138 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1139 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1140 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1141 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1142 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1143 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-627 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1144 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1145 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1146 @@ -8839,13 +13516,13 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1154 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1155 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1156 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1157 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-537 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-641 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1158 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1159 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1160 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1161 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-541 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1163 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1162 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-647 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1164 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1165 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1166 @@ -8856,11 +13533,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1171 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1172 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1173 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-553 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1174 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1175 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1176 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1177 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-557 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1178 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1179 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1180 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1181 @@ -8869,14 +13546,14 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1184 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1185 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1186 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1187 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-671 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1188 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1189 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-569 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1190 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1191 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1192 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1193 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-573 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-677 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1194 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1195 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1196 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1197 @@ -8888,14 +13565,14 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1203 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1204 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1205 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-585 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1207 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1206 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-691 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1208 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1209 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-589 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1210 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1211 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1212 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1213 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-697 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1214 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1215 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1216 @@ -8909,13 +13586,13 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1224 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1225 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1226 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1227 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-711 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1228 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1229 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1230 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1231 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1232 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1233 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-717 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1234 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1235 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1236 @@ -8929,345 +13606,1221 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-1244 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1245 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1246 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1247 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-731 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1248 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1249 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1250 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1251 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1252 --A OUTPUT -o eth1 -d fc00::/7 -j limit-1253 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-737 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1254 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1255 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1256 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1257 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1258 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1259 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1260 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1261 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1262 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1263 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1264 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1265 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1266 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1267 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1268 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1269 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1270 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1271 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1272 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1273 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1274 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1275 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1276 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1278 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1279 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1280 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1281 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1282 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1284 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1285 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1286 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1287 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1288 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1289 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1290 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1291 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1292 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1293 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1294 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1295 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1296 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1298 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1299 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1300 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1301 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1302 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1304 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1305 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1306 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1307 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1308 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1309 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1310 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1311 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1312 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1313 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1314 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1315 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1316 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1318 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1319 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1320 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1321 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1322 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1324 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1325 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1326 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1327 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1328 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1329 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1330 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1331 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1332 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1333 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1334 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1335 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1336 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1338 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1339 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1340 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1341 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1342 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1344 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1345 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1346 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1347 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1348 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1349 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1350 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1351 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1352 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1353 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1354 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1355 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1356 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1357 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1358 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1359 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1360 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1361 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1362 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1363 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1364 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1365 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1366 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-761 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1368 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1369 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1370 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1371 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1372 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-767 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1374 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1375 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1376 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1377 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1378 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1379 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1380 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1381 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1382 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1383 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1384 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1385 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1386 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-781 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1388 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1389 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1390 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1391 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1392 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-787 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1394 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1395 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1396 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1397 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1398 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1399 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1400 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1401 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1402 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1403 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1404 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1405 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1406 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-801 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1408 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1409 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1410 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1411 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1412 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-807 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1414 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1415 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1416 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1417 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1418 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1419 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1420 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1421 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1422 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1423 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1424 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1425 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1426 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-821 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1428 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1429 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1430 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1431 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1432 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-827 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1434 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1435 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1436 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1437 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1438 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1439 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1440 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1441 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1442 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1443 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1444 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1445 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1446 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1447 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1448 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1449 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1450 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1451 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1452 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1453 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1454 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1455 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1456 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1458 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1459 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1460 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1461 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1462 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1464 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1465 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1466 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1467 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1468 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1469 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1470 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1471 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1472 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1473 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1474 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1475 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1476 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1478 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1479 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1480 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1481 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1482 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1484 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1485 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1486 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1487 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1488 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1489 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1490 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1491 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1492 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1493 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1494 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1495 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1496 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1498 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1499 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1500 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1501 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1502 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1504 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1505 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1506 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1507 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1508 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1509 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1510 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1511 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1512 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1513 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1514 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1515 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1516 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1518 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1519 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1520 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1521 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1522 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1524 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1525 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1526 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1527 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1528 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1529 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1530 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1531 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1532 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1533 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1534 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1535 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1536 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1537 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1538 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1539 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1540 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1541 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1542 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1543 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1544 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1545 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1546 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-851 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1548 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1549 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1550 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1551 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1552 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-857 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1554 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1555 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1556 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1557 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1558 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1559 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1560 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1561 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1562 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1563 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1564 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1565 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1566 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-871 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1568 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1569 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1570 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1571 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1572 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-877 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1574 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1575 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1576 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1577 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1578 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1579 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1580 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1581 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1582 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1583 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1584 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1585 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1586 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-891 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1588 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1589 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1590 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1591 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1592 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-897 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1594 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1595 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1596 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1597 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1598 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1599 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1600 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1601 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1602 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1603 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1604 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1605 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1606 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-911 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1608 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1609 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1610 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1611 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1612 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-917 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1614 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1615 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1616 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1617 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1618 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1619 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1620 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1621 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1622 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1623 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1624 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1625 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1626 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1627 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1628 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1629 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1630 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1631 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1632 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1633 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1634 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1635 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1636 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-941 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1638 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1639 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1640 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1641 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1642 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-947 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1644 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1645 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1646 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1647 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1648 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1649 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1650 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1651 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1652 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1653 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1654 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1655 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1656 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-961 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1658 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1659 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1660 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1661 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1662 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-967 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1664 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1665 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1666 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1667 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1668 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1669 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1670 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1671 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1672 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1673 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1674 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1675 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1676 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-981 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1678 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1679 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1680 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1681 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1682 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-987 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1684 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1685 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1686 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1687 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1688 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1689 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1690 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1691 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1692 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1693 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1694 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1695 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1696 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1001 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1698 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1699 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1700 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1701 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1702 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1007 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1704 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1705 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1706 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1707 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1708 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1709 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1710 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1711 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1712 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1713 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1714 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1715 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1716 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1717 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1718 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1719 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1720 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1721 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1722 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1723 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1724 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1725 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1726 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1728 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1729 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1730 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1731 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1732 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1734 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1735 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1736 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1737 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1738 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1739 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1740 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1741 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1742 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1743 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1744 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1745 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1746 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1748 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1749 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1750 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1751 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1752 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1754 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1755 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1756 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1757 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1758 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1759 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1760 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1761 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1762 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1763 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1764 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1765 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1766 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1768 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1769 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1770 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1771 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1772 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1774 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1775 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1776 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1777 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1778 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1779 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1780 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1781 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1782 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1783 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1784 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1785 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1786 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1788 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1789 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1790 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1791 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1792 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1794 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1795 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1796 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1797 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1798 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1799 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1800 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1801 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1802 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1803 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1804 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1805 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1806 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1807 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1808 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1809 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1810 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1811 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1812 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1813 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1814 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1815 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1816 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1031 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1818 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1819 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1820 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1821 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1822 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1037 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1824 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1825 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1826 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1827 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1828 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1829 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1830 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1831 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1832 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1833 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1834 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1835 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1836 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1051 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1838 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1839 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1840 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1841 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1842 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1844 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1845 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1846 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1847 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1848 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1849 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1850 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1851 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1852 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1853 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1854 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1855 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1856 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1071 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1858 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1859 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1860 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1861 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1862 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1864 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1865 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1866 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1867 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1868 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1869 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1870 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1871 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1872 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1873 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1874 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1875 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1876 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1878 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1879 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1880 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1881 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1882 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1097 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1884 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1885 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1886 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1887 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1888 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1889 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1890 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1891 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1892 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1893 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1894 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1895 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1896 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1897 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1898 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1899 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1900 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1901 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1902 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1903 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1904 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1905 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1906 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1907 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1908 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1909 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1910 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1911 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1912 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1913 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1914 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1915 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1916 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1917 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1918 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1919 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1920 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1921 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1922 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1923 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1924 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1925 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1926 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1927 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1928 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1929 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1930 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1931 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1932 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1933 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1934 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1935 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1936 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1937 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1938 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1939 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1940 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1941 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1942 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1943 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1944 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1945 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1946 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1947 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1948 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1949 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1950 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-1951 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-0 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-1 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-2 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-3 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-4 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-5 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-6 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-7 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-8 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-9 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-10 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-11 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-12 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-13 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-14 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-15 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-16 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-17 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-18 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-19 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-20 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-21 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-22 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-23 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-24 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-25 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-26 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-27 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-28 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-29 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-30 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-31 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-32 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-33 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-34 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-35 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-36 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-37 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-38 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-39 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-40 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-41 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-42 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-43 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-44 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-45 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-46 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-47 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-48 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-49 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-50 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-51 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-52 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-53 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-54 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-55 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-56 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-57 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-58 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-59 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-60 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-61 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-62 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-63 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-64 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-65 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-66 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-67 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-68 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-69 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-70 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-71 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-72 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-73 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-74 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-75 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-76 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-77 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-78 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-79 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-80 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-81 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-82 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-83 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-84 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-85 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-86 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-87 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-88 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-89 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-90 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-91 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-92 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-93 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-94 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-95 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-96 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-97 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-98 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-99 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-100 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-101 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-102 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-103 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-104 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-105 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-106 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-107 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-108 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-109 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-110 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-111 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-112 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-113 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-114 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-115 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-116 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-117 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-118 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-119 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-120 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-121 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-122 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-123 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-124 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-125 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-126 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-127 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-128 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-129 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-130 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-131 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-132 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-133 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-134 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-135 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-136 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-137 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-138 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-139 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-140 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-141 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-142 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-143 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-144 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-145 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-146 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-147 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-148 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-149 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-150 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-151 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-152 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-153 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-154 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-155 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-156 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-157 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-158 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-159 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-160 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-161 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-162 --A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-163 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-164 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-165 +-A OUTPUT -j logaccept-final-166 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-167 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-168 +-A OUTPUT -j logaccept-final-169 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-170 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-171 +-A OUTPUT -j logaccept-final-172 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-173 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-174 +-A OUTPUT -j logaccept-final-175 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-176 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-177 +-A OUTPUT -j logaccept-final-178 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-179 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-180 +-A OUTPUT -j logaccept-final-181 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-182 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-183 +-A OUTPUT -j logaccept-final-184 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-185 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-186 +-A OUTPUT -j logaccept-final-187 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-188 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-189 +-A OUTPUT -j logaccept-final-190 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-191 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-192 +-A OUTPUT -j logaccept-final-193 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-194 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-195 +-A OUTPUT -j logaccept-final-196 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-197 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-198 +-A OUTPUT -j logaccept-final-199 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-200 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-201 +-A OUTPUT -j logaccept-final-202 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-203 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-204 +-A OUTPUT -j logaccept-final-205 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-206 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-207 +-A OUTPUT -j logaccept-final-208 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-209 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-210 +-A OUTPUT -j logaccept-final-211 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-212 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-213 +-A OUTPUT -j logaccept-final-214 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-215 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-216 +-A OUTPUT -j logaccept-final-217 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-218 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-219 +-A OUTPUT -j logaccept-final-220 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-221 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-222 +-A OUTPUT -j logaccept-final-223 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-224 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-225 +-A OUTPUT -j logaccept-final-226 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-227 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-228 +-A OUTPUT -j logaccept-final-229 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-230 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-231 +-A OUTPUT -j logaccept-final-232 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-233 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-234 +-A OUTPUT -j logaccept-final-235 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-236 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-237 +-A OUTPUT -j logaccept-final-238 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-239 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-240 +-A OUTPUT -j logaccept-final-241 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-242 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-243 +-A OUTPUT -j logaccept-final-244 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-245 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-246 +-A OUTPUT -j logaccept-final-247 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-248 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-249 +-A OUTPUT -j logaccept-final-250 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-251 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-252 +-A OUTPUT -j logaccept-final-253 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-254 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-255 +-A OUTPUT -j logaccept-final-256 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-257 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-258 +-A OUTPUT -j logaccept-final-259 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-260 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-261 +-A OUTPUT -j logaccept-final-262 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-263 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-264 +-A OUTPUT -j logaccept-final-265 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-266 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-267 +-A OUTPUT -j logaccept-final-268 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-269 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-270 +-A OUTPUT -j logaccept-final-271 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-272 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-273 +-A OUTPUT -j logaccept-final-274 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-275 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-276 +-A OUTPUT -j logaccept-final-277 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-278 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-279 +-A OUTPUT -j logaccept-final-280 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-281 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-282 +-A OUTPUT -j logaccept-final-283 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-284 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-285 +-A OUTPUT -j logaccept-final-286 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-287 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-288 +-A OUTPUT -j logaccept-final-289 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-290 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-291 +-A OUTPUT -j logaccept-final-292 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-293 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-294 +-A OUTPUT -j logaccept-final-295 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-296 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-297 +-A OUTPUT -j logaccept-final-298 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-299 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-300 +-A OUTPUT -j logaccept-final-301 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-302 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-303 +-A OUTPUT -j logaccept-final-304 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-305 -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT @@ -9596,4869 +15149,8333 @@ -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT --A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:C --rsource --mask fe00:: --set --A OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set --A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-1184 --A OUTPUT --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -j logaccept-54 --A OUTPUT -j logdrop-1185 --A OUTPUT -j logpass-0 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT --A OUTPUT -j logaccept-55 --A OUTPUT -j logdrop-1186 --A OUTPUT -j ACCEPT --A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT --A OUTPUT -p icmpv6 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT --A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT --A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-0 --A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 --A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-10 -m limit --limit 1/second -j LOG --A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-100 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-28 --A limit-100 -j ACCEPT --A limit-1000 -m recent --name limit-1000 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-451 --A limit-1000 -m recent --name limit-1000 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1001 -m recent --name limit-1001 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-452 --A limit-1001 -m recent --name limit-1001 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1002 -m recent --name limit-1002 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-453 --A limit-1002 -m recent --name limit-1002 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1003 -m recent --name limit-1003 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-454 --A limit-1003 -m recent --name limit-1003 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1004 -m recent --name limit-1004 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-455 --A limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-456 --A limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-457 --A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-458 --A limit-1007 -m limit --limit 1/second -j LOG --A limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-459 --A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-460 --A limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-101 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-29 --A limit-1010 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-461 --A limit-1010 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1011 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-462 --A limit-1011 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1012 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-463 --A limit-1013 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-464 --A limit-1013 -j ACCEPT --A limit-1015 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-466 --A limit-1015 -m limit --limit 1/second -j LOG --A limit-1015 -j ACCEPT --A limit-1016 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-467 --A limit-1016 -m limit --limit 1/second -j LOG --A limit-1017 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-468 --A limit-1017 -j ACCEPT --A limit-1019 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-470 --A limit-1019 -j ACCEPT --A limit-102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 --A limit-102 -j ACCEPT --A limit-1020 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-471 --A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-472 --A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-473 --A limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-474 --A limit-1023 -m limit --limit 1/second -j LOG --A limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-475 --A limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1025 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-476 --A limit-1025 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1026 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-477 --A limit-1026 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1027 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-478 --A limit-1027 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1028 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-479 --A limit-1029 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-480 --A limit-1029 -j ACCEPT --A limit-103 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 --A limit-1031 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-482 --A limit-1031 -m limit --limit 1/second -j LOG --A limit-1031 -j ACCEPT --A limit-1032 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-483 --A limit-1032 -m limit --limit 1/second -j LOG --A limit-1033 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-484 --A limit-1033 -j ACCEPT --A limit-1035 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-486 --A limit-1035 -j ACCEPT --A limit-1036 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-487 --A limit-1037 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-488 --A limit-1037 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1038 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-489 --A limit-1038 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1039 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-490 --A limit-1039 -m limit --limit 1/second -j LOG --A limit-1039 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-32 --A limit-104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1040 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-491 --A limit-1040 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1041 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-492 --A limit-1041 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1042 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-493 --A limit-1042 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1043 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-494 --A limit-1043 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1044 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-495 --A limit-1045 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-496 --A limit-1045 -j ACCEPT --A limit-1047 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-498 --A limit-1047 -m limit --limit 1/second -j LOG --A limit-1047 -j ACCEPT --A limit-1048 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-499 --A limit-1048 -m limit --limit 1/second -j LOG --A limit-1049 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-500 --A limit-1049 -j ACCEPT --A limit-105 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-33 --A limit-105 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1051 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-502 --A limit-1051 -j ACCEPT --A limit-1052 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-503 --A limit-1053 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-504 --A limit-1053 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1054 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-505 --A limit-1054 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1055 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-506 --A limit-1055 -m limit --limit 1/second -j LOG --A limit-1055 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1056 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-507 --A limit-1056 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1057 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-508 --A limit-1057 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1058 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-509 --A limit-1058 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1059 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-510 --A limit-1059 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-34 --A limit-106 -m limit --limit 1/second -j LOG --A limit-106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1060 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-511 --A limit-1061 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-512 --A limit-1061 -j ACCEPT --A limit-1063 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-514 --A limit-1063 -m limit --limit 1/second -j LOG --A limit-1063 -j ACCEPT --A limit-1064 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-515 --A limit-1064 -m limit --limit 1/second -j LOG --A limit-1065 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-516 --A limit-1065 -j ACCEPT --A limit-1067 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-518 --A limit-1067 -j ACCEPT --A limit-1068 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-519 --A limit-1069 -m recent --name limit-1069 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1069 -m recent --name limit-1069 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-35 --A limit-107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1070 -m recent --name limit-1070 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1070 -m recent --name limit-1070 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1071 -m recent --name limit-1071 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1071 -m limit --limit 1/second -j LOG --A limit-1071 -m recent --name limit-1071 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1072 -m recent --name limit-1072 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1072 -m recent --name limit-1072 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1073 -m recent --name limit-1073 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1073 -m recent --name limit-1073 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1077 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1077 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1078 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1078 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1079 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1079 -m limit --limit 1/second -j LOG --A limit-1079 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-36 --A limit-108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1080 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1080 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1081 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1081 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1082 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1082 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1083 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1083 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1084 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1085 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1085 -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1087 -m limit --limit 1/second -j LOG --A limit-1087 -j ACCEPT --A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1088 -m limit --limit 1/second -j LOG --A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1089 -j ACCEPT --A limit-109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-37 --A limit-109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1091 -j ACCEPT --A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1093 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1093 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1094 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1094 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1095 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1095 -m limit --limit 1/second -j LOG --A limit-1095 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1096 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1096 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1097 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1097 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-38 --A limit-110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1101 -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1103 -m limit --limit 1/second -j LOG --A limit-1103 -j ACCEPT --A limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1104 -m limit --limit 1/second -j LOG --A limit-1105 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1105 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1107 -j ACCEPT --A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1109 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1109 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-39 --A limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1110 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1111 -m limit --limit 1/second -j LOG --A limit-1111 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1114 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1115 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1116 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1117 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1117 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1119 -m limit --limit 1/second -j LOG --A limit-1119 -j ACCEPT --A limit-112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-40 --A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1120 -m limit --limit 1/second -j LOG --A limit-1121 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1121 -j ACCEPT --A limit-1123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1123 -j ACCEPT --A limit-1124 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1126 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1127 -m limit --limit 1/second -j LOG --A limit-1127 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1128 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1128 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1129 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1129 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-41 --A limit-1130 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1131 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1131 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1132 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1133 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1133 -j ACCEPT --A limit-1135 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1135 -m limit --limit 1/second -j LOG --A limit-1135 -j ACCEPT --A limit-1136 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1136 -m limit --limit 1/second -j LOG --A limit-1137 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1137 -j ACCEPT --A limit-1139 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1139 -j ACCEPT --A limit-114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-42 --A limit-114 -m limit --limit 1/second -j LOG --A limit-114 -j ACCEPT --A limit-1140 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1141 -m recent --name limit-1141 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-520 --A limit-1141 -m recent --name limit-1141 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1142 -m recent --name limit-1142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-521 --A limit-1142 -m recent --name limit-1142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1143 -m recent --name limit-1143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-522 --A limit-1143 -m limit --limit 1/second -j LOG --A limit-1143 -m recent --name limit-1143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1144 -m recent --name limit-1144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-523 --A limit-1144 -m recent --name limit-1144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1145 -m recent --name limit-1145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-524 --A limit-1145 -m recent --name limit-1145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1146 -m recent --name limit-1146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-525 --A limit-1146 -m recent --name limit-1146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1147 -m recent --name limit-1147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-526 --A limit-1147 -m recent --name limit-1147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1148 -m recent --name limit-1148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-527 --A limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-528 --A limit-1149 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-43 --A limit-115 -m limit --limit 1/second -j LOG --A limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-529 --A limit-1150 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1151 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-530 --A limit-1151 -m limit --limit 1/second -j LOG --A limit-1151 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-531 --A limit-1152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-532 --A limit-1153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-533 --A limit-1154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-534 --A limit-1155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-535 --A limit-1157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-536 --A limit-1157 -j ACCEPT --A limit-1159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-538 --A limit-1159 -m limit --limit 1/second -j LOG --A limit-1159 -j ACCEPT --A limit-116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-44 --A limit-116 -j ACCEPT --A limit-1160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-539 --A limit-1160 -m limit --limit 1/second -j LOG --A limit-1161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-540 --A limit-1161 -j ACCEPT --A limit-1163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-542 --A limit-1163 -j ACCEPT --A limit-1164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-543 --A limit-1165 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-544 --A limit-1165 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-545 --A limit-1166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-546 --A limit-1167 -m limit --limit 1/second -j LOG --A limit-1167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1168 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-547 --A limit-1168 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1169 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-548 --A limit-1169 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-117 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-45 --A limit-1170 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-549 --A limit-1170 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1171 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-550 --A limit-1171 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-551 --A limit-1173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-552 --A limit-1173 -j ACCEPT --A limit-1175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-554 --A limit-1175 -m limit --limit 1/second -j LOG --A limit-1175 -j ACCEPT --A limit-1176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-555 --A limit-1176 -m limit --limit 1/second -j LOG --A limit-1177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-556 --A limit-1177 -j ACCEPT --A limit-1179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-558 --A limit-1179 -j ACCEPT --A limit-118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-46 --A limit-118 -j ACCEPT --A limit-1180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-559 --A limit-1181 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-560 --A limit-1181 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1182 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-561 --A limit-1182 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1183 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-562 --A limit-1183 -m limit --limit 1/second -j LOG --A limit-1183 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1184 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-563 --A limit-1184 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1185 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-564 --A limit-1185 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1186 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-565 --A limit-1186 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1187 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-566 --A limit-1187 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1188 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-567 --A limit-1189 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-568 --A limit-1189 -j ACCEPT --A limit-119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-47 --A limit-1191 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-570 --A limit-1191 -m limit --limit 1/second -j LOG --A limit-1191 -j ACCEPT --A limit-1192 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-571 --A limit-1192 -m limit --limit 1/second -j LOG --A limit-1193 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-572 --A limit-1193 -j ACCEPT --A limit-1195 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-574 --A limit-1195 -j ACCEPT --A limit-1196 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-575 --A limit-1197 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-576 --A limit-1197 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1198 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-577 --A limit-1198 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1199 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-578 --A limit-1199 -m limit --limit 1/second -j LOG --A limit-1199 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-120 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-48 --A limit-120 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1200 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-579 --A limit-1200 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1201 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-580 --A limit-1201 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1202 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-581 --A limit-1202 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1203 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-582 --A limit-1203 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1204 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-583 --A limit-1205 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-584 --A limit-1205 -j ACCEPT --A limit-1207 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-586 --A limit-1207 -m limit --limit 1/second -j LOG --A limit-1207 -j ACCEPT --A limit-1208 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-587 --A limit-1208 -m limit --limit 1/second -j LOG --A limit-1209 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-588 --A limit-1209 -j ACCEPT --A limit-121 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 --A limit-121 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1211 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-590 --A limit-1211 -j ACCEPT --A limit-1212 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-591 --A limit-1213 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1213 -j ACCEPT --A limit-1213 -m limit --limit 1/second -j LOG --A limit-1213 -j DROP --A limit-1214 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1214 -j RETURN --A limit-1214 -m limit --limit 1/second -j LOG --A limit-1214 -j DROP --A limit-1215 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1215 -j logaccept-18 --A limit-1215 -m limit --limit 1/second -j LOG --A limit-1215 -j DROP --A limit-1216 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1216 -j ACCEPT --A limit-1216 -m limit --limit 1/second -j LOG --A limit-1216 -j DROP --A limit-1217 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1217 -j logaccept-19 --A limit-1217 -m limit --limit 1/second -j LOG --A limit-1217 -j DROP --A limit-1218 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1218 -j ACCEPT --A limit-1218 -j DROP --A limit-1219 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1219 -j RETURN --A limit-1219 -j DROP --A limit-122 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 --A limit-122 -m limit --limit 1/second -j LOG --A limit-122 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1220 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1220 -j logaccept-20 --A limit-1220 -j DROP --A limit-1221 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1221 -j ACCEPT --A limit-1221 -j DROP --A limit-1222 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1222 -j logaccept-21 --A limit-1222 -j DROP --A limit-1223 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1223 -j ACCEPT --A limit-1223 -m limit --limit 1/second -j LOG --A limit-1223 -j DROP --A limit-1224 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1224 -j RETURN --A limit-1224 -m limit --limit 1/second -j LOG --A limit-1224 -j DROP --A limit-1225 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1225 -j logaccept-22 --A limit-1225 -m limit --limit 1/second -j LOG --A limit-1225 -j DROP --A limit-1226 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1226 -j ACCEPT --A limit-1226 -m limit --limit 1/second -j LOG --A limit-1226 -j DROP --A limit-1227 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1227 -j logaccept-23 --A limit-1227 -m limit --limit 1/second -j LOG --A limit-1227 -j DROP --A limit-1228 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1228 -j ACCEPT --A limit-1228 -j DROP --A limit-1229 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1229 -j RETURN --A limit-1229 -j DROP --A limit-123 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 --A limit-123 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1230 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1230 -j logaccept-24 --A limit-1230 -j DROP --A limit-1231 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1231 -j ACCEPT --A limit-1231 -j DROP --A limit-1232 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1232 -j logaccept-25 --A limit-1232 -j DROP --A limit-1233 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1233 -j ACCEPT --A limit-1233 -j DROP --A limit-1234 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1234 -j RETURN --A limit-1234 -j DROP --A limit-1235 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1235 -j logaccept-26 --A limit-1235 -j DROP --A limit-1236 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1236 -j ACCEPT --A limit-1236 -j DROP --A limit-1237 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1237 -j logaccept-27 --A limit-1237 -j DROP --A limit-1238 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1238 -j ACCEPT --A limit-1238 -j DROP --A limit-1239 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1239 -j RETURN --A limit-1239 -j DROP --A limit-124 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 --A limit-124 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1240 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1240 -j logaccept-28 --A limit-1240 -j DROP --A limit-1241 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1241 -j ACCEPT --A limit-1241 -j DROP --A limit-1242 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1242 -j logaccept-29 --A limit-1242 -j DROP --A limit-1243 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1243 -j ACCEPT --A limit-1243 -m limit --limit 1/second -j LOG --A limit-1243 -j DROP --A limit-1244 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1244 -j RETURN --A limit-1244 -m limit --limit 1/second -j LOG --A limit-1244 -j DROP --A limit-1245 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1245 -j logaccept-30 --A limit-1245 -m limit --limit 1/second -j LOG --A limit-1245 -j DROP --A limit-1246 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1246 -j ACCEPT --A limit-1246 -m limit --limit 1/second -j LOG --A limit-1246 -j DROP --A limit-1247 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1247 -j logaccept-31 --A limit-1247 -m limit --limit 1/second -j LOG --A limit-1247 -j DROP --A limit-1248 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1248 -j ACCEPT --A limit-1248 -j DROP --A limit-1249 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1249 -j RETURN --A limit-1249 -j DROP --A limit-125 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 --A limit-125 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1250 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1250 -j logaccept-32 --A limit-1250 -j DROP --A limit-1251 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1251 -j ACCEPT --A limit-1251 -j DROP --A limit-1252 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1252 -j logaccept-33 --A limit-1252 -j DROP --A limit-1253 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1253 -j ACCEPT --A limit-1253 -j DROP --A limit-1254 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1254 -j RETURN --A limit-1254 -j DROP --A limit-1255 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1255 -j logaccept-34 --A limit-1255 -j DROP --A limit-1256 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1256 -j ACCEPT --A limit-1256 -j DROP --A limit-1257 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1257 -j logaccept-35 --A limit-1257 -j DROP --A limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-592 --A limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-593 --A limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-126 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 --A limit-126 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-594 --A limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-595 --A limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-596 --A limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-597 --A limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-598 --A limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1265 -m recent --name limit-1265 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-599 --A limit-1266 -m recent --name limit-1266 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1266 -m recent --name limit-1266 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1267 -m recent --name limit-1267 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1267 -m recent --name limit-1267 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1268 -m recent --name limit-1268 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1268 -m recent --name limit-1268 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1269 -m recent --name limit-1269 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1269 -m recent --name limit-1269 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-127 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-55 --A limit-1270 -m recent --name limit-1270 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name limit-1270 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1271 -m recent --name limit-1271 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1271 -m recent --name limit-1271 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1272 -m recent --name limit-1272 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1272 -m recent --name limit-1272 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1273 -m recent --name limit-1273 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1276 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1276 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1277 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1277 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1279 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1279 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-128 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 --A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1280 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1281 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1285 -m limit --limit 1/second -j LOG --A limit-1286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-129 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 --A limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-130 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 --A limit-130 -m limit --limit 1/second -j LOG --A limit-130 -j ACCEPT --A limit-1300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1301 -m limit --limit 1/second -j LOG --A limit-1302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1306 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1307 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1308 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-131 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 --A limit-131 -m limit --limit 1/second -j LOG --A limit-1310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1310 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1311 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1312 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1312 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1313 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1317 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1317 -m limit --limit 1/second -j LOG --A limit-1318 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1319 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-132 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 --A limit-132 -j ACCEPT --A limit-1320 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1321 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1322 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1323 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1324 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1324 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1325 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1325 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1326 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1326 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1327 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1327 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1328 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1328 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1329 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-133 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-61 --A limit-1330 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1331 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1332 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1333 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1333 -m limit --limit 1/second -j LOG --A limit-1334 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1335 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1336 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1337 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1338 -m recent --name limit-1338 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-600 --A limit-1338 -m recent --name limit-1338 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1339 -m recent --name limit-1339 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-601 --A limit-1339 -m recent --name limit-1339 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-134 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-62 --A limit-134 -j ACCEPT --A limit-1340 -m recent --name limit-1340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-602 --A limit-1340 -m recent --name limit-1340 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1341 -m recent --name limit-1341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-603 --A limit-1341 -m recent --name limit-1341 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1342 -m recent --name limit-1342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-604 --A limit-1342 -m recent --name limit-1342 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1343 -m recent --name limit-1343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-605 --A limit-1343 -m recent --name limit-1343 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1344 -m recent --name limit-1344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-606 --A limit-1344 -m recent --name limit-1344 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1345 -m recent --name limit-1345 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-607 --A limit-1346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-608 --A limit-1346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-609 --A limit-1347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-610 --A limit-1348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-611 --A limit-1349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-135 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-63 --A limit-1350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-612 --A limit-1350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-613 --A limit-1351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1352 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-614 --A limit-1352 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1353 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-615 --A limit-1354 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-616 --A limit-1355 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-617 --A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-618 --A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-619 --A limit-1357 -m limit --limit 1/second -j LOG --A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-620 --A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-621 --A limit-136 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-64 --A limit-136 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-622 --A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-623 --A limit-1362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-624 --A limit-1362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-625 --A limit-1363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-626 --A limit-1364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-627 --A limit-1365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-628 --A limit-1366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-629 --A limit-1367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-630 --A limit-1368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-631 --A limit-137 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-65 --A limit-137 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-632 --A limit-1371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-633 --A limit-1372 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-634 --A limit-1373 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-635 --A limit-1373 -m limit --limit 1/second -j LOG --A limit-1374 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-636 --A limit-1375 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-637 --A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-638 --A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-639 --A limit-1378 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-640 --A limit-1378 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1379 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-641 --A limit-1379 -m recent --name user:C --rsource --mask fe00:: --set --A limit-138 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-66 --A limit-138 -m limit --limit 1/second -j LOG --A limit-138 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-642 --A limit-1380 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-643 --A limit-1381 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1382 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-644 --A limit-1382 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1383 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-645 --A limit-1383 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1384 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-646 --A limit-1384 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1385 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-647 --A limit-1386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-648 --A limit-1387 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-649 --A limit-1388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-650 --A limit-1389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-651 --A limit-1389 -m limit --limit 1/second -j LOG --A limit-139 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-67 --A limit-139 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-652 --A limit-1391 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-653 --A limit-1392 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-654 --A limit-1393 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-655 --A limit-1394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-656 --A limit-1394 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-657 --A limit-1395 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-658 --A limit-1396 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-659 --A limit-1397 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1398 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-660 --A limit-1398 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1399 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-661 --A limit-1399 -m recent --name user:C --rdest --mask fe00:: --set --A limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-140 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-68 --A limit-140 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1400 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-662 --A limit-1400 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1401 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-663 --A limit-1402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-664 --A limit-1403 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-665 --A limit-1404 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-666 --A limit-1405 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-667 --A limit-1405 -m limit --limit 1/second -j LOG --A limit-1406 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-668 --A limit-1407 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-669 --A limit-1408 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-670 --A limit-1409 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-671 --A limit-141 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-69 --A limit-141 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1410 -m recent --name limit-1410 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1410 -m recent --name limit-1410 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1411 -m recent --name limit-1411 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1411 -m recent --name limit-1411 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1412 -m recent --name limit-1412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1412 -m recent --name limit-1412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1413 -m recent --name limit-1413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1413 -m recent --name limit-1413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1414 -m recent --name limit-1414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1414 -m recent --name limit-1414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1415 -m recent --name limit-1415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1415 -m recent --name limit-1415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1416 -m recent --name limit-1416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1416 -m recent --name limit-1416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1417 -m recent --name limit-1417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1418 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1418 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1419 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1419 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-142 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-70 --A limit-142 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1420 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1420 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1421 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1421 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1429 -m limit --limit 1/second -j LOG --A limit-143 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-71 --A limit-1430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1435 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1435 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-144 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-72 --A limit-144 -j ACCEPT --A limit-1440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1445 -m limit --limit 1/second -j LOG --A limit-1446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-145 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-73 --A limit-1450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1450 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1451 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1452 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1453 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1454 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1454 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1455 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1455 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1456 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1456 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1457 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1459 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-146 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-74 --A limit-146 -m limit --limit 1/second -j LOG --A limit-146 -j ACCEPT --A limit-1460 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1461 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1461 -m limit --limit 1/second -j LOG --A limit-1462 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1463 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1464 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1465 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1466 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1466 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1467 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1467 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1468 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1468 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1469 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1469 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-147 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-75 --A limit-147 -m limit --limit 1/second -j LOG --A limit-1470 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1470 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1471 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1471 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1472 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1472 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1473 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1474 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1475 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1476 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1477 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1477 -m limit --limit 1/second -j LOG --A limit-1478 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1479 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-148 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-76 --A limit-148 -j ACCEPT --A limit-1480 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1481 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1482 -m recent --name limit-1482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-672 --A limit-1482 -m recent --name limit-1482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1483 -m recent --name limit-1483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-673 --A limit-1483 -m recent --name limit-1483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1484 -m recent --name limit-1484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-674 --A limit-1484 -m recent --name limit-1484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1485 -m recent --name limit-1485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-675 --A limit-1485 -m recent --name limit-1485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1486 -m recent --name limit-1486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-676 --A limit-1486 -m recent --name limit-1486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1487 -m recent --name limit-1487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-677 --A limit-1487 -m recent --name limit-1487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1488 -m recent --name limit-1488 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-678 --A limit-1488 -m recent --name limit-1488 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1489 -m recent --name limit-1489 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-679 --A limit-149 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-77 --A limit-1490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-680 --A limit-1490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-681 --A limit-1491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-682 --A limit-1492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-683 --A limit-1493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-684 --A limit-1494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-685 --A limit-1495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-686 --A limit-1496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1497 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-687 --A limit-1498 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-688 --A limit-1499 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-689 --A limit-15 -m recent --name limit-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-150 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-78 --A limit-150 -j ACCEPT --A limit-1500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-690 --A limit-1501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-691 --A limit-1501 -m limit --limit 1/second -j LOG --A limit-1502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-692 --A limit-1503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-693 --A limit-1504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-694 --A limit-1505 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-695 --A limit-1506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-696 --A limit-1506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1507 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-697 --A limit-1507 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-698 --A limit-1508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-699 --A limit-1509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-151 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-79 --A limit-1510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-700 --A limit-1510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-701 --A limit-1511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-702 --A limit-1512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-703 --A limit-1514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-704 --A limit-1515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-705 --A limit-1516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-706 --A limit-1517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-707 --A limit-1517 -m limit --limit 1/second -j LOG --A limit-1518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-708 --A limit-1519 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-709 --A limit-152 -m recent --name limit-152 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-152 -m recent --name limit-152 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-710 --A limit-1521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-711 --A limit-1522 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-712 --A limit-1522 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1523 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-713 --A limit-1523 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1524 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-714 --A limit-1524 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1525 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-715 --A limit-1525 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1526 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-716 --A limit-1526 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1527 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-717 --A limit-1527 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1528 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-718 --A limit-1528 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1529 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-719 --A limit-153 -m recent --name limit-153 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-153 -m recent --name limit-153 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1530 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-720 --A limit-1531 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-721 --A limit-1532 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-722 --A limit-1533 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-723 --A limit-1533 -m limit --limit 1/second -j LOG --A limit-1534 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-724 --A limit-1535 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-725 --A limit-1536 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-726 --A limit-1537 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-727 --A limit-1538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-728 --A limit-1538 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-729 --A limit-1539 -m recent --name user:C --rdest --mask fe00:: --set --A limit-154 -m recent --name limit-154 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-154 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name limit-154 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1540 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-730 --A limit-1540 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1541 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-731 --A limit-1541 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1542 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-732 --A limit-1542 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1543 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-733 --A limit-1543 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1544 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-734 --A limit-1544 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1545 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-735 --A limit-1546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-736 --A limit-1547 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-737 --A limit-1548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-738 --A limit-1549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-739 --A limit-1549 -m limit --limit 1/second -j LOG --A limit-155 -m recent --name limit-155 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-155 -m recent --name limit-155 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1550 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-740 --A limit-1551 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-741 --A limit-1552 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-742 --A limit-1553 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-743 --A limit-1554 -m recent --name limit-1554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1554 -m recent --name limit-1554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1555 -m recent --name limit-1555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1555 -m recent --name limit-1555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1556 -m recent --name limit-1556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1556 -m recent --name limit-1556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1557 -m recent --name limit-1557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1557 -m recent --name limit-1557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1558 -m recent --name limit-1558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1558 -m recent --name limit-1558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1559 -m recent --name limit-1559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1559 -m recent --name limit-1559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1560 -m recent --name limit-1560 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1560 -m recent --name limit-1560 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1561 -m recent --name limit-1561 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1571 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1573 -m limit --limit 1/second -j LOG --A limit-1574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1577 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1578 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1578 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1579 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1579 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1589 -m limit --limit 1/second -j LOG --A limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1591 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1594 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1594 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1595 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1595 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1596 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1596 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1597 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1597 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1598 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1598 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1599 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1599 -m recent --name user:C --rsource --mask fe00:: --set --A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1600 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1602 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1603 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1604 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1605 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1605 -m limit --limit 1/second -j LOG --A limit-1606 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1607 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1608 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1609 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1610 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1610 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1611 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1611 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1612 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1612 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1613 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1613 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1614 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1614 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1615 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1615 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1616 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1616 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1617 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1618 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1619 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-162 -m limit --limit 1/second -j LOG --A limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1620 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1621 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1621 -m limit --limit 1/second -j LOG --A limit-1622 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1623 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1624 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1625 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1626 -m recent --name limit-1626 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-744 --A limit-1626 -m recent --name limit-1626 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1627 -m recent --name limit-1627 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-745 --A limit-1627 -m recent --name limit-1627 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1628 -m recent --name limit-1628 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-746 --A limit-1628 -m recent --name limit-1628 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1629 -m recent --name limit-1629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-747 --A limit-1629 -m recent --name limit-1629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1630 -m recent --name limit-1630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-748 --A limit-1630 -m recent --name limit-1630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1631 -m recent --name limit-1631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-749 --A limit-1631 -m recent --name limit-1631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1632 -m recent --name limit-1632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-750 --A limit-1632 -m recent --name limit-1632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1633 -m recent --name limit-1633 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-751 --A limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-752 --A limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1635 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-753 --A limit-1635 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1636 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-754 --A limit-1636 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1637 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-755 --A limit-1637 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1638 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-756 --A limit-1638 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1639 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-757 --A limit-1639 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-758 --A limit-1640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-759 --A limit-1642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-760 --A limit-1643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-761 --A limit-1644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-762 --A limit-1645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-763 --A limit-1645 -m limit --limit 1/second -j LOG --A limit-1646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-764 --A limit-1647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-765 --A limit-1648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-766 --A limit-1649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-767 --A limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-768 --A limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-769 --A limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-770 --A limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-771 --A limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-772 --A limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-773 --A limit-1655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-774 --A limit-1656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-775 --A limit-1658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-776 --A limit-1659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-777 --A limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-778 --A limit-1661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-779 --A limit-1661 -m limit --limit 1/second -j LOG --A limit-1662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-780 --A limit-1663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-781 --A limit-1664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-782 --A limit-1665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-783 --A limit-1666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-784 --A limit-1666 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-785 --A limit-1667 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-786 --A limit-1668 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-787 --A limit-1669 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1670 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-788 --A limit-1670 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1671 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-789 --A limit-1671 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1672 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-790 --A limit-1672 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1673 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-791 --A limit-1674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-792 --A limit-1675 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-793 --A limit-1676 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-794 --A limit-1677 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-795 --A limit-1677 -m limit --limit 1/second -j LOG --A limit-1678 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-796 --A limit-1679 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-797 --A limit-168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-168 -j ACCEPT --A limit-1680 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-798 --A limit-1681 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-799 --A limit-1682 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-800 --A limit-1682 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1683 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-801 --A limit-1683 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1684 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-802 --A limit-1684 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1685 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-803 --A limit-1685 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1686 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-804 --A limit-1686 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1687 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-805 --A limit-1687 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1688 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-806 --A limit-1688 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1689 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-807 --A limit-169 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1690 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-808 --A limit-1691 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-809 --A limit-1692 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-810 --A limit-1693 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-811 --A limit-1693 -m limit --limit 1/second -j LOG --A limit-1694 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-812 --A limit-1695 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-813 --A limit-1696 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-814 --A limit-1697 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-815 --A limit-1698 -m recent --name limit-1698 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1698 -m recent --name limit-1698 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1699 -m recent --name limit-1699 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1699 -m recent --name limit-1699 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-170 -m limit --limit 1/second -j LOG --A limit-170 -j ACCEPT --A limit-1700 -m recent --name limit-1700 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1700 -m recent --name limit-1700 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1701 -m recent --name limit-1701 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1701 -m recent --name limit-1701 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1702 -m recent --name limit-1702 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1702 -m recent --name limit-1702 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1703 -m recent --name limit-1703 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1703 -m recent --name limit-1703 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1704 -m recent --name limit-1704 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1704 -m recent --name limit-1704 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1705 -m recent --name limit-1705 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1706 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1706 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1707 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1707 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1708 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1708 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1709 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1709 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-171 -m limit --limit 1/second -j LOG --A limit-1710 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1710 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1711 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1711 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1712 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1712 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1713 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1714 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1715 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1717 -m limit --limit 1/second -j LOG --A limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-172 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-172 -j ACCEPT --A limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1722 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1722 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1723 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1723 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1724 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1724 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1725 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1725 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1726 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1726 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1727 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1727 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1728 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-1728 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1729 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-173 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1730 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1731 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1732 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1733 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1733 -m limit --limit 1/second -j LOG --A limit-1734 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1735 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1738 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1738 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1739 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1739 -m recent --name user:C --rsource --mask fe00:: --set --A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-174 -j ACCEPT --A limit-1740 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1740 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1741 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1741 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1742 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1742 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1743 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1743 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1744 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1744 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1745 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1746 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1747 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1748 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1749 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1749 -m limit --limit 1/second -j LOG --A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1750 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1751 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1752 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1753 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1754 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1754 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1755 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1755 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1756 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1756 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1757 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1757 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1758 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1758 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1759 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1759 -m recent --name user:C --rdest --mask fe00:: --set --A limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1760 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1760 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1761 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-1762 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1763 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1764 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1765 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1765 -m limit --limit 1/second -j LOG --A limit-1766 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1767 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1768 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-1769 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1770 -m recent --name limit-1770 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-816 --A limit-1770 -m recent --name limit-1770 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1771 -m recent --name limit-1771 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-817 --A limit-1771 -m recent --name limit-1771 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1772 -m recent --name limit-1772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-818 --A limit-1772 -m recent --name limit-1772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1773 -m recent --name limit-1773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-819 --A limit-1773 -m recent --name limit-1773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1774 -m recent --name limit-1774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-820 --A limit-1774 -m recent --name limit-1774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1775 -m recent --name limit-1775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-821 --A limit-1775 -m recent --name limit-1775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1776 -m recent --name limit-1776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-822 --A limit-1776 -m recent --name limit-1776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1777 -m recent --name limit-1777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-823 --A limit-1778 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-824 --A limit-1778 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1779 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-825 --A limit-1779 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-178 -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1780 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-826 --A limit-1780 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1781 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-827 --A limit-1781 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-828 --A limit-1782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-829 --A limit-1783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-830 --A limit-1784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-831 --A limit-1786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-832 --A limit-1787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-833 --A limit-1788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-834 --A limit-1789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-835 --A limit-1789 -m limit --limit 1/second -j LOG --A limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-836 --A limit-1791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-837 --A limit-1792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-838 --A limit-1793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-839 --A limit-1794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-840 --A limit-1794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-841 --A limit-1795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-842 --A limit-1796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-843 --A limit-1797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-844 --A limit-1798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-845 --A limit-1799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-18 -m limit --limit 1/second -j LOG --A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-846 --A limit-1800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1801 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-847 --A limit-1802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-848 --A limit-1803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-849 --A limit-1804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-850 --A limit-1805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-851 --A limit-1805 -m limit --limit 1/second -j LOG --A limit-1806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-852 --A limit-1807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-853 --A limit-1808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-854 --A limit-1809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-855 --A limit-181 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-181 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-856 --A limit-1810 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-857 --A limit-1811 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1812 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-858 --A limit-1812 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1813 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-859 --A limit-1813 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1814 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-860 --A limit-1814 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1815 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-861 --A limit-1815 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1816 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-862 --A limit-1816 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1817 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-863 --A limit-1818 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-864 --A limit-1819 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-865 --A limit-182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1820 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-866 --A limit-1821 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-867 --A limit-1821 -m limit --limit 1/second -j LOG --A limit-1822 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-868 --A limit-1823 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-869 --A limit-1824 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-870 --A limit-1825 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-871 --A limit-1826 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-872 --A limit-1826 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1827 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-873 --A limit-1827 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1828 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-874 --A limit-1828 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1829 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-875 --A limit-1829 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1830 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-876 --A limit-1830 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1831 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-877 --A limit-1831 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1832 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-878 --A limit-1832 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1833 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-879 --A limit-1834 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-880 --A limit-1835 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-881 --A limit-1836 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-882 --A limit-1837 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-883 --A limit-1837 -m limit --limit 1/second -j LOG --A limit-1838 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-884 --A limit-1839 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-885 --A limit-184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-184 -j ACCEPT --A limit-1840 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-886 --A limit-1841 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-887 --A limit-1842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1842 -j RETURN --A limit-1842 -m limit --limit 1/second -j LOG --A limit-1842 -j DROP --A limit-1843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1843 -j RETURN --A limit-1843 -m limit --limit 1/second -j LOG --A limit-1843 -j DROP --A limit-1844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1844 -j RETURN --A limit-1844 -m limit --limit 1/second -j LOG --A limit-1844 -j DROP --A limit-1845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1845 -j RETURN --A limit-1845 -m limit --limit 1/second -j LOG --A limit-1845 -j DROP --A limit-1846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1846 -j RETURN --A limit-1846 -m limit --limit 1/second -j LOG --A limit-1846 -j DROP --A limit-1847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1847 -j RETURN --A limit-1847 -j DROP --A limit-1848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1848 -j RETURN --A limit-1848 -j DROP --A limit-1849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1849 -j RETURN --A limit-1849 -j DROP --A limit-185 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1850 -j RETURN --A limit-1850 -j DROP --A limit-1851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1851 -j RETURN --A limit-1851 -j DROP --A limit-1852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1852 -j RETURN --A limit-1852 -m limit --limit 1/second -j LOG --A limit-1852 -j DROP --A limit-1853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1853 -j RETURN --A limit-1853 -m limit --limit 1/second -j LOG --A limit-1853 -j DROP --A limit-1854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1854 -j RETURN --A limit-1854 -m limit --limit 1/second -j LOG --A limit-1854 -j DROP --A limit-1855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1855 -j RETURN --A limit-1855 -m limit --limit 1/second -j LOG --A limit-1855 -j DROP --A limit-1856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1856 -j RETURN --A limit-1856 -m limit --limit 1/second -j LOG --A limit-1856 -j DROP --A limit-1857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1857 -j RETURN --A limit-1857 -j DROP --A limit-1858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1858 -j RETURN --A limit-1858 -j DROP --A limit-1859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1859 -j RETURN --A limit-1859 -j DROP --A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-186 -m limit --limit 1/second -j LOG --A limit-186 -j ACCEPT --A limit-1860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1860 -j RETURN --A limit-1860 -j DROP --A limit-1861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1861 -j RETURN --A limit-1861 -j DROP --A limit-1862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1862 -j RETURN --A limit-1862 -j DROP --A limit-1863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1863 -j RETURN --A limit-1863 -j DROP --A limit-1864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1864 -j RETURN --A limit-1864 -j DROP --A limit-1865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1865 -j RETURN --A limit-1865 -j DROP --A limit-1866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1866 -j RETURN --A limit-1866 -j DROP --A limit-1867 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1867 -j RETURN --A limit-1867 -j DROP --A limit-1868 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1868 -j RETURN --A limit-1868 -j DROP --A limit-1869 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1869 -j RETURN --A limit-1869 -j DROP --A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-187 -m limit --limit 1/second -j LOG --A limit-1870 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1870 -j RETURN --A limit-1870 -j DROP --A limit-1871 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1871 -j RETURN --A limit-1871 -j DROP --A limit-1872 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1872 -j RETURN --A limit-1872 -m limit --limit 1/second -j LOG --A limit-1872 -j DROP --A limit-1873 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1873 -j RETURN --A limit-1873 -m limit --limit 1/second -j LOG --A limit-1873 -j DROP --A limit-1874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1874 -j RETURN --A limit-1874 -m limit --limit 1/second -j LOG --A limit-1874 -j DROP --A limit-1875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1875 -j RETURN --A limit-1875 -m limit --limit 1/second -j LOG --A limit-1875 -j DROP --A limit-1876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1876 -j RETURN --A limit-1876 -m limit --limit 1/second -j LOG --A limit-1876 -j DROP --A limit-1877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1877 -j RETURN --A limit-1877 -j DROP --A limit-1878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1878 -j RETURN --A limit-1878 -j DROP --A limit-1879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1879 -j RETURN --A limit-1879 -j DROP --A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-188 -j ACCEPT --A limit-1880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1880 -j RETURN --A limit-1880 -j DROP --A limit-1881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1881 -j RETURN --A limit-1881 -j DROP --A limit-1882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1882 -j RETURN --A limit-1882 -j DROP --A limit-1883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1883 -j RETURN --A limit-1883 -j DROP --A limit-1884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1884 -j RETURN --A limit-1884 -j DROP --A limit-1885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1885 -j RETURN --A limit-1885 -j DROP --A limit-1886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1886 -j RETURN --A limit-1886 -j DROP --A limit-1887 -m recent --name limit-1887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-888 --A limit-1887 -m recent --name limit-1887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1888 -m recent --name limit-1888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-889 --A limit-1888 -m recent --name limit-1888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1889 -m recent --name limit-1889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-890 --A limit-1889 -m limit --limit 1/second -j LOG --A limit-1889 -m recent --name limit-1889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1890 -m recent --name limit-1890 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-891 --A limit-1890 -m recent --name limit-1890 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1891 -m recent --name limit-1891 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-892 --A limit-1891 -m recent --name limit-1891 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1892 -m recent --name limit-1892 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-893 --A limit-1892 -m recent --name limit-1892 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1893 -m recent --name limit-1893 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-894 --A limit-1893 -m recent --name limit-1893 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1894 -m recent --name limit-1894 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-895 --A limit-1895 -m recent --name limit-1895 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1895 -m recent --name limit-1895 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1896 -m recent --name limit-1896 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1896 -m recent --name limit-1896 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1897 -m recent --name limit-1897 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1897 -m limit --limit 1/second -j LOG --A limit-1897 -m recent --name limit-1897 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1898 -m recent --name limit-1898 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1898 -m recent --name limit-1898 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1899 -m recent --name limit-1899 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1899 -m recent --name limit-1899 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-190 -j ACCEPT --A limit-1900 -m recent --name limit-1900 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1900 -m recent --name limit-1900 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1901 -m recent --name limit-1901 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1901 -m recent --name limit-1901 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1902 -m recent --name limit-1902 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1903 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1903 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1904 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1904 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1905 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1905 -m limit --limit 1/second -j LOG --A limit-1905 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1906 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1906 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1907 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1907 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1908 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1908 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1909 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1909 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1910 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1911 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1911 -j ACCEPT --A limit-1913 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1913 -m limit --limit 1/second -j LOG --A limit-1913 -j ACCEPT --A limit-1914 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1914 -m limit --limit 1/second -j LOG --A limit-1915 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1915 -j ACCEPT --A limit-1917 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1917 -j ACCEPT --A limit-1918 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1919 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1919 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-192 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-192 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1920 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1920 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1921 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1921 -m limit --limit 1/second -j LOG --A limit-1921 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1922 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1922 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1923 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1923 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1924 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1924 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1925 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1925 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1926 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-1927 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1927 -j ACCEPT --A limit-1929 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1929 -m limit --limit 1/second -j LOG --A limit-1929 -j ACCEPT --A limit-193 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-193 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1930 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1930 -m limit --limit 1/second -j LOG --A limit-1931 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1931 -j ACCEPT --A limit-1933 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1933 -j ACCEPT --A limit-1934 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1935 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1935 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1936 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1936 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1937 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1937 -m limit --limit 1/second -j LOG --A limit-1937 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1938 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1938 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1939 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1939 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-194 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-194 -m limit --limit 1/second -j LOG --A limit-194 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1940 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1940 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1941 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1941 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1942 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1943 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1943 -j ACCEPT --A limit-1945 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1945 -m limit --limit 1/second -j LOG --A limit-1945 -j ACCEPT --A limit-1946 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1946 -m limit --limit 1/second -j LOG --A limit-1947 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1947 -j ACCEPT --A limit-1949 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1949 -j ACCEPT --A limit-195 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-195 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1950 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1951 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1951 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1952 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1952 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1953 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1953 -m limit --limit 1/second -j LOG --A limit-1953 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1954 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1954 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1955 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1955 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1956 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1956 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1957 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1957 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1958 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1959 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1959 -j ACCEPT --A limit-196 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-196 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1961 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1961 -m limit --limit 1/second -j LOG --A limit-1961 -j ACCEPT --A limit-1962 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1962 -m limit --limit 1/second -j LOG --A limit-1963 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1963 -j ACCEPT --A limit-1965 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1965 -j ACCEPT --A limit-1966 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-896 --A limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-897 --A limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-898 --A limit-1969 -m limit --limit 1/second -j LOG --A limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-197 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-197 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-899 --A limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1971 -m recent --name limit-1971 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-900 --A limit-1971 -m recent --name limit-1971 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1972 -m recent --name limit-1972 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-901 --A limit-1972 -m recent --name limit-1972 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1973 -m recent --name limit-1973 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-902 --A limit-1973 -m recent --name limit-1973 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1974 -m recent --name limit-1974 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-903 --A limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-904 --A limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-905 --A limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-906 --A limit-1977 -m limit --limit 1/second -j LOG --A limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-907 --A limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-908 --A limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-909 --A limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1981 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-910 --A limit-1981 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1982 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-911 --A limit-1983 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-912 --A limit-1983 -j ACCEPT --A limit-1985 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-914 --A limit-1985 -m limit --limit 1/second -j LOG --A limit-1985 -j ACCEPT --A limit-1986 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-915 --A limit-1986 -m limit --limit 1/second -j LOG --A limit-1987 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-916 --A limit-1987 -j ACCEPT --A limit-1989 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-918 --A limit-1989 -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-1990 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-919 --A limit-1991 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-920 --A limit-1991 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-921 --A limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-922 --A limit-1993 -m limit --limit 1/second -j LOG --A limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-923 --A limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-924 --A limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-925 --A limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-926 --A limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-927 --A limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-928 --A limit-1999 -j ACCEPT --A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 --A limit-2 -m limit --limit 1/second -j LOG --A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-200 -j ACCEPT --A limit-2001 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-930 --A limit-2001 -m limit --limit 1/second -j LOG --A limit-2001 -j ACCEPT --A limit-2002 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-931 --A limit-2002 -m limit --limit 1/second -j LOG --A limit-2003 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-932 --A limit-2003 -j ACCEPT --A limit-2005 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-934 --A limit-2005 -j ACCEPT --A limit-2006 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-935 --A limit-2007 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-936 --A limit-2007 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2008 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-937 --A limit-2008 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2009 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-938 --A limit-2009 -m limit --limit 1/second -j LOG --A limit-2009 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2010 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-939 --A limit-2010 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2011 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-940 --A limit-2011 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2012 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-941 --A limit-2012 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2013 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-942 --A limit-2013 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2014 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-943 --A limit-2015 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-944 --A limit-2015 -j ACCEPT --A limit-2017 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-946 --A limit-2017 -m limit --limit 1/second -j LOG --A limit-2017 -j ACCEPT --A limit-2018 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-947 --A limit-2018 -m limit --limit 1/second -j LOG --A limit-2019 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-948 --A limit-2019 -j ACCEPT --A limit-202 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-202 -m limit --limit 1/second -j LOG --A limit-202 -j ACCEPT --A limit-2021 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-950 --A limit-2021 -j ACCEPT --A limit-2022 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-951 --A limit-2023 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-952 --A limit-2023 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2024 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-953 --A limit-2024 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2025 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-954 --A limit-2025 -m limit --limit 1/second -j LOG --A limit-2025 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2026 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-955 --A limit-2026 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2027 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-956 --A limit-2027 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2028 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-957 --A limit-2028 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2029 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-958 --A limit-2029 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-203 -m limit --limit 1/second -j LOG --A limit-2030 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-959 --A limit-2031 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-960 --A limit-2031 -j ACCEPT --A limit-2033 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-962 --A limit-2033 -m limit --limit 1/second -j LOG --A limit-2033 -j ACCEPT --A limit-2034 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-963 --A limit-2034 -m limit --limit 1/second -j LOG --A limit-2035 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-964 --A limit-2035 -j ACCEPT --A limit-2037 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-966 --A limit-2037 -j ACCEPT --A limit-2038 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-967 --A limit-2039 -m recent --name limit-2039 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2039 -m recent --name limit-2039 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-204 -j ACCEPT --A limit-2040 -m recent --name limit-2040 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2040 -m recent --name limit-2040 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2041 -m recent --name limit-2041 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2041 -m limit --limit 1/second -j LOG --A limit-2041 -m recent --name limit-2041 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2042 -m recent --name limit-2042 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2042 -m recent --name limit-2042 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2043 -m recent --name limit-2043 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2043 -m recent --name limit-2043 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2044 -m recent --name limit-2044 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2044 -m recent --name limit-2044 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2045 -m recent --name limit-2045 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2045 -m recent --name limit-2045 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2046 -m recent --name limit-2046 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2049 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2049 -m limit --limit 1/second -j LOG --A limit-2049 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2054 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2055 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2055 -j ACCEPT --A limit-2057 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2057 -m limit --limit 1/second -j LOG --A limit-2057 -j ACCEPT --A limit-2058 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2058 -m limit --limit 1/second -j LOG --A limit-2059 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2059 -j ACCEPT --A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-206 -j ACCEPT --A limit-2061 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2061 -j ACCEPT --A limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2065 -m limit --limit 1/second -j LOG --A limit-2065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2069 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2069 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2070 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-2071 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2071 -j ACCEPT --A limit-2073 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2073 -m limit --limit 1/second -j LOG --A limit-2073 -j ACCEPT --A limit-2074 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2074 -m limit --limit 1/second -j LOG --A limit-2075 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2075 -j ACCEPT --A limit-2077 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2077 -j ACCEPT --A limit-2078 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2079 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2079 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-208 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-208 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2080 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2080 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2081 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2081 -m limit --limit 1/second -j LOG --A limit-2081 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2082 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2082 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2083 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2083 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2084 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2084 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2085 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2085 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2086 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2087 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2087 -j ACCEPT --A limit-2089 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2089 -m limit --limit 1/second -j LOG --A limit-2089 -j ACCEPT --A limit-209 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-209 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2090 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2090 -m limit --limit 1/second -j LOG --A limit-2091 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2091 -j ACCEPT --A limit-2093 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2093 -j ACCEPT --A limit-2094 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2095 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2095 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2096 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2096 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2097 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2097 -m limit --limit 1/second -j LOG --A limit-2097 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2098 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2098 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2099 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2099 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-210 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2100 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2100 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2101 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2101 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2103 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2103 -j ACCEPT --A limit-2105 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2105 -m limit --limit 1/second -j LOG --A limit-2105 -j ACCEPT --A limit-2106 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2106 -m limit --limit 1/second -j LOG --A limit-2107 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2107 -j ACCEPT --A limit-2109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2109 -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-211 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2111 -m recent --name limit-2111 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-968 --A limit-2111 -m recent --name limit-2111 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2112 -m recent --name limit-2112 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-969 --A limit-2112 -m recent --name limit-2112 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2113 -m recent --name limit-2113 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-970 --A limit-2113 -m limit --limit 1/second -j LOG --A limit-2113 -m recent --name limit-2113 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2114 -m recent --name limit-2114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-971 --A limit-2114 -m recent --name limit-2114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2115 -m recent --name limit-2115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-972 --A limit-2115 -m recent --name limit-2115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2116 -m recent --name limit-2116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-973 --A limit-2116 -m recent --name limit-2116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2117 -m recent --name limit-2117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-974 --A limit-2117 -m recent --name limit-2117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2118 -m recent --name limit-2118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-975 --A limit-2119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-976 --A limit-2119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-977 --A limit-2120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-978 --A limit-2121 -m limit --limit 1/second -j LOG --A limit-2121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-979 --A limit-2122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-980 --A limit-2123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-981 --A limit-2124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-982 --A limit-2125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-983 --A limit-2127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-984 --A limit-2127 -j ACCEPT --A limit-2129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-986 --A limit-2129 -m limit --limit 1/second -j LOG --A limit-2129 -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-213 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-987 --A limit-2130 -m limit --limit 1/second -j LOG --A limit-2131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-988 --A limit-2131 -j ACCEPT --A limit-2133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-990 --A limit-2133 -j ACCEPT --A limit-2134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-991 --A limit-2135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-992 --A limit-2135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-993 --A limit-2136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-994 --A limit-2137 -m limit --limit 1/second -j LOG --A limit-2137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-995 --A limit-2138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-996 --A limit-2139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-997 --A limit-2140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-998 --A limit-2141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-999 --A limit-2143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1000 --A limit-2143 -j ACCEPT --A limit-2145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1002 --A limit-2145 -m limit --limit 1/second -j LOG --A limit-2145 -j ACCEPT --A limit-2146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1003 --A limit-2146 -m limit --limit 1/second -j LOG --A limit-2147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1004 --A limit-2147 -j ACCEPT --A limit-2149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1006 --A limit-2149 -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-2150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1007 --A limit-2151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1008 --A limit-2151 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1009 --A limit-2152 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1010 --A limit-2153 -m limit --limit 1/second -j LOG --A limit-2153 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1011 --A limit-2154 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1012 --A limit-2155 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1013 --A limit-2156 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1014 --A limit-2157 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1015 --A limit-2159 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1016 --A limit-2159 -j ACCEPT --A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-216 -j ACCEPT --A limit-2161 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1018 --A limit-2161 -m limit --limit 1/second -j LOG --A limit-2161 -j ACCEPT --A limit-2162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1019 --A limit-2162 -m limit --limit 1/second -j LOG --A limit-2163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1020 --A limit-2163 -j ACCEPT --A limit-2165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1022 --A limit-2165 -j ACCEPT --A limit-2166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1023 --A limit-2167 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1024 --A limit-2167 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2168 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1025 --A limit-2168 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2169 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1026 --A limit-2169 -m limit --limit 1/second -j LOG --A limit-2169 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1027 --A limit-2170 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1028 --A limit-2171 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1029 --A limit-2172 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1030 --A limit-2173 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1031 --A limit-2175 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1032 --A limit-2175 -j ACCEPT --A limit-2177 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1034 --A limit-2177 -m limit --limit 1/second -j LOG --A limit-2177 -j ACCEPT --A limit-2178 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1035 --A limit-2178 -m limit --limit 1/second -j LOG --A limit-2179 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1036 --A limit-2179 -j ACCEPT --A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-218 -m limit --limit 1/second -j LOG --A limit-218 -j ACCEPT --A limit-2181 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1038 --A limit-2181 -j ACCEPT --A limit-2182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1039 --A limit-2183 -m recent --name limit-2183 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2183 -m recent --name limit-2183 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2184 -m recent --name limit-2184 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2184 -m recent --name limit-2184 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2185 -m recent --name limit-2185 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2185 -m limit --limit 1/second -j LOG --A limit-2185 -m recent --name limit-2185 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2186 -m recent --name limit-2186 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2186 -m recent --name limit-2186 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2187 -m recent --name limit-2187 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2187 -m recent --name limit-2187 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2188 -m recent --name limit-2188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2188 -m recent --name limit-2188 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2189 -m recent --name limit-2189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2189 -m recent --name limit-2189 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-219 -m limit --limit 1/second -j LOG --A limit-2190 -m recent --name limit-2190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2191 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2191 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2192 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2192 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2193 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2193 -m limit --limit 1/second -j LOG --A limit-2193 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2196 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2197 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2199 -j ACCEPT --A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-220 -j ACCEPT --A limit-2201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2201 -m limit --limit 1/second -j LOG --A limit-2201 -j ACCEPT --A limit-2202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2202 -m limit --limit 1/second -j LOG --A limit-2203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2203 -j ACCEPT --A limit-2205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2205 -j ACCEPT --A limit-2206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2207 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2209 -m limit --limit 1/second -j LOG --A limit-2209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2213 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2213 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2215 -j ACCEPT --A limit-2217 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2217 -m limit --limit 1/second -j LOG --A limit-2217 -j ACCEPT --A limit-2218 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2218 -m limit --limit 1/second -j LOG --A limit-2219 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2219 -j ACCEPT --A limit-222 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-222 -j ACCEPT --A limit-2221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2221 -j ACCEPT --A limit-2222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2223 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2224 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2224 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2225 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2225 -m limit --limit 1/second -j LOG --A limit-2225 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2226 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2226 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2227 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2227 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2228 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2228 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2229 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2229 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-223 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-2230 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2231 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2231 -j ACCEPT --A limit-2233 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2233 -m limit --limit 1/second -j LOG --A limit-2233 -j ACCEPT --A limit-2234 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2234 -m limit --limit 1/second -j LOG --A limit-2235 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2235 -j ACCEPT --A limit-2237 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2237 -j ACCEPT --A limit-2238 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2239 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2239 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-80 --A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2240 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2240 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2241 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2241 -m limit --limit 1/second -j LOG --A limit-2241 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2242 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2242 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2243 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2243 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2244 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2244 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2245 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2245 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2246 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2247 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2247 -j ACCEPT --A limit-2249 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2249 -m limit --limit 1/second -j LOG --A limit-2249 -j ACCEPT --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-81 --A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2250 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2250 -m limit --limit 1/second -j LOG --A limit-2251 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2251 -j ACCEPT --A limit-2253 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2253 -j ACCEPT --A limit-2254 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2255 -m recent --name limit-2255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1040 --A limit-2255 -m recent --name limit-2255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2256 -m recent --name limit-2256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1041 --A limit-2256 -m recent --name limit-2256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2257 -m recent --name limit-2257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1042 --A limit-2257 -m limit --limit 1/second -j LOG --A limit-2257 -m recent --name limit-2257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2258 -m recent --name limit-2258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1043 --A limit-2258 -m recent --name limit-2258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2259 -m recent --name limit-2259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1044 --A limit-2259 -m recent --name limit-2259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-82 --A limit-226 -m limit --limit 1/second -j LOG --A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2260 -m recent --name limit-2260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1045 --A limit-2260 -m recent --name limit-2260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2261 -m recent --name limit-2261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1046 --A limit-2261 -m recent --name limit-2261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2262 -m recent --name limit-2262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1047 --A limit-2263 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1048 --A limit-2263 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2264 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1049 --A limit-2264 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2265 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1050 --A limit-2265 -m limit --limit 1/second -j LOG --A limit-2265 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1051 --A limit-2266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1052 --A limit-2267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1053 --A limit-2268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1054 --A limit-2269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-83 --A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1055 --A limit-2271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 --A limit-2271 -j ACCEPT --A limit-2273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 --A limit-2273 -m limit --limit 1/second -j LOG --A limit-2273 -j ACCEPT --A limit-2274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 --A limit-2274 -m limit --limit 1/second -j LOG --A limit-2275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1060 --A limit-2275 -j ACCEPT --A limit-2277 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1062 --A limit-2277 -j ACCEPT --A limit-2278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1063 --A limit-2279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1064 --A limit-2279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-228 -m recent --name limit-228 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-84 --A limit-228 -m recent --name limit-228 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2280 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1065 --A limit-2280 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2281 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1066 --A limit-2281 -m limit --limit 1/second -j LOG --A limit-2281 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2282 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1067 --A limit-2282 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2283 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1068 --A limit-2283 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2284 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1069 --A limit-2284 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2285 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1070 --A limit-2285 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1071 --A limit-2287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 --A limit-2287 -j ACCEPT --A limit-2289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 --A limit-2289 -m limit --limit 1/second -j LOG --A limit-2289 -j ACCEPT --A limit-229 -m recent --name limit-229 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-85 --A limit-229 -m recent --name limit-229 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 --A limit-2290 -m limit --limit 1/second -j LOG --A limit-2291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 --A limit-2291 -j ACCEPT --A limit-2293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 --A limit-2293 -j ACCEPT --A limit-2294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 --A limit-2295 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1080 --A limit-2295 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2296 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1081 --A limit-2296 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2297 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1082 --A limit-2297 -m limit --limit 1/second -j LOG --A limit-2297 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2298 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1083 --A limit-2298 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2299 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1084 --A limit-2299 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-230 -m recent --name limit-230 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-86 --A limit-230 -m recent --name limit-230 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2300 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1085 --A limit-2300 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2301 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1086 --A limit-2301 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2302 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1087 --A limit-2303 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1088 --A limit-2303 -j ACCEPT --A limit-2305 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 --A limit-2305 -m limit --limit 1/second -j LOG --A limit-2305 -j ACCEPT --A limit-2306 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 --A limit-2306 -m limit --limit 1/second -j LOG --A limit-2307 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 --A limit-2307 -j ACCEPT --A limit-2309 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 --A limit-2309 -j ACCEPT --A limit-231 -m recent --name limit-231 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-87 --A limit-2310 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 --A limit-2311 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1096 --A limit-2311 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2312 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1097 --A limit-2312 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2313 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1098 --A limit-2313 -m limit --limit 1/second -j LOG --A limit-2313 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2314 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1099 --A limit-2314 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2315 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1100 --A limit-2315 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2316 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1101 --A limit-2316 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2317 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1102 --A limit-2317 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1103 --A limit-2319 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1104 --A limit-2319 -j ACCEPT --A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-88 --A limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2321 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1106 --A limit-2321 -m limit --limit 1/second -j LOG --A limit-2321 -j ACCEPT --A limit-2322 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1107 --A limit-2322 -m limit --limit 1/second -j LOG --A limit-2323 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1108 --A limit-2323 -j ACCEPT --A limit-2325 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1110 --A limit-2325 -j ACCEPT --A limit-2326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1111 --A limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2329 -m limit --limit 1/second -j LOG --A limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-89 --A limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2331 -m recent --name limit-2331 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2331 -m recent --name limit-2331 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2332 -m recent --name limit-2332 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2332 -m recent --name limit-2332 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2333 -m recent --name limit-2333 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2333 -m recent --name limit-2333 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2334 -m recent --name limit-2334 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2337 -m limit --limit 1/second -j LOG --A limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-90 --A limit-234 -m limit --limit 1/second -j LOG --A limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2341 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2341 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2342 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2343 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2343 -j ACCEPT --A limit-2345 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2345 -m limit --limit 1/second -j LOG --A limit-2345 -j ACCEPT --A limit-2346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2346 -m limit --limit 1/second -j LOG --A limit-2347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2347 -j ACCEPT --A limit-2349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2349 -j ACCEPT --A limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-91 --A limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2351 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2351 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2353 -m limit --limit 1/second -j LOG --A limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2359 -j ACCEPT --A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-92 --A limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2361 -m limit --limit 1/second -j LOG --A limit-2361 -j ACCEPT --A limit-2362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2362 -m limit --limit 1/second -j LOG --A limit-2363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2363 -j ACCEPT --A limit-2365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2365 -j ACCEPT --A limit-2366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2367 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2367 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2368 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2368 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2369 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2369 -m limit --limit 1/second -j LOG --A limit-2369 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-93 --A limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2370 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2370 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2371 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2371 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2372 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2372 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2373 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2373 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2374 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2375 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2375 -j ACCEPT --A limit-2377 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2377 -m limit --limit 1/second -j LOG --A limit-2377 -j ACCEPT --A limit-2378 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2378 -m limit --limit 1/second -j LOG --A limit-2379 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2379 -j ACCEPT --A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-94 --A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2381 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2381 -j ACCEPT --A limit-2382 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2383 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2383 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2384 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2384 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2385 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2385 -m limit --limit 1/second -j LOG --A limit-2385 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2386 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2386 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2387 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2387 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2388 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2388 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2389 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2389 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-95 --A limit-2390 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-2391 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2391 -j ACCEPT --A limit-2393 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2393 -m limit --limit 1/second -j LOG --A limit-2393 -j ACCEPT --A limit-2394 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2394 -m limit --limit 1/second -j LOG --A limit-2395 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2395 -j ACCEPT --A limit-2397 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2397 -j ACCEPT --A limit-2398 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-2399 -m recent --name limit-2399 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1112 --A limit-2399 -m recent --name limit-2399 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-24 -j ACCEPT --A limit-240 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-96 --A limit-240 -j ACCEPT --A limit-2400 -m recent --name limit-2400 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1113 --A limit-2400 -m recent --name limit-2400 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2401 -m recent --name limit-2401 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1114 --A limit-2401 -m limit --limit 1/second -j LOG --A limit-2401 -m recent --name limit-2401 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2402 -m recent --name limit-2402 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1115 --A limit-2402 -m recent --name limit-2402 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2403 -m recent --name limit-2403 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1116 --A limit-2403 -m recent --name limit-2403 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2404 -m recent --name limit-2404 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1117 --A limit-2404 -m recent --name limit-2404 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2405 -m recent --name limit-2405 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1118 --A limit-2405 -m recent --name limit-2405 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2406 -m recent --name limit-2406 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1119 --A limit-2407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1120 --A limit-2407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1121 --A limit-2408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2409 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1122 --A limit-2409 -m limit --limit 1/second -j LOG --A limit-2409 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-241 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-97 --A limit-2410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1123 --A limit-2410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1124 --A limit-2411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1125 --A limit-2412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1126 --A limit-2413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2414 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1127 --A limit-2415 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1128 --A limit-2415 -j ACCEPT --A limit-2417 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1130 --A limit-2417 -m limit --limit 1/second -j LOG --A limit-2417 -j ACCEPT --A limit-2418 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1131 --A limit-2418 -m limit --limit 1/second -j LOG --A limit-2419 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1132 --A limit-2419 -j ACCEPT --A limit-242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-98 --A limit-242 -m limit --limit 1/second -j LOG --A limit-242 -j ACCEPT --A limit-2421 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1134 --A limit-2421 -j ACCEPT --A limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1135 --A limit-2423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1136 --A limit-2423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1137 --A limit-2424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1138 --A limit-2425 -m limit --limit 1/second -j LOG --A limit-2425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1139 --A limit-2426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1140 --A limit-2427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1141 --A limit-2428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2429 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1142 --A limit-2429 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-99 --A limit-243 -m limit --limit 1/second -j LOG --A limit-2430 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1143 --A limit-2431 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1144 --A limit-2431 -j ACCEPT --A limit-2433 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1146 --A limit-2433 -m limit --limit 1/second -j LOG --A limit-2433 -j ACCEPT --A limit-2434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1147 --A limit-2434 -m limit --limit 1/second -j LOG --A limit-2435 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1148 --A limit-2435 -j ACCEPT --A limit-2437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1150 --A limit-2437 -j ACCEPT --A limit-2438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1151 --A limit-2439 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1152 --A limit-2439 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-100 --A limit-244 -j ACCEPT --A limit-2440 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1153 --A limit-2440 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2441 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1154 --A limit-2441 -m limit --limit 1/second -j LOG --A limit-2441 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2442 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1155 --A limit-2442 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2443 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1156 --A limit-2443 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2444 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1157 --A limit-2444 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2445 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1158 --A limit-2445 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-2446 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1159 --A limit-2447 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1160 --A limit-2447 -j ACCEPT --A limit-2449 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1162 --A limit-2449 -m limit --limit 1/second -j LOG --A limit-2449 -j ACCEPT --A limit-245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-101 --A limit-2450 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1163 --A limit-2450 -m limit --limit 1/second -j LOG --A limit-2451 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1164 --A limit-2451 -j ACCEPT --A limit-2453 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1166 --A limit-2453 -j ACCEPT --A limit-2454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1167 --A limit-2455 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1168 --A limit-2455 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2456 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1169 --A limit-2456 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2457 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1170 --A limit-2457 -m limit --limit 1/second -j LOG --A limit-2457 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2458 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1171 --A limit-2458 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-2459 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1172 --A limit-2459 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-102 --A limit-246 -j ACCEPT --A limit-2460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1173 --A limit-2460 -m recent --name user:C --rdest --mask fe00:: --set --A limit-2461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1174 --A limit-2461 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-2462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1175 --A limit-2463 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1176 --A limit-2463 -j ACCEPT --A limit-2465 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1178 --A limit-2465 -m limit --limit 1/second -j LOG --A limit-2465 -j ACCEPT --A limit-2466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1179 --A limit-2466 -m limit --limit 1/second -j LOG --A limit-2467 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1180 --A limit-2467 -j ACCEPT --A limit-2469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1182 --A limit-2469 -j ACCEPT --A limit-247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-103 --A limit-2470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1183 --A limit-2471 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2471 -j ACCEPT --A limit-2471 -m limit --limit 1/second -j LOG --A limit-2471 -j DROP --A limit-2472 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2472 -j RETURN --A limit-2472 -m limit --limit 1/second -j LOG --A limit-2472 -j DROP --A limit-2473 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2473 -j logaccept-36 --A limit-2473 -m limit --limit 1/second -j LOG --A limit-2473 -j DROP --A limit-2474 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2474 -j ACCEPT --A limit-2474 -m limit --limit 1/second -j LOG --A limit-2474 -j DROP --A limit-2475 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2475 -j logaccept-37 --A limit-2475 -m limit --limit 1/second -j LOG --A limit-2475 -j DROP --A limit-2476 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2476 -j ACCEPT --A limit-2476 -j DROP --A limit-2477 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2477 -j RETURN --A limit-2477 -j DROP --A limit-2478 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2478 -j logaccept-38 --A limit-2478 -j DROP --A limit-2479 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2479 -j ACCEPT --A limit-2479 -j DROP --A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-104 --A limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2480 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2480 -j logaccept-39 --A limit-2480 -j DROP --A limit-2481 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2481 -j ACCEPT --A limit-2481 -m limit --limit 1/second -j LOG --A limit-2481 -j DROP --A limit-2482 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2482 -j RETURN --A limit-2482 -m limit --limit 1/second -j LOG --A limit-2482 -j DROP --A limit-2483 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2483 -j logaccept-40 --A limit-2483 -m limit --limit 1/second -j LOG --A limit-2483 -j DROP --A limit-2484 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2484 -j ACCEPT --A limit-2484 -m limit --limit 1/second -j LOG --A limit-2484 -j DROP --A limit-2485 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2485 -j logaccept-41 --A limit-2485 -m limit --limit 1/second -j LOG --A limit-2485 -j DROP --A limit-2486 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2486 -j ACCEPT --A limit-2486 -j DROP --A limit-2487 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2487 -j RETURN --A limit-2487 -j DROP --A limit-2488 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2488 -j logaccept-42 --A limit-2488 -j DROP --A limit-2489 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2489 -j ACCEPT --A limit-2489 -j DROP --A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-105 --A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-2490 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2490 -j logaccept-43 --A limit-2490 -j DROP --A limit-2491 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2491 -j ACCEPT --A limit-2491 -j DROP --A limit-2492 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2492 -j RETURN --A limit-2492 -j DROP --A limit-2493 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2493 -j logaccept-44 --A limit-2493 -j DROP --A limit-2494 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2494 -j ACCEPT --A limit-2494 -j DROP --A limit-2495 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2495 -j logaccept-45 --A limit-2495 -j DROP --A limit-2496 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2496 -j ACCEPT --A limit-2496 -j DROP --A limit-2497 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2497 -j RETURN --A limit-2497 -j DROP --A limit-2498 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2498 -j logaccept-46 --A limit-2498 -j DROP --A limit-2499 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2499 -j ACCEPT --A limit-2499 -j DROP --A limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-106 --A limit-250 -m limit --limit 1/second -j LOG --A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-2500 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2500 -j logaccept-47 --A limit-2500 -j DROP --A limit-2501 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2501 -j ACCEPT --A limit-2501 -m limit --limit 1/second -j LOG --A limit-2501 -j DROP --A limit-2502 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2502 -j RETURN --A limit-2502 -m limit --limit 1/second -j LOG --A limit-2502 -j DROP --A limit-2503 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2503 -j logaccept-48 --A limit-2503 -m limit --limit 1/second -j LOG --A limit-2503 -j DROP --A limit-2504 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2504 -j ACCEPT --A limit-2504 -m limit --limit 1/second -j LOG --A limit-2504 -j DROP --A limit-2505 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2505 -j logaccept-49 --A limit-2505 -m limit --limit 1/second -j LOG --A limit-2505 -j DROP --A limit-2506 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2506 -j ACCEPT --A limit-2506 -j DROP --A limit-2507 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2507 -j RETURN --A limit-2507 -j DROP --A limit-2508 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2508 -j logaccept-50 --A limit-2508 -j DROP --A limit-2509 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2509 -j ACCEPT --A limit-2509 -j DROP --A limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-107 --A limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-2510 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2510 -j logaccept-51 --A limit-2510 -j DROP --A limit-2511 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2511 -j ACCEPT --A limit-2511 -j DROP --A limit-2512 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2512 -j RETURN --A limit-2512 -j DROP --A limit-2513 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2513 -j logaccept-52 --A limit-2513 -j DROP --A limit-2514 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2514 -j ACCEPT --A limit-2514 -j DROP --A limit-2515 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2515 -j logaccept-53 --A limit-2515 -j DROP --A limit-252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-108 --A limit-252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-109 --A limit-253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-110 --A limit-254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-255 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-111 --A limit-256 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-112 --A limit-256 -j ACCEPT --A limit-257 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-113 --A limit-258 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-114 --A limit-258 -m limit --limit 1/second -j LOG --A limit-258 -j ACCEPT --A limit-259 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-115 --A limit-259 -m limit --limit 1/second -j LOG --A limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-26 -m limit --limit 1/second -j LOG --A limit-26 -j ACCEPT --A limit-260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-116 --A limit-260 -j ACCEPT --A limit-261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-117 --A limit-262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-118 --A limit-262 -j ACCEPT --A limit-263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-119 --A limit-264 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-120 --A limit-264 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-265 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-121 --A limit-265 -m recent --name user:C --rsource --mask fe00:: --set --A limit-266 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-122 --A limit-266 -m limit --limit 1/second -j LOG --A limit-266 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-267 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-123 --A limit-267 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-268 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-124 --A limit-268 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-269 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-125 --A limit-269 -m recent --name user:C --rsource --mask fe00:: --set --A limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-27 -m limit --limit 1/second -j LOG --A limit-270 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-126 --A limit-270 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-271 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-127 --A limit-272 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-128 --A limit-272 -j ACCEPT --A limit-273 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-129 --A limit-274 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-130 --A limit-274 -m limit --limit 1/second -j LOG --A limit-274 -j ACCEPT --A limit-275 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-131 --A limit-275 -m limit --limit 1/second -j LOG --A limit-276 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-132 --A limit-276 -j ACCEPT --A limit-277 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-133 --A limit-278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-134 --A limit-278 -j ACCEPT --A limit-279 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-135 --A limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-28 -j ACCEPT --A limit-280 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-136 --A limit-280 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-281 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-137 --A limit-281 -m recent --name user:C --rdest --mask fe00:: --set --A limit-282 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-138 --A limit-282 -m limit --limit 1/second -j LOG --A limit-282 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-283 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-139 --A limit-283 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-140 --A limit-284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-141 --A limit-285 -m recent --name user:C --rdest --mask fe00:: --set --A limit-286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-142 --A limit-286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-143 --A limit-288 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-144 --A limit-288 -j ACCEPT --A limit-289 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-145 --A limit-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-146 --A limit-290 -m limit --limit 1/second -j LOG --A limit-290 -j ACCEPT --A limit-291 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-147 --A limit-291 -m limit --limit 1/second -j LOG --A limit-292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-148 --A limit-292 -j ACCEPT --A limit-293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-149 --A limit-294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-150 --A limit-294 -j ACCEPT --A limit-295 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-151 --A limit-296 -m recent --name limit-296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-296 -m recent --name limit-296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-297 -m recent --name limit-297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-297 -m recent --name limit-297 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-298 -m recent --name limit-298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-298 -m limit --limit 1/second -j LOG --A limit-298 -m recent --name limit-298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-299 -m recent --name limit-299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-299 -m recent --name limit-299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 --A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-30 -j ACCEPT --A limit-300 -m recent --name limit-300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-300 -m recent --name limit-300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-301 -m recent --name limit-301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-301 -m recent --name limit-301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-302 -m recent --name limit-302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-302 -m recent --name limit-302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-303 -m recent --name limit-303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-306 -m limit --limit 1/second -j LOG --A limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-31 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-312 -j ACCEPT --A limit-313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-314 -m limit --limit 1/second -j LOG --A limit-314 -j ACCEPT --A limit-315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-315 -m limit --limit 1/second -j LOG --A limit-316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-316 -j ACCEPT --A limit-317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-318 -j ACCEPT --A limit-319 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-322 -m limit --limit 1/second -j LOG --A limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-327 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-328 -j ACCEPT --A limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-330 -m limit --limit 1/second -j LOG --A limit-330 -j ACCEPT --A limit-331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-331 -m limit --limit 1/second -j LOG --A limit-332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-332 -j ACCEPT --A limit-333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-334 -j ACCEPT --A limit-335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-337 -m recent --name user:C --rsource --mask fe00:: --set --A limit-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-338 -m limit --limit 1/second -j LOG +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:C --rsource --mask fe00:: --set +-A OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set +-A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-2200 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-99 +-A OUTPUT -j logdrop-2201 +-A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-100 +-A OUTPUT -j logdrop-2202 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-101 +-A OUTPUT -j logdrop-2203 +-A OUTPUT -j logpass-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-102 +-A OUTPUT -j logdrop-2204 +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-0 +-A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 +-A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1000 -j TEE --gateway fc00::2 +-A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1006 -j ACCEPT +-A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1008 -m limit --limit 1/second -j LOG +-A limit-1008 -j ACCEPT +-A limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1009 -m limit --limit 1/second -j LOG +-A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1010 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1010 -j TEE --gateway fc00::2 +-A limit-1010 -j ACCEPT +-A limit-1011 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1011 -j TEE --gateway fc00::2 +-A limit-1012 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1012 -j ACCEPT +-A limit-1014 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1014 -j ACCEPT +-A limit-1015 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1018 -m limit --limit 1/second -j LOG +-A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-102 -m limit --limit 1/second -j LOG +-A limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1020 -j TEE --gateway fc00::2 +-A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1025 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1026 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1026 -j ACCEPT +-A limit-1028 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1028 -m limit --limit 1/second -j LOG +-A limit-1028 -j ACCEPT +-A limit-1029 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1029 -m limit --limit 1/second -j LOG +-A limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1030 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1030 -j TEE --gateway fc00::2 +-A limit-1030 -j ACCEPT +-A limit-1031 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1031 -j TEE --gateway fc00::2 +-A limit-1032 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1032 -j ACCEPT +-A limit-1034 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1034 -j ACCEPT +-A limit-1035 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1036 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1036 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1037 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1037 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1038 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1038 -m limit --limit 1/second -j LOG +-A limit-1038 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1039 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1039 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-104 -j TEE --gateway fc00::2 +-A limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1040 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1040 -j TEE --gateway fc00::2 +-A limit-1040 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1041 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1041 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1042 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1042 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1043 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1043 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1044 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1044 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1045 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1046 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1046 -j ACCEPT +-A limit-1048 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1048 -m limit --limit 1/second -j LOG +-A limit-1048 -j ACCEPT +-A limit-1049 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1049 -m limit --limit 1/second -j LOG +-A limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1050 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1050 -j TEE --gateway fc00::2 +-A limit-1050 -j ACCEPT +-A limit-1051 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1051 -j TEE --gateway fc00::2 +-A limit-1052 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1052 -j ACCEPT +-A limit-1054 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1054 -j ACCEPT +-A limit-1055 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1056 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1056 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1057 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1057 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1058 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1058 -m limit --limit 1/second -j LOG +-A limit-1058 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1059 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1059 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-106 -m recent --name limit-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-106 -m recent --name limit-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1060 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1060 -j TEE --gateway fc00::2 +-A limit-1060 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1061 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1061 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1062 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1062 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1063 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1063 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1064 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1064 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1065 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1066 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1066 -j ACCEPT +-A limit-1068 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1068 -m limit --limit 1/second -j LOG +-A limit-1068 -j ACCEPT +-A limit-1069 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1069 -m limit --limit 1/second -j LOG +-A limit-107 -m recent --name limit-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-107 -m recent --name limit-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1070 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1070 -j TEE --gateway fc00::2 +-A limit-1070 -j ACCEPT +-A limit-1071 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1071 -j TEE --gateway fc00::2 +-A limit-1072 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1072 -j ACCEPT +-A limit-1074 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1074 -j ACCEPT +-A limit-1075 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-560 +-A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-561 +-A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-562 +-A limit-1078 -m limit --limit 1/second -j LOG +-A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-563 +-A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-108 -m recent --name limit-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-108 -m recent --name limit-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-564 +-A limit-1080 -j TEE --gateway fc00::2 +-A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-565 +-A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-566 +-A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-567 +-A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-568 +-A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-569 +-A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-570 +-A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-571 +-A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-572 +-A limit-1088 -m limit --limit 1/second -j LOG +-A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-573 +-A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-109 -m recent --name limit-109 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-574 +-A limit-1090 -j TEE --gateway fc00::2 +-A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-575 +-A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-576 +-A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1093 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-577 +-A limit-1093 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-578 +-A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-579 +-A limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-580 +-A limit-1096 -j ACCEPT +-A limit-1098 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-582 +-A limit-1098 -m limit --limit 1/second -j LOG +-A limit-1098 -j ACCEPT +-A limit-1099 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-583 +-A limit-1099 -m limit --limit 1/second -j LOG +-A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-20 +-A limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1100 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-584 +-A limit-1100 -j TEE --gateway fc00::2 +-A limit-1100 -j ACCEPT +-A limit-1101 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-585 +-A limit-1101 -j TEE --gateway fc00::2 +-A limit-1102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-586 +-A limit-1102 -j ACCEPT +-A limit-1104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-588 +-A limit-1104 -j ACCEPT +-A limit-1105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-589 +-A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-590 +-A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-591 +-A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-592 +-A limit-1108 -m limit --limit 1/second -j LOG +-A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-593 +-A limit-1109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-594 +-A limit-1110 -j TEE --gateway fc00::2 +-A limit-1110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-595 +-A limit-1111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-596 +-A limit-1112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-597 +-A limit-1113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-598 +-A limit-1114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-599 +-A limit-1116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-600 +-A limit-1116 -j ACCEPT +-A limit-1118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-602 +-A limit-1118 -m limit --limit 1/second -j LOG +-A limit-1118 -j ACCEPT +-A limit-1119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-603 +-A limit-1119 -m limit --limit 1/second -j LOG +-A limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-112 -m limit --limit 1/second -j LOG +-A limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1120 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-604 +-A limit-1120 -j TEE --gateway fc00::2 +-A limit-1120 -j ACCEPT +-A limit-1121 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-605 +-A limit-1121 -j TEE --gateway fc00::2 +-A limit-1122 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-606 +-A limit-1122 -j ACCEPT +-A limit-1124 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-608 +-A limit-1124 -j ACCEPT +-A limit-1125 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-609 +-A limit-1126 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-610 +-A limit-1126 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1127 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-611 +-A limit-1127 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1128 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-612 +-A limit-1128 -m limit --limit 1/second -j LOG +-A limit-1128 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1129 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-613 +-A limit-1129 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1130 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-614 +-A limit-1130 -j TEE --gateway fc00::2 +-A limit-1130 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1131 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-615 +-A limit-1131 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1132 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-616 +-A limit-1132 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1133 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-617 +-A limit-1133 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1134 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-618 +-A limit-1134 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1135 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-619 +-A limit-1136 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-620 +-A limit-1136 -j ACCEPT +-A limit-1138 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-622 +-A limit-1138 -m limit --limit 1/second -j LOG +-A limit-1138 -j ACCEPT +-A limit-1139 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-623 +-A limit-1139 -m limit --limit 1/second -j LOG +-A limit-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-114 -j TEE --gateway fc00::2 +-A limit-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1140 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-624 +-A limit-1140 -j TEE --gateway fc00::2 +-A limit-1140 -j ACCEPT +-A limit-1141 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-625 +-A limit-1141 -j TEE --gateway fc00::2 +-A limit-1142 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-626 +-A limit-1142 -j ACCEPT +-A limit-1144 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-628 +-A limit-1144 -j ACCEPT +-A limit-1145 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-629 +-A limit-1146 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-630 +-A limit-1146 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1147 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-631 +-A limit-1147 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1148 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-632 +-A limit-1148 -m limit --limit 1/second -j LOG +-A limit-1148 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1149 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-633 +-A limit-1149 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1150 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-634 +-A limit-1150 -j TEE --gateway fc00::2 +-A limit-1150 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1151 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-635 +-A limit-1151 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1152 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-636 +-A limit-1152 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1153 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-637 +-A limit-1153 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1154 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-638 +-A limit-1154 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1155 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-639 +-A limit-1156 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-640 +-A limit-1156 -j ACCEPT +-A limit-1158 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-642 +-A limit-1158 -m limit --limit 1/second -j LOG +-A limit-1158 -j ACCEPT +-A limit-1159 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-643 +-A limit-1159 -m limit --limit 1/second -j LOG +-A limit-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1160 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-644 +-A limit-1160 -j TEE --gateway fc00::2 +-A limit-1160 -j ACCEPT +-A limit-1161 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-645 +-A limit-1161 -j TEE --gateway fc00::2 +-A limit-1162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-646 +-A limit-1162 -j ACCEPT +-A limit-1164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-648 +-A limit-1164 -j ACCEPT +-A limit-1165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-649 +-A limit-1166 -m recent --name limit-1166 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-650 +-A limit-1166 -m recent --name limit-1166 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1167 -m recent --name limit-1167 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-651 +-A limit-1167 -m recent --name limit-1167 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1168 -m recent --name limit-1168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-652 +-A limit-1168 -m limit --limit 1/second -j LOG +-A limit-1168 -m recent --name limit-1168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1169 -m recent --name limit-1169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-653 +-A limit-1169 -m recent --name limit-1169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1170 -m recent --name limit-1170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-654 +-A limit-1170 -j TEE --gateway fc00::2 +-A limit-1170 -m recent --name limit-1170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1171 -m recent --name limit-1171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-655 +-A limit-1171 -m recent --name limit-1171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1172 -m recent --name limit-1172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-656 +-A limit-1172 -m recent --name limit-1172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1173 -m recent --name limit-1173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-657 +-A limit-1173 -m recent --name limit-1173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1174 -m recent --name limit-1174 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-658 +-A limit-1174 -m recent --name limit-1174 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1175 -m recent --name limit-1175 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-659 +-A limit-1176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-660 +-A limit-1176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-661 +-A limit-1177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-662 +-A limit-1178 -m limit --limit 1/second -j LOG +-A limit-1178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-663 +-A limit-1179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-664 +-A limit-1180 -j TEE --gateway fc00::2 +-A limit-1180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-665 +-A limit-1181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-666 +-A limit-1182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-667 +-A limit-1183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-668 +-A limit-1184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-669 +-A limit-1186 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-670 +-A limit-1186 -j ACCEPT +-A limit-1188 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-672 +-A limit-1188 -m limit --limit 1/second -j LOG +-A limit-1188 -j ACCEPT +-A limit-1189 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-673 +-A limit-1189 -m limit --limit 1/second -j LOG +-A limit-119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-1190 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-674 +-A limit-1190 -j TEE --gateway fc00::2 +-A limit-1190 -j ACCEPT +-A limit-1191 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-675 +-A limit-1191 -j TEE --gateway fc00::2 +-A limit-1192 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-676 +-A limit-1192 -j ACCEPT +-A limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-678 +-A limit-1194 -j ACCEPT +-A limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-679 +-A limit-1196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-680 +-A limit-1196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-681 +-A limit-1197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1198 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-682 +-A limit-1198 -m limit --limit 1/second -j LOG +-A limit-1198 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1199 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-683 +-A limit-1199 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-12 -m limit --limit 1/second -j LOG +-A limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-120 -j ACCEPT +-A limit-1200 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-684 +-A limit-1200 -j TEE --gateway fc00::2 +-A limit-1200 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1201 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-685 +-A limit-1201 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1202 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-686 +-A limit-1202 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1203 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-687 +-A limit-1203 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1204 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-688 +-A limit-1204 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1205 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-689 +-A limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-690 +-A limit-1206 -j ACCEPT +-A limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-692 +-A limit-1208 -m limit --limit 1/second -j LOG +-A limit-1208 -j ACCEPT +-A limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-693 +-A limit-1209 -m limit --limit 1/second -j LOG +-A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-694 +-A limit-1210 -j TEE --gateway fc00::2 +-A limit-1210 -j ACCEPT +-A limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-695 +-A limit-1211 -j TEE --gateway fc00::2 +-A limit-1212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-696 +-A limit-1212 -j ACCEPT +-A limit-1214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-698 +-A limit-1214 -j ACCEPT +-A limit-1215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-699 +-A limit-1216 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-700 +-A limit-1216 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1217 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-701 +-A limit-1217 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1218 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-702 +-A limit-1218 -m limit --limit 1/second -j LOG +-A limit-1218 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1219 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-703 +-A limit-1219 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 +-A limit-122 -m limit --limit 1/second -j LOG +-A limit-122 -j ACCEPT +-A limit-1220 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-704 +-A limit-1220 -j TEE --gateway fc00::2 +-A limit-1220 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1221 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-705 +-A limit-1221 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1222 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-706 +-A limit-1222 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-707 +-A limit-1223 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1224 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-708 +-A limit-1224 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1225 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-709 +-A limit-1226 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-710 +-A limit-1226 -j ACCEPT +-A limit-1228 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-712 +-A limit-1228 -m limit --limit 1/second -j LOG +-A limit-1228 -j ACCEPT +-A limit-1229 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-713 +-A limit-1229 -m limit --limit 1/second -j LOG +-A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-123 -m limit --limit 1/second -j LOG +-A limit-1230 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-714 +-A limit-1230 -j TEE --gateway fc00::2 +-A limit-1230 -j ACCEPT +-A limit-1231 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-715 +-A limit-1231 -j TEE --gateway fc00::2 +-A limit-1232 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-716 +-A limit-1232 -j ACCEPT +-A limit-1234 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-718 +-A limit-1234 -j ACCEPT +-A limit-1235 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-719 +-A limit-1236 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-720 +-A limit-1236 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1237 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-721 +-A limit-1237 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1238 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-722 +-A limit-1238 -m limit --limit 1/second -j LOG +-A limit-1238 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1239 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-723 +-A limit-1239 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-124 -j TEE --gateway fc00::2 +-A limit-124 -j ACCEPT +-A limit-1240 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-724 +-A limit-1240 -j TEE --gateway fc00::2 +-A limit-1240 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1241 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-725 +-A limit-1241 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1242 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-726 +-A limit-1242 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1243 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-727 +-A limit-1243 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1244 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-728 +-A limit-1244 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1245 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-729 +-A limit-1246 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-730 +-A limit-1246 -j ACCEPT +-A limit-1248 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-732 +-A limit-1248 -m limit --limit 1/second -j LOG +-A limit-1248 -j ACCEPT +-A limit-1249 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-733 +-A limit-1249 -m limit --limit 1/second -j LOG +-A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-125 -j TEE --gateway fc00::2 +-A limit-1250 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-734 +-A limit-1250 -j TEE --gateway fc00::2 +-A limit-1250 -j ACCEPT +-A limit-1251 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-735 +-A limit-1251 -j TEE --gateway fc00::2 +-A limit-1252 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-736 +-A limit-1252 -j ACCEPT +-A limit-1254 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-738 +-A limit-1254 -j ACCEPT +-A limit-1255 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-739 +-A limit-1256 -m recent --name limit-1256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1256 -m recent --name limit-1256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1257 -m recent --name limit-1257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1257 -m recent --name limit-1257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1258 -m limit --limit 1/second -j LOG +-A limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-126 -j ACCEPT +-A limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1260 -j TEE --gateway fc00::2 +-A limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1265 -m recent --name limit-1265 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1268 -m limit --limit 1/second -j LOG +-A limit-1268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-1270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1270 -j TEE --gateway fc00::2 +-A limit-1270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1272 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1272 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1276 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1276 -j ACCEPT +-A limit-1278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1278 -m limit --limit 1/second -j LOG +-A limit-1278 -j ACCEPT +-A limit-1279 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1279 -m limit --limit 1/second -j LOG +-A limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-128 -j ACCEPT +-A limit-1280 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1280 -j TEE --gateway fc00::2 +-A limit-1280 -j ACCEPT +-A limit-1281 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1281 -j TEE --gateway fc00::2 +-A limit-1282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1282 -j ACCEPT +-A limit-1284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1284 -j ACCEPT +-A limit-1285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1288 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1288 -m limit --limit 1/second -j LOG +-A limit-1288 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1290 -j TEE --gateway fc00::2 +-A limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1296 -j ACCEPT +-A limit-1298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1298 -m limit --limit 1/second -j LOG +-A limit-1298 -j ACCEPT +-A limit-1299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1299 -m limit --limit 1/second -j LOG +-A limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1300 -j TEE --gateway fc00::2 +-A limit-1300 -j ACCEPT +-A limit-1301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1301 -j TEE --gateway fc00::2 +-A limit-1302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1302 -j ACCEPT +-A limit-1304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1304 -j ACCEPT +-A limit-1305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1307 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1308 -m limit --limit 1/second -j LOG +-A limit-1308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1310 -j TEE --gateway fc00::2 +-A limit-1310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1311 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1312 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1312 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1313 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1313 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1314 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1314 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1315 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1316 -j ACCEPT +-A limit-1318 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1318 -m limit --limit 1/second -j LOG +-A limit-1318 -j ACCEPT +-A limit-1319 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1319 -m limit --limit 1/second -j LOG +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-132 -m limit --limit 1/second -j LOG +-A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1320 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1320 -j TEE --gateway fc00::2 +-A limit-1320 -j ACCEPT +-A limit-1321 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1321 -j TEE --gateway fc00::2 +-A limit-1322 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1322 -j ACCEPT +-A limit-1324 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1324 -j ACCEPT +-A limit-1325 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1326 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1326 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1327 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1327 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1328 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1328 -m limit --limit 1/second -j LOG +-A limit-1328 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1329 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1329 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1330 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1330 -j TEE --gateway fc00::2 +-A limit-1330 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1331 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1331 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1332 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1332 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1333 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1333 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1334 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1334 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1335 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-1336 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1336 -j ACCEPT +-A limit-1338 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1338 -m limit --limit 1/second -j LOG +-A limit-1338 -j ACCEPT +-A limit-1339 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1339 -m limit --limit 1/second -j LOG +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-134 -j TEE --gateway fc00::2 +-A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1340 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1340 -j TEE --gateway fc00::2 +-A limit-1340 -j ACCEPT +-A limit-1341 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1341 -j TEE --gateway fc00::2 +-A limit-1342 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1342 -j ACCEPT +-A limit-1344 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1344 -j ACCEPT +-A limit-1345 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1346 -m recent --name limit-1346 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-740 +-A limit-1346 -m recent --name limit-1346 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1347 -m recent --name limit-1347 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-741 +-A limit-1347 -m recent --name limit-1347 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1348 -m recent --name limit-1348 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-742 +-A limit-1348 -m limit --limit 1/second -j LOG +-A limit-1348 -m recent --name limit-1348 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1349 -m recent --name limit-1349 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-743 +-A limit-1349 -m recent --name limit-1349 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-744 +-A limit-1350 -j TEE --gateway fc00::2 +-A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-745 +-A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-746 +-A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-747 +-A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-748 +-A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-749 +-A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-750 +-A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-751 +-A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-752 +-A limit-1358 -m limit --limit 1/second -j LOG +-A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-753 +-A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-754 +-A limit-1360 -j TEE --gateway fc00::2 +-A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-755 +-A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-756 +-A limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1363 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-757 +-A limit-1363 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-758 +-A limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1365 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-759 +-A limit-1366 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-760 +-A limit-1366 -j ACCEPT +-A limit-1368 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-762 +-A limit-1368 -m limit --limit 1/second -j LOG +-A limit-1368 -j ACCEPT +-A limit-1369 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-763 +-A limit-1369 -m limit --limit 1/second -j LOG +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-764 +-A limit-1370 -j TEE --gateway fc00::2 +-A limit-1370 -j ACCEPT +-A limit-1371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-765 +-A limit-1371 -j TEE --gateway fc00::2 +-A limit-1372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-766 +-A limit-1372 -j ACCEPT +-A limit-1374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-768 +-A limit-1374 -j ACCEPT +-A limit-1375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-769 +-A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-770 +-A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-771 +-A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-772 +-A limit-1378 -m limit --limit 1/second -j LOG +-A limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1379 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-773 +-A limit-1379 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1380 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-774 +-A limit-1380 -j TEE --gateway fc00::2 +-A limit-1380 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1381 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-775 +-A limit-1381 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-776 +-A limit-1382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-777 +-A limit-1383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-778 +-A limit-1384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-779 +-A limit-1386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-780 +-A limit-1386 -j ACCEPT +-A limit-1388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-782 +-A limit-1388 -m limit --limit 1/second -j LOG +-A limit-1388 -j ACCEPT +-A limit-1389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-783 +-A limit-1389 -m limit --limit 1/second -j LOG +-A limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-1390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-784 +-A limit-1390 -j TEE --gateway fc00::2 +-A limit-1390 -j ACCEPT +-A limit-1391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-785 +-A limit-1391 -j TEE --gateway fc00::2 +-A limit-1392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-786 +-A limit-1392 -j ACCEPT +-A limit-1394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-788 +-A limit-1394 -j ACCEPT +-A limit-1395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-789 +-A limit-1396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-790 +-A limit-1396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-791 +-A limit-1397 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-792 +-A limit-1398 -m limit --limit 1/second -j LOG +-A limit-1398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-793 +-A limit-1399 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-14 -j TEE --gateway fc00::2 +-A limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-140 -j ACCEPT +-A limit-1400 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-794 +-A limit-1400 -j TEE --gateway fc00::2 +-A limit-1400 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1401 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-795 +-A limit-1401 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1402 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-796 +-A limit-1402 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1403 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-797 +-A limit-1403 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1404 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-798 +-A limit-1404 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1405 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-799 +-A limit-1406 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-800 +-A limit-1406 -j ACCEPT +-A limit-1408 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-802 +-A limit-1408 -m limit --limit 1/second -j LOG +-A limit-1408 -j ACCEPT +-A limit-1409 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-803 +-A limit-1409 -m limit --limit 1/second -j LOG +-A limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-1410 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-804 +-A limit-1410 -j TEE --gateway fc00::2 +-A limit-1410 -j ACCEPT +-A limit-1411 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-805 +-A limit-1411 -j TEE --gateway fc00::2 +-A limit-1412 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-806 +-A limit-1412 -j ACCEPT +-A limit-1414 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-808 +-A limit-1414 -j ACCEPT +-A limit-1415 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-809 +-A limit-1416 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-810 +-A limit-1416 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1417 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-811 +-A limit-1417 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1418 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-812 +-A limit-1418 -m limit --limit 1/second -j LOG +-A limit-1418 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1419 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-813 +-A limit-1419 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-142 -m limit --limit 1/second -j LOG +-A limit-142 -j ACCEPT +-A limit-1420 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-814 +-A limit-1420 -j TEE --gateway fc00::2 +-A limit-1420 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1421 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-815 +-A limit-1421 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1422 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-816 +-A limit-1422 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1423 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-817 +-A limit-1423 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1424 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-818 +-A limit-1424 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1425 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-819 +-A limit-1426 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-820 +-A limit-1426 -j ACCEPT +-A limit-1428 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-822 +-A limit-1428 -m limit --limit 1/second -j LOG +-A limit-1428 -j ACCEPT +-A limit-1429 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-823 +-A limit-1429 -m limit --limit 1/second -j LOG +-A limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-143 -m limit --limit 1/second -j LOG +-A limit-1430 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-824 +-A limit-1430 -j TEE --gateway fc00::2 +-A limit-1430 -j ACCEPT +-A limit-1431 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-825 +-A limit-1431 -j TEE --gateway fc00::2 +-A limit-1432 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-826 +-A limit-1432 -j ACCEPT +-A limit-1434 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-828 +-A limit-1434 -j ACCEPT +-A limit-1435 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-829 +-A limit-1436 -m recent --name limit-1436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1436 -m recent --name limit-1436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1437 -m recent --name limit-1437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1437 -m recent --name limit-1437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1438 -m recent --name limit-1438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1438 -m limit --limit 1/second -j LOG +-A limit-1438 -m recent --name limit-1438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1439 -m recent --name limit-1439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1439 -m recent --name limit-1439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-144 -j TEE --gateway fc00::2 +-A limit-144 -j ACCEPT +-A limit-1440 -m recent --name limit-1440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1440 -j TEE --gateway fc00::2 +-A limit-1440 -m recent --name limit-1440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1441 -m recent --name limit-1441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1441 -m recent --name limit-1441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1442 -m recent --name limit-1442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1442 -m recent --name limit-1442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1443 -m recent --name limit-1443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1443 -m recent --name limit-1443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1444 -m recent --name limit-1444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1444 -m recent --name limit-1444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1445 -m recent --name limit-1445 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1447 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1447 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1448 -m limit --limit 1/second -j LOG +-A limit-1448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-145 -j TEE --gateway fc00::2 +-A limit-1450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1450 -j TEE --gateway fc00::2 +-A limit-1450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1455 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1456 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1456 -j ACCEPT +-A limit-1458 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1458 -m limit --limit 1/second -j LOG +-A limit-1458 -j ACCEPT +-A limit-1459 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1459 -m limit --limit 1/second -j LOG +-A limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-56 +-A limit-146 -j ACCEPT +-A limit-1460 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1460 -j TEE --gateway fc00::2 +-A limit-1460 -j ACCEPT +-A limit-1461 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1461 -j TEE --gateway fc00::2 +-A limit-1462 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1462 -j ACCEPT +-A limit-1464 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1464 -j ACCEPT +-A limit-1465 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1468 -m limit --limit 1/second -j LOG +-A limit-1468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-1470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1470 -j TEE --gateway fc00::2 +-A limit-1470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1475 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1476 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1476 -j ACCEPT +-A limit-1478 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1478 -m limit --limit 1/second -j LOG +-A limit-1478 -j ACCEPT +-A limit-1479 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1479 -m limit --limit 1/second -j LOG +-A limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-148 -j ACCEPT +-A limit-1480 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1480 -j TEE --gateway fc00::2 +-A limit-1480 -j ACCEPT +-A limit-1481 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1481 -j TEE --gateway fc00::2 +-A limit-1482 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1482 -j ACCEPT +-A limit-1484 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1484 -j ACCEPT +-A limit-1485 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1486 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1486 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1487 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1487 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1488 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1488 -m limit --limit 1/second -j LOG +-A limit-1488 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1489 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1489 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-1490 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1490 -j TEE --gateway fc00::2 +-A limit-1490 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1491 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1491 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1492 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1492 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1493 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1493 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1494 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1494 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1495 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1496 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1496 -j ACCEPT +-A limit-1498 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1498 -m limit --limit 1/second -j LOG +-A limit-1498 -j ACCEPT +-A limit-1499 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1499 -m limit --limit 1/second -j LOG +-A limit-15 -m recent --name limit-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-15 -m recent --name limit-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-150 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-60 +-A limit-150 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1500 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1500 -j TEE --gateway fc00::2 +-A limit-1500 -j ACCEPT +-A limit-1501 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1501 -j TEE --gateway fc00::2 +-A limit-1502 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1502 -j ACCEPT +-A limit-1504 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1504 -j ACCEPT +-A limit-1505 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1506 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1506 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1507 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1507 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1508 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1508 -m limit --limit 1/second -j LOG +-A limit-1508 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1509 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1509 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-61 +-A limit-151 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1510 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1510 -j TEE --gateway fc00::2 +-A limit-1510 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1511 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1511 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1512 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1512 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1513 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1513 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1516 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1516 -j ACCEPT +-A limit-1518 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1518 -m limit --limit 1/second -j LOG +-A limit-1518 -j ACCEPT +-A limit-1519 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1519 -m limit --limit 1/second -j LOG +-A limit-152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-62 +-A limit-152 -m limit --limit 1/second -j LOG +-A limit-152 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1520 -j TEE --gateway fc00::2 +-A limit-1520 -j ACCEPT +-A limit-1521 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1521 -j TEE --gateway fc00::2 +-A limit-1522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1522 -j ACCEPT +-A limit-1524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1524 -j ACCEPT +-A limit-1525 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1526 -m recent --name limit-1526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-830 +-A limit-1526 -m recent --name limit-1526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1527 -m recent --name limit-1527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-831 +-A limit-1527 -m recent --name limit-1527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1528 -m recent --name limit-1528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-832 +-A limit-1528 -m limit --limit 1/second -j LOG +-A limit-1528 -m recent --name limit-1528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1529 -m recent --name limit-1529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-833 +-A limit-1529 -m recent --name limit-1529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-63 +-A limit-153 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1530 -m recent --name limit-1530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-834 +-A limit-1530 -j TEE --gateway fc00::2 +-A limit-1530 -m recent --name limit-1530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1531 -m recent --name limit-1531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-835 +-A limit-1531 -m recent --name limit-1531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1532 -m recent --name limit-1532 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-836 +-A limit-1532 -m recent --name limit-1532 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1533 -m recent --name limit-1533 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-837 +-A limit-1533 -m recent --name limit-1533 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1534 -m recent --name limit-1534 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-838 +-A limit-1534 -m recent --name limit-1534 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1535 -m recent --name limit-1535 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-839 +-A limit-1536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-840 +-A limit-1536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-841 +-A limit-1537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-842 +-A limit-1538 -m limit --limit 1/second -j LOG +-A limit-1538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-843 +-A limit-1539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-64 +-A limit-154 -j TEE --gateway fc00::2 +-A limit-154 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-844 +-A limit-1540 -j TEE --gateway fc00::2 +-A limit-1540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-845 +-A limit-1541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-846 +-A limit-1542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-847 +-A limit-1543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1544 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-848 +-A limit-1544 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1545 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-849 +-A limit-1546 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-850 +-A limit-1546 -j ACCEPT +-A limit-1548 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-852 +-A limit-1548 -m limit --limit 1/second -j LOG +-A limit-1548 -j ACCEPT +-A limit-1549 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-853 +-A limit-1549 -m limit --limit 1/second -j LOG +-A limit-155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-65 +-A limit-155 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1550 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-854 +-A limit-1550 -j TEE --gateway fc00::2 +-A limit-1550 -j ACCEPT +-A limit-1551 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-855 +-A limit-1551 -j TEE --gateway fc00::2 +-A limit-1552 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-856 +-A limit-1552 -j ACCEPT +-A limit-1554 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-858 +-A limit-1554 -j ACCEPT +-A limit-1555 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-859 +-A limit-1556 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-860 +-A limit-1556 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1557 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-861 +-A limit-1557 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1558 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-862 +-A limit-1558 -m limit --limit 1/second -j LOG +-A limit-1558 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1559 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-863 +-A limit-1559 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-66 +-A limit-156 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1560 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-864 +-A limit-1560 -j TEE --gateway fc00::2 +-A limit-1560 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1561 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-865 +-A limit-1561 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1562 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-866 +-A limit-1562 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1563 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-867 +-A limit-1563 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1564 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-868 +-A limit-1564 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1565 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-869 +-A limit-1566 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-870 +-A limit-1566 -j ACCEPT +-A limit-1568 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-872 +-A limit-1568 -m limit --limit 1/second -j LOG +-A limit-1568 -j ACCEPT +-A limit-1569 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-873 +-A limit-1569 -m limit --limit 1/second -j LOG +-A limit-157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-67 +-A limit-157 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1570 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-874 +-A limit-1570 -j TEE --gateway fc00::2 +-A limit-1570 -j ACCEPT +-A limit-1571 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-875 +-A limit-1571 -j TEE --gateway fc00::2 +-A limit-1572 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-876 +-A limit-1572 -j ACCEPT +-A limit-1574 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-878 +-A limit-1574 -j ACCEPT +-A limit-1575 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-879 +-A limit-1576 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-880 +-A limit-1576 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1577 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-881 +-A limit-1577 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1578 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-882 +-A limit-1578 -m limit --limit 1/second -j LOG +-A limit-1578 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1579 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-883 +-A limit-1579 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-68 +-A limit-158 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1580 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-884 +-A limit-1580 -j TEE --gateway fc00::2 +-A limit-1580 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1581 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-885 +-A limit-1581 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1582 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-886 +-A limit-1582 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1583 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-887 +-A limit-1583 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1584 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-888 +-A limit-1584 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1585 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-889 +-A limit-1586 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-890 +-A limit-1586 -j ACCEPT +-A limit-1588 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-892 +-A limit-1588 -m limit --limit 1/second -j LOG +-A limit-1588 -j ACCEPT +-A limit-1589 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-893 +-A limit-1589 -m limit --limit 1/second -j LOG +-A limit-159 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-69 +-A limit-1590 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-894 +-A limit-1590 -j TEE --gateway fc00::2 +-A limit-1590 -j ACCEPT +-A limit-1591 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-895 +-A limit-1591 -j TEE --gateway fc00::2 +-A limit-1592 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-896 +-A limit-1592 -j ACCEPT +-A limit-1594 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-898 +-A limit-1594 -j ACCEPT +-A limit-1595 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-899 +-A limit-1596 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-900 +-A limit-1596 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1597 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-901 +-A limit-1597 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1598 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-902 +-A limit-1598 -m limit --limit 1/second -j LOG +-A limit-1598 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1599 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-903 +-A limit-1599 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-16 -m recent --name limit-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-16 -m recent --name limit-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-160 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-70 +-A limit-160 -j ACCEPT +-A limit-1600 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-904 +-A limit-1600 -j TEE --gateway fc00::2 +-A limit-1600 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1601 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-905 +-A limit-1601 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1602 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-906 +-A limit-1602 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1603 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-907 +-A limit-1603 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1604 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-908 +-A limit-1604 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1605 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-909 +-A limit-1606 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-910 +-A limit-1606 -j ACCEPT +-A limit-1608 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-912 +-A limit-1608 -m limit --limit 1/second -j LOG +-A limit-1608 -j ACCEPT +-A limit-1609 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-913 +-A limit-1609 -m limit --limit 1/second -j LOG +-A limit-161 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-71 +-A limit-1610 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-914 +-A limit-1610 -j TEE --gateway fc00::2 +-A limit-1610 -j ACCEPT +-A limit-1611 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-915 +-A limit-1611 -j TEE --gateway fc00::2 +-A limit-1612 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-916 +-A limit-1612 -j ACCEPT +-A limit-1614 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-918 +-A limit-1614 -j ACCEPT +-A limit-1615 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-919 +-A limit-1616 -m recent --name limit-1616 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-920 +-A limit-1616 -m recent --name limit-1616 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1617 -m recent --name limit-1617 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-921 +-A limit-1617 -m recent --name limit-1617 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1618 -m recent --name limit-1618 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-922 +-A limit-1618 -m limit --limit 1/second -j LOG +-A limit-1618 -m recent --name limit-1618 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1619 -m recent --name limit-1619 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-923 +-A limit-1619 -m recent --name limit-1619 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-72 +-A limit-162 -m limit --limit 1/second -j LOG +-A limit-162 -j ACCEPT +-A limit-1620 -m recent --name limit-1620 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-924 +-A limit-1620 -j TEE --gateway fc00::2 +-A limit-1620 -m recent --name limit-1620 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1621 -m recent --name limit-1621 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-925 +-A limit-1621 -m recent --name limit-1621 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1622 -m recent --name limit-1622 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-926 +-A limit-1622 -m recent --name limit-1622 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1623 -m recent --name limit-1623 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-927 +-A limit-1623 -m recent --name limit-1623 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1624 -m recent --name limit-1624 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-928 +-A limit-1624 -m recent --name limit-1624 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1625 -m recent --name limit-1625 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-929 +-A limit-1626 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-930 +-A limit-1626 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1627 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-931 +-A limit-1627 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1628 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-932 +-A limit-1628 -m limit --limit 1/second -j LOG +-A limit-1628 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1629 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-933 +-A limit-1629 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-73 +-A limit-163 -m limit --limit 1/second -j LOG +-A limit-1630 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-934 +-A limit-1630 -j TEE --gateway fc00::2 +-A limit-1630 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1631 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-935 +-A limit-1631 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1632 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-936 +-A limit-1632 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1633 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-937 +-A limit-1633 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-938 +-A limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1635 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-939 +-A limit-1636 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-940 +-A limit-1636 -j ACCEPT +-A limit-1638 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-942 +-A limit-1638 -m limit --limit 1/second -j LOG +-A limit-1638 -j ACCEPT +-A limit-1639 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-943 +-A limit-1639 -m limit --limit 1/second -j LOG +-A limit-164 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-74 +-A limit-164 -j TEE --gateway fc00::2 +-A limit-164 -j ACCEPT +-A limit-1640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-944 +-A limit-1640 -j TEE --gateway fc00::2 +-A limit-1640 -j ACCEPT +-A limit-1641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-945 +-A limit-1641 -j TEE --gateway fc00::2 +-A limit-1642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-946 +-A limit-1642 -j ACCEPT +-A limit-1644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-948 +-A limit-1644 -j ACCEPT +-A limit-1645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-949 +-A limit-1646 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-950 +-A limit-1646 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1647 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-951 +-A limit-1647 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1648 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-952 +-A limit-1648 -m limit --limit 1/second -j LOG +-A limit-1648 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1649 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-953 +-A limit-1649 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-75 +-A limit-165 -j TEE --gateway fc00::2 +-A limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-954 +-A limit-1650 -j TEE --gateway fc00::2 +-A limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-955 +-A limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-956 +-A limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-957 +-A limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-958 +-A limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-959 +-A limit-1656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-960 +-A limit-1656 -j ACCEPT +-A limit-1658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-962 +-A limit-1658 -m limit --limit 1/second -j LOG +-A limit-1658 -j ACCEPT +-A limit-1659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-963 +-A limit-1659 -m limit --limit 1/second -j LOG +-A limit-166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-76 +-A limit-166 -j ACCEPT +-A limit-1660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-964 +-A limit-1660 -j TEE --gateway fc00::2 +-A limit-1660 -j ACCEPT +-A limit-1661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-965 +-A limit-1661 -j TEE --gateway fc00::2 +-A limit-1662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-966 +-A limit-1662 -j ACCEPT +-A limit-1664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-968 +-A limit-1664 -j ACCEPT +-A limit-1665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-969 +-A limit-1666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-970 +-A limit-1666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-971 +-A limit-1667 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-972 +-A limit-1668 -m limit --limit 1/second -j LOG +-A limit-1668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-973 +-A limit-1669 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-167 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-77 +-A limit-1670 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-974 +-A limit-1670 -j TEE --gateway fc00::2 +-A limit-1670 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1671 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-975 +-A limit-1671 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1672 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-976 +-A limit-1672 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1673 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-977 +-A limit-1673 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1674 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-978 +-A limit-1674 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1675 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-979 +-A limit-1676 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-980 +-A limit-1676 -j ACCEPT +-A limit-1678 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-982 +-A limit-1678 -m limit --limit 1/second -j LOG +-A limit-1678 -j ACCEPT +-A limit-1679 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-983 +-A limit-1679 -m limit --limit 1/second -j LOG +-A limit-168 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-78 +-A limit-168 -j ACCEPT +-A limit-1680 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-984 +-A limit-1680 -j TEE --gateway fc00::2 +-A limit-1680 -j ACCEPT +-A limit-1681 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-985 +-A limit-1681 -j TEE --gateway fc00::2 +-A limit-1682 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-986 +-A limit-1682 -j ACCEPT +-A limit-1684 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-988 +-A limit-1684 -j ACCEPT +-A limit-1685 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-989 +-A limit-1686 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-990 +-A limit-1686 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1687 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-991 +-A limit-1687 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1688 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-992 +-A limit-1688 -m limit --limit 1/second -j LOG +-A limit-1688 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1689 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-993 +-A limit-1689 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-169 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-79 +-A limit-1690 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-994 +-A limit-1690 -j TEE --gateway fc00::2 +-A limit-1690 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1691 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-995 +-A limit-1691 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1692 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-996 +-A limit-1692 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1693 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-997 +-A limit-1693 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1694 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-998 +-A limit-1694 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1695 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-999 +-A limit-1696 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1000 +-A limit-1696 -j ACCEPT +-A limit-1698 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1002 +-A limit-1698 -m limit --limit 1/second -j LOG +-A limit-1698 -j ACCEPT +-A limit-1699 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1003 +-A limit-1699 -m limit --limit 1/second -j LOG +-A limit-17 -m recent --name limit-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-17 -m recent --name limit-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-80 +-A limit-170 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1700 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1004 +-A limit-1700 -j TEE --gateway fc00::2 +-A limit-1700 -j ACCEPT +-A limit-1701 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1005 +-A limit-1701 -j TEE --gateway fc00::2 +-A limit-1702 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1006 +-A limit-1702 -j ACCEPT +-A limit-1704 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1008 +-A limit-1704 -j ACCEPT +-A limit-1705 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1009 +-A limit-1706 -m recent --name limit-1706 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1706 -m recent --name limit-1706 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1707 -m recent --name limit-1707 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1707 -m recent --name limit-1707 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1708 -m recent --name limit-1708 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1708 -m limit --limit 1/second -j LOG +-A limit-1708 -m recent --name limit-1708 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1709 -m recent --name limit-1709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1709 -m recent --name limit-1709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-81 +-A limit-171 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1710 -m recent --name limit-1710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1710 -j TEE --gateway fc00::2 +-A limit-1710 -m recent --name limit-1710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1711 -m recent --name limit-1711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1711 -m recent --name limit-1711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1712 -m recent --name limit-1712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1712 -m recent --name limit-1712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1713 -m recent --name limit-1713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1713 -m recent --name limit-1713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1714 -m recent --name limit-1714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1714 -m recent --name limit-1714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1715 -m recent --name limit-1715 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1718 -m limit --limit 1/second -j LOG +-A limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-82 +-A limit-172 -m limit --limit 1/second -j LOG +-A limit-172 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1720 -j TEE --gateway fc00::2 +-A limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1725 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1726 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1726 -j ACCEPT +-A limit-1728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1728 -m limit --limit 1/second -j LOG +-A limit-1728 -j ACCEPT +-A limit-1729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1729 -m limit --limit 1/second -j LOG +-A limit-173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-83 +-A limit-173 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-1730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1730 -j TEE --gateway fc00::2 +-A limit-1730 -j ACCEPT +-A limit-1731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1731 -j TEE --gateway fc00::2 +-A limit-1732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1732 -j ACCEPT +-A limit-1734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1734 -j ACCEPT +-A limit-1735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1738 -m limit --limit 1/second -j LOG +-A limit-1738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-84 +-A limit-174 -j TEE --gateway fc00::2 +-A limit-174 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1740 -j TEE --gateway fc00::2 +-A limit-1740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-1746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1746 -j ACCEPT +-A limit-1748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1748 -m limit --limit 1/second -j LOG +-A limit-1748 -j ACCEPT +-A limit-1749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1749 -m limit --limit 1/second -j LOG +-A limit-175 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-85 +-A limit-175 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1750 -j TEE --gateway fc00::2 +-A limit-1750 -j ACCEPT +-A limit-1751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1751 -j TEE --gateway fc00::2 +-A limit-1752 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1752 -j ACCEPT +-A limit-1754 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1754 -j ACCEPT +-A limit-1755 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1756 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1757 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1758 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1758 -m limit --limit 1/second -j LOG +-A limit-1758 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1759 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1759 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-86 +-A limit-176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1760 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1760 -j TEE --gateway fc00::2 +-A limit-1760 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1761 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1761 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1762 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1762 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1763 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1763 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1764 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1764 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1765 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1766 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1766 -j ACCEPT +-A limit-1768 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1768 -m limit --limit 1/second -j LOG +-A limit-1768 -j ACCEPT +-A limit-1769 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1769 -m limit --limit 1/second -j LOG +-A limit-177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-87 +-A limit-177 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1770 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1770 -j TEE --gateway fc00::2 +-A limit-1770 -j ACCEPT +-A limit-1771 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1771 -j TEE --gateway fc00::2 +-A limit-1772 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1772 -j ACCEPT +-A limit-1774 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1774 -j ACCEPT +-A limit-1775 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1776 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1776 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1777 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1777 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1778 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1778 -m limit --limit 1/second -j LOG +-A limit-1778 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1779 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1779 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-88 +-A limit-178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1780 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1780 -j TEE --gateway fc00::2 +-A limit-1780 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1781 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1781 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1782 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1782 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1783 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1783 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1784 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1784 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1785 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-1786 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1786 -j ACCEPT +-A limit-1788 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1788 -m limit --limit 1/second -j LOG +-A limit-1788 -j ACCEPT +-A limit-1789 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1789 -m limit --limit 1/second -j LOG +-A limit-179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-89 +-A limit-1790 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1790 -j TEE --gateway fc00::2 +-A limit-1790 -j ACCEPT +-A limit-1791 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1791 -j TEE --gateway fc00::2 +-A limit-1792 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1792 -j ACCEPT +-A limit-1794 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1794 -j ACCEPT +-A limit-1795 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-1796 -m recent --name limit-1796 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1010 +-A limit-1796 -m recent --name limit-1796 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1797 -m recent --name limit-1797 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1011 +-A limit-1797 -m recent --name limit-1797 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1798 -m recent --name limit-1798 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1012 +-A limit-1798 -m limit --limit 1/second -j LOG +-A limit-1798 -m recent --name limit-1798 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1799 -m recent --name limit-1799 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1013 +-A limit-1799 -m recent --name limit-1799 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-18 -m recent --name limit-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-18 -m recent --name limit-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-180 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-90 +-A limit-180 -j ACCEPT +-A limit-1800 -m recent --name limit-1800 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1014 +-A limit-1800 -j TEE --gateway fc00::2 +-A limit-1800 -m recent --name limit-1800 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1801 -m recent --name limit-1801 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1015 +-A limit-1801 -m recent --name limit-1801 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1802 -m recent --name limit-1802 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1016 +-A limit-1802 -m recent --name limit-1802 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1803 -m recent --name limit-1803 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1017 +-A limit-1803 -m recent --name limit-1803 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1804 -m recent --name limit-1804 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1018 +-A limit-1804 -m recent --name limit-1804 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1805 -m recent --name limit-1805 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1019 +-A limit-1806 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1020 +-A limit-1806 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1807 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1021 +-A limit-1807 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1808 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1022 +-A limit-1808 -m limit --limit 1/second -j LOG +-A limit-1808 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1809 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1023 +-A limit-1809 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-181 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-91 +-A limit-1810 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1024 +-A limit-1810 -j TEE --gateway fc00::2 +-A limit-1810 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1811 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1025 +-A limit-1811 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1812 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1026 +-A limit-1812 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1813 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1027 +-A limit-1813 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1814 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1028 +-A limit-1814 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1815 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1029 +-A limit-1816 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1030 +-A limit-1816 -j ACCEPT +-A limit-1818 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1032 +-A limit-1818 -m limit --limit 1/second -j LOG +-A limit-1818 -j ACCEPT +-A limit-1819 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1033 +-A limit-1819 -m limit --limit 1/second -j LOG +-A limit-182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-92 +-A limit-182 -m limit --limit 1/second -j LOG +-A limit-182 -j ACCEPT +-A limit-1820 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1034 +-A limit-1820 -j TEE --gateway fc00::2 +-A limit-1820 -j ACCEPT +-A limit-1821 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1035 +-A limit-1821 -j TEE --gateway fc00::2 +-A limit-1822 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1036 +-A limit-1822 -j ACCEPT +-A limit-1824 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1038 +-A limit-1824 -j ACCEPT +-A limit-1825 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1039 +-A limit-1826 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1040 +-A limit-1826 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1827 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1041 +-A limit-1827 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1828 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1042 +-A limit-1828 -m limit --limit 1/second -j LOG +-A limit-1828 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1829 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1043 +-A limit-1829 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-183 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-93 +-A limit-183 -m limit --limit 1/second -j LOG +-A limit-1830 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1044 +-A limit-1830 -j TEE --gateway fc00::2 +-A limit-1830 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1831 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1045 +-A limit-1831 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1832 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1046 +-A limit-1832 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1833 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1047 +-A limit-1833 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1834 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1048 +-A limit-1834 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1835 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1049 +-A limit-1836 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1050 +-A limit-1836 -j ACCEPT +-A limit-1838 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1052 +-A limit-1838 -m limit --limit 1/second -j LOG +-A limit-1838 -j ACCEPT +-A limit-1839 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1053 +-A limit-1839 -m limit --limit 1/second -j LOG +-A limit-184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-94 +-A limit-184 -j TEE --gateway fc00::2 +-A limit-184 -j ACCEPT +-A limit-1840 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1054 +-A limit-1840 -j TEE --gateway fc00::2 +-A limit-1840 -j ACCEPT +-A limit-1841 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1055 +-A limit-1841 -j TEE --gateway fc00::2 +-A limit-1842 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 +-A limit-1842 -j ACCEPT +-A limit-1844 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 +-A limit-1844 -j ACCEPT +-A limit-1845 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 +-A limit-1846 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1060 +-A limit-1846 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1847 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1061 +-A limit-1847 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1848 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1062 +-A limit-1848 -m limit --limit 1/second -j LOG +-A limit-1848 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1849 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1063 +-A limit-1849 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-95 +-A limit-185 -j TEE --gateway fc00::2 +-A limit-1850 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1064 +-A limit-1850 -j TEE --gateway fc00::2 +-A limit-1850 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1851 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1065 +-A limit-1851 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1852 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1066 +-A limit-1852 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1853 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1067 +-A limit-1853 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-1854 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1068 +-A limit-1854 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-1855 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1069 +-A limit-1856 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1070 +-A limit-1856 -j ACCEPT +-A limit-1858 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 +-A limit-1858 -m limit --limit 1/second -j LOG +-A limit-1858 -j ACCEPT +-A limit-1859 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 +-A limit-1859 -m limit --limit 1/second -j LOG +-A limit-186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-96 +-A limit-186 -j ACCEPT +-A limit-1860 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 +-A limit-1860 -j TEE --gateway fc00::2 +-A limit-1860 -j ACCEPT +-A limit-1861 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 +-A limit-1861 -j TEE --gateway fc00::2 +-A limit-1862 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 +-A limit-1862 -j ACCEPT +-A limit-1864 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 +-A limit-1864 -j ACCEPT +-A limit-1865 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 +-A limit-1866 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1080 +-A limit-1866 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1867 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1081 +-A limit-1867 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1868 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1082 +-A limit-1868 -m limit --limit 1/second -j LOG +-A limit-1868 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1869 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1083 +-A limit-1869 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-187 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-97 +-A limit-1870 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1084 +-A limit-1870 -j TEE --gateway fc00::2 +-A limit-1870 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1871 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1085 +-A limit-1871 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-1872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1086 +-A limit-1872 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1087 +-A limit-1873 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-1874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1088 +-A limit-1874 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-1875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1089 +-A limit-1876 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 +-A limit-1876 -j ACCEPT +-A limit-1878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 +-A limit-1878 -m limit --limit 1/second -j LOG +-A limit-1878 -j ACCEPT +-A limit-1879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 +-A limit-1879 -m limit --limit 1/second -j LOG +-A limit-188 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-98 +-A limit-188 -j ACCEPT +-A limit-1880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 +-A limit-1880 -j TEE --gateway fc00::2 +-A limit-1880 -j ACCEPT +-A limit-1881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 +-A limit-1881 -j TEE --gateway fc00::2 +-A limit-1882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1096 +-A limit-1882 -j ACCEPT +-A limit-1884 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1098 +-A limit-1884 -j ACCEPT +-A limit-1885 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1099 +-A limit-1886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1886 -j ACCEPT +-A limit-1886 -m limit --limit 1/second -j LOG +-A limit-1886 -j DROP +-A limit-1887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1887 -j RETURN +-A limit-1887 -m limit --limit 1/second -j LOG +-A limit-1887 -j DROP +-A limit-1888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1888 -j logaccept-33 +-A limit-1888 -m limit --limit 1/second -j LOG +-A limit-1888 -j DROP +-A limit-1889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1889 -j logaccept-34 +-A limit-1889 -m limit --limit 1/second -j LOG +-A limit-1889 -j DROP +-A limit-189 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-99 +-A limit-1890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1890 -j ACCEPT +-A limit-1890 -m limit --limit 1/second -j LOG +-A limit-1890 -j DROP +-A limit-1891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1891 -j logaccept-35 +-A limit-1891 -m limit --limit 1/second -j LOG +-A limit-1891 -j DROP +-A limit-1892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1892 -j ACCEPT +-A limit-1892 -j DROP +-A limit-1893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1893 -j RETURN +-A limit-1893 -j DROP +-A limit-1894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1894 -j logaccept-36 +-A limit-1894 -j DROP +-A limit-1895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1895 -j logaccept-37 +-A limit-1895 -j DROP +-A limit-1896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1896 -j ACCEPT +-A limit-1896 -j DROP +-A limit-1897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1897 -j logaccept-38 +-A limit-1897 -j DROP +-A limit-1898 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1898 -j ACCEPT +-A limit-1898 -m limit --limit 1/second -j LOG +-A limit-1898 -j DROP +-A limit-1899 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1899 -j RETURN +-A limit-1899 -m limit --limit 1/second -j LOG +-A limit-1899 -j DROP +-A limit-19 -m recent --name limit-19 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-190 -m recent --name limit-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-100 +-A limit-190 -m recent --name limit-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1900 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1900 -j logaccept-39 +-A limit-1900 -m limit --limit 1/second -j LOG +-A limit-1900 -j DROP +-A limit-1901 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1901 -j logaccept-40 +-A limit-1901 -m limit --limit 1/second -j LOG +-A limit-1901 -j DROP +-A limit-1902 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1902 -j ACCEPT +-A limit-1902 -m limit --limit 1/second -j LOG +-A limit-1902 -j DROP +-A limit-1903 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1903 -j logaccept-41 +-A limit-1903 -m limit --limit 1/second -j LOG +-A limit-1903 -j DROP +-A limit-1904 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1904 -j ACCEPT +-A limit-1904 -j TEE --gateway fc00::2 +-A limit-1904 -j DROP +-A limit-1905 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1905 -j RETURN +-A limit-1905 -j TEE --gateway fc00::2 +-A limit-1905 -j DROP +-A limit-1906 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1906 -j logaccept-42 +-A limit-1906 -j TEE --gateway fc00::2 +-A limit-1906 -j DROP +-A limit-1907 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1907 -j logaccept-43 +-A limit-1907 -j TEE --gateway fc00::2 +-A limit-1907 -j DROP +-A limit-1908 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1908 -j ACCEPT +-A limit-1908 -j TEE --gateway fc00::2 +-A limit-1908 -j DROP +-A limit-1909 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1909 -j logaccept-44 +-A limit-1909 -j TEE --gateway fc00::2 +-A limit-1909 -j DROP +-A limit-191 -m recent --name limit-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-101 +-A limit-191 -m recent --name limit-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1910 -j ACCEPT +-A limit-1910 -j DROP +-A limit-1911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1911 -j RETURN +-A limit-1911 -j DROP +-A limit-1912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1912 -j logaccept-45 +-A limit-1912 -j DROP +-A limit-1913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1913 -j logaccept-46 +-A limit-1913 -j DROP +-A limit-1914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1914 -j ACCEPT +-A limit-1914 -j DROP +-A limit-1915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1915 -j logaccept-47 +-A limit-1915 -j DROP +-A limit-1916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1916 -j ACCEPT +-A limit-1916 -j DROP +-A limit-1917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1917 -j RETURN +-A limit-1917 -j DROP +-A limit-1918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1918 -j logaccept-48 +-A limit-1918 -j DROP +-A limit-1919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1919 -j logaccept-49 +-A limit-1919 -j DROP +-A limit-192 -m recent --name limit-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-102 +-A limit-192 -m limit --limit 1/second -j LOG +-A limit-192 -m recent --name limit-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1920 -j ACCEPT +-A limit-1920 -j DROP +-A limit-1921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1921 -j logaccept-50 +-A limit-1921 -j DROP +-A limit-1922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1922 -j ACCEPT +-A limit-1922 -j DROP +-A limit-1923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1923 -j RETURN +-A limit-1923 -j DROP +-A limit-1924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1924 -j logaccept-51 +-A limit-1924 -j DROP +-A limit-1925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1925 -j logaccept-52 +-A limit-1925 -j DROP +-A limit-1926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1926 -j ACCEPT +-A limit-1926 -j DROP +-A limit-1927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1927 -j logaccept-53 +-A limit-1927 -j DROP +-A limit-1928 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1928 -j ACCEPT +-A limit-1928 -m limit --limit 1/second -j LOG +-A limit-1928 -j DROP +-A limit-1929 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1929 -j RETURN +-A limit-1929 -m limit --limit 1/second -j LOG +-A limit-1929 -j DROP +-A limit-193 -m recent --name limit-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-103 +-A limit-193 -m recent --name limit-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1930 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1930 -j logaccept-54 +-A limit-1930 -m limit --limit 1/second -j LOG +-A limit-1930 -j DROP +-A limit-1931 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1931 -j logaccept-55 +-A limit-1931 -m limit --limit 1/second -j LOG +-A limit-1931 -j DROP +-A limit-1932 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1932 -j ACCEPT +-A limit-1932 -m limit --limit 1/second -j LOG +-A limit-1932 -j DROP +-A limit-1933 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1933 -j logaccept-56 +-A limit-1933 -m limit --limit 1/second -j LOG +-A limit-1933 -j DROP +-A limit-1934 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1934 -j ACCEPT +-A limit-1934 -j TEE --gateway fc00::2 +-A limit-1934 -j DROP +-A limit-1935 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1935 -j RETURN +-A limit-1935 -j TEE --gateway fc00::2 +-A limit-1935 -j DROP +-A limit-1936 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1936 -j logaccept-57 +-A limit-1936 -j TEE --gateway fc00::2 +-A limit-1936 -j DROP +-A limit-1937 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1937 -j logaccept-58 +-A limit-1937 -j TEE --gateway fc00::2 +-A limit-1937 -j DROP +-A limit-1938 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1938 -j ACCEPT +-A limit-1938 -j TEE --gateway fc00::2 +-A limit-1938 -j DROP +-A limit-1939 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1939 -j logaccept-59 +-A limit-1939 -j TEE --gateway fc00::2 +-A limit-1939 -j DROP +-A limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-104 +-A limit-194 -j TEE --gateway fc00::2 +-A limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1940 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1940 -j ACCEPT +-A limit-1940 -j DROP +-A limit-1941 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1941 -j RETURN +-A limit-1941 -j DROP +-A limit-1942 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1942 -j logaccept-60 +-A limit-1942 -j DROP +-A limit-1943 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1943 -j logaccept-61 +-A limit-1943 -j DROP +-A limit-1944 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1944 -j ACCEPT +-A limit-1944 -j DROP +-A limit-1945 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1945 -j logaccept-62 +-A limit-1945 -j DROP +-A limit-1946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1946 -j ACCEPT +-A limit-1946 -j DROP +-A limit-1947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1947 -j RETURN +-A limit-1947 -j DROP +-A limit-1948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1948 -j logaccept-63 +-A limit-1948 -j DROP +-A limit-1949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1949 -j logaccept-64 +-A limit-1949 -j DROP +-A limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-105 +-A limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1950 -j ACCEPT +-A limit-1950 -j DROP +-A limit-1951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1951 -j logaccept-65 +-A limit-1951 -j DROP +-A limit-1952 -m recent --name limit-1952 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1100 +-A limit-1952 -m recent --name limit-1952 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1953 -m recent --name limit-1953 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1101 +-A limit-1953 -m recent --name limit-1953 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1954 -m recent --name limit-1954 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1102 +-A limit-1954 -m recent --name limit-1954 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1955 -m recent --name limit-1955 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1103 +-A limit-1955 -m recent --name limit-1955 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1956 -m recent --name limit-1956 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1104 +-A limit-1956 -m recent --name limit-1956 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1957 -m recent --name limit-1957 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1105 +-A limit-1957 -m recent --name limit-1957 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1958 -m recent --name limit-1958 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1106 +-A limit-1958 -m recent --name limit-1958 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1959 -m recent --name limit-1959 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1107 +-A limit-1959 -m recent --name limit-1959 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-106 +-A limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1960 -m recent --name limit-1960 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1108 +-A limit-1960 -m recent --name limit-1960 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1961 -m recent --name limit-1961 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1109 +-A limit-1962 -m recent --name limit-1962 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1962 -m recent --name limit-1962 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1963 -m recent --name limit-1963 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1963 -m recent --name limit-1963 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1964 -m recent --name limit-1964 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1964 -m recent --name limit-1964 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1965 -m recent --name limit-1965 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1965 -m recent --name limit-1965 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1966 -m recent --name limit-1966 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1966 -m recent --name limit-1966 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-107 +-A limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1971 -m recent --name limit-1971 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1972 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1972 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1973 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1973 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1974 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1974 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-108 +-A limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1981 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1982 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1983 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1984 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1985 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1985 -m limit --limit 1/second -j LOG +-A limit-1986 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1987 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1987 -j TEE --gateway fc00::2 +-A limit-1988 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1989 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-199 -m recent --name limit-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-109 +-A limit-1990 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1991 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 +-A limit-2 -m limit --limit 1/second -j LOG +-A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-110 +-A limit-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2000 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2000 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2001 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2002 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2003 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2004 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2005 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2005 -m limit --limit 1/second -j LOG +-A limit-2006 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2007 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2007 -j TEE --gateway fc00::2 +-A limit-2008 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2009 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-111 +-A limit-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2012 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2012 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2013 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2013 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2014 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2014 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2015 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2015 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2016 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2016 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2017 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2017 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2018 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2018 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2019 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2019 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-112 +-A limit-202 -m limit --limit 1/second -j LOG +-A limit-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2020 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2020 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2021 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2022 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2023 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2024 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2025 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2025 -m limit --limit 1/second -j LOG +-A limit-2026 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2027 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2027 -j TEE --gateway fc00::2 +-A limit-2028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-113 +-A limit-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2032 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2032 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2033 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2033 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2034 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2035 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2036 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2037 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2038 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2039 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-114 +-A limit-204 -j TEE --gateway fc00::2 +-A limit-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2040 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2040 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2041 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2045 -m limit --limit 1/second -j LOG +-A limit-2046 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2047 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2047 -j TEE --gateway fc00::2 +-A limit-2048 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2049 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2050 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2051 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2052 -m recent --name limit-2052 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1110 +-A limit-2052 -m recent --name limit-2052 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2053 -m recent --name limit-2053 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1111 +-A limit-2053 -m recent --name limit-2053 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2054 -m recent --name limit-2054 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1112 +-A limit-2054 -m recent --name limit-2054 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2055 -m recent --name limit-2055 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1113 +-A limit-2055 -m recent --name limit-2055 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2056 -m recent --name limit-2056 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1114 +-A limit-2056 -m recent --name limit-2056 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2057 -m recent --name limit-2057 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1115 +-A limit-2057 -m recent --name limit-2057 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2058 -m recent --name limit-2058 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1116 +-A limit-2058 -m recent --name limit-2058 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2059 -m recent --name limit-2059 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1117 +-A limit-2059 -m recent --name limit-2059 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2060 -m recent --name limit-2060 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1118 +-A limit-2060 -m recent --name limit-2060 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2061 -m recent --name limit-2061 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1119 +-A limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1120 +-A limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2063 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1121 +-A limit-2063 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2064 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1122 +-A limit-2064 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2065 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1123 +-A limit-2065 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2066 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1124 +-A limit-2066 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2067 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1125 +-A limit-2067 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2068 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1126 +-A limit-2068 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2069 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1127 +-A limit-2069 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2070 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1128 +-A limit-2070 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2071 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1129 +-A limit-2072 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1130 +-A limit-2073 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1131 +-A limit-2074 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1132 +-A limit-2075 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1133 +-A limit-2075 -m limit --limit 1/second -j LOG +-A limit-2076 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1134 +-A limit-2077 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1135 +-A limit-2077 -j TEE --gateway fc00::2 +-A limit-2078 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1136 +-A limit-2079 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1137 +-A limit-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2080 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1138 +-A limit-2081 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1139 +-A limit-2082 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1140 +-A limit-2082 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2083 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1141 +-A limit-2083 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2084 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1142 +-A limit-2084 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2085 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1143 +-A limit-2085 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2086 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1144 +-A limit-2086 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2087 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1145 +-A limit-2087 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2088 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1146 +-A limit-2088 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2089 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1147 +-A limit-2089 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-209 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-2090 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1148 +-A limit-2090 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2091 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1149 +-A limit-2092 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1150 +-A limit-2093 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1151 +-A limit-2094 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1152 +-A limit-2095 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1153 +-A limit-2095 -m limit --limit 1/second -j LOG +-A limit-2096 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1154 +-A limit-2097 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1155 +-A limit-2097 -j TEE --gateway fc00::2 +-A limit-2098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1156 +-A limit-2099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1157 +-A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-210 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-210 -j ACCEPT +-A limit-2100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1158 +-A limit-2101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1159 +-A limit-2102 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1160 +-A limit-2102 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2103 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1161 +-A limit-2103 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2104 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1162 +-A limit-2104 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2105 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1163 +-A limit-2105 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2106 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1164 +-A limit-2106 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2107 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1165 +-A limit-2107 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2108 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1166 +-A limit-2108 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2109 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1167 +-A limit-2109 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-211 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-2110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1168 +-A limit-2110 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1169 +-A limit-2112 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1170 +-A limit-2113 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1171 +-A limit-2114 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1172 +-A limit-2115 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1173 +-A limit-2115 -m limit --limit 1/second -j LOG +-A limit-2116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1174 +-A limit-2117 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1175 +-A limit-2117 -j TEE --gateway fc00::2 +-A limit-2118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1176 +-A limit-2119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1177 +-A limit-212 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-212 -m limit --limit 1/second -j LOG +-A limit-212 -j ACCEPT +-A limit-2120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1178 +-A limit-2121 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1179 +-A limit-2122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1180 +-A limit-2122 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1181 +-A limit-2123 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1182 +-A limit-2124 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1183 +-A limit-2125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1184 +-A limit-2126 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1185 +-A limit-2127 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2128 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1186 +-A limit-2128 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2129 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1187 +-A limit-2129 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-213 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-213 -m limit --limit 1/second -j LOG +-A limit-2130 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1188 +-A limit-2130 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2131 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1189 +-A limit-2132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1190 +-A limit-2133 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1191 +-A limit-2134 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1192 +-A limit-2135 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1193 +-A limit-2135 -m limit --limit 1/second -j LOG +-A limit-2136 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1194 +-A limit-2137 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1195 +-A limit-2137 -j TEE --gateway fc00::2 +-A limit-2138 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1196 +-A limit-2139 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1197 +-A limit-214 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-214 -j TEE --gateway fc00::2 +-A limit-214 -j ACCEPT +-A limit-2140 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1198 +-A limit-2141 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1199 +-A limit-2142 -m recent --name limit-2142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1200 +-A limit-2142 -m recent --name limit-2142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2143 -m recent --name limit-2143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1201 +-A limit-2143 -m recent --name limit-2143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2144 -m recent --name limit-2144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1202 +-A limit-2144 -m recent --name limit-2144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2145 -m recent --name limit-2145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1203 +-A limit-2145 -m recent --name limit-2145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2146 -m recent --name limit-2146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1204 +-A limit-2146 -m recent --name limit-2146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2147 -m recent --name limit-2147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1205 +-A limit-2147 -m recent --name limit-2147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2148 -m recent --name limit-2148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1206 +-A limit-2148 -m recent --name limit-2148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2149 -m recent --name limit-2149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1207 +-A limit-2149 -m recent --name limit-2149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-215 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-215 -j TEE --gateway fc00::2 +-A limit-2150 -m recent --name limit-2150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1208 +-A limit-2150 -m recent --name limit-2150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2151 -m recent --name limit-2151 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1209 +-A limit-2152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1210 +-A limit-2152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1211 +-A limit-2153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1212 +-A limit-2154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1213 +-A limit-2155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1214 +-A limit-2156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1215 +-A limit-2157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2158 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1216 +-A limit-2158 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1217 +-A limit-2159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-216 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-216 -j ACCEPT +-A limit-2160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1218 +-A limit-2160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1219 +-A limit-2162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1220 +-A limit-2163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1221 +-A limit-2164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1222 +-A limit-2165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1223 +-A limit-2165 -m limit --limit 1/second -j LOG +-A limit-2166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1224 +-A limit-2167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1225 +-A limit-2167 -j TEE --gateway fc00::2 +-A limit-2168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1226 +-A limit-2169 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1227 +-A limit-217 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-2170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1228 +-A limit-2171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1229 +-A limit-2172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1230 +-A limit-2172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1231 +-A limit-2173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1232 +-A limit-2174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1233 +-A limit-2175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1234 +-A limit-2176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1235 +-A limit-2177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1236 +-A limit-2178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1237 +-A limit-2179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-218 -j ACCEPT +-A limit-2180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1238 +-A limit-2180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2181 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1239 +-A limit-2182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1240 +-A limit-2183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1241 +-A limit-2184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1242 +-A limit-2185 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1243 +-A limit-2185 -m limit --limit 1/second -j LOG +-A limit-2186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1244 +-A limit-2187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1245 +-A limit-2187 -j TEE --gateway fc00::2 +-A limit-2188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1246 +-A limit-2189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1247 +-A limit-219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-2190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1248 +-A limit-2191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1249 +-A limit-2192 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1250 +-A limit-2192 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2193 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1251 +-A limit-2193 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2194 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1252 +-A limit-2194 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2195 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1253 +-A limit-2195 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2196 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1254 +-A limit-2196 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2197 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1255 +-A limit-2197 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1256 +-A limit-2198 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1257 +-A limit-2199 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-22 -m limit --limit 1/second -j LOG +-A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1258 +-A limit-2200 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1259 +-A limit-2202 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1260 +-A limit-2203 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1261 +-A limit-2204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1262 +-A limit-2205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1263 +-A limit-2205 -m limit --limit 1/second -j LOG +-A limit-2206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1264 +-A limit-2207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1265 +-A limit-2207 -j TEE --gateway fc00::2 +-A limit-2208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1266 +-A limit-2209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1267 +-A limit-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2210 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1268 +-A limit-2211 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1269 +-A limit-2212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1270 +-A limit-2212 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1271 +-A limit-2213 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1272 +-A limit-2214 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1273 +-A limit-2215 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2216 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1274 +-A limit-2216 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2217 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1275 +-A limit-2217 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2218 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1276 +-A limit-2218 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2219 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1277 +-A limit-2219 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-222 -m limit --limit 1/second -j LOG +-A limit-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2220 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1278 +-A limit-2220 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2221 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1279 +-A limit-2222 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1280 +-A limit-2223 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1281 +-A limit-2224 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1282 +-A limit-2225 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1283 +-A limit-2225 -m limit --limit 1/second -j LOG +-A limit-2226 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1284 +-A limit-2227 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1285 +-A limit-2227 -j TEE --gateway fc00::2 +-A limit-2228 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1286 +-A limit-2229 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1287 +-A limit-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2230 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1288 +-A limit-2231 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1289 +-A limit-2232 -m recent --name limit-2232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2232 -m recent --name limit-2232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2233 -m recent --name limit-2233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2233 -m recent --name limit-2233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2234 -m recent --name limit-2234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2234 -m recent --name limit-2234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2235 -m recent --name limit-2235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2235 -m recent --name limit-2235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2236 -m recent --name limit-2236 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2236 -m recent --name limit-2236 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2237 -m recent --name limit-2237 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2237 -m recent --name limit-2237 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2238 -m recent --name limit-2238 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2238 -m recent --name limit-2238 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2239 -m recent --name limit-2239 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2239 -m recent --name limit-2239 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-134 +-A limit-224 -j TEE --gateway fc00::2 +-A limit-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2240 -m recent --name limit-2240 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2240 -m recent --name limit-2240 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2241 -m recent --name limit-2241 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2255 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2255 -m limit --limit 1/second -j LOG +-A limit-2256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2257 -j TEE --gateway fc00::2 +-A limit-2258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2267 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2267 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2274 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2275 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2275 -m limit --limit 1/second -j LOG +-A limit-2276 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2277 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2277 -j TEE --gateway fc00::2 +-A limit-2278 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 +-A limit-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2280 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2281 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2282 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2282 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2283 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2283 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2284 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2284 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2285 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2285 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2286 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2286 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2287 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2287 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2288 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2288 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2289 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2289 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-229 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-2290 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2290 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2291 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2292 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2293 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2294 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2295 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2295 -m limit --limit 1/second -j LOG +-A limit-2296 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2297 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2297 -j TEE --gateway fc00::2 +-A limit-2298 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2299 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-230 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-230 -j ACCEPT +-A limit-2300 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2301 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2302 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2302 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2303 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2303 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2304 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2304 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2305 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2305 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2306 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2306 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2307 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2307 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2308 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2308 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2309 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2309 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-231 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-2310 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2310 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2311 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2312 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2313 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2314 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2315 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2315 -m limit --limit 1/second -j LOG +-A limit-2316 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2317 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2317 -j TEE --gateway fc00::2 +-A limit-2318 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2319 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-232 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-232 -m limit --limit 1/second -j LOG +-A limit-232 -j ACCEPT +-A limit-2320 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2321 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2322 -m recent --name limit-2322 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1290 +-A limit-2322 -m recent --name limit-2322 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2323 -m recent --name limit-2323 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1291 +-A limit-2323 -m recent --name limit-2323 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2324 -m recent --name limit-2324 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1292 +-A limit-2324 -m recent --name limit-2324 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2325 -m recent --name limit-2325 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1293 +-A limit-2325 -m recent --name limit-2325 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2326 -m recent --name limit-2326 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1294 +-A limit-2326 -m recent --name limit-2326 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1295 +-A limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1296 +-A limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1297 +-A limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-233 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-233 -m limit --limit 1/second -j LOG +-A limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1298 +-A limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2331 -m recent --name limit-2331 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1299 +-A limit-2332 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1300 +-A limit-2332 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2333 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1301 +-A limit-2333 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2334 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1302 +-A limit-2334 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1303 +-A limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1304 +-A limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1305 +-A limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1306 +-A limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1307 +-A limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-234 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-234 -j TEE --gateway fc00::2 +-A limit-234 -j ACCEPT +-A limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1308 +-A limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2341 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1309 +-A limit-2342 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1310 +-A limit-2343 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1311 +-A limit-2344 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1312 +-A limit-2345 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1313 +-A limit-2345 -m limit --limit 1/second -j LOG +-A limit-2346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1314 +-A limit-2347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1315 +-A limit-2347 -j TEE --gateway fc00::2 +-A limit-2348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1316 +-A limit-2349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1317 +-A limit-235 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-235 -j TEE --gateway fc00::2 +-A limit-2350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1318 +-A limit-2351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1319 +-A limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1320 +-A limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1321 +-A limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1322 +-A limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1323 +-A limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1324 +-A limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1325 +-A limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1326 +-A limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1327 +-A limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-236 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A limit-236 -j ACCEPT +-A limit-2360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1328 +-A limit-2360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1329 +-A limit-2362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1330 +-A limit-2363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1331 +-A limit-2364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1332 +-A limit-2365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1333 +-A limit-2365 -m limit --limit 1/second -j LOG +-A limit-2366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1334 +-A limit-2367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1335 +-A limit-2367 -j TEE --gateway fc00::2 +-A limit-2368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1336 +-A limit-2369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1337 +-A limit-237 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-2370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1338 +-A limit-2371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1339 +-A limit-2372 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1340 +-A limit-2372 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2373 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1341 +-A limit-2373 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2374 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1342 +-A limit-2374 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2375 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1343 +-A limit-2375 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2376 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1344 +-A limit-2376 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2377 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1345 +-A limit-2377 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2378 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1346 +-A limit-2378 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2379 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1347 +-A limit-2379 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-238 -j ACCEPT +-A limit-2380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1348 +-A limit-2380 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1349 +-A limit-2382 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1350 +-A limit-2383 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1351 +-A limit-2384 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1352 +-A limit-2385 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1353 +-A limit-2385 -m limit --limit 1/second -j LOG +-A limit-2386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1354 +-A limit-2387 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1355 +-A limit-2387 -j TEE --gateway fc00::2 +-A limit-2388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1356 +-A limit-2389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1357 +-A limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-2390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1358 +-A limit-2391 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1359 +-A limit-2392 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1360 +-A limit-2392 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2393 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1361 +-A limit-2393 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1362 +-A limit-2394 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1363 +-A limit-2395 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1364 +-A limit-2396 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1365 +-A limit-2397 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2398 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1366 +-A limit-2398 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2399 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1367 +-A limit-2399 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-24 -j TEE --gateway fc00::2 +-A limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-240 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-150 +-A limit-240 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2400 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1368 +-A limit-2400 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2401 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1369 +-A limit-2402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1370 +-A limit-2403 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1371 +-A limit-2404 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1372 +-A limit-2405 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1373 +-A limit-2405 -m limit --limit 1/second -j LOG +-A limit-2406 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1374 +-A limit-2407 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1375 +-A limit-2407 -j TEE --gateway fc00::2 +-A limit-2408 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1376 +-A limit-2409 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1377 +-A limit-241 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-241 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2410 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1378 +-A limit-2411 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1379 +-A limit-2412 -m recent --name limit-2412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2412 -m recent --name limit-2412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2413 -m recent --name limit-2413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2413 -m recent --name limit-2413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2414 -m recent --name limit-2414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2414 -m recent --name limit-2414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2415 -m recent --name limit-2415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2415 -m recent --name limit-2415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2416 -m recent --name limit-2416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2416 -m recent --name limit-2416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2417 -m recent --name limit-2417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2417 -m recent --name limit-2417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2418 -m recent --name limit-2418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2418 -m recent --name limit-2418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2419 -m recent --name limit-2419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2419 -m recent --name limit-2419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-242 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-242 -m limit --limit 1/second -j LOG +-A limit-242 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2420 -m recent --name limit-2420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2420 -m recent --name limit-2420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2421 -m recent --name limit-2421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-243 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-243 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2435 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2435 -m limit --limit 1/second -j LOG +-A limit-2436 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2437 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2437 -j TEE --gateway fc00::2 +-A limit-2438 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2439 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-244 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-244 -j TEE --gateway fc00::2 +-A limit-244 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2440 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2441 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-245 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-245 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2450 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2450 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2451 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2452 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2453 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2454 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2455 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2455 -m limit --limit 1/second -j LOG +-A limit-2456 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2457 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2457 -j TEE --gateway fc00::2 +-A limit-2458 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2459 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-246 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-246 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2460 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2461 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2462 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2462 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2463 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2463 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2464 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2464 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2465 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2465 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2466 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2466 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2467 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2467 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2468 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2468 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2469 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2469 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-247 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-247 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2470 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2470 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2471 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2472 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2473 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2474 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2475 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2475 -m limit --limit 1/second -j LOG +-A limit-2476 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2477 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2477 -j TEE --gateway fc00::2 +-A limit-2478 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2479 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-248 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-158 +-A limit-248 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2480 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2481 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2482 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2482 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2483 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2483 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2484 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2484 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2485 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2485 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2486 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2486 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2487 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2487 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2488 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2488 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2489 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2489 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-249 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-2490 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2490 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2491 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2492 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2493 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2494 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2495 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2495 -m limit --limit 1/second -j LOG +-A limit-2496 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2497 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2497 -j TEE --gateway fc00::2 +-A limit-2498 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2499 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-250 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-250 -j ACCEPT +-A limit-2500 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2501 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2502 -m recent --name limit-2502 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1380 +-A limit-2502 -m recent --name limit-2502 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2503 -m recent --name limit-2503 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1381 +-A limit-2503 -m recent --name limit-2503 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2504 -m recent --name limit-2504 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1382 +-A limit-2504 -m recent --name limit-2504 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2505 -m recent --name limit-2505 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1383 +-A limit-2505 -m recent --name limit-2505 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2506 -m recent --name limit-2506 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1384 +-A limit-2506 -m recent --name limit-2506 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2507 -m recent --name limit-2507 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1385 +-A limit-2507 -m recent --name limit-2507 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2508 -m recent --name limit-2508 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1386 +-A limit-2508 -m recent --name limit-2508 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2509 -m recent --name limit-2509 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1387 +-A limit-2509 -m recent --name limit-2509 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-251 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-2510 -m recent --name limit-2510 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1388 +-A limit-2510 -m recent --name limit-2510 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2511 -m recent --name limit-2511 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1389 +-A limit-2512 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1390 +-A limit-2512 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2513 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1391 +-A limit-2513 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2514 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1392 +-A limit-2514 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2515 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1393 +-A limit-2515 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2516 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1394 +-A limit-2516 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2517 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1395 +-A limit-2517 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2518 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1396 +-A limit-2518 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2519 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1397 +-A limit-2519 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-252 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A limit-252 -m limit --limit 1/second -j LOG +-A limit-252 -j ACCEPT +-A limit-2520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1398 +-A limit-2520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2521 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1399 +-A limit-2522 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1400 +-A limit-2523 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1401 +-A limit-2524 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1402 +-A limit-2525 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1403 +-A limit-2525 -m limit --limit 1/second -j LOG +-A limit-2526 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1404 +-A limit-2527 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1405 +-A limit-2527 -j TEE --gateway fc00::2 +-A limit-2528 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1406 +-A limit-2529 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1407 +-A limit-253 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-253 -m limit --limit 1/second -j LOG +-A limit-2530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1408 +-A limit-2531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1409 +-A limit-2532 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1410 +-A limit-2532 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2533 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1411 +-A limit-2533 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2534 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1412 +-A limit-2534 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2535 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1413 +-A limit-2535 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1414 +-A limit-2536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1415 +-A limit-2537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1416 +-A limit-2538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1417 +-A limit-2539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-254 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-254 -j TEE --gateway fc00::2 +-A limit-254 -j ACCEPT +-A limit-2540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1418 +-A limit-2540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2541 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1419 +-A limit-2542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1420 +-A limit-2543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1421 +-A limit-2544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1422 +-A limit-2545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1423 +-A limit-2545 -m limit --limit 1/second -j LOG +-A limit-2546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1424 +-A limit-2547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1425 +-A limit-2547 -j TEE --gateway fc00::2 +-A limit-2548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1426 +-A limit-2549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1427 +-A limit-255 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-255 -j TEE --gateway fc00::2 +-A limit-2550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1428 +-A limit-2551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1429 +-A limit-2552 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1430 +-A limit-2552 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2553 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1431 +-A limit-2553 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2554 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1432 +-A limit-2554 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2555 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1433 +-A limit-2555 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1434 +-A limit-2556 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1435 +-A limit-2557 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1436 +-A limit-2558 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1437 +-A limit-2559 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-256 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-256 -j ACCEPT +-A limit-2560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1438 +-A limit-2560 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1439 +-A limit-2562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1440 +-A limit-2563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1441 +-A limit-2564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1442 +-A limit-2565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1443 +-A limit-2565 -m limit --limit 1/second -j LOG +-A limit-2566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1444 +-A limit-2567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1445 +-A limit-2567 -j TEE --gateway fc00::2 +-A limit-2568 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1446 +-A limit-2569 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1447 +-A limit-257 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-2570 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1448 +-A limit-2571 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1449 +-A limit-2572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1450 +-A limit-2572 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1451 +-A limit-2573 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2574 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1452 +-A limit-2574 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2575 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1453 +-A limit-2575 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2576 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1454 +-A limit-2576 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2577 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1455 +-A limit-2577 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2578 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1456 +-A limit-2578 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2579 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1457 +-A limit-2579 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-258 -j ACCEPT +-A limit-2580 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1458 +-A limit-2580 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2581 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1459 +-A limit-2582 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1460 +-A limit-2583 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1461 +-A limit-2584 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1462 +-A limit-2585 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1463 +-A limit-2585 -m limit --limit 1/second -j LOG +-A limit-2586 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1464 +-A limit-2587 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1465 +-A limit-2587 -j TEE --gateway fc00::2 +-A limit-2588 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1466 +-A limit-2589 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1467 +-A limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-2590 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1468 +-A limit-2591 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1469 +-A limit-2592 -m recent --name limit-2592 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1470 +-A limit-2592 -m recent --name limit-2592 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2593 -m recent --name limit-2593 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1471 +-A limit-2593 -m recent --name limit-2593 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2594 -m recent --name limit-2594 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1472 +-A limit-2594 -m recent --name limit-2594 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2595 -m recent --name limit-2595 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1473 +-A limit-2595 -m recent --name limit-2595 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2596 -m recent --name limit-2596 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1474 +-A limit-2596 -m recent --name limit-2596 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2597 -m recent --name limit-2597 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1475 +-A limit-2597 -m recent --name limit-2597 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2598 -m recent --name limit-2598 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1476 +-A limit-2598 -m recent --name limit-2598 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2599 -m recent --name limit-2599 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1477 +-A limit-2599 -m recent --name limit-2599 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-260 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-170 +-A limit-260 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-2600 -m recent --name limit-2600 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1478 +-A limit-2600 -m recent --name limit-2600 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2601 -m recent --name limit-2601 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1479 +-A limit-2602 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1480 +-A limit-2602 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2603 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1481 +-A limit-2603 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2604 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1482 +-A limit-2604 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2605 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1483 +-A limit-2605 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2606 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1484 +-A limit-2606 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2607 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1485 +-A limit-2607 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2608 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1486 +-A limit-2608 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2609 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1487 +-A limit-2609 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-261 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-261 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2610 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1488 +-A limit-2610 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2611 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1489 +-A limit-2612 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1490 +-A limit-2613 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1491 +-A limit-2614 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1492 +-A limit-2615 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1493 +-A limit-2615 -m limit --limit 1/second -j LOG +-A limit-2616 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1494 +-A limit-2617 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1495 +-A limit-2617 -j TEE --gateway fc00::2 +-A limit-2618 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1496 +-A limit-2619 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1497 +-A limit-262 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-262 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-2620 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1498 +-A limit-2621 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1499 +-A limit-2622 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1500 +-A limit-2622 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2623 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1501 +-A limit-2623 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2624 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1502 +-A limit-2624 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2625 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1503 +-A limit-2625 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2626 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1504 +-A limit-2626 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2627 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1505 +-A limit-2627 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2628 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1506 +-A limit-2628 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2629 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1507 +-A limit-2629 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-263 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-263 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2630 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1508 +-A limit-2630 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2631 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1509 +-A limit-2632 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1510 +-A limit-2633 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1511 +-A limit-2634 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1512 +-A limit-2635 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1513 +-A limit-2635 -m limit --limit 1/second -j LOG +-A limit-2636 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1514 +-A limit-2637 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1515 +-A limit-2637 -j TEE --gateway fc00::2 +-A limit-2638 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1516 +-A limit-2639 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1517 +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-174 +-A limit-264 -j TEE --gateway fc00::2 +-A limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-2640 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1518 +-A limit-2641 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1519 +-A limit-2642 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1520 +-A limit-2642 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2643 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1521 +-A limit-2643 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2644 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1522 +-A limit-2644 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2645 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1523 +-A limit-2645 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2646 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1524 +-A limit-2646 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2647 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1525 +-A limit-2647 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2648 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1526 +-A limit-2648 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2649 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1527 +-A limit-2649 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-175 +-A limit-265 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2650 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1528 +-A limit-2650 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2651 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1529 +-A limit-2652 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1530 +-A limit-2653 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1531 +-A limit-2654 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1532 +-A limit-2655 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1533 +-A limit-2655 -m limit --limit 1/second -j LOG +-A limit-2656 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1534 +-A limit-2657 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1535 +-A limit-2657 -j TEE --gateway fc00::2 +-A limit-2658 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1536 +-A limit-2659 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1537 +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-176 +-A limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-2660 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1538 +-A limit-2661 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1539 +-A limit-2662 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1540 +-A limit-2662 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2663 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1541 +-A limit-2663 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2664 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1542 +-A limit-2664 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2665 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1543 +-A limit-2665 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2666 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1544 +-A limit-2666 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2667 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1545 +-A limit-2667 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2668 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1546 +-A limit-2668 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2669 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1547 +-A limit-2669 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-177 +-A limit-267 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2670 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1548 +-A limit-2670 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2671 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1549 +-A limit-2672 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1550 +-A limit-2673 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1551 +-A limit-2674 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1552 +-A limit-2675 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1553 +-A limit-2675 -m limit --limit 1/second -j LOG +-A limit-2676 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1554 +-A limit-2677 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1555 +-A limit-2677 -j TEE --gateway fc00::2 +-A limit-2678 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1556 +-A limit-2679 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1557 +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-178 +-A limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-2680 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1558 +-A limit-2681 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1559 +-A limit-2682 -m recent --name limit-2682 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2682 -m recent --name limit-2682 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2683 -m recent --name limit-2683 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2683 -m recent --name limit-2683 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2684 -m recent --name limit-2684 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2684 -m recent --name limit-2684 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2685 -m recent --name limit-2685 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2685 -m recent --name limit-2685 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2686 -m recent --name limit-2686 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2686 -m recent --name limit-2686 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2687 -m recent --name limit-2687 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2687 -m recent --name limit-2687 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2688 -m recent --name limit-2688 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2688 -m recent --name limit-2688 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2689 -m recent --name limit-2689 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2689 -m recent --name limit-2689 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-179 +-A limit-2690 -m recent --name limit-2690 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2690 -m recent --name limit-2690 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2691 -m recent --name limit-2691 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2692 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2692 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2693 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2693 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2694 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2694 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2695 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2695 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2696 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2696 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2697 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2697 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2698 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2698 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2699 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2699 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-180 +-A limit-270 -j ACCEPT +-A limit-2700 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2700 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2701 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2702 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2703 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2704 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2705 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2705 -m limit --limit 1/second -j LOG +-A limit-2706 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2707 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2707 -j TEE --gateway fc00::2 +-A limit-2708 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2709 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-181 +-A limit-2710 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2711 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2712 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2712 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2713 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2713 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2714 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2714 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2715 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2715 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2716 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2716 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2717 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2717 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2718 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2718 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2719 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2719 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-182 +-A limit-272 -m limit --limit 1/second -j LOG +-A limit-272 -j ACCEPT +-A limit-2720 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2720 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2721 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-2722 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2723 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2724 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2725 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2725 -m limit --limit 1/second -j LOG +-A limit-2726 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2727 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2727 -j TEE --gateway fc00::2 +-A limit-2728 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2729 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-183 +-A limit-273 -m limit --limit 1/second -j LOG +-A limit-2730 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2731 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2732 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2732 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2733 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2733 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2734 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2734 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2735 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2735 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2736 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2736 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2737 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2737 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2738 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2738 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2739 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2739 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-184 +-A limit-274 -j TEE --gateway fc00::2 +-A limit-274 -j ACCEPT +-A limit-2740 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2740 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2741 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2742 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2743 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2744 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2745 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2745 -m limit --limit 1/second -j LOG +-A limit-2746 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2747 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2747 -j TEE --gateway fc00::2 +-A limit-2748 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2749 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-185 +-A limit-275 -j TEE --gateway fc00::2 +-A limit-2750 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2751 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2752 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2752 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2753 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2753 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2754 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2754 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2755 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2755 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2756 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2756 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2757 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2757 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2758 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2758 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2759 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2759 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-276 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-186 +-A limit-276 -j ACCEPT +-A limit-2760 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2760 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2761 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-2762 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2763 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2764 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2765 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2765 -m limit --limit 1/second -j LOG +-A limit-2766 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2767 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2767 -j TEE --gateway fc00::2 +-A limit-2768 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2769 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-277 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-187 +-A limit-2770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-2772 -m recent --name limit-2772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1560 +-A limit-2772 -m recent --name limit-2772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2773 -m recent --name limit-2773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1561 +-A limit-2773 -m recent --name limit-2773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2774 -m recent --name limit-2774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1562 +-A limit-2774 -m recent --name limit-2774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2775 -m recent --name limit-2775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1563 +-A limit-2775 -m recent --name limit-2775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2776 -m recent --name limit-2776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1564 +-A limit-2776 -m recent --name limit-2776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2777 -m recent --name limit-2777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1565 +-A limit-2777 -m recent --name limit-2777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2778 -m recent --name limit-2778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1566 +-A limit-2778 -m recent --name limit-2778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2779 -m recent --name limit-2779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1567 +-A limit-2779 -m recent --name limit-2779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-278 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-188 +-A limit-278 -j ACCEPT +-A limit-2780 -m recent --name limit-2780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1568 +-A limit-2780 -m recent --name limit-2780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2781 -m recent --name limit-2781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1569 +-A limit-2782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1570 +-A limit-2782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1571 +-A limit-2783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1572 +-A limit-2784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1573 +-A limit-2785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1574 +-A limit-2786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1575 +-A limit-2787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1576 +-A limit-2788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1577 +-A limit-2789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-279 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-189 +-A limit-2790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1578 +-A limit-2790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1579 +-A limit-2792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1580 +-A limit-2793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1581 +-A limit-2794 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1582 +-A limit-2795 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1583 +-A limit-2795 -m limit --limit 1/second -j LOG +-A limit-2796 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1584 +-A limit-2797 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1585 +-A limit-2797 -j TEE --gateway fc00::2 +-A limit-2798 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1586 +-A limit-2799 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1587 +-A limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2800 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1588 +-A limit-2801 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1589 +-A limit-2802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1590 +-A limit-2802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1591 +-A limit-2803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1592 +-A limit-2804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1593 +-A limit-2805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1594 +-A limit-2806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1595 +-A limit-2807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1596 +-A limit-2808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1597 +-A limit-2809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1598 +-A limit-2810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2811 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1599 +-A limit-2812 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1600 +-A limit-2813 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1601 +-A limit-2814 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1602 +-A limit-2815 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1603 +-A limit-2815 -m limit --limit 1/second -j LOG +-A limit-2816 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1604 +-A limit-2817 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1605 +-A limit-2817 -j TEE --gateway fc00::2 +-A limit-2818 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1606 +-A limit-2819 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1607 +-A limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-282 -m limit --limit 1/second -j LOG +-A limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2820 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1608 +-A limit-2821 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1609 +-A limit-2822 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1610 +-A limit-2822 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2823 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1611 +-A limit-2823 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2824 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1612 +-A limit-2824 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2825 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1613 +-A limit-2825 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2826 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1614 +-A limit-2826 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2827 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1615 +-A limit-2827 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2828 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1616 +-A limit-2828 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2829 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1617 +-A limit-2829 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2830 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1618 +-A limit-2830 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2831 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1619 +-A limit-2832 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1620 +-A limit-2833 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1621 +-A limit-2834 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1622 +-A limit-2835 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1623 +-A limit-2835 -m limit --limit 1/second -j LOG +-A limit-2836 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1624 +-A limit-2837 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1625 +-A limit-2837 -j TEE --gateway fc00::2 +-A limit-2838 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1626 +-A limit-2839 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1627 +-A limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-284 -j TEE --gateway fc00::2 +-A limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2840 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1628 +-A limit-2841 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1629 +-A limit-2842 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1630 +-A limit-2842 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2843 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1631 +-A limit-2843 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2844 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1632 +-A limit-2844 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2845 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1633 +-A limit-2845 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2846 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1634 +-A limit-2846 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2847 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1635 +-A limit-2847 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2848 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1636 +-A limit-2848 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2849 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1637 +-A limit-2849 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2850 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1638 +-A limit-2850 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-2851 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1639 +-A limit-2852 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1640 +-A limit-2853 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1641 +-A limit-2854 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1642 +-A limit-2855 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1643 +-A limit-2855 -m limit --limit 1/second -j LOG +-A limit-2856 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1644 +-A limit-2857 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1645 +-A limit-2857 -j TEE --gateway fc00::2 +-A limit-2858 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1646 +-A limit-2859 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1647 +-A limit-286 -m recent --name limit-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-286 -m recent --name limit-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2860 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1648 +-A limit-2861 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1649 +-A limit-2862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2862 -j RETURN +-A limit-2862 -m limit --limit 1/second -j LOG +-A limit-2862 -j DROP +-A limit-2863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2863 -j RETURN +-A limit-2863 -m limit --limit 1/second -j LOG +-A limit-2863 -j DROP +-A limit-2864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2864 -j RETURN +-A limit-2864 -m limit --limit 1/second -j LOG +-A limit-2864 -j DROP +-A limit-2865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2865 -j RETURN +-A limit-2865 -m limit --limit 1/second -j LOG +-A limit-2865 -j DROP +-A limit-2866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2866 -j RETURN +-A limit-2866 -m limit --limit 1/second -j LOG +-A limit-2866 -j DROP +-A limit-2867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2867 -j RETURN +-A limit-2867 -m limit --limit 1/second -j LOG +-A limit-2867 -j DROP +-A limit-2868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2868 -j RETURN +-A limit-2868 -j DROP +-A limit-2869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2869 -j RETURN +-A limit-2869 -j DROP +-A limit-287 -m recent --name limit-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-287 -m recent --name limit-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2870 -j RETURN +-A limit-2870 -j DROP +-A limit-2871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2871 -j RETURN +-A limit-2871 -j DROP +-A limit-2872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2872 -j RETURN +-A limit-2872 -j DROP +-A limit-2873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2873 -j RETURN +-A limit-2873 -j DROP +-A limit-2874 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2874 -j RETURN +-A limit-2874 -m limit --limit 1/second -j LOG +-A limit-2874 -j DROP +-A limit-2875 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2875 -j RETURN +-A limit-2875 -m limit --limit 1/second -j LOG +-A limit-2875 -j DROP +-A limit-2876 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2876 -j RETURN +-A limit-2876 -m limit --limit 1/second -j LOG +-A limit-2876 -j DROP +-A limit-2877 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2877 -j RETURN +-A limit-2877 -m limit --limit 1/second -j LOG +-A limit-2877 -j DROP +-A limit-2878 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2878 -j RETURN +-A limit-2878 -m limit --limit 1/second -j LOG +-A limit-2878 -j DROP +-A limit-2879 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2879 -j RETURN +-A limit-2879 -m limit --limit 1/second -j LOG +-A limit-2879 -j DROP +-A limit-288 -m recent --name limit-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-288 -m recent --name limit-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2880 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2880 -j RETURN +-A limit-2880 -j TEE --gateway fc00::2 +-A limit-2880 -j DROP +-A limit-2881 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2881 -j RETURN +-A limit-2881 -j TEE --gateway fc00::2 +-A limit-2881 -j DROP +-A limit-2882 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2882 -j RETURN +-A limit-2882 -j TEE --gateway fc00::2 +-A limit-2882 -j DROP +-A limit-2883 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2883 -j RETURN +-A limit-2883 -j TEE --gateway fc00::2 +-A limit-2883 -j DROP +-A limit-2884 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2884 -j RETURN +-A limit-2884 -j TEE --gateway fc00::2 +-A limit-2884 -j DROP +-A limit-2885 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2885 -j RETURN +-A limit-2885 -j TEE --gateway fc00::2 +-A limit-2885 -j DROP +-A limit-2886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2886 -j RETURN +-A limit-2886 -j DROP +-A limit-2887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2887 -j RETURN +-A limit-2887 -j DROP +-A limit-2888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2888 -j RETURN +-A limit-2888 -j DROP +-A limit-2889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2889 -j RETURN +-A limit-2889 -j DROP +-A limit-289 -m recent --name limit-289 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2890 -j RETURN +-A limit-2890 -j DROP +-A limit-2891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2891 -j RETURN +-A limit-2891 -j DROP +-A limit-2892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2892 -j RETURN +-A limit-2892 -j DROP +-A limit-2893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2893 -j RETURN +-A limit-2893 -j DROP +-A limit-2894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2894 -j RETURN +-A limit-2894 -j DROP +-A limit-2895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2895 -j RETURN +-A limit-2895 -j DROP +-A limit-2896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2896 -j RETURN +-A limit-2896 -j DROP +-A limit-2897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2897 -j RETURN +-A limit-2897 -j DROP +-A limit-2898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2898 -j RETURN +-A limit-2898 -j DROP +-A limit-2899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2899 -j RETURN +-A limit-2899 -j DROP +-A limit-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2900 -j RETURN +-A limit-2900 -j DROP +-A limit-2901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2901 -j RETURN +-A limit-2901 -j DROP +-A limit-2902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2902 -j RETURN +-A limit-2902 -j DROP +-A limit-2903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2903 -j RETURN +-A limit-2903 -j DROP +-A limit-2904 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2904 -j RETURN +-A limit-2904 -m limit --limit 1/second -j LOG +-A limit-2904 -j DROP +-A limit-2905 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2905 -j RETURN +-A limit-2905 -m limit --limit 1/second -j LOG +-A limit-2905 -j DROP +-A limit-2906 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2906 -j RETURN +-A limit-2906 -m limit --limit 1/second -j LOG +-A limit-2906 -j DROP +-A limit-2907 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2907 -j RETURN +-A limit-2907 -m limit --limit 1/second -j LOG +-A limit-2907 -j DROP +-A limit-2908 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2908 -j RETURN +-A limit-2908 -m limit --limit 1/second -j LOG +-A limit-2908 -j DROP +-A limit-2909 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2909 -j RETURN +-A limit-2909 -m limit --limit 1/second -j LOG +-A limit-2909 -j DROP +-A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2910 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2910 -j RETURN +-A limit-2910 -j TEE --gateway fc00::2 +-A limit-2910 -j DROP +-A limit-2911 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2911 -j RETURN +-A limit-2911 -j TEE --gateway fc00::2 +-A limit-2911 -j DROP +-A limit-2912 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2912 -j RETURN +-A limit-2912 -j TEE --gateway fc00::2 +-A limit-2912 -j DROP +-A limit-2913 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2913 -j RETURN +-A limit-2913 -j TEE --gateway fc00::2 +-A limit-2913 -j DROP +-A limit-2914 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2914 -j RETURN +-A limit-2914 -j TEE --gateway fc00::2 +-A limit-2914 -j DROP +-A limit-2915 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2915 -j RETURN +-A limit-2915 -j TEE --gateway fc00::2 +-A limit-2915 -j DROP +-A limit-2916 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2916 -j RETURN +-A limit-2916 -j DROP +-A limit-2917 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2917 -j RETURN +-A limit-2917 -j DROP +-A limit-2918 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2918 -j RETURN +-A limit-2918 -j DROP +-A limit-2919 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2919 -j RETURN +-A limit-2919 -j DROP +-A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-292 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2920 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2920 -j RETURN +-A limit-2920 -j DROP +-A limit-2921 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2921 -j RETURN +-A limit-2921 -j DROP +-A limit-2922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2922 -j RETURN +-A limit-2922 -j DROP +-A limit-2923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2923 -j RETURN +-A limit-2923 -j DROP +-A limit-2924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2924 -j RETURN +-A limit-2924 -j DROP +-A limit-2925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2925 -j RETURN +-A limit-2925 -j DROP +-A limit-2926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2926 -j RETURN +-A limit-2926 -j DROP +-A limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2927 -j RETURN +-A limit-2927 -j DROP +-A limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1650 +-A limit-2928 -m recent --name limit-2928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1651 +-A limit-2929 -m recent --name limit-2929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1652 +-A limit-2930 -m limit --limit 1/second -j LOG +-A limit-2930 -m recent --name limit-2930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1653 +-A limit-2931 -m recent --name limit-2931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1654 +-A limit-2932 -j TEE --gateway fc00::2 +-A limit-2932 -m recent --name limit-2932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1655 +-A limit-2933 -m recent --name limit-2933 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1656 +-A limit-2934 -m recent --name limit-2934 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1657 +-A limit-2935 -m recent --name limit-2935 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1658 +-A limit-2936 -m recent --name limit-2936 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2937 -m recent --name limit-2937 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1659 +-A limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2938 -m recent --name limit-2938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2939 -m recent --name limit-2939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-294 -j TEE --gateway fc00::2 +-A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2940 -m limit --limit 1/second -j LOG +-A limit-2940 -m recent --name limit-2940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2941 -m recent --name limit-2941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2942 -j TEE --gateway fc00::2 +-A limit-2942 -m recent --name limit-2942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2943 -m recent --name limit-2943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2944 -m recent --name limit-2944 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2945 -m recent --name limit-2945 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2946 -m recent --name limit-2946 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2947 -m recent --name limit-2947 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2950 -m limit --limit 1/second -j LOG +-A limit-2950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2952 -j TEE --gateway fc00::2 +-A limit-2952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2956 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2957 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2958 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2958 -j ACCEPT +-A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2960 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2960 -m limit --limit 1/second -j LOG +-A limit-2960 -j ACCEPT +-A limit-2961 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2961 -m limit --limit 1/second -j LOG +-A limit-2962 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2962 -j TEE --gateway fc00::2 +-A limit-2962 -j ACCEPT +-A limit-2963 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2963 -j TEE --gateway fc00::2 +-A limit-2964 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2964 -j ACCEPT +-A limit-2966 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2966 -j ACCEPT +-A limit-2967 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2968 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2969 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2970 -m limit --limit 1/second -j LOG +-A limit-2970 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2971 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2972 -j TEE --gateway fc00::2 +-A limit-2972 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2973 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2974 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2975 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2976 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2977 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2978 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2978 -j ACCEPT +-A limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-2980 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2980 -m limit --limit 1/second -j LOG +-A limit-2980 -j ACCEPT +-A limit-2981 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2981 -m limit --limit 1/second -j LOG +-A limit-2982 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2982 -j TEE --gateway fc00::2 +-A limit-2982 -j ACCEPT +-A limit-2983 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2983 -j TEE --gateway fc00::2 +-A limit-2984 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2984 -j ACCEPT +-A limit-2986 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2986 -j ACCEPT +-A limit-2987 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2988 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2988 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2989 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2989 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-2990 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2990 -m limit --limit 1/second -j LOG +-A limit-2990 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2991 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2991 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-2992 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2992 -j TEE --gateway fc00::2 +-A limit-2992 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2993 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2993 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-2994 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2994 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2995 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2995 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-2996 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2996 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-2997 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-2998 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-2998 -j ACCEPT +-A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 +-A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-30 -j ACCEPT +-A limit-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-300 -j ACCEPT +-A limit-3000 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3000 -m limit --limit 1/second -j LOG +-A limit-3000 -j ACCEPT +-A limit-3001 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3001 -m limit --limit 1/second -j LOG +-A limit-3002 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3002 -j TEE --gateway fc00::2 +-A limit-3002 -j ACCEPT +-A limit-3003 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3003 -j TEE --gateway fc00::2 +-A limit-3004 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3004 -j ACCEPT +-A limit-3006 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3006 -j ACCEPT +-A limit-3007 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3008 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3008 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3009 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3009 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-301 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3010 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3010 -m limit --limit 1/second -j LOG +-A limit-3010 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3011 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3011 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3012 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3012 -j TEE --gateway fc00::2 +-A limit-3012 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3013 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3013 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3014 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3014 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3015 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3015 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3016 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3016 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3017 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3018 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3018 -j ACCEPT +-A limit-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-302 -m limit --limit 1/second -j LOG +-A limit-302 -j ACCEPT +-A limit-3020 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3020 -m limit --limit 1/second -j LOG +-A limit-3020 -j ACCEPT +-A limit-3021 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3021 -m limit --limit 1/second -j LOG +-A limit-3022 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3022 -j TEE --gateway fc00::2 +-A limit-3022 -j ACCEPT +-A limit-3023 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3023 -j TEE --gateway fc00::2 +-A limit-3024 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3024 -j ACCEPT +-A limit-3026 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3026 -j ACCEPT +-A limit-3027 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1660 +-A limit-3028 -m recent --name limit-3028 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1661 +-A limit-3029 -m recent --name limit-3029 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-303 -m limit --limit 1/second -j LOG +-A limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1662 +-A limit-3030 -m limit --limit 1/second -j LOG +-A limit-3030 -m recent --name limit-3030 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1663 +-A limit-3031 -m recent --name limit-3031 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1664 +-A limit-3032 -j TEE --gateway fc00::2 +-A limit-3032 -m recent --name limit-3032 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1665 +-A limit-3033 -m recent --name limit-3033 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1666 +-A limit-3034 -m recent --name limit-3034 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1667 +-A limit-3035 -m recent --name limit-3035 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1668 +-A limit-3036 -m recent --name limit-3036 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3037 -m recent --name limit-3037 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1669 +-A limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1670 +-A limit-3038 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1671 +-A limit-3039 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-304 -j TEE --gateway fc00::2 +-A limit-304 -j ACCEPT +-A limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1672 +-A limit-3040 -m limit --limit 1/second -j LOG +-A limit-3040 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1673 +-A limit-3041 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1674 +-A limit-3042 -j TEE --gateway fc00::2 +-A limit-3042 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1675 +-A limit-3043 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1676 +-A limit-3044 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1677 +-A limit-3045 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1678 +-A limit-3046 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3047 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1679 +-A limit-3048 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1680 +-A limit-3048 -j ACCEPT +-A limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-305 -j TEE --gateway fc00::2 +-A limit-3050 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1682 +-A limit-3050 -m limit --limit 1/second -j LOG +-A limit-3050 -j ACCEPT +-A limit-3051 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1683 +-A limit-3051 -m limit --limit 1/second -j LOG +-A limit-3052 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1684 +-A limit-3052 -j TEE --gateway fc00::2 +-A limit-3052 -j ACCEPT +-A limit-3053 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1685 +-A limit-3053 -j TEE --gateway fc00::2 +-A limit-3054 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1686 +-A limit-3054 -j ACCEPT +-A limit-3056 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1688 +-A limit-3056 -j ACCEPT +-A limit-3057 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1689 +-A limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1690 +-A limit-3058 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1691 +-A limit-3059 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-306 -j ACCEPT +-A limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1692 +-A limit-3060 -m limit --limit 1/second -j LOG +-A limit-3060 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1693 +-A limit-3061 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1694 +-A limit-3062 -j TEE --gateway fc00::2 +-A limit-3062 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1695 +-A limit-3063 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1696 +-A limit-3064 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1697 +-A limit-3065 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1698 +-A limit-3066 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3067 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1699 +-A limit-3068 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1700 +-A limit-3068 -j ACCEPT +-A limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3070 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1702 +-A limit-3070 -m limit --limit 1/second -j LOG +-A limit-3070 -j ACCEPT +-A limit-3071 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1703 +-A limit-3071 -m limit --limit 1/second -j LOG +-A limit-3072 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1704 +-A limit-3072 -j TEE --gateway fc00::2 +-A limit-3072 -j ACCEPT +-A limit-3073 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1705 +-A limit-3073 -j TEE --gateway fc00::2 +-A limit-3074 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1706 +-A limit-3074 -j ACCEPT +-A limit-3076 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1708 +-A limit-3076 -j ACCEPT +-A limit-3077 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1709 +-A limit-3078 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1710 +-A limit-3078 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3079 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1711 +-A limit-3079 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-308 -j ACCEPT +-A limit-3080 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1712 +-A limit-3080 -m limit --limit 1/second -j LOG +-A limit-3080 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3081 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1713 +-A limit-3081 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3082 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1714 +-A limit-3082 -j TEE --gateway fc00::2 +-A limit-3082 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3083 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1715 +-A limit-3083 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3084 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1716 +-A limit-3084 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3085 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1717 +-A limit-3085 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3086 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1718 +-A limit-3086 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3087 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1719 +-A limit-3088 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1720 +-A limit-3088 -j ACCEPT +-A limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3090 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1722 +-A limit-3090 -m limit --limit 1/second -j LOG +-A limit-3090 -j ACCEPT +-A limit-3091 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1723 +-A limit-3091 -m limit --limit 1/second -j LOG +-A limit-3092 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1724 +-A limit-3092 -j TEE --gateway fc00::2 +-A limit-3092 -j ACCEPT +-A limit-3093 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1725 +-A limit-3093 -j TEE --gateway fc00::2 +-A limit-3094 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1726 +-A limit-3094 -j ACCEPT +-A limit-3096 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1728 +-A limit-3096 -j ACCEPT +-A limit-3097 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1729 +-A limit-3098 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1730 +-A limit-3098 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3099 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1731 +-A limit-3099 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-31 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3100 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1732 +-A limit-3100 -m limit --limit 1/second -j LOG +-A limit-3100 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3101 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1733 +-A limit-3101 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1734 +-A limit-3102 -j TEE --gateway fc00::2 +-A limit-3102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1735 +-A limit-3103 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1736 +-A limit-3104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1737 +-A limit-3105 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1738 +-A limit-3106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1739 +-A limit-3108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1740 +-A limit-3108 -j ACCEPT +-A limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1742 +-A limit-3110 -m limit --limit 1/second -j LOG +-A limit-3110 -j ACCEPT +-A limit-3111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1743 +-A limit-3111 -m limit --limit 1/second -j LOG +-A limit-3112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1744 +-A limit-3112 -j TEE --gateway fc00::2 +-A limit-3112 -j ACCEPT +-A limit-3113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1745 +-A limit-3113 -j TEE --gateway fc00::2 +-A limit-3114 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1746 +-A limit-3114 -j ACCEPT +-A limit-3116 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1748 +-A limit-3116 -j ACCEPT +-A limit-3117 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1749 +-A limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1750 +-A limit-3118 -m recent --name limit-3118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1751 +-A limit-3119 -m recent --name limit-3119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-312 -m limit --limit 1/second -j LOG +-A limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1752 +-A limit-3120 -m limit --limit 1/second -j LOG +-A limit-3120 -m recent --name limit-3120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1753 +-A limit-3121 -m recent --name limit-3121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1754 +-A limit-3122 -j TEE --gateway fc00::2 +-A limit-3122 -m recent --name limit-3122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1755 +-A limit-3123 -m recent --name limit-3123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1756 +-A limit-3124 -m recent --name limit-3124 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1757 +-A limit-3125 -m recent --name limit-3125 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1758 +-A limit-3126 -m recent --name limit-3126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3127 -m recent --name limit-3127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1759 +-A limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1760 +-A limit-3128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1761 +-A limit-3129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1762 +-A limit-3130 -m limit --limit 1/second -j LOG +-A limit-3130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1763 +-A limit-3131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1764 +-A limit-3132 -j TEE --gateway fc00::2 +-A limit-3132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1765 +-A limit-3133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1766 +-A limit-3134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1767 +-A limit-3135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1768 +-A limit-3136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1769 +-A limit-3138 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1770 +-A limit-3138 -j ACCEPT +-A limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-314 -j TEE --gateway fc00::2 +-A limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1772 +-A limit-3140 -m limit --limit 1/second -j LOG +-A limit-3140 -j ACCEPT +-A limit-3141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1773 +-A limit-3141 -m limit --limit 1/second -j LOG +-A limit-3142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1774 +-A limit-3142 -j TEE --gateway fc00::2 +-A limit-3142 -j ACCEPT +-A limit-3143 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1775 +-A limit-3143 -j TEE --gateway fc00::2 +-A limit-3144 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1776 +-A limit-3144 -j ACCEPT +-A limit-3146 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1778 +-A limit-3146 -j ACCEPT +-A limit-3147 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1779 +-A limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1780 +-A limit-3148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1781 +-A limit-3149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1782 +-A limit-3150 -m limit --limit 1/second -j LOG +-A limit-3150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1783 +-A limit-3151 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1784 +-A limit-3152 -j TEE --gateway fc00::2 +-A limit-3152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1785 +-A limit-3153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1786 +-A limit-3154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1787 +-A limit-3155 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1788 +-A limit-3156 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3157 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1789 +-A limit-3158 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1790 +-A limit-3158 -j ACCEPT +-A limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3160 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1792 +-A limit-3160 -m limit --limit 1/second -j LOG +-A limit-3160 -j ACCEPT +-A limit-3161 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1793 +-A limit-3161 -m limit --limit 1/second -j LOG +-A limit-3162 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1794 +-A limit-3162 -j TEE --gateway fc00::2 +-A limit-3162 -j ACCEPT +-A limit-3163 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1795 +-A limit-3163 -j TEE --gateway fc00::2 +-A limit-3164 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1796 +-A limit-3164 -j ACCEPT +-A limit-3166 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1798 +-A limit-3166 -j ACCEPT +-A limit-3167 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1799 +-A limit-3168 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1800 +-A limit-3168 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3169 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1801 +-A limit-3169 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3170 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1802 +-A limit-3170 -m limit --limit 1/second -j LOG +-A limit-3170 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3171 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1803 +-A limit-3171 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3172 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1804 +-A limit-3172 -j TEE --gateway fc00::2 +-A limit-3172 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3173 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1805 +-A limit-3173 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3174 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1806 +-A limit-3174 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3175 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1807 +-A limit-3175 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3176 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1808 +-A limit-3176 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3177 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1809 +-A limit-3178 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1810 +-A limit-3178 -j ACCEPT +-A limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3180 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1812 +-A limit-3180 -m limit --limit 1/second -j LOG +-A limit-3180 -j ACCEPT +-A limit-3181 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1813 +-A limit-3181 -m limit --limit 1/second -j LOG +-A limit-3182 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1814 +-A limit-3182 -j TEE --gateway fc00::2 +-A limit-3182 -j ACCEPT +-A limit-3183 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1815 +-A limit-3183 -j TEE --gateway fc00::2 +-A limit-3184 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1816 +-A limit-3184 -j ACCEPT +-A limit-3186 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1818 +-A limit-3186 -j ACCEPT +-A limit-3187 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1819 +-A limit-3188 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1820 +-A limit-3188 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3189 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1821 +-A limit-3189 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3190 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1822 +-A limit-3190 -m limit --limit 1/second -j LOG +-A limit-3190 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3191 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1823 +-A limit-3191 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3192 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1824 +-A limit-3192 -j TEE --gateway fc00::2 +-A limit-3192 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3193 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1825 +-A limit-3193 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3194 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1826 +-A limit-3194 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3195 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1827 +-A limit-3195 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3196 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1828 +-A limit-3196 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3197 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1829 +-A limit-3198 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1830 +-A limit-3198 -j ACCEPT +-A limit-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-32 -m limit --limit 1/second -j LOG +-A limit-32 -j ACCEPT +-A limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-320 -j ACCEPT +-A limit-3200 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1832 +-A limit-3200 -m limit --limit 1/second -j LOG +-A limit-3200 -j ACCEPT +-A limit-3201 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1833 +-A limit-3201 -m limit --limit 1/second -j LOG +-A limit-3202 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1834 +-A limit-3202 -j TEE --gateway fc00::2 +-A limit-3202 -j ACCEPT +-A limit-3203 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1835 +-A limit-3203 -j TEE --gateway fc00::2 +-A limit-3204 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1836 +-A limit-3204 -j ACCEPT +-A limit-3206 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1838 +-A limit-3206 -j ACCEPT +-A limit-3207 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1839 +-A limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3208 -m recent --name limit-3208 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3209 -m recent --name limit-3209 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3210 -m limit --limit 1/second -j LOG +-A limit-3210 -m recent --name limit-3210 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3211 -m recent --name limit-3211 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3212 -j TEE --gateway fc00::2 +-A limit-3212 -m recent --name limit-3212 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3213 -m recent --name limit-3213 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3214 -m recent --name limit-3214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3215 -m recent --name limit-3215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3216 -m recent --name limit-3216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3217 -m recent --name limit-3217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-322 -m limit --limit 1/second -j LOG +-A limit-322 -j ACCEPT +-A limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3220 -m limit --limit 1/second -j LOG +-A limit-3220 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3221 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3222 -j TEE --gateway fc00::2 +-A limit-3222 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3223 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3224 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3225 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3228 -j ACCEPT +-A limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-323 -m limit --limit 1/second -j LOG +-A limit-3230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3230 -m limit --limit 1/second -j LOG +-A limit-3230 -j ACCEPT +-A limit-3231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3231 -m limit --limit 1/second -j LOG +-A limit-3232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3232 -j TEE --gateway fc00::2 +-A limit-3232 -j ACCEPT +-A limit-3233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3233 -j TEE --gateway fc00::2 +-A limit-3234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3234 -j ACCEPT +-A limit-3236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3236 -j ACCEPT +-A limit-3237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-324 -j TEE --gateway fc00::2 +-A limit-324 -j ACCEPT +-A limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3240 -m limit --limit 1/second -j LOG +-A limit-3240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3242 -j TEE --gateway fc00::2 +-A limit-3242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-3248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3248 -j ACCEPT +-A limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-325 -j TEE --gateway fc00::2 +-A limit-3250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3250 -m limit --limit 1/second -j LOG +-A limit-3250 -j ACCEPT +-A limit-3251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3251 -m limit --limit 1/second -j LOG +-A limit-3252 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3252 -j TEE --gateway fc00::2 +-A limit-3252 -j ACCEPT +-A limit-3253 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3253 -j TEE --gateway fc00::2 +-A limit-3254 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3254 -j ACCEPT +-A limit-3256 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3256 -j ACCEPT +-A limit-3257 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3258 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3258 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3259 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3259 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-326 -j ACCEPT +-A limit-3260 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3260 -m limit --limit 1/second -j LOG +-A limit-3260 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3261 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3261 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3262 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3262 -j TEE --gateway fc00::2 +-A limit-3262 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3263 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3263 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3264 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3264 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3265 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3265 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3266 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3266 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3267 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3268 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3268 -j ACCEPT +-A limit-327 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3270 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3270 -m limit --limit 1/second -j LOG +-A limit-3270 -j ACCEPT +-A limit-3271 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3271 -m limit --limit 1/second -j LOG +-A limit-3272 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3272 -j TEE --gateway fc00::2 +-A limit-3272 -j ACCEPT +-A limit-3273 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3273 -j TEE --gateway fc00::2 +-A limit-3274 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3274 -j ACCEPT +-A limit-3276 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3276 -j ACCEPT +-A limit-3277 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3278 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3278 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3279 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3279 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-328 -j ACCEPT +-A limit-3280 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3280 -m limit --limit 1/second -j LOG +-A limit-3280 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3281 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3281 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3282 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3282 -j TEE --gateway fc00::2 +-A limit-3282 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3283 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3283 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3285 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3288 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3288 -j ACCEPT +-A limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3290 -m limit --limit 1/second -j LOG +-A limit-3290 -j ACCEPT +-A limit-3291 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3291 -m limit --limit 1/second -j LOG +-A limit-3292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3292 -j TEE --gateway fc00::2 +-A limit-3292 -j ACCEPT +-A limit-3293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3293 -j TEE --gateway fc00::2 +-A limit-3294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3294 -j ACCEPT +-A limit-3296 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3296 -j ACCEPT +-A limit-3297 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1840 +-A limit-3298 -m recent --name limit-3298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1841 +-A limit-3299 -m recent --name limit-3299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-33 -m limit --limit 1/second -j LOG +-A limit-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1842 +-A limit-3300 -m limit --limit 1/second -j LOG +-A limit-3300 -m recent --name limit-3300 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1843 +-A limit-3301 -m recent --name limit-3301 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1844 +-A limit-3302 -j TEE --gateway fc00::2 +-A limit-3302 -m recent --name limit-3302 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1845 +-A limit-3303 -m recent --name limit-3303 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1846 +-A limit-3304 -m recent --name limit-3304 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1847 +-A limit-3305 -m recent --name limit-3305 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1848 +-A limit-3306 -m recent --name limit-3306 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3307 -m recent --name limit-3307 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1849 +-A limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1850 +-A limit-3308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1851 +-A limit-3309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-331 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1852 +-A limit-3310 -m limit --limit 1/second -j LOG +-A limit-3310 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1853 +-A limit-3311 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1854 +-A limit-3312 -j TEE --gateway fc00::2 +-A limit-3312 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1855 +-A limit-3313 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1856 +-A limit-3314 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1857 +-A limit-3315 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1858 +-A limit-3316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1859 +-A limit-3318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1860 +-A limit-3318 -j ACCEPT +-A limit-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-332 -m limit --limit 1/second -j LOG +-A limit-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1862 +-A limit-3320 -m limit --limit 1/second -j LOG +-A limit-3320 -j ACCEPT +-A limit-3321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1863 +-A limit-3321 -m limit --limit 1/second -j LOG +-A limit-3322 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1864 +-A limit-3322 -j TEE --gateway fc00::2 +-A limit-3322 -j ACCEPT +-A limit-3323 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1865 +-A limit-3323 -j TEE --gateway fc00::2 +-A limit-3324 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1866 +-A limit-3324 -j ACCEPT +-A limit-3326 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1868 +-A limit-3326 -j ACCEPT +-A limit-3327 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1869 +-A limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1870 +-A limit-3328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1871 +-A limit-3329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1872 +-A limit-3330 -m limit --limit 1/second -j LOG +-A limit-3330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1873 +-A limit-3331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1874 +-A limit-3332 -j TEE --gateway fc00::2 +-A limit-3332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1875 +-A limit-3333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1876 +-A limit-3334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1877 +-A limit-3335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1878 +-A limit-3336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3337 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1879 +-A limit-3338 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1880 +-A limit-3338 -j ACCEPT +-A limit-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-334 -j TEE --gateway fc00::2 +-A limit-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3340 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1882 +-A limit-3340 -m limit --limit 1/second -j LOG +-A limit-3340 -j ACCEPT +-A limit-3341 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1883 +-A limit-3341 -m limit --limit 1/second -j LOG +-A limit-3342 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1884 +-A limit-3342 -j TEE --gateway fc00::2 +-A limit-3342 -j ACCEPT +-A limit-3343 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1885 +-A limit-3343 -j TEE --gateway fc00::2 +-A limit-3344 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1886 +-A limit-3344 -j ACCEPT +-A limit-3346 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1888 +-A limit-3346 -j ACCEPT +-A limit-3347 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1889 +-A limit-3348 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1890 +-A limit-3348 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3349 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1891 +-A limit-3349 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3350 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1892 +-A limit-3350 -m limit --limit 1/second -j LOG +-A limit-3350 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3351 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1893 +-A limit-3351 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3352 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1894 +-A limit-3352 -j TEE --gateway fc00::2 +-A limit-3352 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3353 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1895 +-A limit-3353 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3354 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1896 +-A limit-3354 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3355 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1897 +-A limit-3355 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3356 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1898 +-A limit-3356 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3357 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1899 +-A limit-3358 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1900 +-A limit-3358 -j ACCEPT +-A limit-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3360 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1902 +-A limit-3360 -m limit --limit 1/second -j LOG +-A limit-3360 -j ACCEPT +-A limit-3361 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1903 +-A limit-3361 -m limit --limit 1/second -j LOG +-A limit-3362 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1904 +-A limit-3362 -j TEE --gateway fc00::2 +-A limit-3362 -j ACCEPT +-A limit-3363 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1905 +-A limit-3363 -j TEE --gateway fc00::2 +-A limit-3364 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1906 +-A limit-3364 -j ACCEPT +-A limit-3366 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1908 +-A limit-3366 -j ACCEPT +-A limit-3367 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1909 +-A limit-3368 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1910 +-A limit-3368 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3369 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1911 +-A limit-3369 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-337 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3370 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1912 +-A limit-3370 -m limit --limit 1/second -j LOG +-A limit-3370 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3371 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1913 +-A limit-3371 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3372 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1914 +-A limit-3372 -j TEE --gateway fc00::2 +-A limit-3372 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3373 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1915 +-A limit-3373 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3374 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1916 +-A limit-3374 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3375 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1917 +-A limit-3375 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3376 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1918 +-A limit-3376 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3377 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1919 +-A limit-3378 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1920 +-A limit-3378 -j ACCEPT +-A limit-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-339 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-34 -m limit --limit 1/second -j LOG --A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-340 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-340 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-341 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-341 -m recent --name user:C --rsource --mask fe00:: --set --A limit-342 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-342 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-343 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3380 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1922 +-A limit-3380 -m limit --limit 1/second -j LOG +-A limit-3380 -j ACCEPT +-A limit-3381 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1923 +-A limit-3381 -m limit --limit 1/second -j LOG +-A limit-3382 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1924 +-A limit-3382 -j TEE --gateway fc00::2 +-A limit-3382 -j ACCEPT +-A limit-3383 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1925 +-A limit-3383 -j TEE --gateway fc00::2 +-A limit-3384 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1926 +-A limit-3384 -j ACCEPT +-A limit-3386 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1928 +-A limit-3386 -j ACCEPT +-A limit-3387 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1929 +-A limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3388 -m recent --name limit-3388 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3389 -m recent --name limit-3389 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3390 -m limit --limit 1/second -j LOG +-A limit-3390 -m recent --name limit-3390 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3391 -m recent --name limit-3391 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3392 -j TEE --gateway fc00::2 +-A limit-3392 -m recent --name limit-3392 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3393 -m recent --name limit-3393 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3394 -m recent --name limit-3394 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3395 -m recent --name limit-3395 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3396 -m recent --name limit-3396 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3397 -m recent --name limit-3397 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-34 -j TEE --gateway fc00::2 +-A limit-34 -j ACCEPT +-A limit-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-340 -j ACCEPT +-A limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3400 -m limit --limit 1/second -j LOG +-A limit-3400 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3401 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3402 -j TEE --gateway fc00::2 +-A limit-3402 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3403 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3404 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3405 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3406 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3407 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3408 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3408 -j ACCEPT +-A limit-341 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3410 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3410 -m limit --limit 1/second -j LOG +-A limit-3410 -j ACCEPT +-A limit-3411 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3411 -m limit --limit 1/second -j LOG +-A limit-3412 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3412 -j TEE --gateway fc00::2 +-A limit-3412 -j ACCEPT +-A limit-3413 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3413 -j TEE --gateway fc00::2 +-A limit-3414 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3414 -j ACCEPT +-A limit-3416 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3416 -j ACCEPT +-A limit-3417 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-342 -m limit --limit 1/second -j LOG +-A limit-342 -j ACCEPT +-A limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3420 -m limit --limit 1/second -j LOG +-A limit-3420 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3421 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3422 -j TEE --gateway fc00::2 +-A limit-3422 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3423 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3424 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3425 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3426 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3427 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3428 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3428 -j ACCEPT +-A limit-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-343 -m limit --limit 1/second -j LOG +-A limit-3430 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3430 -m limit --limit 1/second -j LOG +-A limit-3430 -j ACCEPT +-A limit-3431 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3431 -m limit --limit 1/second -j LOG +-A limit-3432 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3432 -j TEE --gateway fc00::2 +-A limit-3432 -j ACCEPT +-A limit-3433 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3433 -j TEE --gateway fc00::2 +-A limit-3434 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3434 -j ACCEPT +-A limit-3436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3436 -j ACCEPT +-A limit-3437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3438 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3438 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3439 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3439 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-344 -j TEE --gateway fc00::2 -A limit-344 -j ACCEPT --A limit-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-346 -m limit --limit 1/second -j LOG +-A limit-3440 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3440 -m limit --limit 1/second -j LOG +-A limit-3440 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3441 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3441 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3442 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3442 -j TEE --gateway fc00::2 +-A limit-3442 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3443 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3443 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3444 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3444 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3445 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3445 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3446 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3446 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3447 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3448 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3448 -j ACCEPT +-A limit-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-345 -j TEE --gateway fc00::2 +-A limit-3450 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3450 -m limit --limit 1/second -j LOG +-A limit-3450 -j ACCEPT +-A limit-3451 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3451 -m limit --limit 1/second -j LOG +-A limit-3452 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3452 -j TEE --gateway fc00::2 +-A limit-3452 -j ACCEPT +-A limit-3453 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3453 -j TEE --gateway fc00::2 +-A limit-3454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3454 -j ACCEPT +-A limit-3456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3456 -j ACCEPT +-A limit-3457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3458 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3458 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3459 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3459 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-346 -j ACCEPT --A limit-347 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-347 -m limit --limit 1/second -j LOG --A limit-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3460 -m limit --limit 1/second -j LOG +-A limit-3460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3461 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3462 -j TEE --gateway fc00::2 +-A limit-3462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3463 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3465 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3466 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3466 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3467 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3468 -j ACCEPT +-A limit-347 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3470 -m limit --limit 1/second -j LOG +-A limit-3470 -j ACCEPT +-A limit-3471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3471 -m limit --limit 1/second -j LOG +-A limit-3472 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3472 -j TEE --gateway fc00::2 +-A limit-3472 -j ACCEPT +-A limit-3473 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3473 -j TEE --gateway fc00::2 +-A limit-3474 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3474 -j ACCEPT +-A limit-3476 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3476 -j ACCEPT +-A limit-3477 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1930 +-A limit-3478 -m recent --name limit-3478 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1931 +-A limit-3479 -m recent --name limit-3479 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-348 -j ACCEPT --A limit-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-350 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-350 -j ACCEPT --A limit-351 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1932 +-A limit-3480 -m limit --limit 1/second -j LOG +-A limit-3480 -m recent --name limit-3480 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1933 +-A limit-3481 -m recent --name limit-3481 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1934 +-A limit-3482 -j TEE --gateway fc00::2 +-A limit-3482 -m recent --name limit-3482 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1935 +-A limit-3483 -m recent --name limit-3483 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1936 +-A limit-3484 -m recent --name limit-3484 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1937 +-A limit-3485 -m recent --name limit-3485 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1938 +-A limit-3486 -m recent --name limit-3486 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3487 -m recent --name limit-3487 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1939 +-A limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1940 +-A limit-3488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1941 +-A limit-3489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1942 +-A limit-3490 -m limit --limit 1/second -j LOG +-A limit-3490 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1943 +-A limit-3491 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1944 +-A limit-3492 -j TEE --gateway fc00::2 +-A limit-3492 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1945 +-A limit-3493 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1946 +-A limit-3494 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1947 +-A limit-3495 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1948 +-A limit-3496 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3497 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1949 +-A limit-3498 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1950 +-A limit-3498 -j ACCEPT +-A limit-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-35 -j TEE --gateway fc00::2 +-A limit-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3500 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1952 +-A limit-3500 -m limit --limit 1/second -j LOG +-A limit-3500 -j ACCEPT +-A limit-3501 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1953 +-A limit-3501 -m limit --limit 1/second -j LOG +-A limit-3502 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1954 +-A limit-3502 -j TEE --gateway fc00::2 +-A limit-3502 -j ACCEPT +-A limit-3503 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1955 +-A limit-3503 -j TEE --gateway fc00::2 +-A limit-3504 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1956 +-A limit-3504 -j ACCEPT +-A limit-3506 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1958 +-A limit-3506 -j ACCEPT +-A limit-3507 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1959 +-A limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1960 +-A limit-3508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1961 +-A limit-3509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-351 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1962 +-A limit-3510 -m limit --limit 1/second -j LOG +-A limit-3510 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1963 +-A limit-3511 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1964 +-A limit-3512 -j TEE --gateway fc00::2 +-A limit-3512 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1965 +-A limit-3513 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1966 +-A limit-3514 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1967 +-A limit-3515 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1968 +-A limit-3516 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3517 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1969 +-A limit-3518 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1970 +-A limit-3518 -j ACCEPT +-A limit-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-352 -m limit --limit 1/second -j LOG -A limit-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-353 -m recent --name user:C --rdest --mask fe00:: --set --A limit-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-354 -m limit --limit 1/second -j LOG +-A limit-3520 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1972 +-A limit-3520 -m limit --limit 1/second -j LOG +-A limit-3520 -j ACCEPT +-A limit-3521 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1973 +-A limit-3521 -m limit --limit 1/second -j LOG +-A limit-3522 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1974 +-A limit-3522 -j TEE --gateway fc00::2 +-A limit-3522 -j ACCEPT +-A limit-3523 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1975 +-A limit-3523 -j TEE --gateway fc00::2 +-A limit-3524 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1976 +-A limit-3524 -j ACCEPT +-A limit-3526 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1978 +-A limit-3526 -j ACCEPT +-A limit-3527 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1979 +-A limit-3528 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1980 +-A limit-3528 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3529 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1981 +-A limit-3529 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3530 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1982 +-A limit-3530 -m limit --limit 1/second -j LOG +-A limit-3530 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3531 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1983 +-A limit-3531 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3532 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1984 +-A limit-3532 -j TEE --gateway fc00::2 +-A limit-3532 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3533 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1985 +-A limit-3533 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3534 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1986 +-A limit-3534 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3535 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1987 +-A limit-3535 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3536 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1988 +-A limit-3536 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3537 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1989 +-A limit-3538 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1990 +-A limit-3538 -j ACCEPT +-A limit-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-354 -j TEE --gateway fc00::2 -A limit-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-355 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3540 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1992 +-A limit-3540 -m limit --limit 1/second -j LOG +-A limit-3540 -j ACCEPT +-A limit-3541 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1993 +-A limit-3541 -m limit --limit 1/second -j LOG +-A limit-3542 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1994 +-A limit-3542 -j TEE --gateway fc00::2 +-A limit-3542 -j ACCEPT +-A limit-3543 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1995 +-A limit-3543 -j TEE --gateway fc00::2 +-A limit-3544 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1996 +-A limit-3544 -j ACCEPT +-A limit-3546 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1998 +-A limit-3546 -j ACCEPT +-A limit-3547 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1999 +-A limit-3548 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2000 +-A limit-3548 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3549 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2001 +-A limit-3549 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3550 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2002 +-A limit-3550 -m limit --limit 1/second -j LOG +-A limit-3550 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3551 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2003 +-A limit-3551 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3552 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2004 +-A limit-3552 -j TEE --gateway fc00::2 +-A limit-3552 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3553 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2005 +-A limit-3553 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3554 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2006 +-A limit-3554 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3555 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2007 +-A limit-3555 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3556 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2008 +-A limit-3556 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3557 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2009 +-A limit-3558 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2010 +-A limit-3558 -j ACCEPT +-A limit-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3560 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2012 +-A limit-3560 -m limit --limit 1/second -j LOG +-A limit-3560 -j ACCEPT +-A limit-3561 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2013 +-A limit-3561 -m limit --limit 1/second -j LOG +-A limit-3562 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2014 +-A limit-3562 -j TEE --gateway fc00::2 +-A limit-3562 -j ACCEPT +-A limit-3563 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2015 +-A limit-3563 -j TEE --gateway fc00::2 +-A limit-3564 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2016 +-A limit-3564 -j ACCEPT +-A limit-3566 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2018 +-A limit-3566 -j ACCEPT +-A limit-3567 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2019 +-A limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2020 +-A limit-3568 -m recent --name limit-3568 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2021 +-A limit-3569 -m recent --name limit-3569 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-357 -m recent --name user:C --rdest --mask fe00:: --set --A limit-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2022 +-A limit-3570 -m limit --limit 1/second -j LOG +-A limit-3570 -m recent --name limit-3570 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2023 +-A limit-3571 -m recent --name limit-3571 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2024 +-A limit-3572 -j TEE --gateway fc00::2 +-A limit-3572 -m recent --name limit-3572 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2025 +-A limit-3573 -m recent --name limit-3573 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2026 +-A limit-3574 -m recent --name limit-3574 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2027 +-A limit-3575 -m recent --name limit-3575 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2028 +-A limit-3576 -m recent --name limit-3576 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3577 -m recent --name limit-3577 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2029 +-A limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2030 +-A limit-3578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2031 +-A limit-3579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-36 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-36 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2032 +-A limit-3580 -m limit --limit 1/second -j LOG +-A limit-3580 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2033 +-A limit-3581 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2034 +-A limit-3582 -j TEE --gateway fc00::2 +-A limit-3582 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2035 +-A limit-3583 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2036 +-A limit-3584 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2037 +-A limit-3585 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2038 +-A limit-3586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2039 +-A limit-3588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2040 +-A limit-3588 -j ACCEPT +-A limit-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-3590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2042 +-A limit-3590 -m limit --limit 1/second -j LOG +-A limit-3590 -j ACCEPT +-A limit-3591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2043 +-A limit-3591 -m limit --limit 1/second -j LOG +-A limit-3592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2044 +-A limit-3592 -j TEE --gateway fc00::2 +-A limit-3592 -j ACCEPT +-A limit-3593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2045 +-A limit-3593 -j TEE --gateway fc00::2 +-A limit-3594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2046 +-A limit-3594 -j ACCEPT +-A limit-3596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2048 +-A limit-3596 -j ACCEPT +-A limit-3597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2049 +-A limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2050 +-A limit-3598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2051 +-A limit-3599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-36 -j ACCEPT +-A limit-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-360 -j ACCEPT --A limit-361 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2052 +-A limit-3600 -m limit --limit 1/second -j LOG +-A limit-3600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2053 +-A limit-3601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2054 +-A limit-3602 -j TEE --gateway fc00::2 +-A limit-3602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2055 +-A limit-3603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2056 +-A limit-3604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2057 +-A limit-3605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2058 +-A limit-3606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2059 +-A limit-3608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2060 +-A limit-3608 -j ACCEPT +-A limit-361 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3610 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2062 +-A limit-3610 -m limit --limit 1/second -j LOG +-A limit-3610 -j ACCEPT +-A limit-3611 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2063 +-A limit-3611 -m limit --limit 1/second -j LOG +-A limit-3612 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2064 +-A limit-3612 -j TEE --gateway fc00::2 +-A limit-3612 -j ACCEPT +-A limit-3613 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2065 +-A limit-3613 -j TEE --gateway fc00::2 +-A limit-3614 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2066 +-A limit-3614 -j ACCEPT +-A limit-3616 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2068 +-A limit-3616 -j ACCEPT +-A limit-3617 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2069 +-A limit-3618 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2070 +-A limit-3618 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3619 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2071 +-A limit-3619 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m limit --limit 1/second -j LOG -A limit-362 -j ACCEPT --A limit-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3620 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2072 +-A limit-3620 -m limit --limit 1/second -j LOG +-A limit-3620 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3621 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2073 +-A limit-3621 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3622 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2074 +-A limit-3622 -j TEE --gateway fc00::2 +-A limit-3622 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3623 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2075 +-A limit-3623 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3624 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2076 +-A limit-3624 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3625 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2077 +-A limit-3625 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3626 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2078 +-A limit-3626 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3627 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2079 +-A limit-3628 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2080 +-A limit-3628 -j ACCEPT +-A limit-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-363 -m limit --limit 1/second -j LOG --A limit-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3630 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2082 +-A limit-3630 -m limit --limit 1/second -j LOG +-A limit-3630 -j ACCEPT +-A limit-3631 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2083 +-A limit-3631 -m limit --limit 1/second -j LOG +-A limit-3632 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2084 +-A limit-3632 -j TEE --gateway fc00::2 +-A limit-3632 -j ACCEPT +-A limit-3633 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2085 +-A limit-3633 -j TEE --gateway fc00::2 +-A limit-3634 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2086 +-A limit-3634 -j ACCEPT +-A limit-3636 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2088 +-A limit-3636 -j ACCEPT +-A limit-3637 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2089 +-A limit-3638 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2090 +-A limit-3638 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3639 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2091 +-A limit-3639 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-364 -j TEE --gateway fc00::2 -A limit-364 -j ACCEPT --A limit-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3640 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2092 +-A limit-3640 -m limit --limit 1/second -j LOG +-A limit-3640 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3641 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2093 +-A limit-3641 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3642 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2094 +-A limit-3642 -j TEE --gateway fc00::2 +-A limit-3642 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3643 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2095 +-A limit-3643 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3644 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2096 +-A limit-3644 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3645 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2097 +-A limit-3645 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3646 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2098 +-A limit-3646 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3647 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2099 +-A limit-3648 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2100 +-A limit-3648 -j ACCEPT +-A limit-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-365 -j TEE --gateway fc00::2 +-A limit-3650 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2102 +-A limit-3650 -m limit --limit 1/second -j LOG +-A limit-3650 -j ACCEPT +-A limit-3651 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2103 +-A limit-3651 -m limit --limit 1/second -j LOG +-A limit-3652 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2104 +-A limit-3652 -j TEE --gateway fc00::2 +-A limit-3652 -j ACCEPT +-A limit-3653 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2105 +-A limit-3653 -j TEE --gateway fc00::2 +-A limit-3654 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2106 +-A limit-3654 -j ACCEPT +-A limit-3656 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2108 +-A limit-3656 -j ACCEPT +-A limit-3657 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2109 +-A limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3658 -m recent --name limit-3658 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3659 -m recent --name limit-3659 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-366 -j ACCEPT --A limit-367 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-152 --A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-153 --A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-37 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-37 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-154 --A limit-370 -m limit --limit 1/second -j LOG +-A limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3660 -m limit --limit 1/second -j LOG +-A limit-3660 -m recent --name limit-3660 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3661 -m recent --name limit-3661 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3662 -j TEE --gateway fc00::2 +-A limit-3662 -m recent --name limit-3662 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3663 -m recent --name limit-3663 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3664 -m recent --name limit-3664 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3665 -m recent --name limit-3665 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3666 -m recent --name limit-3666 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3667 -m recent --name limit-3667 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-367 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3670 -m limit --limit 1/second -j LOG +-A limit-3670 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3671 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3672 -j TEE --gateway fc00::2 +-A limit-3672 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3673 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3674 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3675 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3676 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3677 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3678 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3678 -j ACCEPT +-A limit-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-368 -j ACCEPT +-A limit-3680 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3680 -m limit --limit 1/second -j LOG +-A limit-3680 -j ACCEPT +-A limit-3681 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3681 -m limit --limit 1/second -j LOG +-A limit-3682 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3682 -j TEE --gateway fc00::2 +-A limit-3682 -j ACCEPT +-A limit-3683 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3683 -j TEE --gateway fc00::2 +-A limit-3684 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3684 -j ACCEPT +-A limit-3686 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3686 -j ACCEPT +-A limit-3687 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3690 -m limit --limit 1/second -j LOG +-A limit-3690 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3691 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3692 -j TEE --gateway fc00::2 +-A limit-3692 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3693 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3694 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3695 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3696 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3697 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-3698 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3698 -j ACCEPT +-A limit-37 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-190 -A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-155 --A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-156 +-A limit-3700 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3700 -m limit --limit 1/second -j LOG +-A limit-3700 -j ACCEPT +-A limit-3701 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3701 -m limit --limit 1/second -j LOG +-A limit-3702 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3702 -j TEE --gateway fc00::2 +-A limit-3702 -j ACCEPT +-A limit-3703 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3703 -j TEE --gateway fc00::2 +-A limit-3704 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3704 -j ACCEPT +-A limit-3706 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3706 -j ACCEPT +-A limit-3707 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3708 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3708 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3709 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3709 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-191 +-A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3710 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3710 -m limit --limit 1/second -j LOG +-A limit-3710 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3711 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3711 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3712 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3712 -j TEE --gateway fc00::2 +-A limit-3712 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3713 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3713 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3714 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3714 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3715 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3715 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3716 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3716 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3717 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3718 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3718 -j ACCEPT +-A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-192 +-A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-157 --A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-158 +-A limit-3720 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3720 -m limit --limit 1/second -j LOG +-A limit-3720 -j ACCEPT +-A limit-3721 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3721 -m limit --limit 1/second -j LOG +-A limit-3722 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3722 -j TEE --gateway fc00::2 +-A limit-3722 -j ACCEPT +-A limit-3723 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3723 -j TEE --gateway fc00::2 +-A limit-3724 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3724 -j ACCEPT +-A limit-3726 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3726 -j ACCEPT +-A limit-3727 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3728 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3728 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3729 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3729 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-193 +-A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3730 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3730 -m limit --limit 1/second -j LOG +-A limit-3730 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3731 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3731 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3732 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3732 -j TEE --gateway fc00::2 +-A limit-3732 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3733 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3733 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3734 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3734 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3735 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3735 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3736 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3736 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3737 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-3738 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3738 -j ACCEPT +-A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-194 +-A limit-374 -j TEE --gateway fc00::2 -A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-159 --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-160 --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-161 --A limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-162 --A limit-378 -m limit --limit 1/second -j LOG --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-163 --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-38 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-164 +-A limit-3740 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3740 -m limit --limit 1/second -j LOG +-A limit-3740 -j ACCEPT +-A limit-3741 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3741 -m limit --limit 1/second -j LOG +-A limit-3742 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3742 -j TEE --gateway fc00::2 +-A limit-3742 -j ACCEPT +-A limit-3743 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3743 -j TEE --gateway fc00::2 +-A limit-3744 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3744 -j ACCEPT +-A limit-3746 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3746 -j ACCEPT +-A limit-3747 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2110 +-A limit-3748 -m recent --name limit-3748 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2111 +-A limit-3749 -m recent --name limit-3749 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-195 +-A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2112 +-A limit-3750 -m limit --limit 1/second -j LOG +-A limit-3750 -m recent --name limit-3750 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2113 +-A limit-3751 -m recent --name limit-3751 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2114 +-A limit-3752 -j TEE --gateway fc00::2 +-A limit-3752 -m recent --name limit-3752 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2115 +-A limit-3753 -m recent --name limit-3753 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2116 +-A limit-3754 -m recent --name limit-3754 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2117 +-A limit-3755 -m recent --name limit-3755 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2118 +-A limit-3756 -m recent --name limit-3756 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3757 -m recent --name limit-3757 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2119 +-A limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2120 +-A limit-3758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2121 +-A limit-3759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-196 +-A limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2122 +-A limit-3760 -m limit --limit 1/second -j LOG +-A limit-3760 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2123 +-A limit-3761 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2124 +-A limit-3762 -j TEE --gateway fc00::2 +-A limit-3762 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2125 +-A limit-3763 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2126 +-A limit-3764 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2127 +-A limit-3765 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2128 +-A limit-3766 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3767 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2129 +-A limit-3768 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2130 +-A limit-3768 -j ACCEPT +-A limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-197 +-A limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3770 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2132 +-A limit-3770 -m limit --limit 1/second -j LOG +-A limit-3770 -j ACCEPT +-A limit-3771 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2133 +-A limit-3771 -m limit --limit 1/second -j LOG +-A limit-3772 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2134 +-A limit-3772 -j TEE --gateway fc00::2 +-A limit-3772 -j ACCEPT +-A limit-3773 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2135 +-A limit-3773 -j TEE --gateway fc00::2 +-A limit-3774 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2136 +-A limit-3774 -j ACCEPT +-A limit-3776 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2138 +-A limit-3776 -j ACCEPT +-A limit-3777 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2139 +-A limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2140 +-A limit-3778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2141 +-A limit-3779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-198 +-A limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2142 +-A limit-3780 -m limit --limit 1/second -j LOG +-A limit-3780 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2143 +-A limit-3781 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2144 +-A limit-3782 -j TEE --gateway fc00::2 +-A limit-3782 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2145 +-A limit-3783 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2146 +-A limit-3784 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2147 +-A limit-3785 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2148 +-A limit-3786 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3787 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-2149 +-A limit-3788 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2150 +-A limit-3788 -j ACCEPT +-A limit-379 -m recent --name limit-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-199 +-A limit-3790 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2152 +-A limit-3790 -m limit --limit 1/second -j LOG +-A limit-3790 -j ACCEPT +-A limit-3791 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2153 +-A limit-3791 -m limit --limit 1/second -j LOG +-A limit-3792 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2154 +-A limit-3792 -j TEE --gateway fc00::2 +-A limit-3792 -j ACCEPT +-A limit-3793 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2155 +-A limit-3793 -j TEE --gateway fc00::2 +-A limit-3794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2156 +-A limit-3794 -j ACCEPT +-A limit-3796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2158 +-A limit-3796 -j ACCEPT +-A limit-3797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-2159 +-A limit-3798 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2160 +-A limit-3798 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3799 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2161 +-A limit-3799 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-38 -j ACCEPT +-A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-200 -A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-165 +-A limit-3800 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2162 +-A limit-3800 -m limit --limit 1/second -j LOG +-A limit-3800 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3801 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2163 +-A limit-3801 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3802 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2164 +-A limit-3802 -j TEE --gateway fc00::2 +-A limit-3802 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3803 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2165 +-A limit-3803 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3804 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2166 +-A limit-3804 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3805 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2167 +-A limit-3805 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-3806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2168 +-A limit-3806 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-3807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2169 +-A limit-3808 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2170 +-A limit-3808 -j ACCEPT +-A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-201 -A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-166 +-A limit-3810 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2172 +-A limit-3810 -m limit --limit 1/second -j LOG +-A limit-3810 -j ACCEPT +-A limit-3811 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2173 +-A limit-3811 -m limit --limit 1/second -j LOG +-A limit-3812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2174 +-A limit-3812 -j TEE --gateway fc00::2 +-A limit-3812 -j ACCEPT +-A limit-3813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2175 +-A limit-3813 -j TEE --gateway fc00::2 +-A limit-3814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2176 +-A limit-3814 -j ACCEPT +-A limit-3816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2178 +-A limit-3816 -j ACCEPT +-A limit-3817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2179 +-A limit-3818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2180 +-A limit-3818 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2181 +-A limit-3819 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-202 +-A limit-382 -m limit --limit 1/second -j LOG -A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-167 --A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-168 --A limit-384 -j ACCEPT --A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-169 --A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-170 --A limit-386 -m limit --limit 1/second -j LOG --A limit-386 -j ACCEPT --A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-171 --A limit-387 -m limit --limit 1/second -j LOG --A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-172 --A limit-388 -j ACCEPT --A limit-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-173 --A limit-39 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-174 +-A limit-3820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2182 +-A limit-3820 -m limit --limit 1/second -j LOG +-A limit-3820 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2183 +-A limit-3821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-3822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2184 +-A limit-3822 -j TEE --gateway fc00::2 +-A limit-3822 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2185 +-A limit-3823 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-3824 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2186 +-A limit-3824 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3825 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2187 +-A limit-3825 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-3826 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2188 +-A limit-3826 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-3827 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-2189 +-A limit-3828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2190 +-A limit-3828 -j ACCEPT +-A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-203 +-A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-3830 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2192 +-A limit-3830 -m limit --limit 1/second -j LOG +-A limit-3830 -j ACCEPT +-A limit-3831 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2193 +-A limit-3831 -m limit --limit 1/second -j LOG +-A limit-3832 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2194 +-A limit-3832 -j TEE --gateway fc00::2 +-A limit-3832 -j ACCEPT +-A limit-3833 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2195 +-A limit-3833 -j TEE --gateway fc00::2 +-A limit-3834 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2196 +-A limit-3834 -j ACCEPT +-A limit-3836 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2198 +-A limit-3836 -j ACCEPT +-A limit-3837 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-2199 +-A limit-3838 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3838 -j ACCEPT +-A limit-3838 -m limit --limit 1/second -j LOG +-A limit-3838 -j DROP +-A limit-3839 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3839 -j RETURN +-A limit-3839 -m limit --limit 1/second -j LOG +-A limit-3839 -j DROP +-A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-204 +-A limit-384 -j TEE --gateway fc00::2 +-A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3840 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3840 -j logaccept-66 +-A limit-3840 -m limit --limit 1/second -j LOG +-A limit-3840 -j DROP +-A limit-3841 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3841 -j logaccept-67 +-A limit-3841 -m limit --limit 1/second -j LOG +-A limit-3841 -j DROP +-A limit-3842 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3842 -j ACCEPT +-A limit-3842 -m limit --limit 1/second -j LOG +-A limit-3842 -j DROP +-A limit-3843 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3843 -j logaccept-68 +-A limit-3843 -m limit --limit 1/second -j LOG +-A limit-3843 -j DROP +-A limit-3844 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3844 -j ACCEPT +-A limit-3844 -j DROP +-A limit-3845 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3845 -j RETURN +-A limit-3845 -j DROP +-A limit-3846 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3846 -j logaccept-69 +-A limit-3846 -j DROP +-A limit-3847 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3847 -j logaccept-70 +-A limit-3847 -j DROP +-A limit-3848 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3848 -j ACCEPT +-A limit-3848 -j DROP +-A limit-3849 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3849 -j logaccept-71 +-A limit-3849 -j DROP +-A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-205 +-A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-3850 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3850 -j ACCEPT +-A limit-3850 -m limit --limit 1/second -j LOG +-A limit-3850 -j DROP +-A limit-3851 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3851 -j RETURN +-A limit-3851 -m limit --limit 1/second -j LOG +-A limit-3851 -j DROP +-A limit-3852 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3852 -j logaccept-72 +-A limit-3852 -m limit --limit 1/second -j LOG +-A limit-3852 -j DROP +-A limit-3853 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3853 -j logaccept-73 +-A limit-3853 -m limit --limit 1/second -j LOG +-A limit-3853 -j DROP +-A limit-3854 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3854 -j ACCEPT +-A limit-3854 -m limit --limit 1/second -j LOG +-A limit-3854 -j DROP +-A limit-3855 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3855 -j logaccept-74 +-A limit-3855 -m limit --limit 1/second -j LOG +-A limit-3855 -j DROP +-A limit-3856 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3856 -j ACCEPT +-A limit-3856 -j TEE --gateway fc00::2 +-A limit-3856 -j DROP +-A limit-3857 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3857 -j RETURN +-A limit-3857 -j TEE --gateway fc00::2 +-A limit-3857 -j DROP +-A limit-3858 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3858 -j logaccept-75 +-A limit-3858 -j TEE --gateway fc00::2 +-A limit-3858 -j DROP +-A limit-3859 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3859 -j logaccept-76 +-A limit-3859 -j TEE --gateway fc00::2 +-A limit-3859 -j DROP +-A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-206 +-A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3860 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3860 -j ACCEPT +-A limit-3860 -j TEE --gateway fc00::2 +-A limit-3860 -j DROP +-A limit-3861 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3861 -j logaccept-77 +-A limit-3861 -j TEE --gateway fc00::2 +-A limit-3861 -j DROP +-A limit-3862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3862 -j ACCEPT +-A limit-3862 -j DROP +-A limit-3863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3863 -j RETURN +-A limit-3863 -j DROP +-A limit-3864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3864 -j logaccept-78 +-A limit-3864 -j DROP +-A limit-3865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3865 -j logaccept-79 +-A limit-3865 -j DROP +-A limit-3866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3866 -j ACCEPT +-A limit-3866 -j DROP +-A limit-3867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3867 -j logaccept-80 +-A limit-3867 -j DROP +-A limit-3868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3868 -j ACCEPT +-A limit-3868 -j DROP +-A limit-3869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3869 -j RETURN +-A limit-3869 -j DROP +-A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-207 +-A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-3870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3870 -j logaccept-81 +-A limit-3870 -j DROP +-A limit-3871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3871 -j logaccept-82 +-A limit-3871 -j DROP +-A limit-3872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3872 -j ACCEPT +-A limit-3872 -j DROP +-A limit-3873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3873 -j logaccept-83 +-A limit-3873 -j DROP +-A limit-3874 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3874 -j ACCEPT +-A limit-3874 -j DROP +-A limit-3875 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3875 -j RETURN +-A limit-3875 -j DROP +-A limit-3876 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3876 -j logaccept-84 +-A limit-3876 -j DROP +-A limit-3877 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3877 -j logaccept-85 +-A limit-3877 -j DROP +-A limit-3878 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3878 -j ACCEPT +-A limit-3878 -j DROP +-A limit-3879 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3879 -j logaccept-86 +-A limit-3879 -j DROP +-A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-208 +-A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-3880 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3880 -j ACCEPT +-A limit-3880 -m limit --limit 1/second -j LOG +-A limit-3880 -j DROP +-A limit-3881 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3881 -j RETURN +-A limit-3881 -m limit --limit 1/second -j LOG +-A limit-3881 -j DROP +-A limit-3882 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3882 -j logaccept-87 +-A limit-3882 -m limit --limit 1/second -j LOG +-A limit-3882 -j DROP +-A limit-3883 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3883 -j logaccept-88 +-A limit-3883 -m limit --limit 1/second -j LOG +-A limit-3883 -j DROP +-A limit-3884 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3884 -j ACCEPT +-A limit-3884 -m limit --limit 1/second -j LOG +-A limit-3884 -j DROP +-A limit-3885 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3885 -j logaccept-89 +-A limit-3885 -m limit --limit 1/second -j LOG +-A limit-3885 -j DROP +-A limit-3886 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3886 -j ACCEPT +-A limit-3886 -j TEE --gateway fc00::2 +-A limit-3886 -j DROP +-A limit-3887 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3887 -j RETURN +-A limit-3887 -j TEE --gateway fc00::2 +-A limit-3887 -j DROP +-A limit-3888 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3888 -j logaccept-90 +-A limit-3888 -j TEE --gateway fc00::2 +-A limit-3888 -j DROP +-A limit-3889 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3889 -j logaccept-91 +-A limit-3889 -j TEE --gateway fc00::2 +-A limit-3889 -j DROP +-A limit-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-209 +-A limit-3890 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3890 -j ACCEPT +-A limit-3890 -j TEE --gateway fc00::2 +-A limit-3890 -j DROP +-A limit-3891 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3891 -j logaccept-92 +-A limit-3891 -j TEE --gateway fc00::2 +-A limit-3891 -j DROP +-A limit-3892 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3892 -j ACCEPT +-A limit-3892 -j DROP +-A limit-3893 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3893 -j RETURN +-A limit-3893 -j DROP +-A limit-3894 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3894 -j logaccept-93 +-A limit-3894 -j DROP +-A limit-3895 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3895 -j logaccept-94 +-A limit-3895 -j DROP +-A limit-3896 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3896 -j ACCEPT +-A limit-3896 -j DROP +-A limit-3897 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3897 -j logaccept-95 +-A limit-3897 -j DROP +-A limit-3898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3898 -j ACCEPT +-A limit-3898 -j DROP +-A limit-3899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3899 -j RETURN +-A limit-3899 -j DROP +-A limit-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-210 -A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-175 --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 --A limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 --A limit-394 -m limit --limit 1/second -j LOG --A limit-394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 --A limit-395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-396 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 --A limit-396 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-397 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 --A limit-397 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-398 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 --A limit-398 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-399 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-3900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3900 -j logaccept-96 +-A limit-3900 -j DROP +-A limit-3901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3901 -j logaccept-97 +-A limit-3901 -j DROP +-A limit-3902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3902 -j ACCEPT +-A limit-3902 -j DROP +-A limit-3903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-3903 -j logaccept-98 +-A limit-3903 -j DROP +-A limit-391 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-211 +-A limit-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-212 +-A limit-392 -m limit --limit 1/second -j LOG +-A limit-392 -j ACCEPT +-A limit-393 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-213 +-A limit-393 -m limit --limit 1/second -j LOG +-A limit-394 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-214 +-A limit-394 -j TEE --gateway fc00::2 +-A limit-394 -j ACCEPT +-A limit-395 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-215 +-A limit-395 -j TEE --gateway fc00::2 +-A limit-396 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-216 +-A limit-396 -j ACCEPT +-A limit-397 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-217 +-A limit-398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-218 +-A limit-398 -j ACCEPT +-A limit-399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-219 -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-4 -j TEE --gateway fc00::2 -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-40 -j ACCEPT --A limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-184 --A limit-400 -j ACCEPT --A limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-185 --A limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-220 +-A limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-221 +-A limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-222 -A limit-402 -m limit --limit 1/second -j LOG --A limit-402 -j ACCEPT --A limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 --A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 --A limit-404 -j ACCEPT --A limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 --A limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 --A limit-406 -j ACCEPT --A limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 --A limit-408 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-192 --A limit-408 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-409 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-193 --A limit-409 -m recent --name user:C --rsource --mask fe00:: --set --A limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-410 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-194 --A limit-410 -m limit --limit 1/second -j LOG --A limit-410 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-411 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-195 --A limit-411 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-412 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-196 --A limit-412 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-413 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-197 --A limit-413 -m recent --name user:C --rsource --mask fe00:: --set --A limit-414 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-198 --A limit-414 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-415 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-199 --A limit-416 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-223 +-A limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-224 +-A limit-404 -j TEE --gateway fc00::2 +-A limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-225 +-A limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-226 +-A limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-227 +-A limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-228 +-A limit-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-409 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-410 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-410 -j ACCEPT +-A limit-411 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-412 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-412 -m limit --limit 1/second -j LOG +-A limit-412 -j ACCEPT +-A limit-413 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-413 -m limit --limit 1/second -j LOG +-A limit-414 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-414 -j TEE --gateway fc00::2 +-A limit-414 -j ACCEPT +-A limit-415 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-415 -j TEE --gateway fc00::2 +-A limit-416 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-236 -A limit-416 -j ACCEPT --A limit-417 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-201 --A limit-418 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-202 --A limit-418 -m limit --limit 1/second -j LOG +-A limit-417 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-238 -A limit-418 -j ACCEPT --A limit-419 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-203 --A limit-419 -m limit --limit 1/second -j LOG --A limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-42 -m limit --limit 1/second -j LOG --A limit-42 -j ACCEPT --A limit-420 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-204 --A limit-420 -j ACCEPT --A limit-421 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-205 --A limit-422 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-206 --A limit-422 -j ACCEPT --A limit-423 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-207 --A limit-424 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 --A limit-424 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-425 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 --A limit-425 -m recent --name user:C --rdest --mask fe00:: --set --A limit-426 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 --A limit-426 -m limit --limit 1/second -j LOG --A limit-426 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-427 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-211 --A limit-427 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-428 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-212 --A limit-428 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-429 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-213 --A limit-429 -m recent --name user:C --rdest --mask fe00:: --set --A limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-43 -m limit --limit 1/second -j LOG --A limit-430 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-214 --A limit-430 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-431 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-215 --A limit-432 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-420 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-420 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-421 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-421 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-422 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-422 -m limit --limit 1/second -j LOG +-A limit-422 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-423 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-423 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-424 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-424 -j TEE --gateway fc00::2 +-A limit-424 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-425 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-425 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-426 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-426 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-427 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-427 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-428 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-428 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-429 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-249 +-A limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-430 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-430 -j ACCEPT +-A limit-431 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-251 +-A limit-432 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-432 -m limit --limit 1/second -j LOG -A limit-432 -j ACCEPT --A limit-433 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-217 --A limit-434 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-218 --A limit-434 -m limit --limit 1/second -j LOG +-A limit-433 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-433 -m limit --limit 1/second -j LOG +-A limit-434 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-434 -j TEE --gateway fc00::2 -A limit-434 -j ACCEPT --A limit-435 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-219 --A limit-435 -m limit --limit 1/second -j LOG --A limit-436 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-435 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-435 -j TEE --gateway fc00::2 +-A limit-436 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-256 -A limit-436 -j ACCEPT --A limit-437 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-221 --A limit-438 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-437 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-438 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-258 -A limit-438 -j ACCEPT --A limit-439 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 --A limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-44 -j ACCEPT --A limit-440 -m recent --name limit-440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-440 -m recent --name limit-440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-441 -m recent --name limit-441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-441 -m recent --name limit-441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-442 -m recent --name limit-442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-439 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-44 -j TEE --gateway fc00::2 +-A limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-440 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-440 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-441 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-261 +-A limit-441 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-442 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-262 -A limit-442 -m limit --limit 1/second -j LOG --A limit-442 -m recent --name limit-442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-443 -m recent --name limit-443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-443 -m recent --name limit-443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-444 -m recent --name limit-444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-444 -m recent --name limit-444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-445 -m recent --name limit-445 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-445 -m recent --name limit-445 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-446 -m recent --name limit-446 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-446 -m recent --name limit-446 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-447 -m recent --name limit-447 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-450 -m limit --limit 1/second -j LOG --A limit-450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-455 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-456 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-442 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-443 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-443 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-444 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-264 +-A limit-444 -j TEE --gateway fc00::2 +-A limit-444 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-445 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-445 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-446 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-446 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-447 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-447 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-448 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-448 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-449 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-450 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-450 -j ACCEPT +-A limit-451 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 +-A limit-452 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-452 -m limit --limit 1/second -j LOG +-A limit-452 -j ACCEPT +-A limit-453 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 +-A limit-453 -m limit --limit 1/second -j LOG +-A limit-454 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-454 -j TEE --gateway fc00::2 +-A limit-454 -j ACCEPT +-A limit-455 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-455 -j TEE --gateway fc00::2 +-A limit-456 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 -A limit-456 -j ACCEPT --A limit-457 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-458 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-458 -m limit --limit 1/second -j LOG +-A limit-457 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-458 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-278 -A limit-458 -j ACCEPT --A limit-459 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-459 -m limit --limit 1/second -j LOG --A limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-46 -j ACCEPT --A limit-460 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-460 -j ACCEPT --A limit-461 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-462 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-462 -j ACCEPT --A limit-463 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-464 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-464 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-465 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-465 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-466 -m limit --limit 1/second -j LOG --A limit-466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-472 -j ACCEPT --A limit-473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-474 -m limit --limit 1/second -j LOG --A limit-474 -j ACCEPT --A limit-475 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-475 -m limit --limit 1/second -j LOG --A limit-476 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-476 -j ACCEPT --A limit-477 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-478 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-478 -j ACCEPT --A limit-479 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-48 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-48 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-480 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-480 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-481 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-481 -m recent --name user:C --rsource --mask fe00:: --set --A limit-482 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-459 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-460 -m recent --name limit-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-460 -m recent --name limit-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-461 -m recent --name limit-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-461 -m recent --name limit-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-462 -m recent --name limit-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-462 -m limit --limit 1/second -j LOG +-A limit-462 -m recent --name limit-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-463 -m recent --name limit-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-463 -m recent --name limit-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-464 -j TEE --gateway fc00::2 +-A limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-469 -m recent --name limit-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-472 -m limit --limit 1/second -j LOG +-A limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-474 -j TEE --gateway fc00::2 +-A limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-480 -j ACCEPT +-A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-482 -m limit --limit 1/second -j LOG --A limit-482 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-483 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-483 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-484 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-484 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-485 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-485 -m recent --name user:C --rsource --mask fe00:: --set --A limit-486 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-486 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-487 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-488 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-482 -j ACCEPT +-A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-483 -m limit --limit 1/second -j LOG +-A limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-484 -j TEE --gateway fc00::2 +-A limit-484 -j ACCEPT +-A limit-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-485 -j TEE --gateway fc00::2 +-A limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-486 -j ACCEPT +-A limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-488 -j ACCEPT --A limit-489 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-49 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-49 -m recent --name user:C --rsource --mask fe00:: --set --A limit-490 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-490 -m limit --limit 1/second -j LOG --A limit-490 -j ACCEPT --A limit-491 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-491 -m limit --limit 1/second -j LOG --A limit-492 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-492 -j ACCEPT --A limit-493 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-494 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-494 -j ACCEPT --A limit-495 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-496 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-496 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-497 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-497 -m recent --name user:C --rdest --mask fe00:: --set --A limit-498 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-498 -m limit --limit 1/second -j LOG --A limit-498 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-499 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-499 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-49 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-492 -m limit --limit 1/second -j LOG +-A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-494 -j TEE --gateway fc00::2 +-A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 --A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-50 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-500 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-500 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-501 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-501 -m recent --name user:C --rdest --mask fe00:: --set --A limit-502 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-502 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-503 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-504 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-50 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-50 -j ACCEPT +-A limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-500 -j ACCEPT +-A limit-501 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-502 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-502 -m limit --limit 1/second -j LOG +-A limit-502 -j ACCEPT +-A limit-503 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-503 -m limit --limit 1/second -j LOG +-A limit-504 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-504 -j TEE --gateway fc00::2 -A limit-504 -j ACCEPT --A limit-505 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-506 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-506 -m limit --limit 1/second -j LOG +-A limit-505 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-505 -j TEE --gateway fc00::2 +-A limit-506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-506 -j ACCEPT --A limit-507 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-507 -m limit --limit 1/second -j LOG --A limit-508 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-507 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-508 -j ACCEPT --A limit-509 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-51 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-51 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-510 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-510 -j ACCEPT --A limit-511 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-512 -m recent --name limit-512 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-224 --A limit-512 -m recent --name limit-512 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-513 -m recent --name limit-513 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-225 --A limit-513 -m recent --name limit-513 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-514 -m recent --name limit-514 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-226 --A limit-514 -m limit --limit 1/second -j LOG --A limit-514 -m recent --name limit-514 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-515 -m recent --name limit-515 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-227 --A limit-515 -m recent --name limit-515 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-516 -m recent --name limit-516 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-228 --A limit-516 -m recent --name limit-516 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-517 -m recent --name limit-517 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-229 --A limit-517 -m recent --name limit-517 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-518 -m recent --name limit-518 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-230 --A limit-518 -m recent --name limit-518 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-519 -m recent --name limit-519 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-231 --A limit-52 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-52 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-232 --A limit-520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-521 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-233 --A limit-521 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-522 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-234 +-A limit-509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-51 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-510 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-510 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-511 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-511 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-512 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-512 -m limit --limit 1/second -j LOG +-A limit-512 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-513 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-513 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-514 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-514 -j TEE --gateway fc00::2 +-A limit-514 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-515 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-515 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-516 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-516 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-517 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-517 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-518 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-518 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-519 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-52 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-52 -m limit --limit 1/second -j LOG +-A limit-52 -j ACCEPT +-A limit-520 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-520 -j ACCEPT +-A limit-521 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-522 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-522 -m limit --limit 1/second -j LOG --A limit-522 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-523 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-235 --A limit-523 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-524 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-236 --A limit-524 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-525 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-237 --A limit-525 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-526 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-238 --A limit-526 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-527 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-239 --A limit-528 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-240 +-A limit-522 -j ACCEPT +-A limit-523 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-523 -m limit --limit 1/second -j LOG +-A limit-524 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-524 -j TEE --gateway fc00::2 +-A limit-524 -j ACCEPT +-A limit-525 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-525 -j TEE --gateway fc00::2 +-A limit-526 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-526 -j ACCEPT +-A limit-527 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-528 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-528 -j ACCEPT --A limit-529 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-241 --A limit-53 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-53 -m recent --name user:C --rsource --mask fe00:: --set --A limit-530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-242 --A limit-530 -m limit --limit 1/second -j LOG --A limit-530 -j ACCEPT --A limit-531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-243 --A limit-531 -m limit --limit 1/second -j LOG --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-244 --A limit-532 -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-245 --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-246 --A limit-534 -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-247 --A limit-536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-248 --A limit-536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-249 --A limit-537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-250 --A limit-538 -m limit --limit 1/second -j LOG --A limit-538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-251 --A limit-539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-54 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-54 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-252 --A limit-540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-541 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-253 --A limit-541 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-254 --A limit-542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-255 --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-256 +-A limit-529 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-53 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-53 -m limit --limit 1/second -j LOG +-A limit-530 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-530 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-531 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-531 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-532 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-532 -m limit --limit 1/second -j LOG +-A limit-532 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-533 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-533 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-534 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-534 -j TEE --gateway fc00::2 +-A limit-534 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-535 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-535 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-536 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-536 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-537 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-537 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-538 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-54 -j TEE --gateway fc00::2 +-A limit-54 -j ACCEPT +-A limit-540 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-540 -j ACCEPT +-A limit-541 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-542 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-542 -m limit --limit 1/second -j LOG +-A limit-542 -j ACCEPT +-A limit-543 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-543 -m limit --limit 1/second -j LOG +-A limit-544 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-544 -j TEE --gateway fc00::2 -A limit-544 -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-257 --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-258 --A limit-546 -m limit --limit 1/second -j LOG +-A limit-545 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-545 -j TEE --gateway fc00::2 +-A limit-546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-546 -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-259 --A limit-547 -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-260 +-A limit-547 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-548 -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-261 --A limit-55 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-262 --A limit-550 -j ACCEPT --A limit-551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-263 --A limit-552 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-264 --A limit-552 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-553 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-265 --A limit-553 -m recent --name user:C --rsource --mask fe00:: --set --A limit-554 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-266 --A limit-554 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-555 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-267 --A limit-555 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-268 --A limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-269 --A limit-557 -m recent --name user:C --rsource --mask fe00:: --set --A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-270 --A limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-271 --A limit-56 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-55 -j TEE --gateway fc00::2 +-A limit-550 -m recent --name limit-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-280 +-A limit-550 -m recent --name limit-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-551 -m recent --name limit-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-281 +-A limit-551 -m recent --name limit-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-552 -m recent --name limit-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-282 +-A limit-552 -m limit --limit 1/second -j LOG +-A limit-552 -m recent --name limit-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-553 -m recent --name limit-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-283 +-A limit-553 -m recent --name limit-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-284 +-A limit-554 -j TEE --gateway fc00::2 +-A limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-285 +-A limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-286 +-A limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-287 +-A limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-288 +-A limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-559 -m recent --name limit-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-272 --A limit-560 -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-273 --A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-274 +-A limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 -A limit-562 -m limit --limit 1/second -j LOG --A limit-562 -j ACCEPT --A limit-563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-275 --A limit-563 -m limit --limit 1/second -j LOG --A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-276 --A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-277 --A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-278 --A limit-566 -j ACCEPT --A limit-567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-279 --A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-280 --A limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-281 --A limit-569 -m recent --name user:C --rdest --mask fe00:: --set --A limit-57 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-282 --A limit-570 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-283 --A limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-284 --A limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-285 --A limit-573 -m recent --name user:C --rdest --mask fe00:: --set --A limit-574 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-286 --A limit-574 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-575 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-287 --A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-288 +-A limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-564 -j TEE --gateway fc00::2 +-A limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-570 -j ACCEPT +-A limit-571 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-572 -m limit --limit 1/second -j LOG +-A limit-572 -j ACCEPT +-A limit-573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 +-A limit-573 -m limit --limit 1/second -j LOG +-A limit-574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-574 -j TEE --gateway fc00::2 +-A limit-574 -j ACCEPT +-A limit-575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-575 -j TEE --gateway fc00::2 +-A limit-576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 -A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-289 --A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-290 --A limit-578 -m limit --limit 1/second -j LOG +-A limit-577 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-308 -A limit-578 -j ACCEPT --A limit-579 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-291 --A limit-579 -m limit --limit 1/second -j LOG --A limit-58 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-58 -m limit --limit 1/second -j LOG +-A limit-579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-58 -j ACCEPT --A limit-580 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-292 --A limit-580 -j ACCEPT --A limit-581 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-293 --A limit-582 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-294 --A limit-582 -j ACCEPT --A limit-583 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-295 --A limit-584 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-584 -j ACCEPT --A limit-584 -m limit --limit 1/second -j LOG --A limit-584 -j DROP --A limit-585 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-585 -j RETURN --A limit-585 -m limit --limit 1/second -j LOG --A limit-585 -j DROP --A limit-586 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-586 -j logaccept-0 --A limit-586 -m limit --limit 1/second -j LOG --A limit-586 -j DROP --A limit-587 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-587 -j ACCEPT --A limit-587 -m limit --limit 1/second -j LOG --A limit-587 -j DROP --A limit-588 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-588 -j logaccept-1 --A limit-588 -m limit --limit 1/second -j LOG --A limit-588 -j DROP --A limit-589 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-589 -j ACCEPT --A limit-589 -j DROP --A limit-59 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-59 -m limit --limit 1/second -j LOG --A limit-590 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-590 -j RETURN --A limit-590 -j DROP --A limit-591 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-591 -j logaccept-2 --A limit-591 -j DROP --A limit-592 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-592 -j ACCEPT --A limit-592 -j DROP --A limit-593 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-593 -j logaccept-3 --A limit-593 -j DROP --A limit-594 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-594 -j ACCEPT --A limit-594 -m limit --limit 1/second -j LOG --A limit-594 -j DROP --A limit-595 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-595 -j RETURN --A limit-595 -m limit --limit 1/second -j LOG --A limit-595 -j DROP --A limit-596 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-596 -j logaccept-4 --A limit-596 -m limit --limit 1/second -j LOG --A limit-596 -j DROP --A limit-597 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-597 -j ACCEPT --A limit-597 -m limit --limit 1/second -j LOG --A limit-597 -j DROP --A limit-598 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-598 -j logaccept-5 --A limit-598 -m limit --limit 1/second -j LOG --A limit-598 -j DROP --A limit-599 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-599 -j ACCEPT --A limit-599 -j DROP +-A limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-582 -m limit --limit 1/second -j LOG +-A limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-313 +-A limit-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-584 -j TEE --gateway fc00::2 +-A limit-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-315 +-A limit-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-318 +-A limit-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-590 -j ACCEPT +-A limit-591 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-592 -m limit --limit 1/second -j LOG +-A limit-592 -j ACCEPT +-A limit-593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-593 -m limit --limit 1/second -j LOG +-A limit-594 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-594 -j TEE --gateway fc00::2 +-A limit-594 -j ACCEPT +-A limit-595 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-595 -j TEE --gateway fc00::2 +-A limit-596 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-596 -j ACCEPT +-A limit-597 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-327 +-A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-598 -j ACCEPT +-A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-329 -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-60 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-60 -j ACCEPT --A limit-600 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-600 -j RETURN --A limit-600 -j DROP --A limit-601 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-601 -j logaccept-6 --A limit-601 -j DROP --A limit-602 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-602 -j ACCEPT --A limit-602 -j DROP --A limit-603 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-603 -j logaccept-7 --A limit-603 -j DROP --A limit-604 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-604 -j ACCEPT --A limit-604 -j DROP --A limit-605 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-605 -j RETURN --A limit-605 -j DROP --A limit-606 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-606 -j logaccept-8 --A limit-606 -j DROP --A limit-607 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-607 -j ACCEPT --A limit-607 -j DROP --A limit-608 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-608 -j logaccept-9 --A limit-608 -j DROP --A limit-609 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-609 -j ACCEPT --A limit-609 -j DROP --A limit-61 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-610 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-610 -j RETURN --A limit-610 -j DROP --A limit-611 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-611 -j logaccept-10 --A limit-611 -j DROP --A limit-612 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-612 -j ACCEPT --A limit-612 -j DROP --A limit-613 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-613 -j logaccept-11 --A limit-613 -j DROP --A limit-614 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-614 -j ACCEPT --A limit-614 -m limit --limit 1/second -j LOG --A limit-614 -j DROP --A limit-615 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-615 -j RETURN --A limit-615 -m limit --limit 1/second -j LOG --A limit-615 -j DROP --A limit-616 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-616 -j logaccept-12 --A limit-616 -m limit --limit 1/second -j LOG --A limit-616 -j DROP --A limit-617 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-617 -j ACCEPT --A limit-617 -m limit --limit 1/second -j LOG --A limit-617 -j DROP --A limit-618 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-618 -j logaccept-13 --A limit-618 -m limit --limit 1/second -j LOG --A limit-618 -j DROP --A limit-619 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-619 -j ACCEPT --A limit-619 -j DROP --A limit-62 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-62 -j ACCEPT --A limit-620 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-620 -j RETURN --A limit-620 -j DROP --A limit-621 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-621 -j logaccept-14 --A limit-621 -j DROP --A limit-622 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-622 -j ACCEPT --A limit-622 -j DROP --A limit-623 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-623 -j logaccept-15 --A limit-623 -j DROP --A limit-624 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-624 -j ACCEPT --A limit-624 -j DROP --A limit-625 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-625 -j RETURN --A limit-625 -j DROP --A limit-626 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-626 -j logaccept-16 --A limit-626 -j DROP --A limit-627 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-627 -j ACCEPT --A limit-627 -j DROP --A limit-628 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-628 -j logaccept-17 --A limit-628 -j DROP --A limit-629 -m recent --name limit-629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-296 --A limit-629 -m recent --name limit-629 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-63 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-630 -m recent --name limit-630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-297 --A limit-630 -m recent --name limit-630 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-631 -m recent --name limit-631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-298 --A limit-631 -m limit --limit 1/second -j LOG --A limit-631 -m recent --name limit-631 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-632 -m recent --name limit-632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-299 --A limit-632 -m recent --name limit-632 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-633 -m recent --name limit-633 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-300 --A limit-633 -m recent --name limit-633 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-301 --A limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-302 --A limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-303 --A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-639 -m limit --limit 1/second -j LOG --A limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-64 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-64 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-647 -m limit --limit 1/second -j LOG --A limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-65 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-65 -m recent --name user:C --rdest --mask fe00:: --set --A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-653 -j ACCEPT --A limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-655 -m limit --limit 1/second -j LOG --A limit-655 -j ACCEPT --A limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-656 -m limit --limit 1/second -j LOG --A limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-657 -j ACCEPT --A limit-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-659 -j ACCEPT --A limit-66 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-66 -m limit --limit 1/second -j LOG --A limit-66 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-60 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-330 +-A limit-600 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-601 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-602 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-602 -m limit --limit 1/second -j LOG +-A limit-602 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-603 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-603 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-604 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-604 -j TEE --gateway fc00::2 +-A limit-604 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-605 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-605 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-606 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-606 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-607 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-607 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-608 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-338 +-A limit-608 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-609 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-339 +-A limit-61 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-61 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-610 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-610 -j ACCEPT +-A limit-611 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 +-A limit-612 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A limit-612 -m limit --limit 1/second -j LOG +-A limit-612 -j ACCEPT +-A limit-613 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-343 +-A limit-613 -m limit --limit 1/second -j LOG +-A limit-614 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-344 +-A limit-614 -j TEE --gateway fc00::2 +-A limit-614 -j ACCEPT +-A limit-615 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-345 +-A limit-615 -j TEE --gateway fc00::2 +-A limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-346 +-A limit-616 -j ACCEPT +-A limit-617 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-347 +-A limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-348 +-A limit-618 -j ACCEPT +-A limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-349 +-A limit-62 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-62 -m limit --limit 1/second -j LOG +-A limit-62 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-620 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-350 +-A limit-620 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-621 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-351 +-A limit-621 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-352 +-A limit-622 -m limit --limit 1/second -j LOG +-A limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-353 +-A limit-623 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-354 +-A limit-624 -j TEE --gateway fc00::2 +-A limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-355 +-A limit-625 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-356 +-A limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-357 +-A limit-627 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-628 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-358 +-A limit-628 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-629 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-359 +-A limit-63 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-63 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-360 +-A limit-630 -j ACCEPT +-A limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-361 +-A limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-362 +-A limit-632 -m limit --limit 1/second -j LOG +-A limit-632 -j ACCEPT +-A limit-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-363 +-A limit-633 -m limit --limit 1/second -j LOG +-A limit-634 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-364 +-A limit-634 -j TEE --gateway fc00::2 +-A limit-634 -j ACCEPT +-A limit-635 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-365 +-A limit-635 -j TEE --gateway fc00::2 +-A limit-636 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-366 +-A limit-636 -j ACCEPT +-A limit-637 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-367 +-A limit-638 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-368 +-A limit-638 -j ACCEPT +-A limit-639 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-369 +-A limit-64 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-64 -j TEE --gateway fc00::2 +-A limit-64 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-370 +-A limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-371 +-A limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-372 +-A limit-642 -m limit --limit 1/second -j LOG +-A limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-373 +-A limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-374 +-A limit-644 -j TEE --gateway fc00::2 +-A limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-645 -m recent --name limit-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-375 +-A limit-645 -m recent --name limit-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-646 -m recent --name limit-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-376 +-A limit-646 -m recent --name limit-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-647 -m recent --name limit-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-377 +-A limit-647 -m recent --name limit-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-648 -m recent --name limit-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-378 +-A limit-648 -m recent --name limit-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-649 -m recent --name limit-649 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-379 +-A limit-65 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-65 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-380 +-A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-381 +-A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-382 +-A limit-652 -m limit --limit 1/second -j LOG +-A limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-383 +-A limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-384 +-A limit-654 -j TEE --gateway fc00::2 +-A limit-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-385 +-A limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-386 +-A limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-387 +-A limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-388 +-A limit-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-389 +-A limit-66 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-390 +-A limit-660 -j ACCEPT +-A limit-661 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-391 +-A limit-662 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-392 +-A limit-662 -m limit --limit 1/second -j LOG +-A limit-662 -j ACCEPT +-A limit-663 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-393 -A limit-663 -m limit --limit 1/second -j LOG --A limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-666 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-666 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-667 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-667 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-668 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-669 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-669 -j ACCEPT --A limit-67 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-67 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-671 -m limit --limit 1/second -j LOG --A limit-671 -j ACCEPT --A limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-664 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-394 +-A limit-664 -j TEE --gateway fc00::2 +-A limit-664 -j ACCEPT +-A limit-665 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-395 +-A limit-665 -j TEE --gateway fc00::2 +-A limit-666 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-396 +-A limit-666 -j ACCEPT +-A limit-667 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-397 +-A limit-668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-398 +-A limit-668 -j ACCEPT +-A limit-669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-399 +-A limit-67 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-400 +-A limit-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-401 +-A limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-402 -A limit-672 -m limit --limit 1/second -j LOG --A limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-673 -j ACCEPT --A limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-675 -j ACCEPT --A limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-677 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-677 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-678 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-678 -m recent --name user:C --rsource --mask fe00:: --set --A limit-679 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-679 -m limit --limit 1/second -j LOG --A limit-679 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-68 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-68 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-680 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-680 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-681 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-681 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-682 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-682 -m recent --name user:C --rsource --mask fe00:: --set --A limit-683 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-683 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-684 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-685 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-685 -j ACCEPT --A limit-687 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-687 -m limit --limit 1/second -j LOG --A limit-687 -j ACCEPT --A limit-688 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-688 -m limit --limit 1/second -j LOG --A limit-689 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-689 -j ACCEPT --A limit-69 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-69 -m recent --name user:C --rdest --mask fe00:: --set --A limit-691 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-691 -j ACCEPT --A limit-692 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-693 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-693 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-694 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-694 -m recent --name user:C --rdest --mask fe00:: --set --A limit-695 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-695 -m limit --limit 1/second -j LOG --A limit-695 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-696 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-696 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-697 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-697 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-698 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-698 -m recent --name user:C --rdest --mask fe00:: --set --A limit-699 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-699 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-674 -j TEE --gateway fc00::2 +-A limit-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-679 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-68 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-68 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-680 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-680 -j ACCEPT +-A limit-681 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-682 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-682 -m limit --limit 1/second -j LOG +-A limit-682 -j ACCEPT +-A limit-683 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-683 -m limit --limit 1/second -j LOG +-A limit-684 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-684 -j TEE --gateway fc00::2 +-A limit-684 -j ACCEPT +-A limit-685 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A limit-685 -j TEE --gateway fc00::2 +-A limit-686 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A limit-686 -j ACCEPT +-A limit-687 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-688 -j ACCEPT +-A limit-689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A limit-69 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-690 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-420 +-A limit-690 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-691 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-691 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-692 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-692 -m limit --limit 1/second -j LOG +-A limit-692 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-693 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-693 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-694 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-694 -j TEE --gateway fc00::2 +-A limit-694 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-695 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-695 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-696 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-696 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-697 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-427 +-A limit-697 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-698 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-428 +-A limit-698 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-699 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-429 -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 --A limit-70 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-70 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-700 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-701 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-701 -j ACCEPT --A limit-703 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-70 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-70 -j ACCEPT +-A limit-700 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-700 -j ACCEPT +-A limit-701 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A limit-702 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-432 +-A limit-702 -m limit --limit 1/second -j LOG +-A limit-702 -j ACCEPT +-A limit-703 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-433 -A limit-703 -m limit --limit 1/second -j LOG --A limit-703 -j ACCEPT --A limit-704 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-704 -m limit --limit 1/second -j LOG --A limit-705 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-705 -j ACCEPT --A limit-707 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-707 -j ACCEPT --A limit-708 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-709 -m recent --name limit-709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-304 --A limit-709 -m recent --name limit-709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-71 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-710 -m recent --name limit-710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-305 --A limit-710 -m recent --name limit-710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-711 -m recent --name limit-711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-306 --A limit-711 -m limit --limit 1/second -j LOG --A limit-711 -m recent --name limit-711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-712 -m recent --name limit-712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-307 --A limit-712 -m recent --name limit-712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-713 -m recent --name limit-713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-308 --A limit-713 -m recent --name limit-713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-714 -m recent --name limit-714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-309 --A limit-714 -m recent --name limit-714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-715 -m recent --name limit-715 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-310 --A limit-715 -m recent --name limit-715 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-311 --A limit-717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-312 --A limit-717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-313 --A limit-718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-314 --A limit-719 -m limit --limit 1/second -j LOG --A limit-719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-72 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-704 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-704 -j TEE --gateway fc00::2 +-A limit-704 -j ACCEPT +-A limit-705 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-705 -j TEE --gateway fc00::2 +-A limit-706 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-706 -j ACCEPT +-A limit-707 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-708 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-438 +-A limit-708 -j ACCEPT +-A limit-709 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A limit-71 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-710 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-440 +-A limit-710 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-711 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-711 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-712 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-712 -m limit --limit 1/second -j LOG +-A limit-712 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-713 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-443 +-A limit-713 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-714 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-444 +-A limit-714 -j TEE --gateway fc00::2 +-A limit-714 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-715 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-715 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-716 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-716 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-717 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-717 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-718 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-718 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-719 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-72 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-72 -m limit --limit 1/second -j LOG -A limit-72 -j ACCEPT --A limit-720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-315 --A limit-720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-316 --A limit-721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-317 --A limit-722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-318 --A limit-723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-319 --A limit-725 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-320 --A limit-725 -j ACCEPT --A limit-727 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-322 --A limit-727 -m limit --limit 1/second -j LOG --A limit-727 -j ACCEPT --A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-323 --A limit-728 -m limit --limit 1/second -j LOG --A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-324 --A limit-729 -j ACCEPT --A limit-73 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-326 --A limit-731 -j ACCEPT --A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-327 --A limit-733 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-328 --A limit-733 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-734 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-329 --A limit-734 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-735 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-330 --A limit-735 -m limit --limit 1/second -j LOG --A limit-735 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-331 --A limit-736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-332 --A limit-737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-333 --A limit-738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-334 --A limit-739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-74 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-74 -m limit --limit 1/second -j LOG +-A limit-720 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-720 -j ACCEPT +-A limit-721 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A limit-722 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A limit-722 -m limit --limit 1/second -j LOG +-A limit-722 -j ACCEPT +-A limit-723 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-723 -m limit --limit 1/second -j LOG +-A limit-724 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-724 -j TEE --gateway fc00::2 +-A limit-724 -j ACCEPT +-A limit-725 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A limit-725 -j TEE --gateway fc00::2 +-A limit-726 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-456 +-A limit-726 -j ACCEPT +-A limit-727 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-457 +-A limit-728 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-458 +-A limit-728 -j ACCEPT +-A limit-729 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-459 +-A limit-73 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-73 -m limit --limit 1/second -j LOG +-A limit-730 -m recent --name limit-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-730 -m recent --name limit-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-731 -m recent --name limit-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-731 -m recent --name limit-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-732 -m recent --name limit-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-732 -m limit --limit 1/second -j LOG +-A limit-732 -m recent --name limit-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-733 -m recent --name limit-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-733 -m recent --name limit-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-734 -m recent --name limit-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-734 -j TEE --gateway fc00::2 +-A limit-734 -m recent --name limit-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-735 -m recent --name limit-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-735 -m recent --name limit-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-736 -m recent --name limit-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-736 -m recent --name limit-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-737 -m recent --name limit-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-737 -m recent --name limit-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-738 -m recent --name limit-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-738 -m recent --name limit-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-739 -m recent --name limit-739 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-74 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-74 -j TEE --gateway fc00::2 -A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-335 --A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-336 --A limit-741 -j ACCEPT --A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-338 --A limit-743 -m limit --limit 1/second -j LOG --A limit-743 -j ACCEPT --A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-339 --A limit-744 -m limit --limit 1/second -j LOG --A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-340 --A limit-745 -j ACCEPT --A limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-342 --A limit-747 -j ACCEPT --A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-343 --A limit-749 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-344 --A limit-749 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-75 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-345 --A limit-750 -m recent --name user:C --rsource --mask fe00:: --set --A limit-751 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-346 --A limit-751 -m limit --limit 1/second -j LOG --A limit-751 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-347 --A limit-752 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-348 --A limit-753 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-349 --A limit-754 -m recent --name user:C --rsource --mask fe00:: --set --A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-350 --A limit-755 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-351 --A limit-757 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-352 --A limit-757 -j ACCEPT --A limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-354 --A limit-759 -m limit --limit 1/second -j LOG --A limit-759 -j ACCEPT --A limit-76 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-742 -m limit --limit 1/second -j LOG +-A limit-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-744 -j TEE --gateway fc00::2 +-A limit-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-749 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-75 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-75 -j TEE --gateway fc00::2 +-A limit-750 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-750 -j ACCEPT +-A limit-751 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-752 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-752 -m limit --limit 1/second -j LOG +-A limit-752 -j ACCEPT +-A limit-753 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-753 -m limit --limit 1/second -j LOG +-A limit-754 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-754 -j TEE --gateway fc00::2 +-A limit-754 -j ACCEPT +-A limit-755 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-755 -j TEE --gateway fc00::2 +-A limit-756 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-756 -j ACCEPT +-A limit-757 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-758 -j ACCEPT +-A limit-759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-76 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-355 --A limit-760 -m limit --limit 1/second -j LOG --A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-356 --A limit-761 -j ACCEPT --A limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-358 --A limit-763 -j ACCEPT --A limit-764 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-359 --A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-360 --A limit-765 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-361 --A limit-766 -m recent --name user:C --rdest --mask fe00:: --set --A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-362 --A limit-767 -m limit --limit 1/second -j LOG --A limit-767 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-363 --A limit-768 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-364 --A limit-769 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-77 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-365 --A limit-770 -m recent --name user:C --rdest --mask fe00:: --set --A limit-771 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-366 --A limit-771 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-772 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-367 --A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-368 --A limit-773 -j ACCEPT --A limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-370 --A limit-775 -m limit --limit 1/second -j LOG --A limit-775 -j ACCEPT --A limit-776 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-371 --A limit-776 -m limit --limit 1/second -j LOG --A limit-777 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-372 --A limit-777 -j ACCEPT --A limit-779 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-374 --A limit-779 -j ACCEPT --A limit-78 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-762 -m limit --limit 1/second -j LOG +-A limit-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-764 -j TEE --gateway fc00::2 +-A limit-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-769 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-77 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-770 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-770 -j ACCEPT +-A limit-771 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-772 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-772 -m limit --limit 1/second -j LOG +-A limit-772 -j ACCEPT +-A limit-773 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-773 -m limit --limit 1/second -j LOG +-A limit-774 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-774 -j TEE --gateway fc00::2 +-A limit-774 -j ACCEPT +-A limit-775 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-775 -j TEE --gateway fc00::2 +-A limit-776 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-776 -j ACCEPT +-A limit-777 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-778 -j ACCEPT +-A limit-779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-78 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-78 -j ACCEPT --A limit-780 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-375 --A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-782 -m recent --name limit-782 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-782 -m recent --name limit-782 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-783 -m recent --name limit-783 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-783 -m limit --limit 1/second -j LOG --A limit-783 -m recent --name limit-783 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-784 -m recent --name limit-784 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-784 -m recent --name limit-784 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-785 -m recent --name limit-785 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-785 -m recent --name limit-785 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-786 -m recent --name limit-786 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-786 -m recent --name limit-786 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-787 -m recent --name limit-787 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-787 -m recent --name limit-787 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-788 -m recent --name limit-788 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-79 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-791 -m limit --limit 1/second -j LOG --A limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-794 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-794 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-795 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-795 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-796 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-797 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-797 -j ACCEPT --A limit-799 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-799 -m limit --limit 1/second -j LOG --A limit-799 -j ACCEPT --A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-780 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-780 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-781 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-781 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-782 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-782 -m limit --limit 1/second -j LOG +-A limit-782 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-783 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-783 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-784 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-784 -j TEE --gateway fc00::2 +-A limit-784 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-785 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-785 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-786 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-786 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-787 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-787 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-788 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-788 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-789 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-79 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-790 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-790 -j ACCEPT +-A limit-791 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-792 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-792 -m limit --limit 1/second -j LOG +-A limit-792 -j ACCEPT +-A limit-793 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-793 -m limit --limit 1/second -j LOG +-A limit-794 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-794 -j TEE --gateway fc00::2 +-A limit-794 -j ACCEPT +-A limit-795 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-795 -j TEE --gateway fc00::2 +-A limit-796 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-796 -j ACCEPT +-A limit-797 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-798 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-798 -j ACCEPT +-A limit-799 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-80 -m recent --name limit-80 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 --A limit-80 -m recent --name limit-80 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-800 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-800 -m limit --limit 1/second -j LOG --A limit-801 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-801 -j ACCEPT --A limit-803 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-803 -j ACCEPT --A limit-804 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-807 -m limit --limit 1/second -j LOG --A limit-807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-81 -m recent --name limit-81 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 --A limit-81 -m recent --name limit-81 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-811 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-811 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-812 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-813 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-813 -j ACCEPT --A limit-815 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-815 -m limit --limit 1/second -j LOG --A limit-815 -j ACCEPT --A limit-816 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-816 -m limit --limit 1/second -j LOG --A limit-817 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-817 -j ACCEPT --A limit-819 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-819 -j ACCEPT --A limit-82 -m recent --name limit-82 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-80 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-800 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-800 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-801 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-801 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-802 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-802 -m limit --limit 1/second -j LOG +-A limit-802 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-803 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-803 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-804 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-804 -j TEE --gateway fc00::2 +-A limit-804 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-805 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-805 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-806 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-806 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-807 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-807 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-808 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-808 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-809 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP +-A limit-81 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-810 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-810 -j ACCEPT +-A limit-811 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-812 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-812 -m limit --limit 1/second -j LOG +-A limit-812 -j ACCEPT +-A limit-813 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-813 -m limit --limit 1/second -j LOG +-A limit-814 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-814 -j TEE --gateway fc00::2 +-A limit-814 -j ACCEPT +-A limit-815 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-815 -j TEE --gateway fc00::2 +-A limit-816 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-816 -j ACCEPT +-A limit-817 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-818 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-818 -j ACCEPT +-A limit-819 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +-A limit-82 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-82 -m limit --limit 1/second -j LOG --A limit-82 -m recent --name limit-82 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-820 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-821 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-821 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-822 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-822 -m recent --name user:C --rsource --mask fe00:: --set --A limit-823 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-823 -m limit --limit 1/second -j LOG --A limit-823 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-824 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-824 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-825 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-825 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-826 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-826 -m recent --name user:C --rsource --mask fe00:: --set --A limit-827 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-827 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-828 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-829 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-829 -j ACCEPT --A limit-83 -m recent --name limit-83 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 --A limit-83 -m recent --name limit-83 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-831 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-831 -m limit --limit 1/second -j LOG --A limit-831 -j ACCEPT --A limit-832 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-82 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-820 -m recent --name limit-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-460 +-A limit-820 -m recent --name limit-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-821 -m recent --name limit-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-461 +-A limit-821 -m recent --name limit-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-822 -m recent --name limit-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-462 +-A limit-822 -m limit --limit 1/second -j LOG +-A limit-822 -m recent --name limit-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-823 -m recent --name limit-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-463 +-A limit-823 -m recent --name limit-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-824 -m recent --name limit-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-464 +-A limit-824 -j TEE --gateway fc00::2 +-A limit-824 -m recent --name limit-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-825 -m recent --name limit-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-465 +-A limit-825 -m recent --name limit-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-826 -m recent --name limit-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-466 +-A limit-826 -m recent --name limit-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-827 -m recent --name limit-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-467 +-A limit-827 -m recent --name limit-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-828 -m recent --name limit-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-468 +-A limit-828 -m recent --name limit-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-829 -m recent --name limit-829 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-469 +-A limit-83 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-83 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-470 +-A limit-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-471 +-A limit-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-472 -A limit-832 -m limit --limit 1/second -j LOG --A limit-833 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-833 -j ACCEPT --A limit-835 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-835 -j ACCEPT --A limit-836 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-837 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-837 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-838 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-838 -m recent --name user:C --rdest --mask fe00:: --set --A limit-839 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-839 -m limit --limit 1/second -j LOG --A limit-839 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-84 -m recent --name limit-84 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 --A limit-84 -m recent --name limit-84 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-840 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-840 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-841 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-841 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-842 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-842 -m recent --name user:C --rdest --mask fe00:: --set --A limit-843 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-843 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-844 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP --A limit-845 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-845 -j ACCEPT --A limit-847 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-847 -m limit --limit 1/second -j LOG --A limit-847 -j ACCEPT --A limit-848 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-848 -m limit --limit 1/second -j LOG --A limit-849 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-849 -j ACCEPT --A limit-85 -m recent --name limit-85 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 --A limit-85 -m recent --name limit-85 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-851 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-851 -j ACCEPT --A limit-852 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-853 -m recent --name limit-853 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-376 --A limit-853 -m recent --name limit-853 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-854 -m recent --name limit-854 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-377 --A limit-854 -m recent --name limit-854 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-855 -m recent --name limit-855 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-378 --A limit-855 -m limit --limit 1/second -j LOG --A limit-855 -m recent --name limit-855 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-856 -m recent --name limit-856 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-379 --A limit-856 -m recent --name limit-856 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-857 -m recent --name limit-857 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-380 --A limit-857 -m recent --name limit-857 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-858 -m recent --name limit-858 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-381 --A limit-858 -m recent --name limit-858 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-859 -m recent --name limit-859 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-382 --A limit-859 -m recent --name limit-859 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-86 -m recent --name limit-86 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 --A limit-86 -m recent --name limit-86 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-860 -m recent --name limit-860 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-383 --A limit-861 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-384 --A limit-861 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-862 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-385 --A limit-862 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-863 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-386 +-A limit-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-473 +-A limit-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-474 +-A limit-834 -j TEE --gateway fc00::2 +-A limit-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-475 +-A limit-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-476 +-A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-477 +-A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-478 +-A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-479 +-A limit-84 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-84 -j TEE --gateway fc00::2 +-A limit-84 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-480 +-A limit-840 -j ACCEPT +-A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-481 +-A limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-482 +-A limit-842 -m limit --limit 1/second -j LOG +-A limit-842 -j ACCEPT +-A limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-483 +-A limit-843 -m limit --limit 1/second -j LOG +-A limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-484 +-A limit-844 -j TEE --gateway fc00::2 +-A limit-844 -j ACCEPT +-A limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-485 +-A limit-845 -j TEE --gateway fc00::2 +-A limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-486 +-A limit-846 -j ACCEPT +-A limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-487 +-A limit-848 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-488 +-A limit-848 -j ACCEPT +-A limit-849 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-489 +-A limit-85 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-85 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-490 +-A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-491 +-A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-492 +-A limit-852 -m limit --limit 1/second -j LOG +-A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-493 +-A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-494 +-A limit-854 -j TEE --gateway fc00::2 +-A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-495 +-A limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-496 +-A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-497 +-A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-498 +-A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-499 +-A limit-86 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-860 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-500 +-A limit-860 -j ACCEPT +-A limit-861 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-501 +-A limit-862 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-502 +-A limit-862 -m limit --limit 1/second -j LOG +-A limit-862 -j ACCEPT +-A limit-863 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-503 -A limit-863 -m limit --limit 1/second -j LOG --A limit-863 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-864 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-387 --A limit-864 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-865 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-388 --A limit-865 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-866 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-389 --A limit-866 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-867 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-390 --A limit-867 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-868 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-391 --A limit-869 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-392 --A limit-869 -j ACCEPT --A limit-87 -m recent --name limit-87 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 --A limit-871 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-394 --A limit-871 -m limit --limit 1/second -j LOG --A limit-871 -j ACCEPT --A limit-872 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-864 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-504 +-A limit-864 -j TEE --gateway fc00::2 +-A limit-864 -j ACCEPT +-A limit-865 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-505 +-A limit-865 -j TEE --gateway fc00::2 +-A limit-866 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-506 +-A limit-866 -j ACCEPT +-A limit-867 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-507 +-A limit-868 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-508 +-A limit-868 -j ACCEPT +-A limit-869 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-509 +-A limit-87 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-870 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-510 +-A limit-870 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-871 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-511 +-A limit-871 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-872 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-512 -A limit-872 -m limit --limit 1/second -j LOG --A limit-873 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-396 --A limit-873 -j ACCEPT --A limit-875 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-398 --A limit-875 -j ACCEPT --A limit-876 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-399 --A limit-877 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-400 --A limit-877 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-878 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-401 --A limit-878 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-879 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-402 --A limit-879 -m limit --limit 1/second -j LOG --A limit-879 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-88 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 --A limit-88 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-880 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-403 --A limit-880 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-881 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-404 --A limit-881 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-882 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-405 --A limit-882 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-883 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-406 --A limit-883 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-884 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-407 --A limit-885 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-408 --A limit-885 -j ACCEPT --A limit-887 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-410 --A limit-887 -m limit --limit 1/second -j LOG --A limit-887 -j ACCEPT --A limit-888 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-411 --A limit-888 -m limit --limit 1/second -j LOG --A limit-889 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-412 --A limit-889 -j ACCEPT --A limit-89 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 --A limit-89 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-891 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-414 --A limit-891 -j ACCEPT --A limit-892 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-415 --A limit-893 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-416 --A limit-893 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-894 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-417 --A limit-894 -m recent --name user:C --rsource --mask fe00:: --set --A limit-895 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-418 --A limit-895 -m limit --limit 1/second -j LOG --A limit-895 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-896 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-419 --A limit-896 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-897 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-420 --A limit-897 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-898 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-421 --A limit-898 -m recent --name user:C --rsource --mask fe00:: --set --A limit-899 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-422 --A limit-899 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-90 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 --A limit-90 -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-900 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-423 --A limit-901 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-424 --A limit-901 -j ACCEPT --A limit-903 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-426 +-A limit-872 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-873 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-513 +-A limit-873 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-874 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-514 +-A limit-874 -j TEE --gateway fc00::2 +-A limit-874 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-875 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-515 +-A limit-875 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-876 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-516 +-A limit-876 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-877 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-517 +-A limit-877 -m recent --name user:C --rsource --mask fe00:: --set +-A limit-878 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-518 +-A limit-878 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT +-A limit-879 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-519 +-A limit-88 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-88 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-880 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-520 +-A limit-880 -j ACCEPT +-A limit-881 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-521 +-A limit-882 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-522 +-A limit-882 -m limit --limit 1/second -j LOG +-A limit-882 -j ACCEPT +-A limit-883 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-523 +-A limit-883 -m limit --limit 1/second -j LOG +-A limit-884 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-524 +-A limit-884 -j TEE --gateway fc00::2 +-A limit-884 -j ACCEPT +-A limit-885 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-525 +-A limit-885 -j TEE --gateway fc00::2 +-A limit-886 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-526 +-A limit-886 -j ACCEPT +-A limit-887 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-527 +-A limit-888 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-528 +-A limit-888 -j ACCEPT +-A limit-889 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-529 +-A limit-89 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP +-A limit-890 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-530 +-A limit-890 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-891 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-531 +-A limit-891 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-892 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-532 +-A limit-892 -m limit --limit 1/second -j LOG +-A limit-892 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-893 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-533 +-A limit-893 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG +-A limit-894 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-534 +-A limit-894 -j TEE --gateway fc00::2 +-A limit-894 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-895 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-535 +-A limit-895 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 +-A limit-896 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-536 +-A limit-896 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-897 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-537 +-A limit-897 -m recent --name user:C --rdest --mask fe00:: --set +-A limit-898 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-538 +-A limit-898 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT +-A limit-899 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-539 +-A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-90 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-90 -j ACCEPT +-A limit-900 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-540 +-A limit-900 -j ACCEPT +-A limit-901 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-541 +-A limit-902 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-542 +-A limit-902 -m limit --limit 1/second -j LOG +-A limit-902 -j ACCEPT +-A limit-903 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-543 -A limit-903 -m limit --limit 1/second -j LOG --A limit-903 -j ACCEPT --A limit-904 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-427 --A limit-904 -m limit --limit 1/second -j LOG --A limit-905 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-428 --A limit-905 -j ACCEPT --A limit-907 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-430 --A limit-907 -j ACCEPT --A limit-908 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-431 --A limit-909 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-432 --A limit-909 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-91 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-19 --A limit-91 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-910 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-433 --A limit-910 -m recent --name user:C --rdest --mask fe00:: --set --A limit-911 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-434 +-A limit-904 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-544 +-A limit-904 -j TEE --gateway fc00::2 +-A limit-904 -j ACCEPT +-A limit-905 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-545 +-A limit-905 -j TEE --gateway fc00::2 +-A limit-906 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-546 +-A limit-906 -j ACCEPT +-A limit-907 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-547 +-A limit-908 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-548 +-A limit-908 -j ACCEPT +-A limit-909 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-549 +-A limit-91 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-910 -j ACCEPT +-A limit-910 -m limit --limit 1/second -j LOG +-A limit-910 -j DROP +-A limit-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-911 -j RETURN -A limit-911 -m limit --limit 1/second -j LOG --A limit-911 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-912 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-435 --A limit-912 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-913 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-436 --A limit-913 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-914 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-437 --A limit-914 -m recent --name user:C --rdest --mask fe00:: --set --A limit-915 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-438 --A limit-915 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-916 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-439 --A limit-917 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-440 --A limit-917 -j ACCEPT --A limit-919 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-442 --A limit-919 -m limit --limit 1/second -j LOG --A limit-919 -j ACCEPT --A limit-92 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-20 --A limit-92 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-920 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-443 --A limit-920 -m limit --limit 1/second -j LOG --A limit-921 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-444 --A limit-921 -j ACCEPT --A limit-923 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-446 --A limit-923 -j ACCEPT --A limit-924 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-447 --A limit-925 -m recent --name limit-925 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-925 -m recent --name limit-925 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-926 -m recent --name limit-926 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-926 -m recent --name limit-926 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-927 -m recent --name limit-927 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP +-A limit-911 -j DROP +-A limit-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-912 -j logaccept-0 +-A limit-912 -m limit --limit 1/second -j LOG +-A limit-912 -j DROP +-A limit-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-913 -j logaccept-1 +-A limit-913 -m limit --limit 1/second -j LOG +-A limit-913 -j DROP +-A limit-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-914 -j ACCEPT +-A limit-914 -m limit --limit 1/second -j LOG +-A limit-914 -j DROP +-A limit-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-915 -j logaccept-2 +-A limit-915 -m limit --limit 1/second -j LOG +-A limit-915 -j DROP +-A limit-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-916 -j ACCEPT +-A limit-916 -j DROP +-A limit-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-917 -j RETURN +-A limit-917 -j DROP +-A limit-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-918 -j logaccept-3 +-A limit-918 -j DROP +-A limit-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-919 -j logaccept-4 +-A limit-919 -j DROP +-A limit-92 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-92 -m limit --limit 1/second -j LOG +-A limit-92 -j ACCEPT +-A limit-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-920 -j ACCEPT +-A limit-920 -j DROP +-A limit-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-921 -j logaccept-5 +-A limit-921 -j DROP +-A limit-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-922 -j ACCEPT +-A limit-922 -m limit --limit 1/second -j LOG +-A limit-922 -j DROP +-A limit-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-923 -j RETURN +-A limit-923 -m limit --limit 1/second -j LOG +-A limit-923 -j DROP +-A limit-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-924 -j logaccept-6 +-A limit-924 -m limit --limit 1/second -j LOG +-A limit-924 -j DROP +-A limit-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-925 -j logaccept-7 +-A limit-925 -m limit --limit 1/second -j LOG +-A limit-925 -j DROP +-A limit-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-926 -j ACCEPT +-A limit-926 -m limit --limit 1/second -j LOG +-A limit-926 -j DROP +-A limit-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-927 -j logaccept-8 -A limit-927 -m limit --limit 1/second -j LOG --A limit-927 -m recent --name limit-927 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-928 -m recent --name limit-928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-928 -m recent --name limit-928 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-929 -m recent --name limit-929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-929 -m recent --name limit-929 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-93 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-21 --A limit-93 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-930 -m recent --name limit-930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-930 -m recent --name limit-930 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-931 -m recent --name limit-931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-931 -m recent --name limit-931 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-932 -m recent --name limit-932 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-933 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-933 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-934 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-934 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-935 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-935 -m limit --limit 1/second -j LOG --A limit-935 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-936 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-936 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-937 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-937 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-938 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-938 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-939 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-939 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-94 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-22 --A limit-94 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-940 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-941 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-941 -j ACCEPT --A limit-943 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-943 -m limit --limit 1/second -j LOG --A limit-943 -j ACCEPT --A limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-944 -m limit --limit 1/second -j LOG --A limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-945 -j ACCEPT --A limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-947 -j ACCEPT --A limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-949 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-949 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-95 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-23 --A limit-950 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-950 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-951 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-951 -m limit --limit 1/second -j LOG --A limit-951 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-952 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-952 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-953 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-953 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-954 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-954 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-955 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-955 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP --A limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-957 -j ACCEPT --A limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-959 -m limit --limit 1/second -j LOG --A limit-959 -j ACCEPT --A limit-96 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-927 -j DROP +-A limit-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-928 -j ACCEPT +-A limit-928 -j TEE --gateway fc00::2 +-A limit-928 -j DROP +-A limit-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-929 -j RETURN +-A limit-929 -j TEE --gateway fc00::2 +-A limit-929 -j DROP +-A limit-93 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m limit --limit 1/second -j LOG +-A limit-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-930 -j logaccept-9 +-A limit-930 -j TEE --gateway fc00::2 +-A limit-930 -j DROP +-A limit-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-931 -j logaccept-10 +-A limit-931 -j TEE --gateway fc00::2 +-A limit-931 -j DROP +-A limit-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-932 -j ACCEPT +-A limit-932 -j TEE --gateway fc00::2 +-A limit-932 -j DROP +-A limit-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-933 -j logaccept-11 +-A limit-933 -j TEE --gateway fc00::2 +-A limit-933 -j DROP +-A limit-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-934 -j ACCEPT +-A limit-934 -j DROP +-A limit-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-935 -j RETURN +-A limit-935 -j DROP +-A limit-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-936 -j logaccept-12 +-A limit-936 -j DROP +-A limit-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-937 -j logaccept-13 +-A limit-937 -j DROP +-A limit-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-938 -j ACCEPT +-A limit-938 -j DROP +-A limit-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-939 -j logaccept-14 +-A limit-939 -j DROP +-A limit-94 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-94 -j TEE --gateway fc00::2 +-A limit-94 -j ACCEPT +-A limit-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-940 -j ACCEPT +-A limit-940 -j DROP +-A limit-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-941 -j RETURN +-A limit-941 -j DROP +-A limit-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-942 -j logaccept-15 +-A limit-942 -j DROP +-A limit-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-943 -j logaccept-16 +-A limit-943 -j DROP +-A limit-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-944 -j ACCEPT +-A limit-944 -j DROP +-A limit-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-945 -j logaccept-17 +-A limit-945 -j DROP +-A limit-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-946 -j ACCEPT +-A limit-946 -j DROP +-A limit-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-947 -j RETURN +-A limit-947 -j DROP +-A limit-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-948 -j logaccept-18 +-A limit-948 -j DROP +-A limit-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-949 -j logaccept-19 +-A limit-949 -j DROP +-A limit-95 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-95 -j TEE --gateway fc00::2 +-A limit-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-950 -j ACCEPT +-A limit-950 -j DROP +-A limit-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-951 -j logaccept-20 +-A limit-951 -j DROP +-A limit-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-952 -j ACCEPT +-A limit-952 -m limit --limit 1/second -j LOG +-A limit-952 -j DROP +-A limit-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-953 -j RETURN +-A limit-953 -m limit --limit 1/second -j LOG +-A limit-953 -j DROP +-A limit-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-954 -j logaccept-21 +-A limit-954 -m limit --limit 1/second -j LOG +-A limit-954 -j DROP +-A limit-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-955 -j logaccept-22 +-A limit-955 -m limit --limit 1/second -j LOG +-A limit-955 -j DROP +-A limit-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-956 -j ACCEPT +-A limit-956 -m limit --limit 1/second -j LOG +-A limit-956 -j DROP +-A limit-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-957 -j logaccept-23 +-A limit-957 -m limit --limit 1/second -j LOG +-A limit-957 -j DROP +-A limit-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-958 -j ACCEPT +-A limit-958 -j TEE --gateway fc00::2 +-A limit-958 -j DROP +-A limit-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-959 -j RETURN +-A limit-959 -j TEE --gateway fc00::2 +-A limit-959 -j DROP +-A limit-96 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-96 -j ACCEPT --A limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-960 -m limit --limit 1/second -j LOG --A limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-961 -j ACCEPT --A limit-963 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-963 -j ACCEPT --A limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-965 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-965 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-966 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-966 -m recent --name user:C --rsource --mask fe00:: --set --A limit-967 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-967 -m limit --limit 1/second -j LOG --A limit-967 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-968 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-969 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-97 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-25 --A limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-970 -m recent --name user:C --rsource --mask fe00:: --set --A limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-971 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-973 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-973 -j ACCEPT --A limit-975 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-975 -m limit --limit 1/second -j LOG --A limit-975 -j ACCEPT --A limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-976 -m limit --limit 1/second -j LOG --A limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-977 -j ACCEPT --A limit-979 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-979 -j ACCEPT --A limit-98 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-26 --A limit-98 -m limit --limit 1/second -j LOG +-A limit-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-960 -j logaccept-24 +-A limit-960 -j TEE --gateway fc00::2 +-A limit-960 -j DROP +-A limit-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-961 -j logaccept-25 +-A limit-961 -j TEE --gateway fc00::2 +-A limit-961 -j DROP +-A limit-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-962 -j ACCEPT +-A limit-962 -j TEE --gateway fc00::2 +-A limit-962 -j DROP +-A limit-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-963 -j logaccept-26 +-A limit-963 -j TEE --gateway fc00::2 +-A limit-963 -j DROP +-A limit-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-964 -j ACCEPT +-A limit-964 -j DROP +-A limit-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-965 -j RETURN +-A limit-965 -j DROP +-A limit-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-966 -j logaccept-27 +-A limit-966 -j DROP +-A limit-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-967 -j logaccept-28 +-A limit-967 -j DROP +-A limit-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-968 -j ACCEPT +-A limit-968 -j DROP +-A limit-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-969 -j logaccept-29 +-A limit-969 -j DROP +-A limit-97 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-970 -j ACCEPT +-A limit-970 -j DROP +-A limit-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-971 -j RETURN +-A limit-971 -j DROP +-A limit-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-972 -j logaccept-30 +-A limit-972 -j DROP +-A limit-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-973 -j logaccept-31 +-A limit-973 -j DROP +-A limit-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-974 -j ACCEPT +-A limit-974 -j DROP +-A limit-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-975 -j logaccept-32 +-A limit-975 -j DROP +-A limit-976 -m recent --name limit-976 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-550 +-A limit-976 -m recent --name limit-976 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-977 -m recent --name limit-977 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-551 +-A limit-977 -m recent --name limit-977 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-978 -m recent --name limit-978 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-552 +-A limit-978 -m limit --limit 1/second -j LOG +-A limit-978 -m recent --name limit-978 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-979 -m recent --name limit-979 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-553 +-A limit-979 -m recent --name limit-979 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-98 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-98 -j ACCEPT --A limit-980 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-981 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-982 -m recent --name user:C --rdest --mask fe00:: --set --A limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-983 -m limit --limit 1/second -j LOG --A limit-983 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-984 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-985 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-986 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-986 -m recent --name user:C --rdest --mask fe00:: --set --A limit-987 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-987 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-988 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP --A limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-989 -j ACCEPT --A limit-99 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-27 --A limit-99 -m limit --limit 1/second -j LOG --A limit-991 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-991 -m limit --limit 1/second -j LOG --A limit-991 -j ACCEPT --A limit-992 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-992 -m limit --limit 1/second -j LOG --A limit-993 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-993 -j ACCEPT --A limit-995 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-995 -j ACCEPT --A limit-996 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-448 --A limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-998 -m recent --name limit-998 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-449 --A limit-998 -m recent --name limit-998 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-999 -m recent --name limit-999 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-450 --A limit-999 -m limit --limit 1/second -j LOG --A limit-999 -m recent --name limit-999 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-980 -m recent --name limit-980 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-554 +-A limit-980 -j TEE --gateway fc00::2 +-A limit-980 -m recent --name limit-980 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-981 -m recent --name limit-981 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-555 +-A limit-981 -m recent --name limit-981 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-982 -m recent --name limit-982 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-556 +-A limit-982 -m recent --name limit-982 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-983 -m recent --name limit-983 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-557 +-A limit-983 -m recent --name limit-983 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-984 -m recent --name limit-984 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-558 +-A limit-984 -m recent --name limit-984 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-985 -m recent --name limit-985 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-559 +-A limit-986 -m recent --name limit-986 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-986 -m recent --name limit-986 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-987 -m recent --name limit-987 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-987 -m recent --name limit-987 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-988 -m recent --name limit-988 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-988 -m limit --limit 1/second -j LOG +-A limit-988 -m recent --name limit-988 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-989 -m recent --name limit-989 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-989 -m recent --name limit-989 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-99 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-990 -m recent --name limit-990 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-990 -j TEE --gateway fc00::2 +-A limit-990 -m recent --name limit-990 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-991 -m recent --name limit-991 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-991 -m recent --name limit-991 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-996 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-996 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-997 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-997 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-998 -m limit --limit 1/second -j LOG +-A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -j TEE --gateway fc00::2 -A logaccept-1 -j ACCEPT --A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j TEE --gateway fc00::2 -A logaccept-10 -j ACCEPT +-A logaccept-100 -j LOG +-A logaccept-100 -j TEE --gateway fc00::1 +-A logaccept-100 -j ACCEPT +-A logaccept-101 -j TEE --gateway fc00::2 +-A logaccept-101 -j ACCEPT +-A logaccept-102 -j ACCEPT -A logaccept-11 -j ACCEPT -A logaccept-12 -m limit --limit 1/second -j LOG -A logaccept-12 -j ACCEPT +-A logaccept-13 -j TEE --gateway fc00::2 -A logaccept-13 -j ACCEPT --A logaccept-14 -m limit --limit 1/second -j LOG -A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG -A logaccept-15 -j ACCEPT --A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j TEE --gateway fc00::2 -A logaccept-16 -j ACCEPT -A logaccept-17 -j ACCEPT -A logaccept-18 -m limit --limit 1/second -j LOG -A logaccept-18 -j ACCEPT +-A logaccept-19 -j TEE --gateway fc00::2 -A logaccept-19 -j ACCEPT --A logaccept-2 -m limit --limit 1/second -j LOG -A logaccept-2 -j ACCEPT --A logaccept-20 -m limit --limit 1/second -j LOG -A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG -A logaccept-21 -j ACCEPT --A logaccept-22 -m limit --limit 1/second -j LOG +-A logaccept-22 -j TEE --gateway fc00::2 -A logaccept-22 -j ACCEPT -A logaccept-23 -j ACCEPT -A logaccept-24 -m limit --limit 1/second -j LOG -A logaccept-24 -j ACCEPT +-A logaccept-25 -j TEE --gateway fc00::2 -A logaccept-25 -j ACCEPT --A logaccept-26 -m limit --limit 1/second -j LOG -A logaccept-26 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG -A logaccept-27 -j ACCEPT --A logaccept-28 -m limit --limit 1/second -j LOG +-A logaccept-28 -j TEE --gateway fc00::2 -A logaccept-28 -j ACCEPT -A logaccept-29 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG -A logaccept-3 -j ACCEPT -A logaccept-30 -m limit --limit 1/second -j LOG -A logaccept-30 -j ACCEPT +-A logaccept-31 -j TEE --gateway fc00::2 -A logaccept-31 -j ACCEPT --A logaccept-32 -m limit --limit 1/second -j LOG -A logaccept-32 -j ACCEPT +-A logaccept-33 -m limit --limit 1/second -j LOG -A logaccept-33 -j ACCEPT --A logaccept-34 -m limit --limit 1/second -j LOG +-A logaccept-34 -j TEE --gateway fc00::2 -A logaccept-34 -j ACCEPT -A logaccept-35 -j ACCEPT -A logaccept-36 -m limit --limit 1/second -j LOG -A logaccept-36 -j ACCEPT +-A logaccept-37 -j TEE --gateway fc00::2 -A logaccept-37 -j ACCEPT --A logaccept-38 -m limit --limit 1/second -j LOG -A logaccept-38 -j ACCEPT +-A logaccept-39 -m limit --limit 1/second -j LOG -A logaccept-39 -j ACCEPT --A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j TEE --gateway fc00::2 -A logaccept-4 -j ACCEPT --A logaccept-40 -m limit --limit 1/second -j LOG +-A logaccept-40 -j TEE --gateway fc00::2 -A logaccept-40 -j ACCEPT -A logaccept-41 -j ACCEPT -A logaccept-42 -m limit --limit 1/second -j LOG -A logaccept-42 -j ACCEPT +-A logaccept-43 -j TEE --gateway fc00::2 -A logaccept-43 -j ACCEPT --A logaccept-44 -m limit --limit 1/second -j LOG -A logaccept-44 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG -A logaccept-45 -j ACCEPT --A logaccept-46 -m limit --limit 1/second -j LOG +-A logaccept-46 -j TEE --gateway fc00::2 -A logaccept-46 -j ACCEPT -A logaccept-47 -j ACCEPT -A logaccept-48 -m limit --limit 1/second -j LOG -A logaccept-48 -j ACCEPT +-A logaccept-49 -j TEE --gateway fc00::2 -A logaccept-49 -j ACCEPT -A logaccept-5 -j ACCEPT --A logaccept-50 -m limit --limit 1/second -j LOG -A logaccept-50 -j ACCEPT +-A logaccept-51 -m limit --limit 1/second -j LOG -A logaccept-51 -j ACCEPT --A logaccept-52 -m limit --limit 1/second -j LOG +-A logaccept-52 -j TEE --gateway fc00::2 -A logaccept-52 -j ACCEPT -A logaccept-53 -j ACCEPT -A logaccept-54 -m limit --limit 1/second -j LOG -A logaccept-54 -j ACCEPT +-A logaccept-55 -j TEE --gateway fc00::2 -A logaccept-55 -j ACCEPT +-A logaccept-56 -j ACCEPT +-A logaccept-57 -m limit --limit 1/second -j LOG +-A logaccept-57 -j ACCEPT +-A logaccept-58 -j TEE --gateway fc00::2 +-A logaccept-58 -j ACCEPT +-A logaccept-59 -j ACCEPT -A logaccept-6 -m limit --limit 1/second -j LOG -A logaccept-6 -j ACCEPT +-A logaccept-60 -m limit --limit 1/second -j LOG +-A logaccept-60 -j ACCEPT +-A logaccept-61 -j TEE --gateway fc00::2 +-A logaccept-61 -j ACCEPT +-A logaccept-62 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-64 -j TEE --gateway fc00::2 +-A logaccept-64 -j ACCEPT +-A logaccept-65 -j ACCEPT +-A logaccept-66 -m limit --limit 1/second -j LOG +-A logaccept-66 -j ACCEPT +-A logaccept-67 -j TEE --gateway fc00::2 +-A logaccept-67 -j ACCEPT +-A logaccept-68 -j ACCEPT +-A logaccept-69 -m limit --limit 1/second -j LOG +-A logaccept-69 -j ACCEPT +-A logaccept-7 -j TEE --gateway fc00::2 -A logaccept-7 -j ACCEPT --A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-70 -j TEE --gateway fc00::2 +-A logaccept-70 -j ACCEPT +-A logaccept-71 -j ACCEPT +-A logaccept-72 -m limit --limit 1/second -j LOG +-A logaccept-72 -j ACCEPT +-A logaccept-73 -j TEE --gateway fc00::2 +-A logaccept-73 -j ACCEPT +-A logaccept-74 -j ACCEPT +-A logaccept-75 -m limit --limit 1/second -j LOG +-A logaccept-75 -j ACCEPT +-A logaccept-76 -j TEE --gateway fc00::2 +-A logaccept-76 -j ACCEPT +-A logaccept-77 -j ACCEPT +-A logaccept-78 -m limit --limit 1/second -j LOG +-A logaccept-78 -j ACCEPT +-A logaccept-79 -j TEE --gateway fc00::2 +-A logaccept-79 -j ACCEPT -A logaccept-8 -j ACCEPT +-A logaccept-80 -j ACCEPT +-A logaccept-81 -m limit --limit 1/second -j LOG +-A logaccept-81 -j ACCEPT +-A logaccept-82 -j TEE --gateway fc00::2 +-A logaccept-82 -j ACCEPT +-A logaccept-83 -j ACCEPT +-A logaccept-84 -m limit --limit 1/second -j LOG +-A logaccept-84 -j ACCEPT +-A logaccept-85 -j TEE --gateway fc00::2 +-A logaccept-85 -j ACCEPT +-A logaccept-86 -j ACCEPT +-A logaccept-87 -m limit --limit 1/second -j LOG +-A logaccept-87 -j ACCEPT +-A logaccept-88 -j TEE --gateway fc00::2 +-A logaccept-88 -j ACCEPT +-A logaccept-89 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT +-A logaccept-90 -m limit --limit 1/second -j LOG +-A logaccept-90 -j ACCEPT +-A logaccept-91 -j TEE --gateway fc00::2 +-A logaccept-91 -j ACCEPT +-A logaccept-92 -j ACCEPT +-A logaccept-93 -m limit --limit 1/second -j LOG +-A logaccept-93 -j ACCEPT +-A logaccept-94 -j TEE --gateway fc00::2 +-A logaccept-94 -j ACCEPT +-A logaccept-95 -j ACCEPT +-A logaccept-96 -m limit --limit 1/second -j LOG +-A logaccept-96 -j ACCEPT +-A logaccept-97 -j TEE --gateway fc00::2 +-A logaccept-97 -j ACCEPT +-A logaccept-98 -j ACCEPT +-A logaccept-99 -m limit --limit 1/second -j LOG +-A logaccept-99 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG -A logaccept-final-0 -j ACCEPT +-A logaccept-final-1 -j TEE --gateway fc00::2 -A logaccept-final-1 -j ACCEPT --A logaccept-final-10 -m limit --limit 1/second -j LOG +-A logaccept-final-10 -j TEE --gateway fc00::2 -A logaccept-final-10 -j ACCEPT --A logaccept-final-100 -m limit --limit 1/second -j LOG +-A logaccept-final-100 -j TEE --gateway fc00::2 -A logaccept-final-100 -j ACCEPT -A logaccept-final-101 -j ACCEPT -A logaccept-final-102 -m limit --limit 1/second -j LOG -A logaccept-final-102 -j ACCEPT +-A logaccept-final-103 -j TEE --gateway fc00::2 -A logaccept-final-103 -j ACCEPT --A logaccept-final-104 -m limit --limit 1/second -j LOG -A logaccept-final-104 -j ACCEPT +-A logaccept-final-105 -m limit --limit 1/second -j LOG -A logaccept-final-105 -j ACCEPT --A logaccept-final-106 -m limit --limit 1/second -j LOG +-A logaccept-final-106 -j TEE --gateway fc00::2 -A logaccept-final-106 -j ACCEPT -A logaccept-final-107 -j ACCEPT -A logaccept-final-108 -m limit --limit 1/second -j LOG -A logaccept-final-108 -j ACCEPT +-A logaccept-final-109 -j TEE --gateway fc00::2 -A logaccept-final-109 -j ACCEPT -A logaccept-final-11 -j ACCEPT --A logaccept-final-110 -m limit --limit 1/second -j LOG -A logaccept-final-110 -j ACCEPT +-A logaccept-final-111 -m limit --limit 1/second -j LOG -A logaccept-final-111 -j ACCEPT --A logaccept-final-112 -m limit --limit 1/second -j LOG +-A logaccept-final-112 -j TEE --gateway fc00::2 -A logaccept-final-112 -j ACCEPT -A logaccept-final-113 -j ACCEPT -A logaccept-final-114 -m limit --limit 1/second -j LOG -A logaccept-final-114 -j ACCEPT +-A logaccept-final-115 -j TEE --gateway fc00::2 -A logaccept-final-115 -j ACCEPT --A logaccept-final-116 -m limit --limit 1/second -j LOG -A logaccept-final-116 -j ACCEPT +-A logaccept-final-117 -m limit --limit 1/second -j LOG -A logaccept-final-117 -j ACCEPT --A logaccept-final-118 -m limit --limit 1/second -j LOG +-A logaccept-final-118 -j TEE --gateway fc00::2 -A logaccept-final-118 -j ACCEPT -A logaccept-final-119 -j ACCEPT -A logaccept-final-12 -m limit --limit 1/second -j LOG -A logaccept-final-12 -j ACCEPT -A logaccept-final-120 -m limit --limit 1/second -j LOG -A logaccept-final-120 -j ACCEPT +-A logaccept-final-121 -j TEE --gateway fc00::2 -A logaccept-final-121 -j ACCEPT --A logaccept-final-122 -m limit --limit 1/second -j LOG -A logaccept-final-122 -j ACCEPT +-A logaccept-final-123 -m limit --limit 1/second -j LOG -A logaccept-final-123 -j ACCEPT --A logaccept-final-124 -m limit --limit 1/second -j LOG +-A logaccept-final-124 -j TEE --gateway fc00::2 -A logaccept-final-124 -j ACCEPT -A logaccept-final-125 -j ACCEPT -A logaccept-final-126 -m limit --limit 1/second -j LOG -A logaccept-final-126 -j ACCEPT +-A logaccept-final-127 -j TEE --gateway fc00::2 -A logaccept-final-127 -j ACCEPT --A logaccept-final-128 -m limit --limit 1/second -j LOG -A logaccept-final-128 -j ACCEPT +-A logaccept-final-129 -m limit --limit 1/second -j LOG -A logaccept-final-129 -j ACCEPT +-A logaccept-final-13 -j TEE --gateway fc00::2 -A logaccept-final-13 -j ACCEPT --A logaccept-final-130 -m limit --limit 1/second -j LOG +-A logaccept-final-130 -j TEE --gateway fc00::2 -A logaccept-final-130 -j ACCEPT -A logaccept-final-131 -j ACCEPT -A logaccept-final-132 -m limit --limit 1/second -j LOG -A logaccept-final-132 -j ACCEPT +-A logaccept-final-133 -j TEE --gateway fc00::2 -A logaccept-final-133 -j ACCEPT --A logaccept-final-134 -m limit --limit 1/second -j LOG -A logaccept-final-134 -j ACCEPT +-A logaccept-final-135 -m limit --limit 1/second -j LOG -A logaccept-final-135 -j ACCEPT --A logaccept-final-136 -m limit --limit 1/second -j LOG +-A logaccept-final-136 -j TEE --gateway fc00::2 -A logaccept-final-136 -j ACCEPT -A logaccept-final-137 -j ACCEPT -A logaccept-final-138 -m limit --limit 1/second -j LOG -A logaccept-final-138 -j ACCEPT +-A logaccept-final-139 -j TEE --gateway fc00::2 -A logaccept-final-139 -j ACCEPT --A logaccept-final-14 -m limit --limit 1/second -j LOG -A logaccept-final-14 -j ACCEPT --A logaccept-final-140 -m limit --limit 1/second -j LOG -A logaccept-final-140 -j ACCEPT +-A logaccept-final-141 -m limit --limit 1/second -j LOG -A logaccept-final-141 -j ACCEPT --A logaccept-final-142 -m limit --limit 1/second -j LOG +-A logaccept-final-142 -j TEE --gateway fc00::2 -A logaccept-final-142 -j ACCEPT -A logaccept-final-143 -j ACCEPT -A logaccept-final-144 -m limit --limit 1/second -j LOG -A logaccept-final-144 -j ACCEPT +-A logaccept-final-145 -j TEE --gateway fc00::2 -A logaccept-final-145 -j ACCEPT --A logaccept-final-146 -m limit --limit 1/second -j LOG -A logaccept-final-146 -j ACCEPT +-A logaccept-final-147 -m limit --limit 1/second -j LOG -A logaccept-final-147 -j ACCEPT --A logaccept-final-148 -m limit --limit 1/second -j LOG +-A logaccept-final-148 -j TEE --gateway fc00::2 -A logaccept-final-148 -j ACCEPT -A logaccept-final-149 -j ACCEPT +-A logaccept-final-15 -m limit --limit 1/second -j LOG -A logaccept-final-15 -j ACCEPT -A logaccept-final-150 -m limit --limit 1/second -j LOG -A logaccept-final-150 -j ACCEPT +-A logaccept-final-151 -j TEE --gateway fc00::2 -A logaccept-final-151 -j ACCEPT --A logaccept-final-152 -m limit --limit 1/second -j LOG -A logaccept-final-152 -j ACCEPT +-A logaccept-final-153 -m limit --limit 1/second -j LOG -A logaccept-final-153 -j ACCEPT --A logaccept-final-154 -m limit --limit 1/second -j LOG +-A logaccept-final-154 -j TEE --gateway fc00::2 -A logaccept-final-154 -j ACCEPT -A logaccept-final-155 -j ACCEPT -A logaccept-final-156 -m limit --limit 1/second -j LOG -A logaccept-final-156 -j ACCEPT +-A logaccept-final-157 -j TEE --gateway fc00::2 -A logaccept-final-157 -j ACCEPT --A logaccept-final-158 -m limit --limit 1/second -j LOG -A logaccept-final-158 -j ACCEPT +-A logaccept-final-159 -m limit --limit 1/second -j LOG -A logaccept-final-159 -j ACCEPT --A logaccept-final-16 -m limit --limit 1/second -j LOG +-A logaccept-final-16 -j TEE --gateway fc00::2 -A logaccept-final-16 -j ACCEPT --A logaccept-final-160 -m limit --limit 1/second -j LOG +-A logaccept-final-160 -j TEE --gateway fc00::2 -A logaccept-final-160 -j ACCEPT -A logaccept-final-161 -j ACCEPT -A logaccept-final-162 -m limit --limit 1/second -j LOG -A logaccept-final-162 -j ACCEPT +-A logaccept-final-163 -j TEE --gateway fc00::2 -A logaccept-final-163 -j ACCEPT +-A logaccept-final-164 -j ACCEPT +-A logaccept-final-165 -m limit --limit 1/second -j LOG +-A logaccept-final-165 -j ACCEPT +-A logaccept-final-166 -j TEE --gateway fc00::2 +-A logaccept-final-166 -j ACCEPT +-A logaccept-final-167 -j ACCEPT +-A logaccept-final-168 -m limit --limit 1/second -j LOG +-A logaccept-final-168 -j ACCEPT +-A logaccept-final-169 -j TEE --gateway fc00::2 +-A logaccept-final-169 -j ACCEPT -A logaccept-final-17 -j ACCEPT +-A logaccept-final-170 -j ACCEPT +-A logaccept-final-171 -m limit --limit 1/second -j LOG +-A logaccept-final-171 -j ACCEPT +-A logaccept-final-172 -j TEE --gateway fc00::2 +-A logaccept-final-172 -j ACCEPT +-A logaccept-final-173 -j ACCEPT +-A logaccept-final-174 -m limit --limit 1/second -j LOG +-A logaccept-final-174 -j ACCEPT +-A logaccept-final-175 -j TEE --gateway fc00::2 +-A logaccept-final-175 -j ACCEPT +-A logaccept-final-176 -j ACCEPT +-A logaccept-final-177 -m limit --limit 1/second -j LOG +-A logaccept-final-177 -j ACCEPT +-A logaccept-final-178 -j TEE --gateway fc00::2 +-A logaccept-final-178 -j ACCEPT +-A logaccept-final-179 -j ACCEPT -A logaccept-final-18 -m limit --limit 1/second -j LOG -A logaccept-final-18 -j ACCEPT +-A logaccept-final-180 -m limit --limit 1/second -j LOG +-A logaccept-final-180 -j ACCEPT +-A logaccept-final-181 -j TEE --gateway fc00::2 +-A logaccept-final-181 -j ACCEPT +-A logaccept-final-182 -j ACCEPT +-A logaccept-final-183 -m limit --limit 1/second -j LOG +-A logaccept-final-183 -j ACCEPT +-A logaccept-final-184 -j TEE --gateway fc00::2 +-A logaccept-final-184 -j ACCEPT +-A logaccept-final-185 -j ACCEPT +-A logaccept-final-186 -m limit --limit 1/second -j LOG +-A logaccept-final-186 -j ACCEPT +-A logaccept-final-187 -j TEE --gateway fc00::2 +-A logaccept-final-187 -j ACCEPT +-A logaccept-final-188 -j ACCEPT +-A logaccept-final-189 -m limit --limit 1/second -j LOG +-A logaccept-final-189 -j ACCEPT +-A logaccept-final-19 -j TEE --gateway fc00::2 -A logaccept-final-19 -j ACCEPT --A logaccept-final-2 -m limit --limit 1/second -j LOG +-A logaccept-final-190 -j TEE --gateway fc00::2 +-A logaccept-final-190 -j ACCEPT +-A logaccept-final-191 -j ACCEPT +-A logaccept-final-192 -m limit --limit 1/second -j LOG +-A logaccept-final-192 -j ACCEPT +-A logaccept-final-193 -j TEE --gateway fc00::2 +-A logaccept-final-193 -j ACCEPT +-A logaccept-final-194 -j ACCEPT +-A logaccept-final-195 -m limit --limit 1/second -j LOG +-A logaccept-final-195 -j ACCEPT +-A logaccept-final-196 -j TEE --gateway fc00::2 +-A logaccept-final-196 -j ACCEPT +-A logaccept-final-197 -j ACCEPT +-A logaccept-final-198 -m limit --limit 1/second -j LOG +-A logaccept-final-198 -j ACCEPT +-A logaccept-final-199 -j TEE --gateway fc00::2 +-A logaccept-final-199 -j ACCEPT -A logaccept-final-2 -j ACCEPT --A logaccept-final-20 -m limit --limit 1/second -j LOG -A logaccept-final-20 -j ACCEPT +-A logaccept-final-200 -j ACCEPT +-A logaccept-final-201 -m limit --limit 1/second -j LOG +-A logaccept-final-201 -j ACCEPT +-A logaccept-final-202 -j TEE --gateway fc00::2 +-A logaccept-final-202 -j ACCEPT +-A logaccept-final-203 -j ACCEPT +-A logaccept-final-204 -m limit --limit 1/second -j LOG +-A logaccept-final-204 -j ACCEPT +-A logaccept-final-205 -j TEE --gateway fc00::2 +-A logaccept-final-205 -j ACCEPT +-A logaccept-final-206 -j ACCEPT +-A logaccept-final-207 -m limit --limit 1/second -j LOG +-A logaccept-final-207 -j ACCEPT +-A logaccept-final-208 -j TEE --gateway fc00::2 +-A logaccept-final-208 -j ACCEPT +-A logaccept-final-209 -j ACCEPT +-A logaccept-final-21 -m limit --limit 1/second -j LOG -A logaccept-final-21 -j ACCEPT --A logaccept-final-22 -m limit --limit 1/second -j LOG +-A logaccept-final-210 -m limit --limit 1/second -j LOG +-A logaccept-final-210 -j ACCEPT +-A logaccept-final-211 -j TEE --gateway fc00::2 +-A logaccept-final-211 -j ACCEPT +-A logaccept-final-212 -j ACCEPT +-A logaccept-final-213 -m limit --limit 1/second -j LOG +-A logaccept-final-213 -j ACCEPT +-A logaccept-final-214 -j TEE --gateway fc00::2 +-A logaccept-final-214 -j ACCEPT +-A logaccept-final-215 -j ACCEPT +-A logaccept-final-216 -m limit --limit 1/second -j LOG +-A logaccept-final-216 -j ACCEPT +-A logaccept-final-217 -j TEE --gateway fc00::2 +-A logaccept-final-217 -j ACCEPT +-A logaccept-final-218 -j ACCEPT +-A logaccept-final-219 -m limit --limit 1/second -j LOG +-A logaccept-final-219 -j ACCEPT +-A logaccept-final-22 -j TEE --gateway fc00::2 -A logaccept-final-22 -j ACCEPT +-A logaccept-final-220 -j TEE --gateway fc00::2 +-A logaccept-final-220 -j ACCEPT +-A logaccept-final-221 -j ACCEPT +-A logaccept-final-222 -m limit --limit 1/second -j LOG +-A logaccept-final-222 -j ACCEPT +-A logaccept-final-223 -j TEE --gateway fc00::2 +-A logaccept-final-223 -j ACCEPT +-A logaccept-final-224 -j ACCEPT +-A logaccept-final-225 -m limit --limit 1/second -j LOG +-A logaccept-final-225 -j ACCEPT +-A logaccept-final-226 -j TEE --gateway fc00::2 +-A logaccept-final-226 -j ACCEPT +-A logaccept-final-227 -j ACCEPT +-A logaccept-final-228 -m limit --limit 1/second -j LOG +-A logaccept-final-228 -j ACCEPT +-A logaccept-final-229 -j TEE --gateway fc00::2 +-A logaccept-final-229 -j ACCEPT -A logaccept-final-23 -j ACCEPT +-A logaccept-final-230 -j ACCEPT +-A logaccept-final-231 -m limit --limit 1/second -j LOG +-A logaccept-final-231 -j ACCEPT +-A logaccept-final-232 -j TEE --gateway fc00::2 +-A logaccept-final-232 -j ACCEPT +-A logaccept-final-233 -j ACCEPT +-A logaccept-final-234 -m limit --limit 1/second -j LOG +-A logaccept-final-234 -j ACCEPT +-A logaccept-final-235 -j TEE --gateway fc00::2 +-A logaccept-final-235 -j ACCEPT +-A logaccept-final-236 -j ACCEPT +-A logaccept-final-237 -m limit --limit 1/second -j LOG +-A logaccept-final-237 -j ACCEPT +-A logaccept-final-238 -j TEE --gateway fc00::2 +-A logaccept-final-238 -j ACCEPT +-A logaccept-final-239 -j ACCEPT -A logaccept-final-24 -m limit --limit 1/second -j LOG -A logaccept-final-24 -j ACCEPT +-A logaccept-final-240 -m limit --limit 1/second -j LOG +-A logaccept-final-240 -j ACCEPT +-A logaccept-final-241 -j TEE --gateway fc00::2 +-A logaccept-final-241 -j ACCEPT +-A logaccept-final-242 -j ACCEPT +-A logaccept-final-243 -m limit --limit 1/second -j LOG +-A logaccept-final-243 -j ACCEPT +-A logaccept-final-244 -j TEE --gateway fc00::2 +-A logaccept-final-244 -j ACCEPT +-A logaccept-final-245 -j ACCEPT +-A logaccept-final-246 -m limit --limit 1/second -j LOG +-A logaccept-final-246 -j ACCEPT +-A logaccept-final-247 -j TEE --gateway fc00::2 +-A logaccept-final-247 -j ACCEPT +-A logaccept-final-248 -j ACCEPT +-A logaccept-final-249 -m limit --limit 1/second -j LOG +-A logaccept-final-249 -j ACCEPT +-A logaccept-final-25 -j TEE --gateway fc00::2 -A logaccept-final-25 -j ACCEPT --A logaccept-final-26 -m limit --limit 1/second -j LOG +-A logaccept-final-250 -j TEE --gateway fc00::2 +-A logaccept-final-250 -j ACCEPT +-A logaccept-final-251 -j ACCEPT +-A logaccept-final-252 -m limit --limit 1/second -j LOG +-A logaccept-final-252 -j ACCEPT +-A logaccept-final-253 -j TEE --gateway fc00::2 +-A logaccept-final-253 -j ACCEPT +-A logaccept-final-254 -j ACCEPT +-A logaccept-final-255 -m limit --limit 1/second -j LOG +-A logaccept-final-255 -j ACCEPT +-A logaccept-final-256 -j TEE --gateway fc00::2 +-A logaccept-final-256 -j ACCEPT +-A logaccept-final-257 -j ACCEPT +-A logaccept-final-258 -m limit --limit 1/second -j LOG +-A logaccept-final-258 -j ACCEPT +-A logaccept-final-259 -j TEE --gateway fc00::2 +-A logaccept-final-259 -j ACCEPT -A logaccept-final-26 -j ACCEPT +-A logaccept-final-260 -j ACCEPT +-A logaccept-final-261 -m limit --limit 1/second -j LOG +-A logaccept-final-261 -j ACCEPT +-A logaccept-final-262 -j TEE --gateway fc00::2 +-A logaccept-final-262 -j ACCEPT +-A logaccept-final-263 -j ACCEPT +-A logaccept-final-264 -m limit --limit 1/second -j LOG +-A logaccept-final-264 -j ACCEPT +-A logaccept-final-265 -j TEE --gateway fc00::2 +-A logaccept-final-265 -j ACCEPT +-A logaccept-final-266 -j ACCEPT +-A logaccept-final-267 -m limit --limit 1/second -j LOG +-A logaccept-final-267 -j ACCEPT +-A logaccept-final-268 -j TEE --gateway fc00::2 +-A logaccept-final-268 -j ACCEPT +-A logaccept-final-269 -j ACCEPT +-A logaccept-final-27 -m limit --limit 1/second -j LOG -A logaccept-final-27 -j ACCEPT --A logaccept-final-28 -m limit --limit 1/second -j LOG +-A logaccept-final-270 -m limit --limit 1/second -j LOG +-A logaccept-final-270 -j ACCEPT +-A logaccept-final-271 -j TEE --gateway fc00::2 +-A logaccept-final-271 -j ACCEPT +-A logaccept-final-272 -j ACCEPT +-A logaccept-final-273 -m limit --limit 1/second -j LOG +-A logaccept-final-273 -j ACCEPT +-A logaccept-final-274 -j TEE --gateway fc00::2 +-A logaccept-final-274 -j ACCEPT +-A logaccept-final-275 -j ACCEPT +-A logaccept-final-276 -m limit --limit 1/second -j LOG +-A logaccept-final-276 -j ACCEPT +-A logaccept-final-277 -j TEE --gateway fc00::2 +-A logaccept-final-277 -j ACCEPT +-A logaccept-final-278 -j ACCEPT +-A logaccept-final-279 -m limit --limit 1/second -j LOG +-A logaccept-final-279 -j ACCEPT +-A logaccept-final-28 -j TEE --gateway fc00::2 -A logaccept-final-28 -j ACCEPT +-A logaccept-final-280 -j TEE --gateway fc00::2 +-A logaccept-final-280 -j ACCEPT +-A logaccept-final-281 -j ACCEPT +-A logaccept-final-282 -m limit --limit 1/second -j LOG +-A logaccept-final-282 -j ACCEPT +-A logaccept-final-283 -j TEE --gateway fc00::2 +-A logaccept-final-283 -j ACCEPT +-A logaccept-final-284 -j ACCEPT +-A logaccept-final-285 -m limit --limit 1/second -j LOG +-A logaccept-final-285 -j ACCEPT +-A logaccept-final-286 -j TEE --gateway fc00::2 +-A logaccept-final-286 -j ACCEPT +-A logaccept-final-287 -j ACCEPT +-A logaccept-final-288 -m limit --limit 1/second -j LOG +-A logaccept-final-288 -j ACCEPT +-A logaccept-final-289 -j TEE --gateway fc00::2 +-A logaccept-final-289 -j ACCEPT -A logaccept-final-29 -j ACCEPT +-A logaccept-final-290 -j ACCEPT +-A logaccept-final-291 -m limit --limit 1/second -j LOG +-A logaccept-final-291 -j ACCEPT +-A logaccept-final-292 -j TEE --gateway fc00::2 +-A logaccept-final-292 -j ACCEPT +-A logaccept-final-293 -j ACCEPT +-A logaccept-final-294 -m limit --limit 1/second -j LOG +-A logaccept-final-294 -j ACCEPT +-A logaccept-final-295 -j TEE --gateway fc00::2 +-A logaccept-final-295 -j ACCEPT +-A logaccept-final-296 -j ACCEPT +-A logaccept-final-297 -m limit --limit 1/second -j LOG +-A logaccept-final-297 -j ACCEPT +-A logaccept-final-298 -j TEE --gateway fc00::2 +-A logaccept-final-298 -j ACCEPT +-A logaccept-final-299 -j ACCEPT +-A logaccept-final-3 -m limit --limit 1/second -j LOG -A logaccept-final-3 -j ACCEPT -A logaccept-final-30 -m limit --limit 1/second -j LOG -A logaccept-final-30 -j ACCEPT +-A logaccept-final-300 -m limit --limit 1/second -j LOG +-A logaccept-final-300 -j ACCEPT +-A logaccept-final-301 -j TEE --gateway fc00::2 +-A logaccept-final-301 -j ACCEPT +-A logaccept-final-302 -j ACCEPT +-A logaccept-final-303 -m limit --limit 1/second -j LOG +-A logaccept-final-303 -j ACCEPT +-A logaccept-final-304 -j TEE --gateway fc00::2 +-A logaccept-final-304 -j ACCEPT +-A logaccept-final-305 -j ACCEPT +-A logaccept-final-31 -j TEE --gateway fc00::2 -A logaccept-final-31 -j ACCEPT --A logaccept-final-32 -m limit --limit 1/second -j LOG -A logaccept-final-32 -j ACCEPT +-A logaccept-final-33 -m limit --limit 1/second -j LOG -A logaccept-final-33 -j ACCEPT --A logaccept-final-34 -m limit --limit 1/second -j LOG +-A logaccept-final-34 -j TEE --gateway fc00::2 -A logaccept-final-34 -j ACCEPT -A logaccept-final-35 -j ACCEPT -A logaccept-final-36 -m limit --limit 1/second -j LOG -A logaccept-final-36 -j ACCEPT +-A logaccept-final-37 -j TEE --gateway fc00::2 -A logaccept-final-37 -j ACCEPT --A logaccept-final-38 -m limit --limit 1/second -j LOG -A logaccept-final-38 -j ACCEPT +-A logaccept-final-39 -m limit --limit 1/second -j LOG -A logaccept-final-39 -j ACCEPT --A logaccept-final-4 -m limit --limit 1/second -j LOG +-A logaccept-final-4 -j TEE --gateway fc00::2 -A logaccept-final-4 -j ACCEPT --A logaccept-final-40 -m limit --limit 1/second -j LOG +-A logaccept-final-40 -j TEE --gateway fc00::2 -A logaccept-final-40 -j ACCEPT -A logaccept-final-41 -j ACCEPT -A logaccept-final-42 -m limit --limit 1/second -j LOG -A logaccept-final-42 -j ACCEPT +-A logaccept-final-43 -j TEE --gateway fc00::2 -A logaccept-final-43 -j ACCEPT --A logaccept-final-44 -m limit --limit 1/second -j LOG -A logaccept-final-44 -j ACCEPT +-A logaccept-final-45 -m limit --limit 1/second -j LOG -A logaccept-final-45 -j ACCEPT --A logaccept-final-46 -m limit --limit 1/second -j LOG +-A logaccept-final-46 -j TEE --gateway fc00::2 -A logaccept-final-46 -j ACCEPT -A logaccept-final-47 -j ACCEPT -A logaccept-final-48 -m limit --limit 1/second -j LOG -A logaccept-final-48 -j ACCEPT +-A logaccept-final-49 -j TEE --gateway fc00::2 -A logaccept-final-49 -j ACCEPT -A logaccept-final-5 -j ACCEPT --A logaccept-final-50 -m limit --limit 1/second -j LOG -A logaccept-final-50 -j ACCEPT +-A logaccept-final-51 -m limit --limit 1/second -j LOG -A logaccept-final-51 -j ACCEPT --A logaccept-final-52 -m limit --limit 1/second -j LOG +-A logaccept-final-52 -j TEE --gateway fc00::2 -A logaccept-final-52 -j ACCEPT -A logaccept-final-53 -j ACCEPT -A logaccept-final-54 -m limit --limit 1/second -j LOG -A logaccept-final-54 -j ACCEPT +-A logaccept-final-55 -j TEE --gateway fc00::2 -A logaccept-final-55 -j ACCEPT --A logaccept-final-56 -m limit --limit 1/second -j LOG -A logaccept-final-56 -j ACCEPT +-A logaccept-final-57 -m limit --limit 1/second -j LOG -A logaccept-final-57 -j ACCEPT --A logaccept-final-58 -m limit --limit 1/second -j LOG +-A logaccept-final-58 -j TEE --gateway fc00::2 -A logaccept-final-58 -j ACCEPT -A logaccept-final-59 -j ACCEPT -A logaccept-final-6 -m limit --limit 1/second -j LOG -A logaccept-final-6 -j ACCEPT -A logaccept-final-60 -m limit --limit 1/second -j LOG -A logaccept-final-60 -j ACCEPT +-A logaccept-final-61 -j TEE --gateway fc00::2 -A logaccept-final-61 -j ACCEPT --A logaccept-final-62 -m limit --limit 1/second -j LOG -A logaccept-final-62 -j ACCEPT +-A logaccept-final-63 -m limit --limit 1/second -j LOG -A logaccept-final-63 -j ACCEPT --A logaccept-final-64 -m limit --limit 1/second -j LOG +-A logaccept-final-64 -j TEE --gateway fc00::2 -A logaccept-final-64 -j ACCEPT -A logaccept-final-65 -j ACCEPT -A logaccept-final-66 -m limit --limit 1/second -j LOG -A logaccept-final-66 -j ACCEPT +-A logaccept-final-67 -j TEE --gateway fc00::2 -A logaccept-final-67 -j ACCEPT --A logaccept-final-68 -m limit --limit 1/second -j LOG -A logaccept-final-68 -j ACCEPT +-A logaccept-final-69 -m limit --limit 1/second -j LOG -A logaccept-final-69 -j ACCEPT +-A logaccept-final-7 -j TEE --gateway fc00::2 -A logaccept-final-7 -j ACCEPT --A logaccept-final-70 -m limit --limit 1/second -j LOG +-A logaccept-final-70 -j TEE --gateway fc00::2 -A logaccept-final-70 -j ACCEPT -A logaccept-final-71 -j ACCEPT -A logaccept-final-72 -m limit --limit 1/second -j LOG -A logaccept-final-72 -j ACCEPT +-A logaccept-final-73 -j TEE --gateway fc00::2 -A logaccept-final-73 -j ACCEPT --A logaccept-final-74 -m limit --limit 1/second -j LOG -A logaccept-final-74 -j ACCEPT +-A logaccept-final-75 -m limit --limit 1/second -j LOG -A logaccept-final-75 -j ACCEPT --A logaccept-final-76 -m limit --limit 1/second -j LOG +-A logaccept-final-76 -j TEE --gateway fc00::2 -A logaccept-final-76 -j ACCEPT -A logaccept-final-77 -j ACCEPT -A logaccept-final-78 -m limit --limit 1/second -j LOG -A logaccept-final-78 -j ACCEPT +-A logaccept-final-79 -j TEE --gateway fc00::2 -A logaccept-final-79 -j ACCEPT --A logaccept-final-8 -m limit --limit 1/second -j LOG -A logaccept-final-8 -j ACCEPT --A logaccept-final-80 -m limit --limit 1/second -j LOG -A logaccept-final-80 -j ACCEPT +-A logaccept-final-81 -m limit --limit 1/second -j LOG -A logaccept-final-81 -j ACCEPT --A logaccept-final-82 -m limit --limit 1/second -j LOG +-A logaccept-final-82 -j TEE --gateway fc00::2 -A logaccept-final-82 -j ACCEPT -A logaccept-final-83 -j ACCEPT -A logaccept-final-84 -m limit --limit 1/second -j LOG -A logaccept-final-84 -j ACCEPT +-A logaccept-final-85 -j TEE --gateway fc00::2 -A logaccept-final-85 -j ACCEPT --A logaccept-final-86 -m limit --limit 1/second -j LOG -A logaccept-final-86 -j ACCEPT +-A logaccept-final-87 -m limit --limit 1/second -j LOG -A logaccept-final-87 -j ACCEPT --A logaccept-final-88 -m limit --limit 1/second -j LOG +-A logaccept-final-88 -j TEE --gateway fc00::2 -A logaccept-final-88 -j ACCEPT -A logaccept-final-89 -j ACCEPT +-A logaccept-final-9 -m limit --limit 1/second -j LOG -A logaccept-final-9 -j ACCEPT -A logaccept-final-90 -m limit --limit 1/second -j LOG -A logaccept-final-90 -j ACCEPT +-A logaccept-final-91 -j TEE --gateway fc00::2 -A logaccept-final-91 -j ACCEPT --A logaccept-final-92 -m limit --limit 1/second -j LOG -A logaccept-final-92 -j ACCEPT +-A logaccept-final-93 -m limit --limit 1/second -j LOG -A logaccept-final-93 -j ACCEPT --A logaccept-final-94 -m limit --limit 1/second -j LOG +-A logaccept-final-94 -j TEE --gateway fc00::2 -A logaccept-final-94 -j ACCEPT -A logaccept-final-95 -j ACCEPT -A logaccept-final-96 -m limit --limit 1/second -j LOG -A logaccept-final-96 -j ACCEPT +-A logaccept-final-97 -j TEE --gateway fc00::2 -A logaccept-final-97 -j ACCEPT --A logaccept-final-98 -m limit --limit 1/second -j LOG -A logaccept-final-98 -j ACCEPT +-A logaccept-final-99 -m limit --limit 1/second -j LOG -A logaccept-final-99 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP @@ -14466,17 +23483,29 @@ -A logdrop-1 -j DROP -A logdrop-10 -m limit --limit 1/second -j LOG -A logdrop-10 -j DROP +-A logdrop-100 -j TEE --gateway fc00::2 -A logdrop-100 -j DROP +-A logdrop-1000 -j TEE --gateway fc00::2 -A logdrop-1000 -j DROP +-A logdrop-1001 -j TEE --gateway fc00::2 -A logdrop-1001 -j DROP +-A logdrop-1002 -j TEE --gateway fc00::2 -A logdrop-1002 -j DROP +-A logdrop-1003 -j TEE --gateway fc00::2 -A logdrop-1003 -j DROP +-A logdrop-1004 -j TEE --gateway fc00::2 -A logdrop-1004 -j DROP +-A logdrop-1005 -j TEE --gateway fc00::2 -A logdrop-1005 -j DROP +-A logdrop-1006 -j TEE --gateway fc00::2 -A logdrop-1006 -j DROP +-A logdrop-1007 -j TEE --gateway fc00::2 -A logdrop-1007 -j DROP +-A logdrop-1008 -j TEE --gateway fc00::2 -A logdrop-1008 -j DROP +-A logdrop-1009 -j TEE --gateway fc00::2 -A logdrop-1009 -j DROP +-A logdrop-101 -j TEE --gateway fc00::2 -A logdrop-101 -j DROP -A logdrop-1010 -j DROP -A logdrop-1011 -j DROP @@ -14488,6 +23517,7 @@ -A logdrop-1017 -j DROP -A logdrop-1018 -j DROP -A logdrop-1019 -j DROP +-A logdrop-102 -j TEE --gateway fc00::2 -A logdrop-102 -j DROP -A logdrop-1020 -j DROP -A logdrop-1021 -j DROP @@ -14499,6 +23529,7 @@ -A logdrop-1027 -j DROP -A logdrop-1028 -j DROP -A logdrop-1029 -j DROP +-A logdrop-103 -j TEE --gateway fc00::2 -A logdrop-103 -j DROP -A logdrop-1030 -j DROP -A logdrop-1031 -j DROP @@ -14510,134 +23541,81 @@ -A logdrop-1037 -j DROP -A logdrop-1038 -j DROP -A logdrop-1039 -j DROP +-A logdrop-104 -j TEE --gateway fc00::2 -A logdrop-104 -j DROP --A logdrop-1040 -m limit --limit 1/second -j LOG -A logdrop-1040 -j DROP --A logdrop-1041 -m limit --limit 1/second -j LOG -A logdrop-1041 -j DROP --A logdrop-1042 -m limit --limit 1/second -j LOG -A logdrop-1042 -j DROP --A logdrop-1043 -m limit --limit 1/second -j LOG -A logdrop-1043 -j DROP --A logdrop-1044 -m limit --limit 1/second -j LOG -A logdrop-1044 -j DROP --A logdrop-1045 -m limit --limit 1/second -j LOG -A logdrop-1045 -j DROP --A logdrop-1046 -m limit --limit 1/second -j LOG -A logdrop-1046 -j DROP --A logdrop-1047 -m limit --limit 1/second -j LOG -A logdrop-1047 -j DROP --A logdrop-1048 -m limit --limit 1/second -j LOG -A logdrop-1048 -j DROP --A logdrop-1049 -m limit --limit 1/second -j LOG -A logdrop-1049 -j DROP +-A logdrop-105 -j TEE --gateway fc00::2 -A logdrop-105 -j DROP --A logdrop-1050 -m limit --limit 1/second -j LOG -A logdrop-1050 -j DROP --A logdrop-1051 -m limit --limit 1/second -j LOG -A logdrop-1051 -j DROP --A logdrop-1052 -m limit --limit 1/second -j LOG -A logdrop-1052 -j DROP --A logdrop-1053 -m limit --limit 1/second -j LOG -A logdrop-1053 -j DROP --A logdrop-1054 -m limit --limit 1/second -j LOG -A logdrop-1054 -j DROP --A logdrop-1055 -m limit --limit 1/second -j LOG -A logdrop-1055 -j DROP --A logdrop-1056 -m limit --limit 1/second -j LOG -A logdrop-1056 -j DROP --A logdrop-1057 -m limit --limit 1/second -j LOG -A logdrop-1057 -j DROP --A logdrop-1058 -m limit --limit 1/second -j LOG -A logdrop-1058 -j DROP --A logdrop-1059 -m limit --limit 1/second -j LOG -A logdrop-1059 -j DROP +-A logdrop-106 -j TEE --gateway fc00::2 -A logdrop-106 -j DROP --A logdrop-1060 -m limit --limit 1/second -j LOG -A logdrop-1060 -j DROP --A logdrop-1061 -m limit --limit 1/second -j LOG -A logdrop-1061 -j DROP --A logdrop-1062 -m limit --limit 1/second -j LOG -A logdrop-1062 -j DROP --A logdrop-1063 -m limit --limit 1/second -j LOG -A logdrop-1063 -j DROP --A logdrop-1064 -m limit --limit 1/second -j LOG -A logdrop-1064 -j DROP --A logdrop-1065 -m limit --limit 1/second -j LOG -A logdrop-1065 -j DROP --A logdrop-1066 -m limit --limit 1/second -j LOG -A logdrop-1066 -j DROP --A logdrop-1067 -m limit --limit 1/second -j LOG -A logdrop-1067 -j DROP --A logdrop-1068 -m limit --limit 1/second -j LOG -A logdrop-1068 -j DROP --A logdrop-1069 -m limit --limit 1/second -j LOG -A logdrop-1069 -j DROP +-A logdrop-107 -j TEE --gateway fc00::2 -A logdrop-107 -j DROP --A logdrop-1070 -m limit --limit 1/second -j LOG -A logdrop-1070 -j DROP --A logdrop-1071 -m limit --limit 1/second -j LOG -A logdrop-1071 -j DROP --A logdrop-1072 -m limit --limit 1/second -j LOG -A logdrop-1072 -j DROP --A logdrop-1073 -m limit --limit 1/second -j LOG -A logdrop-1073 -j DROP --A logdrop-1074 -m limit --limit 1/second -j LOG -A logdrop-1074 -j DROP --A logdrop-1075 -m limit --limit 1/second -j LOG -A logdrop-1075 -j DROP --A logdrop-1076 -m limit --limit 1/second -j LOG -A logdrop-1076 -j DROP --A logdrop-1077 -m limit --limit 1/second -j LOG -A logdrop-1077 -j DROP --A logdrop-1078 -m limit --limit 1/second -j LOG -A logdrop-1078 -j DROP --A logdrop-1079 -m limit --limit 1/second -j LOG -A logdrop-1079 -j DROP +-A logdrop-108 -j TEE --gateway fc00::2 -A logdrop-108 -j DROP --A logdrop-1080 -m limit --limit 1/second -j LOG -A logdrop-1080 -j DROP --A logdrop-1081 -m limit --limit 1/second -j LOG -A logdrop-1081 -j DROP --A logdrop-1082 -m limit --limit 1/second -j LOG -A logdrop-1082 -j DROP --A logdrop-1083 -m limit --limit 1/second -j LOG -A logdrop-1083 -j DROP --A logdrop-1084 -m limit --limit 1/second -j LOG -A logdrop-1084 -j DROP --A logdrop-1085 -m limit --limit 1/second -j LOG -A logdrop-1085 -j DROP --A logdrop-1086 -m limit --limit 1/second -j LOG -A logdrop-1086 -j DROP --A logdrop-1087 -m limit --limit 1/second -j LOG -A logdrop-1087 -j DROP --A logdrop-1088 -m limit --limit 1/second -j LOG -A logdrop-1088 -j DROP --A logdrop-1089 -m limit --limit 1/second -j LOG -A logdrop-1089 -j DROP +-A logdrop-109 -j TEE --gateway fc00::2 -A logdrop-109 -j DROP --A logdrop-1090 -m limit --limit 1/second -j LOG -A logdrop-1090 -j DROP --A logdrop-1091 -m limit --limit 1/second -j LOG -A logdrop-1091 -j DROP --A logdrop-1092 -m limit --limit 1/second -j LOG -A logdrop-1092 -j DROP --A logdrop-1093 -m limit --limit 1/second -j LOG -A logdrop-1093 -j DROP --A logdrop-1094 -m limit --limit 1/second -j LOG -A logdrop-1094 -j DROP --A logdrop-1095 -m limit --limit 1/second -j LOG -A logdrop-1095 -j DROP --A logdrop-1096 -m limit --limit 1/second -j LOG -A logdrop-1096 -j DROP --A logdrop-1097 -m limit --limit 1/second -j LOG -A logdrop-1097 -j DROP --A logdrop-1098 -m limit --limit 1/second -j LOG -A logdrop-1098 -j DROP --A logdrop-1099 -m limit --limit 1/second -j LOG -A logdrop-1099 -j DROP -A logdrop-11 -m limit --limit 1/second -j LOG -A logdrop-11 -j DROP +-A logdrop-110 -j TEE --gateway fc00::2 -A logdrop-110 -j DROP -A logdrop-1100 -m limit --limit 1/second -j LOG -A logdrop-1100 -j DROP @@ -14659,295 +23637,2051 @@ -A logdrop-1108 -j DROP -A logdrop-1109 -m limit --limit 1/second -j LOG -A logdrop-1109 -j DROP +-A logdrop-111 -j TEE --gateway fc00::2 -A logdrop-111 -j DROP -A logdrop-1110 -m limit --limit 1/second -j LOG -A logdrop-1110 -j DROP -A logdrop-1111 -m limit --limit 1/second -j LOG -A logdrop-1111 -j DROP +-A logdrop-1112 -m limit --limit 1/second -j LOG -A logdrop-1112 -j DROP +-A logdrop-1113 -m limit --limit 1/second -j LOG -A logdrop-1113 -j DROP +-A logdrop-1114 -m limit --limit 1/second -j LOG -A logdrop-1114 -j DROP +-A logdrop-1115 -m limit --limit 1/second -j LOG -A logdrop-1115 -j DROP +-A logdrop-1116 -m limit --limit 1/second -j LOG -A logdrop-1116 -j DROP +-A logdrop-1117 -m limit --limit 1/second -j LOG -A logdrop-1117 -j DROP +-A logdrop-1118 -m limit --limit 1/second -j LOG -A logdrop-1118 -j DROP +-A logdrop-1119 -m limit --limit 1/second -j LOG -A logdrop-1119 -j DROP +-A logdrop-112 -j TEE --gateway fc00::2 -A logdrop-112 -j DROP +-A logdrop-1120 -m limit --limit 1/second -j LOG -A logdrop-1120 -j DROP +-A logdrop-1121 -m limit --limit 1/second -j LOG -A logdrop-1121 -j DROP +-A logdrop-1122 -m limit --limit 1/second -j LOG -A logdrop-1122 -j DROP +-A logdrop-1123 -m limit --limit 1/second -j LOG -A logdrop-1123 -j DROP +-A logdrop-1124 -m limit --limit 1/second -j LOG -A logdrop-1124 -j DROP +-A logdrop-1125 -m limit --limit 1/second -j LOG -A logdrop-1125 -j DROP +-A logdrop-1126 -m limit --limit 1/second -j LOG -A logdrop-1126 -j DROP +-A logdrop-1127 -m limit --limit 1/second -j LOG -A logdrop-1127 -j DROP +-A logdrop-1128 -m limit --limit 1/second -j LOG -A logdrop-1128 -j DROP +-A logdrop-1129 -m limit --limit 1/second -j LOG -A logdrop-1129 -j DROP +-A logdrop-113 -j TEE --gateway fc00::2 -A logdrop-113 -j DROP +-A logdrop-1130 -m limit --limit 1/second -j LOG -A logdrop-1130 -j DROP +-A logdrop-1131 -m limit --limit 1/second -j LOG -A logdrop-1131 -j DROP +-A logdrop-1132 -m limit --limit 1/second -j LOG -A logdrop-1132 -j DROP +-A logdrop-1133 -m limit --limit 1/second -j LOG -A logdrop-1133 -j DROP +-A logdrop-1134 -m limit --limit 1/second -j LOG -A logdrop-1134 -j DROP +-A logdrop-1135 -m limit --limit 1/second -j LOG -A logdrop-1135 -j DROP +-A logdrop-1136 -m limit --limit 1/second -j LOG -A logdrop-1136 -j DROP +-A logdrop-1137 -m limit --limit 1/second -j LOG -A logdrop-1137 -j DROP +-A logdrop-1138 -m limit --limit 1/second -j LOG -A logdrop-1138 -j DROP +-A logdrop-1139 -m limit --limit 1/second -j LOG -A logdrop-1139 -j DROP +-A logdrop-114 -j TEE --gateway fc00::2 -A logdrop-114 -j DROP +-A logdrop-1140 -m limit --limit 1/second -j LOG -A logdrop-1140 -j DROP +-A logdrop-1141 -m limit --limit 1/second -j LOG -A logdrop-1141 -j DROP +-A logdrop-1142 -m limit --limit 1/second -j LOG -A logdrop-1142 -j DROP +-A logdrop-1143 -m limit --limit 1/second -j LOG -A logdrop-1143 -j DROP +-A logdrop-1144 -m limit --limit 1/second -j LOG -A logdrop-1144 -j DROP +-A logdrop-1145 -m limit --limit 1/second -j LOG -A logdrop-1145 -j DROP +-A logdrop-1146 -m limit --limit 1/second -j LOG -A logdrop-1146 -j DROP +-A logdrop-1147 -m limit --limit 1/second -j LOG -A logdrop-1147 -j DROP +-A logdrop-1148 -m limit --limit 1/second -j LOG -A logdrop-1148 -j DROP +-A logdrop-1149 -m limit --limit 1/second -j LOG -A logdrop-1149 -j DROP +-A logdrop-115 -j TEE --gateway fc00::2 -A logdrop-115 -j DROP +-A logdrop-1150 -m limit --limit 1/second -j LOG -A logdrop-1150 -j DROP +-A logdrop-1151 -m limit --limit 1/second -j LOG -A logdrop-1151 -j DROP +-A logdrop-1152 -m limit --limit 1/second -j LOG -A logdrop-1152 -j DROP +-A logdrop-1153 -m limit --limit 1/second -j LOG -A logdrop-1153 -j DROP +-A logdrop-1154 -m limit --limit 1/second -j LOG -A logdrop-1154 -j DROP +-A logdrop-1155 -m limit --limit 1/second -j LOG -A logdrop-1155 -j DROP +-A logdrop-1156 -m limit --limit 1/second -j LOG -A logdrop-1156 -j DROP +-A logdrop-1157 -m limit --limit 1/second -j LOG -A logdrop-1157 -j DROP +-A logdrop-1158 -m limit --limit 1/second -j LOG -A logdrop-1158 -j DROP +-A logdrop-1159 -m limit --limit 1/second -j LOG -A logdrop-1159 -j DROP +-A logdrop-116 -j TEE --gateway fc00::2 -A logdrop-116 -j DROP +-A logdrop-1160 -m limit --limit 1/second -j LOG -A logdrop-1160 -j DROP +-A logdrop-1161 -m limit --limit 1/second -j LOG -A logdrop-1161 -j DROP +-A logdrop-1162 -m limit --limit 1/second -j LOG -A logdrop-1162 -j DROP +-A logdrop-1163 -m limit --limit 1/second -j LOG -A logdrop-1163 -j DROP +-A logdrop-1164 -m limit --limit 1/second -j LOG -A logdrop-1164 -j DROP +-A logdrop-1165 -m limit --limit 1/second -j LOG -A logdrop-1165 -j DROP +-A logdrop-1166 -m limit --limit 1/second -j LOG -A logdrop-1166 -j DROP +-A logdrop-1167 -m limit --limit 1/second -j LOG -A logdrop-1167 -j DROP +-A logdrop-1168 -m limit --limit 1/second -j LOG -A logdrop-1168 -j DROP +-A logdrop-1169 -m limit --limit 1/second -j LOG -A logdrop-1169 -j DROP +-A logdrop-117 -j TEE --gateway fc00::2 -A logdrop-117 -j DROP +-A logdrop-1170 -m limit --limit 1/second -j LOG -A logdrop-1170 -j DROP +-A logdrop-1171 -m limit --limit 1/second -j LOG -A logdrop-1171 -j DROP +-A logdrop-1172 -m limit --limit 1/second -j LOG -A logdrop-1172 -j DROP +-A logdrop-1173 -m limit --limit 1/second -j LOG -A logdrop-1173 -j DROP +-A logdrop-1174 -m limit --limit 1/second -j LOG -A logdrop-1174 -j DROP +-A logdrop-1175 -m limit --limit 1/second -j LOG -A logdrop-1175 -j DROP +-A logdrop-1176 -m limit --limit 1/second -j LOG -A logdrop-1176 -j DROP +-A logdrop-1177 -m limit --limit 1/second -j LOG -A logdrop-1177 -j DROP +-A logdrop-1178 -m limit --limit 1/second -j LOG -A logdrop-1178 -j DROP +-A logdrop-1179 -m limit --limit 1/second -j LOG -A logdrop-1179 -j DROP +-A logdrop-118 -j TEE --gateway fc00::2 -A logdrop-118 -j DROP +-A logdrop-1180 -m limit --limit 1/second -j LOG -A logdrop-1180 -j DROP +-A logdrop-1181 -m limit --limit 1/second -j LOG -A logdrop-1181 -j DROP +-A logdrop-1182 -m limit --limit 1/second -j LOG -A logdrop-1182 -j DROP +-A logdrop-1183 -m limit --limit 1/second -j LOG -A logdrop-1183 -j DROP -A logdrop-1184 -m limit --limit 1/second -j LOG -A logdrop-1184 -j DROP -A logdrop-1185 -m limit --limit 1/second -j LOG -A logdrop-1185 -j DROP +-A logdrop-1186 -m limit --limit 1/second -j LOG -A logdrop-1186 -j DROP +-A logdrop-1187 -m limit --limit 1/second -j LOG +-A logdrop-1187 -j DROP +-A logdrop-1188 -m limit --limit 1/second -j LOG +-A logdrop-1188 -j DROP +-A logdrop-1189 -m limit --limit 1/second -j LOG +-A logdrop-1189 -j DROP +-A logdrop-119 -j TEE --gateway fc00::2 -A logdrop-119 -j DROP +-A logdrop-1190 -m limit --limit 1/second -j LOG +-A logdrop-1190 -j DROP +-A logdrop-1191 -m limit --limit 1/second -j LOG +-A logdrop-1191 -j DROP +-A logdrop-1192 -m limit --limit 1/second -j LOG +-A logdrop-1192 -j DROP +-A logdrop-1193 -m limit --limit 1/second -j LOG +-A logdrop-1193 -j DROP +-A logdrop-1194 -m limit --limit 1/second -j LOG +-A logdrop-1194 -j DROP +-A logdrop-1195 -m limit --limit 1/second -j LOG +-A logdrop-1195 -j DROP +-A logdrop-1196 -m limit --limit 1/second -j LOG +-A logdrop-1196 -j DROP +-A logdrop-1197 -m limit --limit 1/second -j LOG +-A logdrop-1197 -j DROP +-A logdrop-1198 -m limit --limit 1/second -j LOG +-A logdrop-1198 -j DROP +-A logdrop-1199 -m limit --limit 1/second -j LOG +-A logdrop-1199 -j DROP -A logdrop-12 -m limit --limit 1/second -j LOG -A logdrop-12 -j DROP +-A logdrop-120 -j TEE --gateway fc00::2 -A logdrop-120 -j DROP +-A logdrop-1200 -j TEE --gateway fc00::2 +-A logdrop-1200 -j DROP +-A logdrop-1201 -j TEE --gateway fc00::2 +-A logdrop-1201 -j DROP +-A logdrop-1202 -j TEE --gateway fc00::2 +-A logdrop-1202 -j DROP +-A logdrop-1203 -j TEE --gateway fc00::2 +-A logdrop-1203 -j DROP +-A logdrop-1204 -j TEE --gateway fc00::2 +-A logdrop-1204 -j DROP +-A logdrop-1205 -j TEE --gateway fc00::2 +-A logdrop-1205 -j DROP +-A logdrop-1206 -j TEE --gateway fc00::2 +-A logdrop-1206 -j DROP +-A logdrop-1207 -j TEE --gateway fc00::2 +-A logdrop-1207 -j DROP +-A logdrop-1208 -j TEE --gateway fc00::2 +-A logdrop-1208 -j DROP +-A logdrop-1209 -j TEE --gateway fc00::2 +-A logdrop-1209 -j DROP +-A logdrop-121 -j TEE --gateway fc00::2 -A logdrop-121 -j DROP +-A logdrop-1210 -j TEE --gateway fc00::2 +-A logdrop-1210 -j DROP +-A logdrop-1211 -j TEE --gateway fc00::2 +-A logdrop-1211 -j DROP +-A logdrop-1212 -j TEE --gateway fc00::2 +-A logdrop-1212 -j DROP +-A logdrop-1213 -j TEE --gateway fc00::2 +-A logdrop-1213 -j DROP +-A logdrop-1214 -j TEE --gateway fc00::2 +-A logdrop-1214 -j DROP +-A logdrop-1215 -j TEE --gateway fc00::2 +-A logdrop-1215 -j DROP +-A logdrop-1216 -j TEE --gateway fc00::2 +-A logdrop-1216 -j DROP +-A logdrop-1217 -j TEE --gateway fc00::2 +-A logdrop-1217 -j DROP +-A logdrop-1218 -j TEE --gateway fc00::2 +-A logdrop-1218 -j DROP +-A logdrop-1219 -j TEE --gateway fc00::2 +-A logdrop-1219 -j DROP +-A logdrop-122 -j TEE --gateway fc00::2 -A logdrop-122 -j DROP +-A logdrop-1220 -j TEE --gateway fc00::2 +-A logdrop-1220 -j DROP +-A logdrop-1221 -j TEE --gateway fc00::2 +-A logdrop-1221 -j DROP +-A logdrop-1222 -j TEE --gateway fc00::2 +-A logdrop-1222 -j DROP +-A logdrop-1223 -j TEE --gateway fc00::2 +-A logdrop-1223 -j DROP +-A logdrop-1224 -j TEE --gateway fc00::2 +-A logdrop-1224 -j DROP +-A logdrop-1225 -j TEE --gateway fc00::2 +-A logdrop-1225 -j DROP +-A logdrop-1226 -j TEE --gateway fc00::2 +-A logdrop-1226 -j DROP +-A logdrop-1227 -j TEE --gateway fc00::2 +-A logdrop-1227 -j DROP +-A logdrop-1228 -j TEE --gateway fc00::2 +-A logdrop-1228 -j DROP +-A logdrop-1229 -j TEE --gateway fc00::2 +-A logdrop-1229 -j DROP +-A logdrop-123 -j TEE --gateway fc00::2 -A logdrop-123 -j DROP +-A logdrop-1230 -j TEE --gateway fc00::2 +-A logdrop-1230 -j DROP +-A logdrop-1231 -j TEE --gateway fc00::2 +-A logdrop-1231 -j DROP +-A logdrop-1232 -j TEE --gateway fc00::2 +-A logdrop-1232 -j DROP +-A logdrop-1233 -j TEE --gateway fc00::2 +-A logdrop-1233 -j DROP +-A logdrop-1234 -j TEE --gateway fc00::2 +-A logdrop-1234 -j DROP +-A logdrop-1235 -j TEE --gateway fc00::2 +-A logdrop-1235 -j DROP +-A logdrop-1236 -j TEE --gateway fc00::2 +-A logdrop-1236 -j DROP +-A logdrop-1237 -j TEE --gateway fc00::2 +-A logdrop-1237 -j DROP +-A logdrop-1238 -j TEE --gateway fc00::2 +-A logdrop-1238 -j DROP +-A logdrop-1239 -j TEE --gateway fc00::2 +-A logdrop-1239 -j DROP +-A logdrop-124 -j TEE --gateway fc00::2 -A logdrop-124 -j DROP +-A logdrop-1240 -j TEE --gateway fc00::2 +-A logdrop-1240 -j DROP +-A logdrop-1241 -j TEE --gateway fc00::2 +-A logdrop-1241 -j DROP +-A logdrop-1242 -j TEE --gateway fc00::2 +-A logdrop-1242 -j DROP +-A logdrop-1243 -j TEE --gateway fc00::2 +-A logdrop-1243 -j DROP +-A logdrop-1244 -j TEE --gateway fc00::2 +-A logdrop-1244 -j DROP +-A logdrop-1245 -j TEE --gateway fc00::2 +-A logdrop-1245 -j DROP +-A logdrop-1246 -j TEE --gateway fc00::2 +-A logdrop-1246 -j DROP +-A logdrop-1247 -j TEE --gateway fc00::2 +-A logdrop-1247 -j DROP +-A logdrop-1248 -j TEE --gateway fc00::2 +-A logdrop-1248 -j DROP +-A logdrop-1249 -j TEE --gateway fc00::2 +-A logdrop-1249 -j DROP +-A logdrop-125 -j TEE --gateway fc00::2 -A logdrop-125 -j DROP +-A logdrop-1250 -j TEE --gateway fc00::2 +-A logdrop-1250 -j DROP +-A logdrop-1251 -j TEE --gateway fc00::2 +-A logdrop-1251 -j DROP +-A logdrop-1252 -j TEE --gateway fc00::2 +-A logdrop-1252 -j DROP +-A logdrop-1253 -j TEE --gateway fc00::2 +-A logdrop-1253 -j DROP +-A logdrop-1254 -j TEE --gateway fc00::2 +-A logdrop-1254 -j DROP +-A logdrop-1255 -j TEE --gateway fc00::2 +-A logdrop-1255 -j DROP +-A logdrop-1256 -j TEE --gateway fc00::2 +-A logdrop-1256 -j DROP +-A logdrop-1257 -j TEE --gateway fc00::2 +-A logdrop-1257 -j DROP +-A logdrop-1258 -j TEE --gateway fc00::2 +-A logdrop-1258 -j DROP +-A logdrop-1259 -j TEE --gateway fc00::2 +-A logdrop-1259 -j DROP +-A logdrop-126 -j TEE --gateway fc00::2 -A logdrop-126 -j DROP +-A logdrop-1260 -j TEE --gateway fc00::2 +-A logdrop-1260 -j DROP +-A logdrop-1261 -j TEE --gateway fc00::2 +-A logdrop-1261 -j DROP +-A logdrop-1262 -j TEE --gateway fc00::2 +-A logdrop-1262 -j DROP +-A logdrop-1263 -j TEE --gateway fc00::2 +-A logdrop-1263 -j DROP +-A logdrop-1264 -j TEE --gateway fc00::2 +-A logdrop-1264 -j DROP +-A logdrop-1265 -j TEE --gateway fc00::2 +-A logdrop-1265 -j DROP +-A logdrop-1266 -j TEE --gateway fc00::2 +-A logdrop-1266 -j DROP +-A logdrop-1267 -j TEE --gateway fc00::2 +-A logdrop-1267 -j DROP +-A logdrop-1268 -j TEE --gateway fc00::2 +-A logdrop-1268 -j DROP +-A logdrop-1269 -j TEE --gateway fc00::2 +-A logdrop-1269 -j DROP +-A logdrop-127 -j TEE --gateway fc00::2 -A logdrop-127 -j DROP +-A logdrop-1270 -j TEE --gateway fc00::2 +-A logdrop-1270 -j DROP +-A logdrop-1271 -j TEE --gateway fc00::2 +-A logdrop-1271 -j DROP +-A logdrop-1272 -j TEE --gateway fc00::2 +-A logdrop-1272 -j DROP +-A logdrop-1273 -j TEE --gateway fc00::2 +-A logdrop-1273 -j DROP +-A logdrop-1274 -j TEE --gateway fc00::2 +-A logdrop-1274 -j DROP +-A logdrop-1275 -j TEE --gateway fc00::2 +-A logdrop-1275 -j DROP +-A logdrop-1276 -j TEE --gateway fc00::2 +-A logdrop-1276 -j DROP +-A logdrop-1277 -j TEE --gateway fc00::2 +-A logdrop-1277 -j DROP +-A logdrop-1278 -j TEE --gateway fc00::2 +-A logdrop-1278 -j DROP +-A logdrop-1279 -j TEE --gateway fc00::2 +-A logdrop-1279 -j DROP +-A logdrop-128 -j TEE --gateway fc00::2 -A logdrop-128 -j DROP +-A logdrop-1280 -j TEE --gateway fc00::2 +-A logdrop-1280 -j DROP +-A logdrop-1281 -j TEE --gateway fc00::2 +-A logdrop-1281 -j DROP +-A logdrop-1282 -j TEE --gateway fc00::2 +-A logdrop-1282 -j DROP +-A logdrop-1283 -j TEE --gateway fc00::2 +-A logdrop-1283 -j DROP +-A logdrop-1284 -j TEE --gateway fc00::2 +-A logdrop-1284 -j DROP +-A logdrop-1285 -j TEE --gateway fc00::2 +-A logdrop-1285 -j DROP +-A logdrop-1286 -j TEE --gateway fc00::2 +-A logdrop-1286 -j DROP +-A logdrop-1287 -j TEE --gateway fc00::2 +-A logdrop-1287 -j DROP +-A logdrop-1288 -j TEE --gateway fc00::2 +-A logdrop-1288 -j DROP +-A logdrop-1289 -j TEE --gateway fc00::2 +-A logdrop-1289 -j DROP +-A logdrop-129 -j TEE --gateway fc00::2 -A logdrop-129 -j DROP +-A logdrop-1290 -j DROP +-A logdrop-1291 -j DROP +-A logdrop-1292 -j DROP +-A logdrop-1293 -j DROP +-A logdrop-1294 -j DROP +-A logdrop-1295 -j DROP +-A logdrop-1296 -j DROP +-A logdrop-1297 -j DROP +-A logdrop-1298 -j DROP +-A logdrop-1299 -j DROP -A logdrop-13 -m limit --limit 1/second -j LOG -A logdrop-13 -j DROP +-A logdrop-130 -j TEE --gateway fc00::2 -A logdrop-130 -j DROP +-A logdrop-1300 -j DROP +-A logdrop-1301 -j DROP +-A logdrop-1302 -j DROP +-A logdrop-1303 -j DROP +-A logdrop-1304 -j DROP +-A logdrop-1305 -j DROP +-A logdrop-1306 -j DROP +-A logdrop-1307 -j DROP +-A logdrop-1308 -j DROP +-A logdrop-1309 -j DROP +-A logdrop-131 -j TEE --gateway fc00::2 -A logdrop-131 -j DROP +-A logdrop-1310 -j DROP +-A logdrop-1311 -j DROP +-A logdrop-1312 -j DROP +-A logdrop-1313 -j DROP +-A logdrop-1314 -j DROP +-A logdrop-1315 -j DROP +-A logdrop-1316 -j DROP +-A logdrop-1317 -j DROP +-A logdrop-1318 -j DROP +-A logdrop-1319 -j DROP +-A logdrop-132 -j TEE --gateway fc00::2 -A logdrop-132 -j DROP +-A logdrop-1320 -j DROP +-A logdrop-1321 -j DROP +-A logdrop-1322 -j DROP +-A logdrop-1323 -j DROP +-A logdrop-1324 -j DROP +-A logdrop-1325 -j DROP +-A logdrop-1326 -j DROP +-A logdrop-1327 -j DROP +-A logdrop-1328 -j DROP +-A logdrop-1329 -j DROP +-A logdrop-133 -j TEE --gateway fc00::2 -A logdrop-133 -j DROP +-A logdrop-1330 -j DROP +-A logdrop-1331 -j DROP +-A logdrop-1332 -j DROP +-A logdrop-1333 -j DROP +-A logdrop-1334 -j DROP +-A logdrop-1335 -j DROP +-A logdrop-1336 -j DROP +-A logdrop-1337 -j DROP +-A logdrop-1338 -j DROP +-A logdrop-1339 -j DROP +-A logdrop-134 -j TEE --gateway fc00::2 -A logdrop-134 -j DROP +-A logdrop-1340 -j DROP +-A logdrop-1341 -j DROP +-A logdrop-1342 -j DROP +-A logdrop-1343 -j DROP +-A logdrop-1344 -j DROP +-A logdrop-1345 -j DROP +-A logdrop-1346 -j DROP +-A logdrop-1347 -j DROP +-A logdrop-1348 -j DROP +-A logdrop-1349 -j DROP +-A logdrop-135 -j TEE --gateway fc00::2 -A logdrop-135 -j DROP +-A logdrop-1350 -j DROP +-A logdrop-1351 -j DROP +-A logdrop-1352 -j DROP +-A logdrop-1353 -j DROP +-A logdrop-1354 -j DROP +-A logdrop-1355 -j DROP +-A logdrop-1356 -j DROP +-A logdrop-1357 -j DROP +-A logdrop-1358 -j DROP +-A logdrop-1359 -j DROP +-A logdrop-136 -j TEE --gateway fc00::2 -A logdrop-136 -j DROP +-A logdrop-1360 -j DROP +-A logdrop-1361 -j DROP +-A logdrop-1362 -j DROP +-A logdrop-1363 -j DROP +-A logdrop-1364 -j DROP +-A logdrop-1365 -j DROP +-A logdrop-1366 -j DROP +-A logdrop-1367 -j DROP +-A logdrop-1368 -j DROP +-A logdrop-1369 -j DROP +-A logdrop-137 -j TEE --gateway fc00::2 -A logdrop-137 -j DROP +-A logdrop-1370 -j DROP +-A logdrop-1371 -j DROP +-A logdrop-1372 -j DROP +-A logdrop-1373 -j DROP +-A logdrop-1374 -j DROP +-A logdrop-1375 -j DROP +-A logdrop-1376 -j DROP +-A logdrop-1377 -j DROP +-A logdrop-1378 -j DROP +-A logdrop-1379 -j DROP +-A logdrop-138 -j TEE --gateway fc00::2 -A logdrop-138 -j DROP +-A logdrop-1380 -m limit --limit 1/second -j LOG +-A logdrop-1380 -j DROP +-A logdrop-1381 -m limit --limit 1/second -j LOG +-A logdrop-1381 -j DROP +-A logdrop-1382 -m limit --limit 1/second -j LOG +-A logdrop-1382 -j DROP +-A logdrop-1383 -m limit --limit 1/second -j LOG +-A logdrop-1383 -j DROP +-A logdrop-1384 -m limit --limit 1/second -j LOG +-A logdrop-1384 -j DROP +-A logdrop-1385 -m limit --limit 1/second -j LOG +-A logdrop-1385 -j DROP +-A logdrop-1386 -m limit --limit 1/second -j LOG +-A logdrop-1386 -j DROP +-A logdrop-1387 -m limit --limit 1/second -j LOG +-A logdrop-1387 -j DROP +-A logdrop-1388 -m limit --limit 1/second -j LOG +-A logdrop-1388 -j DROP +-A logdrop-1389 -m limit --limit 1/second -j LOG +-A logdrop-1389 -j DROP +-A logdrop-139 -j TEE --gateway fc00::2 -A logdrop-139 -j DROP +-A logdrop-1390 -m limit --limit 1/second -j LOG +-A logdrop-1390 -j DROP +-A logdrop-1391 -m limit --limit 1/second -j LOG +-A logdrop-1391 -j DROP +-A logdrop-1392 -m limit --limit 1/second -j LOG +-A logdrop-1392 -j DROP +-A logdrop-1393 -m limit --limit 1/second -j LOG +-A logdrop-1393 -j DROP +-A logdrop-1394 -m limit --limit 1/second -j LOG +-A logdrop-1394 -j DROP +-A logdrop-1395 -m limit --limit 1/second -j LOG +-A logdrop-1395 -j DROP +-A logdrop-1396 -m limit --limit 1/second -j LOG +-A logdrop-1396 -j DROP +-A logdrop-1397 -m limit --limit 1/second -j LOG +-A logdrop-1397 -j DROP +-A logdrop-1398 -m limit --limit 1/second -j LOG +-A logdrop-1398 -j DROP +-A logdrop-1399 -m limit --limit 1/second -j LOG +-A logdrop-1399 -j DROP -A logdrop-14 -m limit --limit 1/second -j LOG -A logdrop-14 -j DROP +-A logdrop-140 -j TEE --gateway fc00::2 -A logdrop-140 -j DROP +-A logdrop-1400 -m limit --limit 1/second -j LOG +-A logdrop-1400 -j DROP +-A logdrop-1401 -m limit --limit 1/second -j LOG +-A logdrop-1401 -j DROP +-A logdrop-1402 -m limit --limit 1/second -j LOG +-A logdrop-1402 -j DROP +-A logdrop-1403 -m limit --limit 1/second -j LOG +-A logdrop-1403 -j DROP +-A logdrop-1404 -m limit --limit 1/second -j LOG +-A logdrop-1404 -j DROP +-A logdrop-1405 -m limit --limit 1/second -j LOG +-A logdrop-1405 -j DROP +-A logdrop-1406 -m limit --limit 1/second -j LOG +-A logdrop-1406 -j DROP +-A logdrop-1407 -m limit --limit 1/second -j LOG +-A logdrop-1407 -j DROP +-A logdrop-1408 -m limit --limit 1/second -j LOG +-A logdrop-1408 -j DROP +-A logdrop-1409 -m limit --limit 1/second -j LOG +-A logdrop-1409 -j DROP +-A logdrop-141 -j TEE --gateway fc00::2 -A logdrop-141 -j DROP +-A logdrop-1410 -m limit --limit 1/second -j LOG +-A logdrop-1410 -j DROP +-A logdrop-1411 -m limit --limit 1/second -j LOG +-A logdrop-1411 -j DROP +-A logdrop-1412 -m limit --limit 1/second -j LOG +-A logdrop-1412 -j DROP +-A logdrop-1413 -m limit --limit 1/second -j LOG +-A logdrop-1413 -j DROP +-A logdrop-1414 -m limit --limit 1/second -j LOG +-A logdrop-1414 -j DROP +-A logdrop-1415 -m limit --limit 1/second -j LOG +-A logdrop-1415 -j DROP +-A logdrop-1416 -m limit --limit 1/second -j LOG +-A logdrop-1416 -j DROP +-A logdrop-1417 -m limit --limit 1/second -j LOG +-A logdrop-1417 -j DROP +-A logdrop-1418 -m limit --limit 1/second -j LOG +-A logdrop-1418 -j DROP +-A logdrop-1419 -m limit --limit 1/second -j LOG +-A logdrop-1419 -j DROP +-A logdrop-142 -j TEE --gateway fc00::2 -A logdrop-142 -j DROP +-A logdrop-1420 -m limit --limit 1/second -j LOG +-A logdrop-1420 -j DROP +-A logdrop-1421 -m limit --limit 1/second -j LOG +-A logdrop-1421 -j DROP +-A logdrop-1422 -m limit --limit 1/second -j LOG +-A logdrop-1422 -j DROP +-A logdrop-1423 -m limit --limit 1/second -j LOG +-A logdrop-1423 -j DROP +-A logdrop-1424 -m limit --limit 1/second -j LOG +-A logdrop-1424 -j DROP +-A logdrop-1425 -m limit --limit 1/second -j LOG +-A logdrop-1425 -j DROP +-A logdrop-1426 -m limit --limit 1/second -j LOG +-A logdrop-1426 -j DROP +-A logdrop-1427 -m limit --limit 1/second -j LOG +-A logdrop-1427 -j DROP +-A logdrop-1428 -m limit --limit 1/second -j LOG +-A logdrop-1428 -j DROP +-A logdrop-1429 -m limit --limit 1/second -j LOG +-A logdrop-1429 -j DROP +-A logdrop-143 -j TEE --gateway fc00::2 -A logdrop-143 -j DROP +-A logdrop-1430 -m limit --limit 1/second -j LOG +-A logdrop-1430 -j DROP +-A logdrop-1431 -m limit --limit 1/second -j LOG +-A logdrop-1431 -j DROP +-A logdrop-1432 -m limit --limit 1/second -j LOG +-A logdrop-1432 -j DROP +-A logdrop-1433 -m limit --limit 1/second -j LOG +-A logdrop-1433 -j DROP +-A logdrop-1434 -m limit --limit 1/second -j LOG +-A logdrop-1434 -j DROP +-A logdrop-1435 -m limit --limit 1/second -j LOG +-A logdrop-1435 -j DROP +-A logdrop-1436 -m limit --limit 1/second -j LOG +-A logdrop-1436 -j DROP +-A logdrop-1437 -m limit --limit 1/second -j LOG +-A logdrop-1437 -j DROP +-A logdrop-1438 -m limit --limit 1/second -j LOG +-A logdrop-1438 -j DROP +-A logdrop-1439 -m limit --limit 1/second -j LOG +-A logdrop-1439 -j DROP +-A logdrop-144 -j TEE --gateway fc00::2 -A logdrop-144 -j DROP +-A logdrop-1440 -m limit --limit 1/second -j LOG +-A logdrop-1440 -j DROP +-A logdrop-1441 -m limit --limit 1/second -j LOG +-A logdrop-1441 -j DROP +-A logdrop-1442 -m limit --limit 1/second -j LOG +-A logdrop-1442 -j DROP +-A logdrop-1443 -m limit --limit 1/second -j LOG +-A logdrop-1443 -j DROP +-A logdrop-1444 -m limit --limit 1/second -j LOG +-A logdrop-1444 -j DROP +-A logdrop-1445 -m limit --limit 1/second -j LOG +-A logdrop-1445 -j DROP +-A logdrop-1446 -m limit --limit 1/second -j LOG +-A logdrop-1446 -j DROP +-A logdrop-1447 -m limit --limit 1/second -j LOG +-A logdrop-1447 -j DROP +-A logdrop-1448 -m limit --limit 1/second -j LOG +-A logdrop-1448 -j DROP +-A logdrop-1449 -m limit --limit 1/second -j LOG +-A logdrop-1449 -j DROP +-A logdrop-145 -j TEE --gateway fc00::2 -A logdrop-145 -j DROP +-A logdrop-1450 -m limit --limit 1/second -j LOG +-A logdrop-1450 -j DROP +-A logdrop-1451 -m limit --limit 1/second -j LOG +-A logdrop-1451 -j DROP +-A logdrop-1452 -m limit --limit 1/second -j LOG +-A logdrop-1452 -j DROP +-A logdrop-1453 -m limit --limit 1/second -j LOG +-A logdrop-1453 -j DROP +-A logdrop-1454 -m limit --limit 1/second -j LOG +-A logdrop-1454 -j DROP +-A logdrop-1455 -m limit --limit 1/second -j LOG +-A logdrop-1455 -j DROP +-A logdrop-1456 -m limit --limit 1/second -j LOG +-A logdrop-1456 -j DROP +-A logdrop-1457 -m limit --limit 1/second -j LOG +-A logdrop-1457 -j DROP +-A logdrop-1458 -m limit --limit 1/second -j LOG +-A logdrop-1458 -j DROP +-A logdrop-1459 -m limit --limit 1/second -j LOG +-A logdrop-1459 -j DROP +-A logdrop-146 -j TEE --gateway fc00::2 -A logdrop-146 -j DROP +-A logdrop-1460 -m limit --limit 1/second -j LOG +-A logdrop-1460 -j DROP +-A logdrop-1461 -m limit --limit 1/second -j LOG +-A logdrop-1461 -j DROP +-A logdrop-1462 -m limit --limit 1/second -j LOG +-A logdrop-1462 -j DROP +-A logdrop-1463 -m limit --limit 1/second -j LOG +-A logdrop-1463 -j DROP +-A logdrop-1464 -m limit --limit 1/second -j LOG +-A logdrop-1464 -j DROP +-A logdrop-1465 -m limit --limit 1/second -j LOG +-A logdrop-1465 -j DROP +-A logdrop-1466 -m limit --limit 1/second -j LOG +-A logdrop-1466 -j DROP +-A logdrop-1467 -m limit --limit 1/second -j LOG +-A logdrop-1467 -j DROP +-A logdrop-1468 -m limit --limit 1/second -j LOG +-A logdrop-1468 -j DROP +-A logdrop-1469 -m limit --limit 1/second -j LOG +-A logdrop-1469 -j DROP +-A logdrop-147 -j TEE --gateway fc00::2 -A logdrop-147 -j DROP +-A logdrop-1470 -j TEE --gateway fc00::2 +-A logdrop-1470 -j DROP +-A logdrop-1471 -j TEE --gateway fc00::2 +-A logdrop-1471 -j DROP +-A logdrop-1472 -j TEE --gateway fc00::2 +-A logdrop-1472 -j DROP +-A logdrop-1473 -j TEE --gateway fc00::2 +-A logdrop-1473 -j DROP +-A logdrop-1474 -j TEE --gateway fc00::2 +-A logdrop-1474 -j DROP +-A logdrop-1475 -j TEE --gateway fc00::2 +-A logdrop-1475 -j DROP +-A logdrop-1476 -j TEE --gateway fc00::2 +-A logdrop-1476 -j DROP +-A logdrop-1477 -j TEE --gateway fc00::2 +-A logdrop-1477 -j DROP +-A logdrop-1478 -j TEE --gateway fc00::2 +-A logdrop-1478 -j DROP +-A logdrop-1479 -j TEE --gateway fc00::2 +-A logdrop-1479 -j DROP +-A logdrop-148 -j TEE --gateway fc00::2 -A logdrop-148 -j DROP +-A logdrop-1480 -j TEE --gateway fc00::2 +-A logdrop-1480 -j DROP +-A logdrop-1481 -j TEE --gateway fc00::2 +-A logdrop-1481 -j DROP +-A logdrop-1482 -j TEE --gateway fc00::2 +-A logdrop-1482 -j DROP +-A logdrop-1483 -j TEE --gateway fc00::2 +-A logdrop-1483 -j DROP +-A logdrop-1484 -j TEE --gateway fc00::2 +-A logdrop-1484 -j DROP +-A logdrop-1485 -j TEE --gateway fc00::2 +-A logdrop-1485 -j DROP +-A logdrop-1486 -j TEE --gateway fc00::2 +-A logdrop-1486 -j DROP +-A logdrop-1487 -j TEE --gateway fc00::2 +-A logdrop-1487 -j DROP +-A logdrop-1488 -j TEE --gateway fc00::2 +-A logdrop-1488 -j DROP +-A logdrop-1489 -j TEE --gateway fc00::2 +-A logdrop-1489 -j DROP +-A logdrop-149 -j TEE --gateway fc00::2 -A logdrop-149 -j DROP +-A logdrop-1490 -j TEE --gateway fc00::2 +-A logdrop-1490 -j DROP +-A logdrop-1491 -j TEE --gateway fc00::2 +-A logdrop-1491 -j DROP +-A logdrop-1492 -j TEE --gateway fc00::2 +-A logdrop-1492 -j DROP +-A logdrop-1493 -j TEE --gateway fc00::2 +-A logdrop-1493 -j DROP +-A logdrop-1494 -j TEE --gateway fc00::2 +-A logdrop-1494 -j DROP +-A logdrop-1495 -j TEE --gateway fc00::2 +-A logdrop-1495 -j DROP +-A logdrop-1496 -j TEE --gateway fc00::2 +-A logdrop-1496 -j DROP +-A logdrop-1497 -j TEE --gateway fc00::2 +-A logdrop-1497 -j DROP +-A logdrop-1498 -j TEE --gateway fc00::2 +-A logdrop-1498 -j DROP +-A logdrop-1499 -j TEE --gateway fc00::2 +-A logdrop-1499 -j DROP -A logdrop-15 -m limit --limit 1/second -j LOG -A logdrop-15 -j DROP +-A logdrop-150 -j TEE --gateway fc00::2 -A logdrop-150 -j DROP +-A logdrop-1500 -j TEE --gateway fc00::2 +-A logdrop-1500 -j DROP +-A logdrop-1501 -j TEE --gateway fc00::2 +-A logdrop-1501 -j DROP +-A logdrop-1502 -j TEE --gateway fc00::2 +-A logdrop-1502 -j DROP +-A logdrop-1503 -j TEE --gateway fc00::2 +-A logdrop-1503 -j DROP +-A logdrop-1504 -j TEE --gateway fc00::2 +-A logdrop-1504 -j DROP +-A logdrop-1505 -j TEE --gateway fc00::2 +-A logdrop-1505 -j DROP +-A logdrop-1506 -j TEE --gateway fc00::2 +-A logdrop-1506 -j DROP +-A logdrop-1507 -j TEE --gateway fc00::2 +-A logdrop-1507 -j DROP +-A logdrop-1508 -j TEE --gateway fc00::2 +-A logdrop-1508 -j DROP +-A logdrop-1509 -j TEE --gateway fc00::2 +-A logdrop-1509 -j DROP +-A logdrop-151 -j TEE --gateway fc00::2 -A logdrop-151 -j DROP --A logdrop-152 -m limit --limit 1/second -j LOG +-A logdrop-1510 -j TEE --gateway fc00::2 +-A logdrop-1510 -j DROP +-A logdrop-1511 -j TEE --gateway fc00::2 +-A logdrop-1511 -j DROP +-A logdrop-1512 -j TEE --gateway fc00::2 +-A logdrop-1512 -j DROP +-A logdrop-1513 -j TEE --gateway fc00::2 +-A logdrop-1513 -j DROP +-A logdrop-1514 -j TEE --gateway fc00::2 +-A logdrop-1514 -j DROP +-A logdrop-1515 -j TEE --gateway fc00::2 +-A logdrop-1515 -j DROP +-A logdrop-1516 -j TEE --gateway fc00::2 +-A logdrop-1516 -j DROP +-A logdrop-1517 -j TEE --gateway fc00::2 +-A logdrop-1517 -j DROP +-A logdrop-1518 -j TEE --gateway fc00::2 +-A logdrop-1518 -j DROP +-A logdrop-1519 -j TEE --gateway fc00::2 +-A logdrop-1519 -j DROP +-A logdrop-152 -j TEE --gateway fc00::2 -A logdrop-152 -j DROP --A logdrop-153 -m limit --limit 1/second -j LOG +-A logdrop-1520 -j TEE --gateway fc00::2 +-A logdrop-1520 -j DROP +-A logdrop-1521 -j TEE --gateway fc00::2 +-A logdrop-1521 -j DROP +-A logdrop-1522 -j TEE --gateway fc00::2 +-A logdrop-1522 -j DROP +-A logdrop-1523 -j TEE --gateway fc00::2 +-A logdrop-1523 -j DROP +-A logdrop-1524 -j TEE --gateway fc00::2 +-A logdrop-1524 -j DROP +-A logdrop-1525 -j TEE --gateway fc00::2 +-A logdrop-1525 -j DROP +-A logdrop-1526 -j TEE --gateway fc00::2 +-A logdrop-1526 -j DROP +-A logdrop-1527 -j TEE --gateway fc00::2 +-A logdrop-1527 -j DROP +-A logdrop-1528 -j TEE --gateway fc00::2 +-A logdrop-1528 -j DROP +-A logdrop-1529 -j TEE --gateway fc00::2 +-A logdrop-1529 -j DROP +-A logdrop-153 -j TEE --gateway fc00::2 -A logdrop-153 -j DROP --A logdrop-154 -m limit --limit 1/second -j LOG +-A logdrop-1530 -j TEE --gateway fc00::2 +-A logdrop-1530 -j DROP +-A logdrop-1531 -j TEE --gateway fc00::2 +-A logdrop-1531 -j DROP +-A logdrop-1532 -j TEE --gateway fc00::2 +-A logdrop-1532 -j DROP +-A logdrop-1533 -j TEE --gateway fc00::2 +-A logdrop-1533 -j DROP +-A logdrop-1534 -j TEE --gateway fc00::2 +-A logdrop-1534 -j DROP +-A logdrop-1535 -j TEE --gateway fc00::2 +-A logdrop-1535 -j DROP +-A logdrop-1536 -j TEE --gateway fc00::2 +-A logdrop-1536 -j DROP +-A logdrop-1537 -j TEE --gateway fc00::2 +-A logdrop-1537 -j DROP +-A logdrop-1538 -j TEE --gateway fc00::2 +-A logdrop-1538 -j DROP +-A logdrop-1539 -j TEE --gateway fc00::2 +-A logdrop-1539 -j DROP +-A logdrop-154 -j TEE --gateway fc00::2 -A logdrop-154 -j DROP --A logdrop-155 -m limit --limit 1/second -j LOG +-A logdrop-1540 -j TEE --gateway fc00::2 +-A logdrop-1540 -j DROP +-A logdrop-1541 -j TEE --gateway fc00::2 +-A logdrop-1541 -j DROP +-A logdrop-1542 -j TEE --gateway fc00::2 +-A logdrop-1542 -j DROP +-A logdrop-1543 -j TEE --gateway fc00::2 +-A logdrop-1543 -j DROP +-A logdrop-1544 -j TEE --gateway fc00::2 +-A logdrop-1544 -j DROP +-A logdrop-1545 -j TEE --gateway fc00::2 +-A logdrop-1545 -j DROP +-A logdrop-1546 -j TEE --gateway fc00::2 +-A logdrop-1546 -j DROP +-A logdrop-1547 -j TEE --gateway fc00::2 +-A logdrop-1547 -j DROP +-A logdrop-1548 -j TEE --gateway fc00::2 +-A logdrop-1548 -j DROP +-A logdrop-1549 -j TEE --gateway fc00::2 +-A logdrop-1549 -j DROP +-A logdrop-155 -j TEE --gateway fc00::2 -A logdrop-155 -j DROP --A logdrop-156 -m limit --limit 1/second -j LOG +-A logdrop-1550 -j TEE --gateway fc00::2 +-A logdrop-1550 -j DROP +-A logdrop-1551 -j TEE --gateway fc00::2 +-A logdrop-1551 -j DROP +-A logdrop-1552 -j TEE --gateway fc00::2 +-A logdrop-1552 -j DROP +-A logdrop-1553 -j TEE --gateway fc00::2 +-A logdrop-1553 -j DROP +-A logdrop-1554 -j TEE --gateway fc00::2 +-A logdrop-1554 -j DROP +-A logdrop-1555 -j TEE --gateway fc00::2 +-A logdrop-1555 -j DROP +-A logdrop-1556 -j TEE --gateway fc00::2 +-A logdrop-1556 -j DROP +-A logdrop-1557 -j TEE --gateway fc00::2 +-A logdrop-1557 -j DROP +-A logdrop-1558 -j TEE --gateway fc00::2 +-A logdrop-1558 -j DROP +-A logdrop-1559 -j TEE --gateway fc00::2 +-A logdrop-1559 -j DROP +-A logdrop-156 -j TEE --gateway fc00::2 -A logdrop-156 -j DROP --A logdrop-157 -m limit --limit 1/second -j LOG +-A logdrop-1560 -j DROP +-A logdrop-1561 -j DROP +-A logdrop-1562 -j DROP +-A logdrop-1563 -j DROP +-A logdrop-1564 -j DROP +-A logdrop-1565 -j DROP +-A logdrop-1566 -j DROP +-A logdrop-1567 -j DROP +-A logdrop-1568 -j DROP +-A logdrop-1569 -j DROP +-A logdrop-157 -j TEE --gateway fc00::2 -A logdrop-157 -j DROP --A logdrop-158 -m limit --limit 1/second -j LOG +-A logdrop-1570 -j DROP +-A logdrop-1571 -j DROP +-A logdrop-1572 -j DROP +-A logdrop-1573 -j DROP +-A logdrop-1574 -j DROP +-A logdrop-1575 -j DROP +-A logdrop-1576 -j DROP +-A logdrop-1577 -j DROP +-A logdrop-1578 -j DROP +-A logdrop-1579 -j DROP +-A logdrop-158 -j TEE --gateway fc00::2 -A logdrop-158 -j DROP --A logdrop-159 -m limit --limit 1/second -j LOG +-A logdrop-1580 -j DROP +-A logdrop-1581 -j DROP +-A logdrop-1582 -j DROP +-A logdrop-1583 -j DROP +-A logdrop-1584 -j DROP +-A logdrop-1585 -j DROP +-A logdrop-1586 -j DROP +-A logdrop-1587 -j DROP +-A logdrop-1588 -j DROP +-A logdrop-1589 -j DROP +-A logdrop-159 -j TEE --gateway fc00::2 -A logdrop-159 -j DROP +-A logdrop-1590 -j DROP +-A logdrop-1591 -j DROP +-A logdrop-1592 -j DROP +-A logdrop-1593 -j DROP +-A logdrop-1594 -j DROP +-A logdrop-1595 -j DROP +-A logdrop-1596 -j DROP +-A logdrop-1597 -j DROP +-A logdrop-1598 -j DROP +-A logdrop-1599 -j DROP -A logdrop-16 -m limit --limit 1/second -j LOG -A logdrop-16 -j DROP --A logdrop-160 -m limit --limit 1/second -j LOG +-A logdrop-160 -j TEE --gateway fc00::2 -A logdrop-160 -j DROP --A logdrop-161 -m limit --limit 1/second -j LOG +-A logdrop-1600 -j DROP +-A logdrop-1601 -j DROP +-A logdrop-1602 -j DROP +-A logdrop-1603 -j DROP +-A logdrop-1604 -j DROP +-A logdrop-1605 -j DROP +-A logdrop-1606 -j DROP +-A logdrop-1607 -j DROP +-A logdrop-1608 -j DROP +-A logdrop-1609 -j DROP +-A logdrop-161 -j TEE --gateway fc00::2 -A logdrop-161 -j DROP --A logdrop-162 -m limit --limit 1/second -j LOG +-A logdrop-1610 -j DROP +-A logdrop-1611 -j DROP +-A logdrop-1612 -j DROP +-A logdrop-1613 -j DROP +-A logdrop-1614 -j DROP +-A logdrop-1615 -j DROP +-A logdrop-1616 -j DROP +-A logdrop-1617 -j DROP +-A logdrop-1618 -j DROP +-A logdrop-1619 -j DROP +-A logdrop-162 -j TEE --gateway fc00::2 -A logdrop-162 -j DROP --A logdrop-163 -m limit --limit 1/second -j LOG +-A logdrop-1620 -j DROP +-A logdrop-1621 -j DROP +-A logdrop-1622 -j DROP +-A logdrop-1623 -j DROP +-A logdrop-1624 -j DROP +-A logdrop-1625 -j DROP +-A logdrop-1626 -j DROP +-A logdrop-1627 -j DROP +-A logdrop-1628 -j DROP +-A logdrop-1629 -j DROP +-A logdrop-163 -j TEE --gateway fc00::2 -A logdrop-163 -j DROP --A logdrop-164 -m limit --limit 1/second -j LOG +-A logdrop-1630 -j DROP +-A logdrop-1631 -j DROP +-A logdrop-1632 -j DROP +-A logdrop-1633 -j DROP +-A logdrop-1634 -j DROP +-A logdrop-1635 -j DROP +-A logdrop-1636 -j DROP +-A logdrop-1637 -j DROP +-A logdrop-1638 -j DROP +-A logdrop-1639 -j DROP +-A logdrop-164 -j TEE --gateway fc00::2 -A logdrop-164 -j DROP --A logdrop-165 -m limit --limit 1/second -j LOG +-A logdrop-1640 -j DROP +-A logdrop-1641 -j DROP +-A logdrop-1642 -j DROP +-A logdrop-1643 -j DROP +-A logdrop-1644 -j DROP +-A logdrop-1645 -j DROP +-A logdrop-1646 -j DROP +-A logdrop-1647 -j DROP +-A logdrop-1648 -j DROP +-A logdrop-1649 -j DROP +-A logdrop-165 -j TEE --gateway fc00::2 -A logdrop-165 -j DROP --A logdrop-166 -m limit --limit 1/second -j LOG +-A logdrop-1650 -m limit --limit 1/second -j LOG +-A logdrop-1650 -j DROP +-A logdrop-1651 -m limit --limit 1/second -j LOG +-A logdrop-1651 -j DROP +-A logdrop-1652 -m limit --limit 1/second -j LOG +-A logdrop-1652 -j DROP +-A logdrop-1653 -m limit --limit 1/second -j LOG +-A logdrop-1653 -j DROP +-A logdrop-1654 -m limit --limit 1/second -j LOG +-A logdrop-1654 -j DROP +-A logdrop-1655 -m limit --limit 1/second -j LOG +-A logdrop-1655 -j DROP +-A logdrop-1656 -m limit --limit 1/second -j LOG +-A logdrop-1656 -j DROP +-A logdrop-1657 -m limit --limit 1/second -j LOG +-A logdrop-1657 -j DROP +-A logdrop-1658 -m limit --limit 1/second -j LOG +-A logdrop-1658 -j DROP +-A logdrop-1659 -m limit --limit 1/second -j LOG +-A logdrop-1659 -j DROP +-A logdrop-166 -j TEE --gateway fc00::2 -A logdrop-166 -j DROP --A logdrop-167 -m limit --limit 1/second -j LOG +-A logdrop-1660 -m limit --limit 1/second -j LOG +-A logdrop-1660 -j DROP +-A logdrop-1661 -m limit --limit 1/second -j LOG +-A logdrop-1661 -j DROP +-A logdrop-1662 -m limit --limit 1/second -j LOG +-A logdrop-1662 -j DROP +-A logdrop-1663 -m limit --limit 1/second -j LOG +-A logdrop-1663 -j DROP +-A logdrop-1664 -m limit --limit 1/second -j LOG +-A logdrop-1664 -j DROP +-A logdrop-1665 -m limit --limit 1/second -j LOG +-A logdrop-1665 -j DROP +-A logdrop-1666 -m limit --limit 1/second -j LOG +-A logdrop-1666 -j DROP +-A logdrop-1667 -m limit --limit 1/second -j LOG +-A logdrop-1667 -j DROP +-A logdrop-1668 -m limit --limit 1/second -j LOG +-A logdrop-1668 -j DROP +-A logdrop-1669 -m limit --limit 1/second -j LOG +-A logdrop-1669 -j DROP +-A logdrop-167 -j TEE --gateway fc00::2 -A logdrop-167 -j DROP --A logdrop-168 -m limit --limit 1/second -j LOG +-A logdrop-1670 -m limit --limit 1/second -j LOG +-A logdrop-1670 -j DROP +-A logdrop-1671 -m limit --limit 1/second -j LOG +-A logdrop-1671 -j DROP +-A logdrop-1672 -m limit --limit 1/second -j LOG +-A logdrop-1672 -j DROP +-A logdrop-1673 -m limit --limit 1/second -j LOG +-A logdrop-1673 -j DROP +-A logdrop-1674 -m limit --limit 1/second -j LOG +-A logdrop-1674 -j DROP +-A logdrop-1675 -m limit --limit 1/second -j LOG +-A logdrop-1675 -j DROP +-A logdrop-1676 -m limit --limit 1/second -j LOG +-A logdrop-1676 -j DROP +-A logdrop-1677 -m limit --limit 1/second -j LOG +-A logdrop-1677 -j DROP +-A logdrop-1678 -m limit --limit 1/second -j LOG +-A logdrop-1678 -j DROP +-A logdrop-1679 -m limit --limit 1/second -j LOG +-A logdrop-1679 -j DROP +-A logdrop-168 -j TEE --gateway fc00::2 -A logdrop-168 -j DROP --A logdrop-169 -m limit --limit 1/second -j LOG +-A logdrop-1680 -m limit --limit 1/second -j LOG +-A logdrop-1680 -j DROP +-A logdrop-1681 -m limit --limit 1/second -j LOG +-A logdrop-1681 -j DROP +-A logdrop-1682 -m limit --limit 1/second -j LOG +-A logdrop-1682 -j DROP +-A logdrop-1683 -m limit --limit 1/second -j LOG +-A logdrop-1683 -j DROP +-A logdrop-1684 -m limit --limit 1/second -j LOG +-A logdrop-1684 -j DROP +-A logdrop-1685 -m limit --limit 1/second -j LOG +-A logdrop-1685 -j DROP +-A logdrop-1686 -m limit --limit 1/second -j LOG +-A logdrop-1686 -j DROP +-A logdrop-1687 -m limit --limit 1/second -j LOG +-A logdrop-1687 -j DROP +-A logdrop-1688 -m limit --limit 1/second -j LOG +-A logdrop-1688 -j DROP +-A logdrop-1689 -m limit --limit 1/second -j LOG +-A logdrop-1689 -j DROP +-A logdrop-169 -j TEE --gateway fc00::2 -A logdrop-169 -j DROP +-A logdrop-1690 -m limit --limit 1/second -j LOG +-A logdrop-1690 -j DROP +-A logdrop-1691 -m limit --limit 1/second -j LOG +-A logdrop-1691 -j DROP +-A logdrop-1692 -m limit --limit 1/second -j LOG +-A logdrop-1692 -j DROP +-A logdrop-1693 -m limit --limit 1/second -j LOG +-A logdrop-1693 -j DROP +-A logdrop-1694 -m limit --limit 1/second -j LOG +-A logdrop-1694 -j DROP +-A logdrop-1695 -m limit --limit 1/second -j LOG +-A logdrop-1695 -j DROP +-A logdrop-1696 -m limit --limit 1/second -j LOG +-A logdrop-1696 -j DROP +-A logdrop-1697 -m limit --limit 1/second -j LOG +-A logdrop-1697 -j DROP +-A logdrop-1698 -m limit --limit 1/second -j LOG +-A logdrop-1698 -j DROP +-A logdrop-1699 -m limit --limit 1/second -j LOG +-A logdrop-1699 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG -A logdrop-17 -j DROP --A logdrop-170 -m limit --limit 1/second -j LOG +-A logdrop-170 -j TEE --gateway fc00::2 -A logdrop-170 -j DROP --A logdrop-171 -m limit --limit 1/second -j LOG +-A logdrop-1700 -m limit --limit 1/second -j LOG +-A logdrop-1700 -j DROP +-A logdrop-1701 -m limit --limit 1/second -j LOG +-A logdrop-1701 -j DROP +-A logdrop-1702 -m limit --limit 1/second -j LOG +-A logdrop-1702 -j DROP +-A logdrop-1703 -m limit --limit 1/second -j LOG +-A logdrop-1703 -j DROP +-A logdrop-1704 -m limit --limit 1/second -j LOG +-A logdrop-1704 -j DROP +-A logdrop-1705 -m limit --limit 1/second -j LOG +-A logdrop-1705 -j DROP +-A logdrop-1706 -m limit --limit 1/second -j LOG +-A logdrop-1706 -j DROP +-A logdrop-1707 -m limit --limit 1/second -j LOG +-A logdrop-1707 -j DROP +-A logdrop-1708 -m limit --limit 1/second -j LOG +-A logdrop-1708 -j DROP +-A logdrop-1709 -m limit --limit 1/second -j LOG +-A logdrop-1709 -j DROP +-A logdrop-171 -j TEE --gateway fc00::2 -A logdrop-171 -j DROP --A logdrop-172 -m limit --limit 1/second -j LOG +-A logdrop-1710 -m limit --limit 1/second -j LOG +-A logdrop-1710 -j DROP +-A logdrop-1711 -m limit --limit 1/second -j LOG +-A logdrop-1711 -j DROP +-A logdrop-1712 -m limit --limit 1/second -j LOG +-A logdrop-1712 -j DROP +-A logdrop-1713 -m limit --limit 1/second -j LOG +-A logdrop-1713 -j DROP +-A logdrop-1714 -m limit --limit 1/second -j LOG +-A logdrop-1714 -j DROP +-A logdrop-1715 -m limit --limit 1/second -j LOG +-A logdrop-1715 -j DROP +-A logdrop-1716 -m limit --limit 1/second -j LOG +-A logdrop-1716 -j DROP +-A logdrop-1717 -m limit --limit 1/second -j LOG +-A logdrop-1717 -j DROP +-A logdrop-1718 -m limit --limit 1/second -j LOG +-A logdrop-1718 -j DROP +-A logdrop-1719 -m limit --limit 1/second -j LOG +-A logdrop-1719 -j DROP +-A logdrop-172 -j TEE --gateway fc00::2 -A logdrop-172 -j DROP --A logdrop-173 -m limit --limit 1/second -j LOG +-A logdrop-1720 -m limit --limit 1/second -j LOG +-A logdrop-1720 -j DROP +-A logdrop-1721 -m limit --limit 1/second -j LOG +-A logdrop-1721 -j DROP +-A logdrop-1722 -m limit --limit 1/second -j LOG +-A logdrop-1722 -j DROP +-A logdrop-1723 -m limit --limit 1/second -j LOG +-A logdrop-1723 -j DROP +-A logdrop-1724 -m limit --limit 1/second -j LOG +-A logdrop-1724 -j DROP +-A logdrop-1725 -m limit --limit 1/second -j LOG +-A logdrop-1725 -j DROP +-A logdrop-1726 -m limit --limit 1/second -j LOG +-A logdrop-1726 -j DROP +-A logdrop-1727 -m limit --limit 1/second -j LOG +-A logdrop-1727 -j DROP +-A logdrop-1728 -m limit --limit 1/second -j LOG +-A logdrop-1728 -j DROP +-A logdrop-1729 -m limit --limit 1/second -j LOG +-A logdrop-1729 -j DROP +-A logdrop-173 -j TEE --gateway fc00::2 -A logdrop-173 -j DROP --A logdrop-174 -m limit --limit 1/second -j LOG +-A logdrop-1730 -m limit --limit 1/second -j LOG +-A logdrop-1730 -j DROP +-A logdrop-1731 -m limit --limit 1/second -j LOG +-A logdrop-1731 -j DROP +-A logdrop-1732 -m limit --limit 1/second -j LOG +-A logdrop-1732 -j DROP +-A logdrop-1733 -m limit --limit 1/second -j LOG +-A logdrop-1733 -j DROP +-A logdrop-1734 -m limit --limit 1/second -j LOG +-A logdrop-1734 -j DROP +-A logdrop-1735 -m limit --limit 1/second -j LOG +-A logdrop-1735 -j DROP +-A logdrop-1736 -m limit --limit 1/second -j LOG +-A logdrop-1736 -j DROP +-A logdrop-1737 -m limit --limit 1/second -j LOG +-A logdrop-1737 -j DROP +-A logdrop-1738 -m limit --limit 1/second -j LOG +-A logdrop-1738 -j DROP +-A logdrop-1739 -m limit --limit 1/second -j LOG +-A logdrop-1739 -j DROP +-A logdrop-174 -j TEE --gateway fc00::2 -A logdrop-174 -j DROP --A logdrop-175 -m limit --limit 1/second -j LOG +-A logdrop-1740 -m limit --limit 1/second -j LOG +-A logdrop-1740 -j DROP +-A logdrop-1741 -m limit --limit 1/second -j LOG +-A logdrop-1741 -j DROP +-A logdrop-1742 -m limit --limit 1/second -j LOG +-A logdrop-1742 -j DROP +-A logdrop-1743 -m limit --limit 1/second -j LOG +-A logdrop-1743 -j DROP +-A logdrop-1744 -m limit --limit 1/second -j LOG +-A logdrop-1744 -j DROP +-A logdrop-1745 -m limit --limit 1/second -j LOG +-A logdrop-1745 -j DROP +-A logdrop-1746 -m limit --limit 1/second -j LOG +-A logdrop-1746 -j DROP +-A logdrop-1747 -m limit --limit 1/second -j LOG +-A logdrop-1747 -j DROP +-A logdrop-1748 -m limit --limit 1/second -j LOG +-A logdrop-1748 -j DROP +-A logdrop-1749 -m limit --limit 1/second -j LOG +-A logdrop-1749 -j DROP +-A logdrop-175 -j TEE --gateway fc00::2 -A logdrop-175 -j DROP --A logdrop-176 -m limit --limit 1/second -j LOG +-A logdrop-1750 -j TEE --gateway fc00::2 +-A logdrop-1750 -j DROP +-A logdrop-1751 -j TEE --gateway fc00::2 +-A logdrop-1751 -j DROP +-A logdrop-1752 -j TEE --gateway fc00::2 +-A logdrop-1752 -j DROP +-A logdrop-1753 -j TEE --gateway fc00::2 +-A logdrop-1753 -j DROP +-A logdrop-1754 -j TEE --gateway fc00::2 +-A logdrop-1754 -j DROP +-A logdrop-1755 -j TEE --gateway fc00::2 +-A logdrop-1755 -j DROP +-A logdrop-1756 -j TEE --gateway fc00::2 +-A logdrop-1756 -j DROP +-A logdrop-1757 -j TEE --gateway fc00::2 +-A logdrop-1757 -j DROP +-A logdrop-1758 -j TEE --gateway fc00::2 +-A logdrop-1758 -j DROP +-A logdrop-1759 -j TEE --gateway fc00::2 +-A logdrop-1759 -j DROP +-A logdrop-176 -j TEE --gateway fc00::2 -A logdrop-176 -j DROP --A logdrop-177 -m limit --limit 1/second -j LOG +-A logdrop-1760 -j TEE --gateway fc00::2 +-A logdrop-1760 -j DROP +-A logdrop-1761 -j TEE --gateway fc00::2 +-A logdrop-1761 -j DROP +-A logdrop-1762 -j TEE --gateway fc00::2 +-A logdrop-1762 -j DROP +-A logdrop-1763 -j TEE --gateway fc00::2 +-A logdrop-1763 -j DROP +-A logdrop-1764 -j TEE --gateway fc00::2 +-A logdrop-1764 -j DROP +-A logdrop-1765 -j TEE --gateway fc00::2 +-A logdrop-1765 -j DROP +-A logdrop-1766 -j TEE --gateway fc00::2 +-A logdrop-1766 -j DROP +-A logdrop-1767 -j TEE --gateway fc00::2 +-A logdrop-1767 -j DROP +-A logdrop-1768 -j TEE --gateway fc00::2 +-A logdrop-1768 -j DROP +-A logdrop-1769 -j TEE --gateway fc00::2 +-A logdrop-1769 -j DROP +-A logdrop-177 -j TEE --gateway fc00::2 -A logdrop-177 -j DROP --A logdrop-178 -m limit --limit 1/second -j LOG +-A logdrop-1770 -j TEE --gateway fc00::2 +-A logdrop-1770 -j DROP +-A logdrop-1771 -j TEE --gateway fc00::2 +-A logdrop-1771 -j DROP +-A logdrop-1772 -j TEE --gateway fc00::2 +-A logdrop-1772 -j DROP +-A logdrop-1773 -j TEE --gateway fc00::2 +-A logdrop-1773 -j DROP +-A logdrop-1774 -j TEE --gateway fc00::2 +-A logdrop-1774 -j DROP +-A logdrop-1775 -j TEE --gateway fc00::2 +-A logdrop-1775 -j DROP +-A logdrop-1776 -j TEE --gateway fc00::2 +-A logdrop-1776 -j DROP +-A logdrop-1777 -j TEE --gateway fc00::2 +-A logdrop-1777 -j DROP +-A logdrop-1778 -j TEE --gateway fc00::2 +-A logdrop-1778 -j DROP +-A logdrop-1779 -j TEE --gateway fc00::2 +-A logdrop-1779 -j DROP +-A logdrop-178 -j TEE --gateway fc00::2 -A logdrop-178 -j DROP --A logdrop-179 -m limit --limit 1/second -j LOG +-A logdrop-1780 -j TEE --gateway fc00::2 +-A logdrop-1780 -j DROP +-A logdrop-1781 -j TEE --gateway fc00::2 +-A logdrop-1781 -j DROP +-A logdrop-1782 -j TEE --gateway fc00::2 +-A logdrop-1782 -j DROP +-A logdrop-1783 -j TEE --gateway fc00::2 +-A logdrop-1783 -j DROP +-A logdrop-1784 -j TEE --gateway fc00::2 +-A logdrop-1784 -j DROP +-A logdrop-1785 -j TEE --gateway fc00::2 +-A logdrop-1785 -j DROP +-A logdrop-1786 -j TEE --gateway fc00::2 +-A logdrop-1786 -j DROP +-A logdrop-1787 -j TEE --gateway fc00::2 +-A logdrop-1787 -j DROP +-A logdrop-1788 -j TEE --gateway fc00::2 +-A logdrop-1788 -j DROP +-A logdrop-1789 -j TEE --gateway fc00::2 +-A logdrop-1789 -j DROP +-A logdrop-179 -j TEE --gateway fc00::2 -A logdrop-179 -j DROP +-A logdrop-1790 -j TEE --gateway fc00::2 +-A logdrop-1790 -j DROP +-A logdrop-1791 -j TEE --gateway fc00::2 +-A logdrop-1791 -j DROP +-A logdrop-1792 -j TEE --gateway fc00::2 +-A logdrop-1792 -j DROP +-A logdrop-1793 -j TEE --gateway fc00::2 +-A logdrop-1793 -j DROP +-A logdrop-1794 -j TEE --gateway fc00::2 +-A logdrop-1794 -j DROP +-A logdrop-1795 -j TEE --gateway fc00::2 +-A logdrop-1795 -j DROP +-A logdrop-1796 -j TEE --gateway fc00::2 +-A logdrop-1796 -j DROP +-A logdrop-1797 -j TEE --gateway fc00::2 +-A logdrop-1797 -j DROP +-A logdrop-1798 -j TEE --gateway fc00::2 +-A logdrop-1798 -j DROP +-A logdrop-1799 -j TEE --gateway fc00::2 +-A logdrop-1799 -j DROP -A logdrop-18 -m limit --limit 1/second -j LOG -A logdrop-18 -j DROP --A logdrop-180 -m limit --limit 1/second -j LOG +-A logdrop-180 -j TEE --gateway fc00::2 -A logdrop-180 -j DROP --A logdrop-181 -m limit --limit 1/second -j LOG +-A logdrop-1800 -j TEE --gateway fc00::2 +-A logdrop-1800 -j DROP +-A logdrop-1801 -j TEE --gateway fc00::2 +-A logdrop-1801 -j DROP +-A logdrop-1802 -j TEE --gateway fc00::2 +-A logdrop-1802 -j DROP +-A logdrop-1803 -j TEE --gateway fc00::2 +-A logdrop-1803 -j DROP +-A logdrop-1804 -j TEE --gateway fc00::2 +-A logdrop-1804 -j DROP +-A logdrop-1805 -j TEE --gateway fc00::2 +-A logdrop-1805 -j DROP +-A logdrop-1806 -j TEE --gateway fc00::2 +-A logdrop-1806 -j DROP +-A logdrop-1807 -j TEE --gateway fc00::2 +-A logdrop-1807 -j DROP +-A logdrop-1808 -j TEE --gateway fc00::2 +-A logdrop-1808 -j DROP +-A logdrop-1809 -j TEE --gateway fc00::2 +-A logdrop-1809 -j DROP +-A logdrop-181 -j TEE --gateway fc00::2 -A logdrop-181 -j DROP --A logdrop-182 -m limit --limit 1/second -j LOG +-A logdrop-1810 -j TEE --gateway fc00::2 +-A logdrop-1810 -j DROP +-A logdrop-1811 -j TEE --gateway fc00::2 +-A logdrop-1811 -j DROP +-A logdrop-1812 -j TEE --gateway fc00::2 +-A logdrop-1812 -j DROP +-A logdrop-1813 -j TEE --gateway fc00::2 +-A logdrop-1813 -j DROP +-A logdrop-1814 -j TEE --gateway fc00::2 +-A logdrop-1814 -j DROP +-A logdrop-1815 -j TEE --gateway fc00::2 +-A logdrop-1815 -j DROP +-A logdrop-1816 -j TEE --gateway fc00::2 +-A logdrop-1816 -j DROP +-A logdrop-1817 -j TEE --gateway fc00::2 +-A logdrop-1817 -j DROP +-A logdrop-1818 -j TEE --gateway fc00::2 +-A logdrop-1818 -j DROP +-A logdrop-1819 -j TEE --gateway fc00::2 +-A logdrop-1819 -j DROP +-A logdrop-182 -j TEE --gateway fc00::2 -A logdrop-182 -j DROP --A logdrop-183 -m limit --limit 1/second -j LOG +-A logdrop-1820 -j TEE --gateway fc00::2 +-A logdrop-1820 -j DROP +-A logdrop-1821 -j TEE --gateway fc00::2 +-A logdrop-1821 -j DROP +-A logdrop-1822 -j TEE --gateway fc00::2 +-A logdrop-1822 -j DROP +-A logdrop-1823 -j TEE --gateway fc00::2 +-A logdrop-1823 -j DROP +-A logdrop-1824 -j TEE --gateway fc00::2 +-A logdrop-1824 -j DROP +-A logdrop-1825 -j TEE --gateway fc00::2 +-A logdrop-1825 -j DROP +-A logdrop-1826 -j TEE --gateway fc00::2 +-A logdrop-1826 -j DROP +-A logdrop-1827 -j TEE --gateway fc00::2 +-A logdrop-1827 -j DROP +-A logdrop-1828 -j TEE --gateway fc00::2 +-A logdrop-1828 -j DROP +-A logdrop-1829 -j TEE --gateway fc00::2 +-A logdrop-1829 -j DROP +-A logdrop-183 -j TEE --gateway fc00::2 -A logdrop-183 -j DROP --A logdrop-184 -m limit --limit 1/second -j LOG +-A logdrop-1830 -j TEE --gateway fc00::2 +-A logdrop-1830 -j DROP +-A logdrop-1831 -j TEE --gateway fc00::2 +-A logdrop-1831 -j DROP +-A logdrop-1832 -j TEE --gateway fc00::2 +-A logdrop-1832 -j DROP +-A logdrop-1833 -j TEE --gateway fc00::2 +-A logdrop-1833 -j DROP +-A logdrop-1834 -j TEE --gateway fc00::2 +-A logdrop-1834 -j DROP +-A logdrop-1835 -j TEE --gateway fc00::2 +-A logdrop-1835 -j DROP +-A logdrop-1836 -j TEE --gateway fc00::2 +-A logdrop-1836 -j DROP +-A logdrop-1837 -j TEE --gateway fc00::2 +-A logdrop-1837 -j DROP +-A logdrop-1838 -j TEE --gateway fc00::2 +-A logdrop-1838 -j DROP +-A logdrop-1839 -j TEE --gateway fc00::2 +-A logdrop-1839 -j DROP +-A logdrop-184 -j TEE --gateway fc00::2 -A logdrop-184 -j DROP --A logdrop-185 -m limit --limit 1/second -j LOG +-A logdrop-1840 -j DROP +-A logdrop-1841 -j DROP +-A logdrop-1842 -j DROP +-A logdrop-1843 -j DROP +-A logdrop-1844 -j DROP +-A logdrop-1845 -j DROP +-A logdrop-1846 -j DROP +-A logdrop-1847 -j DROP +-A logdrop-1848 -j DROP +-A logdrop-1849 -j DROP +-A logdrop-185 -j TEE --gateway fc00::2 -A logdrop-185 -j DROP --A logdrop-186 -m limit --limit 1/second -j LOG +-A logdrop-1850 -j DROP +-A logdrop-1851 -j DROP +-A logdrop-1852 -j DROP +-A logdrop-1853 -j DROP +-A logdrop-1854 -j DROP +-A logdrop-1855 -j DROP +-A logdrop-1856 -j DROP +-A logdrop-1857 -j DROP +-A logdrop-1858 -j DROP +-A logdrop-1859 -j DROP +-A logdrop-186 -j TEE --gateway fc00::2 -A logdrop-186 -j DROP --A logdrop-187 -m limit --limit 1/second -j LOG +-A logdrop-1860 -j DROP +-A logdrop-1861 -j DROP +-A logdrop-1862 -j DROP +-A logdrop-1863 -j DROP +-A logdrop-1864 -j DROP +-A logdrop-1865 -j DROP +-A logdrop-1866 -j DROP +-A logdrop-1867 -j DROP +-A logdrop-1868 -j DROP +-A logdrop-1869 -j DROP +-A logdrop-187 -j TEE --gateway fc00::2 -A logdrop-187 -j DROP --A logdrop-188 -m limit --limit 1/second -j LOG +-A logdrop-1870 -j DROP +-A logdrop-1871 -j DROP +-A logdrop-1872 -j DROP +-A logdrop-1873 -j DROP +-A logdrop-1874 -j DROP +-A logdrop-1875 -j DROP +-A logdrop-1876 -j DROP +-A logdrop-1877 -j DROP +-A logdrop-1878 -j DROP +-A logdrop-1879 -j DROP +-A logdrop-188 -j TEE --gateway fc00::2 -A logdrop-188 -j DROP --A logdrop-189 -m limit --limit 1/second -j LOG +-A logdrop-1880 -j DROP +-A logdrop-1881 -j DROP +-A logdrop-1882 -j DROP +-A logdrop-1883 -j DROP +-A logdrop-1884 -j DROP +-A logdrop-1885 -j DROP +-A logdrop-1886 -j DROP +-A logdrop-1887 -j DROP +-A logdrop-1888 -j DROP +-A logdrop-1889 -j DROP +-A logdrop-189 -j TEE --gateway fc00::2 -A logdrop-189 -j DROP +-A logdrop-1890 -j DROP +-A logdrop-1891 -j DROP +-A logdrop-1892 -j DROP +-A logdrop-1893 -j DROP +-A logdrop-1894 -j DROP +-A logdrop-1895 -j DROP +-A logdrop-1896 -j DROP +-A logdrop-1897 -j DROP +-A logdrop-1898 -j DROP +-A logdrop-1899 -j DROP -A logdrop-19 -m limit --limit 1/second -j LOG -A logdrop-19 -j DROP --A logdrop-190 -m limit --limit 1/second -j LOG -A logdrop-190 -j DROP --A logdrop-191 -m limit --limit 1/second -j LOG +-A logdrop-1900 -j DROP +-A logdrop-1901 -j DROP +-A logdrop-1902 -j DROP +-A logdrop-1903 -j DROP +-A logdrop-1904 -j DROP +-A logdrop-1905 -j DROP +-A logdrop-1906 -j DROP +-A logdrop-1907 -j DROP +-A logdrop-1908 -j DROP +-A logdrop-1909 -j DROP -A logdrop-191 -j DROP --A logdrop-192 -m limit --limit 1/second -j LOG +-A logdrop-1910 -j DROP +-A logdrop-1911 -j DROP +-A logdrop-1912 -j DROP +-A logdrop-1913 -j DROP +-A logdrop-1914 -j DROP +-A logdrop-1915 -j DROP +-A logdrop-1916 -j DROP +-A logdrop-1917 -j DROP +-A logdrop-1918 -j DROP +-A logdrop-1919 -j DROP -A logdrop-192 -j DROP --A logdrop-193 -m limit --limit 1/second -j LOG +-A logdrop-1920 -j DROP +-A logdrop-1921 -j DROP +-A logdrop-1922 -j DROP +-A logdrop-1923 -j DROP +-A logdrop-1924 -j DROP +-A logdrop-1925 -j DROP +-A logdrop-1926 -j DROP +-A logdrop-1927 -j DROP +-A logdrop-1928 -j DROP +-A logdrop-1929 -j DROP -A logdrop-193 -j DROP --A logdrop-194 -m limit --limit 1/second -j LOG +-A logdrop-1930 -m limit --limit 1/second -j LOG +-A logdrop-1930 -j DROP +-A logdrop-1931 -m limit --limit 1/second -j LOG +-A logdrop-1931 -j DROP +-A logdrop-1932 -m limit --limit 1/second -j LOG +-A logdrop-1932 -j DROP +-A logdrop-1933 -m limit --limit 1/second -j LOG +-A logdrop-1933 -j DROP +-A logdrop-1934 -m limit --limit 1/second -j LOG +-A logdrop-1934 -j DROP +-A logdrop-1935 -m limit --limit 1/second -j LOG +-A logdrop-1935 -j DROP +-A logdrop-1936 -m limit --limit 1/second -j LOG +-A logdrop-1936 -j DROP +-A logdrop-1937 -m limit --limit 1/second -j LOG +-A logdrop-1937 -j DROP +-A logdrop-1938 -m limit --limit 1/second -j LOG +-A logdrop-1938 -j DROP +-A logdrop-1939 -m limit --limit 1/second -j LOG +-A logdrop-1939 -j DROP -A logdrop-194 -j DROP --A logdrop-195 -m limit --limit 1/second -j LOG +-A logdrop-1940 -m limit --limit 1/second -j LOG +-A logdrop-1940 -j DROP +-A logdrop-1941 -m limit --limit 1/second -j LOG +-A logdrop-1941 -j DROP +-A logdrop-1942 -m limit --limit 1/second -j LOG +-A logdrop-1942 -j DROP +-A logdrop-1943 -m limit --limit 1/second -j LOG +-A logdrop-1943 -j DROP +-A logdrop-1944 -m limit --limit 1/second -j LOG +-A logdrop-1944 -j DROP +-A logdrop-1945 -m limit --limit 1/second -j LOG +-A logdrop-1945 -j DROP +-A logdrop-1946 -m limit --limit 1/second -j LOG +-A logdrop-1946 -j DROP +-A logdrop-1947 -m limit --limit 1/second -j LOG +-A logdrop-1947 -j DROP +-A logdrop-1948 -m limit --limit 1/second -j LOG +-A logdrop-1948 -j DROP +-A logdrop-1949 -m limit --limit 1/second -j LOG +-A logdrop-1949 -j DROP -A logdrop-195 -j DROP --A logdrop-196 -m limit --limit 1/second -j LOG +-A logdrop-1950 -m limit --limit 1/second -j LOG +-A logdrop-1950 -j DROP +-A logdrop-1951 -m limit --limit 1/second -j LOG +-A logdrop-1951 -j DROP +-A logdrop-1952 -m limit --limit 1/second -j LOG +-A logdrop-1952 -j DROP +-A logdrop-1953 -m limit --limit 1/second -j LOG +-A logdrop-1953 -j DROP +-A logdrop-1954 -m limit --limit 1/second -j LOG +-A logdrop-1954 -j DROP +-A logdrop-1955 -m limit --limit 1/second -j LOG +-A logdrop-1955 -j DROP +-A logdrop-1956 -m limit --limit 1/second -j LOG +-A logdrop-1956 -j DROP +-A logdrop-1957 -m limit --limit 1/second -j LOG +-A logdrop-1957 -j DROP +-A logdrop-1958 -m limit --limit 1/second -j LOG +-A logdrop-1958 -j DROP +-A logdrop-1959 -m limit --limit 1/second -j LOG +-A logdrop-1959 -j DROP -A logdrop-196 -j DROP --A logdrop-197 -m limit --limit 1/second -j LOG +-A logdrop-1960 -m limit --limit 1/second -j LOG +-A logdrop-1960 -j DROP +-A logdrop-1961 -m limit --limit 1/second -j LOG +-A logdrop-1961 -j DROP +-A logdrop-1962 -m limit --limit 1/second -j LOG +-A logdrop-1962 -j DROP +-A logdrop-1963 -m limit --limit 1/second -j LOG +-A logdrop-1963 -j DROP +-A logdrop-1964 -m limit --limit 1/second -j LOG +-A logdrop-1964 -j DROP +-A logdrop-1965 -m limit --limit 1/second -j LOG +-A logdrop-1965 -j DROP +-A logdrop-1966 -m limit --limit 1/second -j LOG +-A logdrop-1966 -j DROP +-A logdrop-1967 -m limit --limit 1/second -j LOG +-A logdrop-1967 -j DROP +-A logdrop-1968 -m limit --limit 1/second -j LOG +-A logdrop-1968 -j DROP +-A logdrop-1969 -m limit --limit 1/second -j LOG +-A logdrop-1969 -j DROP -A logdrop-197 -j DROP --A logdrop-198 -m limit --limit 1/second -j LOG +-A logdrop-1970 -m limit --limit 1/second -j LOG +-A logdrop-1970 -j DROP +-A logdrop-1971 -m limit --limit 1/second -j LOG +-A logdrop-1971 -j DROP +-A logdrop-1972 -m limit --limit 1/second -j LOG +-A logdrop-1972 -j DROP +-A logdrop-1973 -m limit --limit 1/second -j LOG +-A logdrop-1973 -j DROP +-A logdrop-1974 -m limit --limit 1/second -j LOG +-A logdrop-1974 -j DROP +-A logdrop-1975 -m limit --limit 1/second -j LOG +-A logdrop-1975 -j DROP +-A logdrop-1976 -m limit --limit 1/second -j LOG +-A logdrop-1976 -j DROP +-A logdrop-1977 -m limit --limit 1/second -j LOG +-A logdrop-1977 -j DROP +-A logdrop-1978 -m limit --limit 1/second -j LOG +-A logdrop-1978 -j DROP +-A logdrop-1979 -m limit --limit 1/second -j LOG +-A logdrop-1979 -j DROP -A logdrop-198 -j DROP --A logdrop-199 -m limit --limit 1/second -j LOG +-A logdrop-1980 -m limit --limit 1/second -j LOG +-A logdrop-1980 -j DROP +-A logdrop-1981 -m limit --limit 1/second -j LOG +-A logdrop-1981 -j DROP +-A logdrop-1982 -m limit --limit 1/second -j LOG +-A logdrop-1982 -j DROP +-A logdrop-1983 -m limit --limit 1/second -j LOG +-A logdrop-1983 -j DROP +-A logdrop-1984 -m limit --limit 1/second -j LOG +-A logdrop-1984 -j DROP +-A logdrop-1985 -m limit --limit 1/second -j LOG +-A logdrop-1985 -j DROP +-A logdrop-1986 -m limit --limit 1/second -j LOG +-A logdrop-1986 -j DROP +-A logdrop-1987 -m limit --limit 1/second -j LOG +-A logdrop-1987 -j DROP +-A logdrop-1988 -m limit --limit 1/second -j LOG +-A logdrop-1988 -j DROP +-A logdrop-1989 -m limit --limit 1/second -j LOG +-A logdrop-1989 -j DROP -A logdrop-199 -j DROP +-A logdrop-1990 -m limit --limit 1/second -j LOG +-A logdrop-1990 -j DROP +-A logdrop-1991 -m limit --limit 1/second -j LOG +-A logdrop-1991 -j DROP +-A logdrop-1992 -m limit --limit 1/second -j LOG +-A logdrop-1992 -j DROP +-A logdrop-1993 -m limit --limit 1/second -j LOG +-A logdrop-1993 -j DROP +-A logdrop-1994 -m limit --limit 1/second -j LOG +-A logdrop-1994 -j DROP +-A logdrop-1995 -m limit --limit 1/second -j LOG +-A logdrop-1995 -j DROP +-A logdrop-1996 -m limit --limit 1/second -j LOG +-A logdrop-1996 -j DROP +-A logdrop-1997 -m limit --limit 1/second -j LOG +-A logdrop-1997 -j DROP +-A logdrop-1998 -m limit --limit 1/second -j LOG +-A logdrop-1998 -j DROP +-A logdrop-1999 -m limit --limit 1/second -j LOG +-A logdrop-1999 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-20 -m limit --limit 1/second -j LOG -A logdrop-20 -j DROP --A logdrop-200 -m limit --limit 1/second -j LOG -A logdrop-200 -j DROP --A logdrop-201 -m limit --limit 1/second -j LOG +-A logdrop-2000 -m limit --limit 1/second -j LOG +-A logdrop-2000 -j DROP +-A logdrop-2001 -m limit --limit 1/second -j LOG +-A logdrop-2001 -j DROP +-A logdrop-2002 -m limit --limit 1/second -j LOG +-A logdrop-2002 -j DROP +-A logdrop-2003 -m limit --limit 1/second -j LOG +-A logdrop-2003 -j DROP +-A logdrop-2004 -m limit --limit 1/second -j LOG +-A logdrop-2004 -j DROP +-A logdrop-2005 -m limit --limit 1/second -j LOG +-A logdrop-2005 -j DROP +-A logdrop-2006 -m limit --limit 1/second -j LOG +-A logdrop-2006 -j DROP +-A logdrop-2007 -m limit --limit 1/second -j LOG +-A logdrop-2007 -j DROP +-A logdrop-2008 -m limit --limit 1/second -j LOG +-A logdrop-2008 -j DROP +-A logdrop-2009 -m limit --limit 1/second -j LOG +-A logdrop-2009 -j DROP -A logdrop-201 -j DROP --A logdrop-202 -m limit --limit 1/second -j LOG +-A logdrop-2010 -m limit --limit 1/second -j LOG +-A logdrop-2010 -j DROP +-A logdrop-2011 -m limit --limit 1/second -j LOG +-A logdrop-2011 -j DROP +-A logdrop-2012 -m limit --limit 1/second -j LOG +-A logdrop-2012 -j DROP +-A logdrop-2013 -m limit --limit 1/second -j LOG +-A logdrop-2013 -j DROP +-A logdrop-2014 -m limit --limit 1/second -j LOG +-A logdrop-2014 -j DROP +-A logdrop-2015 -m limit --limit 1/second -j LOG +-A logdrop-2015 -j DROP +-A logdrop-2016 -m limit --limit 1/second -j LOG +-A logdrop-2016 -j DROP +-A logdrop-2017 -m limit --limit 1/second -j LOG +-A logdrop-2017 -j DROP +-A logdrop-2018 -m limit --limit 1/second -j LOG +-A logdrop-2018 -j DROP +-A logdrop-2019 -m limit --limit 1/second -j LOG +-A logdrop-2019 -j DROP -A logdrop-202 -j DROP --A logdrop-203 -m limit --limit 1/second -j LOG +-A logdrop-2020 -j TEE --gateway fc00::2 +-A logdrop-2020 -j DROP +-A logdrop-2021 -j TEE --gateway fc00::2 +-A logdrop-2021 -j DROP +-A logdrop-2022 -j TEE --gateway fc00::2 +-A logdrop-2022 -j DROP +-A logdrop-2023 -j TEE --gateway fc00::2 +-A logdrop-2023 -j DROP +-A logdrop-2024 -j TEE --gateway fc00::2 +-A logdrop-2024 -j DROP +-A logdrop-2025 -j TEE --gateway fc00::2 +-A logdrop-2025 -j DROP +-A logdrop-2026 -j TEE --gateway fc00::2 +-A logdrop-2026 -j DROP +-A logdrop-2027 -j TEE --gateway fc00::2 +-A logdrop-2027 -j DROP +-A logdrop-2028 -j TEE --gateway fc00::2 +-A logdrop-2028 -j DROP +-A logdrop-2029 -j TEE --gateway fc00::2 +-A logdrop-2029 -j DROP -A logdrop-203 -j DROP --A logdrop-204 -m limit --limit 1/second -j LOG +-A logdrop-2030 -j TEE --gateway fc00::2 +-A logdrop-2030 -j DROP +-A logdrop-2031 -j TEE --gateway fc00::2 +-A logdrop-2031 -j DROP +-A logdrop-2032 -j TEE --gateway fc00::2 +-A logdrop-2032 -j DROP +-A logdrop-2033 -j TEE --gateway fc00::2 +-A logdrop-2033 -j DROP +-A logdrop-2034 -j TEE --gateway fc00::2 +-A logdrop-2034 -j DROP +-A logdrop-2035 -j TEE --gateway fc00::2 +-A logdrop-2035 -j DROP +-A logdrop-2036 -j TEE --gateway fc00::2 +-A logdrop-2036 -j DROP +-A logdrop-2037 -j TEE --gateway fc00::2 +-A logdrop-2037 -j DROP +-A logdrop-2038 -j TEE --gateway fc00::2 +-A logdrop-2038 -j DROP +-A logdrop-2039 -j TEE --gateway fc00::2 +-A logdrop-2039 -j DROP -A logdrop-204 -j DROP --A logdrop-205 -m limit --limit 1/second -j LOG +-A logdrop-2040 -j TEE --gateway fc00::2 +-A logdrop-2040 -j DROP +-A logdrop-2041 -j TEE --gateway fc00::2 +-A logdrop-2041 -j DROP +-A logdrop-2042 -j TEE --gateway fc00::2 +-A logdrop-2042 -j DROP +-A logdrop-2043 -j TEE --gateway fc00::2 +-A logdrop-2043 -j DROP +-A logdrop-2044 -j TEE --gateway fc00::2 +-A logdrop-2044 -j DROP +-A logdrop-2045 -j TEE --gateway fc00::2 +-A logdrop-2045 -j DROP +-A logdrop-2046 -j TEE --gateway fc00::2 +-A logdrop-2046 -j DROP +-A logdrop-2047 -j TEE --gateway fc00::2 +-A logdrop-2047 -j DROP +-A logdrop-2048 -j TEE --gateway fc00::2 +-A logdrop-2048 -j DROP +-A logdrop-2049 -j TEE --gateway fc00::2 +-A logdrop-2049 -j DROP -A logdrop-205 -j DROP --A logdrop-206 -m limit --limit 1/second -j LOG +-A logdrop-2050 -j TEE --gateway fc00::2 +-A logdrop-2050 -j DROP +-A logdrop-2051 -j TEE --gateway fc00::2 +-A logdrop-2051 -j DROP +-A logdrop-2052 -j TEE --gateway fc00::2 +-A logdrop-2052 -j DROP +-A logdrop-2053 -j TEE --gateway fc00::2 +-A logdrop-2053 -j DROP +-A logdrop-2054 -j TEE --gateway fc00::2 +-A logdrop-2054 -j DROP +-A logdrop-2055 -j TEE --gateway fc00::2 +-A logdrop-2055 -j DROP +-A logdrop-2056 -j TEE --gateway fc00::2 +-A logdrop-2056 -j DROP +-A logdrop-2057 -j TEE --gateway fc00::2 +-A logdrop-2057 -j DROP +-A logdrop-2058 -j TEE --gateway fc00::2 +-A logdrop-2058 -j DROP +-A logdrop-2059 -j TEE --gateway fc00::2 +-A logdrop-2059 -j DROP -A logdrop-206 -j DROP --A logdrop-207 -m limit --limit 1/second -j LOG +-A logdrop-2060 -j TEE --gateway fc00::2 +-A logdrop-2060 -j DROP +-A logdrop-2061 -j TEE --gateway fc00::2 +-A logdrop-2061 -j DROP +-A logdrop-2062 -j TEE --gateway fc00::2 +-A logdrop-2062 -j DROP +-A logdrop-2063 -j TEE --gateway fc00::2 +-A logdrop-2063 -j DROP +-A logdrop-2064 -j TEE --gateway fc00::2 +-A logdrop-2064 -j DROP +-A logdrop-2065 -j TEE --gateway fc00::2 +-A logdrop-2065 -j DROP +-A logdrop-2066 -j TEE --gateway fc00::2 +-A logdrop-2066 -j DROP +-A logdrop-2067 -j TEE --gateway fc00::2 +-A logdrop-2067 -j DROP +-A logdrop-2068 -j TEE --gateway fc00::2 +-A logdrop-2068 -j DROP +-A logdrop-2069 -j TEE --gateway fc00::2 +-A logdrop-2069 -j DROP -A logdrop-207 -j DROP --A logdrop-208 -m limit --limit 1/second -j LOG +-A logdrop-2070 -j TEE --gateway fc00::2 +-A logdrop-2070 -j DROP +-A logdrop-2071 -j TEE --gateway fc00::2 +-A logdrop-2071 -j DROP +-A logdrop-2072 -j TEE --gateway fc00::2 +-A logdrop-2072 -j DROP +-A logdrop-2073 -j TEE --gateway fc00::2 +-A logdrop-2073 -j DROP +-A logdrop-2074 -j TEE --gateway fc00::2 +-A logdrop-2074 -j DROP +-A logdrop-2075 -j TEE --gateway fc00::2 +-A logdrop-2075 -j DROP +-A logdrop-2076 -j TEE --gateway fc00::2 +-A logdrop-2076 -j DROP +-A logdrop-2077 -j TEE --gateway fc00::2 +-A logdrop-2077 -j DROP +-A logdrop-2078 -j TEE --gateway fc00::2 +-A logdrop-2078 -j DROP +-A logdrop-2079 -j TEE --gateway fc00::2 +-A logdrop-2079 -j DROP -A logdrop-208 -j DROP --A logdrop-209 -m limit --limit 1/second -j LOG +-A logdrop-2080 -j TEE --gateway fc00::2 +-A logdrop-2080 -j DROP +-A logdrop-2081 -j TEE --gateway fc00::2 +-A logdrop-2081 -j DROP +-A logdrop-2082 -j TEE --gateway fc00::2 +-A logdrop-2082 -j DROP +-A logdrop-2083 -j TEE --gateway fc00::2 +-A logdrop-2083 -j DROP +-A logdrop-2084 -j TEE --gateway fc00::2 +-A logdrop-2084 -j DROP +-A logdrop-2085 -j TEE --gateway fc00::2 +-A logdrop-2085 -j DROP +-A logdrop-2086 -j TEE --gateway fc00::2 +-A logdrop-2086 -j DROP +-A logdrop-2087 -j TEE --gateway fc00::2 +-A logdrop-2087 -j DROP +-A logdrop-2088 -j TEE --gateway fc00::2 +-A logdrop-2088 -j DROP +-A logdrop-2089 -j TEE --gateway fc00::2 +-A logdrop-2089 -j DROP -A logdrop-209 -j DROP +-A logdrop-2090 -j TEE --gateway fc00::2 +-A logdrop-2090 -j DROP +-A logdrop-2091 -j TEE --gateway fc00::2 +-A logdrop-2091 -j DROP +-A logdrop-2092 -j TEE --gateway fc00::2 +-A logdrop-2092 -j DROP +-A logdrop-2093 -j TEE --gateway fc00::2 +-A logdrop-2093 -j DROP +-A logdrop-2094 -j TEE --gateway fc00::2 +-A logdrop-2094 -j DROP +-A logdrop-2095 -j TEE --gateway fc00::2 +-A logdrop-2095 -j DROP +-A logdrop-2096 -j TEE --gateway fc00::2 +-A logdrop-2096 -j DROP +-A logdrop-2097 -j TEE --gateway fc00::2 +-A logdrop-2097 -j DROP +-A logdrop-2098 -j TEE --gateway fc00::2 +-A logdrop-2098 -j DROP +-A logdrop-2099 -j TEE --gateway fc00::2 +-A logdrop-2099 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP --A logdrop-210 -m limit --limit 1/second -j LOG -A logdrop-210 -j DROP --A logdrop-211 -m limit --limit 1/second -j LOG +-A logdrop-2100 -j TEE --gateway fc00::2 +-A logdrop-2100 -j DROP +-A logdrop-2101 -j TEE --gateway fc00::2 +-A logdrop-2101 -j DROP +-A logdrop-2102 -j TEE --gateway fc00::2 +-A logdrop-2102 -j DROP +-A logdrop-2103 -j TEE --gateway fc00::2 +-A logdrop-2103 -j DROP +-A logdrop-2104 -j TEE --gateway fc00::2 +-A logdrop-2104 -j DROP +-A logdrop-2105 -j TEE --gateway fc00::2 +-A logdrop-2105 -j DROP +-A logdrop-2106 -j TEE --gateway fc00::2 +-A logdrop-2106 -j DROP +-A logdrop-2107 -j TEE --gateway fc00::2 +-A logdrop-2107 -j DROP +-A logdrop-2108 -j TEE --gateway fc00::2 +-A logdrop-2108 -j DROP +-A logdrop-2109 -j TEE --gateway fc00::2 +-A logdrop-2109 -j DROP -A logdrop-211 -j DROP --A logdrop-212 -m limit --limit 1/second -j LOG +-A logdrop-2110 -j DROP +-A logdrop-2111 -j DROP +-A logdrop-2112 -j DROP +-A logdrop-2113 -j DROP +-A logdrop-2114 -j DROP +-A logdrop-2115 -j DROP +-A logdrop-2116 -j DROP +-A logdrop-2117 -j DROP +-A logdrop-2118 -j DROP +-A logdrop-2119 -j DROP -A logdrop-212 -j DROP --A logdrop-213 -m limit --limit 1/second -j LOG +-A logdrop-2120 -j DROP +-A logdrop-2121 -j DROP +-A logdrop-2122 -j DROP +-A logdrop-2123 -j DROP +-A logdrop-2124 -j DROP +-A logdrop-2125 -j DROP +-A logdrop-2126 -j DROP +-A logdrop-2127 -j DROP +-A logdrop-2128 -j DROP +-A logdrop-2129 -j DROP -A logdrop-213 -j DROP --A logdrop-214 -m limit --limit 1/second -j LOG +-A logdrop-2130 -j DROP +-A logdrop-2131 -j DROP +-A logdrop-2132 -j DROP +-A logdrop-2133 -j DROP +-A logdrop-2134 -j DROP +-A logdrop-2135 -j DROP +-A logdrop-2136 -j DROP +-A logdrop-2137 -j DROP +-A logdrop-2138 -j DROP +-A logdrop-2139 -j DROP -A logdrop-214 -j DROP --A logdrop-215 -m limit --limit 1/second -j LOG +-A logdrop-2140 -j DROP +-A logdrop-2141 -j DROP +-A logdrop-2142 -j DROP +-A logdrop-2143 -j DROP +-A logdrop-2144 -j DROP +-A logdrop-2145 -j DROP +-A logdrop-2146 -j DROP +-A logdrop-2147 -j DROP +-A logdrop-2148 -j DROP +-A logdrop-2149 -j DROP -A logdrop-215 -j DROP --A logdrop-216 -m limit --limit 1/second -j LOG +-A logdrop-2150 -j DROP +-A logdrop-2151 -j DROP +-A logdrop-2152 -j DROP +-A logdrop-2153 -j DROP +-A logdrop-2154 -j DROP +-A logdrop-2155 -j DROP +-A logdrop-2156 -j DROP +-A logdrop-2157 -j DROP +-A logdrop-2158 -j DROP +-A logdrop-2159 -j DROP -A logdrop-216 -j DROP --A logdrop-217 -m limit --limit 1/second -j LOG +-A logdrop-2160 -j DROP +-A logdrop-2161 -j DROP +-A logdrop-2162 -j DROP +-A logdrop-2163 -j DROP +-A logdrop-2164 -j DROP +-A logdrop-2165 -j DROP +-A logdrop-2166 -j DROP +-A logdrop-2167 -j DROP +-A logdrop-2168 -j DROP +-A logdrop-2169 -j DROP -A logdrop-217 -j DROP --A logdrop-218 -m limit --limit 1/second -j LOG +-A logdrop-2170 -j DROP +-A logdrop-2171 -j DROP +-A logdrop-2172 -j DROP +-A logdrop-2173 -j DROP +-A logdrop-2174 -j DROP +-A logdrop-2175 -j DROP +-A logdrop-2176 -j DROP +-A logdrop-2177 -j DROP +-A logdrop-2178 -j DROP +-A logdrop-2179 -j DROP -A logdrop-218 -j DROP --A logdrop-219 -m limit --limit 1/second -j LOG +-A logdrop-2180 -j DROP +-A logdrop-2181 -j DROP +-A logdrop-2182 -j DROP +-A logdrop-2183 -j DROP +-A logdrop-2184 -j DROP +-A logdrop-2185 -j DROP +-A logdrop-2186 -j DROP +-A logdrop-2187 -j DROP +-A logdrop-2188 -j DROP +-A logdrop-2189 -j DROP -A logdrop-219 -j DROP +-A logdrop-2190 -j DROP +-A logdrop-2191 -j DROP +-A logdrop-2192 -j DROP +-A logdrop-2193 -j DROP +-A logdrop-2194 -j DROP +-A logdrop-2195 -j DROP +-A logdrop-2196 -j DROP +-A logdrop-2197 -j DROP +-A logdrop-2198 -j DROP +-A logdrop-2199 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP --A logdrop-220 -m limit --limit 1/second -j LOG -A logdrop-220 -j DROP --A logdrop-221 -m limit --limit 1/second -j LOG +-A logdrop-2200 -m limit --limit 1/second -j LOG +-A logdrop-2200 -j DROP +-A logdrop-2201 -m limit --limit 1/second -j LOG +-A logdrop-2201 -j DROP +-A logdrop-2202 -j LOG +-A logdrop-2202 -j TEE --gateway fc00::1 +-A logdrop-2202 -j DROP +-A logdrop-2203 -j TEE --gateway fc00::2 +-A logdrop-2203 -j DROP +-A logdrop-2204 -j DROP -A logdrop-221 -j DROP --A logdrop-222 -m limit --limit 1/second -j LOG -A logdrop-222 -j DROP --A logdrop-223 -m limit --limit 1/second -j LOG -A logdrop-223 -j DROP -A logdrop-224 -j DROP -A logdrop-225 -j DROP @@ -15017,23 +25751,39 @@ -A logdrop-279 -j DROP -A logdrop-28 -m limit --limit 1/second -j LOG -A logdrop-28 -j DROP +-A logdrop-280 -m limit --limit 1/second -j LOG -A logdrop-280 -j DROP +-A logdrop-281 -m limit --limit 1/second -j LOG -A logdrop-281 -j DROP +-A logdrop-282 -m limit --limit 1/second -j LOG -A logdrop-282 -j DROP +-A logdrop-283 -m limit --limit 1/second -j LOG -A logdrop-283 -j DROP +-A logdrop-284 -m limit --limit 1/second -j LOG -A logdrop-284 -j DROP +-A logdrop-285 -m limit --limit 1/second -j LOG -A logdrop-285 -j DROP +-A logdrop-286 -m limit --limit 1/second -j LOG -A logdrop-286 -j DROP +-A logdrop-287 -m limit --limit 1/second -j LOG -A logdrop-287 -j DROP +-A logdrop-288 -m limit --limit 1/second -j LOG -A logdrop-288 -j DROP +-A logdrop-289 -m limit --limit 1/second -j LOG -A logdrop-289 -j DROP -A logdrop-29 -m limit --limit 1/second -j LOG -A logdrop-29 -j DROP +-A logdrop-290 -m limit --limit 1/second -j LOG -A logdrop-290 -j DROP +-A logdrop-291 -m limit --limit 1/second -j LOG -A logdrop-291 -j DROP +-A logdrop-292 -m limit --limit 1/second -j LOG -A logdrop-292 -j DROP +-A logdrop-293 -m limit --limit 1/second -j LOG -A logdrop-293 -j DROP +-A logdrop-294 -m limit --limit 1/second -j LOG -A logdrop-294 -j DROP +-A logdrop-295 -m limit --limit 1/second -j LOG -A logdrop-295 -j DROP -A logdrop-296 -m limit --limit 1/second -j LOG -A logdrop-296 -j DROP @@ -15201,265 +25951,277 @@ -A logdrop-369 -j DROP -A logdrop-37 -m limit --limit 1/second -j LOG -A logdrop-37 -j DROP --A logdrop-370 -m limit --limit 1/second -j LOG +-A logdrop-370 -j TEE --gateway fc00::2 -A logdrop-370 -j DROP --A logdrop-371 -m limit --limit 1/second -j LOG +-A logdrop-371 -j TEE --gateway fc00::2 -A logdrop-371 -j DROP --A logdrop-372 -m limit --limit 1/second -j LOG +-A logdrop-372 -j TEE --gateway fc00::2 -A logdrop-372 -j DROP --A logdrop-373 -m limit --limit 1/second -j LOG +-A logdrop-373 -j TEE --gateway fc00::2 -A logdrop-373 -j DROP --A logdrop-374 -m limit --limit 1/second -j LOG +-A logdrop-374 -j TEE --gateway fc00::2 -A logdrop-374 -j DROP --A logdrop-375 -m limit --limit 1/second -j LOG +-A logdrop-375 -j TEE --gateway fc00::2 -A logdrop-375 -j DROP +-A logdrop-376 -j TEE --gateway fc00::2 -A logdrop-376 -j DROP +-A logdrop-377 -j TEE --gateway fc00::2 -A logdrop-377 -j DROP +-A logdrop-378 -j TEE --gateway fc00::2 -A logdrop-378 -j DROP +-A logdrop-379 -j TEE --gateway fc00::2 -A logdrop-379 -j DROP -A logdrop-38 -m limit --limit 1/second -j LOG -A logdrop-38 -j DROP +-A logdrop-380 -j TEE --gateway fc00::2 -A logdrop-380 -j DROP +-A logdrop-381 -j TEE --gateway fc00::2 -A logdrop-381 -j DROP +-A logdrop-382 -j TEE --gateway fc00::2 -A logdrop-382 -j DROP +-A logdrop-383 -j TEE --gateway fc00::2 -A logdrop-383 -j DROP +-A logdrop-384 -j TEE --gateway fc00::2 -A logdrop-384 -j DROP +-A logdrop-385 -j TEE --gateway fc00::2 -A logdrop-385 -j DROP +-A logdrop-386 -j TEE --gateway fc00::2 -A logdrop-386 -j DROP +-A logdrop-387 -j TEE --gateway fc00::2 -A logdrop-387 -j DROP +-A logdrop-388 -j TEE --gateway fc00::2 -A logdrop-388 -j DROP +-A logdrop-389 -j TEE --gateway fc00::2 -A logdrop-389 -j DROP -A logdrop-39 -m limit --limit 1/second -j LOG -A logdrop-39 -j DROP +-A logdrop-390 -j TEE --gateway fc00::2 -A logdrop-390 -j DROP +-A logdrop-391 -j TEE --gateway fc00::2 -A logdrop-391 -j DROP +-A logdrop-392 -j TEE --gateway fc00::2 -A logdrop-392 -j DROP +-A logdrop-393 -j TEE --gateway fc00::2 -A logdrop-393 -j DROP +-A logdrop-394 -j TEE --gateway fc00::2 -A logdrop-394 -j DROP +-A logdrop-395 -j TEE --gateway fc00::2 -A logdrop-395 -j DROP +-A logdrop-396 -j TEE --gateway fc00::2 -A logdrop-396 -j DROP +-A logdrop-397 -j TEE --gateway fc00::2 -A logdrop-397 -j DROP +-A logdrop-398 -j TEE --gateway fc00::2 -A logdrop-398 -j DROP +-A logdrop-399 -j TEE --gateway fc00::2 -A logdrop-399 -j DROP -A logdrop-4 -m limit --limit 1/second -j LOG -A logdrop-4 -j DROP -A logdrop-40 -m limit --limit 1/second -j LOG -A logdrop-40 -j DROP +-A logdrop-400 -j TEE --gateway fc00::2 -A logdrop-400 -j DROP +-A logdrop-401 -j TEE --gateway fc00::2 -A logdrop-401 -j DROP +-A logdrop-402 -j TEE --gateway fc00::2 -A logdrop-402 -j DROP +-A logdrop-403 -j TEE --gateway fc00::2 -A logdrop-403 -j DROP +-A logdrop-404 -j TEE --gateway fc00::2 -A logdrop-404 -j DROP +-A logdrop-405 -j TEE --gateway fc00::2 -A logdrop-405 -j DROP +-A logdrop-406 -j TEE --gateway fc00::2 -A logdrop-406 -j DROP +-A logdrop-407 -j TEE --gateway fc00::2 -A logdrop-407 -j DROP +-A logdrop-408 -j TEE --gateway fc00::2 -A logdrop-408 -j DROP +-A logdrop-409 -j TEE --gateway fc00::2 -A logdrop-409 -j DROP -A logdrop-41 -m limit --limit 1/second -j LOG -A logdrop-41 -j DROP +-A logdrop-410 -j TEE --gateway fc00::2 -A logdrop-410 -j DROP +-A logdrop-411 -j TEE --gateway fc00::2 -A logdrop-411 -j DROP +-A logdrop-412 -j TEE --gateway fc00::2 -A logdrop-412 -j DROP +-A logdrop-413 -j TEE --gateway fc00::2 -A logdrop-413 -j DROP +-A logdrop-414 -j TEE --gateway fc00::2 -A logdrop-414 -j DROP +-A logdrop-415 -j TEE --gateway fc00::2 -A logdrop-415 -j DROP +-A logdrop-416 -j TEE --gateway fc00::2 -A logdrop-416 -j DROP +-A logdrop-417 -j TEE --gateway fc00::2 -A logdrop-417 -j DROP +-A logdrop-418 -j TEE --gateway fc00::2 -A logdrop-418 -j DROP +-A logdrop-419 -j TEE --gateway fc00::2 -A logdrop-419 -j DROP -A logdrop-42 -m limit --limit 1/second -j LOG -A logdrop-42 -j DROP +-A logdrop-420 -j TEE --gateway fc00::2 -A logdrop-420 -j DROP +-A logdrop-421 -j TEE --gateway fc00::2 -A logdrop-421 -j DROP +-A logdrop-422 -j TEE --gateway fc00::2 -A logdrop-422 -j DROP +-A logdrop-423 -j TEE --gateway fc00::2 -A logdrop-423 -j DROP +-A logdrop-424 -j TEE --gateway fc00::2 -A logdrop-424 -j DROP +-A logdrop-425 -j TEE --gateway fc00::2 -A logdrop-425 -j DROP +-A logdrop-426 -j TEE --gateway fc00::2 -A logdrop-426 -j DROP +-A logdrop-427 -j TEE --gateway fc00::2 -A logdrop-427 -j DROP +-A logdrop-428 -j TEE --gateway fc00::2 -A logdrop-428 -j DROP +-A logdrop-429 -j TEE --gateway fc00::2 -A logdrop-429 -j DROP -A logdrop-43 -m limit --limit 1/second -j LOG -A logdrop-43 -j DROP +-A logdrop-430 -j TEE --gateway fc00::2 -A logdrop-430 -j DROP +-A logdrop-431 -j TEE --gateway fc00::2 -A logdrop-431 -j DROP +-A logdrop-432 -j TEE --gateway fc00::2 -A logdrop-432 -j DROP +-A logdrop-433 -j TEE --gateway fc00::2 -A logdrop-433 -j DROP +-A logdrop-434 -j TEE --gateway fc00::2 -A logdrop-434 -j DROP +-A logdrop-435 -j TEE --gateway fc00::2 -A logdrop-435 -j DROP +-A logdrop-436 -j TEE --gateway fc00::2 -A logdrop-436 -j DROP +-A logdrop-437 -j TEE --gateway fc00::2 -A logdrop-437 -j DROP +-A logdrop-438 -j TEE --gateway fc00::2 -A logdrop-438 -j DROP +-A logdrop-439 -j TEE --gateway fc00::2 -A logdrop-439 -j DROP -A logdrop-44 -m limit --limit 1/second -j LOG -A logdrop-44 -j DROP +-A logdrop-440 -j TEE --gateway fc00::2 -A logdrop-440 -j DROP +-A logdrop-441 -j TEE --gateway fc00::2 -A logdrop-441 -j DROP +-A logdrop-442 -j TEE --gateway fc00::2 -A logdrop-442 -j DROP +-A logdrop-443 -j TEE --gateway fc00::2 -A logdrop-443 -j DROP +-A logdrop-444 -j TEE --gateway fc00::2 -A logdrop-444 -j DROP +-A logdrop-445 -j TEE --gateway fc00::2 -A logdrop-445 -j DROP +-A logdrop-446 -j TEE --gateway fc00::2 -A logdrop-446 -j DROP +-A logdrop-447 -j TEE --gateway fc00::2 -A logdrop-447 -j DROP --A logdrop-448 -m limit --limit 1/second -j LOG +-A logdrop-448 -j TEE --gateway fc00::2 -A logdrop-448 -j DROP --A logdrop-449 -m limit --limit 1/second -j LOG +-A logdrop-449 -j TEE --gateway fc00::2 -A logdrop-449 -j DROP -A logdrop-45 -m limit --limit 1/second -j LOG -A logdrop-45 -j DROP --A logdrop-450 -m limit --limit 1/second -j LOG +-A logdrop-450 -j TEE --gateway fc00::2 -A logdrop-450 -j DROP --A logdrop-451 -m limit --limit 1/second -j LOG +-A logdrop-451 -j TEE --gateway fc00::2 -A logdrop-451 -j DROP --A logdrop-452 -m limit --limit 1/second -j LOG +-A logdrop-452 -j TEE --gateway fc00::2 -A logdrop-452 -j DROP --A logdrop-453 -m limit --limit 1/second -j LOG +-A logdrop-453 -j TEE --gateway fc00::2 -A logdrop-453 -j DROP --A logdrop-454 -m limit --limit 1/second -j LOG +-A logdrop-454 -j TEE --gateway fc00::2 -A logdrop-454 -j DROP --A logdrop-455 -m limit --limit 1/second -j LOG +-A logdrop-455 -j TEE --gateway fc00::2 -A logdrop-455 -j DROP --A logdrop-456 -m limit --limit 1/second -j LOG +-A logdrop-456 -j TEE --gateway fc00::2 -A logdrop-456 -j DROP --A logdrop-457 -m limit --limit 1/second -j LOG +-A logdrop-457 -j TEE --gateway fc00::2 -A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG +-A logdrop-458 -j TEE --gateway fc00::2 -A logdrop-458 -j DROP --A logdrop-459 -m limit --limit 1/second -j LOG +-A logdrop-459 -j TEE --gateway fc00::2 -A logdrop-459 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP --A logdrop-460 -m limit --limit 1/second -j LOG -A logdrop-460 -j DROP --A logdrop-461 -m limit --limit 1/second -j LOG -A logdrop-461 -j DROP --A logdrop-462 -m limit --limit 1/second -j LOG -A logdrop-462 -j DROP --A logdrop-463 -m limit --limit 1/second -j LOG -A logdrop-463 -j DROP --A logdrop-464 -m limit --limit 1/second -j LOG -A logdrop-464 -j DROP --A logdrop-465 -m limit --limit 1/second -j LOG -A logdrop-465 -j DROP --A logdrop-466 -m limit --limit 1/second -j LOG -A logdrop-466 -j DROP --A logdrop-467 -m limit --limit 1/second -j LOG -A logdrop-467 -j DROP --A logdrop-468 -m limit --limit 1/second -j LOG -A logdrop-468 -j DROP --A logdrop-469 -m limit --limit 1/second -j LOG -A logdrop-469 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG -A logdrop-47 -j DROP --A logdrop-470 -m limit --limit 1/second -j LOG -A logdrop-470 -j DROP --A logdrop-471 -m limit --limit 1/second -j LOG -A logdrop-471 -j DROP --A logdrop-472 -m limit --limit 1/second -j LOG -A logdrop-472 -j DROP --A logdrop-473 -m limit --limit 1/second -j LOG -A logdrop-473 -j DROP --A logdrop-474 -m limit --limit 1/second -j LOG -A logdrop-474 -j DROP --A logdrop-475 -m limit --limit 1/second -j LOG -A logdrop-475 -j DROP --A logdrop-476 -m limit --limit 1/second -j LOG -A logdrop-476 -j DROP --A logdrop-477 -m limit --limit 1/second -j LOG -A logdrop-477 -j DROP --A logdrop-478 -m limit --limit 1/second -j LOG -A logdrop-478 -j DROP --A logdrop-479 -m limit --limit 1/second -j LOG -A logdrop-479 -j DROP -A logdrop-48 -m limit --limit 1/second -j LOG -A logdrop-48 -j DROP --A logdrop-480 -m limit --limit 1/second -j LOG -A logdrop-480 -j DROP --A logdrop-481 -m limit --limit 1/second -j LOG -A logdrop-481 -j DROP --A logdrop-482 -m limit --limit 1/second -j LOG -A logdrop-482 -j DROP --A logdrop-483 -m limit --limit 1/second -j LOG -A logdrop-483 -j DROP --A logdrop-484 -m limit --limit 1/second -j LOG -A logdrop-484 -j DROP --A logdrop-485 -m limit --limit 1/second -j LOG -A logdrop-485 -j DROP --A logdrop-486 -m limit --limit 1/second -j LOG -A logdrop-486 -j DROP --A logdrop-487 -m limit --limit 1/second -j LOG -A logdrop-487 -j DROP --A logdrop-488 -m limit --limit 1/second -j LOG -A logdrop-488 -j DROP --A logdrop-489 -m limit --limit 1/second -j LOG -A logdrop-489 -j DROP -A logdrop-49 -m limit --limit 1/second -j LOG -A logdrop-49 -j DROP --A logdrop-490 -m limit --limit 1/second -j LOG -A logdrop-490 -j DROP --A logdrop-491 -m limit --limit 1/second -j LOG -A logdrop-491 -j DROP --A logdrop-492 -m limit --limit 1/second -j LOG -A logdrop-492 -j DROP --A logdrop-493 -m limit --limit 1/second -j LOG -A logdrop-493 -j DROP --A logdrop-494 -m limit --limit 1/second -j LOG -A logdrop-494 -j DROP --A logdrop-495 -m limit --limit 1/second -j LOG -A logdrop-495 -j DROP --A logdrop-496 -m limit --limit 1/second -j LOG -A logdrop-496 -j DROP --A logdrop-497 -m limit --limit 1/second -j LOG -A logdrop-497 -j DROP --A logdrop-498 -m limit --limit 1/second -j LOG -A logdrop-498 -j DROP --A logdrop-499 -m limit --limit 1/second -j LOG -A logdrop-499 -j DROP -A logdrop-5 -m limit --limit 1/second -j LOG -A logdrop-5 -j DROP -A logdrop-50 -m limit --limit 1/second -j LOG -A logdrop-50 -j DROP --A logdrop-500 -m limit --limit 1/second -j LOG -A logdrop-500 -j DROP --A logdrop-501 -m limit --limit 1/second -j LOG -A logdrop-501 -j DROP --A logdrop-502 -m limit --limit 1/second -j LOG -A logdrop-502 -j DROP --A logdrop-503 -m limit --limit 1/second -j LOG -A logdrop-503 -j DROP --A logdrop-504 -m limit --limit 1/second -j LOG -A logdrop-504 -j DROP --A logdrop-505 -m limit --limit 1/second -j LOG -A logdrop-505 -j DROP --A logdrop-506 -m limit --limit 1/second -j LOG -A logdrop-506 -j DROP --A logdrop-507 -m limit --limit 1/second -j LOG -A logdrop-507 -j DROP --A logdrop-508 -m limit --limit 1/second -j LOG -A logdrop-508 -j DROP --A logdrop-509 -m limit --limit 1/second -j LOG -A logdrop-509 -j DROP -A logdrop-51 -m limit --limit 1/second -j LOG -A logdrop-51 -j DROP --A logdrop-510 -m limit --limit 1/second -j LOG -A logdrop-510 -j DROP --A logdrop-511 -m limit --limit 1/second -j LOG -A logdrop-511 -j DROP --A logdrop-512 -m limit --limit 1/second -j LOG -A logdrop-512 -j DROP --A logdrop-513 -m limit --limit 1/second -j LOG -A logdrop-513 -j DROP --A logdrop-514 -m limit --limit 1/second -j LOG -A logdrop-514 -j DROP --A logdrop-515 -m limit --limit 1/second -j LOG -A logdrop-515 -j DROP --A logdrop-516 -m limit --limit 1/second -j LOG -A logdrop-516 -j DROP --A logdrop-517 -m limit --limit 1/second -j LOG -A logdrop-517 -j DROP --A logdrop-518 -m limit --limit 1/second -j LOG -A logdrop-518 -j DROP --A logdrop-519 -m limit --limit 1/second -j LOG -A logdrop-519 -j DROP -A logdrop-52 -m limit --limit 1/second -j LOG -A logdrop-52 -j DROP @@ -15499,55 +26261,97 @@ -A logdrop-549 -j DROP -A logdrop-55 -m limit --limit 1/second -j LOG -A logdrop-55 -j DROP +-A logdrop-550 -m limit --limit 1/second -j LOG -A logdrop-550 -j DROP +-A logdrop-551 -m limit --limit 1/second -j LOG -A logdrop-551 -j DROP +-A logdrop-552 -m limit --limit 1/second -j LOG -A logdrop-552 -j DROP +-A logdrop-553 -m limit --limit 1/second -j LOG -A logdrop-553 -j DROP +-A logdrop-554 -m limit --limit 1/second -j LOG -A logdrop-554 -j DROP +-A logdrop-555 -m limit --limit 1/second -j LOG -A logdrop-555 -j DROP +-A logdrop-556 -m limit --limit 1/second -j LOG -A logdrop-556 -j DROP +-A logdrop-557 -m limit --limit 1/second -j LOG -A logdrop-557 -j DROP +-A logdrop-558 -m limit --limit 1/second -j LOG -A logdrop-558 -j DROP +-A logdrop-559 -m limit --limit 1/second -j LOG -A logdrop-559 -j DROP -A logdrop-56 -m limit --limit 1/second -j LOG -A logdrop-56 -j DROP +-A logdrop-560 -m limit --limit 1/second -j LOG -A logdrop-560 -j DROP +-A logdrop-561 -m limit --limit 1/second -j LOG -A logdrop-561 -j DROP +-A logdrop-562 -m limit --limit 1/second -j LOG -A logdrop-562 -j DROP +-A logdrop-563 -m limit --limit 1/second -j LOG -A logdrop-563 -j DROP +-A logdrop-564 -m limit --limit 1/second -j LOG -A logdrop-564 -j DROP +-A logdrop-565 -m limit --limit 1/second -j LOG -A logdrop-565 -j DROP +-A logdrop-566 -m limit --limit 1/second -j LOG -A logdrop-566 -j DROP +-A logdrop-567 -m limit --limit 1/second -j LOG -A logdrop-567 -j DROP +-A logdrop-568 -m limit --limit 1/second -j LOG -A logdrop-568 -j DROP +-A logdrop-569 -m limit --limit 1/second -j LOG -A logdrop-569 -j DROP -A logdrop-57 -m limit --limit 1/second -j LOG -A logdrop-57 -j DROP +-A logdrop-570 -m limit --limit 1/second -j LOG -A logdrop-570 -j DROP +-A logdrop-571 -m limit --limit 1/second -j LOG -A logdrop-571 -j DROP +-A logdrop-572 -m limit --limit 1/second -j LOG -A logdrop-572 -j DROP +-A logdrop-573 -m limit --limit 1/second -j LOG -A logdrop-573 -j DROP +-A logdrop-574 -m limit --limit 1/second -j LOG -A logdrop-574 -j DROP +-A logdrop-575 -m limit --limit 1/second -j LOG -A logdrop-575 -j DROP +-A logdrop-576 -m limit --limit 1/second -j LOG -A logdrop-576 -j DROP +-A logdrop-577 -m limit --limit 1/second -j LOG -A logdrop-577 -j DROP +-A logdrop-578 -m limit --limit 1/second -j LOG -A logdrop-578 -j DROP +-A logdrop-579 -m limit --limit 1/second -j LOG -A logdrop-579 -j DROP -A logdrop-58 -m limit --limit 1/second -j LOG -A logdrop-58 -j DROP +-A logdrop-580 -m limit --limit 1/second -j LOG -A logdrop-580 -j DROP +-A logdrop-581 -m limit --limit 1/second -j LOG -A logdrop-581 -j DROP +-A logdrop-582 -m limit --limit 1/second -j LOG -A logdrop-582 -j DROP +-A logdrop-583 -m limit --limit 1/second -j LOG -A logdrop-583 -j DROP +-A logdrop-584 -m limit --limit 1/second -j LOG -A logdrop-584 -j DROP +-A logdrop-585 -m limit --limit 1/second -j LOG -A logdrop-585 -j DROP +-A logdrop-586 -m limit --limit 1/second -j LOG -A logdrop-586 -j DROP +-A logdrop-587 -m limit --limit 1/second -j LOG -A logdrop-587 -j DROP +-A logdrop-588 -m limit --limit 1/second -j LOG -A logdrop-588 -j DROP +-A logdrop-589 -m limit --limit 1/second -j LOG -A logdrop-589 -j DROP -A logdrop-59 -m limit --limit 1/second -j LOG -A logdrop-59 -j DROP +-A logdrop-590 -m limit --limit 1/second -j LOG -A logdrop-590 -j DROP +-A logdrop-591 -m limit --limit 1/second -j LOG -A logdrop-591 -j DROP -A logdrop-592 -m limit --limit 1/second -j LOG -A logdrop-592 -j DROP @@ -15679,135 +26483,203 @@ -A logdrop-649 -j DROP -A logdrop-65 -m limit --limit 1/second -j LOG -A logdrop-65 -j DROP --A logdrop-650 -m limit --limit 1/second -j LOG +-A logdrop-650 -j TEE --gateway fc00::2 -A logdrop-650 -j DROP --A logdrop-651 -m limit --limit 1/second -j LOG +-A logdrop-651 -j TEE --gateway fc00::2 -A logdrop-651 -j DROP --A logdrop-652 -m limit --limit 1/second -j LOG +-A logdrop-652 -j TEE --gateway fc00::2 -A logdrop-652 -j DROP --A logdrop-653 -m limit --limit 1/second -j LOG +-A logdrop-653 -j TEE --gateway fc00::2 -A logdrop-653 -j DROP --A logdrop-654 -m limit --limit 1/second -j LOG +-A logdrop-654 -j TEE --gateway fc00::2 -A logdrop-654 -j DROP --A logdrop-655 -m limit --limit 1/second -j LOG +-A logdrop-655 -j TEE --gateway fc00::2 -A logdrop-655 -j DROP --A logdrop-656 -m limit --limit 1/second -j LOG +-A logdrop-656 -j TEE --gateway fc00::2 -A logdrop-656 -j DROP --A logdrop-657 -m limit --limit 1/second -j LOG +-A logdrop-657 -j TEE --gateway fc00::2 -A logdrop-657 -j DROP --A logdrop-658 -m limit --limit 1/second -j LOG +-A logdrop-658 -j TEE --gateway fc00::2 -A logdrop-658 -j DROP --A logdrop-659 -m limit --limit 1/second -j LOG +-A logdrop-659 -j TEE --gateway fc00::2 -A logdrop-659 -j DROP -A logdrop-66 -m limit --limit 1/second -j LOG -A logdrop-66 -j DROP --A logdrop-660 -m limit --limit 1/second -j LOG +-A logdrop-660 -j TEE --gateway fc00::2 -A logdrop-660 -j DROP --A logdrop-661 -m limit --limit 1/second -j LOG +-A logdrop-661 -j TEE --gateway fc00::2 -A logdrop-661 -j DROP --A logdrop-662 -m limit --limit 1/second -j LOG +-A logdrop-662 -j TEE --gateway fc00::2 -A logdrop-662 -j DROP --A logdrop-663 -m limit --limit 1/second -j LOG +-A logdrop-663 -j TEE --gateway fc00::2 -A logdrop-663 -j DROP --A logdrop-664 -m limit --limit 1/second -j LOG +-A logdrop-664 -j TEE --gateway fc00::2 -A logdrop-664 -j DROP --A logdrop-665 -m limit --limit 1/second -j LOG +-A logdrop-665 -j TEE --gateway fc00::2 -A logdrop-665 -j DROP --A logdrop-666 -m limit --limit 1/second -j LOG +-A logdrop-666 -j TEE --gateway fc00::2 -A logdrop-666 -j DROP --A logdrop-667 -m limit --limit 1/second -j LOG +-A logdrop-667 -j TEE --gateway fc00::2 -A logdrop-667 -j DROP --A logdrop-668 -m limit --limit 1/second -j LOG +-A logdrop-668 -j TEE --gateway fc00::2 -A logdrop-668 -j DROP --A logdrop-669 -m limit --limit 1/second -j LOG +-A logdrop-669 -j TEE --gateway fc00::2 -A logdrop-669 -j DROP -A logdrop-67 -m limit --limit 1/second -j LOG -A logdrop-67 -j DROP --A logdrop-670 -m limit --limit 1/second -j LOG +-A logdrop-670 -j TEE --gateway fc00::2 -A logdrop-670 -j DROP --A logdrop-671 -m limit --limit 1/second -j LOG +-A logdrop-671 -j TEE --gateway fc00::2 -A logdrop-671 -j DROP +-A logdrop-672 -j TEE --gateway fc00::2 -A logdrop-672 -j DROP +-A logdrop-673 -j TEE --gateway fc00::2 -A logdrop-673 -j DROP +-A logdrop-674 -j TEE --gateway fc00::2 -A logdrop-674 -j DROP +-A logdrop-675 -j TEE --gateway fc00::2 -A logdrop-675 -j DROP +-A logdrop-676 -j TEE --gateway fc00::2 -A logdrop-676 -j DROP +-A logdrop-677 -j TEE --gateway fc00::2 -A logdrop-677 -j DROP +-A logdrop-678 -j TEE --gateway fc00::2 -A logdrop-678 -j DROP +-A logdrop-679 -j TEE --gateway fc00::2 -A logdrop-679 -j DROP -A logdrop-68 -m limit --limit 1/second -j LOG -A logdrop-68 -j DROP +-A logdrop-680 -j TEE --gateway fc00::2 -A logdrop-680 -j DROP +-A logdrop-681 -j TEE --gateway fc00::2 -A logdrop-681 -j DROP +-A logdrop-682 -j TEE --gateway fc00::2 -A logdrop-682 -j DROP +-A logdrop-683 -j TEE --gateway fc00::2 -A logdrop-683 -j DROP +-A logdrop-684 -j TEE --gateway fc00::2 -A logdrop-684 -j DROP +-A logdrop-685 -j TEE --gateway fc00::2 -A logdrop-685 -j DROP +-A logdrop-686 -j TEE --gateway fc00::2 -A logdrop-686 -j DROP +-A logdrop-687 -j TEE --gateway fc00::2 -A logdrop-687 -j DROP +-A logdrop-688 -j TEE --gateway fc00::2 -A logdrop-688 -j DROP +-A logdrop-689 -j TEE --gateway fc00::2 -A logdrop-689 -j DROP -A logdrop-69 -m limit --limit 1/second -j LOG -A logdrop-69 -j DROP +-A logdrop-690 -j TEE --gateway fc00::2 -A logdrop-690 -j DROP +-A logdrop-691 -j TEE --gateway fc00::2 -A logdrop-691 -j DROP +-A logdrop-692 -j TEE --gateway fc00::2 -A logdrop-692 -j DROP +-A logdrop-693 -j TEE --gateway fc00::2 -A logdrop-693 -j DROP +-A logdrop-694 -j TEE --gateway fc00::2 -A logdrop-694 -j DROP +-A logdrop-695 -j TEE --gateway fc00::2 -A logdrop-695 -j DROP +-A logdrop-696 -j TEE --gateway fc00::2 -A logdrop-696 -j DROP +-A logdrop-697 -j TEE --gateway fc00::2 -A logdrop-697 -j DROP +-A logdrop-698 -j TEE --gateway fc00::2 -A logdrop-698 -j DROP +-A logdrop-699 -j TEE --gateway fc00::2 -A logdrop-699 -j DROP -A logdrop-7 -m limit --limit 1/second -j LOG -A logdrop-7 -j DROP -A logdrop-70 -m limit --limit 1/second -j LOG -A logdrop-70 -j DROP +-A logdrop-700 -j TEE --gateway fc00::2 -A logdrop-700 -j DROP +-A logdrop-701 -j TEE --gateway fc00::2 -A logdrop-701 -j DROP +-A logdrop-702 -j TEE --gateway fc00::2 -A logdrop-702 -j DROP +-A logdrop-703 -j TEE --gateway fc00::2 -A logdrop-703 -j DROP +-A logdrop-704 -j TEE --gateway fc00::2 -A logdrop-704 -j DROP +-A logdrop-705 -j TEE --gateway fc00::2 -A logdrop-705 -j DROP +-A logdrop-706 -j TEE --gateway fc00::2 -A logdrop-706 -j DROP +-A logdrop-707 -j TEE --gateway fc00::2 -A logdrop-707 -j DROP +-A logdrop-708 -j TEE --gateway fc00::2 -A logdrop-708 -j DROP +-A logdrop-709 -j TEE --gateway fc00::2 -A logdrop-709 -j DROP -A logdrop-71 -m limit --limit 1/second -j LOG -A logdrop-71 -j DROP +-A logdrop-710 -j TEE --gateway fc00::2 -A logdrop-710 -j DROP +-A logdrop-711 -j TEE --gateway fc00::2 -A logdrop-711 -j DROP +-A logdrop-712 -j TEE --gateway fc00::2 -A logdrop-712 -j DROP +-A logdrop-713 -j TEE --gateway fc00::2 -A logdrop-713 -j DROP +-A logdrop-714 -j TEE --gateway fc00::2 -A logdrop-714 -j DROP +-A logdrop-715 -j TEE --gateway fc00::2 -A logdrop-715 -j DROP +-A logdrop-716 -j TEE --gateway fc00::2 -A logdrop-716 -j DROP +-A logdrop-717 -j TEE --gateway fc00::2 -A logdrop-717 -j DROP +-A logdrop-718 -j TEE --gateway fc00::2 -A logdrop-718 -j DROP +-A logdrop-719 -j TEE --gateway fc00::2 -A logdrop-719 -j DROP -A logdrop-72 -m limit --limit 1/second -j LOG -A logdrop-72 -j DROP +-A logdrop-720 -j TEE --gateway fc00::2 -A logdrop-720 -j DROP +-A logdrop-721 -j TEE --gateway fc00::2 -A logdrop-721 -j DROP +-A logdrop-722 -j TEE --gateway fc00::2 -A logdrop-722 -j DROP +-A logdrop-723 -j TEE --gateway fc00::2 -A logdrop-723 -j DROP +-A logdrop-724 -j TEE --gateway fc00::2 -A logdrop-724 -j DROP +-A logdrop-725 -j TEE --gateway fc00::2 -A logdrop-725 -j DROP +-A logdrop-726 -j TEE --gateway fc00::2 -A logdrop-726 -j DROP +-A logdrop-727 -j TEE --gateway fc00::2 -A logdrop-727 -j DROP +-A logdrop-728 -j TEE --gateway fc00::2 -A logdrop-728 -j DROP +-A logdrop-729 -j TEE --gateway fc00::2 -A logdrop-729 -j DROP -A logdrop-73 -m limit --limit 1/second -j LOG -A logdrop-73 -j DROP +-A logdrop-730 -j TEE --gateway fc00::2 -A logdrop-730 -j DROP +-A logdrop-731 -j TEE --gateway fc00::2 -A logdrop-731 -j DROP +-A logdrop-732 -j TEE --gateway fc00::2 -A logdrop-732 -j DROP +-A logdrop-733 -j TEE --gateway fc00::2 -A logdrop-733 -j DROP +-A logdrop-734 -j TEE --gateway fc00::2 -A logdrop-734 -j DROP +-A logdrop-735 -j TEE --gateway fc00::2 -A logdrop-735 -j DROP +-A logdrop-736 -j TEE --gateway fc00::2 -A logdrop-736 -j DROP +-A logdrop-737 -j TEE --gateway fc00::2 -A logdrop-737 -j DROP +-A logdrop-738 -j TEE --gateway fc00::2 -A logdrop-738 -j DROP +-A logdrop-739 -j TEE --gateway fc00::2 -A logdrop-739 -j DROP -A logdrop-74 -m limit --limit 1/second -j LOG -A logdrop-74 -j DROP @@ -15815,168 +26687,99 @@ -A logdrop-741 -j DROP -A logdrop-742 -j DROP -A logdrop-743 -j DROP --A logdrop-744 -m limit --limit 1/second -j LOG -A logdrop-744 -j DROP --A logdrop-745 -m limit --limit 1/second -j LOG -A logdrop-745 -j DROP --A logdrop-746 -m limit --limit 1/second -j LOG -A logdrop-746 -j DROP --A logdrop-747 -m limit --limit 1/second -j LOG -A logdrop-747 -j DROP --A logdrop-748 -m limit --limit 1/second -j LOG -A logdrop-748 -j DROP --A logdrop-749 -m limit --limit 1/second -j LOG -A logdrop-749 -j DROP -A logdrop-75 -m limit --limit 1/second -j LOG -A logdrop-75 -j DROP --A logdrop-750 -m limit --limit 1/second -j LOG -A logdrop-750 -j DROP --A logdrop-751 -m limit --limit 1/second -j LOG -A logdrop-751 -j DROP --A logdrop-752 -m limit --limit 1/second -j LOG -A logdrop-752 -j DROP --A logdrop-753 -m limit --limit 1/second -j LOG -A logdrop-753 -j DROP --A logdrop-754 -m limit --limit 1/second -j LOG -A logdrop-754 -j DROP --A logdrop-755 -m limit --limit 1/second -j LOG -A logdrop-755 -j DROP --A logdrop-756 -m limit --limit 1/second -j LOG -A logdrop-756 -j DROP --A logdrop-757 -m limit --limit 1/second -j LOG -A logdrop-757 -j DROP --A logdrop-758 -m limit --limit 1/second -j LOG -A logdrop-758 -j DROP --A logdrop-759 -m limit --limit 1/second -j LOG -A logdrop-759 -j DROP -A logdrop-76 -m limit --limit 1/second -j LOG -A logdrop-76 -j DROP --A logdrop-760 -m limit --limit 1/second -j LOG -A logdrop-760 -j DROP --A logdrop-761 -m limit --limit 1/second -j LOG -A logdrop-761 -j DROP --A logdrop-762 -m limit --limit 1/second -j LOG -A logdrop-762 -j DROP --A logdrop-763 -m limit --limit 1/second -j LOG -A logdrop-763 -j DROP --A logdrop-764 -m limit --limit 1/second -j LOG -A logdrop-764 -j DROP --A logdrop-765 -m limit --limit 1/second -j LOG -A logdrop-765 -j DROP --A logdrop-766 -m limit --limit 1/second -j LOG -A logdrop-766 -j DROP --A logdrop-767 -m limit --limit 1/second -j LOG -A logdrop-767 -j DROP --A logdrop-768 -m limit --limit 1/second -j LOG -A logdrop-768 -j DROP --A logdrop-769 -m limit --limit 1/second -j LOG -A logdrop-769 -j DROP -A logdrop-77 -m limit --limit 1/second -j LOG -A logdrop-77 -j DROP --A logdrop-770 -m limit --limit 1/second -j LOG -A logdrop-770 -j DROP --A logdrop-771 -m limit --limit 1/second -j LOG -A logdrop-771 -j DROP --A logdrop-772 -m limit --limit 1/second -j LOG -A logdrop-772 -j DROP --A logdrop-773 -m limit --limit 1/second -j LOG -A logdrop-773 -j DROP --A logdrop-774 -m limit --limit 1/second -j LOG -A logdrop-774 -j DROP --A logdrop-775 -m limit --limit 1/second -j LOG -A logdrop-775 -j DROP --A logdrop-776 -m limit --limit 1/second -j LOG -A logdrop-776 -j DROP --A logdrop-777 -m limit --limit 1/second -j LOG -A logdrop-777 -j DROP --A logdrop-778 -m limit --limit 1/second -j LOG -A logdrop-778 -j DROP --A logdrop-779 -m limit --limit 1/second -j LOG -A logdrop-779 -j DROP -A logdrop-78 -m limit --limit 1/second -j LOG -A logdrop-78 -j DROP --A logdrop-780 -m limit --limit 1/second -j LOG -A logdrop-780 -j DROP --A logdrop-781 -m limit --limit 1/second -j LOG -A logdrop-781 -j DROP --A logdrop-782 -m limit --limit 1/second -j LOG -A logdrop-782 -j DROP --A logdrop-783 -m limit --limit 1/second -j LOG -A logdrop-783 -j DROP --A logdrop-784 -m limit --limit 1/second -j LOG -A logdrop-784 -j DROP --A logdrop-785 -m limit --limit 1/second -j LOG -A logdrop-785 -j DROP --A logdrop-786 -m limit --limit 1/second -j LOG -A logdrop-786 -j DROP --A logdrop-787 -m limit --limit 1/second -j LOG -A logdrop-787 -j DROP --A logdrop-788 -m limit --limit 1/second -j LOG -A logdrop-788 -j DROP --A logdrop-789 -m limit --limit 1/second -j LOG -A logdrop-789 -j DROP -A logdrop-79 -m limit --limit 1/second -j LOG -A logdrop-79 -j DROP --A logdrop-790 -m limit --limit 1/second -j LOG -A logdrop-790 -j DROP --A logdrop-791 -m limit --limit 1/second -j LOG -A logdrop-791 -j DROP --A logdrop-792 -m limit --limit 1/second -j LOG -A logdrop-792 -j DROP --A logdrop-793 -m limit --limit 1/second -j LOG -A logdrop-793 -j DROP --A logdrop-794 -m limit --limit 1/second -j LOG -A logdrop-794 -j DROP --A logdrop-795 -m limit --limit 1/second -j LOG -A logdrop-795 -j DROP --A logdrop-796 -m limit --limit 1/second -j LOG -A logdrop-796 -j DROP --A logdrop-797 -m limit --limit 1/second -j LOG -A logdrop-797 -j DROP --A logdrop-798 -m limit --limit 1/second -j LOG -A logdrop-798 -j DROP --A logdrop-799 -m limit --limit 1/second -j LOG -A logdrop-799 -j DROP -A logdrop-8 -m limit --limit 1/second -j LOG -A logdrop-8 -j DROP +-A logdrop-80 -m limit --limit 1/second -j LOG -A logdrop-80 -j DROP --A logdrop-800 -m limit --limit 1/second -j LOG -A logdrop-800 -j DROP --A logdrop-801 -m limit --limit 1/second -j LOG -A logdrop-801 -j DROP --A logdrop-802 -m limit --limit 1/second -j LOG -A logdrop-802 -j DROP --A logdrop-803 -m limit --limit 1/second -j LOG -A logdrop-803 -j DROP --A logdrop-804 -m limit --limit 1/second -j LOG -A logdrop-804 -j DROP --A logdrop-805 -m limit --limit 1/second -j LOG -A logdrop-805 -j DROP --A logdrop-806 -m limit --limit 1/second -j LOG -A logdrop-806 -j DROP --A logdrop-807 -m limit --limit 1/second -j LOG -A logdrop-807 -j DROP --A logdrop-808 -m limit --limit 1/second -j LOG -A logdrop-808 -j DROP --A logdrop-809 -m limit --limit 1/second -j LOG -A logdrop-809 -j DROP +-A logdrop-81 -m limit --limit 1/second -j LOG -A logdrop-81 -j DROP --A logdrop-810 -m limit --limit 1/second -j LOG -A logdrop-810 -j DROP --A logdrop-811 -m limit --limit 1/second -j LOG -A logdrop-811 -j DROP --A logdrop-812 -m limit --limit 1/second -j LOG -A logdrop-812 -j DROP --A logdrop-813 -m limit --limit 1/second -j LOG -A logdrop-813 -j DROP --A logdrop-814 -m limit --limit 1/second -j LOG -A logdrop-814 -j DROP --A logdrop-815 -m limit --limit 1/second -j LOG -A logdrop-815 -j DROP -A logdrop-816 -j DROP -A logdrop-817 -j DROP -A logdrop-818 -j DROP -A logdrop-819 -j DROP +-A logdrop-82 -m limit --limit 1/second -j LOG -A logdrop-82 -j DROP -A logdrop-820 -j DROP -A logdrop-821 -j DROP @@ -15988,74 +26791,139 @@ -A logdrop-827 -j DROP -A logdrop-828 -j DROP -A logdrop-829 -j DROP +-A logdrop-83 -m limit --limit 1/second -j LOG -A logdrop-83 -j DROP +-A logdrop-830 -m limit --limit 1/second -j LOG -A logdrop-830 -j DROP +-A logdrop-831 -m limit --limit 1/second -j LOG -A logdrop-831 -j DROP +-A logdrop-832 -m limit --limit 1/second -j LOG -A logdrop-832 -j DROP +-A logdrop-833 -m limit --limit 1/second -j LOG -A logdrop-833 -j DROP +-A logdrop-834 -m limit --limit 1/second -j LOG -A logdrop-834 -j DROP +-A logdrop-835 -m limit --limit 1/second -j LOG -A logdrop-835 -j DROP +-A logdrop-836 -m limit --limit 1/second -j LOG -A logdrop-836 -j DROP +-A logdrop-837 -m limit --limit 1/second -j LOG -A logdrop-837 -j DROP +-A logdrop-838 -m limit --limit 1/second -j LOG -A logdrop-838 -j DROP +-A logdrop-839 -m limit --limit 1/second -j LOG -A logdrop-839 -j DROP +-A logdrop-84 -m limit --limit 1/second -j LOG -A logdrop-84 -j DROP +-A logdrop-840 -m limit --limit 1/second -j LOG -A logdrop-840 -j DROP +-A logdrop-841 -m limit --limit 1/second -j LOG -A logdrop-841 -j DROP +-A logdrop-842 -m limit --limit 1/second -j LOG -A logdrop-842 -j DROP +-A logdrop-843 -m limit --limit 1/second -j LOG -A logdrop-843 -j DROP +-A logdrop-844 -m limit --limit 1/second -j LOG -A logdrop-844 -j DROP +-A logdrop-845 -m limit --limit 1/second -j LOG -A logdrop-845 -j DROP +-A logdrop-846 -m limit --limit 1/second -j LOG -A logdrop-846 -j DROP +-A logdrop-847 -m limit --limit 1/second -j LOG -A logdrop-847 -j DROP +-A logdrop-848 -m limit --limit 1/second -j LOG -A logdrop-848 -j DROP +-A logdrop-849 -m limit --limit 1/second -j LOG -A logdrop-849 -j DROP +-A logdrop-85 -m limit --limit 1/second -j LOG -A logdrop-85 -j DROP +-A logdrop-850 -m limit --limit 1/second -j LOG -A logdrop-850 -j DROP +-A logdrop-851 -m limit --limit 1/second -j LOG -A logdrop-851 -j DROP +-A logdrop-852 -m limit --limit 1/second -j LOG -A logdrop-852 -j DROP +-A logdrop-853 -m limit --limit 1/second -j LOG -A logdrop-853 -j DROP +-A logdrop-854 -m limit --limit 1/second -j LOG -A logdrop-854 -j DROP +-A logdrop-855 -m limit --limit 1/second -j LOG -A logdrop-855 -j DROP +-A logdrop-856 -m limit --limit 1/second -j LOG -A logdrop-856 -j DROP +-A logdrop-857 -m limit --limit 1/second -j LOG -A logdrop-857 -j DROP +-A logdrop-858 -m limit --limit 1/second -j LOG -A logdrop-858 -j DROP +-A logdrop-859 -m limit --limit 1/second -j LOG -A logdrop-859 -j DROP +-A logdrop-86 -m limit --limit 1/second -j LOG -A logdrop-86 -j DROP +-A logdrop-860 -m limit --limit 1/second -j LOG -A logdrop-860 -j DROP +-A logdrop-861 -m limit --limit 1/second -j LOG -A logdrop-861 -j DROP +-A logdrop-862 -m limit --limit 1/second -j LOG -A logdrop-862 -j DROP +-A logdrop-863 -m limit --limit 1/second -j LOG -A logdrop-863 -j DROP +-A logdrop-864 -m limit --limit 1/second -j LOG -A logdrop-864 -j DROP +-A logdrop-865 -m limit --limit 1/second -j LOG -A logdrop-865 -j DROP +-A logdrop-866 -m limit --limit 1/second -j LOG -A logdrop-866 -j DROP +-A logdrop-867 -m limit --limit 1/second -j LOG -A logdrop-867 -j DROP +-A logdrop-868 -m limit --limit 1/second -j LOG -A logdrop-868 -j DROP +-A logdrop-869 -m limit --limit 1/second -j LOG -A logdrop-869 -j DROP +-A logdrop-87 -m limit --limit 1/second -j LOG -A logdrop-87 -j DROP +-A logdrop-870 -m limit --limit 1/second -j LOG -A logdrop-870 -j DROP +-A logdrop-871 -m limit --limit 1/second -j LOG -A logdrop-871 -j DROP +-A logdrop-872 -m limit --limit 1/second -j LOG -A logdrop-872 -j DROP +-A logdrop-873 -m limit --limit 1/second -j LOG -A logdrop-873 -j DROP +-A logdrop-874 -m limit --limit 1/second -j LOG -A logdrop-874 -j DROP +-A logdrop-875 -m limit --limit 1/second -j LOG -A logdrop-875 -j DROP +-A logdrop-876 -m limit --limit 1/second -j LOG -A logdrop-876 -j DROP +-A logdrop-877 -m limit --limit 1/second -j LOG -A logdrop-877 -j DROP +-A logdrop-878 -m limit --limit 1/second -j LOG -A logdrop-878 -j DROP +-A logdrop-879 -m limit --limit 1/second -j LOG -A logdrop-879 -j DROP +-A logdrop-88 -m limit --limit 1/second -j LOG -A logdrop-88 -j DROP +-A logdrop-880 -m limit --limit 1/second -j LOG -A logdrop-880 -j DROP +-A logdrop-881 -m limit --limit 1/second -j LOG -A logdrop-881 -j DROP +-A logdrop-882 -m limit --limit 1/second -j LOG -A logdrop-882 -j DROP +-A logdrop-883 -m limit --limit 1/second -j LOG -A logdrop-883 -j DROP +-A logdrop-884 -m limit --limit 1/second -j LOG -A logdrop-884 -j DROP +-A logdrop-885 -m limit --limit 1/second -j LOG -A logdrop-885 -j DROP +-A logdrop-886 -m limit --limit 1/second -j LOG -A logdrop-886 -j DROP +-A logdrop-887 -m limit --limit 1/second -j LOG -A logdrop-887 -j DROP -A logdrop-888 -m limit --limit 1/second -j LOG -A logdrop-888 -j DROP -A logdrop-889 -m limit --limit 1/second -j LOG -A logdrop-889 -j DROP +-A logdrop-89 -m limit --limit 1/second -j LOG -A logdrop-89 -j DROP -A logdrop-890 -m limit --limit 1/second -j LOG -A logdrop-890 -j DROP @@ -16079,6 +26947,7 @@ -A logdrop-899 -j DROP -A logdrop-9 -m limit --limit 1/second -j LOG -A logdrop-9 -j DROP +-A logdrop-90 -m limit --limit 1/second -j LOG -A logdrop-90 -j DROP -A logdrop-900 -m limit --limit 1/second -j LOG -A logdrop-900 -j DROP @@ -16100,6 +26969,7 @@ -A logdrop-908 -j DROP -A logdrop-909 -m limit --limit 1/second -j LOG -A logdrop-909 -j DROP +-A logdrop-91 -m limit --limit 1/second -j LOG -A logdrop-91 -j DROP -A logdrop-910 -m limit --limit 1/second -j LOG -A logdrop-910 -j DROP @@ -16121,143 +26991,186 @@ -A logdrop-918 -j DROP -A logdrop-919 -m limit --limit 1/second -j LOG -A logdrop-919 -j DROP +-A logdrop-92 -m limit --limit 1/second -j LOG -A logdrop-92 -j DROP --A logdrop-920 -m limit --limit 1/second -j LOG +-A logdrop-920 -j TEE --gateway fc00::2 -A logdrop-920 -j DROP --A logdrop-921 -m limit --limit 1/second -j LOG +-A logdrop-921 -j TEE --gateway fc00::2 -A logdrop-921 -j DROP --A logdrop-922 -m limit --limit 1/second -j LOG +-A logdrop-922 -j TEE --gateway fc00::2 -A logdrop-922 -j DROP --A logdrop-923 -m limit --limit 1/second -j LOG +-A logdrop-923 -j TEE --gateway fc00::2 -A logdrop-923 -j DROP --A logdrop-924 -m limit --limit 1/second -j LOG +-A logdrop-924 -j TEE --gateway fc00::2 -A logdrop-924 -j DROP --A logdrop-925 -m limit --limit 1/second -j LOG +-A logdrop-925 -j TEE --gateway fc00::2 -A logdrop-925 -j DROP --A logdrop-926 -m limit --limit 1/second -j LOG +-A logdrop-926 -j TEE --gateway fc00::2 -A logdrop-926 -j DROP --A logdrop-927 -m limit --limit 1/second -j LOG +-A logdrop-927 -j TEE --gateway fc00::2 -A logdrop-927 -j DROP --A logdrop-928 -m limit --limit 1/second -j LOG +-A logdrop-928 -j TEE --gateway fc00::2 -A logdrop-928 -j DROP --A logdrop-929 -m limit --limit 1/second -j LOG +-A logdrop-929 -j TEE --gateway fc00::2 -A logdrop-929 -j DROP +-A logdrop-93 -m limit --limit 1/second -j LOG -A logdrop-93 -j DROP --A logdrop-930 -m limit --limit 1/second -j LOG +-A logdrop-930 -j TEE --gateway fc00::2 -A logdrop-930 -j DROP --A logdrop-931 -m limit --limit 1/second -j LOG +-A logdrop-931 -j TEE --gateway fc00::2 -A logdrop-931 -j DROP --A logdrop-932 -m limit --limit 1/second -j LOG +-A logdrop-932 -j TEE --gateway fc00::2 -A logdrop-932 -j DROP --A logdrop-933 -m limit --limit 1/second -j LOG +-A logdrop-933 -j TEE --gateway fc00::2 -A logdrop-933 -j DROP --A logdrop-934 -m limit --limit 1/second -j LOG +-A logdrop-934 -j TEE --gateway fc00::2 -A logdrop-934 -j DROP --A logdrop-935 -m limit --limit 1/second -j LOG +-A logdrop-935 -j TEE --gateway fc00::2 -A logdrop-935 -j DROP --A logdrop-936 -m limit --limit 1/second -j LOG +-A logdrop-936 -j TEE --gateway fc00::2 -A logdrop-936 -j DROP --A logdrop-937 -m limit --limit 1/second -j LOG +-A logdrop-937 -j TEE --gateway fc00::2 -A logdrop-937 -j DROP --A logdrop-938 -m limit --limit 1/second -j LOG +-A logdrop-938 -j TEE --gateway fc00::2 -A logdrop-938 -j DROP --A logdrop-939 -m limit --limit 1/second -j LOG +-A logdrop-939 -j TEE --gateway fc00::2 -A logdrop-939 -j DROP +-A logdrop-94 -m limit --limit 1/second -j LOG -A logdrop-94 -j DROP --A logdrop-940 -m limit --limit 1/second -j LOG +-A logdrop-940 -j TEE --gateway fc00::2 -A logdrop-940 -j DROP --A logdrop-941 -m limit --limit 1/second -j LOG +-A logdrop-941 -j TEE --gateway fc00::2 -A logdrop-941 -j DROP --A logdrop-942 -m limit --limit 1/second -j LOG +-A logdrop-942 -j TEE --gateway fc00::2 -A logdrop-942 -j DROP --A logdrop-943 -m limit --limit 1/second -j LOG +-A logdrop-943 -j TEE --gateway fc00::2 -A logdrop-943 -j DROP --A logdrop-944 -m limit --limit 1/second -j LOG +-A logdrop-944 -j TEE --gateway fc00::2 -A logdrop-944 -j DROP --A logdrop-945 -m limit --limit 1/second -j LOG +-A logdrop-945 -j TEE --gateway fc00::2 -A logdrop-945 -j DROP --A logdrop-946 -m limit --limit 1/second -j LOG +-A logdrop-946 -j TEE --gateway fc00::2 -A logdrop-946 -j DROP --A logdrop-947 -m limit --limit 1/second -j LOG +-A logdrop-947 -j TEE --gateway fc00::2 -A logdrop-947 -j DROP --A logdrop-948 -m limit --limit 1/second -j LOG +-A logdrop-948 -j TEE --gateway fc00::2 -A logdrop-948 -j DROP --A logdrop-949 -m limit --limit 1/second -j LOG +-A logdrop-949 -j TEE --gateway fc00::2 -A logdrop-949 -j DROP +-A logdrop-95 -m limit --limit 1/second -j LOG -A logdrop-95 -j DROP --A logdrop-950 -m limit --limit 1/second -j LOG +-A logdrop-950 -j TEE --gateway fc00::2 -A logdrop-950 -j DROP --A logdrop-951 -m limit --limit 1/second -j LOG +-A logdrop-951 -j TEE --gateway fc00::2 -A logdrop-951 -j DROP --A logdrop-952 -m limit --limit 1/second -j LOG +-A logdrop-952 -j TEE --gateway fc00::2 -A logdrop-952 -j DROP --A logdrop-953 -m limit --limit 1/second -j LOG +-A logdrop-953 -j TEE --gateway fc00::2 -A logdrop-953 -j DROP --A logdrop-954 -m limit --limit 1/second -j LOG +-A logdrop-954 -j TEE --gateway fc00::2 -A logdrop-954 -j DROP --A logdrop-955 -m limit --limit 1/second -j LOG +-A logdrop-955 -j TEE --gateway fc00::2 -A logdrop-955 -j DROP --A logdrop-956 -m limit --limit 1/second -j LOG +-A logdrop-956 -j TEE --gateway fc00::2 -A logdrop-956 -j DROP --A logdrop-957 -m limit --limit 1/second -j LOG +-A logdrop-957 -j TEE --gateway fc00::2 -A logdrop-957 -j DROP --A logdrop-958 -m limit --limit 1/second -j LOG +-A logdrop-958 -j TEE --gateway fc00::2 -A logdrop-958 -j DROP --A logdrop-959 -m limit --limit 1/second -j LOG +-A logdrop-959 -j TEE --gateway fc00::2 -A logdrop-959 -j DROP +-A logdrop-96 -m limit --limit 1/second -j LOG -A logdrop-96 -j DROP --A logdrop-960 -m limit --limit 1/second -j LOG +-A logdrop-960 -j TEE --gateway fc00::2 -A logdrop-960 -j DROP --A logdrop-961 -m limit --limit 1/second -j LOG +-A logdrop-961 -j TEE --gateway fc00::2 -A logdrop-961 -j DROP --A logdrop-962 -m limit --limit 1/second -j LOG +-A logdrop-962 -j TEE --gateway fc00::2 -A logdrop-962 -j DROP --A logdrop-963 -m limit --limit 1/second -j LOG +-A logdrop-963 -j TEE --gateway fc00::2 -A logdrop-963 -j DROP --A logdrop-964 -m limit --limit 1/second -j LOG +-A logdrop-964 -j TEE --gateway fc00::2 -A logdrop-964 -j DROP --A logdrop-965 -m limit --limit 1/second -j LOG +-A logdrop-965 -j TEE --gateway fc00::2 -A logdrop-965 -j DROP --A logdrop-966 -m limit --limit 1/second -j LOG +-A logdrop-966 -j TEE --gateway fc00::2 -A logdrop-966 -j DROP --A logdrop-967 -m limit --limit 1/second -j LOG +-A logdrop-967 -j TEE --gateway fc00::2 -A logdrop-967 -j DROP +-A logdrop-968 -j TEE --gateway fc00::2 -A logdrop-968 -j DROP +-A logdrop-969 -j TEE --gateway fc00::2 -A logdrop-969 -j DROP +-A logdrop-97 -m limit --limit 1/second -j LOG -A logdrop-97 -j DROP +-A logdrop-970 -j TEE --gateway fc00::2 -A logdrop-970 -j DROP +-A logdrop-971 -j TEE --gateway fc00::2 -A logdrop-971 -j DROP +-A logdrop-972 -j TEE --gateway fc00::2 -A logdrop-972 -j DROP +-A logdrop-973 -j TEE --gateway fc00::2 -A logdrop-973 -j DROP +-A logdrop-974 -j TEE --gateway fc00::2 -A logdrop-974 -j DROP +-A logdrop-975 -j TEE --gateway fc00::2 -A logdrop-975 -j DROP +-A logdrop-976 -j TEE --gateway fc00::2 -A logdrop-976 -j DROP +-A logdrop-977 -j TEE --gateway fc00::2 -A logdrop-977 -j DROP +-A logdrop-978 -j TEE --gateway fc00::2 -A logdrop-978 -j DROP +-A logdrop-979 -j TEE --gateway fc00::2 -A logdrop-979 -j DROP +-A logdrop-98 -m limit --limit 1/second -j LOG -A logdrop-98 -j DROP +-A logdrop-980 -j TEE --gateway fc00::2 -A logdrop-980 -j DROP +-A logdrop-981 -j TEE --gateway fc00::2 -A logdrop-981 -j DROP +-A logdrop-982 -j TEE --gateway fc00::2 -A logdrop-982 -j DROP +-A logdrop-983 -j TEE --gateway fc00::2 -A logdrop-983 -j DROP +-A logdrop-984 -j TEE --gateway fc00::2 -A logdrop-984 -j DROP +-A logdrop-985 -j TEE --gateway fc00::2 -A logdrop-985 -j DROP +-A logdrop-986 -j TEE --gateway fc00::2 -A logdrop-986 -j DROP +-A logdrop-987 -j TEE --gateway fc00::2 -A logdrop-987 -j DROP +-A logdrop-988 -j TEE --gateway fc00::2 -A logdrop-988 -j DROP +-A logdrop-989 -j TEE --gateway fc00::2 -A logdrop-989 -j DROP +-A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP +-A logdrop-990 -j TEE --gateway fc00::2 -A logdrop-990 -j DROP +-A logdrop-991 -j TEE --gateway fc00::2 -A logdrop-991 -j DROP +-A logdrop-992 -j TEE --gateway fc00::2 -A logdrop-992 -j DROP +-A logdrop-993 -j TEE --gateway fc00::2 -A logdrop-993 -j DROP +-A logdrop-994 -j TEE --gateway fc00::2 -A logdrop-994 -j DROP +-A logdrop-995 -j TEE --gateway fc00::2 -A logdrop-995 -j DROP +-A logdrop-996 -j TEE --gateway fc00::2 -A logdrop-996 -j DROP +-A logdrop-997 -j TEE --gateway fc00::2 -A logdrop-997 -j DROP +-A logdrop-998 -j TEE --gateway fc00::2 -A logdrop-998 -j DROP +-A logdrop-999 -j TEE --gateway fc00::2 -A logdrop-999 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -j LOG +-A logpass-1 -j TEE --gateway fc00::1 +-A logpass-2 -j TEE --gateway fc00::2 COMMIT *mangle :INPUT ACCEPT [0:0] @@ -16600,6 +27513,188 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17230,6 +28325,353 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack diff --git a/test/output/filter/dump b/test/output/filter/dump index 87ed7ae..e1466f3 100644 --- a/test/output/filter/dump +++ b/test/output/filter/dump @@ -173,7 +173,87 @@ Filter 15 {"action":"pass","log":true} inet6/filter/OUTPUT -j logpass-0 inet6/filter/logpass-0 -m limit --limit 1/second -j LOG -Filter 16 {"log":"none"} +Filter 16 {"log":"dual"} +(log) + inet/filter/FORWARD -j logaccept-1 + inet/filter/INPUT -j logaccept-1 + inet/filter/OUTPUT -j logaccept-1 + inet/filter/logaccept-1 -j LOG + inet/filter/logaccept-1 -j ACCEPT + inet6/filter/FORWARD -j logaccept-1 + inet6/filter/INPUT -j logaccept-1 + inet6/filter/OUTPUT -j logaccept-1 + inet6/filter/logaccept-1 -j LOG + inet6/filter/logaccept-1 -j TEE --gateway fc00::1 + inet6/filter/logaccept-1 -j ACCEPT + +Filter 17 {"action":"drop","log":"dual"} +(log) + inet/filter/FORWARD -j logdrop-3 + inet/filter/INPUT -j logdrop-3 + inet/filter/OUTPUT -j logdrop-3 + inet/filter/logdrop-3 -j LOG + inet/filter/logdrop-3 -j DROP + inet6/filter/FORWARD -j logdrop-3 + inet6/filter/INPUT -j logdrop-3 + inet6/filter/OUTPUT -j logdrop-3 + inet6/filter/logdrop-3 -j LOG + inet6/filter/logdrop-3 -j TEE --gateway fc00::1 + inet6/filter/logdrop-3 -j DROP + +Filter 18 {"action":"pass","log":"dual"} +(log) + inet/filter/FORWARD -j logpass-1 + inet/filter/INPUT -j logpass-1 + inet/filter/OUTPUT -j logpass-1 + inet/filter/logpass-1 -j LOG + inet6/filter/FORWARD -j logpass-1 + inet6/filter/INPUT -j logpass-1 + inet6/filter/OUTPUT -j logpass-1 + inet6/filter/logpass-1 -j LOG + inet6/filter/logpass-1 -j TEE --gateway fc00::1 + +Filter 19 {"log":"mirror"} +(log) + inet/filter/FORWARD -j logaccept-2 + inet/filter/INPUT -j logaccept-2 + inet/filter/OUTPUT -j logaccept-2 + inet/filter/logaccept-2 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-2 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-2 -j ACCEPT + inet6/filter/FORWARD -j logaccept-2 + inet6/filter/INPUT -j logaccept-2 + inet6/filter/OUTPUT -j logaccept-2 + inet6/filter/logaccept-2 -j TEE --gateway fc00::2 + inet6/filter/logaccept-2 -j ACCEPT + +Filter 20 {"action":"drop","log":"mirror"} +(log) + inet/filter/FORWARD -j logdrop-4 + inet/filter/INPUT -j logdrop-4 + inet/filter/OUTPUT -j logdrop-4 + inet/filter/logdrop-4 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-4 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-4 -j DROP + inet6/filter/FORWARD -j logdrop-4 + inet6/filter/INPUT -j logdrop-4 + inet6/filter/OUTPUT -j logdrop-4 + inet6/filter/logdrop-4 -j TEE --gateway fc00::2 + inet6/filter/logdrop-4 -j DROP + +Filter 21 {"action":"pass","log":"mirror"} +(log) + inet/filter/FORWARD -j logpass-2 + inet/filter/INPUT -j logpass-2 + inet/filter/OUTPUT -j logpass-2 + inet/filter/logpass-2 -j TEE --gateway 10.0.0.1 + inet/filter/logpass-2 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j logpass-2 + inet6/filter/INPUT -j logpass-2 + inet6/filter/OUTPUT -j logpass-2 + inet6/filter/logpass-2 -j TEE --gateway fc00::2 + +Filter 22 {"log":"none"} (log) inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -182,7 +262,7 @@ Filter 16 {"log":"none"} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 17 {"action":"drop","log":"none"} +Filter 23 {"action":"drop","log":"none"} (log) inet/filter/FORWARD -j DROP inet/filter/INPUT -j DROP @@ -191,7 +271,7 @@ Filter 17 {"action":"drop","log":"none"} inet6/filter/INPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 18 {"action":"pass","log":"none"} +Filter 24 {"action":"pass","log":"none"} (log) inet/filter/FORWARD inet/filter/INPUT @@ -200,42 +280,42 @@ Filter 18 {"action":"pass","log":"none"} inet6/filter/INPUT inet6/filter/OUTPUT -Filter 19 {"log":"ulog"} +Filter 25 {"log":"ulog"} (log) - inet/filter/FORWARD -j logaccept-1 - inet/filter/INPUT -j logaccept-1 - inet/filter/OUTPUT -j logaccept-1 - inet/filter/logaccept-1 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-1 -j ACCEPT - inet6/filter/FORWARD -j logaccept-1 - inet6/filter/INPUT -j logaccept-1 - inet6/filter/OUTPUT -j logaccept-1 - inet6/filter/logaccept-1 -j ACCEPT - -Filter 20 {"action":"drop","log":"ulog"} + inet/filter/FORWARD -j logaccept-3 + inet/filter/INPUT -j logaccept-3 + inet/filter/OUTPUT -j logaccept-3 + inet/filter/logaccept-3 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-3 -j ACCEPT + inet6/filter/FORWARD -j logaccept-3 + inet6/filter/INPUT -j logaccept-3 + inet6/filter/OUTPUT -j logaccept-3 + inet6/filter/logaccept-3 -j ACCEPT + +Filter 26 {"action":"drop","log":"ulog"} (log) - inet/filter/FORWARD -j logdrop-3 - inet/filter/INPUT -j logdrop-3 - inet/filter/OUTPUT -j logdrop-3 - inet/filter/logdrop-3 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-3 -j DROP - inet6/filter/FORWARD -j logdrop-3 - inet6/filter/INPUT -j logdrop-3 - inet6/filter/OUTPUT -j logdrop-3 - inet6/filter/logdrop-3 -j DROP - -Filter 21 {"action":"pass","log":"ulog"} + inet/filter/FORWARD -j logdrop-5 + inet/filter/INPUT -j logdrop-5 + inet/filter/OUTPUT -j logdrop-5 + inet/filter/logdrop-5 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-5 -j DROP + inet6/filter/FORWARD -j logdrop-5 + inet6/filter/INPUT -j logdrop-5 + inet6/filter/OUTPUT -j logdrop-5 + inet6/filter/logdrop-5 -j DROP + +Filter 27 {"action":"pass","log":"ulog"} (log) - inet/filter/FORWARD -j logpass-1 - inet/filter/INPUT -j logpass-1 - inet/filter/OUTPUT -j logpass-1 - inet/filter/logpass-1 -m limit --limit 12/minute -j ULOG + inet/filter/FORWARD -j logpass-3 + inet/filter/INPUT -j logpass-3 + inet/filter/OUTPUT -j logpass-3 + inet/filter/logpass-3 -m limit --limit 12/minute -j ULOG -Filter 22 {"action":"pass","in":"_fw","log":"ulog"} +Filter 28 {"action":"pass","in":"_fw","log":"ulog"} (log) inet/filter/OUTPUT -m limit --limit 12/minute -j ULOG -Filter 23 {"in":["_fw","A"]} +Filter 29 {"in":["_fw","A"]} (zone) inet/filter/FORWARD -i eth0 -j ACCEPT inet/filter/INPUT -i eth0 -j ACCEPT @@ -244,12 +324,12 @@ Filter 23 {"in":["_fw","A"]} inet6/filter/INPUT -i eth0 -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 24 {"in":"B","out":"C"} +Filter 30 {"in":"B","out":"C"} (zone) inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -Filter 25 {"out":["_fw","B"]} +Filter 31 {"out":["_fw","B"]} (zone) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -258,7 +338,7 @@ Filter 25 {"out":["_fw","B"]} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -Filter 26 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +Filter 32 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} (zone) inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT @@ -347,6 +427,12 @@ Limit D {"inet":22,"inet6":58} Log _default {"limit":1} (defaults) +Log dual {"mirror":"fc00::1","mode":"log"} +(log) + +Log mirror {"mirror":["10.0.0.1","10.0.0.2","fc00::2"]} +(log) + Log none {"mode":"none"} (log) @@ -397,7 +483,13 @@ Packet-log 1 {"out":"_fw"} inet/filter/INPUT -m limit --limit 1/second -j LOG inet6/filter/INPUT -m limit --limit 1/second -j LOG -Packet-log 2 {"log":"ulog","out":"_fw"} +Packet-log 2 {"log":"mirror","out":"_fw"} +(log) + inet/filter/INPUT -j TEE --gateway 10.0.0.1 + inet/filter/INPUT -j TEE --gateway 10.0.0.2 + inet6/filter/INPUT -j TEE --gateway fc00::2 + +Packet-log 3 {"log":"ulog","out":"_fw"} (log) inet/filter/INPUT -m limit --limit 12/minute -j ULOG @@ -618,12 +710,18 @@ hash:net family inet :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] :logdrop-3 - [0:0] +:logdrop-4 - [0:0] +:logdrop-5 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] +:logpass-2 - [0:0] +:logpass-3 - [0:0] :logreject-0 - [0:0] :logtarpit-0 - [0:0] :tarpit - [0:0] @@ -643,12 +741,18 @@ hash:net family inet -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-0 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD -A FORWARD -j logaccept-1 -A FORWARD -j logdrop-3 -A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-2 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-5 +-A FORWARD -j logpass-3 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -700,6 +804,8 @@ hash:net family inet -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -718,12 +824,18 @@ hash:net family inet -A INPUT -j logaccept-0 -A INPUT -j logdrop-2 -A INPUT -j logpass-0 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT -A INPUT -j logaccept-1 -A INPUT -j logdrop-3 -A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-2 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-5 +-A INPUT -j logpass-3 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing @@ -744,12 +856,18 @@ hash:net family inet -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-0 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT -A OUTPUT -j logaccept-1 -A OUTPUT -j logdrop-3 -A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-5 +-A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT @@ -759,18 +877,31 @@ hash:net family inet -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 12/minute -j ULOG +-A logaccept-1 -j LOG -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway 10.0.0.1 +-A logaccept-2 -j TEE --gateway 10.0.0.2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -m limit --limit 12/minute -j ULOG +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP --A logdrop-3 -m limit --limit 12/minute -j ULOG +-A logdrop-3 -j LOG -A logdrop-3 -j DROP +-A logdrop-4 -j TEE --gateway 10.0.0.1 +-A logdrop-4 -j TEE --gateway 10.0.0.2 +-A logdrop-4 -j DROP +-A logdrop-5 -m limit --limit 12/minute -j ULOG +-A logdrop-5 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 12/minute -j ULOG +-A logpass-1 -j LOG +-A logpass-2 -j TEE --gateway 10.0.0.1 +-A logpass-2 -j TEE --gateway 10.0.0.2 +-A logpass-3 -m limit --limit 12/minute -j ULOG -A logreject-0 -m limit --limit 1/second -j LOG -A logreject-0 -j REJECT -A logtarpit-0 -m limit --limit 1/second -j LOG @@ -824,11 +955,17 @@ COMMIT :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] :logdrop-3 - [0:0] +:logdrop-4 - [0:0] +:logdrop-5 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-2 - [0:0] :logreject-0 - [0:0] :logtarpit-0 - [0:0] :tarpit - [0:0] @@ -848,11 +985,17 @@ COMMIT -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-1 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-1 --A FORWARD -j logdrop-3 +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-5 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -879,6 +1022,7 @@ COMMIT -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -897,11 +1041,17 @@ COMMIT -A INPUT -j logaccept-0 -A INPUT -j logdrop-2 -A INPUT -j logpass-0 +-A INPUT -j logaccept-1 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-1 --A INPUT -j logdrop-3 +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-5 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -922,11 +1072,17 @@ COMMIT -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-1 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-1 --A OUTPUT -j logdrop-3 +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-5 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -936,15 +1092,28 @@ COMMIT -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -j LOG +-A logaccept-1 -j TEE --gateway fc00::1 -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway fc00::2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP +-A logdrop-3 -j LOG +-A logdrop-3 -j TEE --gateway fc00::1 -A logdrop-3 -j DROP +-A logdrop-4 -j TEE --gateway fc00::2 +-A logdrop-4 -j DROP +-A logdrop-5 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -j LOG +-A logpass-1 -j TEE --gateway fc00::1 +-A logpass-2 -j TEE --gateway fc00::2 -A logreject-0 -m limit --limit 1/second -j LOG -A logreject-0 -j REJECT -A logtarpit-0 -m limit --limit 1/second -j LOG diff --git a/test/output/filter/rules-save b/test/output/filter/rules-save index 4edf399..73a1332 100644 --- a/test/output/filter/rules-save +++ b/test/output/filter/rules-save @@ -6,12 +6,18 @@ :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] :logdrop-3 - [0:0] +:logdrop-4 - [0:0] +:logdrop-5 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] +:logpass-2 - [0:0] +:logpass-3 - [0:0] :logreject-0 - [0:0] :logtarpit-0 - [0:0] :tarpit - [0:0] @@ -31,12 +37,18 @@ -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-0 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD -A FORWARD -j logaccept-1 -A FORWARD -j logdrop-3 -A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-2 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-5 +-A FORWARD -j logpass-3 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -88,6 +100,8 @@ -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -106,12 +120,18 @@ -A INPUT -j logaccept-0 -A INPUT -j logdrop-2 -A INPUT -j logpass-0 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT -A INPUT -j logaccept-1 -A INPUT -j logdrop-3 -A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-2 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-5 +-A INPUT -j logpass-3 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing @@ -132,12 +152,18 @@ -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-0 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT -A OUTPUT -j logaccept-1 -A OUTPUT -j logdrop-3 -A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-5 +-A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT @@ -147,18 +173,31 @@ -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 12/minute -j ULOG +-A logaccept-1 -j LOG -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway 10.0.0.1 +-A logaccept-2 -j TEE --gateway 10.0.0.2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -m limit --limit 12/minute -j ULOG +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP --A logdrop-3 -m limit --limit 12/minute -j ULOG +-A logdrop-3 -j LOG -A logdrop-3 -j DROP +-A logdrop-4 -j TEE --gateway 10.0.0.1 +-A logdrop-4 -j TEE --gateway 10.0.0.2 +-A logdrop-4 -j DROP +-A logdrop-5 -m limit --limit 12/minute -j ULOG +-A logdrop-5 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 12/minute -j ULOG +-A logpass-1 -j LOG +-A logpass-2 -j TEE --gateway 10.0.0.1 +-A logpass-2 -j TEE --gateway 10.0.0.2 +-A logpass-3 -m limit --limit 12/minute -j ULOG -A logreject-0 -m limit --limit 1/second -j LOG -A logreject-0 -j REJECT -A logtarpit-0 -m limit --limit 1/second -j LOG diff --git a/test/output/filter/rules6-save b/test/output/filter/rules6-save index e242aa3..fca9ec3 100644 --- a/test/output/filter/rules6-save +++ b/test/output/filter/rules6-save @@ -6,11 +6,17 @@ :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] :logdrop-3 - [0:0] +:logdrop-4 - [0:0] +:logdrop-5 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-2 - [0:0] :logreject-0 - [0:0] :logtarpit-0 - [0:0] :tarpit - [0:0] @@ -30,11 +36,17 @@ -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-1 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-1 --A FORWARD -j logdrop-3 +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-5 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -61,6 +73,7 @@ -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -79,11 +92,17 @@ -A INPUT -j logaccept-0 -A INPUT -j logdrop-2 -A INPUT -j logpass-0 +-A INPUT -j logaccept-1 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-1 --A INPUT -j logdrop-3 +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-5 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -104,11 +123,17 @@ -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-1 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-1 --A OUTPUT -j logdrop-3 +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-5 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -118,15 +143,28 @@ -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -j LOG +-A logaccept-1 -j TEE --gateway fc00::1 -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway fc00::2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP +-A logdrop-3 -j LOG +-A logdrop-3 -j TEE --gateway fc00::1 -A logdrop-3 -j DROP +-A logdrop-4 -j TEE --gateway fc00::2 +-A logdrop-4 -j DROP +-A logdrop-5 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -j LOG +-A logpass-1 -j TEE --gateway fc00::1 +-A logpass-2 -j TEE --gateway fc00::2 -A logreject-0 -m limit --limit 1/second -j LOG -A logreject-0 -j REJECT -A logtarpit-0 -m limit --limit 1/second -j LOG diff --git a/test/output/no-track/dump b/test/output/no-track/dump index e5ef47f..042a882 100644 --- a/test/output/no-track/dump +++ b/test/output/no-track/dump @@ -103,7 +103,87 @@ Filter 9 {"action":"pass","log":true} inet6/filter/OUTPUT -j logpass-0 inet6/filter/logpass-0 -m limit --limit 1/second -j LOG -Filter 10 {"log":"none"} +Filter 10 {"log":"dual"} +(log) + inet/filter/FORWARD -j logaccept-1 + inet/filter/INPUT -j logaccept-1 + inet/filter/OUTPUT -j logaccept-1 + inet/filter/logaccept-1 -j LOG + inet/filter/logaccept-1 -j ACCEPT + inet6/filter/FORWARD -j logaccept-1 + inet6/filter/INPUT -j logaccept-1 + inet6/filter/OUTPUT -j logaccept-1 + inet6/filter/logaccept-1 -j LOG + inet6/filter/logaccept-1 -j TEE --gateway fc00::1 + inet6/filter/logaccept-1 -j ACCEPT + +Filter 11 {"action":"drop","log":"dual"} +(log) + inet/filter/FORWARD -j logdrop-2 + inet/filter/INPUT -j logdrop-2 + inet/filter/OUTPUT -j logdrop-2 + inet/filter/logdrop-2 -j LOG + inet/filter/logdrop-2 -j DROP + inet6/filter/FORWARD -j logdrop-2 + inet6/filter/INPUT -j logdrop-2 + inet6/filter/OUTPUT -j logdrop-2 + inet6/filter/logdrop-2 -j LOG + inet6/filter/logdrop-2 -j TEE --gateway fc00::1 + inet6/filter/logdrop-2 -j DROP + +Filter 12 {"action":"pass","log":"dual"} +(log) + inet/filter/FORWARD -j logpass-1 + inet/filter/INPUT -j logpass-1 + inet/filter/OUTPUT -j logpass-1 + inet/filter/logpass-1 -j LOG + inet6/filter/FORWARD -j logpass-1 + inet6/filter/INPUT -j logpass-1 + inet6/filter/OUTPUT -j logpass-1 + inet6/filter/logpass-1 -j LOG + inet6/filter/logpass-1 -j TEE --gateway fc00::1 + +Filter 13 {"log":"mirror"} +(log) + inet/filter/FORWARD -j logaccept-2 + inet/filter/INPUT -j logaccept-2 + inet/filter/OUTPUT -j logaccept-2 + inet/filter/logaccept-2 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-2 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-2 -j ACCEPT + inet6/filter/FORWARD -j logaccept-2 + inet6/filter/INPUT -j logaccept-2 + inet6/filter/OUTPUT -j logaccept-2 + inet6/filter/logaccept-2 -j TEE --gateway fc00::2 + inet6/filter/logaccept-2 -j ACCEPT + +Filter 14 {"action":"drop","log":"mirror"} +(log) + inet/filter/FORWARD -j logdrop-3 + inet/filter/INPUT -j logdrop-3 + inet/filter/OUTPUT -j logdrop-3 + inet/filter/logdrop-3 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-3 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-3 -j DROP + inet6/filter/FORWARD -j logdrop-3 + inet6/filter/INPUT -j logdrop-3 + inet6/filter/OUTPUT -j logdrop-3 + inet6/filter/logdrop-3 -j TEE --gateway fc00::2 + inet6/filter/logdrop-3 -j DROP + +Filter 15 {"action":"pass","log":"mirror"} +(log) + inet/filter/FORWARD -j logpass-2 + inet/filter/INPUT -j logpass-2 + inet/filter/OUTPUT -j logpass-2 + inet/filter/logpass-2 -j TEE --gateway 10.0.0.1 + inet/filter/logpass-2 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j logpass-2 + inet6/filter/INPUT -j logpass-2 + inet6/filter/OUTPUT -j logpass-2 + inet6/filter/logpass-2 -j TEE --gateway fc00::2 + +Filter 16 {"log":"none"} (log) inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -112,7 +192,7 @@ Filter 10 {"log":"none"} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 11 {"action":"drop","log":"none"} +Filter 17 {"action":"drop","log":"none"} (log) inet/filter/FORWARD -j DROP inet/filter/INPUT -j DROP @@ -121,7 +201,7 @@ Filter 11 {"action":"drop","log":"none"} inet6/filter/INPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 12 {"action":"pass","log":"none"} +Filter 18 {"action":"pass","log":"none"} (log) inet/filter/FORWARD inet/filter/INPUT @@ -130,42 +210,42 @@ Filter 12 {"action":"pass","log":"none"} inet6/filter/INPUT inet6/filter/OUTPUT -Filter 13 {"log":"ulog"} +Filter 19 {"log":"ulog"} (log) - inet/filter/FORWARD -j logaccept-1 - inet/filter/INPUT -j logaccept-1 - inet/filter/OUTPUT -j logaccept-1 - inet/filter/logaccept-1 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-1 -j ACCEPT - inet6/filter/FORWARD -j logaccept-1 - inet6/filter/INPUT -j logaccept-1 - inet6/filter/OUTPUT -j logaccept-1 - inet6/filter/logaccept-1 -j ACCEPT - -Filter 14 {"action":"drop","log":"ulog"} + inet/filter/FORWARD -j logaccept-3 + inet/filter/INPUT -j logaccept-3 + inet/filter/OUTPUT -j logaccept-3 + inet/filter/logaccept-3 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-3 -j ACCEPT + inet6/filter/FORWARD -j logaccept-3 + inet6/filter/INPUT -j logaccept-3 + inet6/filter/OUTPUT -j logaccept-3 + inet6/filter/logaccept-3 -j ACCEPT + +Filter 20 {"action":"drop","log":"ulog"} (log) - inet/filter/FORWARD -j logdrop-2 - inet/filter/INPUT -j logdrop-2 - inet/filter/OUTPUT -j logdrop-2 - inet/filter/logdrop-2 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2 -j DROP - inet6/filter/FORWARD -j logdrop-2 - inet6/filter/INPUT -j logdrop-2 - inet6/filter/OUTPUT -j logdrop-2 - inet6/filter/logdrop-2 -j DROP - -Filter 15 {"action":"pass","log":"ulog"} + inet/filter/FORWARD -j logdrop-4 + inet/filter/INPUT -j logdrop-4 + inet/filter/OUTPUT -j logdrop-4 + inet/filter/logdrop-4 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-4 -j DROP + inet6/filter/FORWARD -j logdrop-4 + inet6/filter/INPUT -j logdrop-4 + inet6/filter/OUTPUT -j logdrop-4 + inet6/filter/logdrop-4 -j DROP + +Filter 21 {"action":"pass","log":"ulog"} (log) - inet/filter/FORWARD -j logpass-1 - inet/filter/INPUT -j logpass-1 - inet/filter/OUTPUT -j logpass-1 - inet/filter/logpass-1 -m limit --limit 12/minute -j ULOG + inet/filter/FORWARD -j logpass-3 + inet/filter/INPUT -j logpass-3 + inet/filter/OUTPUT -j logpass-3 + inet/filter/logpass-3 -m limit --limit 12/minute -j ULOG -Filter 16 {"action":"pass","in":"_fw","log":"ulog"} +Filter 22 {"action":"pass","in":"_fw","log":"ulog"} (log) inet/filter/OUTPUT -m limit --limit 12/minute -j ULOG -Filter 17 {"in":"_fw","no-track":true,"service":"http"} +Filter 23 {"in":"_fw","no-track":true,"service":"http"} (no-track) inet/filter/INPUT -p tcp --sport 80 -j ACCEPT inet/filter/OUTPUT -p tcp --dport 80 -j ACCEPT @@ -176,7 +256,7 @@ Filter 17 {"in":"_fw","no-track":true,"service":"http"} inet6/raw/OUTPUT -p tcp --dport 80 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack -Filter 18 {"dest":"172.17.0.0\/16","no-track":true,"service":"radius","src":"172.16.0.0\/16"} +Filter 24 {"dest":"172.17.0.0\/16","no-track":true,"service":"radius","src":"172.16.0.0\/16"} (no-track) inet/filter/FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT inet/filter/FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT @@ -199,7 +279,7 @@ Filter 18 {"dest":"172.17.0.0\/16","no-track":true,"service":" inet/raw/PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack inet/raw/PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack -Filter 19 {"dest":"172.18.0.0\/16","no-track":true,"service":"ssh"} +Filter 25 {"dest":"172.18.0.0\/16","no-track":true,"service":"ssh"} (no-track) inet/filter/FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT inet/filter/FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT @@ -212,7 +292,7 @@ Filter 19 {"dest":"172.18.0.0\/16","no-track":true,"service":" inet/raw/PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack inet/raw/PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack -Filter 20 {"no-track":true,"out":"_fw","service":"ipsec"} +Filter 26 {"no-track":true,"out":"_fw","service":"ipsec"} (no-track) inet/filter/INPUT -p esp -j ACCEPT inet/filter/INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT @@ -231,7 +311,7 @@ Filter 20 {"no-track":true,"out":"_fw","service":"ipsec"} inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack -Filter 21 {"in":["_fw","A"]} +Filter 27 {"in":["_fw","A"]} (zone) inet/filter/FORWARD -i eth0 -j ACCEPT inet/filter/INPUT -i eth0 -j ACCEPT @@ -240,12 +320,12 @@ Filter 21 {"in":["_fw","A"]} inet6/filter/INPUT -i eth0 -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 22 {"in":"B","out":"C"} +Filter 28 {"in":"B","out":"C"} (zone) inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -Filter 23 {"out":["_fw","B"]} +Filter 29 {"out":["_fw","B"]} (zone) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -254,7 +334,7 @@ Filter 23 {"out":["_fw","B"]} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -Filter 24 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +Filter 30 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} (zone) inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT @@ -343,6 +423,12 @@ Limit D {"inet":22,"inet6":58} Log _default {"limit":1} (defaults) +Log dual {"mirror":"fc00::1","mode":"log"} +(log) + +Log mirror {"mirror":["10.0.0.1","10.0.0.2","fc00::2"]} +(log) + Log none {"mode":"none"} (log) @@ -393,7 +479,13 @@ Packet-log 1 {"out":"_fw"} inet/filter/INPUT -m limit --limit 1/second -j LOG inet6/filter/INPUT -m limit --limit 1/second -j LOG -Packet-log 2 {"log":"ulog","out":"_fw"} +Packet-log 2 {"log":"mirror","out":"_fw"} +(log) + inet/filter/INPUT -j TEE --gateway 10.0.0.1 + inet/filter/INPUT -j TEE --gateway 10.0.0.2 + inet6/filter/INPUT -j TEE --gateway fc00::2 + +Packet-log 3 {"log":"ulog","out":"_fw"} (log) inet/filter/INPUT -m limit --limit 12/minute -j ULOG @@ -614,11 +706,17 @@ hash:net family inet :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] +:logpass-2 - [0:0] +:logpass-3 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -629,12 +727,18 @@ hash:net family inet -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD -A FORWARD -j logaccept-1 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-3 -A FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT -A FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT -A FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT @@ -692,6 +796,8 @@ hash:net family inet -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -704,12 +810,18 @@ hash:net family inet -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT -A INPUT -j logaccept-1 -A INPUT -j logdrop-2 -A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-3 -A INPUT -p tcp --sport 80 -j ACCEPT -A INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT -A INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT @@ -733,12 +845,18 @@ hash:net family inet -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT -A OUTPUT -j logaccept-1 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -p tcp --dport 80 -j ACCEPT -A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT @@ -757,16 +875,29 @@ hash:net family inet -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 12/minute -j ULOG +-A logaccept-1 -j LOG -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway 10.0.0.1 +-A logaccept-2 -j TEE --gateway 10.0.0.2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -m limit --limit 12/minute -j ULOG +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP --A logdrop-2 -m limit --limit 12/minute -j ULOG +-A logdrop-2 -j LOG -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway 10.0.0.1 +-A logdrop-3 -j TEE --gateway 10.0.0.2 +-A logdrop-3 -j DROP +-A logdrop-4 -m limit --limit 12/minute -j ULOG +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 12/minute -j ULOG +-A logpass-1 -j LOG +-A logpass-2 -j TEE --gateway 10.0.0.1 +-A logpass-2 -j TEE --gateway 10.0.0.2 +-A logpass-3 -m limit --limit 12/minute -j ULOG COMMIT *mangle :FORWARD ACCEPT [0:0] @@ -830,10 +961,16 @@ COMMIT :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-2 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -844,11 +981,17 @@ COMMIT -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-1 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-1 --A FORWARD -j logdrop-2 +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -875,6 +1018,7 @@ COMMIT -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -887,11 +1031,17 @@ COMMIT -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 +-A INPUT -j logaccept-1 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-1 --A INPUT -j logdrop-2 +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 -A INPUT -p tcp --sport 80 -j ACCEPT -A INPUT -p esp -j ACCEPT -A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT @@ -909,11 +1059,17 @@ COMMIT -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-1 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-1 --A OUTPUT -j logdrop-2 +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 -A OUTPUT -p tcp --dport 80 -j ACCEPT -A OUTPUT -p esp -j ACCEPT -A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT @@ -926,13 +1082,26 @@ COMMIT -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -j LOG +-A logaccept-1 -j TEE --gateway fc00::1 -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway fc00::2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP +-A logdrop-2 -j LOG +-A logdrop-2 -j TEE --gateway fc00::1 -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway fc00::2 +-A logdrop-3 -j DROP +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -j LOG +-A logpass-1 -j TEE --gateway fc00::1 +-A logpass-2 -j TEE --gateway fc00::2 COMMIT *mangle :INPUT ACCEPT [0:0] diff --git a/test/output/no-track/rules-save b/test/output/no-track/rules-save index 5955fb8..9274a53 100644 --- a/test/output/no-track/rules-save +++ b/test/output/no-track/rules-save @@ -6,11 +6,17 @@ :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] +:logpass-2 - [0:0] +:logpass-3 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -21,12 +27,18 @@ -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD -A FORWARD -j logaccept-1 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-3 -A FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT -A FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT -A FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT @@ -84,6 +96,8 @@ -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -96,12 +110,18 @@ -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT -A INPUT -j logaccept-1 -A INPUT -j logdrop-2 -A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-3 -A INPUT -p tcp --sport 80 -j ACCEPT -A INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT -A INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT @@ -125,12 +145,18 @@ -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT -A OUTPUT -j logaccept-1 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -p tcp --dport 80 -j ACCEPT -A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT @@ -149,16 +175,29 @@ -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 12/minute -j ULOG +-A logaccept-1 -j LOG -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway 10.0.0.1 +-A logaccept-2 -j TEE --gateway 10.0.0.2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -m limit --limit 12/minute -j ULOG +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP --A logdrop-2 -m limit --limit 12/minute -j ULOG +-A logdrop-2 -j LOG -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway 10.0.0.1 +-A logdrop-3 -j TEE --gateway 10.0.0.2 +-A logdrop-3 -j DROP +-A logdrop-4 -m limit --limit 12/minute -j ULOG +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 12/minute -j ULOG +-A logpass-1 -j LOG +-A logpass-2 -j TEE --gateway 10.0.0.1 +-A logpass-2 -j TEE --gateway 10.0.0.2 +-A logpass-3 -m limit --limit 12/minute -j ULOG COMMIT *mangle :FORWARD ACCEPT [0:0] diff --git a/test/output/no-track/rules6-save b/test/output/no-track/rules6-save index 93662c5..e59b5f8 100644 --- a/test/output/no-track/rules6-save +++ b/test/output/no-track/rules6-save @@ -6,10 +6,16 @@ :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-2 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -20,11 +26,17 @@ -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-1 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-1 --A FORWARD -j logdrop-2 +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -51,6 +63,7 @@ -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -63,11 +76,17 @@ -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 +-A INPUT -j logaccept-1 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-1 --A INPUT -j logdrop-2 +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 -A INPUT -p tcp --sport 80 -j ACCEPT -A INPUT -p esp -j ACCEPT -A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT @@ -85,11 +104,17 @@ -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-1 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-1 --A OUTPUT -j logdrop-2 +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 -A OUTPUT -p tcp --dport 80 -j ACCEPT -A OUTPUT -p esp -j ACCEPT -A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT @@ -102,13 +127,26 @@ -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -j LOG +-A logaccept-1 -j TEE --gateway fc00::1 -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway fc00::2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP +-A logdrop-2 -j LOG +-A logdrop-2 -j TEE --gateway fc00::1 -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway fc00::2 +-A logdrop-3 -j DROP +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -j LOG +-A logpass-1 -j TEE --gateway fc00::1 +-A logpass-2 -j TEE --gateway fc00::2 COMMIT *mangle :INPUT ACCEPT [0:0] diff --git a/test/output/route-track/dump b/test/output/route-track/dump index 350eaa0..647ad25 100644 --- a/test/output/route-track/dump +++ b/test/output/route-track/dump @@ -103,7 +103,87 @@ Filter 9 {"action":"pass","log":true} inet6/filter/OUTPUT -j logpass-0 inet6/filter/logpass-0 -m limit --limit 1/second -j LOG -Filter 10 {"log":"none"} +Filter 10 {"log":"dual"} +(log) + inet/filter/FORWARD -j logaccept-1 + inet/filter/INPUT -j logaccept-1 + inet/filter/OUTPUT -j logaccept-1 + inet/filter/logaccept-1 -j LOG + inet/filter/logaccept-1 -j ACCEPT + inet6/filter/FORWARD -j logaccept-1 + inet6/filter/INPUT -j logaccept-1 + inet6/filter/OUTPUT -j logaccept-1 + inet6/filter/logaccept-1 -j LOG + inet6/filter/logaccept-1 -j TEE --gateway fc00::1 + inet6/filter/logaccept-1 -j ACCEPT + +Filter 11 {"action":"drop","log":"dual"} +(log) + inet/filter/FORWARD -j logdrop-2 + inet/filter/INPUT -j logdrop-2 + inet/filter/OUTPUT -j logdrop-2 + inet/filter/logdrop-2 -j LOG + inet/filter/logdrop-2 -j DROP + inet6/filter/FORWARD -j logdrop-2 + inet6/filter/INPUT -j logdrop-2 + inet6/filter/OUTPUT -j logdrop-2 + inet6/filter/logdrop-2 -j LOG + inet6/filter/logdrop-2 -j TEE --gateway fc00::1 + inet6/filter/logdrop-2 -j DROP + +Filter 12 {"action":"pass","log":"dual"} +(log) + inet/filter/FORWARD -j logpass-1 + inet/filter/INPUT -j logpass-1 + inet/filter/OUTPUT -j logpass-1 + inet/filter/logpass-1 -j LOG + inet6/filter/FORWARD -j logpass-1 + inet6/filter/INPUT -j logpass-1 + inet6/filter/OUTPUT -j logpass-1 + inet6/filter/logpass-1 -j LOG + inet6/filter/logpass-1 -j TEE --gateway fc00::1 + +Filter 13 {"log":"mirror"} +(log) + inet/filter/FORWARD -j logaccept-2 + inet/filter/INPUT -j logaccept-2 + inet/filter/OUTPUT -j logaccept-2 + inet/filter/logaccept-2 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-2 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-2 -j ACCEPT + inet6/filter/FORWARD -j logaccept-2 + inet6/filter/INPUT -j logaccept-2 + inet6/filter/OUTPUT -j logaccept-2 + inet6/filter/logaccept-2 -j TEE --gateway fc00::2 + inet6/filter/logaccept-2 -j ACCEPT + +Filter 14 {"action":"drop","log":"mirror"} +(log) + inet/filter/FORWARD -j logdrop-3 + inet/filter/INPUT -j logdrop-3 + inet/filter/OUTPUT -j logdrop-3 + inet/filter/logdrop-3 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-3 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-3 -j DROP + inet6/filter/FORWARD -j logdrop-3 + inet6/filter/INPUT -j logdrop-3 + inet6/filter/OUTPUT -j logdrop-3 + inet6/filter/logdrop-3 -j TEE --gateway fc00::2 + inet6/filter/logdrop-3 -j DROP + +Filter 15 {"action":"pass","log":"mirror"} +(log) + inet/filter/FORWARD -j logpass-2 + inet/filter/INPUT -j logpass-2 + inet/filter/OUTPUT -j logpass-2 + inet/filter/logpass-2 -j TEE --gateway 10.0.0.1 + inet/filter/logpass-2 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j logpass-2 + inet6/filter/INPUT -j logpass-2 + inet6/filter/OUTPUT -j logpass-2 + inet6/filter/logpass-2 -j TEE --gateway fc00::2 + +Filter 16 {"log":"none"} (log) inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -112,7 +192,7 @@ Filter 10 {"log":"none"} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 11 {"action":"drop","log":"none"} +Filter 17 {"action":"drop","log":"none"} (log) inet/filter/FORWARD -j DROP inet/filter/INPUT -j DROP @@ -121,7 +201,7 @@ Filter 11 {"action":"drop","log":"none"} inet6/filter/INPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 12 {"action":"pass","log":"none"} +Filter 18 {"action":"pass","log":"none"} (log) inet/filter/FORWARD inet/filter/INPUT @@ -130,42 +210,42 @@ Filter 12 {"action":"pass","log":"none"} inet6/filter/INPUT inet6/filter/OUTPUT -Filter 13 {"log":"ulog"} +Filter 19 {"log":"ulog"} (log) - inet/filter/FORWARD -j logaccept-1 - inet/filter/INPUT -j logaccept-1 - inet/filter/OUTPUT -j logaccept-1 - inet/filter/logaccept-1 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-1 -j ACCEPT - inet6/filter/FORWARD -j logaccept-1 - inet6/filter/INPUT -j logaccept-1 - inet6/filter/OUTPUT -j logaccept-1 - inet6/filter/logaccept-1 -j ACCEPT - -Filter 14 {"action":"drop","log":"ulog"} + inet/filter/FORWARD -j logaccept-3 + inet/filter/INPUT -j logaccept-3 + inet/filter/OUTPUT -j logaccept-3 + inet/filter/logaccept-3 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-3 -j ACCEPT + inet6/filter/FORWARD -j logaccept-3 + inet6/filter/INPUT -j logaccept-3 + inet6/filter/OUTPUT -j logaccept-3 + inet6/filter/logaccept-3 -j ACCEPT + +Filter 20 {"action":"drop","log":"ulog"} (log) - inet/filter/FORWARD -j logdrop-2 - inet/filter/INPUT -j logdrop-2 - inet/filter/OUTPUT -j logdrop-2 - inet/filter/logdrop-2 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2 -j DROP - inet6/filter/FORWARD -j logdrop-2 - inet6/filter/INPUT -j logdrop-2 - inet6/filter/OUTPUT -j logdrop-2 - inet6/filter/logdrop-2 -j DROP - -Filter 15 {"action":"pass","log":"ulog"} + inet/filter/FORWARD -j logdrop-4 + inet/filter/INPUT -j logdrop-4 + inet/filter/OUTPUT -j logdrop-4 + inet/filter/logdrop-4 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-4 -j DROP + inet6/filter/FORWARD -j logdrop-4 + inet6/filter/INPUT -j logdrop-4 + inet6/filter/OUTPUT -j logdrop-4 + inet6/filter/logdrop-4 -j DROP + +Filter 21 {"action":"pass","log":"ulog"} (log) - inet/filter/FORWARD -j logpass-1 - inet/filter/INPUT -j logpass-1 - inet/filter/OUTPUT -j logpass-1 - inet/filter/logpass-1 -m limit --limit 12/minute -j ULOG + inet/filter/FORWARD -j logpass-3 + inet/filter/INPUT -j logpass-3 + inet/filter/OUTPUT -j logpass-3 + inet/filter/logpass-3 -m limit --limit 12/minute -j ULOG -Filter 16 {"action":"pass","in":"_fw","log":"ulog"} +Filter 22 {"action":"pass","in":"_fw","log":"ulog"} (log) inet/filter/OUTPUT -m limit --limit 12/minute -j ULOG -Filter 17 {"in":["_fw","A"]} +Filter 23 {"in":["_fw","A"]} (zone) inet/filter/FORWARD -i eth0 -j ACCEPT inet/filter/INPUT -i eth0 -j ACCEPT @@ -174,12 +254,12 @@ Filter 17 {"in":["_fw","A"]} inet6/filter/INPUT -i eth0 -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 18 {"in":"B","out":"C"} +Filter 24 {"in":"B","out":"C"} (zone) inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -Filter 19 {"out":["_fw","B"]} +Filter 25 {"out":["_fw","B"]} (zone) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -188,7 +268,7 @@ Filter 19 {"out":["_fw","B"]} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -Filter 20 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +Filter 26 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} (zone) inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT @@ -277,6 +357,12 @@ Limit D {"inet":22,"inet6":58} Log _default {"limit":1} (defaults) +Log dual {"mirror":"fc00::1","mode":"log"} +(log) + +Log mirror {"mirror":["10.0.0.1","10.0.0.2","fc00::2"]} +(log) + Log none {"mode":"none"} (log) @@ -327,7 +413,13 @@ Packet-log 1 {"out":"_fw"} inet/filter/INPUT -m limit --limit 1/second -j LOG inet6/filter/INPUT -m limit --limit 1/second -j LOG -Packet-log 2 {"log":"ulog","out":"_fw"} +Packet-log 2 {"log":"mirror","out":"_fw"} +(log) + inet/filter/INPUT -j TEE --gateway 10.0.0.1 + inet/filter/INPUT -j TEE --gateway 10.0.0.2 + inet6/filter/INPUT -j TEE --gateway fc00::2 + +Packet-log 3 {"log":"ulog","out":"_fw"} (log) inet/filter/INPUT -m limit --limit 12/minute -j ULOG @@ -560,11 +652,17 @@ hash:net family inet :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] +:logpass-2 - [0:0] +:logpass-3 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -575,12 +673,18 @@ hash:net family inet -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD -A FORWARD -j logaccept-1 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-3 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -632,6 +736,8 @@ hash:net family inet -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -644,12 +750,18 @@ hash:net family inet -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT -A INPUT -j logaccept-1 -A INPUT -j logdrop-2 -A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-3 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing @@ -664,12 +776,18 @@ hash:net family inet -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT -A OUTPUT -j logaccept-1 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT @@ -679,16 +797,29 @@ hash:net family inet -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 12/minute -j ULOG +-A logaccept-1 -j LOG -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway 10.0.0.1 +-A logaccept-2 -j TEE --gateway 10.0.0.2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -m limit --limit 12/minute -j ULOG +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP --A logdrop-2 -m limit --limit 12/minute -j ULOG +-A logdrop-2 -j LOG -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway 10.0.0.1 +-A logdrop-3 -j TEE --gateway 10.0.0.2 +-A logdrop-3 -j DROP +-A logdrop-4 -m limit --limit 12/minute -j ULOG +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 12/minute -j ULOG +-A logpass-1 -j LOG +-A logpass-2 -j TEE --gateway 10.0.0.1 +-A logpass-2 -j TEE --gateway 10.0.0.2 +-A logpass-3 -m limit --limit 12/minute -j ULOG COMMIT *mangle :FORWARD ACCEPT [0:0] @@ -740,10 +871,16 @@ COMMIT :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-2 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -754,11 +891,17 @@ COMMIT -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-1 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-1 --A FORWARD -j logdrop-2 +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -785,6 +928,7 @@ COMMIT -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -797,11 +941,17 @@ COMMIT -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 +-A INPUT -j logaccept-1 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-1 --A INPUT -j logdrop-2 +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -816,11 +966,17 @@ COMMIT -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-1 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-1 --A OUTPUT -j logdrop-2 +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -830,13 +986,26 @@ COMMIT -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -j LOG +-A logaccept-1 -j TEE --gateway fc00::1 -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway fc00::2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP +-A logdrop-2 -j LOG +-A logdrop-2 -j TEE --gateway fc00::1 -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway fc00::2 +-A logdrop-3 -j DROP +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -j LOG +-A logpass-1 -j TEE --gateway fc00::1 +-A logpass-2 -j TEE --gateway fc00::2 COMMIT *mangle :INPUT ACCEPT [0:0] diff --git a/test/output/route-track/rules-save b/test/output/route-track/rules-save index 1036147..c03183d 100644 --- a/test/output/route-track/rules-save +++ b/test/output/route-track/rules-save @@ -6,11 +6,17 @@ :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] +:logpass-2 - [0:0] +:logpass-3 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -21,12 +27,18 @@ -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD -A FORWARD -j logaccept-1 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-3 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -78,6 +90,8 @@ -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -90,12 +104,18 @@ -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT -A INPUT -j logaccept-1 -A INPUT -j logdrop-2 -A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-3 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing @@ -110,12 +130,18 @@ -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT -A OUTPUT -j logaccept-1 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT @@ -125,16 +151,29 @@ -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 12/minute -j ULOG +-A logaccept-1 -j LOG -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway 10.0.0.1 +-A logaccept-2 -j TEE --gateway 10.0.0.2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -m limit --limit 12/minute -j ULOG +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP --A logdrop-2 -m limit --limit 12/minute -j ULOG +-A logdrop-2 -j LOG -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway 10.0.0.1 +-A logdrop-3 -j TEE --gateway 10.0.0.2 +-A logdrop-3 -j DROP +-A logdrop-4 -m limit --limit 12/minute -j ULOG +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 12/minute -j ULOG +-A logpass-1 -j LOG +-A logpass-2 -j TEE --gateway 10.0.0.1 +-A logpass-2 -j TEE --gateway 10.0.0.2 +-A logpass-3 -m limit --limit 12/minute -j ULOG COMMIT *mangle :FORWARD ACCEPT [0:0] diff --git a/test/output/route-track/rules6-save b/test/output/route-track/rules6-save index e04f807..d3e9b88 100644 --- a/test/output/route-track/rules6-save +++ b/test/output/route-track/rules6-save @@ -6,10 +6,16 @@ :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-2 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -20,11 +26,17 @@ -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-1 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-1 --A FORWARD -j logdrop-2 +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -51,6 +63,7 @@ -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -63,11 +76,17 @@ -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 +-A INPUT -j logaccept-1 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-1 --A INPUT -j logdrop-2 +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -82,11 +101,17 @@ -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-1 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-1 --A OUTPUT -j logdrop-2 +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -96,13 +121,26 @@ -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -j LOG +-A logaccept-1 -j TEE --gateway fc00::1 -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway fc00::2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP +-A logdrop-2 -j LOG +-A logdrop-2 -j TEE --gateway fc00::1 -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway fc00::2 +-A logdrop-3 -j DROP +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -j LOG +-A logpass-1 -j TEE --gateway fc00::1 +-A logpass-2 -j TEE --gateway fc00::2 COMMIT *mangle :INPUT ACCEPT [0:0] diff --git a/test/output/tproxy/dump b/test/output/tproxy/dump index d255d60..4c79af7 100644 --- a/test/output/tproxy/dump +++ b/test/output/tproxy/dump @@ -103,7 +103,87 @@ Filter 9 {"action":"pass","log":true} inet6/filter/OUTPUT -j logpass-0 inet6/filter/logpass-0 -m limit --limit 1/second -j LOG -Filter 10 {"log":"none"} +Filter 10 {"log":"dual"} +(log) + inet/filter/FORWARD -j logaccept-1 + inet/filter/INPUT -j logaccept-1 + inet/filter/OUTPUT -j logaccept-1 + inet/filter/logaccept-1 -j LOG + inet/filter/logaccept-1 -j ACCEPT + inet6/filter/FORWARD -j logaccept-1 + inet6/filter/INPUT -j logaccept-1 + inet6/filter/OUTPUT -j logaccept-1 + inet6/filter/logaccept-1 -j LOG + inet6/filter/logaccept-1 -j TEE --gateway fc00::1 + inet6/filter/logaccept-1 -j ACCEPT + +Filter 11 {"action":"drop","log":"dual"} +(log) + inet/filter/FORWARD -j logdrop-2 + inet/filter/INPUT -j logdrop-2 + inet/filter/OUTPUT -j logdrop-2 + inet/filter/logdrop-2 -j LOG + inet/filter/logdrop-2 -j DROP + inet6/filter/FORWARD -j logdrop-2 + inet6/filter/INPUT -j logdrop-2 + inet6/filter/OUTPUT -j logdrop-2 + inet6/filter/logdrop-2 -j LOG + inet6/filter/logdrop-2 -j TEE --gateway fc00::1 + inet6/filter/logdrop-2 -j DROP + +Filter 12 {"action":"pass","log":"dual"} +(log) + inet/filter/FORWARD -j logpass-1 + inet/filter/INPUT -j logpass-1 + inet/filter/OUTPUT -j logpass-1 + inet/filter/logpass-1 -j LOG + inet6/filter/FORWARD -j logpass-1 + inet6/filter/INPUT -j logpass-1 + inet6/filter/OUTPUT -j logpass-1 + inet6/filter/logpass-1 -j LOG + inet6/filter/logpass-1 -j TEE --gateway fc00::1 + +Filter 13 {"log":"mirror"} +(log) + inet/filter/FORWARD -j logaccept-2 + inet/filter/INPUT -j logaccept-2 + inet/filter/OUTPUT -j logaccept-2 + inet/filter/logaccept-2 -j TEE --gateway 10.0.0.1 + inet/filter/logaccept-2 -j TEE --gateway 10.0.0.2 + inet/filter/logaccept-2 -j ACCEPT + inet6/filter/FORWARD -j logaccept-2 + inet6/filter/INPUT -j logaccept-2 + inet6/filter/OUTPUT -j logaccept-2 + inet6/filter/logaccept-2 -j TEE --gateway fc00::2 + inet6/filter/logaccept-2 -j ACCEPT + +Filter 14 {"action":"drop","log":"mirror"} +(log) + inet/filter/FORWARD -j logdrop-3 + inet/filter/INPUT -j logdrop-3 + inet/filter/OUTPUT -j logdrop-3 + inet/filter/logdrop-3 -j TEE --gateway 10.0.0.1 + inet/filter/logdrop-3 -j TEE --gateway 10.0.0.2 + inet/filter/logdrop-3 -j DROP + inet6/filter/FORWARD -j logdrop-3 + inet6/filter/INPUT -j logdrop-3 + inet6/filter/OUTPUT -j logdrop-3 + inet6/filter/logdrop-3 -j TEE --gateway fc00::2 + inet6/filter/logdrop-3 -j DROP + +Filter 15 {"action":"pass","log":"mirror"} +(log) + inet/filter/FORWARD -j logpass-2 + inet/filter/INPUT -j logpass-2 + inet/filter/OUTPUT -j logpass-2 + inet/filter/logpass-2 -j TEE --gateway 10.0.0.1 + inet/filter/logpass-2 -j TEE --gateway 10.0.0.2 + inet6/filter/FORWARD -j logpass-2 + inet6/filter/INPUT -j logpass-2 + inet6/filter/OUTPUT -j logpass-2 + inet6/filter/logpass-2 -j TEE --gateway fc00::2 + +Filter 16 {"log":"none"} (log) inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -112,7 +192,7 @@ Filter 10 {"log":"none"} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 11 {"action":"drop","log":"none"} +Filter 17 {"action":"drop","log":"none"} (log) inet/filter/FORWARD -j DROP inet/filter/INPUT -j DROP @@ -121,7 +201,7 @@ Filter 11 {"action":"drop","log":"none"} inet6/filter/INPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 12 {"action":"pass","log":"none"} +Filter 18 {"action":"pass","log":"none"} (log) inet/filter/FORWARD inet/filter/INPUT @@ -130,42 +210,42 @@ Filter 12 {"action":"pass","log":"none"} inet6/filter/INPUT inet6/filter/OUTPUT -Filter 13 {"log":"ulog"} +Filter 19 {"log":"ulog"} (log) - inet/filter/FORWARD -j logaccept-1 - inet/filter/INPUT -j logaccept-1 - inet/filter/OUTPUT -j logaccept-1 - inet/filter/logaccept-1 -m limit --limit 12/minute -j ULOG - inet/filter/logaccept-1 -j ACCEPT - inet6/filter/FORWARD -j logaccept-1 - inet6/filter/INPUT -j logaccept-1 - inet6/filter/OUTPUT -j logaccept-1 - inet6/filter/logaccept-1 -j ACCEPT - -Filter 14 {"action":"drop","log":"ulog"} + inet/filter/FORWARD -j logaccept-3 + inet/filter/INPUT -j logaccept-3 + inet/filter/OUTPUT -j logaccept-3 + inet/filter/logaccept-3 -m limit --limit 12/minute -j ULOG + inet/filter/logaccept-3 -j ACCEPT + inet6/filter/FORWARD -j logaccept-3 + inet6/filter/INPUT -j logaccept-3 + inet6/filter/OUTPUT -j logaccept-3 + inet6/filter/logaccept-3 -j ACCEPT + +Filter 20 {"action":"drop","log":"ulog"} (log) - inet/filter/FORWARD -j logdrop-2 - inet/filter/INPUT -j logdrop-2 - inet/filter/OUTPUT -j logdrop-2 - inet/filter/logdrop-2 -m limit --limit 12/minute -j ULOG - inet/filter/logdrop-2 -j DROP - inet6/filter/FORWARD -j logdrop-2 - inet6/filter/INPUT -j logdrop-2 - inet6/filter/OUTPUT -j logdrop-2 - inet6/filter/logdrop-2 -j DROP - -Filter 15 {"action":"pass","log":"ulog"} + inet/filter/FORWARD -j logdrop-4 + inet/filter/INPUT -j logdrop-4 + inet/filter/OUTPUT -j logdrop-4 + inet/filter/logdrop-4 -m limit --limit 12/minute -j ULOG + inet/filter/logdrop-4 -j DROP + inet6/filter/FORWARD -j logdrop-4 + inet6/filter/INPUT -j logdrop-4 + inet6/filter/OUTPUT -j logdrop-4 + inet6/filter/logdrop-4 -j DROP + +Filter 21 {"action":"pass","log":"ulog"} (log) - inet/filter/FORWARD -j logpass-1 - inet/filter/INPUT -j logpass-1 - inet/filter/OUTPUT -j logpass-1 - inet/filter/logpass-1 -m limit --limit 12/minute -j ULOG + inet/filter/FORWARD -j logpass-3 + inet/filter/INPUT -j logpass-3 + inet/filter/OUTPUT -j logpass-3 + inet/filter/logpass-3 -m limit --limit 12/minute -j ULOG -Filter 16 {"action":"pass","in":"_fw","log":"ulog"} +Filter 22 {"action":"pass","in":"_fw","log":"ulog"} (log) inet/filter/OUTPUT -m limit --limit 12/minute -j ULOG -Filter 17 {"in":["_fw","A"]} +Filter 23 {"in":["_fw","A"]} (zone) inet/filter/FORWARD -i eth0 -j ACCEPT inet/filter/INPUT -i eth0 -j ACCEPT @@ -174,12 +254,12 @@ Filter 17 {"in":["_fw","A"]} inet6/filter/INPUT -i eth0 -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 18 {"in":"B","out":"C"} +Filter 24 {"in":"B","out":"C"} (zone) inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -Filter 19 {"out":["_fw","B"]} +Filter 25 {"out":["_fw","B"]} (zone) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -188,7 +268,7 @@ Filter 19 {"out":["_fw","B"]} inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -Filter 20 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +Filter 26 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} (zone) inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT @@ -277,6 +357,12 @@ Limit D {"inet":22,"inet6":58} Log _default {"limit":1} (defaults) +Log dual {"mirror":"fc00::1","mode":"log"} +(log) + +Log mirror {"mirror":["10.0.0.1","10.0.0.2","fc00::2"]} +(log) + Log none {"mode":"none"} (log) @@ -327,7 +413,13 @@ Packet-log 1 {"out":"_fw"} inet/filter/INPUT -m limit --limit 1/second -j LOG inet6/filter/INPUT -m limit --limit 1/second -j LOG -Packet-log 2 {"log":"ulog","out":"_fw"} +Packet-log 2 {"log":"mirror","out":"_fw"} +(log) + inet/filter/INPUT -j TEE --gateway 10.0.0.1 + inet/filter/INPUT -j TEE --gateway 10.0.0.2 + inet6/filter/INPUT -j TEE --gateway fc00::2 + +Packet-log 3 {"log":"ulog","out":"_fw"} (log) inet/filter/INPUT -m limit --limit 12/minute -j ULOG @@ -554,11 +646,17 @@ hash:net family inet :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] +:logpass-2 - [0:0] +:logpass-3 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -569,12 +667,18 @@ hash:net family inet -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD -A FORWARD -j logaccept-1 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-3 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -626,6 +730,8 @@ hash:net family inet -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -638,12 +744,18 @@ hash:net family inet -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT -A INPUT -j logaccept-1 -A INPUT -j logdrop-2 -A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-3 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing @@ -658,12 +770,18 @@ hash:net family inet -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT -A OUTPUT -j logaccept-1 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT @@ -673,16 +791,29 @@ hash:net family inet -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 12/minute -j ULOG +-A logaccept-1 -j LOG -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway 10.0.0.1 +-A logaccept-2 -j TEE --gateway 10.0.0.2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -m limit --limit 12/minute -j ULOG +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP --A logdrop-2 -m limit --limit 12/minute -j ULOG +-A logdrop-2 -j LOG -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway 10.0.0.1 +-A logdrop-3 -j TEE --gateway 10.0.0.2 +-A logdrop-3 -j DROP +-A logdrop-4 -m limit --limit 12/minute -j ULOG +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 12/minute -j ULOG +-A logpass-1 -j LOG +-A logpass-2 -j TEE --gateway 10.0.0.1 +-A logpass-2 -j TEE --gateway 10.0.0.2 +-A logpass-3 -m limit --limit 12/minute -j ULOG COMMIT *mangle :FORWARD ACCEPT [0:0] @@ -733,10 +864,16 @@ COMMIT :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-2 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -747,11 +884,17 @@ COMMIT -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-1 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-1 --A FORWARD -j logdrop-2 +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -778,6 +921,7 @@ COMMIT -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -790,11 +934,17 @@ COMMIT -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 +-A INPUT -j logaccept-1 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-1 --A INPUT -j logdrop-2 +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -809,11 +959,17 @@ COMMIT -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-1 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-1 --A OUTPUT -j logdrop-2 +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -823,13 +979,26 @@ COMMIT -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -j LOG +-A logaccept-1 -j TEE --gateway fc00::1 -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway fc00::2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP +-A logdrop-2 -j LOG +-A logdrop-2 -j TEE --gateway fc00::1 -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway fc00::2 +-A logdrop-3 -j DROP +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -j LOG +-A logpass-1 -j TEE --gateway fc00::1 +-A logpass-2 -j TEE --gateway fc00::2 COMMIT *mangle :INPUT ACCEPT [0:0] diff --git a/test/output/tproxy/rules-save b/test/output/tproxy/rules-save index b110446..29d9752 100644 --- a/test/output/tproxy/rules-save +++ b/test/output/tproxy/rules-save @@ -6,11 +6,17 @@ :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] +:logpass-2 - [0:0] +:logpass-3 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -21,12 +27,18 @@ -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 --A FORWARD -j ACCEPT --A FORWARD -j DROP --A FORWARD -A FORWARD -j logaccept-1 -A FORWARD -j logdrop-2 -A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 +-A FORWARD -j logpass-3 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -78,6 +90,8 @@ -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG +-A INPUT -j TEE --gateway 10.0.0.2 +-A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -90,12 +104,18 @@ -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 --A INPUT -j ACCEPT --A INPUT -j DROP --A INPUT -A INPUT -j logaccept-1 -A INPUT -j logdrop-2 -A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 +-A INPUT -j logpass-3 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing @@ -110,12 +130,18 @@ -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 --A OUTPUT -j ACCEPT --A OUTPUT -j DROP --A OUTPUT -A OUTPUT -j logaccept-1 -A OUTPUT -j logdrop-2 -A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 +-A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT @@ -125,16 +151,29 @@ -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 12/minute -j ULOG +-A logaccept-1 -j LOG -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway 10.0.0.1 +-A logaccept-2 -j TEE --gateway 10.0.0.2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -m limit --limit 12/minute -j ULOG +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP --A logdrop-2 -m limit --limit 12/minute -j ULOG +-A logdrop-2 -j LOG -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway 10.0.0.1 +-A logdrop-3 -j TEE --gateway 10.0.0.2 +-A logdrop-3 -j DROP +-A logdrop-4 -m limit --limit 12/minute -j ULOG +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 12/minute -j ULOG +-A logpass-1 -j LOG +-A logpass-2 -j TEE --gateway 10.0.0.1 +-A logpass-2 -j TEE --gateway 10.0.0.2 +-A logpass-3 -m limit --limit 12/minute -j ULOG COMMIT *mangle :FORWARD ACCEPT [0:0] diff --git a/test/output/tproxy/rules6-save b/test/output/tproxy/rules6-save index 3de674a..781a4c8 100644 --- a/test/output/tproxy/rules6-save +++ b/test/output/tproxy/rules6-save @@ -6,10 +6,16 @@ :icmp-routing - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] +:logaccept-2 - [0:0] +:logaccept-3 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-2 - [0:0] +:logdrop-3 - [0:0] +:logdrop-4 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-2 - [0:0] -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 @@ -20,11 +26,17 @@ -A FORWARD -j logaccept-0 -A FORWARD -j logdrop-1 -A FORWARD -j logpass-0 +-A FORWARD -j logaccept-1 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-1 +-A FORWARD -j logaccept-2 +-A FORWARD -j logdrop-3 +-A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-1 --A FORWARD -j logdrop-2 +-A FORWARD -j logaccept-3 +-A FORWARD -j logdrop-4 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -51,6 +63,7 @@ -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT @@ -63,11 +76,17 @@ -A INPUT -j logaccept-0 -A INPUT -j logdrop-1 -A INPUT -j logpass-0 +-A INPUT -j logaccept-1 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-1 +-A INPUT -j logaccept-2 +-A INPUT -j logdrop-3 +-A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-1 --A INPUT -j logdrop-2 +-A INPUT -j logaccept-3 +-A INPUT -j logdrop-4 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -82,11 +101,17 @@ -A OUTPUT -j logaccept-0 -A OUTPUT -j logdrop-1 -A OUTPUT -j logpass-0 +-A OUTPUT -j logaccept-1 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-1 +-A OUTPUT -j logaccept-2 +-A OUTPUT -j logdrop-3 +-A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-1 --A OUTPUT -j logdrop-2 +-A OUTPUT -j logaccept-3 +-A OUTPUT -j logdrop-4 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -96,13 +121,26 @@ -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -j LOG +-A logaccept-1 -j TEE --gateway fc00::1 -A logaccept-1 -j ACCEPT +-A logaccept-2 -j TEE --gateway fc00::2 +-A logaccept-2 -j ACCEPT +-A logaccept-3 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP +-A logdrop-2 -j LOG +-A logdrop-2 -j TEE --gateway fc00::1 -A logdrop-2 -j DROP +-A logdrop-3 -j TEE --gateway fc00::2 +-A logdrop-3 -j DROP +-A logdrop-4 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -j LOG +-A logpass-1 -j TEE --gateway fc00::1 +-A logpass-2 -j TEE --gateway fc00::2 COMMIT *mangle :INPUT ACCEPT [0:0] -- cgit v1.2.3